@runtypelabs/sdk 5.7.0 → 5.8.1

package/dist/index.d.cts

@@ -645,7 +645,7 @@ interface paths {
                             /** @enum {string} */
                             setupMode: "create" | "connect";
                             systemPrompt?: string;
-                            timeoutMs?: number;
+                            timeoutMs?: number | null;
                             toolPermissions?: {
                                 bash?: boolean;
                                 edit?: boolean;
@@ -708,6 +708,8 @@ interface paths {
                                 profileTemplate?: string;
                             };
                             model?: string;
+                            /** @enum {string} */
+                            piiRedaction?: "default" | "off" | "redact";
                             presencePenalty?: number;
                             reasoning?: boolean | {
                                 budgetTokens?: number;
@@ -732,7 +734,6 @@ interface paths {
                                 persistence?: "ephemeral" | "conversation" | "named";
                                 /** @enum {string} */
                                 provider?: "runtype-sandbox" | "daytona";
-                                requireApprovalForBash?: boolean;
                                 /** @enum {string} */
                                 sleepAfter?: "5m" | "15m" | "30m" | "1h";
                                 /** @enum {string} */
@@ -1110,6 +1111,8 @@ interface paths {
                                     profileTemplate?: string;
                                 };
                                 model?: string;
+                                /** @enum {string} */
+                                piiRedaction?: "default" | "off" | "redact";
                                 presencePenalty?: number;
                                 reasoning?: boolean | {
                                     budgetTokens?: number;
@@ -1134,7 +1137,6 @@ interface paths {
                                     persistence?: "ephemeral" | "conversation" | "named";
                                     /** @enum {string} */
                                     provider?: "runtype-sandbox" | "daytona";
-                                    requireApprovalForBash?: boolean;
                                     /** @enum {string} */
                                     sleepAfter?: "5m" | "15m" | "30m" | "1h";
                                     /** @enum {string} */
@@ -1721,7 +1723,7 @@ interface paths {
                             /** @enum {string} */
                             setupMode?: "create" | "connect";
                             systemPrompt?: string;
-                            timeoutMs?: number;
+                            timeoutMs?: number | null;
                             toolPermissions?: {
                                 bash?: boolean;
                                 edit?: boolean;
@@ -1784,6 +1786,8 @@ interface paths {
                                 profileTemplate?: string;
                             };
                             model?: string;
+                            /** @enum {string} */
+                            piiRedaction?: "default" | "off" | "redact";
                             presencePenalty?: number;
                             reasoning?: boolean | {
                                 budgetTokens?: number;
@@ -1808,7 +1812,6 @@ interface paths {
                                 persistence?: "ephemeral" | "conversation" | "named";
                                 /** @enum {string} */
                                 provider?: "runtype-sandbox" | "daytona";
-                                requireApprovalForBash?: boolean;
                                 /** @enum {string} */
                                 sleepAfter?: "5m" | "15m" | "30m" | "1h";
                                 /** @enum {string} */
@@ -2472,7 +2475,7 @@ interface paths {
         put?: never;
         /**
          * Execute agent
-         * @description Execute an agent (Quick Agent mode) with a message array. Streams a Server-Sent Events response when streamResponse is true (default); otherwise returns a JSON result.
+         * @description Execute an agent (Quick Agent mode) with a message array. Streams a Server-Sent Events response when streamResponse is true (default); otherwise returns a JSON result. Send the RFC 7240 `Prefer: respond-async` header to run a Claude Managed durable-lane turn (a saved agent invoked with a conversationId) fire-and-forget: the response is a 202 handle and the turn runs headlessly (reconnect via the executions events stream or poll the runs API).
          */
         post: {
             parameters: {
@@ -2500,6 +2503,15 @@ interface paths {
                         "text/event-stream": unknown;
                     };
                 };
+                /** @description Fire-and-forget handle for a Claude Managed durable-lane turn accepted via `Prefer: respond-async`. The turn runs headlessly; reconnect via the executions events stream or poll the runs API. Carries a `Preference-Applied: respond-async` header. */
+                202: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["AsyncDispatchHandle"];
+                    };
+                };
                 /** @description Invalid agent ID or request body */
                 400: {
                     headers: {
@@ -2785,14 +2797,14 @@ interface paths {
         };
         /**
          * Stream execution events
-         * @description Reconnect to a durable Claude Managed agent turn: replay-and-tail its Server-Sent Events. Resolves the per-conversation session owner by (agentId, conversationId), replays buffered events with seq greater than `after`, then live-tails if the turn is still running. Each event carries an SSE `id:` line with its durable seq; reconnect after a disconnect (tab reload, sleep, stream timeout) by passing the last seen id as `after` to resume without missing or duplicating events. The vocabulary follows the same negotiation as the execution stream (`?events=`, `X-Persona-Version`, then the default-sse-event-format flag).
+         * @description Reconnect to a durable Claude Managed agent turn: replay-and-tail its Server-Sent Events. Resolves the per-conversation session owner by (agentId, conversationId), replays buffered events strictly past the `after` cursor, then live-tails if the turn is still running. Each event carries an SSE `id:` line — a durable row seq, or (unified vocabulary) a composite `<seq>.<subIndex>` when one durable row translates to multiple events. Reconnect after a disconnect (tab reload, sleep, stream timeout) by passing the last seen id verbatim as `after` to resume without missing or duplicating events. The vocabulary follows the same negotiation as the execution stream (`?events=`, `X-Persona-Version`, then the default-sse-event-format flag).
          */
         get: {
             parameters: {
                 query: {
                     /** @description The conversation key that, with the agent id, resolves the durable session owner. */
                     conversationId: string;
-                    /** @description Replay only events with seq greater than this value (the last seen SSE id). Defaults to 0. */
+                    /** @description Replay only events strictly past this cursor (the last seen SSE id, passed verbatim): a plain row seq, or the composite `<seq>.<subIndex>` a unified-vocabulary stream stamps on intermediate sub-frames. Defaults to 0 (replay the whole turn). */
                     after?: string;
                 };
                 header?: never;
@@ -6796,6 +6808,11 @@ interface paths {
                             untrustedContentHint?: boolean;
                         }[];
                         clientToolsFingerprint?: string;
+                        /** @description Customer-native auth proof for the Identity Exchange. When present and the surface has a matching integration, the verified tenant/end-user replace any body-asserted tenant/endUser (which are never trusted for web-embedded callers). Ignored until the Identity Exchange admission upgrade ships. */
+                        identityProof?: {
+                            provider: string;
+                            token: string;
+                        };
                         inputs?: {
                             [key: string]: unknown;
                         };
@@ -7073,6 +7090,10 @@ interface paths {
                     };
                     content: {
                         "application/json": {
+                            /** @description Present only for Runtype App data-plane sessions: the owning app id. Such sessions authorize `/v1/client/records` but cannot dispatch chat. */
+                            app?: {
+                                id: string;
+                            };
                             config: {
                                 placeholder?: string;
                                 theme?: unknown;
@@ -7080,7 +7101,8 @@ interface paths {
                             };
                             /** @description ISO-8601 session idle-expiry timestamp. */
                             expiresAt: string;
-                            flow: {
+                            /** @description Resolved flow/agent for this session. Omitted for data-only Runtype App sessions whose manifest declares record namespaces but no flow or agent (the `app` field is present instead). */
+                            flow?: {
                                 description?: string | null;
                                 /** @description Resolved flow or agent ID for this session. */
                                 id: string;
@@ -7144,18 +7166,110 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/client/resume": {
+    "/v1/client/records": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
+        /**
+         * List app records in a namespace
+         * @description List records in a granted namespace for a Runtype App data-plane session, newest first, cursor-paginated. The namespace must be declared in the app manifest (`data[]`).
+         */
+        get: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                    /** @description The record namespace to list. */
+                    namespace: string;
+                    cursor?: string;
+                    limit?: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Records page */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            data: {
+                                createdAt: string;
+                                /** @description Record id. */
+                                id: string;
+                                /** @description Caller-defined record fields. Server provenance is never echoed here. */
+                                metadata: {
+                                    [key: string]: unknown;
+                                };
+                                /** @description Record name (unique per namespace within the tenant). */
+                                name: string;
+                                /** @description The record namespace (record `type`). */
+                                namespace: string;
+                                updatedAt: string;
+                            }[];
+                            /** @description Opaque cursor for the next page, or null when exhausted. */
+                            nextCursor: string | null;
+                        };
+                    };
+                };
+                /** @description Validation error */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session not found or expired */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not an app token, origin mismatch, or namespace not granted */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description App has no active version */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
         put?: never;
         /**
-         * Resume a paused client execution
-         * @description Session-authenticated sibling of `POST /v1/dispatch/resume` for browser client-token sessions. Resumes a paused local-tool (WebMCP / clientTools) execution by supplying `toolOutputs` keyed by the per-call `toolCallId` (or tool name, legacy). Streams the continued flow/agent events over Server-Sent Events. Does not count against execution limits.
+         * Create an app record
+         * @description Create a record in a granted namespace from a Runtype App data-plane session. The namespace must have `read-write` access in the app manifest. Provenance (app, version, session) is stamped server-side.
          */
         post: {
             parameters: {
@@ -7167,55 +7281,40 @@ interface paths {
             requestBody: {
                 content: {
                     "application/json": {
-                        executionId: string;
-                        messages?: {
-                            content: string | ({
-                                text: string;
-                                /** @enum {string} */
-                                type: "text";
-                            } | {
-                                image: string;
-                                mimeType?: string;
-                                /** @enum {string} */
-                                type: "image";
-                            } | {
-                                data: string;
-                                filename: string;
-                                mimeType: string;
-                                /** @enum {string} */
-                                type: "file";
-                            } | {
-                                providerOptions?: {
-                                    [key: string]: unknown;
-                                };
-                                text: string;
-                                /** @enum {string} */
-                                type: "reasoning";
-                            })[];
-                            /** @enum {string} */
-                            role: "system" | "user" | "assistant";
-                        }[];
-                        sessionId: string;
-                        /** @default true */
-                        streamResponse?: boolean;
                         /** @default {} */
-                        toolOutputs?: {
+                        metadata?: {
                             [key: string]: unknown;
                         };
+                        name?: string;
+                        namespace: string;
+                        sessionId: string;
                     };
                 };
             };
             responses: {
-                /** @description SSE stream of the resumed execution events */
-                200: {
+                /** @description Record created */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "text/event-stream": unknown;
+                        "application/json": {
+                            createdAt: string;
+                            /** @description Record id. */
+                            id: string;
+                            /** @description Caller-defined record fields. Server provenance is never echoed here. */
+                            metadata: {
+                                [key: string]: unknown;
+                            };
+                            /** @description Record name (unique per namespace within the tenant). */
+                            name: string;
+                            /** @description The record namespace (record `type`). */
+                            namespace: string;
+                            updatedAt: string;
+                        };
                     };
                 };
-                /** @description Validation error */
+                /** @description Validation error or metadata too large */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -7233,7 +7332,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Client token inactive, origin mismatch, or execution belongs to another user */
+                /** @description Not an app token, origin mismatch, namespace not writable, or per-app record cap reached */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -7242,8 +7341,17 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description No paused execution found for the executionId */
-                404: {
+                /** @description App has no active version, or duplicate record name */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Write rate limit exceeded (per app or per session) */
+                429: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -7268,7 +7376,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/context-templates": {
+    "/v1/client/records/{id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -7276,49 +7384,45 @@ interface paths {
             cookie?: never;
         };
         /**
-         * List context templates
-         * @description Get all context templates for the authenticated user with optional type/name filtering and cursor pagination.
