@shardflux/sdk 0.11.0 → 0.12.0

package/dist/generated/app-api.d.ts

@@ -168,7 +168,7 @@ export interface paths {
         put?: never;
         /**
          * Register with email and password
-         * @description Always 202 with the same body whether or not the address is already registered (no enumeration). A verification email is sent to new or still-unverified addresses.
+         * @description Always 202 with the same body whether or not the address is already registered (no enumeration). A verification email is sent to new or still-unverified addresses. An address at a disposable-email domain (or a subdomain of one) is 422 validation_failed with details.reason `email_disposable`.
          */
         post: operations["postApiAuthRegister"];
         delete?: never;
@@ -188,7 +188,7 @@ export interface paths {
         put?: never;
         /**
          * Consume an email verification token
-         * @description Single use. The emailed link is a frontend page (`/auth/verify-email#token=...`); GET never consumes. The first verification signs out every session, disables any MFA enrolled while unverified and invalidates the other open verification links. A link sent by a registration applies the password chosen in that same registration (`status: verified`; sign in again). A link from "resend" carries no password, so the stored one (set by an unverified registrant) is discarded: the response is `status: password_reset_required` with a single-use `reset_token` for POST /api/auth/password/reset/confirm, and no sign-in is possible until a password is set.
+         * @description Single use. The emailed link is a frontend page (`/auth/verify-email#token=...`); GET never consumes. The first verification signs out every session, disables any MFA enrolled while unverified and invalidates the other open verification links. A link sent by a registration applies the password chosen in that same registration (`status: verified`). A link from "resend" carries no password, so the stored one (set by an unverified registrant) is discarded: the response is `status: password_reset_required` with a single-use `reset_token` for POST /api/auth/password/reset/confirm, and no sign-in is possible until a password is set. Consumed in the browser whose registration sent the link (its __Host-sf_signup cookie), a `verified` link also signs that browser in: `signed_in: true` with the new session cookie and its `csrf_token`. Anywhere else `signed_in` is false: sign in.
          */
         post: operations["postApiAuthVerifyEmail"];
         delete?: never;
@@ -416,7 +416,7 @@ export interface paths {
         put?: never;
         /**
          * Start changing the sign-in email (requires step-up)
-         * @description Sends a confirmation link to the new address and a notice to the current one. Nothing changes until confirmed. Always 202.
+         * @description Sends a confirmation link to the new address and a notice to the current one. Nothing changes until confirmed. Always 202 for a valid address; a disposable-email domain (or a subdomain of one) is 422 validation_failed with details.reason `email_disposable`.
          */
         post: operations["postApiAuthEmailChange"];
         delete?: never;
@@ -556,7 +556,7 @@ export interface paths {
         put?: never;
         /**
          * Register with email and password
-         * @description Always 202 with the same body whether or not the address is already registered (no enumeration). A verification email is sent to new or still-unverified addresses.
+         * @description Always 202 with the same body whether or not the address is already registered (no enumeration). A verification email is sent to new or still-unverified addresses. An address at a disposable-email domain (or a subdomain of one) is 422 validation_failed with details.reason `email_disposable`.
          */
         post: operations["postV1AuthRegister"];
         delete?: never;
@@ -576,7 +576,7 @@ export interface paths {
         put?: never;
         /**
          * Consume an email verification token
-         * @description Single use. The emailed link is a frontend page (`/auth/verify-email#token=...`); GET never consumes. The first verification signs out every session, disables any MFA enrolled while unverified and invalidates the other open verification links. A link sent by a registration applies the password chosen in that same registration (`status: verified`; sign in again). A link from "resend" carries no password, so the stored one (set by an unverified registrant) is discarded: the response is `status: password_reset_required` with a single-use `reset_token` for POST /v1/auth/password/reset/confirm, and no sign-in is possible until a password is set.
+         * @description Single use. The emailed link is a frontend page (`/auth/verify-email#token=...`); GET never consumes. The first verification signs out every session, disables any MFA enrolled while unverified and invalidates the other open verification links. A link sent by a registration applies the password chosen in that same registration (`status: verified`). A link from "resend" carries no password, so the stored one (set by an unverified registrant) is discarded: the response is `status: password_reset_required` with a single-use `reset_token` for POST /v1/auth/password/reset/confirm, and no sign-in is possible until a password is set. Sign in afterwards.
          */
         post: operations["postV1AuthVerifyEmail"];
         delete?: never;
@@ -804,7 +804,7 @@ export interface paths {
         put?: never;
         /**
          * Start changing the sign-in email (requires step-up)
-         * @description Sends a confirmation link to the new address and a notice to the current one. Nothing changes until confirmed. Always 202.
+         * @description Sends a confirmation link to the new address and a notice to the current one. Nothing changes until confirmed. Always 202 for a valid address; a disposable-email domain (or a subdomain of one) is 422 validation_failed with details.reason `email_disposable`.
          */
         post: operations["postV1AuthEmailChange"];
         delete?: never;
@@ -1366,7 +1366,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
          */
         post: operations["postV1WorkspacesOpen"];
         delete?: never;
@@ -1428,7 +1428,7 @@ export interface paths {
         post?: never;
         /**
          * Delete a workspace (tombstone now, storage cleanup by the cell)
-         * @description Sets desired_state=deleted and deleted_at, revokes tool access immediately (workspace revocation watermark, agent sessions revoked) and creates a `delete` operation for the cell. A file-first workspace’s tree revisions are deleted with the tombstone and the cell deletes its stored files (contracts §29). Repeating returns the same operation. The key is never reused. Supports Idempotency-Key.
+         * @description Sets desired_state=deleted and deleted_at, revokes tool access immediately (workspace revocation watermark, agent sessions revoked) and creates a `delete` operation for the cell. A file-first workspace’s tree revisions are deleted with the tombstone and the cell deletes its stored files (contracts §29). Repeating returns the same operation. After deletion finishes (observed_state deleted), the key can open a new workspace ID; old IDs and tokens remain deleted. Supports Idempotency-Key.
          */
         delete: operations["deleteV1WorkspacesWorkspaceId"];
         options?: never;
@@ -1456,6 +1456,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/workspaces/{workspace_id}/labels": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /** Replace workspace labels */
+        put: operations["putV1WorkspacesWorkspaceIdLabels"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/workspaces/{workspace_id}/idle-policy": {
         parameters: {
             query?: never;
@@ -1507,7 +1524,7 @@ export interface paths {
         put?: never;
         /**
          * Resume a suspended workspace (admitted like a start)
-         * @description Creates a `resume` operation executed by the cell, or returns the active resume/open (concurrent wakes join one operation); 202 with it: poll GET /operations/{id}. Errors: 409 already_running or not_suspended, operation_in_progress (a suspend or another operation is active; details.active_operation_id), workspace_deleted, not_supported_for_mode (file-first, contracts §29); 402/403 as for open (admitted like a start). Supports Idempotency-Key. Held resume (contracts §22.6): with `Prefer: wait=<seconds>` (at most 20) the response is held until the operation is terminal or the wait elapses, exactly like a held open (§22.3); success answers 200 with the running workspace, the succeeded operation, `cell_endpoint` and a tool token for `agent_label`/`tools` (minted while the restore is in flight, at the new ownership epoch), `Preference-Applied: wait=<seconds>`; anything else is 202 with the fresh operation. With the preference a workspace that is already running answers 200 at once (operation null, a token) instead of 409 already_running. Without `Preference-Applied` the server did not wait: poll the operation. `tools` beyond the principal’s tool permissions are 403 (nothing is created); a token the API cannot issue otherwise is `tool_token: null`.
