@m6d/cortex-cli 0.21.0 → 0.23.0

package/src/contracts/management/procedures.generated.ts

@@ -233,6 +233,7 @@ export const managementProcedureKinds = {
   "credentials.delete": "mutation",
   "credentials.list": "query",
   "credentials.names": "query",
+  "credentials.rotateKey": "mutation",
   "credentials.update": "mutation",
   "datasetHosts.create": "mutation",
   "datasetHosts.delete": "mutation",
@@ -257,6 +258,8 @@ export const managementProcedureKinds = {
   "manifests.sync": "mutation",
   "mcpServers.create": "mutation",
   "mcpServers.delete": "mutation",
+  "mcpServers.detectSignIn": "query",
+  "mcpServers.disconnect": "mutation",
   "mcpServers.get": "query",
   "mcpServers.list": "query",
   "mcpServers.publish": "mutation",
@@ -274,16 +277,16 @@ export const managementProcedureKinds = {
   "observability.getExecution": "query",
   "observability.getExecutionSummary": "query",
   "observability.getRetrievalQuality": "query",
-  "observability.getTriggerFiring": "query",
+  "observability.getRun": "query",
   "observability.getUsage": "query",
   "observability.listDatasetReads": "query",
   "observability.listExecutions": "query",
+  "observability.listRuns": "query",
   "observability.listSchemaDrifts": "query",
   "observability.listSkillLoads": "query",
   "observability.listSkillMisses": "query",
   "observability.listSkillUsage": "query",
   "observability.listToolHealth": "query",
-  "observability.listTriggerFirings": "query",
   "observability.unhealthyToolIds": "query",
   "observability.unusedSkillIds": "query",
   "observability.updateSchemaDrift": "mutation",
@@ -349,7 +352,7 @@ export const managementProcedureKinds = {
   "tools.test": "mutation",
   "tools.toggle": "mutation",
   "tools.update": "mutation",
-  "triggers.answerFiring": "mutation",
+  "triggers.answerRun": "mutation",
   "triggers.create": "mutation",
   "triggers.delete": "mutation",
   "triggers.fire": "mutation",
@@ -394,7 +397,7 @@ export type ManagementProcedures = {
       updatedAt: string;
     };
   };
-  /** Create an agent on a registered server, or on none (`serverId` null), fixed for good either way. An agent with no server has no native tools, no server variables and no server auth, and publishes only on a chat model of its own. The draft has no prompt yet; save one with agents.savePrompt before publishing. */
+  /** Create an agent on a registered server, or on none (`serverId` null), fixed for good either way. An agent with no server has no native tools, no server variables and no server auth, and publishes only on a chat model of its own. The draft has no prompt yet; save one with agents.savePrompt before publishing. Refused as `agent_limit_reached` once the license's agent count is reached. */
   "agents.create": {
     input: {
       /** A name: lowercase letters, digits, and single hyphens. */
@@ -413,12 +416,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -458,12 +464,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -515,12 +524,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -681,12 +693,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -715,11 +730,14 @@ export type ManagementProcedures = {
       ragEnabled?: boolean;
       toolRegistryEnabled?: boolean;
       serviceRegistryEnabled?: boolean;
+      subagentsEnabled?: boolean;
+      checkBacksEnabled?: boolean;
       attachmentsEnabled?: boolean;
       fetchImageHostnames?: Array<string>;
       locationPicker?: boolean;
       media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-      messageTrigger?: boolean;
+      messages?: boolean;
+      whileBusy?: "refuse" | "queue" | "steer";
       defaultLocale?: "en" | "ar";
       context?: {
         maxContextTokens: number;
@@ -791,12 +809,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -836,12 +857,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -885,7 +909,7 @@ export type ManagementProcedures = {
     output: {
       id: string;
       actorId: string;
-      credentialKind: "session" | "managementKey" | "operatorToken" | "system";
+      credentialKind: "session" | "managementKey" | "operatorToken" | "oauthToken" | "system";
       credentialId: string | null;
       entityType: string;
       entityId: string;
@@ -902,6 +926,7 @@ export type ManagementProcedures = {
         displayName: Partial<Record<"en" | "ar", string>>;
         fingerprint: string;
       } | null;
+      oauthClientName: string | null;
       before: unknown;
       after: unknown;
     };
@@ -922,7 +947,7 @@ export type ManagementProcedures = {
       items: Array<{
         id: string;
         actorId: string;
-        credentialKind: "session" | "managementKey" | "operatorToken" | "system";
+        credentialKind: "session" | "managementKey" | "operatorToken" | "oauthToken" | "system";
         credentialId: string | null;
         entityType: string;
         entityId: string;
@@ -939,6 +964,7 @@ export type ManagementProcedures = {
           displayName: Partial<Record<"en" | "ar", string>>;
           fingerprint: string;
         } | null;
+        oauthClientName: string | null;
       }>;
