@deepnoodle/mobius 0.0.35 → 0.0.37

package/dist/api/schema.d.ts

@@ -43,7 +43,7 @@ export interface paths {
         post?: never;
         /**
          * Delete API key
-         * @description Permanently deletes the key. In-flight requests using this key will immediately start receiving 401.
+         * @description Revokes the key. In-flight requests using this key will immediately start receiving 401 while credential metadata remains available for audit history.
          */
         delete: operations["deleteAPIKey"];
         options?: never;
@@ -51,6 +51,54 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/organization/api-keys": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List organization API keys
+         * @description Returns organization-level API keys, including pagination metadata. Requires org admin.
+         */
+        get: operations["listOrgAPIKeys"];
+        put?: never;
+        /**
+         * Create organization API key
+         * @description Creates an organization-level API key. The key authenticates as the organization's system principal and acts with the chosen `role` applied org-wide across every project (defaults to `Admin`). The raw key value is returned in `key` and is never retrievable again after this response. Requires org admin.
+         */
+        post: operations["createOrgAPIKey"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/organization/api-keys/{resource_id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get organization API key
+         * @description Returns metadata for a single organization API key without exposing the raw secret. Requires org admin.
+         */
+        get: operations["getOrgAPIKey"];
+        put?: never;
+        post?: never;
+        /**
+         * Delete organization API key
+         * @description Revokes the organization API key. In-flight requests using this key will immediately start receiving 401 while credential metadata remains available for audit history. Requires org admin.
+         */
+        delete: operations["deleteOrgAPIKey"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/projects/{project_handle}/actions": {
         parameters: {
             query?: never;
@@ -379,6 +427,26 @@ export interface paths {
         patch: operations["updateProject"];
         trace?: never;
     };
+    "/v1/projects/{project_handle}/capabilities": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get project capabilities
+         * @description Returns route-local capability booleans for the current caller and project. Clients use this response to show management affordances that match the same project-scoped authorization enforced by write endpoints.
+         */
+        get: operations["getProjectCapabilities"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/projects/{project_handle}/webhooks": {
         parameters: {
             query?: never;
@@ -508,7 +576,7 @@ export interface paths {
         put?: never;
         /**
          * Create interaction
-         * @description Creates a standalone or run-backed interaction. Run-backed interactions emit an `interaction.responded` event when completed; omit `run_id` and `signal_name` for interactions with no loop-run side effect.
+         * @description Creates a standalone or run-backed interaction. Run-backed interactions record an `interaction.responded` event when completed; omit `run_id` and `signal_name` for interactions with no loop-run association.
          */
         post: operations["createInteraction"];
         delete?: never;
@@ -836,10 +904,10 @@ export interface paths {
         };
         get?: never;
         /**
-         * Create or update a memory entry
-         * @description Creates or updates the memory entry identified by `memory_key`. Editing an agent's memory here is equivalent to the agent calling `mobius.memory.remember`. Provisions the store on first write.
+         * Save memory entry
+         * @description Saves the memory entry identified by `memory_key`, creating it when it does not exist. Editing memory here is equivalent to the agent calling `mobius.memory.remember`.
          */
-        put: operations["putAgentMemoryEntry"];
+        put: operations["saveAgentMemoryEntry"];
         post?: never;
         /**
          * Delete a memory entry
@@ -864,6 +932,8 @@ export interface paths {
          * Invoke an agent
          * @description One compound runtime call for hosted apps: it resolves an agent, resolves or creates a session by `session_key`, appends the caller's input message, and starts an agent turn — collapsing the create-or-resolve-session plus start-turn sequence into a single retryable request. This is the entry point a product backend (an embedded app, a Slack handler, a Telegram bot) calls per inbound message; the lower-level session and turn APIs remain available for finer control.
          *
+         *     The optional `config` block lets you send an agent definition with the request — instructions, model, effort, per-turn timeout, toolkits, and skills — instead of using the one stored in Mobius. A field you set replaces the agent's value; a field you leave out keeps it. Mobius remembers the config on the session and reuses it on later turns until you send a new one. If your organization limits values like the model or timeout, those limits still apply. Omit `config` to run the agent on its stored definition.
+         *
          *     By default it returns `202 Accepted` immediately with a durable `after_sequence` stream cursor; the turn keeps running even if the caller disconnects. When the request sets `Accept: text/event-stream`, the response is `200 OK` and the turn's activity is streamed inline on the same connection, identical to the `POST /v1/projects/{project_handle}/sessions/{session_id}/turns` stream. A repeated call with the same `input.idempotency_key` resolves the same session and resumes the existing turn rather than starting a second one, so a webhook handler can acknowledge fast and retry safely. Requires the `mobius.agent.invoke` permission (or the agent's own backing principal).
          */
         post: operations["invokeAgent"];
@@ -1090,7 +1160,7 @@ export interface paths {
         put?: never;
         /**
          * Compact the session transcript now
-         * @description Forces a compaction pass immediately, summarizing every message appended since the last compaction regardless of the session's configured strategy or token threshold. This is the manual counterpart to the `auto` strategy and the way to drive the `manual` strategy. It is a no-op when there is nothing new to compact. Returns the updated session. Requires the `mobius.agent.invoke` permission (or the agent's own backing principal).
