@revoengine/sdk 1.6.2 → 1.6.4

package/dist/{errors-CYOB1Jvd.d.cts → errors-BA9TUmFF.d.cts}

@@ -1,9 +1,10 @@
 import * as node_worker_threads from 'node:worker_threads';
+import { Buffer as Buffer$1 } from 'node:buffer';
 
-declare const SDK_VERSION: "1.6.2";
+declare const SDK_VERSION: "1.6.4";
 declare const PROTOCOL_VERSION: 1;
-declare const CONTRACT_REVISION: "904f6aea1cacfc32b7fda4e976b2e01f73202462f8a4785dc12deac7c4563e38";
-type RuntimeSurfaceName = 'api' | 'storage' | 'transport' | 'agents' | 'lowCode';
+declare const CONTRACT_REVISION: "d2b7e94d335d87dd070d2a97a043704b61b8c8d5c28435c20aceeda9581b70e4";
+type RuntimeSurfaceName = 'api' | 'storage' | 'transport' | 'vault' | 'serviceAccount' | 'agents' | 'lowCode';
 
 // AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
 // Sources: api.swagger-contracts.generated.d.ts, api.public.d.ts
@@ -43,7 +44,7 @@ interface SwaggerAgentCheapTurnPolicyDto {
 }
 interface SwaggerAgentConfigDto {
     /** Supported assistant model used when the agent starts a thread. */
-    "model"?: "gpt-6-sol" | "gpt-6-luna";
+    "model"?: "gpt-6.1-sol" | "gpt-6-luna";
     /** Reasoning effort passed to assistant threads. */
     "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Durable execution-mode default used for agent-loop turns. Per-turn fast-path routing and prompt-tier selection are derived by runtime, not configured here. */
@@ -56,6 +57,8 @@ interface SwaggerAgentConfigDto {
     "persona"?: "friendly" | "pragmatic" | "professional" | "concise" | "calm" | "mentor" | "assertive";
     /** Additional per-agent system instructions persisted with the definition. Runtime policy still has higher priority. */
     "systemInstructions"?: string;
+    /** One persistent Agent memory shared by Memory settings and runtime memory tools, included in instructions on every turn. Limited to 20,000 assistant tokens. */
+    "memory"?: string;
     /** Structured operator-owned Agent identity loaded on every autonomous turn. Learned memory cannot mutate this definition. */
     "definition"?: SwaggerAgentDefinitionDto;
     /** Durable cross-run memory defaults such as recall budget, retained summary size, and retention horizon. */
@@ -70,6 +73,10 @@ interface SwaggerAgentConfigDto {
     "toolNames"?: Array<string>;
     /** Default registry plugin ids attached to this agent. These are the agent-owned baseline attachments applied to every run unless additional runtime plugin ids are supplied. */
     "pluginIds"?: Array<string>;
+    /** Attached or inherited default registry plugin IDs to load eagerly. IDs outside the effective Agent plugin access set are rejected. */
+    "eagerPluginIds"?: Array<string>;
+    /** Selected terminal IDs available to this Agent. An empty selection permits no terminals. Each use also requires the historical execution service account and its current terminal/workspace ACL. */
+    "agentTerminalIds"?: Array<string>;
     /** Primary plugin contract surface. Plugins are provider-governed and define the executable agent-plugin surface. */
     "plugins"?: Array<SwaggerAgentPluginConfigDto>;
     /** Maximum number of concurrently admitted root runs for this agent. Additional root runs remain queued until capacity is released. */
@@ -476,6 +483,39 @@ interface SwaggerDatabaseIndexPredicateDto {
 interface SwaggerDatabaseOptionsDto {
     "indexes"?: Array<SwaggerDatabaseIndexDefinitionDto>;
 }
+interface SwaggerDatabaseViewActionExecuteDto {
+    "action": "UPDATE" | "DELETE";
+    "targetDatabaseId": string;
+    "keyMapping": Record<string, unknown>;
+    "mutationToken": string;
+    "data"?: Record<string, unknown> | Array<{
+        "column": string;
+        "op": "set" | "setNull" | "add" | "subtract" | "multiply" | "divide" | "abs" | "floor" | "ceil" | "sqrt" | "round" | "pow" | "toggle" | "addInterval" | "subtractInterval" | "truncate" | "prepend" | "append" | "insert" | "replace" | "trim" | "lower" | "upper" | "mergeJson" | "setJsonPath" | "removeJsonPath" | "addItems" | "removeItems";
+        "value"?: unknown | null;
+        "position"?: number;
+        "search"?: string;
+        "path"?: Array<string>;
+        "create"?: boolean;
+        "unit"?: string;
+        "nulls"?: "preserve" | "empty";
+    }>;
+    "return"?: boolean;
+    "onlyKeys"?: boolean;
+}
+interface SwaggerDeleteDatabaseRequestDto {
+    /** Filter object or array of filter objects. */
+    "filter": Record<string, unknown>;
+    /** Join definition for filtering. */
+    "join"?: Record<string, unknown>;
+    /** Limit of affected rows. */
+    "take"?: number;
+    /** Offset of affected rows. */
+    "skip"?: number;
+    /** Return updated rows. */
+    "return"?: boolean;
+    /** Return only primary keys (reduces payload). */
+    "onlyKeys"?: boolean;
+}
 interface SwaggerPartitionDefinition {
     /** Partition type. */
     "type"?: "LIST" | "RANGE" | "HASH";
@@ -504,6 +544,36 @@ interface SwaggerPartitionDefinition {
        */
     "remainder"?: number;
 }
+interface SwaggerServiceAccountAccessDto {
+    /** Restrict management access to explicitly assigned users and groups. */
+    "restricted": boolean;
+    /** User UUID/email references or {id}/{mail}. No implicit creator/self access after creation. */
+    "users"?: Array<string | {
+        "id": string;
+    } | {
+        "mail": string;
+    }>;
+    /** Exact group name/UUID references or {id}/{name}. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
+interface SwaggerServiceAccountMembershipsDto {
+    /** Execution group memberships. Requires USER_ADMIN or INSTANCE_ADMIN. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+    /** Assigned active role groups. Delegators may assign only their own active groups without INSTANCE_ADMIN. */
