@cube-dev/platform-client 0.18.0 → 0.19.1

package/dist/schema.d.ts

@@ -324,6 +324,58 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/deployments/{deploymentId}/chat-history/threads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List chat threads
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Every user's AI chat threads in the deployment, most recently updated first, for analyzing how people use the agent. Filters combine with AND; a filter given several values matches any of them.
+         *
+         *     Set `includeTurns=true` to get each thread's turns in the same response. A turn is one prompt and everything the agent did to answer it: the final answer, the tools it called, and each query it ran with its SQL, status, row count and any thumbs-up/down feedback. Query result rows are never included. A prompt, answer or SQL longer than 20,000 characters, or an error longer than 2,000, is cut and ends in `…`. A page holds up to 200 threads, or 50 with turns; a larger `first` is lowered to that.
+         *
+         *     For an incremental export, keep the newest `updatedAt` you have seen and pass it as `updatedAfter` next time.
+         *
+         *     Chat history export is in preview: when it is not enabled for the account, `404` is returned.
+         */
+        get: operations["ChatHistoryPublicController.listChatHistoryThreads"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/chat-history/threads/{chatId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a chat thread
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     One chat thread with all of its turns, oldest first. A turn is one prompt and everything the agent did to answer it: the final answer, the tools it called, and each query it ran with its SQL, status, row count and any thumbs-up/down feedback. Query result rows are never included. A prompt, answer or SQL longer than 20,000 characters, or an error longer than 2,000, is cut and ends in `…`.
+         *
+         *     Chat history export is in preview: when it is not enabled for the account, `404` is returned.
+         */
+        get: operations["ChatHistoryPublicController.getChatHistoryThread"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/deployments/{deploymentId}/creation-step/advance": {
         parameters: {
             query?: never;
@@ -375,6 +427,8 @@ export interface paths {
          *
          *     Pass `filters`, `timeGrains` and `memberSwitchers` to render the board with specific control values, exactly as a scheduled notification does; omit them to render its saved defaults.
          *
+         *     Pass `layout: print` with `format: pdf` for the paginated A4 document the dashboard's "Print version" menu item produces — one column, every table row, the filter state as a summary line — instead of the default `screenshot` of the board. `print` with `format: png` returns `400`.
+         *
          *     By default the dashboard renders under the calling user's own security context, so the file shows what that user would see. Requires **manage** access to the dashboard's workbook — the same permission the console's own "Download as PNG / PDF" actions require, because a whole-dashboard render is a bulk data export.
          *
          *     To export on someone else's behalf, pass `renderAs`: the queries behind the image then run under that user's security context instead of yours. **Requires the caller to be a tenant administrator.** Name a console user by `userId` or `email` (`type: USER`), or an embed user by `embedTenantName` + `externalId` (`type: EMBED_USER`). A deactivated console user is not a valid subject and returns `404`; an email is matched case-insensitively.
@@ -1046,6 +1100,84 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start an Apache Ossie conversion
+         * @description Converts between a Cube data model and an [Apache Ossie (Open Semantic Interchange)](https://github.com/apache/ossie) model, and returns polling URLs immediately. An export converts the YAML data model of the deployment's latest successful build, or uploaded YAML files, to one Ossie model; an import converts an uploaded Ossie model to Cube data model files. Neither changes the deployment. Only static YAML model files are converted; JavaScript models and Jinja-templated files are skipped. Uploads are limited to 512 files of at most 2 MiB each and 20 MiB in total. Requests and results are kept for at most one day. Requires `SchemaRead` or `SchemaUpdate` access. This is currently in preview — reach out to the Cube support team to activate it for your account.
+         */
+        post: operations["OssieConversionPublicController.startConversion"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Get an Apache Ossie conversion status */
+        get: operations["OssieConversionPublicController.conversionStatus"];
+        put?: never;
+        post?: never;
+        /** Cancel an Apache Ossie conversion */
+        delete: operations["OssieConversionPublicController.cancelConversion"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}/files": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get the files of an Apache Ossie conversion
+         * @description Returns `ossie.yaml` for an export, or the generated Cube data model files for an import; empty when the conversion failed. Returns 409 while the conversion is still running or if it ended without a result.
+         */
+        get: operations["OssieConversionPublicController.conversionFiles"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/deployments/{deploymentId}/ossie-conversions/{conversionId}/result": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get an Apache Ossie conversion result
+         * @description Returns the outcome, counts, issues and converter versions of a completed conversion. Returns 409 while the conversion is still running or if it ended without a result. Read the converted files from `/files`.
+         */
+        get: operations["OssieConversionPublicController.conversionResult"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/deployments/{deploymentId}/pods": {
         parameters: {
             query?: never;
@@ -1424,7 +1556,7 @@ export interface paths {
         };
         /**
          * List scheduled tasks
-         * @description Every scheduled task in the deployment, most recently updated first, with its next run time. Needs access to the deployment; embed sessions get `403`.
+         * @description The scheduled tasks in the deployment the caller can see — their own and those shared with them, or every task for an admin — most recently updated first, with each next run time. Needs access to the deployment; embed sessions get `403`.
          */
         get: operations["ScheduledTasksPublicController.listScheduledTasks"];
         put?: never;
@@ -1446,7 +1578,10 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Get a scheduled task */
+        /**
+         * Get a scheduled task
+         * @description A task is visible to its creator, to admins and to whoever it is shared with; anyone else gets `404`.
+         */
         get: operations["ScheduledTasksPublicController.getScheduledTask"];
         /**
          * Update a scheduled task
@@ -1840,7 +1975,7 @@ export interface paths {
          *
          *     Read `GET /workbooks/{workbookId}/dashboard/file` first and copy each `oldText` from its `content`, including whitespace. Without `replaceAll`, `oldText` must occur exactly once. Edits apply in order; if any one fails, nothing is saved. The result is validated like `PUT /workbooks/{workbookId}/dashboard`.
          *
-         *     Returns the new `content` and `hash`. Pass `expectedHash` to get `409` instead of editing a draft that changed since you read it. Requires **manage** access to the workbook.
+         *     Returns the new `content` and `hash`. Pass `expectedHash` to get `409` instead of editing a draft that changed since you read it. Requires **edit** access to the workbook.
          */
         patch: operations["WorkbooksPublicController.replaceWorkbookDashboardFileText"];
         trace?: never;
@@ -3032,6 +3167,122 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/roles/": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List custom roles
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Lists the tenant's custom roles, newest first, cursor-paginated via `first`/`after`. Cube's built-in roles are not included — they are not tenant data.
+         */
+        get: operations["RolesPublicController.getRoles"];
+        put?: never;
+        /**
+         * Create a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Creates a role and returns it with the `id` to assign it by. Role names are unique, so recreating one that already exists answers `409`.
+         *
+         *     To scope the role to specific deployments, send a `Deployment` policy whose `resources` are the deployment ids as strings. A role usually also needs a `Global` policy naming the holder's license tier — `AIBIView`, `AIBIExplore` or `AIBIDevelop` — which is what the console calls the role's Base Role. Pick a tier that covers the deployment actions you grant: the console forces Developer (`AIBIDevelop`) for every deployment action except `DeploymentRead`, `DeploymentAgentRead`, `DownloadData` and `ChatHistoryRead`, so a lower tier here produces a role its role builder would not have let you save:
+         *
+         *     ```json
+         *     {
+         *       "name": "team-analytics",
+         *       "policies": [
+         *         {
+         *           "resourceType": "Global",
+         *           "actions": ["AIBIDevelop"],
+         *           "resources": ["All"]
+         *         },
+         *         {
+         *           "resourceType": "Deployment",
+         *           "actions": ["DeploymentRead", "SchemaRead", "SqlRunnerRead"],
+         *           "resources": ["1734"]
+         *         }
+         *       ]
+         *     }
+         *     ```
+         *
+         *     The tier is **not** required and is **not** derived from the deployment actions: a role sent without one is accepted and simply confers no tier, so a user holding only that role gets the deployment grants and still cannot use the product. That is deliberate — a user holds the union of their roles, so a role that only adds a deployment scope beside another role carrying the tier is valid — but it means nothing warns you. Omit the `Global` policy only when some other role supplies the tier. Note the console does require one on every role it writes, so a role created here without a tier shows an unset Base Role when opened in the role builder.
+         *
+         *     Use `["All"]` as `resources` to cover every deployment, and `"All"` as the single action for full access to the deployments in scope. A policy is rejected when it grants no action, when it names no resource, or when a `Deployment` resource is not a deployment id — pass the numeric id returned by POST /build/api/v1/deployments, not a slug or a name. Ids are checked for shape, not existence, so an id whose deployment was since deleted is kept and simply grants nothing.
+         */
+        post: operations["RolesPublicController.createRole"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/roles/{roleId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Returns one custom role by id, with its policies.
+         */
+        get: operations["RolesPublicController.getRole"];
+        /**
+         * Update a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Updates the fields present in the body and leaves the rest alone. Sending `policies` replaces the role's policies outright, so read the role first if you mean to add one rather than start over. Renaming to a name another role already holds answers `409`. Built-in roles cannot be updated.
+         */
+        put: operations["RolesPublicController.updateRole"];
+        post?: never;
+        /**
+         * Delete a custom role
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Deletes the role and every assignment of it, from users and from groups. Built-in roles cannot be deleted.
+         */
+        delete: operations["RolesPublicController.deleteRole"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/roles/{roleId}/users/{userId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Assign a role to a user
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Gives the user everything the role grants. Idempotent — assigning a role the user already holds changes nothing. Returns `404` if either the user or the role is unknown.
+         *
+         *     Unlike the other endpoints here, this one is not limited to your custom roles: it also accepts the id of a built-in role, and assigning one grants everything that role confers. **Cube's Admin role is the exception and cannot be granted this way** — it is not among the built-in roles this endpoint resolves, so its id returns `404`. No call to this endpoint can make a user an account-wide administrator.
+         */
+        put: operations["RolesPublicController.assignRoleToUser"];
+        post?: never;
+        /**
+         * Remove a role from a user
+         * @description **🔒 Admin only.** Requires administrator privileges — the authenticated principal (API key, embed JWT, or any bearer token) must belong to a user with the admin role.
+         *
+         *     Takes the role away from the user. Idempotent — removing a role the user does not hold changes nothing. Returns `404` if the user is unknown.
