@shardflux/sdk 0.6.0 → 0.6.2

package/dist/generated/app-api.d.ts

@@ -938,7 +938,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation.
          */
         post: operations["postV1WorkspacesOpen"];
         delete?: never;
@@ -1008,6 +1008,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/workspaces/{workspace_id}/inputs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The workspace’s text inputs (contracts §24.3)
+         * @description The text inputs the workspace was opened with (the given value, else the declared default). Every exec, PTY, start command and service gets them as environment variables, above the template env and below the call’s own env. Secret inputs are bound secrets (GET …/secrets). Set on create; replaced by an open of the key with `inputs`. Deleted workspaces stay readable.
+         */
+        get: operations["getV1WorkspacesWorkspaceIdInputs"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/workspaces/{workspace_id}/idle-policy": {
         parameters: {
             query?: never;
@@ -1270,7 +1290,7 @@ export interface paths {
         put?: never;
         /**
          * Open a workspace by key (create on first use, reconnect or resume afterwards)
-         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation.
+         * @description New keys resolve `template` to its latest published version; reopening never changes or resets the workspace (the response reports the template version actually used). 200 when the workspace is already running and ready (with `cell_endpoint` and a tool token); otherwise 202 with the operation to poll. A running workspace whose startup failed (`startup.state` failed, contracts §24.4) is not ready: the open is 202 with an `open` operation (input.startup_retry) that runs the failed step again. Concurrent opens of one key share one workspace and one operation. `secrets` (optional) binds secret names injected into every exec/PTY start: it sets the binding of a new key and replaces it on an existing key (omitted = unchanged); an unknown or unusable name is 422 details.reason secret_not_available with details.names (nothing is created or changed). The template version’s secret inputs (contracts §24.3) join the binding on create and whenever `secrets` is given; a required one this workspace may not use is 422 input_required (details.kind secret); a bound name equal to a template env key or text input is 422 env_collision (details.name). `inputs` (optional): the version’s text inputs {NAME: string}; stored on create (else the declared default) and replaced on an existing key (omitted = unchanged); 422 input_unknown, input_invalid or input_required (details.names). `lifetime` (contracts §19.11): omitted = the version’s default (else persistent); `session` workspaces are discarded when the session ends (close(), idle timeout), after which the key opens a NEW workspace; reopening a live key with another lifetime is 409 lifetime_mismatch. A new workspace is `layered` when its version supports it and layered opens are enabled (`disk_layout`). Errors: 404 template/key outside scope, 402 `entitlement_required`, 403 `quota_exceeded` (details.limit), 409 operation in progress, deleted key (workspace_deleted) or lifetime_mismatch, 422 reserved_key_prefix (keys starting with sf:). Supports Idempotency-Key. Held open (contracts §22.3): with `Prefer: wait=<seconds>` (at most 20) an open whose outcome is an operation is held until the operation is terminal or the wait elapses; success answers 200 with the running workspace, the succeeded operation and a tool token (`Preference-Applied: wait=<seconds>`), anything else 202 with the fresh operation. Without `Preference-Applied` the server did not wait: poll the operation.
          */
         post: operations["postApiV1WorkspacesOpen"];
         delete?: never;
@@ -1340,6 +1360,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/workspaces/{workspace_id}/inputs": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The workspace’s text inputs (contracts §24.3)
+         * @description The text inputs the workspace was opened with (the given value, else the declared default). Every exec, PTY, start command and service gets them as environment variables, above the template env and below the call’s own env. Secret inputs are bound secrets (GET …/secrets). Set on create; replaced by an open of the key with `inputs`. Deleted workspaces stay readable.
+         */
+        get: operations["getApiV1WorkspacesWorkspaceIdInputs"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/workspaces/{workspace_id}/idle-policy": {
         parameters: {
             query?: never;
@@ -1903,7 +1943,7 @@ export interface paths {
         put?: never;
         /**
          * Request a custom template build (queued for the isolated builder)
-         * @description 202 with the queued build. Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
+         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplateBuilds"];
         delete?: never;
@@ -1972,6 +2012,126 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/organizations/{organization_id}/template-uploads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Request an upload of a recipe build input (a file, or a folder as an uncompressed tar), by content
+         * @description 200 {upload, put: null} when the organization already has these bytes (a pending upload is checked in the bucket first). 201 with a presigned S3 PUT otherwise (valid 900 s): send the bytes with every header of `put.headers` (x-amz-checksum-sha256 and content-length are signed, so S3 refuses other bytes), then reference `sha256:<hex>` in the recipe’s build.files. Idempotent by content (no Idempotency-Key needed). Errors: 422 upload_too_large (details.limit upload_bytes_max: at most 5 GiB), 422 upload_digest_mismatch (the same sha256 is available with another size), 503 dependency_unavailable (uploads_not_configured). Owners/admins and API keys with a tool permission.
+         */
+        post: operations["postV1OrganizationsOrganizationIdTemplateUploads"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/template-uploads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Request an upload of a recipe build input (a file, or a folder as an uncompressed tar), by content (the API key’s organization)
+         * @description 200 {upload, put: null} when the organization already has these bytes (a pending upload is checked in the bucket first). 201 with a presigned S3 PUT otherwise (valid 900 s): send the bytes with every header of `put.headers` (x-amz-checksum-sha256 and content-length are signed, so S3 refuses other bytes), then reference `sha256:<hex>` in the recipe’s build.files. Idempotent by content (no Idempotency-Key needed). Errors: 422 upload_too_large (details.limit upload_bytes_max: at most 5 GiB), 422 upload_digest_mismatch (the same sha256 is available with another size), 503 dependency_unavailable (uploads_not_configured). Owners/admins and API keys with a tool permission.
+         */
+        post: operations["postV1TemplateUploads"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/organizations/{organization_id}/template-packages": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Search apt, pip or npm packages for a recipe
+         * @description apt: the base’s package index (409 package_index_unavailable when the base has none); pip: the daily PyPI name list (names only; 409 package_index_unavailable before its first refresh); npm: the registry search. Upstreams are bounded (503 dependency_unavailable, retryable, when they do not answer within 2.5 s) and each organization may make 120 lookups a minute (429 rate_limited). Owners/admins and API keys with a tool permission.
+         */
+        get: operations["getV1OrganizationsOrganizationIdTemplatePackages"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/organizations/{organization_id}/template-packages/{ecosystem}/{name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get one apt, pip or npm package: latest version, summary and versions
+         * @description 404 not_found (package_not_found). apt needs base=<slug>@<version>. Same limits as the search.
+         */
+        get: operations["getV1OrganizationsOrganizationIdTemplatePackagesEcosystemName"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/template-packages": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Search apt, pip or npm packages for a recipe (the API key’s organization)
+         * @description apt: the base’s package index (409 package_index_unavailable when the base has none); pip: the daily PyPI name list (names only; 409 package_index_unavailable before its first refresh); npm: the registry search. Upstreams are bounded (503 dependency_unavailable, retryable, when they do not answer within 2.5 s) and each organization may make 120 lookups a minute (429 rate_limited). Owners/admins and API keys with a tool permission.
+         */
+        get: operations["getV1TemplatePackages"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/template-packages/{ecosystem}/{name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get one apt, pip or npm package: latest version, summary and versions (the API key’s organization)
+         * @description 404 not_found (package_not_found). apt needs base=<slug>@<version>. Same limits as the search.
+         */
+        get: operations["getV1TemplatePackagesEcosystemName"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/organizations/{organization_id}/template-builder-availability": {
         parameters: {
             query?: never;
@@ -2041,7 +2201,7 @@ export interface paths {
         put?: never;
         /**
          * Request a custom template build (queued for the isolated builder)
-         * @description 202 with the queued build. Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
+         * @description 202 with the queued build. Takes recipe v1 (a Dockerfile) or recipe v2 (contracts §24.1: validated against the base, compiled to the builder’s steps, uploads locked). Records the canonical recipe and its SHA-256 (provenance input), pins the base version, clamps resources to the plan and assigns `target_version`. The cell executes it (building -> testing -> publishing -> published) and the API then registers the version (published at once unless auto_publish=false); poll GET .../template-builds/{id} until `registration.state` is registered (or the build failed/was canceled). `builder_availability` says whether a builder is running. Errors: 422 when the recipe is outside the host builder Dockerfile dialect or the slug is not a builder slug (`details.reason`: multi_stage_not_supported, from_not_template_base, stage_names_not_supported, from_flags_not_supported, base_mismatch, run_flags_not_supported, heredoc_not_supported, instruction_not_supported, no_build_context, env_invalid, user_invalid, too_many_steps, recipe_too_large, slug_not_supported_by_builder, platform_template_slug, reserved_template_slug, base_not_found, base_not_published, base_archived, architecture_not_supported, ...; `line` for line errors; recipe v2: invalid_recipe (details.field, details.detail), base_not_layered, language_unavailable, language_conflict, invalid_package, too_many_files, platform_owned_path, invalid_path, upload_required, upload_missing, upload_digest_mismatch, upload_too_large, too_many_steps, recipe_too_large, allowlist_empty, allow_hosts_without_allowlist, extra_hosts_without_auto, too_many_hosts, invalid_host, ip_literal_not_allowed, host_not_allowed, invalid_settings, services_unsupported, too_many_acknowledged_findings), 503 dependency_unavailable (uploads_not_configured), 402 entitlement_required, 403 quota_exceeded (concurrent_template_builds), 409 template_archived. Supports Idempotency-Key.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplateBuilds"];
         delete?: never;
@@ -2110,6 +2270,66 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/organizations/{organization_id}/template-uploads": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Request an upload of a recipe build input (a file, or a folder as an uncompressed tar), by content
+         * @description 200 {upload, put: null} when the organization already has these bytes (a pending upload is checked in the bucket first). 201 with a presigned S3 PUT otherwise (valid 900 s): send the bytes with every header of `put.headers` (x-amz-checksum-sha256 and content-length are signed, so S3 refuses other bytes), then reference `sha256:<hex>` in the recipe’s build.files. Idempotent by content (no Idempotency-Key needed). Errors: 422 upload_too_large (details.limit upload_bytes_max: at most 5 GiB), 422 upload_digest_mismatch (the same sha256 is available with another size), 503 dependency_unavailable (uploads_not_configured). Owners/admins and API keys with a tool permission.
+         */
+        post: operations["postApiV1OrganizationsOrganizationIdTemplateUploads"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/organizations/{organization_id}/template-packages": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Search apt, pip or npm packages for a recipe
+         * @description apt: the base’s package index (409 package_index_unavailable when the base has none); pip: the daily PyPI name list (names only; 409 package_index_unavailable before its first refresh); npm: the registry search. Upstreams are bounded (503 dependency_unavailable, retryable, when they do not answer within 2.5 s) and each organization may make 120 lookups a minute (429 rate_limited). Owners/admins and API keys with a tool permission.