+         * @description Creates a `resume` operation for a suspended workspace, or an `open` recovery for a failed workspace (same ID and disk, no reset), or returns the active resume/open (concurrent wakes join one operation); 202 with it: poll GET /operations/{id}. Errors: 409 already_running or not_suspended, operation_in_progress (a suspend or another operation is active; details.active_operation_id), workspace_deleted, not_supported_for_mode (file-first, contracts §29); 402/403 as for open (admitted like a start). Supports Idempotency-Key. Held resume (contracts §22.6): with `Prefer: wait=<seconds>` (at most 20) the response is held until the operation is terminal or the wait elapses, exactly like a held open (§22.3); success answers 200 with the running workspace, the succeeded operation, `cell_endpoint` and a tool token for `agent_label`/`tools` (minted while the restore is in flight, at the new ownership epoch), `Preference-Applied: wait=<seconds>`; anything else is 202 with the fresh operation. With the preference a workspace that is already running answers 200 at once (operation null, a token) instead of 409 already_running. Without `Preference-Applied` the server did not wait: poll the operation. `tools` beyond the principal’s tool permissions are 403 (nothing is created); a token the API cannot issue otherwise is `tool_token: null`.
          */
         post: operations["postV1WorkspacesWorkspaceIdResume"];
         delete?: never;
@@ -1547,7 +1564,7 @@ export interface paths {
         put?: never;
         /**
          * Suspend the workspace if it stays idle for after_seconds from now (e.g. at the end of an agent turn)
-         * @description Records a deferred suspend for the cell’s idle loop: once the workspace has been idle for after_seconds (30..3600), it is suspended (within a few seconds of activity flush grace), at `not_before` (= now + after_seconds) at the earliest. A tool call after the request (the next turn) or a resume cancels it for good. Other work only defers it: a command still running, an attached exec/PTY stream or a keepalive postpones the suspend until after_seconds after it ends. It applies under every idle policy (`never` included) and only ever shortens the policy’s wait; a policy that suspends sooner still does. Repeating replaces the pending request (the new `requested_at` counts); DELETE cancels it; `idle.suspend_request` on the workspace shows it. 202 {workspace, operation: null, suspend_request}; when a suspend is already in progress, 202 {workspace, operation: that suspend, suspend_request: null} and nothing is recorded. The suspend, when it happens, is a system `suspend` operation with input.reason requested_after_idle (input.requested_at, input.after_seconds). Errors: 409 session_lifetime, workspace_deleted, operation_in_progress (another lifecycle operation is active), not_running, not_supported_for_mode (file-first, contracts §29). Supports Idempotency-Key.
+         * @description Records a deferred suspend for the cell’s idle loop: once the workspace has been idle for after_seconds (0..3600; 0 = as soon as it is idle), it is suspended (within a few seconds of activity flush grace), at `not_before` (= now + after_seconds) at the earliest. A tool call after the request (the next turn) or a resume cancels it for good. Other work only defers it: a command still running, an attached exec/PTY stream or a keepalive postpones the suspend until after_seconds after it ends. It applies under every idle policy (`never` included) and only ever shortens the policy’s wait; a policy that suspends sooner still does. Repeating replaces the pending request (the new `requested_at` counts); DELETE cancels it; `idle.suspend_request` on the workspace shows it. 202 {workspace, operation: null, suspend_request}; when a suspend is already in progress, 202 {workspace, operation: that suspend, suspend_request: null} and nothing is recorded. The suspend, when it happens, is a system `suspend` operation with input.reason requested_after_idle (input.requested_at, input.after_seconds). Errors: 409 session_lifetime, workspace_deleted, operation_in_progress (another lifecycle operation is active), not_running, not_supported_for_mode (file-first, contracts §29). Supports Idempotency-Key.
          */
         post: operations["postV1WorkspacesWorkspaceIdSuspendWhenIdle"];
         /**
@@ -1742,7 +1759,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
          */
         post: operations["postApiV1WorkspacesOpen"];
         delete?: never;
@@ -1804,7 +1821,7 @@ export interface paths {
         post?: never;
         /**
          * Delete a workspace (tombstone now, storage cleanup by the cell)
-         * @description Sets desired_state=deleted and deleted_at, revokes tool access immediately (workspace revocation watermark, agent sessions revoked) and creates a `delete` operation for the cell. A file-first workspace’s tree revisions are deleted with the tombstone and the cell deletes its stored files (contracts §29). Repeating returns the same operation. The key is never reused. Supports Idempotency-Key.
+         * @description Sets desired_state=deleted and deleted_at, revokes tool access immediately (workspace revocation watermark, agent sessions revoked) and creates a `delete` operation for the cell. A file-first workspace’s tree revisions are deleted with the tombstone and the cell deletes its stored files (contracts §29). Repeating returns the same operation. After deletion finishes (observed_state deleted), the key can open a new workspace ID; old IDs and tokens remain deleted. Supports Idempotency-Key.
          */
         delete: operations["deleteApiV1WorkspacesWorkspaceId"];
         options?: never;
@@ -1832,6 +1849,23 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/workspaces/{workspace_id}/labels": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /** Replace workspace labels */
+        put: operations["putApiV1WorkspacesWorkspaceIdLabels"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/workspaces/{workspace_id}/idle-policy": {
         parameters: {
             query?: never;
@@ -1883,7 +1917,7 @@ export interface paths {
         put?: never;
         /**
          * Resume a suspended workspace (admitted like a start)
-         * @description Creates a `resume` operation executed by the cell, or returns the active resume/open (concurrent wakes join one operation); 202 with it: poll GET /operations/{id}. Errors: 409 already_running or not_suspended, operation_in_progress (a suspend or another operation is active; details.active_operation_id), workspace_deleted, not_supported_for_mode (file-first, contracts §29); 402/403 as for open (admitted like a start). Supports Idempotency-Key. Held resume (contracts §22.6): with `Prefer: wait=<seconds>` (at most 20) the response is held until the operation is terminal or the wait elapses, exactly like a held open (§22.3); success answers 200 with the running workspace, the succeeded operation, `cell_endpoint` and a tool token for `agent_label`/`tools` (minted while the restore is in flight, at the new ownership epoch), `Preference-Applied: wait=<seconds>`; anything else is 202 with the fresh operation. With the preference a workspace that is already running answers 200 at once (operation null, a token) instead of 409 already_running. Without `Preference-Applied` the server did not wait: poll the operation. `tools` beyond the principal’s tool permissions are 403 (nothing is created); a token the API cannot issue otherwise is `tool_token: null`.
+         * @description Creates a `resume` operation for a suspended workspace, or an `open` recovery for a failed workspace (same ID and disk, no reset), or returns the active resume/open (concurrent wakes join one operation); 202 with it: poll GET /operations/{id}. Errors: 409 already_running or not_suspended, operation_in_progress (a suspend or another operation is active; details.active_operation_id), workspace_deleted, not_supported_for_mode (file-first, contracts §29); 402/403 as for open (admitted like a start). Supports Idempotency-Key. Held resume (contracts §22.6): with `Prefer: wait=<seconds>` (at most 20) the response is held until the operation is terminal or the wait elapses, exactly like a held open (§22.3); success answers 200 with the running workspace, the succeeded operation, `cell_endpoint` and a tool token for `agent_label`/`tools` (minted while the restore is in flight, at the new ownership epoch), `Preference-Applied: wait=<seconds>`; anything else is 202 with the fresh operation. With the preference a workspace that is already running answers 200 at once (operation null, a token) instead of 409 already_running. Without `Preference-Applied` the server did not wait: poll the operation. `tools` beyond the principal’s tool permissions are 403 (nothing is created); a token the API cannot issue otherwise is `tool_token: null`.
          */
         post: operations["postApiV1WorkspacesWorkspaceIdResume"];
         delete?: never;
@@ -1923,7 +1957,7 @@ export interface paths {
         put?: never;
         /**
          * Suspend the workspace if it stays idle for after_seconds from now (e.g. at the end of an agent turn)
-         * @description Records a deferred suspend for the cell’s idle loop: once the workspace has been idle for after_seconds (30..3600), it is suspended (within a few seconds of activity flush grace), at `not_before` (= now + after_seconds) at the earliest. A tool call after the request (the next turn) or a resume cancels it for good. Other work only defers it: a command still running, an attached exec/PTY stream or a keepalive postpones the suspend until after_seconds after it ends. It applies under every idle policy (`never` included) and only ever shortens the policy’s wait; a policy that suspends sooner still does. Repeating replaces the pending request (the new `requested_at` counts); DELETE cancels it; `idle.suspend_request` on the workspace shows it. 202 {workspace, operation: null, suspend_request}; when a suspend is already in progress, 202 {workspace, operation: that suspend, suspend_request: null} and nothing is recorded. The suspend, when it happens, is a system `suspend` operation with input.reason requested_after_idle (input.requested_at, input.after_seconds). Errors: 409 session_lifetime, workspace_deleted, operation_in_progress (another lifecycle operation is active), not_running, not_supported_for_mode (file-first, contracts §29). Supports Idempotency-Key.
