@redis-iris/agent-playbook 0.1.0-alpha.4 → 0.1.0-beta.2

package/src/controlplane/models/create-extraction-binding-response-content.ts

@@ -20,7 +20,7 @@ import {
 } from "./extraction-job.js";
 
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type CreateExtractionBindingResponseContent = {
   bindingId: string;
@@ -29,13 +29,13 @@ export type CreateExtractionBindingResponseContent = {
    */
   playbookId: string;
   /**
-   * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+   * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
    */
   source: ExtractionBindingSource;
   job: ExtractionJob;
   status: ExtractionBindingStatus;
   /**
-   * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+   * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
    */
   enabled: boolean;
   /**
@@ -43,7 +43,7 @@ export type CreateExtractionBindingResponseContent = {
    */
   version: number;
   /**
-   * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+   * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
    */
   blockedReason?: string | undefined;
   /**

package/src/controlplane/models/create-playbook-response-content.ts

@@ -51,6 +51,9 @@ export type CreatePlaybookResponseContent = {
   playbookId: string;
   tenantId: string;
   name: string;
+  /**
+   * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+   */
   state: PlaybookState;
   /**
    * Create-only embedding identity for a Playbook.

package/src/controlplane/models/delete-extraction-binding-response-content.ts

@@ -20,7 +20,7 @@ import {
 } from "./extraction-job.js";
 
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type DeleteExtractionBindingResponseContent = {
   bindingId: string;
@@ -29,13 +29,13 @@ export type DeleteExtractionBindingResponseContent = {
    */
   playbookId: string;
   /**
-   * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+   * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
    */
   source: ExtractionBindingSource;
   job: ExtractionJob;
   status: ExtractionBindingStatus;
   /**
-   * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+   * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
    */
   enabled: boolean;
   /**
@@ -43,7 +43,7 @@ export type DeleteExtractionBindingResponseContent = {
    */
   version: number;
   /**
-   * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+   * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
    */
   blockedReason?: string | undefined;
   /**

package/src/controlplane/models/errors/{playbook-service-error.ts → agent-playbooks-service-error.ts}

@@ -3,7 +3,7 @@
  */
 
 /** The base class for all HTTP error responses */
-export class PlaybookServiceError extends Error {
+export class AgentPlaybooksServiceError extends Error {
   /** HTTP status code */
   public readonly statusCode: number;
   /** HTTP body */
@@ -30,6 +30,6 @@ export class PlaybookServiceError extends Error {
     this.contentType = httpMeta.response.headers.get("content-type") || "";
     this.rawResponse = httpMeta.response;
 
-    this.name = "PlaybookServiceError";
+    this.name = "AgentPlaybooksServiceError";
   }
 }

package/src/controlplane/models/errors/api-error.ts

@@ -2,10 +2,10 @@
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
  */
 
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /** The fallback error class if no more specific error class is matched */
-export class APIError extends PlaybookServiceError {
+export class APIError extends AgentPlaybooksServiceError {
   constructor(
     message: string,
     httpMeta: {

package/src/controlplane/models/errors/authentication-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * Authentication credentials are missing, malformed, or invalid.
@@ -40,7 +40,9 @@ export type AuthenticationErrorResponseContentData = {
 /**
  * Authentication credentials are missing, malformed, or invalid.
  */
-export class AuthenticationErrorResponseContent extends PlaybookServiceError {
+export class AuthenticationErrorResponseContent
+  extends AgentPlaybooksServiceError
+{
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/bad-request-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * Request validation or input decoding failed.
@@ -44,7 +44,7 @@ export type BadRequestErrorResponseContentData = {
 /**
  * Request validation or input decoding failed.
  */
-export class BadRequestErrorResponseContent extends PlaybookServiceError {
+export class BadRequestErrorResponseContent extends AgentPlaybooksServiceError {
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/conflict-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * The request conflicts with the current state of the resource.
@@ -40,7 +40,7 @@ export type ConflictErrorResponseContentData = {
 /**
  * The request conflicts with the current state of the resource.
  */
-export class ConflictErrorResponseContent extends PlaybookServiceError {
+export class ConflictErrorResponseContent extends AgentPlaybooksServiceError {
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/extraction-conflict-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * Binding version/state conflict, or extraction disabled by deployment configuration. Disabled extraction still permits inspection, pause and deletion.
@@ -38,7 +38,7 @@ export type ExtractionConflictErrorResponseContentData = {
  * Binding version/state conflict, or extraction disabled by deployment configuration. Disabled extraction still permits inspection, pause and deletion.
  */
 export class ExtractionConflictErrorResponseContent
-  extends PlaybookServiceError
+  extends AgentPlaybooksServiceError
 {
   /**
    * A short, human-readable summary of the problem

package/src/controlplane/models/errors/extraction-forbidden-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * Caller authorization failure.
@@ -38,7 +38,7 @@ export type ExtractionForbiddenErrorResponseContentData = {
  * Caller authorization failure.
  */
 export class ExtractionForbiddenErrorResponseContent
-  extends PlaybookServiceError
+  extends AgentPlaybooksServiceError
 {
   /**
    * A short, human-readable summary of the problem

package/src/controlplane/models/errors/failed-dependency-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * A dependent resource required to process the request is unavailable or unhealthy.
@@ -40,7 +40,9 @@ export type FailedDependencyErrorResponseContentData = {
 /**
  * A dependent resource required to process the request is unavailable or unhealthy.
  */
-export class FailedDependencyErrorResponseContent extends PlaybookServiceError {
+export class FailedDependencyErrorResponseContent
+  extends AgentPlaybooksServiceError
+{
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/index.ts