+         * @description Compact messages appended since the last compaction immediately, regardless of the configured strategy or token threshold. This is a no-op when there is nothing new to compact. Returns the updated session.
          */
         post: operations["compactSession"];
         delete?: never;
@@ -1448,9 +1518,7 @@ export interface paths {
         put?: never;
         /**
          * Apply a blueprint to a project
-         * @description Creates missing resources, updates resources Mobius manages on behalf of the blueprint, adopts matching uniquely-named resources where safe, and reports the resulting changes and bindings. With `mode: preview` the request validates and returns a plan without mutating anything.
-         *
-         *     Apply writes each resource together with its binding in one transaction, but is not all-or-nothing across resources: a failure in a later tier leaves earlier tiers persisted with bindings, and a re-apply converges. Loops are content-diffed, so an unchanged loop is a no-op and does not mint a new version.
+         * @description Creates missing resources, updates resources Mobius manages on behalf of the blueprint, adopts matching uniquely-named resources where safe, and reports the resulting changes and bindings. With `mode: preview`, the request validates and returns a plan without mutating anything. Re-apply converges because each blueprint resource is persisted with its binding.
          */
         post: operations["applyBlueprint"];
         delete?: never;
@@ -1968,6 +2036,11 @@ export interface components {
             /** @description Model used to produce compaction summaries. */
             summary_model?: string;
         };
+        /**
+         * @description Reasoning-effort level for a turn, lowest (`low`) to highest (`max`). Higher effort spends more tokens on reasoning, improving quality on hard tasks at the cost of latency and credits. Levels above what the resolved model supports are clamped down. Set on an agent it is the default; set on a session or loop step it overrides the agent default. `inherit` (or omitting the field) defers to the layer below — the agent default for a session/step, or the provider's own default when nothing sets a level.
+         * @enum {string}
+         */
+        ThinkingEffort: "inherit" | "low" | "medium" | "high" | "xhigh" | "max";
         /**
          * @description AI actor identity. An agent IS a principal (its permissions are role grants on that principal); agents are useful when loops need a named actor with instructions, configuration, and session presence.
          * @example {
@@ -2017,6 +2090,8 @@ export interface components {
             timeout_seconds?: number;
             /** @description Default session-compaction policy. New sessions opened against this agent inherit it (below server defaults, above explicit per-session overrides). Absent when the agent has no default. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Default reasoning-effort level. New sessions and loop agent steps inherit it, above the provider default and below explicit per-session/per-step overrides. Absent when the agent has no default. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description Current agent status: `active` or `inactive`. */
             status: components["schemas"]["AgentStatus"];
             /** @description Inbox address provisioned via POST /v1/projects/{project_handle}/agents/{resource_id}/inbox (opt-in; not created automatically at agent creation). The field is populated only after a successful provisioning call. Use this address to add the agent as a member on external platforms (Linear, GitHub, Slack, etc.) so the platform can deliver notifications to the agent. */
@@ -2065,6 +2140,10 @@ export interface components {
             key_prefix: string;
             /** @description Principal this key authenticates as. */
             principal_id: string;
+            /** @description Optional role whose permissions cap this key below its principal's full grants. */
+            scope_role_id?: string;
+            /** @description For organization-level keys, the system role the key acts as org-wide (e.g. `Admin`). Absent for project-scoped keys. */
+            org_role?: string;
             /**
              * Format: date-time
              * @description Hard expiry timestamp. Requests using an expired key receive 401.
@@ -2112,6 +2191,10 @@ export interface components {
             key_prefix: string;
             /** @description Principal this key authenticates as. */
             principal_id: string;
+            /** @description Optional role whose permissions cap this key below its principal's full grants. */
+            scope_role_id?: string;
+            /** @description For organization-level keys, the system role the key acts as org-wide (e.g. `Admin`). Absent for project-scoped keys. */
+            org_role?: string;
             /**
              * Format: date-time
              * @description Timestamp when this key expires. Omitted if it does not expire.
@@ -2178,6 +2261,35 @@ export interface components {
             name: string;
             /** @description Principal this key authenticates as. */
             principal_id: string;
+            /** @description Optional role whose permissions cap this key below its principal's full grants. */
+            scope_role_id?: string;
+            /**
+             * Format: date-time
+             * @description Optional hard expiry. Omit for a non-expiring key.
+             */
+            expires_at?: string;
+            /** @description Labels to apply to the new API key. */
+            tags?: components["schemas"]["TagMap"];
+        };
+        /**
+         * @description Request shape for creating an organization-level API key. The key authenticates as the organization's system principal and acts with the chosen `role` applied org-wide across every project.
+         * @example {
+         *       "name": "Org automation",
+         *       "role": "Admin",
+         *       "tags": {
+         *         "owner": "platform"
+         *       }
+         *     }
+         */
+        CreateOrgAPIKeyRequest: {
+            /** @description Human-readable label, unique among organization API keys. */
+            name: string;
+            /**
+             * @description System role the key acts as, applied org-wide across every project. Defaults to `Admin`. `Owner` grants full control (including billing and org deletion); `Admin` covers org and project administration without billing; lower roles narrow to build/run, run-only, or read-only.
