@m6d/cortex-cli 0.22.0 → 0.23.0

package/src/contracts/management/procedures.generated.ts

@@ -277,16 +277,16 @@ export const managementProcedureKinds = {
   "observability.getExecution": "query",
   "observability.getExecutionSummary": "query",
   "observability.getRetrievalQuality": "query",
-  "observability.getTriggerFiring": "query",
+  "observability.getRun": "query",
   "observability.getUsage": "query",
   "observability.listDatasetReads": "query",
   "observability.listExecutions": "query",
+  "observability.listRuns": "query",
   "observability.listSchemaDrifts": "query",
   "observability.listSkillLoads": "query",
   "observability.listSkillMisses": "query",
   "observability.listSkillUsage": "query",
   "observability.listToolHealth": "query",
-  "observability.listTriggerFirings": "query",
   "observability.unhealthyToolIds": "query",
   "observability.unusedSkillIds": "query",
   "observability.updateSchemaDrift": "mutation",
@@ -352,7 +352,7 @@ export const managementProcedureKinds = {
   "tools.test": "mutation",
   "tools.toggle": "mutation",
   "tools.update": "mutation",
-  "triggers.answerFiring": "mutation",
+  "triggers.answerRun": "mutation",
   "triggers.create": "mutation",
   "triggers.delete": "mutation",
   "triggers.fire": "mutation",
@@ -397,7 +397,7 @@ export type ManagementProcedures = {
       updatedAt: string;
     };
   };
-  /** Create an agent on a registered server, or on none (`serverId` null), fixed for good either way. An agent with no server has no native tools, no server variables and no server auth, and publishes only on a chat model of its own. The draft has no prompt yet; save one with agents.savePrompt before publishing. */
+  /** Create an agent on a registered server, or on none (`serverId` null), fixed for good either way. An agent with no server has no native tools, no server variables and no server auth, and publishes only on a chat model of its own. The draft has no prompt yet; save one with agents.savePrompt before publishing. Refused as `agent_limit_reached` once the license's agent count is reached. */
   "agents.create": {
     input: {
       /** A name: lowercase letters, digits, and single hyphens. */
@@ -416,12 +416,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -461,12 +464,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -518,12 +524,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -684,12 +693,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -718,11 +730,14 @@ export type ManagementProcedures = {
       ragEnabled?: boolean;
       toolRegistryEnabled?: boolean;
       serviceRegistryEnabled?: boolean;
+      subagentsEnabled?: boolean;
+      checkBacksEnabled?: boolean;
       attachmentsEnabled?: boolean;
       fetchImageHostnames?: Array<string>;
       locationPicker?: boolean;
       media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-      messageTrigger?: boolean;
+      messages?: boolean;
+      whileBusy?: "refuse" | "queue" | "steer";
       defaultLocale?: "en" | "ar";
       context?: {
         maxContextTokens: number;
@@ -794,12 +809,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -839,12 +857,15 @@ export type ManagementProcedures = {
       displayName: Partial<Record<"en" | "ar", string>>;
       promptDraft: string;
       ragEnabled: boolean;
+      subagentsEnabled: boolean;
+      checkBacksEnabled: boolean;
       toolRegistryEnabled: boolean;
       serviceRegistryEnabled: boolean;
       attachmentsEnabled: boolean;
       fetchImageHostnames: string | number | boolean | null | Record<string, unknown> | Array<unknown>;
       locationPicker: boolean;
-      messageTrigger: boolean;
+      messages: boolean;
+      whileBusy: "refuse" | "queue" | "steer";
       media: Array<"mermaid" | "vega-lite" | "map" | "report">;
       suggestions: Record<"en" | "ar", Array<{
         title: string;
@@ -1468,7 +1489,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents a dataset host reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents a dataset host reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "datasetHosts.setAudience": {
     input: {
       id: string;
@@ -1810,11 +1831,14 @@ export type ManagementProcedures = {
           ragEnabled?: boolean;
           toolRegistryEnabled?: boolean;
           serviceRegistryEnabled?: boolean;
+          subagentsEnabled?: boolean;
+          checkBacksEnabled?: boolean;
           attachmentsEnabled?: boolean;
           fetchImageHostnames?: Array<string>;
           locationPicker?: boolean;
           media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-          messageTrigger?: boolean;
+          messages?: boolean;
