@revoengine/sdk 1.5.8 → 1.6.2

package/README.md

@@ -6,12 +6,12 @@ Revo-hosted `CUSTOM_NODEJS` components and standalone Node.js applications.
 
 Requirements: Node.js 22 or newer.
 
-## SDK 1.5.8 compatibility
+## SDK 1.6.2 compatibility
 
 This release synchronizes the complete public SDK contract with the current
 platform low-code declarations. Remote calls require a platform runtime that admits
 the bundled contract revision; publishing the SDK alone does not deploy that runtime.
-Use SDK 1.0.1 with older deployments until their platform contract is upgraded.
+Use the SDK version supported by the target platform deployment until its contract is upgraded.
 
 HTTP Storage requests/responses now use `requestType: 'storage'` and
 `responseType: 'storage'`, with flat Storage-only `source` / `target` objects.
@@ -25,9 +25,26 @@ The `transport` namespace exposes `sftpImport`, `sftpExport`, and `sftpCommands`
 with active Secret names or IDs instead of inline credentials. Storage references
 use the same namespace and effective access rules as other file operations.
 Legacy SFTP helpers and the removed thread-goal methods are not exposed by the
-current SDK contract. Refer to the [transfer guide](https://docs.revoengine.com/build/transport)
+current SDK contract. Refer to the [transfer guide](https://docs.revoengine.com/low-code/sftp)
 for Secret formats and file-transfer examples.
 
+SDK 1.6.2 retains portable Component digest declarations and one readable-relation
+contract for Databases, live Views, and Materialized Views. Use `api.exportDatabase()`
+for all three relation types. `api.getDatabaseViewData()` remains a deprecated
+read alias; `api.exportDatabaseView()` and separate REST View export operations
+are removed. Existing integrations should update these calls before rollout.
+
+Database exports can select CSV, TSV, NDJSON, or XLSX. An asynchronous export
+returns its job ID for operation tracking. The import workflow starts with
+`api.importDatabase()`, then permits a reviewed mapping update and an explicit
+`api.commitDatabaseImport()` after preview validation. The generated declarations
+describe the current request and response shapes; the platform still enforces
+permissions and validates source and target state before committing an import.
+
+Remote MCP server configurations in this contract use public HTTPS destinations.
+Private-network access is not an accepted SDK setting; review the server URL,
+provider consent, Vault binding, and tool permissions before enabling a plugin.
+
 ## Choose your runtime
 
 | Environment | How to start | Authentication |
@@ -59,7 +76,7 @@ RevoEngine pins that version again in the deployment package and injects the
 runtime into the component entrypoint. Component code does not construct a
 `RevoClient`.
 
-The platform chooses the hosted package version; publishing SDK 1.5.8 does not
+The platform chooses the hosted package version; publishing SDK 1.6.2 does not
 upgrade existing hosted deployments or their generated package pins.
 
 Hosted user code receives neither a tenant API key nor the private runtime

package/dist/{errors-Bo-6u7Hg.d.cts → errors-CYOB1Jvd.d.cts}

@@ -1,8 +1,8 @@
 import * as node_worker_threads from 'node:worker_threads';
 
-declare const SDK_VERSION: "1.5.8";
+declare const SDK_VERSION: "1.6.2";
 declare const PROTOCOL_VERSION: 1;
-declare const CONTRACT_REVISION: "a73e7d84863d5a511a6f5569a72ab8d156bd11f84471fabdee9b8b633c11e58d";
+declare const CONTRACT_REVISION: "904f6aea1cacfc32b7fda4e976b2e01f73202462f8a4785dc12deac7c4563e38";
 type RuntimeSurfaceName = 'api' | 'storage' | 'transport' | 'agents' | 'lowCode';
 
 // AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
@@ -43,9 +43,9 @@ interface SwaggerAgentCheapTurnPolicyDto {
 }
 interface SwaggerAgentConfigDto {
     /** Supported assistant model used when the agent starts a thread. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
+    "model"?: "gpt-6-sol" | "gpt-6-luna";
     /** Reasoning effort passed to assistant threads. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Durable execution-mode default used for agent-loop turns. Per-turn fast-path routing and prompt-tier selection are derived by runtime, not configured here. */
     "executionMode"?: "interactive" | "execute" | "background" | "automation";
