@revoengine/sdk 2.0.0 → 4.0.0

package/dist/{errors-nuya4h6b.d.cts → errors-CoeJQeU7.d.cts}

@@ -1,9 +1,10 @@
 import * as node_worker_threads from 'node:worker_threads';
+import { Buffer as Buffer$1 } from 'node:buffer';
 
-declare const SDK_VERSION: "2.0.0";
+declare const SDK_VERSION: "4.0.0";
 declare const PROTOCOL_VERSION: 1;
-declare const CONTRACT_REVISION: "c507295175722cca486af351473cc859b0d5d04c69e12dbc1f149f6b0282012d";
-type RuntimeSurfaceName = 'api' | 'storage' | 'agents' | 'lowCode';
+declare const CONTRACT_REVISION: "55a2d6607e14cc2a6f7aef0d21d64a95e6d625d916d6e624bbecb4410716e79a";
+type RuntimeSurfaceName = 'api' | 'storage' | 'transport' | 'vault' | 'serviceAccount' | 'agents' | 'lowCode';
 
 // AUTO-GENERATED FILE. DO NOT EDIT DIRECTLY.
 // Sources: api.swagger-contracts.generated.d.ts, api.public.d.ts
@@ -43,9 +44,9 @@ interface SwaggerAgentCheapTurnPolicyDto {
 }
 interface SwaggerAgentConfigDto {
     /** Supported assistant model used when the agent starts a thread. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
+    "model"?: "gpt-6.1-sol" | "gpt-6.1-terra" | "gpt-6-luna";
     /** Reasoning effort passed to assistant threads. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Durable execution-mode default used for agent-loop turns. Per-turn fast-path routing and prompt-tier selection are derived by runtime, not configured here. */
     "executionMode"?: "interactive" | "execute" | "background" | "automation";
     /** Durable planning policy default used for agent-loop turns. standard executes normally; review_required creates a reviewed plan before interactive execution. */
@@ -56,6 +57,12 @@ interface SwaggerAgentConfigDto {
     "persona"?: "friendly" | "pragmatic" | "professional" | "concise" | "calm" | "mentor" | "assertive";
     /** Additional per-agent system instructions persisted with the definition. Runtime policy still has higher priority. */
     "systemInstructions"?: string;
+    /** Context profile for new Agent threads. platform preserves the normal Agent context; minimal reduces automatic context while retaining mandatory policy and configured Agent instructions. Existing Agent tool and plugin admission is unchanged. Existing threads retain their saved profile on continuation and Resume. */
+    "contextMode"?: "platform" | "minimal";
+    /** Validated final-answer format for new Agent threads. Defaults to text. JSON may use the shared strict response schema contract. Existing threads retain their saved format on continuation and Resume; this field never replaces systemInstructions. */
+    "responseFormat"?: SwaggerAssistantResponseFormatDto;
+    /** One persistent Agent memory shared by Memory settings and runtime memory tools, included in instructions on every turn. Limited to 20,000 assistant tokens. */
+    "memory"?: string;
     /** Structured operator-owned Agent identity loaded on every autonomous turn. Learned memory cannot mutate this definition. */
     "definition"?: SwaggerAgentDefinitionDto;
     /** Durable cross-run memory defaults such as recall budget, retained summary size, and retention horizon. */
@@ -70,6 +77,10 @@ interface SwaggerAgentConfigDto {
     "toolNames"?: Array<string>;
     /** Default registry plugin ids attached to this agent. These are the agent-owned baseline attachments applied to every run unless additional runtime plugin ids are supplied. */
     "pluginIds"?: Array<string>;
+    /** Attached or inherited default registry plugin IDs to load eagerly. IDs outside the effective Agent plugin access set are rejected. */
+    "eagerPluginIds"?: Array<string>;
+    /** Selected terminal IDs available to this Agent. An empty selection permits no terminals. Each use also requires the historical execution service account and its current terminal/workspace ACL. */
+    "agentTerminalIds"?: Array<string>;
     /** Primary plugin contract surface. Plugins are provider-governed and define the executable agent-plugin surface. */
     "plugins"?: Array<SwaggerAgentPluginConfigDto>;
     /** Maximum number of concurrently admitted root runs for this agent. Additional root runs remain queued until capacity is released. */
@@ -108,11 +119,13 @@ interface SwaggerAgentPluginApprovalConfigDto {
     "mode"?: "none" | "always" | "conditional";
     /** Safety tier enforced for approval and mutation governance. */
     "safetyTier"?: "read" | "write" | "destructive" | "external" | "execute";
+    /** Required for conditional mode: a verifiable constraint RevoShield must confirm in addition to user authorization. */
+    "condition"?: string;
 }
 interface SwaggerAgentPluginComponentToolConfigDto {
     /** Whether this component-backed tool is enabled for runtime selection and execution. */
     "enabled"?: boolean;
-    /** Whether this component-backed tool is deferred behind discovery instead of eagerly exposed. */
+    /** Whether this exact expanded component action is deferred behind plugin discovery/loading instead of eagerly exposed. */
     "deferLoading"?: boolean;
     /** Explicit local tool alias exposed to the runtime when set. */
     "alias"?: string;
@@ -126,7 +139,7 @@ interface SwaggerAgentPluginComponentToolConfigDto {
     "inputs"?: Record<string, unknown>;
     /** Named component result to return when the component executor supports result popping. */
     "popResult"?: string;
-    /** Strict structured input schema exposed for this tool. The component receives matching arguments under api.input().agentTool.args. Must be an object schema with additionalProperties=false and descriptions on every declared property. */
+    /** Strict model-facing input schema for this exact action. The component receives matching arguments under api.input().agentTool.args and must explicitly translate them when a downstream provider uses a different wire shape. Must be an object schema with additionalProperties=false and descriptions on every declared property. */
     "inputSchema"?: Record<string, unknown>;
     /** Structured output schema expected from this tool. */
     "outputSchema"?: Record<string, unknown>;
@@ -148,18 +161,18 @@ interface SwaggerAgentPluginComponentToolConfigDto {
 interface SwaggerAgentPluginComponentToolsetDto {
     /** Default governance and loading policy for component-backed tools. */
     "defaultConfig"?: SwaggerAgentPluginComponentToolConfigDto;
-    /** Component-backed tools keyed by stable capability name. */
+    /** Component-backed actions keyed by stable capability name. Every entry expands into a separate executable tool; alias is its exact local model-visible action name when set. */
     "tools"?: Record<string, unknown>;
 }
 interface SwaggerAgentPluginConfigDto {
     /** Plugin contract version for the governed runtime surface. */
     "contractVersion"?: number;
     /** Stable plugin id used by the agent runtime. */
-    "id"?: string;
+    "id": string;
     /** Plugin execution provider kind. */
     "kind"?: "tools" | "mcp_server" | "skill" | "package";
     /** Operator-facing plugin name. */
-    "name"?: string;
+    "name": string;
     /** Optional plugin description. */
     "description"?: string;
     /** Canonical English routing metadata used for planner and fallback matching. Operator-facing name and description may remain localized. */
@@ -168,6 +181,8 @@ interface SwaggerAgentPluginConfigDto {
     "executionMode"?: "sync" | "background";
     /** Component id executed when this plugin runs. */
     "componentId"?: string;
+    /** Portable component revision digest. */
+    "componentDigest"?: string;
     /** Optional fixed component version. */
     "componentVersion"?: number;
     /** Multiple governed tool contracts backed by the same component implementation. */
@@ -207,9 +222,11 @@ interface SwaggerAgentPluginConfigDto {
 }
 interface SwaggerAgentPluginMcpConfigDto {
     /** Remote MCP transport supported by the SaaS runtime. */
-    "transport"?: "streamable_http" | "sse";
-    /** Absolute HTTPS endpoint for the remote MCP server. */
-    "url"?: string;
+    "transport": "streamable_http" | "sse";
+    /** Absolute public HTTPS MCP endpoint URL. Private and localhost destinations are blocked at connection time. */
+    "url": string;
+    /** Public HTTPS network policy. Legacy private values are restricted to public HTTPS at execution time. */
+    "networkAccess"?: "public";
     /** Manifest cache time-to-live in milliseconds. */
     "manifestTtlMs"?: number;
     /** Connection and handshake timeout in milliseconds. */
@@ -233,7 +250,9 @@ interface SwaggerAgentPluginMcpConfigDto {
 }
 interface SwaggerAgentPluginMcpHeaderBindingDto {
     /** Header name sent to the remote MCP server. */
-    "name"?: string;
+    "name": string;
+    /** Vault BoundValue resolved for the executing user, organization, or instance after an explicit grant. */
+    "vault"?: SwaggerAgentPluginMcpVaultRefDto;
     /** Secret id containing the header value. */
     "secretId"?: string;
     /** Optional secret data revision id when the binding should pin a specific secret revision. */
@@ -246,7 +265,7 @@ interface SwaggerAgentPluginMcpHeaderBindingDto {
 interface SwaggerAgentPluginMcpToolConfigDto {
     /** Whether the tool is enabled for runtime selection and execution. */
     "enabled"?: boolean;
-    /** Whether the tool is deferred behind discovery instead of eagerly exposed. */
+    /** Whether the remote tool schema is deferred behind plugin discovery/loading instead of eagerly exposed. The manifest tool remains known by remote name; alias changes only its local exposed name. */
     "deferLoading"?: boolean;
     /** Explicit local tool alias exposed to the runtime when set. */
     "alias"?: string;
@@ -266,22 +285,36 @@ interface SwaggerAgentPluginMcpToolConfigDto {
 interface SwaggerAgentPluginMcpToolsetDto {
     /** Default governance and loading policy for tools discovered from this MCP server. */
     "defaultConfig"?: SwaggerAgentPluginMcpToolConfigDto;
-    /** Per-remote-tool overrides keyed by remote tool name. */
+    /** Per-remote-tool overrides keyed by exact remote manifest tool name, never by local alias or plugin registry id. */
     "configs"?: Record<string, unknown>;
 }
+interface SwaggerAgentPluginMcpVaultRefDto {
+    /** Opaque Vault reference marker. */
+    "__revoBoundValue": "vault-v1";
+    /** Credential requirement name declared by the plugin. */
+    "name": string;
+    /** Credential owner scope. */
+    "scope": "instance" | "user" | "organization";
+    /** Vault value source. */
+    "source": "secret" | "integration";
+    /** Literal text prepended to the resolved value. */
+    "prefix": string;
+    /** Literal text appended to the resolved value. */
+    "suffix": string;
+}
 interface SwaggerAgentPluginPackageConfigDto {
     /** Stable package identity used across internal catalogs and future community marketplace publishing. */
     "externalId": string;
     /** Package content format. Markdown is the only supported v1 format. */
     "format"?: "markdown";
     /** Markdown instruction content loaded into the assistant runtime when the package is attached. */
-    "content"?: string;
-    /** Registry plugin ids declared as package dependencies. */
+    "content": string;
+    /** Exact direct registry plugin UUIDs exposed lazily when this package is loaded. Dependencies may be skill, tools, or MCP plugins, never packages. */
     "pluginIds"?: Array<string>;
     /** Disabled marketplace-facing package metadata reserved for catalog publishing. */
     "metadata"?: SwaggerAgentPluginPackageMetadataDto;
-    /** Maximum number of package content characters allowed into one prompt. */
-    "maxPromptChars"?: number;
+    /** Maximum number of package content tokens allowed into one prompt. Defaults to 10000. */
+    "maxPromptTokens"?: number;
 }
 interface SwaggerAgentPluginPackageMetadataDto {
     /** Package avatar or icon URL shown in package catalogs. */
@@ -317,11 +350,11 @@ interface SwaggerAgentPluginSkillConfigDto {
     /** Skill content format. Markdown is the only supported v1 format. */
     "format"?: "markdown";
     /** Markdown instruction content loaded into the assistant runtime when the plugin is attached. */
-    "content"?: string;
-    /** Registry plugin ids declared as one-level skill dependencies. */
+    "content": string;
+    /** Exact registry plugin UUIDs exposed lazily when this skill is loaded. Dependencies may be skill, tools, or MCP plugins, never packages. */
     "pluginIds"?: Array<string>;
-    /** Maximum number of skill content characters allowed into one prompt. */
-    "maxPromptChars"?: number;
+    /** Maximum number of skill content tokens allowed into one prompt. Defaults to 10000. */
+    "maxPromptTokens"?: number;
 }
 interface SwaggerAgentPolicyDto {
     /** Default approval mode applied to agent tool calls when no per-tool override exists. */
@@ -371,6 +404,42 @@ interface SwaggerAgentReleaseRolloutPolicyDto {
     /** Optional admitted snapshot to roll back to when the current rollout is revoked. */
     "rollbackToSnapshotId"?: string;
 }
+interface SwaggerAssistantOutputDto {
+    /** Validated final-answer format. */
+    "type": "text" | "json";
+    /** Complete validated answer text. This value is independent of bounded operator summaries. */
+    "text": string;
+    /** Complete parsed object for a validated JSON answer; absent for text answers. */
+    "json"?: Record<string, unknown>;
+}
+interface SwaggerAssistantResponseFormatDto {
+    /** Final answer format. JSON without a schema requires a JSON object; with a schema it uses strict Structured Outputs. Defaults to text. */
+    "type": "text" | "json";
+    /** Optional strict JSON Schema for a JSON object response. All object properties must be required and additionalProperties must be false. Only local schema references are allowed. Maximum 32 KiB. */
+    "schema"?: Record<string, unknown>;
+    /** Schema responses are always strict. Defaults to true when schema is supplied; false and strict without a schema are rejected. */
+    "strict"?: true;
+}
+interface SwaggerAssistantThreadlessResponseContextDto {
+    /** Current Revo UI component hint included in the response context. It does not automatically select tools or skills. */
+    "componentContext"?: "PREFERENCES" | "USERS" | "SERVICE_ACCOUNTS" | "GROUPS" | "ROLE_GROUPS" | "SECRETS" | "REVISIONS" | "DATABASES" | "DATABASE_OPERATIONS" | "DATABASE_VIEWS" | "DATA" | "DATA_ITEMS" | "ENDPOINTS" | "TEMPLATES" | "SCHEDULE" | "SCHEDULE_HISTORY" | "EVENTS" | "JOBS" | "AGENTS" | "AGENT_RUNS" | "AGENT_INBOX" | "AGENT_PLUGINS" | "AGENT_TERMINALS" | "WEBHOOKS" | "COMPONENTS" | "COMPONENT_ELEMENTS" | "EVENTS_HISTORY" | "USER_KEYS" | "STORAGE" | "REALTIME" | "LOGS" | "MONITORING" | "THREAD" | "SECURITY_SETTINGS" | "ME_SETTINGS" | "ME_KEYS" | "USER_DETAILS" | "PLAYGROUND" | "WEB_IDE";
+    /** UI-level intent hint for the lightweight response. */
+    "kind"?: "suggestion" | "code_refactor" | "code_explain" | "completion" | "generic";
+    /** Additional UI instruction for this lightweight response. */
+    "instruction"?: string;
+    /** Programming or content language hint, for example typescript. */
+    "language"?: string;
+    /** Optional file/component path currently shown in the UI. */
+    "filePath"?: string;
+    /** Current selected text/code from the UI. */
+    "selectedText"?: string;
+    /** Nearby text/code around the current selection. */
+    "surroundingText"?: string;
+    /** Optional exact platform refs already known by the UI. */
+    "resourceRefs"?: Array<string>;
+    /** Compatibility context tags. Currently do not affect response context or tool selection. */
+    "requestContext"?: Array<string>;
+}
 interface SwaggerDatabaseDefinition {
     /** Column id, required only for update. */
     "databaseDefinitionId"?: string;
@@ -379,7 +448,7 @@ interface SwaggerDatabaseDefinition {
     /** Description. */
     "desc"?: string | null;
     /** Optional column metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** You need to specify type [SMALLINT,INTEGER,BIGINT,REAL,DOUBLE PRECISION,NUMERIC,JSON,JSONB,TEXT,UUID,DATE,TIME,TIMETZ,TIMESTAMP,TIMESTAMPTZ,BOOLEAN]. */
     "type": "SMALLINT" | "INTEGER" | "BIGINT" | "REAL" | "DOUBLE PRECISION" | "NUMERIC" | "JSON" | "JSONB" | "TEXT" | "UUID" | "DATE" | "TIME" | "TIMETZ" | "TIMESTAMP" | "TIMESTAMPTZ" | "BOOLEAN";
     /** Provide if this column is primary key. */
@@ -413,6 +482,80 @@ interface SwaggerDatabaseDefinitionForeignReferences {
     /** You need to specify what happen on update of referenced table data, "none" will raise an error if there are records existing in this table that reference it. */
     "onDelete": "none" | "cascade" | "restrict" | "default" | "null";
 }
+interface SwaggerDatabaseIndexColumnDto {
+    "name"?: string;
+    /** function(col) / cast / expression are not raw SQL; only safe structured input is allowed */
+    "expression"?: SwaggerDatabaseIndexExpressionDto;
+    "order"?: "ASC" | "DESC";
+    "nulls"?: "FIRST" | "LAST";
+    "collation"?: string;
+    "opclass"?: string;
+}
+interface SwaggerDatabaseIndexDefinitionDto {
+    "name"?: string;
+    "using"?: "btree" | "hash" | "gist" | "spgist" | "gin" | "brin";
+    "columns": Array<SwaggerDatabaseIndexColumnDto>;
+    "where"?: SwaggerDatabaseIndexPredicateDto;
+    "include"?: Array<string>;
+    "unique"?: boolean;
+}
+interface SwaggerDatabaseIndexExpressionDto {
+    /** Column reference. */
+    "column"?: string;
+    /** Safe function name. */
+    "fn"?: string;
+    "args"?: Array<SwaggerDatabaseIndexExpressionDto>;
+    "cast"?: string;
+    "literal"?: string | number | boolean | null;
+}
+interface SwaggerDatabaseIndexPredicateDto {
+    /** Logical AND. */
+    "and"?: Array<SwaggerDatabaseIndexPredicateDto>;
+    /** Logical OR. */
+    "or"?: Array<SwaggerDatabaseIndexPredicateDto>;
+    /** Logical NOT. */
+    "not"?: SwaggerDatabaseIndexPredicateDto;
+    "column"?: string;
+    "op"?: "eq" | "ne" | "gt" | "gte" | "lt" | "lte" | "like" | "ilike" | "in" | "between" | "isnull" | "notnull";
+    "value"?: string | number | boolean | null;
+    "values"?: Array<string | number | boolean | null>;
+}
+interface SwaggerDatabaseOptionsDto {
+    "indexes"?: Array<SwaggerDatabaseIndexDefinitionDto>;
+}
+interface SwaggerDatabaseViewActionExecuteDto {
+    "action": "UPDATE" | "DELETE";
+    "targetDatabaseId": string;
+    "keyMapping": Record<string, unknown>;
+    "mutationToken": string;
+    "data"?: Record<string, unknown> | Array<{
+        "column": string;
+        "op": "set" | "setNull" | "add" | "subtract" | "multiply" | "divide" | "abs" | "floor" | "ceil" | "sqrt" | "round" | "pow" | "toggle" | "addInterval" | "subtractInterval" | "truncate" | "prepend" | "append" | "insert" | "replace" | "trim" | "lower" | "upper" | "mergeJson" | "setJsonPath" | "removeJsonPath" | "addItems" | "removeItems";
+        "value"?: unknown | null;
+        "position"?: number;
+        "search"?: string;
+        "path"?: Array<string>;
+        "create"?: boolean;
+        "unit"?: string;
+        "nulls"?: "preserve" | "empty";
+    }>;
+    "return"?: boolean;
+    "onlyKeys"?: boolean;
+}
+interface SwaggerDeleteDatabaseRequestDto {
+    /** Filter object or array of filter objects. */
+    "filter": Record<string, unknown>;
+    /** Join definition for filtering. */
+    "join"?: Record<string, unknown>;
+    /** Limit of affected rows. */
+    "take"?: number;
+    /** Offset of affected rows. */
+    "skip"?: number;
+    /** Return updated rows. */
+    "return"?: boolean;
+    /** Return only primary keys (reduces payload). */
+    "onlyKeys"?: boolean;
+}
 interface SwaggerPartitionDefinition {
     /** Partition type. */
     "type"?: "LIST" | "RANGE" | "HASH";
@@ -423,9 +566,9 @@ interface SwaggerPartitionDefinition {
     /** For LIST partitioning: array of values. For RANGE partitioning: not used. */
     "values"?: Array<string>;
     /** For RANGE partitioning: starting value (use "MINVALUE" for unbounded start). */
-    "from"?: Record<string, unknown>;
+    "from"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
     /** For RANGE partitioning: ending value (use "MAXVALUE" for unbounded end). */
-    "to"?: Record<string, unknown>;
+    "to"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
     /**
         The modulus value for a HASH partition.
