@opensoha/contracts 0.1.15 → 0.1.16

package/gen/ts/sohaapi/index.ts

@@ -145,6 +145,86 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/auth/desktop/attempts": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["createDesktopAuthAttempt"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/desktop/attempts/{attemptID}/start": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["startDesktopAuthAttempt"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/desktop/attempts/{attemptID}/exchange": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["exchangeDesktopAuthAttempt"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/browser-handoffs/{browserHandoffID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["getBrowserHandoff"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/auth/browser-handoffs/{browserHandoffID}/complete": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["completeBrowserHandoff"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/auth/login/{providerID}/start": {
         parameters: {
             query?: never;
@@ -206,6 +286,22 @@ export interface paths {
         delete?: never;
         options?: never;
         head?: never;
+        patch: operations["updateCurrentUserProfile"];
+        trace?: never;
+    };
+    "/auth/profile/password": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["changeCurrentUserPassword"];
+        delete?: never;
+        options?: never;
+        head?: never;
         patch?: never;
         trace?: never;
     };
@@ -721,6 +817,22 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/applications/{applicationID}/application-environments/{applicationEnvironmentID}/workflow": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["saveApplicationEnvironmentWorkflow"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/applications/{applicationID}/services": {
         parameters: {
             query?: never;
@@ -1057,6 +1169,54 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/delivery/environments": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listDeliveryEnvironments"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/delivery/manifest-packages": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listManifestPackages"];
+        put?: never;
+        post: operations["createManifestPackage"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/delivery/manifest-packages/{manifestPackageID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["getManifestPackage"];
+        put: operations["updateManifestPackage"];
+        post?: never;
+        delete: operations["deleteManifestPackage"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/delivery/manifest-packages/{manifestPackageID}/source": {
         parameters: {
             query?: never;
@@ -4497,6 +4657,88 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/alert-rules": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listAlertRules"];
+        put?: never;
+        post: operations["createAlertRule"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/alert-rules/{ruleID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["getAlertRule"];
+        put: operations["updateAlertRule"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/alert-rules/{ruleID}/validate": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** @description Compatibility alias for testing an alert rule without persisting it. */
+        post: operations["validateAlertRule"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/alert-rules/{ruleID}/test": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /** @description Test an alert rule payload without persisting it; ruleID is a legacy compatibility token. */
+        post: operations["testAlertRule"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/alert-rule-runs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listAlertRuleRuns"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/alert-events/stream": {
         parameters: {
             query?: never;
@@ -6581,6 +6823,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/software/packages/{packageID}/download-records": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** @description Lists recent successful downloads. Requires system.audit.view or identity.audit.view. */
+        get: operations["listSoftwarePackageDownloadRecords"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/plugins/installed": {
         parameters: {
             query?: never;
@@ -7755,6 +8014,80 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/access/users/{userID}/scope-grants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+            };
+            cookie?: never;
+        };
+        get: operations["listUserScopeGrants"];
+        put?: never;
+        post: operations["createUserScopeGrant"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/access/users/{userID}/scope-grants/{scopeGrantID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["updateUserScopeGrant"];
+        post?: never;
+        delete: operations["deleteUserScopeGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/access/teams/{teamID}/scope-grants": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+            };
+            cookie?: never;
+        };
+        get: operations["listTeamScopeGrants"];
+        put?: never;
+        post: operations["createTeamScopeGrant"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/access/teams/{teamID}/scope-grants/{scopeGrantID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put: operations["updateTeamScopeGrant"];
+        post?: never;
+        delete: operations["deleteTeamScopeGrant"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/identity/capabilities": {
         parameters: {
             query?: never;
@@ -7771,6 +8104,124 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/portal/bootstrap": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["getPortalBootstrap"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/applications": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listPortalApplications"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/applications/{applicationID}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        get: operations["getPortalApplication"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/applications/{applicationID}/launch": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["launchPortalApplication"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/applications/{applicationID}/favorite": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["favoritePortalApplication"];
+        delete: operations["unfavoritePortalApplication"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/recent": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["listPortalRecentLaunches"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/portal/security": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get: operations["getPortalSecuritySummary"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/identity/applications": {
         parameters: {
             query?: never;
@@ -7979,6 +8430,24 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/identity/oidc-clients/{oidcClientID}/secret/reveal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                oidcClientID: components["parameters"]["OIDCClientID"];
+            };
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post: operations["revealIdentityOIDCClientSecret"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/identity/saml/login-sources": {
         parameters: {
             query?: never;
@@ -8456,15 +8925,54 @@ export interface components {
             data: components["schemas"]["IdentityRuntimeCapability"];
         };
         /** @enum {string} */
-        IdentityResourceStatus: "active" | "disabled";
+        IdentityResourceStatus: "active" | "draft" | "enabled" | "disabled" | "maintenance";
+        /** @enum {string} */
+        IdentityApplicationProviderType: "link" | "oidc" | "proxy" | "saml";
+        /** @enum {string} */
+        IdentityApplicationAssignmentSubjectType: "user" | "role" | "team" | "tag";
+        /** @enum {string} */
+        IdentityApplicationAssignmentEffect: "allow" | "deny";
+        IdentityApplicationAssignment: {
+            id: string;
+            applicationId: string;
+            subjectType: components["schemas"]["IdentityApplicationAssignmentSubjectType"];
+            subjectId: string;
+            effect: components["schemas"]["IdentityApplicationAssignmentEffect"];
+            createdBy?: string;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        IdentityApplicationAssignmentInput: {
+            subjectType: components["schemas"]["IdentityApplicationAssignmentSubjectType"];
+            subjectId: string;
+            effect: components["schemas"]["IdentityApplicationAssignmentEffect"];
+        };
         IdentityApplication: {
             id: string;
             name: string;
             slug: string;
             description?: string;
             /** Format: uri */
+            iconUrl?: string;
+            category?: string;
+            tags?: string[];
+            /** Format: uri */
             launchUrl?: string;
+            providerId?: string;
+            providerType?: components["schemas"]["IdentityApplicationProviderType"];
+            portalVisible?: boolean;
+            featured?: boolean;
+            sortOrder?: number;
             status: components["schemas"]["IdentityResourceStatus"];
+            metadata?: {
+                [key: string]: unknown;
+            };
+            assignments?: components["schemas"]["IdentityApplicationAssignment"][];
+            favorite?: boolean;
+            /** Format: date-time */