     /** Durable planning policy default used for agent-loop turns. standard executes normally; review_required creates a reviewed plan before interactive execution. */
@@ -114,7 +114,7 @@ interface SwaggerAgentPluginApprovalConfigDto {
 interface SwaggerAgentPluginComponentToolConfigDto {
     /** Whether this component-backed tool is enabled for runtime selection and execution. */
     "enabled"?: boolean;
-    /** Whether this component-backed tool is deferred behind discovery instead of eagerly exposed. */
+    /** Whether this exact expanded component action is deferred behind plugin discovery/loading instead of eagerly exposed. */
     "deferLoading"?: boolean;
     /** Explicit local tool alias exposed to the runtime when set. */
     "alias"?: string;
@@ -128,7 +128,7 @@ interface SwaggerAgentPluginComponentToolConfigDto {
     "inputs"?: Record<string, unknown>;
     /** Named component result to return when the component executor supports result popping. */
     "popResult"?: string;
-    /** Strict structured input schema exposed for this tool. The component receives matching arguments under api.input().agentTool.args. Must be an object schema with additionalProperties=false and descriptions on every declared property. */
+    /** Strict model-facing input schema for this exact action. The component receives matching arguments under api.input().agentTool.args and must explicitly translate them when a downstream provider uses a different wire shape. Must be an object schema with additionalProperties=false and descriptions on every declared property. */
     "inputSchema"?: Record<string, unknown>;
     /** Structured output schema expected from this tool. */
     "outputSchema"?: Record<string, unknown>;
@@ -150,7 +150,7 @@ interface SwaggerAgentPluginComponentToolConfigDto {
 interface SwaggerAgentPluginComponentToolsetDto {
     /** Default governance and loading policy for component-backed tools. */
     "defaultConfig"?: SwaggerAgentPluginComponentToolConfigDto;
-    /** Component-backed tools keyed by stable capability name. */
+    /** Component-backed actions keyed by stable capability name. Every entry expands into a separate executable tool; alias is its exact local model-visible action name when set. */
     "tools"?: Record<string, unknown>;
 }
 interface SwaggerAgentPluginConfigDto {
@@ -170,6 +170,8 @@ interface SwaggerAgentPluginConfigDto {
     "executionMode"?: "sync" | "background";
     /** Component id executed when this plugin runs. */
     "componentId"?: string;
+    /** Portable component revision digest. */
+    "componentDigest"?: string;
     /** Optional fixed component version. */
     "componentVersion"?: number;
     /** Multiple governed tool contracts backed by the same component implementation. */
@@ -210,8 +212,10 @@ interface SwaggerAgentPluginConfigDto {
 interface SwaggerAgentPluginMcpConfigDto {
     /** Remote MCP transport supported by the SaaS runtime. */
     "transport": "streamable_http" | "sse";
-    /** Absolute HTTPS endpoint for the remote MCP server. */
+    /** Absolute public HTTPS MCP endpoint URL. Private and localhost destinations are blocked at connection time. */
     "url": string;
+    /** Public HTTPS network policy. Legacy private values are restricted to public HTTPS at execution time. */
+    "networkAccess"?: "public";
     /** Manifest cache time-to-live in milliseconds. */
     "manifestTtlMs"?: number;
     /** Connection and handshake timeout in milliseconds. */
@@ -236,6 +240,8 @@ interface SwaggerAgentPluginMcpConfigDto {
 interface SwaggerAgentPluginMcpHeaderBindingDto {
     /** Header name sent to the remote MCP server. */
     "name": string;
+    /** Vault BoundValue resolved for the executing user, organization, or instance after an explicit grant. */
+    "vault"?: SwaggerAgentPluginMcpVaultRefDto;
     /** Secret id containing the header value. */
     "secretId"?: string;
     /** Optional secret data revision id when the binding should pin a specific secret revision. */
@@ -248,7 +254,7 @@ interface SwaggerAgentPluginMcpHeaderBindingDto {
 interface SwaggerAgentPluginMcpToolConfigDto {
     /** Whether the tool is enabled for runtime selection and execution. */
     "enabled"?: boolean;
-    /** Whether the tool is deferred behind discovery instead of eagerly exposed. */
