@redis-iris/agent-playbook 0.1.0-beta.1 → 0.1.0-beta.2

package/dist/commonjs/controlplane/models/playbook.js.map

@@ -1 +1 @@
-{"version":3,"file":"playbook.js","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AAyC9B,gBAAgB;AACH,QAAA,sBAAsB,GAI/B,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,0BACE,UAAkB,EAC6B;IAC/C,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClD,sCAAsC,CACvC,CAAC;AAAA,CACH"}
+{"version":3,"file":"playbook.js","sourceRoot":"","sources":["../../../../src/controlplane/models/playbook.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AA4C9B,gBAAgB;AACH,QAAA,sBAAsB,GAI/B,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,0BACE,UAAkB,EAC6B;IAC/C,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClD,sCAAsC,CACvC,CAAC;AAAA,CACH"}

package/dist/commonjs/controlplane/models/update-extraction-binding-request-content.d.ts

@@ -3,7 +3,7 @@ import { ExtractionJobConfiguration, ExtractionJobConfiguration$Outbound } from
 export type UpdateExtractionBindingRequestContent = {
     expectedVersion: number;
     /**
-     * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+     * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
      */
     job?: ExtractionJobConfiguration | undefined;
     enabled?: boolean | undefined;

package/dist/commonjs/controlplane/models/update-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type UpdateExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type UpdateExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type UpdateExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/commonjs/controlplane/models/update-playbook-response-content.d.ts

@@ -24,6 +24,9 @@ export type UpdatePlaybookResponseContent = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.

package/dist/commonjs/controlplane/models/update-playbook-response-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/update-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}
+{"version":3,"file":"update-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/update-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}

package/dist/commonjs/controlplane/models/update-playbook-response-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"update-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/update-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AAyC9B,gBAAgB;AACH,QAAA,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,+CACE,UAAkB,EACkD;IACpE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}
+{"version":3,"file":"update-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/update-playbook-response-content.ts"],"names":[],"mappings":";AAAA;;GAEG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,MAAY,CAAC,mCAAe;AAC5B,kDAA8C;AAE9C,qEAGkC;AAClC,+DAG+B;AAC/B,+DAG+B;AAC/B,iFAGwC;AACxC,+DAG+B;AAE/B,2DAG6B;AAC7B,6DAG8B;AA4C9B,gBAAgB;AACH,QAAA,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,wDAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,oEAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,mDAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,+CAA2B;IAClC,SAAS,EAAE,mDAA6B;IACxC,SAAS,EAAE,mDAA6B;IACxC,cAAc,EAAE,iDAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,+CACE,UAAkB,EACkD;IACpE,OAAO,IAAA,sBAAS,EACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,QAAA,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}

package/dist/commonjs/controlplane/sdk/sdk.d.ts

@@ -23,7 +23,7 @@ export declare class AgentPlaybooksService extends ClientSDK {
      */
     getNetworkInfo(options?: RequestOptions): Promise<models.GetNetworkInfoResponseContent>;
     /**
-     * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+     * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
      */
     listPlaybooks(options?: RequestOptions): Promise<models.ListPlaybooksResponseContent>;
     /**
@@ -32,7 +32,7 @@ export declare class AgentPlaybooksService extends ClientSDK {
     createPlaybook(request: models.CreatePlaybookRequestContent, options?: RequestOptions): Promise<models.CreatePlaybookResponseContent>;
     deletePlaybook(playbookId: string, options?: RequestOptions): Promise<void>;
     /**
-     * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+     * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
      */
     getPlaybook(playbookId: string, options?: RequestOptions): Promise<models.GetPlaybookResponseContent>;
     /**
@@ -45,7 +45,7 @@ export declare class AgentPlaybooksService extends ClientSDK {
     clearPlaybook(playbookId: string, scope?: models.ClearScope | undefined, options?: RequestOptions): Promise<models.ClearPlaybookResponseContent>;
     listExtractionBindings(playbookId: string, options?: RequestOptions): Promise<models.ListExtractionBindingsResponseContent>;
     /**
-     * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+     * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
      */
     createExtractionBinding(playbookId: string, body: models.CreateExtractionBindingRequestContent, options?: RequestOptions): Promise<models.CreateExtractionBindingResponseContent>;
     deleteExtractionBinding(playbookId: string, bindingId: string, options?: RequestOptions): Promise<models.DeleteExtractionBindingResponseContent>;