+         */
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatePackages"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/organizations/{organization_id}/template-packages/{ecosystem}/{name}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get one apt, pip or npm package: latest version, summary and versions
+         * @description 404 not_found (package_not_found). apt needs base=<slug>@<version>. Same limits as the search.
+         */
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatePackagesEcosystemName"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/organizations/{organization_id}/template-builder-availability": {
         parameters: {
             query?: never;
@@ -2182,7 +2402,7 @@ export interface paths {
         put?: never;
         /**
          * Create the template’s draft (a layered workspace on the draft base)
-         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / base_required. Supports Idempotency-Key.
+         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template named `display_name`, default the slug). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / reserved_template_slug (new, edit) / base_required. Supports Idempotency-Key.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplatesSlugDraft"];
         /**
@@ -2210,7 +2430,7 @@ export interface paths {
         put?: never;
         /**
          * Create the template’s draft (a layered workspace on the draft base)
-         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / base_required. Supports Idempotency-Key.
+         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template named `display_name`, default the slug). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / reserved_template_slug (new, edit) / base_required. Supports Idempotency-Key.
          */
         post: operations["postV1TemplatesSlugDraft"];
         /**
@@ -2324,7 +2544,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postV1OrganizationsOrganizationIdTemplatesSlugDraftPublish"];
         delete?: never;
@@ -2344,7 +2564,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postV1TemplatesSlugDraftPublish"];
         delete?: never;
@@ -2368,7 +2588,7 @@ export interface paths {
         put?: never;
         /**
          * Create the template’s draft (a layered workspace on the draft base)
-         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / base_required. Supports Idempotency-Key.
+         * @description Opens the organization template’s single live draft (key sf:draft:<slug>:<8 hex>, purpose template_draft, persistent, layered) on `base` (default: the latest published version; required when the template has none, which creates the organization template named `display_name`, default the slug). 202 with the open operation and the draft. Errors: 409 template_not_layered (the base is not layered-capable, or layered opens are off), 409 draft_exists (details.workspace_id), 403 template_dev_mode_role, 422 platform_template_slug / reserved_template_slug (new, edit) / base_required. Supports Idempotency-Key.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugDraft"];
         /**
@@ -2437,7 +2657,7 @@ export interface paths {
         put?: never;
         /**
          * Publish the draft as the template’s next version (save-as-template from the draft)
-         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
+         * @description Builds one new org layer holding every change since the draft base, from `state_id` or the draft’s current state (a fresh capture when running). `settings` (TemplateSettingsInput, contracts §24.3): each given field replaces that field of the draft base’s settings, each absent one is carried forward (settings.defaults and defaults together: 422 invalid_settings). Refused with 409 draft_stale (details latest_version, draft_base_version) when the template has a version newer than the draft base that this draft did not produce, and 409 build_in_progress while a build from another source is unfinished. 202 SaveAsTemplateResponse. Supports Idempotency-Key.
          */
         post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugDraftPublish"];
         delete?: never;
@@ -2446,6 +2666,66 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/test-instances": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Open a test instance of a template version, published or not
+         * @description Opens a layered session workspace (purpose template_test) on that version of the organization’s template: registered and not archived, published or not. It is a fresh workspace (a `create` startup run) with origin {kind: template_version, template_id, version}; it ends on close() or idle. `inputs` as for open (422 input_unknown, input_invalid, input_required). 202 OpenResponse (200 when an existing key is running and ready). Errors: 403 template_dev_mode_role (owners, admins and API keys with a tool permission only), 404 version_not_found, 409 template_not_layered, template_archived, 422 reserved_key_prefix. Supports Idempotency-Key.
+         */
+        post: operations["postV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionTestInstances"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/templates/{slug}/versions/{version}/test-instances": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Open a test instance of a template version, published or not
+         * @description Opens a layered session workspace (purpose template_test) on that version of the organization’s template: registered and not archived, published or not. It is a fresh workspace (a `create` startup run) with origin {kind: template_version, template_id, version}; it ends on close() or idle. `inputs` as for open (422 input_unknown, input_invalid, input_required). 202 OpenResponse (200 when an existing key is running and ready). Errors: 403 template_dev_mode_role (owners, admins and API keys with a tool permission only), 404 version_not_found, 409 template_not_layered, template_archived, 422 reserved_key_prefix. Supports Idempotency-Key.
+         */
+        post: operations["postV1TemplatesSlugVersionsVersionTestInstances"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/test-instances": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Open a test instance of a template version, published or not
+         * @description Opens a layered session workspace (purpose template_test) on that version of the organization’s template: registered and not archived, published or not. It is a fresh workspace (a `create` startup run) with origin {kind: template_version, template_id, version}; it ends on close() or idle. `inputs` as for open (422 input_unknown, input_invalid, input_required). 202 OpenResponse (200 when an existing key is running and ready). Errors: 403 template_dev_mode_role (owners, admins and API keys with a tool permission only), 404 version_not_found, 409 template_not_layered, template_archived, 422 reserved_key_prefix. Supports Idempotency-Key.
+         */
+        post: operations["postApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionTestInstances"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/files": {
         parameters: {
             query?: never;
@@ -2566,7 +2846,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/files": {
+    "/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/recipe": {
         parameters: {
             query?: never;
             header?: never;
@@ -2574,10 +2854,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List one directory of a template version’s file tree
-         * @description Entries directly inside `path` (default `/`), sorted by name bytes, keyset-paginated. The tree covers the whole filesystem (only the contents of /proc, /sys, /dev, /run and /tmp are left out). 409 file_list_unavailable (no file list) or file_list_indexing (retryable); 404 path_not_found; 422 invalid_path.
+         * Export the recipe and settings of a template version (request form, ready to build again)
+         * @description recipe: v1 {base, dockerfile, network} or the recipe v2 document (base as <slug>@<version>, languages as {id, version}, files without size, settings as stored); building it again from the same base with the same API release, while its uploads exist, gives the same recipe_sha256. null for versions saved from a workspace or published by the platform. settings: the version’s TemplateSettings. Same visibility as the version (unpublished only for owners/admins of the owning organization).
          */
-        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionFiles"];
+        get: operations["getV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionRecipe"];
         put?: never;
         post?: never;
         delete?: never;
@@ -2586,7 +2866,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/files/entry": {
+    "/v1/templates/{slug}/versions/{version}/recipe": {
         parameters: {
             query?: never;
             header?: never;
@@ -2594,10 +2874,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get one entry of a template version’s file tree
-         * @description 404 path_not_found; 409 file_list_unavailable / file_list_indexing; 422 invalid_path.
+         * Export the recipe and settings of a template version (request form, ready to build again)
+         * @description recipe: v1 {base, dockerfile, network} or the recipe v2 document (base as <slug>@<version>, languages as {id, version}, files without size, settings as stored); building it again from the same base with the same API release, while its uploads exist, gives the same recipe_sha256. null for versions saved from a workspace or published by the platform. settings: the version’s TemplateSettings. Same visibility as the version (unpublished only for owners/admins of the owning organization).
          */
-        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionFilesEntry"];
+        get: operations["getV1TemplatesSlugVersionsVersionRecipe"];
         put?: never;
         post?: never;
         delete?: never;
@@ -2606,7 +2886,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/v1/organizations/{organization_id}/templates/{slug}/diff": {
+    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/files": {
         parameters: {
             query?: never;
             header?: never;
@@ -2614,10 +2894,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Diff two versions of a template (path, change, before, after)
-         * @description `from` is a version number of this template or `base` (the `to` version’s build base, which may be a platform version). Keyset-paginated by path; `path_prefix` narrows it (string prefix), `change` filters one kind. The first page (no cursor) carries `summary`. 409 file_list_unavailable / file_list_indexing when either version has no loaded file list.
+         * List one directory of a template version’s file tree
+         * @description Entries directly inside `path` (default `/`), sorted by name bytes, keyset-paginated. The tree covers the whole filesystem (only the contents of /proc, /sys, /dev, /run and /tmp are left out). 409 file_list_unavailable (no file list) or file_list_indexing (retryable); 404 path_not_found; 422 invalid_path.
          */
-        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugDiff"];
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionFiles"];
         put?: never;
         post?: never;
         delete?: never;
@@ -2626,28 +2906,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/organizations/{organization_id}/secrets": {
+    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/files/entry": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /** List organization-wide secrets (metadata only; owner/admin/member) */
-        get: operations["getV1OrganizationsOrganizationIdSecrets"];
-        put?: never;
         /**
-         * Create an organization-wide secret (owner/admin)
-         * @description The value is encrypted (KMS envelope) and never returned. `allowed_tools` defaults to [exec, pty]; `allowed_project_ids` defaults to [] (grant projects explicitly, or null for every project). API keys cannot manage organization secrets (403). 409 when the name exists in this scope. Supports Idempotency-Key.
+         * Get one entry of a template version’s file tree
+         * @description 404 path_not_found; 409 file_list_unavailable / file_list_indexing; 422 invalid_path.
          */
-        post: operations["postV1OrganizationsOrganizationIdSecrets"];
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionFilesEntry"];
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/projects/{project_id}/secrets": {
+    "/api/v1/organizations/{organization_id}/templates/{slug}/diff": {
         parameters: {
             query?: never;
             header?: never;
@@ -2655,7 +2934,68 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List a project’s secrets (metadata only)
+         * Diff two versions of a template (path, change, before, after)
+         * @description `from` is a version number of this template or `base` (the `to` version’s build base, which may be a platform version). Keyset-paginated by path; `path_prefix` narrows it (string prefix), `change` filters one kind. The first page (no cursor) carries `summary`. 409 file_list_unavailable / file_list_indexing when either version has no loaded file list.
+         */
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugDiff"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/organizations/{organization_id}/templates/{slug}/versions/{version}/recipe": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Export the recipe and settings of a template version (request form, ready to build again)
+         * @description recipe: v1 {base, dockerfile, network} or the recipe v2 document (base as <slug>@<version>, languages as {id, version}, files without size, settings as stored); building it again from the same base with the same API release, while its uploads exist, gives the same recipe_sha256. null for versions saved from a workspace or published by the platform. settings: the version’s TemplateSettings. Same visibility as the version (unpublished only for owners/admins of the owning organization).
+         */
+        get: operations["getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionRecipe"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/organizations/{organization_id}/secrets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** List organization-wide secrets (metadata only; owner/admin/member) */
+        get: operations["getV1OrganizationsOrganizationIdSecrets"];
+        put?: never;
+        /**
+         * Create an organization-wide secret (owner/admin)
+         * @description The value is encrypted (KMS envelope) and never returned. `allowed_tools` defaults to [exec, pty]; `allowed_project_ids` defaults to [] (grant projects explicitly, or null for every project). API keys cannot manage organization secrets (403). 409 when the name exists in this scope. Supports Idempotency-Key.
