@cadenya/cadenya 1.0.2 → 1.2.0

package/src/types.ts

@@ -10,16 +10,52 @@
 export type AIProviderConfig =
   | AIProviderConfig_Openrouter
   | AIProviderConfig_Openai
-  | AIProviderConfig_OpenaiCompatible;
+  | AIProviderConfig_OpenaiCompatible
+  | AIProviderConfig_Vertex
+  | AIProviderConfig_Bedrock;
 
 /**
  * AIProviderCredential is the secret material used to authenticate with a
  *  provider. The set case must correspond to AIProviderKeySpec.provider. The
- *  server encrypts the serialized message at rest and never returns it on reads.
+ *  server classifies and encrypts sensitive fields at rest and never returns
+ *  secret values on reads.
  */
 export type AIProviderCredential =
   | AIProviderCredential_ApiKey
-  | AIProviderCredential_Headers;
+  | AIProviderCredential_Headers
+  | AIProviderCredential_GoogleServiceAccount
+  | AIProviderCredential_AwsAccessKey;
+
+/**
+ * AIProviderCredentialFieldStatus is the safe read representation of one
+ *  credential field. Value is populated only when sensitive is false.
+ */
+export interface AIProviderCredentialFieldStatus {
+  name?: string;
+  sensitive?: boolean;
+  configured?: boolean;
+  value?: string;
+}
+
+/**
+ * AIProviderCredentialPatch changes selected fields of the current credential.
+ *  Omitted values are retained and clear_fields explicitly removes optional
+ *  fields. Changing type replaces the credential and requires all mandatory
+ *  fields for the new type.
+ */
+export interface AIProviderCredentialPatch {
+  credentials?: AIProviderCredential;
+  clearFields?: Array<string>;
+}
+
+/**
+ * AIProviderCredentialStatus describes the stored authentication method and
+ *  its fields without returning secret material.
+ */
+export interface AIProviderCredentialStatus {
+  type?: string;
+  fields?: Array<AIProviderCredentialFieldStatus>;
+}
 
 /**
  * AIProviderKey is a credential for an AI provider, scoped to a workspace.
@@ -38,6 +74,11 @@ export interface AIProviderKey {
   info?: AIProviderKeyInfo;
 }
 
+/**
+ * How models on this key are maintained; see ModelManagement.
+ */
+export type AiProviderKeyInfoModelManagement = 'MODEL_MANAGEMENT_UNSPECIFIED' | 'MODEL_MANAGEMENT_CADENYA' | 'MODEL_MANAGEMENT_SYNCED' | 'MODEL_MANAGEMENT_CUSTOMIZABLE' | 'MODEL_MANAGEMENT_MANUAL';
+
 /**
  * AIProviderKeyInfo carries server-derived, read-only details about a key, for
  *  AI provider management UIs.
@@ -56,12 +97,21 @@ export interface AIProviderKeyInfo {
    *  These are not added or maintained by account administrators.
    */
   isPromotional: boolean;
+  /**
+   * Safe-to-display credential state. Secret values are never populated;
+   *  configured reports whether a value is present without revealing it.
+   */
+  credentialStatus?: AIProviderCredentialStatus;
+  /**
+   * How models on this key are maintained; see ModelManagement.
+   */
+  modelManagement: AiProviderKeyInfoModelManagement;
 }
 
 /**
  * The AI provider this key authenticates against.
  */
-export type AiProviderKeySpecProvider = 'AI_PROVIDER_UNSPECIFIED' | 'AI_PROVIDER_OPENROUTER' | 'AI_PROVIDER_OPENAI' | 'AI_PROVIDER_ANTHROPIC' | 'AI_PROVIDER_GEMINI' | 'AI_PROVIDER_OPENAI_COMPATIBLE';
+export type AiProviderKeySpecProvider = 'AI_PROVIDER_UNSPECIFIED' | 'AI_PROVIDER_OPENROUTER' | 'AI_PROVIDER_OPENAI' | 'AI_PROVIDER_ANTHROPIC' | 'AI_PROVIDER_GEMINI' | 'AI_PROVIDER_OPENAI_COMPATIBLE' | 'AI_PROVIDER_VERTEX' | 'AI_PROVIDER_BEDROCK';
 
 export interface AIProviderKeySpec {
   /**
@@ -75,8 +125,9 @@ export interface AIProviderKeySpec {
   credentials?: AIProviderCredential;
   /**
    * Non-secret, provider-specific settings (OpenAI org/project, OpenRouter
-   *  region, OpenAI-compatible base URL). The set case must correspond to
-   *  `provider`. Returned on reads. Optional: omit to accept provider defaults.
+   *  region, OpenAI-compatible base URL, Vertex project/location, or Bedrock
+   *  Region). The set case must correspond to `provider`. Returned on reads.
+   *  Optional for providers that have usable defaults.
    */
   config?: AIProviderConfig;
 }
@@ -223,7 +274,8 @@ export interface AccountSpec {
 /**
  * Attach a single tool, tool set, or sub-agent to a variation. Exactly one
  *  of the target fields must be set; the assignment kind is inferred from the
- *  populated field.
+ *  populated field. Adding an existing target returns AlreadyExists.
+ *  All targets must be in the variation's workspace and eligible for assignment.
  */
 export type AddAgentVariationAssignmentRequest =
   | AddAgentVariationAssignmentRequest_ToolId
@@ -231,9 +283,10 @@ export type AddAgentVariationAssignmentRequest =
   | AddAgentVariationAssignmentRequest_SubAgentId;
 
