@deepraxis/sdk 0.1.0-dev.8ad8e89 → 0.1.0-dev.8c50d77

package/dist/operations.generated.js

@@ -4,7 +4,7 @@ export const operations = [
         "resource": "agent.agents",
         "method": "list",
         "summary": "List agents",
-        "description": "List the agents of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Use it to find an agent id before creating a session; to read one agent use agents.retrieve, to see its history use agents.versions.list. Archived agents are hidden unless include_archived is true. Filter kind=personal for durable-computer agents or kind=business for per-session environments. Pass next_page from the response as page to read the next page; a null next_page means the end.",
+        "description": "List the agents of the workspace behind your API key, newest first, in pages of at most 100 (default 20). Use it to find an agent id before creating a session; to read one agent use agents.retrieve, to see its history use agents.versions.list. Archived agents are hidden unless include_archived is true. Filter kind=personal for durable-computer agents or kind=service for per-session environments. Pass next_page from the response as page to read the next page; a null next_page means the end.",
         "http": "GET",
         "path": "/agent/v1/agents",
         "streaming": "no",
@@ -50,7 +50,7 @@ export const operations = [
                 "type": "string",
                 "enum": [
                     "personal",
-                    "business"
+                    "service"
                 ],
                 "required": false,
                 "description": "Filter agents by their immutable kind, including agents created before kind was recorded."
@@ -61,7 +61,7 @@ export const operations = [
         "resource": "agent.agents",
         "method": "create",
         "summary": "Create agent",
-        "description": "Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; the native skill tool is separate from the skills field. Use tools: [{type: \"agent_toolset_20260401\"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: \"agent_toolset_20260401\", default_config: {enabled: false}, configs: [{name: \"codemode\", enabled: true}, {name: \"bash\", enabled: true, permission_policy: {type: \"always_ask\"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. Example: {\"name\":\"helper\",\"model\":{\"id\":\"deepseek-flash\"},\"tools\":[{\"type\":\"agent_toolset_20260401\"}]}.",
+        "description": "Create a reusable agent definition, then pass its returned id to sessions.create to start a conversation. The definition includes model, system prompt, tools, MCP servers and an optional multiagent roster. It is saved as version 1; real updates create new versions. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; the native skill tool is separate from the skills field. Use tools: [{type: \"agent_toolset_20260401\"}] for built-in tools including codemode, skill and agent; inspect toolsets.list for names and schemas, and keep bash enabled for native additions. To offer only some tools, set default_config: {enabled: false} and list the tools to keep in configs, e.g. tools: [{type: \"agent_toolset_20260401\", default_config: {enabled: false}, configs: [{name: \"codemode\", enabled: true}, {name: \"bash\", enabled: true, permission_policy: {type: \"always_ask\"}}]}]; every tool not listed, including todo_write, enter_plan_mode, ask_user_question and goal_read, follows default_config, and the response echoes it. codemode runs through bash, so enabling codemode while bash is disabled returns 400. Optional mcp_toolset entries pair with mcp_servers. model accepts platform model IDs such as deepseek-flash, not only the Claude IDs in the protocol examples. model.settings.reasoning sets default thinking; other extra model controls return 400. model and every models.allowed entry must be a catalog model that can run an agent: an unknown id returns 400 \"model <id> is not in the model catalog\" and an embedding, image or speech model returns 400 \"model <id> cannot run an agent\". name is trimmed and may not be blank or contain NUL or line breaks. avatar is trimmed, must not contain spaces or point at a loopback, private or internal host, and its scheme is stored in lowercase. script and workflow binding ids are stored in lowercase, the form automation matches; bindings together with environment_id null return 400 because bindings need a machine. Example: {\"name\":\"helper\",\"model\":{\"id\":\"deepseek-flash\"},\"tools\":[{\"type\":\"agent_toolset_20260401\"}]}.",
         "http": "POST",
         "path": "/agent/v1/agents",
         "streaming": "no",
@@ -75,7 +75,7 @@ export const operations = [
                     "name": "model",
                     "type": "object",
                     "required": true,
-                    "description": "Model identifier. Accepts the\n[model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),\ne.g. `claude-opus-5`, or a `model_config` object for additional configuration\ncontrol"
+                    "description": "A model id from the Praxis model catalog (`praxis.model.models.list`), or a `model_config` object for additional configuration control. Unlike Anthropic, Claude model ids other than those in the catalog are rejected."
                 },
                 {
                     "name": "name",
@@ -128,15 +128,22 @@ export const operations = [
                     "required": false,
                     "description": "Tool configurations available to the agent. Maximum of 128 tools\nacross all toolsets allowed."
                 },
+                {
+                    "name": "bindings",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings."
+                },
                 {
                     "name": "kind",
                     "type": "string",
                     "enum": [
                         "personal",
-                        "business"
+                        "service"
                     ],
                     "required": false,
-                    "description": "Immutable agent kind. personal requires computer_id; business cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error."
+                    "description": "Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error."
                 },
                 {
                     "name": "computer_id",
@@ -176,6 +183,25 @@ export const operations = [
                     "required": false,
                     "description": "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
                 },
+                {
+                    "name": "avatar",
+                    "type": "string",
+                    "required": false,
+                    "description": "Avatar image of the agent: an absolute https URL of at most 2048 characters, without credentials; any other value returns 400 avatar must be an https URL. It is the default picture in agent lists, the agent detail, the chat header and embedded chat when the embed appearance sets none. Saved with the agent version like other configuration, so apply=false keeps the previous avatar in effect until that version is applied. Omit on create for no avatar; on update, omit to keep it and send null to clear it. Both personal and service agents accept it. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
+                {
+                    "name": "environment_id",
+                    "type": "string",
+                    "required": false,
+                    "description": "Default environment of a service agent: the environment_id a new session gets when it names none. Use light, node22 or the env_ id of an active environment of your organization; any other value returns 400 environment_id <id> was not found. null means no environment, so sessions are plain conversation without codemode or bash. Saved with the agent version like other configuration, so apply=false keeps the previous environment in effect for new sessions until that version is applied; a session that sets environment_id itself, null included, overrides it. Omit on create for light; on update, omit to keep it. Versions saved before this field existed read as light. Personal agents use a Computer: a non-null value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
+                {
+                    "name": "vault_ids",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Default vaults of a service agent: the vault_ids a new session gets when it names none, so the agent's credentials follow the version. At most 50 ids without duplicates; each must be a vault of your organization that is not archived, otherwise 400 vault_ids[<index>] <id> was not found. Saved with the agent version like other configuration, so apply=false keeps the previous vaults in effect for new sessions until that version is applied; a session that sets vault_ids itself, [] included, overrides it. Omit on create for []; on update, omit to keep the list and send an array to replace it as a whole. Versions saved before this field existed read as []. Embed tokens use the vault_ids of the version they pin; vault_ids on the embed policy is deprecated, still accepted and ignored. Personal agents get no default vaults: a non-empty value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
                 {
                     "name": "preset",
                     "type": "string",
@@ -218,7 +244,7 @@ export const operations = [
         "resource": "agent.agents",
         "method": "update",
         "summary": "Update agent",
-        "description": "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version; existing sessions keep the version they were created with. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; use the native skill tool for available runtime skills.",
+        "description": "Update an agent. Send the current version in the body for optimistic concurrency: a stale version returns 409, and an update that changes nothing keeps the version number. Any real change saves a new version. apply defaults to true and moves active_version to the new version, or to the latest when configuration is unchanged; apply false saves without applying. version_note optionally records up to 280 characters on a newly created version. Existing sessions and tokens keep their version. Omitted fields keep their value. multiagent takes null or a coordinator roster; subagent_model keeps its value when omitted and is cleared by null. Archived agents cannot be updated. Unlike Anthropic Managed Agents, nonempty skills attachments return 400; use the native skill tool for available runtime skills.",
         "http": "POST",
         "path": "/agent/v1/agents/{agent_id}",
         "streaming": "no",
@@ -256,7 +282,7 @@ export const operations = [
                     "name": "model",
                     "type": "object",
                     "required": false,
-                    "description": "Model identifier. Accepts the\n[model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),\ne.g. `claude-opus-5`, or a `model_config` object for additional configuration\ncontrol. Omit to preserve. Cannot be cleared."
+                    "description": "A model id from the Praxis model catalog (`praxis.model.models.list`), or a `model_config` object for additional configuration control. Unlike Anthropic, Claude model ids other than those in the catalog are rejected."
                 },
                 {
                     "name": "multiagent",
@@ -296,15 +322,34 @@ export const operations = [
                     "required": false,
                     "description": "The agent's current version, used to prevent concurrent overwrites.\nObtain this value from a create or retrieve response. Must be at least 1 if\nspecified. When supplied, the request fails if it does not match the server's\ncurrent version; omit to apply the update unconditionally."
                 },
+                {
+                    "name": "apply",
+                    "type": "boolean",
+                    "required": false,
+                    "description": "Defaults to true: apply the newly saved version, or the latest version when configuration is unchanged. Set false to save without changing active_version. Unlike Managed Agents, saving and applying can be separate."
+                },
+                {
+                    "name": "version_note",
+                    "type": "string",
+                    "required": false,
+                    "description": "Optional change explanation stored as note on the new immutable version, up to 280 characters. Omission stores null. A note alone does not create a version or rewrite an existing note."
+                },
+                {
+                    "name": "bindings",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Replace the whole bindings list; omission preserves it, and null or [] clears it. Additions apply only to new sessions; once this version is applied, disabling, removing or downgrading a binding revokes it immediately in running sessions on older versions, while apply=false changes no access. Only service agents accept a nonempty list."
+                },
                 {
                     "name": "kind",
                     "type": "string",
                     "enum": [
                         "personal",
-                        "business"
+                        "service"
                     ],
                     "required": false,
-                    "description": "Immutable agent kind. personal requires computer_id; business cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error."
+                    "description": "Immutable agent kind. personal requires computer_id; service cannot bind a computer. Omit on create to infer from computer_id. On update, the same kind is ignored; changing kind or crossing its computer binding returns 400 invalid_request_error."
                 },
                 {
                     "name": "computer_id",
@@ -344,6 +389,25 @@ export const operations = [
                     "required": false,
                     "description": "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
                 },
+                {
+                    "name": "avatar",
+                    "type": "string",
+                    "required": false,
+                    "description": "Avatar image of the agent: an absolute https URL of at most 2048 characters, without credentials; any other value returns 400 avatar must be an https URL. It is the default picture in agent lists, the agent detail, the chat header and embedded chat when the embed appearance sets none. Saved with the agent version like other configuration, so apply=false keeps the previous avatar in effect until that version is applied. Omit on create for no avatar; on update, omit to keep it and send null to clear it. Both personal and service agents accept it. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
+                {
+                    "name": "environment_id",
+                    "type": "string",
+                    "required": false,
+                    "description": "Default environment of a service agent: the environment_id a new session gets when it names none. Use light, node22 or the env_ id of an active environment of your organization; any other value returns 400 environment_id <id> was not found. null means no environment, so sessions are plain conversation without codemode or bash. Saved with the agent version like other configuration, so apply=false keeps the previous environment in effect for new sessions until that version is applied; a session that sets environment_id itself, null included, overrides it. Omit on create for light; on update, omit to keep it. Versions saved before this field existed read as light. Personal agents use a Computer: a non-null value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
+                {
+                    "name": "vault_ids",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Default vaults of a service agent: the vault_ids a new session gets when it names none, so the agent's credentials follow the version. At most 50 ids without duplicates; each must be a vault of your organization that is not archived, otherwise 400 vault_ids[<index>] <id> was not found. Saved with the agent version like other configuration, so apply=false keeps the previous vaults in effect for new sessions until that version is applied; a session that sets vault_ids itself, [] included, overrides it. Omit on create for []; on update, omit to keep the list and send an array to replace it as a whole. Versions saved before this field existed read as []. Embed tokens use the vault_ids of the version they pin; vault_ids on the embed policy is deprecated, still accepted and ignored. Personal agents get no default vaults: a non-empty value returns 400 and the field is not returned. /agent/v1 only; /anthropic neither accepts nor returns it."
