@naturali/sdk 0.218.1 → 0.219.1

package/dist/index.cjs

@@ -1266,7 +1266,7 @@ var Agents = class {
 	/**
 	* Create an agent
 	*
-	* Creates a new agent bound to an AI provider.
+	* Creates a new agent bound to an AI provider. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static createAgent(options) {
 		return (options.client ?? client).post({
@@ -1305,7 +1305,7 @@ var Agents = class {
 	/**
 	* Partially update an agent
 	*
-	* Partially updates an existing agent. Identical to PUT — both perform partial updates.
+	* Partially updates an existing agent. Identical to PUT — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static patchAgent(options) {
 		return (options.client ?? client).patch({
@@ -1320,7 +1320,7 @@ var Agents = class {
 	/**
 	* Update an agent
 	*
-	* Updates an existing agent. Identical to PATCH — both perform partial updates.
+	* Updates an existing agent. Identical to PATCH — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static updateAgent(options) {
 		return (options.client ?? client).put({
@@ -1474,8 +1474,14 @@ var AiProviders = class {
 	*
 	* Creates a new LLM provider configuration.
 	*
-	* A `bedrock` or `vertex` record must carry a credential of its own — a
-	* linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+	* A provider's credential is its linked `secret_id`; `config.apiKey` is
+	* refused with `400 VALIDATION_FAILED`.
+	*
+	* A record with both `base_url` and `secret_id` sends the secret to that
+	* URL, so creating one also needs `secrets:UseSecret` on the secret, else
+	* `403`.
+	*
+	* A `bedrock` or `vertex` record must link one. Without it the provider
 	* SDK signs with the server's own credentials (the AWS default credential
 	* chain, Google Application Default Credentials), which is refused with
 	* `400 VALIDATION_FAILED` unless the deployment allows it.
@@ -1519,7 +1525,7 @@ var AiProviders = class {
 	/**
 	* Update an AI provider
 	*
-	* Updates an AI provider configuration
+	* Updates an AI provider configuration. Setting `base_url` or `secret_id` so the record holds both also needs `secrets:UseSecret` on the secret, else `403`.
 	*/
 	static updateAiProvider(options) {
 		return (options.client ?? client).patch({
@@ -4545,7 +4551,7 @@ var Playbooks = class {
 	*
 	* Creates a playbook at version 1. The definition is refused with `400 PLAYBOOK_VALIDATION_FAILED` when it holds a duplicate node or input, an input reading a missing node or field, an `execute` node without an executor or another kind with one, transformations on a non-final node, or a cycle; `meta.problems` lists every one. A duplicate `name` in the project is `409 NAME_CONFLICT`.
 	*
-	* The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
+	* The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). An executor cannot be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), nor a transformation's tool a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
 	*/
 	static createPlaybook(options) {
 		return (options.client ?? client).post({
@@ -4562,7 +4568,7 @@ var Playbooks = class {
 	*
 	* Answers what a create or update would be told about a definition, without writing: `valid`, and every graph problem it holds. A definition whose shape cannot be read is `400 VALIDATION_FAILED`, as on a write.
 	*
-	* With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
+	* With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`) and not be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), and each transformation's tool must not be a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
 	*/
 	static validatePlaybook(options) {
 		return (options.client ?? client).post({
@@ -4601,7 +4607,7 @@ var Playbooks = class {
 	*
 	* Updates any of `name`, `description` and `definition`. Only a change to `definition` archives a new version; a rename or a rewrite of the definition the playbook already holds leaves `version` where it is. A case keeps the version it was created on.
 	*
-	* A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
+	* A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `EXECUTOR_TOOL_UNSUPPORTED` for a `client` tool executor, `TRANSFORMATION_TOOL_UNSUPPORTED` for a `client` or `mcp` transformation tool, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
 	*/
 	static updatePlaybook(options) {
 		return (options.client ?? client).patch({
@@ -5847,7 +5853,7 @@ var Triggers = class {
 	/**
 	* Create a trigger
 	*
-	* Creates a new trigger for a project
+	* Creates a new trigger for a project. A `{{secret:...}}` reference in `tool_context` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static createTrigger(options) {
 		return (options.client ?? client).post({
@@ -5895,7 +5901,7 @@ var Triggers = class {
 	/**
 	* Update a trigger
 	*
-	* Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had.
