@lunnoa/client 1.5.0 → 2.1.0

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { UIMessage, UIMessageChunk } from 'ai';
 export { UIMessage, UIMessageChunk } from 'ai';
 
 /**
- * Pluggable storage for Pattern B JWTs.
+ * Pluggable storage for Lunnoa user JWTs.
  * The SDK never uses httpOnly cookies: Automate auth is bearer JWT based.
  */
 interface TokenStore {
@@ -46,20 +46,20 @@ interface LunnoaClientOptions {
      */
     baseUrl: string;
     /**
-     * Server-side machine credential (`lna_...`). Never usable in browsers —
-     * the constructor throws if one is supplied while `window` exists.
+     * Machine credential (`lna_...`) for the CLI and operator scripts, not for app login.
+     * Never usable in browsers: the constructor throws if one is supplied while `window` exists.
      */
     apiKey?: string;
     /**
      * User JWT obtained from login / SSO. The supported credential for browser
      * applications. May be a function so refreshed tokens are picked up per request.
      *
-     * Prefer {@link tokenStore} for Pattern B so login/refresh can persist tokens
+     * Prefer {@link tokenStore} so login/refresh can persist tokens
      * and optionally auto-refresh on 401.
      */
     accessToken?: string | (() => string | Promise<string>);
     /**
-     * Optional JWT store for Pattern B. When set, authenticated requests read
+     * Optional JWT store for a signed-in Lunnoa user. When set, authenticated requests read
      * the access token from the store. Login / refresh helpers write back into it.
      */
     tokenStore?: TokenStore;
@@ -249,50 +249,6 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/projects": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * List projects in current workspace
-         * @description Returns all projects in the current workspace, ordered by most recently updated.
-         */
-        get: operations["ProjectsController_findAllForWorkspace"];
-        put?: never;
-        /**
-         * Create a project in current workspace
-         * @description Creates a project in the current workspace. Projects are organisational containers accessible to all workspace users.
-         */
-        post: operations["ProjectsController_create"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/api/projects/{projectId}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get project by ID
-         * @description Returns a single project.
-         */
-        get: operations["ProjectsController_findOne"];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/queues": {
         parameters: {
             query?: never;
@@ -308,7 +264,7 @@ interface paths {
         put?: never;
         /**
          * Create queue
-         * @description Creates a queue in the given project. Queues are the platform's human-in-the-loop work surface: items are added to a queue, then processed by workflows or reviewed by people.
+         * @description Creates a queue in the current workspace. Queues are the platform's human-in-the-loop work surface: items are added to a queue, then processed by workflows or reviewed by people.
          */
         post: operations["QueuesController_create"];
         delete?: never;
@@ -745,40 +701,40 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/workflows/{workflowId}": {
+    "/api/workflows/upsert": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get workflow by ID
-         * @description Returns a single workflow. By default only the ID and name are returned; use the expansion query parameter to include further fields.
+         * Upsert a workflow by slug from a linear step list
+         * @description Creates or updates a workflow identified by workspace-scoped `slug`. Builds a minimal valid graph (manual trigger → linear catalogue-action steps). Marks `managedByCode` by default. Prefer the CLI (`npx @lunnoa/client workflows deploy`) over calling this from application code.
          */
-        get: operations["WorkflowsController_findOne"];
-        put?: never;
-        post?: never;
+        post: operations["WorkflowsController_upsertBySlug"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/projects/{projectId}/workflows/upsert": {
+    "/api/workflows/{workflowId}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Upsert a workflow by slug from a linear step list
-         * @description Creates or updates a workflow identified by project-scoped `slug`. Builds a minimal valid graph (manual trigger → linear catalogue-action steps). Marks `managedByCode` by default. Prefer the CLI (`npx @lunnoa/client workflows deploy`) over calling this from application code.
+         * Get workflow by ID
+         * @description Returns a single workflow. By default only the ID and name are returned; use the expansion query parameter to include further fields.
          */
-        post: operations["ProjectWorkflowsController_upsertBySlug"];
+        get: operations["WorkflowsController_findOne"];
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
@@ -805,40 +761,40 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/agents/{agentId}": {
+    "/api/agents/upsert": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get agent by ID
-         * @description Returns a single agent. By default only `id`, `name`, and `FK_aiConnectionId` are returned; request additional fields with the `expansion` query parameter. Access is gated by the `agents:use` permission, so agents reachable via a share grant can also be fetched.
+         * Upsert an agent by slug
+         * @description Creates or updates an agent identified by workspace-scoped `slug`. Accepts instructions, model, optional aiConnectionId / connectionIds / workflowIds, and catalogue action tools. Marks `managedByCode` by default. Prefer the CLI (`npx @lunnoa/client agents deploy`) over calling this from application code.
          */
-        get: operations["AgentsController_findOne"];
-        put?: never;
-        post?: never;
+        post: operations["AgentsController_upsertBySlug"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/projects/{projectId}/agents/upsert": {
+    "/api/agents/{agentId}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Upsert an agent by slug
-         * @description Creates or updates an agent identified by project-scoped `slug`. Accepts instructions, model, optional aiConnectionId / connectionIds / workflowIds, and catalogue action tools. Marks `managedByCode` by default. Prefer the CLI (`npx @lunnoa/client agents deploy`) over calling this from application code.
+         * Get agent by ID
+         * @description Returns a single agent. By default only `id`, `name`, and `FK_aiConnectionId` are returned; request additional fields with the `expansion` query parameter. Access is gated by the `agents:use` permission, so agents reachable via a share grant can also be fetched.
          */
-        post: operations["ProjectAgentsController_upsertBySlug"];
+        get: operations["AgentsController_findOne"];
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
@@ -1376,7 +1332,7 @@ interface paths {
         put?: never;
         /**
          * Create variable in current workspace
-         * @description Creates a variable in the current workspace. Provide projectId to scope the variable to a project.
+         * @description Creates a variable in the current workspace.
          */
         post: operations["VariablesController_create"];
         delete?: never;
@@ -1758,64 +1714,6 @@ interface components {
             /** @description Availability of authentication methods for this deployment. */
             AUTH_METHODS: components["schemas"]["AuthMethodFlagsDto"];
         };
-        CreateProjectDto: {
-            /** @description Name of the project. */
-            name: string;
-            /** @description Description of the project. */
-            description?: string;
-        };
-        ProjectCountDto: {
-            /** @description Number of agents in the project. */
-            agents?: number;
-            /** @description Number of variables in the project. */
-            variables?: number;
-            /** @description Number of workflows in the project. */
-            workflows?: number;
-        };
-        ProjectCreatedByUserDto: {
-            /** @description User ID. */
-            id: string;
-            /** @description User email address. */
-            email: string;
-            /** @description User display name. */
-            name: string;
-        };
-        ProjectCreatedByWorkspaceUserDto: {
-            /** @description Workspace user ID. */
-            id: string;
-            /** @description The underlying user. */
-            user: components["schemas"]["ProjectCreatedByUserDto"];
-        };
-        ProjectWorkflowSummaryDto: {
-            /** @description Workflow ID. */
-            id: string;
-            /** @description Workflow name. */
-            name: string;
-        };
-        ProjectResponseDto: {
-            /** @description Project ID. */
-            id: string;
-            /** @description Project name. */
-            name: string;
-            /** @description Project description. Included when `expansion=description` is requested. */
-            description?: string;
-            /**
-             * Format: date-time
-             * @description Creation timestamp. Included when `expansion=createdAt` is requested.
