@cat-factory/gatekeeper-bindings 0.9.0 → 0.10.0

package/README.md

@@ -69,6 +69,12 @@ them independently is how one gets them backwards:
   unannotated mutation counts as destructive and non-idempotent).
 - `PUBLIC_API_SCOPE_LADDER`: the scope ranking itself, emitted from the spec's
   `x-public-api-scopes`.
+- `renderSessionTypes(request)`: the `.d.ts` an object-capability session serves as its TypeScript
+  types, composed from the generated `SESSION_METHOD_SIGNATURES` for exactly the operations a
+  policy granted. Per-grant rather than shipped whole, because a file naming the full surface would
+  promise methods the object does not have. It THROWS on a name it has no signature for: a silently
+  dropped method reads to an agent exactly like an operation the deployment does not serve, and the
+  two need opposite fixes.
 
 The ladder helpers **throw on a scope they do not carry** rather than ranking it below `read`:
 a deployment one release ahead of this package must read as version skew, never as a key with no
@@ -105,6 +111,21 @@ Two routes are deliberately absent from the table because they have no honest op
 `GET /api/v1/openapi.json` (spec discovery) and `ALL /api/v1/mcp` (the hosted MCP endpoint). Both
 gate at `read` on the server.
 
+## What is generated
+
+Two files, both by `pnpm gen:sdk` and both guarded against drift by `pnpm check:sdk`:
+
+| File                             | What it carries                                                                                       |
+| -------------------------------- | ----------------------------------------------------------------------------------------------------- |
+| `src/bindings.generated.ts`      | The operation table: scope floors, mutation and transport metadata, consequence hints, invoke thunks. |
+| `src/session-types.generated.ts` | One TypeScript method signature per operation, for composing a granted session's `.d.ts`.             |
+
+The signatures carry fully typed ARGUMENTS (path parameters, query keys with their requiredness, a
+body where the operation takes one) and an `unknown` result. That is deliberate rather than a gap:
+a session relays the deployment's own decoded JSON, and the authority for those shapes is the
+OpenAPI document at `GET /api/v1/openapi.json`, which every deployment serves. Inlining the model
+tree would put a second copy of it inside every consumer's bundle, free to disagree with the first.
+
 ## Configuration and customization
 
 Nothing in this package is configured or customized: it is generated data plus pure helpers, and

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 import { type GatekeeperBinding, type PublicApiScope } from './bindings.generated.js';
 export { GATEKEEPER_BINDINGS, PUBLIC_API_SCOPE_LADDER, TELEMETRY_BINDINGS, type GatekeeperBinding, type GatekeeperQueryParam, type PublicApiScope, type TelemetrySink, } from './bindings.generated.js';
+export { SESSION_METHOD_SIGNATURES, type SessionMethodSignature, } from './session-types.generated.js';
 /**
  * Whether a key of scope `have` satisfies a floor of `need`. The ladder is inclusive: every rung
  * can do everything below it, so this is a rank comparison over `PUBLIC_API_SCOPE_LADDER`, whose
@@ -38,4 +39,29 @@ export declare function bindingsWithinScope(scope: PublicApiScope): GatekeeperBi
  * the caller reports rather than a thrown surprise.
  */
 export declare function bindingByName(name: string): GatekeeperBinding | undefined;
+/** What {@link renderSessionTypes} needs beyond the binding names. */
+export interface SessionTypesRequest {
+    /** The interface name the rendered file exports, and the one a resource declares as its `tsType`. */
+    interfaceName: string;
+    /** The binding names the session actually carries, in the order they should be declared. */
+    bindings: readonly string[];
+    /**
+     * Declarations for members the session carries that are NOT bindings, each already indented and
+     * newline-terminated. A capability's reserved methods live one layer up, in whatever consumes
+     * this table, so they arrive as source rather than as a second list here that could disagree.
+     */
+    extraMembers?: readonly string[];
+    /** Prose spliced into the file's own header, saying whose session this describes. */
+    preamble?: string;
+}
+/**
+ * Render the `.d.ts` an object-capability session serves as its TypeScript types.
+ *
+ * A session carries exactly what its policy granted, so the declaration a caller reads is composed
+ * per session rather than shipped whole: a file naming the full surface would promise methods the
+ * object does not have. Composition is the only step, and it is total: a name with no generated
+ * signature THROWS rather than being skipped, because a silently dropped method reads to an agent
+ * exactly like an operation this deployment does not serve, and the two need opposite fixes.
+ */
+export declare function renderSessionTypes(request: SessionTypesRequest): string;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAA;AAuBhC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAElF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAC9D,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;CACpB,CAKA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAE9E;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEzE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACpB,MAAM,yBAAyB,CAAA;AAIhC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,aAAa,GACnB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,yBAAyB,EACzB,KAAK,sBAAsB,GAC5B,MAAM,8BAA8B,CAAA;AAuBrC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAElF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG;IAC9D,WAAW,EAAE,OAAO,CAAA;IACpB,UAAU,EAAE,OAAO,CAAA;CACpB,CAKA;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAE9E;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAEzE;AAMD,sEAAsE;AACtE,MAAM,WAAW,mBAAmB;IAClC,qGAAqG;IACrG,aAAa,EAAE,MAAM,CAAA;IACrB,4FAA4F;IAC5F,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B;;;;OAIG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,qFAAqF;IACrF,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA0BvE"}

package/dist/index.js

@@ -2,7 +2,9 @@
 // credential-holding front-end ranks keys and bindings with. The table itself is generated
 // (`bindings.generated.ts`); this module adds only what the spec cannot state.
 import { GATEKEEPER_BINDINGS, PUBLIC_API_SCOPE_LADDER, } from './bindings.generated.js';
+import { SESSION_METHOD_SIGNATURES } from './session-types.generated.js';
 export { GATEKEEPER_BINDINGS, PUBLIC_API_SCOPE_LADDER, TELEMETRY_BINDINGS, } from './bindings.generated.js';
+export { SESSION_METHOD_SIGNATURES, } from './session-types.generated.js';
 /**
  * Rank a rung on the ladder, REFUSING one the ladder does not carry.