+	* Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had. A `{{secret:...}}` reference in a written `tool_context`, or in the stored one when the target changes, also needs `secrets:UseSecret` on that secret, else `403`.
 	*
 	*/
 	static updateTrigger(options) {

package/dist/index.d.cts

@@ -7149,9 +7149,9 @@ type NodeExecution = {
  */
 type RequiredAction = {
   /**
-   * Discriminator identifying the kind of pause. Open enum — new pause kinds may be added in minor releases; clients must tolerate unknown values.
+   * Discriminator identifying the kind of pause. Open enum — new pause kinds may be added in minor releases; clients must tolerate unknown values. `child_run` is a `loop` or `sub_orchestration` node whose child runs, listed in `context.orchestration_run_ids`, have not settled; their settle resumes it, and it accepts no human input.
    */
-  type: 'human_input' | 'webhook_receive' | 'approval' | 'paused';
+  type: 'human_input' | 'webhook_receive' | 'approval' | 'paused' | 'child_run';
   /**
    * The node the run is parked at. Absent for a `paused` action, which no node produced.
    */
@@ -7353,7 +7353,7 @@ type ValidatePlaybookRequest = {
 type PlaybookValidationResult = {
   valid: boolean;
   /**
-   * Every reason the definition cannot be stored: `DUPLICATE_NODE`, `DUPLICATE_INPUT`, `MISSING_NODE`, `UNKNOWN_FIELD`, `EXECUTOR_REQUIRED`, `EXECUTOR_FORBIDDEN`, `TRANSFORMATIONS_NOT_FINAL`, `DUPLICATE_TRANSFORMATION`, `CYCLE`, and, with `project_id`, `UNKNOWN_UPSTREAM`, `UPSTREAM_CYCLE`, `EXECUTOR_NOT_FOUND`, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE`. The same items a refused write lists under `meta.problems`.
+   * Every reason the definition cannot be stored: `DUPLICATE_NODE`, `DUPLICATE_INPUT`, `MISSING_NODE`, `UNKNOWN_FIELD`, `EXECUTOR_REQUIRED`, `EXECUTOR_FORBIDDEN`, `TRANSFORMATIONS_NOT_FINAL`, `DUPLICATE_TRANSFORMATION`, `CYCLE`, and, with `project_id`, `UNKNOWN_UPSTREAM`, `UPSTREAM_CYCLE`, `EXECUTOR_NOT_FOUND`, `EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`, `EXECUTOR_TOOL_UNSUPPORTED` or `TRANSFORMATION_TOOL_UNSUPPORTED`. The same items a refused write lists under `meta.problems`.
    */
   problems: Array<ValidationProblem>;
 };
@@ -12300,7 +12300,7 @@ type ListAiProvidersResponses = {
        */
       base_url?: string;
       /**
-       * Additional provider-specific configuration. Absent when the record sets none. A `config.apiKey` reads as `{"no_echo": true}`.
+       * Additional provider-specific configuration. Absent when the record sets none. Never carries a credential.
        */
       config?: {
         [key: string]: unknown;
@@ -12327,7 +12327,7 @@ type CreateAiProviderData = {
      */
     default_model: string;
     /**
-     * Secret ID containing API credentials. Required for `bedrock` and `vertex` unless `config.apiKey` carries one.
+     * Secret ID containing API credentials. Required for `bedrock` and `vertex`.
      */
     secret_id?: string;
     /**
@@ -12335,7 +12335,7 @@ type CreateAiProviderData = {
      */
     base_url?: string;
     /**
-     * Additional provider-specific configuration. `config.apiKey`, when set, must be a string; every read returns it as `{"no_echo": true}`.
+     * Additional provider-specific configuration. `apiKey` is refused: the credential goes in the linked secret.
      */
     config?: {
       [key: string]: unknown;
@@ -12511,7 +12511,7 @@ type GetAiProviderResponses = {
     secret_id?: string | null;
     base_url?: string;
     /**
-     * Additional provider-specific configuration. A `config.apiKey` reads as `{"no_echo": true}`.
+     * Additional provider-specific configuration. Never carries a credential.
      */
     config?: {
       [key: string]: unknown;
@@ -12532,7 +12532,7 @@ type UpdateAiProviderData = {
     secret_id?: string | null;
     base_url?: string;
     /**
-     * Replaces the whole configuration, so a `config.apiKey` the record keeps is sent again as a string; the masked `{"no_echo": true}` a read returns is refused.