+          whileBusy?: "refuse" | "queue" | "steer";
           defaultLocale?: "en" | "ar";
           context?: {
             maxContextTokens?: number;
@@ -2136,13 +2160,18 @@ export type ManagementProcedures = {
         threadPolicy?: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        whileBusy?: "refuse" | "queue" | "steer";
         budgetPerDay?: number;
         disableAfterFailures?: number;
         credential?: string;
@@ -2152,12 +2181,16 @@ export type ManagementProcedures = {
           model: string;
           effort?: string;
         };
+        schedule?: {
+          cron: string;
+          timeZone: string;
+        };
         audience: "all" | {
           server: string;
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "budgetPerDay" | "disableAfterFailures" | "model">;
+        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "whileBusy" | "budgetPerDay" | "disableAfterFailures" | "model" | "schedule">;
       }>;
       datasetHosts?: Array<{
         name: string;
@@ -2235,7 +2268,7 @@ export type ManagementProcedures = {
         name: string;
         displayName?: Partial<Record<"en" | "ar", string>>;
         description?: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         headers?: Array<{
           header: string;
@@ -2350,11 +2383,14 @@ export type ManagementProcedures = {
           ragEnabled?: boolean;
           toolRegistryEnabled?: boolean;
           serviceRegistryEnabled?: boolean;
+          subagentsEnabled?: boolean;
+          checkBacksEnabled?: boolean;
           attachmentsEnabled?: boolean;
           fetchImageHostnames?: Array<string>;
           locationPicker?: boolean;
           media?: Array<"mermaid" | "vega-lite" | "map" | "report">;
-          messageTrigger?: boolean;
+          messages?: boolean;
+          whileBusy?: "refuse" | "queue" | "steer";
           defaultLocale?: "en" | "ar";
           context?: {
             maxContextTokens?: number;
@@ -2676,13 +2712,18 @@ export type ManagementProcedures = {
         threadPolicy?: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        whileBusy?: "refuse" | "queue" | "steer";
         budgetPerDay?: number;
         disableAfterFailures?: number;
         credential?: string;
@@ -2692,12 +2733,16 @@ export type ManagementProcedures = {
           model: string;
           effort?: string;
         };
+        schedule?: {
+          cron: string;
+          timeZone: string;
+        };
         audience: "all" | {
           server: string;
         } | {
           agents: Array<string>;
         };
-        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "budgetPerDay" | "disableAfterFailures" | "model">;
+        overridable?: Array<"displayName" | "description" | "instructions" | "threadPolicy" | "whileBusy" | "budgetPerDay" | "disableAfterFailures" | "model" | "schedule">;
       }>;
       datasetHosts?: Array<{
         name: string;
@@ -2775,7 +2820,7 @@ export type ManagementProcedures = {
         name: string;
         displayName?: Partial<Record<"en" | "ar", string>>;
         description?: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         headers?: Array<{
           header: string;
@@ -3047,7 +3092,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents an MCP server reaches: every agent, one server's, or a list. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents an MCP server reaches: every agent, one server's, or a list. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "mcpServers.setAudience": {
     input: {
       id: string;
@@ -3274,6 +3319,7 @@ export type ManagementProcedures = {
         displayName: Partial<Record<"en" | "ar", string>>;
       };
       triggerName: string | null;
+      delegated: "queued" | "run" | "schedule" | "trigger" | null;
       threadId: string | null;
       threadTitle: string | null;
       input: unknown;
@@ -3340,18 +3386,20 @@ export type ManagementProcedures = {
       }>;
     };
   };
-  /** One trigger firing by id with its outcome and output, and the tool calls it waits on when it awaits approval. */
-  "observability.getTriggerFiring": {
+  /** One run by id with what it answered with, and the tool calls it waits on while it is waiting. */
+  "observability.getRun": {
     input: {
       id: string;
     };
     output: {
       id: string;
-      triggerName: string;
-      threadId: string | null;
-      outcome: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
-      output: unknown;
+      kind: "turn" | "subagent" | "tool";
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      createdAt: string;
+      finishedAt: string | null;
+      source: "user" | "trigger" | "schedule" | "run" | null;