  *
@@ -68,4 +70,34 @@ const byName = new Map(GATEKEEPER_BINDINGS.map((binding) => [binding.name, bindi
 export function bindingByName(name) {
     return byName.get(name);
 }
+const signatureByName = new Map(SESSION_METHOD_SIGNATURES.map((signature) => [signature.name, signature]));
+/**
+ * Render the `.d.ts` an object-capability session serves as its TypeScript types.
+ *
+ * A session carries exactly what its policy granted, so the declaration a caller reads is composed
+ * per session rather than shipped whole: a file naming the full surface would promise methods the
+ * object does not have. Composition is the only step, and it is total: a name with no generated
+ * signature THROWS rather than being skipped, because a silently dropped method reads to an agent
+ * exactly like an operation this deployment does not serve, and the two need opposite fixes.
+ */
+export function renderSessionTypes(request) {
+    const members = request.bindings.map((name) => {
+        const signature = signatureByName.get(name);
+        if (signature === undefined) {
+            throw new TypeError(`No session signature for binding '${name}'. The table this renders from is generated ` +
+                'from the same spec the bindings are, so a name reaching here that it does not carry ' +
+                'means the two are out of step: upgrade @cat-factory/gatekeeper-bindings.');
+        }
+        return `${signature.doc}${signature.signature}`;
+    });
+    const header = '// Generated by the cat-factory Gatekeeper from its own operation table. Do not edit.\n' +
+        '//\n' +
+        (request.preamble ? `${request.preamble}\n//\n` : '') +
+        "// Every method returns the deployment's decoded JSON, typed as `unknown`: the authority for\n" +
+        '// those shapes is the OpenAPI document at `GET /api/v1/openapi.json` on the paired\n' +
+        '// deployment, and a second copy inlined here would be free to disagree with it.\n';
+    return (`${header}\nexport interface ${request.interfaceName} {\n` +
+        [...(request.extraMembers ?? []), ...members].join('\n') +
+        '}\n');
+}
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,+EAA+E;AAE/E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAGxB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,GAKnB,MAAM,yBAAyB,CAAA;AAEhC;;;;;;;;GAQG;AACH,SAAS,MAAM,CAAC,KAAqB;IACnC,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,6BAA6B,KAAK,wBAAwB;YACxD,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,oDAAoD;YAC1F,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAoB,EAAE,IAAoB;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAI3D,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ;QAClE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,IAAI,OAAO,CAAC,QAAQ;KAChE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACvD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;AAErF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,2FAA2F;AAC3F,+EAA+E;AAE/E,OAAO,EACL,mBAAmB,EACnB,uBAAuB,GAGxB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAA;AAExE,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,GAKnB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EACL,yBAAyB,GAE1B,MAAM,8BAA8B,CAAA;AAErC;;;;;;;;GAQG;AACH,SAAS,MAAM,CAAC,KAAqB;IACnC,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CACjB,6BAA6B,KAAK,wBAAwB;YACxD,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,oDAAoD;YAC1F,oCAAoC,CACvC,CAAA;IACH,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAoB,EAAE,IAAoB;IACvE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA0B;IAI3D,OAAO;QACL,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ;QAClE,UAAU,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,IAAI,OAAO,CAAC,QAAQ;KAChE,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAqB;IACvD,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;AAErF;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,yBAAyB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAC1E,CAAA;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CACjB,qCAAqC,IAAI,8CAA8C;gBACrF,sFAAsF;gBACtF,0EAA0E,CAC7E,CAAA;QACH,CAAC;QACD,OAAO,GAAG,SAAS,CAAC,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GACV,yFAAyF;QACzF,MAAM;QACN,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,gGAAgG;QAChG,uFAAuF;QACvF,oFAAoF,CAAA;IAEtF,OAAO,CACL,GAAG,MAAM,sBAAsB,OAAO,CAAC,aAAa,MAAM;QAC1D,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QACxD,KAAK,CACN,CAAA;AACH,CAAC"}

package/dist/session-types.generated.d.ts

@@ -0,0 +1,12 @@
+/** One operation's session method, as the source lines a rendered `.d.ts` splices in. */
+export interface SessionMethodSignature {
+    /** The binding name, which is also the method's own spelling. */
+    name: string;
+    /** The JSDoc block, indented and newline-terminated. */
+    doc: string;
+    /** The method signature, indented and newline-terminated. */
+    signature: string;
+}
+/** Every `/api/v1` operation's session method signature, in resource-group order. */
+export declare const SESSION_METHOD_SIGNATURES: readonly SessionMethodSignature[];
+//# sourceMappingURL=session-types.generated.d.ts.map

package/dist/session-types.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.generated.d.ts","sourceRoot":"","sources":["../src/session-types.generated.ts"],"names":[],"mappings":"AAcA,yFAAyF;AACzF,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,wDAAwD;IACxD,GAAG,EAAE,MAAM,CAAA;IACX,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,qFAAqF;AACrF,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EA0ftE,CAAA"}

package/dist/session-types.generated.js

@@ -0,0 +1,511 @@
+// GENERATED by `pnpm gen:sdk` from docs/openapi.json — DO NOT EDIT BY HAND.
+// Regenerate after any change to the `/api/v1` contracts; `pnpm check:sdk` fails CI on drift.