+     * Replaces the whole configuration. `apiKey` is refused: the credential goes in the linked secret.
      */
     config?: {
       [key: string]: unknown;
@@ -16862,7 +16862,7 @@ type UpdateDocumentErrors = {
    */
   404: ErrorResponse;
   /**
-   * The document has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), or `path` is held by another file in the project (`NAME_CONFLICT`). Nothing is written.
+   * The document has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), `path` is held by another file in the project (`NAME_CONFLICT`), or new `content` would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -17311,7 +17311,7 @@ type RestoreDocumentVersionErrors = {
    */
   404: ErrorResponse;
   /**
-   * Another write took the document's version first (`VERSION_CONFLICT`, with `meta.current_version`), or the restored `path` is held by another file in the project (`NAME_CONFLICT`). Nothing is written.
+   * Another write took the document's version first (`VERSION_CONFLICT`, with `meta.current_version`), the restored `path` is held by another file in the project (`NAME_CONFLICT`), or the restored content would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -22433,7 +22433,7 @@ type UpdateMemoryErrors = {
    */
   404: ErrorResponse;
   /**
-   * The resource has moved past the version this write read (`VERSION_CONFLICT`): a stated `expected_version` or `If-Match` no longer matches, or a concurrent write took the version first. `meta.current_version` names the version in force. Nothing is written.
+   * The memory has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), or new `content` would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -32938,7 +32938,7 @@ export declare class Agents {
   /**
    * Create an agent
    *
-   * Creates a new agent bound to an AI provider.
+   * Creates a new agent bound to an AI provider. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static createAgent<ThrowOnError extends boolean = false>(options: Options<CreateAgentData, ThrowOnError>): RequestResult<CreateAgentResponses, CreateAgentErrors, ThrowOnError>;
   /**
@@ -32958,13 +32958,13 @@ export declare class Agents {
   /**
    * Partially update an agent
    *
-   * Partially updates an existing agent. Identical to PUT — both perform partial updates.
+   * Partially updates an existing agent. Identical to PUT — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static patchAgent<ThrowOnError extends boolean = false>(options: Options<PatchAgentData, ThrowOnError>): RequestResult<PatchAgentResponses, PatchAgentErrors, ThrowOnError>;
   /**
    * Update an agent
    *
-   * Updates an existing agent. Identical to PATCH — both perform partial updates.
+   * Updates an existing agent. Identical to PATCH — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static updateAgent<ThrowOnError extends boolean = false>(options: Options<UpdateAgentData, ThrowOnError>): RequestResult<UpdateAgentResponses, UpdateAgentErrors, ThrowOnError>;
   /**
@@ -33048,8 +33048,14 @@ export declare class AiProviders {
    *
    * Creates a new LLM provider configuration.
    *
-   * A `bedrock` or `vertex` record must carry a credential of its own — a
-   * linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+   * A provider's credential is its linked `secret_id`; `config.apiKey` is
+   * refused with `400 VALIDATION_FAILED`.
+   *
+   * A record with both `base_url` and `secret_id` sends the secret to that
+   * URL, so creating one also needs `secrets:UseSecret` on the secret, else
+   * `403`.
+   *
+   * A `bedrock` or `vertex` record must link one. Without it the provider
    * SDK signs with the server's own credentials (the AWS default credential
    * chain, Google Application Default Credentials), which is refused with
    * `400 VALIDATION_FAILED` unless the deployment allows it.
@@ -33074,7 +33080,7 @@ export declare class AiProviders {
   /**
    * Update an AI provider
    *
-   * Updates an AI provider configuration
+   * Updates an AI provider configuration. Setting `base_url` or `secret_id` so the record holds both also needs `secrets:UseSecret` on the secret, else `403`.
    */
   static updateAiProvider<ThrowOnError extends boolean = false>(options: Options<UpdateAiProviderData, ThrowOnError>): RequestResult<UpdateAiProviderResponses, UpdateAiProviderErrors, ThrowOnError>;
   /**
@@ -34634,7 +34640,7 @@ export declare class Playbooks {
    *
    * Creates a playbook at version 1. The definition is refused with `400 PLAYBOOK_VALIDATION_FAILED` when it holds a duplicate node or input, an input reading a missing node or field, an `execute` node without an executor or another kind with one, transformations on a non-final node, or a cycle; `meta.problems` lists every one. A duplicate `name` in the project is `409 NAME_CONFLICT`.