 /**
- * Attach a memory layer to a variation. The request is rejected when:
+ * Attach a memory layer to a variation. Use UpdateAgentVariationMemoryLayer or
+ *  replace the spec list to reposition an existing layer. Rejected when:
+ *    - the layer is already assigned, regardless of position (AlreadyExists)
  *    - the layer is system-managed (FailedPrecondition)
- *    - the layer is already assigned to this variation (AlreadyExists)
  *    - the variation is already at the 10-assignment cap (FailedPrecondition)
  *    - the position is already in use on this variation (InvalidArgument)
  */
@@ -442,7 +495,7 @@ export interface AgentScheduleSpec_Schedule {
 
 /**
  * Controls how variations are automatically selected when creating objectives
- *  Defaults to RANDOM when unspecified
+ *  Defaults to WEIGHTED when unspecified
  */
 export type AgentSpecVariationSelectionMode = 'VARIATION_SELECTION_MODE_UNSPECIFIED' | 'VARIATION_SELECTION_MODE_RANDOM' | 'VARIATION_SELECTION_MODE_WEIGHTED';
 
@@ -460,9 +513,9 @@ export interface AgentSpec {
   webhookEventsUrl?: string;
   /**
    * Controls how variations are automatically selected when creating objectives
-   *  Defaults to RANDOM when unspecified
+   *  Defaults to WEIGHTED when unspecified
    */
-  variationSelectionMode: AgentSpecVariationSelectionMode;
+  variationSelectionMode?: AgentSpecVariationSelectionMode;
   /**
    * SystemPromptDataSchema enforces the shape of system_prompt_data when objectives are created. This is valuable when using liquid formatting in agent
    *  variation system prompt templates. The schema is also used when the agent is attached as a sub-agent, as it becomes the tool's input parameter schema.
@@ -540,26 +593,27 @@ export interface AgentVariationInfo {
    * Total number of objective feedbacks received for this variation
    */
   feedbackCount: number;
-  /**
-   * All tools, tool sets, and sub-agents assigned to this variation.
-   *  Populated on reads so clients can render a variation's full assignment
-   *  list without calling the add/remove endpoints just to enumerate.
-   */
-  assignments: Array<VariationAssignment>;
-  /**
-   * Read-only list of memory layer assignments for this variation,
-   *  returned in ascending `position` (most specific first — resolution
-   *  order). Capped at 10 entries.
-   */
-  memoryLayerAssignments: Array<VariationMemoryLayerAssignment>;
   /**
    * Count of memory layer assignments.
    */
   memoryLayerCount: number;
+  /**
+   * Number of distinct callable tools available through this variation's
+   *  assignments after normalization. Expands tool sets and deduplicates tools
+   *  also assigned directly. Each sub-agent contributes one callable tool;
+   *  its own assignments are not expanded. Counts the full normalized set,
+   *  regardless of which tools progressive discovery has loaded.
+   */
+  effectiveToolCount: number;
 }
 
 /**
- * AgentVariationSpec defines the operational configuration for a variation
+ * AgentVariationSpec defines the complete operational configuration for a
+ *  variation, including assignments. Reads always populate both assignment lists,
+ *  even when include_info is false. Create and update validate and persist the
+ *  configuration atomically: any invalid target or cascade rejects the entire
+ *  request. Targets must belong to the variation's workspace and pass the same
+ *  eligibility checks as the dedicated add methods.
  */
 export interface AgentVariationSpec {
   /**
@@ -600,6 +654,22 @@ export interface AgentVariationSpec {
    *  creation is rejected with InvalidArgument.
    */
   firstUserMessageTemplate?: string;
+  /**
+   * Complete set of assigned tools, tool sets, and sub-agents. Order has no
+   *  meaning. Duplicate (target kind, canonical target ID) pairs are collapsed.
+   *  On create, omitted or empty means no assignments. On update, selecting
+   *  spec.assignments in update_mask replaces the entire set; empty clears it.
+   */
+  assignments?: Array<VariationAssignment>;
+  /**
+   * Complete baseline memory cascade, returned in ascending position. At most
+   *  10 whole layers; system-managed layers cannot be assigned. Duplicate layer
+   *  IDs (after alias resolution) or positions are InvalidArgument. Validate the
+   *  final cascade, so swapping two positions in one update is supported.
+   *  On create, omitted or empty means no layers. On update, selecting
+   *  spec.memory_layer_assignments replaces the entire list; empty clears it.
+   */
+  memoryLayerAssignments?: Array<VariationMemoryLayerAssignment>;
 }
 
 /**
@@ -823,11 +893,18 @@ export interface BareMetadata {
   /**
    * Human-readable name of the referenced resource, populated by the server
    *  on reads for convenience. Absent on references to resources that do not
-   *  have a name (e.g., objective tasks).
+   *  have a name.
    */
   name?: string;
 }
 
+/**
+ * BedrockConfig selects the AWS source Region used for Bedrock Runtime calls.
+ */
+export interface BedrockConfig {
+  region?: string;
+}
+
 /**
  * CallableTool is a union that represents a tool that can be called by an agent. In Cadenya, a tool that is used within an agent objective
  *  might be a user-defined tool (IE: MCP, HTTP), another Agent (useful to separate context), or a Cadenya Tool (one Cadenya provides).
@@ -1142,7 +1219,9 @@ export interface CreateAgentRequest {
   metadata: CreateResourceMetadata;
   spec: AgentSpec;
   /**
-   * Optional default variation to add to the agent on create
+   * Optional default variation to add to the agent on create. Its spec accepts
+   *  assignments and memory_layer_assignments using the same atomic validation
+   *  as CreateAgentVariation. Failure rejects the entire agent creation.
    */
   defaultVariation?: CreateAgentVariationRequest;
 }
@@ -1195,6 +1274,26 @@ export interface CreateMemoryLayerRequest {
   spec: MemoryLayerSpec;
 }
 
