@burdenoff/microfe-movethewheels 2026.513.1 → 2026.514.1

package/src/generated/wspace-types.ts

@@ -222,7 +222,10 @@ export type AccessShareResult = {
 export type AcquireLockInput = {
   /** Auto-release lock when it expires (default: true) */
   autoRelease?: InputMaybe<Scalars['Boolean']['input']>;
-  /** Lock duration in seconds (default: 3600 = 1 hour) Max: 86400 (24 hours) */
+  /**
+   * Lock duration in seconds (default: 3600 = 1 hour)
+   * Max: 86400 (24 hours)
+   */
   durationSeconds?: InputMaybe<Scalars['Int']['input']>;
   /** File ID to lock */
   fileId: Scalars['ID']['input'];
@@ -239,7 +242,11 @@ export type AcquireLockResponse = {
   success: Scalars['Boolean']['output'];
 };
 
-/** A reusable action that can be executed on agents, triggered via webhooks, or orchestrated as workflows. Actions are first-class entities that can be independently managed, shared via store, and referenced by VibeDeck buttons. */
+/**
+ * A reusable action that can be executed on agents, triggered via webhooks,
+ * or orchestrated as workflows. Actions are first-class entities that can be
+ * independently managed, shared via store, and referenced by VibeDeck buttons.
+ */
 export type Action = {
   __typename?: 'Action';
   actionType: VibecontrolsActionType;
@@ -291,7 +298,11 @@ export type Action = {
 };
 
 
-/** A reusable action that can be executed on agents, triggered via webhooks, or orchestrated as workflows. Actions are first-class entities that can be independently managed, shared via store, and referenced by VibeDeck buttons. */
+/**
+ * A reusable action that can be executed on agents, triggered via webhooks,
+ * or orchestrated as workflows. Actions are first-class entities that can be
+ * independently managed, shared via store, and referenced by VibeDeck buttons.
+ */
 export type ActionRecentExecutionsArgs = {
   limit?: InputMaybe<Scalars['Int']['input']>;
 };
@@ -363,7 +374,10 @@ export type ActionDefinition = {
   viewerDefault: Scalars['Boolean']['output'];
 };
 
-/** A record of an action execution with full status tracking, output capture, and timing information. Provides a persistent audit trail of all executions. */
+/**
+ * A record of an action execution with full status tracking, output capture,
+ * and timing information. Provides a persistent audit trail of all executions.
+ */
 export type ActionExecution = {
   __typename?: 'ActionExecution';
   action: Action;
@@ -1130,7 +1144,11 @@ export type AgentPluginListResult = {
   installed: Array<AgentPlugin>;
 };
 
-/** Result of probing an agent's tunnel URL for health and identity. Used by the Add Agent wizard (pre-creation) and Agent Detail page to validate connectivity without the frontend calling the agent directly. */
+/**
+ * Result of probing an agent's tunnel URL for health and identity.
+ * Used by the Add Agent wizard (pre-creation) and Agent Detail page
+ * to validate connectivity without the frontend calling the agent directly.
+ */
 export type AgentProbeResult = {
   __typename?: 'AgentProbeResult';
   /** Agent software version from /health */
@@ -1329,7 +1347,10 @@ export enum AiPromptStatus {
   Draft = 'DRAFT'
 }
 
-/** An event from an AI coding tool running on an agent. Used to track task completions, tool usage, and other AI tool activities. */
+/**
+ * An event from an AI coding tool running on an agent.
+ * Used to track task completions, tool usage, and other AI tool activities.
+ */
 export type AiToolEvent = {
   __typename?: 'AiToolEvent';
   /** Associated agent */
@@ -3114,7 +3135,10 @@ export type BulkAssignTagsInput = {
   tagIds: Array<Scalars['ID']['input']>;
 };
 
-/** Input for assigning many tags to many entities in one round-trip. Server applies the cartesian product (tagIds × targets). */
+/**
+ * Input for assigning many tags to many entities in one round-trip.
+ * Server applies the cartesian product (tagIds × targets).
+ */
 export type BulkAssignTagsToEntitiesInput = {
   /** Operation context for scoping (workspaceId, userId, projectId, etc.) */
   context?: InputMaybe<ContextInput>;
@@ -4553,7 +4577,10 @@ export enum ConfigScope {
   Workspace = 'WORKSPACE'
 }
 
-/** Configuration key-value storage with scoping. Supports workspace, vibe, session, and agent-scoped configurations. */
+/**
+ * Configuration key-value storage with scoping.
+ * Supports workspace, vibe, session, and agent-scoped configurations.
+ */
 export type Configuration = {
   __typename?: 'Configuration';
   /** Opaque IDs for cross-service context (organizationId, userId, etc.) */
@@ -6330,7 +6357,10 @@ export type CreateFolderInput = {
   icon?: InputMaybe<Scalars['String']['input']>;
   name: Scalars['String']['input'];
   parentFolderId?: InputMaybe<Scalars['ID']['input']>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Backed by the canonical `Folder.tags` Json column. */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+   * records. Backed by the canonical `Folder.tags` Json column.
+   */
   tags?: InputMaybe<Scalars['JSON']['input']>;
   visibility?: InputMaybe<FileVisibility>;
 };
@@ -7481,7 +7511,11 @@ export type CreateSessionInput = {
   /** Operation context for scoping (workspaceId, userId, projectId, etc.) */
   context?: InputMaybe<ContextInput>;
   environmentVariables?: InputMaybe<Scalars['JSON']['input']>;
-  /** Provider-native session name (e.g. tmux session name). When set, the agent attaches to that existing daemon-side session instead of creating a new one. Agent errors if no such session exists. */
+  /**
+   * Provider-native session name (e.g. tmux session name). When set, the
+   * agent attaches to that existing daemon-side session instead of
+   * creating a new one. Agent errors if no such session exists.
+   */
   externalSessionName?: InputMaybe<Scalars['String']['input']>;
   metadata?: InputMaybe<Scalars['JSON']['input']>;
   name: Scalars['String']['input'];
@@ -7938,9 +7972,15 @@ export type CreateVibeInput = {
   name: Scalars['String']['input'];
   parentId?: InputMaybe<Scalars['ID']['input']>;
   path: Scalars['String']['input'];
-  /** Legacy tag input (string array). Use `tagsV2` for the canonical `[{key,value,...}]` shape (marqueue §251). Both fields are still written. */
+  /**
+   * Legacy tag input (string array). Use `tagsV2` for the canonical
+   * `[{key,value,...}]` shape (marqueue §251). Both fields are still written.
+   */
   tags?: InputMaybe<Array<Scalars['String']['input']>>;
-  /** Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}` records. When provided, takes precedence over legacy `tags`. */
+  /**
+   * Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}`
+   * records. When provided, takes precedence over legacy `tags`.
+   */
   tagsV2?: InputMaybe<Scalars['JSON']['input']>;
   type: VibeType;
 };
@@ -10270,7 +10310,11 @@ export type EntityList = {
   __typename?: 'EntityList';
   entities: Array<TaggedEntity>;
   hasMore: Scalars['Boolean']['output'];
-  /** Opaque cursor pointing to the entity immediately after the last item in `entities`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+  /**
+   * Opaque cursor pointing to the entity immediately after the last item in
+   * `entities`. Pass it back as `pagination.cursor` to fetch the next page.
+   * Null when `hasMore` is false.
+   */
   nextCursor?: Maybe<Scalars['String']['output']>;
   total: Scalars['Int']['output'];
 };
@@ -12874,7 +12918,11 @@ export type File = {
   starred: Scalars['Boolean']['output'];
   status: FileStatus;
   tagAssignments: Array<FileTagAssignment>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside `tagAssignments` (the wspace-tags-svc-backed structured view). */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+   * records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside
+   * `tagAssignments` (the wspace-tags-svc-backed structured view).
+   */
   tags: Scalars['JSON']['output'];
   updatedAt: Scalars['DateTime']['output'];
   uploadedById: Scalars['ID']['output'];
@@ -13586,7 +13634,11 @@ export type Folder = {
   subFolders?: Maybe<Array<Folder>>;
   subfoldersCount?: Maybe<Scalars['Int']['output']>;
   tagAssignments: Array<FolderTagAssignment>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside `tagAssignments` (the wspace-tags-svc-backed structured view). */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+   * records mirroring `wspace-workspace-svc` Project.tags shape. Lives alongside
+   * `tagAssignments` (the wspace-tags-svc-backed structured view).
+   */
   tags: Scalars['JSON']['output'];
   updatedAt: Scalars['DateTime']['output'];
   visibility: FileVisibility;
@@ -19554,11 +19606,20 @@ export type LockCheckResult = {
 };
 
 export enum LockType {
-  /** Optimistic locking - last-write-wins with version check Allows multiple users to work, validates on save */
+  /**
+   * Optimistic locking - last-write-wins with version check
+   * Allows multiple users to work, validates on save
+   */
   Optimistic = 'OPTIMISTIC',
-  /** Pessimistic locking - exclusive lock Only one user can edit at a time */
+  /**
+   * Pessimistic locking - exclusive lock
+   * Only one user can edit at a time
+   */
   Pessimistic = 'PESSIMISTIC',
-  /** Shared read lock - multiple readers allowed Prevents writes while reads are ongoing */
+  /**
+   * Shared read lock - multiple readers allowed
+   * Prevents writes while reads are ongoing
+   */
   Shared = 'SHARED'
 }
 
@@ -20096,7 +20157,10 @@ export type MessageFilter = {
   types?: InputMaybe<Array<MessageType>>;
 };
 
