@deepraxis/sdk 0.1.1-dev.e5db771 → 0.1.1-dev.e9377c2

package/dist/generated/types.gen.d.ts

@@ -1144,7 +1144,7 @@ export type OwnFileDeleteFileResponse = {
 };
 export type OwnFilePraxisCreateUpload = {
     /**
-     * Exact complete file length in bytes, from 1 through 2147483648 (2 GiB); the sum of completed parts must match.
+     * Exact complete file length in bytes, from 1 through 21474836480 (20 GiB); the sum of completed parts must match.
      */
     bytes: number;
     /**
@@ -1195,7 +1195,7 @@ export type OwnFilePraxisUpload = {
      */
     created_at: number;
     /**
-     * Expiry time as Unix seconds; unfinished uploads expire after one hour.
+     * Expiry time as Unix seconds; unfinished uploads expire after 7 days.
      */
     expires_at: number;
     /**
@@ -1207,13 +1207,38 @@ export type OwnFilePraxisUpload = {
      */
     purpose: 'user_data' | 'assistants' | 'vision';
     /**
-     * Upload state: pending accepts parts; completed has a file; cancelled was cancelled; expired exceeded its one-hour lifetime.
+     * Upload state: pending accepts parts; completed has a file; cancelled was cancelled; expired exceeded its seven-day lifetime.
      */
     status: 'pending' | 'completed' | 'cancelled' | 'expired';
     /**
      * Present after complete. A file with status uploaded is still processing; poll files.retrieve until processed before use.
      */
     file?: OwnFileOpenAiFile | null;
+    /**
+     * Fixed part length in bytes for a fixed-size upload, or null for a general upload. Send exactly this many bytes per numbered part except for the final remainder.
+     */
+    part_size?: number | null;
+    /**
+     * Parts the upload already holds, in resume order: numbered parts by number, then a general upload's parts by arrival. Query GET /file/v1/uploads/{upload_id} after a break and resend only the numbers missing here.
+     */
+    received_parts?: Array<{
+        /**
+         * Fixed part number, or null for a part of a general upload.
+         */
+        part_number: number | null;
+        /**
+         * Part identifier to pass to complete for this content.
+         */
+        id: string;
+        /**
+         * Accepted length of this part in bytes.
+         */
+        bytes: number;
+        /**
+         * Part content digest prefixed sha256:.
+         */
+        sha256: string;
+    }>;
     /**
      * Declared MIME type, verified during assembly.
      */
@@ -1274,7 +1299,7 @@ export type OwnFileSignedUploadRequest = {
      */
     filename: string;
     /**
-     * Exact local file size in bytes, from 1 through 2147483648 (2 GiB). Up to 104857600 bytes returns one PUT URL; larger files return numbered part URLs and a completion URL. Every PUT requires its exact signed Content-Length.
+     * Exact local file size in bytes, from 1 through 21474836480 (20 GiB). Up to 104857600 bytes returns one PUT URL; larger files return numbered part URLs, a completion URL and a status URL. Every PUT requires its exact signed Content-Length.
      */
     bytes: number;
     /**
@@ -1286,7 +1311,7 @@ export type OwnFileSignedUploadRequest = {
      */
     purpose?: 'user_data' | 'assistants' | 'vision';
     /**
-     * Lifetime in seconds, from 1 through 604800: defaults to 900 for single PUT or 3600 for multipart. All part URLs and the completion URL share one expiry. This does not set the resulting file's lifetime.
+     * Lifetime in seconds, from 1 through 604800: defaults to 900 for single PUT or 604800 (7 days) for multipart. All part URLs, the status URL and the completion URL share one expiry. This does not set the resulting file's lifetime.
      */
     expires_in?: number;
     /**
@@ -1337,6 +1362,10 @@ export type OwnFileSignedUploadResponse = {
      * Bearer URL to POST without a body after every chunk is acknowledged. Returns 201 with the file object; missing chunks return 400 and successful completion replays return 410 CAPABILITY_USED.
      */
     complete_url: string;
+    /**
+     * Read-only bearer URL for GET that answers the same body as GET /file/v1/uploads/{upload_id}: status, part_size and the received_parts. Use it after a break to resend only the missing chunks; it needs no API key and every write on it is refused.
+     */
+    status_url: string;
 };
 /**
  * Problem document returned by the Meta method catalog on failure.
@@ -10553,7 +10582,7 @@ export type AutomationTrigger = {
      */
     end_at: string | null;
     /**
-     * Overlap policy when a firing is due while the previous run is still active: skip (default) skips it, allow starts it anyway.
+     * Overlap policy when a firing arrives while the previous run is still active: skip skips it, allow starts it anyway. When omitted, a schedule trigger uses skip and a webhook trigger uses allow, because a skipped webhook call is not redelivered.
      */
     overlap: AutomationTriggerOverlap;
     /**
@@ -10673,7 +10702,7 @@ export type AutomationTriggerCreateResult = {
      */
     end_at: string | null;
     /**
-     * Overlap policy when a firing is due while the previous run is still active: skip (default) skips it, allow starts it anyway.
+     * Overlap policy when a firing arrives while the previous run is still active: skip skips it, allow starts it anyway. When omitted, a schedule trigger uses skip and a webhook trigger uses allow, because a skipped webhook call is not redelivered.
      */
     overlap: AutomationTriggerOverlap;
     /**
@@ -13022,6 +13051,27 @@ export type CutExport = {
          */
         audio: 'pending' | 'done';
     };
+    /**
+     * Present when normalization was requested; contains requested targets and measured output levels.
+     */
+    loudness?: {
+        /**
+         * Requested integrated loudness target in LUFS.
+         */
+        target_lufs: number;
+        /**
+         * Requested maximum true peak in dBTP.
+         */
+        true_peak_dbtp: number;
+        /**
+         * Measured integrated loudness of the rendered export in LUFS.
+         */
+        integrated_lufs: number;
+        /**
+         * Measured maximum true peak of the rendered export in dBTP.
+         */
+        measured_true_peak_dbtp: number;
+    };
     /**
      * Output media reference, available after the export reaches done.
      */
@@ -13094,6 +13144,19 @@ export type CutExportInput = {
      */
     binding?: string;
     revision?: CutRevision;
+    /**
+     * Optional loudness normalization target; normalization adds analysis and rendering work.
+     */
+    loudness?: {
+        /**
+         * Integrated loudness target in LUFS.
+         */
+        target_lufs: number;
+        /**
+         * Maximum true peak in dBTP.
+         */
+        true_peak_dbtp: number;
+    };
 };
 /**
  * One page of organization-accessible exports.
@@ -14398,6 +14461,10 @@ export type MediaAsset = {
      * Resource status; active identifies an asset that has not been deleted.
      */
     status: 'active';
+    /**
+     * True when the source header declares an alpha channel: a PNG color type 4 or 6 or a tRNS chunk, a WebP VP8X alpha flag or VP8L alpha bit, a WebM or MKV video track AlphaMode of 1, or a GIF transparent-color flag. False when a known container has no alpha channel. Omitted when the format is unknown, the header could not be parsed, or the asset was stored before this field existed; absence does not mean the source is opaque.
