@redis-iris/agent-playbook 0.1.0-beta.1 → 0.1.0-beta.2

package/README.md

@@ -132,25 +132,29 @@ network metadata. These optional fields may be absent on-prem.
 
 ### Extraction binding access and readiness
 
-Store suggestions are scoped to the tenant and do not grant access. When creating
-an extraction binding, the deployment's admin token can bind any store; an OIDC caller needs
-a deployment-configured store or read access approved by the Identity Service
-through a configured RAM connection. Unauthorized requests return 403 without
-revealing whether the store exists.
+Store suggestions are scoped to the tenant and do not grant access. Creating a
+binding synchronously checks the caller's management consent, same-account RAM
+store ownership, destination readiness, and execution scope. A foreign or missing
+source is refused without revealing its metadata.
 
-A new binding starts in `preparing` with `enabled=false`. Poll the binding until
-it is `ready`, then enable it with an update that passes its `version` as `expectedVersion`.
-Refused grants produce `blocked`; dependency outages remain pending for retry.
-Enabling extraction also requires the deployment's extraction feature to be enabled.
+A new binding returns `ready` with `enabled=false`. Enable it with an update that
+passes its `version` as `expectedVersion`. Every explicit enable revalidates source
+consent and ownership with the current caller and can recover a blocked binding.
+Pausing or deleting requires destination management access and makes no source or
+grant-administration request. Runtime failures can mark a binding `blocked`;
+clients must tolerate unknown `blockedReason` values.
+
+Scan cadence is deployment-owned worker configuration. Binding requests and
+responses omit `intervalSeconds`; `idleWindowSeconds` remains user-configurable.
 
 ## Release status
 
 This SDK is a beta prerelease. Breaking changes may land between beta releases
-without a major-version increment. The prepared npm release is `0.1.0-beta.1`,
-matching Python `0.1.0b1`. Install an exact published version and upgrade intentionally:
+without a major-version increment. The prepared npm release is `0.1.0-beta.2`,
+matching Python `0.1.0b2`. Install an exact published version and upgrade intentionally:
 
 ```bash
-npm install @redis-iris/agent-playbook@0.1.0-beta.1
+npm install @redis-iris/agent-playbook@0.1.0-beta.2
 ```
 
 Node.js 20 or later is required. Both ESM and CommonJS imports are supported.
@@ -160,6 +164,19 @@ The generated snippets below use `<id>`, `https://api.example.com`, and
 bearer token, and service-issued IDs before running a snippet. In particular,
 `<id>` does not satisfy the Playbook ID format and is rejected before a request.
 
+## Upgrading to beta.2
+
+Extraction job responses no longer expose `intervalSeconds`, and
+`ExtractionBindingStatus` no longer declares `preparing`. Successful binding
+creation returns `ready` and disabled; remove preparation polling and enable
+explicitly after reviewing the binding. Remove reads of the retired scan-cadence
+field and configure cadence on the deployment instead.
+
+Cloud list/detail responses can report `state=unavailable` while preserving saved
+configuration and omitting live database enrichment. This read state does not
+confirm deletion or probe content Redis health. It cannot be submitted in a
+mutation; writable states remain `ready` and `suspended`.
+
 ## Upgrading to beta.1
 
 The control-plane client is now `AgentPlaybooksService`, replacing
@@ -205,6 +222,7 @@ contract for future actions without content.
   * [Documentation](#documentation)
   * [Two clients, one package](#two-clients-one-package)
   * [Release status](#release-status)
+  * [Upgrading to beta.2](#upgrading-to-beta2)
   * [Upgrading to beta.1](#upgrading-to-beta1)
   * [Upgrading from alpha.2](#upgrading-from-alpha2)
   * [SDK Installation](#sdk-installation)
@@ -232,25 +250,25 @@ The SDK can be installed with either [npm](https://www.npmjs.com/), [pnpm](https
 ### NPM
 
 ```bash
-npm add @redis-iris/agent-playbook@0.1.0-beta.1
+npm add @redis-iris/agent-playbook@0.1.0-beta.2
 ```
 
 ### PNPM
 
 ```bash
-pnpm add @redis-iris/agent-playbook@0.1.0-beta.1
+pnpm add @redis-iris/agent-playbook@0.1.0-beta.2
 ```
 