-/** Message permissions for the current user Calculated based on conversation membership, role, and settings */
+/**
+ * Message permissions for the current user
+ * Calculated based on conversation membership, role, and settings
+ */
 export type MessagePermissions = {
   __typename?: 'MessagePermissions';
   canDelete: Scalars['Boolean']['output'];
@@ -20577,7 +20641,16 @@ export type Mutation = {
   addTrackingEvent: TrackingEvent;
   /** Add a vibe to a catalog */
   addVibeToVibecontrolsCatalog: VibecontrolsCatalogVibe;
-  /** Zero-config agent onboarding. Probes the agent via tunnelUrl + apiKey, then chains registerOrUpdateAgent + setupAgentGatewayAuth + pushAgentGatewayAuth in a single mutation so the operator only needs to paste the tunnel URL and the agent's API key shown in its startup banner. On success the agent transitions from 'awaiting-config' to 'ready' inside the POST /api/agent/gateway-auth call invoked during push — so by the time this mutation returns, the agent is fully functional. */
+  /**
+   * Zero-config agent onboarding. Probes the agent via tunnelUrl + apiKey, then
+   * chains registerOrUpdateAgent + setupAgentGatewayAuth + pushAgentGatewayAuth
+   * in a single mutation so the operator only needs to paste the tunnel URL and
+   * the agent's API key shown in its startup banner.
+   *
+   * On success the agent transitions from 'awaiting-config' to 'ready' inside
+   * the POST /api/agent/gateway-auth call invoked during push — so by the time
+   * this mutation returns, the agent is fully functional.
+   */
   addVibecontrolsAgentFromTunnel: AddAgentFromTunnelResult;
   /** Add a new metric to a scorecard */
   addVibecontrolsScorecardMetric: VibecontrolsScorecardMetric;
@@ -20590,9 +20663,17 @@ export type Mutation = {
    */
   addWorkspaceMember: WorkspaceMember;
   adjustInventoryStock: InventoryItem;
-  /** Adopt an orphan agent session. Creates a Session row tracking the existing daemon-side session (tmux/wezterm/zellij) and starts a web terminal so the UI can attach. Idempotent — calling twice returns the same row. */
+  /**
+   * Adopt an orphan agent session. Creates a Session row tracking the
+   * existing daemon-side session (tmux/wezterm/zellij) and starts a web
+   * terminal so the UI can attach. Idempotent — calling twice returns
+   * the same row.
+   */
   adoptAgentSession: Session;
-  /** Proxy a mutating AI request to an agent via the backend. Path must start with /api/ai/. */
+  /**
+   * Proxy a mutating AI request to an agent via the backend.
+   * Path must start with /api/ai/.
+   */
   agentAiMutate: AgentProxyResponse;
   approveExpense: ExpenseEntry;
   approveRequest: TimeApprovalRequest;
@@ -20654,7 +20735,11 @@ export type Mutation = {
   /** Bulk assign a role to multiple actors */
   bulkAssignRole: Scalars['Int']['output'];
   bulkAssignTags: Array<UniversalTagAssignment>;
-  /** Assign N tags across M entities in one round-trip; server applies the cartesian product (tagIds × targets). Replaces the per-entity loop the bulk-operations UI used to do client-side. */
+  /**
+   * Assign N tags across M entities in one round-trip; server applies the
+   * cartesian product (tagIds × targets). Replaces the per-entity loop the
+   * bulk-operations UI used to do client-side.
+   */
   bulkAssignTagsToEntities: Array<UniversalTagAssignment>;
   bulkCreateAllocations: Array<ResourceAllocation>;
   bulkCreateEmailTimeEntries: Array<EmailTimeEntry>;
@@ -20756,7 +20841,10 @@ export type Mutation = {
   categorizeApplication: Array<ApplicationUsage>;
   chatWithAgent: ChatResponse;
   checkInToEvent: EventAttendee;
-  /** Check health of all running sessions by verifying them with their agents. Updates status of dead sessions. Returns summary of the check. */
+  /**
+   * Check health of all running sessions by verifying them with their agents.
+   * Updates status of dead sessions. Returns summary of the check.
+   */
   checkSessionHealth: SessionHealthCheckResult;
   /** Clean up expired batch downloads (admin) */
   cleanupExpiredBatchDownloads: Scalars['Int']['output'];
@@ -20789,9 +20877,19 @@ export type Mutation = {
   confirmBooking: Booking;
   connectAgentToTarget: AgentConnection;
   connectExternalCalendar: ExternalCalendarSync;
-  /** Anonymise the subject's conversations data. With dryRun=true, returns counts without mutating. Message bodies are RETAINED for thread integrity; senderId / mention / reaction / read-receipt records keyed to the subject are anonymised or deleted. Reported back via `retainedForLegalReason: "thread-integrity"`. */
+  /**
+   * Anonymise the subject's conversations data. With dryRun=true, returns
+   * counts without mutating. Message bodies are RETAINED for thread
+   * integrity; senderId / mention / reaction / read-receipt records keyed
+   * to the subject are anonymised or deleted. Reported back via
+   * `retainedForLegalReason: "thread-integrity"`.
+   */
   conversationsEraseSubject: ConversationsEraseResult;
-  /** Export the subject's conversations data: messages authored, conversation memberships, mentions of the subject, reactions, poll votes, call participations, comment activity. Attachments listed by reference only. */
+  /**
+   * Export the subject's conversations data: messages authored, conversation
+   * memberships, mentions of the subject, reactions, poll votes, call
+   * participations, comment activity. Attachments listed by reference only.
+   */
   conversationsExportSubject: Scalars['JSON']['output'];
   /** Convert a lead into a deal */
   convertHeadshotmarketingLead: HeadshotmarketingDeal;
@@ -20823,7 +20921,10 @@ export type Mutation = {
   createAppTemplate: AppTemplate;
   createAsset: Asset;
   createAvailabilityRule: AvailabilityRule;
-  /** Create a new batch download Initiates ZIP archive creation */
+  /**
+   * Create a new batch download
+   * Initiates ZIP archive creation
+   */
   createBatchDownload: CreateBatchDownloadResponse;
   /** Create a new BigConsole dashboard */
   createBigConsoleDashboard: Dashboard;
@@ -20860,7 +20961,11 @@ export type Mutation = {
   createCollectionFromTemplate: Collection;
   createConnection: IntegrationConnection;
   createConversation: CreateConversationPayload;
-  /** Submit an export job for workspace conversations + messages through the central `wspace-export-svc`. The legacy `exportEntityComments` mutation is deprecated in favour of this canonical entry point. */
+  /**
+   * Submit an export job for workspace conversations + messages through
+   * the central `wspace-export-svc`. The legacy `exportEntityComments`
+   * mutation is deprecated in favour of this canonical entry point.
+   */
   createConversationsExportJob: ConversationsExportJobResponse;
   createCrewAnnouncement: CrewAnnouncement;
   createCrewCandidate: CrewCandidate;
@@ -20904,7 +21009,12 @@ export type Mutation = {
   createExportTemplate: ExportTemplate;
   /** Create a new version from current file state */
   createFileVersion: FileVersion;
-  /** Create an export job for workspace files. The export service will asynchronously build a ZIP archive containing all files metadata (and optionally media) in the requested format. Poll the export service for job completion and download URL. */
+  /**
+   * Create an export job for workspace files.
+   * The export service will asynchronously build a ZIP archive containing
+   * all files metadata (and optionally media) in the requested format.
+   * Poll the export service for job completion and download URL.
+   */
   createFilesExportJob: ExportJobResponse;
   /** Create a new filter preset */
   createFilterPreset: FilterPreset;
@@ -21080,7 +21190,11 @@ export type Mutation = {
   createTagRule: UniversalTagRule;
   createTagSegment: UniversalTagSegment;
   createTagTranslation: UniversalTagTranslation;
-  /** Submit an export job for workspace tags + vocabularies through the central `wspace-export-svc`. Returns the job descriptor; the caller polls the export service for completion and download URL. */
+  /**
+   * Submit an export job for workspace tags + vocabularies through the
+   * central `wspace-export-svc`. Returns the job descriptor; the caller
+   * polls the export service for completion and download URL.
+   */
   createTagsExportJob: TagsExportJobResponse;
   createTarget: Target;
   createTask: Task;
@@ -21384,7 +21498,10 @@ export type Mutation = {
   deleteTimeEntry: TimeEntry;
   /** Soft-delete a tunnel (stops it first if active, then sets deletedAt). */
   deleteTunnel: Scalars['Boolean']['output'];
-  /** Delete a domain record. Must be detached first (unless it's a managed subdomain never attached to anything). */
+  /**
+   * Delete a domain record. Must be detached first (unless it's a managed
+   * subdomain never attached to anything).
+   */
   deleteTunnelDomain: Scalars['Boolean']['output'];
   deleteVault: Scalars['Boolean']['output'];
   deleteVaultIntegration: Scalars['Boolean']['output'];
@@ -21459,7 +21576,12 @@ export type Mutation = {
   enableMaintenanceMode: MaintenanceModeStatus;
   enableProvider: IntegrationProvider;
   endCall: CallSession;
-  /** Erase the subject's files-layer data. With dryRun=true, returns counts without mutating. Files owned by the subject are tombstoned (soft-deleted) and their S3 objects scheduled for purge. File rows that have legal-hold flags are retained and reported in `retainedForLegalReason`. */
+  /**
+   * Erase the subject's files-layer data. With dryRun=true, returns counts
+   * without mutating. Files owned by the subject are tombstoned (soft-deleted)
+   * and their S3 objects scheduled for purge. File rows that have legal-hold
+   * flags are retained and reported in `retainedForLegalReason`.
+   */
   eraseSubject: FilesEraseResult;
   eventfullyManagedCreateAttendee: EventfullyManagedAttendee;
   eventfullyManagedCreateCheckInRecord: EventfullyManagedCheckInRecord;
@@ -21638,7 +21760,10 @@ export type Mutation = {
   executeParser: ParserExecutionResult;
   executePipeline: PipelineExecution;
   executePromptNow: PromptResult;
-  /** Execute a button via share token (PUBLIC — no auth required). Only works if the share link has EXECUTE permission. */
+  /**
+   * Execute a button via share token (PUBLIC — no auth required).
+   * Only works if the share link has EXECUTE permission.
+   */
   executeSharedVibeDeckButton: VibeDeckButtonExecution;
   executeVibeDeckButton: VibeDeckButtonExecution;
   /**
@@ -21653,7 +21778,12 @@ export type Mutation = {