       /** Every row the caller may see, ignoring the search and filters. */
       count: number;
@@ -1134,15 +1160,17 @@ export type ManagementProcedures = {
       name: string;
     };
   };
-  /** Create a named credential, with a display name (a text per locale, `{}` for none), over a stored secret: `static` presents the secret's value; `oauth2-client-credentials` exchanges it, as the client secret of `clientId`, for a bearer at `tokenUrl` (https, or http on loopback or on a host `EGRESS_ALLOWED_HOSTS` admits). A credential's name and kind never change. Needs `secrets:write` too: whatever presents the credential sends its secret. */
+  /** Create a credential over a stored secret, with a display name (`{}` for none). `static` presents the secret's value; `oauth2-client-credentials` gets a bearer at `tokenUrl` (https) as `clientId`, by `authMethod`: `client_secret_basic` sends the secret; `private_key_jwt` signs with a key Cortex generates into a new secret named `secretName`, which nothing else may compose or rewrite (`signing_key_secret`), and needs `issuer` and an engine public URL to publish its key under (`jwks_unavailable`); `none` is a public app for MCP sign-in at `issuer`, with no secret. `issuer` is the authorization server's exact identifier. Name, kind and auth method never change. Needs `secrets:write`. */
   "credentials.create": {
     input: {
       displayName: Partial<Record<"en" | "ar", string>>;
       kind: "static" | "oauth2-client-credentials";
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none";
       secretName: string;
       tokenUrl: string;
       clientId: string;
       scope: string;
+      issuer: string;
       /** A name: lowercase letters, digits, and single hyphens. */
       name: string;
     };
@@ -1151,10 +1179,12 @@ export type ManagementProcedures = {
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
       kind: "static" | "oauth2-client-credentials";
-      secretName: string;
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none" | null;
+      secretName: string | null;
       tokenUrl: string | null;
       clientId: string | null;
       scope: string | null;
+      issuer: string | null;
       createdAt: string;
       updatedAt: string;
     };
@@ -1169,15 +1199,17 @@ export type ManagementProcedures = {
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
       kind: "static" | "oauth2-client-credentials";
-      secretName: string;
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none" | null;
+      secretName: string | null;
       tokenUrl: string | null;
       clientId: string | null;
       scope: string | null;
+      issuer: string | null;
       createdAt: string;
       updatedAt: string;
     };
   };
-  /** List credentials with pagination and search: the name tools, dataset hosts and triggers reference, its display name, its kind, the secret it composes, and how many rows name it with the first few (`usedBy`). */
+  /** List credentials with pagination and search: the name tools, dataset hosts and triggers reference, its display name, its kind and auth method, the secret it composes, how many rows name it with the first few (`usedBy`), and, for a `private_key_jwt` one, the URL of its public key set (`jwksUrl`, null without an engine public URL), which its authorization server is registered with, and the `kid` of the key it signs with now (null for any other). */
   "credentials.list": {
     input: {
       pageIndex?: number;
@@ -1190,10 +1222,12 @@ export type ManagementProcedures = {
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
         kind: "static" | "oauth2-client-credentials";
-        secretName: string;
+        authMethod: "client_secret_basic" | "private_key_jwt" | "none" | null;
+        secretName: string | null;
         tokenUrl: string | null;
         clientId: string | null;
         scope: string | null;
+        issuer: string | null;
         createdAt: string;
         updatedAt: string;
         usedBy: {
@@ -1205,6 +1239,8 @@ export type ManagementProcedures = {
             id: string;
           }>;
         };
+        jwksUrl: string | null;
+        kid: string | null;
       }>;
       /** Every row the caller may see, ignoring the search and filters. */
       count: number;
@@ -1212,25 +1248,47 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
-  /** Each credential's name and display name, in name order, for a picker. `present`: what a tool, dataset host, webhook or trigger run may present upstream (every credential but a trigger's fire credential). `fire`: what a trigger may be fired with (static credentials). */
+  /** Each credential's name and display name, in name order, for a picker. `present`: what a tool, dataset host, webhook or trigger run may present upstream (every credential but a trigger's fire credential). `fire`: what a trigger may be fired with (static credentials). `signIn`: what an MCP server's sign-in may present as its pre-registered app (OAuth2 client credentials ones naming their `issuer`). */
   "credentials.names": {
     input: {
-      use: "present" | "fire";