+      triggerName: string | null;
       server: {
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -3360,17 +3408,15 @@ export type ManagementProcedures = {
         name: string;
         displayName: Partial<Record<"en" | "ar", string>>;
       };
+      threadId: string | null;
       threadTitle: string | null;
-      createdAt: string;
-      finishedAt: string | null;
-      triggerId: string | null;
-      agentId: string;
-      approvals: Array<{
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
         toolCallId: string;
         toolName: string;
         input: unknown;
       }>;
-      decider: "operator" | "chat" | "disabled";
     };
   };
   /** Token and message usage of the agents the caller may read: totals and per user, server, agent and day, optionally for one agent within a day range. */
@@ -3506,6 +3552,47 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
+  /** Runs on your agents, chat and trigger alike, newest first, with how they ended and their thread, with pagination and agent, source, status, trigger name, open-wait kind, and day-range filters. */
+  "observability.listRuns": {
+    input: {
+      pageIndex?: number;
+      pageSize?: number;
+      q?: string;
+      agentId?: string;
+      source?: "user" | "trigger" | "schedule" | "run";
+      status?: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      triggerName?: string;
+      waitKind?: "approval" | "client_tool";
+      dateFrom?: string;
+      dateTo?: string;
+    };
+    output: {
+      items: Array<{
+        id: string;
+        kind: "turn" | "subagent" | "tool";
+        status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+        reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+        createdAt: string;
+        finishedAt: string | null;
+        source: "user" | "trigger" | "schedule" | "run" | null;
+        triggerName: string | null;
+        server: {
+          name: string;
+          displayName: Partial<Record<"en" | "ar", string>>;
+        } | null;
+        agent: {
+          name: string;
+          displayName: Partial<Record<"en" | "ar", string>>;
+        };
+        threadId: string | null;
+        threadTitle: string | null;
+      }>;
+      /** Every row the caller may see, ignoring the search and filters. */
+      count: number;
+      /** The rows matching the search and filters, over all pages: the total to report. */
+      filteredCount: number;
+    };
+  };
   /** Upstream responses that do not match a tool's declared schema, with pagination. */
   "observability.listSchemaDrifts": {
     input: {
@@ -3627,44 +3714,6 @@ export type ManagementProcedures = {
       filteredCount: number;
     };
   };
-  /** Trigger firings with their outcome, with pagination and agent, trigger, outcome, and day-range filters. */
-  "observability.listTriggerFirings": {
-    input: {
-      pageIndex?: number;
-      pageSize?: number;
-      q?: string;
-      agentId?: string;
-      triggerName?: string;
-      outcome?: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-      dateFrom?: string;
-      dateTo?: string;
-    };
-    output: {
-      items: Array<{
-        id: string;
-        triggerName: string;
-        threadId: string | null;
-        outcome: "started" | "awaiting_approval" | "completed" | "failed" | "rejected" | "dropped";
-        reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
-        output: unknown;
-        server: {
-          name: string;
-          displayName: Partial<Record<"en" | "ar", string>>;
-        } | null;
-        agent: {
-          name: string;
-          displayName: Partial<Record<"en" | "ar", string>>;
-        };
-        threadTitle: string | null;
-        createdAt: string;
-        finishedAt: string | null;
-      }>;
-      /** Every row the caller may see, ignoring the search and filters. */
-      count: number;
-      /** The rows matching the search and filters, over all pages: the total to report. */
-      filteredCount: number;
-    };
-  };
   /** Ids of tools whose recent executions exceed the failure threshold. */
   "observability.unhealthyToolIds": {
     input: undefined;
@@ -3936,7 +3985,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -3982,7 +4032,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -4015,6 +4066,7 @@ export type ManagementProcedures = {
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
       createdAt: string;
       threadCount: number;
+      delegation: boolean;
       modelProvider: string | null;
       modelName: string | null;
       modelEffort: string | null;
@@ -4122,7 +4174,8 @@ export type ManagementProcedures = {
           requiresApproval?: boolean;