+/**
+ * Create model request. The model is created on the given AI provider key with
+ *  PROVENANCE_MANUALLY_ENTERED and STATE_ENABLED. The key must be customer
+ *  provided and its provider must accept manual definitions (see
+ *  AIProviderKeyInfo.model_management).
+ */
+export interface CreateModelRequest {
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * The AI provider key the model routes through. Accepts the canonical
+   *  `aipk_…` form or the `external_id:<value>` form.
+   */
+  aiProviderKeyId?: string;
+  metadata: CreateResourceMetadata;
+  spec: ModelSpec;
+}
+
 /**
  * Request to submit feedback for an objective
  */
@@ -1443,6 +1542,24 @@ export interface CredentialAPIKey {
   apiKey?: string;
 }
 
+/**
+ * CredentialAWSAccessKey carries AWS SigV4 credentials. Optional presence is
+ *  used by credential patches so omitted values remain unchanged.
+ */
+export interface CredentialAWSAccessKey {
+  accessKeyId?: string;
+  secretAccessKey?: string;
+  sessionToken?: string;
+}
+
+/**
+ * CredentialGoogleServiceAccount carries an in-memory Google service-account
+ *  credential document.
+ */
+export interface CredentialGoogleServiceAccount {
+  json?: string;
+}
+
 /**
  * CredentialHeaders carries arbitrary HTTP headers sent with every request to
  *  the provider (e.g. {"Authorization": "Bearer ...", "X-Api-Key": "..."}).
@@ -1646,11 +1763,6 @@ export interface ListObjectiveFeedbackResponse {
   pagination?: Page;
 }
 
-export interface ListObjectiveTasksResponse {
-  items: Array<ObjectiveTask>;
-  pagination?: Page;
-}
-
 export interface ListObjectiveToolCallsResponse {
   items: Array<ObjectiveToolCall>;
   pagination?: Page;
@@ -1994,6 +2106,13 @@ export interface MemoryReference {
  */
 export type ModelState = 'STATE_UNSPECIFIED' | 'STATE_ENABLED' | 'STATE_DISABLED';
 
+/**
+ * Where this definition came from. Output only; set at creation. Synced
+ *  models reject edits to metadata.name and spec, manually entered models
+ *  accept them.
+ */
+export type ModelProvenance = 'PROVENANCE_UNSPECIFIED' | 'PROVENANCE_SYNCED_FROM_PROVIDER' | 'PROVENANCE_MANUALLY_ENTERED';
+
 export interface Model {
   /**
    * Resource metadata
@@ -2013,6 +2132,40 @@ export interface Model {
    *  :enable and :disable actions to transition.
    */
   state: ModelState;
+  /**
+   * Where this definition came from. Output only; set at creation. Synced
+   *  models reject edits to metadata.name and spec, manually entered models
+   *  accept them.
+   */
+  provenance: ModelProvenance;
+  /**
+   * Customer price overrides. Output only here; set through UpdateModel with
+   *  pricing_override.* mask paths. When an override is present, spec's price
+   *  fields already reflect it (they are the effective prices).
+   */
+  pricingOverride?: ModelPricingOverride;
+  /**
+   * The rates before any customer override: the catalog rate for a synced
+   *  model, the entered rate for a manually entered one. Output only. When a
+   *  side matches the spec price, an override may still be present; inspect
+   *  pricing_override field presence to determine whether an override is set.
+   */
+  basePricing: ModelBasePricing;
+}
+
+/**
+ * ModelBasePricing is a model's default rates in cents per million tokens,
+ *  unaffected by pricing overrides. Zero means the rate is not known.
+ */
+export interface ModelBasePricing {
+  /**
+   * Default input token rate, in cents per million tokens.
+   */
+  inputPricePerMillionTokens: string;
+  /**
+   * Default output token rate, in cents per million tokens.
+   */
+  outputPricePerMillionTokens: string;
 }
 
 /**
@@ -2037,6 +2190,22 @@ export interface ModelInfo {
   lastUsedAt?: string;
 }
 
+/**
+ * ModelPricingOverride replaces the catalog prices for a model. Each field is
+ *  independent: an absent field keeps the catalog price, a present field (zero
+ *  included) replaces it. Prices are cents per million tokens.
+ */
+export interface ModelPricingOverride {
+  /**
+   * Override for input token price, in cents per million tokens.
+   */
+  inputPricePerMillionTokens?: string;
+  /**
+   * Override for output token price, in cents per million tokens.
+   */
+  outputPricePerMillionTokens?: string;
+}
+
 export interface ModelSpec {
   /**
    * The model provider (e.g., "anthropic", "openai", "google")
@@ -2055,11 +2224,16 @@ export interface ModelSpec {
    */
   maxOutputTokens: number;
   /**
-   * Cost per million input tokens in cents (e.g., 300 = $3.00)
+   * Cost per million input tokens in cents (e.g., 300 = $3.00). On reads this
+   *  is the effective price: the catalog price unless
+   *  Model.pricing_override replaces it. Writes only apply to manually
+   *  entered models; use UpdateModel's pricing_override paths to override a
+   *  synced model's price.
    */
   inputPricePerMillionTokens: string;
   /**
-   * Cost per million output tokens in cents (e.g., 1500 = $15.00)
+   * Cost per million output tokens in cents (e.g., 1500 = $15.00). Effective
+   *  price on reads, see input_price_per_million_tokens.
    */
   outputPricePerMillionTokens: string;
   /**
@@ -2068,6 +2242,15 @@ export interface ModelSpec {
    *  (and its mode) lives here too, as the "reasoning" capability.
    */
   capabilities: Array<ModelSpec_Capability>;
+  /**
+   * The identifier the provider expects in inference requests, exactly as the
+   *  provider spells it: an OpenAI model name, a Vertex publisher model
+   *  resource, a Bedrock inference-profile ID or ARN, or an OpenAI-compatible
+   *  endpoint's model ID. Distinct from metadata.external_id, which is
+   *  Cadenya's slug. Verified with a minimal provider completion on creation
+   *  and whenever the identifier changes.
+   */
+  providerModelId: string;
 }
 