package/dist/commonjs/controlplane/sdk/sdk.js

@@ -53,7 +53,7 @@ class AgentPlaybooksService extends sdks_js_1.ClientSDK {
         return (0, fp_js_1.unwrapAsync)((0, get_network_info_js_1.getNetworkInfo)(this, options));
     }
     /**
-     * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+     * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
      */
     async listPlaybooks(options) {
         return (0, fp_js_1.unwrapAsync)((0, list_playbooks_js_1.listPlaybooks)(this, options));
@@ -68,7 +68,7 @@ class AgentPlaybooksService extends sdks_js_1.ClientSDK {
         return (0, fp_js_1.unwrapAsync)((0, delete_playbook_js_1.deletePlaybook)(this, playbookId, options));
     }
     /**
-     * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+     * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
      */
     async getPlaybook(playbookId, options) {
         return (0, fp_js_1.unwrapAsync)((0, get_playbook_js_1.getPlaybook)(this, playbookId, options));
@@ -89,7 +89,7 @@ class AgentPlaybooksService extends sdks_js_1.ClientSDK {
         return (0, fp_js_1.unwrapAsync)((0, list_extraction_bindings_js_1.listExtractionBindings)(this, playbookId, options));
     }
     /**
-     * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+     * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
      */
     async createExtractionBinding(playbookId, body, options) {
         return (0, fp_js_1.unwrapAsync)((0, create_extraction_binding_js_1.createExtractionBinding)(this, playbookId, body, options));

package/dist/commonjs/lib/config.d.ts

@@ -27,8 +27,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1.0.0";
-    readonly sdkVersion: "0.1.0-beta.1";
+    readonly sdkVersion: "0.1.0-beta.2";
     readonly genVersion: "2.948.4";
-    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook";
+    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/commonjs/lib/config.js

@@ -19,8 +19,8 @@ function serverURLFromOptions(options) {
 exports.SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0.0",
-    sdkVersion: "0.1.0-beta.1",
+    sdkVersion: "0.1.0-beta.2",
     genVersion: "2.948.4",
-    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook",
+    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook",
 };
 //# sourceMappingURL=config.js.map

package/dist/esm/controlplane/funcs/create-extraction-binding.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+ * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
  */
 export declare function createExtractionBinding(client: AgentPlaybooksServiceCore, playbookId: string, body: models.CreateExtractionBindingRequestContent, options?: RequestOptions): APIPromise<Result<models.CreateExtractionBindingResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.ExtractionConflictErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=create-extraction-binding.d.ts.map

package/dist/esm/controlplane/funcs/create-extraction-binding.js

@@ -13,7 +13,7 @@ import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
 import { APIPromise } from "../types/async.js";
 /**
- * Registers a client-supplied RAM store reference and FAQ policy. The admin token can bind each store. An OIDC caller can bind a store in the configured store list. With a RAM connection, it can also bind a store on which it has read access in the Identity Service. In other cases, the request fails with 403, and the response does not show whether the store exists. Returns preparing and enabled=false. The control plane asynchronously provisions extraction-worker RAM source read and Playbook destination read/propose grants; both accepted grants make the binding ready, refused grants make it blocked, and dependency outages remain pending for retry. The worker validates live RAM access when extraction runs. Poll GET until ready, then PATCH to enable.
+ * Validates caller management consent, exact same-account RAM source ownership, destination readiness and execution scope synchronously. Success returns ready and enabled=false. Every explicit enable revalidates with the current caller. Pause/delete require destination management only and make no source or grant-administration request. A foreign or missing source is refused without revealing its metadata.
  */
 export function createExtractionBinding(client, playbookId, body, options) {
     return new APIPromise($do(client, playbookId, body, options));