+         */
+        delete: operations["RolesPublicController.removeRoleFromUser"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/spec": {
         parameters: {
             query?: never;
@@ -3688,6 +3939,7 @@ export interface components {
             hasAgentAccess?: any | null;
             mcpToken?: string | null;
             resolvedTimezone?: string | null;
+            scheduledTaskPolicies?: components["schemas"]["ChatThreadPolicy"][] | null;
             timezoneSettings?: components["schemas"]["TimezoneSettings"] | null;
             token: string;
             url: string;
@@ -3712,6 +3964,7 @@ export interface components {
             createdAt: string;
             dedicatedAiEngineerRegion?: string | null;
             deploymentId?: number | null;
+            displayName?: string | null;
             embeddingLlm?: components["schemas"]["AgentLlm"] | null;
             embeddingUrl?: string | null;
             id: number;
@@ -3799,6 +4052,7 @@ export interface components {
             aiPaywalled: boolean;
             appTheme?: components["schemas"]["AppTheme"] | null;
             applyThemeGlobally: boolean;
+            boardDashboardsEnabled: boolean;
             creatorMode?: components["schemas"]["CreatorMode"] | null;
             dashboardAppsEnabled: boolean;
             embedding?: components["schemas"]["EmbedSettings"] | null;
@@ -3952,8 +4206,95 @@ export interface components {
         };
         /** @enum {string} */
         BulkUserActionResponseAction: "DEACTIVATE" | "ACTIVATE" | "DELETE";
+        ChatHistoryQuery: {
+            /** @description The data source a `runSql` query ran on. */
+            dataSource?: string | null;
+            error?: string | null;
+            /** @description The latest thumbs up or down on this query, if any. */
+            feedback?: components["schemas"]["ChatHistoryQueryFeedback"] | null;
+            /** @description The tool-call message id. */
+            messageId: string;
+            /** @description Rows the query returned. The rows themselves are never included. */
+            rowCount?: number | null;
+            /** @description The SQL the agent generated. */
+            sql?: string | null;
+            /** @description `incomplete` when the query never returned: the turn was stopped or failed. */
+            status: components["schemas"]["ChatHistoryQueryStatus"];
+            title?: string | null;
+            /** @description `cubeSqlApi` for a query against the semantic layer, `runSql` for one against a warehouse data source. */
+            tool: string;
+        };
+        ChatHistoryQueryFeedback: {
+            createdAt: string;
+            isPositive: boolean;
+            /** @description Who rated the query. */
+            userId?: number | null;
+        };
+        /** @enum {string} */
+        ChatHistoryQueryStatus: "success" | "error" | "incomplete";
+        ChatHistoryThread: {
+            /** @description Null for the Auto agent. */
+            agentId?: number | null;
+            /** @description The thread id, as used in chat URLs and the Chat API. */
+            chatId: string;
+            createdAt: string;
+            /** @description The surface inside the app the thread began on; null when it was not recorded. */
+            initialContext?: string | null;
+            /** @description Where the thread was started; null for a source this API does not name. */
+            source?: components["schemas"]["ChatHistoryThreadSource"] | null;
+            title?: string | null;
+            /** @description Oldest first. Present on a single thread, and on a list with `includeTurns=true`. */
+            turns?: components["schemas"]["ChatHistoryTurn"][] | null;
+            /** @description When the thread last changed, normally its latest turn. */
+            updatedAt: string;
+            user: components["schemas"]["ChatHistoryUser"];
+        };
+        ChatHistoryThreadListResponse: {
+            items: components["schemas"]["ChatHistoryThread"][];
+            pageInfo: components["schemas"]["PageInfo"];
+        };
+        /** @enum {string} */
+        ChatHistoryThreadSource: "web" | "api" | "mcp" | "slack" | "scheduled";
+        /** @enum {string} */
+        ChatHistoryThreadsQuerySortBy: "createdAt" | "updatedAt";
+        /** @enum {string} */
+        ChatHistoryThreadsQuerySortOrder: "asc" | "desc";
+        /** @enum {string} */
+        ChatHistoryThreadsQueryUserType: "internal" | "external";
+        ChatHistoryTurn: {
+            /** @description The agent's last write in the turn. Null for turns recorded before Cube stored turn times. */
+            endedAt?: string | null;
+            /** @description Names of files the user attached. Their content is never included. */
+            files: string[];
+            /** @description The agent's last text reply in the turn; null when it answered only with a chart. */
+            finalAnswer?: string | null;
+            /** @description Position in the thread, from 0. */
+            index: number;
+            /** @description The id of the user message that opened the turn. */
+            messageId: string;
+            /** @description What the user asked, as they typed it. */
+            prompt: string;
+            queries: components["schemas"]["ChatHistoryQuery"][];
+            /** @description When the user sent the prompt. Null for turns recorded before Cube stored turn times. */
+            startedAt?: string | null;
+            /** @description Every tool the agent called in the turn, in first-call order. */
+            tools: string[];
+        };
+        ChatHistoryUser: {
+            /** @description Null when the Cube user was deleted, or the embedded user had no email. */
+            email?: string | null;
+            /** @description Embedded users only. */
+            externalId?: string | null;
+            /** @description For a Cube user, their user id. For an embedded user, an id in a separate number space: identify them by `externalId`. */
+            id: number;
+            /** @description Cube users only. */
+            name?: string | null;
+            type: components["schemas"]["ChatHistoryUserType"];
+        };
+        /** @enum {string} */
+        ChatHistoryUserType: "internal" | "external";
         ChatThreadPolicy: {
-            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
+            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
             effect?: components["schemas"]["ChatThreadPolicyEffect"] | null;
             resourceType: components["schemas"]["ChatThreadPolicyResourceType"];
             resources: string[];
@@ -3961,7 +4302,7 @@ export interface components {
         /** @enum {string} */
         ChatThreadPolicyEffect: "allow" | "deny";
         /** @enum {string} */
-        ChatThreadPolicyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
+        ChatThreadPolicyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread" | "ScheduledTask";
         ColumnFormatOverride: {
             decimalPlaces?: number | null;
             type: components["schemas"]["ColumnFormatOverrideDtoType"];
@@ -4049,6 +4390,7 @@ export interface components {
         /** @enum {string} */
         CreateDeploymentInputDeployMode: "git" | "cli";
         CreateDeploymentTokenInput: {
+            /** @description Token lifetime in seconds, between 60 and 86400. Omit to keep the historical default of 24 hours (86400). Callers that hold the token outside a browser session — scripts, BI tools, scheduled jobs — should request a short lifetime and re-issue tokens instead. */
             expiresIn?: number | null;
         };
         CreateEmbedDashboardCommentBody: {
@@ -4056,6 +4398,7 @@ export interface components {
             parentId?: number | null;
         };
         CreateEmbedGroupInput: {
+            /** @description Optional human-readable description. */
             description?: string | null;
             /** @description Group name, unique within the embed tenant. The `system:` prefix is reserved and rejected. */
             name: string;
@@ -4066,20 +4409,33 @@ export interface components {
             position?: number | null;
         };
         CreateNotificationInput: {
+            /** @description Custom cron expression (required if scheduleType is CUSTOM) */
             customCron?: string | null;
+            /** @description Numeric id of the dashboard to run on the schedule. Provide this OR dashboardPublicId (exactly one). */
             dashboardId?: number | null;
+            /** @description Public id of the dashboard to run on the schedule. Provide this OR dashboardId (exactly one). */
             dashboardPublicId?: string | null;
+            /** @description Day of month (1-31) */
             dayOfMonth?: number | null;
+            /** @description Day of week (0-6, Sunday=0) */
             dayOfWeek?: number | null;
+            /** @description Dimension filters applied to the dashboard when the notification is rendered (substituted into the screenshot/PDF for every recipient). */
             filters?: components["schemas"]["DashboardFilterInput"][] | null;
+            /** @description Hour of the day (0-23) */
             hour?: number | null;
+            /** @description Field-switcher selections applied to the dashboard when the notification is rendered. */
             memberSwitchers?: components["schemas"]["DashboardMemberSwitcherInput"][] | null;
+            /** @description Minute of the hour (0-59) */
             minute?: number | null;
+            /** @description Include an AI-generated "what changed" summary in the notification body. Off by default. */
             notificationAiSummary?: boolean | null;
             notificationEnabled?: boolean | null;
             notificationFormat?: components["schemas"]["CreateNotificationInputNotificationFormat"] | null;
+            /** @description Type of schedule */
             scheduleType: components["schemas"]["CreateNotificationInputScheduleType"];
+            /** @description Time-grain overrides applied to the dashboard when the notification is rendered. */
             timeGrains?: components["schemas"]["DashboardTimeGrainInput"][] | null;
+            /** @description Timezone for the schedule (e.g. "America/New_York") */
             timezone?: string | null;
         };
         /** @enum {string} */
@@ -4117,11 +4473,15 @@ export interface components {
         CreateReportDeliveryInput: {
             destination: components["schemas"]["ReportDeliveryDestinationInput"];
             name: string;
+            /** @description How the owner hears that the delivery failed or recovered. A delivery that runs more than once a day reports only changes in its status; a daily or rarer one reports every failed run. Omit it for the inbox only. */
             notifications?: components["schemas"]["ReportDeliveryNotificationsInput"] | null;
             /** @description Id of the report whose results are delivered. It must belong to this deployment, and the caller must be able to read it. */
             reportId: number;
+            /** @description When the delivery runs. Omit it for a delivery that runs only on request. */
             schedule?: components["schemas"]["ReportDeliveryScheduleInput"] | null;
+            /** @description Which columns land in the sheet, in what order, under which headers. Omit it to deliver every column the query returns, in its order, headed by its name. */
             shape?: components["schemas"]["ReportDeliveryShapeInput"] | null;
+            /** @description What each run does with what the previous one wrote. `overwrite` (the default) replaces the delivered block. `append` adds the whole result below it, header only on the first run and no deduplication. `new_sheet` writes each run to a new tab. */
             writeMode?: components["schemas"]["CreateReportDeliveryInputWriteMode"] | null;
         };
         /** @enum {string} */
@@ -4152,14 +4512,19 @@ export interface components {
         /** @enum {string} */
         CreateReportInputSource: "GOOGLE_SHEETS" | "EXCEL" | "PLAYGROUND" | "D3";
         CreateScheduledTaskInput: {
+            /** @description The agent that runs the task. Omit for the deployment default. */
             agentId?: number | null;
+            /** @description Standard 5-field cron (minute hour day-of-month month day-of-week), e.g. `0 9 * * 1-5` for 9:00 on weekdays. A task runs at most once an hour, so the minute field is a single number. Null or omitted makes the task Manual: it runs only when started with `POST /scheduled-tasks/{taskId}/run`. */
             cronExpression?: string | null;
             description?: string | null;
+            /** @description Create the schedule paused with `false`. Defaults to `true`. */
             isEnabled?: boolean | null;
             name: string;
+            /** @description Notify the creator in Cube's notification inbox when a run finishes, whether it succeeds or fails. Defaults to `false`. */
             notificationEnabled?: boolean | null;
             /** @description What the agent is asked on every run, shown as the task's Instructions in Cube. Each run starts a new chat thread with no memory of earlier ones, so write the whole request. */
             prompt: string;
+            /** @description IANA time zone the cron is read in, e.g. `America/New_York`. Defaults to `UTC`. */
             timezone?: string | null;
         };
         CreateWorkbookInput: {
@@ -4355,9 +4720,13 @@ export interface components {
             jobId: string;
         };
         DashboardExportStatusResponse: {
+            /** @description MIME type of the rendered file. Present once `status` is `completed`. */
             contentType?: string | null;
+            /** @description Why the render failed. Present only when `status` is `failed`. */
             error?: string | null;
+            /** @description Rendering progress, 0-100, when the renderer reports one. */
             progress?: number | null;
+            /** @description Job lifecycle: `pending` and `processing` mean keep polling, `completed` means the file is ready to download, `failed` means it will never be. */
             status: components["schemas"]["DashboardExportStatusResponseStatus"];
         };
         /** @enum {string} */
@@ -4371,12 +4740,17 @@ export interface components {
             value?: (string | number | boolean | unknown[]) | null;
         };
         DashboardFilterInput: {
+            /** @description For string filters: whether matching is case-sensitive */
             caseSensitive?: any | null;
+            /** @description For between filters: whether the end bound is inclusive */
             endInclusive?: any | null;
             /** @description Dimension path, e.g. "Orders.status" */
             member: string;
+            /** @description Filter operator (defaults to "equals") */
             operator?: components["schemas"]["DashboardFilterInputOperator"] | null;
+            /** @description For between filters: whether the start bound is inclusive */
             startInclusive?: any | null;
+            /** @description Filter value. Omit for is_null / is_not_null / is_empty / is_not_empty; provide a 2-element [start, end] array for between. */
             value?: (string | number | boolean | unknown[]) | null;
         };
         /** @enum {string} */
@@ -4612,14 +4986,19 @@ export interface components {
         DatabricksMetricViewPublicationIssueStage: "INPUT" | "VIEW_PROJECTION" | "OSSIE_VALIDATION" | "OSSIE_TO_DATABRICKS" | "OUTPUT_VALIDATION" | "EXECUTION";
         DatabricksMetricViewPublicationPreviewInput: {
             dataSourceName: string;
+            /** @description Choose every deployed Cube view ('all'), an exact ordered list ('selected'), or names matching viewNameRegex ('pattern'). */
             selectionMode: components["schemas"]["DatabricksMetricViewPublicationPreviewInputSelectionMode"];
+            /** @description Optional map of Cube view name to the root source dataset the view projects from, for view projections where that root would otherwise be ambiguous. */
             sourceOverrides?: {
                 [key: string]: string;
             } | null;
+            /** @description Optional Cube view name to Databricks Metric View name overrides. */
             targetNames?: {
                 [key: string]: string;
             } | null;
+            /** @description A safe, bounded regex subset for view names. Supports literals, ^, $, dot, and one .* wildcard; grouping, alternation, lookaround, and backreferences are rejected. */
             viewNameRegex?: string | null;
+            /** @description Required only when selectionMode is 'selected'. */
             viewNames?: string[] | null;
         };
         /** @enum {string} */
@@ -4695,6 +5074,7 @@ export interface components {
             metricViewName: string;
             metricViewSha256?: string | null;
             metricViewYaml?: string | null;
+            /** @description 'partial' means the view published without measures it cannot represent; read withheldMembers for which. */
             outcome: components["schemas"]["DatabricksMetricViewPublicationViewResultOutcome"];
             source?: string | null;
             /** @description Measures this view could not publish, each named with the cube it comes from. A view with entries here is queryable but incomplete. */
@@ -4731,10 +5111,12 @@ export interface components {
             /** @description How many published views are missing measures the conversion could not represent. A run reports COMPLETED with this above zero, because every view published — so automation that treats COMPLETED as "fully published" should assert this is 0. Read views[].withheldMembers for which measures, and why. */
             incompleteViewCount: number;
             integrationPublicId: string;
+            /** @description Live progress while the run is active; null once it is terminal. */
             progress?: components["schemas"]["DatabricksMetricViewSyncProgressResponse"] | null;
             runId: string;
             stage?: string | null;
             startedAt?: string | null;
+            /** @description PARTIAL means at least one view published and another did not. Every non-successful view keeps its previous Databricks definition. */
             status: components["schemas"]["DatabricksMetricViewSyncRunResponseStatus"];
             targetCatalog?: string | null;
             targetSchema?: string | null;
@@ -4761,6 +5143,7 @@ export interface components {
         };
         DatabricksMetricViewSyncViewOutcomeResponse: {
             cubeViewName: string;
+            /** @description A stable reason code, never raw Databricks output. */
             detail?: string | null;
             outcome: components["schemas"]["DatabricksMetricViewSyncViewOutcomeResponseOutcome"];
             /** @description Measures this view published without, as 'cube.member'. Non-empty means the Metric View is queryable but incomplete. */
@@ -4791,10 +5174,12 @@ export interface components {
             pageInfo: components["schemas"]["PageInfo"];
         };
         DbtSyncLogEntry: {
+            /** @description For a phase line, how long the phase took, in milliseconds. */
             durationMs?: number | null;
             /** @description info or error. */
             level: string;
             message: string;
+            /** @description The phase this line belongs to, e.g. dbt-compile. */
             phase?: string | null;
             /** @description Always "system" in this version. "stdout" and "stderr" join it once dbt’s own output is captured, so treat this as an open set. */
             stream: string;
@@ -4807,6 +5192,7 @@ export interface components {
             sources: number;
         };
         DbtSyncProgress: {
+            /** @description Human-readable description of what the sync is doing right now. */
             message?: string | null;
             /** @description Rough completion percentage derived from the stage. Progress reporting only — do not gate on it; gate on the status reaching COMPLETED or FAILED. */
             percentComplete: number;
@@ -4833,13 +5219,20 @@ export interface components {
         DbtSyncRun: {
             /** @description The Cube branch this sync wrote its generated cubes to. */
             branchName: string;
+            /** @description When the sync finished, as an ISO 8601 timestamp, or null while it is still running. This is stamped by the process that ran the sync whereas startedAt is stamped by the process that launched it — two different clocks — so for a run that failed moments after starting, completedAt can even precede startedAt. Use durationMs to show how long a run took rather than subtracting these. */
             completedAt?: string | null;
             deploymentId: number;
+            /** @description How long the sync took, in milliseconds, and the value to use when showing a duration. Measured from a single clock, so it is never negative — prefer it over subtracting startedAt from completedAt, which can disagree with it by a small skew. */
             durationMs?: number | null;
+            /** @description Why the sync stopped. Present only for a failed run. */
             errorMessage?: string | null;
+            /** @description The phase that failed, e.g. dbt-compile. */
             failedPhase?: string | null;
+            /** @description The dbt-repository ref this sync was run against, when pinned. */
             gitRef?: string | null;
+            /** @description The pipeline stage the run reached, e.g. COMPILING_DBT. */
             lastStage?: string | null;
+            /** @description Per-phase timings, in the order they ran. Absent while the sync is running. */
             phases?: components["schemas"]["DbtSyncRunPhase"][] | null;
             /** @description Where this sync got its dbt metadata: `git` (Cube cloned the dbt repository and ran dbt) or `manifest` (the caller uploaded a `manifest.json` and no repository was accessed). Runs predating the manifest source report `git`. */
             source: string;
@@ -4852,6 +5245,7 @@ export interface components {
             /** @description What started the sync: manual (the Cube Cloud UI), api (this REST API), webhook (a push to the dbt repository), agent (Cube AI), or unknown. */
             trigger: string;
             triggerContext?: components["schemas"]["DbtSyncRunTriggerContext"] | null;
+            /** @description The Cube user who started the sync, when a user started it. */
             userId?: number | null;
         };
         DbtSyncRunListResponse: {
@@ -4869,12 +5263,19 @@ export interface components {
             startedOffsetMs: number;
         };
         DbtSyncRunStats: {
+            /** @description How many cubes the sync generated. */
             cubeCount?: number | null;
+            /** @description The dbt version that produced the converted manifest, from its `metadata` block. Advisory — absent when the producer omitted it. */
             dbtVersion?: string | null;
+            /** @description How many files the sync wrote to the branch it created. */
             generatedFileCount?: number | null;
+            /** @description dbt macros found in the manifest. */
             macros?: number | null;
+            /** @description When dbt generated the converted manifest, as an ISO 8601 timestamp. For an uploaded manifest this is how you tell a stale upload from a fresh one; it is NOT when the sync ran. */
             manifestGeneratedAt?: string | null;
+            /** @description dbt models found in the manifest. */
             models?: number | null;
+            /** @description dbt sources found in the manifest. */
             sources?: number | null;
         };
         DbtSyncRunTriggerContext: {
@@ -4887,6 +5288,7 @@ export interface components {
         /** @enum {string} */
         DbtSyncRunsQueryTrigger: "manual" | "api" | "webhook" | "agent" | "unknown";
         DbtSyncStatusResponse: {
+            /** @description Why the sync stopped. Present only when the status is FAILED. */
             error?: string | null;
             progress: components["schemas"]["DbtSyncProgress"];
             /** @description One of INITIALIZING, CREATING_SANDBOX, UPLOADING_PROJECT, INSTALLING_DEPENDENCIES, RUNNING_DBT_DEPS, COMPILING_DBT, PROCESSING_MANIFEST, WRITING_CUBE_FILES, FINALIZING, COMPLETED, FAILED. COMPLETED and FAILED are the only terminal values: poll until one of them, then read the result. Treat any unrecognized value as still running. */
@@ -4940,6 +5342,10 @@ export interface components {
             data: components["schemas"]["DeploymentEnvironmentToken"][];
             items: components["schemas"]["DeploymentEnvironmentToken"][];
             pageInfo?: components["schemas"]["PageInfo"] | null;
+            /**
+             * @deprecated
+             * @description Deprecated: use `pageInfo` instead. Kept for backward compatibility.
+             */
             pagination?: components["schemas"]["DeploymentsPagination"] | null;
         };
         /** @enum {string} */
@@ -4952,6 +5358,10 @@ export interface components {
             data: components["schemas"]["DeploymentEnvironment"][];
             items: components["schemas"]["DeploymentEnvironment"][];
             pageInfo?: components["schemas"]["PageInfo"] | null;
+            /**
+             * @deprecated
+             * @description Deprecated: use `pageInfo` instead. Kept for backward compatibility.
+             */
             pagination?: components["schemas"]["DeploymentsPagination"] | null;
         };
         DeploymentLogLine: {
@@ -5042,6 +5452,10 @@ export interface components {
             pageInfo?: components["schemas"]["PageInfo"] | null;
         };
         DeploymentsListResponse: {
+            /**
+             * @deprecated
+             * @description Deprecated: total number of accessible deployments, ignoring pagination. Kept for backward compatibility.
+             */
             count?: number | null;
             /**
              * @deprecated
@@ -5055,6 +5469,10 @@ export interface components {
              * @description Deprecated: use `pageInfo` instead. Kept for backward compatibility.
              */
             pagination: components["schemas"]["DeploymentsPagination"];
+            /**
+             * @deprecated
+             * @description Deprecated: use `count`. Kept for backward compatibility.
+             */
             totalCount?: number | null;
         };
         DeploymentsPagination: {
@@ -5118,7 +5536,9 @@ export interface components {
             pageInfo: components["schemas"]["PageInfo"];
         };
         EmbedGroupMemberInput: {
+            /** @description Numeric id of an existing embed user. Provide this OR `externalId`. */
             embedUserId?: number | null;
+            /** @description External id of the embed user (the `externalId` passed to `generate-session`). Provide this OR `embedUserId`. */
             externalId?: string | null;
         };
         EmbedGroupMembersInput: {
@@ -5145,16 +5565,27 @@ export interface components {
             sqlQuery: string;
         };
         EmbedSessionSettings: {
+            /** @description Whether this session may use AI at all. This is the master switch over every AI surface in the embed: the dashboard agent, the workbook chat, the AI summary widgets and the standalone embedded chat. Omit to inherit the account-wide embed setting (allowed by default); `false` disables AI even if it is enabled account-wide. Unlike the `show*` keys below it is enforced server-side — the session cannot obtain AI Chat credentials at all, so no request made with it can consume AI tokens — and it outranks them: a `false` here disables a surface whose own `show*` key is `true`. It does not change user roles or permissions for non-AI API calls. `null` is accepted and means the same as omitting it. */
             allowAi?: boolean | null;
+            /** @description Whether AI Chat authenticated with this session may create or modify persistent Cube Workspace content. Set to `false` for headless chat integrations that render answers in their own UI: ad-hoc data analysis and inline tables/charts remain available, but the agent cannot save or update standalone explorations/reports, create or modify workbooks, create or publish dashboards, or direct users to those Cube UI surfaces. Omit or set to `true` to preserve the session user's role-derived authoring capabilities; `true` never grants access the user does not already have. This setting changes only AI Chat tools and instructions. It does not change user roles or permissions for direct API calls. */
             allowChatWorkspaceAuthoring?: boolean | null;
+            /** @description UI language for every embed viewed with this session, as a BCP-47 code — a full code (`es-ES`), a short code (`es`) or a regional variant all resolve to a shipped locale. Sits between the per-iframe `?locale=` parameter, which still wins because it is the more specific answer, and the account-wide default under Embed → Settings. A language Cube does not ship falls through to that default rather than failing the session. */
             locale?: string | null;
+            /** @description Whether AI summary widgets are authorable and refreshable with this session: the "AI widget" entry in the dashboard editor's Add widgets menu, and the prompt input plus Generate/Regenerate controls on an existing widget. An already-generated summary still renders, so a published dashboard keeps its content — it simply cannot be regenerated. Omit to inherit the account-wide embed setting (enabled by default); `false` disables them even if they are enabled account-wide, `true` enables them even if they are disabled account-wide. */
             showAiWidgets?: boolean | null;
+            /** @description Whether embedded published dashboards viewed with this session show the AI chat (agent panel and launcher bubble). Omit to inherit the account-wide embed setting (shown by default); `false` hides the chat even if it is enabled account-wide, `true` shows it even if it is disabled account-wide. Only affects the dashboard surface, and only hides the entry point — use `allowAi` to withhold AI from the session. */
             showDashboardChat?: boolean | null;
+            /** @description Whether the dashboard editor viewed with this session offers its settings panel — the gear button and the sidebar behind it. That panel is the ONLY place an embed user can reach the dashboard slug, the per-dashboard time zone, the per-dashboard agent, the grid behaviour switches and the dashboard theme, so `false` withdraws all of them together. Omit or set to `true` to keep the panel (the default). */
             showDashboardSettings?: boolean | null;
+            /** @description Whether the workbook data pane viewed with this session offers the "Group by Cube" / "Group by Folder" item in its more-actions menu. `false` hides the item AND pins the pane to the grouping it would have defaulted to — by folder when the view defines folders, by cube otherwise. The choice is remembered per browser, so pinning is what makes the pane look the same for every user of the session rather than freezing whatever each of them last picked. No content is withdrawn either way. Omit or set to `true` to leave the choice with the user (the default). */
             showGroupByCube?: boolean | null;
+            /** @description Whether the workbook data pane viewed with this session may display raw member NAMES instead of their titles (the "Show Member Names" item in the pane's more-actions menu). Member names are the data model's own identifiers, so this is a schema-protection setting in the same family as the account-wide Show Generated SQL switch. `false` hides the menu item AND pins the pane to titles, so a user who already switched to names is returned to titles — hiding the control alone would leave them stuck on names with no way back. Omit or set to `true` to leave the choice with the user (the default). */
             showMemberNames?: boolean | null;
+            /** @description Whether the Creator Mode workbook viewed with this session shows its AI entry points: the chat side panel and its toggle, the launchpad's "Ask Cube Agent" button and the "Fix in chat" action on a failed report. Omit to inherit the account-wide embed setting (shown by default); `false` hides them even if they are enabled account-wide, `true` shows them even if they are disabled account-wide. Hides entry points only — use `allowAi` to withhold AI from the session. */
             showWorkbookChat?: boolean | null;
+            /** @description Whether the Creator Mode workspace viewed with this session offers sharing: the workbook header's Share button and the Share action on a workbook, dashboard, exploration or folder row in the workspace list. Set to `false` for a deployment where each embed user should only ever see their own content. Omit or set to `true` to keep sharing available (the default). Hides the entry points only — it does not revoke access already granted, and it never widens what the session's own permissions allow. */
             showWorkbookShare?: boolean | null;
+            /** @description IANA time zone the agent runs its queries in for every embed viewed with this session (e.g. `America/New_York`). Sits between the per-iframe `?timezone=` parameter and the account-wide default, and remains subject to the tenant time-zone policy — it is not a way around it. A bare UTC offset or an unknown name falls through to the account default rather than failing the session, because Cube would compute in UTC and report nothing. */
             timezone?: string | null;
         };
         EmbedSettings: {
@@ -5240,6 +5671,7 @@ export interface components {
             questionTextSnapshot: string;
             score?: number | null;
             updatedAt: string;
+            /** @description Question outcome: pass, fail, review, skipped, or error. */
             verdict?: string | null;
         };
         EvaluationResultsListResponse: {
@@ -5262,15 +5694,23 @@ export interface components {
             updatedAt: string;
         };
         ExportSubjectInput: {
+            /** @description Main user email (for type=USER; provide this OR userId). For type=EMBED_USER it is the email recorded on the provisioned embed user, and the externalId is used when it is omitted. */
             email?: string | null;
+            /** @description Embed tenant name (for type=EMBED_USER) */
             embedTenantName?: string | null;
+            /** @description Embed user external id (for type=EMBED_USER). The user is provisioned if it does not exist yet. */
             externalId?: string | null;
+            /** @description Embed user groups (type=EMBED_USER). Must reference groups that already exist; drives what the rendered dashboard is allowed to show. */
             groups?: string[] | null;
+            /** @description Security context applied to the embed user before rendering (type=EMBED_USER) — the same object a generate-session call takes. Row-level rules in the data model see exactly this. */
             securityContext?: {
                 [key: string]: any;
             } | null;
+            /** @description Subject kind */
             type: components["schemas"]["ExportSubjectInputType"];
+            /** @description Embed user attribute values (type=EMBED_USER). Names must reference attribute definitions that already exist. */
             userAttributes?: components["schemas"]["UserAttributeInput"][] | null;
+            /** @description Main user id (for type=USER; provide this OR email) */
             userId?: number | null;
         };
         /** @enum {string} */
@@ -5307,7 +5747,9 @@ export interface components {
             member: string;
         };
         FinishUploadBody: {
+            /** @default true */
             autoRemoveFiles?: boolean | null;
+            /** @default true */
             awaitGitOperations?: boolean | null;
             commitMessage?: string | null;
             files: Record<string, never>;
@@ -5333,6 +5775,10 @@ export interface components {
         /** @enum {string} */
         FolderDtoType: "FOLDER" | "WORKBOOK" | "REPORT";
         FoldersListResponse: {
+            /**
+             * @deprecated
+             * @description Deprecated: total number of accessible folders, ignoring pagination. Kept for backward compatibility.
+             */
             count?: number | null;
             /**
              * @deprecated
@@ -5346,6 +5792,7 @@ export interface components {
             token: string;
         };
         GenerateSession: {
+            /** @description Branch of `deploymentId` whose data model this session queries. Omit it — or pass the deployment’s production branch — to query the production environment, which is the default. Any other branch of the deployment is accepted: a branch with a staging environment enabled, a shared branch, or a personal dev branch. The branch must be served when the session is generated, otherwise the request is rejected: a branch without a staging environment runs only while someone has it open in Cube (dev mode or the branch switcher), so enable its staging environment for a branch an embedded app should be able to reach at any time. A name that is not a branch of the deployment returns `404`. Content (dashboards, workbooks, reports) is not branch-scoped — the same saved content is rendered against the branch’s data model. */
             branchName?: string | null;
             creatorMode?: boolean | null;
             deploymentId: number;
@@ -5354,7 +5801,12 @@ export interface components {
             embedTenantProfile?: components["schemas"]["EmbedTenantProfile"] | null;
             embedTheme?: components["schemas"]["EmbedTheme"] | null;
             externalId?: string | null;
+            /**
+             * @deprecated
+             * @description Deprecated and ignored. Global groups can no longer be created through this endpoint — define them beforehand via the Cube UI or admin API. Still accepted for backward compatibility (no error), but it has no effect. To create per-embed-tenant groups, use `tenantGroupDefinitions`.
+             */
             groupDefinitions?: components["schemas"]["GroupDefinition"][] | null;
+            /** @description Global user groups — defined once at the tenant level and shared across every embed tenant — to assign this embed user to. Use `groups` for **data-model access control**: each name is placed verbatim into the Cube security context as `cubeCloud.groups`, where your data model's `access_policy` rules reference it to gate cubes, views, members, and row-/column-level filters. The groups must already exist in the tenant (create them via the Cube UI or admin API beforehand) — this endpoint never creates global groups, and names that do not resolve to an existing group are rejected. Global groups are NOT shown in an embed tenant’s Creator Mode UI. To share or organize content inside a single embed tenant, use `tenantGroups` instead. */
             groups?: string[] | null;
             internalId?: string | null;
             isEphemeral?: boolean | null;
@@ -5363,8 +5815,11 @@ export interface components {
             securityContext?: {
                 [key: string]: any;
             } | null;
+            /** @description Per-session overrides for embed behavior, stored in the signed embed token. Each documented key applies only to this session; omitted keys preserve their existing default behavior. */
             settings?: components["schemas"]["EmbedSessionSettings"] | null;
+            /** @description Idempotently create or update the per-embed-tenant groups referenced by `tenantGroups`, before they are assigned. Requires `creatorMode: true` and `embedTenantName`. Use this to declare a tenant’s groups in the same call that assigns them, so you do not need a separate admin request. Applies only to per-embed-tenant groups; global groups must be defined beforehand. */
             tenantGroupDefinitions?: components["schemas"]["GroupDefinition"][] | null;
+            /** @description Per-embed-tenant user groups — scoped to the single embed tenant named by `embedTenantName` — to assign this embed user to. Use `tenantGroups` for **content sharing and organization within one embed tenant**: for example, so a creator can share a workbook, dashboard, or folder with a group of that tenant’s users. These are the only groups shown in the embed tenant’s Creator Mode UI. Requires `creatorMode: true` and `embedTenantName`. Define the groups beforehand — or in the same request — via `tenantGroupDefinitions`. In the Cube security context they appear namespaced as `system:tenant:{embedTenantName}:group:{groupName}`, so a tenant group can never collide with — or be mistaken for — a global `groups` entry of the same name. For organization-wide data-model access policies, use `groups`. */
             tenantGroups?: string[] | null;
             userAttributeDefinitions?: components["schemas"]["UserAttributeDefinition"][] | null;
             userAttributes?: components["schemas"]["UserAttributeInput"][] | null;
@@ -5376,7 +5831,7 @@ export interface components {
         /** @enum {string} */
         GetDeploymentEnvironmentsQueryType: "production" | "staging" | "development";
         /** @enum {string} */
-        GetReportDeliveriesQueryStatus: "active" | "failing" | "needs_reconnect" | "orphaned";
+        GetReportDeliveriesQueryStatus: "active" | "failing" | "needs_reconnect" | "no_sheet_access" | "orphaned";
         /** @enum {string} */
         GetReportDeliveryRunsQuerySortDirection: "ASC" | "DESC";
         /** @enum {string} */
@@ -5384,7 +5839,7 @@ export interface components {
         /** @enum {string} */
         GetReportsQuerySortDirection: "ASC" | "DESC";
         /** @enum {string} */
-        GetResourcePoliciesQueryResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
+        GetResourcePoliciesQueryResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread" | "ScheduledTask";
         /** @enum {string} */
         GetUserAttributesQueryType: "string" | "number" | "boolean" | "string_array" | "number_array";
         /** @enum {string} */
@@ -5450,7 +5905,7 @@ export interface components {
             userCount?: number | null;
         };
         /** @enum {string} */
-        InheritedGroupPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        InheritedGroupPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         InheritedUserPolicyDto: {
             action: components["schemas"]["InheritedUserPolicyDtoAction"];
             email?: string | null;
@@ -5460,7 +5915,7 @@ export interface components {
             userId?: number | null;
         };
         /** @enum {string} */
-        InheritedUserPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        InheritedUserPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         JsonConfigFileDto: {
             /** @description The configuration as canonical JSON text: keys sorted, 2-space indentation, trailing newline. `oldText` in a replacement must match this text exactly. */
             content: string;
@@ -5511,16 +5966,19 @@ export interface components {
             cronExpression: string;
             dashboardId: number;
             deploymentId: number;
+            /** @description Dimension filters applied when the notification is rendered. */
             filters?: components["schemas"]["DashboardFilter"][] | null;
             /** @description Human-readable description of the cron schedule */
             humanReadableSchedule: string;
             id: number;
             isEnabled: boolean;
+            /** @description Field-switcher selections applied when the notification is rendered. */
             memberSwitchers?: components["schemas"]["DashboardMemberSwitcher"][] | null;
             /** @description Whether this notification carries an AI-generated "what changed" summary in its body. */
             notificationAiSummary: boolean;
             notificationEnabled: boolean;
             notificationFormat: string;
+            /** @description Time-grain overrides applied when the notification is rendered. */
             timeGrains?: components["schemas"]["DashboardTimeGrain"][] | null;
             timezone: string;
         };
@@ -5536,17 +5994,27 @@ export interface components {
             username?: string | null;
         };
         NotificationRecipientInput: {
+            /** @description Slack channel id (for type=SLACK) */
             channelId?: string | null;
+            /** @description Slack channel display name (optional, for type=SLACK) */
             channelName?: string | null;
+            /** @description Main user email (for type=USER; provide this OR userId) */
             email?: string | null;
+            /** @description Embed tenant name (for type=EMBED_USER) */
             embedTenantName?: string | null;
+            /** @description Embed user external id (for type=EMBED_USER) */
             externalId?: string | null;
+            /** @description Embed user groups (type=EMBED_USER). Must reference groups that already exist; drives per-recipient access when the report is rendered. */
             groups?: string[] | null;
+            /** @description Embed user security context (type=EMBED_USER). Applied for per-recipient row-level security when the report is rendered. */
             securityContext?: {
                 [key: string]: any;
             } | null;
+            /** @description Recipient kind */
             type: components["schemas"]["NotificationRecipientInputType"];
+            /** @description Embed user attribute values (type=EMBED_USER). Names must reference attribute definitions that already exist. */
             userAttributes?: components["schemas"]["UserAttributeInput"][] | null;
+            /** @description Main user id (for type=USER; provide this OR email) */
             userId?: number | null;
         };
         /** @enum {string} */
@@ -5602,33 +6070,149 @@ export interface components {
         };
         /** @enum {string} */
         OidcTokenConfigDTOSubjectType: "deployment" | "user";
-        PageInfo: {
-            endCursor?: string | null;
-            hasNextPage: boolean;
-            hasPreviousPage: boolean;
-            startCursor?: string | null;
-        };
-        PeriodComparison: {
-            measure: string;
-            offset: components["schemas"]["PeriodComparisonOffset"];
-            outputs?: string[] | null;
-            timeDimension: string;
+        OssieConversionCounts: {
+            /** @description Cube cubes. */
+            cubes: number;
+            /** @description Ossie datasets. */
+            datasets: number;
+            /** @description Ossie dataset fields. */
+            fields: number;
+            /** @description Cube data model files. */
+            files: number;
+            issues: components["schemas"]["OssieConversionIssueCounts"];
+            /** @description Ossie metrics. */
+            metrics: number;
+            /** @description Ossie relationships. */
+            relationships: number;
+            /** @description Cube views. */
+            views: number;
+        };
+        OssieConversionFile: {
+            content: string;
+            /** @description For an export, `ossie.yaml`. For an import, the path of the generated file within the data model project. */
+            path: string;
         };
-        PeriodComparisonOffset: {
-            amount: number;
-            unit: string;
+        OssieConversionFilesListResponse: {
+            /** @description The converted files, empty when the conversion failed. */
+            items: components["schemas"]["OssieConversionFile"][];
+            pageInfo: components["schemas"]["PageInfo"];
         };
-        PivotItems: {
-            columns: string[];
-            displayScale?: components["schemas"]["PivotItemsDisplayScale"] | null;
-            filters: string[];
-            measures: string[];
-            measuresAxis?: components["schemas"]["PivotItemsMeasuresAxis"] | null;
-            measuresPosition?: components["schemas"]["PivotItemsMeasuresPosition"] | null;
-            rows: string[];
-            showAppliedFilters?: boolean | null;
-            showColumnTotals?: boolean | null;
-            showRowTotals?: boolean | null;
+        OssieConversionInput: {
+            /** @description Import only. The dataset the generated view is rooted at, for an Ossie model whose relationships do not determine one. */
+            baseCube?: string | null;
+            /** @description Import only. The warehouse dialect whose expressions are preferred where the Ossie model has several; ANSI_SQL is always the fallback. Defaults to the dialect of the deployment's default data source, or ANSI_SQL. */
+            dialect?: components["schemas"]["OssieConversionInputDialect"] | null;
+            /** @description 'export' converts a Cube data model to an Ossie model; 'import' converts an Ossie model to Cube data model files. */
+            direction: components["schemas"]["OssieConversionInputDirection"];
+            /** @description Export with source 'files' only. Relative `.yml`/`.yaml` paths mapped to their contents, such as a local checkout of the data model. Other files are not accepted. */
+            files?: {
+                [key: string]: string;
+            } | null;
+            /** @description Import only. The Ossie YAML document to convert. */
+            ossieYaml?: string | null;
+            /** @description Export only. 'deployment' (the default) converts the YAML data model of the deployment's latest successful build; 'files' converts the `files` sent with the request. */
+            source?: components["schemas"]["OssieConversionInputSource"] | null;
+            /** @description Export only. Refuse a metric whose value join fan-out could change, instead of converting it with a warning. Defaults to false for a whole-model export and true for a view export. */
+            strictFanout?: boolean | null;
+            /** @description Export only. Convert just this view's public members instead of the whole model. */
+            view?: string | null;
+        };
+        /** @enum {string} */
+        OssieConversionInputDialect: "ANSI_SQL" | "SNOWFLAKE" | "DATABRICKS" | "BIGQUERY";
+        /** @enum {string} */
+        OssieConversionInputDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionInputSource: "deployment" | "files";
+        OssieConversionIssue: {
+            /** @description The converter issue type, such as DROPPED_MEASURE or CONVERSION_FAILED. */
+            code: string;
+            /** @description The model element the issue is about. */
+            element?: string | null;
+            message: string;
+            /** @description ERROR fails the conversion. WARNING marks something dropped or changed. INFO marks something kept in another form. */
+            severity: components["schemas"]["OssieConversionIssueSeverity"];
+        };
+        OssieConversionIssueCounts: {
+            error: number;
+            info: number;
+            warning: number;
+        };
+        /** @enum {string} */
+        OssieConversionIssueSeverity: "ERROR" | "WARNING" | "INFO";
+        OssieConversionResultResponse: {
+            completedAt: string;
+            conversionId: string;
+            counts: components["schemas"]["OssieConversionCounts"];
+            deploymentId: number;
+            direction: components["schemas"]["OssieConversionResultResponseDirection"];
+            durationMs: number;
+            issues: components["schemas"]["OssieConversionIssue"][];
+            /** @description 'failed' exactly when an issue has severity ERROR. */
+            outcome: components["schemas"]["OssieConversionResultResponseOutcome"];
+            runtime: components["schemas"]["OssieConversionRuntime"];
+            /** @description SHA-256 of the converted input. */
+            sourceSha256: string;
+        };
+        /** @enum {string} */
+        OssieConversionResultResponseDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionResultResponseOutcome: "success" | "failed";
+        OssieConversionRuntime: {
+            cubeConverterVersion: string;
+            /** @description The apache/ossie commit the converter was built from. */
+            ossieCommit: string;
+            ossieCoreVersion: string;
+        };
+        OssieConversionStartResponse: {
+            conversionId: string;
+            resultUrl: string;
+            status: components["schemas"]["OssieConversionStartResponseStatus"];
+            statusUrl: string;
+        };
+        /** @enum {string} */
+        OssieConversionStartResponseStatus: "QUEUED";
+        OssieConversionStatusResponse: {
+            conversionId: string;
+            deploymentId: number;
+            direction: components["schemas"]["OssieConversionStatusResponseDirection"];
+            /** @description Why the job ended without a result. */
+            error?: string | null;
+            startedAt: string;
+            /** @description One of QUEUED, RUNNING, COMPLETED, FAILED or CANCELLED. COMPLETED means a result is available, even when the conversion itself failed; read its outcome. FAILED means the job ended without a result. */
+            status: components["schemas"]["OssieConversionStatusResponseStatus"];
+            updatedAt: string;
+        };
+        /** @enum {string} */
+        OssieConversionStatusResponseDirection: "export" | "import";
+        /** @enum {string} */
+        OssieConversionStatusResponseStatus: "QUEUED" | "RUNNING" | "COMPLETED" | "FAILED" | "CANCELLED";
+        PageInfo: {
+            endCursor?: string | null;
+            hasNextPage: boolean;
+            hasPreviousPage: boolean;
+            startCursor?: string | null;
+        };
+        PeriodComparison: {
+            measure: string;
+            offset: components["schemas"]["PeriodComparisonOffset"];
+            outputs?: string[] | null;
+            timeDimension: string;
+        };
+        PeriodComparisonOffset: {
+            amount: number;
+            unit: string;
+        };
+        PivotItems: {
+            columns: string[];
+            displayScale?: components["schemas"]["PivotItemsDisplayScale"] | null;
+            filters: string[];
+            measures: string[];
+            measuresAxis?: components["schemas"]["PivotItemsMeasuresAxis"] | null;
+            measuresPosition?: components["schemas"]["PivotItemsMeasuresPosition"] | null;
+            rows: string[];
+            showAppliedFilters?: boolean | null;
+            showColumnTotals?: boolean | null;
+            showRowTotals?: boolean | null;
         };
         /** @enum {string} */
         PivotItemsDisplayScale: "model" | "absolute" | "thousands" | "millions" | "billions";
@@ -5655,12 +6239,12 @@ export interface components {
         /** @enum {string} */
         PivotItemsMeasuresPosition: "before" | "after";
         Policy: {
-            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
+            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
             resourceType: components["schemas"]["PolicyResourceType"];
             resources: string[];
         };
         /** @enum {string} */
-        PolicyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
+        PolicyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread" | "ScheduledTask";
         PostTokenBySessionIdInput: {
             sessionId: string;
         };
@@ -5690,11 +6274,15 @@ export interface components {
             externalId: string;
         };
         ProvisionEmbedUserInput: {
+            /** @description Email address, shown wherever the user is listed and searchable through `GET /embed-tenants/{embedTenantName}/users`. Must be a valid address, and is stored lowercased. Omit it and Cube derives a synthetic `{externalId}@cubecloud.dev` placeholder instead, which is what makes a user hard to recognise in a list. Supplying it again later updates the stored address. */
             email?: string | null;
             /** @description The id your own system knows this user by — the same `externalId` you will pass to `generate-session`. Trimmed and lowercased before it is stored, so casing never produces a second user. */
             externalId: string;
+            /** @description Global, account-wide groups (the `groups` field of `generate-session`) that gate data-model access. They must already exist. Supplying the field REPLACES the user’s global groups; omit it to leave them untouched, pass `[]` to clear them. */
             groups?: string[] | null;
+            /** @description Groups belonging to this embed tenant (the `tenantGroups` field of `generate-session`), which scope content sharing and organization within the tenant. Create them first via `POST /embed-tenants/{embedTenantName}/groups`. Supplying the field REPLACES the user’s tenant groups; omit it to leave them untouched, pass `[]` to clear them. */
             tenantGroups?: string[] | null;
+            /** @description Display name and avatar. `displayName` is the name shown wherever the user appears, including on content they author. Omitted fields keep their current value. */
             userProfile?: components["schemas"]["EmbedUserProfile"] | null;
         };
         ProvisionEmbedUsersInput: {
@@ -5845,6 +6433,7 @@ export interface components {
             files: components["schemas"]["DataModelFilePath"][];
         };
         RemoveNotificationRecipientInput: {
+            /** @description Embed tenant name (required for type=EMBED_USER; resolves the storage partition) */
             embedTenantName?: string | null;
             /** @description Recipient id: userId (type=USER), embedUserId (type=EMBED_USER), or channelId (type=SLACK) */
             id: number | string;
@@ -5864,6 +6453,7 @@ export interface components {
         ReplaceJsonConfigTextInput: {
             /** @description Replacements applied in order, each to the result of the previous one. Either all apply or nothing is saved. */
             edits: components["schemas"]["TextReplacementInput"][];
+            /** @description The `hash` from your last read. When set, the request fails with 409 if the configuration changed since then. */
             expectedHash?: string | null;
         };
         Report: {
@@ -5911,8 +6501,11 @@ export interface components {
             placeholder?: boolean | null;
         };
         ReportDeliveryColumnInput: {
+            /** @description Name of a column the report’s query returns: its alias in the SQL. Provide this OR `placeholder` (exactly one). */
             column?: string | null;
+            /** @description Text of the header cell. Defaults to the column name; required for a placeholder, where it may be empty. */
             header?: string | null;
+            /** @description `true` for an empty column that holds only its header. Provide this OR `column` (exactly one). */
             placeholder?: components["schemas"]["ReportDeliveryColumnInputPlaceholder"] | null;
         };
         /** @enum {boolean} */
@@ -5925,8 +6518,11 @@ export interface components {
             spreadsheetId: string;
         };
         ReportDeliveryDestinationInput: {
+            /** @description Top-left cell of the delivered block, in A1 notation (e.g. `B3`). Defaults to `A1`. */
             anchorCell?: string | null;
+            /** @description Id of the tab to write into (the `gid` in the spreadsheet URL). A tab is followed by its id through a rename. Provide this OR `sheetName`; neither when `writeMode` is `new_sheet`. */
             sheetId?: number | null;
+            /** @description Title of the tab to write into. Provide this OR `sheetId`; neither when `writeMode` is `new_sheet`. */
             sheetName?: string | null;
             /** @description The Google Sheets spreadsheet: its URL or its id. */
             spreadsheet: string;
@@ -5934,6 +6530,7 @@ export interface components {
         ReportDeliveryNotificationSettings: {
             email: boolean;
             inbox: boolean;
+            /** @description `null` when nothing is posted to Slack. */
             slackChannelId?: string | null;
             slackChannelName?: string | null;
         };
@@ -5942,36 +6539,54 @@ export interface components {
             email: boolean;
             /** @description Notify in the owner's Cube inbox. */
             inbox: boolean;
+            /** @description Also post to this Slack channel, by id. Needs the Cube Slack app installed. */
             slackChannelId?: string | null;
+            /** @description The channel's name, kept for display only. */
             slackChannelName?: string | null;
         };
         ReportDeliveryResponse: {
             deploymentId: number;
             destination: components["schemas"]["ReportDeliveryDestination"];
             id: number;
+            /** @description When the last run finished. `null` before the first. */
             lastRunAt?: string | null;
+            /** @description When the last successful run finished. `null` if none has succeeded. */
             lastSuccessAt?: string | null;
             name: string;
+            /** @description When the schedule next fires. `null` when there is no schedule or it is paused. */
             nextRunAt?: any | null;
             /** @description How the owner hears that the delivery failed or recovered. A delivery that runs more than once a day reports only changes in its status; a daily or rarer one reports every failed run. */
             notifications: components["schemas"]["ReportDeliveryNotificationSettings"];
+            /** @description The accountable user, whose Google account writes the sheet. `null` once that user has been deleted. */
             ownerUserId?: number | null;
+            /** @description When the delivery was paused. `null` if it is not. */
             pausedAt?: any | null;
+            /** @description The delivered report. `null` once that report has been deleted. */
             reportId?: number | null;
+            /** @description Name of the delivered report. `null` once that report has been deleted. */
             reportName?: string | null;
+            /** @description Public id of the delivered report. `null` once that report has been deleted. */
             reportPublicId?: string | null;
+            /** @description Workbook holding the delivered report. `null` once that report has been deleted. */
             reportWorkbookId?: number | null;
+            /** @description The user whose data access the query runs with. `null` once that user has been deleted. */
             runAsUserId?: number | null;
+            /** @description When the run still in progress started. `null` while no run is going. */
             runningSince?: string | null;
+            /** @description `null` for a delivery that runs only on request. */
             schedule?: components["schemas"]["ReportDeliverySchedule"] | null;
+            /** @description `null` when every column is delivered as is. */
             shape?: components["schemas"]["ReportDeliveryShape"] | null;
+            /** @description Current title of the destination tab, read from Google at most every few minutes. `null` for a `new_sheet` delivery, or before its title has been read. */
             sheetTitle?: string | null;
+            /** @description Title of the destination spreadsheet, read from Google at most every few minutes and by each run. `null` before then. */
             spreadsheetTitle?: string | null;
             status: components["schemas"]["ReportDeliveryResponseStatus"];
+            /** @description What each run does with what the previous one wrote. `overwrite` (the default) replaces the delivered block. `append` adds the whole result below it, header only on the first run and no deduplication. `new_sheet` writes each run to a new tab. */
             writeMode: components["schemas"]["ReportDeliveryResponseWriteMode"];
         };
         /** @enum {string} */
-        ReportDeliveryResponseStatus: "active" | "failing" | "needs_reconnect" | "orphaned";
+        ReportDeliveryResponseStatus: "active" | "failing" | "needs_reconnect" | "no_sheet_access" | "orphaned";
         /** @enum {string} */
         ReportDeliveryResponseWriteMode: "overwrite" | "append" | "new_sheet";
         ReportDeliveryRunFailure: {
@@ -5981,14 +6596,19 @@ export interface components {
             text: string;
         };
         ReportDeliveryRunResponse: {
+            /** @description Cells written, headers included. */
             cellsWritten?: number | null;
             deliveryId: number;
+            /** @description `null` unless the run failed. */
             error?: components["schemas"]["ReportDeliveryRunFailure"] | null;
+            /** @description `null` while the run is going. */
             finishedAt?: string | null;
             id: number;
+            /** @description Result rows written, headers excluded. */
             rowsWritten?: number | null;
             /** Format: date-time */
             startedAt: string;
+            /** @description `running` until the run finishes. */
             status: components["schemas"]["ReportDeliveryRunResponseStatus"];
             trigger: components["schemas"]["ReportDeliveryRunResponseTrigger"];
         };
@@ -6007,6 +6627,7 @@ export interface components {
         ReportDeliveryScheduleInput: {
             /** @description Five-field cron expressions; the delivery runs whenever any matches. Runs of one expression must be at least 15 minutes apart: `*\/15 9-17 * * 1-5` is every quarter hour from 09:00 to 17:45 on weekdays. */
             cronExpressions: string[];
+            /** @description IANA timezone the cron expressions are read in, e.g. `America/New_York`. Fixed offsets such as `+02:00` are rejected. Defaults to `UTC`. */
             timezone?: string | null;
         };
         ReportDeliveryShape: {
@@ -6027,6 +6648,10 @@ export interface components {
             reportsCount?: number | null;
         };
         ReportFoldersFindAllResult: {
+            /**
+             * @deprecated
+             * @description Deprecated: total number of accessible report folders, ignoring pagination. Kept for backward compatibility.
+             */
             count?: number | null;
             /**
              * @deprecated
@@ -6069,11 +6694,13 @@ export interface components {
         ReportPlacementResultChunk: {
             from: number;
             hash: string;
+            /** @deprecated */
             to?: number | null;
         };
         ReportPlacementResultChunkInput: {
             from: number;
             hash: string;
+            /** @deprecated */
             to?: number | null;
         };
         /** @enum {string} */
@@ -6106,6 +6733,10 @@ export interface components {
             } | null;
         };
         ReportsListResponse: {
+            /**
+             * @deprecated
+             * @description Deprecated: total number of accessible reports, ignoring pagination. Kept for backward compatibility.