         Required only when the partition type is HASH.
@@ -441,6 +584,36 @@ interface SwaggerPartitionDefinition {
        */
     "remainder"?: number;
 }
+interface SwaggerServiceAccountAccessDto {
+    /** Restrict management access to explicitly assigned users and groups. */
+    "restricted": boolean;
+    /** User UUID/email references or {id}/{mail}. No implicit creator/self access after creation. */
+    "users"?: Array<string | {
+        "id": string;
+    } | {
+        "mail": string;
+    }>;
+    /** Exact group name/UUID references or {id}/{name}. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
+interface SwaggerServiceAccountMembershipsDto {
+    /** Execution group memberships. Requires USER_ADMIN or INSTANCE_ADMIN. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+    /** Assigned active role groups. Delegators may assign only their own active groups without INSTANCE_ADMIN. */
+    "roleGroups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
 interface SwaggerStorageCellInputDto {
     /** A1 cell address. */
     "address": string;
@@ -448,12 +621,14 @@ interface SwaggerStorageCellInputDto {
     "value"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
     /** Excel formula without a leading equals sign. */
     "formula"?: string;
-    /** Cached formula result. ExcelJS does not calculate formulas. Supports JSON-compatible strings, numbers, booleans, arrays, objects, and null. */
+    /** Cached formula result. Formulas are not calculated by this operation. Supports JSON-compatible strings, numbers, booleans, arrays, objects, and null. */
     "result"?: string | number | boolean | Record<string, unknown> | Array<unknown> | null;
-    /** ExcelJS-compatible declarative cell style. */
+    /** Declarative cell style for XLSX output. */
     "style"?: Record<string, unknown>;
 }
 interface SwaggerStorageCsvOptionsDto {
+    /** CSV read/index policy. abort rejects invalid records; skipRow skips only source field-count mismatches and reports their count and locations. Syntax and oversized-record errors always abort. */
+    "onError"?: "abort" | "skipRow";
     /** Output character encoding. Input encoding is detected when omitted. */
     "encoding"?: string;
     /** Emit a byte order mark at the start of the file. */
@@ -462,9 +637,11 @@ interface SwaggerStorageCsvOptionsDto {
     "delimiter"?: string;
     /** Record delimiter. */
     "recordDelimiter"?: "\n" | "\r" | "\r\n";
-    /** Quote character. */
-    "quote"?: string;
-    /** Quote escape character. */
+    /** Quote character, default double quote. Set false to disable CSV quoting; quotes and backslashes then remain literal and escape is ignored. */
+    "quote"?: string | false;
+    /** Maximum source bytes in one logical CSV record, including multiline quoted fields. Defaults to 64 MiB; independent of callback/read batch size. Larger records reject indexing with STORAGE_CSV_INVALID and a RecordTooLarge diagnostic. */
+    "maxRecordBytes"?: number;
+    /** Quote escape character. Ignored when quote is false. */
     "escape"?: string;
     /** Prefix spreadsheet formula-like values to prevent CSV formula injection. */
     "escapeFormulae"?: boolean;
@@ -480,19 +657,19 @@ interface SwaggerStorageSheetColumnDto {
     "key": string;
     /** Visible header. Defaults to key. */
     "header"?: string;
-    /** Logical value type retained in XLSX fileStats and used by typed row producers. */
-    "type"?: "string" | "number" | "boolean" | "date";
+    /** Logical value type retained in XLSX/CSV/TSV fileStats and used by typed row producers and getFileData reads. Object parses a JSON object or array from text. Without a declared type, imported tabular values remain strings; XLSX styles never infer a type. */
+    "type"?: "string" | "number" | "boolean" | "date" | "object";
     /** Column width in Excel character units. */
     "width"?: number;
     /** Hide the worksheet column. */
     "hidden"?: boolean;
-    /** ExcelJS-compatible declarative column style. */
+    /** Declarative column style for XLSX output. */
     "style"?: Record<string, unknown>;
 }
 interface SwaggerStorageSheetDataPartDto {
     /** Target worksheet name. */
     "sheet": string;
-    /** Rows represented as keyed objects or positional value arrays. In writeMode "direct", append row-only payloads to worksheets declared at session creation. */
+    /** Rows represented as keyed objects or positional value arrays. In writeMode "direct", append row-only payloads to worksheets declared at session creation. In writeMode "staged", row payloads remain independently retryable until finalize. */
     "rows"?: Array<Record<string, unknown> | Array<unknown>>;
     /** Sparse cells addressed independently from table rows. Supported in writeMode "staged"; direct XLSX parts must be row-only. */
     "cells"?: Array<SwaggerStorageCellInputDto>;
@@ -515,9 +692,43 @@ interface SwaggerStorageSheetTableDto {
     "header"?: boolean;
     /** Add an auto-filter to the table header. */
     "autoFilter"?: boolean;
-    /** Stable column order. Required for every worksheet in writeMode "direct"; optional in "staged" mode, where keys may be inferred from appended rows. */
+    /** Stable XLSX/CSV/TSV column order, keys, headers, and logical types. Required for every logical sheet in writeMode "direct"; optional in "staged" mode, where keys may be inferred from appended rows. */
     "columns"?: Array<SwaggerStorageSheetColumnDto>;
 }
+interface SwaggerStorageTabularSchemaPolicyDto {
+    /** How missing sheets or columns and invalid declared values are handled. fallback retains imperfect data with diagnostics; strict fails structured indexing. Defaults to fallback. */
+    "profile"?: "fallback" | "strict";
+    /** How undeclared source columns are handled. allow retains them, strip omits them from structured rows, and reject fails indexing. Defaults to allow for fallback and reject for strict. Already committed files retain their raw bytes; synchronous validation failures before publication do not create a readable entry. */
+    "additionalProperties"?: "allow" | "strip" | "reject";
+}
+interface SwaggerUpdateServiceAccountAccessDto {
+    /** Restrict management access to explicitly assigned users and groups. */
+    "restricted"?: boolean;
+    /** User UUID/email references or {id}/{mail}. No implicit creator/self access after creation. */
+    "users"?: Array<string | {
+        "id": string;
+    } | {
+        "mail": string;
+    }>;
+    /** Exact group name/UUID references or {id}/{name}. */
+    "groups"?: Array<string | {
+        "id": string;
+    } | {
+        "name": string;
+    }>;
+}
+interface SwaggerUserKeyWhitelistDto {
+    /** You need to provide name of the user. */
+    "name": string;
+    /** You need to provide type of whitelist IP,IP_SUBNET,RANGE. */
+    "type": string;
+    /** Provide a single address, a CIDR network or an address range. */
+    "value": string;
+}
+interface SwaggerWebhookMapPatchDto {
+    "set"?: Record<string, string>;
+    "remove"?: Array<string>;
+}
 interface SwaggerWebhookRequestDetailsDto {
     "url": string;
     "method": "POST" | "GET" | "HEAD" | "PUT" | "DELETE" | "PATCH" | "OPTIONS";
@@ -526,37 +737,83 @@ interface SwaggerWebhookRequestDetailsDto {
     /** Headers. */
     "headers"?: Record<string, unknown>;
 }
+interface SwaggerWebhookRequestPatchDto {
+    "url"?: string;
+    "method"?: "POST" | "GET" | "HEAD" | "PUT" | "DELETE" | "PATCH" | "OPTIONS";
+    "headers"?: SwaggerWebhookMapPatchDto;
+    "query"?: SwaggerWebhookMapPatchDto;
+    /** Additional request paths to mask in the new attempt. Existing masks are always preserved. */
+    "maskDetails"?: Array<string>;
+    /** Explicit replacement of the whole body. Omitted body reuses the saved body. */
+    "body"?: Record<string, unknown> | Array<unknown>;
+}
+interface SwaggerAgentRunResultDto {
+    /** Complete validated terminal answer, independent of the bounded human-readable summary. */
+    "output"?: SwaggerAssistantOutputDto;
+    /** Bounded human-readable terminal summary. Use output.text or output.json for the complete answer. */
+    "summary"?: string;
+}
+interface AssistantThreadQuery {
+    /** Number of rows to skip before pagination starts. Parsed from a query-string integer. */
+    "skip"?: number;
+    /** Maximum number of rows to return. Parsed from a query-string integer. Most list endpoints default to 100 when omitted. */
+    "take"?: number;
+    /** Include the total count in the response envelope only when explicitly true. Omitted or false skips the count query. */
+    "count"?: boolean;
+    /** Filter tree as a JSON string or bracket-style query object. Supports and/or/not groups and field predicates with ops such as eq, ne, gt, gte, lt, lte, like, notLike, ilike, notILike, in, notIn, any, isNull, isNotNull, between, contains, containedBy, arrayHas, arrayHasAny, arrayHasAll, arrayContainedBy, jsonArrayHas, jsonArrayHasAny, jsonArrayHasAll, startsWith, endsWith, true, and false. Field names are allowed logical fields; relation fields use dot paths such as groups.groupId when exposed by the endpoint. */
+    "filter"?: string;
+    /** Sort definition as a JSON string, indexed array query object, array, or legacy CSV. JSON object values should be ASC or DESC. CSV supports descending fields with a leading dash, for example name,-lastUpdateAt. */
+    "sort"?: string;
+    /** Optional DISTINCT ON logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Selected distinct fields are included in the projection. */
+    "distinct"?: string;
+    /** Optional field projection as a JSON array string, indexed array query object, array, or legacy CSV. String fields must be allowlisted logical fields. Advanced select items may use field, fn, raw, cast, coalesce, or case expressions when the endpoint enables dynamic projection. */
+    "fields"?: string;
+    /** Optional join definitions as a JSON string or bracket-style query object. This is only honored by endpoints that explicitly enable dynamic joins, such as dynamic database data reads. Each join has table, alias, type (left or inner), and an on condition. */
+    "joins"?: string;
+    /** Optional groupBy logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Only honored when the endpoint enables dynamic grouping or already has grouped defaults. */
+    "groupBy"?: string;
+    /** Optional cast mapping as a JSON string or bracket-style query object. Keys are selected aliases or logical fields; values are database definition types such as TEXT, INTEGER, BIGINT, NUMERIC, BOOLEAN, DATE, TIMESTAMP, TIMESTAMPTZ, JSON, JSONB, or UUID where supported. */
+    "cast"?: string;
+    /** Optional CTE definitions as a JSON string or bracket-style query object. Only honored by endpoints that explicitly enable dynamic CTEs. */
+    "with"?: string;
+    /** Return only the complete estimated read plan without fetching records. count:true adds the count plan. Unsupported data sources reject diagnostic requests without executing the read. */
+    "debug"?: boolean;
+    /** Include technical response threads alongside conversations. Independent of deleted visibility. */
+    "includeResponses"?: boolean;
+    /** Include deleted owned threads. Independent of technical response visibility. */
+    "includeDeleted"?: boolean;
+}
 interface AgentRunCancelInput {
     /** Optional cancellation reason for audit traces. */
     "reason"?: string;
 }
 interface DatabaseCloneInput {
     /** Replacement user metadata for the root clone only. Omit to inherit source metadata; pass {} to clear user metadata. Maximum 16 KiB and 64 top-level keys. Keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Optional audit override. Defaults to the source logical table setting. */
-    "audit"?: boolean;
+    "audit"?: boolean | null;
     /** Optional target root database name. Defaults to the source database name with "_Clone" suffix. */
-    "name"?: string;
+    "name"?: string | null;
     /** Suffix used for automatically generated clone names. Defaults to "Clone". */
-    "suffix"?: string;
+    "suffix"?: string | null;
     /** Whether to copy existing rows/items into the clone. Defaults to false. */
-    "includeItems"?: boolean;
+    "includeItems"?: boolean | null;
     /** Alias for includeItems. Defaults to false. */
-    "includeData"?: boolean;
+    "includeData"?: boolean | null;
     /** Whether to clone connected table partitions. Defaults to true. */
-    "includePartitions"?: boolean;
+    "includePartitions"?: boolean | null;
     /** Optional cloned database category override. */
-    "category"?: string;
+    "category"?: string | null;
     /** Optional cloned database description override. */
-    "desc"?: string;
+    "desc"?: string | null;
     /** Optional cloned database tags override. */
-    "tags"?: Array<string>;
+    "tags"?: Array<string> | null;
     /** Optional cloned database restricted flag override. */
-    "restricted"?: boolean;
+    "restricted"?: boolean | null;
     /** Optional cloned database group access override. */
-    "groups"?: Array<string>;
+    "groups"?: Array<string> | null;
     /** Optional cloned database user access override. */
-    "users"?: Array<string>;
+    "users"?: Array<string> | null;
 }
 interface AgentCreateInput {
     /** Stable display name of the agent. */
@@ -570,7 +827,7 @@ interface AgentCreateInput {
     /** Owner type, typically USER or GROUP. */
     "ownerType"?: string;
     /** Optional resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Persisted agent identity and runtime defaults such as model, persona, custom system instructions, memory policy, planning mode, and loop limits. Per-turn prompt tier, fast-path eligibility, and route telemetry are derived by runtime and are not accepted here. */
     "config"?: SwaggerAgentConfigDto;
     /** Persisted policy constraints such as tool allowlists, agent plugins, and delegation ceilings. Runtime-only route metadata is not configured here. */
@@ -600,9 +857,9 @@ interface DatabaseCreateInput {
     /** Description. */
     "desc"?: string;
     /** Optional resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Provide if access should be restricted. */
-    "restricted": boolean;
+    "restricted"?: boolean;
     /** Provide which groups should have access to it, once restricted is true. */
     "groups"?: Array<string>;
     /** Provide which users should have access to it, once restricted is true. */
@@ -615,18 +872,52 @@ interface DatabaseCreateInput {
     "parentDatabaseId"?: string;
     /** Partition configuration. */
     "partition"?: SwaggerPartitionDefinition;
+    /** Advanced structured table options, including composite, expression, covering, and partial indexes. */
+    "options"?: SwaggerDatabaseOptionsDto;
+}
+interface ServiceAccountKeyCreateInput {
+    /** You need to provide name of the user. */
+    "name": string;
+    /** Optional resource metadata. Top-level keys starting with "__" are reserved for backend use. */
+    "metadata"?: Record<string, unknown> | null;
+    /** You can provide if key should be whitelisted. */
+    "restricted": boolean;
+    /** Use an empty array or null when restricted is false; provide at least one complete entry when restricted is true. */
+    "whitelist"?: Array<SwaggerUserKeyWhitelistDto> | null;
+    /** Optional API key expiration timestamp. When provided, it must be at least four hours in the future. */
+    "expireAt"?: string;
 }
 interface AssistantMessageInput {
+    /** Instructions persisted on this thread across follow-up messages, Resume, same-owner forks and compaction. Maximum 16 KiB UTF-8 and 16 KiB after safe instruction rendering. Supplements mandatory runtime and instance-global instructions; never grants tool permissions. Immutable after creation. */
+    "instructions"?: string;
+    /** Persisted context profile. platform preserves the normal Revo Assistant. minimal keeps instance-global and account standing instructions and safety, omits automatic memory and plugin discovery/preload, and admits only explicitly selected tools/plugins. Defaults to platform. Immutable after creation. */
+    "contextMode"?: "platform" | "minimal";
+    /** Persisted final-answer format, also enforced on browser follow-ups and Resume. Defaults to text. Immutable after creation. */
+    "responseFormat"?: SwaggerAssistantResponseFormatDto;
+    /** Per-turn approval policy. default requires approval for side-effecting tool calls, auto_review uses conditional safe auto-review, and full skips normal approval gates. */
+    "permissions"?: "default" | "auto_review" | "full";
+    /** Optional per-tool approval policy overrides. Runtime sanitizes keys and enum values before persisting them. */
+    "toolPermissions"?: Record<string, "default" | "auto_review" | "full">;
+    /** Optional allowlist of operational tool names for this turn. Omit to allow the gateway default surface; pass an empty array to admit no tools for direct-answer turns. */
+    "toolNames"?: Array<"ref_search" | "ref_describe" | "ref_apply" | "snapshot_get" | "snapshot_history" | "snapshot_diff" | "storage" | "skill_search" | "skill_load" | "memory_search" | "memory_load" | "memory_save" | "plan_update" | "code_search" | "code_read" | "code_exec" | "ops_investigate" | "platform_api_find_operation" | "dependency_graph" | "web_search" | "web_load" | "web_rich_lookup" | "wait" | "conversation_search" | "conversation_load" | "attachment_load" | "send_message" | "agent_handoff" | "agent_delegate" | "plugin_search" | "plugin_load" | "plugin_call" | "request_clarification" | "code_describe" | "generate_widget" | "terminal_exec" | "terminal" | "studio" | "tool_exec" | "tool_wait" | "tool_status" | "tool_cancel">;
+    /** Optional registry plugin ids attached to this assistant turn. */
+    "pluginIds"?: Array<string>;
+    /** Optional Studio session to work on in this conversation. Requires an enabled Studio feature and live editing membership. The binding persists across follow-up turns and does not share private conversation history. */
+    "studioSessionId"?: string;
+    /** Finalized Storage files to link to this message. File access is checked on send and every read. */
+    "storageEntryIds"?: Array<string>;
     /** Content of the message, validated up to 100000 tokens. */
     "content": string;
     /** Optional hidden draft user message id created before attachment uploads. When provided, the send operation finalizes that draft instead of creating a new user message. */
