@deepraxis/sdk 0.1.1-dev.cc34a92 → 0.1.1-dev.d412c99

package/dist/generated/sdk.gen.js

@@ -513,6 +513,30 @@ export const computersFilesContent = (options) => (options.client ?? client).get
     url: '/agent/v1/computers/{computer_id}/files/content',
     ...options
 });
+/**
+ * Convert a Computer Document to PDF
+ *
+ * Convert an Office document (docx, doc, ppt, pptx, rtf, odt; up to 16 MiB) to PDF inside a platform-owned ephemeral document sandbox, whatever machine family the computer itself runs on. Returns base64 PDF bytes.
+ *
+ * Praxis extension: the preview conversion endpoint. The browser never parses an untrusted document — LibreOffice runs only inside an ephemeral document-family sandbox and the converter instance is killed after use. The file stays tenant-owned; non-convertible types answer EXTENSION_NOT_CONVERTIBLE and a failed conversion answers CONVERSION_FAILED.
+ */
+export const computersFilesConvert = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }, {
+            key: 'ApiKeyAuth',
+            name: 'X-API-Key',
+            type: 'apiKey'
+        }],
+    url: '/agent/v1/computers/{computer_id}/files/convert',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * Connect computer
  *
@@ -1092,7 +1116,7 @@ export const fileListFiles = (options) => (options?.client ?? client).get({
 /**
  * Upload file
  *
- * Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–7776000). Without expiry, the file persists until deleted.
+ * Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–7776000). Without expiry, the file persists until deleted.
  */
 export const fileCreateFile = (options) => (options.client ?? client).post({
     ...formDataBodySerializer,
@@ -1169,7 +1193,7 @@ export const fileRetrieveFileContent = (options) => (options.client ?? client).g
 /**
  * Create an upload
  *
- * Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 2 GiB (2147483648 bytes) and only user_data and vision purposes. Add parts of at most 64000000 bytes and complete within one hour. Optional part_size enables fixed-size, retryable parts. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.
+ * Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 20 GiB (21474836480 bytes) and only user_data, assistants and vision purposes. Send parts of at most 64000000 bytes; an unfinished upload waits for them for 7 days, so a client can create → send parts → query GET /file/v1/uploads/{upload_id} → resend only the missing parts → complete. Optional part_size fixes every part length and makes each numbered part retryable with identical bytes. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.
  */
 export const fileCreateUpload = (options) => (options.client ?? client).post({
     security: [{
@@ -1187,7 +1211,7 @@ export const fileCreateUpload = (options) => (options.client ?? client).post({
 /**
  * Add an upload part
  *
- * Send one nonempty part as the multipart data field, at most 64000000 bytes. Parts may arrive concurrently in any order. Use upload_id from create. For a fixed-size upload, supply part_number starting at 1 and exactly part_size bytes except for the final remainder; retry the same number with identical bytes to recover its part ID. Without part_size, each request creates a new part and part_number is ignored. Save the returned part IDs for complete.
+ * Send one nonempty part as the multipart data field, at most 64000000 bytes. Parts may arrive concurrently in any order. Use upload_id from create. For a fixed-size upload, supply part_number starting at 1 and exactly part_size bytes except for the final remainder; retry the same number with identical bytes to recover its part ID, and query GET /file/v1/uploads/{upload_id} to see which numbers already arrived. Without part_size, each request creates a new part and part_number is ignored. Save the returned part IDs for complete.
  */
 export const fileAddUploadPart = (options) => (options.client ?? client).post({
     ...formDataBodySerializer,
@@ -1206,7 +1230,7 @@ export const fileAddUploadPart = (options) => (options.client ?? client).post({
 /**
  * Complete an upload
  *
- * Assemble the uploaded parts into a file. Supply upload_id from create and part_ids from addPart in file byte order; their sizes must total the declared bytes. Optional md5 verifies the assembled content. Retrying identical part_ids and normalized md5 returns the same result; different inputs return 409. Unlike OpenAI, completed can contain a file still processing (status uploaded). Poll files.retrieve using file.id until status processed (own face state active); error, expiry or 404 means processing failed and the file cannot be used.
+ * Assemble the uploaded parts into a file. Supply upload_id from create and part_ids from addPart in file byte order; their sizes must total the declared bytes. When parts were lost, query GET /file/v1/uploads/{upload_id} and resend them before completing. Optional md5 verifies the assembled content. Retrying identical part_ids and normalized md5 returns the same result; different inputs return 409. Unlike OpenAI, completed can contain a file still processing (status uploaded). Poll files.retrieve using file.id until status processed (own face state active); error, expiry or 404 means processing failed and the file cannot be used.
  */
 export const fileCompleteUpload = (options) => (options.client ?? client).post({
     security: [{
@@ -1235,10 +1259,24 @@ export const fileCancelUpload = (options) => (options.client ?? client).post({
     url: '/file/v1/uploads/{upload_id}/cancel',
     ...options
 });
+/**
+ * Retrieve an upload
+ *
+ * Read the state of an unfinished upload — its status, declared bytes, fixed part_size and the parts it already holds (received_parts, each with part_number, bytes and sha256). After a break or a failed part, call it to resend only the missing numbers, then complete. A cancelled or expired upload is refused; a completed one returns its file. A missing or other-organization upload returns 404.
+ */
+export const fileRetrieveUpload = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/file/v1/uploads/{upload_id}',
+    ...options
+});
 /**
  * Create a one-time upload URL
  *
- * Upload a local file of up to 2 GiB from a coding agent without sending bytes through the model. Provide basename, exact byte count and MIME type. Up to 104857600 bytes, PUT the file to url with curl -T photo.png -H 'Content-Type: image/png' '<url>'; success returns 201 with the file object, and reuse returns 410 CAPABILITY_USED. Above that threshold, split the file into part_size chunks (default 64000000 bytes), PUT each chunk to its numbered parts[].url in any order, then POST complete_url without a body. Part PUTs return 200; completion returns 201 with the file object, including its state, or 400 if a part is missing. A processing file can be polled with files.retrieve until active. Identical part bytes may be retried; changed bytes at the same number return 400. Completion reuse returns 410 CAPABILITY_USED. Each PUT requires the exact signed Content-Length; single-PUT Content-Type must match content_type or be omitted. Expired, revoked, invalid, wrong-action or cross-organization URLs return 404. URL lifetime defaults to 900 seconds for single PUT or 3600 for multipart, at most 604800; all multipart URLs share an expiry. Multipart creation reserves storage quota. Issuance requires the same unscoped credential as direct file creation. Each issuance creates a new upload and is not idempotent. Example body: {"filename":"photo.png","bytes":2048,"content_type":"image/png"}.
+ * Upload a local file of up to 20 GiB from a coding agent without sending bytes through the model. Provide basename, exact byte count and MIME type. Up to 104857600 bytes, PUT the file to url with curl -T photo.png -H 'Content-Type: image/png' '<url>'; success returns 201 with the file object, and reuse returns 410 CAPABILITY_USED. Above that threshold, split the file into part_size chunks (default 64000000 bytes) and PUT each chunk to its numbered parts[].url in any order; an interrupted client GETs status_url to see the received parts and resends only what is missing, then POSTs complete_url without a body. Part PUTs return 200; completion returns 201 with the file object, including its state, or 400 if a part is missing. A processing file can be polled with files.retrieve until active. Identical part bytes may be retried; changed bytes at the same number return 400. Completion reuse returns 410 CAPABILITY_USED. Each PUT requires the exact signed Content-Length; single-PUT Content-Type must match content_type or be omitted. Expired, revoked, invalid, wrong-action or cross-organization URLs return 404. URL lifetime defaults to 900 seconds for single PUT or 604800 (7 days) for multipart, at most 604800; all multipart URLs, including status_url, share an expiry. Multipart creation reserves storage quota. Issuance requires the same unscoped credential as direct file creation. Each issuance creates a new upload and is not idempotent. Example body: {"filename":"photo.png","bytes":2048,"content_type":"image/png"}.
  */
 export const fileCreateSignedUpload = (options) => (options.client ?? client).post({
     security: [{
@@ -1260,7 +1298,7 @@ export const fileCreateSignedUpload = (options) => (options.client ?? client).po
 /**
  * Create a download URL
  *
- * Download a file's bytes to a local disk from a coding agent without sending them through the model. Use file_id from file creation or listing, then run curl -fsSL -o <filename> '<url>' locally with the returned URL; GET needs no Authorization header. The link is reusable until expiry and supports a single byte Range (for example Range: bytes=0-9 returns 206). Revoke it with files.contentLinks.revoke, passing the token after /c/ in the URL. Expired, revoked, invalid or cross-organization URLs return 404. Lifetime defaults to 3600 seconds and is at most 604800 seconds. Issuance requires the same credential and file-read access as files.retrieveContent; a processing file returns 409 FILE_NOT_READY, so poll files.retrieve until active before retrying. A missing, expired or other-organization file returns 404. Each issuance creates a new link. OpenAI Files has no signed download URL; this follows S3 presigned GET semantics. Example body: {"ttl_seconds":3600}.
+ * Download a file's bytes to a local disk from a coding agent without sending them through the model. Use file_id from file creation or listing, then run curl -fsSL -o <filename> '<url>' locally with the returned URL; GET needs no Authorization header. The link is reusable until expiry and supports a single byte Range (for example Range: bytes=0-9 returns 206). Revoke it with files.contentLinks.revoke, passing the token after /c/ in the URL. Expired, revoked, invalid or cross-organization URLs return 404. Lifetime defaults to 900 seconds and is at most 604800 seconds. Issuance requires the same credential and file-read access as files.retrieveContent; a processing file returns 409 FILE_NOT_READY, so poll files.retrieve until active before retrying. A missing, expired or other-organization file returns 404. Each issuance creates a new link. OpenAI Files has no signed download URL; this follows S3 presigned GET semantics. Example body: {"ttl_seconds":3600}.
  */
 export const fileCreateContentUrl = (options) => (options.client ?? client).post({
     security: [{
@@ -1282,7 +1320,7 @@ export const fileCreateContentUrl = (options) => (options.client ?? client).post
 /**
  * Revoke a file content link
  *
- * Stop a previously issued content link from reading a file. Obtain the link with files.contentUrl.create. Use file_id from file creation or listing and the token path component from a content URL (/c/<token>), not the complete URL. The caller must own the file and have write access; a read-only binding is refused. Revocation propagates through the capability deny list within 30 seconds; the file and other links remain available. Only current IAM capability tokens can be revoked; legacy content links expire at the migration deadline. Example body: {"token":"<token from /c/>"}.