+         * @description Records a deferred suspend for the cell’s idle loop: once the workspace has been idle for after_seconds (0..3600; 0 = as soon as it is idle), it is suspended (within a few seconds of activity flush grace), at `not_before` (= now + after_seconds) at the earliest. A tool call after the request (the next turn) or a resume cancels it for good. Other work only defers it: a command still running, an attached exec/PTY stream or a keepalive postpones the suspend until after_seconds after it ends. It applies under every idle policy (`never` included) and only ever shortens the policy’s wait; a policy that suspends sooner still does. Repeating replaces the pending request (the new `requested_at` counts); DELETE cancels it; `idle.suspend_request` on the workspace shows it. 202 {workspace, operation: null, suspend_request}; when a suspend is already in progress, 202 {workspace, operation: that suspend, suspend_request: null} and nothing is recorded. The suspend, when it happens, is a system `suspend` operation with input.reason requested_after_idle (input.requested_at, input.after_seconds). Errors: 409 session_lifetime, workspace_deleted, operation_in_progress (another lifecycle operation is active), not_running, not_supported_for_mode (file-first, contracts §29). Supports Idempotency-Key.
          */
         post: operations["postApiV1WorkspacesWorkspaceIdSuspendWhenIdle"];
         /**
@@ -4973,7 +5007,10 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Confirms operator access (MFA + step-up + grant) */
+        /**
+         * Confirms operator access (MFA + step-up + grant) and the grant role
+         * @description `role` = `viewer` (every operator read) or `operator` (reads and the mutating operator routes).
+         */
         get: operations["getApiV1OperatorWhoami"];
         put?: never;
         post?: never;
@@ -5179,6 +5216,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/operator/operations/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * One lifecycle operation with its input, result and error
+         * @description Any state (succeeded included). input, result and error are returned when their JSON is at most 16384 bytes; larger ones are null and named in `truncated`. These are the fields customers see on their own operations (no secrets are stored in them).
+         */
+        get: operations["getApiV1OperatorOperationsId"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/operator/restrictions": {
         parameters: {
             query?: never;
@@ -5347,6 +5404,126 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/operator/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Status page: summary cards, component health, recent fleet warnings and alerts
+         * @description One consistent read (REPEATABLE READ, statement timeout). Health thresholds follow the CloudWatch alarms (docs/runbooks/alarms.md). Viewer or operator role.
+         */
+        get: operations["getApiV1OperatorStatus"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/operator/capacity": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Fleet and capacity: managed pools (last plan), operations waiting for capacity, capacity actions and drains
+         * @description One consistent read (REPEATABLE READ, statement timeout). Host rows: GET /operator/hosts. Viewer or operator role.
+         */
+        get: operations["getApiV1OperatorCapacity"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/operator/history": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Hourly-rollup history for trend charts beyond 7 d (lifecycle latency, host PSI)
+         * @description Series from the hourly rollups (migration 0080, kept 90 d). Buckets: 1 h for 7d, 6 h for 30d, 1 d for 90d (UTC-aligned, sparse). Latency percentiles of multi-hour buckets are the weighted median of the hourly percentiles; PSI avg is sample-weighted, max is the maximum.
+         */
+        get: operations["getApiV1OperatorHistory"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/operator/metrics": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Request-level CloudWatch series (API, load balancer and gateway p95, 5xx, SQS depth and age)
+         * @description GetMetricData over the window (1h: 60 s periods, 24h: 300 s, 7d: 1800 s; at most 360 points per series), cached 60 s. CloudWatch errors answer 200 with status degraded, empty series and a typed error.
+         */
+        get: operations["getApiV1OperatorMetrics"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/operator/performance": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Lifecycle latency, start/resume paths, checkpoints, capacity waits, tool calls and reliability
+         * @description Operator dashboard Performance page. Percentiles are percentile_cont (linear interpolation); the window figures come from one database snapshot, the trend, checkpoints and tool calls from a second one taken concurrently. Durations in milliseconds, sizes in bytes. Windows are rolling (now − window, now].
+         */
+        get: operations["getApiV1OperatorPerformance"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/operator/business": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Growth, subscriptions, MRR, revenue, conversion and usage across organizations
+         * @description Operator dashboard Customers and revenue page. One database snapshot; billing figures are this environment’s billing mode only; nothing is excluded (internal and test organizations count). Windows are rolling (now − window, now].
+         */
+        get: operations["getApiV1OperatorBusiness"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
 }
 export type webhooks = Record<string, never>;
 export interface components {
@@ -5405,6 +5582,55 @@ export interface components {
                 [key: string]: unknown;
             };
             result?: {
+                /** @description suspend and fork: whether the capture is in durable storage. false while `durability.state` is pending (the suspend completed on its host) or lost; true once it committed. Absent on other kinds. */
+                durable?: boolean;
+                /** @description suspend: `local_commit` when the suspend completed on its host and the durable copy followed in the background. */
+                suspend_path?: string;
+                durability?: {
+                    /**
+                     * @description pending: sealed on its host, the durable copy is being written; durable: the copy committed; lost: the copy could not be made and the previous recovery point stays current.
+                     * @enum {string}
+                     */
+                    state: "pending" | "durable" | "lost";
+                    /** @description The checkpoint being made durable. */
+                    checkpoint_id?: string;
+                    /** @description Its generation on the host. */
+                    generation_id?: string;
+                    /** @description RFC 3339: when the suspend (or fork) completed on its host. */
+                    local_commit_at?: string;
+                    /** @description RFC 3339: when the durable copy is expected to have committed (local_commit_at + the deadline). */
+                    durable_by?: string;
+                    /** @description RFC 3339 (state durable): when the durable copy committed. */
+                    durable_at?: string;
+                    /** @description State durable: local_commit_at to durable_at, in milliseconds. */
+                    local_commit_to_durable_ms?: number;
+                    /** @description RFC 3339: set once durable_by passed while the copy was still pending; it keeps retrying. */
+                    overdue_at?: string;
+                    /** @description State lost: why, e.g. host_lost. */
+                    reason?: string;
+                    /** @description State lost: the error code of the failed copy. */
+                    code?: string;
+                    recovery_point_checkpoint_id?: string | null;
+                } & {
+                    [key: string]: unknown;
+                };
+                lost_suspend?: {
+                    /** @description The suspend checkpoint whose durable copy was lost. */
+                    checkpoint_id: string;
+                    /** @description Its generation on the host. */
+                    generation_id?: string;
+                    /** @description Why it was lost, e.g. host_lost. */
+                    reason?: string;
+                    /** @description RFC 3339: when that suspend captured the workspace. */
+                    suspended_at?: string;
+                    /** @description The earlier durable checkpoint this resume restored. */
+                    restored_checkpoint_id?: string;
+                    /** @description RFC 3339: when the restored checkpoint committed; the workspace state is as of then. */
+                    state_as_of?: string;
+                } & {
+                    [key: string]: unknown;
+                };
+            } & {
                 [key: string]: unknown;
             };
         };
@@ -6525,6 +6751,10 @@ export interface components {
              */
             project_id: string;
             workspace_key: string;
+            /** @description Searchable workspace metadata; not secrets. At most 50 labels. */
+            labels: {
+                [key: string]: string;
+            };
             /**
              * Format: uuid
              * @description UUIDv7, lowercase canonical form.