+             * @default Admin
+             * @enum {string}
+             */
+            role: "Owner" | "Admin" | "Editor" | "Operator" | "Viewer";
             /**
              * Format: date-time
              * @description Optional hard expiry. Omit for a non-expiring key.
@@ -2376,14 +2488,7 @@ export interface components {
             annotations?: components["schemas"]["ActionAnnotations"];
             /** @description Free-form labels attached to this action. */
             tags?: components["schemas"]["TagMap"];
-            /** @description Project secret reference that stores this action's signing key. Present for HTTP-backed actions. */
-            secret_ref?: string;
-            /**
-             * Format: int64
-             * @description Version of `secret_ref` created by this response. Only populated on create and rotate responses.
-             */
-            secret_version?: number;
-            /** @description Base64-encoded 32-byte HMAC-SHA256 signing key. Only populated on create and rotate responses; null on all other reads. Store this value securely on first receipt — it cannot be retrieved again. */
+            /** @description Base64-encoded 32-byte HMAC-SHA256 signing key. Only populated on create and rotate responses; absent on all other reads. Store this value securely on first receipt — it cannot be retrieved again. */
             signing_secret?: string;
             /**
              * Format: date-time
@@ -2511,6 +2616,8 @@ export interface components {
             run_id?: string;
             /** @description Job that triggered this invocation, if job-backed. */
             job_id?: string;
+            /** @description Environment that executed this invocation, if environment-backed. */
+            environment_id?: string;
             /** @description Loop step name that triggered this invocation. */
             step_name?: string;
             /** @description Name of the action that was invoked. */
@@ -2645,7 +2752,7 @@ export interface components {
             recommended?: boolean;
         };
         /** @description Local LLM models advertised by online project workers. */
-        WorkerModelCatalogResponse: {
+        WorkerModelCatalogListResponse: {
             items: components["schemas"]["WorkerModelCatalogItem"][];
         };
         /** @description One exact local model route available through online workers. */
@@ -2660,9 +2767,14 @@ export interface components {
         };
         /** @description Assign this route to use a local worker model. */
         WorkerModelRoute: {
-            /** @enum {string} */
+            /**
+             * @description Model route mode. Worker catalog routes always use `worker`.
+             * @enum {string}
+             */
             mode: "worker";
+            /** @description Provider id advertised by the local worker. */
             provider: string;
+            /** @description Model identifier advertised by the local worker. */
             model: string;
         };
         /**
@@ -2671,10 +2783,10 @@ export interface components {
          */
         EnvironmentProvider: "sprites" | "cloudflare_containers" | "worker";
         /**
-         * @description Providers the control plane can provision on demand: `sprites` or `cloudflare_containers`. Excludes `worker`: worker-provided environments are registered out-of-band via the attach endpoint and are never provisioned through create/acquire.
+         * @description Providers the control plane can provision on demand. Worker-provided environments are registered out-of-band via the attach endpoint and are never provisioned through create/acquire.
          * @enum {string}
          */
-        ProvisionEnvironmentProvider: "sprites" | "cloudflare_containers";
+        ProvisionEnvironmentProvider: "sprites";
         /**
          * @description Lifecycle status: `provisioning`, `ready`, `running`, `retained`, `destroying`, `destroyed`, `failed`, or `orphaned`.
          * @enum {string}
@@ -2755,7 +2867,7 @@ export interface components {
             name?: string;
             /** @description Optional naming scope for the environment. */
             scope?: components["schemas"]["ResourceScope"];
-            /** @description Provider to provision: `sprites` or `cloudflare_containers`. */
+            /** @description Provider to provision. */
             provider?: components["schemas"]["ProvisionEnvironmentProvider"];
             /** @description Canonical user owner ID. Defaults to the authenticated user. */
             owned_by?: string;
@@ -2998,6 +3110,13 @@ export interface components {
             message_id?: components["schemas"]["WorkerSocketMessageID"];
             error: components["schemas"]["WorkerSocketProtocolError"];
         };
+        /** @description Project-scoped capabilities for the current caller. These booleans are resolved inside the project authorization context and can differ from coarse organization role flags. */
+        ProjectCapabilities: {
+            /** @description True when the caller can update or archive this project. */
+            can_manage_project: boolean;
+            /** @description True when the caller can manage project members, roles, and machine identities. */
+            can_manage_access: boolean;
+        };
         /**
          * @example {
          *       "name": "Product Ops",
@@ -3083,7 +3202,7 @@ export interface components {
              * @description Version of `secret_ref` created by this response. Only populated on create and rotate responses.