   /** @deprecated Use `createGroupsExportJob` (delegates to wspace-export-svc) for workspace-scoped exports. This single-group helper will be removed in a future release. */
   exportGroupData: GroupExportResult;
   exportSandboxes: SandboxExportJob;
-  /** Export the subject's files-layer data: owned files (with metadata, versions, tags), folders, file-shares granted by the subject. Object storage payloads are listed by S3 key but not inlined; the privacy-svc orchestrator includes them via signed URLs in the final DSAR bundle. */
+  /**
+   * Export the subject's files-layer data: owned files (with metadata,
+   * versions, tags), folders, file-shares granted by the subject. Object
+   * storage payloads are listed by S3 key but not inlined; the privacy-svc
+   * orchestrator includes them via signed URLs in the final DSAR bundle.
+   */
   exportSubject: Scalars['JSON']['output'];
   /** Export audit logs matching the filter as CSV or JSON */
   exportVibeAuditLogs: VibeAuditLogExport;
@@ -21841,18 +21971,31 @@ export type Mutation = {
    */
   initializeWorkspaceRoles: InitializeWorkspaceRolesResult;
   initiateOAuth: OAuthInitiationResult;
-  /** Initiate a new upload session Returns session details and initial presigned URLs */
+  /**
+   * Initiate a new upload session
+   * Returns session details and initial presigned URLs
+   */
   initiateUpload: UploadSessionWithUrls;
   /** Install an action from the store (creates a local instance) */
   installActionFromStore: Action;
   installAgentOnTarget: InstallJob;
-  /** Install a plugin on an agent. The backend proxies the request to the agent's REST API (POST /api/plugins/install). */
+  /**
+   * Install a plugin on an agent. The backend proxies the request
+   * to the agent's REST API (POST /api/plugins/install).
+   */
   installAgentPlugin: AgentPluginActionResult;
   installApp: AppInstallation;
   installNode: WorkspaceNodeInstallation;
   installPackage: InstalledPackage;
   installProviderPlugin: IntegrationProvider;
-  /** Install a plugin on an agent sourced from the Burdenoff store. Bridges store-svc ↔ vibecontrols-agent: the backend validates the caller's entitlement via store-svc, reads the product manifest for the npm package name + version, then calls the agent's /api/plugins/install endpoint. Records an AppInstallation in store-svc on success. */
+  /**
+   * Install a plugin on an agent sourced from the Burdenoff store.
+   *
+   * Bridges store-svc ↔ vibecontrols-agent: the backend validates the caller's
+   * entitlement via store-svc, reads the product manifest for the npm package
+   * name + version, then calls the agent's /api/plugins/install endpoint.
+   * Records an AppInstallation in store-svc on success.
+   */
   installStorePluginOnAgent: AgentPluginActionResult;
   /**
    * Install an app in one or more workspaces
@@ -21872,7 +22015,11 @@ export type Mutation = {
   invest: KadaikodiInvestment;
   inviteToGroup: InviteResult;
   invokeSlashCommand: InvokeSlashCommandPayload;
-  /** Issue a short-lived session token for a tunnel. The token is returned exactly once and grants the agent the right to connect its provider subprocess to the tunnel server. */
+  /**
+   * Issue a short-lived session token for a tunnel. The token is returned
+   * exactly once and grants the agent the right to connect its provider
+   * subprocess to the tunnel server.
+   */
   issueTunnelSession: TunnelSessionIssueResult;
   /**
    * Issue a workspace token for the authenticated user.
@@ -21933,7 +22080,14 @@ export type Mutation = {
   muteConversation: ConversationMembership;
   notifyTagAssigned: Scalars['Boolean']['output'];
   notifyTagRemoved: Scalars['Boolean']['output'];
-  /** Notify-on-change hook for plugin lifecycle events. Called by the agent's plugin-mgr immediately after install/remove/reload so the vibecontrolsAgentPluginStream subscription publishes within ms instead of waiting for the next 30s server-side poll. The agent authenticates with its agentApiKey; the svc validates and forwards the new installed-list to the GraphQL pubsub topic for that workspace+agent. */
+  /**
+   * Notify-on-change hook for plugin lifecycle events. Called by the agent's
+   * plugin-mgr immediately after install/remove/reload so the
+   * vibecontrolsAgentPluginStream subscription publishes within ms instead of
+   * waiting for the next 30s server-side poll. The agent authenticates with
+   * its agentApiKey; the svc validates and forwards the new installed-list
+   * to the GraphQL pubsub topic for that workspace+agent.
+   */
   notifyVibecontrolsAgentPluginChange: Scalars['Boolean']['output'];
   openCircuitBreaker: CircuitBreakerState;
   optimizeRoute: Route;
@@ -22176,7 +22330,11 @@ export type Mutation = {
   /** Publish a component as a reusable template (snapshots the component) */
   publishVibecontrolsComponentAsTemplate: VibecontrolsTemplate;
   publishWorkflow: WorkflowDefinition;
-  /** Push gateway auth configuration (OAuth2 credentials) to an agent. The backend proxies the request to the agent's REST API (POST /api/agent/gateway-auth). */
+  /**
+   * Push gateway auth configuration (OAuth2 credentials) to an agent.
+   * The backend proxies the request to the agent's REST API
+   * (POST /api/agent/gateway-auth).
+   */
   pushAgentGatewayAuth: AgentPluginActionResult;
   rateMeeting: MeetingMeta;
   /** Rate a template */
@@ -22189,7 +22347,18 @@ export type Mutation = {
    * Workspace ID is read from gateway context (x-workspace-id header).
    */
   recalculateWorkspaceUsage: WorkspaceResourceUsage;
-  /** Receive a message from an external channel platform (Slack, Teams, WhatsApp, etc.) Called by module-channel-svc via API Gateway when webhook events are received. This mutation will: - Find existing conversation by channelId + externalThreadId, or create new one - Create the message with EXTERNAL author type - Handle deduplication by channelMessageId - Return conversation and message IDs Follows spec: 01-scope-boundaries.md (lines 374-407) */
+  /**
+   * Receive a message from an external channel platform (Slack, Teams, WhatsApp, etc.)
+   * Called by module-channel-svc via API Gateway when webhook events are received.
+   *
+   * This mutation will:
+   * - Find existing conversation by channelId + externalThreadId, or create new one
+   * - Create the message with EXTERNAL author type
+   * - Handle deduplication by channelMessageId
+   * - Return conversation and message IDs
+   *
+   * Follows spec: 01-scope-boundaries.md (lines 374-407)
+   */
   receiveChannelMessage: ReceiveChannelMessagePayload;
   recordAIPromptUsage: AiPrompt;
   /** Record multiple activities in batch */
@@ -22227,7 +22396,10 @@ export type Mutation = {
    * Creates a new generation based on an existing one.
    */
   regenerateDashboard: PromptGeneration;
-  /** Register a user-owned custom domain. Returns the domain with a challenge token; the user must create a TXT record before verification can succeed. */
+  /**
+   * Register a user-owned custom domain. Returns the domain with a challenge
+   * token; the user must create a TXT record before verification can succeed.
+   */
   registerCustomTunnelDomain: TunnelDomain;
   registerDocsBuildImage: VibecontrolsDocsBuildImage;
   /**
@@ -22237,7 +22409,10 @@ export type Mutation = {
    * This prevents duplicate agent records when agents restart.
    */
   registerEventfullymanagedAgent: EventfullymanagedAgent;
-  /** Auto-register a remotely installed agent in the backend. Called after installAgentOnTarget completes to create the agent record. */
+  /**
+   * Auto-register a remotely installed agent in the backend.
+   * Called after installAgentOnTarget completes to create the agent record.
+   */
   registerInstalledAgent: VibecontrolsAgent;
   registerIoTDevice: IoTDevice;
   registerNode: NodeEndpointConfig;
@@ -22249,7 +22424,12 @@ export type Mutation = {
   registerResource: Resource;
   /** Register an uploaded part */
   registerUploadedPart: UploadPartResponse;
-  /** Register or update an agent by hostname (upsert). If an active (non-deleted) agent with the given hostname exists in the workspace, it is updated with the new data. Otherwise a new agent is created. This prevents duplicate agent records when agents restart. */
+  /**
+   * Register or update an agent by hostname (upsert).
+   * If an active (non-deleted) agent with the given hostname exists in the workspace,
+   * it is updated with the new data. Otherwise a new agent is created.
+   * This prevents duplicate agent records when agents restart.
+   */
   registerVibecontrolsAgent: VibecontrolsAgent;
   rejectExpense: ExpenseEntry;
   /**
@@ -22263,7 +22443,10 @@ export type Mutation = {
   releaseFileLock: ReleaseLockResponse;
   /** Release control of a session */
   releaseSessionControl: Scalars['Boolean']['output'];
-  /** Remove a plugin from an agent. The backend proxies the request to the agent's REST API (POST /api/plugins/remove). */
+  /**
+   * Remove a plugin from an agent. The backend proxies the request
+   * to the agent's REST API (POST /api/plugins/remove).
+   */
   removeAgentPlugin: AgentPluginActionResult;
   removeAllTagsFromEntity: Scalars['Boolean']['output'];
   removeAttendee: Scalars['Boolean']['output'];
@@ -22358,7 +22541,10 @@ export type Mutation = {
    * Workspace scope is read from gateway context (x-workspace-id header).
    */
   resendInvitation: Invitation;
-  /** Reserve a managed subdomain under *.vibetunnels.com. The domain is created in VERIFIED state and can be attached immediately. */
+  /**
+   * Reserve a managed subdomain under *.vibetunnels.com. The domain is
+   * created in VERIFIED state and can be attached immediately.
+   */
   reserveTunnelSubdomain: TunnelDomain;
   resetCircuitBreaker: CircuitBreakerState;
   /**
@@ -22366,9 +22552,23 @@ export type Mutation = {
    * Workspace ID is read from gateway context (x-workspace-id header).
    */
   resetMonthlyUsage: WorkspaceResourceUsage;
-  /** Reset settings for a category back to defaults. For user-scoped categories, deletes the user's overrides. For workspace-scoped categories, deletes the workspace overrides. */
+  /**
+   * Reset settings for a category back to defaults.
+   * For user-scoped categories, deletes the user's overrides.
+   * For workspace-scoped categories, deletes the workspace overrides.
+   */
   resetSettings: Scalars['Boolean']['output'];