-             */
-            createdAt?: string;
-            /**
-             * Format: date-time
-             * @description Last update timestamp. Included when `expansion=updatedAt` is requested.
-             */
-            updatedAt?: string;
-            /** @description Aggregate counts. Included when `expansion=countAgents` is requested; countVariables and countWorkflows add their respective counts. */
-            _count?: components["schemas"]["ProjectCountDto"];
-            /** @description Workspace user who created the project. Included when `expansion=createdByWorkspaceUser` is requested. */
-            createdByWorkspaceUser?: components["schemas"]["ProjectCreatedByWorkspaceUserDto"];
-            /** @description Workflows in the project. Included when `expansion=workflows` is requested. */
-            workflows?: components["schemas"]["ProjectWorkflowSummaryDto"][];
-        };
         CreateQueueDto: {
             /** @description Human-readable name for the queue. */
             name: string;
@@ -1832,12 +1730,6 @@ interface components {
             /** @description Default priority for items in this queue. Higher values are processed first. Defaults to 0. */
             priority?: number;
         };
-        QueueProjectSummaryDto: {
-            /** @description Project ID. */
-            id: string;
-            /** @description Project name. */
-            name: string;
-        };
         QueueWorkspaceSummaryDto: {
             /** @description Workspace ID. */
             id: string;
@@ -1907,8 +1799,6 @@ interface components {
             successItems?: number;
             /** @description Number of failed items. Included when `expansion=statistics` is requested. */
             failedItems?: number;
-            /** @description Owning project. Included when `expansion=project` is requested. */
-            project?: components["schemas"]["QueueProjectSummaryDto"];
             /** @description Owning workspace. Included when `expansion=workspace` is requested. */
             workspace?: components["schemas"]["QueueWorkspaceSummaryDto"];
             /** @description Workspace user who created the queue. Included when `expansion=createdByWorkspaceUser` is requested. */
@@ -2385,18 +2275,44 @@ interface components {
             /** @description Number of item IDs submitted for deletion. */
             requestedCount: number;
         };
-        WorkflowProjectSummaryDto: {
-            /** @description Project ID */
-            id: string;
-            /** @description Project name */
-            name: string;
+        UpsertWorkflowStepDto: {
+            /** @description Workflow app id (catalogue slug). */
+            appId: string;
+            /** @description Catalogue action id. */
+            actionId: string;
+            /** @description Connection instance UUID for this step. */
+            connectionId?: string;
+            /** @description Action input / config fields. */
+            input?: {
+                [key: string]: unknown;
+            };
+            /** @description Display name for the step node. */
+            name?: string;
+            /** @description Step description. */
+            description?: string;
+        };
+        UpsertWorkflowBySlugDto: {
+            /**
+             * @description Stable workspace-scoped slug (lowercase, digits, hyphens). Used as the upsert key.
+             * @example sync-orders
+             */
+            slug: string;
+            /** @description Display name. Defaults to the slug when omitted. */
+            name?: string;
+            description?: string;
+            /** @description Whether the workflow is active. */
+            isActive?: boolean;
+            /** @description Linear catalogue-action steps (v1; no branches). */
+            steps: components["schemas"]["UpsertWorkflowStepDto"][];
+            /** @description Marks the row as managed by code (CLI / SDK). Defaults to true on this endpoint. */
+            managedByCode?: boolean;
         };
         WorkflowResponseDto: {
             /** @description Workflow ID */
             id: string;
             /** @description Workflow name */
             name: string;
-            /** @description Stable project-scoped slug for CLI / code deploy upserts. Included when `expansion=slug` is requested. */
+            /** @description Stable workspace-scoped slug for CLI / code deploy upserts. Included when `expansion=slug` is requested. */
             slug?: string | null;
             /** @description True when last written by code (CLI / SDK). Included when `expansion=managedByCode` is requested. */
             managedByCode?: boolean;
@@ -2458,42 +2374,48 @@ interface components {
              * @enum {string}
              */
             workflowOrientation?: "HORIZONTAL" | "VERTICAL";
-            /** @description The project the workflow belongs to. Included when `expansion=project` is requested. */
-            project?: components["schemas"]["WorkflowProjectSummaryDto"];
             /** @description AI provider connection used by the workflow builder chat. Always returned on GET /workflows/{workflowId}. */
             aiConnectionId?: string | null;
             /** @description Selected model ID within the AI provider connection for workflow builder chat. Always returned on GET /workflows/{workflowId}. */
             selectedModelId?: string | null;
         };
-        UpsertWorkflowStepDto: {
+        UpsertAgentToolDto: {
             /** @description Workflow app id (catalogue slug). */
             appId: string;
             /** @description Catalogue action id. */
             actionId: string;
-            /** @description Connection instance UUID for this step. */
+            /** @description Connection instance UUID pre-bound on the tool. */
             connectionId?: string;
-            /** @description Action input / config fields. */
+            /** @description Tool display name for the model. */
+            name?: string;
+            /** @description Tool description shown to the model. */
+            description?: string;
+            /** @description Pre-filled tool config (fields left empty are filled by the model). */
             input?: {
                 [key: string]: unknown;
             };
-            /** @description Display name for the step node. */
-            name?: string;
-            /** @description Step description. */
-            description?: string;
         };
-        UpsertWorkflowBySlugDto: {
+        UpsertAgentBySlugDto: {
             /**
-             * @description Stable project-scoped slug (lowercase, digits, hyphens). Used as the upsert key.
-             * @example sync-orders
+             * @description Stable workspace-scoped slug (lowercase, digits, hyphens). Used as the upsert key.