              */
             secret_version?: number;
-            /** @description Base64-encoded 32-byte HMAC-SHA256 signing key. Only populated on create and rotate responses; null on all other reads. Store this value securely on first receipt — it cannot be retrieved again. */
+            /** @description Base64-encoded 32-byte HMAC-SHA256 signing key. Only populated on create and rotate responses; absent on all other reads. Store this value securely on first receipt — it cannot be retrieved again. */
             signing_secret?: string;
             /**
              * Format: date-time
@@ -3117,7 +3236,7 @@ export interface components {
          */
         WebhookListResponse: {
             /** @description The list of results for this page. */
-            items?: components["schemas"]["Webhook"][];
+            items: components["schemas"]["Webhook"][];
             /** @description Opaque cursor to pass as `cursor` on the next request. Absent when `has_more` is false. */
             next_cursor?: string;
             /** @description Whether additional pages are available. */
@@ -3145,7 +3264,7 @@ export interface components {
             run_id?: string;
             /** @description The event type that triggered this delivery (e.g. `run.completed`). */
             event_type: string;
-            /** @description Current delivery status: `pending`, `delivered`, or `failed`. */
+            /** @description Current delivery status. */
             status: components["schemas"]["WebhookDeliveryStatus"];
             /** @description Number of delivery attempts made so far. Max 10. */
             attempts: number;
@@ -3164,7 +3283,7 @@ export interface components {
         };
         WebhookDeliveryListResponse: {
             /** @description The list of results for this page. */
-            items?: components["schemas"]["WebhookDeliveryRecord"][];
+            items: components["schemas"]["WebhookDeliveryRecord"][];
             /** @description Opaque cursor to pass as `cursor` on the next request. Absent when `has_more` is false. */
             next_cursor?: string;
             /** @description Whether additional pages are available. */
@@ -3189,8 +3308,8 @@ export interface components {
             name: string;
             /** @description The endpoint Mobius will POST event payloads to. May be left empty at creation time so a candidate URL can be tested via the ping endpoint before it is saved; events do not fire for webhooks with an empty URL. */
             url?: string;
-            /** @description Event types to subscribe to. Use wildcards for broad subscriptions, e.g. `["run.*"]` for all run events. An empty list subscribes to all event types. */
-            events: string[];
+            /** @description Event types to subscribe to. Use wildcards for broad subscriptions, e.g. `["run.*"]` for all run events. Omit this field or send an empty list to subscribe to all event types. */
+            events?: string[];
             /** @description Whether the webhook starts enabled. Defaults to true when omitted. */
             enabled?: boolean;
             /** @description Initial labels to apply to the webhook. */
@@ -3240,9 +3359,9 @@ export interface components {
          * @description Declarative dialog contract for rendering and validating an interaction. Used at both authoring time (inside a loop definition) and runtime (persisted on an interaction). Protocol kind is decoupled from input shape: each kind declares which spec modes are *allowed*, not which is *implied*. An approval may now legitimately use `select` mode (approve/deny/defer), for example.
          *
          *     Allowed combinations:
-         *     * `approval` → `confirm`, `select`
-         *     * `review` → `select`, `input`
-         *     * `request` → `select`, `multi_select`, `input`
+         *     * `request_approval` → `confirm`, `select`
+         *     * `request_review` → `select`, `input`
+         *     * `request_information` → `select`, `multi_select`, `input`
          */
         InteractionSpec: {
             /** @description UI/input mode used to render and validate the response. */
@@ -3478,8 +3597,8 @@ export interface components {
         CreateInteractionRequest: components["schemas"]["CreateStandaloneInteractionRequest"] | components["schemas"]["CreateRunBackedInteractionRequest"];
         /** @description Creates a standalone interaction. Completion records the response but does not deliver a loop signal. */
         CreateStandaloneInteractionRequest: {
-            /** @description Resolved user IDs to target directly. Agents use their agent principal IDs. */
-            target_user_ids?: string[];
+            /** @description Resolved user IDs to target directly. At least one target is required — every interaction needs someone who can answer it, even when a machine consumer is waiting on the outcome. Agents use their agent principal IDs. */
+            target_user_ids: string[];
             /** @description Protocol kind. */
             kind: components["schemas"]["InteractionKind"];
             /** @description Short non-empty title shown to the responder. */
@@ -3521,12 +3640,12 @@ export interface components {
          *     This is an audit-only link: creating an interaction here does not suspend the run, and resolving it does not by itself resume a run. A run only blocks on, and resumes from, human input when the loop definition declares an interaction step — that step creates the interaction and registers the matching wait atomically. Use this endpoint to record a human decision against a run, not to drive run control flow.