+         */
+        post: operations["postV1OrganizationsOrganizationIdSecrets"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/projects/{project_id}/secrets": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List a project’s secrets (metadata only)
          * @description Project-scoped secrets only; organization secrets are listed under the organization.
          */
         get: operations["getV1ProjectsProjectIdSecrets"];
@@ -2774,7 +3114,7 @@ export interface paths {
         get: operations["getV1WorkspacesWorkspaceIdSecrets"];
         /**
          * Replace the secret names bound to a workspace
-         * @description Replaces the whole binding (`names: []` clears it); applies from the next exec/PTY start (running processes keep their environment). Every name must be a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names and nothing changes. Audited when the binding changes. 409 workspace_deleted.
+         * @description Replaces the whole binding (`names: []` clears it); applies from the next exec/PTY start (running processes keep their environment). Every name must be a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names and nothing changes. A name equal to a key of the template version’s env or one of its text inputs is 422 env_collision (details.name; contracts §24.3). Exactly the given names are bound (the version’s secret inputs join the binding only through open). Audited when the binding changes. 409 workspace_deleted.
          */
         put: operations["putV1WorkspacesWorkspaceIdSecrets"];
         post?: never;
@@ -2912,7 +3252,7 @@ export interface paths {
         get: operations["getApiV1WorkspacesWorkspaceIdSecrets"];
         /**
          * Replace the secret names bound to a workspace
-         * @description Replaces the whole binding (`names: []` clears it); applies from the next exec/PTY start (running processes keep their environment). Every name must be a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names and nothing changes. Audited when the binding changes. 409 workspace_deleted.
+         * @description Replaces the whole binding (`names: []` clears it); applies from the next exec/PTY start (running processes keep their environment). Every name must be a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names and nothing changes. A name equal to a key of the template version’s env or one of its text inputs is 422 env_collision (details.name; contracts §24.3). Exactly the given names are bound (the version’s secret inputs join the binding only through open). Audited when the binding changes. 409 workspace_deleted.
          */
         put: operations["putApiV1WorkspacesWorkspaceIdSecrets"];
         post?: never;
@@ -2972,12 +3312,12 @@ export interface paths {
         };
         /**
          * Effective egress policy of a workspace and its enforcement state
-         * @description effective = workspace override > project policy > platform default (allow_all). enforcement.state is not_enforced until the cell/host acknowledges the current effective policy for the workspace’s current ownership epoch, then pending | enforced | failed. `version` (ETag) is the override history version for If-Match.
+         * @description effective = workspace override > project policy > platform default (allow_all). enforcement.state is not_enforced until the cell/host acknowledges the current effective policy for the workspace’s current ownership epoch, then pending | enforced | failed. `version` (ETag) is the override history version for If-Match. template_egress: the template version’s egress ceiling (contracts §24.3, null = none); effective_policy: what the host enforces, effective intersected with that ceiling.
          */
         get: operations["getV1WorkspacesWorkspaceIdEgressPolicy"];
         /**
          * Set a workspace override of the egress policy (new immutable version)
-         * @description Same body and validation as the project policy. Optional If-Match. 409 conflict (details.reason workspace_deleted) for deleted workspaces.
+         * @description Same body and validation as the project policy. Optional If-Match. 409 conflict (details.reason workspace_deleted) for deleted workspaces. 422 egress_widening (details {template_egress, outside: [hosts] | ["cidrs"] | ["allow_all"]}) when the workspace’s template egress ceiling (contracts §24.3) would narrow the policy.
          */
         put: operations["putV1WorkspacesWorkspaceIdEgressPolicy"];
         post?: never;
@@ -3058,12 +3398,12 @@ export interface paths {
         };
         /**
          * Effective egress policy of a workspace and its enforcement state
-         * @description effective = workspace override > project policy > platform default (allow_all). enforcement.state is not_enforced until the cell/host acknowledges the current effective policy for the workspace’s current ownership epoch, then pending | enforced | failed. `version` (ETag) is the override history version for If-Match.
+         * @description effective = workspace override > project policy > platform default (allow_all). enforcement.state is not_enforced until the cell/host acknowledges the current effective policy for the workspace’s current ownership epoch, then pending | enforced | failed. `version` (ETag) is the override history version for If-Match. template_egress: the template version’s egress ceiling (contracts §24.3, null = none); effective_policy: what the host enforces, effective intersected with that ceiling.
          */
         get: operations["getApiV1WorkspacesWorkspaceIdEgressPolicy"];
         /**
          * Set a workspace override of the egress policy (new immutable version)
-         * @description Same body and validation as the project policy. Optional If-Match. 409 conflict (details.reason workspace_deleted) for deleted workspaces.
+         * @description Same body and validation as the project policy. Optional If-Match. 409 conflict (details.reason workspace_deleted) for deleted workspaces. 422 egress_widening (details {template_egress, outside: [hosts] | ["cidrs"] | ["allow_all"]}) when the workspace’s template egress ceiling (contracts §24.3) would narrow the policy.
          */
         put: operations["putApiV1WorkspacesWorkspaceIdEgressPolicy"];
         post?: never;
@@ -4225,6 +4565,15 @@ export interface components {
             draft_workspace_id: string;
             checkpoint_id: string | null;
             captured_at: string | null;
+        } | {
+            /** @enum {string} */
+            kind: "template_version";
+            /**
+             * Format: uuid
+             * @description UUIDv7, lowercase canonical form.
+             */
+            template_id: string;
+            version: number;
         };
         /** @description Manifest v2 `defaults` (contracts §19.7). Versions without them report the T1 defaults. */
         TemplateDefaults: {
@@ -4235,10 +4584,384 @@ export interface components {
                 memory_mib_ceiling: number;
                 disk_gib: number;
             } | null;
-            egress: null;
+            egress: components["schemas"]["TemplateEgressDefault"] | null;
             agent_tools: null;
             update_policy: null;
         };
+        /** @description The template’s workspace network ceiling (contracts §24.3): the cell intersects it with the effective egress policy. */
+        TemplateEgressDefault: {
+            /** @enum {string} */
+            mode: "allowlist" | "none";
+            /** @description Normalized (lowercase, sorted); empty for none. */
+            allow_hosts: string[];
+        };
+        /** @description An open-time input: text (a value passed to open) or secret (a stored secret of the same name, bound to the workspace). */
+        TemplateInput: {
+            /** @enum {string} */
+            kind: "text" | "secret";
+            required: boolean;
+            default: string | null;
+            description: string | null;
+        };
+        /** @description A start command (§24.4): create = new workspace layer, boot = every cold boot, resume = every memory restore. */
+        TemplateStartCommand: {
+            name: string;
+            /** @enum {string} */
+            when: "create" | "boot" | "resume";
+            run: string;
+            user: string | null;
+            cwd: string | null;
+            timeout_seconds: number;
+        };
+        /** @description A process the guest keeps running (§24.4); ready before open() returns. */
+        TemplateService: {
+            run: string;
+            user: string | null;
+            cwd: string | null;
+            /** @enum {string} */
+            restart: "always" | "on_failure" | "never";
+            ready: ({
+                port: number;
+            } | {
+                command: string;
+            }) | null;
+            ready_timeout_seconds: number;
+        };
+        /** @description What a workspace of the version gets when it opens (contracts §24.3), every key present. `env` is the effective template env (a recipe v2 version: its languages’ build env, then its own env). */
+        TemplateSettings: {
+            env: {
+                [key: string]: string;
+            };
+            inputs: {
+                [key: string]: components["schemas"]["TemplateInput"];
+            };
+            start: components["schemas"]["TemplateStartCommand"][];
+            services: {
+                [key: string]: components["schemas"]["TemplateService"];
+            };
+            defaults: components["schemas"]["TemplateDefaults"];
+        };
+        /** @description What a workspace of the version gets when it opens (§24.3, §24.4). Omitted fields are empty (recipes do not carry settings forward). */
+        TemplateSettingsInput: {
+            /** @description Template environment for every exec, PTY, start command and service (below text inputs and the call's env). */
+            env?: {
+                [key: string]: string;
+            };
+            /** @description Open-time inputs. text: a value passed to open({inputs}); secret: a stored secret of the same name, bound to the workspace (§17). */
+            inputs?: {
+                [key: string]: {
+                    /** @enum {unknown} */
+                    kind: "text" | "secret";
+                    /** @description Default: false. */
+                    required?: boolean;
+                    /** @description text inputs only. */
+                    default?: null | string;
+                    description?: null | string;
+                };
+            };
+            /** @description Start commands (§24.4): create = on a new workspace layer, boot = every cold boot, resume = every memory restore. */
+            start?: {
+                name: string;
+                /** @enum {unknown} */
+                when: "create" | "boot" | "resume";
+                /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                run: string;
+                /** @description Absent or null: the template's default user. */
+                user?: null | string;
+                cwd?: null | string;
+                /** @description Default: 300. */
+                timeout_seconds?: number;
+            }[];
+            /** @description Processes kept running by the guest (§24.4); ready before open() returns. */
+            services?: {
+                [key: string]: {
+                    /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                    run: string;
+                    /** @description Absent or null: the template's default user. */
+                    user?: null | string;
+                    cwd?: null | string;
+                    /**
+                     * @description Default: "on_failure".
+                     * @enum {unknown}
+                     */
+                    restart?: "always" | "on_failure" | "never";
+                    ready?: null | {
+                        port: number;
+                    } | {
+                        /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                        command: string;
+                    };
+                    /** @description Default: 60. */
+                    ready_timeout_seconds?: number;
+                };
+            };
+            /** @description Manifest defaults (§19.7, §24.3). agent_tools and update_policy stay reserved (null). */
+            defaults?: {
+                /** @enum {unknown} */
+                lifetime?: "persistent" | "session";
+                idle_timeout_seconds?: null | number;
+                /** @description Ceilings enforced at admission (clamped, §24.3). */
+                limits?: null | {
+                    cpu_millis_ceiling: number;
+                    memory_mib_ceiling: number;
+                    disk_gib: number;
+                };
+                /** @description Workspace network ceiling (§24.3): internet = no ceiling (stored as null), allowlist = only allow_hosts (TCP, any port), none = no egress. */
+                egress?: null | {
+                    /** @enum {unknown} */
+                    mode: "internet" | "allowlist" | "none";
+                    allow_hosts?: string[];
+                };
+                agent_tools?: null;
+                update_policy?: null;
+            };
+        };
+        /** @description Recipe v1: a Dockerfile in the host builder’s dialect (no `schema` field). */
+        TemplateRecipeV1: {
+            /** @description `<template slug>@<version>`: a published, non-archived version this organization can use (its own templates first, then platform). Referenced as `FROM shardflux-base`. */
+            base: string;
+            /** @description Dockerfile in the builder dialect (<= 64 KiB UTF-8): exactly one `FROM shardflux-base` (or `FROM shardflux-base:<recipe.base>`) first (ARG may precede it), then RUN (shell or JSON exec form, no flags or heredocs), ENV, ARG, WORKDIR, USER; LABEL, EXPOSE, CMD, ENTRYPOINT, MAINTAINER, STOPSIGNAL are recorded only. No COPY/ADD (no build context), no multi-stage or external images, at most 128 steps. Refusals are 422 with details.reason and line. */
+            dockerfile: string;
+            /**
+             * @description x86_64 (the default; the only one).