@@ -2,6 +2,7 @@
  * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
  */
 
+export * from "./agent-playbooks-service-error.js";
 export * from "./api-error.js";
 export * from "./authentication-error-response-content.js";
 export * from "./bad-request-error-response-content.js";
@@ -11,7 +12,6 @@ export * from "./extraction-forbidden-error-response-content.js";
 export * from "./failed-dependency-error-response-content.js";
 export * from "./http-client-errors.js";
 export * from "./not-found-error-response-content.js";
-export * from "./playbook-service-error.js";
 export * from "./playbook-service-unavailable-error-response-content.js";
 export * from "./resource-suspended-error-response-content.js";
 export * from "./response-validation-error.js";

package/src/controlplane/models/errors/not-found-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * The requested resource does not exist.
@@ -40,7 +40,7 @@ export type NotFoundErrorResponseContentData = {
 /**
  * The requested resource does not exist.
  */
-export class NotFoundErrorResponseContent extends PlaybookServiceError {
+export class NotFoundErrorResponseContent extends AgentPlaybooksServiceError {
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/playbook-service-unavailable-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 export type PlaybookServiceUnavailableErrorResponseContentData = {
   /**
@@ -32,7 +32,7 @@ export type PlaybookServiceUnavailableErrorResponseContentData = {
 };
 
 export class PlaybookServiceUnavailableErrorResponseContent
-  extends PlaybookServiceError
+  extends AgentPlaybooksServiceError
 {
   /**
    * A short, human-readable summary of the problem

package/src/controlplane/models/errors/resource-suspended-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * The requested resource exists but is suspended by an administrator.
@@ -41,7 +41,7 @@ export type ResourceSuspendedErrorResponseContentData = {
  * The requested resource exists but is suspended by an administrator.
  */
 export class ResourceSuspendedErrorResponseContent
-  extends PlaybookServiceError
+  extends AgentPlaybooksServiceError
 {
   /**
    * A short, human-readable summary of the problem

package/src/controlplane/models/errors/response-validation-error.ts

@@ -3,10 +3,10 @@
  */
 
 import * as z from "zod/v3";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 import { formatZodError } from "./sdk-validation-error.js";
 
-export class ResponseValidationError extends PlaybookServiceError {
+export class ResponseValidationError extends AgentPlaybooksServiceError {
   /**
    * The raw value that failed validation.
    */

package/src/controlplane/models/errors/timeout-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * The request timed out before the service could complete it.
@@ -40,7 +40,7 @@ export type TimeoutErrorResponseContentData = {
 /**
  * The request timed out before the service could complete it.
  */
-export class TimeoutErrorResponseContent extends PlaybookServiceError {
+export class TimeoutErrorResponseContent extends AgentPlaybooksServiceError {
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/errors/unexpected-error-response-content.ts

@@ -4,7 +4,7 @@
 
 import * as z from "zod/v3";
 import * as models from "../index.js";
-import { PlaybookServiceError } from "./playbook-service-error.js";
+import { AgentPlaybooksServiceError } from "./agent-playbooks-service-error.js";
 
 /**
  * The service failed with an unexpected internal error.
@@ -40,7 +40,7 @@ export type UnexpectedErrorResponseContentData = {
 /**
  * The service failed with an unexpected internal error.
  */
-export class UnexpectedErrorResponseContent extends PlaybookServiceError {
+export class UnexpectedErrorResponseContent extends AgentPlaybooksServiceError {
   /**
    * A short, human-readable summary of the problem
    *

package/src/controlplane/models/extraction-binding-source.ts

@@ -13,7 +13,7 @@ import {
 } from "./extraction-source-type.js";
 
 /**
- * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+ * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
  */
 export type ExtractionBindingSource = {
   storeId: string;

package/src/controlplane/models/extraction-binding-status.ts

@@ -7,7 +7,6 @@ import * as openEnums from "../types/enums.js";
 import { OpenEnum } from "../types/enums.js";
 
 export const ExtractionBindingStatus = {
-  Preparing: "preparing",
   Ready: "ready",
   Blocked: "blocked",
   Deleting: "deleting",

package/src/controlplane/models/extraction-binding.ts

@@ -20,7 +20,7 @@ import {
 } from "./extraction-job.js";
 