package/dist/esm/controlplane/funcs/get-playbook.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+ * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
  */
 export declare function getPlaybook(client: AgentPlaybooksServiceCore, playbookId: string, options?: RequestOptions): APIPromise<Result<models.GetPlaybookResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=get-playbook.d.ts.map

package/dist/esm/controlplane/funcs/get-playbook.js

@@ -13,7 +13,7 @@ import * as models from "../models/index.js";
 import * as operations from "../models/operations/index.js";
 import { APIPromise } from "../types/async.js";
 /**
- * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT.
+ * Reads one Playbook. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. A missing or deleted database, or a recognized metadata connection failure, returns saved configuration with state=unavailable and without endpoints, databaseBinding.name, or databaseBinding.accessCidrs. This effective read state is not persisted and is not a mutation input. It reports unavailable live database information, not confirmed deletion or a content Redis health probe. Authorization, certificate-verification, cancellation/deadline, malformed-response, and unrelated service errors still fail the request.
  */
 export function getPlaybook(client, playbookId, options) {
     return new APIPromise($do(client, playbookId, options));

package/dist/esm/controlplane/funcs/list-playbooks.d.ts

@@ -9,7 +9,7 @@ import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 /**
- * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+ * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
  */
 export declare function listPlaybooks(client: AgentPlaybooksServiceCore, options?: RequestOptions): APIPromise<Result<models.ListPlaybooksResponseContent, errors.BadRequestErrorResponseContent | errors.AuthenticationErrorResponseContent | errors.ExtractionForbiddenErrorResponseContent | errors.NotFoundErrorResponseContent | errors.TimeoutErrorResponseContent | errors.FailedDependencyErrorResponseContent | errors.UnexpectedErrorResponseContent | errors.PlaybookServiceUnavailableErrorResponseContent | AgentPlaybooksServiceError | ResponseValidationError | ConnectionError | RequestAbortedError | RequestTimeoutError | InvalidRequestError | UnexpectedClientError | SDKValidationError>>;
 //# sourceMappingURL=list-playbooks.d.ts.map

package/dist/esm/controlplane/funcs/list-playbooks.js

@@ -10,7 +10,7 @@ import * as errors from "../models/errors/index.js";
 import * as models from "../models/index.js";
 import { APIPromise } from "../types/async.js";
 /**
- * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed without endpoint, database name or accessCidrs enrichment.
+ * Lists the account's Playbooks. Cloud requests require JSESSIONID and X-CSRF-Token in addition to the operator JWT. If a selected database is unavailable, its Playbook remains listed with state=unavailable and without endpoint, database name or accessCidrs enrichment for recognized missing/deleted database or metadata connection failures. Other inventory enrichment failures retain the saved state.
  */
 export function listPlaybooks(client, options) {
     return new APIPromise($do(client, options));

package/dist/esm/controlplane/lib/config.d.ts

@@ -23,8 +23,8 @@ export declare function serverURLFromOptions(options: SDKOptions): URL | null;
 export declare const SDK_METADATA: {
     readonly language: "typescript";
     readonly openapiDocVersion: "1.0.0";
-    readonly sdkVersion: "0.1.0-beta.1";
+    readonly sdkVersion: "0.1.0-beta.2";
     readonly genVersion: "2.948.4";
-    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook";
+    readonly userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook";
 };
 //# sourceMappingURL=config.d.ts.map

package/dist/esm/controlplane/lib/config.js

@@ -14,8 +14,8 @@ export function serverURLFromOptions(options) {
 export const SDK_METADATA = {
     language: "typescript",
     openapiDocVersion: "1.0.0",
-    sdkVersion: "0.1.0-beta.1",
+    sdkVersion: "0.1.0-beta.2",
     genVersion: "2.948.4",
-    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.1 2.948.4 1.0.0 @redis-iris/agent-playbook",
+    userAgent: "speakeasy-sdk/typescript 0.1.0-beta.2 2.948.4 1.0.0 @redis-iris/agent-playbook",
 };
 //# sourceMappingURL=config.js.map

package/dist/esm/controlplane/models/create-extraction-binding-request-content.d.ts