 ### Bun
 
 ```bash
-bun add @redis-iris/agent-playbook@0.1.0-beta.1
+bun add @redis-iris/agent-playbook@0.1.0-beta.2
 ```
 
 ### Yarn
 
 ```bash
-yarn add @redis-iris/agent-playbook@0.1.0-beta.1
+yarn add @redis-iris/agent-playbook@0.1.0-beta.2
 ```
 
 > [!NOTE]

package/dist/commonjs/controlplane/funcs/create-extraction-binding.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+ * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
  */
 export declare function createExtractionBinding(client: AgentPlaybooksServiceCore, playbookId: string, body: models.CreateExtractionBindingRequestContent, options?: RequestOptions): APIPromise<Result<models.CreateExtractionBindingResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.ExtractionConflictErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=create-extraction-binding.d.ts.map

package/dist/commonjs/controlplane/funcs/create-extraction-binding.js

@@ -49,7 +49,7 @@ const models = __importStar(require("../models/index.js"));
 const operations = __importStar(require("../models/operations/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+ * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
  */
 function createExtractionBinding(client, playbookId, body, options) {
     return new async_js_1.APIPromise($do(client, playbookId, body, options));

package/dist/commonjs/controlplane/funcs/get-playbook.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+ * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
  */
 export declare function getPlaybook(client: AgentPlaybooksServiceCore, playbookId: string, options?: RequestOptions): APIPromise<Result<models.GetPlaybookResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=get-playbook.d.ts.map

package/dist/commonjs/controlplane/funcs/get-playbook.js

@@ -49,7 +49,7 @@ const models = __importStar(require("../models/index.js"));
 const operations = __importStar(require("../models/operations/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+ * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
  */
 function getPlaybook(client, playbookId, options) {
     return new async_js_1.APIPromise($do(client, playbookId, options));

package/dist/commonjs/controlplane/funcs/list-playbooks.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+ * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
  */
 export declare function listPlaybooks(client: AgentPlaybooksServiceCore, options?: RequestOptions): APIPromise<Result<models.ListPlaybooksResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=list-playbooks.d.ts.map

package/dist/commonjs/controlplane/funcs/list-playbooks.js

@@ -46,7 +46,7 @@ const errors = __importStar(require("../models/errors/index.js"));
 const models = __importStar(require("../models/index.js"));
 const async_js_1 = require("../types/async.js");
 /**
- * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+ * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
  */
 function listPlaybooks(client, options) {
     return new async_js_1.APIPromise($do(client, options));

package/dist/commonjs/controlplane/lib/config.d.ts

@@ -23,8 +23,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1.0.0";
-    readonly sdkVersion: "0.1.0-beta.1";
+    readonly sdkVersion: "0.1.0-beta.2";
     readonly genVersion: "2.948.4";
-    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook";
+    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/controlplane/lib/config.js

@@ -18,8 +18,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0.0",
-    sdkVersion: "0.1.0-beta.1",
+    sdkVersion: "0.1.0-beta.2",
     genVersion: "2.948.4",
-    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook",
+    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook",
 };
 //# sourceMappingURL=config.js.map

package/dist/commonjs/controlplane/models/create-extraction-binding-request-content.d.ts

@@ -3,11 +3,11 @@ import { ExtractionBindingSource, ExtractionBindingSource$Outbound } from "./ext
 import { ExtractionJobConfiguration, ExtractionJobConfiguration$Outbound } from "./extraction-job-configuration.js";
 export type CreateExtractionBindingRequestContent = {
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     /**
-     * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+     * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
      */
     job: ExtractionJobConfiguration;
 };

package/dist/commonjs/controlplane/models/create-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type CreateExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type CreateExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type CreateExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/commonjs/controlplane/models/create-playbook-response-content.d.ts

@@ -24,6 +24,9 @@ export type CreatePlaybookResponseContent = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.

package/dist/commonjs/controlplane/models/create-playbook-response-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}
+{"version":3,"file":"create-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}

package/dist/commonjs/controlplane/models/create-playbook-response-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AAyC9B,gBAAgB;AACH,QAAA,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,+CACE,UAAkB,EACkD;IACpE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}
+{"version":3,"file":"create-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AA4C9B,gBAAgB;AACH,QAAA,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,+CACE,UAAkB,EACkD;IACpE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}

package/dist/commonjs/controlplane/models/delete-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type DeleteExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type DeleteExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type DeleteExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/commonjs/controlplane/models/extraction-binding-source.d.ts