     "preflightMessageId"?: string;
-    /** Optional assistant execution-model override. GPT-5.6 Luna is the default; GPT-5.6 Sol, Terra, and Luna are supported. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
-    /** Optional assistant reasoning effort override: low, medium, high, or xhigh. Defaults to low. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    /** Optional assistant execution-model override. GPT-6 Luna is the default; GPT-6.1 Sol, GPT-6.1 Terra and GPT-6 Luna are supported. */
+    "model"?: "gpt-6.1-sol" | "gpt-6.1-terra" | "gpt-6-luna";
+    /** Optional GPT-6 Luna Fast mode. Defaults to false and remains opt-in per thread. */
+    "fastMode"?: boolean;
+    /** Optional assistant reasoning effort override: none, low, medium, high, or xhigh. Defaults to medium. */
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Alias for reasoningEffort used by assistant preferences. Prefer reasoningEffort for new clients. */
-    "reasoning"?: "low" | "medium" | "high" | "xhigh";
+    "reasoning"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Optional flag selecting deadline-bounded background provider recovery. On SSE routes it also allows the turn to continue after client disconnect. Defaults to false. */
     "backgroundProcessing"?: boolean;
     /** Optional flag for send-message endpoints. When true, an active streamed assistant turn for the thread is interrupted before appending this message. */
@@ -639,26 +930,28 @@ interface AssistantMessageInput {
     "executionMode"?: "interactive" | "execute" | "background" | "automation";
     /** Planning policy for the turn. standard lets the assistant use internal planning and optionally expose progress; review_required always creates a user-reviewed plan before execution. */
     "planningPolicy"?: "standard" | "review_required";
-    /** Per-turn approval policy. default requires approval for side-effecting tool calls, auto_review uses conditional safe auto-review, and full skips normal approval gates. */
-    "permissions"?: "default" | "auto_review" | "full";
-    /** Optional per-tool approval policy overrides. Runtime sanitizes keys and enum values before persisting them. */
-    "toolPermissions"?: Record<string, "default" | "auto_review" | "full">;
-    /** Optional allowlist of operational tool names for this turn. Omit to allow the gateway default surface; pass an empty array to admit no tools for direct-answer turns. */
-    "toolNames"?: Array<string>;
-    /** Optional registry plugin ids attached to this assistant turn. */
-    "pluginIds"?: Array<string>;
     /** Optional per-turn backend performance debugger. When true, payload build timing traces are persisted into assistant report artifacts, and local/test runtimes may persist hidden model-call snapshots for this turn. */
     "performanceDebugger"?: boolean;
 }
+interface ServiceAccountCreateInput {
+    "access"?: SwaggerServiceAccountAccessDto;
+    "memberships"?: SwaggerServiceAccountMembershipsDto;
+    /** You need to provide name of the user. */
+    "name": string;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadata"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadataAdvanced"?: Record<string, unknown> | null;
+}
 interface StorageFolderInput {
     /** Folder name. */
     "name": string;
     /** Parent folder id. Omit for root. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level folders. Omit for the internal/default provider. Ignored when parentStorageEntryId is provided. */
+    /** Optional registered Storage destination for root-level folders. Omit to use the default destination. Ignored when parentStorageEntryId is provided. */
     "storageProviderConfigId"?: string;
     /** Folder metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Optional external reference id. */
     "refId"?: string;
     /** Optional external reference type. */
@@ -677,7 +970,7 @@ interface StorageUploadSessionInput {
     "retention"?: SwaggerStorageRetentionDto | null;
     /** Parent folder id. Required for create mode when uploading into a folder. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level uploads. Omit for the internal/default provider. Ignored when parentStorageEntryId is provided or when replacing an existing file. */
+    /** Optional registered Storage destination for a root-level upload. Omit to use the default destination. Ignored when parentStorageEntryId is provided or when replacing an existing file. */
     "storageProviderConfigId"?: string;
     /** Existing storage entry id to replace instead of creating a new file. */
     "replaceStorageEntryId"?: string;
@@ -695,18 +988,22 @@ interface StorageUploadSessionInput {
   COLD: Compliance snapshots, historic imports, and retained evidence that is rarely opened.
   FROZEN: Deep archive or legal-hold data kept mainly for audit or recovery obligations. */
     "tier"?: "HOT" | "WARM" | "COLD" | "FROZEN";
-    /** Upload mode. Use "direct" for provider resumable uploads, "chunked" for explicit numbered parts, and "incremental" for server-assigned part numbering by default. Incremental sessions can still re-upload a specific part number when repairing an upload. */
+    /** Byte-transfer mode. Use "direct" when the client sends the complete file to the returned temporary upload target, "chunked" for explicit numbered parts, and "incremental" for server-assigned part numbering by default. Incremental sessions can still re-upload a specific part number when repairing an upload. */
     "uploadMode"?: "direct" | "chunked" | "incremental";
     /** Post-finalize compute mode for this upload session. Defaults to sync for XLSX and text/* sessions and none for other binary sessions; an explicit value always overrides the default. */
     "computeStats"?: "none" | "sync" | "async";
-    /** Structured file materialization mode. Use "direct" for a predeclared CSV/XLSX layout and one-pass finalization. For direct XLSX, declare every worksheet and its table.columns before the first append, and send row-only parts. The default "staged" mode preserves inferred columns, sparse cells, formulas, dynamic worksheets, and existing integration behavior. */
+    /** Independent validation and undeclared-column policies for an uploaded XLSX, CSV, or TSV. Defaults to fallback validation with additional columns allowed; strict validation defaults to rejecting additional columns. The raw file is preserved. */
+    "schemaPolicy"?: SwaggerStorageTabularSchemaPolicyDto;
+    /** Structured file write mode. Use "direct" for a predeclared CSV/XLSX layout with row-only XLSX parts. Use the default "staged" mode for independent requests that may be retried, replaced, reordered, or use inferred columns, sparse cells, formulas, or dynamic worksheets. For direct XLSX, declare every worksheet and its table.columns before the first append. */
     "writeMode"?: "staged" | "direct";
-    /** CSV dialect used when row payloads are appended to a text/csv session. */
+    /** CSV/TSV dialect used when row payloads are appended or direct uploaded bytes are indexed. */
     "csv"?: SwaggerStorageCsvOptionsDto;
-    /** Workbook worksheet layout. XLSX is inferred from contentTypeHint. In writeMode "direct", declare every worksheet here and configure table.columns for each one. */
+    /** Shared tabular layout. XLSX accepts multiple worksheets; CSV/TSV accepts one logical sheet used for column keys, types, and schema diagnostics. In writeMode "direct", configure table.columns for every declared sheet. */
     "sheets"?: Array<SwaggerStorageSheetOptionsDto>;
     /** File metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
+    /** Suppress Storage lifecycle events for the finalized file. Omit to preserve the existing setting on replacement; false explicitly enables events. */
+    "ignoreEvent"?: boolean;
     /** Optional external reference id. */
     "refId"?: string;
     /** Optional external reference type. */
@@ -720,9 +1017,90 @@ interface StorageUploadSessionInput {
     /** Explicit allowed user ids for the finalized entry. */
     "users"?: Array<string>;
 }
+interface AssistantResponseInput {
+    /** Instructions persisted on this thread across follow-up messages, Resume, same-owner forks and compaction. Maximum 16 KiB UTF-8 and 16 KiB after safe instruction rendering. Supplements mandatory runtime and instance-global instructions; never grants tool permissions. Immutable after creation. */
+    "instructions"?: string;
+    /** Persisted context profile. platform preserves the normal Revo Assistant. minimal keeps instance-global and account standing instructions and safety, omits automatic memory and plugin discovery/preload, and admits only explicitly selected tools/plugins. Defaults to platform. Immutable after creation. */
+    "contextMode"?: "platform" | "minimal";
+    /** Persisted final-answer format, also enforced on browser follow-ups and Resume. Defaults to text. Immutable after creation. */
+    "responseFormat"?: SwaggerAssistantResponseFormatDto;
+    /** Per-turn approval policy. default requires approval for side-effecting tool calls, auto_review uses conditional safe auto-review, and full skips normal approval gates. */
+    "permissions"?: "default" | "auto_review" | "full";
+    /** Optional per-tool approval policy overrides. Runtime sanitizes keys and enum values before persisting them. */
+    "toolPermissions"?: Record<string, "default" | "auto_review" | "full">;
+    /** Optional allowlist of operational tool names for this turn. Omit to allow the gateway default surface; pass an empty array to admit no tools for direct-answer turns. */
+    "toolNames"?: Array<"ref_search" | "ref_describe" | "ref_apply" | "snapshot_get" | "snapshot_history" | "snapshot_diff" | "storage" | "skill_search" | "skill_load" | "memory_search" | "memory_load" | "memory_save" | "plan_update" | "code_search" | "code_read" | "code_exec" | "ops_investigate" | "platform_api_find_operation" | "dependency_graph" | "web_search" | "web_load" | "web_rich_lookup" | "wait" | "conversation_search" | "conversation_load" | "attachment_load" | "send_message" | "agent_handoff" | "agent_delegate" | "plugin_search" | "plugin_load" | "plugin_call" | "request_clarification" | "code_describe" | "generate_widget" | "terminal_exec" | "terminal" | "studio" | "tool_exec" | "tool_wait" | "tool_status" | "tool_cancel">;
+    /** Optional registry plugin ids attached to this assistant turn. */
+    "pluginIds"?: Array<string>;
+    /** Optional Studio session to work on in this conversation. Requires an enabled Studio feature and live editing membership. The binding persists across follow-up turns and does not share private conversation history. */
+    "studioSessionId"?: string;
+    /** Finalized Storage files to link to this message. File access is checked on send and every read. */
+    "storageEntryIds"?: Array<string>;
+    /** Content of the message, validated up to 100000 tokens. */
+    "content": string;
+    /** Optional hidden draft user message id created before attachment uploads. When provided, the send operation finalizes that draft instead of creating a new user message. */
+    "preflightMessageId"?: string;
+    /** Optional assistant execution-model override. GPT-6 Luna is the default; GPT-6.1 Sol, GPT-6.1 Terra and GPT-6 Luna are supported. */
+    "model"?: "gpt-6.1-sol" | "gpt-6.1-terra" | "gpt-6-luna";
+    /** Optional GPT-6 Luna Fast mode. Defaults to false and remains opt-in per thread. */
+    "fastMode"?: boolean;
+    /** Optional assistant reasoning effort override: none, low, medium, high, or xhigh. Defaults to medium. */
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
+    /** Alias for reasoningEffort used by assistant preferences. Prefer reasoningEffort for new clients. */
+    "reasoning"?: "none" | "low" | "medium" | "high" | "xhigh";
+    /** Optional flag selecting deadline-bounded background provider recovery. On SSE routes it also allows the turn to continue after client disconnect. Defaults to false. */
+    "backgroundProcessing"?: boolean;
+    /** Optional flag for send-message endpoints. When true, an active streamed assistant turn for the thread is interrupted before appending this message. */
+    "interruptActive"?: boolean;
+    /** Internal steer flag set by steer endpoints. When true, the visible user message is preserved while the executor receives a wrapper telling it to apply the message as a correction or refinement to the interrupted task. */
+    "steeringMode"?: boolean;
+    /** Optional durable turn goal for non-plan execution. Agent runtime carries this goal across tool loops, compaction, and follow-up turns without forcing visible plan review. */
+    "goal"?: string;
+    /** Execution mode for the turn. Interactive may pause for approval or clarification. Background and automation should avoid user-blocking pauses. */
+    "executionMode"?: "interactive" | "execute" | "background" | "automation";
+    /** Planning policy for the turn. standard lets the assistant use internal planning and optionally expose progress; review_required always creates a user-reviewed plan before execution. */
+    "planningPolicy"?: "standard" | "review_required";
+    /** Optional per-turn backend performance debugger. When true, payload build timing traces are persisted into assistant report artifacts, and local/test runtimes may persist hidden model-call snapshots for this turn. */
+    "performanceDebugger"?: boolean;
+    /** Optional assistant runtime selector. v2 routes the request through agent-gateway. v1 is expired and rejected. */
+    "version"?: "v1" | "v2";
+    /** Structured UI context for lightweight, threadless assistant responses. */
+    "context"?: SwaggerAssistantThreadlessResponseContextDto;
+    /** Create an ordinary visible conversation when true. Otherwise retain a technical response thread excluded from default list/search results; includeResponses opts into reading it. Neither mode automatically deletes the thread or its evidence. Defaults to false. */
+    "persistThread"?: boolean;
+}
+interface DatabaseOperationInput {
+    /** Database ID/name, or view ID when viewAction is provided. */
+    "databaseName": string;
+    "action": "UPDATE" | "DELETE" | "TRUNCATE";
+    /** Filtered selection. Returning rows is not supported in background operations. */
+    "request"?: SwaggerDeleteDatabaseRequestDto;
+    "data"?: Record<string, unknown> | Array<{
+        "column": string;
+        "op": "set" | "setNull" | "add" | "subtract" | "multiply" | "divide" | "abs" | "floor" | "ceil" | "sqrt" | "round" | "pow" | "toggle" | "addInterval" | "subtractInterval" | "truncate" | "prepend" | "append" | "insert" | "replace" | "trim" | "lower" | "upper" | "mergeJson" | "setJsonPath" | "removeJsonPath" | "addItems" | "removeItems";
+        "value"?: unknown | null;
+        "position"?: number;
+        "search"?: string;
+        "path"?: Array<string>;
+        "create"?: boolean;
+        "unit"?: string;
+        "nulls"?: "preserve" | "empty";
+    }>;
+    /** Reviewed view mutation. The preview token is validated at admission. */
+    "viewAction"?: SwaggerDatabaseViewActionExecuteDto;
+    "restartIdentity"?: boolean;
+    /** Suppress the terminal System message. Low-code defaults this to true. */
+    "skipNotification"?: boolean;
+    /** Actor-scoped admission key. Reusing it with a different request is rejected. */
+    "idempotencyKey"?: string;
+}
 interface StorageUploadSessionFinalizeInput {
+    /** Expected contiguous multipart count (parts 1..N). Use this to fence distributed uploads against missing parts. */
+    "expectedPartCount"?: number;
+    /** Expected explicit multipart numbers. Use for sparse distributed uploads; cannot be combined with expectedPartCount. */
+    "expectedPartNumbers"?: Array<number>;
     /** Optional metadata replacement at finalize time. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Optional post-finalize compute mode. */
     "computeStats"?: "none" | "sync" | "async";
 }
@@ -731,6 +1109,15 @@ interface AssistantForkMessageInput {
     "version"?: "v1" | "v2";
     /** Optional explicit title for the forked thread. When omitted, orchestration will generate the new thread title. */
     "title"?: string;
+    /** Bind an owned conversation fork to an OPEN Studio workspace under fresh editing access. A Studio-bound source requires a child whose parentSessionId is the original workspace. The source conversation and its private history remain unchanged. */
+    "studioSessionId"?: string;
+}
+interface JobsBulkInput {
+    /** Existing platform filter tree. Exactly one of filter and resource IDs is required. */
+    "filter"?: Record<string, unknown>;
+    /** Caller-generated key: repeated admission returns the same operation. Maximum 200 characters. */
+    "idempotencyKey"?: string;
+    "jobIds"?: Array<string>;
 }
 interface StorageEntryMoveInput {
     /** Destination parent folder id. Omit or pass null for root. */
@@ -738,14 +1125,14 @@ interface StorageEntryMoveInput {
     /** Optional destination provider config id for root-level moves. Omit for the internal/default provider. Ignored when parentStorageEntryId is provided. */
     "storageProviderConfigId"?: string;
     /** Current entity version. */
-    "version"?: number;
+    "version": number;
 }
 interface StoragePutObjectInput {
     /** File retention. Omit for the caller default, or set null for no expiration. */
     "retention"?: SwaggerStorageRetentionDto | null;
     /** Parent folder id. Omit for root. */
     "parentStorageEntryId"?: string;
-    /** Optional provider config id for root-level writes. */
+    /** Optional registered Storage destination for root-level writes. Omit to use the default destination. */
     "storageProviderConfigId"?: string;
     /** Existing file entry id to replace. */
     "replaceStorageEntryId"?: string;
@@ -772,7 +1159,9 @@ interface StoragePutObjectInput {
     /** Optional external reference version. */
     "refVer"?: number;
     /** Entry metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
+    /** Suppress Storage lifecycle events for this file. Omit to preserve the existing setting on replacement; false explicitly enables events. */
+    "ignoreEvent"?: boolean;
     /** Logical storage lifecycle tier. Select only when creating a new file or upload session; existing files keep their tier.