+      use: "present" | "fire" | "signIn";
     };
     output: Array<{
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
     }>;
   };
-  /** Change a credential's display name, the secret it composes and, for an OAuth2 one, its token URL, client id and scope. Applies to the next call of every tool, dataset host and trigger naming it. Changing the secret or the token URL needs `secrets:write` too (`secret_binding_forbidden`): either sends a stored secret somewhere new. */
+  /** Replace a `private_key_jwt` credential's signing key with a new one, under a new `kid`, rewriting its secret (`no_signing_key` for any other credential). Its key set serves only the new public key at once, so assertions verify again once the authorization server refetches it. */
+  "credentials.rotateKey": {
+    input: {
+      id: string;
+    };
+    output: {
+      id: string;
+      name: string;
+      displayName: Partial<Record<"en" | "ar", string>>;
+      kind: "static" | "oauth2-client-credentials";
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none" | null;
+      secretName: string | null;
+      tokenUrl: string | null;
+      clientId: string | null;
+      scope: string | null;
+      issuer: string | null;
+      createdAt: string;
+      updatedAt: string;
+    };
+  };
+  /** Change a credential's display name, the secret it composes and, for an OAuth2 one, its token URL, client id, scope and issuer. Applies to the next call of every tool, dataset host and trigger naming it. Changing the secret, the token URL or the issuer needs `secrets:write` too (`secret_binding_forbidden`): each sends a stored secret somewhere new. A `private_key_jwt` one keeps its secret, which holds its key, like its kind and auth method (`kind_locked`). */
   "credentials.update": {
     input: {
       displayName: Partial<Record<"en" | "ar", string>>;
       kind: "static" | "oauth2-client-credentials";
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none";
       secretName: string;
       tokenUrl: string;
       clientId: string;
       scope: string;
+      issuer: string;
       id: string;
     };
     output: {
@@ -1238,10 +1296,12 @@ export type ManagementProcedures = {
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
       kind: "static" | "oauth2-client-credentials";
-      secretName: string;
+      authMethod: "client_secret_basic" | "private_key_jwt" | "none" | null;
+      secretName: string | null;
       tokenUrl: string | null;
       clientId: string | null;
       scope: string | null;
+      issuer: string | null;
       createdAt: string;
       updatedAt: string;
     };
@@ -1429,7 +1489,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents a dataset host reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents a dataset host reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "datasetHosts.setAudience": {
     input: {
       id: string;
@@ -1771,11 +1831,14 @@ export type ManagementProcedures = {
           ragEnabled?: boolean;
           toolRegistryEnabled?: boolean;
           serviceRegistryEnabled?: boolean;
+          subagentsEnabled?: boolean;
+          checkBacksEnabled?: boolean;
           attachmentsEnabled?: boolean;
           fetchImageHostnames?: Array<string>;
           locationPicker?: boolean;
           media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-          messageTrigger?: boolean;
+          messages?: boolean;
+          whileBusy?: "refuse" | "queue" | "steer";
           defaultLocale?: "en" | "ar";
           context?: {
             maxContextTokens?: number;
@@ -2097,13 +2160,18 @@ export type ManagementProcedures = {
         threadPolicy?: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        whileBusy?: "refuse" | "queue" | "steer";
         budgetPerDay?: number;
         disableAfterFailures?: number;
         credential?: string;
@@ -2113,12 +2181,16 @@ export type ManagementProcedures = {
           model: string;
           effort?: string;
         };
+        schedule?: {
+          cron: string;
+          timeZone: string;
+        };
         audience: "all" | {
           server: string;
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "budgetPerDay" | "disableAfterFailures" | "model">;
+        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "whileBusy" | "budgetPerDay" | "disableAfterFailures" | "model" | "schedule">;
       }>;
       datasetHosts?: Array<{
         name: string;
@@ -2178,6 +2250,11 @@ export type ManagementProcedures = {
             value: string;
           };
         }>;
+        signIn?: {
+          connects: "shared" | "endUser";
+          scope?: string;
+          credential?: string;
+        };
         include?: Array<string>;
         exclude?: Array<string>;
         audience: "all" | {
@@ -2185,13 +2262,13 @@ export type ManagementProcedures = {
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "include" | "exclude" | "headers">;
+        overridable?: Array<"displayName" | "include" | "exclude" | "headers" | "signIn">;
       }>;
       webhooks?: Array<{
         name: string;