-  /** Wipe the agent's local state via POST /api/agent/reset on the agent. Deletes config.json, the encrypted Skalex DB, logs, and the plugins manifest, then transitions the agent back to 'awaiting-config' WITHOUT exiting the process — HTTP server + tunnel stay alive so the platform can re-onboard via addVibecontrolsAgentFromTunnel. Returns the new agent API key generated during reset; the platform must rotate its stored agentApiKey to the returned value before re-onboarding, otherwise subsequent calls will get 401. */
+  /**
+   * Wipe the agent's local state via POST /api/agent/reset on the agent.
+   * Deletes config.json, the encrypted Skalex DB, logs, and the plugins
+   * manifest, then transitions the agent back to 'awaiting-config' WITHOUT
+   * exiting the process — HTTP server + tunnel stay alive so the platform
+   * can re-onboard via addVibecontrolsAgentFromTunnel.
+   *
+   * Returns the new agent API key generated during reset; the platform must
+   * rotate its stored agentApiKey to the returned value before re-onboarding,
+   * otherwise subsequent calls will get 401.
+   */
   resetVibecontrolsAgent: ResetAgentResult;
   /** Reset webhook failure count */
   resetWebhookFailures: Webhook;
@@ -22380,7 +22580,10 @@ export type Mutation = {
   respondToReview: KadaikodiReview;
   /** Restart a session */
   restartSession: Session;
-  /** Restart the terminal (stop + start session provider + ttyd) for a session. Use this to recover from dead/orphaned tunnels. */
+  /**
+   * Restart the terminal (stop + start session provider + ttyd) for a session.
+   * Use this to recover from dead/orphaned tunnels.
+   */
   restartSessionTerminal: Session;
   /** Restart a resource */
   restartWorkspaceResource: WorkspaceResource;
@@ -22457,7 +22660,10 @@ export type Mutation = {
   rollbackSecret: Secret;
   rotateEncryptionKey: EncryptionKey;
   rotateSecret: Secret;
-  /** Rotate tunnel credentials (basic auth password, provider secrets). Active sessions are revoked; caller must re-issue. */
+  /**
+   * Rotate tunnel credentials (basic auth password, provider secrets). Active
+   * sessions are revoked; caller must re-issue.
+   */
   rotateTunnelCredentials: Tunnel;
   /**
    * Rotate the workspace secret. Old secret remains valid during grace period.
@@ -22470,9 +22676,16 @@ export type Mutation = {
   saveTimeCampusUISession: TimeCampusUiSession;
   /** Save UI session */
   saveUISession: UiSession;
-  /** Re-run the Trivy CVE scan for an existing image without touching APPROVED state. Returns the row in SCANNING; transitions to PASSED/FAILED happen out-of-band. */
+  /**
+   * Re-run the Trivy CVE scan for an existing image without touching APPROVED
+   * state. Returns the row in SCANNING; transitions to PASSED/FAILED happen
+   * out-of-band.
+   */
   scanDocsBuildImage: VibecontrolsDocsBuildImage;
-  /** Scan SSH config on an agent's environment and return discovered hosts. If configPath is omitted, defaults to ~/.ssh/config. */
+  /**
+   * Scan SSH config on an agent's environment and return discovered hosts.
+   * If configPath is omitted, defaults to ~/.ssh/config.
+   */
   scanSSHConfig: SshConfigScanResult;
   /** Schedule a comment for future posting */
   scheduleComment: ScheduledComment;
@@ -22509,7 +22722,10 @@ export type Mutation = {
    */
   setDefaultFilterPreset: FilterPreset;
   setDefaultVibeDeck: VibeDeck;
-  /** Promote a profile to be the agent's default. The previously-default profile is demoted in the same transaction. */
+  /**
+   * Promote a profile to be the agent's default. The previously-default
+   * profile is demoted in the same transaction.
+   */
   setDefaultVibecontrolsAgentProfile: VibecontrolsAgentProfile;
   /** Set a view as the default */
   setDefaultView: DashboardView;
@@ -22521,14 +22737,28 @@ export type Mutation = {
   setNodeStatus: NodeEndpointConfig;
   /** Set default permission level for a role on a resource type */
   setRoleDefaultPermission: Role;
-  /** Set or update a settings secret value. Secret values are stored encrypted and never returned in full. */
+  /**
+   * Set or update a settings secret value.
+   * Secret values are stored encrypted and never returned in full.
+   */
   setSettingsSecret: SettingsSecret;
   setTimeCampusConfiguration: TimeCampusConfiguration;
-  /** Toggle a single per-vibe feature flag. Persists on the vibe so all viewers see the same enabled/disabled state. The `featureId` must be a known entry in `vibeFeatureCatalog`. */
+  /**
+   * Toggle a single per-vibe feature flag. Persists on the vibe so all viewers
+   * see the same enabled/disabled state. The `featureId` must be a known entry
+   * in `vibeFeatureCatalog`.
+   */
   setVibeFeatureFlag: Vibe;
   /** Enable or disable an installed workspace app */
   setWorkspaceAppEnabled: WorkspaceInstalledApp;
-  /** Set up gateway auth for an agent end-to-end: 1. Creates OAuth app in auth-svc (via internal global gateway) 2. Creates devportal Application linked to the OAuth app 3. Stores appId/appClientId on the agent record 4. Pushes OAuth credentials to the agent via REST proxy Returns the agent with credentials (clientSecret shown once). */
+  /**
+   * Set up gateway auth for an agent end-to-end:
+   * 1. Creates OAuth app in auth-svc (via internal global gateway)
+   * 2. Creates devportal Application linked to the OAuth app
+   * 3. Stores appId/appClientId on the agent record
+   * 4. Pushes OAuth credentials to the agent via REST proxy
+   * Returns the agent with credentials (clientSecret shown once).
+   */
   setupAgentGatewayAuth: SetupAgentGatewayAuthResult;
   shareCalendar: CalendarShare;
   /** Share collection with users */
@@ -22544,14 +22774,23 @@ export type Mutation = {
   startPomodoroSession: PomodoroSession;
   /** Start a session */
   startSession: Session;
-  /** Start a terminal (session provider + ttyd + tunnel) for a session. Calls the agent API server-side, starts ttyd, and saves the tunnel URL as ttydUrl. */
+  /**
+   * Start a terminal (session provider + ttyd + tunnel) for a session.
+   * Calls the agent API server-side, starts ttyd, and saves the tunnel URL as ttydUrl.
+   */
   startSessionTerminal: Session;
   startTerminal: TerminalResult;
   startTimer: TimeEntry;
-  /** Transition a tunnel to ACTIVE: issues a session, instructs the agent to spawn the provider subprocess, registers the managed DNS record if any. */
+  /**
+   * Transition a tunnel to ACTIVE: issues a session, instructs the agent to
+   * spawn the provider subprocess, registers the managed DNS record if any.
+   */
   startTunnel: Tunnel;
   startTyping: Scalars['Boolean']['output'];
-  /** Start an agent process via the backend proxy. Calls POST /api/agent/lifecycle/start on the agent. */
+  /**
+   * Start an agent process via the backend proxy.
+   * Calls POST /api/agent/lifecycle/start on the agent.
+   */
   startVibecontrolsAgent: AgentLifecycleActionResult;
   /** Start a stopped or inactive resource */
   startWorkspaceResource: WorkspaceResource;
@@ -22561,14 +22800,23 @@ export type Mutation = {
   stopSandbox: Sandbox;
   /** Stop a session */
   stopSession: Session;
-  /** Stop the terminal (ttyd + session provider) for a session. Clears ttydUrl and sets session status to STOPPED. */
+  /**
+   * Stop the terminal (ttyd + session provider) for a session.
+   * Clears ttydUrl and sets session status to STOPPED.
+   */
   stopSessionTerminal: Session;
   stopTerminal: Scalars['Boolean']['output'];
   stopTimer: TimeEntry;
-  /** Transition a tunnel to STOPPED: gracefully stops the provider subprocess on the agent and clears the managed DNS record. */
+  /**
+   * Transition a tunnel to STOPPED: gracefully stops the provider subprocess
+   * on the agent and clears the managed DNS record.
+   */
   stopTunnel: Tunnel;
   stopTyping: Scalars['Boolean']['output'];
-  /** Stop an agent process via the backend proxy. Calls POST /api/agent/lifecycle/stop on the agent. */
+  /**
+   * Stop an agent process via the backend proxy.
+   * Calls POST /api/agent/lifecycle/stop on the agent.
+   */
   stopVibecontrolsAgent: AgentLifecycleActionResult;
   /** Stop a running resource */
   stopWorkspaceResource: WorkspaceResource;
@@ -22914,7 +23162,10 @@ export type Mutation = {
   updateNodeEndpoint: NodeEndpointConfig;
   /** Update an existing note */
   updateNote: VibecontrolsNote;
-  /** Update user notification preferences. Merges provided fields with existing values. */
+  /**
+   * Update user notification preferences.
+   * Merges provided fields with existing values.
+   */
   updateNotificationPreferences: NotificationPreferences;
   updateNotificationSettings: ConversationMembership;
   updateOffering: KadaikodiOffering;
@@ -22928,11 +23179,17 @@ export type Mutation = {
   updatePolicyReference: PolicyReference;
   updatePomodoroGoal: PomodoroGoal;
   updatePomodoroSettings: PomodoroSettings;
-  /** Update user UI preferences. Merges provided fields with existing values. */
+  /**
+   * Update user UI preferences.
+   * Merges provided fields with existing values.
+   */
   updatePreferences: UserPreferences;
   updatePresence: Presence;
   updateProduct: Product;
-  /** Update user profile settings. Merges provided fields with existing values. */
+  /**
+   * Update user profile settings.
+   * Merges provided fields with existing values.
+   */
   updateProfile: UserProfile;
   /** Update an existing project */
   updateProject: Project;
@@ -23041,7 +23298,10 @@ export type Mutation = {
   updateWorkflowScheduledJob: ScheduledJobResponse;
   /** Update an existing workspace */
   updateWorkspace: Workspace;
-  /** Update workspace-level defaults. Requires admin permission. Merges provided fields with existing values. */
+  /**
+   * Update workspace-level defaults.
+   * Requires admin permission. Merges provided fields with existing values.
+   */
   updateWorkspaceDefaults: WorkspaceDefaults;
   /** Update an installed workspace app */
   updateWorkspaceInstalledApp: WorkspaceInstalledApp;
@@ -23065,7 +23325,10 @@ export type Mutation = {
   /** Create or update a scorecard for an entity */
   upsertVibecontrolsScorecard: VibecontrolsScorecard;
   validateDocsBuildImage: VibecontrolsDocsBuildImage;
-  /** Force an immediate verification attempt for a custom domain. Normally the background worker polls every 15s; this lets the user retry on-demand. */
+  /**
+   * Force an immediate verification attempt for a custom domain. Normally the
+   * background worker polls every 15s; this lets the user retry on-demand.
+   */
   verifyTunnelDomain: TunnelDomain;
   /** Send heartbeat to mark agent as active */
   vibecontrolsAgentHeartbeat: VibecontrolsAgent;
@@ -37586,7 +37849,10 @@ export type NoteAnalytics = {
   unpinned: Scalars['Int']['output'];
 };
 