+    /** Whether the remote tool schema is deferred behind plugin discovery/loading instead of eagerly exposed. The manifest tool remains known by remote name; alias changes only its local exposed name. */
     "deferLoading"?: boolean;
     /** Explicit local tool alias exposed to the runtime when set. */
     "alias"?: string;
@@ -268,9 +274,23 @@ interface SwaggerAgentPluginMcpToolConfigDto {
 interface SwaggerAgentPluginMcpToolsetDto {
     /** Default governance and loading policy for tools discovered from this MCP server. */
     "defaultConfig"?: SwaggerAgentPluginMcpToolConfigDto;
-    /** Per-remote-tool overrides keyed by remote tool name. */
+    /** Per-remote-tool overrides keyed by exact remote manifest tool name, never by local alias or plugin registry id. */
     "configs"?: Record<string, unknown>;
 }
+interface SwaggerAgentPluginMcpVaultRefDto {
+    /** Opaque Vault reference marker. */
+    "__revoBoundValue": "vault-v1";
+    /** Credential requirement name declared by the plugin. */
+    "name": string;
+    /** Credential owner scope. */
+    "scope": "instance" | "user" | "organization";
+    /** Vault value source. */
+    "source": "secret" | "integration";
+    /** Literal text prepended to the resolved value. */
+    "prefix": string;
+    /** Literal text appended to the resolved value. */
+    "suffix": string;
+}
 interface SwaggerAgentPluginPackageConfigDto {
     /** Stable package identity used across internal catalogs and future community marketplace publishing. */
     "externalId": string;
@@ -278,12 +298,12 @@ interface SwaggerAgentPluginPackageConfigDto {
     "format"?: "markdown";
     /** Markdown instruction content loaded into the assistant runtime when the package is attached. */
     "content": string;
-    /** Registry plugin ids declared as package dependencies. */
+    /** Exact direct registry plugin UUIDs exposed lazily when this package is loaded. Dependencies may be skill, tools, or MCP plugins, never packages. */
     "pluginIds"?: Array<string>;
     /** Disabled marketplace-facing package metadata reserved for catalog publishing. */
     "metadata"?: SwaggerAgentPluginPackageMetadataDto;
-    /** Maximum number of package content characters allowed into one prompt. */
-    "maxPromptChars"?: number;
+    /** Maximum number of package content tokens allowed into one prompt. Defaults to 10000. */
+    "maxPromptTokens"?: number;
 }
 interface SwaggerAgentPluginPackageMetadataDto {
     /** Package avatar or icon URL shown in package catalogs. */
@@ -320,10 +340,10 @@ interface SwaggerAgentPluginSkillConfigDto {
     "format"?: "markdown";
     /** Markdown instruction content loaded into the assistant runtime when the plugin is attached. */
     "content": string;
-    /** Registry plugin ids declared as one-level skill dependencies. */
+    /** Exact registry plugin UUIDs exposed lazily when this skill is loaded. Dependencies may be skill, tools, or MCP plugins, never packages. */
     "pluginIds"?: Array<string>;
-    /** Maximum number of skill content characters allowed into one prompt. */
-    "maxPromptChars"?: number;
+    /** Maximum number of skill content tokens allowed into one prompt. Defaults to 10000. */
+    "maxPromptTokens"?: number;
 }
 interface SwaggerAgentPolicyDto {
     /** Default approval mode applied to agent tool calls when no per-tool override exists. */
@@ -523,8 +543,8 @@ interface SwaggerStorageSheetColumnDto {
     "key": string;
     /** Visible header. Defaults to key. */
     "header"?: string;
-    /** Logical value type retained in XLSX fileStats and used by typed row producers and getFileData reads. Without a declared type, imported XLSX values remain strings; styles never infer a type. */
-    "type"?: "string" | "number" | "boolean" | "date";
+    /** Logical value type retained in XLSX/CSV/TSV fileStats and used by typed row producers and getFileData reads. Object parses a JSON object or array from text. Without a declared type, imported tabular values remain strings; XLSX styles never infer a type. */
+    "type"?: "string" | "number" | "boolean" | "date" | "object";
     /** Column width in Excel character units. */
     "width"?: number;
     /** Hide the worksheet column. */
@@ -558,9 +578,15 @@ interface SwaggerStorageSheetTableDto {
     "header"?: boolean;
     /** Add an auto-filter to the table header. */
     "autoFilter"?: boolean;