+         * Get an app record
+         * @description Fetch a single record by id for a Runtype App data-plane session. The record must belong to the app owner and live in a granted namespace.
          */
         get: {
             parameters: {
-                query?: {
-                    type?: string;
-                    name?: string;
-                    cursor?: string;
-                    limit?: string;
+                query: {
+                    sessionId: string;
                 };
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Paginated list of context templates */
+                /** @description Record */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            data: {
-                                config: {
-                                    [key: string]: unknown;
-                                };
-                                createdAt: string;
-                                id: string;
-                                name: string;
-                                organizationId: string | null;
-                                type: string;
-                                updatedAt: string;
-                                userId: string;
-                            }[];
-                            pagination: {
+                            createdAt: string;
+                            /** @description Record id. */
+                            id: string;
+                            /** @description Caller-defined record fields. Server provenance is never echoed here. */
+                            metadata: {
                                 [key: string]: unknown;
                             };
+                            /** @description Record name (unique per namespace within the tenant). */
+                            name: string;
+                            /** @description The record namespace (record `type`). */
+                            namespace: string;
+                            updatedAt: string;
                         };
                     };
                 };
-                /** @description Invalid parameters */
+                /** @description Validation error */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -7327,7 +7431,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Session not found or expired */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -7336,7 +7440,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Not an app token, origin mismatch, or namespace not granted */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -7345,6 +7449,24 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description Record not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description App has no active version */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
                 /** @description Internal server error */
                 500: {
                     headers: {
@@ -7356,47 +7478,59 @@ interface paths {
                 };
             };
         };
-        put?: never;
         /**
-         * Create context template
-         * @description Create a new context template. The config is validated based on the template type.
+         * Update an app record
+         * @description Update a record's metadata and/or name from a Runtype App data-plane session. The record's namespace must have `read-write` access. Server provenance is preserved. PUT is a full metadata replace. Pass `expectedUpdatedAt` (the `updatedAt` from your last read) for optimistic concurrency: a stale token is rejected with 409 and the current record so concurrent writers don't silently clobber each other.
          */
-        post: {
+        put: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
-            requestBody?: {
+            requestBody: {
                 content: {
                     "application/json": {
-                        [key: string]: unknown;
+                        /**
+                         * Format: date-time
+                         * @description Optional optimistic-concurrency token. Pass the `updatedAt` from your last read; the update is rejected with 409 (and the current record) if the stored record has changed since. Omit for last-write-wins.
+                         */
+                        expectedUpdatedAt?: string;
+                        metadata?: {
+                            [key: string]: unknown;
+                        };
+                        name?: string;
+                        sessionId: string;
                     };
                 };
             };
             responses: {
-                /** @description Created context template */
-                201: {
+                /** @description Updated record */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            config: {
-                                [key: string]: unknown;
-                            };
                             createdAt: string;
+                            /** @description Record id. */
                             id: string;
+                            /** @description Caller-defined record fields. Server provenance is never echoed here. */
+                            metadata: {
+                                [key: string]: unknown;
+                            };
+                            /** @description Record name (unique per namespace within the tenant). */
                             name: string;
-                            organizationId: string | null;
-                            type: string;
+                            /** @description The record namespace (record `type`). */
+                            namespace: string;
                             updatedAt: string;
-                            userId: string;
                         };
                     };
                 };
-                /** @description Validation error */
+                /** @description Validation error or metadata too large */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -7405,7 +7539,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Session not found or expired */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -7414,7 +7548,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Not an app token, origin mismatch, or namespace not writable */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -7423,6 +7557,51 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description Record not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description App has no active version, duplicate record name, or an optimistic-concurrency conflict (`expectedUpdatedAt` is stale — body carries the current record). */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            error: string;
+                            hint?: string;
+                            /** @description The current server record (present on an optimistic-concurrency conflict). */
+                            record?: {
+                                createdAt: string;
+                                /** @description Record id. */
+                                id: string;
+                                /** @description Caller-defined record fields. Server provenance is never echoed here. */
+                                metadata: {
+                                    [key: string]: unknown;
+                                };
+                                /** @description Record name (unique per namespace within the tenant). */
+                                name: string;
+                                /** @description The record namespace (record `type`). */
+                                namespace: string;
+                                updatedAt: string;
+                            };
+                        };
+                    };
+                };
+                /** @description Write rate limit exceeded (per app or per session) */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
                 /** @description Internal server error */
                 500: {
                     headers: {
@@ -7434,26 +7613,16 @@ interface paths {
                 };
             };
         };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/context-templates/{id}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
+        post?: never;
         /**
-         * Get context template
-         * @description Get a specific context template by ID.
+         * Delete an app record
+         * @description Delete a record by id from a Runtype App data-plane session. The record must belong to the app owner and its namespace must have `read-write` access.
          */
-        get: {
+        delete: {
             parameters: {
-                query?: never;
+                query: {
+                    sessionId: string;
+                };
                 header?: never;
                 path: {
                     id: string;
@@ -7462,27 +7631,14 @@ interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Context template */
-                200: {
+                /** @description Record deleted */
+                204: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content: {
-                        "application/json": {
-                            config: {
-                                [key: string]: unknown;
-                            };
-                            createdAt: string;
-                            id: string;
-                            name: string;
-                            organizationId: string | null;
-                            type: string;
-                            updatedAt: string;
-                            userId: string;
-                        };
-                    };
+                    content?: never;
                 };
-                /** @description Invalid context template ID */
+                /** @description Validation error */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -7491,7 +7647,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Session not found or expired */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -7500,7 +7656,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Not an app token, origin mismatch, or namespace not writable */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -7509,7 +7665,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Context template not found */
+                /** @description Record not found */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -7518,6 +7674,24 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description App has no active version */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Write rate limit exceeded (per app or per session) */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
                 /** @description Internal server error */
                 500: {
                     headers: {
@@ -7529,45 +7703,80 @@ interface paths {
                 };
             };
         };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/client/resume": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Update context template
-         * @description Update a context template. When config is provided it is validated based on the template type.
+         * Resume a paused client execution
+         * @description Session-authenticated sibling of `POST /v1/dispatch/resume` for browser client-token sessions. Resumes a paused local-tool (WebMCP / clientTools) execution by supplying `toolOutputs` keyed by the per-call `toolCallId` (or tool name, legacy). Streams the continued flow/agent events over Server-Sent Events. Does not count against execution limits.
          */
-        put: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
-            requestBody?: {
+            requestBody: {
                 content: {
                     "application/json": {
-                        [key: string]: unknown;
+                        executionId: string;
+                        messages?: {
+                            content: string | ({
+                                text: string;
+                                /** @enum {string} */
+                                type: "text";
+                            } | {
+                                image: string;
+                                mimeType?: string;
+                                /** @enum {string} */
+                                type: "image";
+                            } | {
+                                data: string;
+                                filename: string;
+                                mimeType: string;
+                                /** @enum {string} */
+                                type: "file";
+                            } | {
+                                providerOptions?: {
+                                    [key: string]: unknown;
+                                };
+                                text: string;
+                                /** @enum {string} */
+                                type: "reasoning";
+                            })[];
+                            /** @enum {string} */
+                            role: "system" | "user" | "assistant";
+                        }[];
+                        sessionId: string;
+                        /** @default true */
+                        streamResponse?: boolean;
+                        /** @default {} */
+                        toolOutputs?: {
+                            [key: string]: unknown;
+                        };
                     };
                 };
             };
             responses: {
-                /** @description Updated context template */
+                /** @description SSE stream of the resumed execution events */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            config: {
-                                [key: string]: unknown;
-                            };
-                            createdAt: string;
-                            id: string;
-                            name: string;
-                            organizationId: string | null;
-                            type: string;
-                            updatedAt: string;
-                            userId: string;
-                        };
+                        "text/event-stream": unknown;
                     };
                 };
                 /** @description Validation error */
@@ -7579,7 +7788,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Session not found or expired */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -7588,7 +7797,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Client token inactive, origin mismatch, or execution belongs to another user */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -7597,7 +7806,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Context template not found */
+                /** @description No paused execution found for the executionId */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -7617,30 +7826,385 @@ interface paths {
                 };
             };
         };
-        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/context-templates": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Delete context template
-         * @description Delete a context template by ID.
+         * List context templates
+         * @description Get all context templates for the authenticated user with optional type/name filtering and cursor pagination.
          */
-        delete: {
+        get: {
             parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    id: string;
+                query?: {
+                    type?: string;
+                    name?: string;
+                    cursor?: string;
+                    limit?: string;
                 };
+                header?: never;
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Context template deleted */
-                204: {
+                /** @description Paginated list of context templates */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": {
+                            data: {
+                                config: {
+                                    [key: string]: unknown;
+                                };
+                                createdAt: string;
+                                id: string;
+                                name: string;
+                                organizationId: string | null;
+                                type: string;
+                                updatedAt: string;
+                                userId: string;
+                            }[];
+                            pagination: {
+                                [key: string]: unknown;
+                            };
+                        };
+                    };
                 };
-                /** @description Invalid context template ID */
+                /** @description Invalid parameters */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Create context template
+         * @description Create a new context template. The config is validated based on the template type.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            responses: {
+                /** @description Created context template */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            config: {
+                                [key: string]: unknown;
+                            };
+                            createdAt: string;
+                            id: string;
+                            name: string;
+                            organizationId: string | null;
+                            type: string;
+                            updatedAt: string;
+                            userId: string;
+                        };
+                    };
+                };
+                /** @description Validation error */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/context-templates/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get context template
+         * @description Get a specific context template by ID.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Context template */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            config: {
+                                [key: string]: unknown;
+                            };
+                            createdAt: string;
+                            id: string;
+                            name: string;
+                            organizationId: string | null;
+                            type: string;
+                            updatedAt: string;
+                            userId: string;
+                        };
+                    };
+                };
+                /** @description Invalid context template ID */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Context template not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        /**
+         * Update context template
+         * @description Update a context template. When config is provided it is validated based on the template type.
+         */
+        put: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        [key: string]: unknown;
+                    };
+                };
+            };
+            responses: {
+                /** @description Updated context template */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            config: {
+                                [key: string]: unknown;
+                            };
+                            createdAt: string;
+                            id: string;
+                            name: string;
+                            organizationId: string | null;
+                            type: string;
+                            updatedAt: string;
+                            userId: string;
+                        };
+                    };
+                };
+                /** @description Validation error */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Context template not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        post?: never;
+        /**
+         * Delete context template
+         * @description Delete a context template by ID.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Context template deleted */
+                204: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Invalid context template ID */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -8692,7 +9256,7 @@ interface paths {
         put?: never;
         /**
          * Execute a flow or agent
-         * @description Main dispatch endpoint for flow and agent execution with record resolution. Supports streaming via SSE or synchronous JSON responses.
+         * @description Main dispatch endpoint for flow and agent execution with record resolution. Supports streaming via SSE or synchronous JSON responses. Send the RFC 7240 `Prefer: respond-async` header to run a Claude Managed durable-lane turn (a saved agent dispatched with a conversationId) fire-and-forget: the response is a 202 handle and the turn runs headlessly (reconnect via the executions events stream or poll the runs API).