+            lastLaunchedAt?: string;
+            createdBy?: string;
+            updatedBy?: string;
             /** Format: date-time */
             createdAt: string;
             /** Format: date-time */
@@ -8475,8 +8983,21 @@ export interface components {
             slug: string;
             description?: string;
             /** Format: uri */
+            iconUrl?: string;
+            category?: string;
+            tags?: string[];
+            /** Format: uri */
             launchUrl?: string;
+            providerId?: string;
+            providerType?: components["schemas"]["IdentityApplicationProviderType"];
+            portalVisible?: boolean;
+            featured?: boolean;
+            sortOrder?: number;
             status: components["schemas"]["IdentityResourceStatus"];
+            metadata?: {
+                [key: string]: unknown;
+            };
+            assignments?: components["schemas"]["IdentityApplicationAssignmentInput"][];
         };
         IdentityApplicationEnvelope: {
             data: components["schemas"]["IdentityApplication"];
@@ -8484,6 +9005,93 @@ export interface components {
         IdentityApplicationListEnvelope: {
             items: components["schemas"]["IdentityApplication"][];
         };
+        IdentityApplicationLaunch: {
+            id: string;
+            applicationId: string;
+            applicationName?: string;
+            userId: string;
+            providerId?: string;
+            providerType: components["schemas"]["IdentityApplicationProviderType"];
+            result: string;
+            reason?: string;
+            /** Format: uri-reference */
+            launchUrl?: string;
+            sourceIp?: string;
+            userAgent?: string;
+            /** Format: date-time */
+            createdAt: string;
+        };
+        IdentityApplicationLaunchListEnvelope: {
+            items: components["schemas"]["IdentityApplicationLaunch"][];
+        };
+        PortalSecuritySummary: {
+            principal: components["schemas"]["Principal"];
+            mfaEnabled: boolean;
+            linkedSources: string[];
+            activeSession: number;
+            /** Format: date-time */
+            recentLoginAt?: string;
+        };
+        PortalSecuritySummaryEnvelope: {
+            data: components["schemas"]["PortalSecuritySummary"];
+        };
+        PortalBootstrap: {
+            principal: components["schemas"]["Principal"];
+            applications: components["schemas"]["IdentityApplication"][];
+            favorites: components["schemas"]["IdentityApplication"][];
+            recent: components["schemas"]["IdentityApplicationLaunch"][];
+            categories: string[];
+            security: components["schemas"]["PortalSecuritySummary"];
+        };
+        PortalBootstrapEnvelope: {
+            data: components["schemas"]["PortalBootstrap"];
+        };
+        PortalApplicationListEnvelope: {
+            items: components["schemas"]["IdentityApplication"][];
+        };
+        PortalLaunchRequest: {
+            /** @enum {string} */
+            surface?: "web" | "desktop";
+        };
+        PortalLaunchDecision: {
+            application: components["schemas"]["IdentityApplication"];
+            /** Format: uri-reference */
+            launchUrl: string;
+            providerType: components["schemas"]["IdentityApplicationProviderType"];
+            /** @enum {string} */
+            decision: "allow";
+            /** Format: date-time */
+            handoffExpiresAt?: string;
+        };
+        PortalLaunchDecisionEnvelope: {
+            data: components["schemas"]["PortalLaunchDecision"];
+        };
+        BrowserHandoffApplication: {
+            id: string;
+            name: string;
+            /** Format: uri */
+            iconUrl?: string;
+        };
+        BrowserHandoff: {
+            application: components["schemas"]["BrowserHandoffApplication"];
+            accountName: string;
+            /** @enum {string} */
+            status: "pending";
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        BrowserHandoffEnvelope: {
+            data: components["schemas"]["BrowserHandoff"];
+        };
+        BrowserHandoffCompletion: {
+            /** @enum {string} */
+            status: "completed";
+            /** Format: uri-reference */
+            destinationUrl: string;
+        };
+        BrowserHandoffCompletionEnvelope: {
+            data: components["schemas"]["BrowserHandoffCompletion"];
+        };
         /** @enum {string} */
         IdentityProviderType: "oidc" | "proxy" | "saml";
         /** @enum {string} */
@@ -8493,7 +9101,7 @@ export interface components {
             /** @enum {string} */
             target: "subject" | "username" | "email" | "displayName" | "role" | "organization" | "team" | "project";
             /** @default false */
-            required: boolean;
+            required?: boolean;
         };
         CertificateSummary: {
             id: string;
@@ -8513,6 +9121,8 @@ export interface components {
             clientId: string;
             /** @enum {string} */
             clientType?: "public" | "confidential";
+            /** @description True when the confidential client secret can be revealed by an authorized administrator. */
+            clientSecretAvailable?: boolean;
             /** @description Strict-match absolute HTTP or HTTPS redirect URIs. HTTPS is recommended for production deployments. */
             redirectUris: string[];
             /**
@@ -8538,7 +9148,8 @@ export interface components {
         };
         OIDCClientInput: {
             providerId?: string;
-            clientId: string;
+            /** @description On create, an omitted or blank value is generated by the server. On update, it preserves the current Client ID. */
+            clientId?: string;
             /** @enum {string} */
             clientType?: "public" | "confidential";
             clientSecret?: string;
@@ -8567,6 +9178,7 @@ export interface components {
         });
         OIDCClientCreated: {
             client: components["schemas"]["OIDCClient"];
+            /** @description Generated or supplied client secret returned after creation. The same value can later be retrieved through the reveal action. */
             clientSecret?: string;
         };
         OIDCClientCreatedEnvelope: {
@@ -8578,6 +9190,15 @@ export interface components {
         OIDCClientListEnvelope: {
             items: components["schemas"]["OIDCClient"][];
         };
+        OIDCClientSecretReveal: {
+            clientId: string;
+            clientSecret: string;
+            /** Format: date-time */
+            revealedAt: string;
+        };
+        OIDCClientSecretRevealEnvelope: {
+            data: components["schemas"]["OIDCClientSecretReveal"];
+        };
         SAMLServiceProvider: {
             entityId: string;
             /** @description Absolute HTTP or HTTPS assertion consumer service URLs. HTTPS is recommended for production deployments. */
@@ -8924,7 +9545,7 @@ export interface components {
         IdentityOutpostRoute: {
             host: string;
             /** @default / */
-            pathPrefix: string;
+            pathPrefix?: string;
             applicationId: string;
             providerId: string;
             skipPaths?: string[];
@@ -9007,9 +9628,9 @@ export interface components {
             events: components["schemas"]["IdentityOutpostRuntimeEvent"][];
         };
         /** @enum {string} */
-        SystemIntegrationCategory: "identity" | "source_control" | "project_management" | "configuration" | "ci_cd" | "code_quality" | "api_gateway" | "monitoring" | "messaging" | "ai" | "cloud" | "other";
+        SystemIntegrationCategory: "identity" | "source_control" | "project_management" | "configuration" | "ci_cd" | "code_quality" | "api_gateway" | "monitoring" | "messaging" | "ai" | "cloud" | "storage" | "other";
         /** @enum {string} */
-        SystemIntegrationHealthStatus: "unknown" | "healthy" | "unhealthy";
+        SystemIntegrationHealthStatus: "unknown" | "healthy" | "degraded" | "unhealthy";
         /** @enum {string} */
         SystemIntegrationTestStatus: "succeeded" | "failed";
         SystemIntegrationOAuthAuthorization: {
@@ -9029,7 +9650,7 @@ export interface components {
         };
         SystemIntegrationCreateRequest: {
             category: components["schemas"]["SystemIntegrationCategory"];
-            /** @description Extensible provider key such as gitlab, github, gitea, or zadig. */
+            /** @description Extensible provider key such as gitlab, github, gitea, zadig, or s3. */
             providerType: string;
             name: string;
             description?: string;
@@ -9496,7 +10117,7 @@ export interface components {
             environmentIds?: string[];
             applicationIds?: string[];
             /** @default legacy */
-            scopeType: components["schemas"]["ScopeGrantType"];
+            scopeType?: components["schemas"]["ScopeGrantType"];
             /** @description Required when scopeType is platform. */
             clusterIds?: string[];
             namespaces?: string[];
@@ -9505,7 +10126,7 @@ export interface components {
             resourceKinds?: string[];
             role: string;
             /** @default allow */
-            effect: components["schemas"]["ScopeGrantEffect"];
+            effect?: components["schemas"]["ScopeGrantEffect"];
             enabled: boolean;
         };
         ScopeGrantEnvelope: {
@@ -11014,7 +11635,7 @@ export interface components {
              * @description Workbench relay endpoint. Supported values are chat/completions, responses, and messages.