+/** Every `/api/v1` operation's session method signature, in resource-group order. */
+export const SESSION_METHOD_SIGNATURES = [
+    {
+        name: 'jobs_cancel',
+        doc: '  /**\n   * Cancel a job\n   *\n   * `POST /api/v1/jobs/{id}/cancel`, scope floor `write`.\n   */\n',
+        signature: '  jobs_cancel(args: { id: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'jobs_create',
+        doc: '  /**\n   * Start a headless job\n   *\n   * `POST /api/v1/jobs`, scope floor `write`.\n   */\n',
+        signature: '  jobs_create(args: { body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'jobs_get',
+        doc: '  /**\n   * Get a job\n   *\n   * `GET /api/v1/jobs/{id}`, scope floor `read`.\n   */\n',
+        signature: '  jobs_get(args: { id: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'jobs_list',
+        doc: '  /**\n   * List the workspace\'s jobs\n   *\n   * `GET /api/v1/jobs`, scope floor `read`.\n   */\n',
+        signature: '  jobs_list(args?: { limit?: string | number | boolean; cursor?: string | number | boolean; status?: string | number | boolean; since?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'jobs_stream',
+        doc: '  /**\n   * Stream a job (SSE)\n   *\n   * `GET /api/v1/jobs/{id}/events`, scope floor `read`.\n   * Result is stream, which a session call cannot carry: this operation is withheld from every tier.\n   */\n',
+        signature: '  jobs_stream(args: { id: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'services_create',
+        doc: '  /**\n   * Create a service\n   *\n   * `POST /api/v1/services`, scope floor `admin`.\n   */\n',
+        signature: '  services_create(args?: { body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'services_list',
+        doc: '  /**\n   * List the workspace\'s services\n   *\n   * `GET /api/v1/services`, scope floor `read`.\n   */\n',
+        signature: '  services_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'spec_get',
+        doc: '  /**\n   * Get a service\'s in-repo specification\n   *\n   * `GET /api/v1/services/{serviceId}/spec`, scope floor `read`.\n   */\n',
+        signature: '  spec_get(args: { serviceId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'repos_list',
+        doc: '  /**\n   * List the repositories a service can be created against\n   *\n   * `GET /api/v1/repos`, scope floor `read`.\n   */\n',
+        signature: '  repos_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_add_dependency',
+        doc: '  /**\n   * Declare that a task waits for another\n   *\n   * `POST /api/v1/tasks/{taskId}/dependencies`, scope floor `write`.\n   */\n',
+        signature: '  tasks_add_dependency(args: { taskId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_attach_document',
+        doc: '  /**\n   * Attach a document to a task\n   *\n   * `POST /api/v1/tasks/{taskId}/documents`, scope floor `write`.\n   */\n',
+        signature: '  tasks_attach_document(args: { taskId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_create',
+        doc: '  /**\n   * Create a task under a service\n   *\n   * `POST /api/v1/services/{serviceId}/tasks`, scope floor `write`.\n   */\n',
+        signature: '  tasks_create(args: { serviceId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_delete',
+        doc: '  /**\n   * Delete a task\n   *\n   * `DELETE /api/v1/tasks/{taskId}`, scope floor `admin`.\n   */\n',
+        signature: '  tasks_delete(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_detach_document',
+        doc: '  /**\n   * Detach a document from a task\n   *\n   * `POST /api/v1/tasks/{taskId}/documents/detach`, scope floor `write`.\n   */\n',
+        signature: '  tasks_detach_document(args: { taskId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_get',
+        doc: '  /**\n   * Get a task\'s status\n   *\n   * `GET /api/v1/tasks/{taskId}`, scope floor `read`.\n   */\n',
+        signature: '  tasks_get(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_get_run',
+        doc: '  /**\n   * Get a task\'s run (rich projection)\n   *\n   * `GET /api/v1/tasks/{taskId}/run`, scope floor `read`.\n   */\n',
+        signature: '  tasks_get_run(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_list_by_service',
+        doc: '  /**\n   * List a service\'s tasks\n   *\n   * `GET /api/v1/services/{serviceId}/tasks`, scope floor `read`.\n   */\n',
+        signature: '  tasks_list_by_service(args: { serviceId: string; limit?: string | number | boolean; cursor?: string | number | boolean; status?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_list_documents',
+        doc: '  /**\n   * List a task\'s attached documents\n   *\n   * `GET /api/v1/tasks/{taskId}/documents`, scope floor `read`.\n   */\n',
+        signature: '  tasks_list_documents(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_remove_dependency',
+        doc: '  /**\n   * Drop a dependency edge\n   *\n   * `POST /api/v1/tasks/{taskId}/dependencies/remove`, scope floor `write`.\n   */\n',
+        signature: '  tasks_remove_dependency(args: { taskId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_retry',
+        doc: '  /**\n   * Retry a task\'s failed run\n   *\n   * `POST /api/v1/tasks/{taskId}/retry`, scope floor `write`.\n   */\n',
+        signature: '  tasks_retry(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_start',
+        doc: '  /**\n   * Start (run) a task\n   *\n   * `POST /api/v1/tasks/{taskId}/start`, scope floor `write`.\n   */\n',
+        signature: '  tasks_start(args: { taskId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_stop',
+        doc: '  /**\n   * Stop a task\'s run\n   *\n   * `POST /api/v1/tasks/{taskId}/stop`, scope floor `write`.\n   */\n',
+        signature: '  tasks_stop(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_stream',
+        doc: '  /**\n   * Stream a task run (SSE)\n   *\n   * `GET /api/v1/tasks/{taskId}/events`, scope floor `read`.\n   * Result is stream, which a session call cannot carry: this operation is withheld from every tier.\n   */\n',
+        signature: '  tasks_stream(args: { taskId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'tasks_update',
+        doc: '  /**\n   * Edit a task\'s inputs\n   *\n   * `PATCH /api/v1/tasks/{taskId}`, scope floor `write`.\n   */\n',
+        signature: '  tasks_update(args: { taskId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'pipelines_list',
+        doc: '  /**\n   * List the workspace\'s pipelines\n   *\n   * `GET /api/v1/pipelines`, scope floor `read`.\n   */\n',