+                },
                 {
                     "name": "preset",
                     "type": "string",
@@ -375,11 +439,149 @@ export const operations = [
         ],
         "query": []
     },
+    {
+        "resource": "agent.agents.customers.auth.accessTokens",
+        "method": "create",
+        "summary": "Create customer access token",
+        "description": "Exchange a grant code, or the agent's publishable key for an anonymous visitor, for a customer access token that authorizes the agent's embedded sessions.\n\nNo Authorization header is required: the grant code or the publishable key is the credential. Agent Kit calls this from the browser, so send the page Origin. With grant_code, the code is consumed atomically: concurrent attempts have exactly one winner, and unknown, used, expired and other-agent codes all return the same 401 GRANT_CODE_INVALID. The sign-in starts now and lasts the code's max_session_seconds. Unlike Shopify, a visitor without an account gets a token too: send publishable_key instead and a new anonymous customer (anon_…) is created, bound to the request Origin, for 7 days. The access token lasts at most two hours and never outlives the sign-in; renew it with access_tokens/renew before expires_at. Both forms share the per-IP minute limit of anonymous issuance (default 20). Example body: {\"grant_code\":\"cgc_…\"}.",
+        "http": "POST",
+        "path": "/agent/v1/agents/{agent_id}/customers/auth/access_tokens",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "agent_id",
+                "sdkName": "agent_id"
+            }
+        ],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": []
+        }
+    },
+    {
+        "resource": "agent.agents.customers.auth.accessTokens",
+        "method": "deleteCurrent",
+        "summary": "Log out customer",
+        "description": "Log the customer out by revoking the sign-in of the presented access token and every token issued in it.\n\nSend the current customer access token as the Bearer credential, with no body, when the customer logs out of your site. Every token of the sign-in, including renewed ones, stops working, and their live event streams close; the customer's conversations are kept. Returns 204. Calling it again with the same token returns 401 ACCESS_TOKEN_REVOKED, so treat that as already logged out.",
+        "http": "DELETE",
+        "path": "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/current",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "agent_id",
+                "sdkName": "agent_id"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "agent.agents.customers.auth.accessTokens.renew",
+        "method": "create",
+        "summary": "Renew customer access token",
+        "description": "Get a fresh customer access token in the same sign-in, authenticated with the current one.\n\nSend the current customer access token as the Bearer credential, with no body, a few minutes before expires_at. The new token keeps the version, budget, context, metadata and origin binding of the sign-in and lasts at most two hours, never past session_expires_at. Unlike Shopify, renewal does not revoke the presented token: it stays valid until its own expiry, so a reply that is streaming on it is not cut off. When less than 60 seconds of the sign-in remain, renewal returns 401 CUSTOMER_SESSION_EXPIRED; sign the customer in again with a new grant code from your backend. A token that was logged out or merged returns 401 ACCESS_TOKEN_REVOKED.",
+        "http": "POST",
+        "path": "/agent/v1/agents/{agent_id}/customers/auth/access_tokens/renew",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "agent_id",
+                "sdkName": "agent_id"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "agent.agents.customers.auth.grantCodes",
+        "method": "create",
+        "summary": "Create customer grant code",
+        "description": "Sign your logged-in customer in to a service agent from your backend with a one-time grant code that Agent Kit exchanges for a customer access token.\n\nCall this from your backend with your API key after your own login succeeds, then pass the returned code to Agent Kit in the browser; never call it from the browser. Customer authorization follows Shopify Storefront customer access tokens (Multipass-style sign-in, a short-lived token, renewal and logout), so that experience applies. customer_id is your own identifier for the customer: use an opaque id such as your database user id, not an email address or phone number. The value auth is reserved, and ids starting with anon_ are reserved for anonymous customers. The code works once and expires after expires_in seconds (default 900). The sign-in it starts lasts max_session_seconds (default 7 days); version, budget_cents, system_message, agent_override and metadata apply to every token of the sign-in. Unlike Shopify, origin binds the whole sign-in to one page origin, and anonymous_access_token merges the conversations of the anonymous visitor who chatted before signing in into this customer. Example body: {\"customer_id\":\"cus_8f2a91\",\"origin\":\"https://shop.example.com\"}.",
+        "http": "POST",
+        "path": "/agent/v1/agents/{agent_id}/customers/auth/grant_codes",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "agent_id",
+                "sdkName": "agent_id"
+            }
+        ],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "customer_id",
+                    "type": "string",
+                    "required": true,
+                    "description": "Your stable, opaque identifier for the signed-in customer, such as your database user id. Do not use an email address or phone number. \"auth\" is reserved, and ids starting with anon_ are reserved for anonymous customers."
+                },
+                {
+                    "name": "version",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Existing agent version that every token of this sign-in pins. Defaults to the agent's active_version when the code is issued."
+                },
+                {
+                    "name": "budget_cents",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Budget in cents for each session the customer starts. Defaults to the embed policy session budget and cannot exceed its maximum."
+                },
+                {
+                    "name": "system_message",
+                    "type": "array",
+                    "itemType": "object",
+                    "required": false,
+                    "description": "Optional context the agent receives at the start of each session, as text blocks, limited to 8192 UTF-8 bytes in total."
+                },
+                {
+                    "name": "agent_override",
+                    "type": "object",
+                    "required": false,
+                    "description": "Optional system prompt override, accepted only when the embed policy allows agent overrides."
+                },
+                {
+                    "name": "metadata",
+                    "type": "object",
+                    "required": false,
+                    "description": "Up to 16 string pairs copied onto every session the customer starts. The playground key is reserved."
+                },
+                {
+                    "name": "origin",
+                    "type": "string",
+                    "required": false,
+                    "description": "Page origin, such as https://shop.example.com, that must be one of the agent policy's allowed_origins (or localhost when the policy allows it). When set, every token of this sign-in works only from exactly this origin. Omit to accept any policy origin."
+                },
+                {
+                    "name": "expires_in",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Seconds the code stays redeemable, from 60 to 86400. Defaults to 900."
+                },
+                {
+                    "name": "max_session_seconds",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Total lifetime of the sign-in in seconds, from 3600 to 604800 (7 days). Tokens renew within it; after it the customer signs in again. Defaults to 604800."
+                },
+                {
+                    "name": "anonymous_access_token",
+                    "type": "string",
+                    "required": false,
+                    "description": "The current access token of the anonymous customer who used this agent before signing in. Their conversations become visible to the identified customer, and the anonymous sign-in ends at exchange."
+                }
+            ]
+        }
+    },
     {
         "resource": "agent.agents.endUsers",
         "method": "list",
         "summary": "List End Users",
-        "description": "List users who have sessions or token issuance history on a business agent.\n\nOrdered by last_active_at and external_user_id descending. q is a case-sensitive literal prefix, including underscores. limit is 1–100, default 20. Reuse next_page with the same organization, agent, q and limit. Preemptively blocked users without history do not appear. End-user credentials and inaccessible or personal agents return 404.",
+        "description": "List users who have sessions or token issuance history on a service agent.\n\nOrdered by last_active_at and external_user_id descending. q is a case-sensitive literal prefix, including underscores. limit is 1–100, default 20. Reuse next_page with the same organization, agent, q and limit. Preemptively blocked users without history do not appear. End-user credentials and inaccessible or personal agents return 404.",
         "http": "GET",
         "path": "/agent/v1/agents/{agent_id}/end_users",
         "streaming": "no",
@@ -415,7 +617,7 @@ export const operations = [
         "resource": "agent.agents.endUsers",
         "method": "delete",
         "summary": "Delete end-user data",
-        "description": "Delete a host application's end-user data from one business agent after explicit confirmation.\n\nDevelop only. Set confirm to the exact external_user_id; missing or mismatched confirmation returns 400. Returns 202 with a pending task id, not completion. Poll the deletion endpoint. Concurrent requests reuse the unfinished task; retry DELETE after failure to resume it. Tokens are revoked and the user is blocked before a seven-day recovery snapshot is verified. Sessions including child sessions, conversation data, grants and feedback are then removed. A pre-existing block remains; a temporary block is removed on success. Attachment metadata is recorded and File attachments are retained. No charge is introduced by this operation. Example: DELETE /agent/v1/agents/agent_example/end_users/customer_123?confirm=customer_123.",
+        "description": "Delete a host application's end-user data from one service agent after explicit confirmation.\n\nDevelop only. Set confirm to the exact external_user_id; missing or mismatched confirmation returns 400. Returns 202 with a pending task id, not completion. Poll the deletion endpoint. Concurrent requests reuse the unfinished task; retry DELETE after failure to resume it. Tokens are revoked and the user is blocked before a seven-day recovery snapshot is verified. Sessions including child sessions, conversation data, grants and feedback are then removed. A pre-existing block remains; a temporary block is removed on success. Attachment metadata is recorded and File attachments are retained. No charge is introduced by this operation. Example: DELETE /agent/v1/agents/agent_example/end_users/customer_123?confirm=customer_123.",
         "http": "DELETE",
         "path": "/agent/v1/agents/{agent_id}/end_users/{external_user_id}",
         "streaming": "no",
@@ -591,6 +793,27 @@ export const operations = [
             }
         ]
     },
+    {
+        "resource": "agent.agents.versions",
+        "method": "apply",
+        "summary": "Apply Agent Version",
+        "description": "Apply a version from agents.versions.list by its version number. This idempotent operation changes active_version without creating a version; existing sessions and tokens keep their version. The response is the latest saved agent with its current active_version. Missing versions return 404 Agent version not found; archived agents return 409 Agent is archived. For example, POST /agent/v1/agents/{agent_id}/versions/2/apply with no body.",
+        "http": "POST",
+        "path": "/agent/v1/agents/{agent_id}/versions/{version}/apply",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "agent_id",
+                "sdkName": "agent_id"
+            },
+            {
+                "name": "version",
+                "sdkName": "version"
+            }
+        ],
+        "query": []
+    },
     {
         "resource": "agent.computers",
         "method": "list",
@@ -756,7 +979,7 @@ export const operations = [
         "resource": "agent.computers",
         "method": "connect",
         "summary": "Connect computer",
-        "description": "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.",
+        "description": "Resume the computer and issue a sandbox connection.\n\nOwn-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.\n\nConnect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {\"need\":\"heavy\"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.",
         "http": "POST",
         "path": "/agent/v1/computers/{computer_id}/connect",
         "streaming": "no",
@@ -1341,7 +1564,7 @@ export const operations = [
                 "name": "agent_id",
                 "type": "string",
                 "required": false,
-                "description": "Filter by business agent identifier (agent_ or agt_ prefix)."
+                "description": "Filter by service agent identifier (agent_ or agt_ prefix)."
             },
             {
                 "name": "external_user_id",
@@ -1367,7 +1590,7 @@ export const operations = [
         "resource": "agent.embedTokens",
         "method": "create",
         "summary": "Create Embed Token",
-        "description": "Issue a short-lived credential on your backend for an end user of a business agent.\n\nRequires an active business agent in your organization with an embed policy. Pins the requested version or the latest version and snapshots the policy environment, vaults and resources; metadata comes from the request. Blocked users cannot receive tokens. Keep your API key on the backend and pass only the returned token to the frontend. Every call creates a new grant; issuance is not idempotent. Set hosted to true to also receive hosted_url; redirect the user there within 60 seconds. The agent must have an identity_number. The URL fragment contains a single-use exchange credential, not the token. Omit hosted or set false for ordinary token issuance.",
+        "description": "Issue a short-lived credential on your backend for an end user of a service agent.\n\nRequires an active service agent in your organization with an embed policy. Pins the requested version or the latest version and snapshots the policy environment, vaults and resources; metadata comes from the request. Blocked users cannot receive tokens. Keep your API key on the backend and pass only the returned token to the frontend. Every call creates a new grant; issuance is not idempotent. Set hosted to true to also receive hosted_url; redirect the user there within 60 seconds. The agent must have an identity_number. The URL fragment contains a single-use exchange credential, not the token. Omit hosted or set false for ordinary token issuance.",
         "http": "POST",
         "path": "/agent/v1/embed_tokens",
         "streaming": "no",
@@ -1387,7 +1610,7 @@ export const operations = [
                     "name": "agent",
                     "type": "string",
                     "required": true,
-                    "description": "Business agent ID or identity_number from agent retrieval; it must belong to your organization and be active."