    *
-   * The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
+   * The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). An executor cannot be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), nor a transformation's tool a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
    */
   static createPlaybook<ThrowOnError extends boolean = false>(options: Options<CreatePlaybookData, ThrowOnError>): RequestResult<CreatePlaybookResponses, CreatePlaybookErrors, ThrowOnError>;
   /**
@@ -34642,7 +34648,7 @@ export declare class Playbooks {
    *
    * Answers what a create or update would be told about a definition, without writing: `valid`, and every graph problem it holds. A definition whose shape cannot be read is `400 VALIDATION_FAILED`, as on a write.
    *
-   * With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
+   * With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`) and not be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), and each transformation's tool must not be a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
    */
   static validatePlaybook<ThrowOnError extends boolean = false>(options: Options<ValidatePlaybookData, ThrowOnError>): RequestResult<ValidatePlaybookResponses, ValidatePlaybookErrors, ThrowOnError>;
   /**
@@ -34662,7 +34668,7 @@ export declare class Playbooks {
    *
    * Updates any of `name`, `description` and `definition`. Only a change to `definition` archives a new version; a rename or a rewrite of the definition the playbook already holds leaves `version` where it is. A case keeps the version it was created on.
    *
-   * A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
+   * A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `EXECUTOR_TOOL_UNSUPPORTED` for a `client` tool executor, `TRANSFORMATION_TOOL_UNSUPPORTED` for a `client` or `mcp` transformation tool, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
    */
   static updatePlaybook<ThrowOnError extends boolean = false>(options: Options<UpdatePlaybookData, ThrowOnError>): RequestResult<UpdatePlaybookResponses, UpdatePlaybookErrors, ThrowOnError>;
   /**
@@ -35318,7 +35324,7 @@ export declare class Triggers {
   /**
    * Create a trigger
    *
-   * Creates a new trigger for a project
+   * Creates a new trigger for a project. A `{{secret:...}}` reference in `tool_context` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static createTrigger<ThrowOnError extends boolean = false>(options: Options<CreateTriggerData, ThrowOnError>): RequestResult<CreateTriggerResponses, CreateTriggerErrors, ThrowOnError>;
   /**
@@ -35342,7 +35348,7 @@ export declare class Triggers {
   /**
    * Update a trigger
    *
-   * Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had.
+   * Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had. A `{{secret:...}}` reference in a written `tool_context`, or in the stored one when the target changes, also needs `secrets:UseSecret` on that secret, else `403`.
    *
    */
   static updateTrigger<ThrowOnError extends boolean = false>(options: Options<UpdateTriggerData, ThrowOnError>): RequestResult<UpdateTriggerResponses, UpdateTriggerErrors, ThrowOnError>;

package/dist/index.d.mts

@@ -7149,9 +7149,9 @@ type NodeExecution = {
  */
 type RequiredAction = {
   /**
-   * Discriminator identifying the kind of pause. Open enum — new pause kinds may be added in minor releases; clients must tolerate unknown values.
+   * Discriminator identifying the kind of pause. Open enum — new pause kinds may be added in minor releases; clients must tolerate unknown values. `child_run` is a `loop` or `sub_orchestration` node whose child runs, listed in `context.orchestration_run_ids`, have not settled; their settle resumes it, and it accepts no human input.
    */
-  type: 'human_input' | 'webhook_receive' | 'approval' | 'paused';
+  type: 'human_input' | 'webhook_receive' | 'approval' | 'paused' | 'child_run';
   /**
    * The node the run is parked at. Absent for a `paused` action, which no node produced.
    */
@@ -7353,7 +7353,7 @@ type ValidatePlaybookRequest = {
 type PlaybookValidationResult = {
   valid: boolean;
   /**
-   * Every reason the definition cannot be stored: `DUPLICATE_NODE`, `DUPLICATE_INPUT`, `MISSING_NODE`, `UNKNOWN_FIELD`, `EXECUTOR_REQUIRED`, `EXECUTOR_FORBIDDEN`, `TRANSFORMATIONS_NOT_FINAL`, `DUPLICATE_TRANSFORMATION`, `CYCLE`, and, with `project_id`, `UNKNOWN_UPSTREAM`, `UPSTREAM_CYCLE`, `EXECUTOR_NOT_FOUND`, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE`. The same items a refused write lists under `meta.problems`.