   HOT: Active files used in live workflows, previews, and frequent downloads.
   WARM: Completed or less-active business files that are still occasionally accessed.
@@ -780,7 +1169,35 @@ interface StoragePutObjectInput {
   FROZEN: Deep archive or legal-hold data kept mainly for audit or recovery obligations. */
     "tier"?: "HOT" | "WARM" | "COLD" | "FROZEN";
 }
+interface ServiceAccountQuery {
+    /** Number of rows to skip before pagination starts. Parsed from a query-string integer. */
+    "skip"?: number;
+    /** Maximum number of rows to return. Parsed from a query-string integer. Most list endpoints default to 100 when omitted. */
+    "take"?: number;
+    /** Include the total count in the response envelope only when explicitly true. Omitted or false skips the count query. */
+    "count"?: boolean;
+    /** Filter tree as a JSON string or bracket-style query object. Supports and/or/not groups and field predicates with ops such as eq, ne, gt, gte, lt, lte, like, notLike, ilike, notILike, in, notIn, any, isNull, isNotNull, between, contains, containedBy, arrayHas, arrayHasAny, arrayHasAll, arrayContainedBy, jsonArrayHas, jsonArrayHasAny, jsonArrayHasAll, startsWith, endsWith, true, and false. Field names are allowed logical fields; relation fields use dot paths such as groups.groupId when exposed by the endpoint. */
+    "filter"?: string;
+    /** Sort definition as a JSON string, indexed array query object, array, or legacy CSV. JSON object values should be ASC or DESC. CSV supports descending fields with a leading dash, for example name,-lastUpdateAt. */
+    "sort"?: string;
+    /** Optional DISTINCT ON logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Selected distinct fields are included in the projection. */
+    "distinct"?: string;
+    /** Optional field projection as a JSON array string, indexed array query object, array, or legacy CSV. String fields must be allowlisted logical fields. Advanced select items may use field, fn, raw, cast, coalesce, or case expressions when the endpoint enables dynamic projection. */
+    "fields"?: string;
+    /** Optional join definitions as a JSON string or bracket-style query object. This is only honored by endpoints that explicitly enable dynamic joins, such as dynamic database data reads. Each join has table, alias, type (left or inner), and an on condition. */
+    "joins"?: string;
+    /** Optional groupBy logical fields as a JSON array string, indexed array query object, array, or legacy CSV. Only honored when the endpoint enables dynamic grouping or already has grouped defaults. */
+    "groupBy"?: string;
+    /** Optional cast mapping as a JSON string or bracket-style query object. Keys are selected aliases or logical fields; values are database definition types such as TEXT, INTEGER, BIGINT, NUMERIC, BOOLEAN, DATE, TIMESTAMP, TIMESTAMPTZ, JSON, JSONB, or UUID where supported. */
+    "cast"?: string;
+    /** Optional CTE definitions as a JSON string or bracket-style query object. Only honored by endpoints that explicitly enable dynamic CTEs. */
+    "with"?: string;
+    /** Return only the complete estimated read plan without fetching records. count:true adds the count plan. Unsupported data sources reject diagnostic requests without executing the read. */
+    "debug"?: boolean;
+}
 interface AssistantActionResolutionInput {
+    /** Finalized Storage files linked to this action response. */
+    "storageEntryIds"?: Array<string>;
     /** Optimistic action version used as the idempotency key together with the action id. */
     "actionVersion"?: number;
     /** Resolution decision for the pending action. */
@@ -794,17 +1211,19 @@ interface AssistantActionResolutionInput {
     /** Optional flag selecting deadline-bounded background provider recovery. On the SSE route it also allows the resumed turn to continue after client disconnect. Streamed action resolution defaults this to true. */
     "backgroundProcessing"?: boolean;
     /** Optional assistant model override for the resumed turn after this action is resolved. */
-    "model"?: "gpt-5.6-sol" | "gpt-5.6-terra" | "gpt-5.6-luna";
-    /** Optional assistant reasoning effort override for the resumed turn: low, medium, high, or xhigh. */
-    "reasoningEffort"?: "low" | "medium" | "high" | "xhigh";
+    "model"?: "gpt-6.1-sol" | "gpt-6.1-terra" | "gpt-6-luna";
+    /** Optional Fast-mode override for the resumed turn. Available only on GPT-6 Luna. */
+    "fastMode"?: boolean;
+    /** Optional assistant reasoning effort override for the resumed turn: none, low, medium, high, or xhigh. */
+    "reasoningEffort"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Alias for reasoningEffort used by assistant preferences. Prefer reasoningEffort for new clients. */
-    "reasoning"?: "low" | "medium" | "high" | "xhigh";
+    "reasoning"?: "none" | "low" | "medium" | "high" | "xhigh";
     /** Execution mode override for the resumed turn after this action is resolved. */
     "executionMode"?: "interactive" | "execute" | "background" | "automation";
     /** Planning policy override for the resumed turn after this action is resolved. */
     "planningPolicy"?: "standard" | "review_required";
     /** Optional operational tool names admitted for the resumed turn. Omit to keep the current thread admission; pass an empty array to admit no tools for direct-answer continuation. */
-    "toolNames"?: Array<string>;
+    "toolNames"?: Array<"ref_search" | "ref_describe" | "ref_apply" | "snapshot_get" | "snapshot_history" | "snapshot_diff" | "storage" | "skill_search" | "skill_load" | "memory_search" | "memory_load" | "memory_save" | "plan_update" | "code_search" | "code_read" | "code_exec" | "ops_investigate" | "platform_api_find_operation" | "dependency_graph" | "web_search" | "web_load" | "web_rich_lookup" | "wait" | "conversation_search" | "conversation_load" | "attachment_load" | "send_message" | "agent_handoff" | "agent_delegate" | "plugin_search" | "plugin_load" | "plugin_call" | "request_clarification" | "code_describe" | "generate_widget" | "terminal_exec" | "terminal" | "studio" | "tool_exec" | "tool_wait" | "tool_status" | "tool_cancel">;
     /** Optional additional registry plugin ids attached to the resumed turn. */
     "pluginIds"?: Array<string>;
 }
@@ -814,9 +1233,21 @@ interface StorageRestoreInput {
     /** Required for TTL-expired entries. Use null to restore without another expiration. */
     "retention"?: SwaggerStorageRetentionDto | null;
 }
+interface ServiceAccountKeyRotateInput {
+    /** Current API key version. */
+    "version": number;
+    /** Old-key overlap in milliseconds. Zero revokes the old key immediately. Existing expiration is never extended. */
+    "gracePeriodMs"?: number;
+    /** New-key ISO expiration, at least four hours ahead. Omission inherits the current expiration; null creates a key without expiration. */
+    "expireAt"?: string | null;
+    /** Authenticator confirmation for personal accounts. */
+    "code"?: string;
+}
 interface AgentRunInput {
     /** Instruction or mission passed to the root agent run. */
     "instruction": string;
+    /** Readable Agent-workspace storage entries attached to the first conversation message. */
+    "storageEntryIds"?: Array<string>;
     /** Optional trigger type such as REQUEST, EVENT, or SCHEDULE. */
     "triggerType"?: string;
     /** Optional external reference type for correlation. */
@@ -848,7 +1279,7 @@ interface AgentUpdateInput {
     /** Updated owner type. */
     "ownerType"?: string;
     /** Replacement resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Replacement persisted agent identity and runtime defaults. Fast-path routing, prompt tier, and per-turn telemetry stay runtime-derived. */
     "config"?: SwaggerAgentConfigDto;
     /** Replacement persisted policy constraints. Execution-time route metadata stays derived from the current turn. */
@@ -880,7 +1311,9 @@ interface DatabaseUpdateInput {
     /** Description. */
     "desc"?: string;
     /** Replacement resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
+    /** Replacement advanced structured table options. */
+    "options"?: SwaggerDatabaseOptionsDto;
     /** Provide if access should be restricted. */
     "restricted"?: boolean;
     /** Provide which groups should have access to it, once restricted is true. */
@@ -892,13 +1325,39 @@ interface DatabaseUpdateInput {
     /** Provide current version. */
     "version": number;
 }
+interface ServiceAccountKeyUpdateInput {
+    /** You need to provide name of the user. */
+    "name"?: string;
+    /** Replacement resource metadata. Top-level keys starting with "__" are reserved for backend use. */
+    "metadata"?: Record<string, unknown> | null;
+    /** You can provide if key should be whitelisted. */
+    "restricted"?: boolean;
+    /** Use an empty array or null when restricted is false; provide at least one complete entry when setting restricted to true. */
+    "whitelist"?: Array<SwaggerUserKeyWhitelistDto> | null;
+    /** Current API key version used for optimistic concurrency control. */
+    "version": number;
+    /** Optional six-character confirmation code when required by the account policy. */
+    "code"?: string;
+}
+interface ServiceAccountUpdateInput {
+    "memberships"?: SwaggerServiceAccountMembershipsDto;
+    /** You need to provide name of the user. */
+    "name"?: string;
+    /** Custom service-account metadata. Top-level keys starting with "__" are reserved for backend use. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadata"?: Record<string, unknown> | null;
+    /** Extended account data with separate permissions. Same JSON format as Metadata. Maximum 16 KiB of UTF-8 JSON and 64 top-level keys. */
+    "metadataAdvanced"?: Record<string, unknown> | null;
+    "access"?: SwaggerUpdateServiceAccountAccessDto;
+    /** Current account version for optimistic concurrency. */
+    "version": number;
+}
 interface StorageEntryUpdateInput {
     /** Replacement file retention. Omit to preserve, or set null to clear expiration. */
     "retention"?: SwaggerStorageRetentionDto | null;
     /** New display name. */
     "name"?: string;
     /** Metadata replacement. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
+    "metadata"?: Record<string, unknown> | null;
     /** Whether this entry is restricted to the provided users/groups. */
     "restricted"?: boolean;
     /** Explicit allowed group ids. */
@@ -906,21 +1365,7 @@ interface StorageEntryUpdateInput {
     /** Explicit allowed user ids. */
     "users"?: Array<string>;
     /** Current entity version. */
-    "version"?: number;
-}
-interface AssistantThreadGoalInput {
-    /** Durable thread-level objective used to validate assistant completion across turns, tool loops, approval resumes, and compaction. */
-    "objective": string;
-    /** Optional concrete criteria the goal reviewer should require before marking the goal satisfied. */
-    "successCriteria"?: Array<string>;
-    /** Optional exclusions that should not be treated as required work for this goal. */
-    "nonGoals"?: Array<string>;
-    /** Optional evidence the reviewer should expect, such as tests, lint, screenshots, API results, or changed resources. */
-    "requiredEvidence"?: Array<string>;
-    /** Optional validation commands or checks relevant to this goal. */
-    "validationCommands"?: Array<string>;
-    /** Optional concise definition of done used by the reviewer when evaluating candidate completion. */
-    "doneDefinition"?: string;
+    "version": number;
 }
 interface AssistantThreadTitleInput {
     /** New user-defined title for the thread. */
@@ -931,9 +1376,9 @@ interface StorageUploadPartInput {
     "data"?: string | Array<string>;
     /** Payload encoding. */
     "dataEncoding"?: "utf8" | "base64";
-    /** Rows represented as keyed objects or positional value arrays for a single-sheet CSV or XLSX session. The target sheet is inferred. */
+    /** Rows represented as keyed objects or positional value arrays for a single-sheet CSV or XLSX session. The target sheet is inferred. Direct XLSX sessions require the declared row schema; staged sessions support retryable independent requests. */
     "rows"?: Array<Record<string, unknown> | Array<unknown>>;
-    /** Rows and optional sparse cells for one or more declared XLSX worksheets. In writeMode "direct", each worksheet must have configured table.columns and every part must be row-only. */
+    /** Rows and optional sparse cells for one or more declared XLSX worksheets. In writeMode "direct", each worksheet must have configured table.columns and every part must be row-only; staged mode supports sparse cells and replacement or out-of-order parts. */
     "sheets"?: Array<SwaggerStorageSheetDataPartDto>;
 }
 interface WebhookInput {
@@ -945,8 +1390,10 @@ interface WebhookInput {
     "proxy"?: boolean;
     /** Save entire request. */
     "saveDetails"?: boolean;
-    /** Max attempts. */
-    "maxAttempts"?: number;
+    /** Stop delivery on a supported attempt status. Processing of delivery logs is asynchronous. */
+    "stopOnStatuses"?: Array<"UNAUTHENTICATED">;
+    /** Additional retries after the first request: -1 unlimited, 0 no retry, N up to N retries. */
+    "maxRetries"?: number;
     /** Provide data */
     "request"?: SwaggerWebhookRequestDetailsDto;
     /** Mask request details. */
@@ -954,13 +1401,44 @@ interface WebhookInput {
     /** Override creator. */
     "createdBy"?: string;
     /** Optional key/value metadata for grouping and querying webhooks. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use. */
-    "metadata"?: Record<string, unknown>;
-}
-/**
- * Canonical public low-code API declarations shared by Monaco and local editors.