         }>;
         verify: boolean;
-        events: Array<"approval_requested">;
+        delegation: boolean;
+        events: Array<"run_waiting" | "run_finished">;
       } | null;
       syncedAt: string | null;
       syncError: "egress_blocked" | "timeout" | "upstream_failed" | "response_too_large" | "upstream_status" | "invalid_manifest" | "key_unavailable" | "name_taken" | "credential_in_name" | "variable_in_use" | "verify_in_use" | "still_referenced" | "unexpected" | null;
@@ -4650,7 +4703,7 @@ export type ManagementProcedures = {
       pageSize?: number;
       q?: string;
       serverId?: string;
-      agentName?: string;
+      agentId?: string;
       userId?: string;
       dateFrom?: string;
       dateTo?: string;
@@ -4730,7 +4783,7 @@ export type ManagementProcedures = {
     output: {
       items: Array<{
         id: string;
-        role: "system" | "user" | "assistant" | "trigger";
+        role: "system" | "user" | "assistant" | "event";
         text: string | null;
         content: Record<string, unknown>;
         ordinal: number;
@@ -5319,7 +5372,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Change which agents a tool reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it, or while a new reader could not reach what it references, fill the variables it reads, or fit it in its pin budget. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a firing that token is the trigger's stored credential. */
+  /** Change which agents a tool reaches: every agent, one server's, or a list. Refused while a reader it would lose still references it, or while a new reader could not reach what it references, fill the variables it reads, or fit it in its pin budget. Reaching new agents needs `secrets:write` too while it forwards the run token (`secret_binding_forbidden`): in a trigger run that token is the trigger's stored credential. */
   "tools.setAudience": {
     input: {
       id: string;
@@ -5451,67 +5504,64 @@ export type ManagementProcedures = {
       name: string;
     };
   };
-  /** Approve or deny a tool call a firing parked on; the run resumes and the outcome comes back. Refused as `not_published` while the firing's trigger is disabled. */
-  "triggers.answerFiring": {
+  /** Approve or deny a tool call a trigger's run waits on; the run resumes and comes back as a fire's does. Refused as `not_parked` when the run no longer waits on that call. */
+  "triggers.answerRun": {
     input: {
-      id: string;
-      agentId?: string;
-      firingId: string;
+      runId: string;
       toolCallId: string;
       approved: boolean;
     };
     output: {
-      status: number;
-      firingId: string;
-      outcome: "started";
-      threadId: string;
+      inputId: string;
+      state: "started";
       runId: string;
-    } | {
-      status: number;
-      firingId: string;
-      outcome: "awaiting_approval";
       threadId: string;
-      runId: string;
-      approvals: Array<{
-        toolCallId: string;
-        toolName: string;
-        input: unknown;
+    } | {
+      state: "rejected";
+      issues: Array<{
+        path: string;
+        message: string;
       }>;
     } | {
-      status: number;
-      firingId: string;
-      outcome: "completed";
-      threadId: string;
-      runId: string;
-      output: unknown;
+      inputId: string;
+      state: "waiting";
+      delivery: "prompt" | "steer" | "followUp" | "answer" | "note";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "failed";
-      threadId: string;
-      runId: string;
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
+      inputId: string | null;
+      state: "refused";
+      reason: "busy" | "approval_pending" | "conflict" | "rate_limited" | "budget" | "full" | "not_waiting";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited";
-      threadId: string | null;
+      inputId: string;
+      state: "cancelled";
+      reason: "stopped";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "rejected";
-      issues: Array<{
-        path: string;
-        message: string;
+      id: string;
+      threadId: string | null;
+      inputId: string | null;
+      kind: "turn" | "subagent" | "tool";
+      subagentRunId: string | null;
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
       }>;
+      createdAt: string;
+      finishedAt: string | null;
     };
   };
-  /** Create a trigger (a named entry point external systems fire on an agent) with an audience ({ kind: "all" }, { kind: "server", serverId }, or { kind: "agents", agentIds }), fired on any agent in it. The draft has no instructions yet; fill them with update before publishing. */