-/** A tag assignment linking a UniversalTag to a note. Delegated to wspace-tags-svc via the NoteTagAdapter. */
+/**
+ * A tag assignment linking a UniversalTag to a note.
+ * Delegated to wspace-tags-svc via the NoteTagAdapter.
+ */
 export type NoteTagAssignment = {
   __typename?: 'NoteTagAssignment';
   /** When the tag was assigned */
@@ -40704,7 +40970,10 @@ export type PushAgentGatewayAuthInput = {
   globalGatewayUrl: Scalars['String']['input'];
   /** OAuth2 scopes */
   scopes: Array<Scalars['String']['input']>;
-  /** Workspace gateway URL (public) — used by the agent for issueWorkspaceToken and the encryption-key fetch. Must be distinct from globalGatewayUrl. */
+  /**
+   * Workspace gateway URL (public) — used by the agent for issueWorkspaceToken
+   * and the encryption-key fetch. Must be distinct from globalGatewayUrl.
+   */
   workspaceGatewayUrl: Scalars['String']['input'];
   /** Workspace UUID — required for the agent's issueWorkspaceToken step. */
   workspaceId: Scalars['String']['input'];
@@ -40822,15 +41091,29 @@ export type Query = {
   adminAnalyticsModules: Array<AdminAnalyticsModuleSummary>;
   adminAnalyticsOverview: AdminAnalyticsOverview;
   adminAnalyticsTimeline: AdminAnalyticsTimelineResult;
-  /** Proxy a GET request to an agent AI API route via the backend. Path must start with /api/ai/. */
+  /**
+   * Proxy a GET request to an agent AI API route via the backend.
+   * Path must start with /api/ai/.
+   */
   agentAiGet: AgentProxyResponse;
   agentConnectionConfig: AgentConnectionConfig;
   agentGraph: AgentGraph;
-  /** Read the current lifecycle state of an agent via the backend proxy. Calls GET /api/agent/lifecycle/state on the agent. */
+  /**
+   * Read the current lifecycle state of an agent via the backend proxy.
+   * Calls GET /api/agent/lifecycle/state on the agent.
+   */
   agentLifecycleState: AgentLifecycleStateResult;
-  /** List installed and available plugins on an agent. The backend proxies requests to the agent's REST API. */
+  /**
+   * List installed and available plugins on an agent.
+   * The backend proxies requests to the agent's REST API.
+   */
   agentPlugins: AgentPluginListResult;
-  /** List `vibe-*` sessions on the agent host that are NOT currently tracked in agent storage. These are orphan tmux/wezterm/zellij sessions that survived an agent kill or storage wipe and can be reconnected via `adoptAgentSession`. */
+  /**
+   * List `vibe-*` sessions on the agent host that are NOT currently
+   * tracked in agent storage. These are orphan tmux/wezterm/zellij
+   * sessions that survived an agent kill or storage wipe and can be
+   * reconnected via `adoptAgentSession`.
+   */
   agentSessionOrphans: Array<AgentSessionOrphan>;
   /** Get aggregated metrics for a resource */
   aggregatedResourceMetrics: AggregatedMetricResult;
@@ -40950,7 +41233,10 @@ export type Query = {
   discoveryJobs: Array<DiscoveryJob>;
   docsBuildImage?: Maybe<VibecontrolsDocsBuildImage>;
   docsBuildImages: VibecontrolsDocsBuildImageList;
-  /** Get rendered docs HTML content for a specific file path. Used by the frontend to render docs in an iframe via srcdoc. */
+  /**
+   * Get rendered docs HTML content for a specific file path.
+   * Used by the frontend to render docs in an iframe via srcdoc.
+   */
   docsContent?: Maybe<VibecontrolsDocsContentPayload>;
   /** Get a single docs page by ID */
   docsPage?: Maybe<VibecontrolsDocsPage>;
@@ -41248,7 +41534,10 @@ export type Query = {
   getEntitiesByTag: EntityList;
   getEntitiesByTags: EntityList;
   getEntityAuditTrail: Array<VaultAuditLog>;
-  /** Get a single comment by ID @rbac(public: true, scopeType: "wspace") */
+  /**
+   * Get a single comment by ID
+   *   @rbac(public: true, scopeType: "wspace")
+   */
   getEntityComment?: Maybe<EntityComment>;
   /** Get edit history for a comment */
   getEntityCommentEditHistory: Array<EntityCommentEdit>;
@@ -41810,7 +42099,10 @@ export type Query = {
   listSandboxTemplates: SandboxTemplateConfigList;
   listSandboxes: SandboxList;
   listServiceProviders: Array<KadaikodiServiceProvider>;
-  /** List all settings secrets for the current workspace. Returns keys and metadata, but values are redacted for security. */
+  /**
+   * List all settings secrets for the current workspace.
+   * Returns keys and metadata, but values are redacted for security.
+   */
   listSettingsSecrets: Array<SettingsSecret>;
   /** List dashboards shared with a user */
   listSharedWithMe: DashboardShareConnection;
@@ -41868,9 +42160,15 @@ export type Query = {
    * Use this for quick role checks without fetching full permissions.
    */
   myRoles: MyRolesResult;
-  /** Get all settings for the current user in this workspace. Returns a complete bundle with defaults for any missing values. */
+  /**
+   * Get all settings for the current user in this workspace.
+   * Returns a complete bundle with defaults for any missing values.
+   */
   mySettings: SettingsBundle;
-  /** Get settings for a specific category. Returns the typed settings object for that category. */
+  /**
+   * Get settings for a specific category.
+   * Returns the typed settings object for that category.
+   */
   mySettingsByCategory: Scalars['JSON']['output'];
   /**
    * Get workspaces for the current authenticated user
@@ -42035,9 +42333,16 @@ export type Query = {
   previewSchedule: SchedulePreview;
   /** Preview smart collection results without creating */
   previewSmartCollection: CollectionItemList;
-  /** Probe an existing agent's connectivity by its ID. Looks up the agent record and calls /health and /api/agent/identity. */
+  /**
+   * Probe an existing agent's connectivity by its ID.
+   * Looks up the agent record and calls /health and /api/agent/identity.
+   */
   probeAgentConnection: AgentProbeResult;
-  /** Probe an agent tunnel URL for health and identity. Used by the Add Agent wizard before the agent record exists. The backend calls /health and /api/agent/identity on the given URL. */
+  /**
+   * Probe an agent tunnel URL for health and identity.
+   * Used by the Add Agent wizard before the agent record exists.
+   * The backend calls /health and /api/agent/identity on the given URL.
+   */
   probeAgentTunnel: AgentProbeResult;
   problems: Array<Problem>;
   product?: Maybe<Product>;
@@ -42189,7 +42494,10 @@ export type Query = {
   sessions: SessionList;
   /** Get sessions shared with the current user */
   sessionsSharedWithMe: SessionShareConnection;
-  /** Get a shared VibeDeck by token (PUBLIC — no auth required). Returns sanitized deck data if the token is valid. */
+  /**
+   * Get a shared VibeDeck by token (PUBLIC — no auth required).
+   * Returns sanitized deck data if the token is valid.
+   */
   sharedVibeDeck?: Maybe<SharedVibeDeck>;
   shipment?: Maybe<Shipment>;
   shipmentTracking: Array<TrackingEvent>;
@@ -42237,7 +42545,10 @@ export type Query = {
   traverseGraph: Array<GraphPath>;
   /** Get a specific tunnel by ID. */
   tunnel?: Maybe<Tunnel>;
-  /** Audit log entries scoped to a tunnel. Returns entries from the shared AuditLog table filtered by resource type TUNNEL / TUNNEL_DOMAIN / TUNNEL_SESSION. */
+  /**
+   * Audit log entries scoped to a tunnel. Returns entries from the shared
+   * AuditLog table filtered by resource type TUNNEL / TUNNEL_DOMAIN / TUNNEL_SESSION.
+   */
   tunnelAudit: VibeAuditLogList;
   /** Get a tunnel by its workspace-unique slug. */
   tunnelBySlug?: Maybe<Tunnel>;
@@ -42284,7 +42595,10 @@ export type Query = {
   /** Validate a share link (public - for join page, requires login) */
   validateShareLink: ShareLinkValidation;
   validateTagAssignment: TagAssignmentValidation;
-  /** Validate a share link token (PUBLIC — no auth required). Returns whether the link is valid and what it grants. */
+  /**
+   * Validate a share link token (PUBLIC — no auth required).
+   * Returns whether the link is valid and what it grants.
+   */
   validateVibeDeckShareLink: VibeDeckShareLinkValidation;
   vehicle?: Maybe<Vehicle>;
   vehicles: Array<Vehicle>;
@@ -42311,23 +42625,48 @@ export type Query = {
   /** List share links for a specific vibe deck (owner-only) */
   vibeDeckShareLinks: Array<VibeDeckShareLink>;
   vibeDecks: VibeDeckConnection;
-  /** List the catalog of toggleable features that can be enabled/disabled per vibe. Drives the per-vibe feature toggles UI. */
+  /**
+   * List the catalog of toggleable features that can be enabled/disabled per vibe.
+   * Drives the per-vibe feature toggles UI.
+   */
   vibeFeatureCatalog: Array<VibeFeatureDefinition>;
   /** Get vibe hierarchy */
   vibeHierarchy: Array<Vibe>;
   /** Get specific agent by ID */
   vibecontrolsAgent?: Maybe<VibecontrolsAgent>;
-  /** Get the SQLite encryption key for agents in this workspace. One key per workspace regardless of number of agents. Key is auto-generated on first agent registration and stored encrypted in the vault. Agents call this on every startup using their OAuth2 credentials. */
+  /**
+   * Get the SQLite encryption key for agents in this workspace.
+   * One key per workspace regardless of number of agents.
+   * Key is auto-generated on first agent registration and stored encrypted in the vault.
+   * Agents call this on every startup using their OAuth2 credentials.
+   */
   vibecontrolsAgentEncryptionKey: Scalars['String']['output'];
-  /** Probe the health of all agents in the workspace. The backend calls each agent's /health endpoint and returns results. */
+  /**
+   * Probe the health of all agents in the workspace.
+   * The backend calls each agent's /health endpoint and returns results.
+   */
   vibecontrolsAgentHealthProbes: Array<AgentHealthProbeResult>;
-  /** Look up the current tunnel URL + a freshly-minted scoped peer key for a target agent. Used by another agent (the caller) to recover from rotation: when the caller's cached key/url stops working, it asks the platform for the latest values. The caller is identified via the authenticated context (clientId/secret OAuth session); RBAC checks that the caller has been granted peer access to the target. Returns null when the caller has no active grant or the target has no reachable tunnel. */
+  /**
+   * Look up the current tunnel URL + a freshly-minted scoped peer key for a
+   * target agent. Used by another agent (the caller) to recover from
+   * rotation: when the caller's cached key/url stops working, it asks the
+   * platform for the latest values. The caller is identified via the
+   * authenticated context (clientId/secret OAuth session); RBAC checks that
+   * the caller has been granted peer access to the target.
+   *
+   * Returns null when the caller has no active grant or the target has no
+   * reachable tunnel.
+   */
   vibecontrolsAgentNetworkLookup?: Maybe<VibecontrolsAgentNetworkLookupResult>;
   /** List the active (non-deleted) profiles hosted by an agent. */
   vibecontrolsAgentProfiles: Array<VibecontrolsAgentProfile>;
   /** Get all agents in a workspace. Supports optional pagination (limit/offset). */
   vibecontrolsAgents: Array<VibecontrolsAgent>;
-  /** Consolidated analytics for all VibeControls entities. Returns aggregated stats, breakdowns, and time-series data in a single query. Use the entityTypes filter to request only specific entity analytics. */
+  /**
+   * Consolidated analytics for all VibeControls entities.
+   * Returns aggregated stats, breakdowns, and time-series data in a single query.
+   * Use the entityTypes filter to request only specific entity analytics.
+   */
   vibecontrolsAnalytics: VibecontrolsAnalyticsResult;
   /** Get a specific catalog by ID */
   vibecontrolsCatalog?: Maybe<VibecontrolsCatalog>;
@@ -42344,7 +42683,17 @@ export type Query = {
   /** Get docs site by owner type and owner ID */
   vibecontrolsDocsSiteByOwner?: Maybe<VibecontrolsDocsSite>;
   vibecontrolsEntityTags: Array<EntityTagAssignment>;
-  /** Resolve a wspace-integrations-svc connection to a fresh access token for agent plugins. The agent calls this with its OAuth2 client-credential session (actor=app); this resolver re-issues the underlying `getConnectionToken` to integrations-svc as a service actor after validating workspace ownership. Plugins that need third-party credentials (AI provider keys, GitHub OAuth, Slack bot tokens, …) store a `connectionId` instead of raw secrets and call this to materialize a token at runtime. */
+  /**
+   * Resolve a wspace-integrations-svc connection to a fresh access token for
+   * agent plugins. The agent calls this with its OAuth2 client-credential
+   * session (actor=app); this resolver re-issues the underlying
+   * `getConnectionToken` to integrations-svc as a service actor after
+   * validating workspace ownership.
+   *
+   * Plugins that need third-party credentials (AI provider keys, GitHub
+   * OAuth, Slack bot tokens, …) store a `connectionId` instead of raw
+   * secrets and call this to materialize a token at runtime.
+   */
   vibecontrolsResolveIntegrationToken: VibecontrolsIntegrationTokenResult;
   /** Get a scorecard by owner type and owner ID */
   vibecontrolsScorecard?: Maybe<VibecontrolsScorecard>;
@@ -51914,7 +52263,11 @@ export type ReactionSummary = {
   userIds: Array<Scalars['ID']['output']>;
 };
 