+    "roleGroups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
 interface SwaggerStorageCellInputDto {
     /** A1 cell address. */
     "address": string;
@@ -511,7 +581,7 @@ interface SwaggerStorageCellInputDto {
     "value"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
     /** Excel formula without a leading equals sign. */
     "formula"?: string;
-    /** Cached formula result. ExcelJS does not calculate formulas. Supports JSON-compatible strings, numbers, booleans, arrays, objects, and null. */
+    /** Cached formula result. Formulas are not calculated by this operation. Supports JSON-compatible strings, numbers, booleans, arrays, objects, and null. */
     "result"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
     /** Declarative cell style for XLSX output. */
     "style"?: Record<string, unknown>;
@@ -587,6 +657,34 @@ interface SwaggerStorageTabularSchemaPolicyDto {
     /** How undeclared source columns are handled. allow retains them, strip omits them from structured rows, and reject fails indexing. Defaults to allow for fallback and reject for strict. The raw file is preserved. */
     "additionalProperties"?: "allow" | "strip" | "reject";
 }
+interface SwaggerUpdateServiceAccountAccessDto {
+    /** Restrict management access to explicitly assigned users and groups. */
+    "restricted"?: boolean;
+    /** User UUID/email references or {id}/{mail}. No implicit creator/self access after creation. */
+    "users"?: Array<string | {
+        "id": string;
+    } | {
+        "mail": string;
+    }>;
+    /** Exact group name/UUID references or {id}/{name}. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
+interface SwaggerUserKeyWhitelistDto {
+    /** You need to provide name of the user. */
+    "name": string;
+    /** You need to provide type of whitelist IP,IP_SUBNET,RANGE. */
+    "type": string;
+    /** Provide a single address, a CIDR network or an address range. */
+    "value": string;
+}
+interface SwaggerWebhookMapPatchDto {
+    "set"?: Record<string, string>;
+    "remove"?: Array<string>;
+}
 interface SwaggerWebhookRequestDetailsDto {
     "url": string;
     "method": "POST" | "GET" | "HEAD" | "PUT" | "DELETE" | "PATCH" | "OPTIONS";
@@ -595,6 +693,16 @@ interface SwaggerWebhookRequestDetailsDto {
     /** Headers. */
     "headers"?: Record<string, unknown>;
 }
+interface SwaggerWebhookRequestPatchDto {
+    "url"?: string;
+    "method"?: "POST" | "GET" | "HEAD" | "PUT" | "DELETE" | "PATCH" | "OPTIONS";
+    "headers"?: SwaggerWebhookMapPatchDto;
+    "query"?: SwaggerWebhookMapPatchDto;
+    /** Additional request paths to mask in the new attempt. Existing masks are always preserved. */
+    "maskDetails"?: Array<string>;
+    /** Explicit replacement of the whole body. Omitted body reuses the saved body. */
+    "body"?: Record<string, unknown> | Array<unknown>;
+}
 interface AgentRunCancelInput {
     /** Optional cancellation reason for audit traces. */
     "reason"?: string;
@@ -687,6 +795,18 @@ interface DatabaseCreateInput {
     /** Advanced structured table options, including composite, expression, covering, and partial indexes. */
     "options"?: SwaggerDatabaseOptionsDto;
 }
+interface ServiceAccountKeyCreateInput {
+    /** You need to provide name of the user. */
+    "name": string;
+    /** Optional resource metadata. Top-level keys starting with "__" are reserved for backend use. */
+    "metadata"?: Record<string, unknown> | null;
+    /** You can provide if key should be whitelisted. */
+    "restricted": boolean;
+    /** Use an empty array or null when restricted is false; provide at least one complete entry when restricted is true. */
+    "whitelist"?: Array<SwaggerUserKeyWhitelistDto> | null;
+    /** Optional API key expiration timestamp. When provided, it must be at least four hours in the future. */
+    "expireAt"?: string;
+}
 interface AssistantMessageInput {
     /** Finalized Storage files to link to this message. File access is checked on send and every read. */
     "storageEntryIds"?: Array<string>;
@@ -694,9 +814,9 @@ interface AssistantMessageInput {
     "content": string;
     /** Optional hidden draft user message id created before attachment uploads. When provided, the send operation finalizes that draft instead of creating a new user message. */
     "preflightMessageId"?: string;
-    /** Optional assistant execution-model override. GPT-6 Luna is the default; GPT-6 Sol and Luna are supported. */
-    "model"?: "gpt-6-sol" | "gpt-6-luna";
-    /** Optional GPT-6 Sol or Luna Fast mode. Defaults to false and remains opt-in per thread. */
+    /** Optional assistant execution-model override. GPT-6 Luna is the default; GPT-6.1 Sol and GPT-6 Luna are supported. */
+    "model"?: "gpt-6.1-sol" | "gpt-6-luna";
+    /** Optional GPT-6 Luna Fast mode. Defaults to false and remains opt-in per thread. */
     "fastMode"?: boolean;
     /** Optional assistant reasoning effort override: none, low, medium, high, or xhigh. Defaults to medium. */
     "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
@@ -725,6 +845,20 @@ interface AssistantMessageInput {
     /** Optional per-turn backend performance debugger. When true, payload build timing traces are persisted into assistant report artifacts, and local/test runtimes may persist hidden model-call snapshots for this turn. */
     "performanceDebugger"?: boolean;
 }
+interface ServiceAccountCreateInput {
+    "access"?: SwaggerServiceAccountAccessDto;
+    "memberships"?: SwaggerServiceAccountMembershipsDto;
+    /** You need to provide name of the user. */