+        signature: '  pipelines_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'task_types_list',
+        doc: '  /**\n   * List the task types this workspace may create\n   *\n   * `GET /api/v1/task-types`, scope floor `read`.\n   */\n',
+        signature: '  task_types_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'notifications_act',
+        doc: '  /**\n   * Act on a notification\n   *\n   * `POST /api/v1/notifications/{id}/act`, scope floor `admin`.\n   */\n',
+        signature: '  notifications_act(args: { id: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'notifications_dismiss',
+        doc: '  /**\n   * Dismiss a notification\n   *\n   * `POST /api/v1/notifications/{id}/dismiss`, scope floor `write`.\n   */\n',
+        signature: '  notifications_dismiss(args: { id: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'notifications_list',
+        doc: '  /**\n   * List the workspace\'s open notifications\n   *\n   * `GET /api/v1/notifications`, scope floor `read`.\n   */\n',
+        signature: '  notifications_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_delete',
+        doc: '  /**\n   * Remove the outbound webhook\n   *\n   * `DELETE /api/v1/notification-webhook`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_delete(): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_delete_named',
+        doc: '  /**\n   * Remove one named outbound webhook\n   *\n   * `DELETE /api/v1/notification-webhooks/{webhookId}`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_delete_named(args: { webhookId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_get',
+        doc: '  /**\n   * Read the workspace\'s outbound webhook\n   *\n   * `GET /api/v1/notification-webhook`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_get(): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_get_named',
+        doc: '  /**\n   * Read one named outbound webhook\n   *\n   * `GET /api/v1/notification-webhooks/{webhookId}`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_get_named(args: { webhookId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_list',
+        doc: '  /**\n   * List the workspace\'s outbound webhooks\n   *\n   * `GET /api/v1/notification-webhooks`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_set',
+        doc: '  /**\n   * Register or update the outbound webhook\n   *\n   * `PUT /api/v1/notification-webhook`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_set(args?: { body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'webhook_set_named',
+        doc: '  /**\n   * Register or update one named outbound webhook\n   *\n   * `PUT /api/v1/notification-webhooks/{webhookId}`, scope floor `admin`.\n   */\n',
+        signature: '  webhook_set_named(args: { webhookId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'usage_get',
+        doc: '  /**\n   * Read the workspace\'s usage for the current period\n   *\n   * `GET /api/v1/usage`, scope floor `read`.\n   */\n',
+        signature: '  usage_get(): Promise<unknown>\n',
+    },
+    {
+        name: 'usage_spend',
+        doc: '  /**\n   * Break the workspace\'s spend down by repository, ticket, run or step kind\n   *\n   * `GET /api/v1/usage/spend`, scope floor `read`.\n   */\n',
+        signature: '  usage_spend(args: { dimension: string | number | boolean; window?: string | number | boolean; limit?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'me_get',
+        doc: '  /**\n   * Describe the calling key\n   *\n   * `GET /api/v1/me`, scope floor `read`.\n   */\n',
+        signature: '  me_get(): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_answer_agent_decision',
+        doc: '  /**\n   * Answer an agent-raised decision\n   *\n   * `POST /api/v1/runs/{runId}/decisions/questions/{decisionId}/answer`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_answer_agent_decision(args: { runId: string; decisionId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_answer_follow_up',
+        doc: '  /**\n   * Answer a follow-up question\n   *\n   * `POST /api/v1/runs/{runId}/decisions/follow-ups/items/{itemId}/answer`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_answer_follow_up(args: { runId: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_answer_interview_question',
+        doc: '  /**\n   * Answer an interview question\n   *\n   * `POST /api/v1/runs/{runId}/decisions/interview/answer`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_answer_interview_question(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_approve_step',
+        doc: '  /**\n   * Approve a parked step\n   *\n   * `POST /api/v1/runs/{runId}/decisions/approvals/{approvalId}/approve`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_approve_step(args: { runId: string; approvalId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_approve_visual_confirmation',
+        doc: '  /**\n   * Approve a visual-confirmation gate\n   *\n   * `POST /api/v1/runs/{runId}/decisions/visual-confirmation/approve`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_approve_visual_confirmation(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_challenge_pr_review_finding',
+        doc: '  /**\n   * Challenge a PR review finding\n   *\n   * `POST /api/v1/runs/{runId}/decisions/pr-review/findings/{findingId}/challenge`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_challenge_pr_review_finding(args: { runId: string; findingId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_choose_fork',
+        doc: '  /**\n   * Choose an implementation approach\n   *\n   * `POST /api/v1/runs/{runId}/decisions/fork/choose`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_choose_fork(args: { runId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_confirm_human_test',
+        doc: '  /**\n   * Confirm a human-test gate\n   *\n   * `POST /api/v1/runs/{runId}/decisions/human-test/confirm`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_confirm_human_test(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_continue_interview',
+        doc: '  /**\n   * Continue a parked interview\n   *\n   * `POST /api/v1/runs/{runId}/decisions/interview/continue`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_continue_interview(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_dismiss_follow_up',
+        doc: '  /**\n   * Dismiss a follow-up item\n   *\n   * `POST /api/v1/runs/{runId}/decisions/follow-ups/items/{itemId}/dismiss`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_dismiss_follow_up(args: { runId: string; itemId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_dismiss_pr_review_finding',
+        doc: '  /**\n   * Dismiss a PR review finding\n   *\n   * `POST /api/v1/runs/{runId}/decisions/pr-review/findings/{findingId}/dismiss`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_dismiss_pr_review_finding(args: { runId: string; findingId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_file_follow_up',
+        doc: '  /**\n   * File a follow-up item as an issue\n   *\n   * `POST /api/v1/runs/{runId}/decisions/follow-ups/items/{itemId}/file`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_file_follow_up(args: { runId: string; itemId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_incorporate',
+        doc: '  /**\n   * Incorporate the answers\n   *\n   * `POST /api/v1/runs/{runId}/decisions/requirements/incorporate`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_incorporate(args: { runId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_incorporate_brainstorm',
+        doc: '  /**\n   * Incorporate brainstorm picks\n   *\n   * `POST /api/v1/runs/{runId}/decisions/brainstorm/{stage}/incorporate`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_incorporate_brainstorm(args: { runId: string; stage: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_incorporate_clarity',
+        doc: '  /**\n   * Incorporate clarity answers\n   *\n   * `POST /api/v1/runs/{runId}/decisions/clarity/incorporate`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_incorporate_clarity(args: { runId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_list',
+        doc: '  /**\n   * List a run\'s parked decisions\n   *\n   * `GET /api/v1/runs/{runId}/decisions`, scope floor `read`.\n   */\n',
+        signature: '  decisions_list(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_proceed',
+        doc: '  /**\n   * Proceed with the current requirements\n   *\n   * `POST /api/v1/runs/{runId}/decisions/requirements/proceed`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_proceed(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_proceed_brainstorm',
+        doc: '  /**\n   * Proceed past a brainstorm\n   *\n   * `POST /api/v1/runs/{runId}/decisions/brainstorm/{stage}/proceed`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_proceed_brainstorm(args: { runId: string; stage: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_proceed_clarity',
+        doc: '  /**\n   * Proceed past the clarity review\n   *\n   * `POST /api/v1/runs/{runId}/decisions/clarity/proceed`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_proceed_clarity(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_proceed_interview',
+        doc: '  /**\n   * Proceed past a parked interview\n   *\n   * `POST /api/v1/runs/{runId}/decisions/interview/proceed`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_proceed_interview(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_reject_step',
+        doc: '  /**\n   * Reject a parked step\n   *\n   * `POST /api/v1/runs/{runId}/decisions/approvals/{approvalId}/reject`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_reject_step(args: { runId: string; approvalId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_reply_to_brainstorm_option',
+        doc: '  /**\n   * Respond to a brainstorm option\n   *\n   * `POST /api/v1/runs/{runId}/decisions/brainstorm/{stage}/options/{itemId}/reply`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_reply_to_brainstorm_option(args: { runId: string; stage: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_reply_to_clarity_finding',
+        doc: '  /**\n   * Answer a clarity (bug-triage) finding\n   *\n   * `POST /api/v1/runs/{runId}/decisions/clarity/findings/{itemId}/reply`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_reply_to_clarity_finding(args: { runId: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_reply_to_finding',
+        doc: '  /**\n   * Answer a review finding\n   *\n   * `POST /api/v1/runs/{runId}/decisions/requirements/findings/{itemId}/reply`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_reply_to_finding(args: { runId: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_request_human_test_fix',
+        doc: '  /**\n   * Request a fix from a human-test gate\n   *\n   * `POST /api/v1/runs/{runId}/decisions/human-test/request-fix`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_request_human_test_fix(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_request_step_changes',
+        doc: '  /**\n   * Request changes on a parked step\n   *\n   * `POST /api/v1/runs/{runId}/decisions/approvals/{approvalId}/request-changes`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_request_step_changes(args: { runId: string; approvalId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_request_visual_confirmation_fix',
+        doc: '  /**\n   * Request a fix from a visual-confirmation gate\n   *\n   * `POST /api/v1/runs/{runId}/decisions/visual-confirmation/request-fix`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_request_visual_confirmation_fix(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_re_review',
+        doc: '  /**\n   * Re-review the incorporated document\n   *\n   * `POST /api/v1/runs/{runId}/decisions/requirements/re-review`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_re_review(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_re_review_brainstorm',
+        doc: '  /**\n   * Re-run a brainstorm pass\n   *\n   * `POST /api/v1/runs/{runId}/decisions/brainstorm/{stage}/re-review`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_re_review_brainstorm(args: { runId: string; stage: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_re_review_clarity',
+        doc: '  /**\n   * Re-triage the clarified report\n   *\n   * `POST /api/v1/runs/{runId}/decisions/clarity/re-review`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_re_review_clarity(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_brainstorm_exceeded',
+        doc: '  /**\n   * Resolve a brainstorm at its iteration cap\n   *\n   * `POST /api/v1/runs/{runId}/decisions/brainstorm/{stage}/resolve-exceeded`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_brainstorm_exceeded(args: { runId: string; stage: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_clarity_exceeded',
+        doc: '  /**\n   * Resolve a clarity review at its iteration cap\n   *\n   * `POST /api/v1/runs/{runId}/decisions/clarity/resolve-exceeded`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_clarity_exceeded(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_exceeded',
+        doc: '  /**\n   * Resolve a review at its iteration cap\n   *\n   * `POST /api/v1/runs/{runId}/decisions/requirements/resolve-exceeded`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_exceeded(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_input_gate',
+        doc: '  /**\n   * Resolve a run parked on the task\'s input check\n   *\n   * `POST /api/v1/runs/{runId}/decisions/input-gate/resolve`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_input_gate(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_judge',
+        doc: '  /**\n   * Resolve a parked judge verdict\n   *\n   * `POST /api/v1/runs/{runId}/decisions/judge/resolve`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_judge(args: { runId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_pr_review',
+        doc: '  /**\n   * Resolve a parked PR deep review\n   *\n   * `POST /api/v1/runs/{runId}/decisions/pr-review/resolve`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_pr_review(args: { runId: string; body?: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_resolve_step_exceeded',
+        doc: '  /**\n   * Resolve a companion gate at its rework cap\n   *\n   * `POST /api/v1/runs/{runId}/decisions/approvals/{approvalId}/resolve-exceeded`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_resolve_step_exceeded(args: { runId: string; approvalId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_send_back_follow_up',
+        doc: '  /**\n   * Send a follow-up item back to the Coder\n   *\n   * `POST /api/v1/runs/{runId}/decisions/follow-ups/items/{itemId}/send-back`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_send_back_follow_up(args: { runId: string; itemId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_set_brainstorm_option_status',
+        doc: '  /**\n   * Dismiss or reopen a brainstorm option\n   *\n   * `PATCH /api/v1/runs/{runId}/decisions/brainstorm/{stage}/options/{itemId}`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_set_brainstorm_option_status(args: { runId: string; stage: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_set_clarity_finding_status',
+        doc: '  /**\n   * Dismiss or reopen a clarity finding\n   *\n   * `PATCH /api/v1/runs/{runId}/decisions/clarity/findings/{itemId}`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_set_clarity_finding_status(args: { runId: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'decisions_set_finding_status',
+        doc: '  /**\n   * Dismiss or reopen a finding\n   *\n   * `PATCH /api/v1/runs/{runId}/decisions/requirements/findings/{itemId}`, scope floor `decide`.\n   */\n',
+        signature: '  decisions_set_finding_status(args: { runId: string; itemId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_get_agent_context',
+        doc: '  /**\n   * Get one agent-context snapshot\n   *\n   * `GET /api/v1/debug/agent-context/{snapshotId}`, scope floor `read`.\n   */\n',
+        signature: '  debug_get_agent_context(args: { snapshotId: string; bodyChars?: string | number | boolean; bodyOffset?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_get_llm_call',
+        doc: '  /**\n   * Get one LLM call\n   *\n   * `GET /api/v1/debug/llm-calls/{callId}`, scope floor `read`.\n   */\n',
+        signature: '  debug_get_llm_call(args: { callId: string; bodyChars?: string | number | boolean; bodyOffset?: string | number | boolean; view?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_get_llm_export',
+        doc: '  /**\n   * Export a run\'s model activity as one bundle\n   *\n   * `GET /api/v1/debug/runs/{runId}/llm-export`, scope floor `read`.\n   */\n',
+        signature: '  debug_get_llm_export(args: { runId: string; limit?: string | number | boolean; order?: string | number | boolean; bodyChars?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_get_run',
+        doc: '  /**\n   * Get a run\'s diagnostic map\n   *\n   * `GET /api/v1/debug/runs/{runId}`, scope floor `read`.\n   */\n',
+        signature: '  debug_get_run(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_agent_context',
+        doc: '  /**\n   * List a run\'s agent-context dispatches\n   *\n   * `GET /api/v1/debug/runs/{runId}/agent-context`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_agent_context(args: { runId: string; stepIndex?: string | number | boolean; limit?: string | number | boolean; cursor?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_llm_calls',
+        doc: '  /**\n   * List a run\'s LLM calls\n   *\n   * `GET /api/v1/debug/runs/{runId}/llm-calls`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_llm_calls(args: { runId: string; agentKind?: string | number | boolean; phase?: string | number | boolean; outcome?: string | number | boolean; contains?: string | number | boolean; order?: string | number | boolean; limit?: string | number | boolean; cursor?: string | number | boolean; bodyChars?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_logs',
+        doc: '  /**\n   * List a run\'s infrastructure log\n   *\n   * `GET /api/v1/debug/runs/{runId}/logs`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_logs(args: { runId: string; limit?: string | number | boolean; cursor?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_runs',
+        doc: '  /**\n   * List the workspace\'s runs\n   *\n   * `GET /api/v1/debug/runs`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_runs(args?: { status?: string | number | boolean; since?: string | number | boolean; limit?: string | number | boolean; cursor?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_search_queries',
+        doc: '  /**\n   * List a run\'s web searches\n   *\n   * `GET /api/v1/debug/runs/{runId}/search-queries`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_search_queries(args: { runId: string; limit?: string | number | boolean; cursor?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'debug_list_tool_calls',
+        doc: '  /**\n   * List a run\'s tool calls\n   *\n   * `GET /api/v1/debug/runs/{runId}/tool-calls`, scope floor `read`.\n   */\n',
+        signature: '  debug_list_tool_calls(args: { runId: string; limit?: string | number | boolean; cursor?: string | number | boolean; jobId?: string | number | boolean; order?: string | number | boolean; outcome?: string | number | boolean }): Promise<unknown>\n',
+    },
+    {
+        name: 'evidence_download_artifact',
+        doc: '  /**\n   * Download an artifact\'s bytes\n   *\n   * `GET /api/v1/artifacts/{artifactId}/blob`, scope floor `read`.\n   * Result is binary, which a session call cannot carry: this operation is withheld from every tier.\n   */\n',