 /**
@@ -2110,7 +2293,7 @@ export interface Notice {
 /**
  * The current lifecycle state of the objective.
  */
-export type ObjectiveState = 'STATE_UNSPECIFIED' | 'STATE_PENDING' | 'STATE_RUNNING' | 'STATE_WAITING' | 'STATE_FAILED' | 'STATE_CANCELLED' | 'STATE_FINALIZED' | 'STATE_TIMED_OUT';
+export type ObjectiveState = 'OBJECTIVE_STATE_UNSPECIFIED' | 'OBJECTIVE_STATE_PENDING' | 'OBJECTIVE_STATE_RUNNING' | 'OBJECTIVE_STATE_WAITING' | 'OBJECTIVE_STATE_FAILED' | 'OBJECTIVE_STATE_CANCELLED' | 'OBJECTIVE_STATE_FINALIZED' | 'OBJECTIVE_STATE_TIMED_OUT';
 
 /**
  * Objective is the data for an objective. It contains the snapshotted fields for the selected agent and variation. Secrets are returned
@@ -2177,7 +2360,7 @@ export interface Objective {
   memoryCascade: Array<MemoryReference>;
   /**
    * The output of the objective, populated when the objective completes. Will match the schema of output_json_schema or output_json_inferred.
-   *  This will only be set if the state of the objective is set to STATE_FINALIZED
+   *  This will only be set if the state of the objective is set to OBJECTIVE_STATE_FINALIZED
    */
   output?: Record<string, unknown>;
   /**
@@ -2342,7 +2525,8 @@ export type ObjectiveEventData =
   | ObjectiveEventData_Finalized
   | ObjectiveEventData_Notice
   | ObjectiveEventData_TimedOut
-  | ObjectiveEventData_Reasoning;
+  | ObjectiveEventData_Reasoning
+  | ObjectiveEventData_StateChanged;
 
 export interface ObjectiveEventInfo {
   objective?: OperationMetadata;
@@ -2467,31 +2651,38 @@ export interface ObjectiveInfo {
 }
 
 /**
- * ObjectiveTask represents a task within an objective, typically created and managed by an AI agent
- *  to track progress toward completing the objective.
+ * The state before this write. OBJECTIVE_STATE_UNSPECIFIED when the
+ *  objective was just created.
  */
-export interface ObjectiveTask {
-  metadata: BareMetadata;
-  data: ObjectiveTaskData;
-}
+export type ObjectiveStateChangedFromState = 'OBJECTIVE_STATE_UNSPECIFIED' | 'OBJECTIVE_STATE_PENDING' | 'OBJECTIVE_STATE_RUNNING' | 'OBJECTIVE_STATE_WAITING' | 'OBJECTIVE_STATE_FAILED' | 'OBJECTIVE_STATE_CANCELLED' | 'OBJECTIVE_STATE_FINALIZED' | 'OBJECTIVE_STATE_TIMED_OUT';
 
-export interface ObjectiveTaskData {
-  /**
-   * The sequential number of this task within the objective (auto-assigned, 1-based)
-   */
-  number: number;
+/**
+ * The state after this write.
+ */
+export type ObjectiveStateChangedToState = 'OBJECTIVE_STATE_UNSPECIFIED' | 'OBJECTIVE_STATE_PENDING' | 'OBJECTIVE_STATE_RUNNING' | 'OBJECTIVE_STATE_WAITING' | 'OBJECTIVE_STATE_FAILED' | 'OBJECTIVE_STATE_CANCELLED' | 'OBJECTIVE_STATE_FINALIZED' | 'OBJECTIVE_STATE_TIMED_OUT';
+
+/**
+ * ObjectiveStateChanged is written every time the objective's lifecycle state
+ *  is set, including the initial move into OBJECTIVE_STATE_PENDING at creation. Terminal
+ *  transitions also write their dedicated event (cancelled, timedOut,
+ *  finalized, error) immediately before this one, so consumers that only care
+ *  about the outcome can keep listening for those.
+ */
+export interface ObjectiveStateChanged {
   /**
-   * Description of the task to be completed
+   * The state before this write. OBJECTIVE_STATE_UNSPECIFIED when the
+   *  objective was just created.
    */
-  task: string;
+  fromState: ObjectiveStateChangedFromState;
   /**
-   * Whether the task has been completed
+   * The state after this write.
    */
-  completed: boolean;
+  toState: ObjectiveStateChangedToState;
   /**
-   * Timestamp when the task was marked as completed
+   * The status message recorded with the transition, if any (e.g.
+   *  "Continued", or the error summary on a failure).
    */
-  completedAt?: string;
+  message?: string;
 }
 
 /**
@@ -2639,6 +2830,11 @@ export interface ObjectiveToolCallResult_ImageBlock {
 
 export interface ObjectiveToolCallResult_TextBlock {
   text: string;
+  /**
+   * Size of the stored text in bytes. Filled by the server at record time;
+   *  zero on results recorded before this field existed.
+   */
+  sizeBytes?: string;
 }
 
 /**
@@ -2936,6 +3132,38 @@ export interface Reasoning {
   content: string;
 }
 
+/**
+ * Detach a target by its foreign key. Removing an unassigned target returns
+ *  NotFound. The parent variation must exist and be accessible.
+ */
+export type RemoveAgentVariationAssignmentRequest =
+  | RemoveAgentVariationAssignmentRequest_ToolId
+  | RemoveAgentVariationAssignmentRequest_ToolSetId
+  | RemoveAgentVariationAssignmentRequest_SubAgentId;
+
+/**
+ * Remove by memory layer ID. An unassigned layer returns NotFound.
+ *  The parent variation must still exist and be accessible.
+ */
+export interface RemoveAgentVariationMemoryLayerRequest {
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * Agent ID. Accepts the canonical `agent_…` form or the `external_id:<value>` form.
+   */
+  agentId?: string;
+  /**
+   * Variation ID. Accepts the canonical `agentvar_…` form or the `external_id:<value>` form.
+   */
+  variationId?: string;
+  /**
+   * Layer to detach. Accepts memlyr_… or external_id:<value>.
+   */
+  memoryLayerId: string;
+}
+
 export type ResolvedSecretSource = 'RESOLVED_SECRET_SOURCE_UNSPECIFIED' | 'RESOLVED_SECRET_SOURCE_WORKSPACE' | 'RESOLVED_SECRET_SOURCE_TOOLSET' | 'RESOLVED_SECRET_SOURCE_OBJECTIVE';
 