+   * Every reason the definition cannot be stored: `DUPLICATE_NODE`, `DUPLICATE_INPUT`, `MISSING_NODE`, `UNKNOWN_FIELD`, `EXECUTOR_REQUIRED`, `EXECUTOR_FORBIDDEN`, `TRANSFORMATIONS_NOT_FINAL`, `DUPLICATE_TRANSFORMATION`, `CYCLE`, and, with `project_id`, `UNKNOWN_UPSTREAM`, `UPSTREAM_CYCLE`, `EXECUTOR_NOT_FOUND`, `EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`, `EXECUTOR_TOOL_UNSUPPORTED` or `TRANSFORMATION_TOOL_UNSUPPORTED`. The same items a refused write lists under `meta.problems`.
    */
   problems: Array<ValidationProblem>;
 };
@@ -12300,7 +12300,7 @@ type ListAiProvidersResponses = {
        */
       base_url?: string;
       /**
-       * Additional provider-specific configuration. Absent when the record sets none. A `config.apiKey` reads as `{"no_echo": true}`.
+       * Additional provider-specific configuration. Absent when the record sets none. Never carries a credential.
        */
       config?: {
         [key: string]: unknown;
@@ -12327,7 +12327,7 @@ type CreateAiProviderData = {
      */
     default_model: string;
     /**
-     * Secret ID containing API credentials. Required for `bedrock` and `vertex` unless `config.apiKey` carries one.
+     * Secret ID containing API credentials. Required for `bedrock` and `vertex`.
      */
     secret_id?: string;
     /**
@@ -12335,7 +12335,7 @@ type CreateAiProviderData = {
      */
     base_url?: string;
     /**
-     * Additional provider-specific configuration. `config.apiKey`, when set, must be a string; every read returns it as `{"no_echo": true}`.
+     * Additional provider-specific configuration. `apiKey` is refused: the credential goes in the linked secret.
      */
     config?: {
       [key: string]: unknown;
@@ -12511,7 +12511,7 @@ type GetAiProviderResponses = {
     secret_id?: string | null;
     base_url?: string;
     /**
-     * Additional provider-specific configuration. A `config.apiKey` reads as `{"no_echo": true}`.
+     * Additional provider-specific configuration. Never carries a credential.
      */
     config?: {
       [key: string]: unknown;
@@ -12532,7 +12532,7 @@ type UpdateAiProviderData = {
     secret_id?: string | null;
     base_url?: string;
     /**
-     * Replaces the whole configuration, so a `config.apiKey` the record keeps is sent again as a string; the masked `{"no_echo": true}` a read returns is refused.
+     * Replaces the whole configuration. `apiKey` is refused: the credential goes in the linked secret.
      */
     config?: {
       [key: string]: unknown;
@@ -16862,7 +16862,7 @@ type UpdateDocumentErrors = {
    */
   404: ErrorResponse;
   /**
-   * The document has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), or `path` is held by another file in the project (`NAME_CONFLICT`). Nothing is written.
+   * The document has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), `path` is held by another file in the project (`NAME_CONFLICT`), or new `content` would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -17311,7 +17311,7 @@ type RestoreDocumentVersionErrors = {
    */
   404: ErrorResponse;
   /**
-   * Another write took the document's version first (`VERSION_CONFLICT`, with `meta.current_version`), or the restored `path` is held by another file in the project (`NAME_CONFLICT`). Nothing is written.
+   * Another write took the document's version first (`VERSION_CONFLICT`, with `meta.current_version`), the restored `path` is held by another file in the project (`NAME_CONFLICT`), or the restored content would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -22433,7 +22433,7 @@ type UpdateMemoryErrors = {
    */
   404: ErrorResponse;
   /**
-   * The resource has moved past the version this write read (`VERSION_CONFLICT`): a stated `expected_version` or `If-Match` no longer matches, or a concurrent write took the version first. `meta.current_version` names the version in force. Nothing is written.
+   * The memory has moved past the version this write read (`VERSION_CONFLICT`, with `meta.current_version`), or new `content` would exceed the project's `storage_bytes` quota (`QUOTA_STORAGE_EXCEEDED`, no `Retry-After`). Nothing is written.