-    /** Stable column order. Required for every worksheet in writeMode "direct"; optional in "staged" mode, where keys may be inferred from appended rows. */
+    /** Stable XLSX/CSV/TSV column order, keys, headers, and logical types. Required for every logical sheet in writeMode "direct"; optional in "staged" mode, where keys may be inferred from appended rows. */
     "columns"?: Array<SwaggerStorageSheetColumnDto>;
 }
+interface SwaggerStorageTabularSchemaPolicyDto {
+    /** How missing sheets or columns and invalid declared values are handled. fallback retains imperfect data with diagnostics; strict fails structured indexing. Defaults to fallback. */
+    "profile"?: "fallback" | "strict";
+    /** How undeclared source columns are handled. allow retains them, strip omits them from structured rows, and reject fails indexing. Defaults to allow for fallback and reject for strict. The raw file is preserved. */
+    "additionalProperties"?: "allow" | "strip" | "reject";
+}
 interface SwaggerWebhookRequestDetailsDto {
     "url": string;
     "method": "POST" | "GET" | "HEAD" | "PUT" | "DELETE" | "PATCH" | "OPTIONS";
@@ -668,14 +694,14 @@ interface AssistantMessageInput {
     "content": string;
     /** Optional hidden draft user message id created before attachment uploads. When provided, the send operation finalizes that draft instead of creating a new user message. */
     "preflightMessageId"?: string;
-    /** Optional assistant execution-model override. GPT-5.6 Luna is the default; GPT-5.6 Sol, Terra, and Luna are supported. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
-    /** Optional GPT-5.6 Luna Fast mode. The backend rejects enabling it for any other model. Defaults to false and remains opt-in per thread. */
+    /** Optional assistant execution-model override. GPT-6 Luna is the default; GPT-6 Sol and Luna are supported. */
+    "model"?: "gpt-6-sol" | "gpt-6-luna";
+    /** Optional GPT-6 Sol or Luna Fast mode. Defaults to false and remains opt-in per thread. */
     "fastMode"?: boolean;
-    /** Optional assistant reasoning effort override: low, medium, high, or xhigh. Defaults to low. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    /** Optional assistant reasoning effort override: none, low, medium, high, or xhigh. Defaults to medium. */
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Alias for reasoningEffort used by assistant preferences. Prefer reasoningEffort for new clients. */
-    "reasoning"?: "low" | "medium" | "high" | "xhigh";
+    "reasoning"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Optional flag selecting deadline-bounded background provider recovery. On SSE routes it also allows the turn to continue after client disconnect. Defaults to false. */
     "backgroundProcessing"?: boolean;
     /** Optional flag for send-message endpoints. When true, an active streamed assistant turn for the thread is interrupted before appending this message. */
@@ -704,7 +730,7 @@ interface StorageFolderInput {
     "name": string;
     /** Parent folder id. Omit for root. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level folders. Omit for the internal/default provider. Ignored when parentStorageEntryId is provided. */
+    /** Optional registered Storage destination for root-level folders. Omit to use the default destination. Ignored when parentStorageEntryId is provided. */
     "storageProviderConfigId"?: string;
     /** Folder metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
     "metadata"?: Record<string, unknown> | null;
@@ -726,7 +752,7 @@ interface StorageUploadSessionInput {
     "retention"?: SwaggerStorageRetentionDto | null;
     /** Parent folder id. Required for create mode when uploading into a folder. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level uploads. Omit for the internal/default provider. Ignored when parentStorageEntryId is provided or when replacing an existing file. */
+    /** Optional registered Storage destination for a root-level upload. Omit to use the default destination. Ignored when parentStorageEntryId is provided or when replacing an existing file. */
     "storageProviderConfigId"?: string;
     /** Existing storage entry id to replace instead of creating a new file. */
     "replaceStorageEntryId"?: string;
@@ -744,18 +770,22 @@ interface StorageUploadSessionInput {
   COLD: Compliance snapshots, historic imports, and retained evidence that is rarely opened.