              * @default chat/completions
              */
-            defaultEndpoint: string;
+            defaultEndpoint?: string;
             enabled: boolean;
         };
         AISkillSettings: {
@@ -12127,6 +12748,9 @@ export interface components {
             displayName: string;
             email: string;
             phone?: string;
+            avatarUrl?: string;
+            /** @enum {string} */
+            avatarFit?: "cover" | "contain" | "fill";
             status: string;
             roles: string[];
             teams: string[];
@@ -12143,6 +12767,23 @@ export interface components {
         } & {
             [key: string]: unknown;
         };
+        UpdateProfileRequest: {
+            displayName: string;
+            /** Format: email */
+            email: string;
+            phone?: string;
+            avatarUrl?: string;
+            /** @enum {string} */
+            avatarFit?: "cover" | "contain" | "fill";
+        };
+        ChangePasswordRequest: {
+            currentPassword: string;
+            newPassword: string;
+        };
+        PasswordChangeResult: {
+            /** @constant */
+            status: "ok";
+        };
         TokenSet: {
             accessToken: string;
             refreshToken: string;
@@ -12181,6 +12822,28 @@ export interface components {
         OIDCExchangeRequest: {
             code: string;
         };
+        DesktopAuthAttemptCreateRequest: {
+            providerId: string;
+            /** Format: uri */
+            redirectUri: string;
+            codeChallenge: string;
+            /** @enum {string} */
+            codeChallengeMethod: "S256";
+        };
+        DesktopAuthAttempt: {
+            attemptId: string;
+            /** Format: uri */
+            authorizationUrl: string;
+            /** Format: date-time */
+            expiresAt: string;
+        };
+        DesktopAuthAttemptEnvelope: {
+            data: components["schemas"]["DesktopAuthAttempt"];
+        };
+        DesktopAuthAttemptExchangeRequest: {
+            code: string;
+            codeVerifier: string;
+        };
         StreamTicketRequest: {
             path: string;
         };
@@ -12329,8 +12992,24 @@ export interface components {
             defaultTag?: string;
             config?: components["schemas"]["BuildSourceConfig"];
         };
+        BuildRepositoryBinding: {
+            repositoryId: string;
+            checkoutPath?: string;
+            defaultBranch?: string;
+            /** @default false */
+            allowCommitSelection?: boolean;
+            /** @default false */
+            submodules?: boolean;
+        };
+        BuildRepositoryRefInput: {
+            repositoryId: string;
+            /** @enum {string} */
+            refType: "branch" | "tag" | "commit";
+            refName: string;
+        };
         BuildSourceConfig: {
             repositoryId?: string;
+            repositoryBindings?: components["schemas"]["BuildRepositoryBinding"][];
             dockerfilePath?: string;
             contextDir?: string;
             buildTemplateId?: string;
@@ -12634,6 +13313,14 @@ export interface components {
             };
             enabled: boolean;
         };
+        ApplicationWorkflowInput: {
+            name: string;
+            description?: string;
+            definition: {
+                [key: string]: unknown;
+            };
+            enabled: boolean;
+        };
         ApplicationEnvironment: {
             id: string;
             applicationId: string;
@@ -12641,6 +13328,10 @@ export interface components {
             applicationGroup?: string;
             environmentId: string;
             environmentKey?: string;
+            alias?: string;
+            clusterId?: string;
+            namespace?: string;
+            registryId?: string;
             strategyProfileId?: string;
             promotionPolicyId?: string;
             artifactPolicyId?: string;
@@ -12659,6 +13350,10 @@ export interface components {
             id?: string;
             applicationId: string;
             environmentId: string;
+            alias?: string;
+            clusterId?: string;
+            namespace?: string;
+            registryId?: string;
             strategyProfileId?: string;
             promotionPolicyId?: string;
             artifactPolicyId?: string;
@@ -13006,6 +13701,8 @@ export interface components {
             environmentKey?: string;
             actionKind?: string;
             requiresApproval: boolean;
+            /** @enum {string} */
+            status?: "available" | "unavailable";
             resourceSelector?: components["schemas"]["ResourceSelector"];
             targets?: components["schemas"]["ReleaseTarget"][];
             workloads?: components["schemas"]["ApplicationRuntimeWorkload"][];
@@ -13037,6 +13734,7 @@ export interface components {
             releaseBundleId?: string;
             refType?: string;
             refName?: string;
+            repositoryRefs?: components["schemas"]["BuildRepositoryRefInput"][];
             imageTag?: string;
             releaseName?: string;
             containerName?: string;
@@ -13065,6 +13763,62 @@ export interface components {
             relatedIds?: components["schemas"]["ApplicationDeliveryActionRelatedIDs"];
         };
         /** @enum {string} */
+        ManifestPackageRenderer: "raw_yaml" | "kustomize";
+        /** @enum {string} */
+        ManifestPackageStatus: "draft" | "published";
+        ManifestPackageBinding: {
+            id?: string;
+            applicationEnvironmentId: string;
+            environmentKey: string;
+            clusterId: string;
+            namespace: string;
+            overlay?: {
+                [key: string]: string;
+            };
+            status?: string;
+        };
+        ManifestPackage: {
+            id: string;
+            name: string;
+            description?: string;
+            applicationId: string;
+            serviceId?: string | null;
+            businessLineId?: string;
+            renderer: components["schemas"]["ManifestPackageRenderer"];
+            status: components["schemas"]["ManifestPackageStatus"];
+            currentRevision: number;
+            files: components["schemas"]["ManifestFile"][];
+            bindings: components["schemas"]["ManifestPackageBinding"][];
+            createdBy?: string;
+            updatedBy?: string;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        ManifestPackageInput: {
+            name: string;
+            description?: string;
+            applicationId: string;
+            serviceId?: string | null;
+            businessLineId?: string;
+            renderer: components["schemas"]["ManifestPackageRenderer"];
+            files: components["schemas"]["ManifestFile"][];
+            bindings: components["schemas"]["ManifestPackageBinding"][];
+        };
+        ManifestPackagePage: {
+            items: components["schemas"]["ManifestPackage"][];
+            total: number;
+            page: number;
+            pageSize: number;
+        };
+        ManifestPackageEnvelope: {
+            data: components["schemas"]["ManifestPackage"];
+        };
+        ManifestPackagePageEnvelope: {
+            data: components["schemas"]["ManifestPackagePage"];
+        };
+        /** @enum {string} */
         ManifestSourceMode: "soha_managed" | "git_synced";
         /** @enum {string} */
         ManifestSourceRefType: "branch" | "tag" | "commit";
@@ -13169,7 +13923,7 @@ export interface components {
             bindingId: string;
             revision?: number;
             /** @default false */
-            forceConflicts: boolean;
+            forceConflicts?: boolean;
         };
         /** @enum {string} */
         ManifestTaskAction: "preflight" | "apply" | "observe" | "repair" | "adopt" | "rollback" | "sync";
@@ -13187,7 +13941,7 @@ export interface components {
             namespace?: string;
             fieldManager?: string;
             /** @default false */
-            forceConflicts: boolean;
+            forceConflicts?: boolean;
             idempotencyKey: string;
             documents?: components["schemas"]["ManifestRenderedDocument"][];
             inventory?: components["schemas"]["ManifestResourceInventory"][];
@@ -13464,14 +14218,14 @@ export interface components {
             expectedGeneration: number;
             reason?: string;
             /** @default false */
-            forceConflicts: boolean;
+            forceConflicts?: boolean;
         };
         ManifestRollbackInput: {
             /** Format: int64 */
             expectedGeneration: number;
             targetRevision?: number;
             /** @default true */
-            useLastKnownGood: boolean;
+            useLastKnownGood?: boolean;
             reason?: string;
         };
         ManifestDeploymentAction: {
@@ -13734,6 +14488,9 @@ export interface components {
         ApplicationEnvironmentListEnvelope: {
             data: components["schemas"]["ApplicationEnvironment"][];
         };
+        DeliveryEnvironmentListEnvelope: {