+             * @example support-triage
              */
             slug: string;
             /** @description Display name. Defaults to the slug when omitted. */
             name?: string;
             description?: string;
-            /** @description Whether the workflow is active. */
-            isActive?: boolean;
-            /** @description Linear catalogue-action steps (v1; no branches). */
-            steps: components["schemas"]["UpsertWorkflowStepDto"][];
+            /** @description System instructions / prompt for the agent. */
+            instructions: string;
+            /** @description Selected model id on the AI provider connection (e.g. `gpt-4o`). */
+            model: string;
+            /** @description AiProviderConnection UUID. When omitted, platform AI defaults apply. */
+            aiConnectionId?: string;
+            /** @description App Connection UUIDs the agent may use for tools. */
+            connectionIds?: string[];
+            /** @description Workflow UUIDs the agent may run (AgentWorkflow links). */
+            workflowIds?: string[];
+            /** @description Catalogue action tools (WorkflowNodeForRunner-shaped). */
+            tools?: components["schemas"]["UpsertAgentToolDto"][];
             /** @description Marks the row as managed by code (CLI / SDK). Defaults to true on this endpoint. */
             managedByCode?: boolean;
         };
@@ -2508,7 +2430,7 @@ interface components {
              * @example Invoice Triage Agent
              */
             name: string;
-            /** @description Stable project-scoped slug for CLI / code deploy upserts. Included when `expansion=slug` is requested. */
+            /** @description Stable workspace-scoped slug for CLI / code deploy upserts. Included when `expansion=slug` is requested. */
             slug?: string | null;
             /** @description True when last written by code (CLI / SDK). Included when `expansion=managedByCode` is requested. */
             managedByCode?: boolean;
@@ -2751,51 +2673,6 @@ interface components {
                 outboundCallsEnabled?: boolean;
                 inboundCallsEnabled?: boolean;
             } | null;
-            /** @description Project the agent belongs to. Included when `expansion=project` is requested. */
-            project?: {
-                id?: string;
-                name?: string;
-            };
-        };
-        UpsertAgentToolDto: {
-            /** @description Workflow app id (catalogue slug). */
-            appId: string;
-            /** @description Catalogue action id. */
-            actionId: string;
-            /** @description Connection instance UUID pre-bound on the tool. */
-            connectionId?: string;
-            /** @description Tool display name for the model. */
-            name?: string;
-            /** @description Tool description shown to the model. */
-            description?: string;
-            /** @description Pre-filled tool config (fields left empty are filled by the model). */
-            input?: {
-                [key: string]: unknown;
-            };
-        };
-        UpsertAgentBySlugDto: {
-            /**
-             * @description Stable project-scoped slug (lowercase, digits, hyphens). Used as the upsert key.
-             * @example support-triage
-             */
-            slug: string;
-            /** @description Display name. Defaults to the slug when omitted. */
-            name?: string;
-            description?: string;
-            /** @description System instructions / prompt for the agent. */
-            instructions: string;
-            /** @description Selected model id on the AI provider connection (e.g. `gpt-4o`). */
-            model: string;
-            /** @description AiProviderConnection UUID. When omitted, platform AI defaults apply. */
-            aiConnectionId?: string;
-            /** @description App Connection UUIDs the agent may use for tools. */
-            connectionIds?: string[];
-            /** @description Workflow UUIDs the agent may run (AgentWorkflow links). */
-            workflowIds?: string[];
-            /** @description Catalogue action tools (WorkflowNodeForRunner-shaped). */
-            tools?: components["schemas"]["UpsertAgentToolDto"][];
-            /** @description Marks the row as managed by code (CLI / SDK). Defaults to true on this endpoint. */
-            managedByCode?: boolean;
         };
         WorkflowAppResponseDto: {
             /** @description App ID, e.g. `gmail`. Matches the appId used in workflow execution steps. */
@@ -3348,21 +3225,13 @@ interface components {
             /** @description Workspace name */
             name: string;
         };
-        ExecutionProjectSummaryDto: {
-            /** @description Project ID */
-            id: string;
-            /** @description Project name */
-            name: string;
-            /** @description The workspace the project belongs to. Included when `expansion=workspace` is requested alongside `workflow` and `project`. */
-            workspace?: components["schemas"]["ExecutionWorkspaceSummaryDto"];
-        };
         ExecutionWorkflowSummaryDto: {
             /** @description Workflow ID */
             id: string;
             /** @description Workflow name */
             name: string;
-            /** @description The project the workflow belongs to. Included when `expansion=project` is requested alongside `workflow`. */
-            project?: components["schemas"]["ExecutionProjectSummaryDto"];
+            /** @description The workspace the workflow belongs to. Included when `expansion=workspace` is requested alongside `workflow`. */
+            workspace?: components["schemas"]["ExecutionWorkspaceSummaryDto"];
         };
         ExecutionPathStepDto: {
             /** @description ID of the workflow node this step represents */
@@ -3510,8 +3379,6 @@ interface components {
             actionId: string;
             /** @description Connection instance UUID (`Connection.id`). Required when the action needs a connection and the workspace has more than one connection for the app with no single workspace default. When omitted: sole usable connection for the app is used; else the workspace default (`isDefault`); else 400 with candidates. Never silently picks among multiple non-default connections. */
             connectionId?: string;
-            /** @description Project UUID used for variable/project scoping. When omitted and the workspace has exactly one project, that project is used; otherwise the request fails with 400. */
-            projectId?: string;
             /** @description Action input fields (mirrors the action `inputConfig` keys). Combined with `connectionId` into the action configValue. */
             input?: {
                 [key: string]: unknown;
@@ -3553,8 +3420,6 @@ interface components {
         StartRunDto: {
             /** @description Linear catalogue-action steps. Executed as one multi-step Execution with `source: SDK` (not a soft batch / correlation id). */
             steps: components["schemas"]["RunStepDto"][];
-            /** @description Project UUID for variable/project scoping. When omitted and the workspace has exactly one project, that project is used. */
-            projectId?: string;
             /** @description Optional display name for the ad-hoc Execution. */
             name?: string;
         };
@@ -3564,17 +3429,15 @@ interface components {
             /** @description Description of the variable. */
             description?: string;
             /**
-             * @description Scope of the variable (system, workspace or project).
+             * @description Scope of the variable (system or workspace).
              * @enum {string}
              */
-            type: "system" | "workspace" | "project";
+            type: "system" | "workspace";
             /**
              * @description Data type of the variable value.
              * @enum {string}
              */
             dataType: "string" | "number" | "boolean" | "date" | "json";
-            /** @description Project ID to scope the variable to. Must belong to the current workspace. */
-            projectId?: string;
             /** @description Variable value, submitted as a string. Values with dataType `number` are converted to numbers on save. */
             value: string;
         };
@@ -3584,12 +3447,6 @@ interface components {
             /** @description Workspace name. */
             name: string;
         };
-        VariableProjectDto: {
-            /** @description Project ID. */
-            id: string;
-            /** @description Project name. */
-            name: string;
-        };
         VariableResponseDto: {
             /** @description Variable ID. */
             id: string;
@@ -3601,10 +3458,10 @@ interface components {
              */
             dataType: "string" | "number" | "boolean" | "date" | "json";
             /**
-             * @description Scope of the variable (system, workspace or project).
+             * @description Scope of the variable (system or workspace).
              * @enum {string}
              */
-            type: "system" | "workspace" | "project";
+            type: "system" | "workspace";
             /** @description Variable value. Included when `expansion=value` is requested. */
             value?: Record<string, never>;
             /** @description Variable description. Included when `expansion=description` is requested. */
@@ -3621,8 +3478,6 @@ interface components {
             updatedAt?: string;
             /** @description Owning workspace. Included when `expansion=workspace` is requested. */
             workspace?: components["schemas"]["VariableWorkspaceDto"];
-            /** @description Owning project for project-scoped variables. Included when `expansion=project` is requested. */
-            project?: components["schemas"]["VariableProjectDto"];
         };
         UpdateVariableDto: {
             /** @description Name of the variable. */
@@ -3630,17 +3485,15 @@ interface components {
             /** @description Description of the variable. */
             description?: string;
             /**
-             * @description Scope of the variable (system, workspace or project).