   FROZEN: Deep archive or legal-hold data kept mainly for audit or recovery obligations. */
     "tier"?: "HOT" | "WARM" | "COLD" | "FROZEN";
-    /** Upload mode. Use "direct" for provider resumable uploads, "chunked" for explicit numbered parts, and "incremental" for server-assigned part numbering by default. Incremental sessions can still re-upload a specific part number when repairing an upload. */
+    /** Byte-transfer mode. Use "direct" when the client sends the complete file to the returned temporary upload target, "chunked" for explicit numbered parts, and "incremental" for server-assigned part numbering by default. Incremental sessions can still re-upload a specific part number when repairing an upload. */
     "uploadMode"?: "direct" | "chunked" | "incremental";
     /** Post-finalize compute mode for this upload session. Defaults to sync for XLSX and text/* sessions and none for other binary sessions; an explicit value always overrides the default. */
     "computeStats"?: "none" | "sync" | "async";
+    /** Independent validation and undeclared-column policies for an uploaded XLSX, CSV, or TSV. Defaults to fallback validation with additional columns allowed; strict validation defaults to rejecting additional columns. The raw file is preserved. */
+    "schemaPolicy"?: SwaggerStorageTabularSchemaPolicyDto;
     /** Structured file write mode. Use "direct" for a predeclared CSV/XLSX layout with row-only XLSX parts. Use the default "staged" mode for independent requests that may be retried, replaced, reordered, or use inferred columns, sparse cells, formulas, or dynamic worksheets. For direct XLSX, declare every worksheet and its table.columns before the first append. */
     "writeMode"?: "staged" | "direct";
-    /** CSV dialect used when row payloads are appended to a text/csv session. */
+    /** CSV/TSV dialect used when row payloads are appended or direct uploaded bytes are indexed. */
     "csv"?: SwaggerStorageCsvOptionsDto;
-    /** Workbook worksheet layout. XLSX is inferred from contentTypeHint. In writeMode "direct", declare every worksheet here and configure table.columns for each one. */
+    /** Shared tabular layout. XLSX accepts multiple worksheets; CSV/TSV accepts one logical sheet used for column keys, types, and schema diagnostics. In writeMode "direct", configure table.columns for every declared sheet. */
     "sheets"?: Array<SwaggerStorageSheetOptionsDto>;
     /** File metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
     "metadata"?: Record<string, unknown> | null;
+    /** Suppress Storage lifecycle events for the finalized file. Omit to preserve the existing setting on replacement; false explicitly enables events. */
+    "ignoreEvent"?: boolean;
     /** Optional external reference id. */
     "refId"?: string;
     /** Optional external reference type. */
@@ -798,7 +828,7 @@ interface StoragePutObjectInput {
     "retention"?: SwaggerStorageRetentionDto | null;
     /** Parent folder id. Omit for root. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level writes. */
+    /** Optional registered Storage destination for root-level writes. Omit to use the default destination. */
     "storageProviderConfigId"?: string;
     /** Existing file entry id to replace. */
     "replaceStorageEntryId"?: string;
@@ -826,6 +856,8 @@ interface StoragePutObjectInput {
     "refVer"?: number;
     /** Entry metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
     "metadata"?: Record<string, unknown> | null;
+    /** Suppress Storage lifecycle events for this file. Omit to preserve the existing setting on replacement; false explicitly enables events. */
+    "ignoreEvent"?: boolean;
     /** Logical storage lifecycle tier. Select only when creating a new file or upload session; existing files keep their tier.
   HOT: Active files used in live workflows, previews, and frequent downloads.
   WARM: Completed or less-active business files that are still occasionally accessed.