          */
         CreateRunBackedInteractionRequest: {
-            /** @description ID of the loop run to resume when this interaction is completed. */
+            /** @description ID of the loop run associated with this interaction. */
             run_id: string;
-            /** @description Signal name the interaction will complete against when run-backed. */
+            /** @description Legacy signal name recorded with the run association. */
             signal_name: string;
-            /** @description Resolved user IDs to target directly. Agents use their agent principal IDs. */
-            target_user_ids?: string[];
+            /** @description Resolved user IDs to target directly. At least one target is required. Agents use their agent principal IDs. */
+            target_user_ids: string[];
             /** @description Protocol kind. */
             kind: components["schemas"]["InteractionKind"];
             /** @description Short non-empty title shown to the responder. */
@@ -3822,6 +3941,8 @@ export interface components {
             timeout_seconds?: number;
             /** @description Default session-compaction policy new sessions inherit from this agent. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Default reasoning-effort level new sessions and loop agent steps inherit from this agent. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description Initial labels used for filtering, ownership, or automation. */
             tags?: components["schemas"]["TagMap"];
         };
@@ -3855,6 +3976,8 @@ export interface components {
             status?: "active" | "inactive";
             /** @description Replacement default session-compaction policy. Send an empty object to clear the default and fall back to server defaults. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Replacement default reasoning-effort level. Send `inherit` to clear the default and leave the provider default in place. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description Replacement labels; send an empty object to clear all tags. */
             tags?: components["schemas"]["TagMap"];
         };
@@ -3922,9 +4045,9 @@ export interface components {
             next_cursor?: string;
         };
         /** @description Content for a memory entry. The key comes from the path. */
-        PutAgentMemoryEntryRequest: {
+        SaveAgentMemoryEntryRequest: {
             /** @description The content to remember. */
-            content?: string;
+            content: string;
             /** @description Optional short one-line summary (≤140 chars) shown in the memory index. */
             summary?: string;
             kind?: components["schemas"]["MemoryKind"];
@@ -4182,10 +4305,10 @@ export interface components {
          */
         SessionStatus: "active" | "archived" | "deleted";
         /**
-         * @description Surface that created the session: `manual`, `api`, or `loop`.
+         * @description Surface that created the session: `manual`, `api`, `loop`, or `interaction`.
          * @enum {string}
          */
-        SessionOrigin: "manual" | "api" | "loop";
+        SessionOrigin: "manual" | "api" | "loop" | "interaction";
         /**
          * @description Boundary used to resolve named sessions: `agent` or `loop`.
          * @enum {string}
@@ -4277,6 +4400,8 @@ export interface components {
             model_provider?: string;
             /** @description Resolved message-compaction policy in effect for this session. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description This session's reasoning-effort override, or absent when the session inherits the agent default. Turns resolve the effective level as agent default then this override. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description The most recent compaction marker in the transcript, or null when the session has never been compacted. Delineates summarized history (sequences at or below `covers_through_sequence`) from the live tail. Returned on the single-session read; absent from list entries. */
             latest_compaction?: components["schemas"]["SessionCompactionBoundary"];
             /** @description Total messages currently in the session, including compaction summaries. */
@@ -4333,6 +4458,8 @@ export interface components {
             status?: components["schemas"]["SessionStatus"];
             /** @description Partial patch to the session's compaction policy. Only the supplied fields change; omitted fields keep their current values. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Reasoning-effort override for this session. Send a level to override, or `inherit` to clear it and fall back to the agent default. Omit to leave the current value unchanged. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
         };
         /**
          * @description JSON payload of a single `data:` line on the session SSE stream, paired with an `event: <event type>` line.
@@ -4586,9 +4713,48 @@ export interface components {
         InvokeAgentRequest: {
             agent_ref: components["schemas"]["AgentRef"];
             session?: components["schemas"]["InvokeSessionSpec"];
+            config?: components["schemas"]["InlineAgentConfig"];
             input: components["schemas"]["InvokeInput"];
             channel_context?: components["schemas"]["ChannelContext"];
         };
+        /**
+         * @description An agent definition sent with the invocation instead of one stored in Mobius ahead of time. Send it on the call that creates the session and it becomes that session's definition; send it again on a later turn to replace it; leave it out and the session keeps the definition it already has.
+         *
+         *     Every field is optional. A field you set replaces the agent's value; a field you leave out keeps the agent's value. The `toolkits` and `skills` lists replace the agent's lists entirely — they are not merged item by item. If your organization sets limits on the model, effort, or timeout, those limits still apply, so a value here can never exceed them. Use `config` for one-off invocations only: loops and schedules must point to a stored agent, so creating or updating one with `config` is rejected.
+         */
+        InlineAgentConfig: {
+            /** @description System-prompt instructions for the agent. Replaces the agent's configured system prompt for this session. Empty falls back to the generated default. */
+            instructions?: string;
+            /** @description LLM model identifier. Resolves through the same model routing and allow rules as a stored agent's model. */
+            model?: string;
+            /** @description Reasoning-effort level for the agent's turns. */
+            effort?: components["schemas"]["ThinkingEffort"];
+            /**
+             * Format: int64
+             * @description Per-turn execution timeout in seconds. Zero uses the platform default. A loop step's own timeout still overrides this.