-/** Input for receiving a message from an external channel platform. Called by module-channel-svc when a webhook event is received. This follows the spec in 01-scope-boundaries.md (lines 374-407). */
+/**
+ * Input for receiving a message from an external channel platform.
+ * Called by module-channel-svc when a webhook event is received.
+ * This follows the spec in 01-scope-boundaries.md (lines 374-407).
+ */
 export type ReceiveChannelMessageInput = {
   /** File attachments from the platform */
   attachments?: InputMaybe<Array<ChannelAttachmentInput>>;
@@ -52623,18 +52976,27 @@ export type RequestAiPredictionInput = {
 
 export type ReserveTunnelSubdomainInput = {
   environment: TunnelEnvironment;
-  /** The subdomain label (without the zone suffix). e.g. "demo" reserves "demo.vibetunnels.com" (or "demo.alpha.vibetunnels.com" for alpha). */
+  /**
+   * The subdomain label (without the zone suffix). e.g. "demo" reserves
+   * "demo.vibetunnels.com" (or "demo.alpha.vibetunnels.com" for alpha).
+   */
   label: Scalars['String']['input'];
 };
 
 /** Result of resetting an agent's local state. */
 export type ResetAgentResult = {
   __typename?: 'ResetAgentResult';
-  /** Updated agent record. `appId`/`appClientId` are cleared; tunnelUrl and agentApiKey are refreshed to the values the agent reports post-reset. */
+  /**
+   * Updated agent record. `appId`/`appClientId` are cleared; tunnelUrl
+   * and agentApiKey are refreshed to the values the agent reports post-reset.
+   */
   agent: VibecontrolsAgent;
   /** Error message if the agent rejected reset or was unreachable. */
   error?: Maybe<Scalars['String']['output']>;
-  /** Newly generated API key. The platform stored this on the agent record; return it once for operator audit so it can also be copied if needed. */
+  /**
+   * Newly generated API key. The platform stored this on the agent record;
+   * return it once for operator audit so it can also be copied if needed.
+   */
   newApiKey: Scalars['String']['output'];
   /** Whether reset succeeded end-to-end (agent reachable + wipe completed). */
   success: Scalars['Boolean']['output'];
@@ -54765,7 +55127,10 @@ export type ServiceProviderFilterInput = {
   type?: InputMaybe<Scalars['String']['input']>;
 };
 
-/** An interactive or background process running in a development environment. Sessions can be tmux sessions, SSH sessions, terminals, or custom processes. */
+/**
+ * An interactive or background process running in a development environment.
+ * Sessions can be tmux sessions, SSH sessions, terminals, or custom processes.
+ */
 export type Session = {
   __typename?: 'Session';
   /** Agent executing this session */
@@ -55235,7 +55600,10 @@ export type ShareVaultInput = {
   vaultId: Scalars['ID']['input'];
 };
 
-/** A read-only representation of a VibeDeck for shared/public access. Exposes only safe fields — no commands, scripts, webhook URLs, or secrets. */
+/**
+ * A read-only representation of a VibeDeck for shared/public access.
+ * Exposes only safe fields — no commands, scripts, webhook URLs, or secrets.
+ */
 export type SharedVibeDeck = {
   __typename?: 'SharedVibeDeck';
   buttonSize?: Maybe<Scalars['String']['output']>;
@@ -55250,7 +55618,10 @@ export type SharedVibeDeck = {
   permission: VibeDeckSharePermission;
 };
 
-/** A sanitized button representation for shared access. Only display metadata — no executable details exposed. */
+/**
+ * A sanitized button representation for shared access.
+ * Only display metadata — no executable details exposed.
+ */
 export type SharedVibeDeckButton = {
   __typename?: 'SharedVibeDeckButton';
   actionType: VibeDeckButtonActionType;
@@ -55850,7 +56221,10 @@ export type Subscription = {
   exportJobProgress: ExportJob;
   /** Subscribe to file deletion events */
   fileDeleted: FileDeletedEvent;
-  /** Subscribe to all file events in a workspace Real-time updates for file uploads, updates, deletions, etc. */
+  /**
+   * Subscribe to all file events in a workspace
+   * Real-time updates for file uploads, updates, deletions, etc.
+   */
   fileEvents: FileEventUnion;
   /** Subscribe to lock events for a specific file */
   fileLockChanged: FileLock;
@@ -55925,7 +56299,11 @@ export type Subscription = {
   presenceChanged: Presence;
   /** Subscribe to quota warnings for workspace */
   quotaWarning: QuotaWarningEvent;
-  /** Live stream of AI tool events for an agent. Emits the recent-events array (most recent first, capped at `limit`) on every new event so the UI can replace the polling query with a single subscription. */
+  /**
+   * Live stream of AI tool events for an agent. Emits the recent-events
+   * array (most recent first, capped at `limit`) on every new event so
+   * the UI can replace the polling query with a single subscription.
+   */
   recentAiToolEventsStream: Array<AiToolEvent>;
   reportRunUpdates: ReportRun;
   /**
@@ -55972,7 +56350,10 @@ export type Subscription = {
   userActivityUpdates: ActivityLog;
   /** Subscribe to when user is mentioned in comments */
   userMentioned: UserMentionedEvent;
-  /** Subscribe to real-time user presence on a file Useful for showing who's currently viewing/editing a file */
+  /**
+   * Subscribe to real-time user presence on a file
+   * Useful for showing who's currently viewing/editing a file
+   */
   userPresence: UserPresenceEvent;
   /** Real-time audit events for the workspace */
   vibeAuditLogCreated: VibeAuditLog;
@@ -55980,9 +56361,18 @@ export type Subscription = {
   vibeStatusChanged: Vibe;
   /** Subscribe to vibe updates */
   vibeUpdated: Vibe;
-  /** Stream of all agent health probe results for the workspace. Replaces client-side polling of vibecontrolsAgentHealthProbes — emits the full array each time any agent's health changes (or on a 30s heartbeat). */
+  /**
+   * Stream of all agent health probe results for the workspace. Replaces
+   * client-side polling of vibecontrolsAgentHealthProbes — emits the full
+   * array each time any agent's health changes (or on a 30s heartbeat).
+   */
   vibecontrolsAgentHealthProbeStream: Array<AgentHealthProbeResult>;
-  /** Stream of installed plugins on a single agent. Replaces FE polling of the `agentPlugins` query. The svc proxies the agent's /api/plugins every 30s server-side and emits the new list whenever it diverges from the last snapshot. Pass `agentId` to scope to one agent. */
+  /**
+   * Stream of installed plugins on a single agent. Replaces FE polling of
+   * the `agentPlugins` query. The svc proxies the agent's /api/plugins
+   * every 30s server-side and emits the new list whenever it diverges
+   * from the last snapshot. Pass `agentId` to scope to one agent.
+   */
   vibecontrolsAgentPluginStream: Array<AgentPlugin>;
   /** Subscribe to catalog updates */
   vibecontrolsCatalogUpdated: VibecontrolsCatalog;
@@ -56738,7 +57128,11 @@ export type TagAssignmentList = {
   __typename?: 'TagAssignmentList';
   hasMore: Scalars['Boolean']['output'];
   items: Array<UniversalTagAssignment>;
-  /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+  /**
+   * Opaque cursor pointing to the item immediately after the last item in
+   * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+   * Null when `hasMore` is false.
+   */
   nextCursor?: Maybe<Scalars['String']['output']>;
   total: Scalars['Int']['output'];
 };
@@ -56882,7 +57276,11 @@ export type TagList = {
   __typename?: 'TagList';
   hasMore: Scalars['Boolean']['output'];
   items: Array<UniversalTag>;
-  /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+  /**
+   * Opaque cursor pointing to the item immediately after the last item in
+   * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+   * Null when `hasMore` is false.
+   */
   nextCursor?: Maybe<Scalars['String']['output']>;
   total: Scalars['Int']['output'];
 };
@@ -57803,7 +58201,10 @@ export type TriggerWorkflowInput = {
   workflowKey: Scalars['String']['input'];
 };
 
-/** A managed tunnel exposing a local service to the public internet. Tunnels are workspace-scoped and bound to an agent machine. */
+/**
+ * A managed tunnel exposing a local service to the public internet.
+ * Tunnels are workspace-scoped and bound to an agent machine.
+ */
 export type Tunnel = {
   __typename?: 'Tunnel';
   /** Currently active sessions for this tunnel. */
@@ -57840,16 +58241,31 @@ export type Tunnel = {
   workspaceId: Scalars['ID']['output'];
 };
 