          */
         post: {
             parameters: {
@@ -8718,6 +9282,15 @@ interface paths {
                         "text/event-stream": unknown;
                     };
                 };
+                /** @description Fire-and-forget handle for a Claude Managed durable-lane turn accepted via `Prefer: respond-async`. The turn runs headlessly; reconnect via the executions events stream or poll the runs API. Carries a `Preference-Applied: respond-async` header. */
+                202: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["AsyncDispatchHandle"];
+                    };
+                };
                 /** @description Validation error */
                 400: {
                     headers: {
@@ -9278,7 +9851,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/eval/analyze-steps": {
+    "/v1/end-user-integrations/{provider}/connect": {
         parameters: {
             query?: never;
             header?: never;
@@ -9288,234 +9861,50 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Analyze step results
-         * @description Analyze step results for keyword/phrase occurrences across evals.
+         * Begin end-user OAuth connection
+         * @description Verifies the end user’s identity proof, projects a durable end-user identity, and returns the third-party authorize URL with a single-use state. Builder-authenticated; the end-user identity comes only from the verified proof.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: {
-                content: {
-                    "application/json": {
-                        caseSensitive?: boolean;
-                        evalGroupId: string;
-                        searchTerms: string[];
-                        stepIds: string[];
-                    };
-                };
-            };
-            responses: {
-                /** @description Analysis returned */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": {
-                            evalGroupId: string;
-                            results: {
-                                batchExecutionId: string;
-                                evalConfig?: unknown;
-                                evalName?: string;
-                                termAnalysis: {
-                                    occurrenceRate: number;
-                                    stepsContainingTerm: number;
-                                    term: string;
-                                    totalOccurrences: number;
-                                }[];
-                                totalStepsAnalyzed: number;
-                            }[];
-                            searchTerms: string[];
-                            stepIds: string[];
-                        };
-                    };
-                };
-                /** @description Invalid request */
-                400: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Unauthorized */
-                401: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Forbidden */
-                403: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Internal server error */
-                500: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-            };
-        };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/eval/batches": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * List eval batches
-         * @description List all eval batches for the current user with optional filtering and pagination.
-         */
-        get: {
-            parameters: {
-                query?: {
-                    /** @description Number of results (default 50, max 100) */
-                    limit?: string;
-                    /** @description Pagination offset */
-                    offset?: string;
-                    /** @description Filter by status (queued|processing|completed|failed) */
-                    status?: string;
-                };
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description Eval batches returned */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": {
-                            batches: {
-                                [key: string]: unknown;
-                            }[];
-                            count: number;
-                            limit: number;
-                            offset: number;
-                        };
-                    };
-                };
-                /** @description Unauthorized */
-                401: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
-                };
-                /** @description Internal server error */
-                500: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["Error"];
-                    };
+                path: {
+                    /** @description OAuth connector provider slug, e.g. `github`. */
+                    provider: string;
                 };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/eval/compare": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Compare evals
-         * @description Compare aggregate metrics across eval batches in a group.
-         */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
                 cookie?: never;
             };
             requestBody?: {
                 content: {
                     "application/json": {
-                        evalGroupId: string;
-                        stepIds?: string[];
+                        /** @description The end user's customer-native Identity-Exchange proof (a JWT). Verified server-side against the builder’s configured identity integrations; the verified subject becomes the end-user identity. Never a body-asserted id. */
+                        identityProof: string;
+                        /**
+                         * Format: uri
+                         * @description Where to redirect the end user after the OAuth callback completes. Must be a safe http(s)/app-scheme URL (open-redirect schemes are rejected).
+                         */
+                        redirectAfter?: string;
                     };
                 };
             };
             responses: {
-                /** @description Comparison returned */
+                /** @description Authorize URL issued */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            evalGroupId: string;
-                            evals: {
-                                batchExecutionId: string;
-                                evalConfig?: unknown;
-                                evalName?: string;
-                                metrics: {
-                                    avgCostPerRecord: number;
-                                    avgDurationPerRecord: number;
-                                    failedSteps: number;
-                                    successRate: number;
-                                    successfulSteps: number;
-                                    totalCompletionTokens: number;
-                                    totalCost: number;
-                                    totalDurationMs: number;
-                                    totalPromptTokens: number;
-                                    totalSteps: number;
-                                };
-                            }[];
+                            /** @description Redirect the end user here to authorize the third-party account. */
+                            authorizeUrl: string;
+                            /** @description The durable end-user id (eu_*) the token will scope to. */
+                            endUserId: string;
+                            /** @description Opaque single-use CSRF token (bound in KV). */
+                            state: string;
                         };
                     };
                 };
-                /** @description Invalid request */
+                /** @description Invalid request body or redirect */
                 400: {
                     headers: {
                         [name: string]: unknown;
@@ -9524,7 +9913,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
+                /** @description Unauthorized, or identity proof verification failed */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -9533,7 +9922,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Forbidden */
+                /** @description Forbidden, or the proof did not reach verified end-user assurance */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -9542,7 +9931,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Not found */
+                /** @description Unknown connector provider */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -9551,8 +9940,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description Connector is not configured on this deployment */
+                501: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -9568,7 +9957,7 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/eval/compare-record": {
+    "/v1/eval/analyze-steps": {
         parameters: {
             query?: never;
             header?: never;
@@ -9578,8 +9967,8 @@ interface paths {
         get?: never;
         put?: never;
         /**
-         * Compare record across evals
-         * @description Compare results for a specific record across eval batches in a group.
+         * Analyze step results
+         * @description Analyze step results for keyword/phrase occurrences across evals.
          */
         post: {
             parameters: {
@@ -9591,14 +9980,15 @@ interface paths {
             requestBody?: {
                 content: {
                     "application/json": {
+                        caseSensitive?: boolean;
                         evalGroupId: string;
-                        recordId: string;
-                        stepIds?: string[];
+                        searchTerms: string[];
+                        stepIds: string[];
                     };
                 };
             };
             responses: {
-                /** @description Record comparison returned */
+                /** @description Analysis returned */
                 200: {
                     headers: {
                         [name: string]: unknown;
@@ -9606,27 +9996,322 @@ interface paths {
                     content: {
                         "application/json": {
                             evalGroupId: string;
-                            evals: {
+                            results: {
                                 batchExecutionId: string;
                                 evalConfig?: unknown;
                                 evalName?: string;
-                                stepResults: {
-                                    completionTokens: number | null;
-                                    durationMs: number | null;
-                                    error?: string;
-                                    executedAt: string;
-                                    modelUsed: string | null;
-                                    output: string | null;
-                                    promptTokens: number | null;
-                                    stepId: string;
-                                    stepName: string | null;
-                                    stepResultId: string;
-                                    stepType: string;
-                                    toolCalls: unknown[];
-                                    totalCost: number | null;
+                                termAnalysis: {
+                                    occurrenceRate: number;
+                                    stepsContainingTerm: number;
+                                    term: string;
+                                    totalOccurrences: number;
                                 }[];
+                                totalStepsAnalyzed: number;
                             }[];
-                            recordId: string;
+                            searchTerms: string[];
+                            stepIds: string[];
+                        };
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/eval/batches": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List eval batches
+         * @description List all eval batches for the current user with optional filtering and pagination.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    /** @description Number of results (default 50, max 100) */
+                    limit?: string;
+                    /** @description Pagination offset */
+                    offset?: string;
+                    /** @description Filter by status (queued|processing|completed|failed) */
+                    status?: string;
+                    /** @description Filter by run origin: "suite" = runs linked to an eval suite (CI gates, suite Run button); "adhoc" = suite-less runs (ad-hoc config comparisons, legacy evals). */
+                    origin?: "suite" | "adhoc";
+                    /** @description Filter to runs of a specific eval suite. Server-side, so a suite with sparse runs is not crowded out of the page by other suites. */
+                    evalSuiteId?: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Eval batches returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            batches: {
+                                [key: string]: unknown;
+                            }[];
+                            count: number;
+                            /** @description True when this page came back full — there may be more rows past it. */
+                            hasMore: boolean;
+                            limit: number;
+                            offset: number;
+                        };
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/eval/compare": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Compare evals
+         * @description Compare aggregate metrics across eval batches in a group.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        evalGroupId: string;
+                        stepIds?: string[];
+                    };
+                };
+            };
+            responses: {
+                /** @description Comparison returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            evalGroupId: string;
+                            evals: {
+                                batchExecutionId: string;
+                                evalConfig?: unknown;
+                                evalName?: string;
+                                metrics: {
+                                    avgCostPerRecord: number;
+                                    avgDurationPerRecord: number;
+                                    failedSteps: number;
+                                    successRate: number;
+                                    successfulSteps: number;
+                                    totalCompletionTokens: number;
+                                    totalCost: number;
+                                    totalDurationMs: number;
+                                    totalPromptTokens: number;
+                                    totalSteps: number;
+                                };
+                            }[];
+                        };
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/eval/compare-record": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Compare record across evals
+         * @description Compare results for a specific record across eval batches in a group.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        evalGroupId: string;
+                        recordId: string;
+                        stepIds?: string[];
+                    };
+                };
+            };
+            responses: {
+                /** @description Record comparison returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            evalGroupId: string;
+                            evals: {
+                                batchExecutionId: string;
+                                evalConfig?: unknown;
+                                evalName?: string;
+                                stepResults: {
+                                    completionTokens: number | null;
+                                    durationMs: number | null;
+                                    error?: string;
+                                    executedAt: string;
+                                    modelUsed: string | null;
+                                    output: string | null;
+                                    promptTokens: number | null;
+                                    stepId: string;
+                                    stepName: string | null;
+                                    stepResultId: string;
+                                    stepType: string;
+                                    toolCalls: unknown[];
+                                    totalCost: number | null;
+                                }[];
+                            }[];
+                            recordId: string;
                         };
                     };
                 };
@@ -9968,7 +10653,7 @@ interface paths {
         put?: never;
         /**
          * Run eval suite synchronously
-         * @description Run every case of an eval suite against its target flow/agent and grade the outputs with the suite graders, returning the suite score + per-case gate outcomes in one response. Powers the `runtype eval` CI gate. Synchronous and ephemeral: no batch is created and no scores are persisted (use /eval/submit for a durable, dashboard-visible run). Bounded — suites over the case limit must use the batch path. Flow and standard-agent targets are supported (in both saved and inline/virtual modes); external and claude_managed agent targets are not.
+         * @description Run every case of an eval suite against its target flow/agent and grade the outputs with the suite graders, returning the suite score + per-case gate outcomes in one response. Powers the `runtype eval` CI gate. Saved-suite runs persist by default: the run gets a durable id (`runId`) and per-case scores queryable via GET /eval/runs/{runId}/scores; pass `virtual: true` to skip persistence. Inline definition runs are always ephemeral. Bounded — suites over the case limit must use the batch path (/eval/submit). Flow and standard-agent targets are supported (in both saved and inline/virtual modes); external and claude_managed agent targets are not.