+            data: components["schemas"]["DeliveryEnvironment"][];
+        };
         BuildTemplateEnvelope: {
             data: components["schemas"]["BuildTemplate"];
         };
@@ -13842,7 +14599,7 @@ export interface components {
             resource: string;
             summary: string;
             /** @default false */
-            sensitiveValuesRedacted: boolean;
+            sensitiveValuesRedacted?: boolean;
         };
         OperationalPlan: {
             capability: string;
@@ -14308,7 +15065,7 @@ export interface components {
              * @default deploy
              * @enum {string}
              */
-            action: "deploy" | "redeploy" | "start" | "stop" | "restart" | "down" | "pull" | "build" | "destroy";
+            action?: "deploy" | "redeploy" | "start" | "stop" | "restart" | "down" | "pull" | "build" | "destroy";
         };
         DockerPayloadScalarValue: string | number | boolean;
         DockerPayloadValue: components["schemas"]["DockerPayloadScalarValue"] | components["schemas"]["DockerPayloadScalarValue"][] | {
@@ -14318,15 +15075,15 @@ export interface components {
             /** Format: uri */
             repositoryUrl: string;
             /** @default main */
-            ref: string;
+            ref?: string;
             /** @default Dockerfile */
-            dockerfilePath: string;
+            dockerfilePath?: string;
             /** @default . */
-            contextDir: string;
+            contextDir?: string;
             /** @default false */
-            pull: boolean;
+            pull?: boolean;
             /** @default false */
-            noCache: boolean;
+            noCache?: boolean;
         };
         DockerContainerPortInput: {
             name?: string;
@@ -14367,7 +15124,7 @@ export interface components {
              * @default image
              * @enum {string}
              */
-            sourceKind: "image" | "git_dockerfile";
+            sourceKind?: "image" | "git_dockerfile";
             gitBuild?: components["schemas"]["DockerGitBuildInput"];
             architecture?: string;
             imagePullPolicy?: string;
@@ -16391,9 +17148,9 @@ export interface components {
         KubernetesHelmReleaseRollbackInput: {
             revision: number;
             /** @default true */
-            wait: boolean;
+            wait?: boolean;
             /** @default 300 */
-            timeoutSeconds: number;
+            timeoutSeconds?: number;
         };
         KubernetesClusterEvent: {
             name: string;
@@ -16859,7 +17616,7 @@ export interface components {
             /** Format: date-time */
             timeTo: string;
             /** @default 60 */
-            stepSeconds: number;
+            stepSeconds?: number;
             variables?: {
                 [key: string]: string;
             };
@@ -16952,7 +17709,7 @@ export interface components {
             /** Format: date-time */
             timeTo: string;
             /** @default 60 */
-            stepSeconds: number;
+            stepSeconds?: number;
         };
         ObservabilityMetricPoint: {
             /** Format: date-time */
@@ -16987,9 +17744,9 @@ export interface components {
             /** Format: date-time */
             timeTo: string;
             /** @default 0 */
-            minDurationMs: number;
+            minDurationMs?: number;
             /** @default 100 */
-            limit: number;
+            limit?: number;
         };
         ObservabilityTraceSpan: {
             traceId: string;
@@ -17113,11 +17870,11 @@ export interface components {
         };
         ObservabilityLogQueryBudget: {
             /** @default 1000 */
-            maxEntries: number;
+            maxEntries?: number;
             /** @default 86400 */
-            maxRangeSeconds: number;
+            maxRangeSeconds?: number;
             /** @default 10 */
-            timeoutSeconds: number;
+            timeoutSeconds?: number;
         };
         ObservabilityLogRedactionPolicy: {
             dropAttributeKeys?: string[];
@@ -17161,6 +17918,86 @@ export interface components {
             credentials?: components["schemas"]["SystemIntegrationCredentialInput"][];
             clearCredentialKeys?: string[];
         };
+        /** @enum {string} */
+        AlertRuleType: "metrics" | "logs" | "traces" | "external_passthrough";
+        AlertRuleStringMap: {
+            [key: string]: string;
+        };
+        AlertRuleInput: {
+            id?: string;
+            name: string;
+            ruleType: components["schemas"]["AlertRuleType"];
+            datasourceSelector?: components["schemas"]["GenericObject"];
+            querySpec?: components["schemas"]["GenericObject"];
+            thresholdSpec?: components["schemas"]["GenericObject"];
+            forSeconds?: number;
+            groupBy?: string[];
+            labels?: components["schemas"]["AlertRuleStringMap"];
+            annotations?: components["schemas"]["AlertRuleStringMap"];
+            notificationPolicyId?: string;
+            healingPolicyIds?: string[];
+            enabled?: boolean;
+        };
+        AlertRule: {
+            id: string;
+            name: string;
+            ruleType: components["schemas"]["AlertRuleType"];
+            datasourceSelector?: components["schemas"]["GenericObject"];
+            querySpec?: components["schemas"]["GenericObject"];
+            thresholdSpec?: components["schemas"]["GenericObject"];
+            forSeconds: number;
+            groupBy?: string[];
+            labels?: components["schemas"]["AlertRuleStringMap"];
+            annotations?: components["schemas"]["AlertRuleStringMap"];
+            notificationPolicyId?: string;
+            healingPolicyIds?: string[];
+            enabled: boolean;
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        AlertRuleEnvelope: {
+            data: components["schemas"]["AlertRule"];
+        };
+        AlertRuleListEnvelope: {
+            items: components["schemas"]["AlertRule"][];
+        };
+        AlertRuleTestResult: {
+            ruleId?: string;
+            ruleType?: components["schemas"]["AlertRuleType"];
+            state?: string;
+            summary?: string;
+            matched: boolean;
+            samples?: components["schemas"]["GenericObject"][];
+            dataSources?: string[];
+            errors?: string[];
+            querySnapshot?: components["schemas"]["ObservabilityQuerySnapshot"];
+            notificationPreview?: components["schemas"]["GenericObject"][];
+            /** Format: date-time */
+            executedAt: string;
+        };
+        AlertRuleTestResultEnvelope: {
+            data: components["schemas"]["AlertRuleTestResult"];
+        };
+        AlertRuleRun: {
+            id: string;
+            ruleId: string;
+            status: string;
+            summary?: string;
+            matched: boolean;
+            durationMs: number;
+            error?: string;
+            result?: components["schemas"]["GenericObject"];
+            querySnapshot?: components["schemas"]["ObservabilityQuerySnapshot"];
+            /** Format: date-time */
+            createdAt: string;
+            /** Format: date-time */
+            updatedAt: string;
+        };
+        AlertRuleRunListEnvelope: {
+            items: components["schemas"]["AlertRuleRun"][];
+        };
         ObservabilityDataSource: {
             id: string;
             name: string;
@@ -17307,6 +18144,8 @@ export interface components {
         };
         LogQuery: {
             sourceMode?: components["schemas"]["LogSourceMode"];
+            /** @description Optional Soha-managed durable log data source. Existing permission and scope checks still apply. */
+            dataSourceId?: string;
             selector?: components["schemas"]["LogSourceSelector"];
             /** Format: date-time */
             from?: string;
@@ -17515,7 +18354,7 @@ export interface components {
             cacheStatus?: components["schemas"]["KubernetesResourceCacheStatus"];
             message?: string;
             /** @default false */
-            resyncRequired: boolean;
+            resyncRequired?: boolean;
         };
         /** @enum {string} */
         AlertEventStreamSignalType: "status" | "changed" | "reset" | "error";
@@ -17529,7 +18368,7 @@ export interface components {
             eventStatus?: string;
             message?: string;
             /** @default false */
-            resyncRequired: boolean;
+            resyncRequired?: boolean;
         };
         KubernetesResourceGraphNode: {
             id: string;
@@ -18352,7 +19191,7 @@ export interface components {
             /** Format: date-time */
             olderThan?: string;
             /** @default false */
-            dryRun: boolean;
+            dryRun?: boolean;
         };
         LLMRelayCachePurgeResult: {
             status: string;
@@ -18980,6 +19819,10 @@ export interface components {
             description?: string;
             publisher: string;
             category?: string;
+            tenantId?: string;
+            workspaceId?: string;