    */
   409: ErrorResponse;
   /**
@@ -32938,7 +32938,7 @@ export declare class Agents {
   /**
    * Create an agent
    *
-   * Creates a new agent bound to an AI provider.
+   * Creates a new agent bound to an AI provider. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static createAgent<ThrowOnError extends boolean = false>(options: Options<CreateAgentData, ThrowOnError>): RequestResult<CreateAgentResponses, CreateAgentErrors, ThrowOnError>;
   /**
@@ -32958,13 +32958,13 @@ export declare class Agents {
   /**
    * Partially update an agent
    *
-   * Partially updates an existing agent. Identical to PUT — both perform partial updates.
+   * Partially updates an existing agent. Identical to PUT — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static patchAgent<ThrowOnError extends boolean = false>(options: Options<PatchAgentData, ThrowOnError>): RequestResult<PatchAgentResponses, PatchAgentErrors, ThrowOnError>;
   /**
    * Update an agent
    *
-   * Updates an existing agent. Identical to PATCH — both perform partial updates.
+   * Updates an existing agent. Identical to PATCH — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static updateAgent<ThrowOnError extends boolean = false>(options: Options<UpdateAgentData, ThrowOnError>): RequestResult<UpdateAgentResponses, UpdateAgentErrors, ThrowOnError>;
   /**
@@ -33048,8 +33048,14 @@ export declare class AiProviders {
    *
    * Creates a new LLM provider configuration.
    *
-   * A `bedrock` or `vertex` record must carry a credential of its own — a
-   * linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+   * A provider's credential is its linked `secret_id`; `config.apiKey` is
+   * refused with `400 VALIDATION_FAILED`.
+   *
+   * A record with both `base_url` and `secret_id` sends the secret to that
+   * URL, so creating one also needs `secrets:UseSecret` on the secret, else
+   * `403`.
+   *
+   * A `bedrock` or `vertex` record must link one. Without it the provider
    * SDK signs with the server's own credentials (the AWS default credential
    * chain, Google Application Default Credentials), which is refused with
    * `400 VALIDATION_FAILED` unless the deployment allows it.
@@ -33074,7 +33080,7 @@ export declare class AiProviders {
   /**
    * Update an AI provider
    *
-   * Updates an AI provider configuration
+   * Updates an AI provider configuration. Setting `base_url` or `secret_id` so the record holds both also needs `secrets:UseSecret` on the secret, else `403`.
    */
   static updateAiProvider<ThrowOnError extends boolean = false>(options: Options<UpdateAiProviderData, ThrowOnError>): RequestResult<UpdateAiProviderResponses, UpdateAiProviderErrors, ThrowOnError>;
   /**
@@ -34634,7 +34640,7 @@ export declare class Playbooks {
    *
    * Creates a playbook at version 1. The definition is refused with `400 PLAYBOOK_VALIDATION_FAILED` when it holds a duplicate node or input, an input reading a missing node or field, an `execute` node without an executor or another kind with one, transformations on a non-final node, or a cycle; `meta.problems` lists every one. A duplicate `name` in the project is `409 NAME_CONFLICT`.
    *
-   * The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
+   * The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). An executor cannot be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), nor a transformation's tool a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
    */
   static createPlaybook<ThrowOnError extends boolean = false>(options: Options<CreatePlaybookData, ThrowOnError>): RequestResult<CreatePlaybookResponses, CreatePlaybookErrors, ThrowOnError>;
   /**
@@ -34642,7 +34648,7 @@ export declare class Playbooks {
    *
    * Answers what a create or update would be told about a definition, without writing: `valid`, and every graph problem it holds. A definition whose shape cannot be read is `400 VALIDATION_FAILED`, as on a write.
    *
-   * With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
+   * With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`) and not be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), and each transformation's tool must not be a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
    */
   static validatePlaybook<ThrowOnError extends boolean = false>(options: Options<ValidatePlaybookData, ThrowOnError>): RequestResult<ValidatePlaybookResponses, ValidatePlaybookErrors, ThrowOnError>;
   /**
@@ -34662,7 +34668,7 @@ export declare class Playbooks {
    *
    * Updates any of `name`, `description` and `definition`. Only a change to `definition` archives a new version; a rename or a rewrite of the definition the playbook already holds leaves `version` where it is. A case keeps the version it was created on.