+     */
+    has_alpha?: boolean;
     /**
      * Search-vector status: pending awaits vector generation or reprocessing; ready has searchable vectors; unavailable indicates disabled, unsupported or failed embedding. Existing vectors may still serve searches while reprocessing is pending.
      */
@@ -14886,6 +14953,453 @@ export type MediaGenerationCapabilities = {
      */
     candidate_retention_days: number;
 };
+/**
+ * One page of type registrations; types are few enough that this face returns them in a single page.
+ */
+export type OntologyTypeRegistrationPage = {
+    /**
+     * The registrations in force for this organization.
+     */
+    data: Array<OntologyTypeRegistration>;
+    /**
+     * Always null here; the field is present so every list on this face has the same shape.
+     */
+    next_cursor: string;
+};
+/**
+ * One service's registered types for this organization, as shipped by that service and stored by the deploy gate.
+ */
+export type OntologyTypeRegistration = {
+    /**
+     * Service that registered these types, for example file or ticket; it is the registrant a later change to a type is checked against.
+     */
+    owner: string;
+    /**
+     * Monotonic version of this owner's registration; a later registration must extend this one without removing or narrowing anything.
+     */
+    version: number;
+    /**
+     * Node types this owner registers.
+     */
+    nodes: Array<OntologyNodeType>;
+    /**
+     * Relation types this owner registers.
+     */
+    edges: Array<OntologyEdgeType>;
+};
+export type OntologyOntologyError = {
+    /**
+     * Failure details for a non-2xx response; choose a recovery action using the operation's status and code description.
+     */
+    error: {
+        /**
+         * Machine-readable failure category; see this operation's error responses for triggering conditions and recovery actions.
+         */
+        code: string;
+        /**
+         * Human-readable explanation of why the request failed; it names the offending field or condition and the action to take.
+         */
+        message: string;
+        /**
+         * Optional error-specific context, present when the failure names particular items; absent for failures that concern the request as a whole.
+         */
+        details?: {
+            [key: string]: unknown;
+        };
+    };
+};
+/**
+ * One registered type, with the registration it belongs to and whether it is a node or a relation type.
+ */
+export type OntologyTypeLookup = {
+    /**
+     * Service that registered this type; a change to the type is checked against that registrant.
+     */
+    owner: string;
+    /**
+     * Version of the registration this type came from, so a caller can tell when a definition moved on.
+     */
+    version: number;
+    /**
+     * Whether the type describes an entity or a fact, which decides whether it is used when creating a node or a relation.
+     */
+    kind: 'node' | 'edge';
+    /**
+     * The full registered definition — the same object as the entry in its registration's nodes or edges array.
+     */
+    definition: {
+        [key: string]: unknown;
+    };
+};
+/**
+ * One page of nodes; a restricted entry carries only id, type, name and restricted.
+ */
+export type OntologyNodePage = {
+    /**
+     * The nodes on this page, ordered by node id.
+     */
+    data: Array<OntologyNode | OntologyRestrictedNode>;
+    /**
+     * Opaque cursor for the next page, or null when this is the last page; copy it into the next request's cursor unchanged.
+     */
+    next_cursor: string;
+};
+/**
+ * The entity to record; type must be registered and ref must match that type's prefix.
+ */
+export type OntologyCreateNodeInput = {
+    /**
+     * Registered node type name from types.list; an unregistered name is refused and nothing is written.
+     */
+    type: string;
+    /**
+     * Id of the mirrored record in the owning service, which must start with the type's ref_prefix; omit or null for a concept with no external record.
+     */
+    ref?: string;
+    /**
+     * Display name of the entity, at most 200 characters.
+     */
+    name: string;
+    /**
+     * Other names this entity is known by; they are matched by search alongside the name.
+     */
+    aliases?: Array<string>;
+    /**
+     * Profile of the entity, at most 500 characters; omit or null for none.
+     */
+    description?: string;
+    /**
+     * Member id whose content this is, restricting it to that member; omit or null to make it readable organization-wide.
+     */
+    owner?: string;
+};
+/**
+ * One entity in the graph, with when it was recorded and last changed.
+ */
+export type OntologyNode = {
+    /**
+     * Node id, used by relations, merges and later reads; treat it as opaque and do not parse it.
+     */
+    id: string;
+    /**
+     * Registered node type this entity was recorded as; it never changes after creation.
+     */
+    type: string;
+    /**
+     * Id of the mirrored record in the service that owns it, matching the type's ref_prefix; null for a concept with no external record.
+     */
+    ref?: string;
+    /**
+     * Display name of the entity, at most 200 characters.
+     */
+    name: string;
+    /**
+     * Other names this entity is known by; they are matched by search alongside the name.
+     */
+    aliases: Array<string>;
+    /**
+     * Profile of the entity, at most 500 characters; null when none was recorded.
+     */
+    description?: string;
+    /**
+     * Member id whose content this is; null means it is readable organization-wide. Another member's node comes back restricted.
+     */
+    owner: string;
+    /**
+     * When this node was merged into another, that survivor's id; reads of a merged node resolve to the survivor.
+     */
+    merged_into?: string;
+    /**
+     * System time when the node was first recorded, in ISO 8601 UTC.
+     */
+    created_at: string;
+    /**
+     * System time of the last change to this node's content, in ISO 8601 UTC.
+     */
+    updated_at: string;
+    /**
+     * System time the mirrored record was deleted, when that is known; kept so history stays answerable.
+     */
+    deleted_at?: string;
+};
+export type OntologyNodeWithRelations = OntologyNode & {
+    /**
+     * Relations on and around this node that the caller may read, ordered by relation id; present only when expand=relations was sent.
+     */
+    relations?: Array<OntologyRelation>;
+};
+/**
+ * The fields to change; omitted fields keep their current values.
+ */
+export type OntologyUpdateNodeInput = {
+    /**
+     * New display name, at most 200 characters; omit to keep the current name.
+     */
+    name?: string;
+    /**
+     * Replacement alias list; an empty array clears the aliases and omitting the field keeps them.
+     */
+    aliases?: Array<string>;
+    /**
+     * Replacement profile, at most 500 characters; an explicit null clears it and omitting the field keeps it.
+     */
+    description?: string;
+};
+/**
+ * The survivor the merged node folds into.
+ */
+export type OntologyMergeNodeInput = {
+    /**
+     * Node id that should survive, from nodes.list or search; the merged node's relations and aliases move to it.
+     */
+    into: string;
+};
+/**
+ * One page of relations.
+ */
+export type OntologyRelationPage = {
+    /**
+     * The relations on this page, ordered by relation id.
+     */
+    data: Array<OntologyRelation>;
+    /**
+     * Opaque cursor for the next page, or null when this is the last page; copy it into the next request's cursor unchanged.
+     */
+    next_cursor: string;
+};
+/**
+ * The fact to record between two existing nodes of this organization.
+ */
+export type OntologyCreateRelationInput = {
+    /**
+     * Registered relation type name from types.list; it must admit both endpoints or the write is refused.
+     */
+    type: string;
+    /**
+     * Node id the fact starts from, from nodes.list or nodes.create.
+     */
+    source: string;
+    /**
+     * Node id the fact points at, from nodes.list or nodes.create.