         displayName?: Partial<Record<"en" | "ar", string>>;
         description?: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         headers?: Array<{
           header: string;
@@ -2306,11 +2383,14 @@ export type ManagementProcedures = {
           ragEnabled?: boolean;
           toolRegistryEnabled?: boolean;
           serviceRegistryEnabled?: boolean;
+          subagentsEnabled?: boolean;
+          checkBacksEnabled?: boolean;
           attachmentsEnabled?: boolean;
           fetchImageHostnames?: Array<string>;
           locationPicker?: boolean;
           media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-          messageTrigger?: boolean;
+          messages?: boolean;
+          whileBusy?: "refuse" | "queue" | "steer";
           defaultLocale?: "en" | "ar";
           context?: {
             maxContextTokens?: number;
@@ -2632,13 +2712,18 @@ export type ManagementProcedures = {
         threadPolicy?: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        whileBusy?: "refuse" | "queue" | "steer";
         budgetPerDay?: number;
         disableAfterFailures?: number;
         credential?: string;
@@ -2648,12 +2733,16 @@ export type ManagementProcedures = {
           model: string;
           effort?: string;
         };
+        schedule?: {
+          cron: string;
+          timeZone: string;
+        };
         audience: "all" | {
           server: string;
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "budgetPerDay" | "disableAfterFailures" | "model">;
+        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "whileBusy" | "budgetPerDay" | "disableAfterFailures" | "model" | "schedule">;
       }>;
       datasetHosts?: Array<{
         name: string;
@@ -2713,6 +2802,11 @@ export type ManagementProcedures = {
             value: string;
           };
         }>;
+        signIn?: {
+          connects: "shared" | "endUser";
+          scope?: string;
+          credential?: string;
+        };
         include?: Array<string>;
         exclude?: Array<string>;
         audience: "all" | {
@@ -2720,13 +2814,13 @@ export type ManagementProcedures = {
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "include" | "exclude" | "headers">;
+        overridable?: Array<"displayName" | "include" | "exclude" | "headers" | "signIn">;
       }>;
       webhooks?: Array<{
         name: string;
         displayName?: Partial<Record<"en" | "ar", string>>;
         description?: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         headers?: Array<{
           header: string;
@@ -2816,7 +2910,30 @@ export type ManagementProcedures = {
       id: string;
     };
   };
-  /** One MCP server by id with its url, headers, tool filters, and sharing. */
+  /** Find how Cortex would sign in to the MCP server with OAuth, from its metadata: the authorization server's issuer, the method Cortex would use (`preRegistered`, `clientIdDocument`, `dynamicRegistration`, or null for none), the scopes on offer, whether PKCE with S256 is supported, and the resource tokens are for. A pre-registered app for another issuer is refused as `sign_in_issuer_mismatch`. */
+  "mcpServers.detectSignIn": {
+    input: {
+      id: string;
+    };
+    output: {
+      issuer: string;
+      method: "preRegistered" | "clientIdDocument" | "dynamicRegistration" | null;
+      scopes: Array<string>;
+      pkce: boolean;
+      resource: string;
+    };
+  };
+  /** Forget every connection Cortex holds to the MCP server: the shared one, or every end user's. Its turns report it not connected until someone signs in again. The tokens are not revoked at the authorization server. */
+  "mcpServers.disconnect": {
+    input: {
+      id: string;
+    };
+    output: {
+      id: string;
+      name: string;
+    };
+  };
+  /** One MCP server by id with its url, headers, sign-in, tool filters, and sharing; its shared connection, never its tokens, with `stepUp` once its server refused a call for lack of scope (the scopes it lacks, and whether a sign-in may still ask for them); how many end users are connected or must sign in again; and `signInUrl`, where a browser form-posts an operator token and the server's id to connect it (null while the engine or the console has no public URL). */
   "mcpServers.get": {
     input: {
       id: string;
@@ -2855,6 +2972,11 @@ export type ManagementProcedures = {
           value: string;
         };
       }>;
+      signIn: {
+        connects: "shared" | "endUser";
+        scope?: string;
+        credential?: string;
+      } | null;
       include: Array<string>;
       exclude: Array<string>;
       status: "draft" | "published" | "disabled";
@@ -2881,6 +3003,22 @@ export type ManagementProcedures = {
         type: "string" | "number" | "boolean";
         computed: boolean;
       }>;
+      connection: {
+        status: "connected" | "needs_scope" | "broken";
+        issuer: string;
+        scope: string;
+        expiresAt: string | null;
+        updatedAt: string;
+        stepUp: {
+          missing: string;
+          grantable: boolean;
+        } | null;
+      } | null;
+      endUsers: {