+             */
+            timeout_seconds?: number;
+            /** @description Toolkit selections that replace the agent's toolkit assignments for this session. Each names the actions (from this project's action catalog) the agent may call. Replaces wholesale — an omitted `toolkits` inherits the agent's assignments. */
+            toolkits?: components["schemas"]["InlineToolkit"][];
+            /** @description Skills that replace the agent's skill assignments for this session. Each carries its full instruction body, lazy-loaded via the invoke_skill tool. Replaces wholesale. */
+            skills?: components["schemas"]["InlineSkill"][];
+        };
+        /** @description A toolkit selection carried in an inline agent config. */
+        InlineToolkit: {
+            /** @description Toolkit name. */
+            name: string;
+            /** @description Action names (from the project catalog) this toolkit grants. */
+            actions?: string[];
+        };
+        /** @description A skill definition carried in an inline agent config. */
+        InlineSkill: {
+            /** @description Skill name, referenced by the invoke_skill tool. */
+            name: string;
+            /** @description One-line summary shown in the agent's skills list. */
+            description?: string;
+            /** @description The skill's full instructions, loaded on demand. */
+            body?: string;
+        };
         /** @description Reference to an agent in this project. Supply exactly one of `id` (the agent identifier) or `name` (the project-unique agent name). A blueprint-binding reference form is reserved for a later release and is not resolvable yet. */
         AgentRef: {
             /** @description Agent identifier. */
@@ -4610,6 +4776,8 @@ export interface components {
             visibility?: components["schemas"]["SessionVisibility"];
             /** @description Per-session compaction overrides applied when the session is first created. Merged over the agent's default policy and server defaults. Ignored when an existing session is resolved. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Reasoning-effort override applied when the session is first created. Overrides the agent default. Ignored when an existing session is resolved. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description Free-form caller metadata stored on a newly created session. */
             metadata?: {
                 [key: string]: unknown;
@@ -4657,6 +4825,8 @@ export interface components {
             model?: string;
             /** @description Per-session compaction overrides applied when the session is first created. Merged over the agent's default policy and server defaults. Ignored when an existing session is resolved. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Reasoning-effort override applied when the session is first created. Overrides the agent default. Ignored when an existing session is resolved. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
             /** @description Free-form caller metadata for the session. */
             metadata?: {
                 [key: string]: unknown;
@@ -4799,11 +4969,6 @@ export interface components {
              * @description Timestamp of the most recent run start, if any.
              */
             last_run_at?: string;
-            /**
-             * Format: date-time
-             * @description Timestamp when this loop was deleted; absent on active loops.
-             */
-            deleted_at?: string;
             /**
              * Format: date-time
              * @description Record creation timestamp.
@@ -5010,6 +5175,11 @@ export interface components {
             ref?: string;
             /** @description Whether the provider reports this repository as private. */
             private?: boolean;
+            /**
+             * @description Authorize the loop's managed environment to push to this repository. Defaults to `false`: the repository is cloned read-only and a `git push` from inside the environment fails with a permission error. Set `true` to let the environment obtain a write-scoped credential for this repository. Opt in per repository so environments are never write-capable by default.
+             * @default false
+             */
+            push: boolean;
         };
         /** @description One named input accepted by a loop spec. */
         LoopSpecInput: {
@@ -5253,9 +5423,9 @@ export interface components {
             agent_id?: string;
             /** @description Prompt or task instructions rendered before the agent turn starts. */
             instructions: string;
-            /** @description Optional per-step tool allow-list. When omitted, prompt-only managed agent steps default to no tools; set `disable_tools: false` to allow the agent's full granted tool set. */
+            /** @description Optional per-step tool allow-list. When omitted and `disable_tools` is not true, the agent's full granted tool set is available. Send an empty array to allow no tools. */
             tool_names?: string[];
-            /** @description Disable granted action and memory tools for this agent step. Reserved runtime tools such as `invoke_skill` and structured-output submission may still be present when applicable. When omitted, the agent's granted tools are available. */
+            /** @description Set true to disable granted action and memory tools for this step. When false or omitted, granted tools are available unless `tool_names` narrows the allow-list. Reserved runtime tools such as `invoke_skill` and structured-output submission may still be present when applicable. */
             disable_tools?: boolean;
             /** @description JSON Schema the agent should satisfy when returning structured output. */
             output_schema?: {
@@ -5270,8 +5440,6 @@ export interface components {
         };
         /** @description Durable conversation-session policy for loop agent steps. Omit to enable the product default: loop-scoped sessions keyed from the triggering conversation when Mobius can identify one, such as a Telegram chat ID. */
         LoopAgentSessionPolicy: {
-            /** @description Reserved for internal synthesized agent executions. Authored loop agent steps are session-backed; setting this to `true` is rejected. */
-            disabled?: boolean;
             /**
              * @description Named-session boundary. `auto` and omitted use `loop`. `agent` intentionally shares the named session across loops using the same agent.
              * @enum {string}
@@ -5285,6 +5453,8 @@ export interface components {
             visibility?: components["schemas"]["SessionVisibility"];
             /** @description Optional per-session compaction policy merged with server defaults when the session is first created. Existing sessions keep their current compaction policy unless edited through a session-specific operation. */
             compaction_policy?: components["schemas"]["SessionCompactionPolicy"];
+            /** @description Optional reasoning-effort override for this step's session turns. Overrides the agent default. Set as a loop default it applies to every agent step; set on a step it overrides the loop default. */
+            thinking_effort?: components["schemas"]["ThinkingEffort"];
         };
         /** @description Model-routing override for an agent step. */
         LoopModelRoute: {
@@ -5336,8 +5506,6 @@ export interface components {
             match?: {
                 [key: string]: unknown;
             };
-            /** @description Optional expr predicate evaluated against `{ event, meta }`. */
-            condition?: string;
             /** @description Optional output mapping evaluated against `{ event, meta }`. */
             payload_mapping?: {
                 [key: string]: string;
@@ -5517,8 +5685,6 @@ export interface components {
             label?: string;
             /** @description Trigger that fired this run, if any. */
             readonly trigger_id?: string;
-            /** @description Internal trigger-fire ledger id used to deduplicate trigger dispatch retries. Present only for trigger-started runs. */
-            readonly trigger_fire_id?: string;
         };
         /**
          * @description One loop run record.