+             * @description Scope of the variable (system or workspace).
              * @enum {string}
              */
-            type?: "system" | "workspace" | "project";
+            type?: "system" | "workspace";
             /**
              * @description Data type of the variable value.
              * @enum {string}
              */
             dataType?: "string" | "number" | "boolean" | "date" | "json";
-            /** @description Project ID to scope the variable to. Must belong to the current workspace. */
-            projectId?: string;
             /** @description Variable value, submitted as a string. Values with dataType `number` are converted to numbers on save. */
             value?: string;
         };
@@ -3649,8 +3502,6 @@ interface components {
             name?: string;
             /** @description What the table contains. Agents use this to choose a table. */
             description?: string;
-            /** @description Project ID to scope the table to. Omit for a workspace-wide table. */
-            projectId?: string;
             /** @description Column names: [{ key }]. */
             columns?: {
                 [key: string]: unknown;
@@ -3664,10 +3515,6 @@ interface components {
             /** @description Marks the table as code-managed. Defaults to true on upsert. */
             managedByCode?: boolean;
         };
-        TableProjectDto: {
-            id: string;
-            name: string;
-        };
         TableColumnDto: {
             /** @description Column key used in rows. */
             key: string;
@@ -3685,9 +3532,6 @@ interface components {
             description?: string | null;
             /** @description Whether the table is managed by code (CLI / API upsert). */
             managedByCode: boolean;
-            /** @description Project the table is scoped to, or null for workspace-wide. */
-            FK_projectId?: string | null;
-            project?: components["schemas"]["TableProjectDto"] | null;
             /** @description Columns. Returned by get and upsert, not by list. */
             columns?: components["schemas"]["TableColumnDto"][];
             /** @description Rows keyed by column key. Returned by get and upsert, not by list. */
@@ -3773,14 +3617,10 @@ interface components {
                     [key: string]: unknown;
                 } | null;
             }[];
-            /** @description Agent the task belongs to. Included when `expansion=agent` is requested. The nested `project` is included when `expansion=project` is also requested. */
+            /** @description Agent the task belongs to. Included when `expansion=agent` is requested. */
             agent?: {
                 id?: string;
                 name?: string;
-                project?: {
-                    id?: string;
-                    name?: string;
-                };
             };
         };
         TaskLatestRunDto: {
@@ -3855,14 +3695,10 @@ interface components {
                     [key: string]: unknown;
                 } | null;
             }[];
-            /** @description Agent the task belongs to. Included when `expansion=agent` is requested. The nested `project` is included when `expansion=project` is also requested. */
+            /** @description Agent the task belongs to. Included when `expansion=agent` is requested. */
             agent?: {
                 id?: string;
                 name?: string;
-                project?: {
-                    id?: string;
-                    name?: string;
-                };
             };
         };
         UpdateTaskDto: {
@@ -3991,85 +3827,10 @@ interface operations {
             };
         };
     };
-    ProjectsController_findAllForWorkspace: {
-        parameters: {
-            query?: {
-                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, description, workflows, createdByWorkspaceUser, countAgents, countVariables, countWorkflows */
-                expansion?: string;
-            };
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Projects in the workspace. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ProjectResponseDto"][];
-                };
-            };
-        };
-    };
-    ProjectsController_create: {
-        parameters: {
-            query?: {
-                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, description, workflows, createdByWorkspaceUser, countAgents, countVariables, countWorkflows */
-                expansion?: string;
-            };
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["CreateProjectDto"];
-            };
-        };
-        responses: {
-            /** @description The created project. */
-            201: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ProjectResponseDto"];
-                };
-            };
-        };
-    };
-    ProjectsController_findOne: {
-        parameters: {
-            query?: {
-                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, description, workflows, createdByWorkspaceUser, countAgents, countVariables, countWorkflows */
-                expansion?: string;
-            };
-            header?: never;
-            path: {
-                projectId: string;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The requested project. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ProjectResponseDto"];
-                };
-            };
-        };
-    };
     QueuesController_findAllForWorkspace: {
         parameters: {
             query?: {
-                /** @description Comma-separated key:value filter pairs. Available keys: projectId, isActive, search, priority. */
+                /** @description Comma-separated key:value filter pairs. Available keys: isActive, search, priority. */
                 filterBy?: string;
                 /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, description, project, workspace, createdByWorkspaceUser, statistics, itemCounts. */
                 expansion?: string;
@@ -4095,9 +3856,7 @@ interface operations {
     };
     QueuesController_create: {
         parameters: {
-            query: {
-                /** @description ID of the project the queue belongs to. */
-                projectId: string;
+            query?: {
                 /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, description, project, workspace, createdByWorkspaceUser, statistics, itemCounts. */
                 expansion?: string;
             };
@@ -4833,9 +4592,9 @@ interface operations {
             query?: {
                 /** @description Comma-separated inclusion flags. Available: all, internal. Pass internal to include internal workflows, which are excluded by default. */
                 includeType?: string;
-                /** @description Comma-separated key:value filters. Available: projectId, agentCanTrigger. Example: filterBy=projectId:proj_123 */
+                /** @description Comma-separated key:value filters. Available: agentCanTrigger. Example: filterBy=agentCanTrigger:true */
                 filterBy?: string;
-                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, isActive, isInternal, description, output, project, nodes, edges, triggerNode, triggerAndActionIds, pollStorage, nextScheduledExecution, orientation. Example: expansion=description,isActive,project */
+                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, isActive, isInternal, description, output, nodes, edges, triggerNode, triggerAndActionIds, pollStorage, nextScheduledExecution, orientation. Example: expansion=description,isActive */
                 expansion?: string;
             };
             header?: never;
@@ -4855,21 +4614,20 @@ interface operations {
             };
         };
     };
-    WorkflowsController_findOne: {
+    WorkflowsController_upsertBySlug: {
         parameters: {
-            query?: {
-                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, isActive, isInternal, description, output, project, nodes, edges, triggerNode, triggerAndActionIds, subWorkflowIds, agentIds, pollStorage, nextScheduledExecution, orientation. Example: expansion=description,nodes,edges */