+        connected: number;
+        broken: number;
+      };
+      signInUrl: string | null;
     };
   };
   /** List MCP servers with pagination and search. */
@@ -2954,7 +3092,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents an MCP server reaches: every agent, one server's, or a list. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents an MCP server reaches: every agent, one server's, or a list. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "mcpServers.setAudience": {
     input: {
       id: string;
@@ -3010,7 +3148,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Update an MCP server's draft: which of its tools agents may call (`include`, empty for every tool, and `exclude`, tool names as the server spells them). Saved as a draft; call publish to make it live. The url and headers (each with a prefix and its value from a credential, the run token, a variable or a constant) apply live without a publish. */
+  /** Update an MCP server's draft: which of its tools agents may call (`include`, empty for every tool, and `exclude`, tool names as the server spells them). Saved as a draft; call publish to make it live. The url, headers (each with a prefix and its value from a credential, the run token, a variable or a constant) and `signIn` apply live without a publish. `signIn` (null for none) has Cortex sign in with OAuth: `connects` is `shared` (an operator connects once for every agent) or `endUser` (each end user connects their own), `scope` what to ask for, and `credential` names the app registered with the authorization server beforehand, an `oauth2-client-credentials` credential naming its `issuer`. A server that signs in declares no Authorization header. */
   "mcpServers.update": {
     input: {
       url: string;
@@ -3030,6 +3168,11 @@ export type ManagementProcedures = {
           value: string;
         };
       }>;
+      signIn: {
+        connects: "shared" | "endUser";
+        scope?: string;
+        credential?: string;
+      } | null;
       include: Array<string>;
       exclude: Array<string>;
       id: string;
@@ -3176,6 +3319,7 @@ export type ManagementProcedures = {
         displayName: Partial<Record<"en" | "ar", string>>;
       };
       triggerName: string | null;
+      delegated: "queued" | "run" | "schedule" | "trigger" | null;
       threadId: string | null;
       threadTitle: string | null;
       input: unknown;
@@ -3242,18 +3386,20 @@ export type ManagementProcedures = {
       }>;
     };
   };
-  /** One trigger firing by id with its outcome and output, and the tool calls it waits on when it awaits approval. */
-  "observability.getTriggerFiring": {
+  /** One run by id with what it answered with, and the tool calls it waits on while it is waiting. */
+  "observability.getRun": {
     input: {
       id: string;
     };
     output: {
       id: string;
-      triggerName: string;
-      threadId: string | null;
-      outcome: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
-      output: unknown;
+      kind: "turn" | "subagent" | "tool";
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      createdAt: string;
+      finishedAt: string | null;
+      source: "user" | "trigger" | "schedule" | "run" | null;
+      triggerName: string | null;
       server: {
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -3262,17 +3408,15 @@ export type ManagementProcedures = {
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
       };
+      threadId: string | null;
       threadTitle: string | null;
-      createdAt: string;
-      finishedAt: string | null;
-      triggerId: string | null;
-      agentId: string;
-      approvals: Array<{
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
         toolCallId: string;
         toolName: string;
         input: unknown;
       }>;
-      decider: "operator" | "chat" | "disabled";
     };
   };
   /** Token and message usage of the agents the caller may read: totals and per user, server, agent and day, optionally for one agent within a day range. */
@@ -3408,6 +3552,47 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
+  /** Runs on your agents, chat and trigger alike, newest first, with how they ended and their thread, with pagination and agent, source, status, trigger name, open-wait kind, and day-range filters. */
+  "observability.listRuns": {
+    input: {
+      pageIndex?: number;
+      pageSize?: number;
+      q?: string;
+      agentId?: string;
+      source?: "user" | "trigger" | "schedule" | "run";
+      status?: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      triggerName?: string;
+      waitKind?: "approval" | "client_tool";
+      dateFrom?: string;
+      dateTo?: string;
+    };
+    output: {
+      items: Array<{
+        id: string;
+        kind: "turn" | "subagent" | "tool";
+        status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+        createdAt: string;
+        finishedAt: string | null;
+        source: "user" | "trigger" | "schedule" | "run" | null;
+        triggerName: string | null;
+        server: {
+          name: string;
+          displayName: Partial<Record<"en" | "ar", string>>;