+             * @enum {string}
+             */
+            architecture?: "x86_64";
+            /** @description Builder VM bounds (the host builder’s ranges); clamped to the plan’s per-workspace limits (absent = the plan limit); timeout default 1800 s, maximum 3600 s. */
+            resources?: {
+                /** @description Builder range 500-16000. */
+                cpu_millis?: number;
+                /** @description Builder range 512-32768, even. */
+                memory_mib?: number;
+                /** @description Builder maximum 200. */
+                disk_gib?: number;
+                timeout_seconds?: number;
+            };
+            /** @description Build network: none (default) or egress to the listed DNS names (example.com, *.example.com). */
+            network?: {
+                /** @enum {string} */
+                mode: "none" | "egress_allowlist";
+                allow_hosts?: string[];
+            };
+        };
+        /**
+         * Template recipe v2 (shardflux.template-recipe.v2)
+         * @description A template without a Dockerfile (docs/INTEGRATION_CONTRACTS.md §24.1): `build` changes the filesystem through the host builder's structured steps, `settings` goes into the manifest and applies when a workspace opens. This document is the body field `recipe` of POST …/template-builds, the `recipe` of GET …/templates/{slug}/versions/{v}/recipe (export), and the content of template.yaml (the same document in YAML; only clients parse YAML). In template.yaml a file entry may name a local path (`from`) instead of an upload; clients upload it and send `upload` (the API refuses `from`). Rules JSON Schema cannot express, enforced by the API with 422 validation_failed and details.reason (§24.1, §24.6): input names are unique across settings.env and settings.inputs; a secret input has no default; a required input has no default; start command names are unique; `to` is not platform-owned; build.network.allow_hosts only with build "allowlist" and extra_hosts only with "auto"; the sum of every run/command script is at most 262144 bytes; start timeout_seconds sum to at most 3600; languages are in the API's language table for the base; services need a base whose guest agent has services.v1.
+         */
+        TemplateRecipeV2: {
+            /** @enum {unknown} */
+            schema: "shardflux.template-recipe.v2";
+            /** @description `<template slug>@<version>`: a published, non-archived, layered-capable version this organization can use (its own templates first, then platform), e.g. ubuntu-24.04@1. */
+            base: string;
+            build: {
+                /** @description Languages from the API's language table (§24.1). version omitted = the table's default for the base. Compiled first, in the table's order (not this array's). */
+                languages?: {
+                    /** @enum {unknown} */
+                    id: "python" | "node" | "go" | "rust" | "java";
+                    version?: string;
+                }[];
+                packages?: {
+                    apt?: string[];
+                    /** @description Installed into /opt/venv (implies the python language). */
+                    pip?: {
+                        packages?: string[];
+                        /** @description Absolute paths of requirements files inside the template (usually from files[]), installed with pip -r. */
+                        requirements?: string[];
+                    };
+                    /** @description npm install -g (implies the node language unless the base has node). */
+                    npm?: string[];
+                };
+                /** @description Uploaded files and folders (§24.2), applied in this order (a later entry overwrites an earlier one). */
+                files?: {
+                    /** @description An upload of this organization: sha256:<64 lower-case hex>. */
+                    upload?: string;
+                    /** @description template.yaml only: a local file (kind file) or directory (kind tar) the client uploads. Refused by the API. */
+                    from?: string;
+                    /** @enum {unknown} */
+                    kind: "file" | "tar";
+                    /** @description kind file: the file's path; kind tar: the directory the archive is extracted into. Platform-owned paths are refused (§24.1). */
+                    to: string;
+                    /** @description Default root. */
+                    owner?: string;
+                    /** @description Octal permission bits of a file (default 0644); absent or null for kind tar. */
+                    mode?: null | string;
+                }[];
+                /** @description Named build scripts, run in this order after languages, apt, files, pip and npm. */
+                steps?: {
+                    name: string;
+                    /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                    run: string;
+                    /** @description Default root. */
+                    user?: string;
+                    cwd?: null | string;
+                    env?: {
+                        [key: string]: string;
+                    };
+                }[];
+                /** @description Build network (§24.1). auto (default): hosts derived from the recipe plus extra_hosts; none: no egress; allowlist: exactly allow_hosts. */
+                network?: {
+                    /** @enum {unknown} */
+                    build?: "auto" | "none" | "allowlist";
+                    extra_hosts?: string[];
+                    allow_hosts?: string[];
+                };
+            };
+            /** @description What a workspace of the version gets when it opens (§24.3, §24.4). Omitted fields are empty (recipes do not carry settings forward). */
+            settings: {
+                /** @description Template environment for every exec, PTY, start command and service (below text inputs and the call's env). */
+                env?: {
+                    [key: string]: string;
+                };
+                /** @description Open-time inputs. text: a value passed to open({inputs}); secret: a stored secret of the same name, bound to the workspace (§17). */
+                inputs?: {
+                    [key: string]: {
+                        /** @enum {unknown} */
+                        kind: "text" | "secret";
+                        /** @description Default: false. */
+                        required?: boolean;
+                        /** @description text inputs only. */
+                        default?: null | string;
+                        description?: null | string;
+                    };
+                };
+                /** @description Start commands (§24.4): create = on a new workspace layer, boot = every cold boot, resume = every memory restore. */
+                start?: {
+                    name: string;
+                    /** @enum {unknown} */
+                    when: "create" | "boot" | "resume";
+                    /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                    run: string;
+                    /** @description Absent or null: the template's default user. */
+                    user?: null | string;
+                    cwd?: null | string;
+                    /** @description Default: 300. */
+                    timeout_seconds?: number;
+                }[];
+                /** @description Processes kept running by the guest (§24.4); ready before open() returns. */
+                services?: {
+                    [key: string]: {
+                        /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                        run: string;
+                        /** @description Absent or null: the template's default user. */
+                        user?: null | string;
+                        cwd?: null | string;
+                        /**
+                         * @description Default: "on_failure".
+                         * @enum {unknown}
+                         */
+                        restart?: "always" | "on_failure" | "never";
+                        ready?: null | {
+                            port: number;
+                        } | {
+                            /** @description Shell script run by /bin/bash -euo pipefail -c; 1..65536 bytes, no NUL. */
+                            command: string;
+                        };
+                        /** @description Default: 60. */
+                        ready_timeout_seconds?: number;
+                    };
+                };
+                /** @description Manifest defaults (§19.7, §24.3). agent_tools and update_policy stay reserved (null). */
+                defaults?: {
+                    /** @enum {unknown} */
+                    lifetime?: "persistent" | "session";
+                    idle_timeout_seconds?: null | number;
+                    /** @description Ceilings enforced at admission (clamped, §24.3). */
+                    limits?: null | {
+                        cpu_millis_ceiling: number;
+                        memory_mib_ceiling: number;
+                        disk_gib: number;
+                    };
+                    /** @description Workspace network ceiling (§24.3): internet = no ceiling (stored as null), allowlist = only allow_hosts (TCP, any port), none = no egress. */
+                    egress?: null | {
+                        /** @enum {unknown} */
+                        mode: "internet" | "allowlist" | "none";
+                        allow_hosts?: string[];
+                    };
+                    agent_tools?: null;
+                    update_policy?: null;
+                };
+            };
+            /** @description Builder VM bounds, exactly as recipe v1 `resources` (not part of recipe_sha256). */
+            resources?: {
+                cpu_millis?: number;
+                memory_mib?: number;
+                disk_gib?: number;
+                timeout_seconds?: number;
+            };
+        };
+        TemplateUploadRequest: {
+            /** @description Lower-case hex SHA-256 of the bytes. */
+            sha256: string;
+            /** @description Bytes, at most 5368709120 (5 GiB; more is 422 upload_too_large). */
+            size: number;
+            /**
+             * @description file, or tar (an uncompressed ustar/pax archive of a folder). Recorded for display; the recipe entry decides.
+             * @enum {string}
+             */
+            kind: "file" | "tar";
+        };
+        TemplateUpload: {
+            sha256: string;
+            size: number;
+            /** @enum {string} */
+            kind: "file" | "tar";
+            /**
+             * @description available: verified in the bucket (a recipe may reference it as sha256:<hex>); pending: PUT the bytes first.
+             * @enum {string}
+             */
+            state: "pending" | "available";
+            /**
+             * Format: date-time
+             * @description RFC 3339 UTC timestamp with Z.
+             */
+            created_at: string;
+            verified_at: string | null;
+        };
+        /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+        TemplateUploadResponse: {
+            upload: components["schemas"]["TemplateUpload"];
+            put: {
+                /** @description Presigned S3 PutObject URL (a bearer credential until expires_at: do not log or share it). */
+                url: string;
+                /** @enum {string} */
+                method: "PUT";
+                /** @description Send every header verbatim (x-amz-checksum-sha256 and content-length are signed; S3 refuses other bytes). */
+                headers: {
+                    [key: string]: string;
+                };
+                /**
+                 * Format: date-time
+                 * @description RFC 3339 UTC timestamp with Z.
+                 */
+                expires_at: string;
+            } | null;
+        };
+        /** @description The recipe and settings a version was built from (feeds "Edit template" and `shard templates export`). */
+        TemplateVersionRecipe: {
+            version: number;
+            source_kind: ("recipe" | "workspace" | "git") | null;
+            recipe: (components["schemas"]["TemplateRecipeV1"] | components["schemas"]["TemplateRecipeV2"]) | null;
+            settings: components["schemas"]["TemplateSettings"];
+        };
+        TemplatePackagePage: {
+            data: {
+                name: string;
+                version: string | null;
+                summary: string | null;
+            }[];
+            /**
+             * @description apt_index: the base’s apt index; pypi_names: the daily PyPI name list (no versions: fetch one package for them); npm_search: the npm registry search.