-                expansion?: string;
-            };
+            query?: never;
             header?: never;
-            path: {
-                workflowId: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpsertWorkflowBySlugDto"];
+            };
+        };
         responses: {
-            /** @description The workflow. Fields beyond the ID and name are included according to the expansion query parameter. */
+            /** @description The created or updated workflow. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -4880,22 +4638,21 @@ interface operations {
             };
         };
     };
-    ProjectWorkflowsController_upsertBySlug: {
+    WorkflowsController_findOne: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, isActive, isInternal, description, output, project, nodes, edges, triggerNode, triggerAndActionIds, subWorkflowIds, agentIds, pollStorage, nextScheduledExecution, orientation. Example: expansion=description,nodes,edges */
+                expansion?: string;
+            };
             header?: never;
             path: {
-                projectId: string;
+                workflowId: string;
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["UpsertWorkflowBySlugDto"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The created or updated workflow. */
+            /** @description The workflow. Fields beyond the ID and name are included according to the expansion query parameter. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -4911,9 +4668,9 @@ interface operations {
             query?: {
                 /** @description Comma-separated include flags, e.g. `includeType=all`. Available: all */
                 includeType?: string;
-                /** @description Filters in `key:value` format, comma-separated, e.g. `filterBy=projectId:<uuid>`. Available: projectId */
+                /** @description Filters in `key:value` format, comma-separated. */
                 filterBy?: string;
-                /** @description Comma-separated fields to expand, e.g. `expansion=description,createdAt`. Available: createdAt, updatedAt, description, profileImageUrl, instructions, temperature, maxOutputTokens, topP, frequencyPenalty, presencePenalty, maxRetries, seed, maxToolRoundtrips, messageLookbackLimit, project, tools, toolIds, knowledge, objects, objectTypes, connections, variables, workflows, subAgents, webAccess, phoneAccess, aiConnection, selectedModelId, taskNamingInstructions, enabledBuiltInTools, enabledPlatformTools, mcpServers, a2aAgents, dynamicActionDiscoveryEnabled, dynamicMcpDiscoveryEnabled, dynamicSelfInstructionsEnabled, memoryEnabled, memoryScope, memoryRetentionDays, enablePlanning, enableToolResultOffload, toolResultOffloadThresholdBytes, longHorizonMode, longHorizonMaxSteps, longHorizonMaxTokensPerRun, enabledToolPolicies, forcedTools, requirePlanApproval, suggestedPrompts, builderSetupCompletedAt, builderCanvasPositions, slug, managedByCode */
+                /** @description Comma-separated fields to expand, e.g. `expansion=description,createdAt`. Available: createdAt, updatedAt, description, profileImageUrl, instructions, temperature, maxOutputTokens, topP, frequencyPenalty, presencePenalty, maxRetries, seed, maxToolRoundtrips, messageLookbackLimit, tools, toolIds, knowledge, objects, objectTypes, connections, variables, workflows, subAgents, webAccess, phoneAccess, aiConnection, selectedModelId, taskNamingInstructions, enabledBuiltInTools, enabledPlatformTools, mcpServers, a2aAgents, dynamicActionDiscoveryEnabled, dynamicMcpDiscoveryEnabled, dynamicSelfInstructionsEnabled, memoryEnabled, memoryScope, memoryRetentionDays, enablePlanning, enableToolResultOffload, toolResultOffloadThresholdBytes, longHorizonMode, longHorizonMaxSteps, longHorizonMaxTokensPerRun, enabledToolPolicies, forcedTools, requirePlanApproval, suggestedPrompts, builderSetupCompletedAt, builderCanvasPositions, slug, managedByCode */
                 expansion?: string;
             };
             header?: never;
@@ -4933,21 +4690,20 @@ interface operations {
             };
         };
     };
-    AgentsController_findOne: {
+    AgentsController_upsertBySlug: {
         parameters: {
-            query?: {
-                /** @description Comma-separated fields to expand, e.g. `expansion=description,createdAt`. Available: createdAt, updatedAt, description, profileImageUrl, instructions, temperature, maxOutputTokens, topP, frequencyPenalty, presencePenalty, maxRetries, seed, maxToolRoundtrips, messageLookbackLimit, project, tools, toolIds, knowledge, objects, objectTypes, connections, variables, workflows, subAgents, webAccess, phoneAccess, aiConnection, selectedModelId, taskNamingInstructions, enabledBuiltInTools, enabledPlatformTools, mcpServers, a2aAgents, dynamicActionDiscoveryEnabled, dynamicMcpDiscoveryEnabled, dynamicSelfInstructionsEnabled, memoryEnabled, memoryScope, memoryRetentionDays, enablePlanning, enableToolResultOffload, toolResultOffloadThresholdBytes, longHorizonMode, longHorizonMaxSteps, longHorizonMaxTokensPerRun, enabledToolPolicies, forcedTools, requirePlanApproval, suggestedPrompts, builderSetupCompletedAt, builderCanvasPositions, slug, managedByCode */
-                expansion?: string;
-            };
+            query?: never;
             header?: never;
-            path: {
-                agentId: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpsertAgentBySlugDto"];
+            };
+        };
         responses: {
-            /** @description The requested agent */
+            /** @description The created or updated agent. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -4958,22 +4714,21 @@ interface operations {
             };
         };
     };
-    ProjectAgentsController_upsertBySlug: {
+    AgentsController_findOne: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Comma-separated fields to expand, e.g. `expansion=description,createdAt`. Available: createdAt, updatedAt, description, profileImageUrl, instructions, temperature, maxOutputTokens, topP, frequencyPenalty, presencePenalty, maxRetries, seed, maxToolRoundtrips, messageLookbackLimit, tools, toolIds, knowledge, objects, objectTypes, connections, variables, workflows, subAgents, webAccess, phoneAccess, aiConnection, selectedModelId, taskNamingInstructions, enabledBuiltInTools, enabledPlatformTools, mcpServers, a2aAgents, dynamicActionDiscoveryEnabled, dynamicMcpDiscoveryEnabled, dynamicSelfInstructionsEnabled, memoryEnabled, memoryScope, memoryRetentionDays, enablePlanning, enableToolResultOffload, toolResultOffloadThresholdBytes, longHorizonMode, longHorizonMaxSteps, longHorizonMaxTokensPerRun, enabledToolPolicies, forcedTools, requirePlanApproval, suggestedPrompts, builderSetupCompletedAt, builderCanvasPositions, slug, managedByCode */
+                expansion?: string;
+            };
             header?: never;
             path: {
-                projectId: string;
+                agentId: string;
             };
             cookie?: never;
         };
-        requestBody: {
-            content: {
-                "application/json": components["schemas"]["UpsertAgentBySlugDto"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The created or updated agent. */
+            /** @description The requested agent */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -5722,7 +5477,7 @@ interface operations {
             query?: {
                 /** @description Comma-separated inclusion flags. Available: all, internal. Pass internal to include executions of internal workflows, which are excluded by default. */
                 includeType?: string;
-                /** @description Comma-separated key:value filters. Available: projectId, workflowId, source (WORKFLOW|SDK), objectId. Example: filterBy=workflowId:wf_123 or filterBy=objectId:<uuid> */
+                /** @description Comma-separated key:value filters. Available: workflowId, source (WORKFLOW|SDK), objectId. Example: filterBy=workflowId:wf_123 or filterBy=objectId:<uuid> */
                 filterBy?: string;