+            visibility?: components["schemas"]["SoftwarePackageVisibility"];
+            status?: components["schemas"]["SoftwarePackageStatus"];
             version: string;
             platform: string;
             arch: string;
@@ -18988,11 +19831,27 @@ export interface components {
             sizeBytes: number;
             sha256: string;
             downloadPath: string;
+            /** Format: int64 */
+            downloadCount?: number;
+            storageIntegrationId?: string;
             /** Format: date-time */
             createdAt: string;
             /** Format: date-time */
             updatedAt: string;
         };
+        SoftwarePackageDownloadRecord: {
+            id: string;
+            actorId: string;
+            actorName?: string;
+            /** Format: date-time */
+            downloadedAt: string;
+            /** Format: int64 */
+            durationMs: number;
+            sourceIp?: string;
+        };
+        SoftwarePackageDownloadRecordListEnvelope: {
+            items: components["schemas"]["SoftwarePackageDownloadRecord"][];
+        };
         SoftwarePackageEnvelope: {
             data: components["schemas"]["SoftwarePackage"];
         };
@@ -19006,9 +19865,13 @@ export interface components {
             description?: string;
             publisher: string;
             category?: string;
+            tenantId?: string;
+            workspaceId?: string;
+            visibility?: components["schemas"]["SoftwarePackageVisibility"];
             version: string;
             platform: string;
             arch: string;
+            storageIntegrationId?: string;
             /** Format: binary */
             file: string;
         };
@@ -19018,15 +19881,32 @@ export interface components {
             description?: string;
             publisher: string;
             category?: string;
+            tenantId?: string;
+            workspaceId?: string;
+            visibility?: components["schemas"]["SoftwarePackageVisibility"];
             version: string;
             platform: string;
             arch: string;
+            storageIntegrationId?: string;
             /** Format: uri */
             url: string;
             fileName?: string;
         };
+        /** @enum {string} */
+        SoftwarePackageVisibility: "workspace" | "tenant" | "restricted";
+        /** @enum {string} */
+        SoftwarePackageStatus: "ready" | "quarantined" | "deleted";
         SoftwareStorage: {
             backend: string;
+            integrationId?: string;
+            providerType?: string;
+            /** Format: uri */
+            endpoint?: string;
+            bucket?: string;
+            region?: string;
+            healthStatus?: components["schemas"]["SystemIntegrationHealthStatus"];
+            /** Format: date-time */
+            lastCheckedAt?: string;
             /** Format: int64 */
             objectCount: number;
             /** Format: int64 */
@@ -19721,8 +20601,12 @@ export interface components {
     parameters: {
         MenuID: string;
         AccessRoleID: string;
+        UserID: string;
+        TeamID: string;
         ScopeGrantID: string;
         IdentityApplicationID: string;
+        PortalApplicationID: string;
+        BrowserHandoffID: string;
         IdentityProviderID: string;
         IdentityPolicyID: string;
         IdentityOutpostID: string;
@@ -19774,6 +20658,7 @@ export interface components {
         KubernetesResourceName: string;
         AgentInstallTicket: string;
         DataSourceID: string;
+        AlertRuleID: string;
         ObservabilityDataSourceIDQuery: string;
         ObservabilityClusterIDQuery: string;
         ObservabilityEnvironmentQuery: string;
@@ -19821,6 +20706,7 @@ export interface components {
         OIDCState: string;
         OperationID: string;
         ProviderID: string;
+        AttemptID: string;
         PluginID: string;
         /** @description Slash-separated relative path declared by the active companion pack. */
         PluginAssetPath: string;
@@ -19898,10 +20784,30 @@ export type IdentityOutpostRuntimeCapability = components['schemas']['IdentityOu
 export type IdentityRuntimeCapability = components['schemas']['IdentityRuntimeCapability'];
 export type IdentityRuntimeCapabilityEnvelope = components['schemas']['IdentityRuntimeCapabilityEnvelope'];
 export type IdentityResourceStatus = components['schemas']['IdentityResourceStatus'];
+export type IdentityApplicationProviderType = components['schemas']['IdentityApplicationProviderType'];
+export type IdentityApplicationAssignmentSubjectType = components['schemas']['IdentityApplicationAssignmentSubjectType'];
+export type IdentityApplicationAssignmentEffect = components['schemas']['IdentityApplicationAssignmentEffect'];
+export type IdentityApplicationAssignment = components['schemas']['IdentityApplicationAssignment'];
+export type IdentityApplicationAssignmentInput = components['schemas']['IdentityApplicationAssignmentInput'];
 export type IdentityApplication = components['schemas']['IdentityApplication'];
 export type IdentityApplicationInput = components['schemas']['IdentityApplicationInput'];
 export type IdentityApplicationEnvelope = components['schemas']['IdentityApplicationEnvelope'];
 export type IdentityApplicationListEnvelope = components['schemas']['IdentityApplicationListEnvelope'];
+export type IdentityApplicationLaunch = components['schemas']['IdentityApplicationLaunch'];
+export type IdentityApplicationLaunchListEnvelope = components['schemas']['IdentityApplicationLaunchListEnvelope'];
+export type PortalSecuritySummary = components['schemas']['PortalSecuritySummary'];
+export type PortalSecuritySummaryEnvelope = components['schemas']['PortalSecuritySummaryEnvelope'];
+export type PortalBootstrap = components['schemas']['PortalBootstrap'];
+export type PortalBootstrapEnvelope = components['schemas']['PortalBootstrapEnvelope'];
+export type PortalApplicationListEnvelope = components['schemas']['PortalApplicationListEnvelope'];
+export type PortalLaunchRequest = components['schemas']['PortalLaunchRequest'];
+export type PortalLaunchDecision = components['schemas']['PortalLaunchDecision'];
+export type PortalLaunchDecisionEnvelope = components['schemas']['PortalLaunchDecisionEnvelope'];
+export type BrowserHandoffApplication = components['schemas']['BrowserHandoffApplication'];
+export type BrowserHandoff = components['schemas']['BrowserHandoff'];
+export type BrowserHandoffEnvelope = components['schemas']['BrowserHandoffEnvelope'];
+export type BrowserHandoffCompletion = components['schemas']['BrowserHandoffCompletion'];
+export type BrowserHandoffCompletionEnvelope = components['schemas']['BrowserHandoffCompletionEnvelope'];
 export type IdentityProviderType = components['schemas']['IdentityProviderType'];
 export type SAMLNameIDFormat = components['schemas']['SAMLNameIDFormat'];
 export type SAMLAttributeMapping = components['schemas']['SAMLAttributeMapping'];
@@ -19912,6 +20818,8 @@ export type OIDCClientCreated = components['schemas']['OIDCClientCreated'];
 export type OIDCClientCreatedEnvelope = components['schemas']['OIDCClientCreatedEnvelope'];
 export type OIDCClientEnvelope = components['schemas']['OIDCClientEnvelope'];
 export type OIDCClientListEnvelope = components['schemas']['OIDCClientListEnvelope'];
+export type OIDCClientSecretReveal = components['schemas']['OIDCClientSecretReveal'];
+export type OIDCClientSecretRevealEnvelope = components['schemas']['OIDCClientSecretRevealEnvelope'];
 export type SAMLServiceProvider = components['schemas']['SAMLServiceProvider'];
 export type SAMLServiceProviderInput = components['schemas']['SAMLServiceProviderInput'];
 export type IdentityProvider = components['schemas']['IdentityProvider'];
@@ -20401,6 +21309,9 @@ export type AgentRunCallbackWorkbenchErrorEvent = components['schemas']['AgentRu
 export type AgentRunCallbackWorkbenchStreamEvent = components['schemas']['AgentRunCallbackWorkbenchStreamEvent'];
 export type Principal = components['schemas']['Principal'];
 export type UserProfile = components['schemas']['UserProfile'];
+export type UpdateProfileRequest = components['schemas']['UpdateProfileRequest'];
+export type ChangePasswordRequest = components['schemas']['ChangePasswordRequest'];
+export type PasswordChangeResult = components['schemas']['PasswordChangeResult'];
 export type TokenSet = components['schemas']['TokenSet'];
 export type AuthResult = components['schemas']['AuthResult'];
 export type AuthProvider = components['schemas']['AuthProvider'];
@@ -20408,6 +21319,10 @@ export type LoginOptions = components['schemas']['LoginOptions'];
 export type PasswordLoginRequest = components['schemas']['PasswordLoginRequest'];
 export type RefreshRequest = components['schemas']['RefreshRequest'];
 export type OIDCExchangeRequest = components['schemas']['OIDCExchangeRequest'];
+export type DesktopAuthAttemptCreateRequest = components['schemas']['DesktopAuthAttemptCreateRequest'];
+export type DesktopAuthAttempt = components['schemas']['DesktopAuthAttempt'];
+export type DesktopAuthAttemptEnvelope = components['schemas']['DesktopAuthAttemptEnvelope'];