    *
-   * A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
+   * A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `EXECUTOR_TOOL_UNSUPPORTED` for a `client` tool executor, `TRANSFORMATION_TOOL_UNSUPPORTED` for a `client` or `mcp` transformation tool, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
    */
   static updatePlaybook<ThrowOnError extends boolean = false>(options: Options<UpdatePlaybookData, ThrowOnError>): RequestResult<UpdatePlaybookResponses, UpdatePlaybookErrors, ThrowOnError>;
   /**
@@ -35318,7 +35324,7 @@ export declare class Triggers {
   /**
    * Create a trigger
    *
-   * Creates a new trigger for a project
+   * Creates a new trigger for a project. A `{{secret:...}}` reference in `tool_context` also needs `secrets:UseSecret` on that secret, else `403`.
    */
   static createTrigger<ThrowOnError extends boolean = false>(options: Options<CreateTriggerData, ThrowOnError>): RequestResult<CreateTriggerResponses, CreateTriggerErrors, ThrowOnError>;
   /**
@@ -35342,7 +35348,7 @@ export declare class Triggers {
   /**
    * Update a trigger
    *
-   * Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had.
+   * Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had. A `{{secret:...}}` reference in a written `tool_context`, or in the stored one when the target changes, also needs `secrets:UseSecret` on that secret, else `403`.
    *
    */
   static updateTrigger<ThrowOnError extends boolean = false>(options: Options<UpdateTriggerData, ThrowOnError>): RequestResult<UpdateTriggerResponses, UpdateTriggerErrors, ThrowOnError>;

package/dist/index.mjs

@@ -1265,7 +1265,7 @@ var Agents = class {
 	/**
 	* Create an agent
 	*
-	* Creates a new agent bound to an AI provider.
+	* Creates a new agent bound to an AI provider. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static createAgent(options) {
 		return (options.client ?? client).post({
@@ -1304,7 +1304,7 @@ var Agents = class {
 	/**
 	* Partially update an agent
 	*
-	* Partially updates an existing agent. Identical to PUT — both perform partial updates.
+	* Partially updates an existing agent. Identical to PUT — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static patchAgent(options) {
 		return (options.client ?? client).patch({
@@ -1319,7 +1319,7 @@ var Agents = class {
 	/**
 	* Update an agent
 	*
-	* Updates an existing agent. Identical to PATCH — both perform partial updates.
+	* Updates an existing agent. Identical to PATCH — both perform partial updates. A `{{secret:...}}` reference in an inline `tool_bindings[].tool` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static updateAgent(options) {
 		return (options.client ?? client).put({
@@ -1473,8 +1473,14 @@ var AiProviders = class {
 	*
 	* Creates a new LLM provider configuration.
 	*
-	* A `bedrock` or `vertex` record must carry a credential of its own — a
-	* linked `secret_id`, or an `apiKey` in `config`. Without one the provider
+	* A provider's credential is its linked `secret_id`; `config.apiKey` is
+	* refused with `400 VALIDATION_FAILED`.
+	*
+	* A record with both `base_url` and `secret_id` sends the secret to that
+	* URL, so creating one also needs `secrets:UseSecret` on the secret, else
+	* `403`.
+	*
+	* A `bedrock` or `vertex` record must link one. Without it the provider
 	* SDK signs with the server's own credentials (the AWS default credential
 	* chain, Google Application Default Credentials), which is refused with
 	* `400 VALIDATION_FAILED` unless the deployment allows it.
@@ -1518,7 +1524,7 @@ var AiProviders = class {
 	/**
 	* Update an AI provider
 	*
-	* Updates an AI provider configuration
+	* Updates an AI provider configuration. Setting `base_url` or `secret_id` so the record holds both also needs `secrets:UseSecret` on the secret, else `403`.
 	*/
 	static updateAiProvider(options) {
 		return (options.client ?? client).patch({
@@ -4544,7 +4550,7 @@ var Playbooks = class {
 	*
 	* Creates a playbook at version 1. The definition is refused with `400 PLAYBOOK_VALIDATION_FAILED` when it holds a duplicate node or input, an input reading a missing node or field, an `execute` node without an executor or another kind with one, transformations on a non-final node, or a cycle; `meta.problems` lists every one. A duplicate `name` in the project is `409 NAME_CONFLICT`.