+  /** Create a trigger (a named entry point fired on an agent) with an audience ({ kind: "all" }, { kind: "server", serverId }, or { kind: "agents", agentIds }), fired on any agent in it. With a `schedule` ({ cron, timeZone }: a five-field cron and an IANA zone) Cortex fires it itself and it has no fire secret; null makes a webhook a caller fires with the secret answered once. Which of the two is fixed for good. The draft has no instructions yet; fill them with update before publishing. */
   "triggers.create": {
     input: {
       /** A name: lowercase letters, digits, and single hyphens. */
       name: string;
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
       displayName: Partial<Record<"en" | "ar", string>>;
       audience: {
         kind: "all";
@@ -5526,7 +5576,7 @@ export type ManagementProcedures = {
     output: {
       id: string;
       name: string;
-      rawSecret: string;
+      rawSecret: string | null;
     };
   };
   /** Delete a trigger. */
@@ -5538,7 +5588,7 @@ export type ManagementProcedures = {
       id: string;
     };
   };
-  /** Fire a trigger with a test payload on one of its agents and return the outcome. Refused as `not_published` while the trigger is not published or is disabled. */
+  /** Fire a trigger with a test payload on one of its agents and return what became of it: its run once ended or waiting on a decision, the run it started when that outlasts the wait, its input while it waits on the thread or once refused, or the payload's issues. Refused as `not_published` while the trigger is not published or is disabled. */
   "triggers.fire": {
     input: {
       id: string;
@@ -5546,50 +5596,45 @@ export type ManagementProcedures = {
       payload: unknown;
     };
     output: {
-      status: number;
-      firingId: string;
-      outcome: "started";
-      threadId: string;
+      inputId: string;
+      state: "started";
       runId: string;
-    } | {
-      status: number;
-      firingId: string;
-      outcome: "awaiting_approval";
       threadId: string;
-      runId: string;
-      approvals: Array<{
-        toolCallId: string;
-        toolName: string;
-        input: unknown;
+    } | {
+      state: "rejected";
+      issues: Array<{
+        path: string;
+        message: string;
       }>;
     } | {
-      status: number;
-      firingId: string;
-      outcome: "completed";
-      threadId: string;
-      runId: string;
-      output: unknown;
+      inputId: string;
+      state: "waiting";
+      delivery: "prompt" | "steer" | "followUp" | "answer" | "note";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "failed";
-      threadId: string;
-      runId: string;
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited" | "invalid_payload" | "missing_thread_key" | "no_turn" | "no_output" | "invalid_output" | null;
+      inputId: string | null;
+      state: "refused";
+      reason: "busy" | "approval_pending" | "conflict" | "rate_limited" | "budget" | "full" | "not_waiting";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "dropped";
-      reason: "busy" | "approval_pending" | "budget" | "rate_limited";
-      threadId: string | null;
+      inputId: string;
+      state: "cancelled";
+      reason: "stopped";
     } | {
-      status: number;
-      firingId: string;
-      outcome: "rejected";
-      issues: Array<{
-        path: string;
-        message: string;
+      id: string;
+      threadId: string | null;
+      inputId: string | null;
+      kind: "turn" | "subagent" | "tool";
+      subagentRunId: string | null;
+      status: "running" | "waiting" | "completed" | "failed" | "cancelled";
+      reason: "no_output" | "invalid_output" | "stopped" | "cancelled" | "parent_cancelled" | "lost" | "timeout" | null;
+      result: unknown;
+      waits: Array<{
+        kind: "approval" | "client_tool";
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
       }>;
+      createdAt: string;
+      finishedAt: string | null;
     };
   };
   /** One trigger by id with its draft instructions and payload schema. */
@@ -5606,13 +5651,22 @@ export type ManagementProcedures = {
       threadPolicy: {
         policy: "single";
       } | {
-        policy: "per-firing";
+        policy: "per-input";
       } | {
         policy: "ephemeral";
       } | {
         policy: "keyed";
         key: string;
+      } | {
+        policy: "thread";
+        key: string;
+        wake: boolean;
       };
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
+      whileBusy: "refuse" | "queue" | "steer";
       budgetPerDay: number | null;
       disableAfterFailures: number;
       secretPrefix: string;
@@ -5698,13 +5752,21 @@ export type ManagementProcedures = {