+     */
+    target: string;
+    /**
+     * The relationship in one sentence, at most 280 characters, written to read back on its own.
+     */
+    fact: string;
+    /**
+     * World time the fact became true, when the mirrored record dates it; omit to leave it undated.
+     */
+    valid_at?: string;
+    /**
+     * Member id whose content this fact is, restricting it to that member; omit or null for organization-wide.
+     */
+    owner?: string;
+};
+/**
+ * One fact between two nodes, with two clocks — when it was true in the world and when it was recorded.
+ */
+export type OntologyRelation = {
+    /**
+     * Relation id, used by invalidation and later reads; treat it as opaque and do not parse it.
+     */
+    id: string;
+    /**
+     * Registered relation type this fact was recorded as; it must admit both endpoints.
+     */
+    type: string;
+    /**
+     * Node id the fact starts from.
+     */
+    source: string;
+    /**
+     * Node id the fact points at.
+     */
+    target: string;
+    /**
+     * The relationship in one sentence, at most 280 characters, as it should be read back.
+     */
+    fact: string;
+    /**
+     * Where this fact was learned, oldest first; each entry names the scope it came from and an optional time range.
+     */
+    episodes?: Array<{
+        /**
+         * Scope the experience belonged to, normally a session id.
+         */
+        scope?: string;
+        /**
+         * Start of the period the experience covered, when known; omit for a single moment.
+         */
+        from?: string;
+        /**
+         * End of the period the experience covered, when known; omit for a single moment.
+         */
+        to?: string;
+    }>;
+    /**
+     * Where the fact came from; the relation type must list this origin among the ones it accepts.
+     */
+    origin: 'platform' | 'stated' | 'observed' | 'inferred';
+    /**
+     * How strongly the fact is held, from 0 to 1; 1 is fully held and lower values fade faster.
+     */
+    confidence: number;
+    /**
+     * Member id whose content this fact is; null means it is readable organization-wide. Another member's relation reads as not found.
+     */
+    owner?: string;
+    /**
+     * World time the fact became true; null when it was never dated, in which case treat it as true since it was recorded.
+     */
+    valid_at?: string;
+    /**
+     * World time the fact stopped being true; null while it still holds. The relation is kept and reads at an earlier as_of.
+     */
+    invalid_at?: string;
+    /**
+     * System time the fact was recorded, in ISO 8601 UTC.
+     */
+    created_at: string;
+    /**
+     * System time the fact was judged no longer true, which trails invalid_at; null while it still holds.
+     */
+    expired_at?: string;
+    /**
+     * Relation id that replaced this one, when the invalidation named a successor; null when nothing replaced it.
+     */
+    superseded_by?: string;
+    /**
+     * System time the fact was archived out of spreading; null while it still spreads, and reads by time still reach it either way.
+     */
+    archived_at?: string;
+};
+/**
+ * When the fact stopped being true, and optionally what replaced it.
+ */
+export type OntologyInvalidateRelationInput = {
+    /**
+     * World time the fact stopped being true, in ISO 8601 UTC; reads at an earlier as_of still return the relation.
+     */
+    invalid_at: string;
+    /**
+     * Relation id that replaces this one, when a successor was recorded; omit or null when nothing replaced it.
+     */
+    superseded_by?: string;
+    /**
+     * Why it stopped being true, for people reading the history later; not enforced and safe to omit.
+     */
+    reason?: string;
+};
+/**
+ * A batch of graph operations applied as one transaction; every operation succeeds or none is applied.
+ */
+export type OntologyChangesetInput = {
+    /**
+     * World time the batch describes, in ISO 8601 UTC; operations without their own time are dated by it.
+     */
+    at: string;
+    /**
+     * Scope the batch came from, normally the session id it was observed in; it is stored with the operations for later reading.
+     */
+    scope?: string;
+    /**
+     * At most 500 operations, applied in order; each names its kind in op and the fields that kind requires.
+     */
+    ops: Array<OntologyChangesetOp>;
+};
+/**
+ * What the batch did, including the ids it assigned and anything it refused.
+ */
+export type OntologyChangesetResult = {
+    /**
+     * Number of operations that changed the graph; zero when the key had been seen before.
+     */
+    applied: number;
+    /**
+     * Map from each key used in the batch to the node or relation id it produced or matched.
+     */
+    ids: {
+        [key: string]: string;
+    };
+    /**
+     * Relations that already held the same meaning and were refreshed instead of duplicated.
+     */
+    refreshed: Array<string>;
+    /**
+     * Operations refused within the batch, each with its index and reason; empty when the batch applied whole.
+     */
+    rejected: Array<{
+        /**
+         * Zero-based position of the operation in the submitted ops array.
+         */
+        index?: number;
+        /**
+         * Failure category for this operation, such as ONTOLOGY_TYPE_UNKNOWN for an unregistered type.
+         */
+        code?: string;
+        /**
+         * Why this operation was refused, naming the offending field.
+         */
+        message?: string;
+    }>;
+    /**
+     * True when the Idempotency-Key had been seen before, so nothing changed and the first result is returned.
+     */
+    replayed: boolean;
+};
+/**
+ * The text to resolve, optionally narrowed to types and a result count.
+ */
+export type OntologySearchInput = {
+    /**
+     * Text to find nodes for, matched against names, aliases, descriptions and relation facts; an empty string is refused.
+     */
+    text: string;
+    /**
+     * Registered node type names to search within; omit to search every type.
+     */
+    types?: Array<string>;
+    /**
+     * Restrict matches to facts recorded within a period; omit to search all time.
+     */
+    window?: {
+        /**
+         * Start of the period, inclusive, in ISO 8601 UTC; omit to leave the start open.
+         */
+        from?: string;
+        /**
+         * End of the period, exclusive, in ISO 8601 UTC; omit to leave the end open.
+         */
+        to?: string;
+    };
+    /**
+     * Maximum candidate nodes to return, from 1 to 50; defaults to 20 when omitted.
+     */
+    limit?: number;
+};
+/**
+ * Ranked candidate nodes for the searched text, best match first.
+ */
+export type OntologySearchResult = {
+    /**
+     * The candidate nodes, strongest match first; an empty array means nothing matched.
+     */
+    hits: Array<{
+        /**
+         * Node id of the candidate; pass it to nodes.retrieve to confirm before writing with it.
+         */
+        node?: string;
+        /**
+         * Match strength from 0 to 1; compare candidates within one response rather than across queries.
+         */
+        score?: number;
+        /**
+         * Which field matched, so a weak fact match can be checked against the node itself.
+         */
+        matched?: 'name' | 'alias' | 'description' | 'fact';
+    }>;
+};
 /**
  * Sandbox creation request. All system communication with the sandbox is always secured; the template's envd version must support secured access.
  */
@@ -15328,6 +15842,10 @@ export type SandboxTemplateBuildInfo = {
     reason?: SandboxBuildStatusReason;
 };
 export type SandboxTemplateWithBuilds = {
+    /**
+     * Lifecycle classes this template can run as. ephemeral: cannot pause, snapshot or mount volumes and is deleted when it stops; persistent: can pause, resume and snapshot.