+    "name": string;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadata"?: Record<string, unknown> | null;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metaData"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadataAdvanced"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "advancedData"?: Record<string, unknown> | null;
+}
 interface StorageFolderInput {
     /** Folder name. */
     "name": string;
@@ -799,6 +933,31 @@ interface StorageUploadSessionInput {
     /** Explicit allowed user ids for the finalized entry. */
     "users"?: Array<string>;
 }
+interface DatabaseOperationInput {
+    /** Database ID/name, or view ID when viewAction is provided. */
+    "databaseName": string;
+    "action": "UPDATE" | "DELETE" | "TRUNCATE";
+    /** Filtered selection. Returning rows is not supported in background operations. */
+    "request"?: SwaggerDeleteDatabaseRequestDto;
+    "data"?: Record<string, unknown> | Array<{
+        "column": string;
+        "op": "set" | "setNull" | "add" | "subtract" | "multiply" | "divide" | "abs" | "floor" | "ceil" | "sqrt" | "round" | "pow" | "toggle" | "addInterval" | "subtractInterval" | "truncate" | "prepend" | "append" | "insert" | "replace" | "trim" | "lower" | "upper" | "mergeJson" | "setJsonPath" | "removeJsonPath" | "addItems" | "removeItems";
+        "value"?: unknown | null;
+        "position"?: number;
+        "search"?: string;
+        "path"?: Array<string>;
+        "create"?: boolean;
+        "unit"?: string;
+        "nulls"?: "preserve" | "empty";
+    }>;
+    /** Reviewed view mutation. The preview token is validated at admission. */
+    "viewAction"?: SwaggerDatabaseViewActionExecuteDto;
+    "restartIdentity"?: boolean;
+    /** Suppress the terminal System message. Low-code defaults this to true. */
+    "skipNotification"?: boolean;
+    /** Actor-scoped admission key. Reusing it with a different request is rejected. */
+    "idempotencyKey"?: string;
+}
 interface StorageUploadSessionFinalizeInput {
     /** Expected contiguous multipart count (parts 1..N). Use this to fence distributed uploads against missing parts. */
     "expectedPartCount"?: number;
@@ -815,6 +974,13 @@ interface AssistantForkMessageInput {
     /** Optional explicit title for the forked thread. When omitted, orchestration will generate the new thread title. */
     "title"?: string;
 }
+interface JobsBulkInput {
+    /** Existing platform filter tree. Exactly one of filter and resource IDs is required. */
+    "filter"?: Record<string, unknown>;
+    /** Caller-generated key: repeated admission returns the same operation. Maximum 200 characters. */
+    "idempotencyKey"?: string;
+    "jobIds"?: Array<string>;
+}
 interface StorageEntryMoveInput {
     /** Destination parent folder id. Omit or pass null for root. */
     "parentStorageEntryId"?: string;
@@ -865,6 +1031,32 @@ interface StoragePutObjectInput {
   FROZEN: Deep archive or legal-hold data kept mainly for audit or recovery obligations. */
     "tier"?: "HOT" | "WARM" | "COLD" | "FROZEN";
 }
+interface ServiceAccountQuery {
+    /** Number of rows to skip before pagination starts. Parsed from a query-string integer. */
+    "skip"?: number;
+    /** Maximum number of rows to return. Parsed from a query-string integer. Most list endpoints default to 100 when omitted. */
+    "take"?: number;
+    /** Include the total count in the response envelope only when explicitly true. Omitted or false skips the count query. */
+    "count"?: boolean;
+    /** Filter tree as a JSON string or bracket-style query object. Supports and/or/not groups and field predicates with ops such as eq, ne, gt, gte, lt, lte, like, notLike, ilike, notILike, in, notIn, any, isNull, isNotNull, between, contains, containedBy, arrayHas, arrayHasAny, arrayHasAll, arrayContainedBy, jsonArrayHas, jsonArrayHasAny, jsonArrayHasAll, startsWith, endsWith, true, and false. Field names are allowed logical fields; relation fields use dot paths such as groups.groupId when exposed by the endpoint. */
+    "filter"?: string;
+    /** Sort definition as a JSON string, indexed array query object, array, or legacy CSV. JSON object values should be ASC or DESC. CSV supports descending fields with a leading dash, for example name,-lastUpdateAt. */
+    "sort"?: string;
+    /** Optional DISTINCT ON logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Selected distinct fields are included in the projection. */
+    "distinct"?: string;
+    /** Optional field projection as a JSON array string, indexed array query object, array, or legacy CSV. String fields must be allowlisted logical fields. Advanced select items may use field, fn, raw, cast, coalesce, or case expressions when the endpoint enables dynamic projection. */
+    "fields"?: string;
+    /** Optional join definitions as a JSON string or bracket-style query object. This is only honored by endpoints that explicitly enable dynamic joins, such as dynamic database data reads. Each join has table, alias, type (left or inner), and an on condition. */
+    "joins"?: string;
+    /** Optional groupBy logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Only honored when the endpoint enables dynamic grouping or already has grouped defaults. */
+    "groupBy"?: string;
+    /** Optional cast mapping as a JSON string or bracket-style query object. Keys are selected aliases or logical fields; values are database definition types such as TEXT, INTEGER, BIGINT, NUMERIC, BOOLEAN, DATE, TIMESTAMP, TIMESTAMPTZ, JSON, JSONB, or UUID where supported. */
+    "cast"?: string;
+    /** Optional CTE definitions as a JSON string or bracket-style query object. Only honored by endpoints that explicitly enable dynamic CTEs. */
+    "with"?: string;