+export type DesktopAuthAttemptExchangeRequest = components['schemas']['DesktopAuthAttemptExchangeRequest'];
 export type StreamTicketRequest = components['schemas']['StreamTicketRequest'];
 export type StreamTicket = components['schemas']['StreamTicket'];
 export type PrincipalEnvelope = components['schemas']['PrincipalEnvelope'];
@@ -20431,6 +21346,8 @@ export type GitReferenceListEnvelope = components['schemas']['GitReferenceListEn
 export type GitCommitPageEnvelope = components['schemas']['GitCommitPageEnvelope'];
 export type BuildSource = components['schemas']['BuildSource'];
 export type BuildSourceInput = components['schemas']['BuildSourceInput'];
+export type BuildRepositoryBinding = components['schemas']['BuildRepositoryBinding'];
+export type BuildRepositoryRefInput = components['schemas']['BuildRepositoryRefInput'];
 export type BuildSourceConfig = components['schemas']['BuildSourceConfig'];
 export type Application = components['schemas']['Application'];
 export type ApplicationInput = components['schemas']['ApplicationInput'];
@@ -20451,6 +21368,7 @@ export type RegistryConnectionEnvelope = components['schemas']['RegistryConnecti
 export type RegistryConnectionListEnvelope = components['schemas']['RegistryConnectionListEnvelope'];
 export type WorkflowTemplate = components['schemas']['WorkflowTemplate'];
 export type WorkflowTemplateInput = components['schemas']['WorkflowTemplateInput'];
+export type ApplicationWorkflowInput = components['schemas']['ApplicationWorkflowInput'];
 export type ApplicationEnvironment = components['schemas']['ApplicationEnvironment'];
 export type ApplicationEnvironmentInput = components['schemas']['ApplicationEnvironmentInput'];
 export type KubernetesRelatedResource = components['schemas']['KubernetesRelatedResource'];
@@ -20489,6 +21407,14 @@ export type ApplicationDeliveryActionKind = components['schemas']['ApplicationDe
 export type ApplicationDeliveryActionRequest = components['schemas']['ApplicationDeliveryActionRequest'];
 export type ApplicationDeliveryActionRelatedIDs = components['schemas']['ApplicationDeliveryActionRelatedIDs'];
 export type ApplicationDeliveryActionResult = components['schemas']['ApplicationDeliveryActionResult'];
+export type ManifestPackageRenderer = components['schemas']['ManifestPackageRenderer'];
+export type ManifestPackageStatus = components['schemas']['ManifestPackageStatus'];
+export type ManifestPackageBinding = components['schemas']['ManifestPackageBinding'];
+export type ManifestPackage = components['schemas']['ManifestPackage'];
+export type ManifestPackageInput = components['schemas']['ManifestPackageInput'];
+export type ManifestPackagePage = components['schemas']['ManifestPackagePage'];
+export type ManifestPackageEnvelope = components['schemas']['ManifestPackageEnvelope'];
+export type ManifestPackagePageEnvelope = components['schemas']['ManifestPackagePageEnvelope'];
 export type ManifestSourceMode = components['schemas']['ManifestSourceMode'];
 export type ManifestSourceRefType = components['schemas']['ManifestSourceRefType'];
 export type ManifestSourceSyncPolicy = components['schemas']['ManifestSourceSyncPolicy'];
@@ -20566,6 +21492,7 @@ export type ApplicationServiceEnvelope = components['schemas']['ApplicationServi
 export type ApplicationServiceListEnvelope = components['schemas']['ApplicationServiceListEnvelope'];
 export type ApplicationEnvironmentEnvelope = components['schemas']['ApplicationEnvironmentEnvelope'];
 export type ApplicationEnvironmentListEnvelope = components['schemas']['ApplicationEnvironmentListEnvelope'];
+export type DeliveryEnvironmentListEnvelope = components['schemas']['DeliveryEnvironmentListEnvelope'];
 export type BuildTemplateEnvelope = components['schemas']['BuildTemplateEnvelope'];
 export type BuildTemplateListEnvelope = components['schemas']['BuildTemplateListEnvelope'];
 export type WorkflowTemplateEnvelope = components['schemas']['WorkflowTemplateEnvelope'];
@@ -20989,6 +21916,16 @@ export type ObservabilityLogRedactionPolicy = components['schemas']['Observabili
 export type ObservabilityLogLabelKeys = components['schemas']['ObservabilityLogLabelKeys'];
 export type ObservabilityLogDataSourceConfig = components['schemas']['ObservabilityLogDataSourceConfig'];
 export type ObservabilityDataSourceInput = components['schemas']['ObservabilityDataSourceInput'];
+export type AlertRuleType = components['schemas']['AlertRuleType'];
+export type AlertRuleStringMap = components['schemas']['AlertRuleStringMap'];
+export type AlertRuleInput = components['schemas']['AlertRuleInput'];
+export type AlertRule = components['schemas']['AlertRule'];
+export type AlertRuleEnvelope = components['schemas']['AlertRuleEnvelope'];
+export type AlertRuleListEnvelope = components['schemas']['AlertRuleListEnvelope'];
+export type AlertRuleTestResult = components['schemas']['AlertRuleTestResult'];
+export type AlertRuleTestResultEnvelope = components['schemas']['AlertRuleTestResultEnvelope'];
+export type AlertRuleRun = components['schemas']['AlertRuleRun'];
+export type AlertRuleRunListEnvelope = components['schemas']['AlertRuleRunListEnvelope'];
 export type ObservabilityDataSource = components['schemas']['ObservabilityDataSource'];
 export type ObservabilityDataSourceEnvelope = components['schemas']['ObservabilityDataSourceEnvelope'];
 export type ObservabilityDataSourceListEnvelope = components['schemas']['ObservabilityDataSourceListEnvelope'];
@@ -21206,10 +22143,14 @@ export type CloudExtensionPoint = components['schemas']['CloudExtensionPoint'];
 export type CloudExtensionPointListEnvelope = components['schemas']['CloudExtensionPointListEnvelope'];
 export type MarketplacePlugin = components['schemas']['MarketplacePlugin'];
 export type SoftwarePackage = components['schemas']['SoftwarePackage'];
+export type SoftwarePackageDownloadRecord = components['schemas']['SoftwarePackageDownloadRecord'];
+export type SoftwarePackageDownloadRecordListEnvelope = components['schemas']['SoftwarePackageDownloadRecordListEnvelope'];
 export type SoftwarePackageEnvelope = components['schemas']['SoftwarePackageEnvelope'];
 export type SoftwarePackageListEnvelope = components['schemas']['SoftwarePackageListEnvelope'];
 export type SoftwarePackageUploadRequest = components['schemas']['SoftwarePackageUploadRequest'];
 export type SoftwarePackageURLImportRequest = components['schemas']['SoftwarePackageURLImportRequest'];
+export type SoftwarePackageVisibility = components['schemas']['SoftwarePackageVisibility'];
+export type SoftwarePackageStatus = components['schemas']['SoftwarePackageStatus'];
 export type SoftwareStorage = components['schemas']['SoftwareStorage'];
 export type SoftwareStorageEnvelope = components['schemas']['SoftwareStorageEnvelope'];
 export type InstalledPlugin = components['schemas']['InstalledPlugin'];
@@ -21291,8 +22232,12 @@ export type ResponseError = components['responses']['Error'];
 export type ResponseComputeError = components['responses']['ComputeError'];
 export type ParameterMenuId = components['parameters']['MenuID'];
 export type ParameterAccessRoleId = components['parameters']['AccessRoleID'];
+export type ParameterUserId = components['parameters']['UserID'];
+export type ParameterTeamId = components['parameters']['TeamID'];
 export type ParameterScopeGrantId = components['parameters']['ScopeGrantID'];
 export type ParameterIdentityApplicationId = components['parameters']['IdentityApplicationID'];
+export type ParameterPortalApplicationId = components['parameters']['PortalApplicationID'];
+export type ParameterBrowserHandoffId = components['parameters']['BrowserHandoffID'];
 export type ParameterIdentityProviderId = components['parameters']['IdentityProviderID'];
 export type ParameterIdentityPolicyId = components['parameters']['IdentityPolicyID'];
 export type ParameterIdentityOutpostId = components['parameters']['IdentityOutpostID'];
@@ -21340,6 +22285,7 @@ export type ParameterKubernetesMetricsStepSecondsQuery = components['parameters'
 export type ParameterKubernetesResourceName = components['parameters']['KubernetesResourceName'];
 export type ParameterAgentInstallTicket = components['parameters']['AgentInstallTicket'];
 export type ParameterDataSourceId = components['parameters']['DataSourceID'];
+export type ParameterAlertRuleId = components['parameters']['AlertRuleID'];
 export type ParameterObservabilityDataSourceIdQuery = components['parameters']['ObservabilityDataSourceIDQuery'];
 export type ParameterObservabilityClusterIdQuery = components['parameters']['ObservabilityClusterIDQuery'];
 export type ParameterObservabilityEnvironmentQuery = components['parameters']['ObservabilityEnvironmentQuery'];
@@ -21385,6 +22331,7 @@ export type ParameterOidcCode = components['parameters']['OIDCCode'];
 export type ParameterOidcState = components['parameters']['OIDCState'];
 export type ParameterOperationId = components['parameters']['OperationID'];
 export type ParameterProviderId = components['parameters']['ProviderID'];
+export type ParameterAttemptId = components['parameters']['AttemptID'];
 export type ParameterPluginId = components['parameters']['PluginID'];
 export type ParameterPluginAssetPath = components['parameters']['PluginAssetPath'];