 /**
@@ -4163,6 +4391,11 @@ export interface UpdateAIProviderKeyRequest {
    * Fields to update.
    */
   updateMask?: string;
+  /**
+   * Field-level credential changes. This is independent of update_mask;
+   *  legacy clients may continue replacing spec.credentials atomically.
+   */
+  credentialPatch?: AIProviderCredentialPatch;
 }
 
 export interface UpdateAPIKeyRequest {
@@ -4253,7 +4486,7 @@ export interface UpdateAgentScheduleRequest {
 /**
  * Update an existing memory layer assignment. Only `position` is mutable.
  *  A new position that collides with another assignment on the same variation
- *  is rejected with InvalidArgument.
+ *  is rejected with InvalidArgument. An unassigned layer returns NotFound.
  */
 export interface UpdateAgentVariationMemoryLayerRequest {
   /**
@@ -4268,11 +4501,14 @@ export interface UpdateAgentVariationMemoryLayerRequest {
    * Variation ID. Accepts the canonical `agentvar_…` form or the `external_id:<value>` form.
    */
   variationId?: string;
-  id?: string;
+  /**
+   * Layer to reposition. Accepts memlyr_… or external_id:<value>.
+   */
+  memoryLayerId: string;
   /**
    * New position. Only field currently updatable on an assignment.
    */
-  position?: number;
+  position: number;
 }
 
 /**
@@ -4294,7 +4530,13 @@ export interface UpdateAgentVariationRequest {
   metadata?: UpdateResourceMetadata;
   spec?: AgentVariationSpec;
   /**
-   * Fields to update
+   * Fields to update. Assignment lists are replaced as a whole, never merged.
+   *  Select spec.assignments or spec.memory_layer_assignments to replace/clear
+   *  one list. Selecting spec replaces the entire spec (including omitted lists);
+   *  * replaces all mutable fields. Element/index paths are not supported.
+   *  Without a mask, infer paths from non-empty fields: non-empty assignment
+   *  lists replace existing lists, while omitted/empty lists remain unchanged.
+   *  To clear a list, explicitly include its path in the mask.
    */
   updateMask?: string;
 }
@@ -4322,6 +4564,42 @@ export interface UpdateMemoryLayerRequest {
   updateMask?: string;
 }
 
+/**
+ * Update model request. update_mask must list leaf paths: metadata.name,
+ *  metadata.external_id, metadata.labels, spec.provider_model_id,
+ *  spec.provider, spec.family, spec.max_input_tokens, spec.max_output_tokens,
+ *  spec.capabilities, pricing_override.input_price_per_million_tokens, and
+ *  pricing_override.output_price_per_million_tokens. Synced models
+ *  (PROVENANCE_SYNCED_FROM_PROVIDER) reject metadata.name and spec.* paths.
+ *  spec price fields are never writable; price changes go through
+ *  pricing_override, where a masked-but-absent field clears the override.
+ *  Metadata and spec must be present when their respective paths are masked.
+ */
+export interface UpdateModelRequest {
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * Model ID. Accepts the canonical `model_…` form or the `external_id:<value>` form.
+   */
+  id?: string;
+  metadata?: UpdateResourceMetadata;
+  /**
+   * When any spec.* path is masked, send the complete spec (current values
+   *  plus edits); it is validated as a whole.
+   */
+  spec?: ModelSpec;
+  /**
+   * Customer price overrides, applied per masked path.
+   */
+  pricingOverride?: ModelPricingOverride;
+  /**
+   * Fields to update. Required; leaf paths only.
+   */
+  updateMask?: string;
+}
+
 /**
  * UpdateResourceMetadata contains the user-provided fields for updating
  *  a workspace-scoped resource. Read-only fields (id, account_id, workspace_id, profile_id,
@@ -4519,49 +4797,44 @@ export interface UserMessage {
 }
 
 /**
- * A read-only reference to a single tool, tool set, or sub-agent attached to
- *  a variation. Read the full set of assignments via `AgentVariationInfo.assignments`;
- *  mutations go through the dedicated add/remove assignment endpoints.
- * 
- *  The `id` identifies the assignment itself (not the referenced resource) and
- *  is the handle used to remove the assignment. It is returned by the add
- *  endpoint and present on every entry in `AgentVariationInfo.assignments`.
+ * A tool, tool set, or sub-agent assigned to a variation, identified only by
+ *  the target resource ID. The same shape is accepted in a spec and returned
+ *  on reads. Assignment junction records are an internal implementation detail.
  */
 export type VariationAssignment =
-  | VariationAssignment_Tool
-  | VariationAssignment_ToolSet
-  | VariationAssignment_Agent;
+  | VariationAssignment_ToolId
+  | VariationAssignment_ToolSetId
+  | VariationAssignment_SubAgentId;
 