+    /** Enable debug output for the request, including compiled SQL, bound params, and bounded EXPLAIN plans when the endpoint supports it. */
+    "debug"?: boolean;
+}
 interface AssistantActionResolutionInput {
     /** Finalized Storage files linked to this action response. */
     "storageEntryIds"?: Array<string>;
@@ -881,8 +1073,8 @@ interface AssistantActionResolutionInput {
     /** Optional flag selecting deadline-bounded background provider recovery. On the SSE route it also allows the resumed turn to continue after client disconnect. Streamed action resolution defaults this to true. */
     "backgroundProcessing"?: boolean;
     /** Optional assistant model override for the resumed turn after this action is resolved. */
-    "model"?: "gpt-6-sol" | "gpt-6-luna";
-    /** Optional Fast-mode override for the resumed turn. Available on GPT-6 Sol and Luna. */
+    "model"?: "gpt-6.1-sol" | "gpt-6-luna";
+    /** Optional Fast-mode override for the resumed turn. Available only on GPT-6 Luna. */
     "fastMode"?: boolean;
     /** Optional assistant reasoning effort override for the resumed turn: none, low, medium, high, or xhigh. */
     "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
@@ -903,9 +1095,21 @@ interface StorageRestoreInput {
     /** Required for TTL-expired entries. Use null to restore without another expiration. */
     "retention"?: SwaggerStorageRetentionDto | null;
 }
+interface ServiceAccountKeyRotateInput {
+    /** Current API key version. */
+    "version": number;
+    /** Old-key overlap in milliseconds. Zero revokes the old key immediately. Existing expiration is never extended. */
+    "gracePeriodMs"?: number;
+    /** New-key ISO expiration, at least four hours ahead. Omission inherits the current expiration; null creates a key without expiration. */
+    "expireAt"?: string | null;
+    /** Authenticator confirmation for personal accounts. */
+    "code"?: string;
+}
 interface AgentRunInput {
     /** Instruction or mission passed to the root agent run. */
     "instruction": string;
+    /** Readable Agent-workspace storage entries attached to the first conversation message. */
+    "storageEntryIds"?: Array<string>;
     /** Optional trigger type such as REQUEST, EVENT, or SCHEDULE. */
     "triggerType"?: string;
     /** Optional external reference type for correlation. */
@@ -983,6 +1187,36 @@ interface DatabaseUpdateInput {
     /** Provide current version. */
     "version": number;
 }
+interface ServiceAccountKeyUpdateInput {
+    /** You need to provide name of the user. */
+    "name"?: string;
+    /** Replacement resource metadata. Top-level keys starting with "__" are reserved for backend use. */
+    "metadata"?: Record<string, unknown> | null;
+    /** You can provide if key should be whitelisted. */
+    "restricted"?: boolean;
+    /** Use an empty array or null when restricted is false; provide at least one complete entry when setting restricted to true. */
+    "whitelist"?: Array<SwaggerUserKeyWhitelistDto> | null;
+    /** Current API key version used for optimistic concurrency control. */
+    "version": number;
+    /** Optional six-character confirmation code when required by the account policy. */
+    "code"?: string;
+}
+interface ServiceAccountUpdateInput {
+    "memberships"?: SwaggerServiceAccountMembershipsDto;
+    /** You need to provide name of the user. */
+    "name"?: string;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadata"?: Record<string, unknown> | null;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metaData"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadataAdvanced"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "advancedData"?: Record<string, unknown> | null;
+    "access"?: SwaggerUpdateServiceAccountAccessDto;
+    /** Current account version for optimistic concurrency. */
+    "version": number;
+}
 interface StorageEntryUpdateInput {
     /** Replacement file retention. Omit to preserve, or set null to clear expiration. */
     "retention"?: SwaggerStorageRetentionDto | null;
@@ -1022,8 +1256,10 @@ interface WebhookInput {
     "proxy"?: boolean;
     /** Save entire request. */
     "saveDetails"?: boolean;
-    /** Max attempts. */
-    "maxAttempts"?: number;
+    /** Stop delivery on a supported attempt status. Processing of delivery logs is asynchronous. */
+    "stopOnStatuses"?: Array<"UNAUTHENTICATED">;
+    /** Additional retries after the first request: -1 unlimited, 0 no retry, N up to N retries. */
+    "maxRetries"?: number;
     /** Provide data */
     "request"?: SwaggerWebhookRequestDetailsDto;
     /** Mask request details. */
@@ -1033,6 +1269,25 @@ interface WebhookInput {
     /** Optional key/value metadata for grouping and querying webhooks. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
     "metadata"?: Record<string, unknown> | null;
 }
+interface WebhooksBulkInput {
+    /** Existing platform filter tree. Exactly one of filter and resource IDs is required. */
+    "filter"?: Record<string, unknown>;
+    /** Caller-generated key: repeated admission returns the same operation. Maximum 200 characters. */
+    "idempotencyKey"?: string;
+    "webhookIds"?: Array<string>;
+    /** Only allowed for retry. Missing masked values must be supplied explicitly. */
+    "requestPatch"?: SwaggerWebhookRequestPatchDto;
+}
+interface AutomationOperation {
+    operationId: string;
+    resource: 'jobs' | 'webhooks';
+    action: 'cancel' | 'retry' | 'delete';
+    status: 'PENDING' | 'PROCESSING' | 'FINISHED' | 'ERROR';
+    total: number;
+    processed: number;
+    skipped: number;
+    failed: number;
+}
 /**
  * Canonical public low-code API declarations shared by Monaco and local editors.