          */
         post: {
             parameters: {
@@ -10014,6 +10699,8 @@ interface paths {
                         /** @description Strict mode (the `runtype eval --strict` gate): a soft grader miss fails its case like a gate miss. Default false — soft misses are reported per-outcome but do not fail the suite. */
                         strict?: boolean;
                         suiteId?: string;
+                        /** @description Skip persistence for a saved-suite run: no run row, no persisted scores. Saved-suite runs persist by default; inline definition runs are always ephemeral regardless of this flag. */
+                        virtual?: boolean;
                     };
                 };
             };
@@ -10089,6 +10776,83 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/eval/runs/{batchId}/scores": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get persisted grader scores for an eval run
+         * @description Return the persisted per-case grader scores for a run (a `batchExecutions` row) — the read side of eval score persistence. Grader outcomes use the same shape as the synchronous POST /eval/run response, so live and historical results render identically. Runs land here from persisted saved-suite runs (POST /eval/run) and completed suite-linked batch runs. Returns an empty case list for a run with no persisted scores (ephemeral/virtual runs, ad-hoc comparisons, legacy evals).
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    batchId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Per-case grader scores for the run */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalRunScoresResponse"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Run not found in this account scope */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/eval/stream": {
         parameters: {
             query?: never;
@@ -10282,6 +11046,833 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/eval/suites": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List eval suites
+         * @description List eval suites in the account scope with case counts and each suite’s latest run + score. Filter by target with flowId/agentId.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    /** @description Filter to suites targeting this flow */
+                    flowId?: string;
+                    /** @description Filter to suites targeting this agent */
+                    agentId?: string;
+                    /** @description Number of results (default 50, max 100) */
+                    limit?: string;
+                    /** @description Pagination offset */
+                    offset?: string;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Eval suites returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalSuiteListResponse"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Create eval suite
+         * @description Create an eval suite (named test cases + graders) attached to one flow or agent, optionally with initial cases. Suites created here are dashboard/API-managed; config-as-code suites converge via POST /eval/ensure instead.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        agentId?: string;
+                        cases?: {
+                            enabled?: boolean;
+                            expected?: {
+                                facts?: string[];
+                                json?: unknown;
+                                text?: string;
+                            };
+                            /** @default {} */
+                            input?: {
+                                messages?: {
+                                    content: string;
+                                    role: string;
+                                }[];
+                                variables?: {
+                                    [key: string]: unknown;
+                                };
+                            };
+                            name: string;
+                            notes?: string;
+                            /**
+                             * @description Case provenance. Defaults to "manual" when omitted.
+                             * @enum {string}
+                             */
+                            origin?: "manual" | "saved_from_run" | "generated" | "imported" | "fpo";
+                        }[];
+                        description?: string;
+                        flowId?: string;
+                        /**
+                         * @description Ordered grader configs applied to every case (suite-level graders).
+                         * @default []
+                         */
+                        graders?: ({
+                            kind: string;
+                        } & {
+                            [key: string]: unknown;
+                        })[];
+                        /** @description Make this the default eval for its target (clears the flag on any other suite for the same target). */
+                        isDefault?: boolean;
+                        name: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Suite created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalSuiteDetail"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/eval/suites/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get eval suite
+         * @description Get an eval suite including its cases and latest run + score.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Eval suite returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalSuiteDetail"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        /**
+         * Delete eval suite
+         * @description Delete an eval suite and its cases. Past runs and their persisted scores survive (scores keep the case name snapshot).
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Suite deleted */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            success: boolean;
+                        };
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        /**
+         * Update eval suite
+         * @description Update a suite’s Definition (name, description, graders) or state (default flag, baseline run pin). The target is immutable — create a new suite to evaluate a different flow/agent. Definition edits stamp provenance; a graders change invalidates the config-as-code content hash so the next ensure re-converges.
+         */
+        patch: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /** @description Pin a run of this suite as the comparison baseline; null clears the pin. */
+                        baselineBatchExecutionId?: string | null;
+                        description?: string | null;
+                        graders?: ({
+                            kind: string;
+                        } & {
+                            [key: string]: unknown;
+                        })[];
+                        isDefault?: boolean;
+                        name?: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Suite updated */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalSuiteSummary"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        trace?: never;
+    };
+    "/v1/eval/suites/{id}/cases": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Add eval cases
+         * @description Add one or more test cases to an eval suite. Cases are server-authoritative data: adding them does not affect the suite’s config-as-code provenance.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        cases: {
+                            enabled?: boolean;
+                            expected?: {
+                                facts?: string[];
+                                json?: unknown;
+                                text?: string;
+                            };
+                            /** @default {} */
+                            input?: {
+                                messages?: {
+                                    content: string;
+                                    role: string;
+                                }[];
+                                variables?: {
+                                    [key: string]: unknown;
+                                };
+                            };
+                            name: string;
+                            notes?: string;
+                            /**
+                             * @description Case provenance. Defaults to "manual" when omitted.
+                             * @enum {string}
+                             */
+                            origin?: "manual" | "saved_from_run" | "generated" | "imported" | "fpo";
+                        }[];
+                    };
+                };
+            };
+            responses: {
+                /** @description Cases created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalCasesCreated"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/eval/suites/{id}/cases/{caseId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Delete eval case
+         * @description Delete a test case. Persisted scores from past runs survive with the case name snapshot (caseId nulls out).
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                    caseId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Case deleted */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            success: boolean;
+                        };
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        /**
+         * Update eval case
+         * @description Edit, enable, or disable a test case.
+         */
+        patch: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                    caseId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        enabled?: boolean;
+                        expected?: {
+                            facts?: string[];
+                            json?: unknown;
+                            text?: string;
+                        } | null;
+                        input?: {
+                            messages?: {
+                                content: string;
+                                role: string;
+                            }[];
+                            variables?: {
+                                [key: string]: unknown;
+                            };
+                        };
+                        name?: string;
+                        notes?: string | null;
+                    };
+                };
+            };
+            responses: {
+                /** @description Case updated */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalCase"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        trace?: never;
+    };
+    "/v1/eval/suites/{id}/run": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Run eval suite
+         * @description Run every enabled case of the suite against its target and grade the outputs with the suite graders. Suites within the synchronous case limit (50) run inline and return the full scored result; larger suites are queued as a durable run (202) that is graded when it completes — poll GET /eval/runs/{runId}/scores. Both paths persist per-case scores to the same run history.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Force the execution path. Default: sync for suites within the synchronous case limit (50), batch above it.
+                         * @enum {string}
+                         */
+                        mode?: "sync" | "batch";
+                        /** @description Strict grading: a soft grader miss fails its case like a gate miss. */
+                        strict?: boolean;
+                    };
+                };
+            };
+            responses: {
+                /** @description Suite ran synchronously — score + per-case grader outcomes */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["RunEvalResponse"];
+                    };
+                };
+                /** @description Suite queued as a durable run (scored on completion) */
+                202: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["EvalSuiteRunQueued"];
+                    };
+                };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Daily eval limit exceeded */
+                402: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/eval/{id}/results": {
         parameters: {
             query?: never;
@@ -11444,7 +13035,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                         name: string;
@@ -11456,7 +13047,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                     };
@@ -11851,7 +13442,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "fetch-github" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-text" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                         name?: string;
@@ -12109,45 +13700,427 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/flows/{id}/publish": {
+    "/v1/flows/{id}/publish": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Publish flow
+         * @description Promote a flow draft version to published.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Flow published */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            message: string;
+                            publishedVersionId: string;
+                            success: boolean;
+                        };
+                    };
+                };
+                /** @description Invalid flow ID */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Flow or draft version not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/flows/{id}/run-on-record-type": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Run flow on records of a type
+         * @description Execute a flow against every record of the given type. Small batches (≤10) execute immediately and return 200; larger batches return 202 with a scheduled batchId.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        recordType: string;
+                    };
+                };
+            };
+            responses: {
+                /** @description Batch executed immediately */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            batchId: string;
+                            completedAt: string;
+                            executedImmediately: boolean;
+                            failureCount: number;
+                            flowId: string;
+                            recordCount: number;
+                            recordType: string;
+                            results: {
+                                contextSteps?: number;
+                                error?: string;
+                                executionId?: string;
+                                executionTime?: number;
+                                promptsExecuted?: number;
+                                recordId: string;
+                                recordName: string | null;
+                                success: boolean;
+                            }[];
+                            /** @enum {string} */
+                            status: "completed";
+                            success: boolean;
+                            successCount: number;
+                        };
+                    };
+                };
+                /** @description Batch scheduled for execution */
+                202: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            batchId: string;
+                            flowId: string;
+                            message: string;
+                            recordCount: number;
+                            recordType: string;
+                            records: {
+                                id: string;
+                                name: string | null;
+                                type: string;
+                            }[];
+                            scheduledAt: string;
+                            /** @enum {string} */
+                            status: "scheduled";
+                            success: boolean;
+                        };
+                    };
+                };
+                /** @description Validation error or no matching records */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Daily execution limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/flows/{id}/step-results": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List flow step results
+         * @description Get unified step execution results for a flow with filtering and offset pagination.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    recordId?: string;
+                    batchId?: string;
+                    status?: string;
+                    stepId?: string;
+                    from?: string;
+                    to?: string;
+                    sortBy?: string;
+                    sortOrder?: "asc" | "desc";
+                    limit?: string;
+                    offset?: string;
+                };
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Step results */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            data: {
+                                batchExecutionId: string | null;
+                                completedAt: string | null;
+                                completionTokens?: number | null;
+                                createdAt: string;
+                                durationMs: number | null;
+                                errorMessage?: string | null;
+                                estimatedCost?: string | null;
+                                executionSessionId: string | null;
+                                flowId: string | null;
+                                flowVersionId: string | null;
+                                id: string;
+                                inputVariables?: unknown;
+                                modelUsed?: string | null;
+                                order: number | null;
+                                organizationId: string | null;
+                                outputPreview: string | null;
+                                promptTokens?: number | null;
+                                recordId: string | null;
+                                recordMetadata?: unknown;
+                                recordName: string | null;
+                                resolvedPrompt?: string | null;
+                                retryCount?: number | null;
+                                startedAt: string | null;
+                                status: string;
+                                stepConfig?: unknown;
+                                stepId: string | null;
+                                stepName: string;
+                                stepType: string;
+                                totalTokens?: number | null;
+                                userId: string;
+                            }[];
+                            pagination: {
+                                hasMore: boolean;
+                                limit: number;
+                                offset: number;
+                                returned: number;
+                            };
+                        };
+                    };
+                };
+                /** @description Invalid parameters */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Flow not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/identity-integrations": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Publish flow
-         * @description Promote a flow draft version to published.
+         * List identity integrations
+         * @description Lists the owner's Identity Exchange integrations (verification descriptors for customer-native auth proofs). Credentials are redacted to a presence list.
          */
-        post: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Flow published */
+                /** @description Successful response */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            message: string;
-                            publishedVersionId: string;
-                            success: boolean;
+                            identityIntegrations: {
+                                configuredCredentials: ("clientSecret" | "managementApiKey")[];
+                                createdAt: string;
+                                descriptor: {
+                                    [key: string]: unknown;
+                                };
+                                id: string;
+                                issuer: string | null;
+                                /** @enum {string} */
+                                kind: "oidc-jwt" | "session" | "custom";
+                                name: string;
+                                provider: string;
+                                /** @enum {string} */
+                                status: "active" | "disabled";
+                                updatedAt: string;
+                            }[];
                         };
                     };
                 };
-                /** @description Invalid flow ID */
-                400: {
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Forbidden */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12155,6 +14128,78 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+            };
+        };
+        put?: never;
+        /**
+         * Create an identity integration
+         * @description Creates an Identity Exchange integration. The descriptor is validated against the shared schema and the server mints the integration id (the cross-integration isolation namespace).