- * Lifecycle input DTOs are generated from Swagger in api.swagger-contracts.generated.d.ts.
- * Edit this file for model guidance, then regenerate api.monaco.ts.
+    "metadata"?: Record<string, unknown> | null;
+}
+interface WebhooksBulkInput {
+    /** Existing platform filter tree. Exactly one of filter and resource IDs is required. */
+    "filter"?: Record<string, unknown>;
+    /** Caller-generated key: repeated admission returns the same operation. Maximum 200 characters. */
+    "idempotencyKey"?: string;
+    "webhookIds"?: Array<string>;
+    /** Only allowed for retry. Missing masked values must be supplied explicitly. */
+    "requestPatch"?: SwaggerWebhookRequestPatchDto;
+}
+interface AutomationOperation {
+    operationId: string;
+    resource: 'jobs' | 'webhooks';
+    action: 'cancel' | 'retry' | 'delete';
+    status: 'PENDING' | 'PROCESSING' | 'FINISHED' | 'ERROR';
+    total: number;
+    processed: number;
+    skipped: number;
+    failed: number;
+}
+/** Ordered, literal-safe updates. Repeated columns run top to bottom (maximum 100 operations).
+ * NULL is preserved unless nulls: 'empty' is selected for text/array/JSON transforms.
+ * insert.position is 1-based Unicode character position. replace replaces all exact matches.
+ * JSON paths use string arrays; setJsonPath creates the final property only, not missing parents.
  */
+interface DatabaseUpdateOperation {
+    column: string;
+    op: 'set' | 'setNull' | 'add' | 'subtract' | 'multiply' | 'divide' | 'abs' | 'floor' | 'ceil' | 'sqrt' | 'round' | 'pow' | 'toggle' | 'addInterval' | 'subtractInterval' | 'truncate' | 'prepend' | 'append' | 'insert' | 'replace' | 'trim' | 'lower' | 'upper' | 'mergeJson' | 'setJsonPath' | 'removeJsonPath' | 'addItems' | 'removeItems';
+    value?: unknown;
+    position?: number;
+    search?: string;
+    path?: string[];
+    create?: boolean;
+    unit?: string;
+    nulls?: 'preserve' | 'empty';
+}
+type DatabaseUpdateData = Record<string, any> | DatabaseUpdateOperation[];
 /**
  * Supported database column types used by schema metadata and casts.
  */
@@ -978,11 +1456,33 @@ type ExecutionTargetType = 'JOB_TEMPLATE' | 'AGENT' | (string & {});
 /**
  * Supported payload validator types for util.validate().
  */
-type ValidatorType = 'string' | 'number' | 'boolean' | 'object' | 'array' | 'date' | 'any';
+type ValidatorType = 'string' | 'number' | 'integer' | 'boolean' | 'object' | 'array' | 'date' | 'any';
 interface ValidatorProperty {
     type: ValidatorType;
     required?: boolean;
+    nullable?: boolean;
+    empty?: 'allow' | 'reject';
+    integer?: boolean;
+    finite?: boolean;
+    safeInteger?: boolean;
+    exclusiveMin?: number;
+    exclusiveMax?: number;
+    /** Exact allowed values; prefer this to regex alternatives for a finite set. */
+    enum?: any[];
+    /** One exact allowed value; prefer this to a literal-matching regex. */
+    const?: any;
+    additionalProperties?: 'allow' | 'strip' | 'reject';
+    format?: 'date' | 'time' | 'date-time';
+    timezone?: boolean;
+    /**
+     * String pattern for constraints not expressible with enum, const, type, length or format rules.
+     * Prefer those explicit rules when equivalent. Even one simple regex can roughly double
+     * Endpoint guard preparation time or more for small requests; actual cost varies.
+     * Preserve the accepted-value contract when replacing a pattern; bound string length with max.
+     */
     regex?: string;
+    /** JavaScript regular expression flags, for example i or u. */
+    regexFlags?: string;
     min?: number;
     max?: number;
     objectSchema?: ValidatorObject[];
@@ -993,6 +1493,9 @@ interface ValidatorObject {
     schema: ValidatorProperty;
 }
 interface ValidatorSchemaInput {
+    /** Existing schemas default to legacy; use strict for new schemas. */
+    profile?: 'legacy' | 'strict';
+    additionalProperties?: 'allow' | 'strip' | 'reject';
     whitelist?: boolean;
     whitelistErrors?: boolean;
     schema: ValidatorProperty;
@@ -1000,6 +1503,12 @@ interface ValidatorSchemaInput {
 interface ValidationResult<T = any> {
     valid: boolean;
     errors: string[];
+    issues: Array<{
+        code: string;
+        path: string;
+        message: string;
+        params?: Record<string, any>;
+    }>;
     value: T;
 }
 /**
@@ -1165,7 +1674,8 @@ interface SelectJoinOn {
 }
 /**
  * Join definition.
- * If alias is omitted, the backend defaults it to the join table name.
+ * `table` is the logical name of a database, view, or materialized view.
+ * If alias is omitted, the backend defaults it to that logical relation name.
  */
 interface SelectJoin {
     alias?: string;
@@ -1175,22 +1685,24 @@ interface SelectJoin {
 }
 /**
  * Public structured input accepted by api.getDatabaseData(name, options).
- * The backend injects the source table schema automatically based on the name argument.
+ * The backend resolves databases, views, and materialized views by logical name
+ * and injects their physical relation and schema metadata automatically.
  */
 interface SelectInput {
+    /** Preview the complete estimated read/count plans without fetching records. */
+    debug?: boolean;
     /**
      * Selected output columns and computed fields.
      * If omitted, the ORM selects all root-table columns by default.
      */
     fields?: SelectItem[];
     /**
-     * Related tables to join.
-     * The backend resolves join definitions automatically.
+     * Related databases, views, or materialized views to join.
+     * The backend resolves each logical relation and its definition automatically.
      */
     joins?: SelectJoin[];
     /**
      * Recursive filter tree.
-     * Example:
      * { and: [{ field: 'status', op: 'eq', value: 'active' }] }
      */
     filter?: SelectFilterNode;
@@ -1208,7 +1720,9 @@ interface SelectInput {
      */
     cast?: Record<string, DatabaseDefinitionType>;
     /**
-     * Maximum number of rows to return.
+     * getDatabaseData accepts a number (at most 100,000) or explicit null.
+     * Omitting take uses 2,000 and logs one warning per execution.
+     * Use walkDatabaseData for processing without a finite page.
      * The backend fetches one extra row internally to determine next-page availability.
      */
     take?: number;
@@ -1234,6 +1748,13 @@ interface DatabaseMutationRequest {
 /**
  * Normal data response returned by the ORM query execution layer.
  */
+/** Full estimated plans only; no data query, COUNT, SQL or bound params in the result. */
+interface DatabaseExplainResult {
+    debug: {
+        explain: string[];
+        countExplain?: string[];
+    };
+}
 interface GetDatabaseDataResponse<T = any> {
     data: T[];
     results: number;
@@ -1421,7 +1942,8 @@ interface Webhook {
     status: string;
     statusMessage: string;
     attempts: number;
-    maxAttempts: number;
+    /** Additional retries: -1 unlimited, 0 no retry. */
+    maxRetries: number;
     request: LooseObject<any>;
     response: LooseObject<any>;
     createdBy: string;
@@ -1436,7 +1958,8 @@ interface LogInterface {
 }
 interface TemplateFormData {
     key: string;
-    value?: string;
+    /** Numbers and booleans are sent as text. Read credentials explicitly with vault.get/getAccessToken. */
+    value?: string | number | boolean;
     /** Storage entry to append as this multipart part. Use this instead of value for binary content. */
     storageEntryId?: string;
     /** Storage namespace for storageEntryId. Defaults to explorer. */
@@ -1473,27 +1996,38 @@ interface HttpRequestOptionsInterface {
     /**
      * JSON handling is the default. `requestType: 'json'` and `responseType: 'json'` may be stated together
      * when an integration should expose an explicit, self-documenting JSON contract.
+     * Use `buffer` explicitly for binary data: requests accept Buffer/Uint8Array and responses return Buffer.
+     * `base64buffer` retains its string contract. Keep JSON as JSON; converting it to bytes is unnecessary.
      */
     //@default: 'json'
-    responseType?: 'json' | 'base64buffer' | 'document' | 'text' | 'storage';
+    responseType?: 'json' | 'buffer' | 'base64buffer' | 'document' | 'text' | 'storage';
     //@default: 'json'
-    requestType?: 'json' | 'base64buffer' | 'form-data' | 'text' | 'storage';
+    requestType?: 'json' | 'buffer' | 'base64buffer' | 'form-data' | 'text' | 'storage';
     //@default: false
     currentCredentials?: boolean;
 }
+interface HttpRevoResponseScope {
+    sameInstance: boolean;
+    operationId?: string;
+}
 interface HttpRequestInterface {
     url: string;
+    /** Replaces complete `{name}` path segments with URL-encoded bound values. */
+    pathParams?: Record<string, string>;
     method: 'POST' | 'PUT' | 'DELETE' | 'GET' | 'PATCH' | 'OPTIONS' | 'HEAD' | 'PURGE' | 'LINK' | 'UNLINK';
     timeout?: number;
+    /** HTTP headers; use an explicitly awaited vault.get/getAccessToken result for credentials. */
     headers?: LooseObject<string>;
     params?: TemplateParameters[];
+    /** Integration-owned payload. Credential values and provider echoes are caller-managed data. */
     data?: any;
     //@default: undefined
     formData?: TemplateFormData[];
 }
 interface TemplateParameters {
     key: string;
-    value: string | LooseObject<boolean | number | string>;
+    /** Numbers and booleans are sent as text. Legacy plain maps retain '[object Object]' conversion; serialize structured queries explicitly. */
+    value: string | number | boolean | LooseObject<boolean | number | string>;
 }
 interface ProcessLog {
     time: string;
@@ -1543,6 +2077,10 @@ interface StorageEntryView extends StorageEntry {
     breadcrumbs: StorageBreadcrumb[];
 }
 interface StorageExploreRequest {
+    /** Disable implicit parent-folder scoping; ACL and namespace checks still apply. */
+    flat?: boolean;
+    filter?: SelectFilterNode;
+    sort?: string[] | Record<string, SortDir>;
     parentStorageEntryId?: string;
     storageProviderConfigId?: string | null;
     term?: string;
@@ -1593,6 +2131,8 @@ interface StorageUploadSessionPart {
 interface StorageUploadPartResult {
     storageUploadSessionId: string;
     partNumber: number;
+    /** UPLOADED after provider acceptance; RETRY_WAIT/UPLOADING remains durably queued by the platform. */
+    status: 'UPLOADED' | 'UPLOADING' | 'RETRY_WAIT' | null;
     size: number;
     checksumMd5: string | null;
 }
@@ -1617,17 +2157,72 @@ interface StorageDownload {
     downloadUrl: string;
     preview: boolean;
 }
-interface StorageTextReadOptions {
+type StorageDocumentFormat = 'auto' | 'text' | 'json' | 'xml';
+interface StorageDocumentReadOptions {
+    /** Text line window; cannot be combined with byte ranges or JSON/XML/PDF/DOCX extraction. */
     startLine?: number | null;
     endLine?: number | null;
     maxChars?: number | null;
+    /** Parser selection. Defaults to text; auto selects JSON/XML from MIME or extension. PDF/DOCX extract text; no byte ranges for binary documents. */
+    format?: StorageDocumentFormat;
+    /** Inclusive source byte offset. Only supported for plain text, not PDF/DOCX. */
+    start?: number;
+    /** Exclusive source byte offset. Only supported for plain text, not PDF/DOCX. */
+    end?: number;
+}
+interface StorageDocument {
+    storageEntryId: string;
+    name: string;
+    mimeType: string | null;
+    size: number | null;
+    format: Exclude<StorageDocumentFormat, 'auto'>;
+    start?: number;
+    end?: number;
+    sourceBytes?: number;
+    content?: string;
+    document?: any;
+    /** Present for bounded PDF/DOCX text extraction; no visual/OCR content is inferred. */
+    extraction?: {
+        sourceFormat: 'pdf' | 'docx';
+        textOnly: true;
+        truncated: boolean;
+        totalPages: number | null;
+        processedPages: number | null;
+        mayRequireOcr: boolean;
+    };
+    /** Present for line-window reads instead of source byte offsets. */
+    startLine?: number;
+    endLine?: number;
+    returnedLineCount?: number;
+    totalLines?: number;
+    truncated?: boolean;
+}
+/** Whole-source CSV mismatch report. Repeated on pages; do not sum page reports. No raw values. */
+interface StorageCsvReadReport {
+    skippedRows: number;
+    diagnostics: Array<{
+        code: string;
+        recordNumber: number;
+        lineStart: number;
+        lineEnd: number;
+        startByte: number;
+        expectedFieldCount?: number;
+        actualFieldCount?: number;
+        message: string;
+    }>;
+    diagnosticsTruncated: boolean;
 }
 interface StorageFileReadOptions {
+    /** CSV only. Default abort. skipRow drops wrong-width source records; syntax/size errors still abort. */
+    onError?: 'abort' | 'skipRow';
+    /** Physical lines include headers and the trailing empty line. Defaults to records. */
+    mode?: 'records' | 'lines';
+    separator?: string;
     batchNumber?: number;
     buffer?: boolean;
     start?: number;
     end?: number;
-    /** Continue a structured CSV/XLSX read. Cursor restores sheet and batch position. */
+    /** Continue a structured CSV/TSV, XLSX, NDJSON/JSONL, JSON-array, or XML read. Keep the opaque cursor unchanged. */
     cursor?: string;
     /** XLSX sheet name. The first visible sheet is used when omitted. */
     sheet?: string;
@@ -1637,8 +2232,14 @@ interface StorageFileReadOptions {
     encoding?: string;
     delimiter?: string;
     recordDelimiter?: '\n' | '\r' | '\r\n';
-    quote?: string;
+    /** One quote character (default double quote), or false for literal quotes/backslashes. */
+    quote?: string | false;
+    /** Maximum bytes in one logical CSV record; positive integer, default 64 MiB. Independent of read/callback size. */
+    maxRecordBytes?: number;
+    /** Quote escape character; ignored when quote is false. */
     escape?: string;
+    /** XML record path such as `Orders/Order`; required for XML row reads. */
+    recordPath?: string;
     /** Rows per persisted storage index page. Defaults to 100,000 and cannot exceed 100,000. */
     batchSize?: number;
     /** Rows returned by this call. Defaults to the index page size and cannot exceed 100,000. */
@@ -1647,60 +2248,97 @@ interface StorageFileReadOptions {
     columns?: Array<string | {
         source: string;
         key?: string;
-        type?: 'string' | 'number' | 'boolean' | 'date';
+        type?: StorageTabularColumnType;
     }>;
 }
 interface StorageFileStatsOptions {
+    /** CSV only. Default abort. skipRow drops wrong-width source records; syntax/size errors still abort. */
+    onError?: 'abort' | 'skipRow';
+    mode?: 'records' | 'lines';
     separator?: string;
     encoding?: string;
     delimiter?: string;
     recordDelimiter?: '\n' | '\r' | '\r\n';
-    quote?: string;
+    /** One quote character (default double quote), or false for literal quotes/backslashes. */
+    quote?: string | false;
+    /** Maximum bytes in one logical CSV record; positive integer, default 64 MiB. Independent of read/callback size. */
+    maxRecordBytes?: number;
+    /** Quote escape character; ignored when quote is false. */
     escape?: string;
     headerRow?: number | null;
     reloadStats?: boolean;
     batchSize?: number;
+    /** XML record path such as `Orders/Order`; required for XML row stats. */
+    recordPath?: string;
+}
+type StorageTabularColumnType = 'string' | 'number' | 'boolean' | 'date' | 'object';
+interface StorageTabularColumn {
+    key: string;
+    header: string;
+    type?: StorageTabularColumnType;
+}
+interface StorageTabularSchemaIssue {
+    code: 'SHEET_MISSING' | 'SHEET_UNDECLARED' | 'COLUMN_MISSING' | 'COLUMN_UNDECLARED' | 'COLUMN_KEY_DUPLICATE' | 'COLUMN_TYPE_FALLBACK';
+    sheet: string;
+    column?: string;
+    declaredType?: StorageTabularColumnType;
+    invalidRows?: number;
+    sampleRows?: number[];
+}
+interface StorageTabularSchemaPolicy {
+    profile: 'fallback' | 'strict';
+    additionalProperties: 'allow' | 'strip' | 'reject';
+}
+interface StorageTabularSchemaResult {
+    policy: StorageTabularSchemaPolicy;
+    status: 'MATCHED' | 'FALLBACK' | 'FAILED';
+    issues: StorageTabularSchemaIssue[];
 }
 interface StorageFileStats {
+    /** Present for CSV indexed with onError: skipRow; describes the entire source. */
+    csvReport?: StorageCsvReadReport;
+    /** Legacy physical-window count, including the terminal empty window after a delimiter. */
     lineCount?: number;
+    /** Actual physical lines, including headers, blanks and multiline CSV field lines; no terminal synthetic empty line. */
+    physicalLineCount?: number;
+    /** Empty physical lines, excluding the synthetic terminal empty line. */
+    blankLineCount?: number;
+    /** Whether the source ends in its detected or explicit record delimiter. */
+    endsWithRecordDelimiter?: boolean;
     map?: LooseObject<number>;
     separator?: string;
     batches?: number;
     batchSize?: number;
     encoding?: string | null;
-    format?: 'csv' | 'xlsx';
+    format?: 'csv' | 'xlsx' | 'ndjson' | 'json-array' | 'xml';
+    columns?: StorageTabularColumn[];
     bom?: boolean;
     delimiter?: string;
     recordDelimiter?: string;
-    quote?: string;
+    /** One quote character (default double quote), or false for literal quotes/backslashes. */
+    quote?: string | false;
+    /** Maximum bytes in one logical CSV record; positive integer, default 64 MiB. Independent of read/callback size. */
+    maxRecordBytes?: number;
+    /** Quote escape character; ignored when quote is false. */
     escape?: string;
     rowCount?: number;
-    headers?: Array<{
-        key: string;
-        header: string;
-    }>;
+    headers?: StorageTabularColumn[];
+    /** Present when an XLSX/CSV/TSV upload session declared table columns. */
+    schema?: StorageTabularSchemaResult;
     sheets?: Array<{
         name: string;
         state: 'visible' | 'hidden' | 'veryHidden';
         rowCount: number;
         batches: number;
-        columns: Array<{
-            key: string;
-            header: string;
-        }>;
+        columns: StorageTabularColumn[];
     }>;
 }
 interface StorageStructuredFileDataPage {
-    format: 'csv' | 'xlsx';
+    csvReport?: StorageCsvReadReport;
+    format: 'csv' | 'xlsx' | 'ndjson' | 'json-array' | 'xml';
     sheet: string | null;
-    headers: Array<{
-        key: string;
-        header: string;
-    }>;
-    columns: Array<{
-        key: string;
-        header: string;
-    }>;
+    headers: StorageTabularColumn[];
+    columns: StorageTabularColumn[];
     rows: Array<LooseObject<any>>;
     rowCount: number;
     totalRows: number;
@@ -1709,18 +2347,6 @@ interface StorageStructuredFileDataPage {
     next: boolean;
     nextCursor: string | null;
 }
-interface StorageTextContent {
-    storageEntryId: string;
-    name: string;
-    mimeType: string | null;
-    size: number | null;
-    content: string;
-    startLine: number;
-    endLine: number;
-    returnedLineCount: number;
-    totalLines: number;
-    truncated: boolean;
-}
 interface LoggedUser {
     userId: string;
     name: string;
@@ -1732,8 +2358,9 @@ interface LoggedUser {
     phone: string;
     groups: string[];
     roles: string[];
-    metaData: LooseObject<any>;
-    advancedData: LooseObject<any>;
+    metadata: LooseObject<any>;
+    metadataAdvanced: LooseObject<any>;
+    /** Avatar storage entry ID; `/me` separately returns a signed download URL. */
     avatar: string;
     platformAccess: boolean;
 }
@@ -1781,9 +2408,6 @@ interface Input {
     // Events
     type?: string;
     message?: any;
-    // Execution context.