  * Lifecycle input DTOs are generated from Swagger in api.swagger-contracts.generated.d.ts.
@@ -1549,7 +1804,8 @@ interface Webhook {
     status: string;
     statusMessage: string;
     attempts: number;
-    maxAttempts: number;
+    /** Additional retries: -1 unlimited, 0 no retry. */
+    maxRetries: number;
     request: LooseObject<any>;
     response: LooseObject<any>;
     createdBy: string;
@@ -1564,7 +1820,8 @@ interface LogInterface {
 }
 interface TemplateFormData {
     key: string;
-    value?: string;
+    /** Numbers and booleans are sent as text. Read credentials explicitly with vault.get/getAccessToken. */
+    value?: string | number | boolean;
     /** Storage entry to append as this multipart part. Use this instead of value for binary content. */
     storageEntryId?: string;
     /** Storage namespace for storageEntryId. Defaults to explorer. */
@@ -1617,18 +1874,22 @@ interface HttpRevoResponseScope {
 }
 interface HttpRequestInterface {
     url: string;
+    /** Replaces complete `{name}` path segments with URL-encoded bound values. */
+    pathParams?: Record<string, string>;
     method: 'POST' | 'PUT' | 'DELETE' | 'GET' | 'PATCH' | 'OPTIONS' | 'HEAD' | 'PURGE' | 'LINK' | 'UNLINK';
     timeout?: number;
-    /** Vault references are resolved only by the trusted HTTP sender, never in low-code. */
-    headers?: LooseObject<string | VaultBoundValue>;
+    /** HTTP headers; use an explicitly awaited vault.get/getAccessToken result for credentials. */
+    headers?: LooseObject<string>;
     params?: TemplateParameters[];
+    /** Integration-owned payload. Credential values and provider echoes are caller-managed data. */
     data?: any;
     //@default: undefined
     formData?: TemplateFormData[];
 }
 interface TemplateParameters {
     key: string;
-    value: string | LooseObject<boolean | number | string>;
+    /** Numbers and booleans are sent as text. Legacy plain maps retain '[object Object]' conversion; serialize structured queries explicitly. */
+    value: string | number | boolean | LooseObject<boolean | number | string>;
 }
 interface ProcessLog {
     time: string;
@@ -2059,7 +2320,7 @@ type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
      * Default is false.
      */
     async?: boolean;
-    /** Suppress the export completion/failure System notification for this low-code call. */
+    /** Suppress the export completion/failure System notification. Defaults to true for low-code; set false to opt in. */
     skipNotification?: boolean;
     /** Output format. CSV is the default. XLSX validates the effective row count before starting. */
     format?: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
@@ -2082,6 +2343,8 @@ type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
     retention?: StorageRetentionInput;
 };
 type ImportDatabaseOptions = {
+    /** Suppress System messages; defaults to true in low-code. */
+    skipNotification?: boolean;
     storageEntryId: string;
     format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     mode: 'insert' | 'upsert';
@@ -2428,12 +2691,18 @@ interface AgentConfig {
     workMode?: AgentWorkMode;
     persona?: AgentPersona;
     systemInstructions?: string;
+    /** Persistent Agent Memory shared with memory tools and included in every instruction packet; at most 20,000 o200k_base tokens. */
+    memory?: string;
     memoryPolicy?: AgentMemoryPolicy;
     release?: AgentReleaseConfig;
     automation?: AgentAutomationPolicyConfig;
     cheapTurn?: AgentCheapTurnPolicy;
     toolNames?: string[];
     pluginIds?: string[];
+    /** Attached or inherited default plugins to preload; at most 64 IDs, all within the effective Agent access set. */
+    eagerPluginIds?: string[];
+    /** Selected terminals narrow the historical execution service account's current ACL; at most 64 IDs, empty permits none. */
+    agentTerminalIds?: string[];
     plugins?: AgentPluginConfig[];
     maxActiveRootRuns?: number;
     maxChildRuns?: number;
@@ -2750,6 +3019,225 @@ interface AssistantThreadCompactionRequest {
     keepContext?: boolean;
     content?: string;
 }
+// ApiInterface
+/** Owner selection; omitted means instance. User scope uses the verified execution account. */