+             */
             count?: number | null;
             /**
              * @deprecated
@@ -6122,7 +6753,7 @@ export interface components {
             userCount?: number | null;
         };
         /** @enum {string} */
-        ResourceGroupPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        ResourceGroupPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         ResourceOwner: {
             email: string;
             firstName?: string | null;
@@ -6143,21 +6774,47 @@ export interface components {
             userId?: number | null;
         };
         /** @enum {string} */
-        ResourceUserPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        ResourceUserPolicyDtoAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         RevokeEmbedSessionInput: {
             /** @description The session id returned by `POST /api/v1/embed/generate-session`. Works whether or not the session has already been exchanged for a token. */
             sessionId: string;
         };
+        Role: {
+            description?: string | null;
+            id: number;
+            name: string;
+            policies: components["schemas"]["Policy"][];
+        };
+        RoleCreateBody: {
+            description?: string | null;
+            /** @description Unique role name. Cannot be one of the built-in role names, which are rejected with `400`: `Admin`, `Developer`, `AIBIDeveloper`, `D3User`, `AIBIUser`, `AIBIViewer`, `Guest`, `EmbedUser`. (The console additionally refuses `None` and `All` in its own role builder; those are accepted here.) */
+            name: string;
+            /** @description What the role grants. Scope a policy to specific deployments by setting `resourceType` to `Deployment` and listing the deployment ids — as returned by POST /build/api/v1/deployments — in `resources`, or `["All"]` for every deployment. An empty `policies` list is accepted and creates a role that grants nothing yet; an individual policy with no actions, or none naming a resource, is rejected. */
+            policies: components["schemas"]["Policy"][];
+        };
+        RoleUpdateBody: {
+            /** @description Omit to leave the description unchanged; `null` clears it. */
+            description?: string | null;
+            /** @description Omit to leave the name unchanged. `null` is rejected. */
+            name?: string;
+            /** @description Replaces the role's policies outright when present — there is no per-policy merge. Omit it to leave them unchanged, or send `[]` to remove them all. `null` is rejected, so a partly-filled client object cannot strip a role's grants by accident. */
+            policies?: components["schemas"]["Policy"][];
+        };
         RoleWithAccess: {
-            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
+            actions: ("All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage")[];
             id: number;
             name: string;
         };
+        RolesListResponse: {
+            items: components["schemas"]["Role"][];
+            pageInfo: components["schemas"]["PageInfo"];
+        };
         RunScheduledTaskResponse: {
             /** @description The chat thread this run writes to. */
             chatThreadUuid: string;
         };
         SaveDatabricksMetricViewIntegrationInput: {
+            /** @description Use retain. The delete-managed value is deprecated and currently retains obsolete Metric Views; it does not delete them. */
             deletionPolicy?: components["schemas"]["SaveDatabricksMetricViewIntegrationInputDeletionPolicy"];
             enabled: boolean;
             /** @description Use 0 to create; otherwise pass the configurationVersion returned by GET. */
@@ -6183,7 +6840,9 @@ export interface components {
             pageInfo: components["schemas"]["PageInfo"];
         };
         ScheduledTaskResponse: {
+            /** @description The agent that runs the task; null runs the deployment default. */
             agentId?: number | null;
+            /** @description Standard 5-field cron (minute hour day-of-month month day-of-week), e.g. `0 9 * * 1-5` for 9:00 on weekdays. Null when the task is Manual: it runs only when started with `POST /scheduled-tasks/{taskId}/run`. */
             cronExpression?: string | null;
             deploymentId: number;
             description?: string | null;
@@ -6191,6 +6850,7 @@ export interface components {
             /** @description False while the schedule is paused. */
             isEnabled: boolean;
             name: string;
+            /** @description When the schedule next fires (ISO 8601, UTC); null for a Manual or paused task. */
             nextRunAt?: string | null;
             /** @description Whether a finished run notifies the creator in Cube's notification inbox. */
             notificationEnabled: boolean;
@@ -6205,6 +6865,7 @@ export interface components {
             /** @description The chat thread the run produced. */
             chatThreadUuid: string;
             createdAt: string;
+            /** @description in-progress, completed, or failed when recorded. Treat unrecognized values as non-terminal. */
             status?: string | null;
         };
         ScheduledTaskRunsListResponse: {
@@ -6284,28 +6945,47 @@ export interface components {
             pageInfo?: components["schemas"]["PageInfo"] | null;
         };
         StartDashboardExportInput: {
+            /** @description Numeric id of the dashboard to export. Provide either this or `dashboardPublicId`, not both. */
             dashboardId?: number | null;
+            /** @description Public id of the dashboard to export. Provide either this or `dashboardId`, not both. */
             dashboardPublicId?: string | null;
+            /** @description Dimension filters applied to the dashboard while it renders. Same shape the scheduled-notification API uses. */
             filters?: components["schemas"]["DashboardFilterInput"][] | null;
+            /** @description Output format: `png` or `pdf`. */
             format: components["schemas"]["StartDashboardExportInputFormat"];
+            /**
+             * @description How the dashboard is laid out. `screenshot` (the default) renders the board as it looks on screen. `print` renders the paginated A4 document the dashboard's 'Print version' menu item produces: one column, every table row, and the filter state as a summary line instead of filter controls. `print` is available for `format: 'pdf'` only.
+             * @default screenshot
+             */
+            layout?: components["schemas"]["StartDashboardExportInputLayout"] | null;
+            /** @description Field-switcher selections applied to the dashboard while it renders. */
             memberSwitchers?: components["schemas"]["DashboardMemberSwitcherInput"][] | null;
+            /** @description Render the dashboard as this user instead of the caller — the queries behind the image run under THEIR security context. Requires the caller to be a tenant admin. Omit to render as the API key's own user. */
             renderAs?: components["schemas"]["ExportSubjectInput"] | null;
+            /** @description Time-grain overrides applied to the dashboard while it renders. */
             timeGrains?: components["schemas"]["DashboardTimeGrainInput"][] | null;
         };
         /** @enum {string} */
         StartDashboardExportInputFormat: "png" | "pdf";
+        /** @enum {string} */
+        StartDashboardExportInputLayout: "screenshot" | "print";
         StartDatabricksMetricViewSyncInput: {
             /** @description The configurationVersion returned by GET. A run is refused when settings changed after they were loaded, so a publish always uses the configuration the caller saw. */
             configurationVersion: number;
+            /** @description Optional idempotency key. Repeating a start with the same key returns the original run instead of publishing twice; omit it and every call starts a new run. */
             idempotencyKey?: string | null;
         };
         StartDbtSyncInput: {
             branchName?: string | null;
+            /** @description The contents of your dbt `target/manifest.json`, as JSON. Required when `source` is `manifest` and ignored otherwise. Produced by `dbt parse`, `dbt compile` or `dbt build`, so a CI job can POST the manifest it just validated and be sure Cube converts exactly that — no re-parse of a branch tip that may already have moved. */
             manifest?: {
                 [key: string]: any;
             } | null;
+            /** @description What to do with the generated cubes. `branch` (the default) commits them to a new Cube branch for review. `files` commits nothing and creates no branch — the files are returned from `GET /dbt-sync/{syncJobId}/generated-files` instead, so your own CI can commit them to your repository through its normal review. Independent of `source`. */
             output?: components["schemas"]["StartDbtSyncInputOutput"] | null;
+            /** @description Git ref in the dbt repository to sync from — a branch or a tag, NOT a commit SHA. Overrides the branch saved on the deployment’s dbt git integration for this sync only, so CI can sync the ref under review (e.g. a pull request’s head branch) instead of the tracked branch. The generated Cube branch is named after it. */
             ref?: string | null;
+            /** @description Where the dbt metadata comes from. `git` (the default) clones the deployment’s dbt repository and runs dbt to produce a manifest. `manifest` converts a manifest you supply in `manifest` below, so Cube never needs access to the dbt repository — and the sync takes seconds rather than minutes, because no sandbox is provisioned and no dbt command runs. */
             source?: components["schemas"]["StartDbtSyncInputSource"] | null;
         };
         /** @enum {string} */
@@ -6318,6 +6998,7 @@ export interface components {
         StartEvaluationInput: {
             agentName?: string | null;
             branchName: string;
+            /** @description Path of one eval-question YAML file to run, relative to the agents directory. Omit to run the complete eval set. */
             questionFile?: string | null;
         };
         StartReportDeliveryRunResponse: {
@@ -6325,19 +7006,24 @@ export interface components {
             runId: number;
         };
         StartSnowflakeSemanticViewPullInput: {
+            /** @description Cube branch to write. Defaults to the deployment's deploy branch. */
             branchName?: string | null;
             commitMessage?: string | null;
             dataSource?: string | null;
+            /** @description Optional idempotency key. Repeating a pull with the same key and inputs returns the original sync. */
             idempotencyKey?: string | null;
             namePrefix?: string | null;
             outputPath: string;
             schema: string;
             titlePrefix?: string | null;
+            /** @description Semantic view names or * patterns to pull. Omit to pull every view in the schema. */
             viewNames?: string[] | null;
         };
         StartSnowflakeSemanticViewSyncInput: {
+            /** @description Cube branch to publish. Defaults to the deployment's deploy branch when omitted. */
             branchName?: string | null;
             dataSource?: string | null;
+            /** @description Optional idempotency key. Repeating a start with the same key returns the original sync instead of pushing the views twice. */
             idempotencyKey?: string | null;
             prefix: string;
             schema: string;
@@ -6382,6 +7068,7 @@ export interface components {
             newText: string;
             /** @description Exact text to replace, copied from `content`, including whitespace. Must occur exactly once unless `replaceAll` is set. */
             oldText: string;
+            /** @description Replace every occurrence of `oldText` instead of requiring one. */
             replaceAll?: boolean | null;
         };
         ThemeFont: {
@@ -6449,6 +7136,7 @@ export interface components {
             body: string;
         };
         UpdateEmbedGroupInput: {
+            /** @description New description. Pass an empty string to clear it. Omit to leave it unchanged. */
             description?: string | null;
         };
         UpdateFolderInput: {
@@ -6459,15 +7147,21 @@ export interface components {
             customCron?: string | null;
             dayOfMonth?: number | null;
             dayOfWeek?: number | null;
+            /** @description Dimension filters applied to the dashboard when the notification is rendered. Replaces the existing set when provided. */
             filters?: components["schemas"]["DashboardFilterInput"][] | null;
             hour?: number | null;
+            /** @description Enable or disable the schedule */
             isEnabled?: boolean | null;
+            /** @description Field-switcher selections applied to the dashboard when the notification is rendered. Replaces the existing set when provided. */
             memberSwitchers?: components["schemas"]["DashboardMemberSwitcherInput"][] | null;
             minute?: number | null;
+            /** @description Include an AI-generated "what changed" summary in the notification body. Off by default. */
             notificationAiSummary?: boolean | null;
             notificationEnabled?: boolean | null;
             notificationFormat?: components["schemas"]["UpdateNotificationInputNotificationFormat"] | null;
+            /** @description Type of schedule */
             scheduleType?: components["schemas"]["UpdateNotificationInputScheduleType"] | null;
+            /** @description Time-grain overrides applied to the dashboard when the notification is rendered. Replaces the existing set when provided. */
             timeGrains?: components["schemas"]["DashboardTimeGrainInput"][] | null;
             timezone?: string | null;
         };
@@ -6505,13 +7199,20 @@ export interface components {
             widgetId: string;
         };
         UpdateReportDeliveryInput: {
+            /** @description Replaces the whole destination. */
             destination?: components["schemas"]["ReportDeliveryDestinationInput"] | null;
             name?: string | null;
+            /** @description Replaces the whole setting; null resets it to the inbox only. How the owner hears that the delivery failed or recovered. A delivery that runs more than once a day reports only changes in its status; a daily or rarer one reports every failed run. */
             notifications?: components["schemas"]["ReportDeliveryNotificationsInput"] | null;
+            /** @description Transfer the delivery to this active user, who must be able to read its report. They become owner and run-as user. Admins only. */
             ownerUserId?: number | null;
+            /** @description Deliver another report. The caller must be able to read it. */
             reportId?: number | null;
+            /** @description Replaces the whole schedule. `null` removes it, so the delivery runs only on request. */
             schedule?: components["schemas"]["ReportDeliveryScheduleInput"] | null;
+            /** @description Replaces the whole shape. `null` removes it, delivering every column. */
             shape?: components["schemas"]["ReportDeliveryShapeInput"] | null;
+            /** @description What each run does with what the previous one wrote. `overwrite` (the default) replaces the delivered block. `append` adds the whole result below it, header only on the first run and no deduplication. `new_sheet` writes each run to a new tab. */
             writeMode?: components["schemas"]["UpdateReportDeliveryInputWriteMode"] | null;
         };
         /** @enum {string} */
@@ -6547,9 +7248,9 @@ export interface components {
             resourceType: components["schemas"]["UpdateResourceGroupPolicyBodyResourceType"];
         };
         /** @enum {string} */
-        UpdateResourceGroupPolicyBodyAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        UpdateResourceGroupPolicyBodyAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         /** @enum {string} */
-        UpdateResourceGroupPolicyBodyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
+        UpdateResourceGroupPolicyBodyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread" | "ScheduledTask";
         UpdateResourceUserPolicyBody: {
             action?: components["schemas"]["UpdateResourceUserPolicyBodyAction"] | null;
             resourceId: number;
@@ -6557,17 +7258,25 @@ export interface components {
             userId?: number | null;
         };
         /** @enum {string} */
-        UpdateResourceUserPolicyBodyAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
+        UpdateResourceUserPolicyBodyAction: "All" | "DeploymentsManage" | "DeploymentCreate" | "DeploymentRead" | "DeploymentUpdate" | "DeploymentDelete" | "SecretsManage" | "DownloadData" | "PlaygroundRead" | "SchemaRead" | "SchemaUpdate" | "SchemaUpdateDevBranches" | "APMRead" | "ChatHistoryRead" | "PreAggregationRead" | "PreAggregationBuild" | "AlertsCreate" | "AlertsRead" | "AlertsUpdate" | "AlertsDelete" | "AuditLogManage" | "BillingRead" | "SqlRunnerRead" | "DataAssetsRead" | "DataAssetsManage" | "CubeNetworkConnect" | "ReportRead" | "ReportEdit" | "ReportManage" | "WorkbookManage" | "WorkbookRead" | "WorkbookEdit" | "ChatThreadRead" | "AgentManage" | "AgentRead" | "AgentSpaceManage" | "AgentAdmin" | "DeploymentAgentRead" | "ScheduledTasksCreate" | "ScheduledTaskRead" | "OAuthIntegrationsManage" | "OAuthIntegrationsIssueTokens" | "McpToolsManage" | "AIBIDevelop" | "AIBIExplore" | "AIBIView" | "ChartPalettesManage" | "DashboardThemesManage" | "AIBIDeveloper" | "AIBIUser" | "AIBIViewer" | "EmbedDeploymentRead" | "EmbedDashboardRead" | "FolderRead" | "FolderEdit" | "FolderManage";
         /** @enum {string} */
-        UpdateResourceUserPolicyBodyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread";
+        UpdateResourceUserPolicyBodyResourceType: "Global" | "Deployment" | "Report" | "ReportFolder" | "Agent" | "AgentSpace" | "Workbook" | "Dashboard" | "Folder" | "ChatThread" | "ScheduledTask";
         UpdateScheduledTaskInput: {
+            /** @description The agent that runs the task. Omit to leave unchanged; null resets it to the deployment default. */
             agentId?: number | null;
+            /** @description New standard 5-field cron, at most hourly (the minute field is a single number). Omit it to keep the current schedule; send null to make the task Manual. */
             cronExpression?: string | null;
+            /** @description Omit to leave unchanged. Send null to clear the description. */
             description?: string | null;
+            /** @description `false` pauses the schedule, `true` resumes it. Omit to leave unchanged. Explicit null answers `400`. */
             isEnabled?: boolean | null;
+            /** @description Omit to leave unchanged. Explicit null answers `400`. */
             name?: string | null;
+            /** @description Turn the inbox notification for finished runs on or off. Omit to leave unchanged. Explicit null answers `400`. */
             notificationEnabled?: boolean | null;
+            /** @description New prompt, shown as the task's Instructions in Cube. Omit to leave unchanged. Explicit null answers `400`. */
             prompt?: string | null;
+            /** @description New IANA time zone for the cron, e.g. `America/New_York`. Omit it to keep the current one. Explicit null answers `400`. */
             timezone?: string | null;
         };
         UpdateWorkbookInput: {
@@ -6591,6 +7300,7 @@ export interface components {
             apiUrl: string;
             /** @description Id of the Usage Analytics deployment the token was issued for. */
             deploymentId: number;
+            /** @description When the token expires, as an ISO-8601 timestamp. Request a new token before this moment — issuing one is idempotent and cheap. */
             expiresAt?: string | null;
             /** @description A short-lived JWT for the Usage Analytics deployment, carrying this tenant’s security context. Send it as `Authorization: Bearer <token>` on requests to `apiUrl`. */
             token: string;
@@ -6618,6 +7328,7 @@ export interface components {
             title?: string | null;
             tosAccepted?: Record<string, never> | null;
             updatedAt?: (string) | null;
+            /** @description The caller's effective resource policies: direct grants, organization-wide grants, and grants inherited from their groups. Only populated by `GET /api/v1/users/me`. */
             userPolicies?: components["schemas"]["Policy"][] | null;
             username: string;
         };
@@ -6742,6 +7453,10 @@ export interface components {
         UserSettingsInput: {
             alternatingRowColors?: boolean | null;
             defaultDeploymentId?: number | null;
+            /**
+             * @deprecated
+             * @description Deprecated and ignored. The changelog now arrives in the notification inbox, which carries its own read state. Accepted for backward compatibility but never read or written.
+             */
             lastSeenChangelogId?: number | null;
             locale?: string | null;
             sheets?: components["schemas"]["SheetsUserSettingsInput"] | null;
@@ -6874,6 +7589,10 @@ export interface components {
             pageInfo: components["schemas"]["PageInfo"];
         };
         WorkbooksListResponse: {
+            /**
+             * @deprecated
+             * @description Deprecated: total number of accessible workbooks, ignoring pagination. Kept for backward compatibility.
+             */
             count?: number | null;
             /**
              * @deprecated
@@ -7609,6 +8328,67 @@ export interface operations {
             };
         };
     };
+    "ChatHistoryPublicController.listChatHistoryThreads": {
+        parameters: {
+            query?: {
+                createdAfter?: string | null;
+                createdBefore?: string | null;
+                updatedAfter?: string | null;
+                updatedBefore?: string | null;
+                userId?: number[] | null;
+                userEmail?: string[] | null;
+                externalUserId?: string[] | null;
+                userType?: components["schemas"]["ChatHistoryThreadsQueryUserType"] | null;
+                source?: ("web" | "api" | "mcp" | "slack" | "scheduled")[] | null;
+                initialContext?: ("chat" | "workbook" | "model" | "dashboard" | "external" | "mcp" | "ai-widget" | "onboarding" | "explore" | "connection_setup" | "slack_dm" | "published-dashboard" | "sheets")[] | null;
+                agentId?: number[] | null;
+                search?: string | null;
+                sortBy?: components["schemas"]["ChatHistoryThreadsQuerySortBy"] | null;
+                sortOrder?: components["schemas"]["ChatHistoryThreadsQuerySortOrder"] | null;
+                includeTurns?: boolean | null;
+                after?: string;
+                first?: number;
+            };
+            header?: never;
+            path: {
+                deploymentId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["ChatHistoryThreadListResponse"];
+                };
+            };
+        };
+    };
+    "ChatHistoryPublicController.getChatHistoryThread": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                chatId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["ChatHistoryThread"];
+                };
+            };
+        };
+    };
     "DeploymentsPublicController.advanceCreationStep": {
         parameters: {
             query?: never;
@@ -8812,6 +9592,131 @@ export interface operations {
             };
         };
     };
+    "OssieConversionPublicController.startConversion": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+            };
+            cookie?: never;
+        };
+        /** @description OssieConversionInput */
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["OssieConversionInput"];
+            };
+        };
+        responses: {
+            202: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionStartResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionStatus": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionStatusResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.cancelConversion": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Cancelled, or already finished. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionFiles": {
+        parameters: {
+            query?: {
+                after?: string | null;
+                first?: number | null;
+            };
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionFilesListResponse"];
+                };
+            };
+        };
+    };
+    "OssieConversionPublicController.conversionResult": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                deploymentId: number;
+                conversionId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["OssieConversionResultResponse"];
+                };
+            };
+        };
+    };
     "DeploymentsPublicController.pods": {
         parameters: {
             query?: {
@@ -11854,6 +12759,251 @@ export interface operations {
             };
         };
     };
+    "RolesPublicController.getRoles": {
+        parameters: {
+            query?: {
+                after?: string | null;
+                first?: number | null;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["RolesListResponse"];
+                };
+            };
+        };
+    };
+    "RolesPublicController.createRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description RoleCreateBody */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RoleCreateBody"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description The name is one of the built-in role names, or a policy grants no action, names no resource, or scopes a `Deployment` to something that is not a deployment id. */
+            400: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description A role with that name already exists. */
+            409: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.getRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.updateRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        /** @description RoleUpdateBody */
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RoleUpdateBody"];
+            };
+        };
+        responses: {
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": components["schemas"]["Role"];
+                };
+            };
+            /** @description `name` or `policies` was `null`, the new name is one of the built-in role names, or a policy is not a valid one. */
+            400: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description A role with that name already exists. */
+            409: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.deleteRole": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role deleted. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description No custom role has that id. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.assignRoleToUser": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+                userId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role assigned, or already held. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description The user or the role is unknown. Cube's Admin role is not resolvable here, so its id answers `404` as well. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
+    "RolesPublicController.removeRoleFromUser": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                roleId: number;
+                userId: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Successful response */
+            200: {
+                headers: {
+                    [name: string]: any;
+                };
+                content: {
+                    "application/json": any;
+                };
+            };
+            /** @description Role removed, or was not held. */
+            204: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+            /** @description The user is unknown. */
+            404: {
+                headers: {
+                    [name: string]: any;
+                };
+                content?: never;
+            };
+        };
+    };
     "OpenApiSpecPublicController.getSpec": {
         parameters: {
             query?: never;