+        } | null;
+        agent: {
+          name: string;
+          displayName: Partial<Record<"en" | "ar", string>>;
+        };
+        threadId: string | null;
+        threadTitle: string | null;
+      }>;
+      /** Every row the caller may see, ignoring the search and filters. */
+      count: number;
+      /** The rows matching the search and filters, over all pages: the total to report. */
+      filteredCount: number;
+    };
+  };
   /** Upstream responses that do not match a tool's declared schema, with pagination. */
   "observability.listSchemaDrifts": {
     input: {
@@ -3529,44 +3714,6 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
-  /** Trigger firings with their outcome, with pagination and agent, trigger, outcome, and day-range filters. */
-  "observability.listTriggerFirings": {
-    input: {
-      pageIndex?: number;
-      pageSize?: number;
-      q?: string;
-      agentId?: string;
-      triggerName?: string;
-      outcome?: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-      dateFrom?: string;
-      dateTo?: string;
-    };
-    output: {
-      items: Array<{
-        id: string;
-        triggerName: string;
-        threadId: string | null;
-        outcome: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-        reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
-        output: unknown;
-        server: {
-          name: string;
-          displayName: Partial<Record<"en" | "ar", string>>;
-        } | null;
-        agent: {
-          name: string;
-          displayName: Partial<Record<"en" | "ar", string>>;
-        };
-        threadTitle: string | null;
-        createdAt: string;
-        finishedAt: string | null;
-      }>;
-      /** Every row the caller may see, ignoring the search and filters. */
-      count: number;
-      /** The rows matching the search and filters, over all pages: the total to report. */
-      filteredCount: number;
-    };
-  };
   /** Ids of tools whose recent executions exceed the failure threshold. */
   "observability.unhealthyToolIds": {
     input: undefined;
@@ -3754,7 +3901,7 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
     }>;
   };
-  /** Replace a secret's value in place. */
+  /** Replace a secret's value in place; a `private_key_jwt` credential's generated key is refused (`signing_key_secret`), since only `credentials.rotateKey` rewrites it. */
   "secrets.rotate": {
     input: {
       id: string;
@@ -3838,7 +3985,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -3884,7 +4032,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -3917,6 +4066,7 @@ export type ManagementProcedures = {
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       createdAt: string;
       threadCount: number;
+      delegation: boolean;
       modelProvider: string | null;
       modelName: string | null;
       modelEffort: string | null;
@@ -4024,7 +4174,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -4552,7 +4703,7 @@ export type ManagementProcedures = {
       pageSize?: number;
       q?: string;
       serverId?: string;
-      agentName?: string;
+      agentId?: string;
       userId?: string;
       dateFrom?: string;
       dateTo?: string;
@@ -4632,7 +4783,7 @@ export type ManagementProcedures = {
     output: {
       items: Array<{
         id: string;
-        role: "system" | "user" | "assistant" | "trigger";
+        role: "system" | "user" | "assistant" | "event";
         text: string | null;
         content: Record<string, unknown>;
         ordinal: number;
@@ -5221,7 +5372,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents a tool reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it, or while a new reader could not reach what it references, fill the variables it reads, or fit it in its pin budget. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents a tool reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it, or while a new reader could not reach what it references, fill the variables it reads, or fit it in its pin budget. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "tools.setAudience": {
     input: {
       id: string;
@@ -5353,67 +5504,64 @@ export type ManagementProcedures = {
       name: string;
     };
   };
-  /** Approve or deny a tool call a firing parked on; the run resumes and the outcome comes back. Refused as `not_published` while the firing's trigger is disabled. */
-  "triggers.answerFiring": {
+  /** Approve or deny a tool call a trigger's run waits on; the run resumes and comes back as a fire's does. Refused as `not_parked` when the run no longer waits on that call. */
+  "triggers.answerRun": {
     input: {
-      id: string;
-      agentId?: string;
-      firingId: string;
+      runId: string;
       toolCallId: string;
       approved: boolean;
     };
     output: {
-      status: number;
-      firingId: string;
-      outcome: "started";
-      threadId: string;
+      inputId: string;
+      state: "started";
       runId: string;
-    } | {
-      status: number;
-      firingId: string;
-      outcome: "awaiting_approval";