 export type ParameterKnowledgeBaseId = components['parameters']['KnowledgeBaseID'];
@@ -21624,6 +22571,149 @@ export interface operations {
             };
         };
     };
+    createDesktopAuthAttempt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DesktopAuthAttemptCreateRequest"];
+            };
+        };
+        responses: {
+            /** @description Short-lived desktop authentication attempt. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DesktopAuthAttemptEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+            413: components["responses"]["Error"];
+            429: components["responses"]["Error"];
+            501: components["responses"]["Error"];
+        };
+    };
+    startDesktopAuthAttempt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                attemptID: components["parameters"]["AttemptID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Redirect to the identity provider for this attempt. */
+            307: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            400: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+            410: components["responses"]["Error"];
+            429: components["responses"]["Error"];
+            501: components["responses"]["Error"];
+        };
+    };
+    exchangeDesktopAuthAttempt: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                attemptID: components["parameters"]["AttemptID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["DesktopAuthAttemptExchangeRequest"];
+            };
+        };
+        responses: {
+            /** @description Authenticated desktop session. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AuthResultEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+            409: components["responses"]["Error"];
+            410: components["responses"]["Error"];
+            413: components["responses"]["Error"];
+            429: components["responses"]["Error"];
+            501: components["responses"]["Error"];
+        };
+    };
+    getBrowserHandoff: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                browserHandoffID: components["parameters"]["BrowserHandoffID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Pending desktop-to-browser session handoff. */
+            200: {
+                headers: {
+                    "Cache-Control"?: "no-store";
+                    "Referrer-Policy"?: "no-referrer";
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["BrowserHandoffEnvelope"];
+                };
+            };
+            404: components["responses"]["Error"];
+            410: components["responses"]["Error"];
+            429: components["responses"]["Error"];
+        };
+    };
+    completeBrowserHandoff: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                browserHandoffID: components["parameters"]["BrowserHandoffID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Browser session created after explicit confirmation. */
+            200: {
+                headers: {
+                    "Cache-Control"?: "no-store";
+                    "Referrer-Policy"?: "no-referrer";
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["BrowserHandoffCompletionEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            409: components["responses"]["Error"];
+            410: components["responses"]["Error"];
+            429: components["responses"]["Error"];
+        };
+    };
     beginProviderLogin: {
         parameters: {
             query?: never;
@@ -21706,6 +22796,60 @@ export interface operations {
                     "application/json": components["schemas"]["UserProfileEnvelope"];
                 };
             };
+            401: components["responses"]["Error"];
+        };
+    };
+    updateCurrentUserProfile: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["UpdateProfileRequest"];
+            };
+        };
+        responses: {
+            /** @description Updated current user profile. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UserProfileEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            409: components["responses"]["Error"];
+        };
+    };
+    changeCurrentUserPassword: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ChangePasswordRequest"];
+            };
+        };
+        responses: {
+            /** @description Password changed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PasswordChangeResult"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
         };
     };
     getAuthBootstrap: {
@@ -22717,6 +23861,36 @@ export interface operations {
             404: components["responses"]["Error"];
         };
     };
+    saveApplicationEnvironmentWorkflow: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["ApplicationID"];
+                applicationEnvironmentID: components["parameters"]["ApplicationEnvironmentID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ApplicationWorkflowInput"];
+            };
+        };
+        responses: {
+            /** @description Application environment with its atomically saved workflow. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApplicationEnvironmentEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
     listApplicationServices: {
         parameters: {
             query?: never;
@@ -23618,6 +24792,160 @@ export interface operations {
             404: components["responses"]["Error"];
         };
     };
+    listDeliveryEnvironments: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Reusable delivery environments visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["DeliveryEnvironmentListEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+        };
+    };
+    listManifestPackages: {
+        parameters: {
+            query?: {
+                applicationId?: string;
+                serviceId?: string;
+                clusterId?: string;
+                namespace?: string;
+                search?: string;
+                page?: number;
+                pageSize?: number;
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Manifest packages visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ManifestPackagePageEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+        };
+    };
+    createManifestPackage: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ManifestPackageInput"];
+            };
+        };
+        responses: {
+            /** @description Created manifest package. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ManifestPackageEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    getManifestPackage: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                manifestPackageID: components["parameters"]["ManifestPackageID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Manifest package detail. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ManifestPackageEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    updateManifestPackage: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                manifestPackageID: components["parameters"]["ManifestPackageID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ManifestPackageInput"];
+            };
+        };
+        responses: {
+            /** @description Updated manifest package. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ManifestPackageEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    deleteManifestPackage: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                manifestPackageID: components["parameters"]["ManifestPackageID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Deleted manifest package. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OperationStatus"];
+                };
+            };
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
     getManifestSource: {
         parameters: {
             query?: never;
@@ -30093,6 +31421,188 @@ export interface operations {
             503: components["responses"]["Error"];
         };
     };
+    listAlertRules: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Alert rules visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleListEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+        };
+    };
+    createAlertRule: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AlertRuleInput"];
+            };
+        };
+        responses: {
+            /** @description Alert rule created. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    getAlertRule: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                ruleID: components["parameters"]["AlertRuleID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Alert rule detail. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    updateAlertRule: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                ruleID: components["parameters"]["AlertRuleID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AlertRuleInput"];
+            };
+        };
+        responses: {
+            /** @description Alert rule updated. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    validateAlertRule: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Compatibility token retained in the legacy path; preview evaluation does not resolve a persisted rule. */