-/** A domain attached to a tunnel. Either a managed subdomain under *.vibetunnels.com (auto-verified at reservation time) or a user-owned custom domain verified via a TXT record challenge. */
+/**
+ * A domain attached to a tunnel. Either a managed subdomain under
+ * *.vibetunnels.com (auto-verified at reservation time) or a user-owned custom
+ * domain verified via a TXT record challenge.
+ */
 export type TunnelDomain = {
   __typename?: 'TunnelDomain';
-  /** Name of the TXT record the user must create for verification (e.g. `_vibetunnels-challenge.example.com`). Only populated for CUSTOM domains in PENDING or VERIFYING state. */
+  /**
+   * Name of the TXT record the user must create for verification
+   * (e.g. `_vibetunnels-challenge.example.com`). Only populated for CUSTOM
+   * domains in PENDING or VERIFYING state.
+   */
   challengeRecordName?: Maybe<Scalars['String']['output']>;
-  /** Verification token value the user must put in the TXT record. Only returned while verification is still in progress — redacted after verification completes. */
+  /**
+   * Verification token value the user must put in the TXT record. Only
+   * returned while verification is still in progress — redacted after
+   * verification completes.
+   */
   challengeToken?: Maybe<Scalars['String']['output']>;
   createdAt: Scalars['DateTime']['output'];
   deletedAt?: Maybe<Scalars['DateTime']['output']>;
-  /** Suggested DNS target (CNAME) the user should point their custom domain at once verification is complete. */
+  /**
+   * Suggested DNS target (CNAME) the user should point their custom domain at
+   * once verification is complete.
+   */
   dnsTargetHint?: Maybe<Scalars['String']['output']>;
   environment?: Maybe<TunnelEnvironment>;
   hostname: Scalars['String']['output'];
@@ -57857,7 +58273,10 @@ export type TunnelDomain = {
   isPrimary: Scalars['Boolean']['output'];
   lastCheckError?: Maybe<Scalars['String']['output']>;
   lastCheckedAt?: Maybe<Scalars['DateTime']['output']>;
-  /** The tunnel this domain is attached to. Null for reserved-but-unattached domains. */
+  /**
+   * The tunnel this domain is attached to. Null for reserved-but-unattached
+   * domains.
+   */
   tunnel?: Maybe<Tunnel>;
   tunnelId?: Maybe<Scalars['ID']['output']>;
   type: TunnelDomainType;
@@ -57923,7 +58342,10 @@ export enum TunnelProtocol {
   Udp = 'UDP'
 }
 
-/** A tunnel provider implementation. Seeded rows: VIBETUNNELS (frp-based) and CLOUDFLARE (cloudflared-based). */
+/**
+ * A tunnel provider implementation. Seeded rows: VIBETUNNELS (frp-based) and
+ * CLOUDFLARE (cloudflared-based).
+ */
 export type TunnelProvider = {
   __typename?: 'TunnelProvider';
   capabilities: TunnelProviderCapabilities;
@@ -57965,7 +58387,10 @@ export enum TunnelProviderKey {
   Vibetunnels = 'VIBETUNNELS'
 }
 
-/** A single tunnel session lifetime. Represents one token-authenticated connection from the agent's provider subprocess to the tunnel server. */
+/**
+ * A single tunnel session lifetime. Represents one token-authenticated
+ * connection from the agent's provider subprocess to the tunnel server.
+ */
 export type TunnelSession = {
   __typename?: 'TunnelSession';
   agentId?: Maybe<Scalars['ID']['output']>;
@@ -57982,13 +58407,21 @@ export type TunnelSession = {
   revokedReason?: Maybe<Scalars['String']['output']>;
   shardId?: Maybe<Scalars['ID']['output']>;
   status: TunnelSessionStatus;
-  /** First 8 hex characters of the token hash — useful for UI identification without exposing the token itself. */
+  /**
+   * First 8 hex characters of the token hash — useful for UI identification
+   * without exposing the token itself.
+   */
   tokenFingerprint: Scalars['String']['output'];
   tunnelId: Scalars['ID']['output'];
   workspaceId: Scalars['ID']['output'];
 };
 
-/** Result of issuing a tunnel session. The token is returned exactly once — the backend stores only its sha256 hash. The agentConfigHint contains provider- specific connection metadata (frps address, proxy name, etc.) that the agent plugin uses to spawn frpc or cloudflared. */
+/**
+ * Result of issuing a tunnel session. The token is returned exactly once — the
+ * backend stores only its sha256 hash. The agentConfigHint contains provider-
+ * specific connection metadata (frps address, proxy name, etc.) that the agent
+ * plugin uses to spawn frpc or cloudflared.
+ */
 export type TunnelSessionIssueResult = {
   __typename?: 'TunnelSessionIssueResult';
   agentConfigHint: Scalars['JSON']['output'];
@@ -58011,7 +58444,10 @@ export enum TunnelSessionStatus {
   Revoked = 'REVOKED'
 }
 
-/** A tunnel server shard (e.g. an frps instance). Backends select a shard when issuing a session. */
+/**
+ * A tunnel server shard (e.g. an frps instance). Backends select a shard when
+ * issuing a session.
+ */
 export type TunnelShard = {
   __typename?: 'TunnelShard';
   capacity: Scalars['Int']['output'];
@@ -58078,7 +58514,10 @@ export type TypingIndicatorPayload = {
   userId: Scalars['ID']['output'];
 };
 
-/** Persisted UI state for user sessions. Stores active vibe, panel layout, and user preferences. */
+/**
+ * Persisted UI state for user sessions.
+ * Stores active vibe, panel layout, and user preferences.
+ */
 export type UiSession = {
   __typename?: 'UISession';
   /** Currently active session */
@@ -58115,7 +58554,10 @@ export type UninstallAppPayload = {
   success: Scalars['Boolean']['output'];
 };
 
-/** UniversalTag type stub - exists in wspace-tags-svc Federation stub for referencing tags from other services */
+/**
+ * UniversalTag type stub - exists in wspace-tags-svc
+ * Federation stub for referencing tags from other services
+ */
 export type UniversalTag = {
   __typename?: 'UniversalTag';
   ancestors: Array<UniversalTag>;
@@ -59234,7 +59676,10 @@ export type UpdateFileInput = {
   description?: InputMaybe<Scalars['String']['input']>;
   folderId?: InputMaybe<Scalars['ID']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Replaces the row's `File.tags` Json column on update. */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+   * records. Replaces the row's `File.tags` Json column on update.
+   */
   tags?: InputMaybe<Scalars['JSON']['input']>;
   visibility?: InputMaybe<FileVisibility>;
 };
@@ -59271,7 +59716,10 @@ export type UpdateFolderInput = {
   description?: InputMaybe<Scalars['String']['input']>;
   icon?: InputMaybe<Scalars['String']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Replaces the row's `Folder.tags` Json column on update. */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+   * records. Replaces the row's `Folder.tags` Json column on update.
+   */
   tags?: InputMaybe<Scalars['JSON']['input']>;
   visibility?: InputMaybe<FileVisibility>;
 };
@@ -60572,15 +61020,25 @@ export type UpdateVibeInput = {
   context?: InputMaybe<ContextInput>;
   description?: InputMaybe<Scalars['String']['input']>;
   environmentVariables?: InputMaybe<Scalars['JSON']['input']>;
-  /** Partial feature flag overrides ({ featureId: boolean }). Provided keys are merged on top of the existing stored value; omitted keys are left untouched. Unknown feature ids are ignored. */
+  /**
+   * Partial feature flag overrides ({ featureId: boolean }). Provided keys are
+   * merged on top of the existing stored value; omitted keys are left untouched.
+   * Unknown feature ids are ignored.
+   */
   featureFlags?: InputMaybe<Scalars['JSON']['input']>;
   gitBranch?: InputMaybe<Scalars['String']['input']>;
   metadata?: InputMaybe<Scalars['JSON']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
   status?: InputMaybe<VibeStatus>;
-  /** Legacy tag input (string array). Use `tagsV2` for the canonical `[{key,value,...}]` shape (marqueue §251). Both fields are still written. */
+  /**
+   * Legacy tag input (string array). Use `tagsV2` for the canonical
+   * `[{key,value,...}]` shape (marqueue §251). Both fields are still written.
+   */
   tags?: InputMaybe<Array<Scalars['String']['input']>>;
-  /** Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}` records. When provided, takes precedence over legacy `tags`. */
+  /**
+   * Canonical universal-tag input (marqueue §251). JSON array of `{key,value,...}`
+   * records. When provided, takes precedence over legacy `tags`.
+   */
   tagsV2?: InputMaybe<Scalars['JSON']['input']>;
 };
 
@@ -60893,7 +61351,10 @@ export type UploadFileInput = {
   s3Bucket: Scalars['String']['input'];
   s3Key: Scalars['String']['input'];
   size: Scalars['BigInt']['input'];
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}` records. Backed by the canonical `File.tags` Json column. */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key,value,...}`
+   * records. Backed by the canonical `File.tags` Json column.
+   */
   tags?: InputMaybe<Scalars['JSON']['input']>;
   visibility?: InputMaybe<FileVisibility>;
 };
@@ -61848,7 +62309,10 @@ export enum VersionStatus {
   Published = 'PUBLISHED'
 }
 
-/** A development project or repository representing a development environment. Vibes can be organized hierarchically and support various types (local, remote, docker, cloud). */
+/**
+ * A development project or repository representing a development environment.
+ * Vibes can be organized hierarchically and support various types (local, remote, docker, cloud).
+ */
 export type Vibe = {
   __typename?: 'Vibe';
   /** Agent managing this vibe */
@@ -61867,11 +62331,18 @@ export type Vibe = {
   deletedAt?: Maybe<Scalars['DateTime']['output']>;
   /** Vibe description */
   description?: Maybe<Scalars['String']['output']>;
-  /** Per-vibe feature toggles after merging stored overrides on top of the catalog defaults. Always returns a value for every known feature id. */
+  /**
+   * Per-vibe feature toggles after merging stored overrides on top of the catalog defaults.
+   * Always returns a value for every known feature id.
+   */
   effectiveFeatureFlags: Scalars['JSON']['output'];
   /** Environment variables */
   environmentVariables?: Maybe<Scalars['JSON']['output']>;
-  /** Raw per-vibe feature toggles as stored on the vibe. Shape: { "<featureId>": boolean }. Missing keys fall back to the catalog default. Use `effectiveFeatureFlags` for the merged view that the UI should drive off. */
+  /**
+   * Raw per-vibe feature toggles as stored on the vibe.
+   * Shape: { "<featureId>": boolean }. Missing keys fall back to the catalog default.
+   * Use `effectiveFeatureFlags` for the merged view that the UI should drive off.
+   */
   featureFlags?: Maybe<Scalars['JSON']['output']>;
   /** Current Git branch */
   gitBranch?: Maybe<Scalars['String']['output']>;
@@ -61899,11 +62370,15 @@ export type Vibe = {
   status: VibeStatus;
   tagAssignments: Array<EntityTagAssignment>;
   /**
-   * Tags for categorization (legacy String[] shape). Backwards-compat projection of the canonical `tagsV2` Json column (marqueue §251).
+   * Tags for categorization (legacy String[] shape).
+   * Backwards-compat projection of the canonical `tagsV2` Json column (marqueue §251).
    * @deprecated Use tagsV2 (canonical Json shape). This field will be removed once consumers migrate.
    */
   tags: Array<Scalars['String']['output']>;
-  /** Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}` records mirroring `wspace-workspace-svc` Project.tags shape. */
+  /**
+   * Universal entity-owned tags (marqueue §251). JSON array of `{key, value, ...}`
+   * records mirroring `wspace-workspace-svc` Project.tags shape.
+   */
   tagsV2: Scalars['JSON']['output'];
   /** Vibe type */
   type: VibeType;
@@ -61970,7 +62445,10 @@ export type VibeAuditDayCount = {
 };
 
 export type VibeAuditDeleteInput = {
-  /** Reason for deleting this audit log entry (required for compliance). This deletion is itself recorded as an audit event. */
+  /**
+   * Reason for deleting this audit log entry (required for compliance).
+   * This deletion is itself recorded as an audit event.
+   */
   reason: Scalars['String']['input'];
 };
 