-    excludeLibs?: string[];
-    includeLibs?: string[];
 }
 type JsonValue = string | number | boolean | null | JsonValue[] | {
     [key: string]: JsonValue;
@@ -1822,8 +2446,33 @@ interface ResourceItem extends BaseProperties {
 interface DatabaseDataActionResponse {
     requested: number;
     success: number;
+    /** Present with conditional upsert options: actual INSERT/UPDATE count. success includes intentionally skipped rows in this mode. */
+    affected?: number;
     elapsed: number;
-    data: any[];
+    /** Omitted when the write is called with `return: false`. */
+    data?: any[];
+}
+interface DatabaseDataWriteOptions {
+    /** Defaults to true. false omits row payloads to reduce response overhead. */
+    return?: boolean;
+    /** With return enabled, return only primary keys. */
+    onlyKeys?: boolean;
+}
+interface DatabaseUpsertOptions extends DatabaseDataWriteOptions {
+    /** Defaults to true. Set false for the legacy full-replacement conflict behavior. */
+    patch?: boolean;
+    /**
+     * Defaults to false. true compares supplied non-primary-key fields.
+     * include or exclude selects the compared fields; the lists are mutually exclusive.
+     * A difference writes every supplied PATCH field. Changes only to excluded fields are skipped.
+     * Omitted fields remain unchanged; JSON uses stored text equality, JSONB uses structural equality.
+     */
+    skipUnchanged?: boolean | {
+        include?: string[];
+        exclude?: string[];
+    };
+    /** Structured predicate on current target values. Controls updates only; missing rows are inserted independently. */
+    filter?: SelectFilterNode;
 }
 interface TruncateDatabaseOptions {
     /**
@@ -1858,21 +2507,27 @@ interface CloneDatabaseCompletedResponse {
     message: string;
 }
 type CloneDatabaseResponse = CloneDatabaseAcceptedResponse | CloneDatabaseCompletedResponse;
-type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
+type ExportDatabaseOptions = Omit<SelectInput, 'from' | 'debug'> & {
     /**
      * false waits for final storage persistence and returns the completed response.
      * true starts a background export and returns the accepted response.
      * Default is false.
      */
     async?: boolean;
+    /** Suppress the export completion/failure System notification. Defaults to true for low-code; set false to opt in. */
+    skipNotification?: boolean;
     /** Output format. CSV is the default. XLSX validates the effective row count before starting. */
-    format?: 'csv' | 'xlsx';
+    format?: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     /** Omit for private user storage, use ROOT, or provide an accessible explorer folder id. */
     storageDestination?: 'ROOT' | string;
     /** Dedicated output name. Omit for an automatic database-and-timestamp name using the selected extension. */
     fileName?: string;
     /** Whether the output entry is restricted. Default is true. */
     restricted?: boolean;
+    /** Explicit allowed group ids for the output entry when restricted is true. */
+    groups?: string[];
+    /** Explicit allowed user ids for the output entry when restricted is true. */
+    users?: string[];
     /** CSV delimiter. Default is a comma. */
     delimiter?: string;
     boolType?: 'emoji' | 'number' | 'boolean';
@@ -1881,14 +2536,32 @@ type ExportDatabaseOptions = Omit<SelectInput, 'from'> & {
     /** Omit for the destination default, null for no expiration. */
     retention?: StorageRetentionInput;
 };
+type ImportDatabaseOptions = {
+    /** Suppress System messages; defaults to true in low-code. */
+    skipNotification?: boolean;
+    storageEntryId: string;
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
+    mode: 'insert' | 'upsert';
+    onError: 'abort' | 'skipRow';
+    mapping?: {
+        columns: Record<string, {
+            databaseName: string;
+            column: string;
+        } | null>;
+        nullMode?: 'escaped' | 'literal' | 'empty' | 'nullText';
+    };
+    /** Skips manual approval after the same full validation; ambiguous mapping still needs review. */
+    autoCommit?: boolean;
+};
 interface ExportDatabaseAcceptedResponse {
     accepted: true;
     databaseId: string;
     exportId: string;
+    jobId: string;
     storageNamespace: string;
     parentStorageEntryId: string | null;
     fileName: string;
-    format: 'csv' | 'xlsx';
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     restricted: boolean;
     message: string;
 }
@@ -1897,16 +2570,25 @@ interface ExportDatabaseCompletedResponse {
     completed: true;
     databaseId: string;
     exportId: string;
+    jobId: string;
     storageNamespace: string;
     parentStorageEntryId: string | null;
     fileName: string;
-    format: 'csv' | 'xlsx';
+    format: 'csv' | 'tsv' | 'ndjson' | 'xlsx';
     restricted: boolean;
     storageEntryId: string;
     storageEntry: StorageEntryView;
     message: string;
 }
 type ExportDatabaseResponse = ExportDatabaseAcceptedResponse | ExportDatabaseCompletedResponse;
+interface DatabaseCountQuery extends Omit<SelectInput, 'take' | 'skip' | 'count' | 'sort' | 'debug'> {
+}
+/** Omitted take or explicit null selects 2,000 rows; omission warns once per execution. */
+interface DatabaseBoundedReadQuery extends Omit<SelectInput, 'take'> {
+    take?: number | null;
+}
+interface DatabaseRowQuery extends Omit<SelectInput, 'take' | 'skip' | 'count' | 'debug'> {
+}
 interface Context {
     requestId: string;
     date: Date;
@@ -1919,12 +2601,18 @@ interface Context {
     targetId?: string;
 }
 interface ComponentExecuteRequest {
+    /** Defaults to local: fresh isolate on the same host. Remote uses the Sandbox service. */
+    options?: {
+        executionHost?: 'local' | 'remote';
+    };
     /**
      * Active executable component id to run in an isolated child execution.
      */
     componentId: string;
     /**
-     * Optional exact component version. Omit to run the latest active version.
+     * Optional exact component version. Omit to use the execution's active release.
+     * A pinned Studio release rejects versions newer than its component binding.
+     * Studio tests accept an explicit version only when it matches their captured source.
      */
     componentVersion?: number;
     /**
@@ -1970,26 +2658,22 @@ interface InstanceData {
         id: string;
     };
 }
-interface SFTPClient {
-    host: string;
-    port: number;
-    username: string;
-    password?: string;
-    privateKey?: string;
-    passphrase?: string;
-}
 interface StorageFileTargetRequest extends Omit<StorageUploadSessionInput, 'replaceStorageEntryId' | 'uploadMode'> {
     name: string;
 }
-type SFTPFileSourceRef = {
+/** Storage destination for transport.sftpImport. Uses the same namespace and ACL contract as storage.* and HTTP targets. */
+type SFTPImportStorage = (StorageFileTargetRequest & {
+    namespace?: string;
+}) | {
     storageEntryId: string;
+    namespace?: string;
+    replace: true;
 };
-type SFTPFileTargetRef = {
+/** Existing Storage file used by transport.sftpExport. */
+interface SFTPExportStorage {
     storageEntryId: string;
-    replace?: true;
-} | {
-    storage: StorageFileTargetRequest;
-};
+    namespace?: string;
+}
 interface JWTHeader {
     alg: string | 'HS256' | 'HS384' | 'HS512' | 'RS256' | 'RS384' | 'RS512' | 'ES256' | 'ES384' | 'ES512' | 'PS256' | 'PS384' | 'PS512' | 'none';
     typ?: string | undefined;
@@ -2103,7 +2787,7 @@ interface AgentPluginSkillConfig {
     format?: 'markdown';
     content: string;
     pluginIds?: string[];
-    maxPromptChars?: number;
+    maxPromptTokens?: number;
 }
 interface AgentPluginPackageMetadata {
     avatarUrl?: string | null;
@@ -2124,7 +2808,7 @@ interface AgentPluginPackageConfig {
     content: string;
     pluginIds?: string[];
     metadata?: AgentPluginPackageMetadata;
-    maxPromptChars?: number;
+    maxPromptTokens?: number;
 }
 interface AgentPluginConfig {
     contractVersion?: 1;
@@ -2203,12 +2887,22 @@ interface AgentConfig {
     workMode?: AgentWorkMode;
     persona?: AgentPersona;
     systemInstructions?: string;
+    /** Profile for new Agent threads; defaults to platform. Mandatory Agent instructions and existing tool/plugin admission remain authoritative. */
+    contextMode?: 'platform' | 'minimal';
+    /** Final-answer contract for new Agent threads; defaults to text. Existing threads keep their saved contract on continuation and Resume. */
+    responseFormat?: SwaggerAssistantResponseFormatDto;
+    /** Persistent Agent Memory shared with memory tools and included in every instruction packet; at most 20,000 o200k_base tokens. */
+    memory?: string;
     memoryPolicy?: AgentMemoryPolicy;
     release?: AgentReleaseConfig;
     automation?: AgentAutomationPolicyConfig;
     cheapTurn?: AgentCheapTurnPolicy;
     toolNames?: string[];
     pluginIds?: string[];
+    /** Attached or inherited default plugins to preload; at most 64 IDs, all within the effective Agent access set. */
+    eagerPluginIds?: string[];
+    /** Selected terminals narrow the historical execution service account's current ACL; at most 64 IDs, empty permits none. */
+    agentTerminalIds?: string[];
     plugins?: AgentPluginConfig[];
     maxActiveRootRuns?: number;
     maxChildRuns?: number;
@@ -2306,7 +3000,8 @@ interface AgentRun {
     lastHeartbeatAt?: Date | string | null;
     checkpointSummary?: string | null;
     state?: Record<string, any>;
-    result?: Record<string, any> | null;
+    /** Complete validated answer is in output; summary is bounded. Additional runtime result fields remain available. */
+    result?: (Record<string, any> & SwaggerAgentRunResultDto) | null;
     error?: Record<string, any> | null;
     createdBy?: string;
     createdAt?: Date | string;
@@ -2442,6 +3137,12 @@ interface AssistantActionRequired {
     planningTransition?: AssistantPlanningTransition | null;
 }
 interface AssistantThread {
+    /** conversation for ordinary chats; response for retained technical results hidden from the default conversation list. */
+    kind?: 'conversation' | 'response';
+    /** Immutable creation-time task contract, preserved by continuation, Resume and same-owner fork. */
+    instructions?: string;
+    contextMode?: 'platform' | 'minimal';
+    responseFormat?: SwaggerAssistantResponseFormatDto;
     assistantThreadId: string;
     title: string;
     status: string;
@@ -2464,7 +3165,6 @@ interface AssistantThread {
     actionRequired?: AssistantActionRequired | null;
     executionPlan?: AssistantPublicExecutionPlan | null;
     workerProgress?: AssistantWorkerProgress[] | null;
-    goal?: AssistantThreadGoal | null;
     share?: AssistantThreadShare | null;
     createdBy?: string;
     createdAt?: Date | string;
@@ -2474,23 +3174,6 @@ interface AssistantThread {
     deletedAt?: Date | string | null;
     version?: number;
 }
-interface AssistantThreadGoal {
-    version: 1;
-    assistantThreadId: string;
-    revision: number;
-    status: 'active' | 'paused' | 'completed' | 'blocked' | 'cleared';
-    objective: string | null;
-    source: 'user' | 'api' | 'message' | 'system';
-    createdAt: string;
-    updatedAt: string;
-    updatedBy: string | null;
-    validation: {
-        status: 'satisfied' | 'unsatisfied' | 'partial' | 'skipped';
-        reviewedAt: string;
-        rationale: string | null;
-        evidenceRefs?: string[];
-    } | null;
-}
 interface AssistantMessage {
     assistantMessageId: string;
     assistantThreadId: string;
@@ -2507,7 +3190,6 @@ interface AssistantThreadState {
     actionRequired: AssistantActionRequired | null;
     executionPlan: AssistantPublicExecutionPlan | null;
     workerProgress?: AssistantWorkerProgress[] | null;
-    goal?: AssistantThreadGoal | null;
 }
 interface AssistantThreadShare {
     shareId: string;
@@ -2531,6 +3213,8 @@ interface AssistantSharedThreadResponse {
 }
 interface AssistantThreadResponse {
     thread: AssistantThread;
+    /** Validated terminal answer for explicitly configured thread contracts. Absent while approval/clarification is required. */
+    output?: SwaggerAssistantOutputDto;
     message?: AssistantMessage | null;
     assistantMessage?: AssistantMessage | null;
     noticeMessages?: AssistantMessage[];
@@ -2544,6 +3228,225 @@ interface AssistantThreadCompactionRequest {
     keepContext?: boolean;
     content?: string;
 }
+// ApiInterface
+/** Owner selection; omitted means instance. User scope uses the verified execution account. */
+interface SecretScopeOptions {
+    scope?: 'instance' | 'user';
+}
+/** Null or omission selects NOW at write time. Numbers are Unix epoch milliseconds. */
+type SecretDate = string | Date | number | null;
+interface SecretRotateOptions extends SecretScopeOptions {
+    validFrom?: SecretDate;
+}
+interface SecretGetOptions extends SecretRotateOptions {
+    /** Exact validFrom timestamp. If both selectors are supplied they must agree. */
+    version?: SecretDate;
+}
+interface SecretDeleteOptions extends SecretGetOptions {
+}
+interface SecretRevisionListOptions extends SecretScopeOptions {
+    cursor?: string;
+    limit?: number;
+}
+interface SecretProperties {
+    category?: string | null;
+    description?: string | null;
+    /** Replacement JSON object, at most 16 KiB and 64 top-level keys. Backend keys are reserved. */
+    metadata?: Record<string, unknown>;
+}
+interface SecretCreateInput extends SecretProperties {
+    /** Nonempty text, at most 65,536 characters. */
+    value: string;
+    validFrom?: SecretDate;
+    enabled?: boolean;
+}
+interface SecretRotateInput {
+    value: string;
+}
+interface SecretUpdateInput extends SecretProperties {
+    /** Parent metadata counter, distinct from a revision's timestamp version. */
+    version: number;
+}
+/** Unified metadata-only parent. */
+interface Secret {
+    name: string;
+    scope: 'instance' | 'user';
+    category: string | null;
+    description: string | null;
+    metadata: Record<string, unknown>;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+}
+interface SecretRevision {
+    name: string;
+    scope: 'instance' | 'user';
+    /** Stable version identity: the unique validFrom timestamp, normalized to ISO. */
+    version: string;
+    enabled: boolean;
+    validFrom: string;
+    createdAt: string;
+    updatedAt: string;
+}
+interface SecretWithRevision extends Secret {
+    revision: SecretRevision;
+}
+interface SecretValueRevision extends SecretRevision {
+    value: string;
+}
+interface SecretWithValue extends Secret {
+    revision: SecretValueRevision;
+}
+interface SecretRevisionPage {
+    items: SecretRevision[];
+    nextCursor: string | null;
+}
+interface VaultIntegrationConfig {
+    resourceUrl: string;
+    scopes: string[];
+    issuer?: string;
+    clientId?: string;
+    clientSecret?: string;
+    tenantId?: string;
+    metadataScopeAliases?: Record<string, string>;
+}
+interface VaultConnectIntegrationInput extends VaultIntegrationConfig {
+    /** Null creates a definition; otherwise use its exact revision from getIntegrationMetadata. */
+    expectedRevision: string | null;
+}
+interface VaultAccessToken {
+    accessToken: string;
+    expiresAt: string;
+    tokenType: 'Bearer';
+}
+interface VaultIntegrationMetadata {
+    name: string;
+    scope: 'instance' | 'user';
+    revision: string | null;
+    resourceUrl: string;
+    issuer: string;
+    scopes: string[];
+    tenantId: string | null;
+    metadataScopeAliases: Record<string, string>;
+    clientId: string | null;
+    hasClientSecret: boolean;
+    registrationMode: 'dynamic_public' | 'byo_public' | 'byo_confidential';
+    authorizationEndpoint: string;
+    registrationEndpoint: string | null;
+}
+interface VaultIntegrationDiscovery {
+    issuers: string[];
+    requiresIssuerSelection: boolean;
+    supportedScopes: string[];
+    issuer?: string;
+    authorizationEndpoint?: string;
+    registrationEndpoint?: string | null;
+    registrationMode?: 'dynamic_public' | 'byo_public' | 'byo_confidential';
+    requiresClientId?: boolean;
+    redirectUri?: string;
+}
+interface VaultIntegrationConnectResult {
+    name: string;
+    scope: 'instance' | 'user';
+    revision: string;
+    authorizationUrl: string;
+}
+/** Native Vault manager; one contract for instance and verified user ownership.