+interface SecretScopeOptions {
+    scope?: 'instance' | 'user';
+}
+/** Null or omission selects NOW at write time. Numbers are Unix epoch milliseconds. */
+type SecretDate = string | Date | number | null;
+interface SecretRotateOptions extends SecretScopeOptions {
+    validFrom?: SecretDate;
+}
+interface SecretGetOptions extends SecretRotateOptions {
+    /** Exact validFrom timestamp. If both selectors are supplied they must agree. */
+    version?: SecretDate;
+}
+interface SecretDeleteOptions extends SecretGetOptions {
+}
+interface SecretRevisionListOptions extends SecretScopeOptions {
+    cursor?: string;
+    limit?: number;
+}
+interface SecretProperties {
+    category?: string | null;
+    description?: string | null;
+    /** Replacement JSON object, at most 16 KiB and 64 top-level keys. Backend keys are reserved. */
+    metadata?: Record<string, unknown>;
+}
+interface SecretCreateInput extends SecretProperties {
+    /** Nonempty text, at most 65,536 characters. */
+    value: string;
+    validFrom?: SecretDate;
+    enabled?: boolean;
+}
+interface SecretRotateInput {
+    value: string;
+}
+interface SecretUpdateInput extends SecretProperties {
+    /** Parent metadata counter, distinct from a revision's timestamp version. */
+    version: number;
+}
+/** Unified metadata-only parent. */
+interface Secret {
+    name: string;
+    scope: 'instance' | 'user';
+    category: string | null;
+    description: string | null;
+    metadata: Record<string, unknown>;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+}
+interface SecretRevision {
+    name: string;
+    scope: 'instance' | 'user';
+    /** Stable version identity: the unique validFrom timestamp, normalized to ISO. */
+    version: string;
+    enabled: boolean;
+    validFrom: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface SecretWithRevision extends Secret {
+    revision: SecretRevision;
+}
+interface SecretValueRevision extends SecretRevision {
+    value: string;
+}
+interface SecretWithValue extends Secret {
+    revision: SecretValueRevision;
+}
+interface SecretRevisionPage {
+    items: SecretRevision[];
+    nextCursor: string | null;
+}
+interface VaultIntegrationConfig {
+    resourceUrl: string;
+    scopes: string[];
+    issuer?: string;
+    clientId?: string;
+    clientSecret?: string;
+    tenantId?: string;
+    metadataScopeAliases?: Record<string, string>;
+}
+interface VaultConnectIntegrationInput extends VaultIntegrationConfig {
+    /** Null creates a definition; otherwise use its exact revision from getIntegrationMetadata. */
+    expectedRevision: string | null;
+}
+interface VaultAccessToken {
+    accessToken: string;
+    expiresAt: string;
+    tokenType: 'Bearer';
+}
+interface VaultIntegrationMetadata {
+    name: string;
+    scope: 'instance' | 'user';
+    revision: string | null;
+    resourceUrl: string;
+    issuer: string;
+    scopes: string[];
+    tenantId: string | null;
+    metadataScopeAliases: Record<string, string>;
+    clientId: string | null;
+    hasClientSecret: boolean;
+    registrationMode: 'dynamic_public' | 'byo_public' | 'byo_confidential';
+    authorizationEndpoint: string;
+    registrationEndpoint: string | null;
+}
+interface VaultIntegrationDiscovery {
+    issuers: string[];
+    requiresIssuerSelection: boolean;
+    supportedScopes: string[];
+    issuer?: string;
+    authorizationEndpoint?: string;
+    registrationEndpoint?: string | null;
+    registrationMode?: 'dynamic_public' | 'byo_public' | 'byo_confidential';
+    requiresClientId?: boolean;
+    redirectUri?: string;
+}
+interface VaultIntegrationConnectResult {
+    name: string;
+    scope: 'instance' | 'user';
+    revision: string;
+    authorizationUrl: string;
+}
+/** Native Vault manager; one contract for instance and verified user ownership.
+ * Instance access requires Secret roles and creator ownership or an administrator.
+ * Secret values return only through get; getAccessToken returns an integration token. Automatic diagnostic previews suppress Secret values.
+ * Writes with readOnly: true throw READ_ONLY_OPERATION_FORBIDDEN before performing the operation.
+ * External provider credentials and OAuth connections have their own lifecycles.