+     */
+    lifecycles?: Array<'ephemeral' | 'persistent'>;
     /**
      * Identifier of the template
      */
@@ -25380,9 +25898,9 @@ export type CutExportOutput = {
      */
     fps?: number;
     /**
-     * draft favors faster review renders; high favors final delivery quality.
+     * Compression of the encoded video, like Shotstack quality. medium is the default and balances render, upload and storage at about 70% of the bitrate of high. draft is about 40% of high, for review renders. high is for delivery that will be transcoded again or needs the most detail.
      */
-    quality?: 'draft' | 'high';
+    quality?: 'draft' | 'medium' | 'high';
 };
 export type DatabaseField = {
     /**
@@ -26038,7 +26556,7 @@ export type MediaChunkComplete = MediaCloudinaryResource & {
     done: true;
 };
 /**
- * Per-task processing progress and its aggregate state for the asset. For understanding, Media generates proxies for video sources of 25 MB or more and audio-only sources of 100 MB or more; originals remain available unchanged. The duration limit is 10 minutes. A video proxy still above 95 MB after recompression, or a source exceeding the duration limit, is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
+ * Per-task processing progress and its aggregate state for the asset. For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export type MediaProcessing = {
     /**
@@ -26338,6 +26856,10 @@ export type MediaSearchAsset = {
      * Resource status; active identifies an asset that has not been deleted.
      */
     status: 'active';
+    /**
+     * True when the source header declares an alpha channel: a PNG color type 4 or 6 or a tRNS chunk, a WebP VP8X alpha flag or VP8L alpha bit, a WebM or MKV video track AlphaMode of 1, or a GIF transparent-color flag. False when a known container has no alpha channel. Omitted when the format is unknown, the header could not be parsed, or the asset was stored before this field existed; absence does not mean the source is opaque.
+     */
+    has_alpha?: boolean;
     /**
      * Search-vector status: pending awaits vector generation or reprocessing; ready has searchable vectors; unavailable indicates disabled, unsupported or failed embedding. Existing vectors may still serve searches while reprocessing is pending.
      */
@@ -26515,6 +27037,170 @@ export type MediaFailureGroup = {
      */
     sample_asset_ids: Array<MediaAssetId>;
 };
+/**
+ * A kind of entity the graph accepts, for example a file or a customer.
+ */
+export type OntologyNodeType = {
+    /**
+     * Globally unique type name, used as a node's type when creating it; a dotted name marks a namespaced subtype.
+     */
+    name: string;
+    /**
+     * Required prefix of the external record id when a node of this type carries a ref, for example file_ for the file type; omit for types that are pure concepts.
+     */
+    ref_prefix?: string;
+    /**
+     * Type significance from 0 to 1, used when ranking how strongly reaching this kind of node matters.
+     */
+    weight: number;
+    /**
+     * Whether the graph may continue through a node of this type; false makes it a stopping point that is reached but never expanded.
+     */
+    passable: boolean;
+    /**
+     * What this type means in the registering service, used to choose the right type when writing.
+     */
+    description: string;
+};
+/**
+ * A kind of fact the graph accepts between two nodes.
+ */
+export type OntologyEdgeType = {
+    /**
+     * Globally unique relation type name, used as a relation's type when creating it.
+     */
+    name: string;
+    /**
+     * Node type names this relation may start from; the single entry * admits every type.
+     */
+    source: Array<string>;
+    /**
+     * Node type names this relation may point at; the single entry * admits every type.
+     */
+    target: Array<string>;
+    /**
+     * Whether the fact reads one way or the same in both directions, which decides how it renders on each endpoint.
+     */
+    direction: 'forward' | 'both';
+    /**
+     * Whether spreading may continue through this relation; false makes it a stopping point that is reached but never traversed.
+     */
+    passable: boolean;
+    /**
+     * Relation significance from 0 to 1, used when ranking how strongly reaching through this relation matters.
+     */
+    weight: number;
+    /**
+     * Whether a source may have at most one valid relation of this type at a time; true makes a new one supersede the old.
+     */
+    functional: boolean;
+    /**
+     * How long the relation stays strong while valid, from 0 to 1; 1 never fades and lower values decay faster. Omit for the default decay.
+     */
+    persistence?: number;
+    /**
+     * Origins a relation of this type may carry; each value names where the fact came from and they are checked when writing.
+     */
+    origins: Array<'platform' | 'stated' | 'observed' | 'inferred'>;
+    /**
+     * What this fact means in the registering service, used to choose the right type when writing.
+     */
+    description: string;
+};
+/**
+ * A node the caller may reach but not read, because its content belongs to another member; its name confirms what was reached while the content stays withheld.
+ */
+export type OntologyRestrictedNode = {
+    /**
+     * Node id, usable to relate this entity to others; treat it as opaque.
+     */
+    id: string;
+    /**
+     * Registered node type of the hidden entity, which is not itself restricted content.
+     */
+    type: string;
+    /**
+     * Display name of the hidden entity, shown so a caller can tell whether the reached node is the one it meant.
+     */
+    name: string;
+    /**
+     * Always true; its presence is how a caller tells a withheld node from a readable one.
+     */
+    restricted: boolean;
+};
+/**
+ * One operation of a changeset, discriminated by op; it names new nodes and relations by caller-local keys reused within the same batch.
+ */
+export type OntologyChangesetOp = {
+    /**
+     * Which operation to apply; the remaining required fields follow from this value.
+     */
+    op: 'upsert_node' | 'relate' | 'invalidate' | 'merge' | 'alias';
+    /**
+     * Caller-local name for the node or relation this operation creates, reused by later operations in the same batch; it is not an id.
+     */
+    key?: string;
+    /**
+     * Registered type name for upsert_node and relate; an unregistered name refuses the whole batch.
+     */
+    type?: string;
+    /**
+     * Mirrored record id for upsert_node, which must start with the type's ref_prefix; omit for a concept.
+     */
+    ref?: string;
+    /**
+     * Display name for upsert_node, at most 200 characters.
+     */
+    name?: string;
+    /**
+     * Start of a relate fact; a key from this batch or an existing node id.
+     */
+    source?: string;
+    /**
+     * End of a relate fact; a key from this batch or an existing node id.
+     */
+    target?: string;
+    /**
+     * The relationship in one sentence for relate, at most 280 characters.
+     */
+    fact?: string;
+    /**
+     * Where a relate fact came from; the relation type must accept this origin.
+     */
+    origin?: 'platform' | 'stated' | 'observed' | 'inferred';
+    /**
+     * Relation id an invalidate operation acts on, from relations.list or an earlier operation in this batch.
+     */
+    edge?: string;
+    /**
+     * World time an invalidate operation marks the fact as no longer true.
+     */
+    invalid_at?: string;
+    /**
+     * Relation id that replaces the invalidated one, when a successor was recorded; omit when nothing replaced it.
+     */
+    by?: string;
+    /**
+     * Why the operation was applied, kept for people reading the history; not enforced.
+     */
+    reason?: string;
+    /**
+     * Node id a merge operation folds away, resolving to the into node afterwards.
+     */
+    from?: string;
+    /**
+     * Node id a merge operation keeps, receiving the merged node's relations and aliases.
+     */
+    into?: string;
+    /**
+     * Node id an alias operation adds a name to.