@@ -7345,6 +7575,10 @@ export interface operations {
                         status: "verified" | "password_reset_required";
                         /** @description Present with password_reset_required: single-use token for POST /api/auth/password/reset/confirm. */
                         reset_token?: string;
+                        /** @description True when this response opened a session (the registering browser); false: sign in. */
+                        signed_in: boolean;
+                        /** @description Send as X-CSRF-Token on subsequent mutations. */
+                        csrf_token?: string;
                     };
                 };
             };
@@ -8344,7 +8578,7 @@ export interface operations {
                 content: {
                     "application/json": {
                         status: "verified" | "password_reset_required";
-                        /** @description Present with password_reset_required: single-use token for POST /api/auth/password/reset/confirm. */
+                        /** @description Present with password_reset_required: single-use token for POST /v1/auth/password/reset/confirm. */
                         reset_token?: string;
                     };
                 };
@@ -11352,6 +11586,10 @@ export interface operations {
                 "application/json": {
                     /** @description Stable workspace key, unique per organization (e.g. `${customerId}/${projectId}`). */
                     key: string;
+                    /** @description Searchable workspace metadata; not secrets. At most 50 labels. */
+                    labels?: {
+                        [key: string]: string;
+                    };
                     /** @description Template slug; new workspaces use its latest published version. */
                     template: string;
                     /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
@@ -11443,6 +11681,8 @@ export interface operations {
                 state?: "creating" | "starting" | "running" | "suspending" | "suspended" | "resuming" | "forking" | "stopping" | "failed" | "deleting" | "deleted";
                 desired_state?: "running" | "suspended" | "deleted";
                 key_prefix?: string;
+                /** @description JSON object of exact label matches; all pairs must match. */
+                labels?: string;
                 include_deleted?: boolean;
                 /** @description persistent (default), session or any. Key lookups pass any. */
                 lifetime?: "persistent" | "session" | "any";
@@ -11498,6 +11738,8 @@ export interface operations {
                 state?: "creating" | "starting" | "running" | "suspending" | "suspended" | "resuming" | "forking" | "stopping" | "failed" | "deleting" | "deleted";
                 desired_state?: "running" | "suspended" | "deleted";
                 key_prefix?: string;
+                /** @description JSON object of exact label matches; all pairs must match. */
+                labels?: string;
                 include_deleted?: boolean;
                 /** @description persistent (default), session or any. Key lookups pass any. */
                 lifetime?: "persistent" | "session" | "any";
@@ -11671,6 +11913,56 @@ export interface operations {
             };
         };
     };
+    putV1WorkspacesWorkspaceIdLabels: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                workspace_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Searchable workspace metadata; not secrets. At most 50 labels. */
+                    labels: {
+                        [key: string]: string;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Workspace"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     putV1WorkspacesWorkspaceIdIdlePolicy: {
         parameters: {
             query?: never;
@@ -11895,7 +12187,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description Seconds from now the workspace must stay idle before it is suspended (30..3600). */
+                    /** @description Seconds from now the workspace must stay idle before it is suspended (0..3600; 0 = as soon as it is idle). */
                     after_seconds: number;
                 };
             };
@@ -12420,6 +12712,8 @@ export interface operations {
                             plan_key: string;
                             catalog_version: string;
                             source: "override" | "subscription" | "trial" | "default";
+                            /** @description When this plan grant stops applying (a trial or partner grant); null when it lasts until changed. */
+                            ends_at: string | null;
                         } | null;
                         /** @description Resolved plan limits (null = unlimited). */
                         limits: {
@@ -12478,6 +12772,10 @@ export interface operations {
                 "application/json": {
                     /** @description Stable workspace key, unique per organization (e.g. `${customerId}/${projectId}`). */
                     key: string;
+                    /** @description Searchable workspace metadata; not secrets. At most 50 labels. */
+                    labels?: {
+                        [key: string]: string;
+                    };
                     /** @description Template slug; new workspaces use its latest published version. */
                     template: string;
                     /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
@@ -12569,6 +12867,8 @@ export interface operations {
                 state?: "creating" | "starting" | "running" | "suspending" | "suspended" | "resuming" | "forking" | "stopping" | "failed" | "deleting" | "deleted";
                 desired_state?: "running" | "suspended" | "deleted";
                 key_prefix?: string;
+                /** @description JSON object of exact label matches; all pairs must match. */
+                labels?: string;
                 include_deleted?: boolean;
                 /** @description persistent (default), session or any. Key lookups pass any. */
                 lifetime?: "persistent" | "session" | "any";
@@ -12624,6 +12924,8 @@ export interface operations {
                 state?: "creating" | "starting" | "running" | "suspending" | "suspended" | "resuming" | "forking" | "stopping" | "failed" | "deleting" | "deleted";
                 desired_state?: "running" | "suspended" | "deleted";
                 key_prefix?: string;
+                /** @description JSON object of exact label matches; all pairs must match. */
+                labels?: string;
                 include_deleted?: boolean;
                 /** @description persistent (default), session or any. Key lookups pass any. */
                 lifetime?: "persistent" | "session" | "any";
@@ -12797,6 +13099,56 @@ export interface operations {
             };
         };
     };
+    putApiV1WorkspacesWorkspaceIdLabels: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                workspace_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    /** @description Searchable workspace metadata; not secrets. At most 50 labels. */
+                    labels: {
+                        [key: string]: string;
+                    };
+                };
+            };
+        };
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Workspace"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     putApiV1WorkspacesWorkspaceIdIdlePolicy: {
         parameters: {
             query?: never;
@@ -13021,7 +13373,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description Seconds from now the workspace must stay idle before it is suspended (30..3600). */
+                    /** @description Seconds from now the workspace must stay idle before it is suspended (0..3600; 0 = as soon as it is idle). */
                     after_seconds: number;
                 };
             };
@@ -13619,6 +13971,8 @@ export interface operations {
                             plan_key: string;
                             catalog_version: string;
                             source: "override" | "subscription" | "trial" | "default";
+                            /** @description When this plan grant stops applying (a trial or partner grant); null when it lasts until changed. */
+                            ends_at: string | null;
                         } | null;
                         /** @description Resolved plan limits (null = unlimited). */
                         limits: {
@@ -27309,8 +27663,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -27693,8 +28047,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -28020,8 +28374,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -28364,8 +28718,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -28748,8 +29102,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -29075,8 +29429,8 @@ export interface operations {
                              * @description RFC 3339 UTC timestamp with Z.
                              */
                             resets_at: string;
-                            /** @description The entitling subscription period, else the calendar month (UTC). */
-                            source: "subscription" | "calendar_month";
+                            /** @description The entitling subscription period; `grant`: the window of a time-limited plan grant (a trial or partner grant), which ends at `end` rather than resetting; else the calendar month (UTC), counted from the end of a trial or partner grant that ended in it. */
+                            source: "subscription" | "calendar_month" | "grant";
                             /**
                              * Format: date-time
                              * @description First hour whose usage counts in this period (RFC 3339 UTC). Usage is metered per UTC hour, and each hour belongs to the period that contains its start (the hour's ledger rows keep the plan in force at that instant and are sent to Stripe with that timestamp). When the period starts inside an hour (after a plan change, or a subscription created mid-hour), that hour's usage counts toward the previous period, so counted_from is `start` rounded up to the next full hour; on a full hour it equals `start`. Before counted_from passes, the period has no counted usage (`estimate_status` no_data) even while workspaces run: their usage is in the usage series under the hour containing `start`.
@@ -32046,6 +32400,7 @@ export interface operations {
                             allowances: {
                                 [key: string]: unknown;
                             };
+                            grant_days: number | null;
                             prices: {
                                 interval: "month" | "year";
                                 /** @description Price in the currency’s minor unit (cents). */
@@ -32115,6 +32470,8 @@ export interface operations {
                             plan_key: string;
                             catalog_version: string;
                             source: "override" | "subscription" | "trial" | "default";
+                            /** @description When this plan grant stops applying (a trial or partner grant); null when it lasts until changed. */
+                            ends_at: string | null;
                         } | null;
                         subscription: {
                             /**
@@ -32472,6 +32829,7 @@ export interface operations {
                             allowances: {
                                 [key: string]: unknown;
                             };
+                            grant_days: number | null;
                             prices: {
                                 interval: "month" | "year";
                                 /** @description Price in the currency’s minor unit (cents). */
@@ -32541,6 +32899,8 @@ export interface operations {
                             plan_key: string;
                             catalog_version: string;
                             source: "override" | "subscription" | "trial" | "default";
+                            /** @description When this plan grant stops applying (a trial or partner grant); null when it lasts until changed. */
+                            ends_at: string | null;
                         } | null;
                         subscription: {
                             /**
@@ -32926,6 +33286,7 @@ export interface operations {
                         user_id: string;
                         /** @enum {boolean} */
                         operator: true;
+                        role: "viewer" | "operator";
                         /**
                          * Format: date-time
                          * @description RFC 3339 UTC timestamp with Z.