       threadId: string;
-      runId: string;
-      approvals: Array<{
-        toolCallId: string;
-        toolName: string;
-        input: unknown;
+    } | {
+      state: "rejected";
+      issues: Array<{
+        path: string;
+        message: string;
       }>;
     } | {
-      status: number;
-      firingId: string;
-      outcome: "completed";
-      threadId: string;
-      runId: string;
-      output: unknown;
+      inputId: string;
+      state: "waiting";
+      delivery: "prompt" | "steer" | "followUp" | "answer" | "note";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "failed";
-      threadId: string;
-      runId: string;
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
+      inputId: string | null;
+      state: "refused";
+      reason: "busy" | "approval_pending" | "conflict" | "rate_limited" | "budget" | "full" | "not_waiting";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited";
-      threadId: string | null;
+      inputId: string;
+      state: "cancelled";
+      reason: "stopped";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "rejected";
-      issues: Array<{
-        path: string;
-        message: string;
+      id: string;
+      threadId: string | null;
+      inputId: string | null;
+      kind: "turn" | "subagent" | "tool";
+      subagentRunId: string | null;
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
       }>;
+      createdAt: string;
+      finishedAt: string | null;
     };
   };
-  /** Create a trigger (a named entry point external systems fire on an agent) with an audience ({ kind: "all" }, { kind: "server", serverId }, or { kind: "agents", agentIds }), fired on any agent in it. The draft has no instructions yet; fill them with update before publishing. */
+  /** Create a trigger (a named entry point fired on an agent) with an audience ({ kind: "all" }, { kind: "server", serverId }, or { kind: "agents", agentIds }), fired on any agent in it. With a `schedule` ({ cron, timeZone }: a five-field cron and an IANA zone) Cortex fires it itself and it has no fire secret; null makes a webhook a caller fires with the secret answered once. Which of the two is fixed for good. The draft has no instructions yet; fill them with update before publishing. */
   "triggers.create": {
     input: {
       /** A name: lowercase letters, digits, and single hyphens. */
       name: string;
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
       displayName: Partial<Record<"en" | "ar", string>>;
       audience: {
         kind: "all";
@@ -5428,7 +5576,7 @@ export type ManagementProcedures = {
     output: {
       id: string;
       name: string;
-      rawSecret: string;
+      rawSecret: string | null;
     };
   };
   /** Delete a trigger. */
@@ -5440,7 +5588,7 @@ export type ManagementProcedures = {
       id: string;
     };
   };
-  /** Fire a trigger with a test payload on one of its agents and return the outcome. Refused as `not_published` while the trigger is not published or is disabled. */
+  /** Fire a trigger with a test payload on one of its agents and return what became of it: its run once ended or waiting on a decision, the run it started when that outlasts the wait, its input while it waits on the thread or once refused, or the payload's issues. Refused as `not_published` while the trigger is not published or is disabled. */
   "triggers.fire": {
     input: {
       id: string;
@@ -5448,50 +5596,45 @@ export type ManagementProcedures = {
       payload: unknown;
     };
     output: {
-      status: number;
-      firingId: string;
-      outcome: "started";
-      threadId: string;
+      inputId: string;
+      state: "started";
       runId: string;
-    } | {
-      status: number;
-      firingId: string;
-      outcome: "awaiting_approval";
       threadId: string;
-      runId: string;
-      approvals: Array<{
-        toolCallId: string;
-        toolName: string;
-        input: unknown;
+    } | {
+      state: "rejected";
+      issues: Array<{
+        path: string;
+        message: string;
       }>;
     } | {
-      status: number;
-      firingId: string;
-      outcome: "completed";
-      threadId: string;
-      runId: string;
-      output: unknown;
+      inputId: string;
+      state: "waiting";
+      delivery: "prompt" | "steer" | "followUp" | "answer" | "note";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "failed";
-      threadId: string;
-      runId: string;
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
+      inputId: string | null;
+      state: "refused";
+      reason: "busy" | "approval_pending" | "conflict" | "rate_limited" | "budget" | "full" | "not_waiting";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited";
-      threadId: string | null;
+      inputId: string;
+      state: "cancelled";
+      reason: "stopped";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "rejected";
-      issues: Array<{
-        path: string;
-        message: string;
+      id: string;
+      threadId: string | null;
+      inputId: string | null;
+      kind: "turn" | "subagent" | "tool";