                 /** @description Comma-separated fields to expand. Available: createdAt, updatedAt, startedAt, stoppedAt, executionNumber, nodes, edges, status, statusMessage, continueExecutionAt, workflow, project, workspace, output, orientation, executionVariables, source, name. The executionPath expansion is only honoured on GET /executions/{executionId}. Example: expansion=status,startedAt,workflow,source */
                 expansion?: string;
@@ -5844,9 +5599,9 @@ interface operations {
             query?: {
                 /** @description Comma-separated include flags. Available: all */
                 includeType?: string;
-                /** @description Comma-separated key:value filters. Available: projectId (variables owned by the project), projectAccessId (variables the project can access, including workspace-wide ones). Example: filterBy=projectId:abc123 */
+                /** @description Comma-separated key:value filters. Variables are workspace-scoped; this list has no project filter. */
                 filterBy?: string;
-                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace, project */
+                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace */
                 expansion?: string;
             };
             header?: never;
@@ -5869,7 +5624,7 @@ interface operations {
     VariablesController_create: {
         parameters: {
             query?: {
-                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace, project */
+                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace */
                 expansion?: string;
             };
             header?: never;
@@ -5896,7 +5651,7 @@ interface operations {
     VariablesController_findOne: {
         parameters: {
             query?: {
-                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace, project */
+                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace */
                 expansion?: string;
             };
             header?: never;
@@ -5943,7 +5698,7 @@ interface operations {
     VariablesController_update: {
         parameters: {
             query?: {
-                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace, project */
+                /** @description Comma-separated fields to expand. Available: description, createdAt, updatedAt, value, workspace */
                 expansion?: string;
             };
             header?: never;
@@ -5971,9 +5726,7 @@ interface operations {
     };
     TablesController_findAll: {
         parameters: {
-            query?: {
-                projectId?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
@@ -6231,7 +5984,7 @@ interface operations {
             query?: {
                 /** @description Comma-separated include flags, e.g. `includeType=all`. Available: all */
                 includeType?: string;
-                /** @description Filters in `key:value` format, comma-separated, e.g. `filterBy=agentId:<uuid>`. Available: projectId, agentId */
+                /** @description Filters in `key:value` format, comma-separated, e.g. `filterBy=agentId:<uuid>`. Available: agentId */
                 filterBy?: string;
                 /** @description Comma-separated fields to expand, e.g. `expansion=description,createdAt`. Available: createdAt, updatedAt, description, agent, project, messages, messageCreatedAt, messageUsage, finishReason, customIdentifier */
                 expansion?: string;
@@ -6484,8 +6237,6 @@ interface operations {
 
 type Schemas = components['schemas'];
 type EnabledFeatures = Schemas['EnabledFeaturesResponseDto'];
-type Project = Schemas['ProjectResponseDto'];
-type CreateProjectInput = Schemas['CreateProjectDto'];
 type Agent = Schemas['AgentResponseDto'];
 type Task = Schemas['TaskResponseDto'];
 type TaskListItem = Schemas['TaskListItemResponseDto'];
@@ -6741,11 +6492,6 @@ interface RunActionOptions {
      * and exactly one connection exists, the platform uses that connection.
      */
     connectionId?: string;
-    /**
-     * Project UUID for variable/project scoping. Required when the workspace has
-     * more than one project.
-     */
-    projectId?: string;
     /** Action input fields (keys from the action `inputConfig`). */
     input?: Record<string, unknown>;
     /** Optional display name for the ad-hoc Execution. */
@@ -6834,7 +6580,7 @@ interface WorkflowStepDefinition {
 }
 interface WorkflowDefinition {
     kind: typeof DEFINE_KINDS.workflow;
-    /** Stable project-scoped slug (upsert key). */
+    /** Stable slug, unique in the workspace (upsert key). */
     slug: string;
     name?: string;
     description?: string;
@@ -6847,7 +6593,7 @@ type AgentToolDefinition = ActionDefinition | WorkflowDefinition | {
 };
 interface AgentDefinition {
     kind: typeof DEFINE_KINDS.agent;
-    /** Stable project-scoped slug (upsert key). */
+    /** Stable slug, unique in the workspace (upsert key). */
     slug: string;
     name?: string;
     description?: string;
@@ -6917,10 +6663,10 @@ declare class AgentsResource {
     /** Returns a single agent. */
     get(agentId: string, options?: Pick<ListQueryOptions, 'expansion'>): Promise<Agent>;
     /**
-     * Upsert an agent by project-scoped slug.
+     * Upsert an agent by slug inside the workspace on the API key.
      * Prefer the CLI (`npx @lunnoa/client agents deploy`) for happy-path deploy.
      */
-    upsertBySlug(projectId: string, body: UpsertAgentBySlugInput | AgentDefinition, options?: {
+    upsertBySlug(body: UpsertAgentBySlugInput | AgentDefinition, options?: {
         workflowIds?: string[];
     }): Promise<Agent>;
 }
@@ -6975,7 +6721,7 @@ interface CurrentUser {
 }
 
 /**
- * Login, refresh, SSO discovery, and session helpers for Pattern B.
+ * Login, refresh, SSO discovery, and session helpers for Lunnoa users.
  *
  * Password login, token exchange, refresh, and SSO provider listing are
  * **public** endpoints (no Bearer). `me()` requires a user JWT.
@@ -7222,9 +6968,7 @@ declare class TablesResource {
     private readonly http;
     constructor(http: HttpClient);
     /** Lists tables in the API key's workspace (without columns and rows). */
-    list(options?: {
-        projectId?: string;
-    }): Promise<Table[]>;
+    list(): Promise<Table[]>;
     /** Returns a single table by ID, including columns and rows. */
     get(id: string): Promise<Table>;
     /** Returns a single table by its workspace slug, including columns and rows. */
@@ -7325,17 +7069,6 @@ declare class KnowledgeResource {
     deleteDocumentGroup(knowledgeId: string, groupId: string): Promise<boolean>;
 }
 
-declare class ProjectsResource {
-    private readonly http;
-    constructor(http: HttpClient);
-    /** Lists projects in the workspace, most recently updated first. */
-    list(options?: ListQueryOptions): Promise<Project[]>;
-    /** Returns a single project. */
-    get(projectId: string, options?: Pick<ListQueryOptions, 'expansion'>): Promise<Project>;
-    /** Creates a project. */
-    create(data: CreateProjectInput): Promise<Project>;
-}
-
 type QueueItemStatus = 'PENDING' | 'PROCESSING' | 'SUCCESS' | 'FAILED' | 'RETRYING';
 interface AddQueueItemErrorInput {
     /** Error message recorded on the item. */
@@ -7449,7 +7182,6 @@ interface StartRunStep {
 }
 interface StartRunOptions {
     steps: StartRunStep[];
-    projectId?: string;
     name?: string;
 }
 type StartRunInput = StartRunOptions | WorkflowDefinition | WorkflowStepDefinition[] | StartRunStep[];
@@ -7464,7 +7196,7 @@ declare class RunsResource {
      * Start a linear multi-step ad-hoc Execution.
      *
      * Accepts a `defineWorkflow` result, a step array, or an explicit
-     * `{ steps, projectId?, name? }` payload.
+     * `{ steps, name? }` payload.
      */
     start(input: StartRunInput): Promise<RunActionResult>;
     /** Convenience: start and wait until terminal / NEEDS_INPUT. */
@@ -7621,10 +7353,10 @@ declare class WorkflowsResource {
      */
     get(workflowId: string, options?: Pick<ListQueryOptions, 'expansion'>): Promise<Workflow>;
     /**
-     * Upsert a workflow by project-scoped slug from a linear step list.