+ */
+/** Unique service-account name or ID; explicit selectors avoid ambiguity. */
+type ServiceAccountRef = string | {
+    id: string;
+} | {
+    name: string;
+};
+interface ServiceAccountRecord {
+    userId: string;
+    name: string;
+    mail: string;
+    serviceAccount: true;
+    status: number;
+    version: number;
+    platformAccess: boolean;
+    access: {
+        restricted: boolean;
+        users: Array<{
+            userId: string;
+            mail: string;
+            name: string;
+        }>;
+        groups: Array<{
+            groupId: string;
+            name: string;
+        }>;
+    };
+    memberships: {
+        groups: string[];
+        roleGroups: string[];
+    };
+    metadata: Record<string, any>;
+    metadataAdvanced: Record<string, any>;
+}
+interface ServiceAccountKey {
+    userKeyId: string;
+    name: string;
+    version: number;
+    /** Masked credential label; never the usable credential. */
+    key?: string;
+    restricted: boolean;
+    whitelist?: ServiceAccountKeyCreateInput['whitelist'];
+    expireAt?: Date | null;
+    metadata?: Record<string, any>;
+    deletedAt?: Date | null;
+    createdAt?: Date;
+    lastUpdateAt?: Date;
+    rotatedFromUserKeyId?: string | null;
+}
+/** Immutable credentials are revealed once by create/rotate only. */
+interface ServiceAccountKeyCreated extends ServiceAccountKey {
+    secret: string;
+}
+interface ServiceAccountKeyRotated {
+    newKey: ServiceAccountKeyCreated;
+    previousKey: ServiceAccountKey;
+}
+interface RevoServiceAccount {
+    get(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    list(query?: ServiceAccountQuery): Promise<CollectionResult<ServiceAccountRecord>>;
+    create(input: ServiceAccountCreateInput): Promise<ServiceAccountRecord>;
+    update(ref: ServiceAccountRef, input: ServiceAccountUpdateInput): Promise<ServiceAccountRecord>;
+    delete(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    activate(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    disable(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    restore(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    enablePlatformAccess(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    disablePlatformAccess(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    getKeys(ref: ServiceAccountRef, query?: ServiceAccountQuery): Promise<CollectionResult<ServiceAccountKey>>;
+    getKey(ref: ServiceAccountRef, userKeyId: string): Promise<ServiceAccountKey>;
+    createKey(ref: ServiceAccountRef, input: ServiceAccountKeyCreateInput): Promise<ServiceAccountKeyCreated>;
+    updateKey(ref: ServiceAccountRef, userKeyId: string, input: ServiceAccountKeyUpdateInput): Promise<ServiceAccountKey>;
+    rotateKey(ref: ServiceAccountRef, userKeyId: string, input: ServiceAccountKeyRotateInput): Promise<ServiceAccountKeyRotated>;
+    revokeKey(ref: ServiceAccountRef, userKeyId: string): Promise<ServiceAccountKey>;
+}
+interface RevoVault$1 {
+    get(name: string, options?: SecretGetOptions): Promise<SecretWithValue>;
+    create(name: string, data: SecretCreateInput, options?: SecretScopeOptions): Promise<Secret | null>;
+    update(name: string, data: SecretUpdateInput, options?: SecretScopeOptions): Promise<Secret | null>;
+    delete(name: string, options?: SecretDeleteOptions): Promise<void | null>;
+    rotate(name: string, data: SecretRotateInput, options?: SecretRotateOptions): Promise<SecretWithRevision | null>;
+    listRevisions(name: string, options?: SecretRevisionListOptions): Promise<SecretRevisionPage>;
+    getAccessToken(name: string, options?: SecretScopeOptions): Promise<VaultAccessToken>;
+    getIntegrationMetadata(name: string, options?: SecretScopeOptions): Promise<VaultIntegrationMetadata>;
+    discoverIntegration(name: string, data: VaultIntegrationConfig, options?: SecretScopeOptions): Promise<VaultIntegrationDiscovery>;
+    connectIntegration(name: string, data: VaultConnectIntegrationInput, options?: SecretScopeOptions): Promise<VaultIntegrationConnectResult | null>;
+    disconnectIntegration(name: string, options?: SecretScopeOptions): Promise<{
+        name: string;
+        disabled: boolean;
+    } | null>;
+}
 interface RevoApi {
     createDatabase(data: DatabaseCreateInput): Promise<Database>;
     cloneDatabase<TAsync extends boolean = false>(name: string, options?: DatabaseCloneInput & {
@@ -2758,6 +3246,11 @@ interface RevoApi {
     exportDatabase<TAsync extends boolean = false>(name: string, options?: ExportDatabaseOptions & {
         async?: TAsync;
     }): Promise<TAsync extends true ? ExportDatabaseAcceptedResponse : TAsync extends false ? ExportDatabaseCompletedResponse : ExportDatabaseResponse>;
+    startDatabaseOperation(name: string, options: Omit<DatabaseOperationInput, 'databaseName'>): Promise<{
+        accepted: true;
+        jobId: string;
+        status: string;
+    }>;
     importDatabase(name: string, options: ImportDatabaseOptions): Promise<{
         importId: string;
         jobId: string;
@@ -2802,8 +3295,6 @@ interface RevoApi {
     queryDatabase(query: string, params?: any[]): Promise<any>;
     currentUser(): LoggedUser;
     isDebug(): boolean;
-    disableDebug(): void;
-    enableDebug(): void;
     getCache(key: string): any;
     setCache(key: string, value: any): void;
     getContext(): Context;
@@ -2847,6 +3338,26 @@ interface RevoApi {
     triggerTarget(targetType: ExecutionTargetType, targetId: string, input?: Record<string, JsonValue>, options?: AutomationScheduleOptions): Promise<string>;
     triggerJob(templateIdOrName: string, templateInputs?: Record<string, JsonValue>, options?: AutomationScheduleOptions): Promise<string>;
     triggerWebhook(webhook: WebhookInput, options?: AutomationScheduleOptions): Promise<Webhook>;