@@ -61984,7 +62462,10 @@ export type VibeAuditExportInput = {
   format?: InputMaybe<VibeAuditExportFormat>;
 };
 
-/** An audit log entry recording a single operation within VibeControls. Captures who did what, when, on which resource, with full state snapshots. */
+/**
+ * An audit log entry recording a single operation within VibeControls.
+ * Captures who did what, when, on which resource, with full state snapshots.
+ */
 export type VibeAuditLog = {
   __typename?: 'VibeAuditLog';
   action: VibeAuditAction;
@@ -62317,7 +62798,10 @@ export type VibeDeckShareLinkList = {
   total: Scalars['Int']['output'];
 };
 
-/** Result of validating a share link token. Used by the public shared page to determine if the link is valid and what access it grants. */
+/**
+ * Result of validating a share link token. Used by the public shared page
+ * to determine if the link is valid and what access it grants.
+ */
 export type VibeDeckShareLinkValidation = {
   __typename?: 'VibeDeckShareLinkValidation';
   allowIframe?: Maybe<Scalars['Boolean']['output']>;
@@ -62400,7 +62884,10 @@ export enum VibecontrolsActionType {
   Workflow = 'WORKFLOW'
 }
 
-/** A service running on a host machine that manages local development environments. Agents execute sessions and manage vibes. */
+/**
+ * A service running on a host machine that manages local development environments.
+ * Agents execute sessions and manage vibes.
+ */
 export type VibecontrolsAgent = {
   __typename?: 'VibecontrolsAgent';
   /** API key for authenticating with the agent (changes on agent restart) */
@@ -62452,7 +62939,11 @@ export type VibecontrolsAgent = {
   targetId: Scalars['String']['output'];
   /** Tunnel connection status */
   tunnelStatus?: Maybe<Scalars['String']['output']>;
-  /** Tunnel URL for remote access — single canonical URL the platform uses to reach the agent (legacy `apiUrl` was consolidated into this field on 2026-05-01). */
+  /**
+   * Tunnel URL for remote access — single canonical URL the platform uses
+   * to reach the agent (legacy `apiUrl` was consolidated into this field
+   * on 2026-05-01).
+   */
   tunnelUrl?: Maybe<Scalars['String']['output']>;
   /** Timestamp when last updated */
   updatedAt: Scalars['DateTime']['output'];
@@ -62479,7 +62970,11 @@ export type VibecontrolsAgentList = {
   total: Scalars['Int']['output'];
 };
 
-/** Result of `vibecontrolsAgentNetworkLookup` — the live tunnel URL and a peer API key the caller can use to talk to the target. The key is minted fresh on every lookup and bound to the operation tag for audit logging. */
+/**
+ * Result of `vibecontrolsAgentNetworkLookup` — the live tunnel URL and a
+ * peer API key the caller can use to talk to the target. The key is minted
+ * fresh on every lookup and bound to the operation tag for audit logging.
+ */
 export type VibecontrolsAgentNetworkLookupResult = {
   __typename?: 'VibecontrolsAgentNetworkLookupResult';
   expiresAt?: Maybe<Scalars['DateTime']['output']>;
@@ -62488,7 +62983,10 @@ export type VibecontrolsAgentNetworkLookupResult = {
   tunnelUrl: Scalars['String']['output'];
 };
 
-/** A named profile hosted by an agent. The profile's `name` is the path segment used when reaching `/api/profiles/<name>/...` on the agent. */
+/**
+ * A named profile hosted by an agent. The profile's `name` is the path
+ * segment used when reaching `/api/profiles/<name>/...` on the agent.
+ */
 export type VibecontrolsAgentProfile = {
   __typename?: 'VibecontrolsAgentProfile';
   agentId: Scalars['ID']['output'];
@@ -62517,7 +63015,10 @@ export type VibecontrolsAnalyticsInput = {
   vibeId?: InputMaybe<Scalars['ID']['input']>;
 };
 
-/** Consolidated analytics result for all VibeControls entities. Fields are nullable — null means the entity was not requested via entityTypes filter. */
+/**
+ * Consolidated analytics result for all VibeControls entities.
+ * Fields are nullable — null means the entity was not requested via entityTypes filter.
+ */
 export type VibecontrolsAnalyticsResult = {
   __typename?: 'VibecontrolsAnalyticsResult';
   actions?: Maybe<ActionAnalytics>;
@@ -62538,7 +63039,10 @@ export type VibecontrolsAnalyticsResult = {
   webhooks?: Maybe<WebhookAnalytics>;
 };
 
-/** A curated collection of components and vibes within a workspace. Catalogs support visibility controls, dependency graphs, and aggregated SBOMs. */
+/**
+ * A curated collection of components and vibes within a workspace.
+ * Catalogs support visibility controls, dependency graphs, and aggregated SBOMs.
+ */
 export type VibecontrolsCatalog = {
   __typename?: 'VibecontrolsCatalog';
   /** Number of components in this catalog */
@@ -62651,7 +63155,10 @@ export type VibecontrolsCloneTemplateInput = {
   workspaceId?: InputMaybe<Scalars['ID']['input']>;
 };
 
-/** A software component (microservice, library, API, etc.) registered in the service catalog. Components can be organized into catalogs, scored via scorecards, and published as templates. */
+/**
+ * A software component (microservice, library, API, etc.) registered in the service catalog.
+ * Components can be organized into catalogs, scored via scorecards, and published as templates.
+ */
 export type VibecontrolsComponent = {
   __typename?: 'VibecontrolsComponent';
   /** Number of catalogs this component belongs to */
@@ -62789,7 +63296,12 @@ export type VibecontrolsDocsBuildImageList = {
   total: Scalars['Int']['output'];
 };
 
-/** Image pull policy for sandbox builder pods (mirrors Kubernetes semantics): - IF_NOT_PRESENT (default): pull only if missing from the node cache. - ALWAYS: pull on every build (use when imageRef is a mutable tag). - DIGEST_ONLY: refuse to schedule unless imageRef is a digest pin (sha256:...). */
+/**
+ * Image pull policy for sandbox builder pods (mirrors Kubernetes semantics):
+ *   - IF_NOT_PRESENT (default): pull only if missing from the node cache.
+ *   - ALWAYS: pull on every build (use when imageRef is a mutable tag).
+ *   - DIGEST_ONLY: refuse to schedule unless imageRef is a digest pin (sha256:...).
+ */
 export enum VibecontrolsDocsBuildImagePullPolicy {
   Always = 'ALWAYS',
   DigestOnly = 'DIGEST_ONLY',
@@ -62988,7 +63500,11 @@ export enum VibecontrolsDocsSiteVisibility {
   Public = 'PUBLIC'
 }
 
-/** Decrypted integration token returned to the agent. Same shape as `ConnectionToken` from wspace-integrations-svc, kept local so we don't have to extend a federated type owned by another subgraph. */
+/**
+ * Decrypted integration token returned to the agent. Same shape as
+ * `ConnectionToken` from wspace-integrations-svc, kept local so we don't
+ * have to extend a federated type owned by another subgraph.
+ */
 export type VibecontrolsIntegrationToken = {
   __typename?: 'VibecontrolsIntegrationToken';
   accessToken: Scalars['String']['output'];
@@ -63000,10 +63516,17 @@ export type VibecontrolsIntegrationToken = {
   tokenType: Scalars['String']['output'];
 };
 
-/** Result of `vibecontrolsResolveIntegrationToken` — a passthrough of the upstream `ConnectionTokenResult` from wspace-integrations-svc, narrowed to the fields agents actually need at runtime. */
+/**
+ * Result of `vibecontrolsResolveIntegrationToken` — a passthrough of the
+ * upstream `ConnectionTokenResult` from wspace-integrations-svc, narrowed to
+ * the fields agents actually need at runtime.
+ */
 export type VibecontrolsIntegrationTokenResult = {
   __typename?: 'VibecontrolsIntegrationTokenResult';
-  /** Current connection status after resolution (e.g. ACTIVE, EXPIRED, REVOKED). */
+  /**
+   * Current connection status after resolution
+   * (e.g. ACTIVE, EXPIRED, REVOKED).
+   */
   connectionStatus: Scalars['String']['output'];
   /** Error message if `success` is false. */
   error?: Maybe<Scalars['String']['output']>;
@@ -63015,7 +63538,10 @@ export type VibecontrolsIntegrationTokenResult = {
   wasRefreshed: Scalars['Boolean']['output'];
 };
 
-/** A markdown-formatted note associated with a vibe or workspace. Notes support tagging, pinning, and full-text search. */
+/**
+ * A markdown-formatted note associated with a vibe or workspace.
+ * Notes support tagging, pinning, and full-text search.
+ */
 export type VibecontrolsNote = {
   __typename?: 'VibecontrolsNote';
   /** Markdown content */
@@ -63194,7 +63720,10 @@ export enum VibecontrolsSessionType {
   Zellij = 'ZELLIJ'
 }
 
-/** A reusable template created from a component snapshot. Templates can be instantiated to create new components. */
+/**
+ * A reusable template created from a component snapshot.
+ * Templates can be instantiated to create new components.
+ */
 export type VibecontrolsTemplate = {
   __typename?: 'VibecontrolsTemplate';
   /** Template category classification */
@@ -63376,7 +63905,11 @@ export type VocabularyList = {
   __typename?: 'VocabularyList';
   hasMore: Scalars['Boolean']['output'];
   items: Array<TagVocabulary>;
-  /** Opaque cursor pointing to the item immediately after the last item in `items`. Pass it back as `pagination.cursor` to fetch the next page. Null when `hasMore` is false. */
+  /**
+   * Opaque cursor pointing to the item immediately after the last item in
+   * `items`. Pass it back as `pagination.cursor` to fetch the next page.
+   * Null when `hasMore` is false.
+   */
   nextCursor?: Maybe<Scalars['String']['output']>;
   total: Scalars['Int']['output'];
 };
@@ -63525,7 +64058,10 @@ export type WeatherMonthlySummary = {
   year: Scalars['Int']['output'];
 };
 
-/** Webhook configuration for event notifications. Webhooks receive HTTP POST requests when subscribed events occur. */
+/**
+ * Webhook configuration for event notifications.
+ * Webhooks receive HTTP POST requests when subscribed events occur.
+ */
 export type Webhook = {
   __typename?: 'Webhook';
   /** Scoped agent IDs (empty = all agents) */