@@ -849,13 +881,13 @@ interface AssistantActionResolutionInput {
     /** Optional flag selecting deadline-bounded background provider recovery. On the SSE route it also allows the resumed turn to continue after client disconnect. Streamed action resolution defaults this to true. */
     "backgroundProcessing"?: boolean;
     /** Optional assistant model override for the resumed turn after this action is resolved. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
-    /** Optional GPT-5.6 Luna Fast-mode override for the resumed turn. The backend rejects enabling it for any other model. */
+    "model"?: "gpt-6-sol" | "gpt-6-luna";
+    /** Optional Fast-mode override for the resumed turn. Available on GPT-6 Sol and Luna. */
     "fastMode"?: boolean;
-    /** Optional assistant reasoning effort override for the resumed turn: low, medium, high, or xhigh. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    /** Optional assistant reasoning effort override for the resumed turn: none, low, medium, high, or xhigh. */
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Alias for reasoningEffort used by assistant preferences. Prefer reasoningEffort for new clients. */
-    "reasoning"?: "low" | "medium" | "high" | "xhigh";
+    "reasoning"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Execution mode override for the resumed turn after this action is resolved. */
     "executionMode"?: "interactive" | "execute" | "background" | "automation";
     /** Planning policy override for the resumed turn after this action is resolved. */
@@ -1258,7 +1290,8 @@ interface SelectJoinOn {
 }
 /**
  * Join definition.
- * If alias is omitted, the backend defaults it to the join table name.
+ * `table` is the logical name of a database, view, or materialized view.
+ * If alias is omitted, the backend defaults it to that logical relation name.
  */
 interface SelectJoin {
     alias?: string;
@@ -1268,7 +1301,8 @@ interface SelectJoin {
 }
 /**
  * Public structured input accepted by api.getDatabaseData(name, options).
- * The backend injects the source table schema automatically based on the name argument.
+ * The backend resolves databases, views, and materialized views by logical name
+ * and injects their physical relation and schema metadata automatically.
  */
 interface SelectInput {
     /**
@@ -1277,8 +1311,8 @@ interface SelectInput {
      */
     fields?: SelectItem[];
     /**
-     * Related tables to join.
-     * The backend resolves join definitions automatically.
+     * Related databases, views, or materialized views to join.
+     * The backend resolves each logical relation and its definition automatically.
      */
     joins?: SelectJoin[];
     /**
@@ -1585,7 +1619,8 @@ interface HttpRequestInterface {
     url: string;
     method: 'POST' | 'PUT' | 'DELETE' | 'GET' | 'PATCH' | 'OPTIONS' | 'HEAD' | 'PURGE' | 'LINK' | 'UNLINK';
     timeout?: number;
-    headers?: LooseObject<string>;
+    /** Vault references are resolved only by the trusted HTTP sender, never in low-code. */
+    headers?: LooseObject<string | VaultBoundValue>;
     params?: TemplateParameters[];
     data?: any;
     //@default: undefined
@@ -1764,7 +1799,7 @@ interface StorageFileReadOptions {
     buffer?: boolean;
     start?: number;
     end?: number;
-    /** Continue a structured CSV/XLSX read. Cursor restores sheet and batch position. */
+    /** Continue a structured CSV/TSV, XLSX, NDJSON/JSONL, JSON-array, or XML read. Keep the opaque cursor unchanged. */
     cursor?: string;
     /** XLSX sheet name. The first visible sheet is used when omitted. */
     sheet?: string;
@@ -1786,7 +1821,7 @@ interface StorageFileReadOptions {
     columns?: Array<string | {
         source: string;
         key?: string;
-        type?: 'string' | 'number' | 'boolean' | 'date';
+        type?: StorageTabularColumnType;
     }>;
 }
 interface StorageFileStatsOptions {
@@ -1802,6 +1837,29 @@ interface StorageFileStatsOptions {
     /** XML record path such as `Orders/Order`; required for XML row stats. */
     recordPath?: string;
 }
+type StorageTabularColumnType = 'string' | 'number' | 'boolean' | 'date' | 'object';