+     */
+    node?: string;
+    /**
+     * The additional name an alias operation records for its node.
+     */
+    alias?: string;
+};
 /**
  * Auto-resume configuration for paused sandboxes.
  */
@@ -32059,6 +32745,23 @@ export type CutJoinEffect = {
      * Flash strength.
      */
     intensity?: number;
+} | {
+    /**
+     * Luma transition.
+     */
+    kind: 'luma';
+    /**
+     * Built-in map. User maps are not available yet.
+     */
+    map?: 'radial' | 'diagonal' | 'clouds' | 'spiral' | 'honeycomb' | 'bars';
+    /**
+     * Edge feather width.
+     */
+    softness?: number;
+    /**
+     * Reveal order.
+     */
+    invert?: 'normal' | 'inverted';
 };
 export type KnowledgeStaticChunking = {
     /**
@@ -32977,6 +33680,10 @@ export type MediaAssetWritable = {
      * Resource status; active identifies an asset that has not been deleted.
      */
     status: 'active';
+    /**
+     * True when the source header declares an alpha channel: a PNG color type 4 or 6 or a tRNS chunk, a WebP VP8X alpha flag or VP8L alpha bit, a WebM or MKV video track AlphaMode of 1, or a GIF transparent-color flag. False when a known container has no alpha channel. Omitted when the format is unknown, the header could not be parsed, or the asset was stored before this field existed; absence does not mean the source is opaque.
+     */
+    has_alpha?: boolean;
     /**
      * Search-vector status: pending awaits vector generation or reprocessing; ready has searchable vectors; unavailable indicates disabled, unsupported or failed embedding. Existing vectors may still serve searches while reprocessing is pending.
      */
@@ -33370,7 +34077,7 @@ export type MediaChunkCompleteWritable = MediaCloudinaryResourceWritable & {
     done: true;
 };
 /**
- * Per-task processing progress and its aggregate state for the asset. For understanding, Media generates proxies for video sources of 25 MB or more and audio-only sources of 100 MB or more; originals remain available unchanged. The duration limit is 10 minutes. A video proxy still above 95 MB after recompression, or a source exceeding the duration limit, is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
+ * Per-task processing progress and its aggregate state for the asset. For understanding, Media generates proxies for video sources of 25 MB or more or longer than 10 minutes, and for audio-only sources of 100 MB or more; originals remain available unchanged. Long videos are supported. When a video proxy is needed and is still above 95 MB after recompression, the source is reported as UNSUPPORTED with the limit in the failure message. Proxy preparation uses the organization’s metered sandbox resources.
  */
 export type MediaProcessingWritable = {
     state: MediaProcessingState;
@@ -33599,6 +34306,10 @@ export type MediaSearchAssetWritable = {
      * Resource status; active identifies an asset that has not been deleted.
      */
     status: 'active';
+    /**
+     * True when the source header declares an alpha channel: a PNG color type 4 or 6 or a tRNS chunk, a WebP VP8X alpha flag or VP8L alpha bit, a WebM or MKV video track AlphaMode of 1, or a GIF transparent-color flag. False when a known container has no alpha channel. Omitted when the format is unknown, the header could not be parsed, or the asset was stored before this field existed; absence does not mean the source is opaque.
+     */
+    has_alpha?: boolean;
     /**
      * Search-vector status: pending awaits vector generation or reprocessing; ready has searchable vectors; unavailable indicates disabled, unsupported or failed embedding. Existing vectors may still serve searches while reprocessing is pending.
      */
@@ -33732,6 +34443,26 @@ export type CutExportId = string;
  * Version identifier returned by its create or list operation; use the id, not a display name.
  */
 export type CutVersionId = string;
+/**
+ * A type name from types.list, with its dots preserved — a display label is not accepted.
+ */
+export type OntologyTypeName = string;
+/**
+ * Maximum items to return per page, from 1 to 100; defaults to 50 when omitted. Values above 100 are clamped to 100.
+ */
+export type OntologyLimit = number;
+/**
+ * Opaque next_cursor from the preceding list response; omit for the first page and stop when next_cursor is null.
+ */
+export type OntologyCursor = string;
+/**
+ * Node id returned by nodes.list, nodes.create or a changeset, in the form ond_ followed by 32 lowercase letters or digits; a name or an external record id is not accepted.
+ */
+export type OntologyNodeId = string;
+/**
+ * Relation id returned by relations.list, relations.create or a changeset, in the form oed_ followed by 32 lowercase letters or digits; a node id is not accepted.
+ */
+export type OntologyRelationId = string;
 /**
  * Cursor to start the list from
  */
@@ -33921,7 +34652,7 @@ export type ApplyAgentVersionResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -33952,7 +34683,7 @@ export type ApplyAgentVersionResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -35138,7 +35869,7 @@ export type UnarchiveAgentResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -35169,7 +35900,7 @@ export type UnarchiveAgentResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -44276,6 +45007,42 @@ export type FileCancelUploadResponses = {
     200: OwnFilePraxisUpload;
 };
 export type FileCancelUploadResponse = FileCancelUploadResponses[keyof FileCancelUploadResponses];
+export type FileRetrieveUploadData = {
+    body?: never;
+    path: {
+        /**
+         * Upload identifier returned by create on this face; the upload belongs to your organization.
+         */
+        upload_id: string;
+    };
+    query?: never;
+    url: '/file/v1/uploads/{upload_id}';
+};
+export type FileRetrieveUploadErrors = {
+    /**
+     * INVALID_PARAMS: correct the upload_id before retrying.
+     */
+    400: unknown;
+    /**
+     * UNAUTHENTICATED: supply a valid organization API key or signed-in session.
+     */
+    401: unknown;
+    /**
+     * UPLOAD_NOT_FOUND: the upload is missing or belongs to another organization; create a new upload and send its parts.
+     */
+    404: unknown;
+    /**
+     * UPLOAD_INVALID_STATE: the upload was cancelled or expired; create a new upload and send its parts again.
+     */
+    409: unknown;
+};
+export type FileRetrieveUploadResponses = {
+    /**
+     * The upload state plus part_size and the received_parts list; complete once every part is present.
+     */
+    200: OwnFilePraxisUpload;
+};
+export type FileRetrieveUploadResponse = FileRetrieveUploadResponses[keyof FileRetrieveUploadResponses];
 export type FileCreateSignedUploadData = {
     body: OwnFileSignedUploadRequest;
     path?: never;
@@ -51712,7 +52479,7 @@ export type AgentsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -51743,7 +52510,7 @@ export type AgentsListResponses = {
                 /**
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
-                type: 'search' | 'browser';
+                type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
                 /**
                  * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
                  */
@@ -52251,7 +53018,7 @@ export type AgentsCreateData = {
          */
         tools?: Array<AgentManaged15 | AgentManaged29 | AgentManaged32>;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings?: Array<{
             /**
@@ -52282,7 +53049,7 @@ export type AgentsCreateData = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -52852,7 +53619,7 @@ export type AgentsCreateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -52883,7 +53650,7 @@ export type AgentsCreateResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -53480,7 +54247,7 @@ export type AgentsRetrieveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -53511,7 +54278,7 @@ export type AgentsRetrieveResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -54059,7 +54826,7 @@ export type AgentsUpdateData = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -54642,7 +55409,7 @@ export type AgentsUpdateResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -54673,7 +55440,7 @@ export type AgentsUpdateResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -55256,7 +56023,7 @@ export type AgentsArchiveResponses = {
          */
         note: string | null;
         /**
-         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+         * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
          */
         bindings: Array<{
             /**
@@ -55287,7 +56054,7 @@ export type AgentsArchiveResponses = {
             /**
              * Service type. Opens the whole service to codemode; there is no per-resource id.