@@ -33498,6 +33859,10 @@ export interface operations {
                             controller_leases: {
                                 total: number;
                                 expired: number;
+                                /** @description Leases whose loop_state is late. */
+                                late: number;
+                                /** @description Leases whose loop_state is stalled (what Status alerts on). */
+                                stalled: number;
                                 leases: {
                                     name: string;
                                     holder: string;
@@ -33519,6 +33884,13 @@ export interface operations {
                                     expires_at: string;
                                     expired: boolean;
                                     renewed_age_seconds: number;
+                                    /**
+                                     * @description Against the loop's cell-loop-stalled CloudWatch alarm threshold: running (held), handover (no holder for at most one interval + 60 s, e.g. a deploy's release), late (no holder for longer, not stalled yet), stalled (no renewal for longer than the threshold).
+                                     * @enum {string}
+                                     */
+                                    loop_state: "running" | "handover" | "late" | "stalled";
+                                    /** @description The loop's alarm threshold: stalled past this many seconds without a renewal. */
+                                    stall_after_seconds: number;
                                 }[];
                             };
                             stale_after_seconds: number;
@@ -33893,6 +34265,100 @@ export interface operations {
             };
         };
     };
+    getApiV1OperatorOperationsId: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * Format: uuid
+                         * @description UUIDv7, lowercase canonical form.
+                         */
+                        id: string;
+                        kind: string;
+                        state: string;
+                        state_reason: string | null;
+                        /**
+                         * Format: uuid
+                         * @description UUIDv7, lowercase canonical form.
+                         */
+                        organization_id: string;
+                        workspace_id: string | null;
+                        principal_type: string;
+                        principal_id: string | null;
+                        request_id: string | null;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        created_at: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        updated_at: string;
+                        started_at: string | null;
+                        completed_at: string | null;
+                        /** @description now - created_at. */
+                        age_seconds: number;
+                        /** @description Claims so far (the claim fencing token). */
+                        attempt: number;
+                        claimed_by: string | null;
+                        claim_expires_at: string | null;
+                        /** @description Claimed but the lease expired (controller crashed or stalled). */
+                        claim_expired: boolean;
+                        next_attempt_at: string | null;
+                        reservation_ids: string[];
+                        volume_id: string | null;
+                        depends_on_operation_id: string | null;
+                        input: {
+                            [key: string]: unknown;
+                        } | null;
+                        result: {
+                            [key: string]: unknown;
+                        } | null;
+                        error: {
+                            [key: string]: unknown;
+                        } | null;
+                        /** @description Fields left out because their JSON is larger than 16384 bytes. */
+                        truncated: ("input" | "result" | "error")[];
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     getApiV1OperatorRestrictions: {
         parameters: {
             query?: {
@@ -35240,4 +35706,1087 @@ export interface operations {
             };
         };
     };
+    getApiV1OperatorStatus: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        cards: {
+                            hosts: {
+                                ready: number;
+                                /** @description Hosts that are not terminated. */
+                                total: number;
+                            };
+                            running_workspaces: number;
+                            waiting_for_capacity: {
+                                /** @description Operations in capacity_pending (starts, resumes, forks, restores, moves, volume work). */
+                                count: number;
+                                oldest_age_seconds: number | null;
+                            };
+                            failed_operations_last_hour: number;
+                        };
+                        /** @description One row per component, in this order: cell_loops, database, hosts, capacity, operations, billing, usage, mail. */
+                        health: {
+                            /** @enum {string} */
+                            component: "cell_loops" | "database" | "hosts" | "capacity" | "operations" | "billing" | "usage" | "mail";
+                            /** @enum {string} */
+                            state: "ok" | "warn" | "alert";
+                            /** @description One line: what is wrong (or the healthy figures). */
+                            detail: string;
+                            since: string | null;
+                        }[];
+                        fleet_events: {
+                            window_hours: number;
+                            /** @description Warning and alert events in the window. */
+                            total: number;
+                            truncated: boolean;
+                            /** @description Newest first, at most 50. */
+                            data: {
+                                /**
+                                 * Format: uuid
+                                 * @description UUIDv7, lowercase canonical form.
+                                 */
+                                id: string;
+                                cell_id: string;
+                                pool: string | null;
+                                host_id: string | null;
+                                instance_id: string | null;
+                                kind: string;
+                                severity: "warning" | "alert";
+                                message: string;
+                                details: {
+                                    [key: string]: unknown;
+                                } | null;
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                created_at: string;
+                            }[];
+                        };
+                        cloudwatch_dashboard_url: string | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OperatorCapacity: {
+        parameters: {
+            query?: {
+                /** @description Window as hours or days, e.g. `1h`, `24h`, `7d`; at most `30d` (720h). */
+                window?: string;
+                /** @description Timeline rows. */
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        window: {
+                            value: string;
+                            seconds: number;
+                            /**
+                             * Format: date-time
+                             * @description RFC 3339 UTC timestamp with Z.
+                             */
+                            since: string;
+                        };
+                        /** @description Managed pools by cell and pool (at most 100). */
+                        pools: {
+                            cell_id: string;
+                            pool: string;
+                            asg_name: string;
+                            computed_at: string | null;
+                            reconciled_at: string | null;
+                            plan_error: string | null;
+                            instance_type: string | null;
+                            /** @description min/desired/max from pool_capacity; the rest from the plan’s supply (last tick). */
+                            hosts: {
+                                min: number;
+                                /** @description The controller’s persisted target (pool_capacity.desired_hosts). */
+                                desired: number;
+                                max: number;
+                                asg_desired: number | null;
+                                asg_max: number | null;
+                                ready: number | null;
+                                pending: number | null;
+                                draining: number | null;
+                                cordoned: number | null;
+                                drained: number | null;
+                                suspect: number | null;
+                                unhealthy: number | null;
+                                terminating: number | null;
+                                stuck: number | null;
+                                unfulfilled: number | null;
+                                planned: number | null;
+                            };
+                            /** @description Host targets by dimension; target = unclamped reduced by the clamp. */
+                            targets: {
+                                min_hosts: number | null;
+                                memory: number | null;
+                                packing: number | null;
+                                cpu: number | null;
+                                disk: number | null;
+                                unclamped: number | null;
+                                target: number | null;
+                            };
+                            desired_now: number | null;
+                            desired_after: number | null;
+                            desired_after_unclamped: number | null;
+                            need_new_unclamped: number | null;
+                            clamp: {
+                                reason: string | null;
+                                bound: string | null;
+                                cap: number | null;
+                                /** @description Counts keyed by value. */
+                                caps: {
+                                    [key: string]: number;
+                                };
+                            };
+                            /** @description Plan C, Q, G, R and U (MiB). */
+                            ram: {
+                                committed_mib: number | null;
+                                queued_mib: number | null;
+                                growth_mib: number | null;
+                                reserve_mib: number | null;
+                                usable_per_host_mib: number | null;
+                                /** @description Sum of allocatable RAM of the pool’s ready hosts now (live, like /cells capacity.ready). */
+                                ready_allocatable_mib: number;
+                            };
+                            cpu: {
+                                committed_millis: number | null;
+                                queued_millis: number | null;
+                            };
+                            disk: {
+                                committed_gib: number | null;
+                                queued_gib: number | null;
+                            };
+                            /** @description Eligible queued demand the plan counted. */
+                            queued: {
+                                items: number | null;
+                                /** @description The controller bounded its queue. */
+                                truncated: boolean;
+                            };
+                            high_watermark: number | null;
+                            pressure: string[];
+                            /** @description Counts keyed by value. */
+                            excluded: {
+                                [key: string]: number;
+                            };
+                            notes: string[];
+                            capacity_pending_reason: string | null;
+                            capacity_pending_since: string | null;
+                            alert_state: string;
+                            alert_raised_at: string | null;
+                            scale_out_enabled: boolean;
+                            scale_in_enabled: boolean;
+                        }[];
+                        /** @description Operations in capacity_pending. */
+                        waiting_starts: {
+                            total: number;
+                            truncated: boolean;
+                            /** @description Oldest first, at most 200. */
+                            data: {
+                                /**
+                                 * Format: uuid
+                                 * @description UUIDv7, lowercase canonical form.