 /**
- * VariationMemoryLayerAssignment attaches a single MemoryLayer to a
- *  variation at a given position in the variation's baseline memory
- *  cascade. A variation has at most one assignment per memory_layer_id.
- * 
- *  Variations only support whole-layer attachments — entry pinning is an
- *  objective-level capability.
+ * A whole memory layer in a variation's baseline memory cascade. Identified
+ *  by the memory layer ID; no assignment junction ID is exposed. Entry pinning
+ *  remains an objective-level capability.
  */
 export interface VariationMemoryLayerAssignment {
   /**
-   * Assignment row id — handle for removing the assignment. Distinct
-   *  from the referenced memory layer's id.
+   * Accepts the canonical memlyr_… ID or external_id:<value> on input.
+   *  Reads always return the canonical ID.
    */
-  id: string;
-  /**
-   * The attached memory layer.
-   */
-  memoryLayer: BareMetadata;
+  memoryLayerId: string;
   /**
-   * Position in the variation's baseline cascade. Position is
-   *  specificity, CSS-style: a LOWER position is more specific and is
-   *  consulted first; the highest-position assignment is the most
-   *  general fallback. Gaps are fine — only relative position matters.
-   *  Positions must be unique within a variation; a request that would
-   *  collide with an existing assignment's position is rejected with
-   *  InvalidArgument.
+   * Position is specificity: lower positions are consulted first; the highest
+   *  position is the most general fallback. Gaps and zero are valid. Positions
+   *  must be unique within a variation. Explicitly required in a full spec;
+   *  only AddAgentVariationMemoryLayer can choose an append position for you.
    */
   position: number;
 }
 
+/**
+ * VertexConfig configures the Google Cloud project and location used by the
+ *  Vertex AI backend. Both are required for service-account authentication.
+ */
+export interface VertexConfig {
+  projectId?: string;
+  location?: string;
+}
+
 export interface WebhookDelivery {
   metadata: OperationMetadata;
   /**
@@ -4575,7 +4848,7 @@ export type WebhookDeliveryDataStatus = 'WEBHOOK_DELIVERY_STATUS_UNSPECIFIED' |
 /**
  * The type of objective event that triggered this webhook delivery
  */
-export type WebhookDeliveryDataEventType = 'OBJECTIVE_EVENT_TYPE_UNSPECIFIED' | 'OBJECTIVE_EVENT_TYPE_USER_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVAL_REQUESTED' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVED' | 'OBJECTIVE_EVENT_TYPE_TOOL_DENIED' | 'OBJECTIVE_EVENT_TYPE_TOOL_CALLED' | 'OBJECTIVE_EVENT_TYPE_ERROR' | 'OBJECTIVE_EVENT_TYPE_ASSISTANT_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_RESULT' | 'OBJECTIVE_EVENT_TYPE_TOOL_ERROR' | 'OBJECTIVE_EVENT_TYPE_CONTEXT_WINDOW_COMPACTED' | 'OBJECTIVE_EVENT_TYPE_MEMORY_READ' | 'OBJECTIVE_EVENT_TYPE_CANCELLED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_SPAWNED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_UPDATED' | 'OBJECTIVE_EVENT_TYPE_FINALIZED' | 'OBJECTIVE_EVENT_TYPE_NOTICE' | 'OBJECTIVE_EVENT_TYPE_TIMED_OUT' | 'OBJECTIVE_EVENT_TYPE_REASONING';
+export type WebhookDeliveryDataEventType = 'OBJECTIVE_EVENT_TYPE_UNSPECIFIED' | 'OBJECTIVE_EVENT_TYPE_USER_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVAL_REQUESTED' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVED' | 'OBJECTIVE_EVENT_TYPE_TOOL_DENIED' | 'OBJECTIVE_EVENT_TYPE_TOOL_CALLED' | 'OBJECTIVE_EVENT_TYPE_ERROR' | 'OBJECTIVE_EVENT_TYPE_ASSISTANT_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_RESULT' | 'OBJECTIVE_EVENT_TYPE_TOOL_ERROR' | 'OBJECTIVE_EVENT_TYPE_CONTEXT_WINDOW_COMPACTED' | 'OBJECTIVE_EVENT_TYPE_MEMORY_READ' | 'OBJECTIVE_EVENT_TYPE_CANCELLED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_SPAWNED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_UPDATED' | 'OBJECTIVE_EVENT_TYPE_FINALIZED' | 'OBJECTIVE_EVENT_TYPE_NOTICE' | 'OBJECTIVE_EVENT_TYPE_TIMED_OUT' | 'OBJECTIVE_EVENT_TYPE_REASONING' | 'OBJECTIVE_EVENT_TYPE_STATE_CHANGED';
 
 export interface WebhookDeliveryData {
   /**
@@ -4920,22 +5193,28 @@ export interface ObjectiveEventWebhookData {
   data: ObjectiveEventWebhookDataData;
 }
 
-export interface VariationAssignment_Tool {
-  type: 'tool';
-  tool: BareMetadata;
-  id: string;
+export interface VariationAssignment_ToolId {
+  type: 'toolId';
+  /**
+   * Canonical tool ID.
+   */
+  toolId: string;
 }
 
-export interface VariationAssignment_ToolSet {
-  type: 'toolSet';
-  toolSet: BareMetadata;
-  id: string;
+export interface VariationAssignment_ToolSetId {
+  type: 'toolSetId';
+  /**
+   * Canonical tool set ID.
+   */
+  toolSetId: string;
 }
 
-export interface VariationAssignment_Agent {
-  type: 'agent';
-  agent: BareMetadata;
-  id: string;
+export interface VariationAssignment_SubAgentId {
+  type: 'subAgentId';
+  /**
+   * Canonical sub-agent ID.
+   */
+  subAgentId: string;
 }
 
 export interface ObjectiveToolCallResult_ContentBlock_Text {
@@ -5263,6 +5542,11 @@ export interface ObjectiveEventData_Reasoning {
   reasoning: Reasoning;
 }
 