              */
-            type: 'search' | 'browser';
+            type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
             /**
              * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
              */
@@ -55888,7 +56655,7 @@ export type AgentsVersionsListResponses = {
              */
             note: string | null;
             /**
-             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search or browser. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
+             * Platform resources and services this service agent's codemode may reach, as one list of typed bindings. Only kind=service accepts a nonempty list; general and personal agents return 400. There are two kinds. A resource binding names one resource with id and access: database (id db_..., read_only or read_write), vector_store (id vs_..., read_only or read_write), file (id file- plus 24 letters or digits, as the File API returns it; read_only), media_library (any id without ':' or whitespace, read_only or read_write), model (a model catalog id, invoke), workflow and script (id <namespace>/<name>, invoke). A service binding opens a whole service and carries only enabled: search, browser, ticket, crm, canvas or cut. There is no binding by default; enabling one opens every public method of that service. At most 20 bindings per type, no repeated type and id, and each service type at most once. A session is authorized by the agent version it runs: newly added bindings apply only to new sessions, and a version saved with apply=false changes no access until it is applied. Applying a version that disables, removes or downgrades a binding revokes it immediately in running sessions on older versions. A resource that is not bound returns 404, a service that is not opened returns 403, and a write to a resource bound read_only returns 403 BINDING_READ_ONLY. Unknown types, fields on the wrong kind (id, access or instructions on a service binding), wrong access and malformed ids return 400. The former databases, vector_stores and files fields are removed and return 400. Omit on create for no bindings. Saving checks added or changed database, vector_store, media_library and file bindings in the organization: unknown or deleted ids return 400. If an owner is unavailable or takes more than 3 seconds, saving succeeds with verified=false for the affected bindings. Unchanged bindings keep their previous verification result and are not rechecked. workflow and script ids are not verified at save time.
              */
             bindings: Array<{
                 /**
@@ -55919,7 +56686,7 @@ export type AgentsVersionsListResponses = {
                 /**
                  * Service type. Opens the whole service to codemode; there is no per-resource id.
                  */
-                type: 'search' | 'browser';
+                type: 'search' | 'browser' | 'ticket' | 'crm' | 'canvas' | 'cut';
                 /**
                  * Save-time verification result. false means the resource owner was unavailable; saving still succeeded. Unchanged bindings retain their previous result. true is returned for other bindings, including workflow and script ids which are not verified at save time. Client values are ignored.
                  */
@@ -65896,7 +66663,7 @@ export type AutomationTriggersCreateData = {
          */
         end_at?: string | null;
         /**
-         * skip (default) skips when a previous run is still active; allow permits overlapping runs.
+         * skip skips while a previous run is still active; allow permits overlapping runs. When omitted, schedule triggers use skip and webhook triggers use allow.
          */
         overlap?: 'skip' | 'allow';
         /**
@@ -66095,7 +66862,7 @@ export type AutomationTriggersPatchData = {
          */
         end_at?: string | null;
         /**
-         * skip (default) skips when a previous run is still active; allow permits overlapping runs.
+         * skip skips while a previous run is still active; allow permits overlapping runs. When omitted, schedule triggers use skip and webhook triggers use allow.
          */
         overlap?: 'skip' | 'allow';
         /**
@@ -69680,7 +70447,7 @@ export type CutExecuteData = {
 };
 export type CutExecuteErrors = {
     /**
-     * SCRIPT_ERROR, SCRIPT_LIMIT or OPS_REJECTED means the script failed and its writes rolled back; correct the source using error.details.edit_id and edits when provided. EDIT_EXPIRED means the saved source is older than ten minutes; resubmit corrected script source.
+     * SCRIPT_ERROR, SCRIPT_LIMIT, OPS_REJECTED or INVALID_CAPTION_FILE means the script failed and its writes rolled back; correct the source using error.details.edit_id and edits when provided. EDIT_EXPIRED means the saved source is older than ten minutes; resubmit corrected script source.
      */
     400: CutCutError;
     /**
@@ -75743,6 +76510,646 @@ export type MediaGetGenerationCapabilitiesResponses = {
     200: MediaGenerationCapabilities;
 };
 export type MediaGetGenerationCapabilitiesResponse = MediaGetGenerationCapabilitiesResponses[keyof MediaGetGenerationCapabilitiesResponses];
+export type OntologyListTypesData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/types';
+};
+export type OntologyListTypesErrors = {
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyListTypesError = OntologyListTypesErrors[keyof OntologyListTypesErrors];
+export type OntologyListTypesResponses = {
+    /**
+     * Every registration in force for this organization, in registration order.
+     */
+    200: OntologyTypeRegistrationPage;
+};
+export type OntologyListTypesResponse = OntologyListTypesResponses[keyof OntologyListTypesResponses];
+export type OntologyRegisterTypeData = {
+    /**
+     * The registration to add; the same shape one registrant ships as its ontology.types.json.
+     */
+    body: OntologyTypeRegistration;
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/types';
+};
+export type OntologyRegisterTypeErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+    /**
+     * NOT_IMPLEMENTED means runtime registration is not open; the deploy gate registers types. Nothing was written.
+     */
+    501: OntologyOntologyError;
+};
+export type OntologyRegisterTypeError = OntologyRegisterTypeErrors[keyof OntologyRegisterTypeErrors];
+export type OntologyRetrieveTypeData = {
+    body?: never;
+    path: {
+        /**
+         * A type name from types.list, with its dots preserved — a display label is not accepted.
+         */
+        name: string;
+    };
+    query?: never;
+    url: '/ontology/v1/types/{name}';
+};
+export type OntologyRetrieveTypeErrors = {
+    /**
+     * ONTOLOGY_TYPE_UNKNOWN means the named type is not registered for this organization; call types.list for the names in force before writing records of it.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyRetrieveTypeError = OntologyRetrieveTypeErrors[keyof OntologyRetrieveTypeErrors];
+export type OntologyRetrieveTypeResponses = {
+    /**
+     * The registration that carries this type, with its kind and definition.
+     */
+    200: OntologyTypeLookup;
+};
+export type OntologyRetrieveTypeResponse = OntologyRetrieveTypeResponses[keyof OntologyRetrieveTypeResponses];
+export type OntologyListNodesData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * Repeat to filter to any of several registered node type names, for example type=file&type=ticket; omit to list every type.
+         */
+        type?: Array<string>;
+        /**
+         * Free text matched against node names, aliases and descriptions; omit to list without a text filter.
+         */
+        q?: string;
+        /**
+         * Filter to nodes owned by this member id, or omit to list nodes of every owner; organization-wide nodes carry no owner.