+ * Stop a previously issued content link from reading a file. Obtain the link with files.contentUrl.create. Use file_id from file creation or listing and the token path component from a content URL (/c/<token>), not the complete URL. The caller must own the file and have write access; a read-only binding is refused. Revocation propagates through the capability deny list within 15 minutes; the file and other links remain available. Only current IAM capability tokens can be revoked; legacy content links expire at the migration deadline. Example body: {"token":"<token from /c/>"}.
  */
 export const fileRevokeContentLink = (options) => (options.client ?? client).post({
     security: [{
@@ -1988,6 +2026,24 @@ export const countResponseInputTokens = (options) => (options.client ?? client).
         ...options.headers
     }
 });
+/**
+ * List organization members
+ *
+ * Concepts follow GitHub org members: find a person's user id, for example to assign an approver to an approval task. Lists only members of the organization behind your API key or runtime token, ordered by joined_at ascending (membership id breaks ties). Ask the user who should approve, then use that member's id. Emails are visible only within this organization. The request cannot select another organization. Pass next_page unchanged as page; null means the end. Read-only; no usage charge. Example: GET /organization/v1/members?limit=20.
+ */
+export const listOrganizationMembers = (options) => (options?.client ?? client).get({
+    security: [{
+            key: 'BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }, {
+            key: 'ApiKeyAuth',
+            name: 'X-API-Key',
+            type: 'apiKey'
+        }],
+    url: '/organization/v1/members',
+    ...options
+});
 /**
  * List your organization's feedback
  *
@@ -6351,13 +6407,159 @@ export const cutUndeleteProject = (options) => (options.client ?? client).post({
 /**
  * Execute editing script
  *
- * Edit the current timeline atomically using synchronous JavaScript source. Read state or timeline first, then pass its revision as expected_revision to detect concurrent changes. Use AddTrack, Insert, Update, Delete, Split, Trim, Move, RippleDeleteRange, UpdateTrack, DeleteTrack, SetSettings, AddCaptionsFromTranscript and SetMarker for writes; GetTimeline, GetItem, FindItems, GetMedia, GetTranscript and GetAnalysis read editing context; Print emits text and Preview requests frame previews. All script times are seconds; script object fields use camelCase, for example `media: {libraryId, assetId}`. Unlike Shotstack, execute applies script edits to a persistent project in one transaction. Provide script or a saved edit_id with literal edits, never both; failures roll back writes. A revision conflict while preparing the response may follow a committed edit: retrieve state before retrying. Minimal script after creating a project:
+ * Edit the current timeline atomically using synchronous JavaScript source. Read state or timeline first, then pass its revision as expected_revision to detect concurrent changes. Unlike Shotstack, execute applies script edits to a persistent project in one transaction. Provide script or a saved edit_id with literal edits, never both; failures roll back writes. A revision conflict while preparing the response may follow a committed edit: retrieve state before retrying. Minimal script after creating a project: `const t = AddTrack("video"); Insert(t, {type: "color", color: "#123456", start: 0, length: 3}); Print(t);`
+ *
+ * <!-- cut-reference:start -->
+ * ### Script function, field and error reference
+ *
+ * Every script function, clip field and error code has its own section, read one at a time:
  *
- * ```js
- * const t = AddTrack("video");
- * Insert(t, {type: "color", color: "#123456", start: 0, length: 3});
- * Print(t);
  * ```
+ * codemode.describe("praxis.cut.script.<Name>")  // one function: signature, arguments, return, errors, example
+ * codemode.describe("praxis.cut.fields.<name>")  // one field: type, unit, range, default, where writable
+ * codemode.describe("praxis.cut.errors.<CODE>")  // one code: meaning, causes, fix
+ * codemode.describe("praxis.cut.script")         // names, one page at a time
+ * ```
+ *
+ * Published at https://docs.deepraxis.com/docs/developers/cut/script-reference with one anchor per entry. Names below omit the `praxis.cut.<kind>.` prefix.
+ *
+ * #### Script functions (script)
+ *
+ * - `GetTimeline` — Duration, tracks, joins; clips are under `items`.
+ * - `GetItem` — One clip's compact view, by id.
+ * - `FindItems` — Visit every clip with its track; collect results.
+ * - `GetMedia` — Media metadata; `durationUs` is microseconds.
+ * - `GetTranscript` — Transcript words in source microseconds.
+ * - `GetAnalysis` — Silence, filler or scene segments.
+ * - `ListTransitions` — Join transition kinds and parameters.
+ * - `ListEffects` — Visual-effect catalog and parameters.
+ * - `ListAnimations` — Animation presets by phase and target.
+ * - `ListFonts` — Font families, weights and scripts.
+ * - `ListTextStyles` — Text style presets for `style.preset`.
+ * - `ListTextTemplates` — Multi-layer templates and their slots.
+ * - `Insert` — Add a clip; a track never overlaps itself.
+ * - `Append` — Add a clip at the end of a track.
+ * - `Update` — Change named fields; the rest stay.
+ * - `SetSpeed` — Change rate, keeping source or duration.
+ * - `Delete` — Remove a clip. There is no `Remove`.
+ * - `Join` — Overlap clips; followers shift, track shortens.
+ * - `UpdateJoin` — Change a join's length or effect.
+ * - `DeleteJoin` — Remove a join; restore the butt cut.
+ * - `Split` — Cut a clip in two at a time.
+ * - `Trim` — Move one clip edge by seconds.
+ * - `Move` — Set a clip's start or track.
+ * - `RippleDeleteRange` — Cut a time range and close the gap.
+ * - `AddTrack` — Add a video, audio or caption track.
+ * - `UpdateTrack` — Change a track's name, lock, gain or role.
+ * - `DeleteTrack` — Remove a track and its clips.
+ * - `SetSettings` — Change canvas, frame rate or background.
+ * - `AddCaptionsFromTranscript` — Captions from a clip's kept words.
+ * - `InsertTemplate` — Insert a template and fill its slots.
+ * - `AlignCaptions` — Rebuild captions from text punctuation.
+ * - `ImportCaptions` — Import SRT or WebVTT onto captions.
+ * - `ExportCaptions` — Export captions as SRT or WebVTT.
+ * - `SetMarker` — Label a timeline position.
+ * - `Print` — Append values to the result's `prints`.
+ * - `Preview` — Up to 8 frames as inline PNG data URLs.
+ *
+ * #### Fields (fields)
+ *
+ * - `type` — Clip kind; decides which fields apply.
+ * - `start` — Clip start in seconds; snaps to frames.
+ * - `length` — Duration; optional for video and audio.
+ * - `media` — Source `{ libraryId, assetId }`.
+ * - `sourceIn` — First source second kept; default 0.
+ * - `sourceOut` — Exclusive source end; read-only.
+ * - `text` — Text of a text or caption clip.
+ * - `color` — Solid colour of a color clip.
+ * - `shape` — Shape clip kind: `rect` or `ellipse`.
+ * - `width` — Shape width, a fraction of canvas width.
+ * - `height` — Shape height, a fraction of canvas height.
+ * - `radius` — Rect corner rounding, in 1080-height px.
+ * - `fill` — Shape or text paint: colour or gradient.
+ * - `stroke` — Shape outline: colour and width.
+ * - `transform` — Position, scale, rotation, opacity, crop, blur.
+ * - `fit` — contain, cover, fill or none.
+ * - `blend` — Layer blend mode; null clears.
+ * - `style` — Text styling: font, fill, strokes, glow, position.
+ * - `style.position` — top, middle or bottom; omit it, never null.
+ * - `playback` — Rate, direction, audio policy, or freeze.
+ * - `volumeDb` — Audio level in dB; 0 is source level.
+ * - `gain` — Keyframed audio level in dB.
+ * - `fadeIn` — Fade-in seconds at the clip's start.
+ * - `fadeOut` — Fade-out seconds at the clip's end.
+ * - `duck` — Lower this clip while another track plays.
+ * - `animate` — Transform keyframes; `at` is clip-relative seconds.
+ * - `reveal` — Per-character, word or line reveal timing.
+ * - `animation` — Preset slots `{ in, out, loop }`; null clears.
+ * - `effects` — Effect stack, at most 8; null clears.
+ * - `transitionIn` — Entrance effect: kind plus seconds.
+ * - `transitionOut` — Exit effect: kind plus seconds.
+ * - `mask` — Shape, path or track matte.
+ * - `words` — Caption words with clip-local times.
+ *
+ * #### Error codes (errors)
+ *
+ * - `JOIN_CONFLICT` — A join is invalid or blocks this edit.
+ * - `INVALID_TRANSITION` — Bad transition kind, parameter or length.
+ * - `INVALID_STYLE` — A style value is out of range.
+ * - `INVALID_MASK` — A mask definition is malformed.
+ * - `MASK_IN_USE` — The edit would break a live mask.
+ * - `TOO_MANY_MASKS` — At most 16 masks per project.
+ * - `RATE_OUT_OF_RANGE` — A rate is outside 0.25-4.
+ * - `UNSUPPORTED_PLAYBACK` — Reverse without an explicit mute.
+ * - `INVALID_PLAYBACK` — A playback object is partial or malformed.
+ * - `UNKNOWN_FONT` — The family is not in `ListFonts()`.
+ * - `UNKNOWN_FIELD` — The field name is not accepted here.
+ * - `UNKNOWN_TEXT_STYLE` — `style.preset` is not in the catalog.
+ * - `TEXT_STYLE_TARGET_MISMATCH` — Preset on the wrong clip type.
+ * - `CAPTION_ALIGN_LOW_CONFIDENCE` — Alignment confidence too low; nothing changed.
+ * - `OVERLAP` — Two clips on one track would share time.
+ * - `OUT_OF_SOURCE` — The clip would read past its source.
+ * - `LOCKED_TRACK` — The edit targets a locked track.
+ * - `UNBOUND_LIBRARY` — The library is not bound to the project.
+ * - `TRACK_KIND_MISMATCH` — The clip type does not fit the track.
+ * - `NOT_FOUND` — The named id is not in this project.