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /** @description Provider management/client credentials. Sealed at rest, bound to this integration, and never returned by any endpoint. Set a field to rotate it; null clears it. */
+                        credentials?: {
+                            clientSecret?: string | null;
+                            managementApiKey?: string | null;
+                        };
+                        /** @description The IdentityAdapterDescriptor (without id — the server mints it). Validated against the shared identityAdapterDescriptorSchema: discriminated by 'kind' ('oidc-jwt' | 'session' | 'custom'); verifiable kinds require https issuer/jwksUri, a non-wildcard audience, and asymmetric-only allowedAlgorithms; maxAssurance may only lower the kind ceiling ('oidc-jwt' → 'verified', others → 'asserted'). */
+                        descriptor: {
+                            [key: string]: unknown;
+                        };
+                        name: string;
+                        /** @enum {string} */
+                        provider: "clerk" | "workos" | "auth0" | "okta" | "better-auth" | "oidc" | "custom";
+                    };
+                };
+            };
+            responses: {
+                /** @description Identity integration created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            configuredCredentials: ("clientSecret" | "managementApiKey")[];
+                            createdAt: string;
+                            descriptor: {
+                                [key: string]: unknown;
+                            };
+                            id: string;
+                            issuer: string | null;
+                            /** @enum {string} */
+                            kind: "oidc-jwt" | "session" | "custom";
+                            name: string;
+                            provider: string;
+                            /** @enum {string} */
+                            status: "active" | "disabled";
+                            updatedAt: string;
+                        };
+                    };
+                };
+                /** @description Invalid descriptor or request body */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            error: string;
+                            issues?: {
+                                message: string;
+                                path: string;
+                            }[];
+                        };
+                    };
+                };
                 /** @description Unauthorized */
                 401: {
                     headers: {
@@ -12164,7 +14209,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Forbidden */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -12173,8 +14218,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Flow or draft version not found */
-                404: {
+                /** @description An active integration for this issuer already exists */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12199,93 +14244,61 @@ interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/flows/{id}/run-on-record-type": {
+    "/v1/identity-integrations/{id}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
-        /**
-         * Run flow on records of a type
-         * @description Execute a flow against every record of the given type. Small batches (≤10) execute immediately and return 200; larger batches return 202 with a scheduled batchId.
-         */
-        post: {
+        /** Get an identity integration */
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
+                    /** @description Identity integration id (idint_...) */
                     id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": {
-                        recordType: string;
-                    };
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Batch executed immediately */
+                /** @description Successful response */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            batchId: string;
-                            completedAt: string;
-                            executedImmediately: boolean;
-                            failureCount: number;
-                            flowId: string;
-                            recordCount: number;
-                            recordType: string;
-                            results: {
-                                contextSteps?: number;
-                                error?: string;
-                                executionId?: string;
-                                executionTime?: number;
-                                promptsExecuted?: number;
-                                recordId: string;
-                                recordName: string | null;
-                                success: boolean;
-                            }[];
+                            configuredCredentials: ("clientSecret" | "managementApiKey")[];
+                            createdAt: string;
+                            descriptor: {
+                                [key: string]: unknown;
+                            };
+                            id: string;
+                            issuer: string | null;
                             /** @enum {string} */
-                            status: "completed";
-                            success: boolean;
-                            successCount: number;
+                            kind: "oidc-jwt" | "session" | "custom";
+                            name: string;
+                            provider: string;
+                            /** @enum {string} */
+                            status: "active" | "disabled";
+                            updatedAt: string;
                         };
                     };
                 };
-                /** @description Batch scheduled for execution */
-                202: {
+                /** @description Unauthorized */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            batchId: string;
-                            flowId: string;
-                            message: string;
-                            recordCount: number;
-                            recordType: string;
-                            records: {
-                                id: string;
-                                name: string | null;
-                                type: string;
-                            }[];
-                            scheduledAt: string;
-                            /** @enum {string} */
-                            status: "scheduled";
-                            success: boolean;
-                        };
+                        "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Validation error or no matching records */
-                400: {
+                /** @description Forbidden */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12293,8 +14306,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Unauthorized */
-                401: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12302,8 +14315,39 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
-                403: {
+            };
+        };
+        put?: never;
+        post?: never;
+        /**
+         * Delete an identity integration
+         * @description Hard-deletes the integration and its sealed credentials. Existing projected identities (product_tenants / end_users rows carrying this integration id) are kept — the id remains their isolation namespace.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    /** @description Identity integration id (idint_...) */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Identity integration deleted */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            success: boolean;
+                        };
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12311,8 +14355,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Daily execution limit exceeded */
-                429: {
+                /** @description Forbidden */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12320,8 +14364,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12331,100 +14375,80 @@ interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/flows/{id}/step-results": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
         /**
-         * List flow step results
-         * @description Get unified step execution results for a flow with filtering and offset pagination.
+         * Update an identity integration
+         * @description Updates name/provider/status, replaces the descriptor (re-validated), and/or rotates credentials (per-field: string sets, null clears, absent keeps).
          */
-        get: {
+        patch: {
             parameters: {
-                query?: {
-                    recordId?: string;
-                    batchId?: string;
-                    status?: string;
-                    stepId?: string;
-                    from?: string;
-                    to?: string;
-                    sortBy?: string;
-                    sortOrder?: "asc" | "desc";
-                    limit?: string;
-                    offset?: string;
-                };
+                query?: never;
                 header?: never;
                 path: {
+                    /** @description Identity integration id (idint_...) */
                     id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /** @description Provider management/client credentials. Sealed at rest, bound to this integration, and never returned by any endpoint. Set a field to rotate it; null clears it. */
+                        credentials?: {
+                            clientSecret?: string | null;
+                            managementApiKey?: string | null;
+                        };
+                        /** @description The IdentityAdapterDescriptor (without id — the server mints it). Validated against the shared identityAdapterDescriptorSchema: discriminated by 'kind' ('oidc-jwt' | 'session' | 'custom'); verifiable kinds require https issuer/jwksUri, a non-wildcard audience, and asymmetric-only allowedAlgorithms; maxAssurance may only lower the kind ceiling ('oidc-jwt' → 'verified', others → 'asserted'). */
+                        descriptor?: {
+                            [key: string]: unknown;
+                        };
+                        name?: string;
+                        /** @enum {string} */
+                        provider?: "clerk" | "workos" | "auth0" | "okta" | "better-auth" | "oidc" | "custom";
+                        /** @enum {string} */
+                        status?: "active" | "disabled";
+                    };
+                };
+            };
             responses: {
-                /** @description Step results */
+                /** @description Identity integration updated */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
                         "application/json": {
-                            data: {
-                                batchExecutionId: string | null;
-                                completedAt: string | null;
-                                completionTokens?: number | null;
-                                createdAt: string;
-                                durationMs: number | null;
-                                errorMessage?: string | null;
-                                estimatedCost?: string | null;
-                                executionSessionId: string | null;
-                                flowId: string | null;
-                                flowVersionId: string | null;
-                                id: string;
-                                inputVariables?: unknown;
-                                modelUsed?: string | null;
-                                order: number | null;
-                                organizationId: string | null;
-                                outputPreview: string | null;
-                                promptTokens?: number | null;
-                                recordId: string | null;
-                                recordMetadata?: unknown;
-                                recordName: string | null;
-                                resolvedPrompt?: string | null;
-                                retryCount?: number | null;
-                                startedAt: string | null;
-                                status: string;
-                                stepConfig?: unknown;
-                                stepId: string | null;
-                                stepName: string;
-                                stepType: string;
-                                totalTokens?: number | null;
-                                userId: string;
-                            }[];
-                            pagination: {
-                                hasMore: boolean;
-                                limit: number;
-                                offset: number;
-                                returned: number;
+                            configuredCredentials: ("clientSecret" | "managementApiKey")[];
+                            createdAt: string;
+                            descriptor: {
+                                [key: string]: unknown;
                             };
+                            id: string;
+                            issuer: string | null;
+                            /** @enum {string} */
+                            kind: "oidc-jwt" | "session" | "custom";
+                            name: string;
+                            provider: string;
+                            /** @enum {string} */
+                            status: "active" | "disabled";
+                            updatedAt: string;
                         };
                     };
                 };
-                /** @description Invalid parameters */
+                /** @description Invalid descriptor or request body */
                 400: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": {
+                            error: string;
+                            issues?: {
+                                message: string;
+                                path: string;
+                            }[];
+                        };
                     };
                 };
                 /** @description Unauthorized */
@@ -12436,7 +14460,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Insufficient permissions */
+                /** @description Forbidden */
                 403: {
                     headers: {
                         [name: string]: unknown;
@@ -12445,7 +14469,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Flow not found */
+                /** @description Not found */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -12454,8 +14478,8 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description An active integration for this issuer already exists */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -12465,12 +14489,6 @@ interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
         trace?: never;
     };
     "/v1/integration-configs": {
@@ -26964,6 +28982,15 @@ interface paths {
                         };
                     };
                 };
+                /** @description Invalid request */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
                 /** @description Unauthorized */
                 401: {
                     headers: {
@@ -31469,10 +33496,14 @@ interface paths {
                             data: {
                                 createdAt: string;
                                 description: string | null;
+                                /** @description End User scope (eu_*) when the secret is end-user-scoped; null otherwise. */
+                                endUserId: string | null;
                                 id: string;
                                 key: string;
                                 lastRotatedAt: string | null;
                                 phantomToken: string | null;