+             * @enum {string}
+             */
+            source: "apt_index" | "pypi_names" | "npm_search";
+        };
+        TemplatePackage: {
+            name: string;
+            version: string | null;
+            summary: string | null;
+            /** @description Known versions, newest first (at most 200). */
+            versions: string[];
+        };
         /** @description How the version was produced: a recipe build, a saved workspace (or draft), or git (reserved). */
         TemplateSource: {
             /** @enum {string} */
@@ -4434,11 +5157,14 @@ export interface components {
                 /** @enum {string} */
                 timeout_seconds: "request" | "plan" | "platform";
             };
+            /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
             network: {
                 /** @enum {string} */
                 mode: "none" | "egress_allowlist";
                 allow_hosts: string[];
             };
+            /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+            denied_hosts: string[];
             provenance: {
                 recipe_schema: string | null;
                 recipe_sha256: string | null;
@@ -4446,9 +5172,81 @@ export interface components {
                 builder_id: string | null;
                 attempt: number;
             };
-            /** @description Only on GET of one build. */
+            /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
             recipe?: {
                 dockerfile: string;
+            } | {
+                /** @enum {string} */
+                schema: "shardflux.template-recipe.v2";
+                build: {
+                    /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                    languages: {
+                        id: string;
+                        version: string;
+                        /** @enum {string} */
+                        source: "install" | "base";
+                        url: string | null;
+                        sha256: string | null;
+                    }[];
+                    packages: {
+                        apt: string[];
+                        pip: {
+                            packages: string[];
+                            requirements: string[];
+                        };
+                        npm: string[];
+                    };
+                    files: {
+                        upload: string;
+                        /** @enum {string} */
+                        kind: "file" | "tar";
+                        to: string;
+                        owner: string;
+                        mode: string | null;
+                        size: number;
+                    }[];
+                    steps: {
+                        name: string;
+                        run: string;
+                        user: string;
+                        cwd: string | null;
+                        env: {
+                            [key: string]: string;
+                        };
+                    }[];
+                    network: {
+                        /** @enum {string} */
+                        build: "auto" | "none" | "allowlist";
+                        extra_hosts: string[];
+                        allow_hosts: string[];
+                    };
+                };
+                settings: components["schemas"]["TemplateSettings"];
+                compiled: {
+                    compiler: string;
+                    language_table_sha256: string;
+                    build_env: {
+                        [key: string]: string;
+                    };
+                    steps: {
+                        [key: string]: unknown;
+                    }[];
+                    tools: {
+                        name: string;
+                        argv: string[];
+                    }[];
+                    network: {
+                        /** @enum {string} */
+                        mode: "none" | "egress_allowlist";
+                        allow_hosts: string[];
+                    };
+                    objects: {
+                        sha256: string;
+                        size: number;
+                        /** @enum {string} */
+                        kind: "file" | "tar";
+                    }[];
+                };
             };
             result: {
                 artifact_sha256: string | null;
@@ -4496,7 +5294,7 @@ export interface components {
                 last_heartbeat_at: string | null;
             };
             /**
-             * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+             * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
              * @enum {string}
              */
             source_kind: "recipe" | "workspace";
@@ -4542,6 +5340,8 @@ export interface components {
              * @description UUIDv7, lowercase canonical form.
              */
             project_id?: string;
+            /** @description Template name when this draft creates the organization template (default: the slug). */
+            display_name?: string;
             caps?: {
                 cpu_millis?: number;
                 memory_mib?: number;
@@ -4549,6 +5349,10 @@ export interface components {
             };
             agent_label?: string;
             tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
+            /** @description Open-time inputs of the template version (contracts §24.3): {NAME: string} for its declared text inputs. A new workspace stores each given value, else the declared default; on an existing key `inputs` replaces them all (omitted = unchanged). Secret inputs are not passed here: they bind the stored secret of the same name. 422 input_unknown (undeclared name, details.names), input_invalid (a secret input, a non-string, or a value over 4096 bytes or with CR, LF or NUL; details.names), input_required (details {names, kind}). */
+            inputs?: {
+                [key: string]: unknown;
+            };
         };
         CreateTestInstanceBody: {
             /**
@@ -4565,6 +5369,10 @@ export interface components {
             };
             agent_label?: string;
             tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
+            /** @description Open-time inputs of the template version (contracts §24.3): {NAME: string} for its declared text inputs. A new workspace stores each given value, else the declared default; on an existing key `inputs` replaces them all (omitted = unchanged). Secret inputs are not passed here: they bind the stored secret of the same name. 422 input_unknown (undeclared name, details.names), input_invalid (a secret input, a non-string, or a value over 4096 bytes or with CR, LF or NUL; details.names), input_required (details {names, kind}). */
+            inputs?: {
+                [key: string]: unknown;
+            };
         };
         PublishDraftBody: {
             /**
@@ -4582,12 +5390,16 @@ export interface components {
                     memory_mib_ceiling: number;
                     disk_gib: number;
                 } | null;
-                /** @description Reserved (T2). */
-                egress?: null;
+                egress?: {
+                    /** @enum {string} */
+                    mode: "internet" | "allowlist" | "none";
+                    allow_hosts?: string[];
+                } | null;
                 /** @description Reserved (T2). */
                 agent_tools?: null;
                 update_policy?: ("pinned" | "auto") | null;
             };
+            settings?: components["schemas"]["TemplateSettingsInput"];
             /** @default true */
             auto_publish: boolean;
             /** @description Up to 200 absolute paths the credential scan may report without failing the build (recorded in the manifest). */
@@ -4609,8 +5421,11 @@ export interface components {
                     memory_mib_ceiling: number;
                     disk_gib: number;
                 } | null;
-                /** @description Reserved (T2). */
-                egress?: null;
+                egress?: {
+                    /** @enum {string} */
+                    mode: "internet" | "allowlist" | "none";
+                    allow_hosts?: string[];
+                } | null;
                 /** @description Reserved (T2). */
                 agent_tools?: null;
                 update_policy?: ("pinned" | "auto") | null;
@@ -4624,6 +5439,7 @@ export interface components {
             auto_publish: boolean;
             /** @description Up to 200 absolute paths the credential scan may report without failing the build (recorded in the manifest). */
             acknowledged_scan_findings?: string[];
+            settings?: components["schemas"]["TemplateSettingsInput"];
         };
         /** @description operation: the capture (layer_snapshot) of a running workspace, null otherwise. build: poll GET …/template-builds/{id} until registration.state is registered. */
         SaveAsTemplateResponse: {
@@ -4717,6 +5533,49 @@ export interface components {
                 bytes_removed: number;
             } | null;
         };
+        /** @description Start commands and services of the workspace’s template version (contracts §24.4); null when the version has none. */
+        WorkspaceStartup: {
+            /**
+             * @description pending: a start is in progress and its startup has not begun (or never ran); running: start commands, services or readiness waits are running; ready: every step succeeded; failed: a step failed (the workspace still runs so it can be inspected; the next open runs the failed step again).
+             * @enum {string}
+             */
+            state: "pending" | "running" | "ready" | "failed";
+            trigger: ("create" | "boot" | "resume") | null;
+            step: string | null;
+            service: string | null;
+            exit_code: number | null;
+            output_tail: string | null;
+            reason: string | null;
+            operation_id: string | null;
+            at: string | null;
+        };
+        WorkspaceInputs: {
+            /** @description The workspace’s text inputs (name → value). Secret inputs are bound secrets (GET …/secrets), never listed here. */
+            inputs: {
+                [key: string]: string;
+            };
+        };
+        /** @description project_id: required for browser sessions (API keys open in their own project). */
+        CreateVersionTestInstanceBody: {
+            /** @description Workspace key (default sf:test:<slug>:<8 hex>); caller keys starting with sf: are reserved. */
+            key?: string;
+            caps?: {
+                cpu_millis?: number;
+                memory_mib?: number;
+                disk_gib?: number;
+            };
+            agent_label?: string;
+            tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
+            /** @description Open-time inputs of the template version (contracts §24.3): {NAME: string} for its declared text inputs. A new workspace stores each given value, else the declared default; on an existing key `inputs` replaces them all (omitted = unchanged). Secret inputs are not passed here: they bind the stored secret of the same name. 422 input_unknown (undeclared name, details.names), input_invalid (a secret input, a non-string, or a value over 4096 bytes or with CR, LF or NUL; details.names), input_required (details {names, kind}). */
+            inputs?: {
+                [key: string]: unknown;
+            };
+            /**
+             * Format: uuid
+             * @description UUIDv7, lowercase canonical form.
+             */
+            project_id?: string;
+        };
         Workspace: {
             /**
              * Format: uuid
@@ -4817,6 +5676,7 @@ export interface components {
             ended_reason: ("closed" | "idle_timeout" | "draft_discarded") | null;
             dev_template_id: string | null;
             update_policy: components["schemas"]["UpdatePolicy"];
+            startup: components["schemas"]["WorkspaceStartup"] | null;
             /**
              * Format: date-time
              * @description RFC 3339 UTC timestamp with Z.