+                    "description": "Service agent ID or identity_number from agent retrieval; it must belong to your organization and be active."
                 },
                 {
                     "name": "version",
@@ -1460,7 +1683,7 @@ export const operations = [
                     "name": "publishable_key",
                     "type": "string",
                     "required": true,
-                    "description": "Public key created by the business agent owner; safe to include in browser code."
+                    "description": "Public key created by the service agent owner; safe to include in browser code."
                 },
                 {
                     "name": "visitor_secret",
@@ -1527,7 +1750,7 @@ export const operations = [
         "resource": "agent.environments",
         "method": "create",
         "summary": "Create environment",
-        "description": "Create a tenant-owned cloud environment: a sandbox recipe (packages to install and networking policy) that sessions can select through environment_id. Package installation happens when the session's sandbox is created; a failed install terminates that session with ENVIRONMENT_PACKAGE_INSTALL_FAILED. Limited networking is applied at sandbox creation. Unlike Anthropic Managed Agents, self_hosted environments, scope and cross-session package caching are not supported.",
+        "description": "Create a tenant-owned cloud environment: a sandbox recipe (packages to install and networking policy) that sessions can select through environment_id. Package installation happens when the session's sandbox is created; a failed install terminates that session with ENVIRONMENT_PACKAGE_INSTALL_FAILED. Limited networking is applied at sandbox creation. Unlike Anthropic Managed Agents, self_hosted environments, scope and cross-session package caching are not supported. config.template must name an available sandbox template, otherwise 400 lists the available ones.",
         "http": "POST",
         "path": "/agent/v1/environments",
         "streaming": "no",
@@ -1595,7 +1818,7 @@ export const operations = [
         "resource": "agent.environments",
         "method": "update",
         "summary": "Update environment",
-        "description": "Update the configuration of a tenant-owned cloud environment. Built-in environments are read-only. Package installation and limited networking are applied when a session's sandbox is created. Omitted fields keep their value.",
+        "description": "Update the configuration of a tenant-owned cloud environment. Built-in environments are read-only. Package installation and limited networking are applied when a session's sandbox is created. Omitted fields keep their value. A changed config.template must name an available sandbox template, otherwise 400 lists the available ones.",
         "http": "POST",
         "path": "/agent/v1/environments/{environment_id}",
         "streaming": "no",
@@ -1651,7 +1874,7 @@ export const operations = [
         "resource": "agent.environments",
         "method": "archive",
         "summary": "Archive environment",
-        "description": "Soft-archive a tenant-owned cloud environment so it can no longer be used to create new sessions. Built-in environments are read-only and cannot be archived.",
+        "description": "Soft-archive a tenant-owned cloud environment so it can no longer be used to create new sessions. Built-in environments are read-only and cannot be archived. An environment that the active version of a non-archived agent uses as environment_id returns 409 RESOURCE_IN_USE naming the agents; point them at another environment first.",
         "http": "POST",
         "path": "/agent/v1/environments/{environment_id}/archive",
         "streaming": "no",
@@ -1793,7 +2016,7 @@ export const operations = [
         "resource": "agent.sessions",
         "method": "create",
         "summary": "Create session",
-        "description": "Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.",
+        "description": "Create a session: one conversation with an agent. Pass agent as an agent id (active_version) or {id, version, type:\"agent\"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.",
         "http": "POST",
         "path": "/agent/v1/sessions",
         "streaming": "no",
@@ -1813,7 +2036,7 @@ export const operations = [
                     "name": "environment_id",
                     "type": "string",
                     "required": false,
-                    "description": "ID of the `environment` defining the container configuration for\nthis session."
+                    "description": "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer."
                 },
                 {
                     "name": "budget",
@@ -2680,83 +2903,302 @@ export const operations = [
         ]
     },
     {
-        "resource": "agent.toolsets",
+        "resource": "agent.skills",
         "method": "list",
-        "summary": "List Toolsets",
-        "description": "Discover tool names, input schemas, read-only status and default permission policies before configuring an agent. The catalog is read-only: enable tools through agents.create or agents.update. agent_toolset_20260401 includes bash, edit, glob, grep, read, write, web_search, web_fetch, task_output, task_stop, monitor, agent, send_message, codemode and skill, plus todo_write, enter_plan_mode, ask_user_question and goal_read, which are listed so they can be switched off. Native additions require bash enabled; codemode requires bash (enabling it with bash disabled returns 400; keep bash enabled with permission_policy always_ask to restrict it); send_message also requires agent. To keep only some tools, set default_config.enabled to false and enable the wanted tools in configs; unlisted tools follow default_config. The catalog includes plugin names and versions. Sessions created through /anthropic/v1 expose only the eight official tools.",
+        "summary": "List skills",
+        "description": "List the skills uploaded to your organization, newest first, in pages of at most 100 (default 20). Use it to find a skill id before reading, versioning or deleting it. Only source=custom has content; source=anthropic returns an empty list. Pass next_page from the response as page to read the next page; a null next_page means the end.",
         "http": "GET",
-        "path": "/agent/v1/toolsets",
+        "path": "/agent/v1/skills",
         "streaming": "no",
         "pagination": false,
         "pathParams": [],
-        "query": []
+        "query": [
+            {
+                "name": "source",
+                "type": "string",
+                "required": false,
+                "description": "Filter skills by source.\n\nIf provided, only skills from the specified source will be returned:\n\n- `\"custom\"`: only return user-created skills\n- `\"anthropic\"`: only return Anthropic-created skills"
+            },
+            {
+                "name": "limit",
+                "type": "number",
+                "required": false,
+                "description": "Number of items per page."
+            },
+            {
+                "name": "page",
+                "type": "string",
+                "required": false,
+                "description": "Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400."
+            }
+        ]
     },
     {
-        "resource": "application.assets.upload",
+        "resource": "agent.skills",
         "method": "create",
-        "summary": "Upload assets",
-        "description": "Upload one batch: files maps hash to base64 content. The last batch returns the completion token.",
+        "summary": "Create skill",
+        "description": "Upload a skill: a directory that contains SKILL.md, which the agent reads when it needs the skill. Send multipart/form-data with one files part per file, each file name being its path under one top-level directory (pdf/SKILL.md, pdf/scripts/run.py), and an optional display_name. SKILL.md frontmatter needs a description; name defaults to the directory name and must be one folder name (1-255 characters, no \"/\", backslash or NUL, not \".\" or \"..\"), otherwise the upload returns 400 stating the allowed form. Limits: 8 MB in total, at most 200 files, no .. segments, absolute paths or empty names; a violation returns 400 naming the path or field. The upload creates the skill and its first version, and versions are immutable. Attach the skill to an agent with `skills` on the agent.",
         "http": "POST",
-        "path": "/application/v1/assets/upload",
+        "path": "/agent/v1/skills",
         "streaming": "no",
         "pagination": false,
+        "multipart": true,
         "pathParams": [],
         "query": [],
         "body": {
             "required": true,
             "fields": [
                 {
-                    "name": "jwt",
-                    "type": "string",
+                    "name": "files",
+                    "type": "array",
+                    "itemType": "string",
                     "required": true,
-                    "description": "Upload token from the session."
+                    "description": "Files to upload for the skill.\n\nAll files must be in the same top-level directory and must include a SKILL.md\nfile at the root of that directory."
                 },
                 {
-                    "name": "files",
-                    "type": "object",
-                    "required": true,
-                    "description": "Hash → base64 file content."
+                    "name": "display_name",
+                    "type": "string",
+                    "required": false,
+                    "description": "Human-readable, single-line label for the Skill. Maximum 255\ncharacters. Always set: derived from the SKILL.md frontmatter `name` when\nomitted at creation. Not unique."
                 }
             ]
         }
     },
     {
-        "resource": "application.subdomain",
-        "method": "retrieve",
-        "summary": "Get account subdomain",
-        "description": "Return the account subdomain used in every Worker URL. A default is created on first use.",
-        "http": "GET",
-        "path": "/application/v1/subdomain",
+        "resource": "agent.skills",
+        "method": "delete",
+        "summary": "Delete skill",
+        "description": "Delete a skill that has no live versions. A skill that is still attached to an agent returns 409 RESOURCE_IN_USE naming up to 10 agent ids (the active or latest version of a non-archived agent counts); remove it from those agents first. A skill that still has versions returns 409 Delete all versions first; remove each with skills.versions.delete, then call this. Returns {id, type: skill_deleted}. skill_id comes from skills.create or skills.list.",
+        "http": "DELETE",
+        "path": "/agent/v1/skills/{skill_id}",
         "streaming": "no",
         "pagination": false,
-        "pathParams": [],
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            }
+        ],
         "query": []
     },
     {
-        "resource": "application.subdomain",
-        "method": "update",
-        "summary": "Change account subdomain",
-        "description": "Change the account subdomain. Every Worker moves to the new address at once; old addresses stop resolving.",
-        "http": "PUT",
-        "path": "/application/v1/subdomain",
+        "resource": "agent.skills",
+        "method": "retrieve",
+        "summary": "Get skill",
+        "description": "Read one skill by id: its display_name, source and latest_version_id. skill_id comes from skills.create or skills.list. A skill of another organization, or a deleted one, returns 404 Skill not found.",
+        "http": "GET",
+        "path": "/agent/v1/skills/{skill_id}",
         "streaming": "no",
         "pagination": false,
-        "pathParams": [],
-        "query": [],
-        "body": {
-            "required": true,
-            "fields": [
-                {
-                    "name": "subdomain",
-                    "type": "string",
-                    "required": true,
-                    "description": "Account subdomain, 8–32 lowercase letters and digits; part of every Worker URL."
-                }
-            ]
-        }
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            }
+        ],
+        "query": []
     },
     {
-        "resource": "application.workers",
+        "resource": "agent.skills.versions",
+        "method": "list",
+        "summary": "List skill versions",
+        "description": "List the live versions of one skill, newest first, in pages of at most 100 (default 20). Each item carries the name and description read from the SKILL.md of that version. Pass next_page from the response as page to read the next page; a null next_page means the end.",
+        "http": "GET",
+        "path": "/agent/v1/skills/{skill_id}/versions",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            }
+        ],
+        "query": [
+            {
+                "name": "limit",
+                "type": "number",
+                "required": false,
+                "description": "Number of items per page."
+            },
+            {
+                "name": "page",
+                "type": "string",
+                "required": false,
+                "description": "Opaque pagination cursor: pass the next_page value of the previous response unchanged. Omit it for the first page. A cursor from a different query or a malformed one returns 400."