+interface StorageTabularColumn {
+    key: string;
+    header: string;
+    type?: StorageTabularColumnType;
+}
+interface StorageTabularSchemaIssue {
+    code: 'SHEET_MISSING' | 'SHEET_UNDECLARED' | 'COLUMN_MISSING' | 'COLUMN_UNDECLARED' | 'COLUMN_KEY_DUPLICATE' | 'COLUMN_TYPE_FALLBACK';
+    sheet: string;
+    column?: string;
+    declaredType?: StorageTabularColumnType;
+    invalidRows?: number;
+    sampleRows?: number[];
+}
+interface StorageTabularSchemaPolicy {
+    profile: 'fallback' | 'strict';
+    additionalProperties: 'allow' | 'strip' | 'reject';
+}
+interface StorageTabularSchemaResult {
+    policy: StorageTabularSchemaPolicy;
+    status: 'MATCHED' | 'FALLBACK' | 'FAILED';
+    issues: StorageTabularSchemaIssue[];
+}
 interface StorageFileStats {
     lineCount?: number;
     map?: LooseObject<number>;
@@ -1810,42 +1868,29 @@ interface StorageFileStats {
     batchSize?: number;
     encoding?: string | null;
     format?: 'csv' | 'xlsx' | 'ndjson' | 'json-array' | 'xml';
-    columns?: Array<{
-        key: string;
-        header: string;
-    }>;
+    columns?: StorageTabularColumn[];
     bom?: boolean;
     delimiter?: string;
     recordDelimiter?: string;
     quote?: string;
     escape?: string;
     rowCount?: number;
-    headers?: Array<{
-        key: string;
-        header: string;
-    }>;
+    headers?: StorageTabularColumn[];
+    /** Present when an XLSX/CSV/TSV upload session declared table columns. */
+    schema?: StorageTabularSchemaResult;
     sheets?: Array<{
         name: string;
         state: 'visible' | 'hidden' | 'veryHidden';
         rowCount: number;
         batches: number;
-        columns: Array<{
-            key: string;
-            header: string;
-        }>;
+        columns: StorageTabularColumn[];
     }>;
 }
 interface StorageStructuredFileDataPage {
     format: 'csv' | 'xlsx' | 'ndjson' | 'json-array' | 'xml';
     sheet: string | null;
-    headers: Array<{
-        key: string;
-        header: string;
-    }>;
-    columns: Array<{
-        key: string;
-        header: string;
-    }>;
+    headers: StorageTabularColumn[];
+    columns: StorageTabularColumn[];
     rows: Array<LooseObject<any>>;
     rowCount: number;
     totalRows: number;
@@ -2017,7 +2062,7 @@ type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
     /** Suppress the export completion/failure System notification for this low-code call. */
     skipNotification?: boolean;
     /** Output format. CSV is the default. XLSX validates the effective row count before starting. */
-    format?: 'csv' | 'xlsx';
+    format?: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     /** Omit for private user storage, use ROOT, or provide an accessible explorer folder id. */
     storageDestination?: 'ROOT' | string;
     /** Dedicated output name. Omit for an automatic database-and-timestamp name using the selected extension. */
@@ -2036,14 +2081,30 @@ type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
     /** Omit for the destination default, null for no expiration. */
     retention?: StorageRetentionInput;
 };
+type ImportDatabaseOptions = {
+    storageEntryId: string;
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
+    mode: 'insert' | 'upsert';
+    onError: 'abort' | 'skipRow';
+    mapping?: {
+        columns: Record<string, {
+            databaseName: string;
+            column: string;
+        } | null>;
+        nullMode?: 'escaped' | 'literal' | 'empty' | 'nullText';
+    };
+    /** Skips manual approval after the same full validation; ambiguous mapping still needs review. */
+    autoCommit?: boolean;
+};
 interface ExportDatabaseAcceptedResponse {
     accepted: true;
     databaseId: string;
     exportId: string;
+    jobId: string;
     storageNamespace: string;
     parentStorageEntryId: string | null;
     fileName: string;
-    format: 'csv' | 'xlsx';
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     restricted: boolean;
     message: string;
 }
@@ -2052,10 +2113,11 @@ interface ExportDatabaseCompletedResponse {
     completed: true;
     databaseId: string;