+                                /** @description Product Tenant scope (tnt_*) when the secret is tenant-scoped; null for org-level. */
+                                productTenantId: string | null;
                                 status: string;
                                 updatedAt: string;
                                 valuePreview: string | null;
@@ -31524,7 +33555,9 @@ interface paths {
                 content: {
                     "application/json": {
                         description?: string;
+                        endUserId?: string;
                         key: string;
+                        productTenantId?: string;
                         value?: string;
                     };
                 };
@@ -31540,10 +33573,14 @@ interface paths {
                             data: {
                                 createdAt: string;
                                 description: string | null;
+                                /** @description End User scope (eu_*) when the secret is end-user-scoped; null otherwise. */
+                                endUserId: string | null;
                                 id: string;
                                 key: string;
                                 lastRotatedAt: string | null;
                                 phantomToken: string | null;
+                                /** @description Product Tenant scope (tnt_*) when the secret is tenant-scoped; null for org-level. */
+                                productTenantId: string | null;
                                 status: string;
                                 updatedAt: string;
                                 valuePreview: string | null;
@@ -32080,10 +34117,14 @@ interface paths {
                             data: {
                                 createdAt: string;
                                 description: string | null;
+                                /** @description End User scope (eu_*) when the secret is end-user-scoped; null otherwise. */
+                                endUserId: string | null;
                                 id: string;
                                 key: string;
                                 lastRotatedAt: string | null;
                                 phantomToken: string | null;
+                                /** @description Product Tenant scope (tnt_*) when the secret is tenant-scoped; null for org-level. */
+                                productTenantId: string | null;
                                 status: string;
                                 updatedAt: string;
                                 valuePreview: string | null;
@@ -32160,10 +34201,14 @@ interface paths {
                             data: {
                                 createdAt: string;
                                 description: string | null;
+                                /** @description End User scope (eu_*) when the secret is end-user-scoped; null otherwise. */
+                                endUserId: string | null;
                                 id: string;
                                 key: string;
                                 lastRotatedAt: string | null;
                                 phantomToken: string | null;
+                                /** @description Product Tenant scope (tnt_*) when the secret is tenant-scoped; null for org-level. */
+                                productTenantId: string | null;
                                 status: string;
                                 updatedAt: string;
                                 valuePreview: string | null;
@@ -35820,6 +37865,7 @@ interface paths {
                                 enableDashboardAssistant: boolean;
                                 enableRuntypeApps: boolean;
                                 enableSkillScanner: boolean;
+                                usageBasedPricing: boolean;
                             };
                             id: string;
                             orgId?: string | null;
@@ -36367,6 +38413,8 @@ interface components {
                         profileTemplate?: string;
                     };
                     model?: string;
+                    /** @enum {string} */
+                    piiRedaction?: "default" | "off" | "redact";
                     presencePenalty?: number;
                     reasoning?: boolean | {
                         budgetTokens?: number;
@@ -36391,7 +38439,6 @@ interface components {
                         persistence?: "ephemeral" | "conversation" | "named";
                         /** @enum {string} */
                         provider?: "runtype-sandbox" | "daytona";
-                        requireApprovalForBash?: boolean;
                         /** @enum {string} */
                         sleepAfter?: "5m" | "15m" | "30m" | "1h";
                         /** @enum {string} */
@@ -36511,6 +38558,16 @@ interface components {
             /** @description Present only when a raw tool_… reference could not be emitted as a portable tool:<name> (the tool was deleted, or its name is shadowed by an older same-named tool). Those references are left as raw ids, which the ensure surface rejects; each warning explains how to fix it. */
             warnings?: string[];
         };
+        AsyncDispatchHandle: {
+            /** @description Present only for ephemeral inline-create dispatch. */
+            claudeManagedAgentId?: string;
+            /** @description The conversation the headless turn belongs to. */
+            conversationId: string;
+            /** @description The durable execution id — reconnect/poll with this. */
+            executionId: string;
+            /** @description Lifecycle status at acceptance (e.g. 'running'). */
+            status: string;
+        };
         DailyUsageResponse: {
             daily?: {
                 atSpendLimit: boolean;
@@ -36591,6 +38648,22 @@ interface components {
             }[];
             error: string;
         };
+        EvalCase: {
+            createdAt: string;
+            enabled: boolean;
+            expected?: unknown;
+            id: string;
+            /** @description { variables?, messages? } — what the case feeds the target. */
+            input?: unknown;
+            name: string;
+            notes: string | null;
+            origin: string;
+            suiteId: string;
+            updatedAt: string;
+        };
+        EvalCasesCreated: {
+            cases: components["schemas"]["EvalCase"][];
+        };
         EvalEnsureResponse: {
             /** @description Server-computed canonical content hash. Clients should echo this hash in probes. */
             contentHash: string;
@@ -36638,6 +38711,115 @@ interface components {
             suiteId: string;
             updatedAt: string | null;
         };
+        EvalRunScoresResponse: {
+            cases: {
+                /** @description The saved eval case id; null when the case row was deleted or the record could not be mapped to a case. */
+                caseId: string | null;
+                name: string;
+                outcomes: {
+                    graderIndex: number;
+                    kind: string;
+                    passed: boolean;
+                    reasoning?: string;
+                    score?: number;
+                    /**
+                     * @description Grader severity. A soft miss is reported but only fails the suite under strict mode. Absent ⇒ gate.
+                     * @enum {string}
+                     */
+                    severity?: "gate" | "soft";
+                }[];
+                /** @description Truncated snapshot of the output that was graded (2000 chars max). */
+                outputExcerpt: string;
+                /** @description Recomputed from the persisted outcomes using the run's recorded strict mode, so historical verdicts match what the run originally reported. */
+                passed: boolean;
+            }[];
+            /** @description The eval name recorded on the run. */
+            name: string | null;
+            passedCases: number;
+            /** @description The run (batch execution) id these scores belong to. */
+            runId: string;
+            /** @description Suite score, 0..1 (passed cases / total cases); null when the run has no cases. */
+            score: number | null;
+            /** @description The severity semantics the run was graded with (and that these verdicts reproduce): true when a soft grader miss failed its case. */
+            strict: boolean;
+            /** @description The eval suite the run executed; null when the suite was since deleted. */
+            suiteId: string | null;
+            totalCases: number;
+        };
+        EvalSuiteDetail: {
+            agentId: string | null;
+            baselineBatchExecutionId: string | null;
+            caseCount: number;
+            cases: components["schemas"]["EvalCase"][];
+            createdAt: string;
+            description: string | null;
+            enabledCaseCount: number;
+            flowId: string | null;
+            /** @description Ordered GraderConfig[] applied to every case. */
+            graders: unknown[];
+            id: string;
+            isDefault: boolean;
+            /** @description Provenance of the last Definition write. 'sdk' / 'terraform' mean the suite is managed in code (converged by ensure on deploy). */
+            lastModifiedSource: string | null;
+            latestRun: components["schemas"]["EvalSuiteLatestRun"];
+            name: string;
+            /** @description Display name of the target flow/agent; null when the target row is gone. */
+            targetName: string | null;
+            /** @enum {string} */
+            targetType: "flow" | "agent";
+            updatedAt: string;
+        };
+        EvalSuiteLatestRun: {
+            completedAt: string | null;
+            passedCases: number | null;
+            runId: string;
+            /** @description Suite score of the run, 0..1; null while unscored (in flight / unscoreable). */
+            score: number | null;
+            startedAt: string;
+            status: string;
+            totalCases: number | null;
+        } | null;
+        EvalSuiteListResponse: {
+            /** @description Number of suites in this page. */
+            count: number;
+            limit: number;
+            offset: number;
+            suites: components["schemas"]["EvalSuiteSummary"][];
+            /** @description Total suites matching the filter across all pages (for offset pagination). */
+            total: number;
+        };
+        EvalSuiteRunQueued: {
+            /** @enum {string} */
+            mode: "batch";
+            name: string;
+            /** @description The queued run id. Poll GET /eval/{runId}/results for progress and GET /eval/runs/{runId}/scores for grader scores once completed. */
+            runId: string;
+            status: string;
+            suiteId: string;
+            totalCases: number;
+        };
+        EvalSuiteSummary: {
+            agentId: string | null;
+            baselineBatchExecutionId: string | null;
+            caseCount: number;
+            createdAt: string;
+            description: string | null;
+            enabledCaseCount: number;
+            flowId: string | null;
+            /** @description Ordered GraderConfig[] applied to every case. */
+            graders: unknown[];
+            id: string;
+            isDefault: boolean;
+            /** @description Provenance of the last Definition write. 'sdk' / 'terraform' mean the suite is managed in code (converged by ensure on deploy). */
+            lastModifiedSource: string | null;
+            latestRun: components["schemas"]["EvalSuiteLatestRun"];
+            name: string;
+            /** @description Display name of the target flow/agent; null when the target row is gone. */
+            targetName: string | null;
+            /** @enum {string} */
+            targetType: "flow" | "agent";
+            updatedAt: string;
+        };
         ExecutionStreamEvent: {
             agentId?: string;
             agentName?: string;
@@ -36678,6 +38860,7 @@ interface components {
             /** @enum {string} */
             type: "execution_complete";
         } | {
+            blockReason?: string;
             code?: string;
             completedAt?: string;
             error: string | {
@@ -36981,6 +39164,7 @@ interface components {
             startedAt?: string;
             subagent?: {
                 agentName?: string;
+                parentToolCallId?: string;
                 toolName: string;
             };
             timeout?: number;
@@ -37151,6 +39335,7 @@ interface components {
             /** @enum {string} */
             type: "flow_complete";
         } | {
+            blockReason?: string;
             code?: string;
             error: string | {
                 code: string;
@@ -37172,6 +39357,7 @@ interface components {
             type: "flow_error";
             upgradeUrl?: string;
         } | {
+            approvalId?: string;
             awaitReason?: string;
             awaitedAt: string;
             crawlId?: string;
@@ -37185,6 +39371,7 @@ interface components {
             };
             seq?: number;
             stepId?: string;
+            timeout?: number;
             toolCallId?: string;
             toolId?: string;
             toolName?: string;
@@ -37667,6 +39854,8 @@ interface components {
             /** @description True when every case passed every grader. */
             passed: boolean;
             passedCases: number;
+            /** @description The persisted run id — query its scores via GET /eval/runs/{runId}/scores. Null for an ephemeral (virtual/inline) run. */
+            runId: string | null;
             /** @description Suite score, 0..1 (passed cases / total cases). */
             score: number;
             suiteId: string | null;
@@ -38425,6 +40614,7 @@ interface RecordFilter {
     type: string;
     where?: RecordFilterCondition | RecordFilterGroup;
 }
+/** @deprecated Use {@link GetRecordStepConfig} (single record) or {@link ListRecordsStepConfig} (multiple records) instead. Cardinality on `retrieve-record` depends on the lookup method, which is a common source of bugs. */
 interface RetrieveRecordStepConfig$1 {
     name: string;
     retrievalMode?: 'id' | 'query';
@@ -38449,6 +40639,63 @@ interface RetrieveRecordStepConfig$1 {
     /** JavaScript predicate evaluated at runtime. If falsy, the step is skipped. */
     when?: string;
 }
+/**
+ * Config for a `get-record` step — always returns a SINGLE record object.
+ * Lookup by `recordId`, by `recordType` (+ optional `recordName`), or by a
+ * chip-style `recordFilter` (most-recently-updated match wins). Fails the
+ * step if no record matches.
+ */
+interface GetRecordStepConfig$1 {
+    name: string;
+    recordId?: string;
+    recordType?: string;
+    recordName?: string;
+    /**
+     * Optional chip-style filter (metadata + top-level columns: id, name,
+     * createdAt, updatedAt). Coexists with recordType/recordName; the API
+     * executor prefers recordFilter when both are set.
+     */
+    recordFilter?: RecordFilter;
+    fieldsToInclude?: string | string[];
+    fieldsToExclude?: string | string[];
+    availableFields?: string[];
+    outputVariable?: string;
+    includeMetadata?: boolean;
+    streamOutput?: boolean;
+    enabled?: boolean;
+    /** JavaScript predicate evaluated at runtime. If falsy, the step is skipped. */
+    when?: string;
+}
+/**
+ * Config for a `list-records` step — always returns an ARRAY of records
+ * (newest-first), even for a single match. Lookup by `recordType`,
+ * `recordName`, or `recordFilter` (no `recordId` — single-by-id is
+ * {@link GetRecordStepConfig}).
+ */
+interface ListRecordsStepConfig$1 {
+    name: string;
+    recordType?: string;
+    recordName?: string;
+    /**
+     * Optional chip-style filter (metadata + top-level columns: id, name,
+     * createdAt, updatedAt). Coexists with recordType/recordName; the API
+     * executor prefers recordFilter when both are set.