+            }
+        ]
+    },
+    {
+        "resource": "agent.skills.versions",
+        "method": "create",
+        "summary": "Create skill version",
+        "description": "Upload a new version of a skill with the same multipart/form-data shape and limits as skills.create (8 MB, 200 files, one top-level directory containing SKILL.md). The SKILL.md name must equal the name of the skill; a different name returns 400. The new version becomes latest_version_id of the skill, and earlier versions stay unchanged because versions are immutable. Attach it to an agent with `skills` on the agent.",
+        "http": "POST",
+        "path": "/agent/v1/skills/{skill_id}/versions",
+        "streaming": "no",
+        "pagination": false,
+        "multipart": true,
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            }
+        ],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "files",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": true,
+                    "description": "Files to upload for the skill.\n\nAll files must be in the same top-level directory and must include a SKILL.md\nfile at the root of that directory."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "agent.skills.versions",
+        "method": "delete",
+        "summary": "Delete skill version",
+        "description": "Soft-delete one version of a skill so it can no longer be read or downloaded; latest_version_id of the skill falls back to the newest remaining version. Returns {id, type: skill_version_deleted}. A skill can be deleted only after all of its versions are deleted. A version that a non-archived agent pins, or the last version of a skill an agent attaches without a pin, returns 409 RESOURCE_IN_USE naming the agents.",
+        "http": "DELETE",
+        "path": "/agent/v1/skills/{skill_id}/versions/{version}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            },
+            {
+                "name": "version",
+                "sdkName": "version"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "agent.skills.versions",
+        "method": "retrieve",
+        "summary": "Get skill version",
+        "description": "Read one version of a skill: its name, description and created_at as read from SKILL.md. version is the id returned by skills.versions.create or skills.versions.list. A deleted or unknown version returns 404 Skill version not found.",
+        "http": "GET",
+        "path": "/agent/v1/skills/{skill_id}/versions/{version}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            },
+            {
+                "name": "version",
+                "sdkName": "version"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "agent.skills.versions",
+        "method": "retrieveContent",
+        "summary": "Download skill version",
+        "description": "Download the content of one version as a zip archive (application/zip): the uploaded directory with its top-level folder and every file. version is the id returned by skills.versions.create or skills.versions.list; a deleted version returns 404.",
+        "http": "GET",
+        "path": "/agent/v1/skills/{skill_id}/versions/{version}/content",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "skill_id",
+                "sdkName": "skill_id"
+            },
+            {
+                "name": "version",
+                "sdkName": "version"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "agent.toolsets",
+        "method": "list",
+        "summary": "List Toolsets",
+        "description": "Discover tool names, input schemas, read-only status and default permission policies before configuring an agent. The catalog is read-only: enable tools through agents.create or agents.update. agent_toolset_20260401 includes bash, edit, glob, grep, read, write, web_search, web_fetch, task_output, task_stop, monitor, agent, send_message, codemode and skill, plus todo_write, enter_plan_mode, ask_user_question and goal_read, which are listed so they can be switched off. Native additions require bash enabled; codemode requires bash (enabling it with bash disabled returns 400; keep bash enabled with permission_policy always_ask to restrict it); send_message also requires agent. To keep only some tools, set default_config.enabled to false and enable the wanted tools in configs; unlisted tools follow default_config. The catalog includes plugin names and versions. Sessions created through /anthropic/v1 expose only the eight official tools.",
+        "http": "GET",
+        "path": "/agent/v1/toolsets",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": []
+    },
+    {
+        "resource": "application.assets.upload",
+        "method": "create",
+        "summary": "Upload assets",
+        "description": "Upload one batch: files maps hash to base64 content. The last batch returns the completion token.",
+        "http": "POST",
+        "path": "/application/v1/assets/upload",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "jwt",
+                    "type": "string",
+                    "required": true,
+                    "description": "Upload token from the session."
+                },
+                {
+                    "name": "files",
+                    "type": "object",
+                    "required": true,
+                    "description": "Hash → base64 file content."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "application.subdomain",
+        "method": "retrieve",
+        "summary": "Get account subdomain",
+        "description": "Return the account subdomain used in every Worker URL. A default is created on first use.",
+        "http": "GET",
+        "path": "/application/v1/subdomain",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": []
+    },
+    {
+        "resource": "application.subdomain",
+        "method": "update",
+        "summary": "Change account subdomain",
+        "description": "Change the account subdomain. Every Worker moves to the new address at once; old addresses stop resolving.",
+        "http": "PUT",
+        "path": "/application/v1/subdomain",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "subdomain",
+                    "type": "string",
+                    "required": true,
+                    "description": "Account subdomain, 8–32 lowercase letters and digits; part of every Worker URL."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "application.workers",
         "method": "list",
         "summary": "List Workers",
         "description": "List Workers in your account. Filter by status or by label with label.<key>=<value>.",
@@ -3521,13 +3963,13 @@ export const operations = [
                     "name": "namespace",
                     "type": "string",
                     "required": true,
-                    "description": "Choose a namespace without prior registration; praxis is read-only. Folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Choose a namespace without prior registration; praxis is reserved for built-in Actions. Folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "name",
                     "type": "string",
                     "required": true,
-                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "description",
@@ -3590,8 +4032,8 @@ export const operations = [
     {
         "resource": "automation.actions",
         "method": "retrieve",
-        "summary": "Get an action",
-        "description": "Read the action and its full current implementation. The response ETag is the current revision ID for conditional updates.",
+        "summary": "Get an Action with its current input and output JSON Schemas",
+        "description": "Read the Action and its full current implementation, with input and output JSON Schemas at current_revision.input_schema and current_revision.output_schema. To read a built-in Action, use ns=praxis and name=<bare name>, for example name=ocr; invoke it in a script with call(\"ocr\", input). The response ETag is the current revision ID for conditional updates.",
         "http": "GET",
         "path": "/automation/v1/actions/{ns}/{name}",
         "streaming": "no",
@@ -4165,8 +4607,8 @@ export const operations = [
     {
         "resource": "automation.runs",
         "method": "create",
-        "summary": "Create a run",
-        "description": "Execute a published script or workflow with target, or test unpublished code directly with source and language (ts for TypeScript, yaml for workflow YAML), without first saving or publishing a definition. target and source are mutually exclusive; target accepts ns/name@version, @tag or @range and defaults to latest when @ is omitted. Source/input validation precedes run creation, so a separate validate call is optional. input defaults to {} and must match the input schema and fit within 1 MiB. wait is 0–60 seconds (default 0): a terminal run returns 200, otherwise 202. Use the returned id with praxis.automation.runs.retrieve and inspect status, output and error; acceptance does not mean successful completion. Idempotency-Key is scoped to tenant, method and path for 24 hours, excluding wait from the fingerprint; replay returns the current run with Idempotent-Replayed: true, changed contents return 422 and an in-flight request returns 409. New non-deterministic run IDs contain 78 characters (run_ + 10-character base36 millisecond timestamp + 64-character hexadecimal DO ID), compared with 46 for legacy random IDs. Historical and deterministic IDs remain valid; same-millisecond order is not guaranteed. Minimal body: {\"source\":\"export default async () => ({ok: true});\",\"language\":\"ts\",\"wait\":10}.",
+        "summary": "Run a published target or execute draft source",
+        "description": "Execute a published script or workflow with target, or test unpublished code directly with source and language (ts for TypeScript, yaml for workflow YAML), without first saving or publishing a definition. Minimal script: `export default async ({ file_id }: { file_id: string }) => { const result = await call(\"ocr\", { document: { type: \"file\", file_id } }); return result; }`; send it as source with language=\"ts\", input={\"file_id\":\"<uploaded file ID>\"} and wait=0, using a PDF or image already uploaded to your account. To call a platform API directly in the same script, use the praxis SDK object, for example `praxis.model.ocr.create({ body: { model: \"glm-ocr\", document: { type: \"file\", file_id } } })`; Action IDs are strings passed to call(), not SDK methods such as praxis.ocr(...). praxis, call, invoke, console and codemode are module-scope bindings, not on globalThis, and need no import; invoke(\"namespace/name\", input) starts a child run. target and source are mutually exclusive; target accepts ns/name@version, @tag or @range and defaults to latest when @ is omitted. Source/input validation precedes run creation, so a separate validate call is optional. input defaults to {} and must match the input schema and fit within 1 MiB. wait is 0–60 seconds (default 0): a terminal run returns 200, otherwise 202. Use the returned id with praxis.automation.runs.retrieve and inspect status, output and error; acceptance does not mean successful completion. For long-running, background or batch work, use wait: 0 and poll the run, or split work into child runs or a workflow; wait only controls the response wait and does not extend execution limits. Actions time out after 30 s (run-sandbox after 10 min); scripts have a 5 min wall-clock limit and a 30 s CPU limit; workflows default to 24 h and allow up to 7 days. Each run can start at most 100 child runs, with at most 20 active at once; nesting depth is limited to 10. Idempotency-Key is scoped to tenant, method and path for 24 hours, excluding wait from the fingerprint; replay returns the current run with Idempotent-Replayed: true, changed contents return 422 and an in-flight request returns 409. New non-deterministic run IDs contain 78 characters, compared with 46 for legacy random IDs; treat IDs as opaque strings. Historical and deterministic IDs remain valid; same-millisecond order is not guaranteed.",
         "http": "POST",
         "path": "/automation/v1/runs",
         "streaming": "no",
@@ -4644,7 +5086,7 @@ export const operations = [
         "resource": "automation.scripts",
         "method": "create",
         "summary": "Create a script",
-        "description": "Save a TypeScript script as an editable draft for later reuse; this does not publish or start a run. Choose your own namespace without registering it first; praxis is read-only. Scripts and workflows share names within the tenant; a duplicate returns NAME_TAKEN. The draft is a source string with a default-exported function, for example `export default async (input: {name: string}) => ({greeting: \"Hello, \" + input.name});`. To test it, pass that source and language=ts to praxis.automation.runs.create without publishing. To publish later, use the returned draft.revision as expected_draft_revision.",
+        "description": "Save a TypeScript script as an editable draft for later reuse; this does not publish or start a run. Choose your own namespace without registering it first; praxis is reserved for built-in Actions. Scripts and workflows share names within the tenant; a duplicate returns NAME_TAKEN. The draft is a source string with a default-exported function, for example `export default async (input: {name: string}) => ({greeting: \"Hello, \" + input.name});`. Scripts provide praxis, call, invoke, console and codemode as module-scope bindings, not on globalThis, with no import needed: praxis.<domain>.<resource>.<method>(...) calls a platform API, call(\"ocr\", input) calls a built-in Action, and invoke(\"namespace/name\", input) starts a child run. Action IDs are strings (bare names for built-ins, namespace/name for your own Actions); praxis.ocr(...) does not exist. To test it, pass that source and language=ts to praxis.automation.runs.create without publishing. To publish later, use the returned draft.revision as expected_draft_revision.",
         "http": "POST",
         "path": "/automation/v1/scripts",
         "streaming": "no",
@@ -4658,13 +5100,13 @@ export const operations = [
                     "name": "namespace",
                     "type": "string",
                     "required": true,
-                    "description": "Choose a namespace without prior registration; praxis is read-only. Folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Choose a namespace without prior registration; praxis is reserved for built-in Actions. Folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "name",
                     "type": "string",
                     "required": true,
-                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "description",
@@ -4712,7 +5154,7 @@ export const operations = [
         "resource": "automation.scripts",
         "method": "update",
         "summary": "Update a script draft",
-        "description": "Update description, labels or draft with the current draft revision in If-Match. Even metadata-only updates create a new draft revision.",
+        "description": "Update description, labels or draft with the current draft revision in If-Match. Even metadata-only updates create a new draft revision. Scripts provide praxis, call, invoke, console and codemode as module-scope bindings, not on globalThis, with no import needed: praxis.<domain>.<resource>.<method>(...) calls a platform API, call(\"ocr\", input) calls a built-in Action, and invoke(\"namespace/name\", input) starts a child run. Action IDs are strings (bare names for built-ins, namespace/name for your own Actions); praxis.ocr(...) does not exist.",
         "http": "PATCH",
         "path": "/automation/v1/scripts/{ns}/{name}",
         "streaming": "no",
@@ -5666,7 +6108,7 @@ export const operations = [
         "resource": "automation.workflows",
         "method": "create",
         "summary": "Create a workflow",
-        "description": "Save a YAML workflow as an editable draft without publishing or starting a run. Choose your own namespace without registering it first; praxis is read-only. To test the draft, send its source and language=yaml to praxis.automation.runs.create. Scripts and workflows share names within the tenant; a duplicate returns NAME_TAKEN. run.workflow accepts ns/name@range or {namespace, name, version, input}; run.script uses the same reference shape as a platform extension. Object namespace, name and version are required; version accepts an exact version, dist-tag or range, locked at publication. Object input defaults to {} and supports expressions; string references retain task-level with. run.await defaults to true and returns the child output. With false, the child uses detach and the task immediately returns {run_id}; parent cancellation does not cascade. Inline script.code returns DEFINITION_INVALID with a detail asking you to save a script and reference it first. raise.error retains its type URI, status, title and detail in the run error.",
+        "description": "Save a YAML workflow as an editable draft without publishing or starting a run. Choose your own namespace without registering it first; praxis is reserved for built-in Actions. To test the draft, send its source and language=yaml to praxis.automation.runs.create. Scripts and workflows share names within the tenant; a duplicate returns NAME_TAKEN. run.workflow accepts ns/name@range or {namespace, name, version, input}; run.script uses the same reference shape as a platform extension. Object namespace, name and version are required; version accepts an exact version, dist-tag or range, locked at publication. Object input defaults to {} and supports expressions; string references retain task-level with. run.await defaults to true and returns the child output. With false, the child uses detach and the task immediately returns {run_id}; parent cancellation does not cascade. Inline script.code returns DEFINITION_INVALID with a detail asking you to save a script and reference it first. raise.error retains its type URI, status, title and detail in the run error.",
         "http": "POST",
         "path": "/automation/v1/workflows",
         "streaming": "no",
@@ -5680,13 +6122,13 @@ export const operations = [
                     "name": "namespace",
                     "type": "string",
                     "required": true,
-                    "description": "Choose a namespace without prior registration; praxis is read-only. Folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Choose a namespace without prior registration; praxis is reserved for built-in Actions. Folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "name",
                     "type": "string",
                     "required": true,
-                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9._-]{0,63}."