+export interface ObjectiveEventData_StateChanged {
+  type: 'stateChanged';
+  stateChanged: ObjectiveStateChanged;
+}
+
 export interface CallableTool_Tool {
   type: 'tool';
   tool: ResourceMetadata;
@@ -5373,6 +5657,57 @@ export interface AddAgentVariationAssignmentRequest_SubAgentId {
   variationId?: string;
 }
 
+export interface RemoveAgentVariationAssignmentRequest_ToolId {
+  type: 'toolId';
+  toolId: string;
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * Agent ID. Accepts the canonical `agent_…` form or the `external_id:<value>` form.
+   */
+  agentId?: string;
+  /**
+   * Variation ID. Accepts the canonical `agentvar_…` form or the `external_id:<value>` form.
+   */
+  variationId?: string;
+}
+
+export interface RemoveAgentVariationAssignmentRequest_ToolSetId {
+  type: 'toolSetId';
+  toolSetId: string;
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * Agent ID. Accepts the canonical `agent_…` form or the `external_id:<value>` form.
+   */
+  agentId?: string;
+  /**
+   * Variation ID. Accepts the canonical `agentvar_…` form or the `external_id:<value>` form.
+   */
+  variationId?: string;
+}
+
+export interface RemoveAgentVariationAssignmentRequest_SubAgentId {
+  type: 'subAgentId';
+  subAgentId: string;
+  /**
+   * Workspace ID.
+   */
+  workspaceId?: string;
+  /**
+   * Agent ID. Accepts the canonical `agent_…` form or the `external_id:<value>` form.
+   */
+  agentId?: string;
+  /**
+   * Variation ID. Accepts the canonical `agentvar_…` form or the `external_id:<value>` form.
+   */
+  variationId?: string;
+}
+
 export interface AIProviderCredential_ApiKey {
   type: 'apiKey';
   /**
@@ -5391,6 +5726,24 @@ export interface AIProviderCredential_Headers {
   headers: CredentialHeaders;
 }
 
+export interface AIProviderCredential_GoogleServiceAccount {
+  type: 'googleServiceAccount';
+  /**
+   * Google service-account JSON for Vertex AI. The server accepts only the
+   *  service_account credential type and never writes the JSON to plaintext
+   *  storage.
+   */
+  googleServiceAccount: CredentialGoogleServiceAccount;
+}
+
+export interface AIProviderCredential_AwsAccessKey {
+  type: 'awsAccessKey';
+  /**
+   * AWS access credentials for Bedrock SigV4 authentication.
+   */
+  awsAccessKey: CredentialAWSAccessKey;
+}
+
 export interface AIProviderConfig_Openrouter {
   type: 'openrouter';
   openrouter: OpenRouterConfig;
@@ -5406,6 +5759,16 @@ export interface AIProviderConfig_OpenaiCompatible {
   openaiCompatible: OpenAICompatibleConfig;
 }
 
+export interface AIProviderConfig_Vertex {
+  type: 'vertex';
+  vertex: VertexConfig;
+}
+
+export interface AIProviderConfig_Bedrock {
+  type: 'bedrock';
+  bedrock: BedrockConfig;
+}
+
 export interface ModelSpec_Capability_Temperature {
   type: 'temperature';
   temperature: Capability_Temperature;
@@ -5447,13 +5810,13 @@ export type AgentServiceListAgentsVariationSelectionMode = 'VARIATION_SELECTION_
 
 export type AgentServiceListAgentFeedbackSentiment = 'FEEDBACK_SENTIMENT_UNSPECIFIED' | 'FEEDBACK_SENTIMENT_POSITIVE' | 'FEEDBACK_SENTIMENT_NEGATIVE';
 
-export type AgentServiceListAgentWebhookDeliveriesEventType = 'OBJECTIVE_EVENT_TYPE_UNSPECIFIED' | 'OBJECTIVE_EVENT_TYPE_USER_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVAL_REQUESTED' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVED' | 'OBJECTIVE_EVENT_TYPE_TOOL_DENIED' | 'OBJECTIVE_EVENT_TYPE_TOOL_CALLED' | 'OBJECTIVE_EVENT_TYPE_ERROR' | 'OBJECTIVE_EVENT_TYPE_ASSISTANT_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_RESULT' | 'OBJECTIVE_EVENT_TYPE_TOOL_ERROR' | 'OBJECTIVE_EVENT_TYPE_CONTEXT_WINDOW_COMPACTED' | 'OBJECTIVE_EVENT_TYPE_MEMORY_READ' | 'OBJECTIVE_EVENT_TYPE_CANCELLED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_SPAWNED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_UPDATED' | 'OBJECTIVE_EVENT_TYPE_FINALIZED' | 'OBJECTIVE_EVENT_TYPE_NOTICE' | 'OBJECTIVE_EVENT_TYPE_TIMED_OUT' | 'OBJECTIVE_EVENT_TYPE_REASONING';
+export type AgentServiceListAgentWebhookDeliveriesEventType = 'OBJECTIVE_EVENT_TYPE_UNSPECIFIED' | 'OBJECTIVE_EVENT_TYPE_USER_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVAL_REQUESTED' | 'OBJECTIVE_EVENT_TYPE_TOOL_APPROVED' | 'OBJECTIVE_EVENT_TYPE_TOOL_DENIED' | 'OBJECTIVE_EVENT_TYPE_TOOL_CALLED' | 'OBJECTIVE_EVENT_TYPE_ERROR' | 'OBJECTIVE_EVENT_TYPE_ASSISTANT_MESSAGE' | 'OBJECTIVE_EVENT_TYPE_TOOL_RESULT' | 'OBJECTIVE_EVENT_TYPE_TOOL_ERROR' | 'OBJECTIVE_EVENT_TYPE_CONTEXT_WINDOW_COMPACTED' | 'OBJECTIVE_EVENT_TYPE_MEMORY_READ' | 'OBJECTIVE_EVENT_TYPE_CANCELLED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_SPAWNED' | 'OBJECTIVE_EVENT_TYPE_SUB_AGENT_UPDATED' | 'OBJECTIVE_EVENT_TYPE_FINALIZED' | 'OBJECTIVE_EVENT_TYPE_NOTICE' | 'OBJECTIVE_EVENT_TYPE_TIMED_OUT' | 'OBJECTIVE_EVENT_TYPE_REASONING' | 'OBJECTIVE_EVENT_TYPE_STATE_CHANGED';
 
 export type MemoryServiceListMemoryLayersType = 'MEMORY_LAYER_TYPE_UNSPECIFIED' | 'MEMORY_LAYER_TYPE_EPISODIC' | 'MEMORY_LAYER_TYPE_SKILLS';
 
 export type ModelServiceListModelsState = 'STATE_UNSPECIFIED' | 'STATE_ENABLED' | 'STATE_DISABLED';
 