@@ -3,7 +3,7 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 import { ExtractionSourceType } from "./extraction-source-type.js";
 /**
- * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+ * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
  */
 export type ExtractionBindingSource = {
     storeId: string;

package/dist/commonjs/controlplane/models/extraction-binding-status.d.ts

@@ -1,7 +1,6 @@
 import * as z from "zod/v3";
 import { OpenEnum } from "../types/enums.js";
 export declare const ExtractionBindingStatus: {
-    readonly Preparing: "preparing";
     readonly Ready: "ready";
     readonly Blocked: "blocked";
     readonly Deleting: "deleting";

package/dist/commonjs/controlplane/models/extraction-binding-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-binding-status.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,uBAAuB;;;;;CAK1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE/E,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAC2C,CAAC"}
+{"version":3,"file":"extraction-binding-status.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE/E,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAC2C,CAAC"}

package/dist/commonjs/controlplane/models/extraction-binding-status.js

@@ -39,7 +39,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ExtractionBindingStatus$inboundSchema = exports.ExtractionBindingStatus = void 0;
 const openEnums = __importStar(require("../types/enums.js"));
 exports.ExtractionBindingStatus = {
-    Preparing: "preparing",
     Ready: "ready",
     Blocked: "blocked",
     Deleting: "deleting",

package/dist/commonjs/controlplane/models/extraction-binding-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-binding-status.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,MAAY,SAAS,8CAA0B;AAGlC,QAAA,uBAAuB,GAAG;IACrC,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,SAAS,CAAC,aAAa,CAAC,QAAA,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"extraction-binding-status.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,MAAY,SAAS,8CAA0B;AAGlC,QAAA,uBAAuB,GAAG;IACrC,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AACH,QAAA,qCAAqC,GAI9C,SAAS,CAAC,aAAa,CAAC,QAAA,uBAAuB,CAAC,CAAC"}

package/dist/commonjs/controlplane/models/extraction-binding.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type ExtractionBinding = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type ExtractionBinding = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type ExtractionBinding = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/commonjs/controlplane/models/extraction-job-configuration.d.ts

@@ -1,7 +1,7 @@
 import * as z from "zod/v3";
 import { ExtractionJobType } from "./extraction-job-type.js";
 /**
- * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+ * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
  */
 export type ExtractionJobConfiguration = {
     /**

package/dist/commonjs/controlplane/models/extraction-job.d.ts

@@ -7,10 +7,6 @@ export type ExtractionJob = {
      * Exactly one extraction job kind. Skill extraction is reserved for future implementation and is currently rejected.
      */
     type: ExtractionJobType;
-    /**
-     * Read-only platform scan cadence, fixed at 300 seconds.
-     */
-    intervalSeconds: number;
     idleWindowSeconds: number;
 };
 /** @internal */

package/dist/commonjs/controlplane/models/extraction-job.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-job.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAC1B;;OAEG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAKP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}
+{"version":3,"file":"extraction-job.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAC1B;;OAEG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAIP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}

package/dist/commonjs/controlplane/models/extraction-job.js

@@ -44,7 +44,6 @@ const extraction_job_type_js_1 = require("./extraction-job-type.js");
 /** @internal */
 exports.ExtractionJob$inboundSchema = z.object({
     type: extraction_job_type_js_1.ExtractionJobType$inboundSchema,
-    intervalSeconds: z.number().int(),
     idleWindowSeconds: z.number().int(),
 });
 function extractionJobFromJSON(jsonString) {

package/dist/commonjs/controlplane/models/extraction-job.js.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-job.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAG9C,qEAGkC;AAclC,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,IAAI,EAAE,wDAA+B;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACpC,CAAC,CAAC;AAEH,+BACE,UAAkB,EACkC;IACpD,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AAAA,CACH"}
+{"version":3,"file":"extraction-job.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAG9C,qEAGkC;AAUlC,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,IAAI,EAAE,wDAA+B;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACpC,CAAC,CAAC;AAEH,+BACE,UAAkB,EACkC;IACpD,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AAAA,CACH"}

package/dist/commonjs/controlplane/models/get-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type GetExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type GetExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type GetExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/commonjs/controlplane/models/get-playbook-response-content.d.ts