+ * - `TOO_SHORT` — The result would be under one frame.
+ * - `INVALID_DUCK` — Bad `duck` level or a missing track.
+ * - `UNKNOWN_ANIMATION` — The preset is not in `ListAnimations()`.
+ * - `INVALID_ANIMATION_PARAM` — Bad slot, parameter or keyframe limit.
+ * - `ANIMATION_TOO_LONG` — In plus out exceed the clip length.
+ * - `ANIMATION_TARGET_MISMATCH` — The preset does not match the clip type.
+ * - `ANIMATION_PHASE_MISMATCH` — The preset is in the wrong slot.
+ * - `UNKNOWN_EFFECT` — The effect is not in `ListEffects()`.
+ * - `INVALID_EFFECT_PARAM` — Bad effect parameter or keyframe.
+ * - `TOO_MANY_EFFECTS` — More than 8 effects on one clip.
+ * - `PROJECT_NOT_FOUND` — No visible project has this id.
+ * - `EXPORT_NOT_FOUND` — No such export in this project.
+ * - `DRAFT_RENDER_NOT_FOUND` — No such draft render.
+ * - `VERSION_NOT_FOUND` — No saved version has this revision.
+ * - `LIBRARY_NOT_FOUND` — The library is missing or invisible.
+ * - `BINDING_INVALID` — The binding request is malformed.
+ * - `BINDING_IN_USE` — Clips still use this library's assets.
+ * - `NOTHING_TO_UNDO` — No earlier revision to return to.
+ * - `NOTHING_TO_REDO` — No undone revision is waiting.
+ * - `UNDO_CONFLICT` — The revision to undo is no longer head.
+ * - `REVISION_CONFLICT` — The project moved; your revision is stale.
+ * - `CUT_BUSY` — The project is busy; retry.
+ * - `INVALID_CAPTION_FILE` — The subtitle file is malformed or too big.
+ * - `SCRIPT_ERROR` — The script threw or did not parse.
+ * - `SCRIPT_LIMIT` — An execute budget was exceeded.
+ * - `OPS_REJECTED` — An op failed; the whole edit rolled back.
+ * - `EDIT_EXPIRED` — The saved edit id is over ten minutes old.
+ * - `MEDIA_OFFLINE` — The asset cannot be fetched right now.
+ * - `MEDIA_UNAVAILABLE` — The asset is not usable for rendering.
+ * - `MEDIA_IMPORT_FAILED` — Importing media failed.
+ * - `FRAME_OUT_OF_RANGE` — The preview time is outside the project.
+ * - `PROJECT_TOO_LARGE` — The project exceeds the size limit.
+ * - `RESPONSE_TOO_LARGE` — The response would exceed its budget.
+ * - `EXPORT_FAILED` — The render failed; read `error.cause`.
+ * - `INVALID_PARAMS` — The request is malformed.
+ * - `PERMISSION_DENIED` — This credential may not do that here.
+ * - `NOT_IMPLEMENTED` — Not available on this platform yet.
+ * - `INTERNAL` — Unexpected failure; retry with the request id.
+ * <!-- cut-reference:end -->
+ *
  */
 export const cutExecute = (options) => (options.client ?? client).post({
     security: [{
@@ -6415,7 +6617,7 @@ export const cutRetrieveTimeline = (options) => (options.client ?? client).get({
 /**
  * Render preview frames
  *
- * Review the visual result at one or more project times without creating an export. Pass comma-separated seconds in at, such as 12,15.5; scale changes preview size and revision selects a committed project revision. Fetch the returned image URLs before expires_at; render again when they expire.
+ * Review the visual result at one or more project times without creating an export. Pass comma-separated seconds in at, such as 12,15.5; scale changes preview size and revision selects a committed project revision. Request at most eight times. Each returned url is an inline PNG data URL (data:image/png;base64,...), not a hosted HTTP image link. The default scale is 0.25; use 0.5 for subtitle layout inspection (1080×1920 renders at 540×960). The maximum is 0.5; values above it return INVALID_PARAMS. Actual width and height are returned per frame. PNGs above 2 MiB or responses above 4 MiB return RESPONSE_TOO_LARGE without silently lowering resolution. The response always includes warnings; FRAME_UNAVAILABLE means a source preview could not be obtained and an offline tile was drawn. Its message identifies a timeout, delivery capacity limit, or unavailable source and contains no source URL. Decode each image's base64 payload to save it. Codemode returns at most four images per call, so request at most four times when reviewing there.
  */
 export const cutListFrames = (options) => (options.client ?? client).get({
     security: [{
@@ -6431,9 +6633,9 @@ export const cutListFrames = (options) => (options.client ?? client).get({
     ...options
 });
 /**
- * Analyze project media
+ * Analyze project media or measure the project mix
  *
- * Request silence, filler-word or scene analysis for selected bound assets before editing. Omit media to select project sources; ranges returned in segments use source seconds. A pending result is not completion: use retry_after_sec before checking again, and inspect failed or unsupported asset results before deciding which edits are possible.
+ * Request silence, filler-word or scene analysis for selected bound assets before editing, or measure the mix the timeline itself renders with kind mix. That kind is a render job, not a read: it answers pending with retry_after_sec and is polled by the id it returned, because the answer only exists once the audio has been rendered and measured. Omit media to select project sources; ranges returned in segments use source seconds. A pending result is not completion: use retry_after_sec before checking again, and inspect failed or unsupported asset results before deciding which edits are possible. Silence measures transcript-based speech pauses, not music or loudness. A completed transcript without words returns ready with empty segments and reason no_speech; no completed transcript returns unsupported with reason no_transcript. A failed transcription remains failed. kind mix is separate: it reports the project mix loudness, the loudness of each role and where music masks speech, so an editor can fix the mix rather than guess at it.
  */
 export const cutCreateAnalysis = (options) => (options.client ?? client).post({
     security: [{
@@ -6572,6 +6774,46 @@ export const cutCreateExport = (options) => (options.client ?? client).post({
         ...options.headers
     }
 });
+/**
+ * Create draft range render
+ *
+ * Render one interval of the timeline so you can hear or look at how that passage comes out, without publishing anything to a media library. Choose kind audio for the mixed soundtrack as an .m4a file, or kind video for a draft-quality .mp4 with picture and sound. from and to are seconds on the project clock and must satisfy 0 <= from < to, to <= the timeline duration, and to - from <= 120; a longer passage is requested in several 分段请求 ranges and joined by the caller. The result is a temporary file (purpose user_data) that expires 24 hours after it is stored and is never imported into a library, so it is not a deliverable and carries no cut-export tag. HTTP 202 only accepts the job; poll praxis.cut.renders.retrieve using the returned id until status is done or failed, then read url while it lasts. A draft also bills like a draft export, by rendered seconds. Each project runs at most 2 draft renders at a time, a budget separate from its exports; a third answers HTTP 429 CUT_BUSY and the same call succeeds once one finishes.
+ */
+export const cutCreateRender = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }, {
+            key: 'ApiKeyAuth',
+            name: 'X-API-Key',
+            type: 'apiKey'
+        }],
+    url: '/cut/v1/projects/{project_id}/renders',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Retrieve draft range render
+ *
+ * Poll a draft render id returned by projects.renders.create to see whether the interval is ready, then read url while it lasts. queued and rendering are in progress; done provides file_id and a short-lived url for the rendered .m4a or .mp4; failed provides error. Only done yields a url, and the file behind it disappears 24 hours after it was stored, so retrieve again when the link has expired.
+ */
+export const cutRetrieveRender = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }, {
+            key: 'ApiKeyAuth',
+            name: 'X-API-Key',
+            type: 'apiKey'
+        }],
+    url: '/cut/v1/renders/{render_id}',
+    ...options
+});
 /**
  * Retrieve video export
  *
@@ -6995,95 +7237,101 @@ export const databaseInsert = (options) => (options.client ?? client).post({
     }
 });
 /**
- * List knowledge bases
+ * Read a commit's test catalog
  *
- * Lists knowledge bases visible to the caller, newest first by default. Use last_id as after to read the next page; for example, ?limit=20.
+ * Read the catalog version discovered at one commit — how many suites and cases it holds, which frameworks they come from, and how the commit changed them. Call this first: it tells you which suites, cases and sizes exist before you list them or select them into a plan, and the reported diff explains why a case count moved. A commit whose discovery has not finished answers CATALOG_NOT_READY, which means "not yet", not "no tests"; wait and read again. Omit commit to read the newest catalog published for the project.
  */
-export const knowledgeListVectorStores = (options) => (options?.client ?? client).get({
+export const devopsTestCatalogGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores',
+    url: '/devops/v1/projects/{project}/test-catalog',
     ...options
 });
 /**
- * Create knowledge base
+ * List test suites
  *
- * Create a knowledge base, optionally starting ingestion of uploaded file_ids in the same call; no separate attachment or batch is needed for those files. Use the returned id with vectorStores.files.retrieve to poll each attachment until completed, failed or cancelled; store status=completed alone does not mean every file succeeded. Each file accepts up to 52428800 bytes and 5000000 estimated tokens; each account holds up to 100 active/nondeleted stores. Minimal body: {"name":"Refund policies"}.
+ * List the suites the project's newest catalog discovered — one suite per test file and framework pair, with its size, purposes and question count. Use it to find the suite id a case belongs to, or to see which files make up an area before selecting cases from them. Suites come from the catalog, so a file added in code appears only after its commit's catalog is published. Archived suites are returned too; they carry archived true and no case is ever silently dropped from the list.
  */
-export const knowledgeCreateVectorStore = (options) => (options.client ?? client).post({
+export const devopsTestSuitesList = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores',
-    ...options,
-    headers: {
-        'Content-Type': 'application/json',
-        ...options.headers
-    }
+    url: '/devops/v1/projects/{project}/test-suites',
+    ...options
 });
 /**
- * Delete knowledge base
+ * Retrieve a test suite
  *
- * Remove a knowledge base from active use while keeping a recovery window. Unlike OpenAI vector stores, native DELETE returns the store with status=deleting and ISO purge_at, retains it for 7 days and is idempotent on repeat. Retrieve remains 200; object operations return 409. Use restore before purge_at to recover it, or purge to remove it irreversibly.