+     */
+    recordFilter?: RecordFilter;
+    /** Max records returned (default 50, capped at 1000). */
+    limit?: number;
+    /** Zero-match behavior: `'succeed'` (default) returns `[]`; `'fail'` fails the step. */
+    onEmpty?: 'succeed' | 'fail';
+    fieldsToInclude?: string | string[];
+    fieldsToExclude?: string | string[];
+    availableFields?: string[];
+    outputVariable?: string;
+    includeMetadata?: boolean;
+    streamOutput?: boolean;
+    enabled?: boolean;
+    /** JavaScript predicate evaluated at runtime. If falsy, the step is skipped. */
+    when?: string;
+}
 interface UpsertRecordStepConfig$1 {
     name: string;
     recordType: string;
@@ -38858,8 +41105,17 @@ declare class FlowBuilder {
     sendStream(config: SendStreamStepConfig$1): this;
     /**
      * Add a retrieve record step
+     * @deprecated use {@link getRecord} (single record) or {@link listRecords} (multiple records) instead.
      */
     retrieveRecord(config: RetrieveRecordStepConfig$1): this;
+    /**
+     * Add a get-record step. Always returns a single record object.
+     */
+    getRecord(config: GetRecordStepConfig$1): this;
+    /**
+     * Add a list-records step. Always returns an array of records (newest-first).
+     */
+    listRecords(config: ListRecordsStepConfig$1): this;
     /**
      * Add an upsert record step
      */
@@ -39953,11 +42209,13 @@ type ReasoningValue = boolean | ReasoningConfig;
  * Generated from the OpenAPI spec — the `data` payload of GET /v1/secrets/{id}.
  */
 type Secret = paths['/v1/secrets/{id}']['get']['responses'][200]['content']['application/json']['data'];
-interface CreateSecretRequest {
-    key: string;
-    value?: string;
-    description?: string;
-}
+/**
+ * Request body for POST /v1/secrets, derived from the generated OpenAPI spec so
+ * it can never drift from the route. Carries the multi-tenancy scope params
+ * (`productTenantId` / `endUserId`) — omit both for an org-level secret (the
+ * default); a tenant- or end-user-scoped secret requires a value.
+ */
+type CreateSecretRequest = NonNullable<paths['/v1/secrets']['post']['requestBody']>['content']['application/json'];
 interface UpdateSecretRequest {
     value?: string;
     description?: string;
@@ -40354,7 +42612,7 @@ type CheckGrader = CheckGraderShape & {
     severity?: GraderSeverity;
 };
 /** Built-in AI-grader preset ids (mirror of `BUILT_IN_GRADER_IDS`). */
-type BuiltInGraderId = 'answersQuestion' | 'matchesExpected' | 'followsInstructions' | 'grounded' | 'rightTone' | 'safeToSend';
+type BuiltInGraderId = 'answersQuestion' | 'matchesExpected' | 'followsInstructions' | 'grounded' | 'rightTone' | 'safeToSend' | 'staysOnTask' | 'sameLanguage' | 'refusesWhenItShould' | 'noPersonalData';
 /** LLM-as-judge over plain-language criteria. Scored by the api grader executor. */
 interface AIGrader {
     kind: 'ai';
@@ -40473,6 +42731,10 @@ declare const judges: {
     readonly grounded: () => Gradeable<AIGrader>;
     readonly rightTone: (voice?: string) => Gradeable<AIGrader>;
     readonly safeToSend: () => Gradeable<AIGrader>;
+    readonly staysOnTask: () => Gradeable<AIGrader>;
+    readonly sameLanguage: () => Gradeable<AIGrader>;
+    readonly refusesWhenItShould: () => Gradeable<AIGrader>;
+    readonly noPersonalData: () => Gradeable<AIGrader>;
 };
 interface EvalMessage {
     role: 'user' | 'assistant' | 'system';
@@ -40611,6 +42873,11 @@ interface RunEvalResult {
     suiteId: string | null;
     name: string;
     targetType: 'flow' | 'agent';
+    /**
+     * The persisted run id (scores queryable via `GET /eval/runs/{runId}/scores`),
+     * or `null` for an ephemeral (virtual/inline) run.
+     */
+    runId: string | null;
     /** Suite score, 0..1 (passed cases / total cases). */
     score: number;
     /** True when every case passed every grader. */
@@ -40619,6 +42886,32 @@ interface RunEvalResult {
     passedCases: number;
     cases: RunEvalCaseResult[];
 }
+/** One case's persisted scores, as returned by `GET /eval/runs/{runId}/scores`. */
+interface EvalRunCaseScores {
+    /** The saved eval case id; null when the case was deleted or unmapped. */
+    caseId: string | null;
+    name: string;
+    /** Recomputed from the persisted outcomes with non-strict severity semantics. */
+    passed: boolean;
+    outcomes: GraderOutcome[];
+    /** Truncated snapshot of the output that was graded. */
+    outputExcerpt: string;
+}
+/** Persisted per-case grader scores for a run (`client.evals.getRunScores`). */
+interface EvalRunScores {
+    runId: string;
+    /** The suite the run executed; null when the suite was since deleted. */
+    suiteId: string | null;
+    /** The eval name recorded on the run. */
+    name: string | null;
+    /** The severity semantics the run was graded with (soft misses fail when true). */
+    strict: boolean;
+    /** Suite score, 0..1; null when the run has no persisted scores. */
+    score: number | null;
+    totalCases: number;
+    passedCases: number;
+    cases: EvalRunCaseScores[];
+}
 /**
  * Run a saved suite by id (the post-`ensure` path) XOR an inline definition (the
  * `virtual` path — nothing is persisted). Exactly one must be provided.
@@ -40626,10 +42919,14 @@ interface RunEvalResult {
  * `strict` (default false) is the `runtype eval --strict` gate: a `soft` grader
  * miss fails its case like a `gate` miss. Without it, soft misses are reported
  * per-outcome but do not fail the suite.
+ *
+ * Saved-suite runs persist by default (a durable run + per-case scores, the
+ * dashboard's run-history data source); `virtual: true` skips persistence.
  */
 type RunEvalInput = {
     suiteId: string;
     strict?: boolean;
+    virtual?: boolean;
 } | {
     definition: EvalDefinition;
     strict?: boolean;
@@ -40892,6 +43189,8 @@ type SearchStepConfig = NamespaceStepConfig<SearchStepConfig$1>;
 type SendEmailStepConfig = NamespaceStepConfig<SendEmailStepConfig$1>;
 type SendStreamStepConfig = NamespaceStepConfig<SendStreamStepConfig$1>;
 type RetrieveRecordStepConfig = NamespaceStepConfig<RetrieveRecordStepConfig$1>;
+type GetRecordStepConfig = NamespaceStepConfig<GetRecordStepConfig$1>;
+type ListRecordsStepConfig = NamespaceStepConfig<ListRecordsStepConfig$1>;
 type UpsertRecordStepConfig = NamespaceStepConfig<UpsertRecordStepConfig$1>;
 type VectorSearchStepConfig = NamespaceStepConfig<VectorSearchStepConfig$1>;
 type GenerateEmbeddingStepConfig = NamespaceStepConfig<GenerateEmbeddingStepConfig$1>;
@@ -41078,8 +43377,17 @@ declare class RuntypeFlowBuilder {
     sendStream(config: SendStreamStepConfig): this;
     /**
      * Add a retrieve record step
+     * @deprecated use {@link getRecord} (single record) or {@link listRecords} (multiple records) instead.
      */
     retrieveRecord(config: RetrieveRecordStepConfig): this;
+    /**
+     * Add a get-record step. Always returns a single record object.
+     */
+    getRecord(config: GetRecordStepConfig): this;
+    /**
+     * Add a list-records step. Always returns an array of records (newest-first).
+     */
+    listRecords(config: ListRecordsStepConfig): this;
     /**
      * Add an upsert record step
      */
@@ -41357,6 +43665,175 @@ declare class BatchesNamespace {
     }>;
 }
 
+/**
+ * Eval-suite CRUD + case management + run — the SDK surface for the
+ * `/v1/eval/suites` REST family (Beginner-First Evals).
+ *
+ * This is the imperative, id-addressed counterpart of the config-as-code
+ * surface in `evals-ensure.ts` (`defineEval` / `ensure` / `pull`): use ensure
+ * to converge a repo-authored suite on deploy, and this namespace to inspect
+ * or manage suites, edit test cases (server-authoritative data), and start
+ * runs. Exposed as `client.evals.suites.*`.
+ */
+
+/** The most recent run of a suite, with its score once graded. */
+interface EvalSuiteLatestRun {
+    runId: string;
+    status: string;
+    startedAt: string;
+    completedAt: string | null;
+    /** Suite score of the run, 0..1; null while unscored. */
+    score: number | null;
+    totalCases: number | null;
+    passedCases: number | null;
+}
+/** A suite as returned by list/update (no cases). */
+interface EvalSuiteSummary {
+    id: string;
+    name: string;
+    description: string | null;
+    targetType: 'flow' | 'agent';
+    flowId: string | null;
+    agentId: string | null;
+    /** Display name of the target flow/agent; null when the target row is gone. */
+    targetName: string | null;
+    graders: GraderConfig[];
+    isDefault: boolean;
+    baselineBatchExecutionId: string | null;
+    /** 'sdk' / 'terraform' mean the suite Definition is managed in code. */
+    lastModifiedSource: string | null;
+    caseCount: number;
+    enabledCaseCount: number;
+    latestRun: EvalSuiteLatestRun | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** A persisted test case. */
+interface EvalSuiteCase {
+    id: string;
+    suiteId: string;
+    name: string;
+    input: EvalCaseInput;
+    expected: CaseExpected | null;
+    notes: string | null;
+    origin: string;
+    enabled: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+/** A suite as returned by create/get — the summary plus its cases. */
+interface EvalSuiteDetail extends EvalSuiteSummary {
+    cases: EvalSuiteCase[];
+}
+/** Case provenance (mirror of `EvalCaseOrigin` in `@runtypelabs/shared`). */
+type EvalCaseOrigin = 'manual' | 'saved_from_run' | 'generated' | 'imported' | 'fpo';
+/** One case to create. */
+interface EvalSuiteCaseInput {
+    name: string;
+    input?: EvalCaseInput;
+    expected?: CaseExpected;
+    notes?: string;
+    enabled?: boolean;
+    /** Case provenance. Defaults to 'manual' server-side when omitted. */
+    origin?: EvalCaseOrigin;
+}
+/** Input to `client.evals.suites.create`. Exactly one of flowId/agentId. */
+interface CreateEvalSuiteInput {
+    name: string;
+    description?: string;
+    flowId?: string;
+    agentId?: string;
+    /** Ordered graders applied to every case. */
+    graders?: GraderConfig[];
+    /** Make this the default eval for its target. */
+    isDefault?: boolean;
+    /** Optional initial cases. */
+    cases?: EvalSuiteCaseInput[];
+}
+/** Input to `client.evals.suites.update`. The target is immutable. */
+interface UpdateEvalSuiteInput {
+    name?: string;
+    description?: string | null;
+    graders?: GraderConfig[];
+    isDefault?: boolean;
+    /** Pin a run of this suite as the comparison baseline; null clears the pin. */
+    baselineBatchExecutionId?: string | null;
+}
+/** Input to `client.evals.suites.updateCase`. */
+interface UpdateEvalCaseInput {
+    name?: string;
+    input?: EvalCaseInput;
+    expected?: CaseExpected | null;
+    notes?: string | null;
+    enabled?: boolean;
+}
+interface EvalSuiteListResult {
+    suites: EvalSuiteSummary[];
+    limit: number;
+    offset: number;
+    /** Number of suites in this page. */
+    count: number;
+    /** Total suites matching the filter across all pages (for offset pagination). */
+    total: number;
+}
+/** A large suite queued as a durable run (graded when it completes). */
+interface EvalSuiteRunQueued {
+    mode: 'batch';
+    /** Poll `client.evals.getRunScores(runId)` once the run completes. */
+    runId: string;
+    suiteId: string;
+    name: string;
+    status: string;
+    totalCases: number;
+}
+/**
+ * The result of `client.evals.suites.run`: the full scored result when the
+ * suite ran synchronously, or a queued handle for a durable run. Discriminate
+ * with `'mode' in result` (queued) or `'cases' in result` (sync).