 	*
-	* The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
+	* The caller becomes the version's author, whom its executors run as, so it must be allowed to start every executor the definition names (`403 PLAYBOOK_EXECUTOR_FORBIDDEN`), and each must exist in the project, or be an agent or tool shared with it (`400 PLAYBOOK_VALIDATION_FAILED`, an `EXECUTOR_NOT_FOUND` problem). A `tool` executor on an `mcp` tool must name in `operation_id` an action the tool's binding allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). An executor cannot be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), nor a transformation's tool a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). A definition with executors written with a trigger or OAuth token is `409 PLAYBOOK_AUTHOR_UNAVAILABLE`: those carry their boundary in the token, so no run can act as them.
 	*/
 	static createPlaybook(options) {
 		return (options.client ?? client).post({
@@ -4561,7 +4567,7 @@ var Playbooks = class {
 	*
 	* Answers what a create or update would be told about a definition, without writing: `valid`, and every graph problem it holds. A definition whose shape cannot be read is `400 VALIDATION_FAILED`, as on a write.
 	*
-	* With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
+	* With `project_id`, the references are checked too, as a write there would check them: the upstreams against that project's playbooks, and each executor the caller may start must exist (`EXECUTOR_NOT_FOUND`) and name an action its `mcp` tool allows (`EXECUTOR_ACTION_REQUIRED`, `EXECUTOR_ACTION_UNAVAILABLE`) and not be a `client` tool (`EXECUTOR_TOOL_UNSUPPORTED`), and each transformation's tool must not be a `client` or `mcp` tool (`TRANSFORMATION_TOOL_UNSUPPORTED`). The caller needs both `playbooks:ValidatePlaybook` and `playbooks:ListPlaybooks` on the project. Without it, only the definition's own graph is checked.
 	*/
 	static validatePlaybook(options) {
 		return (options.client ?? client).post({
@@ -4600,7 +4606,7 @@ var Playbooks = class {
 	*
 	* Updates any of `name`, `description` and `definition`. Only a change to `definition` archives a new version; a rename or a rewrite of the definition the playbook already holds leaves `version` where it is. A case keeps the version it was created on.
 	*
-	* A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
+	* A new version is authored by the caller, checked as on create: `403 PLAYBOOK_EXECUTOR_FORBIDDEN` for an executor it may not start, an `EXECUTOR_NOT_FOUND` problem for one that does not exist, `EXECUTOR_ACTION_REQUIRED` or `EXECUTOR_ACTION_UNAVAILABLE` for an `mcp` tool action a run could not call, `EXECUTOR_TOOL_UNSUPPORTED` for a `client` tool executor, `TRANSFORMATION_TOOL_UNSUPPORTED` for a `client` or `mcp` transformation tool, `409 PLAYBOOK_AUTHOR_UNAVAILABLE` for a trigger or OAuth token.
 	*/
 	static updatePlaybook(options) {
 		return (options.client ?? client).patch({
@@ -5846,7 +5852,7 @@ var Triggers = class {
 	/**
 	* Create a trigger
 	*
-	* Creates a new trigger for a project
+	* Creates a new trigger for a project. A `{{secret:...}}` reference in `tool_context` also needs `secrets:UseSecret` on that secret, else `403`.
 	*/
 	static createTrigger(options) {
 		return (options.client ?? client).post({
@@ -5894,7 +5900,7 @@ var Triggers = class {
 	/**
 	* Update a trigger
 	*
-	* Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had.
+	* Updates an existing trigger's configuration. The type is immutable. Changing `target_type` or `target_id` re-checks that the caller may start the resulting target, because a firing runs with the trigger creator's authority rather than the updater's. A caller who could not start the new target is answered `403` and the trigger keeps the target it had. A `{{secret:...}}` reference in a written `tool_context`, or in the stored one when the target changes, also needs `secrets:UseSecret` on that secret, else `403`.
 	*
 	*/
 	static updateTrigger(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/sdk",
-  "version": "0.218.1",
+  "version": "0.219.1",
   "description": "TypeScript SDK for the naturali.ai API, generated from its OpenAPI specs",
   "keywords": [
     "naturali",
@@ -38,7 +38,7 @@
   },
   "devDependencies": {
     "@hey-api/openapi-ts": "^0.99.0",
-    "@naturali/api": "0.218.1",
+    "@naturali/api": "0.219.1",
     "@ttoss/openapi-codegen": "^0.10.0",
     "@types/node": "^26.5.1",
     "tsdown": "^0.23.0",