+      subagentRunId: string | null;
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
       }>;
+      createdAt: string;
+      finishedAt: string | null;
     };
   };
   /** One trigger by id with its draft instructions and payload schema. */
@@ -5508,13 +5651,22 @@ export type ManagementProcedures = {
       threadPolicy: {
         policy: "single";
       } | {
-        policy: "per-firing";
+        policy: "per-input";
       } | {
         policy: "ephemeral";
       } | {
         policy: "keyed";
         key: string;
+      } | {
+        policy: "thread";
+        key: string;
+        wake: boolean;
       };
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
+      whileBusy: "refuse" | "queue" | "steer";
       budgetPerDay: number | null;
       disableAfterFailures: number;
       secretPrefix: string;
@@ -5600,13 +5752,21 @@ export type ManagementProcedures = {
         threadPolicy: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        schedule: {
+          cron: string;
+          timeZone: string;
+        } | null;
         status: "draft" | "published" | "disabled";
         secretPrefix: string;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -5715,7 +5875,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Update a trigger's draft. Saved as a draft; call the entity's publish procedure to make it live. `displayName`, `credentialName`, `fireCredentialName` and the model pick are the exceptions: they apply without a publish, the display name at once, the fire credential from the next firing and the others from each agent's next turn. Giving the run a different `credentialName` needs `secrets:write`, since tools forwarding the run token send its value upstream. The model pick (`modelProvider` with one of its `modelName`s and optionally a `modelEffort`, all null to run on each agent's own) is refused as `model_not_offered` when the provider does not list the model or the effort, or an effort is picked without a model. `fireCredentialName` names a static credential whose value callers present to fire, shared by every trigger naming it; that credential and its secret may serve nothing else. Clearing it leaves the trigger shut until `triggers.rotateSecret` mints a secret. */
+  /** Update a trigger's draft. Saved as a draft; call the entity's publish procedure to make it live. `displayName`, `credentialName`, `fireCredentialName` and the model pick are the exceptions: they apply without a publish, the display name at once, the fire credential from the next fire and the others from each agent's next turn. Giving the run a different `credentialName` needs `secrets:write`, since tools forwarding the run token send its value upstream. The model pick (`modelProvider` with one of its `modelName`s and optionally a `modelEffort`, all null to run on each agent's own) is refused as `model_not_offered` when the provider does not list the model or the effort, or an effort is picked without a model. `fireCredentialName` names a static credential whose value callers present to fire, shared by every trigger naming it; that credential and its secret may serve nothing else. Clearing it leaves the trigger shut until `triggers.rotateSecret` mints a secret. */
   "triggers.update": {
     input: {
       description: string;
@@ -5725,13 +5885,22 @@ export type ManagementProcedures = {
       threadPolicy: {
         policy: "single";
       } | {
-        policy: "per-firing";
+        policy: "per-input";
       } | {
         policy: "ephemeral";
       } | {
         policy: "keyed";
         key: string;
+      } | {
+        policy: "thread";
+        key: string;
+        wake: boolean;
       };
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
+      whileBusy: "refuse" | "queue" | "steer";
       budgetPerDay: number | null;
       disableAfterFailures: number;
       id: string;
@@ -5876,7 +6045,7 @@ export type ManagementProcedures = {
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
       description: string;
-      event: "approval_requested";
+      event: "run_waiting" | "run_finished";
       url: string;
       headers: Array<{
         header: string;
@@ -5928,7 +6097,7 @@ export type ManagementProcedures = {
       items: Array<{
         id: string;
         name: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         enabled: boolean;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -5969,10 +6138,9 @@ export type ManagementProcedures = {
         id: string;
         serverId: string | null;
         agentId: string | null;
-        event: "approval_requested";
-        threadId: string;
+        event: "run_waiting" | "run_finished";
+        threadId: string | null;
         runId: string;
-        firingId: string | null;
         attempt: number;
         status: "delivered" | "failed";
         httpStatus: number | null;
@@ -6046,7 +6214,7 @@ export type ManagementProcedures = {
   "webhooks.update": {
     input: {
       description: string;
-      event: "approval_requested";
+      event: "run_waiting" | "run_finished";
       url: string;
       headers: Array<{
         header: string;