@@ -24,6 +24,9 @@ export type GetPlaybookResponseContent = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.

package/dist/commonjs/controlplane/models/get-playbook-response-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/get-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wCAAwC,EAAE,CAAC,CAAC,OAAO,CAC9D,0BAA0B,EAC1B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAMjE"}
+{"version":3,"file":"get-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/get-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,0BAA0B,GAAG;IACvC,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,wCAAwC,EAAE,CAAC,CAAC,OAAO,CAC9D,0BAA0B,EAC1B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,kCAAkC,CAChD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAMjE"}

package/dist/commonjs/controlplane/models/get-playbook-response-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/get-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AAyC9B,gBAAgB;AACH,QAAA,wCAAwC,GAIjD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,4CACE,UAAkB,EAC+C;IACjE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,wCAAwC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACpE,wDAAwD,CACzD,CAAC;AAAA,CACH"}
+{"version":3,"file":"get-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/get-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AA4C9B,gBAAgB;AACH,QAAA,wCAAwC,GAIjD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,4CACE,UAAkB,EAC+C;IACjE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,wCAAwC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACpE,wDAAwD,CACzD,CAAC;AAAA,CACH"}

package/dist/commonjs/controlplane/models/playbook-state.d.ts

@@ -1,12 +1,19 @@
 import * as z from "zod/v3";
 import { OpenEnum } from "../types/enums.js";
+/**
+ * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+ */
 export declare const PlaybookState: {
     readonly Provisioning: "provisioning";
     readonly Ready: "ready";
     readonly Failed: "failed";
     readonly Suspended: "suspended";
     readonly Deleting: "deleting";
+    readonly Unavailable: "unavailable";
 };
+/**
+ * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+ */
 export type PlaybookState = OpenEnum<typeof PlaybookState>;
 /** @internal */
 export declare const PlaybookState$inboundSchema: z.ZodType<PlaybookState, z.ZodTypeDef, unknown>;

package/dist/commonjs/controlplane/models/playbook-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playbook-state.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook-state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,aAAa;;;;;;CAMhB,CAAC;AACX,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CACiC,CAAC"}
+{"version":3,"file":"playbook-state.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook-state.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;CAOhB,CAAC;AACX;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,aAAa,CAAC,CAAC;AAE3D,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CACiC,CAAC"}

package/dist/commonjs/controlplane/models/playbook-state.js

@@ -38,12 +38,16 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PlaybookState$inboundSchema = exports.PlaybookState = void 0;
 const openEnums = __importStar(require("../types/enums.js"));
+/**
+ * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+ */
 exports.PlaybookState = {
     Provisioning: "provisioning",
     Ready: "ready",
     Failed: "failed",
     Suspended: "suspended",
     Deleting: "deleting",
+    Unavailable: "unavailable",
 };
 /** @internal */
 exports.PlaybookState$inboundSchema = openEnums.inboundSchema(exports.PlaybookState);

package/dist/commonjs/controlplane/models/playbook-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"playbook-state.js","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook-state.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,MAAY,SAAS,8CAA0B;AAGlC,QAAA,aAAa,GAAG;IAC3B,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,SAAS,CAAC,aAAa,CAAC,QAAA,aAAa,CAAC,CAAC"}
+{"version":3,"file":"playbook-state.js","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook-state.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,MAAY,SAAS,8CAA0B;AAG/C;;GAEG;AACU,QAAA,aAAa,GAAG;IAC3B,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CAClB,CAAC;AAMX,gBAAgB;AACH,QAAA,2BAA2B,GAIpC,SAAS,CAAC,aAAa,CAAC,QAAA,aAAa,CAAC,CAAC"}

package/dist/commonjs/controlplane/models/playbook.d.ts

@@ -24,6 +24,9 @@ export type Playbook = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.

package/dist/commonjs/controlplane/models/playbook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"playbook.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,QAAQ,GAAG;IACrB,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAC5C,QAAQ,EACR,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAM/C"}
+{"version":3,"file":"playbook.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,QAAQ,GAAG;IACrB,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAC5C,QAAQ,EACR,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAM/C"}