+     * Upsert a workflow by slug inside the workspace on the API key.
      * Prefer the CLI (`npx @lunnoa/client workflows deploy`) for happy-path deploy.
      */
-    upsertBySlug(projectId: string, body: UpsertWorkflowBySlugInput | WorkflowDefinition): Promise<Workflow>;
+    upsertBySlug(body: UpsertWorkflowBySlugInput | WorkflowDefinition): Promise<Workflow>;
     /**
      * Starts a new execution of the workflow with the given trigger inputs.
      * Returns immediately with the execution ID.
@@ -7647,28 +7379,21 @@ declare class WorkflowsResource {
 /**
  * Typed client for the Lunnoa Automate Public API.
  *
- * Server-side (Pattern A — the backend holds the key):
- * ```ts
- * const lunnoa = new LunnoaClient({
- *   baseUrl: 'https://lunnoa.acme.example',
- *   apiKey: process.env.LUNNOA_API_KEY, // lna_...
- * });
- * ```
- *
- * Browser (Pattern B — the end user is a Lunnoa user):
+ * Apps sign people in as Lunnoa users:
  * ```ts
  * import { createBrowserClient } from '@lunnoa/client';
  * const lunnoa = createBrowserClient({ baseUrl: 'https://lunnoa.acme.example' });
  * await lunnoa.auth.login({ email, password });
  * ```
  *
- * Passing an `lna_` API key in a browser throws immediately: API keys are
- * workspace-wide server credentials and must never ship to browsers.
+ * `apiKey` (`lna_...`) is for the CLI and operator scripts (codegen, discovery,
+ * deploy). It is not an app login. Passing one while `window` exists throws:
+ * a leaked key acts as that service account across its whole workspace.
  */
 declare class LunnoaClient {
     /** The underlying HTTP layer, exposed for advanced/escape-hatch requests. */
     readonly http: HttpClient;
-    /** Login, refresh, SSO discovery, and session helpers (Pattern B). */
+    /** Login, refresh, SSO discovery, and session helpers for Lunnoa users. */
     readonly auth: AuthResource;
     readonly agents: AgentsResource;
     readonly tasks: TasksResource;
@@ -7695,7 +7420,6 @@ declare class LunnoaClient {
     readonly variables: VariablesResource;
     readonly scorecards: ScorecardsResource;
     readonly connections: ConnectionsResource;
-    readonly projects: ProjectsResource;
     readonly workflowApps: WorkflowAppsResource;
     readonly discovery: DiscoveryResource;
     constructor(options: LunnoaClientOptions);
@@ -7732,11 +7456,10 @@ declare const API_KEY_PREFIX = "lna_";
 /** Returns true when running inside a browser (or browser-like) environment. */
 declare function isBrowserEnvironment(): boolean;
 /**
- * API keys are server-to-server credentials. Shipping one to a browser exposes
- * the whole workspace the key is scoped to, so the SDK refuses outright.
+ * API keys are operator credentials (CLI, codegen, deploy). Shipping one to a
+ * browser exposes the whole workspace the key is scoped to, so the SDK refuses.
  *
- * Browser apps must authenticate end users with a Lunnoa user JWT (Pattern B)
- * or proxy through their own backend which holds the key (Pattern A / BFF).
+ * Apps authenticate end users with a Lunnoa user JWT.
  */
 declare function assertApiKeyAllowedInEnvironment(apiKey: string): void;
 
@@ -7809,7 +7532,7 @@ interface CreateBrowserClientOptions {
     headers?: Record<string, string>;
 }
 /**
- * Pattern B helper: browser (or isomorphic) client with JWT storage,
+ * Browser (or isomorphic) client with JWT storage,
  * `lunnoa.auth.login` / refresh, and optional auto-refresh on 401.
  *
  * Never pass an `lna_` API key here.
@@ -7819,13 +7542,13 @@ interface CreateServerClientOptions {
     /** Base URL of the Lunnoa Automate deployment. */
     baseUrl: string;
     /**
-     * Workspace API key (`lna_...`). Preferred for Pattern A backends / BFFs.
+     * Workspace API key (`lna_...`) for operator scripts and the CLI.
+     * Not an app login: people using an app authenticate as Lunnoa users.
      * Mutually exclusive with `accessToken` / `tokenStore`.
      */
     apiKey?: string;
     /**
-     * User JWT (or getter) when the server acts on behalf of a logged-in user.
-     * Prefer this over embedding tokens in the browser when you own the session.
+     * User JWT (or getter) when the server already holds a signed-in Lunnoa user's token.
      */
     accessToken?: string | (() => string | Promise<string>);
     /** Optional store when the server holds both access and refresh tokens. */
@@ -7835,11 +7558,10 @@ interface CreateServerClientOptions {
     headers?: Record<string, string>;
 }
 /**
- * Pattern A (or server-side Pattern B) helper for Node / BFF / route handlers.
- *
- * Provide `apiKey` for a service account, or `accessToken` / `tokenStore` for a
- * user JWT held on the server. Throws if used with an API key in a browser.
+ * Node helper for a Lunnoa user JWT held on the server, or an `lna_` key for
+ * operator scripts. App login uses {@link createBrowserClient}. Throws if
+ * used with an API key in a browser.