+ * Read one suite by the id a suite list returned, to learn its file, framework, size, purposes and how many cases it holds. Use it when a case's suite id needs a name for display, or to confirm which commit's catalog a suite came from. The id is opaque; it comes from the list, never from the file path.
  */
-export const knowledgeDeleteVectorStore = (options) => (options.client ?? client).delete({
+export const devopsTestSuitesGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}',
+    url: '/devops/v1/test-suites/{id}',
     ...options
 });
 /**
- * Retrieve knowledge base
+ * List test cases
  *
- * Retrieves a knowledge base using an id returned by create or list. Add ?expand=files to include the first page of attached files. Soft-deleted stores remain readable with status=deleting until purged.
+ * List a project's cases with their health, state and recent statistics, so you can decide which ones a plan must run and which are quarantined. This is the read a test dashboard is built on; filter it to narrow by state or health instead of paging through everything. A case's id is a fingerprint of its own title and path, so it survives a rename — read aliases when reconciling history recorded under an older title.
  */
-export const knowledgeRetrieveVectorStore = (options) => (options.client ?? client).get({
+export const devopsTestCasesList = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}',
+    url: '/devops/v1/projects/{project}/test-cases',
     ...options
 });
 /**
- * Update knowledge base
+ * Retrieve a test case
  *
- * Updates an active knowledge base using its returned id. Omitted fields stay unchanged; metadata replaces the whole map. Example body: {"name":"Refund policies"}.
+ * Read one case in full — its steps, tags, declared owners, current state with the policy and ticket behind it, and its rolling 7 or 30 day statistics. Use it before quarantining or fixing a case, to see what the state already is and why. A case that was renamed is reachable by both its current fingerprint id and the ids listed in aliases.
  */
-export const knowledgeUpdateVectorStore = (options) => (options.client ?? client).post({
+export const devopsTestCasesGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}',
-    ...options,
-    headers: {
-        'Content-Type': 'application/json',
-        ...options.headers
-    }
+    url: '/devops/v1/test-cases/{id}',
+    ...options
 });
 /**
- * Search knowledge base
+ * List test plans
  *
- * Search ingested text to answer a question or find supporting passages. Native results contain one chunk each, so file_id can repeat; max_num_results counts chunks (1–50, default 10), while the compatible URL groups results by file. Unlike OpenAI vector stores, next_page is always null even when has_more is true. Only completed attachments are searchable. For keyword-only retrieval set ranking_options.hybrid_search to {"embedding_weight":0,"text_weight":1}; omit rewrite_query or set it to false to avoid query rewriting. Unlike OpenAI, ranker auto does not rerank; only default-2024-11-15 requests reranking. Set praxis.explain=true to inspect scores and use returned content[].chunk_id to retrieve a segment.
+ * List the project's plans — what each one selects, which stage and gate it belongs to, and when it runs next. Read this before creating a plan, so a new plan extends what exists instead of duplicating a selector an existing plan already covers.
  */
-export const knowledgeSearchVectorStore = (options) => (options.client ?? client).post({
+export const devopsTestPlansList = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/search',
+    url: '/devops/v1/projects/{project}/test-plans',
+    ...options
+});
+/**
+ * Create a test plan
+ *
+ * Create a plan that decides which cases a stage must run. The plan's key is unique inside the project and is what a later run names; the selector chooses cases by size, purpose, tag, package or explicit ids, and the trigger says when the plan fires by itself. A merge or promotion gate must name the environment it guards, and a plan with a gate but no environment is refused with PLAN_GATE_ENVIRONMENT_MISMATCH rather than created and silently ignored. A plan has no revision history: update it with a patch.
+ */
+export const devopsTestPlansCreate = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'devops-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/devops/v1/projects/{project}/test-plans',
     ...options,
     headers: {
         'Content-Type': 'application/json',
@@ -7091,31 +7339,45 @@ export const knowledgeSearchVectorStore = (options) => (options.client ?? client
     }
 });
 /**
- * List files
+ * Delete a test plan
  *
- * Lists attached files and their ingestion status, newest attachment first by default. Use last_id as after to continue; ?filter=failed selects files that can be retried.
+ * Delete a plan so it schedules nothing further. The plan stops firing immediately; runs it already produced keep their own record and are not deleted with it. To stop a plan temporarily and keep it for later, pause it instead — deleting cannot be undone and the plan's key becomes free for another plan to take.
  */
-export const knowledgeListFiles = (options) => (options.client ?? client).get({
+export const devopsTestPlansDelete = (options) => (options.client ?? client).delete({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files',
+    url: '/devops/v1/test-plans/{id}',
     ...options
 });
 /**
- * Add file
+ * Retrieve a test plan
  *
- * Attach an uploaded File for asynchronous ingestion, then poll this attachment until status is completed, failed or cancelled before searching. Each file accepts up to 52428800 bytes and 5000000 estimated tokens; chunk sizes use estimated tokens rather than a model tokenizer. Text, Markdown, CSV, JSON, HTML, PDF, DOCX, PPTX, XLSX and PNG/JPEG/GIF/WebP images can be extracted; audio and video uploads are not knowledge documents. Images may yield generated descriptions rather than verbatim OCR. auto chunking resolves to static 800/400; explicit sizes are 100–4096 with overlap at most half the size. Each store holds at most 10000 attached files. Reattaching the same file returns its existing record without applying new attributes or chunking; inspect last_error after failure.
+ * Read one plan by the id a plan list returned, to see its selector, gate, repeat count, timeout and pause state before updating or deleting it. A paused plan carries the reason, the actor and the time it resumes, so a pause you did not set is explained here rather than guessed at.
  */
-export const knowledgeAttachFile = (options) => (options.client ?? client).post({
+export const devopsTestPlansGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files',
+    url: '/devops/v1/test-plans/{id}',
+    ...options
+});
+/**
+ * Update a test plan
+ *
+ * Change a plan's title, trigger, selector, gate, repeat count, timeout or enabled flag. Only the fields present in the body are changed, so a body naming one field leaves the rest exactly as they were. Changing a selector does not create a version — the plan is not a published artefact, and runs already started keep the selection they were created with. Read the plan first to know what you are leaving unchanged.
+ */
+export const devopsTestPlansUpdate = (options) => (options.client ?? client).patch({
+    security: [{
+            key: 'devops-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/devops/v1/test-plans/{id}',
     ...options,
     headers: {
         'Content-Type': 'application/json',
@@ -7123,45 +7385,63 @@ export const knowledgeAttachFile = (options) => (options.client ?? client).post(
     }
 });
 /**
- * Remove file
+ * Pause a test plan
  *
- * Removes the file from search immediately; does not delete the original File.
+ * Stop a plan from starting new runs while keeping it and its history. A reason is required and is recorded on the plan, so the next reader learns why it stopped. Give until to resume automatically at a time; omit it to stay paused until someone resumes it. Runs already in flight are not cancelled — cancel those individually.
  */
-export const knowledgeRemoveFile = (options) => (options.client ?? client).delete({
+export const devopsTestPlansPause = (options) => (options.client ?? client).post({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    url: '/devops/v1/test-plans/{id}:pause',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Resume a test plan
+ *
+ * Clear a plan's pause so it schedules runs again. Resuming an active plan changes nothing and is safe to repeat. The plan keeps its selector, gate and key; only the pause is removed.
+ */
+export const devopsTestPlansResume = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'devops-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/devops/v1/test-plans/{id}:resume',
     ...options
 });
 /**
- * Retrieve file
+ * List test runs
  *
- * Retrieves an attached file using the id returned by attachment or file listing. Poll this operation until status leaves in_progress to observe the ingestion outcome.
+ * List the project's runs newest first, with each run's state, result and counts. Use it to find the run id whose executions you want to read, or to see whether a commit's tests have finished. A run whose result is pending has not reached a verdict yet — read it again rather than treating it as passed. Filter by state or result to watch only the runs still in flight.
  */
-export const knowledgeRetrieveFile = (options) => (options.client ?? client).get({
+export const devopsTestRunsList = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    url: '/devops/v1/projects/{project}/test-runs',
     ...options
 });
 /**
- * Update file attributes
+ * Create a test run
  *
- * Replaces search-filter attributes of an existing attachment without reingesting its content. Use an attached file id. Example body: {"attributes":{"category":"refund"}}; null clears the attributes.
+ * Start a run of the project's tests at one commit. Name a plan to use its selector, or pass a selector directly for this run alone; the ref says which commit to test and is required, because a run without a commit has nothing to report against. waitUntil decides how far the call waits before answering — queued, the default, returns as soon as the run exists; started waits until the run has begun, except for an external run, which is answered at once because it leaves queued only when your own CI uploads; finished waits for a verdict. The wait is bounded at about 25 seconds, and a wait that reaches that bound returns the run as it stands rather than failing — read state to see whether it finished. A retry of an earlier run is a new run: pass its commit and selector, and read the earlier run to compare.
  */
-export const knowledgeUpdateFile = (options) => (options.client ?? client).post({
+export const devopsTestRunsCreate = (options) => (options.client ?? client).post({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    url: '/devops/v1/projects/{project}/test-runs',
     ...options,
     headers: {
         'Content-Type': 'application/json',
@@ -7169,31 +7449,31 @@ export const knowledgeUpdateFile = (options) => (options.client ?? client).post(
     }
 });
 /**
- * Read extracted content
+ * Retrieve a test run
  *
- * Extracted text chunks may overlap. Image content can be a generated description rather than verbatim OCR.
+ * Read one run's current state, result and counts, and ask for its failed executions inline with expand. Poll this after creating a run whose result was pending. A result is monotonic once it reaches a verdict — a failed run never becomes passed by a later report, so read the run rather than the last report to know where it ended.
  */
-export const knowledgeRetrieveFileContent = (options) => (options.client ?? client).get({
+export const devopsTestRunsGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/content',
+    url: '/devops/v1/test-runs/{id}',
     ...options
 });
 /**
- * Create file batch
+ * Cancel a test run
  *
- * Attaches existing Files as a batch for asynchronous ingestion. Supply exactly one of file_ids or files; files allows per-file settings. Existing attachments are reused. Read the returned batch id to monitor status.
+ * Stop a run that is still going. A reason is required and is recorded on the run, because a cancelled run is read later as evidence about why a commit was not verified. Cancelling a run that already reached a verdict is refused with RUN_ALREADY_FINISHED: its result is final and cancelling it would erase the verdict. Executions already recorded stay readable.