@@ -8403,6 +9263,10 @@ export interface operations {
                     tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
                     /** @description Secret names bound to the workspace (max 50, unique): injected as environment variables into every exec and PTY start (terminal sessions included), together with the call’s own `secret_refs`. Each must name a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names. */
                     secrets?: string[];
+                    /** @description Open-time inputs of the template version (contracts §24.3): {NAME: string} for its declared text inputs. A new workspace stores each given value, else the declared default; on an existing key `inputs` replaces them all (omitted = unchanged). Secret inputs are not passed here: they bind the stored secret of the same name. 422 input_unknown (undeclared name, details.names), input_invalid (a secret input, a non-string, or a value over 4096 bytes or with CR, LF or NUL; details.names), input_required (details {names, kind}). */
+                    inputs?: {
+                        [key: string]: unknown;
+                    };
                     lifetime?: components["schemas"]["WorkspaceLifetime"];
                     /** @description adaptive (the learned timeout, default), never, or fixed:<seconds> (60..604800). Contracts §20.7. */
                     idle_policy?: string;
@@ -8658,6 +9522,47 @@ export interface operations {
             };
         };
     };
+    getV1WorkspacesWorkspaceIdInputs: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                workspace_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WorkspaceInputs"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     putV1WorkspacesWorkspaceIdIdlePolicy: {
         parameters: {
             query?: never;
@@ -9364,6 +10269,10 @@ export interface operations {
                     tools?: ("exec" | "files" | "pty" | "process" | "git" | "browser")[];
                     /** @description Secret names bound to the workspace (max 50, unique): injected as environment variables into every exec and PTY start (terminal sessions included), together with the call’s own `secret_refs`. Each must name a live secret this workspace may use (its project, its id, and allowed_tools including exec and pty), else 422 details.reason secret_not_available with details.names. */
                     secrets?: string[];
+                    /** @description Open-time inputs of the template version (contracts §24.3): {NAME: string} for its declared text inputs. A new workspace stores each given value, else the declared default; on an existing key `inputs` replaces them all (omitted = unchanged). Secret inputs are not passed here: they bind the stored secret of the same name. 422 input_unknown (undeclared name, details.names), input_invalid (a secret input, a non-string, or a value over 4096 bytes or with CR, LF or NUL; details.names), input_required (details {names, kind}). */
+                    inputs?: {
+                        [key: string]: unknown;
+                    };
                     lifetime?: components["schemas"]["WorkspaceLifetime"];
                     /** @description adaptive (the learned timeout, default), never, or fixed:<seconds> (60..604800). Contracts §20.7. */
                     idle_policy?: string;
@@ -9619,7 +10528,7 @@ export interface operations {
             };
         };
     };
-    putApiV1WorkspacesWorkspaceIdIdlePolicy: {
+    getApiV1WorkspacesWorkspaceIdInputs: {
         parameters: {
             query?: never;
             header?: never;
@@ -9629,7 +10538,48 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody: {
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["WorkspaceInputs"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    putApiV1WorkspacesWorkspaceIdIdlePolicy: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                workspace_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
             content: {
                 "application/json": {
                     idle_policy: string | null;
@@ -11333,6 +12283,7 @@ export interface operations {
                                     rootfs_sha256: string | null;
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
+                                settings: components["schemas"]["TemplateSettings"];
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -11377,6 +12328,7 @@ export interface operations {
                                 created_at: string;
                             } | null;
                             update_policy: components["schemas"]["UpdatePolicy"];
+                            category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
                     };
@@ -11543,6 +12495,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -11587,6 +12540,7 @@ export interface operations {
                             created_at: string;
                         } | null;
                         update_policy: components["schemas"]["UpdatePolicy"];
+                        category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
                             catalog_version: string;
@@ -11700,6 +12654,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -11877,6 +12832,7 @@ export interface operations {
                                     rootfs_sha256: string | null;
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
+                                settings: components["schemas"]["TemplateSettings"];
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -11921,6 +12877,7 @@ export interface operations {
                                 created_at: string;
                             } | null;
                             update_policy: components["schemas"]["UpdatePolicy"];
+                            category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
                     };
@@ -12085,6 +13042,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -12129,6 +13087,7 @@ export interface operations {
                             created_at: string;
                         } | null;
                         update_policy: components["schemas"]["UpdatePolicy"];
+                        category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
                             catalog_version: string;
@@ -12242,6 +13201,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -12416,11 +13376,14 @@ export interface operations {
                                 /** @enum {string} */
                                 timeout_seconds: "request" | "plan" | "platform";
                             };
+                            /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                             network: {
                                 /** @enum {string} */
                                 mode: "none" | "egress_allowlist";
                                 allow_hosts: string[];
                             };
+                            /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                            denied_hosts: string[];
                             provenance: {
                                 recipe_schema: string | null;
                                 recipe_sha256: string | null;
@@ -12428,9 +13391,81 @@ export interface operations {
                                 builder_id: string | null;
                                 attempt: number;
                             };
-                            /** @description Only on GET of one build. */
+                            /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                             recipe?: {
                                 dockerfile: string;
+                            } | {
+                                /** @enum {string} */
+                                schema: "shardflux.template-recipe.v2";
+                                build: {
+                                    /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                    languages: {
+                                        id: string;
+                                        version: string;
+                                        /** @enum {string} */
+                                        source: "install" | "base";
+                                        url: string | null;
+                                        sha256: string | null;
+                                    }[];
+                                    packages: {
+                                        apt: string[];
+                                        pip: {
+                                            packages: string[];
+                                            requirements: string[];
+                                        };
+                                        npm: string[];
+                                    };
+                                    files: {
+                                        upload: string;
+                                        /** @enum {string} */
+                                        kind: "file" | "tar";
+                                        to: string;
+                                        owner: string;
+                                        mode: string | null;
+                                        size: number;
+                                    }[];
+                                    steps: {
+                                        name: string;
+                                        run: string;
+                                        user: string;
+                                        cwd: string | null;
+                                        env: {
+                                            [key: string]: string;
+                                        };
+                                    }[];
+                                    network: {
+                                        /** @enum {string} */
+                                        build: "auto" | "none" | "allowlist";
+                                        extra_hosts: string[];
+                                        allow_hosts: string[];
+                                    };
+                                };
+                                settings: components["schemas"]["TemplateSettings"];
+                                compiled: {
+                                    compiler: string;
+                                    language_table_sha256: string;
+                                    build_env: {
+                                        [key: string]: string;
+                                    };
+                                    steps: {
+                                        [key: string]: unknown;
+                                    }[];
+                                    tools: {
+                                        name: string;
+                                        argv: string[];
+                                    }[];
+                                    network: {
+                                        /** @enum {string} */
+                                        mode: "none" | "egress_allowlist";
+                                        allow_hosts: string[];
+                                    };
+                                    objects: {
+                                        sha256: string;
+                                        size: number;
+                                        /** @enum {string} */
+                                        kind: "file" | "tar";
+                                    }[];
+                                };
                             };
                             result: {
                                 artifact_sha256: string | null;
@@ -12478,7 +13513,7 @@ export interface operations {
                                 last_heartbeat_at: string | null;
                             };
                             /**
-                             * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                             * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                              * @enum {string}
                              */
                             source_kind: "recipe" | "workspace";
@@ -12531,7 +13566,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description Organization template to build into (created by the first build). Platform slugs are refused. */
+                    /** @description Organization template to build into (created by the first build). Platform slugs and the reserved slugs new and edit are refused for new templates. */
                     template_slug: string;
                     /**
                      * @description Publish the produced version as soon as it is registered (new workspaces of the slug then use it). false: it stays unpublished until an owner/admin publishes it.
@@ -12540,33 +13575,12 @@ export interface operations {
                     auto_publish?: boolean;
                     /** @description Template name when this build creates the template. */
                     display_name?: string;
-                    recipe: {
-                        /** @description `<template slug>@<version>`: a published, non-archived version this organization can use (its own templates first, then platform). Referenced as `FROM shardflux-base`. */
-                        base: string;
-                        /** @description Dockerfile in the builder dialect (<= 64 KiB UTF-8): exactly one `FROM shardflux-base` (or `FROM shardflux-base:<recipe.base>`) first (ARG may precede it), then RUN (shell or JSON exec form, no flags or heredocs), ENV, ARG, WORKDIR, USER; LABEL, EXPOSE, CMD, ENTRYPOINT, MAINTAINER, STOPSIGNAL are recorded only. No COPY/ADD (no build context), no multi-stage or external images, at most 128 steps. Refusals are 422 with details.reason and line. */
-                        dockerfile: string;
-                        /**
-                         * @default x86_64
-                         * @enum {string}
-                         */
-                        architecture?: "x86_64";
-                        /** @description Builder VM bounds (the host builder’s ranges); clamped to the plan’s per-workspace limits (absent = the plan limit); timeout default 1800 s, maximum 3600 s. */
-                        resources?: {
-                            /** @description Builder range 500-16000. */
-                            cpu_millis?: number;
-                            /** @description Builder range 512-32768, even. */
-                            memory_mib?: number;
-                            /** @description Builder maximum 200. */
-                            disk_gib?: number;
-                            timeout_seconds?: number;
-                        };
-                        /** @description Build network: none (default) or egress to the listed DNS names (example.com, *.example.com). */
-                        network?: {
-                            /** @enum {string} */
-                            mode: "none" | "egress_allowlist";
-                            allow_hosts?: string[];
-                        };
-                    };
+                    /** @description Recipe v1 (TemplateRecipeV1: a Dockerfile, no `schema` field) or recipe v2 (TemplateRecipeV2, `schema: "shardflux.template-recipe.v2"`: languages, packages, uploaded files, build steps, auto network and settings; contracts §24.1). */
+                    recipe: components["schemas"]["TemplateRecipeV1"] | components["schemas"]["TemplateRecipeV2"];
+                    /** @description The version description (manifest `description`). */
+                    description?: string;
+                    /** @description Recipe v2 only: up to 200 absolute paths the credential scan may report without failing the build (recorded in the manifest). */
+                    acknowledged_scan_findings?: string[];
                 };
             };
         };
@@ -12688,11 +13702,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -12700,9 +13717,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -12750,7 +13839,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -12922,11 +14011,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -12934,9 +14026,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -12984,7 +14148,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -13153,11 +14317,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -13165,9 +14332,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -13215,7 +14454,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -13350,11 +14589,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -13362,9 +14604,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -13412,7 +14726,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -13450,15 +14764,310 @@ export interface operations {
             };
         };
     };
-    getV1OrganizationsOrganizationIdTemplateBuildsBuildIdLogUrl: {
+    getV1OrganizationsOrganizationIdTemplateBuildsBuildIdLogUrl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                /** @description UUIDv7, lowercase canonical form. */
+                build_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Presigned S3 GET URL (SigV4 query auth). A bearer credential until expires_at: do not log or share it. */
+                        url: string;
+                        /** Format: date-time */
+                        expires_at: string;
+                        /** @description `builds/<build_id>.log`. */
+                        object_key: string;
+                        bytes: number | null;
+                        sha256: string | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    postV1OrganizationsOrganizationIdTemplateUploads: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["TemplateUploadRequest"];
+            };
+        };
+        responses: {
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    postV1TemplateUploads: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["TemplateUploadRequest"];
+            };
+        };
+        responses: {
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getV1OrganizationsOrganizationIdTemplatePackages: {
+        parameters: {
+            query: {
+                ecosystem: "apt" | "pip" | "npm";
+                q: string;
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+                limit?: number;
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplatePackagePage"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getV1OrganizationsOrganizationIdTemplatePackagesEcosystemName: {
+        parameters: {
+            query?: {
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                ecosystem: "apt" | "pip" | "npm";
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplatePackage"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getV1TemplatePackages: {
         parameters: {