-export type ObjectiveServiceListObjectivesState = 'STATE_UNSPECIFIED' | 'STATE_PENDING' | 'STATE_RUNNING' | 'STATE_WAITING' | 'STATE_FAILED' | 'STATE_CANCELLED' | 'STATE_FINALIZED' | 'STATE_TIMED_OUT';
+export type ObjectiveServiceListObjectivesState = 'OBJECTIVE_STATE_UNSPECIFIED' | 'OBJECTIVE_STATE_PENDING' | 'OBJECTIVE_STATE_RUNNING' | 'OBJECTIVE_STATE_WAITING' | 'OBJECTIVE_STATE_FAILED' | 'OBJECTIVE_STATE_CANCELLED' | 'OBJECTIVE_STATE_FINALIZED' | 'OBJECTIVE_STATE_TIMED_OUT';
 
 export type ObjectiveServiceListObjectiveToolCallsStatus = 'TOOL_CALL_STATUS_UNSPECIFIED' | 'TOOL_CALL_STATUS_AUTO_APPROVED' | 'TOOL_CALL_STATUS_WAITING_FOR_APPROVAL' | 'TOOL_CALL_STATUS_APPROVED' | 'TOOL_CALL_STATUS_DENIED';
 
@@ -5514,6 +5877,8 @@ export interface ObjectiveEpisodicConfigParam {
   key: string;
 }
 
+export type RemoveAgentVariationAssignmentRequestParam = RemoveAgentVariationAssignmentRequest_ToolIdParam | RemoveAgentVariationAssignmentRequest_ToolSetIdParam | RemoveAgentVariationAssignmentRequest_SubAgentIdParam;
+
 export interface WidgetSessionSpecParam {
   /**
    * Widget this session is minted against. Accepts the canonical `wgt_…` form
@@ -5567,6 +5932,21 @@ export interface AddAgentVariationAssignmentRequest_SubAgentIdParam {
   subAgentId: string;
 }
 
+export interface RemoveAgentVariationAssignmentRequest_ToolIdParam {
+  type: 'toolId';
+  toolId: string;
+}
+
+export interface RemoveAgentVariationAssignmentRequest_ToolSetIdParam {
+  type: 'toolSetId';
+  toolSetId: string;
+}
+
+export interface RemoveAgentVariationAssignmentRequest_SubAgentIdParam {
+  type: 'subAgentId';
+  subAgentId: string;
+}
+
 
 // ---- request wire projections (strip readOnly at runtime) ----
 
@@ -5619,6 +5999,16 @@ export function wireObjectiveEpisodicConfig(value: ObjectiveEpisodicConfigParam
   return out;
 }
 
+export function wireRemoveAgentVariationAssignmentRequest(value: RemoveAgentVariationAssignmentRequestParam | null | undefined): unknown {
+  if (value == null || typeof value !== 'object') return value;
+  switch ((value as never as Record<string, unknown>)["type"]) {
+    case "toolId": return wireRemoveAgentVariationAssignmentRequest_ToolId((value as never));
+    case "toolSetId": return wireRemoveAgentVariationAssignmentRequest_ToolSetId((value as never));
+    case "subAgentId": return wireRemoveAgentVariationAssignmentRequest_SubAgentId((value as never));
+    default: return value;
+  }
+}
+
 export function wireWidgetSessionSpec(value: WidgetSessionSpecParam | null | undefined): unknown {
   if (value == null || typeof value !== 'object') return value;
   const out: Record<string, unknown> = {};
@@ -5654,3 +6044,27 @@ export function wireAddAgentVariationAssignmentRequest_SubAgentId(value: AddAgen
   return out;
 }
 
+export function wireRemoveAgentVariationAssignmentRequest_ToolId(value: RemoveAgentVariationAssignmentRequest_ToolIdParam | null | undefined): unknown {
+  if (value == null || typeof value !== 'object') return value;
+  const out: Record<string, unknown> = {};
+  if (value.type !== undefined) out["type"] = value.type;
+  if (value.toolId !== undefined) out["toolId"] = value.toolId;
+  return out;
+}
+
+export function wireRemoveAgentVariationAssignmentRequest_ToolSetId(value: RemoveAgentVariationAssignmentRequest_ToolSetIdParam | null | undefined): unknown {
+  if (value == null || typeof value !== 'object') return value;
+  const out: Record<string, unknown> = {};
+  if (value.type !== undefined) out["type"] = value.type;
+  if (value.toolSetId !== undefined) out["toolSetId"] = value.toolSetId;
+  return out;
+}
+
+export function wireRemoveAgentVariationAssignmentRequest_SubAgentId(value: RemoveAgentVariationAssignmentRequest_SubAgentIdParam | null | undefined): unknown {
+  if (value == null || typeof value !== 'object') return value;
+  const out: Record<string, unknown> = {};
+  if (value.type !== undefined) out["type"] = value.type;
+  if (value.subAgentId !== undefined) out["subAgentId"] = value.subAgentId;
+  return out;
+}
+