  */
-export const knowledgeCreateFileBatch = (options) => (options.client ?? client).post({
+export const devopsTestRunsCancel = (options) => (options.client ?? client).post({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches',
+    url: '/devops/v1/test-runs/{id}:cancel',
     ...options,
     headers: {
         'Content-Type': 'application/json',
@@ -7201,119 +7481,371 @@ export const knowledgeCreateFileBatch = (options) => (options.client ?? client).
     }
 });
 /**
- * Retrieve file batch
+ * List a run's executions
  *
- * Retrieves a batch created in this knowledge base, including current status and file counts. Use the batch id returned by batch creation to monitor ingestion.
+ * List the executions recorded against one run — one entry per case the run selected, with its status, duration, attempts and evidence. Use it to find the case that failed, or to compare a repeat run against the previous one case by case. Reads happen while the run is still going, so a case may still be pending; filter by status to watch only the failures.
  */
-export const knowledgeRetrieveFileBatch = (options) => (options.client ?? client).get({
+export const devopsTestExecutionsList = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}',
+    url: '/devops/v1/test-runs/{run}/executions',
     ...options
 });
 /**
- * Cancel file batch
+ * Retrieve one case's execution in a run
  *
- * Cancels only in-progress batches and pending files. Completed, failed and cancelled batches return unchanged (200, idempotent).
+ * Read one case's execution inside one run, including every attempt with its own duration and message. Use it after a run reports a failure to see whether the case failed once and passed on retry — that is what flaky true means — and to reach the evidence files a triage needs. Both ids come from the run and case reads; an execution that does not exist for that pair is NOT_FOUND rather than an empty answer.
  */
-export const knowledgeCancelFileBatch = (options) => (options.client ?? client).post({
+export const devopsTestExecutionsGet = (options) => (options.client ?? client).get({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}/cancel',
+    url: '/devops/v1/test-runs/{run}/executions/{case}',
     ...options
 });
 /**
- * List batch files
+ * Upload an external test report
  *
- * Lists files still attached from the identified batch, newest attachment first by default. Use the batch creation id and ?filter=failed to inspect failures; last_id is the next after cursor.
+ * Record the results of a run executed outside Praxis by uploading a CTRF or JUnit report. Nothing has to exist first: a first upload from CI creates the run it reports on (executor external) and catalogues the cases the report names, so there is no setup call before the first result. When the report already belongs to a run, pass ref and the upload joins it; the run's counts and verdict are recomputed from the report. Uploading the same reportId again is idempotent and counts once, so a retry after a timeout is safe — and a reported case is catalogued once, however many reports carry it. The report's bytes are kept as a file (the file field of the answer) rather than in the results database, so the original document stays retrievable.
  */
-export const knowledgeListBatchFiles = (options) => (options.client ?? client).get({
+export const devopsTestReportsUpload = (options) => (options.client ?? client).post({
     security: [{
-            key: 'knowledge-bearerAuth',
+            key: 'devops-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}/files',
-    ...options
+    url: '/devops/v1/projects/{project}/test-reports',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
 });
 /**
- * Restore knowledge base
+ * List knowledge bases
  *
- * Restores a deleting store within 7 days. Active stores return 409 VECTOR_STORE_INVALID_STATE; absent stores return 404. Empty body is allowed.
+ * Lists knowledge bases visible to the caller, newest first by default. Use last_id as after to read the next page; for example, ?limit=20.
  */
-export const knowledgeRestoreVectorStore = (options) => (options.client ?? client).post({
+export const knowledgeListVectorStores = (options) => (options?.client ?? client).get({
     security: [{
             key: 'knowledge-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/restore',
+    url: '/knowledge/v1/vector_stores',
     ...options
 });
 /**
- * Permanently purge knowledge base
+ * Create knowledge base
  *
- * Immediately and irreversibly clears a deleting store using the retention cleanup path. Active stores return 409; absent stores return 404. Empty body is allowed.
+ * Create a knowledge base, optionally starting ingestion of uploaded file_ids in the same call; no separate attachment or batch is needed for those files. Use the returned id with vectorStores.files.retrieve to poll each attachment until completed, failed or cancelled; store status=completed alone does not mean every file succeeded. PDF files accept up to 536870912 bytes (512 MiB), while other formats accept up to 52428800 bytes (50 MiB), constrained by Router conversion; every file is limited to 5000000 estimated tokens; each account holds up to 100 active/nondeleted stores. Minimal body: {"name":"Refund policies"}.
  */
-export const knowledgePurgeVectorStore = (options) => (options.client ?? client).post({
+export const knowledgeCreateVectorStore = (options) => (options.client ?? client).post({
     security: [{
             key: 'knowledge-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/purge',
-    ...options
+    url: '/knowledge/v1/vector_stores',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
 });
 /**
- * Retry failed file
+ * Delete knowledge base
  *
- * Retries only failed files; other states return 409 FILE_INVALID_STATE. Retry after failure has not yet been observed in the documented run.
+ * Remove a knowledge base from active use while keeping a recovery window. Unlike OpenAI vector stores, native DELETE returns the store with status=deleting and ISO purge_at, retains it for 7 days and is idempotent on repeat. Retrieve remains 200; object operations return 409. Use restore before purge_at to recover it, or purge to remove it irreversibly.
  */
-export const knowledgeRetryFile = (options) => (options.client ?? client).post({
+export const knowledgeDeleteVectorStore = (options) => (options.client ?? client).delete({
     security: [{
             key: 'knowledge-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/retry',
+    url: '/knowledge/v1/vector_stores/{vector_store_id}',
     ...options
 });
 /**
- * List file segments
+ * Retrieve knowledge base
  *
- * Lists the stored chunks of an attached file, ordered by increasing segment index by default. Use the attachment id and last_id as after to continue; returned chunk ids can be retrieved individually.
+ * Retrieves a knowledge base using an id returned by create or list. Add ?expand=files to include the first page of attached files. Soft-deleted stores remain readable with status=deleting until purged.
  */
-export const knowledgeListSegments = (options) => (options.client ?? client).get({
+export const knowledgeRetrieveVectorStore = (options) => (options.client ?? client).get({
     security: [{
             key: 'knowledge-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/segments',
+    url: '/knowledge/v1/vector_stores/{vector_store_id}',
     ...options
 });
 /**
- * Retrieve segment
+ * Update knowledge base
  *
- * Retrieves one chunk and its term statistics. Take chunk_id from segment listing or native search content; the chunk must belong to this knowledge base.
+ * Updates an active knowledge base using its returned id. Omitted fields stay unchanged; metadata replaces the whole map. Example body: {"name":"Refund policies"}.
  */
-export const knowledgeRetrieveSegment = (options) => (options.client ?? client).get({
+export const knowledgeUpdateVectorStore = (options) => (options.client ?? client).post({
     security: [{
             key: 'knowledge-bearerAuth',
             scheme: 'bearer',
             type: 'http'
         }],
-    url: '/knowledge/v1/vector_stores/{vector_store_id}/segments/{chunk_id}',
-    ...options
-});
-/**
- * List events
+    url: '/knowledge/v1/vector_stores/{vector_store_id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Search knowledge base
+ *
+ * Search ingested text to answer a question or find supporting passages. Native results contain one chunk each, so file_id can repeat; max_num_results counts chunks (1–50, default 10), while the compatible URL groups results by file. Unlike OpenAI vector stores, next_page is always null even when has_more is true. Only completed attachments are searchable. For keyword-only retrieval set ranking_options.hybrid_search to {"embedding_weight":0,"text_weight":1}; omit rewrite_query or set it to false to avoid query rewriting. Unlike OpenAI, ranker auto does not rerank; only default-2024-11-15 requests reranking. Set praxis.explain=true to inspect scores and use returned content[].chunk_id to retrieve a segment.
+ */
+export const knowledgeSearchVectorStore = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/search',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List files
+ *
+ * Lists attached files and their ingestion status, newest attachment first by default. Use last_id as after to continue; ?filter=failed selects files that can be retried.
+ */
+export const knowledgeListFiles = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files',
+    ...options
+});
+/**
+ * Add file
+ *
+ * Attach an uploaded File for asynchronous ingestion, then poll this attachment until status is completed, failed or cancelled before searching. PDF files accept up to 536870912 bytes (512 MiB), while other formats accept up to 52428800 bytes (50 MiB), constrained by Router conversion; every file is limited to 5000000 estimated tokens; chunk sizes use estimated tokens rather than a model tokenizer. Text, Markdown, CSV, JSON, HTML, PDF, DOCX, PPTX, XLSX and PNG/JPEG/GIF/WebP images can be extracted; audio and video uploads are not knowledge documents. Images may yield generated descriptions rather than verbatim OCR. auto chunking resolves to static 800/400; explicit sizes are 100–4096 with overlap at most half the size. Each store holds at most 10000 attached files. Reattaching the same file returns its existing record without applying new attributes or chunking; inspect last_error after failure.
+ */
+export const knowledgeAttachFile = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Remove file
+ *
+ * Removes the file from search immediately; does not delete the original File.
+ */
+export const knowledgeRemoveFile = (options) => (options.client ?? client).delete({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    ...options
+});
+/**
+ * Retrieve file
+ *
+ * Retrieves an attached file using the id returned by attachment or file listing. Poll this operation until status leaves in_progress to observe the ingestion outcome.
+ */
+export const knowledgeRetrieveFile = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    ...options
+});
+/**
+ * Update file attributes
+ *
+ * Replaces search-filter attributes of an existing attachment without reingesting its content. Use an attached file id. Example body: {"attributes":{"category":"refund"}}; null clears the attributes.
+ */
+export const knowledgeUpdateFile = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Read extracted content
+ *
+ * Extracted text chunks may overlap. Image content can be a generated description rather than verbatim OCR.
+ */
+export const knowledgeRetrieveFileContent = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/content',
+    ...options
+});
+/**
+ * Create file batch
+ *
+ * Attaches existing Files as a batch for asynchronous ingestion. Supply exactly one of file_ids or files; files allows per-file settings. Existing attachments are reused. Read the returned batch id to monitor status.
+ */
+export const knowledgeCreateFileBatch = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Retrieve file batch
+ *
+ * Retrieves a batch created in this knowledge base, including current status and file counts. Use the batch id returned by batch creation to monitor ingestion.