+                                 */
+                                operation_id: string;
+                                kind: string;
+                                /**
+                                 * Format: uuid
+                                 * @description UUIDv7, lowercase canonical form.
+                                 */
+                                organization_id: string;
+                                workspace_id: string | null;
+                                reason: string | null;
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                created_at: string;
+                                age_seconds: number;
+                                deadline_at: string | null;
+                                required: {
+                                    cpu_millis: number;
+                                    memory_mib: number;
+                                    disk_gib: number;
+                                } | null;
+                                scale_out: string | null;
+                                attempt: number;
+                                next_attempt_at: string | null;
+                            }[];
+                        };
+                        timeline: {
+                            limit: number;
+                            truncated: boolean;
+                            /** @description Capacity actions and drains active in the window (not finished before it), newest start first. */
+                            data: {
+                                type: "capacity_action" | "drain";
+                                /**
+                                 * Format: uuid
+                                 * @description UUIDv7, lowercase canonical form.
+                                 */
+                                id: string;
+                                cell_id: string;
+                                pool: string | null;
+                                /** @description launch | retire | replace (capacity actions); drain | cordon (drains). */
+                                kind: string;
+                                state: string;
+                                reason: string | null;
+                                host_id: string | null;
+                                instance_ids: string[];
+                                replaces_instance_id: string | null;
+                                desired_before: number | null;
+                                desired_after: number | null;
+                                retire: boolean | null;
+                                blocked_reason: string | null;
+                                abort_reason: string | null;
+                                error: {
+                                    [key: string]: unknown;
+                                } | null;
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                started_at: string;
+                                completed_at: string | null;
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                updated_at: string;
+                            }[];
+                        };
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OperatorHistory: {
+        parameters: {
+            query: {
+                /** @description latency: per operation kind; psi: fleet and top hosts. */
+                metric: "latency" | "psi";
+                window?: "7d" | "30d" | "90d";
+                kind?: "open" | "suspend" | "resume" | "fork" | "snapshot" | "restore" | "delete" | "move" | "resize" | "volume_create" | "volume_attach" | "volume_detach" | "volume_delete" | "reset" | "layer_snapshot";
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @enum {string} */
+                        metric: "latency";
+                        window: "7d" | "30d" | "90d";
+                        /** @description Bucket length in seconds: 3600 (7d), 21600 (30d), 86400 (90d). */
+                        bucket_seconds: number;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        start: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        end: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        /** @description Rollup job cursor: every hour before next_hour is computed. null before the first run. */
+                        rollup: {
+                            next_hour: string | null;
+                            last_run_at: string | null;
+                            /** @description Hourly rows are kept this many days. */
+                            retention_days: number;
+                        };
+                        /** @description How hourly rows were combined into buckets. */
+                        aggregation: string;
+                        kinds: {
+                            kind: string;
+                            points: {
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                t: string;
+                                /** @description Some hour of this bucket is not rolled up yet (the current bucket). */
+                                partial: boolean;
+                                /** @description Hourly rows with completions in the bucket. */
+                                hours: number;
+                                /** @description Succeeded + failed operations completed in the bucket (canceled excluded). */
+                                completed: number;
+                                succeeded: number;
+                                failed: number;
+                                /** @description Succeeded operations with started_at (population of queue and run). */
+                                timed: number;
+                                success_rate: number | null;
+                                /** @description Total (completed_at - created_at) over succeeded operations: weighted median of the bucket's hourly percentiles (exact for 1 h buckets). */
+                                total: {
+                                    p50: number | null;
+                                    p95: number | null;
+                                    p99: number | null;
+                                };
+                                /** @description Queue wait (started_at - created_at) over succeeded operations: weighted median of the bucket's hourly percentiles (exact for 1 h buckets). */
+                                queue: {
+                                    p50: number | null;
+                                    p95: number | null;
+                                    p99: number | null;
+                                };
+                                /** @description Run time (completed_at - started_at) over succeeded operations: weighted median of the bucket's hourly percentiles (exact for 1 h buckets). */
+                                run: {
+                                    p50: number | null;
+                                    p95: number | null;
+                                    p99: number | null;
+                                };
+                            }[];
+                        }[];
+                    } | {
+                        /** @enum {string} */
+                        metric: "psi";
+                        window: "7d" | "30d" | "90d";
+                        /** @description Bucket length in seconds: 3600 (7d), 21600 (30d), 86400 (90d). */
+                        bucket_seconds: number;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        start: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        end: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        /** @description Rollup job cursor: every hour before next_hour is computed. null before the first run. */
+                        rollup: {
+                            next_hour: string | null;
+                            last_run_at: string | null;
+                            /** @description Hourly rows are kept this many days. */
+                            retention_days: number;
+                        };
+                        /** @description How hourly rows were combined into buckets. */
+                        aggregation: string;
+                        /** @description All hosts together. */
+                        fleet: {
+                            /**
+                             * Format: date-time
+                             * @description RFC 3339 UTC timestamp with Z.
+                             */
+                            t: string;
+                            /** @description Some hour of this bucket is not rolled up yet (the current bucket). */
+                            partial: boolean;
+                            /** @description Heartbeat readings sampled (about one per host per minute). */
+                            samples: number;
+                            memory: {
+                                avg: number | null;
+                                max: number | null;
+                            };
+                            cpu: {
+                                avg: number | null;
+                                max: number | null;
+                            };
+                            io: {
+                                avg: number | null;
+                                max: number | null;
+                            };
+                            /** @description Hosts with samples in the bucket. */
+                            hosts: number;
+                        }[];
+                        hosts: {
+                            /**
+                             * Format: uuid
+                             * @description UUIDv7, lowercase canonical form.
+                             */
+                            host_id: string;
+                            instance_id: string;
+                            cell_id: string;
+                            pool: string;
+                            peak: number | null;
+                            points: {
+                                /**
+                                 * Format: date-time
+                                 * @description RFC 3339 UTC timestamp with Z.