@@ -3,11 +3,11 @@ import { ExtractionBindingSource, ExtractionBindingSource$Outbound } from "./ext
 import { ExtractionJobConfiguration, ExtractionJobConfiguration$Outbound } from "./extraction-job-configuration.js";
 export type CreateExtractionBindingRequestContent = {
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     /**
-     * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+     * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
      */
     job: ExtractionJobConfiguration;
 };

package/dist/esm/controlplane/models/create-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type CreateExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type CreateExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type CreateExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/esm/controlplane/models/create-playbook-response-content.d.ts

@@ -24,6 +24,9 @@ export type CreatePlaybookResponseContent = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.

package/dist/esm/controlplane/models/create-playbook-response-content.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}
+{"version":3,"file":"create-playbook-response-content.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,EAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,eAAe,EAEhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,aAAa,EAEd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EAEf,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC;IACjD;;OAEG;IACH,GAAG,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC1C;;OAEG;IACH,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IAC9C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,aAAa,CAAC;IACrB;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,eAAe,CAAC;IAC3B;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAC/B;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;IAChB;;OAEG;IACH,SAAS,EAAE,IAAI,CAAC;CACjB,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2CAA2C,EAAE,CAAC,CAAC,OAAO,CACjE,6BAA6B,EAC7B,CAAC,CAAC,UAAU,EACZ,OAAO,CAcP,CAAC;AAEH,wBAAgB,qCAAqC,CACnD,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAMpE"}

package/dist/esm/controlplane/models/create-playbook-response-content.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAEL,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,qCAAqC,GACtC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAyC9B,gBAAgB;AAChB,MAAM,CAAC,MAAM,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,qCAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,2BAA2B;IAClC,SAAS,EAAE,6BAA6B;IACxC,SAAS,EAAE,6BAA6B;IACxC,cAAc,EAAE,4BAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,UAAU,qCAAqC,CACnD,UAAkB,EACkD;IACpE,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}
+{"version":3,"file":"create-playbook-response-content.js","sourceRoot":"","sources":["../../../../src/controlplane/models/create-playbook-response-content.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,EAEL,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,qCAAqC,GACtC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAEL,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,2BAA2B,GAC5B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AA4C9B,gBAAgB;AAChB,MAAM,CAAC,MAAM,2CAA2C,GAIpD,CAAC,CAAC,MAAM,CAAC;IACX,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC9D,GAAG,EAAE,qCAAqC,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,2BAA2B;IAClC,SAAS,EAAE,6BAA6B;IACxC,SAAS,EAAE,6BAA6B;IACxC,cAAc,EAAE,4BAA4B;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC,CAAC;AAEH,MAAM,UAAU,qCAAqC,CACnD,UAAkB,EACkD;IACpE,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,2CAA2C,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvE,2DAA2D,CAC5D,CAAC;AAAA,CACH"}

package/dist/esm/controlplane/models/delete-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type DeleteExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type DeleteExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type DeleteExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/esm/controlplane/models/extraction-binding-source.d.ts

@@ -3,7 +3,7 @@ import { Result as SafeParseResult } from "../types/fp.js";
 import { SDKValidationError } from "./errors/sdk-validation-error.js";
 import { ExtractionSourceType } from "./extraction-source-type.js";
 /**
- * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+ * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
  */
 export type ExtractionBindingSource = {
     storeId: string;

package/dist/esm/controlplane/models/extraction-binding-status.d.ts

@@ -1,7 +1,6 @@
 import * as z from "zod/v3";
 import { OpenEnum } from "../types/enums.js";
 export declare const ExtractionBindingStatus: {
-    readonly Preparing: "preparing";
     readonly Ready: "ready";
     readonly Blocked: "blocked";
     readonly Deleting: "deleting";