+ * Instance access requires Secret roles and creator ownership or an administrator.
+ * Secret values return only through get; getAccessToken returns an integration token. Automatic diagnostic previews suppress Secret values.
+ * Writes with readOnly: true throw READ_ONLY_OPERATION_FORBIDDEN before performing the operation.
+ * External provider credentials and OAuth connections have their own lifecycles.
+ */
+/** Unique service-account name or ID; explicit selectors avoid ambiguity. */
+type ServiceAccountRef = string | {
+    id: string;
+} | {
+    name: string;
+};
+interface ServiceAccountRecord {
+    userId: string;
+    name: string;
+    mail: string;
+    serviceAccount: true;
+    status: number;
+    version: number;
+    platformAccess: boolean;
+    access: {
+        restricted: boolean;
+        users: Array<{
+            userId: string;
+            mail: string;
+            name: string;
+        }>;
+        groups: Array<{
+            groupId: string;
+            name: string;
+        }>;
+    };
+    memberships: {
+        groups: string[];
+        roleGroups: string[];
+    };
+    metadata: Record<string, any>;
+    metadataAdvanced: Record<string, any>;
+}
+interface ServiceAccountKey {
+    userKeyId: string;
+    name: string;
+    version: number;
+    /** Masked credential label; never the usable credential. */
+    key?: string;
+    restricted: boolean;
+    whitelist?: ServiceAccountKeyCreateInput['whitelist'];
+    expireAt?: Date | null;
+    metadata?: Record<string, any>;
+    deletedAt?: Date | null;
+    createdAt?: Date;
+    lastUpdateAt?: Date;
+    rotatedFromUserKeyId?: string | null;
+}
+/** Immutable credentials are revealed once by create/rotate only. */
+interface ServiceAccountKeyCreated extends ServiceAccountKey {
+    secret: string;
+}
+interface ServiceAccountKeyRotated {
+    newKey: ServiceAccountKeyCreated;
+    previousKey: ServiceAccountKey;
+}
+interface RevoServiceAccount {
+    get(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    list(query?: ServiceAccountQuery): Promise<CollectionResult<ServiceAccountRecord>>;
+    create(input: ServiceAccountCreateInput): Promise<ServiceAccountRecord>;
+    update(ref: ServiceAccountRef, input: ServiceAccountUpdateInput): Promise<ServiceAccountRecord>;
+    delete(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    activate(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    disable(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    restore(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    enablePlatformAccess(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    disablePlatformAccess(ref: ServiceAccountRef): Promise<ServiceAccountRecord>;
+    getKeys(ref: ServiceAccountRef, query?: ServiceAccountQuery): Promise<CollectionResult<ServiceAccountKey>>;
+    getKey(ref: ServiceAccountRef, userKeyId: string): Promise<ServiceAccountKey>;
+    createKey(ref: ServiceAccountRef, input: ServiceAccountKeyCreateInput): Promise<ServiceAccountKeyCreated>;
+    updateKey(ref: ServiceAccountRef, userKeyId: string, input: ServiceAccountKeyUpdateInput): Promise<ServiceAccountKey>;
+    rotateKey(ref: ServiceAccountRef, userKeyId: string, input: ServiceAccountKeyRotateInput): Promise<ServiceAccountKeyRotated>;
+    revokeKey(ref: ServiceAccountRef, userKeyId: string): Promise<ServiceAccountKey>;
+}
+interface RevoVault$1 {
+    get(name: string, options?: SecretGetOptions): Promise<SecretWithValue>;
+    create(name: string, data: SecretCreateInput, options?: SecretScopeOptions): Promise<Secret | null>;
+    update(name: string, data: SecretUpdateInput, options?: SecretScopeOptions): Promise<Secret | null>;
+    delete(name: string, options?: SecretDeleteOptions): Promise<void | null>;
+    rotate(name: string, data: SecretRotateInput, options?: SecretRotateOptions): Promise<SecretWithRevision | null>;
+    listRevisions(name: string, options?: SecretRevisionListOptions): Promise<SecretRevisionPage>;
+    getAccessToken(name: string, options?: SecretScopeOptions): Promise<VaultAccessToken>;
+    getIntegrationMetadata(name: string, options?: SecretScopeOptions): Promise<VaultIntegrationMetadata>;
+    discoverIntegration(name: string, data: VaultIntegrationConfig, options?: SecretScopeOptions): Promise<VaultIntegrationDiscovery>;
+    connectIntegration(name: string, data: VaultConnectIntegrationInput, options?: SecretScopeOptions): Promise<VaultIntegrationConnectResult | null>;
+    disconnectIntegration(name: string, options?: SecretScopeOptions): Promise<{
+        name: string;
+        disabled: boolean;
+    } | null>;
+}
 interface RevoApi {
     createDatabase(data: DatabaseCreateInput): Promise<Database>;
     cloneDatabase<TAsync extends boolean = false>(name: string, options?: DatabaseCloneInput & {
@@ -2552,21 +3455,43 @@ interface RevoApi {
     exportDatabase<TAsync extends boolean = false>(name: string, options?: ExportDatabaseOptions & {
         async?: TAsync;
     }): Promise<TAsync extends true ? ExportDatabaseAcceptedResponse : TAsync extends false ? ExportDatabaseCompletedResponse : ExportDatabaseResponse>;
-    exportDatabaseView<TAsync extends boolean = false>(name: string, options?: ExportDatabaseOptions & {
-        async?: TAsync;
-    }): Promise<TAsync extends true ? ExportDatabaseAcceptedResponse : TAsync extends false ? ExportDatabaseCompletedResponse : ExportDatabaseResponse>;
+    startDatabaseOperation(name: string, options: Omit<DatabaseOperationInput, 'databaseName'>): Promise<{
+        accepted: true;
+        jobId: string;
+        status: string;
+    }>;
+    importDatabase(name: string, options: ImportDatabaseOptions): Promise<{
+        importId: string;
+        jobId: string;
+        status: string;
+    }>;
+    updateDatabaseImportMapping(importId: string, mapping: NonNullable<ImportDatabaseOptions['mapping']>): Promise<{
+        importId: string;
+        status: string;
+    }>;
+    commitDatabaseImport(importId: string): Promise<{
+        importId: string;
+        status: string;
+    }>;
     updateDatabase(name: string, data: DatabaseUpdateInput): Promise<Database>;
     deleteDatabase(name: string): Promise<void>;
     restoreDatabase(name: string): Promise<void>;
     truncateDatabase(name: string, options?: TruncateDatabaseOptions): Promise<void>;
-    getDatabaseData<T = any>(name: string, request?: SelectInput): Promise<GetDatabaseDataResponse<T>>;
-    getDatabaseViewData<T = any>(name: string, request?: SelectInput): Promise<GetDatabaseDataResponse<T>>;
+    getDatabaseData<T = any>(name: string, request: DatabaseBoundedReadQuery & {
+        debug: true;
+    }): Promise<DatabaseExplainResult>;
+    getDatabaseData<T = any>(name: string, request?: DatabaseBoundedReadQuery & {
+        debug?: false;
+    }): Promise<GetDatabaseDataResponse<T>>;
+    getDatabaseData<T = any>(name: string, request: DatabaseBoundedReadQuery): Promise<GetDatabaseDataResponse<T> | DatabaseExplainResult>;
+    getDatabaseDataRow<T = any>(name: string, query: DatabaseRowQuery): Promise<T | null>;
+    countDatabase(name: string, query?: DatabaseCountQuery): Promise<number>;
     getDatabaseAudit(name: string, query?: DatabaseAuditQuery): Promise<DatabaseAuditResponse>;
-    insertDatabaseData(name: string, data: LooseObject<any>[]): Promise<DatabaseDataActionResponse>;
-    upsertDatabaseData(name: string, data: LooseObject<any>[]): Promise<DatabaseDataActionResponse>;
+    insertDatabaseData(name: string, data: LooseObject<any>[], options?: DatabaseDataWriteOptions): Promise<DatabaseDataActionResponse>;
+    upsertDatabaseData(name: string, data: LooseObject<any>[], options?: DatabaseUpsertOptions): Promise<DatabaseDataActionResponse>;
     updateDatabaseData(name: string, oldObject: LooseObject<any>, newObject: LooseObject<any>): Promise<ResourceItem>;
-    deleteDatabaseData(name: string, data: ResourceItem[]): Promise<any>;
-    updateDatabaseDataRequest(name: string, request: DatabaseMutationRequest, payload: Record<string, any>, options?: {
+    deleteDatabaseData(name: string, data: LooseObject<any>[]): Promise<any>;
+    updateDatabaseDataRequest(name: string, request: DatabaseMutationRequest, payload: DatabaseUpdateData, options?: {
         return?: boolean;
         onlyKeys?: boolean;
     }): Promise<{
@@ -2585,15 +3510,13 @@ interface RevoApi {
     queryDatabase(query: string, params?: any[]): Promise<any>;
     currentUser(): LoggedUser;
     isDebug(): boolean;
-    disableDebug(): void;
-    enableDebug(): void;
     getCache(key: string): any;
-    setCache(key: string, value: any): void;
+    setCache(key: string, value: any, options?: {
+        reference?: boolean;
+    }): void;
     getContext(): Context;
     getErrors(): ProcessLog[];
-    getWarnings(): ProcessLog[];
     getExecutionId(): string;
-    getLogs(): LooseObject<any>[];
     getOperationId(): string;
     executeComponent<T = LooseObject<any>>(request: ComponentExecuteRequest): Promise<ComponentExecuteResult<T>>;
     input(name?: string): Input;
@@ -2601,12 +3524,8 @@ interface RevoApi {
     exit(): void;
     throw(code: number, body?: any): void;
     getCurrentInstance(): string;
-    getInstanceData(dataSource: 'Users' | 'Groups' | 'RoleGroups' | 'Keys' | 'Secrets' | 'SecretsData' | 'Templates' | 'Events' | 'Schedule' | 'Jobs' | 'Webhooks' | 'Components' | 'Logs' | 'Files' | 'EventsHistory' | 'Endpoints' | 'Databases' | 'DatabaseData', request?: InstanceData): Promise<any>;
+    getInstanceData(dataSource: 'Users' | 'Groups' | 'RoleGroups' | 'Keys' | 'Secrets' | 'SecretsData' | 'Templates' | 'Events' | 'Schedule' | 'Jobs' | 'Webhooks' | 'Components' | 'Logs' | 'EventsHistory' | 'Endpoints' | 'Databases' | 'DatabaseData', request?: InstanceData): Promise<any>;
     getInstanceDetails(): InstanceDetails;
-    getSecret(name: string): Promise<string>;
-    getSecrets(name: string[]): Promise<{
-        [key: string]: string;
-    }>;
     publishMessage(channel: string, message: any): Promise<void>;
     getInstanceCache(key: string): Promise<any>;
     setInstanceCache(key: string, value: any, seconds?: number): Promise<void>;
@@ -2624,24 +3543,45 @@ interface RevoApi {
     acquireIdempotencyKey(key: string, ttl: number, value?: any): Promise<boolean>;
     getIdempotencyKey(key: string): Promise<any>;
     releaseIdempotencyKey(key: string): Promise<void>;
-    concurrencyLimit(key: string, limit: number, ttl: number): Promise<boolean>;
+    concurrencyLimit(key: string, limit: number, ttl: number, leaseOwnerId?: string): Promise<boolean>;
     rateLimit(key: string, limit: number, ttl: number): Promise<boolean>;
     releaseRateLimit(key: string): Promise<void>;
-    releaseConcurrencyLimit(key: string): Promise<void>;
+    releaseConcurrencyLimit(key: string, leaseOwnerId?: string): Promise<void>;
     triggerEvent(name: string, message: any, options?: TriggerEventOptions): Promise<string>;
-    triggerTarget(targetType: ExecutionTargetType, targetId: string, input?: any, options?: AutomationScheduleOptions): Promise<string>;
-    triggerJob(templateId: string, input?: any, options?: AutomationScheduleOptions): Promise<string>;
+    triggerTarget(targetType: ExecutionTargetType, targetId: string, input?: Record<string, JsonValue>, options?: AutomationScheduleOptions): Promise<string>;
+    triggerJob(templateIdOrName: string, templateInputs?: Record<string, JsonValue>, options?: AutomationScheduleOptions): Promise<string>;
     triggerWebhook(webhook: WebhookInput, options?: AutomationScheduleOptions): Promise<Webhook>;
+    cancelJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    retryJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    deleteJobs(input: JobsBulkInput): Promise<AutomationOperation>;
+    cancelWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    retryWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    deleteWebhooks(input: WebhooksBulkInput): Promise<AutomationOperation>;
+    previewAutomationOperation(resource: 'jobs' | 'webhooks', action: 'cancel' | 'retry' | 'delete', input: JobsBulkInput | WebhooksBulkInput): Promise<{
+        matched: number;
+        eligible: number;
+    }>;
+    getAutomationOperation(operationId: string): Promise<AutomationOperation>;
+    getAutomationOperationItems(operationId: string, after?: string): Promise<{
+        data: Array<{
+            resourceId: string;
+            status: string;
+            resultId: string | null;
+            errorCode: string | null;
+        }>;
+        nextCursor: string | null;
+    }>;
     httpCall(config: HttpRequestInterface, options: HttpRequestOptionsInterface & {
         responseType: 'storage';
         target: HttpStorageTargetRef;
         timeout?: number;
-        proxy?: false;
+        proxy?: boolean;
     }): Promise<{
         status: number;
         statusText: string;
         time: number;
-        headers: LooseObject<string>;
+        headers: LooseObject<string | string[]>;
+        revo?: HttpRevoResponseScope;
         request: {
             config: HttpRequestInterface;
             options: HttpRequestOptionsInterface;
@@ -2663,7 +3603,8 @@ interface RevoApi {
         status: number;
         statusText: string;
         time: number;
-        headers: LooseObject<string>;
+        headers: LooseObject<string | string[]>;
+        revo?: HttpRevoResponseScope;
         data: any;
         storage?: {
             session: StorageUploadSession;
@@ -2679,43 +3620,74 @@ interface RevoApi {
             };
         };
     }>;
-    sftpExec(commands: any[], config: SFTPClient): Promise<any>;
-    sftpPut(source: SFTPFileSourceRef, path: string, config: SFTPClient): Promise<void>;
-    sftpGet(target: SFTPFileTargetRef, path: string, config: SFTPClient): Promise<void | {
-        session: StorageUploadSession;
-        entry: StorageEntryView;
-    }>;
 }
 interface RevoStorage {
     explore(query?: StorageExploreRequest): Promise<StorageExploreResult>;
+    explore(namespace: string, query?: StorageExploreRequest): Promise<StorageExploreResult>;
     resolveFolderPath(path: string): Promise<StorageEntryView>;
+    resolveFolderPath(path: string, namespace: string): Promise<StorageEntryView>;