         threadPolicy: {
           policy: "single";
         } | {
-          policy: "per-firing";
+          policy: "per-input";
         } | {
           policy: "ephemeral";
         } | {
           policy: "keyed";
           key: string;
+        } | {
+          policy: "thread";
+          key: string;
+          wake: boolean;
         };
+        schedule: {
+          cron: string;
+          timeZone: string;
+        } | null;
         status: "draft" | "published" | "disabled";
         secretPrefix: string;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -5813,7 +5875,7 @@ export type ManagementProcedures = {
       unchanged: boolean;
     };
   };
-  /** Update a trigger's draft. Saved as a draft; call the entity's publish procedure to make it live. `displayName`, `credentialName`, `fireCredentialName` and the model pick are the exceptions: they apply without a publish, the display name at once, the fire credential from the next firing and the others from each agent's next turn. Giving the run a different `credentialName` needs `secrets:write`, since tools forwarding the run token send its value upstream. The model pick (`modelProvider` with one of its `modelName`s and optionally a `modelEffort`, all null to run on each agent's own) is refused as `model_not_offered` when the provider does not list the model or the effort, or an effort is picked without a model. `fireCredentialName` names a static credential whose value callers present to fire, shared by every trigger naming it; that credential and its secret may serve nothing else. Clearing it leaves the trigger shut until `triggers.rotateSecret` mints a secret. */
+  /** Update a trigger's draft. Saved as a draft; call the entity's publish procedure to make it live. `displayName`, `credentialName`, `fireCredentialName` and the model pick are the exceptions: they apply without a publish, the display name at once, the fire credential from the next fire and the others from each agent's next turn. Giving the run a different `credentialName` needs `secrets:write`, since tools forwarding the run token send its value upstream. The model pick (`modelProvider` with one of its `modelName`s and optionally a `modelEffort`, all null to run on each agent's own) is refused as `model_not_offered` when the provider does not list the model or the effort, or an effort is picked without a model. `fireCredentialName` names a static credential whose value callers present to fire, shared by every trigger naming it; that credential and its secret may serve nothing else. Clearing it leaves the trigger shut until `triggers.rotateSecret` mints a secret. */
   "triggers.update": {
     input: {
       description: string;
@@ -5823,13 +5885,22 @@ export type ManagementProcedures = {
       threadPolicy: {
         policy: "single";
       } | {
-        policy: "per-firing";
+        policy: "per-input";
       } | {
         policy: "ephemeral";
       } | {
         policy: "keyed";
         key: string;
+      } | {
+        policy: "thread";
+        key: string;
+        wake: boolean;
       };
+      schedule: {
+        cron: string;
+        timeZone: string;
+      } | null;
+      whileBusy: "refuse" | "queue" | "steer";
       budgetPerDay: number | null;
       disableAfterFailures: number;
       id: string;
@@ -5974,7 +6045,7 @@ export type ManagementProcedures = {
       name: string;
       displayName: Partial<Record<"en" | "ar", string>>;
       description: string;
-      event: "approval_requested";
+      event: "run_waiting" | "run_finished";
       url: string;
       headers: Array<{
         header: string;
@@ -6026,7 +6097,7 @@ export type ManagementProcedures = {
       items: Array<{
         id: string;
         name: string;
-        event: "approval_requested";
+        event: "run_waiting" | "run_finished";
         url: string;
         enabled: boolean;
         displayName: Partial<Record<"en" | "ar", string>>;
@@ -6067,10 +6138,9 @@ export type ManagementProcedures = {
         id: string;
         serverId: string | null;
         agentId: string | null;
-        event: "approval_requested";
-        threadId: string;
+        event: "run_waiting" | "run_finished";
+        threadId: string | null;
         runId: string;
-        firingId: string | null;
         attempt: number;
         status: "delivered" | "failed";
         httpStatus: number | null;
@@ -6144,7 +6214,7 @@ export type ManagementProcedures = {
   "webhooks.update": {
     input: {
       description: string;
-      event: "approval_requested";
+      event: "run_waiting" | "run_finished";
       url: string;
       headers: Array<{
         header: string;