package/dist/esm/controlplane/models/extraction-binding-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-binding-status.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,uBAAuB;;;;;CAK1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE/E,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAC2C,CAAC"}
+{"version":3,"file":"extraction-binding-status.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,eAAO,MAAM,uBAAuB;;;;CAI1B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAE/E,gBAAgB;AAChB,eAAO,MAAM,qCAAqC,EAAE,CAAC,CAAC,OAAO,CAC3D,uBAAuB,EACvB,CAAC,CAAC,UAAU,EACZ,OAAO,CAC2C,CAAC"}

package/dist/esm/controlplane/models/extraction-binding-status.js

@@ -3,7 +3,6 @@
  */
 import * as openEnums from "../types/enums.js";
 export const ExtractionBindingStatus = {
-    Preparing: "preparing",
     Ready: "ready",
     Blocked: "blocked",
     Deleting: "deleting",

package/dist/esm/controlplane/models/extraction-binding-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-binding-status.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AAChB,MAAM,CAAC,MAAM,qCAAqC,GAI9C,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC"}
+{"version":3,"file":"extraction-binding-status.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-binding-status.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,SAAS,MAAM,mBAAmB,CAAC;AAG/C,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAGX,gBAAgB;AAChB,MAAM,CAAC,MAAM,qCAAqC,GAI9C,SAAS,CAAC,aAAa,CAAC,uBAAuB,CAAC,CAAC"}

package/dist/esm/controlplane/models/extraction-binding.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type ExtractionBinding = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type ExtractionBinding = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type ExtractionBinding = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/esm/controlplane/models/extraction-job-configuration.d.ts

@@ -1,7 +1,7 @@
 import * as z from "zod/v3";
 import { ExtractionJobType } from "./extraction-job-type.js";
 /**
- * One extraction kind and its user-owned policy. Scan cadence is fixed at 300 seconds and is not accepted in requests. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
+ * One extraction kind and its user-owned policy. Scan cadence is deployment-owned worker configuration and is not accepted in requests or returned on bindings. Omitted idleWindowSeconds defaults to 1800 on create and retains its existing value on update. Idle bounds are 60–86400 seconds. Model context and output budgets are deployment-owned worker settings rather than binding fields. Job type is immutable; changing extraction kind requires a new binding. Policy changes advance the binding version and do not reset completed-source deduplication.
  */
 export type ExtractionJobConfiguration = {
     /**

package/dist/esm/controlplane/models/extraction-job.d.ts

@@ -7,10 +7,6 @@ export type ExtractionJob = {
      * Exactly one extraction job kind. Skill extraction is reserved for future implementation and is currently rejected.
      */
     type: ExtractionJobType;
-    /**
-     * Read-only platform scan cadence, fixed at 300 seconds.
-     */
-    intervalSeconds: number;
     idleWindowSeconds: number;
 };
 /** @internal */

package/dist/esm/controlplane/models/extraction-job.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-job.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAC1B;;OAEG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAKP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}
+{"version":3,"file":"extraction-job.d.ts","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EACL,iBAAiB,EAElB,MAAM,0BAA0B,CAAC;AAElC,MAAM,MAAM,aAAa,GAAG;IAC1B;;OAEG;IACH,IAAI,EAAE,iBAAiB,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,gBAAgB;AAChB,eAAO,MAAM,2BAA2B,EAAE,CAAC,CAAC,OAAO,CACjD,aAAa,EACb,CAAC,CAAC,UAAU,EACZ,OAAO,CAIP,CAAC;AAEH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,GACjB,eAAe,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAMpD"}

package/dist/esm/controlplane/models/extraction-job.js

@@ -7,7 +7,6 @@ import { ExtractionJobType$inboundSchema, } from "./extraction-job-type.js";
 /** @internal */
 export const ExtractionJob$inboundSchema = z.object({
     type: ExtractionJobType$inboundSchema,
-    intervalSeconds: z.number().int(),
     idleWindowSeconds: z.number().int(),
 });
 export function extractionJobFromJSON(jsonString) {