     ensureFolderPath(path: string, options?: StorageEnsureFolderPathOptions): Promise<StorageEntryView>;
+    ensureFolderPath(path: string, options: StorageEnsureFolderPathOptions | undefined, namespace: string): Promise<StorageEntryView>;
     getFile(storageEntryId: string, includeDeleted?: boolean): Promise<StorageEntryView>;
+    getFile(namespace: string, storageEntryId: string, includeDeleted?: boolean): Promise<StorageEntryView>;
     getFileData(storageEntryId: string, options?: StorageFileReadOptions): Promise<StorageStructuredFileDataPage | string[] | string>;
+    getFileData(namespace: string, storageEntryId: string, options?: StorageFileReadOptions): Promise<StorageStructuredFileDataPage | string[] | string>;
     getFileStats(storageEntryId: string, options?: StorageFileStatsOptions): Promise<StorageFileStats>;
+    getFileStats(namespace: string, storageEntryId: string, options?: StorageFileStatsOptions): Promise<StorageFileStats>;
     getEntry(storageEntryId: string, includeDeleted?: boolean): Promise<StorageEntryView>;
+    getEntry(namespace: string, storageEntryId: string, includeDeleted?: boolean): Promise<StorageEntryView>;
     createFolder(data: StorageFolderInput): Promise<StorageEntryView>;
-    putObject(data: StoragePutObjectInput): Promise<StorageEntryView>;
+    createFolder(namespace: string, data: StorageFolderInput): Promise<StorageEntryView>;
+    putObject(data: StorageBinaryPutObjectInput): Promise<StorageEntryView>;
+    putObject(namespace: string, data: StorageBinaryPutObjectInput): Promise<StorageEntryView>;
     createUploadSession(data: StorageUploadSessionInput): Promise<{
         session: StorageUploadSession;
         upload: StorageUploadTarget;
     }>;
+    createUploadSession(namespace: string, data: StorageUploadSessionInput): Promise<{
+        session: StorageUploadSession;
+        upload: StorageUploadTarget;
+    }>;
     extendUploadSession(storageUploadSessionId: string): Promise<StorageUploadSession>;
+    extendUploadSession(namespace: string, storageUploadSessionId: string): Promise<StorageUploadSession>;
     getUploadSession(storageUploadSessionId: string): Promise<StorageUploadSessionView>;
-    uploadPart(storageUploadSessionId: string, partNumber: number | StorageUploadPartInput, data?: StorageUploadPartInput): Promise<StorageUploadPartResult>;
+    getUploadSession(namespace: string, storageUploadSessionId: string): Promise<StorageUploadSessionView>;
+    uploadPart(storageUploadSessionId: string, partNumber: number | StorageBinaryUploadPartInput, data?: StorageBinaryUploadPartInput): Promise<StorageUploadPartResult>;
+    uploadPart(namespace: string, storageUploadSessionId: string, partNumber: number | StorageBinaryUploadPartInput, data?: StorageBinaryUploadPartInput): Promise<StorageUploadPartResult>;
     finalizeUploadSession(storageUploadSessionId: string, data?: StorageUploadSessionFinalizeInput): Promise<{
         session: StorageUploadSession;
         entry: StorageEntryView;
         fileStats?: StorageFileStats;
     }>;
+    finalizeUploadSession(namespace: string, storageUploadSessionId: string, data?: StorageUploadSessionFinalizeInput): Promise<{
+        session: StorageUploadSession;
+        entry: StorageEntryView;
+        fileStats?: StorageFileStats;
+    }>;
     abortUploadSession(storageUploadSessionId: string): Promise<StorageUploadSession>;
+    abortUploadSession(namespace: string, storageUploadSessionId: string): Promise<StorageUploadSession>;
     updateEntry(storageEntryId: string, data: StorageEntryUpdateInput): Promise<StorageEntryView>;
+    updateEntry(namespace: string, storageEntryId: string, data: StorageEntryUpdateInput): Promise<StorageEntryView>;
     moveEntry(storageEntryId: string, data: StorageEntryMoveInput): Promise<StorageEntryView>;
+    moveEntry(namespace: string, storageEntryId: string, data: StorageEntryMoveInput): Promise<StorageEntryView>;
     archiveEntry(storageEntryId: string, data: StorageVersionInput): Promise<StorageEntryView>;
+    archiveEntry(namespace: string, storageEntryId: string, data: StorageVersionInput): Promise<StorageEntryView>;
     restoreEntry(storageEntryId: string, data: StorageRestoreInput): Promise<StorageEntryView>;
+    restoreEntry(namespace: string, storageEntryId: string, data: StorageRestoreInput): Promise<StorageEntryView>;
     deleteEntry(storageEntryId: string, data: StorageVersionInput): Promise<StorageEntryView>;
-    getDownload(storageEntryId: string, preview?: boolean): Promise<StorageDownload>;
-    getText(storageEntryId: string, options?: StorageTextReadOptions): Promise<StorageTextContent>;
+    deleteEntry(namespace: string, storageEntryId: string, data: StorageVersionInput): Promise<StorageEntryView>;
+    getDownload(storageEntryId: string, preview?: boolean, ttlSeconds?: number): Promise<StorageDownload>;
+    getDownload(namespace: string, storageEntryId: string, preview?: boolean, ttlSeconds?: number): Promise<StorageDownload>;
+    getDocument(storageEntryId: string, options?: StorageDocumentReadOptions): Promise<StorageDocument>;
+    getDocument(namespace: string, storageEntryId: string, options?: StorageDocumentReadOptions): Promise<StorageDocument>;
+}
+interface RevoTransport {
+    sftpImport(path: string, storage: SFTPImportStorage, secretNameOrId: string): Promise<{
+        session: StorageUploadSession;
+        entry: StorageEntryView;
+    }>;
+    sftpExport(path: string, storage: SFTPExportStorage, secretNameOrId: string): Promise<void>;
+    sftpCommands(commands: any[], secretNameOrId: string): Promise<any>;
 }
 interface RevoAgents {
     list(): Promise<Agent[]>;
@@ -2739,16 +3711,11 @@ interface RevoAgents {
     tickRun(agentRunId: string): Promise<AgentRun>;
     cancelRun(agentRunId: string, data?: AgentRunCancelInput): Promise<AgentRun>;
     reconcileRuns(): Promise<any>;
-    listThreads(query?: Record<string, any>): Promise<CollectionResult<AssistantThread>>;
+    listThreads(query?: AssistantThreadQuery): Promise<CollectionResult<AssistantThread>>;
     getThread(assistantThreadId: string, options?: {
         hideDeleted?: boolean;
     }): Promise<AssistantThread>;
     getThreadState(assistantThreadId: string): Promise<AssistantThreadState>;
-    getThreadGoal(assistantThreadId: string): Promise<AssistantThreadGoal | null>;
-    setThreadGoal(assistantThreadId: string, data: AssistantThreadGoalInput): Promise<AssistantThreadGoal>;
-    pauseThreadGoal(assistantThreadId: string): Promise<AssistantThreadGoal>;
-    resumeThreadGoal(assistantThreadId: string): Promise<AssistantThreadGoal>;
-    clearThreadGoal(assistantThreadId: string): Promise<AssistantThreadGoal>;
     getThreadShare(assistantThreadId: string): Promise<AssistantThreadShare | null>;
     enableThreadShare(assistantThreadId: string): Promise<AssistantThreadShare>;
     disableThreadShare(assistantThreadId: string): Promise<AssistantThreadShare>;
@@ -2758,6 +3725,7 @@ interface RevoAgents {
     getSharedThreadMessageArtifact(shareId: string, assistantMessageId: string, artifactId: string): Promise<Record<string, any>>;
     forkSharedThreadMessage(shareId: string, assistantMessageId: string, data?: AssistantForkMessageInput): Promise<AssistantThreadResponse>;
     createThread(data: AssistantMessageInput): Promise<AssistantThreadResponse>;
+    createResponse(data: AssistantResponseInput): Promise<AssistantThreadResponse>;
     deleteThread(assistantThreadId: string): Promise<void>;
     restoreThread(assistantThreadId: string): Promise<void>;
     listThreadMessages(assistantThreadId: string, query?: Record<string, any>): Promise<CollectionResult<AssistantMessage>>;
@@ -2774,8 +3742,8 @@ interface RevoAgents {
 }
 interface RevoUtils {
     sleep(ms: number): Promise<void>;
-    aesDecrypt(encrypted: string, passphrase: string): string;
-    aesEncrypt(payload: string, passphrase: string): string;
+    aesDecrypt(encrypted: string, passphrase: string): Promise<string>;
+    aesEncrypt(payload: string, passphrase: string): Promise<string>;
     compareHash(password: string | undefined, hash: string | undefined): Promise<boolean>;
     isBase64(input: any): boolean;
     decodeBase64(base64String: string): string;
@@ -2801,7 +3769,7 @@ interface RevoUtils {
     randomInt(min?: number, max?: number): number;
     randomString(length?: number, alphabet?: string): string;
     otp(length?: number): string;
-    validate(payload: any, schema: ValidatorSchemaInput): ValidationResult<any>;
+    validate(payload: any, schema: ValidatorSchemaInput): Promise<ValidationResult<any>>;
     jwtDecode(token: string, options?: {
         complete?: boolean;
         json?: boolean;
@@ -2843,18 +3811,27 @@ interface RevoUtils {
         maxAge?: string | number;
         allowInvalidAsymmetricKeyTypes?: boolean;
     }): any;
-    rsaDecrypt(privateKey: string, payload: string, passphrase?: string): string;
-    rsaEncrypt(publicKey: string, payload: string): string;
+    rsaDecrypt(privateKey: string, payload: string, passphrase?: string): Promise<string>;
+    rsaEncrypt(publicKey: string, payload: string): Promise<string>;
     rsaGeneratePair(config?: {
         modulusLength?: number;
         passphrase?: string;
-    }): {
+    }): Promise<{
         publicKey: string;
         privateKey: string;
-    };
-    rsaSign(privateKey: string, payload: string, passphrase?: string): string;
-    rsaVerify(publicKey: string, payload: string, signature: string): boolean;
+    }>;
+    rsaSign(privateKey: string, payload: string, passphrase?: string): Promise<string>;
+    rsaVerify(publicKey: string, payload: string, signature: string): Promise<boolean>;
 }
+/** Low-code byte payloads; REST JSON callers retain the base64 option. */
+/** Text arrays retain their existing joining rules; bytes are snapshotted before asynchronous upload. */
+type StorageBinaryPutObjectInput = Omit<StoragePutObjectInput, 'data'> & {
+    data: string | string[] | Uint8Array | Buffer;
+};
+/** Bytes need no base64 encoding. One call remains one logical part, including retry/checksum/finalize. */
+type StorageBinaryUploadPartInput = Omit<StorageUploadPartInput, 'data'> & {
+    data?: string | string[] | Uint8Array | Buffer;
+};
 /**
  * Source language for an ad-hoc low-code execution.
  */
@@ -2862,6 +3839,8 @@ type LowCodeLanguage = 'javascript' | 'typescript';
 interface LowCodeExecuteOptions {
     /** Defaults to TypeScript. */
     language?: LowCodeLanguage;
+    /** Restrict platform writes for this execution. Inherits the hosted runtime mode when omitted. */
+    readOnly?: boolean;
     /** Input exposed through api.input() inside the low-code execution. */
     inputs?: any;
     /** Maximum execution time in milliseconds. Defaults to 60 seconds. */
@@ -2873,6 +3852,15 @@ interface RevoLowCode {
     execute<T = LooseObject<any>>(code: string, options?: LowCodeExecuteOptions): Promise<ComponentExecuteResult<T>>;
 }
 
+type VaultReadResult = Awaited<ReturnType<RevoVault$1['get']>>;
+/** Wire decoding returns a full Node.js Buffer, extending the portable low-code type. */
+type RevoVault = Omit<RevoVault$1, 'get'> & {
+    get(...args: Parameters<RevoVault$1['get']>): Promise<Omit<VaultReadResult, 'revision'> & {
+        revision: Omit<VaultReadResult['revision'], 'value'> & {
+            value: Buffer$1;
+        };
+    }>;
+};
 type RevoExecute = RevoLowCode['execute'];
 type RevoExecuteOptions = NonNullable<Parameters<RevoExecute>[1]>;
 type RevoExecutionDefaults = Omit<RevoExecuteOptions, 'inputs'>;
@@ -2960,6 +3948,9 @@ interface RevoRuntime {
     readonly api: RevoApi;
     readonly utils: RevoUtils;
     readonly storage: RevoStorage;
+    readonly vault: RevoVault;
+    readonly serviceAccount: RevoServiceAccount;
+    readonly transport: RevoTransport;
     readonly agents: RevoAgents;
     readonly execute: RevoExecute;
     readonly batch: RevoBatchController;
@@ -3057,4 +4048,4 @@ declare class RevoHttpResponseError extends RevoError {
     constructor(statusCode: number, body?: unknown);
 }
 
-export { RevoTransportError as A, type BatchFailureMode as B, CONTRACT_REVISION as C, type RuntimeBatchRequest as D, type RuntimeBatchResponse as E, type RuntimeCall as F, type RuntimeCallResult as G, type HostedRuntimeBootstrap as H, type SerializedRevoError as I, PROTOCOL_VERSION as P, type RevoRuntime as R, SDK_VERSION as S, RevoExecutionExit as a, RevoHttpResponseError as b, type RevoRuntimeBridgeRequest as c, type RevoRuntimeBridgeResponse as d, type RevoRuntimeBridgeTransportError as e, type RevoStandaloneApi as f, type RevoUtils as g, type RevoStorage as h, type RevoAgents as i, type RevoExecute as j, type RevoBatchController as k, type RevoClientOptions as l, type RevoApi as m, RevoAuthenticationError as n, RevoBatchConfigurationError as o, RevoBatchLimitError as p, type RevoBatchLimits as q, type RevoBatchOptions as r, RevoConfigurationError as s, RevoError as t, type RevoExecuteOptions as u, type RevoExecutionDefaults as v, RevoPermissionDeniedError as w, RevoProtocolError as x, RevoRemoteError as y, RevoRuntimeContextUnavailableError as z };
+export { RevoProtocolError as A, type BatchFailureMode as B, CONTRACT_REVISION as C, RevoRemoteError as D, RevoRuntimeContextUnavailableError as E, RevoTransportError as F, type RuntimeBatchRequest as G, type HostedRuntimeBootstrap as H, type RuntimeBatchResponse as I, type RuntimeCall as J, type RuntimeCallResult as K, type SerializedRevoError as L, PROTOCOL_VERSION as P, type RevoRuntime as R, SDK_VERSION as S, RevoExecutionExit as a, RevoHttpResponseError as b, type RevoRuntimeBridgeRequest as c, type RevoRuntimeBridgeResponse as d, type RevoRuntimeBridgeTransportError as e, type RevoStandaloneApi as f, type RevoUtils as g, type RevoStorage as h, type RevoVault as i, type RevoServiceAccount as j, type RevoTransport as k, type RevoAgents as l, type RevoExecute as m, type RevoBatchController as n, type RevoClientOptions as o, type RevoApi as p, RevoAuthenticationError as q, RevoBatchConfigurationError as r, RevoBatchLimitError as s, type RevoBatchLimits as t, type RevoBatchOptions as u, RevoConfigurationError as v, RevoError as w, type RevoExecuteOptions as x, type RevoExecutionDefaults as y, RevoPermissionDeniedError as z };