-            query?: never;
+            query: {
+                ecosystem: "apt" | "pip" | "npm";
+                q: string;
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+                limit?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplatePackagePage"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getV1TemplatePackagesEcosystemName: {
+        parameters: {
+            query?: {
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+            };
             header?: never;
             path: {
-                /** @description UUIDv7, lowercase canonical form. */
-                organization_id: string;
-                /** @description UUIDv7, lowercase canonical form. */
-                build_id: string;
+                ecosystem: "apt" | "pip" | "npm";
+                name: string;
             };
             cookie?: never;
         };
@@ -13470,16 +15079,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /** @description Presigned S3 GET URL (SigV4 query auth). A bearer credential until expires_at: do not log or share it. */
-                        url: string;
-                        /** Format: date-time */
-                        expires_at: string;
-                        /** @description `builds/<build_id>.log`. */
-                        object_key: string;
-                        bytes: number | null;
-                        sha256: string | null;
-                    };
+                    "application/json": components["schemas"]["TemplatePackage"];
                 };
             };
             /** @description Default Response */
@@ -13691,6 +15291,7 @@ export interface operations {
                                     rootfs_sha256: string | null;
                                 } | null;
                                 defaults: components["schemas"]["TemplateDefaults"];
+                                settings: components["schemas"]["TemplateSettings"];
                                 files: components["schemas"]["TemplateFilesSummary"];
                                 rootfs_bytes: number | null;
                                 /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -13735,6 +15336,7 @@ export interface operations {
                                 created_at: string;
                             } | null;
                             update_policy: components["schemas"]["UpdatePolicy"];
+                            category: ("os" | "stack") | null;
                         }[];
                         next_cursor: string | null;
                     };
@@ -13901,6 +15503,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -13945,6 +15548,7 @@ export interface operations {
                             created_at: string;
                         } | null;
                         update_policy: components["schemas"]["UpdatePolicy"];
+                        category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
                             catalog_version: string;
@@ -14058,6 +15662,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -14232,11 +15837,14 @@ export interface operations {
                                 /** @enum {string} */
                                 timeout_seconds: "request" | "plan" | "platform";
                             };
+                            /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                             network: {
                                 /** @enum {string} */
                                 mode: "none" | "egress_allowlist";
                                 allow_hosts: string[];
                             };
+                            /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                            denied_hosts: string[];
                             provenance: {
                                 recipe_schema: string | null;
                                 recipe_sha256: string | null;
@@ -14244,9 +15852,81 @@ export interface operations {
                                 builder_id: string | null;
                                 attempt: number;
                             };
-                            /** @description Only on GET of one build. */
+                            /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                             recipe?: {
                                 dockerfile: string;
+                            } | {
+                                /** @enum {string} */
+                                schema: "shardflux.template-recipe.v2";
+                                build: {
+                                    /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                    languages: {
+                                        id: string;
+                                        version: string;
+                                        /** @enum {string} */
+                                        source: "install" | "base";
+                                        url: string | null;
+                                        sha256: string | null;
+                                    }[];
+                                    packages: {
+                                        apt: string[];
+                                        pip: {
+                                            packages: string[];
+                                            requirements: string[];
+                                        };
+                                        npm: string[];
+                                    };
+                                    files: {
+                                        upload: string;
+                                        /** @enum {string} */
+                                        kind: "file" | "tar";
+                                        to: string;
+                                        owner: string;
+                                        mode: string | null;
+                                        size: number;
+                                    }[];
+                                    steps: {
+                                        name: string;
+                                        run: string;
+                                        user: string;
+                                        cwd: string | null;
+                                        env: {
+                                            [key: string]: string;
+                                        };
+                                    }[];
+                                    network: {
+                                        /** @enum {string} */
+                                        build: "auto" | "none" | "allowlist";
+                                        extra_hosts: string[];
+                                        allow_hosts: string[];
+                                    };
+                                };
+                                settings: components["schemas"]["TemplateSettings"];
+                                compiled: {
+                                    compiler: string;
+                                    language_table_sha256: string;
+                                    build_env: {
+                                        [key: string]: string;
+                                    };
+                                    steps: {
+                                        [key: string]: unknown;
+                                    }[];
+                                    tools: {
+                                        name: string;
+                                        argv: string[];
+                                    }[];
+                                    network: {
+                                        /** @enum {string} */
+                                        mode: "none" | "egress_allowlist";
+                                        allow_hosts: string[];
+                                    };
+                                    objects: {
+                                        sha256: string;
+                                        size: number;
+                                        /** @enum {string} */
+                                        kind: "file" | "tar";
+                                    }[];
+                                };
                             };
                             result: {
                                 artifact_sha256: string | null;
@@ -14294,7 +15974,7 @@ export interface operations {
                                 last_heartbeat_at: string | null;
                             };
                             /**
-                             * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                             * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                              * @enum {string}
                              */
                             source_kind: "recipe" | "workspace";
@@ -14347,7 +16027,7 @@ export interface operations {
         requestBody: {
             content: {
                 "application/json": {
-                    /** @description Organization template to build into (created by the first build). Platform slugs are refused. */
+                    /** @description Organization template to build into (created by the first build). Platform slugs and the reserved slugs new and edit are refused for new templates. */
                     template_slug: string;
                     /**
                      * @description Publish the produced version as soon as it is registered (new workspaces of the slug then use it). false: it stays unpublished until an owner/admin publishes it.
@@ -14356,33 +16036,12 @@ export interface operations {
                     auto_publish?: boolean;
                     /** @description Template name when this build creates the template. */
                     display_name?: string;
-                    recipe: {
-                        /** @description `<template slug>@<version>`: a published, non-archived version this organization can use (its own templates first, then platform). Referenced as `FROM shardflux-base`. */
-                        base: string;
-                        /** @description Dockerfile in the builder dialect (<= 64 KiB UTF-8): exactly one `FROM shardflux-base` (or `FROM shardflux-base:<recipe.base>`) first (ARG may precede it), then RUN (shell or JSON exec form, no flags or heredocs), ENV, ARG, WORKDIR, USER; LABEL, EXPOSE, CMD, ENTRYPOINT, MAINTAINER, STOPSIGNAL are recorded only. No COPY/ADD (no build context), no multi-stage or external images, at most 128 steps. Refusals are 422 with details.reason and line. */
-                        dockerfile: string;
-                        /**
-                         * @default x86_64
-                         * @enum {string}
-                         */
-                        architecture?: "x86_64";
-                        /** @description Builder VM bounds (the host builder’s ranges); clamped to the plan’s per-workspace limits (absent = the plan limit); timeout default 1800 s, maximum 3600 s. */
-                        resources?: {
-                            /** @description Builder range 500-16000. */
-                            cpu_millis?: number;
-                            /** @description Builder range 512-32768, even. */
-                            memory_mib?: number;
-                            /** @description Builder maximum 200. */
-                            disk_gib?: number;
-                            timeout_seconds?: number;
-                        };
-                        /** @description Build network: none (default) or egress to the listed DNS names (example.com, *.example.com). */
-                        network?: {
-                            /** @enum {string} */
-                            mode: "none" | "egress_allowlist";
-                            allow_hosts?: string[];
-                        };
-                    };
+                    /** @description Recipe v1 (TemplateRecipeV1: a Dockerfile, no `schema` field) or recipe v2 (TemplateRecipeV2, `schema: "shardflux.template-recipe.v2"`: languages, packages, uploaded files, build steps, auto network and settings; contracts §24.1). */
+                    recipe: components["schemas"]["TemplateRecipeV1"] | components["schemas"]["TemplateRecipeV2"];
+                    /** @description The version description (manifest `description`). */
+                    description?: string;
+                    /** @description Recipe v2 only: up to 200 absolute paths the credential scan may report without failing the build (recorded in the manifest). */
+                    acknowledged_scan_findings?: string[];
                 };
             };
         };
@@ -14504,11 +16163,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -14516,9 +16178,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -14566,7 +16300,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -14738,11 +16472,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -14750,9 +16487,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -14800,7 +16609,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -14969,11 +16778,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -14981,9 +16793,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -15031,7 +16915,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -15166,11 +17050,14 @@ export interface operations {
                             /** @enum {string} */
                             timeout_seconds: "request" | "plan" | "platform";
                         };
+                        /** @description The build network (recipe v2: compiled.network, derived from the recipe for `auto`). */
                         network: {
                             /** @enum {string} */
                             mode: "none" | "egress_allowlist";
                             allow_hosts: string[];
                         };
+                        /** @description Host names the builder’s DNS proxy refused during the build (at most 50). Rebuild with a host in build.network.extra_hosts to allow it. */
+                        denied_hosts: string[];
                         provenance: {
                             recipe_schema: string | null;
                             recipe_sha256: string | null;
@@ -15178,9 +17065,81 @@ export interface operations {
                             builder_id: string | null;
                             attempt: number;
                         };
-                        /** @description Only on GET of one build. */
+                        /** @description Only on GET of one build: recipe v1 {dockerfile}, or recipe v2 {schema, build, settings, compiled} (the stored document, contracts §24.1). */
                         recipe?: {
                             dockerfile: string;
+                        } | {
+                            /** @enum {string} */
+                            schema: "shardflux.template-recipe.v2";
+                            build: {
+                                /** @description Resolved languages in compile order (implied ones included); source base = the base already has it. */
+                                languages: {
+                                    id: string;
+                                    version: string;
+                                    /** @enum {string} */
+                                    source: "install" | "base";
+                                    url: string | null;
+                                    sha256: string | null;
+                                }[];
+                                packages: {
+                                    apt: string[];
+                                    pip: {
+                                        packages: string[];
+                                        requirements: string[];
+                                    };
+                                    npm: string[];
+                                };
+                                files: {
+                                    upload: string;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                    to: string;
+                                    owner: string;
+                                    mode: string | null;
+                                    size: number;
+                                }[];
+                                steps: {
+                                    name: string;
+                                    run: string;
+                                    user: string;
+                                    cwd: string | null;
+                                    env: {
+                                        [key: string]: string;
+                                    };
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    build: "auto" | "none" | "allowlist";
+                                    extra_hosts: string[];
+                                    allow_hosts: string[];
+                                };
+                            };
+                            settings: components["schemas"]["TemplateSettings"];
+                            compiled: {
+                                compiler: string;
+                                language_table_sha256: string;
+                                build_env: {
+                                    [key: string]: string;
+                                };
+                                steps: {
+                                    [key: string]: unknown;
+                                }[];
+                                tools: {
+                                    name: string;
+                                    argv: string[];
+                                }[];
+                                network: {
+                                    /** @enum {string} */
+                                    mode: "none" | "egress_allowlist";
+                                    allow_hosts: string[];
+                                };
+                                objects: {
+                                    sha256: string;
+                                    size: number;
+                                    /** @enum {string} */
+                                    kind: "file" | "tar";
+                                }[];
+                            };
                         };
                         result: {
                             artifact_sha256: string | null;
@@ -15228,7 +17187,7 @@ export interface operations {
                             last_heartbeat_at: string | null;
                         };
                         /**
-                         * @description recipe (Dockerfile dialect) or workspace (save-as-template, draft publish).
+                         * @description recipe (recipe v1 Dockerfile dialect or recipe v2) or workspace (save-as-template, draft publish).