+         */
+        owner?: string;
+        /**
+         * ISO 8601 timestamp; return the graph as it was then, so a node recorded later is absent. Omit to read current state.
+         */
+        as_of?: string;
+        /**
+         * Maximum items to return per page, from 1 to 100; defaults to 50 when omitted. Values above 100 are clamped to 100.
+         */
+        limit?: number;
+        /**
+         * Opaque next_cursor from the preceding list response; omit for the first page and stop when next_cursor is null.
+         */
+        cursor?: string;
+    };
+    url: '/ontology/v1/nodes';
+};
+export type OntologyListNodesErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyListNodesError = OntologyListNodesErrors[keyof OntologyListNodesErrors];
+export type OntologyListNodesResponses = {
+    /**
+     * One page of nodes, ordered by node id, with next_cursor null on the last page.
+     */
+    200: OntologyNodePage;
+};
+export type OntologyListNodesResponse = OntologyListNodesResponses[keyof OntologyListNodesResponses];
+export type OntologyCreateNodeData = {
+    /**
+     * The entity to record; name, type and the optional identity of the mirrored record.
+     */
+    body: OntologyCreateNodeInput;
+    headers: {
+        /**
+         * Unique key for this write, at most 255 characters; resend the same key to replay the first result instead of writing twice. A missing or blank key is refused 400.
+         */
+        'Idempotency-Key': string;
+    };
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/nodes';
+};
+export type OntologyCreateNodeErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CONFLICT means the Idempotency-Key was already used with different content; reuse the original request for that key or send a new key for a different write.
+     */
+    409: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CAPACITY means this organization's graph is at its size budget; free space by invalidating facts that are no longer true before retrying.
+     */
+    429: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyCreateNodeError = OntologyCreateNodeErrors[keyof OntologyCreateNodeErrors];
+export type OntologyCreateNodeResponses = {
+    /**
+     * The recorded node, with the id later reads, updates and relations use.
+     */
+    201: OntologyNode;
+};
+export type OntologyCreateNodeResponse = OntologyCreateNodeResponses[keyof OntologyCreateNodeResponses];
+export type OntologyRetrieveNodeData = {
+    body?: never;
+    path: {
+        /**
+         * Node id returned by nodes.list, nodes.create or a changeset, in the form ond_ followed by 32 lowercase letters or digits; a name or an external record id is not accepted.
+         */
+        node_id: string;
+    };
+    query?: {
+        /**
+         * Set to relations to include the node's incoming and outgoing relations in the same response; omit for the node alone.
+         */
+        expand?: 'relations';
+        /**
+         * ISO 8601 timestamp; read the node and its relations as they were then, including relations invalidated since. Omit to read current state.
+         */
+        as_of?: string;
+    };
+    url: '/ontology/v1/nodes/{node_id}';
+};
+export type OntologyRetrieveNodeErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_NODE_NOT_FOUND means the node does not exist in this organization — never created, or owned by another organization; list nodes to find an id you can read.
+     */
+    404: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyRetrieveNodeError = OntologyRetrieveNodeErrors[keyof OntologyRetrieveNodeErrors];
+export type OntologyRetrieveNodeResponses = {
+    /**
+     * The node, plus a relations array when expand=relations was requested.
+     */
+    200: OntologyNodeWithRelations;
+};
+export type OntologyRetrieveNodeResponse = OntologyRetrieveNodeResponses[keyof OntologyRetrieveNodeResponses];
+export type OntologyUpdateNodeData = {
+    /**
+     * The fields to change; at least one of name, aliases or description.
+     */
+    body: OntologyUpdateNodeInput;
+    path: {
+        /**
+         * Node id returned by nodes.list, nodes.create or a changeset, in the form ond_ followed by 32 lowercase letters or digits; a name or an external record id is not accepted.
+         */
+        node_id: string;
+    };
+    query?: never;
+    url: '/ontology/v1/nodes/{node_id}';
+};
+export type OntologyUpdateNodeErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_NODE_NOT_FOUND means the node does not exist in this organization — never created, or owned by another organization; list nodes to find an id you can read.
+     */
+    404: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyUpdateNodeError = OntologyUpdateNodeErrors[keyof OntologyUpdateNodeErrors];
+export type OntologyUpdateNodeResponses = {
+    /**
+     * The node after the update, with its new updated_at.
+     */
+    200: OntologyNode;
+};
+export type OntologyUpdateNodeResponse = OntologyUpdateNodeResponses[keyof OntologyUpdateNodeResponses];
+export type OntologyMergeNodeData = {
+    /**
+     * The node the merged one folds into.
+     */
+    body: OntologyMergeNodeInput;
+    headers: {
+        /**
+         * Unique key for this merge, at most 255 characters; resend the same key to replay the first result instead of merging twice.
+         */
+        'Idempotency-Key': string;
+    };
+    path: {
+        /**
+         * Node id returned by nodes.list, nodes.create or a changeset, in the form ond_ followed by 32 lowercase letters or digits; a name or an external record id is not accepted.
+         */
+        node_id: string;
+    };
+    query?: never;
+    url: '/ontology/v1/nodes/{node_id}/merge';
+};
+export type OntologyMergeNodeErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_NODE_NOT_FOUND means the node does not exist in this organization — never created, or owned by another organization; list nodes to find an id you can read.
+     */
+    404: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CONFLICT means the Idempotency-Key was already used with different content; reuse the original request for that key or send a new key for a different write.
+     */
+    409: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyMergeNodeError = OntologyMergeNodeErrors[keyof OntologyMergeNodeErrors];
+export type OntologyMergeNodeResponses = {
+    /**
+     * The surviving node that the merged id now resolves to.
+     */
+    200: OntologyNode;
+};
+export type OntologyMergeNodeResponse = OntologyMergeNodeResponses[keyof OntologyMergeNodeResponses];
+export type OntologyListRelationsData = {
+    body?: never;
+    path?: never;
+    query?: {
+        /**
+         * A node id from nodes.list or nodes.create; returns the relations this node takes part in, narrowed by direction. Omit to list relations between every node.
+         */
+        node?: string;
+        /**
+         * Repeat to filter to any of several registered relation type names, for example type=references&type=serves; omit to list every type.
+         */
+        type?: Array<string>;
+        /**
+         * Which side of node to follow; out returns relations the node is the source of, in returns those it is the target of. Only meaningful together with node.
+         */
+        direction?: 'out' | 'in' | 'both';
+        /**
+         * ISO 8601 timestamp; read relations as they were then, so one recorded or invalidated later is judged by that time. Omit to read current state.
+         */
+        as_of?: string;
+        /**
+         * Set true to include relations whose invalid_at has passed, which is how a relation that stopped being true stays readable. Omit or false for currently valid relations only.
+         */
+        include_invalid?: boolean;
+        /**
+         * Maximum items to return per page, from 1 to 100; defaults to 50 when omitted. Values above 100 are clamped to 100.
+         */
+        limit?: number;
+        /**
+         * Opaque next_cursor from the preceding list response; omit for the first page and stop when next_cursor is null.