+ */
+export const knowledgeRetrieveFileBatch = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}',
+    ...options
+});
+/**
+ * Cancel file batch
+ *
+ * Cancels only in-progress batches and pending files. Completed, failed and cancelled batches return unchanged (200, idempotent).
+ */
+export const knowledgeCancelFileBatch = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}/cancel',
+    ...options
+});
+/**
+ * List batch files
+ *
+ * Lists files still attached from the identified batch, newest attachment first by default. Use the batch creation id and ?filter=failed to inspect failures; last_id is the next after cursor.
+ */
+export const knowledgeListBatchFiles = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/file_batches/{batch_id}/files',
+    ...options
+});
+/**
+ * Restore knowledge base
+ *
+ * Restores a deleting store within 7 days. Active stores return 409 VECTOR_STORE_INVALID_STATE; absent stores return 404. Empty body is allowed.
+ */
+export const knowledgeRestoreVectorStore = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/restore',
+    ...options
+});
+/**
+ * Permanently purge knowledge base
+ *
+ * Immediately and irreversibly clears a deleting store using the retention cleanup path. Active stores return 409; absent stores return 404. Empty body is allowed.
+ */
+export const knowledgePurgeVectorStore = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/purge',
+    ...options
+});
+/**
+ * Retry failed file
+ *
+ * Retries only failed files; other states return 409 FILE_INVALID_STATE. Retry after failure has not yet been observed in the documented run.
+ */
+export const knowledgeRetryFile = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/retry',
+    ...options
+});
+/**
+ * List file segments
+ *
+ * Lists the stored chunks of an attached file, ordered by increasing segment index by default. Use the attachment id and last_id as after to continue; returned chunk ids can be retrieved individually.
+ */
+export const knowledgeListSegments = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/files/{file_id}/segments',
+    ...options
+});
+/**
+ * Retrieve segment
+ *
+ * Retrieves one chunk and its term statistics. Take chunk_id from segment listing or native search content; the chunk must belong to this knowledge base.
+ */
+export const knowledgeRetrieveSegment = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'knowledge-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/knowledge/v1/vector_stores/{vector_store_id}/segments/{chunk_id}',
+    ...options
+});
+/**
+ * List events
  *
  * Reads events for this knowledge base in increasing sequence order, including while soft-deleted. Pass next_seq as after_seq to continue; null next_seq marks the current end. Example: ?after_seq=0&limit=20.
  */
@@ -7329,7 +7861,7 @@ export const knowledgeListEvents = (options) => (options.client ?? client).get({
 /**
  * List libraries
  *
- * List libraries owned by the caller, newest first. By default, deleting and deleted libraries are excluded; use status=deleting to find libraries awaiting purge. All supplied label pairs must match.
+ * Read a caller-owned library’s current settings, usage and lifecycle status. A deleting library remains readable; missing, foreign or purged libraries return LIBRARY_NOT_FOUND.
  */
 export const mediaListLibraries = (options) => (options?.client ?? client).get({
     security: [{
@@ -7358,10 +7890,28 @@ export const mediaCreateLibrary = (options) => (options.client ?? client).post({
         ...options.headers
     }
 });
+/**
+ * Create frame URLs
+ *
+ * Media creates JPEG frame URLs for inspecting one or more moments in a video without downloading the original. Obtain library_id from libraries and asset_id plus duration from assets. Send 1–20 integer microsecond timestamps strictly below duration, for example {"at_micros":[0,1000000],"width":640}. Only video assets are supported; audio and images return INVALID_PARAMS. Width defaults to 640 and accepts 160, 320 or 640. This read operation does not store a new asset or rerun understanding. Fetch each returned URL to obtain the frame; delivery usage follows media pricing. Authenticated links expire after 300 seconds; upload links remain public and permanent. Reissue expired links. Foreign libraries and assets return 404 without revealing their existence.
+ */
+export const mediaCreateFrameUrls = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/assets/{asset_id}/frames',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * Delete library
  *
- * Soft-delete an active library, returning its deleting status and purge_at deadline. Asset operations and delivery become unavailable; the library can be restored before purge_at. Repeated deletion while deleting returns the current library.
+ * Restore a deleting library before its purge_at deadline. The library becomes active again and deleted_at and purge_at are cleared; expired or non-deleting libraries cannot be restored.
  */
 export const mediaDeleteLibrary = (options) => (options.client ?? client).delete({
     security: [{
@@ -7375,7 +7925,7 @@ export const mediaDeleteLibrary = (options) => (options.client ?? client).delete
 /**
  * Get library
  *
- * Read a caller-owned library’s current settings, usage and lifecycle status. A deleting library remains readable; missing, foreign or purged libraries return LIBRARY_NOT_FOUND.
+ * Update an active library’s supplied settings. Labels replace the complete map; understanding settings and model roles merge with current values. Changing the embedding model is rejected while assets exist.
  */
 export const mediaGetLibrary = (options) => (options.client ?? client).get({
     security: [{
@@ -7389,7 +7939,7 @@ export const mediaGetLibrary = (options) => (options.client ?? client).get({
 /**
  * Update library
  *
- * Update an active library’s supplied settings. Labels replace the complete map; understanding settings and model roles merge with current values. Changing the embedding model is rejected while assets exist.
+ * Update an active library. Set hotwords for spelling evidence in subsequent transcripts; [] disables inferred vocabulary. Transcript understanding calls the timestamped ASR, optional reference ASR and correction model through the existing metered model path. Reprocess assets to apply new settings to existing transcripts.
  */
 export const mediaUpdateLibrary = (options) => (options.client ?? client).patch({
     security: [{
@@ -7407,7 +7957,7 @@ export const mediaUpdateLibrary = (options) => (options.client ?? client).patch(
 /**
  * Restore library
  *
- * Restore a deleting library before its purge_at deadline. The library becomes active again and deleted_at and purge_at are cleared; expired or non-deleting libraries cannot be restored.
+ * Permanently remove a library that is already deleting, without waiting for purge_at. Its assets and related resources are removed and cannot be restored; first soft-delete an active library.
  */
 export const mediaRestoreLibrary = (options) => (options.client ?? client).post({
     security: [{
@@ -7421,7 +7971,7 @@ export const mediaRestoreLibrary = (options) => (options.client ?? client).post(
 /**
  * Purge library
  *
- * Permanently remove a library that is already deleting, without waiting for purge_at. Its assets and related resources are removed and cannot be restored; first soft-delete an active library.
+ * List assets in an active library, newest first, optionally filtering by exact folder and stored resource type. Continue using next_cursor; video includes audio-only assets.
  */
 export const mediaPurgeLibrary = (options) => (options.client ?? client).post({
     security: [{
@@ -7435,7 +7985,7 @@ export const mediaPurgeLibrary = (options) => (options.client ?? client).post({
 /**
  * List assets
  *
- * List assets in an active library, newest first, optionally filtering by exact folder and stored resource type. Continue using next_cursor; video includes audio-only assets.
+ * Upload content into an active library and return a Cloudinary-compatible resource. Use file for a multipart file, data URI, public HTTPS URL or same-owner file identifier. Reusing public_id overwrites by default; overwrite=false returns the existing resource. Chunk uploads require both chunk headers.
  */
 export const mediaListAssets = (options) => (options.client ?? client).get({
     security: [{
@@ -7449,7 +7999,7 @@ export const mediaListAssets = (options) => (options.client ?? client).get({
 /**
  * Upload asset
  *
- * Upload content into an active library and return a Cloudinary-compatible resource. Use file for a multipart file, data URI, public HTTPS URL or same-owner file identifier. Reusing public_id overwrites by default; overwrite=false returns the existing resource. Chunk uploads require both chunk headers.
+ *  For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export const mediaUploadAsset = (options) => (options.client ?? client).post({
     security: [{
@@ -7467,7 +8017,7 @@ export const mediaUploadAsset = (options) => (options.client ?? client).post({
 /**
  * Import file
  *
- * Copy source content into an active library using upload options and return the full native Asset. The imported asset is independent of the source after copying. Reusing public_id follows overwrite semantics.
+ * Copy a File into an independent Media asset. New assets default to organization-private delivery (type=authenticated); explicitly set type=upload for public originals and derivatives. Omitting type on overwrite preserves the current type. Deleting the source File does not delete this copy. For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export const mediaImportAsset = (options) => (options.client ?? client).post({
     security: [{
@@ -7485,7 +8035,7 @@ export const mediaImportAsset = (options) => (options.client ?? client).post({
 /**
  * Delete asset
  *
- * Delete an asset from the library so it is no longer readable, searchable or deliverable. This removes the asset rather than placing it in the library’s restoration window; a missing asset returns ASSET_NOT_FOUND.
+ * Queue reprocessing of the asset’s current version and return its updated state immediately. Omit kinds to retry failed tasks and legacy source-size unsupported tasks; explicit kinds rerun applicable completed tasks and recoverable source-size unsupported tasks. Other unsupported causes remain unchanged. Replaced understandings become superseded, and processing finishes asynchronously.
  */
 export const mediaDeleteAsset = (options) => (options.client ?? client).delete({
     security: [{
@@ -7499,7 +8049,7 @@ export const mediaDeleteAsset = (options) => (options.client ?? client).delete({
 /**
  * Get asset
  *
- * Read a non-deleted asset by its asset_id in an active library, including content hashes, processing progress and available previews. Missing or deleted assets return ASSET_NOT_FOUND.
+ * Update an asset’s supplied metadata fields. Tags and context replace their current collections; an empty collection clears them. Moving asset_folder or changing display_name preserves public_id and delivery URLs.
  */
 export const mediaGetAsset = (options) => (options.client ?? client).get({
     security: [{
@@ -7513,7 +8063,7 @@ export const mediaGetAsset = (options) => (options.client ?? client).get({
 /**
  * Update asset
  *
- * Update an asset’s supplied metadata fields. Tags and context replace their current collections; an empty collection clears them. Moving asset_folder or changing display_name preserves public_id and delivery URLs.
+ * Delete an asset from the library so it is no longer readable, searchable or deliverable. This removes the asset rather than placing it in the library’s restoration window; a missing asset returns ASSET_NOT_FOUND.