+                    "description": "Name, folded to lowercase; matches [a-z0-9][a-z0-9_-]{0,63}."
                 },
                 {
                     "name": "description",
@@ -6841,7 +7283,7 @@ export const operations = [
                 "name": "{column}",
                 "type": "string",
                 "required": false,
-                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix."
+                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported."
             },
             {
                 "name": "and",
@@ -6889,7 +7331,7 @@ export const operations = [
                 "name": "on_conflict",
                 "type": "string",
                 "required": false,
-                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
+                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
             },
             {
                 "name": "columns",
@@ -6903,7 +7345,7 @@ export const operations = [
         "resource": "database.databases.rest",
         "method": "retrieve",
         "summary": "Select rows",
-        "description": "Read matching rows with filters, selected columns and ordering. Returns at most 1000 rows per request, including when limit is omitted. Content-Range reports the actual returned interval and the total when count is requested. PATCH and DELETE are not subject to this read cap. Unlike Supabase, casts, aggregates, spread and join modifiers are unsupported. Each table supports up to 1,000,000 rows. Query budget: 8,000 ms with a shared 3,000,000-row safety ceiling. Create indexes on filtered or sorted fields, or narrow the request when it exceeds its budget. Synchronous SQLite aggregates use candidate-row throughput estimates before execution; deployed Workers freeze clocks during synchronous CPU work, so the timer is not a guaranteed server-side interrupt. Count preferences: without filters, exact, planned and estimated all use SQLite's exact b-tree count. With filters, exact counts within budget; planned skips counting and reports an unknown total (Content-Range: 0-24/*); estimated attempts exact counting only when the preflight budget allows it, otherwise reports an unknown total. Preference-Applied echoes the requested count mode. Error table: QUERY_CANCELED / PostgREST 57014 is HTTP 500, retryable=false: Query timed out: index filtered or sorted fields, or narrow the range. DATABASE_INVALID_STATE is HTTP 409 for operations on a deleting database. Cleared or nonexistent databases return DATABASE_NOT_FOUND / HTTP 404. The count is an HTTP Content-Range response header, not a JSON property. Praxis SDK/codemode methods return the body only; a page length is not a total unless you know all matches fit in that page.",
+        "description": "Read matching rows with filters, selected columns and ordering. Returns at most 1000 rows per request, including when limit is omitted. Content-Range reports the actual returned interval and the total when count is requested. PATCH and DELETE are not subject to this read cap. Unlike Supabase, casts, aggregates, spread and join modifiers are unsupported. Each table supports up to 1,000,000 rows. Query budget: 8,000 ms with a shared 3,000,000-row safety ceiling. Create indexes on filtered or sorted fields, or narrow the request when it exceeds its budget. Synchronous SQLite aggregates use candidate-row throughput estimates before execution; deployed Workers freeze clocks during synchronous CPU work, so the timer is not a guaranteed server-side interrupt. Count preferences: without filters, exact, planned and estimated all use SQLite's exact b-tree count. With filters, exact counts within budget; planned skips counting and reports an unknown total (Content-Range: 0-24/*); estimated attempts exact counting only when the preflight budget allows it, otherwise reports an unknown total. Preference-Applied echoes the requested count mode. Error table: QUERY_CANCELED / PostgREST 57014 is HTTP 500, retryable=false: Query timed out: index filtered or sorted fields, or narrow the range. DATABASE_INVALID_STATE is HTTP 409 for operations on a deleting database. Cleared or nonexistent databases return DATABASE_NOT_FOUND / HTTP 404. The count is an HTTP Content-Range response header, not a JSON property. Use praxis.database.count in the SDK or codemode to return { count: number | null }; a page length is not a total unless you know all matches fit in that page.",
         "http": "GET",
         "path": "/database/v1/databases/{database_id}/rest/{table}",
         "streaming": "no",
@@ -6929,7 +7371,7 @@ export const operations = [
                 "name": "{column}",
                 "type": "string",
                 "required": false,
-                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix."
+                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported."
             },
             {
                 "name": "and",
@@ -6977,7 +7419,7 @@ export const operations = [
                 "name": "on_conflict",
                 "type": "string",
                 "required": false,
-                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
+                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
             },
             {
                 "name": "columns",
@@ -6991,7 +7433,7 @@ export const operations = [
         "resource": "database.databases.rest",
         "method": "head",
         "summary": "Count rows",
-        "description": "Inspect the HTTP row count and range without retrieving row data; send Prefer: count=exact for a filtered count. Returns no body and does not fetch or serialize row data. A known count determines the interval using limit/offset or Range with a default and maximum page size of 1000. Without a count preference, or when the selected count mode cannot supply a total, Content-Range is */*. Singular Accept still validates page cardinality. Unlike Supabase, planned and estimated counts do not use PostgreSQL planner estimates. Count preferences: without filters, exact, planned and estimated all use SQLite's exact b-tree count. With filters, exact counts within budget; planned skips counting and reports an unknown total (Content-Range: 0-24/*); estimated attempts exact counting only when the preflight budget allows it, otherwise reports an unknown total. Preference-Applied echoes the requested count mode. Praxis SDK/codemode methods return only the empty body, not the Content-Range response header; use an HTTP client when you need that header.",
+        "description": "Inspect the HTTP row count and range without retrieving row data; send Prefer: count=exact for a filtered count. Returns no body and does not fetch or serialize row data. A known count determines the interval using limit/offset or Range with a default and maximum page size of 1000. Without a count preference, or when the selected count mode cannot supply a total, Content-Range is */*. Singular Accept still validates page cardinality. Unlike Supabase, planned and estimated counts do not use PostgreSQL planner estimates. Count preferences: without filters, exact, planned and estimated all use SQLite's exact b-tree count. With filters, exact counts within budget; planned skips counting and reports an unknown total (Content-Range: 0-24/*); estimated attempts exact counting only when the preflight budget allows it, otherwise reports an unknown total. Preference-Applied echoes the requested count mode. Use praxis.database.count in the SDK or codemode to return { count: number | null } from this header without retrieving rows.",
         "http": "HEAD",
         "path": "/database/v1/databases/{database_id}/rest/{table}",
         "streaming": "no",
@@ -7017,7 +7459,7 @@ export const operations = [
                 "name": "{column}",
                 "type": "string",
                 "required": false,
-                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix."
+                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported."
             },
             {
                 "name": "and",
@@ -7065,7 +7507,7 @@ export const operations = [
                 "name": "on_conflict",
                 "type": "string",
                 "required": false,
-                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
+                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
             },
             {
                 "name": "columns",
@@ -7105,7 +7547,7 @@ export const operations = [
                 "name": "{column}",
                 "type": "string",
                 "required": false,
-                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix."
+                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported."
             },
             {
                 "name": "and",
@@ -7153,7 +7595,7 @@ export const operations = [
                 "name": "on_conflict",
                 "type": "string",
                 "required": false,
-                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
+                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
             },
             {
                 "name": "columns",
@@ -7171,7 +7613,7 @@ export const operations = [
         "resource": "database.databases.rest",
         "method": "create",
         "summary": "Insert rows",
-        "description": "Insert rows into an existing table after defining its fields; at most 500 rows per request. Each request is atomic: any failure rolls back the entire batch. There are no transactions across requests.\nRows are filled to the union of their keys with null; send Prefer: missing=default to use field defaults for missing keys.\nThe default is return=minimal: success returns HTTP 201 with an empty body. Send Prefer: return=representation to return the inserted rows. Unlike Supabase, upsert conflicts can target only id or one unique field, not a composite key. Each table supports up to 1,000,000 rows.",
+        "description": "Insert rows into an existing table after defining its fields; at most 500 rows per request. Each request is atomic: any failure rolls back the entire batch. There are no transactions across requests.\nRows are filled to the union of their keys with null; send Prefer: missing=default to use field defaults for missing keys.\nThe default is return=minimal: success returns HTTP 201 with an empty body. Send Prefer: return=representation to return the inserted rows. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. Unlike Supabase, upsert conflicts can target only id or one unique field, not a composite key. Each table supports up to 1,000,000 rows.",
         "http": "POST",
         "path": "/database/v1/databases/{database_id}/rest/{table}",
         "streaming": "no",
@@ -7197,7 +7639,7 @@ export const operations = [
                 "name": "{column}",
                 "type": "string",
                 "required": false,
-                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. See the filter operator matrix."
+                "description": "Horizontal filter: replace {column} with a field name or JSON path, e.g. title=eq.summary. Repeat for more columns. Supported operators: eq (equal), neq (not equal; ne is not supported), gt/gte/lt/lte (comparisons), like (case-sensitive text pattern), ilike (case-insensitive text pattern), in (membership), is (null/boolean test), cs (contains), cd (contained by), and ov (array overlap). For like/ilike, * or % matches any sequence and _ matches one character, e.g. title=ilike.*spring*; URL-encode a literal % as %25. Use days=in.(1,2,3), title=is.null, active=is.true or active=is.false; is.not_null and is.unknown are also accepted (unknown means null). Negate a condition with not., e.g. title=not.eq.draft. Multiple filters are ANDed; use or=(title.eq.a,title.eq.b), and=(days.gte.1,days.lte.3), not.or=(...) or not.and=(...), with nested and(...) and or(...) groups as needed. cs/cd accept JSON objects or arrays on JSON fields; cs also accepts a JSON scalar. For array values or multi-link fields, use cs.{a,b}, cd.{a,b} or ov.{a,b}. JSON paths use -> for JSON and ->> for text, e.g. attributes->>has_onsen=eq.true or attributes->tags=cs.[1,2]; chain -> segments and end with ->> for text. Dot paths such as attributes.has_onsen are unsupported. Full-text, regex, range operators and any/all modifiers are unsupported."