+         */
+        cursor?: string;
+    };
+    url: '/ontology/v1/relations';
+};
+export type OntologyListRelationsErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyListRelationsError = OntologyListRelationsErrors[keyof OntologyListRelationsErrors];
+export type OntologyListRelationsResponses = {
+    /**
+     * One page of relations, ordered by relation id, with next_cursor null on the last page.
+     */
+    200: OntologyRelationPage;
+};
+export type OntologyListRelationsResponse = OntologyListRelationsResponses[keyof OntologyListRelationsResponses];
+export type OntologyCreateRelationData = {
+    /**
+     * The fact to record, between two node ids from this organization's graph.
+     */
+    body: OntologyCreateRelationInput;
+    headers: {
+        /**
+         * Unique key for this write, at most 255 characters; resend the same key to replay the first result instead of writing twice. A missing or blank key is refused 400.
+         */
+        'Idempotency-Key': string;
+    };
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/relations';
+};
+export type OntologyCreateRelationErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CONFLICT means the Idempotency-Key was already used with different content; reuse the original request for that key or send a new key for a different write.
+     */
+    409: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CAPACITY means this organization's graph is at its size budget; free space by invalidating facts that are no longer true before retrying.
+     */
+    429: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyCreateRelationError = OntologyCreateRelationErrors[keyof OntologyCreateRelationErrors];
+export type OntologyCreateRelationResponses = {
+    /**
+     * The recorded relation, with the id later reads and invalidation use.
+     */
+    201: OntologyRelation;
+};
+export type OntologyCreateRelationResponse = OntologyCreateRelationResponses[keyof OntologyCreateRelationResponses];
+export type OntologyRetrieveRelationData = {
+    body?: never;
+    path: {
+        /**
+         * Relation id returned by relations.list, relations.create or a changeset, in the form oed_ followed by 32 lowercase letters or digits; a node id is not accepted.
+         */
+        relation_id: string;
+    };
+    query?: never;
+    url: '/ontology/v1/relations/{relation_id}';
+};
+export type OntologyRetrieveRelationErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_EDGE_NOT_FOUND means the relation does not exist in this organization, or its content belongs to another member; list relations for the ids you may read.
+     */
+    404: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyRetrieveRelationError = OntologyRetrieveRelationErrors[keyof OntologyRetrieveRelationErrors];
+export type OntologyRetrieveRelationResponses = {
+    /**
+     * The relation, including its fact, endpoints and both clocks.
+     */
+    200: OntologyRelation;
+};
+export type OntologyRetrieveRelationResponse = OntologyRetrieveRelationResponses[keyof OntologyRetrieveRelationResponses];
+export type OntologyInvalidateRelationData = {
+    /**
+     * When the fact stopped being true, and optionally what replaced it and why.
+     */
+    body: OntologyInvalidateRelationInput;
+    headers: {
+        /**
+         * Unique key for this invalidation, at most 255 characters; resend the same key to replay the first result instead of invalidating twice.
+         */
+        'Idempotency-Key': string;
+    };
+    path: {
+        /**
+         * Relation id returned by relations.list, relations.create or a changeset, in the form oed_ followed by 32 lowercase letters or digits; a node id is not accepted.
+         */
+        relation_id: string;
+    };
+    query?: never;
+    url: '/ontology/v1/relations/{relation_id}/invalidate';
+};
+export type OntologyInvalidateRelationErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_EDGE_NOT_FOUND means the relation does not exist in this organization, or its content belongs to another member; list relations for the ids you may read.
+     */
+    404: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CONFLICT means the Idempotency-Key was already used with different content; reuse the original request for that key or send a new key for a different write.
+     */
+    409: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyInvalidateRelationError = OntologyInvalidateRelationErrors[keyof OntologyInvalidateRelationErrors];
+export type OntologyInvalidateRelationResponses = {
+    /**
+     * The relation after invalidation, with invalid_at set to the given time.
+     */
+    200: OntologyRelation;
+};
+export type OntologyInvalidateRelationResponse = OntologyInvalidateRelationResponses[keyof OntologyInvalidateRelationResponses];
+export type OntologyApplyChangesetData = {
+    /**
+     * The operations to apply together, with the world time they describe.
+     */
+    body: OntologyChangesetInput;
+    headers: {
+        /**
+         * Unique key for this batch, at most 255 characters; resend the same key to replay the first result instead of writing the batch twice.
+         */
+        'Idempotency-Key': string;
+    };
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/changesets';
+};
+export type OntologyApplyChangesetErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CONFLICT means the Idempotency-Key was already used with different content; reuse the original request for that key or send a new key for a different write.
+     */
+    409: OntologyOntologyError;
+    /**
+     * ONTOLOGY_CAPACITY means this organization's graph is at its size budget; free space by invalidating facts that are no longer true before retrying.
+     */
+    429: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologyApplyChangesetError = OntologyApplyChangesetErrors[keyof OntologyApplyChangesetErrors];
+export type OntologyApplyChangesetResponses = {
+    /**
+     * The applied count, the ids assigned to the batch's keys, and replayed true when the key had been seen before.
+     */
+    200: OntologyChangesetResult;
+};
+export type OntologyApplyChangesetResponse = OntologyApplyChangesetResponses[keyof OntologyApplyChangesetResponses];
+export type OntologySearchData = {
+    /**
+     * The text to resolve, optionally narrowed to particular node types and a result count.
+     */
+    body: OntologySearchInput;
+    path?: never;
+    query?: never;
+    url: '/ontology/v1/search';
+};
+export type OntologySearchErrors = {
+    /**
+     * INVALID_PARAMS means a field, query value, header or identifier violates the documented format or range — a missing Idempotency-Key, an unknown direction, a non-numeric limit. Correct the indicated input; the message names what was wrong.
+     */
+    400: OntologyOntologyError;
+    /**
+     * The bearer API key is missing or invalid; provide a valid Praxis API key before retrying.
+     */
+    401: OntologyOntologyError;
+    /**
+     * The API key lacks permission for this operation, or carries no organization; use a key with the required ontology access in the owning organization.
+     */
+    403: OntologyOntologyError;
+    /**
+     * INTERNAL means the service could not complete the request; before retrying a write, read the graph back so a partially applied change is not sent twice.
+     */
+    500: OntologyOntologyError;
+};
+export type OntologySearchError = OntologySearchErrors[keyof OntologySearchErrors];
+export type OntologySearchResponses = {
+    /**
+     * Ranked candidate nodes, best match first, with the field each one matched on.
+     */
+    200: OntologySearchResult;
+};
+export type OntologySearchResponse = OntologySearchResponses[keyof OntologySearchResponses];
 export type GetSandboxV1SandboxesData = {
     body?: never;
     path?: never;
@@ -76135,6 +77542,10 @@ export type ListSandboxTemplatesResponses = {
         buildCount: number;
         envdVersion: SandboxEnvdVersion;
         buildStatus: SandboxTemplateBuildStatus;
+        /**
+         * Lifecycle classes this template can run as. ephemeral: cannot pause, snapshot or mount volumes and is deleted when it stops; persistent: can pause, resume and snapshot.
+         */
+        lifecycles?: Array<'ephemeral' | 'persistent'>;
         /**
          * True for an official catalog template; false for your organization's custom templates.
          */