+    cancelJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    retryJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    deleteJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    cancelWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    retryWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    deleteWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    previewAutomationOperation(resource: 'jobs' | 'webhooks', action: 'cancel' | 'retry' | 'delete', input: JobsBulkInput | WebhooksBulkInput): Promise<{
+        matched: number;
+        eligible: number;
+    }>;
+    getAutomationOperation(operationId: string): Promise<AutomationOperation>;
+    getAutomationOperationItems(operationId: string, after?: string): Promise<{
+        data: Array<{
+            resourceId: string;
+            status: string;
+            resultId: string | null;
+            errorCode: string | null;
+        }>;
+        nextCursor: string | null;
+    }>;
     httpCall(config: HttpRequestInterface, options: HttpRequestOptionsInterface & {
         responseType: 'storage';
         target: HttpStorageTargetRef;
@@ -3098,16 +3609,6 @@ interface RevoUtils {
     rsaSign(privateKey: string, payload: string, passphrase?: string): Promise<string>;
     rsaVerify(publicKey: string, payload: string, signature: string): Promise<boolean>;
 }
-type VaultScope = 'instance' | 'user' | 'organization';
-type VaultSource = 'secret' | 'integration';
-type VaultBoundValue = Readonly<{
-    __revoBoundValue: 'vault-v1';
-    name: string;
-    scope: VaultScope;
-    source: VaultSource;
-    prefix: string;
-    suffix: string;
-}>;
 /** Low-code byte payloads; REST JSON callers retain the base64 option. */
 /** Text arrays retain their existing joining rules; bytes are snapshotted before asynchronous upload. */
 type StorageBinaryPutObjectInput = Omit<StoragePutObjectInput, 'data'> & {
@@ -3124,6 +3625,8 @@ type LowCodeLanguage = 'javascript' | 'typescript';
 interface LowCodeExecuteOptions {
     /** Defaults to TypeScript. */
     language?: LowCodeLanguage;
+    /** Restrict platform writes for this execution. Inherits the hosted runtime mode when omitted. */
+    readOnly?: boolean;
     /** Input exposed through api.input() inside the low-code execution. */
     inputs?: any;
     /** Maximum execution time in milliseconds. Defaults to 60 seconds. */
@@ -3135,6 +3638,15 @@ interface RevoLowCode {
     execute<T = LooseObject<any>>(code: string, options?: LowCodeExecuteOptions): Promise<ComponentExecuteResult<T>>;
 }
 
+type VaultReadResult = Awaited<ReturnType<RevoVault$1['get']>>;
+/** Wire decoding returns a full Node.js Buffer, extending the portable low-code type. */
+type RevoVault = Omit<RevoVault$1, 'get'> & {
+    get(...args: Parameters<RevoVault$1['get']>): Promise<Omit<VaultReadResult, 'revision'> & {
+        revision: Omit<VaultReadResult['revision'], 'value'> & {
+            value: Buffer$1;
+        };
+    }>;
+};
 type RevoExecute = RevoLowCode['execute'];
 type RevoExecuteOptions = NonNullable<Parameters<RevoExecute>[1]>;
 type RevoExecutionDefaults = Omit<RevoExecuteOptions, 'inputs'>;
@@ -3222,6 +3734,8 @@ interface RevoRuntime {
     readonly api: RevoApi;
     readonly utils: RevoUtils;
     readonly storage: RevoStorage;
+    readonly vault: RevoVault;
+    readonly serviceAccount: RevoServiceAccount;
     readonly transport: RevoTransport;
     readonly agents: RevoAgents;
     readonly execute: RevoExecute;
@@ -3320,4 +3834,4 @@ declare class RevoHttpResponseError extends RevoError {
     constructor(statusCode: number, body?: unknown);
 }
 
-export { RevoRuntimeContextUnavailableError as A, type BatchFailureMode as B, CONTRACT_REVISION as C, RevoTransportError as D, type RuntimeBatchRequest as E, type RuntimeBatchResponse as F, type RuntimeCall as G, type HostedRuntimeBootstrap as H, type RuntimeCallResult as I, type SerializedRevoError as J, PROTOCOL_VERSION as P, type RevoRuntime as R, SDK_VERSION as S, RevoExecutionExit as a, RevoHttpResponseError as b, type RevoRuntimeBridgeRequest as c, type RevoRuntimeBridgeResponse as d, type RevoRuntimeBridgeTransportError as e, type RevoStandaloneApi as f, type RevoUtils as g, type RevoStorage as h, type RevoTransport as i, type RevoAgents as j, type RevoExecute as k, type RevoBatchController as l, type RevoClientOptions as m, type RevoApi as n, RevoAuthenticationError as o, RevoBatchConfigurationError as p, RevoBatchLimitError as q, type RevoBatchLimits as r, type RevoBatchOptions as s, RevoConfigurationError as t, RevoError as u, type RevoExecuteOptions as v, type RevoExecutionDefaults as w, RevoPermissionDeniedError as x, RevoProtocolError as y, RevoRemoteError as z };
+export { RevoProtocolError as A, type BatchFailureMode as B, CONTRACT_REVISION as C, RevoRemoteError as D, RevoRuntimeContextUnavailableError as E, RevoTransportError as F, type RuntimeBatchRequest as G, type HostedRuntimeBootstrap as H, type RuntimeBatchResponse as I, type RuntimeCall as J, type RuntimeCallResult as K, type SerializedRevoError as L, PROTOCOL_VERSION as P, type RevoRuntime as R, SDK_VERSION as S, RevoExecutionExit as a, RevoHttpResponseError as b, type RevoRuntimeBridgeRequest as c, type RevoRuntimeBridgeResponse as d, type RevoRuntimeBridgeTransportError as e, type RevoStandaloneApi as f, type RevoUtils as g, type RevoStorage as h, type RevoVault as i, type RevoServiceAccount as j, type RevoTransport as k, type RevoAgents as l, type RevoExecute as m, type RevoBatchController as n, type RevoClientOptions as o, type RevoApi as p, RevoAuthenticationError as q, RevoBatchConfigurationError as r, RevoBatchLimitError as s, type RevoBatchLimits as t, type RevoBatchOptions as u, RevoConfigurationError as v, RevoError as w, type RevoExecuteOptions as x, type RevoExecutionDefaults as y, RevoPermissionDeniedError as z };