@@ -6135,7 +6301,7 @@ export interface components {
          * @enum {string}
          */
         BlueprintChangeAction: "created" | "updated" | "adopted" | "unchanged";
-        /** @description A reference to a Mobius resource by direct `id`, by blueprint `key` (resolved within this apply first, then against existing bindings), or by `blueprint_ref` (namespace + key). */
+        /** @description A reference to a Mobius resource by direct `id`, by blueprint `key` (resolved within this apply first, then against existing bindings), or by `blueprint_ref` (resolved by key; namespace is recorded as provenance and reserved for namespaced lookup). */
         BlueprintResourceRef: {
             /** @description Direct resource id. */
             id?: string;
@@ -6177,7 +6343,7 @@ export interface components {
              * @description Endpoint kind. Defaults to `http`. Immutable after create.
              * @enum {string}
              */
-            type?: "http" | "worker" | "builtin";
+            type?: "http" | "worker";
             /** @description Endpoint URL for http actions. */
             endpoint?: string;
             title?: string;
@@ -6360,7 +6526,7 @@ export interface components {
         TableSchema: {
             /** @description Name of the required string column that uniquely identifies one row in this table. */
             identity_column: string;
-            /** @description Optional string column projected into the fixed physical `sk` column for efficient secondary lookups. It cannot be changed after creation. */
+            /** @description Optional string column optimized for secondary lookups. It cannot be changed after creation. */
             secondary_key_column?: string;
             /** @description Ordered list of columns accepted in row data. */
             columns: components["schemas"]["ColumnDef"][];
@@ -6484,10 +6650,10 @@ export interface components {
             approx_data_bytes: number;
             /**
              * Format: int64
-             * @description Approximate proportional share of fixed table_rows index bytes.
+             * @description Approximate bytes used by secondary lookup indexes.
              */
             approx_index_bytes: number;
-            /** @description Number of schema columns projected into fixed physical keys. */
+            /** @description Number of schema columns optimized for secondary lookup. */
             indexed_column_count: number;
             /** @description Number of compatibility index declarations stored in the table schema. */
             declared_index_count: number;
@@ -6652,7 +6818,7 @@ export interface components {
             /** @description Search query. Hyphens and other punctuation split terms for keyword matching. */
             query: string;
             /**
-             * @description Search mode. `keyword` uses token-prefix full-text search, `semantic` uses sidecar embedding similarity, and `hybrid` combines both.
+             * @description Search mode. `keyword` uses token-prefix matching, `semantic` uses similarity over indexed row text, and `hybrid` combines both.
              * @default keyword
              * @enum {string}
              */
@@ -6760,29 +6926,6 @@ export interface components {
             updated_at?: string;
             /** @description Principal ID of the actor who last updated this artifact. Empty for system-initiated writes. */
             updated_by?: string;
-            /** @description Thumbnail summary for the default variant, when available. Absent until thumbnail processing has produced a state for the current content. */
-            thumbnail?: components["schemas"]["ArtifactThumbnailSummary"];
-        };
-        /** @description Summary of the Mobius-generated thumbnail for an artifact's default variant. The UI uses `status` to decide whether to fetch the thumbnail image, render a placeholder, or show a typed fallback card. */
-        ArtifactThumbnailSummary: {
-            /**
-             * @description Current thumbnail state for the source artifact's content.
-             * @enum {string}
-             */
-            status: "queued" | "processing" | "available" | "skipped" | "failed" | "stale";
-            /** @description Variant name this summary describes (e.g. `card`). */
-            variant: string;
-            /** @description Thumbnail image MIME type when available (image/jpeg or image/png). */
-            mime_type?: string;
-            /** @description Thumbnail pixel width when available. */
-            width?: number;
-            /** @description Thumbnail pixel height when available. */
-            height?: number;
-            /**
-             * Format: date-time
-             * @description Time this thumbnail state was last updated.