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type ExtractionBinding = {
   bindingId: string;
@@ -29,13 +29,13 @@ export type ExtractionBinding = {
    */
   playbookId: string;
   /**
-   * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+   * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
    */
   source: ExtractionBindingSource;
   job: ExtractionJob;
   status: ExtractionBindingStatus;
   /**
-   * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+   * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
    */
   enabled: boolean;
   /**
@@ -43,7 +43,7 @@ export type ExtractionBinding = {
    */
   version: number;
   /**
-   * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+   * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
    */
   blockedReason?: string | undefined;
   /**

package/src/controlplane/models/extraction-job-configuration.ts

@@ -9,7 +9,7 @@ import {
 } from "./extraction-job-type.js";
 
 /**
- * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+ * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
  */
 export type ExtractionJobConfiguration = {
   /**

package/src/controlplane/models/extraction-job.ts

@@ -16,10 +16,6 @@ export type ExtractionJob = {
    * Exactly one extraction job kind. Skill extraction is reserved for future implementation and is currently rejected.
    */
   type: ExtractionJobType;
-  /**
-   * Read-only platform scan cadence, fixed at 300 seconds.
-   */
-  intervalSeconds: number;
   idleWindowSeconds: number;
 };
 
@@ -30,7 +26,6 @@ export const ExtractionJob$inboundSchema: z.ZodType<
   unknown
 > = z.object({
   type: ExtractionJobType$inboundSchema,
-  intervalSeconds: z.number().int(),
   idleWindowSeconds: z.number().int(),
 });
 

package/src/controlplane/models/get-extraction-binding-response-content.ts

@@ -20,7 +20,7 @@ import {
 } from "./extraction-job.js";
 
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type GetExtractionBindingResponseContent = {
   bindingId: string;
@@ -29,13 +29,13 @@ export type GetExtractionBindingResponseContent = {
    */
   playbookId: string;
   /**
-   * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+   * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
    */
   source: ExtractionBindingSource;
   job: ExtractionJob;
   status: ExtractionBindingStatus;
   /**
-   * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+   * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
    */
   enabled: boolean;
   /**
@@ -43,7 +43,7 @@ export type GetExtractionBindingResponseContent = {
    */
   version: number;
   /**
-   * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+   * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
    */
   blockedReason?: string | undefined;
   /**

package/src/controlplane/models/get-playbook-response-content.ts

@@ -51,6 +51,9 @@ export type GetPlaybookResponseContent = {
   playbookId: string;
   tenantId: string;
   name: string;
+  /**
+   * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+   */
   state: PlaybookState;
   /**
    * Create-only embedding identity for a Playbook.

package/src/controlplane/models/playbook-state.ts

@@ -6,13 +6,20 @@ import * as z from "zod/v3";
 import * as openEnums from "../types/enums.js";
 import { OpenEnum } from "../types/enums.js";
 
+/**
+ * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+ */
 export const PlaybookState = {
   Provisioning: "provisioning",
   Ready: "ready",
   Failed: "failed",
   Suspended: "suspended",
   Deleting: "deleting",
+  Unavailable: "unavailable",
 } as const;
+/**
+ * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+ */
 export type PlaybookState = OpenEnum<typeof PlaybookState>;
 
 /** @internal */

package/src/controlplane/models/playbook.ts

@@ -51,6 +51,9 @@ export type Playbook = {
   playbookId: string;
   tenantId: string;
   name: string;
+  /**
+   * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+   */
   state: PlaybookState;
   /**
    * Create-only embedding identity for a Playbook.

package/src/controlplane/models/update-extraction-binding-request-content.ts

@@ -12,7 +12,7 @@ import {
 export type UpdateExtractionBindingRequestContent = {
   expectedVersion: number;
   /**
-   * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+   * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
    */
   job?: ExtractionJobConfiguration | undefined;
   enabled?: boolean | undefined;

package/src/controlplane/models/update-extraction-binding-response-content.ts

@@ -20,7 +20,7 @@ import {
 } from "./extraction-job.js";
 
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type UpdateExtractionBindingResponseContent = {
   bindingId: string;
@@ -29,13 +29,13 @@ export type UpdateExtractionBindingResponseContent = {
    */
   playbookId: string;
   /**
-   * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+   * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
    */
   source: ExtractionBindingSource;
   job: ExtractionJob;
   status: ExtractionBindingStatus;
   /**
-   * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+   * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
    */
   enabled: boolean;
   /**
@@ -43,7 +43,7 @@ export type UpdateExtractionBindingResponseContent = {
    */
   version: number;
   /**
-   * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+   * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
    */
   blockedReason?: string | undefined;
   /**

package/src/controlplane/models/update-playbook-response-content.ts

@@ -51,6 +51,9 @@ export type UpdatePlaybookResponseContent = {
   playbookId: string;
   tenantId: string;
   name: string;
+  /**
+   * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+   */
   state: PlaybookState;
   /**
    * Create-only embedding identity for a Playbook.