             },
             {
                 "name": "and",
@@ -7245,7 +7687,7 @@ export const operations = [
                 "name": "on_conflict",
                 "type": "string",
                 "required": false,
-                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
+                "description": "POST upsert: id or one unique field with resolution=merge-duplicates|ignore-duplicates. With resolution=merge-duplicates, a conflicting row keeps columns omitted from the request; supplied values replace the whole field value (including JSON objects), and explicit null clears a nullable field. With resolution=ignore-duplicates, a conflicting row is left unchanged. Without a conflict, both modes insert a new row using field defaults for omitted fields. In a batch, a key present in another row is filled with null when omitted in this row unless missing=default is set; that null can overwrite a value during merge. With missing=default, omitted keys stay omitted for conflict merges (existing values are preserved); new rows use defaults, or null when no default exists. Explicit null never invokes a default. POST accepts an optional client id matching [A-Za-z0-9_-]{1,64}; omitted ids are generated. PATCH cannot change id."
             },
             {
                 "name": "columns",
@@ -7297,7 +7739,7 @@ export const operations = [
         "resource": "database.databases.tables",
         "method": "create",
         "summary": "Create table",
-        "description": "Creates a table together with its initial fields in one call and returns it (HTTP 201) with generated tbl_ and fld_ ids. name must match ^[a-z_][a-z0-9_]{0,62}$ and be unused in this database (duplicate: 409 UNIQUE_VIOLATION). fields is required and may be an empty array; fields can also be added later with databaseAddField. Limits: 50 tables per database, 64 fields per table, and 16 indexed or unique fields per table; exceeding one returns 400 LIMIT_EXCEEDED. Every row also has a system id column, which is not declared as a field. Insert data afterwards with databaseInsert. Unlike Supabase, define schema with this table API and the field APIs; PostgreSQL DDL and SQL migration files cannot be submitted. Each table supports up to 1,000,000 rows.",
+        "description": "Creates a table together with its initial fields in one call and returns it (HTTP 201) with generated tbl_ and fld_ ids. name must match ^[a-z_][a-z0-9_]{0,62}$ and be unused in this database (duplicate: 409 UNIQUE_VIOLATION). fields is required and may be an empty array; fields can also be added later with databaseAddField. Limits: 50 tables per database, 64 fields per table, and 16 indexed or unique fields per table; exceeding one returns 400 LIMIT_EXCEEDED. Fields default to indexed:false. Set indexed:true explicitly for fields used in filters or ordering. Only indexed:true or unique:true consumes one of the 16 indexed-or-unique field slots; a field with both consumes one slot. Unique fields still consume a slot even with indexed:false. Existing fields are unchanged. Minimal field example: {\"name\":\"notes\",\"type\":\"string\",\"indexed\":false}. Every row also has a system id column, which is not declared as a field. Insert data afterwards with databaseInsert. Unlike Supabase, define schema with this table API and the field APIs; PostgreSQL DDL and SQL migration files cannot be submitted. Each table supports up to 1,000,000 rows.",
         "http": "POST",
         "path": "/database/v1/databases/{database_id}/tables",
         "streaming": "no",
@@ -7418,7 +7860,7 @@ export const operations = [
         "resource": "database.databases.tables.fields",
         "method": "create",
         "summary": "Add field",
-        "description": "Adds one field to an existing table and returns the updated table (HTTP 201). Required inputs are name (lowercase letters, digits and underscores; id and names starting with _ are reserved) and type (string, integer, number, boolean, datetime, json or link); json needs options.schema and link needs options.linked_table_id and options.multiple. Adding a required field to a table that already has rows needs a default, otherwise the call fails with 400 VALIDATION_FAILED; a default is written into every existing row. Scalar fields are indexed by default, while json and link fields cannot be indexed. Limits: 64 fields and 16 indexed or unique fields per table (400 LIMIT_EXCEEDED). Unlike Supabase, schema evolution uses field definitions rather than ALTER TABLE statements or SQL migrations.",
+        "description": "Adds one field to an existing table and returns the updated table (HTTP 201). Required inputs are name (lowercase letters, digits and underscores; id and names starting with _ are reserved) and type (string, integer, number, boolean, datetime, json or link); json needs options.schema and link needs options.linked_table_id and options.multiple. Adding a required field to a table that already has rows needs a default, otherwise the call fails with 400 VALIDATION_FAILED; a default is written into every existing row. Fields default to indexed:false. Set indexed:true explicitly for fields used in filters or ordering. Only indexed:true or unique:true consumes one of the 16 indexed-or-unique field slots; a field with both consumes one slot. Unique fields still consume a slot even with indexed:false. Existing fields are unchanged. Minimal field example: {\"name\":\"notes\",\"type\":\"string\",\"indexed\":false}. JSON and link fields cannot be indexed. Limits: 64 fields and 16 indexed or unique fields per table (400 LIMIT_EXCEEDED). Unlike Supabase, schema evolution uses field definitions rather than ALTER TABLE statements or SQL migrations.",
         "http": "POST",
         "path": "/database/v1/databases/{database_id}/tables/{table}/fields",
         "streaming": "no",
@@ -7587,7 +8029,7 @@ export const operations = [
         "resource": "file.files",
         "method": "create",
         "summary": "Upload file",
-        "description": "Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 104857600 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File([\"Return within 23 days.\"], \"policy.txt\", { type: \"text/plain\" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. OpenAI Uploads chunking is not supported. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–2592000), or praxis[expires_in_seconds] (3600–7776000), never both. Without expiry, the file persists until deleted.",
+        "description": "Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File([\"Return within 23 days.\"], \"policy.txt\", { type: \"text/plain\" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–2592000), or praxis[expires_in_seconds] (3600–7776000), never both. Without expiry, the file persists until deleted.",
         "http": "POST",
         "path": "/file/v1/files",
         "streaming": "no",
@@ -7602,7 +8044,7 @@ export const operations = [
                     "name": "file",
                     "type": "string",
                     "required": true,
-                    "description": "File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 104857600 bytes; its content determines the MIME type."
+                    "description": "File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 100000000 bytes; its content determines the MIME type."
                 },
                 {
                     "name": "purpose",
@@ -7651,7 +8093,7 @@ export const operations = [
         "resource": "file.files",
         "method": "retrieve",
         "summary": "Retrieve file",
-        "description": "Retrieve metadata for a live file owned by your tenant. Use its file_dp_ ID from upload or list. Missing, deleted, expired and other-tenant files return 404; use the content endpoint to download the bytes.",
+        "description": "Retrieve metadata for a live file owned by your tenant. Use its file- ID from upload or list. Missing, deleted, expired and other-tenant files return 404; use the content endpoint to download the bytes.",
         "http": "GET",
         "path": "/file/v1/files/{file_id}",
         "streaming": "no",
@@ -7668,7 +8110,7 @@ export const operations = [
         "resource": "file.files",
         "method": "retrieveContent",
         "summary": "Retrieve file content",
-        "description": "Download the original bytes of a live file owned by your tenant. Supply its file_dp_ ID from upload or list. A single byte Range can return a partial response; a range outside the file returns 416. Missing, deleted, expired and other-tenant files return 404.",
+        "description": "Download the original bytes of a live file owned by your tenant. Supply its file- ID from upload or list. A single byte Range can return a partial response; a range outside the file returns 416. Missing, deleted, expired and other-tenant files return 404.",
         "http": "GET",
         "path": "/file/v1/files/{file_id}/content",
         "streaming": "no",
@@ -7682,63 +8124,12 @@ export const operations = [
         "query": []
     },
     {
-        "resource": "knowledge.vectorStores",
-        "method": "list",
-        "summary": "List knowledge bases",
-        "description": "Lists knowledge bases visible to the caller, newest first by default. Use last_id as after to read the next page; for example, ?limit=20.",
-        "http": "GET",
-        "path": "/knowledge/v1/vector_stores",
-        "streaming": "no",
-        "pagination": false,
-        "pathParams": [],
-        "query": [
-            {
-                "name": "status",
-                "type": "string",
-                "enum": [
-                    "active",
-                    "deleting"
-                ],
-                "required": false,
-                "description": "active selects active stores; deleting selects soft-deleted stores awaiting purge. Omission excludes soft-deleted stores."
-            },
-            {
-                "name": "after",
-                "type": "string",
-                "required": false,
-                "description": "Cursor ID from the previous page."
-            },
-            {
-                "name": "before",
-                "type": "string",
-                "required": false,
-                "description": "Return items before this ID."
-            },
-            {
-                "name": "limit",
-                "type": "integer",
-                "required": false,
-                "description": "Page size."
-            },
-            {
-                "name": "order",
-                "type": "string",
-                "enum": [
-                    "asc",
-                    "desc"
-                ],
-                "required": false,
-                "description": "Order by creation time; defaults to desc for stores/files and asc by index for segments."
-            }
-        ]
-    },
-    {
-        "resource": "knowledge.vectorStores",
+        "resource": "file.uploads",
         "method": "create",
-        "summary": "Create knowledge base",
-        "description": "Create a knowledge base, optionally starting ingestion of uploaded file_ids in the same call; no separate attachment or batch is needed for those files. Use the returned id with vectorStores.files.retrieve to poll each attachment until completed, failed or cancelled; store status=completed alone does not mean every file succeeded. Unlike OpenAI vector stores, each file is limited to 100000000 bytes and each account to 100 active/nondeleted stores. Minimal body: {\"name\":\"Refund policies\"}.",
+        "summary": "Create an upload",
+        "description": "Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 2 GiB (2147483648 bytes) and only user_data, assistants and vision purposes. Add parts of at most 64000000 bytes and complete within one hour. Optional part_size enables fixed-size, retryable parts. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.",
         "http": "POST",
-        "path": "/knowledge/v1/vector_stores",
+        "path": "/file/v1/uploads",
         "streaming": "no",
         "pagination": false,
         "pathParams": [],
@@ -7747,30 +8138,227 @@ export const operations = [
             "required": true,
             "fields": [
                 {
-                    "name": "name",
+                    "name": "bytes",
+                    "type": "integer",
+                    "required": true,
+                    "description": "Exact complete file length in bytes, from 1 through 2147483648 (2 GiB); the sum of completed parts must match."
+                },
+                {
+                    "name": "filename",
                     "type": "string",
-                    "required": false,
-                    "description": "Omitted name becomes an empty string; null is rejected."
+                    "required": true,
+                    "description": "Filename for the resulting file, at most 255 UTF-8 bytes."
                 },
                 {
-                    "name": "metadata",
-                    "type": "object",
-                    "required": false,
-                    "description": "User-defined string metadata for the store; omission or null creates an empty map."
+                    "name": "mime_type",
+                    "type": "string",
+                    "required": true,
+                    "description": "Declared MIME type; validated against the assembled content."
+                },
+                {
+                    "name": "purpose",
+                    "type": "string",
+                    "enum": [
+                        "user_data",
+                        "assistants",
+                        "vision"
+                    ],
+                    "required": true,
+                    "description": "Use user_data for conversation attachments, assistants for assistant files, or vision for PNG, JPEG, GIF and WebP images."
                 },
                 {
                     "name": "expires_after",
                     "type": "object",
                     "required": false,
-                    "description": "Expiry policy from last activity; omission or null disables automatic expiry."
+                    "description": "Optional expiry policy for the resulting file; omission retains the file until deletion."
                 },
                 {
-                    "name": "file_ids",
-                    "type": "array",
-                    "itemType": "string",
+                    "name": "part_size",
+                    "type": "integer",
                     "required": false,
-                    "description": "Existing File IDs to attach; the store allows up to 10,000 files."