  */
 export const mediaUpdateAsset = (options) => (options.client ?? client).patch({
     security: [{
@@ -7531,7 +8081,7 @@ export const mediaUpdateAsset = (options) => (options.client ?? client).patch({
 /**
  * Reprocess asset
  *
- * Queue reprocessing of the asset’s current version and return its updated state immediately. Omit kinds to retry failed tasks; explicit kinds rerun applicable completed tasks. Replaced understandings become superseded, and processing finishes asynchronously.
+ *  For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export const mediaReprocessAsset = (options) => (options.client ?? client).post({
     security: [{
@@ -7549,7 +8099,7 @@ export const mediaReprocessAsset = (options) => (options.client ?? client).post(
 /**
  * List understandings
  *
- * List an asset’s understanding results in creation order. By default only current, non-superseded results are returned; use include_superseded=true for history or kind to select an output type.
+ * List understanding results for an asset, ordered by creation time. Use the cursor to continue; include_superseded also returns replaced records. The optional shots array contains current-version shot boundaries and per-shot captions, scene, location guesses, visible text and confidence flags; it is absent on legacy records. Location guesses and folder mismatch are unverified hints. Correction-enabled transcripts expose text_original, corrected text and a correction audit. Their timed data array remains suitable for subtitles. Reference failure is marked missing; correction failure returns the original verbatim. Model inference uses the existing metered model path.
  */
 export const mediaListUnderstandings = (options) => (options.client ?? client).get({
     security: [{
@@ -7563,7 +8113,7 @@ export const mediaListUnderstandings = (options) => (options.client ?? client).g
 /**
  * Expression search
  *
- * Search active assets using the supported filter-expression syntax, sorting and cursor pagination. Empty expression matches all assets. Tags and context require with_field; inspect the exactness flags before treating counts as complete.
+ * Find visually similar assets using exactly one of asset_id or an inline base64 image. The library must support image search; an asset query needs a current image embedding and excludes that source asset from results.
  */
 export const mediaExpressionSearch = (options) => (options.client ?? client).post({
     security: [{
@@ -7581,7 +8131,7 @@ export const mediaExpressionSearch = (options) => (options.client ?? client).pos
 /**
  * Visual search
  *
- * Find visually similar assets using exactly one of asset_id or an inline base64 image. The library must support image search; an asset query needs a current image embedding and excludes that source asset from results.
+ * Search assets with a nonblank text query and optional expression filter. Hybrid mode combines semantic and keyword matches; semantic mode uses vector similarity only. Results are ranked and limited by top_k.
  */
 export const mediaVisualSearch = (options) => (options.client ?? client).post({
     security: [{
@@ -7599,7 +8149,7 @@ export const mediaVisualSearch = (options) => (options.client ?? client).post({
 /**
  * Semantic search
  *
- * Search assets with a nonblank text query and optional expression filter. Hybrid mode combines semantic and keyword matches; semantic mode uses vector similarity only. Results are ranked and limited by top_k.
+ * Alias of semantic search. Search assets with a nonblank text query, optional expression filter and top_k; hybrid combines semantic and keyword matches, while semantic uses vector similarity only.
  */
 export const mediaSemanticSearch = (options) => (options.client ?? client).post({
     security: [{
@@ -7617,7 +8167,7 @@ export const mediaSemanticSearch = (options) => (options.client ?? client).post(
 /**
  * Semantic search alias
  *
- * Alias of semantic search. Search assets with a nonblank text query, optional expression filter and top_k; hybrid combines semantic and keyword matches, while semantic uses vector similarity only.
+ * List all immediate child folders under parent, or under the root when parent is omitted. Counts include descendant assets. The result is unpaginated; limit and cursor are rejected.
  */
 export const mediaSearch = (options) => (options.client ?? client).post({
     security: [{
@@ -7635,7 +8185,7 @@ export const mediaSearch = (options) => (options.client ?? client).post({
 /**
  * List folders
  *
- * List all immediate child folders under parent, or under the root when parent is omitted. Counts include descendant assets. The result is unpaginated; limit and cursor are rejected.
+ * undefined understood_count includes ready and partial assets; failed_count includes failed assets. Both accumulate descendants. counts_complete is false during historical backfill.
  */
 export const mediaListFolders = (options) => (options.client ?? client).get({
     security: [{
@@ -7649,7 +8199,7 @@ export const mediaListFolders = (options) => (options.client ?? client).get({
 /**
  * Create batch
  *
- * Create an asynchronous batch for tagging, untagging, replacing context, moving or deleting assets. Select ids or an expression; selection is frozen at creation. Poll the returned job id for completion and per-item failures.
+ * Queue a frozen selection for tagging, untagging, context replacement, moving, deleting or reprocessing. IDs are limited to 1000; use an expression for larger selections, subject to the search scan budget. reprocess starts at most 30 assets per rolling minute per library. Only retryable failed steps and legacy source-size unsupported steps rerun. Omit kinds to inspect all recoverable steps, or supply kinds to narrow them. Other unsupported, permanent and completed steps remain unchanged; a permanent output blocks only its own step. Assets without any selected recoverable step count as failed items without starting understanding. Poll the returned job id; done counts accepted launches, not successful model inference. Staff Admin only permits reprocess and requires a nonblank reason. Example: {"action":"reprocess","selector":{"expression":"processing_state=failed AND failure_code=UPSTREAM_FAILED"}}. For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export const mediaCreateBatch = (options) => (options.client ?? client).post({
     security: [{
@@ -7667,7 +8217,7 @@ export const mediaCreateBatch = (options) => (options.client ?? client).post({
 /**
  * Get batch
  *
- * Read a batch job’s status, successful and failed item counts, and a bounded list of failed items. Use the id returned by batch creation; a job outside this library is not found.
+ * Alias of batch creation. Apply one metadata or deletion action to ids or a frozen expression selection asynchronously; poll the returned job id to inspect completion and item failures.
  */
 export const mediaGetBatch = (options) => (options.client ?? client).get({
     security: [{
@@ -7681,7 +8231,7 @@ export const mediaGetBatch = (options) => (options.client ?? client).get({
 /**
  * Batch assets alias
  *
- * Alias of batch creation. Apply one metadata or deletion action to ids or a frozen expression selection asynchronously; poll the returned job id to inspect completion and item failures.
+ * Queue a frozen selection for tagging, untagging, context replacement, moving, deleting or reprocessing. IDs are limited to 1000; use an expression for larger selections, subject to the search scan budget. reprocess starts at most 30 assets per rolling minute per library. Only retryable failed steps and legacy source-size unsupported steps rerun. Omit kinds to inspect all recoverable steps, or supply kinds to narrow them. Other unsupported, permanent and completed steps remain unchanged; a permanent output blocks only its own step. Assets without any selected recoverable step count as failed items without starting understanding. Poll the returned job id; done counts accepted launches, not successful model inference. Staff Admin only permits reprocess and requires a nonblank reason. Example: {"action":"reprocess","selector":{"expression":"processing_state=failed AND failure_code=UPSTREAM_FAILED"}}. For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export const mediaBatchAssets = (options) => (options.client ?? client).post({
     security: [{
@@ -7697,9 +8247,9 @@ export const mediaBatchAssets = (options) => (options.client ?? client).post({
     }
 });
 /**
- * Get job alias
+ * Get job
  *
- * Alias of batch retrieval. Read the job returned by a batch request, including terminal status, successful and failed counts, and individual failure codes.
+ * Read the current batch or video-generation Job status and progress. For generation, inspect outputs and failures, then save successful candidates before their preview and save window expires after 7 days.
  */
 export const mediaGetJob = (options) => (options.client ?? client).get({
     security: [{
@@ -7713,7 +8263,7 @@ export const mediaGetJob = (options) => (options.client ?? client).get({
 /**
  * List events
  *
- * Read library events in sequence order, including while the library is deleting. Page forward with asc and after_seq, or backward with desc and before_seq; never combine the two sequence cursors.
+ * Read library events in sequence order for observing asset writes and understanding progress. Obtain library_id from creation or listing; continue with after_seq for asc or before_seq for desc, without combining both. Use next_cursor when supplied. Reads do not start or retry understanding.
  */
 export const mediaListEvents = (options) => (options.client ?? client).get({
     security: [{
@@ -7727,7 +8277,7 @@ export const mediaListEvents = (options) => (options.client ?? client).get({
 /**
  * Create delivery token
  *
- * Issue a time-limited bearer token for originals and transformed authenticated assets in an active library. Use library_id from library creation or listing; read access is sufficient. Append token as the __cld_token__ query parameter on a matching delivery URL. The default ACL covers this library and the default lifetime is 3600 seconds; narrow acl and expires_in before sharing. Anyone holding the token can read matching paths until expires_at.
+ * Issue a time-limited bearer token for originals and transformed authenticated assets in an active library. Use library_id from library creation or listing; read access is sufficient. Append token as the __cld_token__ query parameter on a matching delivery URL. The default ACL covers this library and the default lifetime is 900 seconds; narrow acl and expires_in before sharing. Anyone holding the token can read matching paths until expires_at.
  */
 export const mediaCreateDeliveryToken = (options) => (options.client ?? client).post({
     security: [{
@@ -7742,6 +8292,340 @@ export const mediaCreateDeliveryToken = (options) => (options.client ?? client).
         ...options.headers
     }
 });
+/**
+ * Summarize understanding failures
+ *
+ * Inspect current understanding failures before retrying. Use library_id from library creation or listing. Groups include code, output kind, actual producer model, retryability and up to five sample asset IDs. At most 1024 detailed groups plus two overflow groups are returned; overflow groups separate retryable and unrecoverable entries and mark overflow=true. Unknown failure codes remain retryable. Historical counts are provisional while counts_complete is false. Example: GET /media/v1/libraries/lib_example/understandings/failure_summary.
+ */
+export const mediaUnderstandingFailureSummary = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/understandings/failure_summary',
+    ...options
+});
+/**
+ * List understanding results across a library
+ *
+ * Read current understanding entries across one library without fetching every asset separately. Use library_id from creation or listing. folder includes descendants; kinds is a comma-separated list of output kinds. Entries are ordered by asset_id and then understanding id. Continue with next_cursor and the same folder and kinds; limit defaults to 100 and cannot exceed 100. Superseded, deleted and old-version entries are excluded. During historical backfill, this method returns 503 CAPACITY rather than incomplete pages; poll failureSummary until counts_complete is true, then start pagination. Example: GET /media/v1/libraries/lib_example/understandings?folder=travel&kinds=caption,transcript&limit=100.