+        signature: '  evidence_download_artifact(args: { artifactId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'evidence_get_outcome',
+        doc: '  /**\n   * Get a run\'s outcome summary\n   *\n   * `GET /api/v1/runs/{runId}/outcome`, scope floor `read`.\n   */\n',
+        signature: '  evidence_get_outcome(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'evidence_get_report',
+        doc: '  /**\n   * Get a run\'s verification report\n   *\n   * `GET /api/v1/runs/{runId}/report`, scope floor `read`.\n   */\n',
+        signature: '  evidence_get_report(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'evidence_list_artifacts',
+        doc: '  /**\n   * List a run\'s captured artifacts\n   *\n   * `GET /api/v1/runs/{runId}/artifacts`, scope floor `read`.\n   */\n',
+        signature: '  evidence_list_artifacts(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'merge_records_get',
+        doc: '  /**\n   * Get one merge record\n   *\n   * `GET /api/v1/merge-records/{recordId}`, scope floor `read`.\n   */\n',
+        signature: '  merge_records_get(args: { recordId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'merge_records_get_for_run',
+        doc: '  /**\n   * Get the merge decision a run left behind\n   *\n   * `GET /api/v1/runs/{runId}/merge-record`, scope floor `read`.\n   */\n',
+        signature: '  merge_records_get_for_run(args: { runId: string }): Promise<unknown>\n',
+    },
+    {
+        name: 'merge_records_list_rollups',
+        doc: '  /**\n   * List the per-change-class merge rollups\n   *\n   * `GET /api/v1/merge-records/rollups`, scope floor `read`.\n   */\n',
+        signature: '  merge_records_list_rollups(): Promise<unknown>\n',
+    },
+    {
+        name: 'merge_records_tag_effort',
+        doc: '  /**\n   * Tag the reviewer effort a merge took\n   *\n   * `POST /api/v1/merge-records/{recordId}/effort`, scope floor `write`.\n   */\n',
+        signature: '  merge_records_tag_effort(args: { recordId: string; body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'keys_create',
+        doc: '  /**\n   * Provision an API key\n   *\n   * `POST /api/v1/keys`, scope floor `admin`.\n   */\n',
+        signature: '  keys_create(args: { body: unknown }): Promise<unknown>\n',
+    },
+    {
+        name: 'keys_list',
+        doc: '  /**\n   * List the workspace\'s API keys\n   *\n   * `GET /api/v1/keys`, scope floor `admin`.\n   */\n',
+        signature: '  keys_list(): Promise<unknown>\n',
+    },
+    {
+        name: 'keys_revoke',
+        doc: '  /**\n   * Revoke an API key\n   *\n   * `DELETE /api/v1/keys/{keyId}`, scope floor `admin`.\n   */\n',
+        signature: '  keys_revoke(args: { keyId: string }): Promise<unknown>\n',
+    },
+];
+//# sourceMappingURL=session-types.generated.js.map

package/dist/session-types.generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.generated.js","sourceRoot":"","sources":["../src/session-types.generated.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8FAA8F;AAuB9F,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAsC;IAC1E;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,qGAAqG;QAC1G,SAAS,EAAE,yDAAyD;KACrE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,iGAAiG;QACtG,SAAS,EAAE,4DAA4D;KACxE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,yFAAyF;QAC9F,SAAS,EAAE,sDAAsD;KAClE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,qGAAqG;QAC1G,SAAS,EAAE,0LAA0L;KACtM;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,gNAAgN;QACrN,SAAS,EAAE,yDAAyD;KACrE;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,GAAG,EAAE,iGAAiG;QACtG,SAAS,EAAE,kEAAkE;KAC9E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,GAAG,EAAE,6GAA6G;QAClH,SAAS,EAAE,uCAAuC;KACnD;IACD;QACE,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,sIAAsI;QAC3I,SAAS,EAAE,6DAA6D;KACzE;IACD;QACE,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,kIAAkI;QACvI,SAAS,EAAE,oCAAoC;KAChD;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,yIAAyI;QAC9I,SAAS,EAAE,qFAAqF;KACjG;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,4HAA4H;QACjI,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,gIAAgI;QACrI,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,sGAAsG;QAC3G,SAAS,EAAE,8DAA8D;KAC1E;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,qIAAqI;QAC1I,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,yGAAyG;QAC9G,SAAS,EAAE,2DAA2D;KACvE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,GAAG,EAAE,4HAA4H;QACjI,SAAS,EAAE,+DAA+D;KAC3E;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,wHAAwH;QAC7H,SAAS,EAAE,qLAAqL;KACjM;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,gIAAgI;QACrI,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,iIAAiI;QACtI,SAAS,EAAE,wFAAwF;KACpG;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,uHAAuH;QAC5H,SAAS,EAAE,6DAA6D;KACzE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,+GAA+G;QACpH,SAAS,EAAE,6EAA6E;KACzF;IACD;QACE,IAAI,EAAE,YAAY;QAClB,GAAG,EAAE,8GAA8G;QACnH,SAAS,EAAE,4DAA4D;KACxE;IACD;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,0NAA0N;QAC/N,SAAS,EAAE,8DAA8D;KAC1E;IACD;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,6GAA6G;QAClH,SAAS,EAAE,8EAA8E;KAC1F;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,+GAA+G;QACpH,SAAS,EAAE,wCAAwC;KACpD;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,GAAG,EAAE,8HAA8H;QACnI,SAAS,EAAE,yCAAyC;KACrD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,oHAAoH;QACzH,SAAS,EAAE,+EAA+E;KAC3F;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,yHAAyH;QAC9H,SAAS,EAAE,mEAAmE;KAC/E;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,4HAA4H;QACjI,SAAS,EAAE,4CAA4C;KACxD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,0HAA0H;QAC/H,SAAS,EAAE,wCAAwC;KACpD;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,6IAA6I;QAClJ,SAAS,EAAE,yEAAyE;KACrF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,kIAAkI;QACvI,SAAS,EAAE,qCAAqC;KACjD;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,wIAAwI;QAC7I,SAAS,EAAE,sEAAsE;KAClF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,GAAG,EAAE,oIAAoI;QACzI,SAAS,EAAE,sCAAsC;KAClD;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,mIAAmI;QACxI,SAAS,EAAE,8DAA8D;KAC1E;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,sJAAsJ;QAC3J,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,8HAA8H;QACnI,SAAS,EAAE,mCAAmC;KAC/C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,2JAA2J;QAChK,SAAS,EAAE,0JAA0J;KACtK;IACD;QACE,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,iGAAiG;QACtG,SAAS,EAAE,gCAAgC;KAC5C;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,GAAG,EAAE,6JAA6J;QAClK,SAAS,EAAE,mHAAmH;KAC/H;