-                },
+                    "description": "Optional fixed part size in bytes, 5242880–64000000. Requires part_number on every part; retries of identical bytes at the same number return the same part. Omit to use arbitrary-sized parts."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "file.uploads",
+        "method": "cancel",
+        "summary": "Cancel an upload",
+        "description": "Cancel an unfinished upload using upload_id from create and release its reserved storage. Further parts and completion are rejected. Cancelling an already cancelled upload returns the same terminal result; a completed upload cannot be cancelled. Delete its resulting file instead.",
+        "http": "POST",
+        "path": "/file/v1/uploads/{upload_id}/cancel",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "upload_id",
+                "sdkName": "upload_id"
+            }
+        ],
+        "query": []
+    },
+    {
+        "resource": "file.uploads",
+        "method": "complete",
+        "summary": "Complete an upload",
+        "description": "Assemble the uploaded parts into a file. Supply upload_id from create and part_ids from addPart in file byte order; their sizes must total the declared bytes. Optional md5 verifies the assembled content. Retrying identical part_ids and normalized md5 returns the same result; different inputs return 409. Unlike OpenAI, completed can contain a file still processing (status uploaded). Poll files.retrieve using file.id until status processed (own face state active); error, expiry or 404 means processing failed and the file cannot be used.",
+        "http": "POST",
+        "path": "/file/v1/uploads/{upload_id}/complete",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "upload_id",
+                "sdkName": "upload_id"
+            }
+        ],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "part_ids",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": true,
+                    "description": "All part IDs in concatenation order, without duplicates. Fixed-size uploads require increasing part_number order."
+                },
+                {
+                    "name": "md5",
+                    "type": "string",
+                    "required": false,
+                    "description": "Optional whole-file MD5 as 32 hexadecimal characters; verified after assembly."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "file.uploads.parts",
+        "method": "create",
+        "summary": "Add an upload part",
+        "description": "Send one nonempty part as the multipart data field, at most 64000000 bytes. Parts may arrive concurrently in any order. Use upload_id from create. For a fixed-size upload, supply part_number starting at 1 and exactly part_size bytes except for the final remainder; retry the same number with identical bytes to recover its part ID. Without part_size, each request creates a new part and part_number is ignored. Save the returned part IDs for complete.",
+        "http": "POST",
+        "path": "/file/v1/uploads/{upload_id}/parts",
+        "streaming": "no",
+        "pagination": false,
+        "multipart": true,
+        "pathParams": [
+            {
+                "name": "upload_id",
+                "sdkName": "upload_id"
+            }
+        ],
+        "query": [
+            {
+                "name": "part_number",
+                "type": "integer",
+                "required": false,
+                "description": "Required when create set part_size; 1 through ceil(bytes / part_size). Ignored for general uploads."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "data",
+                    "type": "string",
+                    "required": true,
+                    "description": "Raw bytes of this part, nonempty and at most 64000000 bytes."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "knowledge.vectorStores",
+        "method": "list",
+        "summary": "List knowledge bases",
+        "description": "Lists knowledge bases visible to the caller, newest first by default. Use last_id as after to read the next page; for example, ?limit=20.",
+        "http": "GET",
+        "path": "/knowledge/v1/vector_stores",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "status",
+                "type": "string",
+                "enum": [
+                    "active",
+                    "deleting"
+                ],
+                "required": false,
+                "description": "active selects active stores; deleting selects soft-deleted stores awaiting purge. Omission excludes soft-deleted stores."
+            },
+            {
+                "name": "after",
+                "type": "string",
+                "required": false,
+                "description": "Cursor ID from the previous page."
+            },
+            {
+                "name": "before",
+                "type": "string",
+                "required": false,
+                "description": "Return items before this ID."
+            },
+            {
+                "name": "limit",
+                "type": "integer",
+                "required": false,
+                "description": "Page size."
+            },
+            {
+                "name": "order",
+                "type": "string",
+                "enum": [
+                    "asc",
+                    "desc"
+                ],
+                "required": false,
+                "description": "Order by creation time; defaults to desc for stores/files and asc by index for segments."
+            }
+        ]
+    },
+    {
+        "resource": "knowledge.vectorStores",
+        "method": "create",
+        "summary": "Create knowledge base",
+        "description": "Create a knowledge base, optionally starting ingestion of uploaded file_ids in the same call; no separate attachment or batch is needed for those files. Use the returned id with vectorStores.files.retrieve to poll each attachment until completed, failed or cancelled; store status=completed alone does not mean every file succeeded. Unlike OpenAI vector stores, each file is limited to 100000000 bytes and each account to 100 active/nondeleted stores. Minimal body: {\"name\":\"Refund policies\"}.",
+        "http": "POST",
+        "path": "/knowledge/v1/vector_stores",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "name",
+                    "type": "string",
+                    "required": false,
+                    "description": "Omitted name becomes an empty string; null is rejected."
+                },
+                {
+                    "name": "metadata",
+                    "type": "object",
+                    "required": false,
+                    "description": "User-defined string metadata for the store; omission or null creates an empty map."
+                },
+                {
+                    "name": "expires_after",
+                    "type": "object",
+                    "required": false,
+                    "description": "Expiry policy from last activity; omission or null disables automatic expiry."
+                },
+                {
+                    "name": "file_ids",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Existing File IDs to attach; the store allows up to 10,000 files."
+                },
                 {
                     "name": "chunking_strategy",
                     "type": "object",
@@ -11811,7 +12399,7 @@ export const operations = [
                     "name": "message",
                     "type": "string",
                     "required": true,
-                    "description": "Problem description and original error text; at most 4096 Unicode code points."
+                    "description": "Problem description, at most 4096 Unicode code points; may be empty only when contexts.praxis.error.message is a non-empty string."
                 },
                 {
                     "name": "contact_email",
@@ -12109,7 +12697,7 @@ export const operations = [
         "resource": "sandbox.sandboxes",
         "method": "create",
         "summary": "Create sandbox (v2)",
-        "description": "Start an isolated environment using a templateID from templates.list, then retain sandboxID for lifecycle calls. Unlike E2B, templateID resolves to your ready Environment or a public Base; omit it to use the default base template (`base`), as the E2B SDK does. timeout is seconds from creation and defaults to 300. envVars supplies environment variables and metadata stores your string labels. All system communication is secured; use the returned envdAccessToken for files and commands through the envd data plane, not the management methods. Never print that token.",
+        "description": "Create a sandbox from the template. All system communication with the sandbox is secured.",
         "http": "POST",
         "path": "/sandbox/v1/sandboxes",
         "streaming": "no",
@@ -12123,7 +12711,7 @@ export const operations = [
                     "name": "templateID",
                     "type": "string",
                     "required": true,
-                    "description": "Template ID or alias from templates.list; resolves to your ready Environment first, then a public Base. Omit it to use the default base template (`base`)."
+                    "description": "Identifier of the required template"
                 },
                 {
                     "name": "timeout",
@@ -12261,7 +12849,7 @@ export const operations = [
         "resource": "sandbox.sandboxes",
         "method": "connect",
         "summary": "Connect sandbox (v2)",
-        "description": "Reconnect to an existing sandbox and resume it if paused. The optional timeout is seconds from now and defaults to 300; a later existing deadline is preserved. A running sandbox returns 200 and a resumed sandbox returns 201. Read sandboxID, domain and envdAccessToken from the response for subsequent data-plane access; never treat connecting as executing a command.",
+        "description": "Returns sandbox details. If the sandbox is paused, it will be resumed. TTL is only extended. The request body is optional; an omitted timeout defaults to 300 seconds.",
         "http": "POST",
         "path": "/sandbox/v1/sandboxes/{sandboxID}/connect",
         "streaming": "no",
@@ -12420,7 +13008,7 @@ export const operations = [
         "resource": "sandbox.sandboxes.metrics",
         "method": "list",
         "summary": "Sandbox metrics",
-        "description": "Read CPU, memory and disk usage over the requested interval; start and end are Unix seconds. Unlike E2B, light sandboxes do not provide metrics; check the returned capabilities before requesting them.",
+        "description": "Read CPU, memory and disk usage samples of a sandbox over a time window. Use it to size a sandbox or find out why it is slow. start and end are Unix timestamps in seconds; without them the recent samples are returned. An unknown id answers 404.",
         "http": "GET",
         "path": "/sandbox/v1/sandboxes/{sandboxID}/metrics",
         "streaming": "no",
@@ -12504,7 +13092,7 @@ export const operations = [
         "resource": "sandbox.sandboxes",
         "method": "pause",
         "summary": "Pause sandbox",
-        "description": "Suspend a running sandbox for later connection; use delete to discard it instead. Unlike E2B, light sandboxes preserve disk rather than memory, and persistent sandboxes can resume on data-plane traffic even when autoResume is false. Inspect paused state with the management retrieve operation to avoid waking the sandbox. Explicitly ephemeral sandboxes cannot pause. memory defaults to true, but only a memory-capable sandbox preserves running processes; memory=false saves disk state and resumes with a cold boot. Success returns 204; connect resumes the saved sandbox.",
+        "description": "Pause a running sandbox, keeping its files and memory so that connectSandbox can resume it later. Use it to stop paying for compute without losing state; to discard the sandbox use killSandbox. Success answers 204. A sandbox that is not running answers 409.",
         "http": "POST",
         "path": "/sandbox/v1/sandboxes/{sandboxID}/pause",
         "streaming": "no",
@@ -12896,7 +13484,7 @@ export const operations = [
         "resource": "sandbox.templates",
         "method": "list",
         "summary": "List templates (v2)",
-        "description": "Choose a templateID before creating a sandbox. Unlike E2B, this catalog lists your ready Environments and public Bases; use a returned ID or alias; `base` is the default template that create uses when templateID is omitted. Page through results using nextToken.",
+        "description": "List the templates you can create sandboxes from. Use it to pick the template id or alias for createSandbox. `base` is the default template that createSandbox uses when templateID is omitted. limit is 1 to 100 (default 100); send the cursor from the response back as nextToken to continue.",
         "http": "GET",
         "path": "/sandbox/v1/templates",
         "streaming": "no",
@@ -13657,6 +14245,1466 @@ export const operations = [
             ]
         }
     },
+    {
+        "resource": "ticket.activity",
+        "method": "retrieve",
+        "summary": "List activity",
+        "description": "List activity within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/activity",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            },
+            {
+                "name": "filter",
+                "type": "string",
+                "required": false,
+                "description": "Activity qualifiers: actor, actor-kind, action, ticket, source and since; passed unchanged to the service."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.comments",
+        "method": "delete",
+        "summary": "Remove comments",
+        "description": "Remove comments within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/comments/{id}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.comments",
+        "method": "retrieve",
+        "summary": "Read comments",
+        "description": "Read comments within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/comments/{id}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.comments",
+        "method": "update",
+        "summary": "Update comments",
+        "description": "Update comments within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "PATCH",
+        "path": "/ticket/v1/comments/{id}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "body",
+                    "type": "string",
+                    "required": true,
+                    "description": "Markdown text, at most 65536 characters."
+                },
+                {
+                    "name": "in_reply_to",
+                    "type": "string",
+                    "required": false,
+                    "description": "Opaque identifier returned by this resource's create or list operation."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.comments.reactions",
+        "method": "list",
+        "summary": "List reactions",
+        "description": "List reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/comments/{id}/reactions",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.comments.reactions",
+        "method": "create",
+        "summary": "Create or add reactions",
+        "description": "Create or add reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/comments/{id}/reactions",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "content",
+                    "type": "string",
+                    "enum": [
+                        "+1",
+                        "-1",
+                        "laugh",
+                        "confused",
+                        "heart",
+                        "hooray",
+                        "eyes",
+                        "rocket"
+                    ],
+                    "required": true,
+                    "description": "Reaction to add or remove: +1 approves, -1 disapproves, laugh, confused, heart, hooray, eyes, or rocket."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.comments.reactions",
+        "method": "delete",
+        "summary": "Remove reactions",
+        "description": "Remove reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/comments/{id}/reactions/{content}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "id",
+                "sdkName": "id"
+            },
+            {
+                "name": "content",
+                "sdkName": "content"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.labels",
+        "method": "list",
+        "summary": "List labels",
+        "description": "List labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/labels",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.labels",
+        "method": "create",
+        "summary": "Create or add labels",
+        "description": "Create or add labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "POST",
+        "path": "/ticket/v1/labels",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "name",
+                    "type": "string",
+                    "required": true,
+                    "description": "Case-insensitive label name within the repository."