  */
 declare function createServerClient(options: CreateServerClientOptions): LunnoaClient;
 
-export { API_KEY_PREFIX, type ActionDefinition, ActionsResource, type AddQueueItemErrorInput, type Agent, AgentChatClient, AgentChatStream, type AgentDefinition, type AgentToolDefinition, AgentsResource, type AiConnectionDefinition, type ApprovalInboxItem, ApprovalsResource, AuthResource, type AuthTokens, type BulkCreateQueueItemsInput, type BulkCreateQueueItemsResult, type ChangeEntityStateInput, type ChangeEntityStateResult, type ChatMode, type Connection, type ConnectionDefinition, ConnectionsResource, type CreateBrowserClientOptions, type CreateEntityInput, type CreateKnowledgeInput, type CreateProjectInput, type CreateQueueInput, type CreateQueueItemInput, type CreateServerClientOptions, type CreateTaskInput, type CreateVariableInput, type CurrentUser, DEFINE_KINDS, type DefineKind, type DeletedTask, DiscoveryResource, type EligibleApprover, type EnabledFeatures, EntitiesResource, type Entity, type EntityStateHistoryEntry, type EntityStateTransitions, type EntityType, type EntityTypeDefinition, type EntityTypeReadOptions, EntityTypesResource, type ExecuteWorkflowResult, type Execution, type ExecutionPathStep, type ExecutionProgress, type ExecutionProgressPayload, type ExecutionProgressStep, ExecutionProgressStream, type ExecutionStatus, type ExecutionStreamEvent, type ExecutionStreamEventType, ExecutionTimeoutError, ExecutionsResource, type ExportEntitiesInput, type FetchLike, HttpClient, type ImportEntitiesInput, type ImportEntitiesResult, type ImportTemplate, type Knowledge, type KnowledgeDocument, type KnowledgeDocumentGroup, KnowledgeResource, type ListEntitiesOptions, type ListQueryOptions, type ListQueueItemsByObjectOptions, type ListQueueItemsOptions, type LocalStorageTokenStoreOptions, type LoginRequires2FA, type LoginResult, type LoginSuccess, LunnoaApiError, LunnoaClient, type LunnoaClientOptions, type MessageTaskInput, type OffsetPagination, type PagePagination, type PaginatedEntities, type PendingInput, type PendingInputField, type Project, ProjectsResource, type QueryValue, type Queue, type QueueAllowedObjectType, type QueueItem, type QueueItemCreated, type QueueItemErrorEntry, type QueueItemFull, type QueueItemList, type QueueItemObjectSummary, type QueueItemStats, type QueueItemStatus, QueueItemsResource, type QueueStats, QueuesResource, type RecordMeasureValueInput, type RequestOptions, type RunActionInput, type RunActionOptions, type RunActionResult, RunsResource, type SaveUploadedTextInput, type Scorecard, type ScorecardMeasure, type ScorecardMeasureStatus, type ScorecardMeasureValue, type ScorecardObjective, type ScorecardSummary, ScorecardsResource, type SseEvent, SsoAuthResource, type SsoProviderSummary, type SsoProvidersResponse, type StartRunInput, type StartRunInputDto, type StartRunOptions, type StartRunStep, type StopStreamOptions, type StreamMessageOptions, type Table, TablesResource, type Task, type TaskListItem, TasksResource, type TokenStore, type UpdateEntityInput, type UpdateKnowledgeInput, type UpdateQueueInput, type UpdateQueueItemInput, type UpdateTaskInput, type UpdateVariableInput, type UpsertAgentBySlugInput, type UpsertAgentBySlugInputDto, type UpsertAgentToolInput, type UpsertEntityTypeBySlugInput, type UpsertTableBySlugInput, type UpsertWorkflowBySlugInput, type UpsertWorkflowBySlugInputDto, type UpsertWorkflowStepInput, type Variable, VariablesResource, type WaitUntilFinishedOptions, type WatchProgressOptions, type Workflow, type WorkflowApp, WorkflowAppsResource, type WorkflowDefinition, type WorkflowStepDefinition, WorkflowsResource, assertApiKeyAllowedInEnvironment, type components, createBrowserClient, createLocalStorageTokenStore, createMemoryTokenStore, createServerClient, defineAction, defineAgent, defineAiConnection, defineConnection, defineEntityType, defineWorkflow, entityTypeDefinitionToUpsert, isBrowserEnvironment, isLoginRequires2FA, iterateOffset, iteratePages, type operations, parseSseEvents, parseSseStream, type paths, resolveActionAppId, resolveActionId };
+export { API_KEY_PREFIX, type ActionDefinition, ActionsResource, type AddQueueItemErrorInput, type Agent, AgentChatClient, AgentChatStream, type AgentDefinition, type AgentToolDefinition, AgentsResource, type AiConnectionDefinition, type ApprovalInboxItem, ApprovalsResource, AuthResource, type AuthTokens, type BulkCreateQueueItemsInput, type BulkCreateQueueItemsResult, type ChangeEntityStateInput, type ChangeEntityStateResult, type ChatMode, type Connection, type ConnectionDefinition, ConnectionsResource, type CreateBrowserClientOptions, type CreateEntityInput, type CreateKnowledgeInput, type CreateQueueInput, type CreateQueueItemInput, type CreateServerClientOptions, type CreateTaskInput, type CreateVariableInput, type CurrentUser, DEFINE_KINDS, type DefineKind, type DeletedTask, DiscoveryResource, type EligibleApprover, type EnabledFeatures, EntitiesResource, type Entity, type EntityStateHistoryEntry, type EntityStateTransitions, type EntityType, type EntityTypeDefinition, type EntityTypeReadOptions, EntityTypesResource, type ExecuteWorkflowResult, type Execution, type ExecutionPathStep, type ExecutionProgress, type ExecutionProgressPayload, type ExecutionProgressStep, ExecutionProgressStream, type ExecutionStatus, type ExecutionStreamEvent, type ExecutionStreamEventType, ExecutionTimeoutError, ExecutionsResource, type ExportEntitiesInput, type FetchLike, HttpClient, type ImportEntitiesInput, type ImportEntitiesResult, type ImportTemplate, type Knowledge, type KnowledgeDocument, type KnowledgeDocumentGroup, KnowledgeResource, type ListEntitiesOptions, type ListQueryOptions, type ListQueueItemsByObjectOptions, type ListQueueItemsOptions, type LocalStorageTokenStoreOptions, type LoginRequires2FA, type LoginResult, type LoginSuccess, LunnoaApiError, LunnoaClient, type LunnoaClientOptions, type MessageTaskInput, type OffsetPagination, type PagePagination, type PaginatedEntities, type PendingInput, type PendingInputField, type QueryValue, type Queue, type QueueAllowedObjectType, type QueueItem, type QueueItemCreated, type QueueItemErrorEntry, type QueueItemFull, type QueueItemList, type QueueItemObjectSummary, type QueueItemStats, type QueueItemStatus, QueueItemsResource, type QueueStats, QueuesResource, type RecordMeasureValueInput, type RequestOptions, type RunActionInput, type RunActionOptions, type RunActionResult, RunsResource, type SaveUploadedTextInput, type Scorecard, type ScorecardMeasure, type ScorecardMeasureStatus, type ScorecardMeasureValue, type ScorecardObjective, type ScorecardSummary, ScorecardsResource, type SseEvent, SsoAuthResource, type SsoProviderSummary, type SsoProvidersResponse, type StartRunInput, type StartRunInputDto, type StartRunOptions, type StartRunStep, type StopStreamOptions, type StreamMessageOptions, type Table, TablesResource, type Task, type TaskListItem, TasksResource, type TokenStore, type UpdateEntityInput, type UpdateKnowledgeInput, type UpdateQueueInput, type UpdateQueueItemInput, type UpdateTaskInput, type UpdateVariableInput, type UpsertAgentBySlugInput, type UpsertAgentBySlugInputDto, type UpsertAgentToolInput, type UpsertEntityTypeBySlugInput, type UpsertTableBySlugInput, type UpsertWorkflowBySlugInput, type UpsertWorkflowBySlugInputDto, type UpsertWorkflowStepInput, type Variable, VariablesResource, type WaitUntilFinishedOptions, type WatchProgressOptions, type Workflow, type WorkflowApp, WorkflowAppsResource, type WorkflowDefinition, type WorkflowStepDefinition, WorkflowsResource, assertApiKeyAllowedInEnvironment, type components, createBrowserClient, createLocalStorageTokenStore, createMemoryTokenStore, createServerClient, defineAction, defineAgent, defineAiConnection, defineConnection, defineEntityType, defineWorkflow, entityTypeDefinitionToUpsert, isBrowserEnvironment, isLoginRequires2FA, iterateOffset, iteratePages, type operations, parseSseEvents, parseSseStream, type paths, resolveActionAppId, resolveActionId };