                          * @enum {string}
                          */
                         source_kind: "recipe" | "workspace";
@@ -15266,15 +17225,125 @@ export interface operations {
             };
         };
     };
-    getApiV1OrganizationsOrganizationIdTemplateBuildsBuildIdLogUrl: {
+    getApiV1OrganizationsOrganizationIdTemplateBuildsBuildIdLogUrl: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                /** @description UUIDv7, lowercase canonical form. */
+                build_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** @description Presigned S3 GET URL (SigV4 query auth). A bearer credential until expires_at: do not log or share it. */
+                        url: string;
+                        /** Format: date-time */
+                        expires_at: string;
+                        /** @description `builds/<build_id>.log`. */
+                        object_key: string;
+                        bytes: number | null;
+                        sha256: string | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    postApiV1OrganizationsOrganizationIdTemplateUploads: {
         parameters: {
             query?: never;
             header?: never;
             path: {
                 /** @description UUIDv7, lowercase canonical form. */
                 organization_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["TemplateUploadRequest"];
+            };
+        };
+        responses: {
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description 200: the bytes are already available (put null). 201: PUT the bytes with `put`, then reference `sha256:<hex>` in the recipe. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateUploadResponse"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OrganizationsOrganizationIdTemplatePackages: {
+        parameters: {
+            query: {
+                ecosystem: "apt" | "pip" | "npm";
+                q: string;
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+                limit?: number;
+            };
+            header?: never;
+            path: {
                 /** @description UUIDv7, lowercase canonical form. */
-                build_id: string;
+                organization_id: string;
             };
             cookie?: never;
         };
@@ -15286,16 +17355,53 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        /** @description Presigned S3 GET URL (SigV4 query auth). A bearer credential until expires_at: do not log or share it. */
-                        url: string;
-                        /** Format: date-time */
-                        expires_at: string;
-                        /** @description `builds/<build_id>.log`. */
-                        object_key: string;
-                        bytes: number | null;
-                        sha256: string | null;
-                    };
+                    "application/json": components["schemas"]["TemplatePackagePage"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OrganizationsOrganizationIdTemplatePackagesEcosystemName: {
+        parameters: {
+            query?: {
+                /** @description `<slug>@<version>` (apt: the base whose apt index is searched). */
+                base?: string;
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                ecosystem: "apt" | "pip" | "npm";
+                name: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplatePackage"];
                 };
             };
             /** @description Default Response */
@@ -15502,6 +17608,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15546,6 +17653,7 @@ export interface operations {
                             created_at: string;
                         } | null;
                         update_policy: components["schemas"]["UpdatePolicy"];
+                        category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
                             catalog_version: string;
@@ -15659,6 +17767,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15834,6 +17943,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -15878,6 +17988,7 @@ export interface operations {
                             created_at: string;
                         } | null;
                         update_policy: components["schemas"]["UpdatePolicy"];
+                        category: ("os" | "stack") | null;
                         plan: {
                             plan_key: string;
                             catalog_version: string;
@@ -15991,6 +18102,7 @@ export interface operations {
                                 rootfs_sha256: string | null;
                             } | null;
                             defaults: components["schemas"]["TemplateDefaults"];
+                            settings: components["schemas"]["TemplateSettings"];
                             files: components["schemas"]["TemplateFilesSummary"];
                             rootfs_bytes: number | null;
                             /** @description The org layers of this version’s chain, bottom to top (empty for images). */
@@ -17002,7 +19114,155 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: components["schemas"]["DraftState"][];
+                        next_cursor: string | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftStates: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": {
+                    label?: string;
+                };
+            };
+        };
+        responses: {
+            /** @description Default Response */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        operation: components["schemas"]["Operation"];
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getApiV1OrganizationsOrganizationIdTemplatesSlugDraftTestInstances: {
+        parameters: {
+            query?: {
+                limit?: number;
+                cursor?: string;
+                include_ended?: boolean;
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Default Response */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: components["schemas"]["Workspace"][];
+                        next_cursor: string | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftTestInstances: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                slug: string;
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateTestInstanceBody"];
+            };
+        };
         responses: {
             /** @description Default Response */
             200: {
@@ -17011,8 +19271,24 @@ export interface operations {
                 };
                 content: {
                     "application/json": {
-                        data: components["schemas"]["DraftState"][];
-                        next_cursor: string | null;
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
+                };
+            };
+            /** @description Default Response */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
                     };
                 };
             };
@@ -17036,7 +19312,7 @@ export interface operations {
             };
         };
     };
-    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftStates: {
+    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftPublish: {
         parameters: {
             query?: never;
             header?: never;
@@ -17049,21 +19325,17 @@ export interface operations {
         };
         requestBody: {
             content: {
-                "application/json": {
-                    label?: string;
-                };
+                "application/json": components["schemas"]["PublishDraftBody"];
             };
         };
         responses: {
-            /** @description Default Response */
+            /** @description operation: the capture (layer_snapshot) of a running workspace, null otherwise. build: poll GET …/template-builds/{id} until registration.state is registered. */
             202: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": {
-                        operation: components["schemas"]["Operation"];
-                    };
+                    "application/json": components["schemas"]["SaveAsTemplateResponse"];
                 };
             };
             /** @description Default Response */
@@ -17086,32 +19358,49 @@ export interface operations {
             };
         };
     };
-    getApiV1OrganizationsOrganizationIdTemplatesSlugDraftTestInstances: {
+    postV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionTestInstances: {
         parameters: {
-            query?: {
-                limit?: number;
-                cursor?: string;
-                include_ended?: boolean;
-            };
+            query?: never;
             header?: never;
             path: {
                 /** @description UUIDv7, lowercase canonical form. */
                 organization_id: string;
                 slug: string;
+                version: number;
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateVersionTestInstanceBody"];
+            };
+        };
         responses: {
-            /** @description Default Response */
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
                     "application/json": {
-                        data: components["schemas"]["Workspace"][];
-                        next_cursor: string | null;
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
+                };
+            };
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
+            202: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
                     };
                 };
             };
@@ -17135,24 +19424,23 @@ export interface operations {
             };
         };
     };
-    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftTestInstances: {
+    postV1TemplatesSlugVersionsVersionTestInstances: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description UUIDv7, lowercase canonical form. */
-                organization_id: string;
                 slug: string;
+                version: number;
             };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["CreateTestInstanceBody"];
+                "application/json": components["schemas"]["CreateVersionTestInstanceBody"];
             };
         };
         responses: {
-            /** @description Default Response */
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -17166,7 +19454,7 @@ export interface operations {
                     };
                 };
             };
-            /** @description Default Response */
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
             202: {
                 headers: {
                     [name: string]: unknown;
@@ -17200,7 +19488,7 @@ export interface operations {
             };
         };
     };
-    postApiV1OrganizationsOrganizationIdTemplatesSlugDraftPublish: {
+    postApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionTestInstances: {
         parameters: {
             query?: never;
             header?: never;
@@ -17208,22 +19496,42 @@ export interface operations {
                 /** @description UUIDv7, lowercase canonical form. */
                 organization_id: string;
                 slug: string;
+                version: number;
             };
             cookie?: never;
         };
         requestBody: {
             content: {
-                "application/json": components["schemas"]["PublishDraftBody"];
+                "application/json": components["schemas"]["CreateVersionTestInstanceBody"];
             };
         };
         responses: {
-            /** @description operation: the capture (layer_snapshot) of a running workspace, null otherwise. build: poll GET …/template-builds/{id} until registration.state is registered. */
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
+                };
+            };
+            /** @description 202: poll `operation`; 200: an existing instance that is running and ready (tool_token set). */
             202: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["SaveAsTemplateResponse"];
+                    "application/json": {
+                        workspace: components["schemas"]["Workspace"];
+                        operation: components["schemas"]["Operation"] | null;
+                        cell_endpoint: string | null;
+                        tool_token: components["schemas"]["ToolToken"] | null;
+                    };
                 };
             };
             /** @description Default Response */
@@ -17540,6 +19848,96 @@ export interface operations {
             };
         };
     };
+    getV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionRecipe: {
+        parameters: {
+            query?: {
+                /** @description Pick the platform template even when an organization template shadows its slug. */
+                owner?: "platform" | "organization";
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                slug: string;
+                version: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The recipe and settings a version was built from (feeds "Edit template" and `shard templates export`). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateVersionRecipe"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
+    getV1TemplatesSlugVersionsVersionRecipe: {
+        parameters: {
+            query?: {
+                /** @description Pick the platform template even when an organization template shadows its slug. */
+                owner?: "platform" | "organization";
+            };
+            header?: never;
+            path: {
+                slug: string;
+                version: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The recipe and settings a version was built from (feeds "Edit template" and `shard templates export`). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateVersionRecipe"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionFiles: {
         parameters: {
             query?: {
@@ -17690,6 +20088,52 @@ export interface operations {
             };
         };
     };
+    getApiV1OrganizationsOrganizationIdTemplatesSlugVersionsVersionRecipe: {
+        parameters: {
+            query?: {
+                /** @description Pick the platform template even when an organization template shadows its slug. */
+                owner?: "platform" | "organization";
+            };
+            header?: never;
+            path: {
+                /** @description UUIDv7, lowercase canonical form. */
+                organization_id: string;
+                slug: string;
+                version: number;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The recipe and settings a version was built from (feeds "Edit template" and `shard templates export`). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["TemplateVersionRecipe"];
+                };
+            };
+            /** @description Default Response */
+            "4XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+            /** @description Default Response */
+            "5XX": {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorBody"];
+                };
+            };
+        };
+    };
     getV1OrganizationsOrganizationIdSecrets: {
         parameters: {
             query?: {
@@ -20329,6 +22773,18 @@ export interface operations {
                                 updated_at: string;
                             } | null;
                         };
+                        template_egress: components["schemas"]["TemplateEgressDefault"] | null;
+                        /** @description What the host enforces: the effective policy intersected with the template egress ceiling (equal to `effective` without a ceiling). */
+                        effective_policy: {
+                            mode: "allow_all" | "allowlist" | "deny_all";
+                            rules: {
+                                host: string;
+                                /** @description [] = any port (a ceiling host). */
+                                ports: number[];
+                                protocols: "tcp"[];
+                            }[];
+                            cidrs: string[];
+                        };
                     };
                 };
             };
@@ -20549,6 +23005,18 @@ export interface operations {
                                 updated_at: string;
                             } | null;
                         };
+                        template_egress: components["schemas"]["TemplateEgressDefault"] | null;
+                        /** @description What the host enforces: the effective policy intersected with the template egress ceiling (equal to `effective` without a ceiling). */
+                        effective_policy: {
+                            mode: "allow_all" | "allowlist" | "deny_all";
+                            rules: {
+                                host: string;
+                                /** @description [] = any port (a ceiling host). */
+                                ports: number[];
+                                protocols: "tcp"[];
+                            }[];
+                            cidrs: string[];
+                        };
                     };
                 };
             };
@@ -21256,6 +23724,18 @@ export interface operations {
                                 updated_at: string;
                             } | null;
                         };
+                        template_egress: components["schemas"]["TemplateEgressDefault"] | null;
+                        /** @description What the host enforces: the effective policy intersected with the template egress ceiling (equal to `effective` without a ceiling). */
+                        effective_policy: {
+                            mode: "allow_all" | "allowlist" | "deny_all";
+                            rules: {
+                                host: string;
+                                /** @description [] = any port (a ceiling host). */
+                                ports: number[];
+                                protocols: "tcp"[];
+                            }[];
+                            cidrs: string[];
+                        };
                     };
                 };
             };
@@ -21476,6 +23956,18 @@ export interface operations {
                                 updated_at: string;
                             } | null;
                         };
+                        template_egress: components["schemas"]["TemplateEgressDefault"] | null;
+                        /** @description What the host enforces: the effective policy intersected with the template egress ceiling (equal to `effective` without a ceiling). */
+                        effective_policy: {
+                            mode: "allow_all" | "allowlist" | "deny_all";
+                            rules: {
+                                host: string;
+                                /** @description [] = any port (a ceiling host). */
+                                ports: number[];
+                                protocols: "tcp"[];
+                            }[];
+                            cidrs: string[];
+                        };
                     };
                 };
             };