+                },
+                {
+                    "name": "color",
+                    "type": "string",
+                    "required": true,
+                    "description": "Six hexadecimal digits without #."
+                },
+                {
+                    "name": "description",
+                    "type": "string",
+                    "required": false,
+                    "description": "Label's purpose."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.labels",
+        "method": "delete",
+        "summary": "Remove labels",
+        "description": "Remove labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "DELETE",
+        "path": "/ticket/v1/labels/{name}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "name",
+                "sdkName": "name"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.labels",
+        "method": "update",
+        "summary": "Update labels",
+        "description": "Update labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "PATCH",
+        "path": "/ticket/v1/labels/{name}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "name",
+                "sdkName": "name"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "color",
+                    "type": "string",
+                    "required": false,
+                    "description": "Six hexadecimal digits without #."
+                },
+                {
+                    "name": "description",
+                    "type": "string",
+                    "required": false,
+                    "description": "Label's purpose."
+                },
+                {
+                    "name": "new_name",
+                    "type": "string",
+                    "required": false,
+                    "description": "Case-insensitive label name within the repository."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.milestones",
+        "method": "list",
+        "summary": "List milestones",
+        "description": "List milestones within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/milestones",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.milestones",
+        "method": "create",
+        "summary": "Create or add milestones",
+        "description": "Create or add milestones within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "POST",
+        "path": "/ticket/v1/milestones",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "title",
+                    "type": "string",
+                    "required": true,
+                    "description": "Short title, at most 256 Unicode characters."
+                },
+                {
+                    "name": "description",
+                    "type": "string",
+                    "required": false,
+                    "description": "Milestone description."
+                },
+                {
+                    "name": "due_on",
+                    "type": "string",
+                    "required": false,
+                    "description": "Due date, or null if unset."
+                },
+                {
+                    "name": "state",
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "closed"
+                    ],
+                    "required": false,
+                    "description": "open means actionable; closed means resolved or declined."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.milestones",
+        "method": "delete",
+        "summary": "Remove milestones",
+        "description": "Remove milestones within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "DELETE",
+        "path": "/ticket/v1/milestones/{number}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.milestones",
+        "method": "retrieve",
+        "summary": "Read milestones",
+        "description": "Read milestones within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/milestones/{number}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.milestones",
+        "method": "update",
+        "summary": "Update milestones",
+        "description": "Update milestones within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "PATCH",
+        "path": "/ticket/v1/milestones/{number}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "title",
+                    "type": "string",
+                    "required": false,
+                    "description": "Short title, at most 256 Unicode characters."
+                },
+                {
+                    "name": "description",
+                    "type": "string",
+                    "required": false,
+                    "description": "Milestone description."
+                },
+                {
+                    "name": "due_on",
+                    "type": "string",
+                    "required": false,
+                    "description": "Due date, or null if unset."
+                },
+                {
+                    "name": "state",
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "closed"
+                    ],
+                    "required": false,
+                    "description": "open means actionable; closed means resolved or declined."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.repositories",
+        "method": "list",
+        "summary": "List repositories",
+        "description": "List repositories within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/repositories",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "list",
+        "summary": "List tickets",
+        "description": "List tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            },
+            {
+                "name": "filter",
+                "type": "string",
+                "required": false,
+                "description": "Search qualifier subset: is/state, reason, label/-label, no, assignee, author, mentions, milestone, type, kind, assignee-kind, in and sort; unknown qualifiers return INVALID_PARAMS. Passed unchanged to the service."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "create",
+        "summary": "Create or add tickets",
+        "description": "Create or add tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "title",
+                    "type": "string",
+                    "required": true,
+                    "description": "Short title, at most 256 Unicode characters."
+                },
+                {
+                    "name": "body",
+                    "type": "string",
+                    "required": false,
+                    "description": "Markdown text, at most 65536 characters."
+                },
+                {
+                    "name": "type",
+                    "type": "string",
+                    "required": false,
+                    "description": "Built-in type name; null clears an existing type."
+                },
+                {
+                    "name": "labels",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Labels attached to this ticket; updates replace the complete list."
+                },
+                {
+                    "name": "assignees",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Complete assignee list, at most ten."
+                },
+                {
+                    "name": "milestone",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                },
+                {
+                    "name": "parent",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "retrieve",
+        "summary": "Read tickets",
+        "description": "Read tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "update",
+        "summary": "Update tickets",
+        "description": "Update tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "PATCH",
+        "path": "/ticket/v1/tickets/{number}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "title",
+                    "type": "string",
+                    "required": false,
+                    "description": "Short title, at most 256 Unicode characters."
+                },
+                {
+                    "name": "body",
+                    "type": "string",
+                    "required": false,
+                    "description": "Markdown text, at most 65536 characters."
+                },
+                {
+                    "name": "type",
+                    "type": "string",
+                    "required": false,
+                    "description": "Built-in type name; null clears an existing type."
+                },
+                {
+                    "name": "labels",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Labels attached to this ticket; updates replace the complete list."
+                },
+                {
+                    "name": "assignees",
+                    "type": "array",
+                    "itemType": "string",
+                    "required": false,
+                    "description": "Complete assignee list, at most ten."
+                },
+                {
+                    "name": "milestone",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                },
+                {
+                    "name": "state",
+                    "type": "string",
+                    "enum": [
+                        "open",
+                        "closed"
+                    ],
+                    "required": false,
+                    "description": "open means actionable; closed means resolved or declined."
+                },
+                {
+                    "name": "state_reason",
+                    "type": "string",
+                    "enum": [
+                        "completed",
+                        "not_planned",
+                        "duplicate"
+                    ],
+                    "required": false,
+                    "description": "Reason for closing: completed resolves, not_planned declines, duplicate marks a duplicate."
+                },
+                {
+                    "name": "duplicate_of",
+                    "type": "integer",
+                    "required": false,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.comments",
+        "method": "list",
+        "summary": "List comments",
+        "description": "List comments within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/comments",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.comments",
+        "method": "create",
+        "summary": "Create or add comments",
+        "description": "Create or add comments within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets/{number}/comments",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "body",
+                    "type": "string",
+                    "required": true,
+                    "description": "Markdown text, at most 65536 characters."
+                },
+                {
+                    "name": "in_reply_to",
+                    "type": "string",
+                    "required": false,
+                    "description": "Opaque identifier returned by this resource's create or list operation."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.dependencies",
+        "method": "retrieveBlockedBy",
+        "summary": "List blocked by",
+        "description": "List blocked by within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/dependencies/blocked_by",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.dependencies.blockedBy",
+        "method": "create",
+        "summary": "Create or add blocked by",
+        "description": "Create or add blocked by within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets/{number}/dependencies/blocked_by",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "blocked_by",
+                    "type": "integer",
+                    "required": true,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.dependencies.blockedBy",
+        "method": "delete",
+        "summary": "Remove blocked by",
+        "description": "Remove blocked by within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/tickets/{number}/dependencies/blocked_by/{n}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            },
+            {
+                "name": "n",
+                "sdkName": "n"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.dependencies",
+        "method": "retrieveBlocking",
+        "summary": "List blocking",
+        "description": "List blocking within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/dependencies/blocking",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.events",
+        "method": "list",
+        "summary": "List events",
+        "description": "List events within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/events",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "deleteLock",
+        "summary": "Remove lock",
+        "description": "Remove lock within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "DELETE",
+        "path": "/ticket/v1/tickets/{number}/lock",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets",
+        "method": "updateLock",
+        "summary": "Update lock",
+        "description": "Update lock within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.",
+        "http": "PUT",
+        "path": "/ticket/v1/tickets/{number}/lock",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": false,
+            "fields": [
+                {
+                    "name": "lock_reason",
+                    "type": "string",
+                    "enum": [
+                        "off-topic",
+                        "too heated",
+                        "resolved",
+                        "spam"
+                    ],
+                    "required": false,
+                    "description": "Reason for locking: off-topic, too heated, resolved, or spam."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.reactions",
+        "method": "list",
+        "summary": "List reactions",
+        "description": "List reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/reactions",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.reactions",
+        "method": "create",
+        "summary": "Create or add reactions",
+        "description": "Create or add reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets/{number}/reactions",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "content",
+                    "type": "string",
+                    "enum": [
+                        "+1",
+                        "-1",
+                        "laugh",
+                        "confused",
+                        "heart",
+                        "hooray",
+                        "eyes",
+                        "rocket"
+                    ],
+                    "required": true,
+                    "description": "Reaction to add or remove: +1 approves, -1 disapproves, laugh, confused, heart, hooray, eyes, or rocket."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.reactions",
+        "method": "delete",
+        "summary": "Remove reactions",
+        "description": "Remove reactions within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/tickets/{number}/reactions/{content}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            },
+            {
+                "name": "content",
+                "sdkName": "content"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.relations",
+        "method": "list",
+        "summary": "List relations",
+        "description": "List relations within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/relations",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.relations",
+        "method": "create",
+        "summary": "Create or add relations",
+        "description": "Create or add relations within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets/{number}/relations",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "relates_to",
+                    "type": "integer",
+                    "required": true,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.relations",
+        "method": "delete",
+        "summary": "Remove relations",
+        "description": "Remove relations within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/tickets/{number}/relations/{n}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            },
+            {
+                "name": "n",
+                "sdkName": "n"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.subTickets",
+        "method": "list",
+        "summary": "List sub tickets",
+        "description": "List sub tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Pass next_page_token as page_token to continue with the same filter. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/tickets/{number}/sub_tickets",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            },
+            {
+                "name": "page_size",
+                "type": "integer",
+                "required": false,
+                "description": "Records per page; defaults to 30, maximum 100."
+            },
+            {
+                "name": "page_token",
+                "type": "string",
+                "required": false,
+                "description": "Cursor returned as next_page_token; omit for the first page."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.tickets.subTickets",
+        "method": "create",
+        "summary": "Create or add sub tickets",
+        "description": "Create or add sub tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "POST",
+        "path": "/ticket/v1/tickets/{number}/sub_tickets",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ],
+        "body": {
+            "required": true,
+            "fields": [
+                {
+                    "name": "child",
+                    "type": "integer",
+                    "required": true,
+                    "description": "Repository-local number returned by create or list; distinct from the object's id."
+                },
+                {
+                    "name": "replace_parent",
+                    "type": "boolean",
+                    "required": false,
+                    "description": "Allow replacing an existing parent."
+                }
+            ]
+        }
+    },
+    {
+        "resource": "ticket.tickets.subTickets",
+        "method": "delete",
+        "summary": "Remove sub tickets",
+        "description": "Remove sub tickets within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "DELETE",
+        "path": "/ticket/v1/tickets/{number}/sub_tickets/{child}",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [
+            {
+                "name": "number",
+                "sdkName": "number"
+            },
+            {
+                "name": "child",
+                "sdkName": "child"
+            }
+        ],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
+    {
+        "resource": "ticket.types",
+        "method": "list",
+        "summary": "Read types",
+        "description": "Read types within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.",
+        "http": "GET",
+        "path": "/ticket/v1/types",
+        "streaming": "no",
+        "pagination": false,
+        "pathParams": [],
+        "query": [
+            {
+                "name": "repository",
+                "type": "string",
+                "required": false,
+                "description": "Repository id from GET /ticket/v1/repositories; omit for the default tickets container."
+            }
+        ]
+    },
     {
         "resource": "vault.authorizations",
         "method": "create",