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE,4JAA4J;QACjK,SAAS,EAAE,0GAA0G;KACtH;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,GAAG,EAAE,6IAA6I;QAClJ,SAAS,EAAE,mGAAmG;KAC/G;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,GAAG,EAAE,oJAAoJ;QACzJ,SAAS,EAAE,2GAA2G;KACvH;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,GAAG,EAAE,8JAA8J;QACnK,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,GAAG,EAAE,sKAAsK;QAC3K,SAAS,EAAE,yHAAyH;KACrI;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,6IAA6I;QAClJ,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,GAAG,EAAE,4IAA4I;QACjJ,SAAS,EAAE,6EAA6E;KACzF;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,GAAG,EAAE,8IAA8I;QACnJ,SAAS,EAAE,6EAA6E;KACzF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,0JAA0J;QAC/J,SAAS,EAAE,4FAA4F;KACxG;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,GAAG,EAAE,kKAAkK;QACvK,SAAS,EAAE,uGAAuG;KACnH;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,GAAG,EAAE,gKAAgK;QACrK,SAAS,EAAE,yFAAyF;KACrG;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,gJAAgJ;QACrJ,SAAS,EAAE,sFAAsF;KAClG;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,GAAG,EAAE,2JAA2J;QAChK,SAAS,EAAE,gHAAgH;KAC5H;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,GAAG,EAAE,+IAA+I;QACpJ,SAAS,EAAE,8FAA8F;KAC1G;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,GAAG,EAAE,2HAA2H;QAChI,SAAS,EAAE,+DAA+D;KAC3E;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,0JAA0J;QAC/J,SAAS,EAAE,kEAAkE;KAC9E;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,GAAG,EAAE,oJAAoJ;QACzJ,SAAS,EAAE,4FAA4F;KACxG;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,GAAG,EAAE,+IAA+I;QACpJ,SAAS,EAAE,0EAA0E;KACtF;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,iJAAiJ;QACtJ,SAAS,EAAE,4EAA4E;KACxF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,kJAAkJ;QACvJ,SAAS,EAAE,0GAA0G;KACtH;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,GAAG,EAAE,wKAAwK;QAC7K,SAAS,EAAE,mIAAmI;KAC/I;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,GAAG,EAAE,qKAAqK;QAC1K,SAAS,EAAE,kHAAkH;KAC9H;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE,4JAA4J;QACjK,SAAS,EAAE,0GAA0G;KACtH;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,GAAG,EAAE,2JAA2J;QAChK,SAAS,EAAE,gGAAgG;KAC5G;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,GAAG,EAAE,uKAAuK;QAC5K,SAAS,EAAE,kHAAkH;KAC9H;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,GAAG,EAAE,6KAA6K;QAClL,SAAS,EAAE,yGAAyG;KACrH;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,GAAG,EAAE,0JAA0J;QAC/J,SAAS,EAAE,oEAAoE;KAChF;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,GAAG,EAAE,qJAAqJ;QAC1J,SAAS,EAAE,8FAA8F;KAC1G;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,gJAAgJ;QACrJ,SAAS,EAAE,4EAA4E;KACxF;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,GAAG,EAAE,6KAA6K;QAClL,SAAS,EAAE,oHAAoH;KAChI;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,GAAG,EAAE,sKAAsK;QAC3K,SAAS,EAAE,kGAAkG;KAC9G;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE,mKAAmK;QACxK,SAAS,EAAE,0FAA0F;KACtG;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,GAAG,EAAE,kKAAkK;QACvK,SAAS,EAAE,4FAA4F;KACxG;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,4IAA4I;QACjJ,SAAS,EAAE,uFAAuF;KACnG;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,GAAG,EAAE,iJAAiJ;QACtJ,SAAS,EAAE,4FAA4F;KACxG;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,GAAG,EAAE,kLAAkL;QACvL,SAAS,EAAE,mHAAmH;KAC/H;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,GAAG,EAAE,2KAA2K;QAChL,SAAS,EAAE,8FAA8F;KAC1G;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,GAAG,EAAE,0KAA0K;QAC/K,SAAS,EAAE,qIAAqI;KACjJ;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,GAAG,EAAE,8JAA8J;QACnK,SAAS,EAAE,oHAAoH;KAChI;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,GAAG,EAAE,2JAA2J;QAChK,SAAS,EAAE,4GAA4G;KACxH;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,qIAAqI;QAC1I,SAAS,EAAE,4JAA4J;KACxK;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,GAAG,EAAE,+GAA+G;QACpH,SAAS,EAAE,qLAAqL;KACjM;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,gJAAgJ;QACrJ,SAAS,EAAE,kLAAkL;KAC9L;IACD;QACE,IAAI,EAAE,eAAe;QACrB,GAAG,EAAE,oHAAoH;QACzH,SAAS,EAAE,8DAA8D;KAC1E;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,GAAG,EAAE,6IAA6I;QAClJ,SAAS,EAAE,uLAAuL;KACnM;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,0HAA0H;QAC/H,SAAS,EAAE,2WAA2W;KACvX;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,GAAG,EAAE,8HAA8H;QACnI,SAAS,EAAE,uIAAuI;KACnJ;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,GAAG,EAAE,2GAA2G;QAChH,SAAS,EAAE,gMAAgM;KAC5M;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,GAAG,EAAE,kIAAkI;QACvI,SAAS,EAAE,iJAAiJ;KAC7J;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,GAAG,EAAE,4HAA4H;QACjI,SAAS,EAAE,wPAAwP;KACpQ;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE,sOAAsO;QAC3O,SAAS,EAAE,gFAAgF;KAC5F;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,GAAG,EAAE,uHAAuH;QAC5H,SAAS,EAAE,qEAAqE;KACjF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,GAAG,EAAE,0HAA0H;QAC/H,SAAS,EAAE,oEAAoE;KAChF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,GAAG,EAAE,6HAA6H;QAClI,SAAS,EAAE,wEAAwE;KACpF;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,GAAG,EAAE,mHAAmH;QACxH,SAAS,EAAE,qEAAqE;KACjF;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,GAAG,EAAE,wIAAwI;QAC7I,SAAS,EAAE,0EAA0E;KACtF;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,GAAG,EAAE,mIAAmI;QACxI,SAAS,EAAE,oDAAoD;KAChE;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,GAAG,EAAE,4IAA4I;QACjJ,SAAS,EAAE,2FAA2F;KACvG;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,iGAAiG;QACtG,SAAS,EAAE,4DAA4D;KACxE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,0GAA0G;QAC/G,SAAS,EAAE,mCAAmC;KAC/C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,wGAAwG;QAC7G,SAAS,EAAE,4DAA4D;KACxE;CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cat-factory/gatekeeper-bindings",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "description": "Policy-annotated operation table for the cat-factory public API (/api/v1): per-operation scope floors, mutation and transport metadata, and invoke thunks over @cat-factory/sdk, generated from the same OpenAPI spec the SDKs are. Built for credential-holding front-ends such as a Cloudflare OS Gatekeeper.",
   "keywords": [
     "cat-factory",
@@ -31,10 +31,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@cat-factory/sdk": "0.28.0"
+    "@cat-factory/sdk": "0.28.1"
   },
   "devDependencies": {
-    "@types/node": "^26.1.2",
+    "@types/node": "^26.2.0",
     "typescript": "7.0.2",
     "vitest": "^4.1.10"
   },