+                                 */
+                                t: string;
+                                /** @description Some hour of this bucket is not rolled up yet (the current bucket). */
+                                partial: boolean;
+                                /** @description Heartbeat readings sampled (about one per host per minute). */
+                                samples: number;
+                                memory: {
+                                    avg: number | null;
+                                    max: number | null;
+                                };
+                                cpu: {
+                                    avg: number | null;
+                                    max: number | null;
+                                };
+                                io: {
+                                    avg: number | null;
+                                    max: number | null;
+                                };
+                            }[];
+                        }[];
+                        /** @description Hosts with samples in the window. */
+                        hosts_total: number;
+                        /** @description More than 10 hosts had samples; only the ones with the highest peak are listed. */
+                        hosts_truncated: boolean;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OperatorMetrics: {
+        parameters: {
+            query?: {
+                window?: "1h" | "24h" | "7d";
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        window: "1h" | "24h" | "7d";
+                        /** @description CloudWatch period: 60 (1h), 300 (24h), 1800 (7d). */
+                        period_seconds: number;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        start: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        end: string;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        fetched_at: string;
+                        /** @description Served from the 60 s in-process cache. */
+                        cached: boolean;
+                        region: string | null;
+                        dashboard_url: string | null;
+                        /** @description ok: every series complete; partial: some series not complete; degraded: CloudWatch could not be read (series empty, see error). */
+                        status: "ok" | "partial" | "degraded";
+                        error: {
+                            code: "not_configured" | "access_denied" | "throttled" | "invalid_query" | "no_credentials" | "timeout" | "unavailable";
+                            message: string;
+                        } | null;
+                        series: {
+                            /** @description Stable series id (api_latency_p95, edge_latency_p95, api_requests, api_5xx, edge_5xx, gateway_latency_p95, gateway_requests, sqs_depth_<topic>, sqs_age_<topic>, sqs_dlq_depth_<topic>). */
+                            id: string;
+                            group: "api" | "gateway" | "sqs";
+                            label: string;
+                            /** @description seconds (latency, message age) or count per period (requests, 5xx) / sampled maximum (queue depth). */
+                            unit: "seconds" | "count";
+                            /** @description CloudWatch namespace. */
+                            namespace: string;
+                            /** @description CloudWatch metric name. */
+                            metric: string;
+                            /** @description CloudWatch dimensions (name -> value). */
+                            dimensions: {
+                                [key: string]: string;
+                            };
+                            /** @description CloudWatch statistic (p95, Sum, Maximum). */
+                            stat: string;
+                            /** @description GetMetricData StatusCode of this series; missing = not in the response. */
+                            status: "complete" | "partial_data" | "internal_error" | "forbidden" | "missing";
+                            /** @description Period start of each point, ascending. */
+                            timestamps: string[];
+                            /** @description One value per timestamp, in `unit`. */
+                            values: number[];
+                        }[];
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OperatorPerformance: {
+        parameters: {
+            query?: {
+                /** @description Rolling window (at most 30 days). */
+                window?: "1h" | "24h" | "7d" | "30d";
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        window: "1h" | "24h" | "7d" | "30d";
+                        window_seconds: number;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        window_start: string;
+                        /** @description Latency of succeeded operations of open, resume, suspend, fork and delete (always all five, in that order). */
+                        lifecycle: {
+                            /** @description Operation kind. */
+                            kind: string;
+                            /** @description Operations of this kind that succeeded within the window (completed_at in the window; created_at may be earlier). */
+                            samples: number;
+                            /** @description Of those, operations without started_at: counted in total_ms, not in queue_wait_ms or run_ms. */
+                            missing_started_at: number;
+                            /** @description started_at − created_at: waiting to be claimed, for an older operation of the workspace, and for capacity. */
+                            queue_wait_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                                p99: number | null;
+                            };
+                            /** @description completed_at − started_at: the cell executing it. */
+                            run_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                                p99: number | null;
+                            };
+                            /** @description completed_at − created_at: the server-side operation time. */
+                            total_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                                p99: number | null;
+                            };
+                        }[];
+                        /** @description Daily p50/p95 of the total operation time of the lifecycle kinds. */
+                        trend: {
+                            /** @description UTC days shown: max(7, window in days); the 1 h and 24 h windows still show a week. */
+                            days: number;
+                            /**
+                             * Format: date-time
+                             * @description RFC 3339 UTC timestamp with Z.
+                             */
+                            since: string;
+                            series: {
+                                kind: string;
+                                /** @description One point per UTC day, oldest first; days without operations have samples 0. */
+                                points: {
+                                    /** @description UTC day. */
+                                    day: string;
+                                    /** @description Succeeded operations completed that day. */
+                                    samples: number;
+                                    total_p50_ms: number | null;
+                                    total_p95_ms: number | null;
+                                }[];
+                            }[];
+                            /** @description Comparison lines (docs/progress/startup-latency.md); only kinds with a recorded baseline. */
+                            baselines: {
+                                kind: string;
+                                /** @description Benchmark p50 of the server operation time, milliseconds. */
+                                p50_ms: number;
+                                /** @description Benchmark p95, milliseconds. */
+                                p95_ms: number;
+                                samples: number;
+                                /** @description UTC day of the benchmark run. */
+                                measured_on: string;
+                                environment: string;
+                                /** @description What the benchmark measured. */
+                                scenario: string;
+                                /** @description Where the numbers come from (progress document and receipt). */
+                                source: string;
+                            }[];
+                        };
+                        paths: {
+                            open: {
+                                /** @description Succeeded opens within the window. */
+                                succeeded: number;
+                                /** @description result.start_path: warm (cloned from the host’s warm snapshot) or boot; warm and boot always present. */
+                                by_path: {
+                                    /** @description Path the cell recorded in the operation result; `unrecorded` when the result has none. */
+                                    path: string;
+                                    /** @description Succeeded operations that took this path within the window. */
+                                    count: number;
+                                    /** @description Server-side operation time (completed_at − created_at). */
+                                    total_ms: {
+                                        p50: number | null;
+                                        p95: number | null;
+                                    };
+                                    /** @description Host VM start to guest ready (result.boot_to_ready_ms), for results that carry it. */
+                                    boot_to_ready_ms: {
+                                        p50: number | null;
+                                        p95: number | null;
+                                    };
+                                }[];
+                                warm_fallback: {
+                                    /** @description Succeeded opens whose result carries warm_fallback (a warm-allowed start booted instead). */
+                                    count: number;
+                                    rate: number | null;
+                                    /** @description Counts keyed by value. */
+                                    by_reason: {
+                                        [key: string]: number;
+                                    };
+                                };
+                            };
+                            resume: {
+                                /** @description Succeeded resumes within the window. */
+                                succeeded: number;
+                                /** @description result.resume_path; local_cache, prestaged and download always present, cold_boot and others when they occurred. */
+                                by_path: {
+                                    /** @description Path the cell recorded in the operation result; `unrecorded` when the result has none. */
+                                    path: string;
+                                    /** @description Succeeded operations that took this path within the window. */
+                                    count: number;
+                                    /** @description Server-side operation time (completed_at − created_at). */
+                                    total_ms: {
+                                        p50: number | null;
+                                        p95: number | null;
+                                    };
+                                    /** @description Host VM start to guest ready (result.boot_to_ready_ms), for results that carry it. */
+                                    boot_to_ready_ms: {
+                                        p50: number | null;
+                                        p95: number | null;
+                                    };
+                                    /** @description DownloadGeneration time (result.download.download_ms), for prestaged/download/cold_boot. */
+                                    download_ms: {
+                                        p50: number | null;
+                                        p95: number | null;
+                                    };
+                                }[];
+                            };
+                        };
+                        /** @description By checkpoint kind (suspend always present). */
+                        checkpoints: {
+                            /** @description Checkpoint kind: suspend | snapshot | fork_source | layer_capture. */
+                            kind: string;
+                            /** @description Checkpoints committed (durable) within the window. */
+                            committed: number;
+                            /** @description Checkpoints that failed within the window. */
+                            failed: number;
+                            /** @description Stored size of the committed generation (all objects). */
+                            total_bytes: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Bytes the upload moved (chunked uploads skip reused chunks; single-object uploads send everything). */
+                            uploaded_bytes: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Host snapshot RPC (the VM is paused for part of it). */
+                            snapshot_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Upload to the durable store. */
+                            upload_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Checkpoint created → committed (snapshot, upload and verification). */
+                            capture_to_durable_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Per-checkpoint upload throughput: uploaded_bytes / upload_ms (MiB = 2^20 bytes). */
+                            upload_mib_per_s: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            upload_mib_per_s_overall: number | null;
+                        }[];
+                        /** @description Operations that left capacity_pending before migration 0079 have no first_capacity_pending_at and count as not waited. */
+                        capacity_waits: {
+                            /** @description Operations completed (succeeded or failed) within the window that waited for capacity (first_capacity_pending_at set). */
+                            waited: number;
+                            /** @description Time from first entering capacity_pending until started_at (completed_at when the operation failed there). */
+                            wait_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                                max: number | null;
+                            };
+                            /** @description Starts failed capacity_unavailable within the window (waited past the capacity deadline, default 15 min). */
+                            capacity_unavailable: number;
+                            /** @description Operations failed invalid_resources within the window. */
+                            invalid_resources: number;
+                            /** @description Of those, error.details.reason exceeds_host_class (larger than any host the pool can have). */
+                            exceeds_host_class: number;
+                        };
+                        /** @description From app.operator_tool_audit (all organizations), most calls first. */
+                        tool_calls: {
+                            /** @description exec | files | pty | process | git | browser. */
+                            tool: string;
+                            /** @description Tool calls within the window (every outcome). */
+                            calls: number;
+                            /** @description Calls with outcome error. */
+                            errors: number;
+                            /** @description Calls with outcome denied (authorization or stale ownership); not errors. */
+                            denied: number;
+                            error_rate: number | null;
+                            /** @description Gateway call duration. For stream actions (exec.attach, pty.attach, exec.output) it is the stream’s lifetime. */
+                            latency_ms: {
+                                p50: number | null;
+                                p95: number | null;
+                            };
+                            /** @description Per action, most calls first. */
+                            actions: {
+                                /** @description Gateway action, e.g. exec.start, files.read. */
+                                action: string;
+                                /** @description Tool calls within the window (every outcome). */
+                                calls: number;
+                                /** @description Calls with outcome error. */
+                                errors: number;
+                                /** @description Calls with outcome denied (authorization or stale ownership); not errors. */
+                                denied: number;
+                                error_rate: number | null;
+                                /** @description Gateway call duration. For stream actions (exec.attach, pty.attach, exec.output) it is the stream’s lifetime. */
+                                latency_ms: {
+                                    p50: number | null;
+                                    p95: number | null;
+                                };
+                            }[];
+                        }[];
+                        /** @description Operations completed within the window, per kind: the five lifecycle kinds always, others when they occurred. */
+                        reliability: {
+                            kind: string;
+                            succeeded: number;
+                            failed: number;
+                            success_rate: number | null;
+                        }[];
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OperatorBusiness: {
+        parameters: {
+            query?: {
+                /** @description Rolling window (at most 30 days). */
+                window?: "7d" | "30d";
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        generated_at: string;
+                        window: "7d" | "30d";
+                        window_seconds: number;
+                        /**
+                         * Format: date-time
+                         * @description RFC 3339 UTC timestamp with Z.
+                         */
+                        window_start: string;
+                        /** @description Stripe mode of every billing figure (this environment’s). */
+                        billing_mode: "test" | "live";
+                        /** @description The plan counted as free: DEFAULT_PLAN_KEY, the plan every new organization gets. */
+                        free_plan_key: string;
+                        growth: {
+                            /** @description Every UTC day the window touches, oldest first (the first and last day are partial). */
+                            daily: {
+                                /** @description UTC day. */
+                                day: string;
+                                /** @description Users created that day (within the window). */
+                                signups: number;
+                                /** @description Of those, users whose email is verified now. */
+                                verified_signups: number;
+                                /** @description Organizations created that day (including since deleted). */
+                                organizations_created: number;
+                            }[];
+                            users: {
+                                /** @description Every user row (all time). */
+                                total: number;
+                                /** @description Users with a verified email (all time). */
+                                verified: number;
+                                signups_in_window: number;
+                                verified_signups_in_window: number;
+                            };
+                            organizations: {
+                                /** @description Organizations not deleted (all time). */
+                                total: number;
+                                /** @description Deleted organizations (all time), not in total. */
+                                deleted: number;
+                                /** @description Created within the window, including since deleted. */
+                                created_in_window: number;
+                            };
+                            /** @description Distinct organizations with an operation that completed (succeeded or failed) in the last 7 / 30 days or is still queued, capacity_pending or running. Fixed windows, independent of `window`. */
+                            active_organizations: {
+                                last_7d: number;
+                                last_30d: number;
+                            };
+                        };
+                        money: {
+                            /** @description Organizations not deleted, by the plan in effect now (the entitlement resolver’s rule: override > subscription > trial > default, newest first). Most first. */
+                            organizations_by_plan: {
+                                /** @description `none` when no plan entitlement is in effect. */
+                                plan_key: string;
+                                organizations: number;
+                            }[];
+                            /** @description Stripe subscription projections of this billing mode, excluding canceled and incomplete_expired. */
+                            subscriptions: {
+                                /** @description Status active or past_due on a price above zero (what MRR counts). */
+                                paying: number;
+                                /** @description Of the paying ones, set to cancel (cancel_at_period_end or cancel_at): still in MRR until they end. */
+                                canceling: number;
+                                trialing: number;
+                                /** @description Status past_due (payment failed, Stripe retrying). */
+                                past_due: number;
+                                /** @description Status unpaid (retries exhausted; not in MRR). */
+                                unpaid: number;
+                                /** @description Entitlement state grace: past due, still within payment_grace_days. */
+                                grace: number;
+                                /** @description Entitlement state restricted: new starts refused for non-payment. */
+                                restricted: number;
+                                /** @description Active/past_due subscriptions whose Stripe price is not one of the catalog’s monthly/yearly prices: not in MRR. */
+                                unpriced: number;
+                            };
+                            /** @description Monthly recurring revenue per currency: the list price (plan_prices.unit_amount_minor) of every paying subscription, a yearly price divided by 12, rounded to minor units. Before discounts and tax; overage and usage charges are not recurring and not included. */
+                            mrr: {
+                                /** @description ISO 4217, lower case (plan_prices / invoice currency). */
+                                currency: string;
+                                /** @description Minor units (cents for usd). */
+                                amount_minor: number;
+                                subscriptions: number;
+                            }[];
+                            /** @description Collected in the last 30 days (fixed, independent of `window`): amount_paid of invoices with status paid and paid_at in the last 30 days, per currency. Includes overage settlement invoices. */
+                            revenue_30d: {
+                                /** @description ISO 4217, lower case (plan_prices / invoice currency). */
+                                currency: string;
+                                /** @description Minor units (cents for usd). */
+                                amount_minor: number;
+                                invoices: number;
+                            }[];
+                            conversion: {
+                                /** @description Stripe trials. The catalog configures no trial today, so this stays empty until one is offered; free_to_paid is the funnel in use. */
+                                trial_to_paid: {
+                                    /** @description Subscriptions whose Stripe trial ended (trial_end) within the window. */
+                                    trials_ended: number;
+                                    /** @description Of those, subscriptions with a paid invoice (status paid, amount_paid > 0) at or after trial_end. */
+                                    converted: number;
+                                    rate: number | null;
+                                };
+                                /** @description New organizations that became paying customers. */
+                                free_to_paid: {
+                                    /** @description Organizations created within the window (every organization starts on the free plan). */
+                                    cohort: number;
+                                    /** @description Of those, organizations that have paid an invoice (status paid, amount_paid > 0) in this billing mode. */
+                                    converted: number;
+                                    rate: number | null;
+                                };
+                            };
+                        };
+                        usage: {
+                            /** @description Every meter; hours whose start is within the window (the current hour as far as rolled up). */
+                            meters: {
+                                /** @description Usage meter (usage_org_hourly). */
+                                meter: string;
+                                /** @description hours: CPU hours (cpu_seconds / 3600); gib_hours: GiB-hours (gib_seconds / 3600); gb: decimal gigabytes (bytes / 1e9). */
+                                unit: "hours" | "gib_hours" | "gb";
+                                /** @description Raw (unrounded) usage within the window, in `unit`. */
+                                quantity: number;
+                                /** @description Organizations with usage on this meter. */
+                                organizations: number;
+                                /** @description Part of quantity from organizations on the free plan now. */
+                                free_plan_quantity: number;
+                                free_plan_share: number | null;
+                            }[];
+                            /** @description At most 10 organizations, ranked by RAM GiB-hours (the main cost driver), then CPU hours. */
+                            top_organizations: {
+                                /**
+                                 * Format: uuid
+                                 * @description UUIDv7, lowercase canonical form.
+                                 */
+                                organization_id: string;
+                                name: string;
+                                plan_key: string | null;
+                                /** @description The organization has been deleted since (its usage still counts). */
+                                deleted: boolean;
+                                cpu_hours: number;
+                                /** @description memory_gib_seconds / 3600: the workspace RAM allocation while running. */
+                                ram_gib_hours: number;
+                                /** @description storage_gib_seconds / 3600 (private disk + retained snapshots). */
+                                storage_gib_hours: number;
+                                egress_gb: number;
+                            }[];
+                        };
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
 }