-             */
-            updated_at?: string;
         };
         /**
          * @example {
@@ -7144,6 +7287,122 @@ export interface operations {
             429: components["responses"]["TooManyRequests"];
         };
     };
+    listOrgAPIKeys: {
+        parameters: {
+            query?: {
+                /** @description Maximum number of items to return */
+                limit?: components["parameters"]["LimitParam"];
+                /** @description Cursor for pagination (opaque string from previous response) */
+                cursor?: components["parameters"]["CursorParam"];
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["APIKeyListResponse"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+        };
+    };
+    createOrgAPIKey: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                /**
+                 * @example {
+                 *       "name": "Org automation",
+                 *       "expires_at": "2026-09-15T14:30:00Z",
+                 *       "tags": {
+                 *         "owner": "platform"
+                 *       }
+                 *     }
+                 */
+                "application/json": components["schemas"]["CreateOrgAPIKeyRequest"];
+            };
+        };
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["APIKeyCreateResult"];
+                };
+            };
+            400: components["responses"]["BadRequest"];
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            409: components["responses"]["Conflict"];
+            429: components["responses"]["TooManyRequests"];
+        };
+    };
+    getOrgAPIKey: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Resource ID. */
+                resource_id: components["parameters"]["IDParam"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["APIKey"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+        };
+    };
+    deleteOrgAPIKey: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Resource ID. */
+                resource_id: components["parameters"]["IDParam"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description No Content */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+            429: components["responses"]["TooManyRequests"];
+        };
+    };
     createAction: {
         parameters: {
             query?: never;
@@ -7217,8 +7476,7 @@ export interface operations {
                      *       "tags": {
                      *         "owner": "product"
                      *       },
-                     *       "secret_ref": "mobius/action/act_8m4x9q2v7p5n3r6t",
-                     *       "secret_version": 1,
+                     *       "signing_secret": "base64:one_time_secret",
                      *       "created_at": "2026-06-15T14:30:00Z",
                      *       "updated_at": "2026-06-15T14:30:00Z"
                      *     }
@@ -7345,6 +7603,8 @@ export interface operations {
                 run_id?: string;
                 /** @description Filter to invocations from a specific job. */
                 job_id?: string;
+                /** @description Filter to invocations executed in a specific environment. */
+                environment_id?: string;
                 /** @description Filter to invocations of a specific action. */
                 action_name?: string;
                 /** @description Filter by terminal status (e.g. "success", "failed"). */
@@ -7563,7 +7823,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["WorkerModelCatalogResponse"];
+                    "application/json": components["schemas"]["WorkerModelCatalogListResponse"];
                 };
             };
             401: components["responses"]["Unauthorized"];
@@ -7979,6 +8239,32 @@ export interface operations {
             429: components["responses"]["TooManyRequests"];
         };
     };
+    getProjectCapabilities: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Project handle */
+                project_handle: components["parameters"]["ProjectHandleParam"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Effective capabilities for this project. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProjectCapabilities"];
+                };
+            };
+            401: components["responses"]["Unauthorized"];
+            403: components["responses"]["Forbidden"];
+            404: components["responses"]["NotFound"];
+        };
+    };
     listWebhooks: {
         parameters: {
             query?: {
@@ -9205,7 +9491,7 @@ export interface operations {
             404: components["responses"]["NotFound"];
         };
     };
-    putAgentMemoryEntry: {
+    saveAgentMemoryEntry: {
         parameters: {
             query?: never;
             header?: never;
@@ -9221,7 +9507,15 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PutAgentMemoryEntryRequest"];
+                /**
+                 * @example {
+                 *       "content": "The production database runs in us-east-1.",
+                 *       "summary": "Production database region",
+                 *       "kind": "fact",
+                 *       "importance": 80
+                 *     }
+                 */
+                "application/json": components["schemas"]["SaveAgentMemoryEntryRequest"];
             };
         };
         responses: {
@@ -9247,6 +9541,7 @@ export interface operations {
             401: components["responses"]["Unauthorized"];
             403: components["responses"]["Forbidden"];
             404: components["responses"]["NotFound"];
+            429: components["responses"]["TooManyRequests"];
         };
     };
     deleteAgentMemoryEntry: {
@@ -9275,6 +9570,7 @@ export interface operations {
             401: components["responses"]["Unauthorized"];
             403: components["responses"]["Forbidden"];
             404: components["responses"]["NotFound"];
+            429: components["responses"]["TooManyRequests"];
         };
     };
     invokeAgent: {
@@ -9303,6 +9599,20 @@ export interface operations {
                  *           "user_id": "user_456"
                  *         }
                  *       },
+                 *       "config": {
+                 *         "instructions": "You are Acme's support agent. Be concise and cite ticket numbers.",
+                 *         "model": "claude-sonnet-4-6",
+                 *         "effort": "medium",
+                 *         "toolkits": [
+                 *           {
+                 *             "name": "tickets",
+                 *             "actions": [
+                 *               "tickets.search",
+                 *               "tickets.get"
+                 *             ]
+                 *           }
+                 *         ]
+                 *       },
                  *       "input": {
                  *         "content": [
                  *           {
@@ -9848,6 +10158,7 @@ export interface operations {
             403: components["responses"]["Forbidden"];
             404: components["responses"]["NotFound"];
             409: components["responses"]["Conflict"];
+            429: components["responses"]["TooManyRequests"];
         };
     };
     listLoops: {
@@ -10924,6 +11235,27 @@ export interface operations {
         };
         requestBody: {
             content: {
+                /**
+                 * @example {
+                 *       "namespace": "support",
+                 *       "blueprint_key": "triage",
+                 *       "blueprint_version": "1",
+                 *       "mode": "apply",
+                 *       "resources": {
+                 *         "actions": [
+                 *           {
+                 *             "key": "notify",
+                 *             "name": "support.notify",
+                 *             "title": "Notify support",
+                 *             "description": "Send a support-team notification.",
+                 *             "input_schema": {
+                 *               "type": "object"
+                 *             }
+                 *           }
+                 *         ]
+                 *       }
+                 *     }
+                 */
                 "application/json": components["schemas"]["ApplyBlueprintRequest"];
             };
         };