     exportId: string;
+    jobId: string;
     storageNamespace: string;
     parentStorageEntryId: string | null;
     fileName: string;
-    format: 'csv' | 'xlsx';
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     restricted: boolean;
     storageEntryId: string;
     storageEntry: StorageEntryView;
@@ -2266,7 +2328,7 @@ interface AgentPluginSkillConfig {
     format?: 'markdown';
     content: string;
     pluginIds?: string[];
-    maxPromptChars?: number;
+    maxPromptTokens?: number;
 }
 interface AgentPluginPackageMetadata {
     avatarUrl?: string | null;
@@ -2287,7 +2349,7 @@ interface AgentPluginPackageConfig {
     content: string;
     pluginIds?: string[];
     metadata?: AgentPluginPackageMetadata;
-    maxPromptChars?: number;
+    maxPromptTokens?: number;
 }
 interface AgentPluginConfig {
     contractVersion?: 1;
@@ -2696,9 +2758,19 @@ interface RevoApi {
     exportDatabase<TAsync extends boolean = false>(name: string, options?: ExportDatabaseOptions & {
         async?: TAsync;
     }): Promise<TAsync extends true ? ExportDatabaseAcceptedResponse : TAsync extends false ? ExportDatabaseCompletedResponse : ExportDatabaseResponse>;
-    exportDatabaseView<TAsync extends boolean = false>(name: string, options?: ExportDatabaseOptions & {
-        async?: TAsync;
-    }): Promise<TAsync extends true ? ExportDatabaseAcceptedResponse : TAsync extends false ? ExportDatabaseCompletedResponse : ExportDatabaseResponse>;
+    importDatabase(name: string, options: ImportDatabaseOptions): Promise<{
+        importId: string;
+        jobId: string;
+        status: string;
+    }>;
+    updateDatabaseImportMapping(importId: string, mapping: NonNullable<ImportDatabaseOptions['mapping']>): Promise<{
+        importId: string;
+        status: string;
+    }>;
+    commitDatabaseImport(importId: string): Promise<{
+        importId: string;
+        status: string;
+    }>;
     updateDatabase(name: string, data: DatabaseUpdateInput): Promise<Database>;
     deleteDatabase(name: string): Promise<void>;
     restoreDatabase(name: string): Promise<void>;
@@ -2706,12 +2778,11 @@ interface RevoApi {
     getDatabaseData<T = any>(name: string, request?: DatabaseBoundedReadQuery): Promise<GetDatabaseDataResponse<T>>;
     getDatabaseDataRow<T = any>(name: string, query: DatabaseRowQuery): Promise<T | null>;
     countDatabase(name: string, query?: DatabaseCountQuery): Promise<number>;
-    getDatabaseViewData<T = any>(name: string, request?: SelectInput): Promise<GetDatabaseDataResponse<T>>;
     getDatabaseAudit(name: string, query?: DatabaseAuditQuery): Promise<DatabaseAuditResponse>;
     insertDatabaseData(name: string, data: LooseObject<any>[], options?: DatabaseDataWriteOptions): Promise<DatabaseDataActionResponse>;
     upsertDatabaseData(name: string, data: LooseObject<any>[], options?: DatabaseUpsertOptions): Promise<DatabaseDataActionResponse>;
     updateDatabaseData(name: string, oldObject: LooseObject<any>, newObject: LooseObject<any>): Promise<ResourceItem>;
-    deleteDatabaseData(name: string, data: ResourceItem[]): Promise<any>;
+    deleteDatabaseData(name: string, data: LooseObject<any>[]): Promise<any>;
     updateDatabaseDataRequest(name: string, request: DatabaseMutationRequest, payload: DatabaseUpdateData, options?: {
         return?: boolean;
         onlyKeys?: boolean;
@@ -3027,6 +3098,16 @@ interface RevoUtils {
     rsaSign(privateKey: string, payload: string, passphrase?: string): Promise<string>;
     rsaVerify(publicKey: string, payload: string, signature: string): Promise<boolean>;
 }
+type VaultScope = 'instance' | 'user' | 'organization';
+type VaultSource = 'secret' | 'integration';
+type VaultBoundValue = Readonly<{
+    __revoBoundValue: 'vault-v1';
+    name: string;
+    scope: VaultScope;
+    source: VaultSource;
+    prefix: string;
+    suffix: string;
+}>;
 /** Low-code byte payloads; REST JSON callers retain the base64 option. */
 /** Text arrays retain their existing joining rules; bytes are snapshotted before asynchronous upload. */
 type StorageBinaryPutObjectInput = Omit<StoragePutObjectInput, 'data'> & {