package/dist/esm/controlplane/models/extraction-job.js.map

@@ -1 +1 @@
-{"version":3,"file":"extraction-job.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,OAAO,EAEL,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAclC,gBAAgB;AAChB,MAAM,CAAC,MAAM,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,IAAI,EAAE,+BAA+B;IACrC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EACkC;IACpD,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AAAA,CACH"}
+{"version":3,"file":"extraction-job.js","sourceRoot":"","sources":["../../../../src/controlplane/models/extraction-job.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAG9C,OAAO,EAEL,+BAA+B,GAChC,MAAM,0BAA0B,CAAC;AAUlC,gBAAgB;AAChB,MAAM,CAAC,MAAM,2BAA2B,GAIpC,CAAC,CAAC,MAAM,CAAC;IACX,IAAI,EAAE,+BAA+B;IACrC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EACkC;IACpD,OAAO,SAAS,CACd,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACvD,2CAA2C,CAC5C,CAAC;AAAA,CACH"}

package/dist/esm/controlplane/models/get-extraction-binding-response-content.d.ts

@@ -5,7 +5,7 @@ import { ExtractionBindingSource } from "./extraction-binding-source.js";
 import { ExtractionBindingStatus } from "./extraction-binding-status.js";
 import { ExtractionJob } from "./extraction-job.js";
 /**
- * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Ready means the configured extraction-worker grants were accepted; the worker validates live RAM access during execution. Without a configured RAM connection, preparation remains pending and cannot be enabled. This release has no extraction worker. Activation requires a separate PATCH after readiness.
+ * Durable tenant-owned metadata for one Playbook, one RAM store, and one FAQ policy. Creation synchronously validates caller consent and exact RAM source ownership, returning ready and disabled. Every explicit enable revalidates with the current caller. Consent is durable account-owned configuration.
  */
 export type GetExtractionBindingResponseContent = {
     bindingId: string;
@@ -14,13 +14,13 @@ export type GetExtractionBindingResponseContent = {
      */
     playbookId: string;
     /**
-     * Typed RAM store reference. This release accepts only redis_agent_memory and a client-supplied storeId. The source is implicitly whole-store. When the deployment enables the RAM connection, server-side preparation verifies store access. Namespace selection and extraction workers arrive later; credentials are never accepted here. Unknown fields are rejected.
+     * Typed RAM store reference. Only redis_agent_memory with a client-supplied storeId is supported. The source is implicitly whole-store. The control plane verifies source consent and same-account/tenant RAM ownership on create and every explicit enable. Namespace selection is not supported. Credentials are never accepted here. Unknown fields are rejected.
      */
     source: ExtractionBindingSource;
     job: ExtractionJob;
     status: ExtractionBindingStatus;
     /**
-     * Activation intent. Creation is disabled; enabling requires ready status and a separate PATCH. Pausing clears intent and retains prepared source/destination grants.
+     * Activation intent. Creation is disabled. A separate enable PATCH revalidates current source consent and ownership, and can recover a blocked binding. Pausing clears intent without a RAM request or source permission.
      */
     enabled: boolean;
     /**
@@ -28,7 +28,7 @@ export type GetExtractionBindingResponseContent = {
      */
     version: number;
     /**
-     * Machine-readable source preparation or execution failure reason, such as source_grant_refused, source_not_found, or source_access_denied. Clients must tolerate unknown reasons.
+     * Machine-readable runtime failure reason, such as source_not_found or source_access_denied. Clients must tolerate unknown reasons.
      */
     blockedReason?: string | undefined;
     /**

package/dist/esm/controlplane/models/get-playbook-response-content.d.ts

@@ -24,6 +24,9 @@ export type GetPlaybookResponseContent = {
     playbookId: string;
     tenantId: string;
     name: string;
+    /**
+     * Effective read state. Cloud reads can report unavailable when live database metadata cannot be obtained; this state is never persisted and cannot be submitted in a mutation.
+     */
     state: PlaybookState;
     /**
      * Create-only embedding identity for a Playbook.