+                ruleID: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AlertRuleInput"];
+            };
+        };
+        responses: {
+            /** @description Alert rule evaluation preview. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleTestResultEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    testAlertRule: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description Compatibility token retained in the legacy path; preview evaluation does not resolve a persisted rule. */
+                ruleID: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AlertRuleInput"];
+            };
+        };
+        responses: {
+            /** @description Alert rule evaluation preview. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleTestResultEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    listAlertRuleRuns: {
+        parameters: {
+            query?: {
+                ruleId?: string;
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Recent alert rule evaluation runs visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AlertRuleRunListEnvelope"];
+                };
+            };
+            403: components["responses"]["Error"];
+        };
+    };
     streamAlertEvents: {
         parameters: {
             query?: {
@@ -34156,6 +35666,7 @@ export interface operations {
             query?: {
                 platform?: string;
                 arch?: string;
+                storageIntegrationId?: string;
                 cursor?: string;
                 limit?: number;
             };
@@ -34239,6 +35750,7 @@ export interface operations {
     getSoftwareStorage: {
         parameters: {
             query?: {
+                storageIntegrationId?: string;
                 cursor?: string;
                 limit?: number;
             };
@@ -34310,6 +35822,34 @@ export interface operations {
             404: components["responses"]["Error"];
         };
     };
+    listSoftwarePackageDownloadRecords: {
+        parameters: {
+            query?: {
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                packageID: components["parameters"]["SoftwarePackageID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Recent successful download records, newest first. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SoftwarePackageDownloadRecordListEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
     listInstalledPlugins: {
         parameters: {
             query?: never;
@@ -36924,6 +38464,222 @@ export interface operations {
             404: components["responses"]["Error"];
         };
     };
+    listUserScopeGrants: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resource scope grants for the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantListEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    createUserScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ScopeGrantInput"];
+            };
+        };
+        responses: {
+            /** @description Created resource scope grant for the user. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    updateUserScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ScopeGrantInput"];
+            };
+        };
+        responses: {
+            /** @description Updated resource scope grant for the user. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    deleteUserScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userID: components["parameters"]["UserID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resource scope grant for the user deleted. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    listTeamScopeGrants: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resource scope grants for the team. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantListEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    createTeamScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ScopeGrantInput"];
+            };
+        };
+        responses: {
+            /** @description Created resource scope grant for the team. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+        };
+    };
+    updateTeamScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["ScopeGrantInput"];
+            };
+        };
+        responses: {
+            /** @description Updated resource scope grant for the team. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ScopeGrantEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    deleteTeamScopeGrant: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                teamID: components["parameters"]["TeamID"];
+                scopeGrantID: components["parameters"]["ScopeGrantID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Resource scope grant for the team deleted. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
     getIdentityRuntimeCapabilities: {
         parameters: {
             query?: never;
@@ -36945,6 +38701,194 @@ export interface operations {
             403: components["responses"]["IdentityError"];
         };
     };
+    getPortalBootstrap: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Current principal and visible provider portal data. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PortalBootstrapEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+        };
+    };
+    listPortalApplications: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Applications visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PortalApplicationListEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+        };
+    };
+    getPortalApplication: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Application visible to the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["IdentityApplicationEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    launchPortalApplication: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["PortalLaunchRequest"];
+            };
+        };
+        responses: {
+            /** @description Authorized launch decision for Web or desktop. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PortalLaunchDecisionEnvelope"];
+                };
+            };
+            400: components["responses"]["Error"];
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    favoritePortalApplication: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Favorited application. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["IdentityApplicationEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+            403: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    unfavoritePortalApplication: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                applicationID: components["parameters"]["PortalApplicationID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Application removed from favorites. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            401: components["responses"]["Error"];
+            404: components["responses"]["Error"];
+        };
+    };
+    listPortalRecentLaunches: {
+        parameters: {
+            query?: {
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Recent application launches for the current principal. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["IdentityApplicationLaunchListEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+        };
+    };
+    getPortalSecuritySummary: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Current principal security summary. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PortalSecuritySummaryEnvelope"];
+                };
+            };
+            401: components["responses"]["Error"];
+        };
+    };
     listIdentityApplications: {
         parameters: {
             query?: never;
@@ -37528,6 +39472,8 @@ export interface operations {
             /** @description Created OIDC client. */
             201: {
                 headers: {
+                    /** @description Always no-store when the response includes a client secret. */
+                    "Cache-Control"?: string;
                     [name: string]: unknown;
                 };
                 content: {
@@ -37609,6 +39555,33 @@ export interface operations {
             404: components["responses"]["IdentityError"];
         };
     };
+    revealIdentityOIDCClientSecret: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                oidcClientID: components["parameters"]["OIDCClientID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Decrypted OIDC client secret for an authorized administrator. The response must not be cached. */
+            200: {
+                headers: {
+                    /** @description Always `no-store` for secret responses. */
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OIDCClientSecretRevealEnvelope"];
+                };
+            };
+            403: components["responses"]["IdentityError"];
+            404: components["responses"]["IdentityError"];
+            409: components["responses"]["IdentityError"];
+        };
+    };
     listSAMLLoginSources: {
         parameters: {
             query?: never;