+ */
+type EvalSuiteRunResult = RunEvalResult | EvalSuiteRunQueued;
+declare class EvalSuitesNamespace {
+    private getClient;
+    constructor(getClient: () => RuntypeClient$1);
+    /** Create an eval suite attached to one flow or agent, optionally with cases. */
+    create(input: CreateEvalSuiteInput): Promise<EvalSuiteDetail>;
+    /** List suites (case counts + latest run/score). Filter by target. */
+    list(params?: {
+        flowId?: string;
+        agentId?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<EvalSuiteListResult>;
+    /** Get a suite including its cases and latest run/score. */
+    get(suiteId: string): Promise<EvalSuiteDetail>;
+    /** Update a suite's Definition (name, description, graders) or state (default, baseline). */
+    update(suiteId: string, input: UpdateEvalSuiteInput): Promise<EvalSuiteSummary>;
+    /** Delete a suite and its cases. Past runs keep their persisted scores. */
+    delete(suiteId: string): Promise<{
+        success: boolean;
+    }>;
+    /**
+     * Run every enabled case against the suite's target and grade the outputs.
+     * Suites within the synchronous case limit run inline and return the scored
+     * result; larger suites queue a durable run (`mode: 'batch'`) that is graded
+     * on completion. Both persist per-case scores to the same run history.
+     */
+    run(suiteId: string, options?: {
+        strict?: boolean;
+        mode?: 'sync' | 'batch';
+    }): Promise<EvalSuiteRunResult>;
+    /** Add one or more test cases to a suite. */
+    addCases(suiteId: string, cases: EvalSuiteCaseInput[]): Promise<{
+        cases: EvalSuiteCase[];
+    }>;
+    /** Edit, enable, or disable a test case. */
+    updateCase(suiteId: string, caseId: string, input: UpdateEvalCaseInput): Promise<EvalSuiteCase>;
+    /** Delete a test case. Past runs keep the case's persisted scores. */
+    deleteCase(suiteId: string, caseId: string): Promise<{
+        success: boolean;
+    }>;
+}
+
 /**
  * EvalsNamespace - Static namespace for evaluation operations
  *
@@ -41509,6 +43986,17 @@ declare class EvalRunner {
 }
 declare class EvalsNamespace {
     private getClient;
+    /**
+     * Id-addressed eval-suite management (`/v1/eval/suites` CRUD + cases + run).
+     * The imperative counterpart of the config-as-code `ensure`/`pull` pair.
+     *
+     * @example
+     * ```typescript
+     * const { suites } = await Runtype.evals.suites.list({ flowId: 'flow_123' })
+     * const result = await Runtype.evals.suites.run(suites[0].id)
+     * ```
+     */
+    readonly suites: EvalSuitesNamespace;
     constructor(getClient: () => RuntypeClient$1);
     /**
      * Run an evaluation
@@ -41576,6 +44064,20 @@ declare class EvalsNamespace {
      * ```
      */
     runSuite(input: RunEvalInput): Promise<RunEvalResult>;
+    /**
+     * Read back the persisted per-case grader scores for a run, using the
+     * `runId` a persisted `runSuite` call returns (null for virtual/inline runs).
+     *
+     * @example
+     * ```typescript
+     * const result = await Runtype.evals.runSuite({ suiteId })
+     * if (result.runId) {
+     *   const scores = await Runtype.evals.getRunScores(result.runId)
+     *   console.log(scores.score, scores.cases.length)
+     * }
+     * ```
+     */
+    getRunScores(runId: string): Promise<EvalRunScores>;
     /**
      * Get evaluation status by ID
      *
@@ -43394,6 +45896,10 @@ declare class RuntypeClient$1 {
      * Generic PUT request
      */
     put<T>(path: string, data?: unknown): Promise<T>;
+    /**
+     * Generic PATCH request
+     */
+    patch<T>(path: string, data?: unknown): Promise<T>;
     /**
      * Generic DELETE request
      */
@@ -45333,9 +47839,31 @@ interface AgentExecuteResponse {
         input: number;
         output: number;
     };
-    stopReason: 'complete' | 'end_turn' | 'max_turns' | 'max_cost' | 'timeout' | 'error';
+    stopReason: 'complete' | 'end_turn' | 'max_turns' | 'max_cost' | 'timeout' | 'error' | 'paused';
     reflections?: string[];
     error?: string;
+    /**
+     * Terminal execution status. `'paused'` when a tool call tripped an approval
+     * gate (`config.tools.approval`) or a local/client tool call — the run is
+     * awaiting the caller, not finished. Present on non-streaming responses.
+     */
+    status?: 'completed' | 'failed' | 'paused';
+    /**
+     * Set when `status === 'paused'`. Resolve an approval gate with
+     * `AgentsEndpoint.approve({ executionId, approvalId, decision })`; resume a
+     * local-tool pause with `AgentsEndpoint.resume({ executionId, toolOutputs })`.
+     */
+    pausedReason?: {
+        type: string;
+        executionId: string;
+        toolId?: string;
+        toolName?: string;
+        parameters?: Record<string, unknown>;
+        /** `'approval_required'` for an approval gate; absent for a local-tool pause. */
+        awaitReason?: string;
+        /** The id passed to `approve()` (with `executionId`) to resolve the gate. */
+        approvalId?: string;
+    };
 }
 interface LocalToolExecutionLoopSnapshot {
     executionId: string;
@@ -47597,6 +50125,73 @@ declare const STEP_FIELD_REGISTRY: {
         readonly key: "streamOutput";
         readonly format: "raw";
     }];
+    readonly 'get-record': readonly [{
+        readonly key: "recordId";
+        readonly format: "json";
+    }, {
+        readonly key: "recordType";
+        readonly format: "json";
+    }, {
+        readonly key: "recordName";
+        readonly format: "json";
+    }, {
+        readonly key: "recordFilter";
+        readonly format: "value";
+    }, {
+        readonly key: "fieldsToInclude";
+        readonly format: "json";
+    }, {
+        readonly key: "fieldsToExclude";
+        readonly format: "json";
+    }, {
+        readonly key: "availableFields";
+        readonly format: "value";
+    }, {
+        readonly key: "outputVariable";
+        readonly format: "json";
+    }, {
+        readonly key: "includeMetadata";
+        readonly format: "raw";
+    }, {
+        readonly key: "streamOutput";
+        readonly format: "raw";
+    }];
+    readonly 'list-records': readonly [{
+        readonly key: "recordType";
+        readonly format: "json";
+    }, {
+        readonly key: "recordName";
+        readonly format: "json";
+    }, {
+        readonly key: "recordFilter";
+        readonly format: "value";
+    }, {
+        readonly key: "limit";
+        readonly format: "raw";
+        readonly skipDefault: 50;
+    }, {
+        readonly key: "onEmpty";
+        readonly format: "json";
+        readonly skipDefault: "succeed";
+    }, {
+        readonly key: "fieldsToInclude";
+        readonly format: "json";
+    }, {
+        readonly key: "fieldsToExclude";
+        readonly format: "json";
+    }, {
+        readonly key: "availableFields";
+        readonly format: "value";
+    }, {
+        readonly key: "outputVariable";
+        readonly format: "json";
+    }, {
+        readonly key: "includeMetadata";
+        readonly format: "raw";
+    }, {
+        readonly key: "streamOutput";
+        readonly format: "raw";
+    }];
     readonly 'upsert-record': readonly [{
         readonly key: "recordType";
         readonly format: "json";
@@ -47841,6 +50436,8 @@ declare const STEP_TYPE_TO_METHOD: {
     readonly 'fetch-url': "fetchUrl";
     readonly 'api-call': "apiCall";
     readonly 'retrieve-record': "retrieveRecord";
+    readonly 'get-record': "getRecord";
+    readonly 'list-records': "listRecords";
     readonly 'fetch-github': "fetchGitHub";
     readonly 'transform-data': "transformData";
     readonly template: "template";
@@ -48214,4 +50811,4 @@ declare function getLikelySupportingCandidatePaths(bestCandidatePath: string | u
 declare function getDefaultPlanPath(taskName: string): string;
 declare function sanitizeTaskSlug(taskName: string): string;
 
-export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, ApiKeysEndpoint, type ApiResponse, type App, type AppManifest, type AppVersion, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, AppsEndpoint, type AssetReferenceContentPart, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CaseExpected, ChatEndpoint, type CheckGrader, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientWidgetTheme, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateConversationRequest, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchClient, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunConfig, EvalRunner, type EvalStatus, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchGitHubStepConfig$1 as FetchGitHubStepConfig, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type ImageContentPart, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListConversationsResponse, type ListParams, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchGitHubStepConfig as RuntypeFetchGitHubStepConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SendTextStepConfig as RuntypeSendTextStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillScanFinding as RuntypeSkillScanFinding, type SkillScanResult as RuntypeSkillScanResult, type SkillScanVerdict as RuntypeSkillScanVerdict, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SendTextStepConfig$1 as SendTextStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, UNIFIED_EVENTS_QUERY, type UpdateAppRequest, type UpdateClientTokenRequest, type UpdateConversationRequest, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };
+export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, ApiKeysEndpoint, type ApiResponse, type App, type AppManifest, type AppVersion, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, AppsEndpoint, type AssetReferenceContentPart, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CaseExpected, ChatEndpoint, type CheckGrader, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientWidgetTheme, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateAppRequest, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateConversationRequest, type CreateEvalSuiteInput, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchClient, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunCaseScores, type EvalRunConfig, type EvalRunScores, EvalRunner, type EvalStatus, type EvalSuiteCase, type EvalSuiteCaseInput, type EvalSuiteDetail, type EvalSuiteLatestRun, type EvalSuiteListResult, type EvalSuiteRunQueued, type EvalSuiteRunResult, type EvalSuiteSummary, EvalSuitesNamespace, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchGitHubStepConfig$1 as FetchGitHubStepConfig, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type GetRecordStepConfig$1 as GetRecordStepConfig, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type ImageContentPart, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListConversationsResponse, type ListParams, type ListRecordsStepConfig$1 as ListRecordsStepConfig, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchGitHubStepConfig as RuntypeFetchGitHubStepConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type GetRecordStepConfig as RuntypeGetRecordStepConfig, type ListRecordsStepConfig as RuntypeListRecordsStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SendTextStepConfig as RuntypeSendTextStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillScanFinding as RuntypeSkillScanFinding, type SkillScanResult as RuntypeSkillScanResult, type SkillScanVerdict as RuntypeSkillScanVerdict, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SendTextStepConfig$1 as SendTextStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, UNIFIED_EVENTS_QUERY, type UpdateAppRequest, type UpdateClientTokenRequest, type UpdateConversationRequest, type UpdateEvalCaseInput, type UpdateEvalSuiteInput, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };