@shardflux/sdk 0.12.0 → 0.13.1

package/dist/generated/app-api.d.ts

@@ -1366,7 +1366,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch. Memory allocation (contracts §32): caps.allocation_mode elastic with caps.memory_mib_held; 422 validation_failed details.field caps.allocation_mode reason allocation_mode_not_available (the organization lacks elastic memory; nothing is created or changed), reason not_supported_for_mode (file_first); details.field caps.memory_mib_held reason requires_elastic (held without elastic) or exceeds_memory_mib (held above caps.memory_mib).
          */
         post: operations["postV1WorkspacesOpen"];
         delete?: never;
@@ -1588,7 +1588,7 @@ export interface paths {
         put?: never;
         /**
          * Fork a workspace into a new key (independent copy of its committed state)
-         * @description Creates the target workspace (same template version and disk layout) and a `fork` operation on it, admitted like a start. Caps default to the source’s. `lifetime` is the fork’s own (default persistent): forking a session keeps its state. A file-first source (contracts §29) is 409 not_supported_for_mode. Supports Idempotency-Key.
+         * @description Creates the target workspace (same template version and disk layout) and a `fork` operation on it, admitted like a start. Caps default to the source’s. `lifetime` is the fork’s own (default persistent): forking a session keeps its state. A file-first source (contracts §29) is 409 not_supported_for_mode. Supports Idempotency-Key. Caps (and the memory allocation mode) default to the source’s. Held fork (contracts §22.7): with Prefer: wait=<seconds> (at most 20), holds through the terminal operation. Success returns 200 with the running target, succeeded operation and a final-epoch tool token for agent_label/tools. Otherwise returns 202 with the fresh operation. Preference-Applied confirms the wait; without it, poll as usual. A token that could not be issued is null; fetch it from the target tool-token route. Memory allocation (contracts §32): caps.allocation_mode elastic with caps.memory_mib_held; 422 validation_failed details.field caps.allocation_mode reason allocation_mode_not_available (the organization lacks elastic memory; nothing is created or changed), reason not_supported_for_mode (file_first); details.field caps.memory_mib_held reason requires_elastic (held without elastic) or exceeds_memory_mib (held above caps.memory_mib).
          */
         post: operations["postV1WorkspacesWorkspaceIdFork"];
         delete?: never;
@@ -1648,7 +1648,7 @@ export interface paths {
         put?: never;
         /**
          * Save a layered workspace as the next version of an organization template
-         * @description Everything in the workspace becomes template content (its whole filesystem, minus the sf-scrub.v1 list, the contents of /proc, /sys, /dev, /run and /tmp, and shared-volume contents), stored as one new org layer on the workspace’s template chain. A running workspace is captured briefly (`operation`, layer_snapshot); a suspended one uses its current checkpoint; `checkpoint_id` saves a committed checkpoint instead. 202 SaveAsTemplateResponse: poll the build. Owners/admins and API keys with a tool permission (403 otherwise). Errors: 409 legacy_disk_layout, workspace_not_running, operation_in_progress, not_supported_for_mode (file-first, contracts §29), template_archived, 422 platform_template_slug, invalid_defaults, update_policy_not_available, too_many_acknowledged_findings, invalid_path, 403 quota_exceeded (concurrent_template_builds). Supports Idempotency-Key.
+         * @description Everything in the workspace becomes template content (its whole filesystem, minus the sf-scrub.v1 list, the contents of /proc, /sys, /dev, /run and /tmp, and shared-volume contents), stored as one new org layer on the workspace’s template chain. A running workspace is captured briefly (`operation`, layer_snapshot); a suspended one uses its current checkpoint; `checkpoint_id` saves a committed checkpoint instead. 202 SaveAsTemplateResponse: poll the build. Owners/admins and API keys with a tool permission (403 otherwise). Immutable paths (contracts §34.1): the new version declares the target template’s open version’s immutable paths (else the workspace’s version’s); their content comes from that template’s newest published version, not from the workspace (a draft publish keeps the draft’s own content). Errors: 409 legacy_disk_layout, workspace_not_running, operation_in_progress, not_supported_for_mode (file-first, contracts §29), template_archived, 422 platform_template_slug, invalid_defaults, too_many_acknowledged_findings, invalid_path, immutable_paths_unsupported_base (the workspace’s base has no guest agent with immutable_paths.v1; details.base), 403 quota_exceeded (concurrent_template_builds). Supports Idempotency-Key.
          */
         post: operations["postV1WorkspacesWorkspaceIdSaveAsTemplate"];
         delete?: never;
@@ -1759,7 +1759,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, key whose deletion is still in progress (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation. `mode` (contracts §29): omitted = processful for a new key and the stored mode for an existing one; `file_first` creates a workspace whose state is a versioned file tree with no VM between executions: it is ready at once (200 with a tool token, `observed_state` running, `tree_revision` 0, no operation), needs a layered template version (409 layout_unsupported otherwise) and is persistent (`lifetime: session` or `idle_policy` with it are 422 not_supported_for_mode); each open of a file-first key re-resolves the size of its execution VMs from `caps`, the template and the plan. 422 mode_not_available while the deployment does not offer file-first workspaces; reopening a key with another mode is 409 mode_mismatch. Memory allocation (contracts §32): caps.allocation_mode elastic with caps.memory_mib_held; 422 validation_failed details.field caps.allocation_mode reason allocation_mode_not_available (the organization lacks elastic memory; nothing is created or changed), reason not_supported_for_mode (file_first); details.field caps.memory_mib_held reason requires_elastic (held without elastic) or exceeds_memory_mib (held above caps.memory_mib).
          */
         post: operations["postApiV1WorkspacesOpen"];
         delete?: never;
@@ -1981,7 +1981,7 @@ export interface paths {
         put?: never;
         /**
          * Fork a workspace into a new key (independent copy of its committed state)
-         * @description Creates the target workspace (same template version and disk layout) and a `fork` operation on it, admitted like a start. Caps default to the source’s. `lifetime` is the fork’s own (default persistent): forking a session keeps its state. A file-first source (contracts §29) is 409 not_supported_for_mode. Supports Idempotency-Key.
+         * @description Creates the target workspace (same template version and disk layout) and a `fork` operation on it, admitted like a start. Caps default to the source’s. `lifetime` is the fork’s own (default persistent): forking a session keeps its state. A file-first source (contracts §29) is 409 not_supported_for_mode. Supports Idempotency-Key. Caps (and the memory allocation mode) default to the source’s. Held fork (contracts §22.7): with Prefer: wait=<seconds> (at most 20), holds through the terminal operation. Success returns 200 with the running target, succeeded operation and a final-epoch tool token for agent_label/tools. Otherwise returns 202 with the fresh operation. Preference-Applied confirms the wait; without it, poll as usual. A token that could not be issued is null; fetch it from the target tool-token route. Memory allocation (contracts §32): caps.allocation_mode elastic with caps.memory_mib_held; 422 validation_failed details.field caps.allocation_mode reason allocation_mode_not_available (the organization lacks elastic memory; nothing is created or changed), reason not_supported_for_mode (file_first); details.field caps.memory_mib_held reason requires_elastic (held without elastic) or exceeds_memory_mib (held above caps.memory_mib).
          */
         post: operations["postApiV1WorkspacesWorkspaceIdFork"];
         delete?: never;
@@ -2041,7 +2041,7 @@ export interface paths {
         put?: never;
         /**
          * Save a layered workspace as the next version of an organization template
-         * @description Everything in the workspace becomes template content (its whole filesystem, minus the sf-scrub.v1 list, the contents of /proc, /sys, /dev, /run and /tmp, and shared-volume contents), stored as one new org layer on the workspace’s template chain. A running workspace is captured briefly (`operation`, layer_snapshot); a suspended one uses its current checkpoint; `checkpoint_id` saves a committed checkpoint instead. 202 SaveAsTemplateResponse: poll the build. Owners/admins and API keys with a tool permission (403 otherwise). Errors: 409 legacy_disk_layout, workspace_not_running, operation_in_progress, not_supported_for_mode (file-first, contracts §29), template_archived, 422 platform_template_slug, invalid_defaults, update_policy_not_available, too_many_acknowledged_findings, invalid_path, 403 quota_exceeded (concurrent_template_builds). Supports Idempotency-Key.
+         * @description Everything in the workspace becomes template content (its whole filesystem, minus the sf-scrub.v1 list, the contents of /proc, /sys, /dev, /run and /tmp, and shared-volume contents), stored as one new org layer on the workspace’s template chain. A running workspace is captured briefly (`operation`, layer_snapshot); a suspended one uses its current checkpoint; `checkpoint_id` saves a committed checkpoint instead. 202 SaveAsTemplateResponse: poll the build. Owners/admins and API keys with a tool permission (403 otherwise). Immutable paths (contracts §34.1): the new version declares the target template’s open version’s immutable paths (else the workspace’s version’s); their content comes from that template’s newest published version, not from the workspace (a draft publish keeps the draft’s own content). Errors: 409 legacy_disk_layout, workspace_not_running, operation_in_progress, not_supported_for_mode (file-first, contracts §29), template_archived, 422 platform_template_slug, invalid_defaults, too_many_acknowledged_findings, invalid_path, immutable_paths_unsupported_base (the workspace’s base has no guest agent with immutable_paths.v1; details.base), 403 quota_exceeded (concurrent_template_builds). Supports Idempotency-Key.
          */
         post: operations["postApiV1WorkspacesWorkspaceIdSaveAsTemplate"];
         delete?: never;
@@ -2453,7 +2453,7 @@ export interface paths {
         put?: never;
         /**
          * Request a custom template build (queued for the isolated builder)
-         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
+         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings; immutable paths (contracts §34.1): invalid_path (details.field recipe.immutable[<i>]), immutable_path_removed (the recipe drops a path of the template’s open version; details.removed), immutable_paths_unsupported_base (a non-empty list on a base whose guest agent lacks immutable_paths.v1, or a recipe v1 build of a template with immutable paths; details.base {name, version})), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplateBuilds"];
         delete?: never;
@@ -2710,7 +2710,7 @@ export interface paths {
         put?: never;
         /**
          * Publish an organization template version
-         * @description Only a version produced by a registered `published` build (or a legacy `succeeded` one) whose scan and compatibility checks passed (409 `not_produced_by_succeeded_build` otherwise; 409 `version_archived`). New workspaces of the slug then use the latest published version; existing workspaces keep theirs. Idempotent. Owner/admin.
+         * @description Only a version produced by a registered `published` build (or a legacy `succeeded` one) whose scan and compatibility checks passed (409 `not_produced_by_succeeded_build` otherwise; 409 `version_archived`). New workspaces of the slug then use the latest published version; existing workspaces keep theirs, except their immutable paths (contracts §34), which show the latest published version from their next cold boot or resume. Idempotent. Owner/admin.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionPublish"];
         delete?: never;
@@ -2730,7 +2730,7 @@ export interface paths {
         put?: never;
         /**
          * Archive an organization template version
-         * @description Hides the version and stops `open` from picking it for new workspaces; existing workspaces are never changed (versions are immutable). Idempotent. Owner/admin.
+         * @description Hides the version and stops `open` from picking it for new workspaces; existing workspaces keep their version (versions are immutable). Archiving the latest published version rolls immutable paths (contracts §34) back: workspaces show the previous published version there from their next cold boot or resume. Idempotent. Owner/admin.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionArchive"];
         delete?: never;
@@ -2791,7 +2791,7 @@ export interface paths {
         put?: never;
         /**
          * Request a custom template build (queued for the isolated builder)
-         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
+         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings; immutable paths (contracts §34.1): invalid_path (details.field recipe.immutable[<i>]), immutable_path_removed (the recipe drops a path of the template’s open version; details.removed), immutable_paths_unsupported_base (a non-empty list on a base whose guest agent lacks immutable_paths.v1, or a recipe v1 build of a template with immutable paths; details.base {name, version})), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplateBuilds"];
         delete?: never;
@@ -2968,7 +2968,7 @@ export interface paths {
         put?: never;
         /**
          * Publish an organization template version
-         * @description Only a version produced by a registered `published` build (or a legacy `succeeded` one) whose scan and compatibility checks passed (409 `not_produced_by_succeeded_build` otherwise; 409 `version_archived`). New workspaces of the slug then use the latest published version; existing workspaces keep theirs. Idempotent. Owner/admin.
+         * @description Only a version produced by a registered `published` build (or a legacy `succeeded` one) whose scan and compatibility checks passed (409 `not_produced_by_succeeded_build` otherwise; 409 `version_archived`). New workspaces of the slug then use the latest published version; existing workspaces keep theirs, except their immutable paths (contracts §34), which show the latest published version from their next cold boot or resume. Idempotent. Owner/admin.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionPublish"];
         delete?: never;
@@ -2988,7 +2988,7 @@ export interface paths {
         put?: never;
         /**
          * Archive an organization template version
-         * @description Hides the version and stops `open` from picking it for new workspaces; existing workspaces are never changed (versions are immutable). Idempotent. Owner/admin.
+         * @description Hides the version and stops `open` from picking it for new workspaces; existing workspaces keep their version (versions are immutable). Archiving the latest published version rolls immutable paths (contracts §34) back: workspaces show the previous published version there from their next cold boot or resume. Idempotent. Owner/admin.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionArchive"];
         delete?: never;
@@ -3154,7 +3154,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. Immutable paths (contracts §34.1): the new version declares the template’s open version’s immutable paths (else the draft base’s) with the content the draft holds there; 422 immutable_paths_unsupported_base when the draft’s base has no guest agent with immutable_paths.v1 (details.base). 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplatesSlugDraftPublish"];
         delete?: never;
@@ -3174,7 +3174,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. Immutable paths (contracts §34.1): the new version declares the template’s open version’s immutable paths (else the draft base’s) with the content the draft holds there; 422 immutable_paths_unsupported_base when the draft’s base has no guest agent with immutable_paths.v1 (details.base). 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postV1TemplatesSlugDraftPublish"];
         delete?: never;
@@ -3267,7 +3267,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. Immutable paths (contracts §34.1): the new version declares the template’s open version’s immutable paths (else the draft base’s) with the content the draft holds there; 422 immutable_paths_unsupported_base when the draft’s base has no guest agent with immutable_paths.v1 (details.base). 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugDraftPublish"];
         delete?: never;
@@ -5630,6 +5630,21 @@ export interface components {
                 } & {
                     [key: string]: unknown;
                 };
+                host_lost?: {
+                    /** @description RFC 3339: when the host failure was detected; the workspace was suspended then. */
+                    detected_at: string;
+                    /**
+                     * @description resume and open: disk when the workspace booted from its disk (files kept, processes and memory not); checkpoint when it was restored from its newest checkpoint (see state_as_of). Absent on a suspend.
+                     * @enum {string}
+                     */
+                    restored_from?: "disk" | "checkpoint";
+                    /** @description restored_from checkpoint: the checkpoint this resume restored. */
+                    restored_checkpoint_id?: string;
+                    /** @description restored_from checkpoint, RFC 3339: when that checkpoint committed; the workspace state is as of then. */
+                    state_as_of?: string;
+                } & {
+                    [key: string]: unknown;
+                };
             } & {
                 [key: string]: unknown;
             };
@@ -5649,11 +5664,6 @@ export interface components {
          * @enum {string}
          */
         WorkspacePurpose: "standard" | "template_draft" | "template_test";
-        /**
-         * @description Reserved (T2). Always `pinned` in T1: a workspace stays on its template version; `auto` is refused with 422 update_policy_not_available.
-         * @enum {string}
-         */
-        UpdatePolicy: "pinned" | "auto";
         /** @description Where the workspace’s disk came from; null for a workspace opened from its template. */
         WorkspaceOrigin: {
             /** @enum {string} */
@@ -5704,7 +5714,6 @@ export interface components {
             } | null;
             egress: components["schemas"]["TemplateEgressDefault"] | null;
             agent_tools: null;
-            update_policy: null;
         };
         /** @description The template’s workspace network ceiling (contracts §24.3): the cell intersects it with the effective egress policy. */
         TemplateEgressDefault: {
@@ -5813,7 +5822,7 @@ export interface components {
                     ready_timeout_seconds?: number;
                 };
             };
-            /** @description Manifest defaults (§19.7, §24.3). agent_tools and update_policy stay reserved (null). */
+            /** @description Manifest defaults (§19.7, §24.3). agent_tools stays reserved (null). */
             defaults?: {
                 /** @enum {unknown} */
                 lifetime?: "persistent" | "session";
@@ -5831,7 +5840,6 @@ export interface components {
                     allow_hosts?: string[];
                 };
                 agent_tools?: null;
-                update_policy?: null;
             };
         };
         /** @description Recipe v1: a Dockerfile in the host builder’s dialect (no `schema` field). */
@@ -5864,7 +5872,7 @@ export interface components {
         };
         /**
          * Template recipe v2 (shardflux.template-recipe.v2)
-         * @description A template without a Dockerfile (docs/INTEGRATION_CONTRACTS.md §24.1): `build` changes the filesystem through the host builder's structured steps, `settings` goes into the manifest and applies when a workspace opens. This document is the body field `recipe` of POST …/template-builds, the `recipe` of GET …/templates/{slug}/versions/{v}/recipe (export), and the content of template.yaml (the same document in YAML; only clients parse YAML). In template.yaml a file entry may name a local path (`from`) instead of an upload; clients upload it and send `upload` (the API refuses `from`). Rules JSON Schema cannot express, enforced by the API with 422 validation_failed and details.reason (§24.1, §24.6): input names are unique across settings.env and settings.inputs; a secret input has no default; a required input has no default; start command names are unique; `to` is not platform-owned; build.network.allow_hosts only with build "allowlist" and extra_hosts only with "auto"; the sum of every run/command script is at most 262144 bytes; start timeout_seconds sum to at most 3600; languages are in the API's language table for the base; services need a base whose guest agent has services.v1.
+         * @description A template without a Dockerfile (docs/INTEGRATION_CONTRACTS.md §24.1): `build` changes the filesystem through the host builder's structured steps, `settings` goes into the manifest and applies when a workspace opens. This document is the body field `recipe` of POST …/template-builds, the `recipe` of GET …/templates/{slug}/versions/{v}/recipe (export), and the content of template.yaml (the same document in YAML; only clients parse YAML). In template.yaml a file entry may name a local path (`from`) instead of an upload; clients upload it and send `upload` (the API refuses `from`). Rules JSON Schema cannot express, enforced by the API with 422 validation_failed and details.reason (§24.1, §24.6): input names are unique across settings.env and settings.inputs; a secret input has no default; a required input has no default; start command names are unique; `to` is not platform-owned; build.network.allow_hosts only with build "allowlist" and extra_hosts only with "auto"; the sum of every run/command script is at most 262144 bytes; start timeout_seconds sum to at most 3600; languages are in the API's language table for the base; services need a base whose guest agent has services.v1; immutable paths are not platform-owned, do not contain a platform-owned path and do not nest (§34.1).
          */
         TemplateRecipeV2: {
             /** @enum {unknown} */
@@ -5978,7 +5986,7 @@ export interface components {
                         ready_timeout_seconds?: number;
                     };
                 };
-                /** @description Manifest defaults (§19.7, §24.3). agent_tools and update_policy stay reserved (null). */
+                /** @description Manifest defaults (§19.7, §24.3). agent_tools stays reserved (null). */
                 defaults?: {
                     /** @enum {unknown} */
                     lifetime?: "persistent" | "session";
@@ -5996,9 +6004,10 @@ export interface components {
                         allow_hosts?: string[];
                     };
                     agent_tools?: null;
-                    update_policy?: null;
                 };
             };
+            /** @description Directories every workspace of the template mounts read-only from the template's newest published version (§34.1): workspaces pick up a newer version when they cold-boot or resume. Not `/`, not equal to or under /proc, /sys, /dev, /run, /tmp, /lost+found or a platform-owned path, not containing a platform-owned path, none equal to or containing another (422 invalid_path). Omitted: the list of the template's newest published version. A version keeps every path of that list (422 immutable_path_removed) and a non-empty list needs a base whose guest agent has immutable_paths.v1 (422 immutable_paths_unsupported_base). Each path is a directory in the built filesystem. */
+            immutable?: string[];
             /** @description Builder VM bounds, exactly as recipe v1 `resources` (not part of recipe_sha256). */
             resources?: {
                 cpu_millis?: number;
@@ -6391,6 +6400,8 @@ export interface components {
                         kind: "file" | "tar";
                     }[];
                 };
+                /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                immutable: string[];
             };
             result: {
                 artifact_sha256: string | null;
@@ -6414,8 +6425,13 @@ export interface components {
                 } | null;
             };
             failure: {
+                /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                 code: string;
                 message: string;
+                /** @description Code-specific details (immutable_path_missing: {path}). */
+                details?: {
+                    [key: string]: unknown;
+                };
             } | null;
             /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
             log: {
@@ -6453,6 +6469,8 @@ export interface components {
             produced_layer_id: string | null;
             squashed: boolean | null;
             org_bytes: number | null;
+            /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+            immutable_paths: string[];
         };
         /** @description A disk-only capture of the draft (contracts §19.9). */
         DraftState: {
@@ -6541,7 +6559,6 @@ export interface components {
                 } | null;
                 /** @description Reserved (T2). */
                 agent_tools?: null;
-                update_policy?: ("pinned" | "auto") | null;
             };
             settings?: components["schemas"]["TemplateSettingsInput"];
             /** @default true */
@@ -6572,7 +6589,6 @@ export interface components {
                 } | null;
                 /** @description Reserved (T2). */
                 agent_tools?: null;
-                update_policy?: ("pinned" | "auto") | null;
             };
             /**
              * Format: uuid
@@ -6760,7 +6776,7 @@ export interface components {
              * @description UUIDv7, lowercase canonical form.
              */
             template_version_id: string;
-            /** @description Immutable template version this workspace was created from. */
+            /** @description The template version this workspace was created from (immutable), and the version its immutable paths show. */
             template: {
                 /**
                  * Format: uuid
@@ -6774,6 +6790,7 @@ export interface components {
                 template_id: string;
                 slug: string;
                 version: number;
+                immutable_version: number | null;
             };
             /** @enum {string} */
             desired_state: "running" | "suspended" | "deleted";
@@ -6782,11 +6799,29 @@ export interface components {
             cell_id: string | null;
             cell_endpoint: string | null;
             ownership_epoch: number;
-            /** @description User caps for this workspace (null = no user restriction). */
+            /** @description User caps for this workspace (null = no user restriction) and its memory allocation mode. */
             caps: {
                 cpu_millis: number | null;
                 memory_mib: number | null;
                 disk_gib: number | null;
+                /**
+                 * @description Memory allocation (contracts §32): fixed (default) boots memory_mib and holds it; elastic holds memory_mib_held while idle and is grown up to memory_mib (the promise) when a command needs it. The mode the next VM start uses: an elastic request whose promise does not exceed the held floor by at least 512 MiB is fixed at the promise.
+                 * @enum {string}
+                 */
+                allocation_mode: "fixed" | "elastic";
+                /** @description Elastic only: the memory held while idle (MiB). */
+                memory_mib_held?: number;
+            };
+            /** @description Memory of the workspace (contracts §32.6). */
+            memory: {
+                /**
+                 * @description The layout of the running VM, else the one the next start uses.
+                 * @enum {string}
+                 */
+                allocation_mode: "fixed" | "elastic";
+                promised_mib: number | null;
+                held_mib: number | null;
+                plugged_mib: number | null;
             };
             ceilings: {
                 cpu_millis: number;
@@ -6839,7 +6874,6 @@ export interface components {
             origin: components["schemas"]["WorkspaceOrigin"] | null;
             ended_reason: ("closed" | "idle_timeout" | "draft_discarded") | null;
             dev_template_id: string | null;
-            update_policy: components["schemas"]["UpdatePolicy"];
             startup: components["schemas"]["WorkspaceStartup"] | null;
             mode: components["schemas"]["WorkspaceMode"];
             /** @description file_first: the latest revision of the file tree (0 = the empty tree the workspace starts with; each mutating file call or execution publishes the next one; cell file responses carry it as X-Tree-Revision). Always 0 for processful workspaces. */
@@ -11592,11 +11626,19 @@ export interface operations {
                     };
                     /** @description Template slug; new workspaces use its latest published version. */
                     template: string;
-                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
+                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction (allocation_mode: fixed). Given caps replace the stored ones. */
                     caps?: {
                         cpu_millis?: number;
                         memory_mib?: number;
                         disk_gib?: number;
+                        /**
+                         * @description Memory allocation (contracts §32): fixed (default) boots memory_mib and holds it; elastic makes memory_mib a promise: the VM holds memory_mib_held while idle and is grown towards the promise when a command needs it. Needs the elastic memory entitlement (422 details.reason allocation_mode_not_available). A promise that does not exceed the held floor by at least 512 MiB is fixed at the promise (the response caps say which). Takes effect at the next VM start.
+                         * @default fixed
+                         * @enum {string}
+                         */
+                        allocation_mode?: "fixed" | "elastic";
+                        /** @description Elastic only: memory held while idle (MiB, default 1024, at most memory_mib). */
+                        memory_mib_held?: number;
                     };
                     /**
                      * Format: uuid
@@ -12270,7 +12312,9 @@ export interface operations {
     postV1WorkspacesWorkspaceIdFork: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                prefer?: string;
+            };
             path: {
                 /** @description UUIDv7, lowercase canonical form. */
                 workspace_id: string;
@@ -12282,17 +12326,47 @@ export interface operations {
                 "application/json": {
                     /** @description Stable workspace key, unique per organization (e.g. `${customerId}/${projectId}`). */
                     key: string;
-                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
+                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction (allocation_mode: fixed). Given caps replace the stored ones. */
                     caps?: {
                         cpu_millis?: number;
                         memory_mib?: number;
                         disk_gib?: number;
+                        /**
+                         * @description Memory allocation (contracts §32): fixed (default) boots memory_mib and holds it; elastic makes memory_mib a promise: the VM holds memory_mib_held while idle and is grown towards the promise when a command needs it. Needs the elastic memory entitlement (422 details.reason allocation_mode_not_available). A promise that does not exceed the held floor by at least 512 MiB is fixed at the promise (the response caps say which). Takes effect at the next VM start.
+                         * @default fixed
+                         * @enum {string}
+                         */
+                        allocation_mode?: "fixed" | "elastic";
+                        /** @description Elastic only: memory held while idle (MiB, default 1024, at most memory_mib). */
+                        memory_mib_held?: number;
                     };
                     lifetime?: components["schemas"]["WorkspaceLifetime"];
+                    /** @description Attribution label; one agent session per (workspace, principal, label). */
+                    agent_label?: string;
+                    tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
                 };
             };
         };
         responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        operation: components["schemas"]["Operation"];
+                        workspace: components["schemas"]["Workspace"];
+                        /**
+                         * Format: uuid
+                         * @description UUIDv7, lowercase canonical form.
+                         */
+                        source_workspace_id: string;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
+                };
+            };
             /** @description Default Response */
             202: {
                 headers: {
@@ -12778,11 +12852,19 @@ export interface operations {
                     };
                     /** @description Template slug; new workspaces use its latest published version. */
                     template: string;
-                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
+                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction (allocation_mode: fixed). Given caps replace the stored ones. */
                     caps?: {
                         cpu_millis?: number;
                         memory_mib?: number;
                         disk_gib?: number;
+                        /**
+                         * @description Memory allocation (contracts §32): fixed (default) boots memory_mib and holds it; elastic makes memory_mib a promise: the VM holds memory_mib_held while idle and is grown towards the promise when a command needs it. Needs the elastic memory entitlement (422 details.reason allocation_mode_not_available). A promise that does not exceed the held floor by at least 512 MiB is fixed at the promise (the response caps say which). Takes effect at the next VM start.
+                         * @default fixed
+                         * @enum {string}
+                         */
+                        allocation_mode?: "fixed" | "elastic";
+                        /** @description Elastic only: memory held while idle (MiB, default 1024, at most memory_mib). */
+                        memory_mib_held?: number;
                     };
                     /**
                      * Format: uuid
@@ -13456,7 +13538,9 @@ export interface operations {
     postApiV1WorkspacesWorkspaceIdFork: {
         parameters: {
             query?: never;
-            header?: never;
+            header?: {
+                prefer?: string;
+            };
             path: {
                 /** @description UUIDv7, lowercase canonical form. */
                 workspace_id: string;
@@ -13468,17 +13552,47 @@ export interface operations {
                 "application/json": {
                     /** @description Stable workspace key, unique per organization (e.g. `${customerId}/${projectId}`). */
                     key: string;
-                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction. */
+                    /** @description Optional user caps; the ceiling is min(template, cap, plan). Absent fields add no restriction (allocation_mode: fixed). Given caps replace the stored ones. */
                     caps?: {
                         cpu_millis?: number;
                         memory_mib?: number;
                         disk_gib?: number;
+                        /**
+                         * @description Memory allocation (contracts §32): fixed (default) boots memory_mib and holds it; elastic makes memory_mib a promise: the VM holds memory_mib_held while idle and is grown towards the promise when a command needs it. Needs the elastic memory entitlement (422 details.reason allocation_mode_not_available). A promise that does not exceed the held floor by at least 512 MiB is fixed at the promise (the response caps say which). Takes effect at the next VM start.
+                         * @default fixed
+                         * @enum {string}
+                         */
+                        allocation_mode?: "fixed" | "elastic";
+                        /** @description Elastic only: memory held while idle (MiB, default 1024, at most memory_mib). */
+                        memory_mib_held?: number;
                     };
                     lifetime?: components["schemas"]["WorkspaceLifetime"];
+                    /** @description Attribution label; one agent session per (workspace, principal, label). */
+                    agent_label?: string;
+                    tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
                 };
             };
         };
         responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        operation: components["schemas"]["Operation"];
+                        workspace: components["schemas"]["Workspace"];
+                        /**
+                         * Format: uuid
+                         * @description UUIDv7, lowercase canonical form.
+                         */
+                        source_workspace_id: string;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
+                };
+            };
             /** @description Default Response */
             202: {
                 headers: {
@@ -14985,6 +15099,12 @@ export interface operations {
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
                                 settings: components["schemas"]["TemplateSettings"];
+                                immutable: {
+                                    /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                    paths: string[];
+                                    /** @description Size of the version’s immutable image (counts toward template storage). */
+                                    bytes: number;
+                                } | null;
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15028,7 +15148,6 @@ export interface operations {
                                  */
                                 created_at: string;
                             } | null;
-                            update_policy: components["schemas"]["UpdatePolicy"];
                             category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
@@ -15197,6 +15316,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15240,7 +15365,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -15356,6 +15480,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15534,6 +15664,12 @@ export interface operations {
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
                                 settings: components["schemas"]["TemplateSettings"];
+                                immutable: {
+                                    /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                    paths: string[];
+                                    /** @description Size of the version’s immutable image (counts toward template storage). */
+                                    bytes: number;
+                                } | null;
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15577,7 +15713,6 @@ export interface operations {
                                  */
                                 created_at: string;
                             } | null;
-                            update_policy: components["schemas"]["UpdatePolicy"];
                             category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
@@ -15744,6 +15879,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15787,7 +15928,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -15903,6 +16043,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -16167,6 +16313,8 @@ export interface operations {
                                         kind: "file" | "tar";
                                     }[];
                                 };
+                                /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                                immutable: string[];
                             };
                             result: {
                                 artifact_sha256: string | null;
@@ -16190,8 +16338,13 @@ export interface operations {
                                 } | null;
                             };
                             failure: {
+                                /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                                 code: string;
                                 message: string;
+                                /** @description Code-specific details (immutable_path_missing: {path}). */
+                                details?: {
+                                    [key: string]: unknown;
+                                };
                             } | null;
                             /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                             log: {
@@ -16229,6 +16382,8 @@ export interface operations {
                             produced_layer_id: string | null;
                             squashed: boolean | null;
                             org_bytes: number | null;
+                            /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                            immutable_paths: string[];
                         }[];
                         next_cursor: string | null;
                     };
@@ -16493,6 +16648,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -16516,8 +16673,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -16555,6 +16717,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -16802,6 +16966,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -16825,8 +16991,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -16864,6 +17035,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -17108,6 +17281,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -17131,8 +17306,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -17170,6 +17350,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -17380,6 +17562,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -17403,8 +17587,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -17442,6 +17631,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -18073,6 +18264,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -18116,7 +18313,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -18232,6 +18428,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -18408,6 +18610,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -18451,7 +18659,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -18567,6 +18774,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -18748,6 +18961,12 @@ export interface operations {
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
                                 settings: components["schemas"]["TemplateSettings"];
+                                immutable: {
+                                    /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                    paths: string[];
+                                    /** @description Size of the version’s immutable image (counts toward template storage). */
+                                    bytes: number;
+                                } | null;
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -18791,7 +19010,6 @@ export interface operations {
                                  */
                                 created_at: string;
                             } | null;
-                            update_policy: components["schemas"]["UpdatePolicy"];
                             category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
@@ -18960,6 +19178,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -19003,7 +19227,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -19119,6 +19342,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -19383,6 +19612,8 @@ export interface operations {
                                         kind: "file" | "tar";
                                     }[];
                                 };
+                                /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                                immutable: string[];
                             };
                             result: {
                                 artifact_sha256: string | null;
@@ -19406,8 +19637,13 @@ export interface operations {
                                 } | null;
                             };
                             failure: {
+                                /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                                 code: string;
                                 message: string;
+                                /** @description Code-specific details (immutable_path_missing: {path}). */
+                                details?: {
+                                    [key: string]: unknown;
+                                };
                             } | null;
                             /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                             log: {
@@ -19445,6 +19681,8 @@ export interface operations {
                             produced_layer_id: string | null;
                             squashed: boolean | null;
                             org_bytes: number | null;
+                            /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                            immutable_paths: string[];
                         }[];
                         next_cursor: string | null;
                     };
@@ -19709,6 +19947,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -19732,8 +19972,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -19771,6 +20016,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -20018,6 +20265,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -20041,8 +20290,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -20080,6 +20334,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -20324,6 +20580,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -20347,8 +20605,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -20386,6 +20649,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -20596,6 +20861,8 @@ export interface operations {
                                     kind: "file" | "tar";
                                 }[];
                             };
+                            /** @description The effective immutable paths (contracts §34.1: the recipe’s, else inherited), in byte order; empty for none. */
+                            immutable: string[];
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -20619,8 +20886,13 @@ export interface operations {
                             } | null;
                         };
                         failure: {
+                            /** @description build_error, timeout, resource_limit, scan_failed, compatibility_failed, base_unavailable, network_denied, internal_error, publish_failed, source_unavailable, immutable_path_missing (an immutable path is not a directory in the built filesystem: details.path), immutable_image_too_large (the immutable image exceeds 16 GiB). */
                             code: string;
                             message: string;
+                            /** @description Code-specific details (immutable_path_missing: {path}). */
+                            details?: {
+                                [key: string]: unknown;
+                            };
                         } | null;
                         /** @description Build log: the tail inline, the full log through a short-lived signed URL (log-url). */
                         log: {
@@ -20658,6 +20930,8 @@ export interface operations {
                         produced_layer_id: string | null;
                         squashed: boolean | null;
                         org_bytes: number | null;
+                        /** @description The immutable paths the produced version declares (contracts §34.1), in byte order: the recipe’s `immutable`, else the list of the template’s open version (a save from a workspace: the target template’s open version’s list, else the workspace’s version’s). Empty for none. */
+                        immutable_paths: string[];
                     };
                 };
             };
@@ -21109,6 +21383,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -21152,7 +21432,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -21268,6 +21547,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -21444,6 +21729,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -21487,7 +21778,6 @@ export interface operations {
                              */
                             created_at: string;
                         } | null;
-                        update_policy: components["schemas"]["UpdatePolicy"];
                         category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
@@ -21603,6 +21893,12 @@ export interface operations {
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
                             settings: components["schemas"]["TemplateSettings"];
+                            immutable: {
+                                /** @description The directories every workspace of the template mounts read-only from its newest published version, in byte order. */
+                                paths: string[];
+                                /** @description Size of the version’s immutable image (counts toward template storage). */
+                                bytes: number;
+                            } | null;
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -27726,8 +28022,8 @@ export interface operations {
                             display_name: string;
                             unit: string;
                             meters: ("cpu_seconds" | "memory_gib_seconds" | "storage_gib_seconds" | "egress_bytes" | "ingress_bytes" | "volume_storage_gib_seconds")[];
-                            /** @description hard_cap: exhausting it refuses opens/resumes (402 allowance_exhausted) and running workspaces are suspended; spare_capacity: no allowance cap (runs on reclaimable spare capacity); reported: shown and notified, never enforced by refusing access; egress_block (outbound_transfer_gb, contracts §18): at 100% outbound internet traffic is blocked by an organization egress override until upgrade, purchase or the next period (workspaces keep running, starts are not refused). */
-                            enforcement: "hard_cap" | "spare_capacity" | "reported" | "egress_block";
+                            /** @description hard_cap: exhausting it refuses opens/resumes (402 allowance_exhausted) and running workspaces are suspended; spare_capacity: no allowance cap (runs on reclaimable spare capacity); reported: shown and notified, never enforced by refusing access; egress_block (outbound_transfer_gb, contracts §18): at 100% outbound internet traffic is blocked by an organization egress override until upgrade, purchase or the next period (workspaces keep running, starts are not refused); storage_block (retained_state_gib, contracts §40): at 100% opening a new workspace key and forking are refused (403 quota_exceeded, details.limit retained_state) until retained state is below the allowance (existing workspaces keep running, waking, suspending and resuming; nothing is deleted or charged). */
+                            enforcement: "hard_cap" | "spare_capacity" | "reported" | "egress_block" | "storage_block";
                             included: number | null;
                             used: number;
                             remaining: number | null;
@@ -27735,8 +28031,8 @@ export interface operations {
                             included_meter_units: number | null;
                             used_meter_units: number | null;
                             remaining_meter_units: number | null;
-                            /** @description ok: below 80 %. warning: 80 % or more of the allowance. exhausted: a hard cap is used up and starts are refused (402 allowance_exhausted; see exhausted_reason). overage: a CPU-hours or RAM GiB-hours allowance is used up while opt-in overage is on and below its spend cap, so starts are admitted and the usage past it is charged (spend_cap). over_allowance: a reported allowance is exceeded (never refused). egress_blocked: the outbound transfer allowance is used up and outbound traffic is blocked. uncapped: runs on spare capacity. not_included: the plan does not define it. */
-                            cap_state: "ok" | "warning" | "exhausted" | "overage" | "over_allowance" | "egress_blocked" | "uncapped" | "not_included";
+                            /** @description ok: below 80 %. warning: 80 % or more of the allowance. exhausted: a hard cap is used up and starts are refused (402 allowance_exhausted; see exhausted_reason). overage: a CPU-hours or RAM GiB-hours allowance is used up while opt-in overage is on and below its spend cap, so starts are admitted and the usage past it is charged (spend_cap). over_allowance: a reported allowance is exceeded (never refused). egress_blocked: the outbound transfer allowance is used up and outbound traffic is blocked. storage_blocked: the retained state allowance is used up and new workspaces and forks are refused (403 quota_exceeded). uncapped: runs on spare capacity. not_included: the plan does not define it. */
+                            cap_state: "ok" | "warning" | "exhausted" | "overage" | "over_allowance" | "egress_blocked" | "storage_blocked" | "uncapped" | "not_included";
                         }[];
                         meters: {
                             /** @enum {string} */
@@ -28781,8 +29077,8 @@ export interface operations {
                             display_name: string;
                             unit: string;
                             meters: ("cpu_seconds" | "memory_gib_seconds" | "storage_gib_seconds" | "egress_bytes" | "ingress_bytes" | "volume_storage_gib_seconds")[];
-                            /** @description hard_cap: exhausting it refuses opens/resumes (402 allowance_exhausted) and running workspaces are suspended; spare_capacity: no allowance cap (runs on reclaimable spare capacity); reported: shown and notified, never enforced by refusing access; egress_block (outbound_transfer_gb, contracts §18): at 100% outbound internet traffic is blocked by an organization egress override until upgrade, purchase or the next period (workspaces keep running, starts are not refused). */
-                            enforcement: "hard_cap" | "spare_capacity" | "reported" | "egress_block";
+                            /** @description hard_cap: exhausting it refuses opens/resumes (402 allowance_exhausted) and running workspaces are suspended; spare_capacity: no allowance cap (runs on reclaimable spare capacity); reported: shown and notified, never enforced by refusing access; egress_block (outbound_transfer_gb, contracts §18): at 100% outbound internet traffic is blocked by an organization egress override until upgrade, purchase or the next period (workspaces keep running, starts are not refused); storage_block (retained_state_gib, contracts §40): at 100% opening a new workspace key and forking are refused (403 quota_exceeded, details.limit retained_state) until retained state is below the allowance (existing workspaces keep running, waking, suspending and resuming; nothing is deleted or charged). */
+                            enforcement: "hard_cap" | "spare_capacity" | "reported" | "egress_block" | "storage_block";
                             included: number | null;
                             used: number;
                             remaining: number | null;
@@ -28790,8 +29086,8 @@ export interface operations {
                             included_meter_units: number | null;
                             used_meter_units: number | null;
                             remaining_meter_units: number | null;
-                            /** @description ok: below 80 %. warning: 80 % or more of the allowance. exhausted: a hard cap is used up and starts are refused (402 allowance_exhausted; see exhausted_reason). overage: a CPU-hours or RAM GiB-hours allowance is used up while opt-in overage is on and below its spend cap, so starts are admitted and the usage past it is charged (spend_cap). over_allowance: a reported allowance is exceeded (never refused). egress_blocked: the outbound transfer allowance is used up and outbound traffic is blocked. uncapped: runs on spare capacity. not_included: the plan does not define it. */
-                            cap_state: "ok" | "warning" | "exhausted" | "overage" | "over_allowance" | "egress_blocked" | "uncapped" | "not_included";
+                            /** @description ok: below 80 %. warning: 80 % or more of the allowance. exhausted: a hard cap is used up and starts are refused (402 allowance_exhausted; see exhausted_reason). overage: a CPU-hours or RAM GiB-hours allowance is used up while opt-in overage is on and below its spend cap, so starts are admitted and the usage past it is charged (spend_cap). over_allowance: a reported allowance is exceeded (never refused). egress_blocked: the outbound transfer allowance is used up and outbound traffic is blocked. storage_blocked: the retained state allowance is used up and new workspaces and forks are refused (403 quota_exceeded). uncapped: runs on spare capacity. not_included: the plan does not define it. */
+                            cap_state: "ok" | "warning" | "exhausted" | "overage" | "over_allowance" | "egress_blocked" | "storage_blocked" | "uncapped" | "not_included";
                         }[];
                         meters: {
                             /** @enum {string} */