+ */
+export const mediaListUnderstandingsByLibrary = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/understandings',
+    ...options
+});
+/**
+ * Create video generation
+ *
+ * Create a video.generate job. Generation is charged per second. The response is 202 with a queued Job; poll GET /media/v1/libraries/{library_id}/jobs/{job_id} until terminal, then save successful outputs. Unsaved candidate Files expire after 7 days.
+ */
+export const mediaCreateGeneration = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/generations',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List jobs
+ *
+ * List batch and video-generation jobs in a library. Filter by status and continue with next_cursor. Poll a generation Job until terminal, then save successful candidate outputs before they expire after 7 days.
+ */
+export const mediaListJobs = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/jobs',
+    ...options
+});
+/**
+ * Cancel job
+ *
+ * Cancel a queued or running generation job. Already completed outputs remain available to save; poll or read the returned Job to confirm its status.
+ */
+export const mediaCancelJob = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/jobs/{job_id}/cancel',
+    ...options
+});
+/**
+ * Save generation output
+ *
+ * Save a successful candidate as a library asset. Candidate outputs expire after 7 days; save before expiry. Generation is charged per second when the job runs, not when an output is saved.
+ */
+export const mediaSaveGenerationOutput = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/libraries/{library_id}/jobs/{job_id}/outputs/{index}/save',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Get generation capabilities
+ *
+ * Read supported text-to-video intent, default model, duration and aspect-ratio limits, per-library concurrency and candidate retention. Generation is charged per second; unsaved candidates expire after 7 days.
+ */
+export const mediaGetGenerationCapabilities = (options) => (options?.client ?? client).get({
+    security: [{
+            key: 'media-BearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/media/v1/generation/capabilities',
+    ...options
+});
+/**
+ * List types
+ *
+ * Read the node and relation types registered for this organization before writing, so a create names a type the graph accepts. Each entry is one registrant's registration with its owner, version and definitions. Types cannot be created at runtime; they are registered by the owning service at deploy time, so a type missing here is not available to write.
+ */
+export const ontologyListTypes = (options) => (options?.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/types',
+    ...options
+});
+/**
+ * Register type
+ *
+ * Register a node or relation type for this organization. Not open yet — this call currently answers 501 NOT_IMPLEMENTED and writes nothing, because a registration is checked and stored by the deploy gate that ships the registering service, not by a runtime call. Until it opens, read the types already in force with praxis.ontology.types.list and create records only of those types.
+ */
+export const ontologyRegisterType = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/types',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Retrieve type
+ *
+ * Read one registered type's definition before writing a record of it, to learn whether it is a node or an edge, which endpoints an edge type admits, and which origins it accepts. The name comes from types.list; a name that is not registered answers ONTOLOGY_TYPE_UNKNOWN, and writes of that type are refused.
+ */
+export const ontologyRetrieveType = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/types/{name}',
+    ...options
+});
+/**
+ * List nodes
+ *
+ * Discover the entities in this organization's graph and obtain node ids for retrieval, updates and relations. Filter by type, by free text over names, aliases, descriptions and facts, or by owner; limit is 1–100 and defaults to 50. Omit cursor for the first page, then copy next_cursor into the next request until it is null. A node whose content belongs to somebody else comes back as a restricted entry carrying only its id, type and name.
+ */
+export const ontologyListNodes = (options) => (options?.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/nodes',
+    ...options
+});
+/**
+ * Create node
+ *
+ * Record one entity in the graph, for a system mirroring a record it owns. type must already be registered and ref, when given, must match that type's ref_prefix. Send an Idempotency-Key header; repeating the same key with the same content returns the first result instead of creating a second node. This writes structure only — to give an agent something to remember, use POST /agent/v1/agents/{agent_id}/consolidations.
+ */
+export const ontologyCreateNode = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/nodes',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Retrieve node
+ *
+ * Read one node's content and, with expand=relations, every relation on and around it. as_of reads the node as it was at that time. A node id from another organization, or one that never existed, answers ONTOLOGY_NODE_NOT_FOUND; a node you may reach but not read returns restricted true with its name only.
+ */
+export const ontologyRetrieveNode = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/nodes/{node_id}',
+    ...options
+});
+/**
+ * Update node
+ *
+ * Change a node's name, aliases or description when the mirrored record was renamed, without touching its type or identity. Send only the fields to change; omitted fields keep their current values and an explicitly null description clears it. Repeating the same edit converges on the same node, so this needs no Idempotency-Key.
+ */
+export const ontologyUpdateNode = (options) => (options.client ?? client).patch({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/nodes/{node_id}',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Merge node
+ *
+ * Fold a duplicate node into the node that should survive, when two records are discovered to be the same entity. The merged node's relations and aliases move to the survivor and later reads of the duplicate resolve to it. Send an Idempotency-Key header; repeating the same key replays the first result. Reversal is a staff operation, not available here.
+ */
+export const ontologyMergeNode = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/nodes/{node_id}/merge',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * List relations
+ *
+ * Read the facts in the graph and obtain relation ids for retrieval, invalidation or spreading. Filter by endpoint node, by type and by direction; as_of reads the relations as they were then. Invalidated relations are omitted unless include_invalid is true. limit is 1–100 and defaults to 50; follow next_cursor until it is null.
+ */
+export const ontologyListRelations = (options) => (options?.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/relations',
+    ...options
+});
+/**
+ * Create relation
+ *
+ * Record one fact between two existing nodes, for a system mirroring a relationship it owns. type must be registered and must admit these endpoints; fact states the relationship in one sentence. Send an Idempotency-Key header; repeating the same key returns the first result instead of writing a second relation. This writes structure only — to give an agent something to remember, use POST /agent/v1/agents/{agent_id}/consolidations.
+ */
+export const ontologyCreateRelation = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/relations',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Retrieve relation
+ *
+ * Read one relation's fact and both of its clocks — valid_at and invalid_at for when it was true in the world, created_at and expired_at for when it was recorded and retired. An id from another organization, or one that never existed, answers ONTOLOGY_EDGE_NOT_FOUND.
+ */
+export const ontologyRetrieveRelation = (options) => (options.client ?? client).get({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/relations/{relation_id}',
+    ...options
+});
+/**
+ * Invalidate relation
+ *
+ * Mark a relation as no longer true from a world time, when the mirrored record changed. The relation is kept — invalid_at moves and the relation still reads at an earlier as_of, so history stays answerable. Send an Idempotency-Key header; repeating the same key replays the first result. There is no delete.
+ */
+export const ontologyInvalidateRelation = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/relations/{relation_id}/invalidate',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Apply changeset
+ *
+ * Apply a batch of node, relation and invalidation operations as one transaction, when a mirror has several records to write together and a partial write would leave the graph inconsistent. Every operation succeeds or none is applied. Send an Idempotency-Key header; the same key with the same content replays the first result, and the same key with different content is ONTOLOGY_CONFLICT.
+ */
+export const ontologyApplyChangeset = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/changesets',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
+/**
+ * Search nodes
+ *
+ * Resolve text to the nodes it most likely names, when a mirror holds a name and needs the node id it corresponds to. Results are ranked candidates, not an answer, each reporting whether the match came from the node's name, an alias, its description or a relation's fact. Narrow with types, and cap the result count with limit (1–50, default 20). This reads structure; it is not an agent recall — agents recall through POST /agent/v1/agents/{agent_id}/consolidations.
+ */
+export const ontologySearch = (options) => (options.client ?? client).post({
+    security: [{
+            key: 'ontology-bearerAuth',
+            scheme: 'bearer',
+            type: 'http'
+        }],
+    url: '/ontology/v1/search',
+    ...options,
+    headers: {
+        'Content-Type': 'application/json',
+        ...options.headers
+    }
+});
 /**
  * List sandboxes (v2)
  *
@@ -8842,7 +9726,7 @@ export const vaultListVaults = (options) => (options?.client ?? client).get({
 /**
  * Create vault
  *
- * Create an empty, active vault to hold credentials for your account, with a display name and optional metadata. Use its returned id as vault_id when creating secrets or OAuth authorizations. Unlike Anthropic, Agent sessions do not accept nonempty vault_ids; storing a credential or adding its ID to metadata does not enable vault-backed MCP authentication. Application vault references are also unavailable; praxis_vault_ref version bindings and secret writes with a vault source return 501, so creating a vault does not yet enable either consumer.
+ * Create an empty, active vault to hold credentials for your account, with a display name and optional metadata. Use its returned id as vault_id when creating secrets or OAuth authorizations. Agent sessions and deployments accept up to 50 vault_ids and match their credentials against the session's MCP servers, so a stored static or oauth credential does serve as vault-backed MCP authentication; only environment_variable credentials are not yet placed, because the egress proxy ADR-058 §6 gives them is not built. Application vault references are also unavailable; praxis_vault_ref version bindings and secret writes with a vault source return 501, so creating a vault does not yet enable either consumer.
  */
 export const vaultCreateVault = (options) => (options.client ?? client).post({
     security: [{
@@ -9438,7 +10322,7 @@ export const ticketGetLabels = (options) => (options?.client ?? client).get({
 /**
  * Create or add labels
  *
- * Create or add labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.
+ * Create or add labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.
  */
 export const ticketPostLabels = (options) => (options.client ?? client).post({
     security: [{
@@ -9460,7 +10344,7 @@ export const ticketPostLabels = (options) => (options.client ?? client).post({
 /**
  * Remove labels
  *
- * Remove labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.
+ * Remove labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.
  */
 export const ticketDeleteLabelsName = (options) => (options.client ?? client).delete({
     security: [{
@@ -9478,7 +10362,7 @@ export const ticketDeleteLabelsName = (options) => (options.client ?? client).de
 /**
  * Update labels
  *
- * Update labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Organization owner or admin authority is required for this write; API keys without role information act as members.
+ * Update labels within the authenticated organization. Obtain resource identifiers from the corresponding list or create response. Writes complete synchronously; read the returned resource to observe the result. Service authorization applies to the verified human subject.
  */
 export const ticketPatchLabelsName = (options) => (options.client ?? client).patch({
     security: [{