@soat/cli 0.56.0 → 0.58.0

package/dist/index.mjs

@@ -13,7 +13,7 @@ import * as os from "node:os";
 import { createHmac, timingSafeEqual } from "node:crypto";
 
 //#region package.json
-var version = "0.56.0";
+var version = "0.58.0";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -442,6 +442,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "kind", "severity", "agent_id", "generation_id", "orchestration_run_id", "cursor", "limit"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -492,6 +494,54 @@ var routes = {
       "in": "query"
     }]
   },
+  "export-activity": {
+    serviceClass: "Activity",
+    operationId: "exportActivity",
+    description: "Streams a project's activity entries as newline-delimited JSON — one entry object per line, **oldest first**, where the feed itself reads newest first: a feed answers what just happened, and a file is read start to end. `project_id` is required: the export is per-project by design. Filters behave exactly as they do on the list endpoint.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/activity",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id", "kind", "severity", "agent_id", "generation_id", "orchestration_run_id"],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "Project whose activity is exported",
+      "required": true,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "kind",
+      "description": "Only entries of this kind",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "severity",
+      "description": "Only entries of this severity",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "agent_id",
+      "description": "Only entries an agent produced",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "generation_id",
+      "description": "Only entries a generation produced",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "orchestration_run_id",
+      "description": "Only entries an orchestration run produced",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }]
+  },
   "list-actors": {
     serviceClass: "Actors",
     operationId: "listActors",
@@ -500,6 +550,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "external_id", "name", "agent_id", "chat_id", "conversation_id", "tags", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (optional)",
@@ -564,6 +616,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID. Required for JWT auth; omit when using an project key.",
@@ -610,6 +664,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -626,6 +682,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -664,7 +722,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tags",
-      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -678,6 +736,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -694,6 +754,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -710,6 +772,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -726,6 +790,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["actor_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "actor_id",
       "description": "Actor ID",
@@ -742,6 +808,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to filter by",
@@ -770,6 +838,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project",
@@ -822,7 +892,7 @@ var routes = {
       "name": "tool_choice",
       "description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
       "required": false,
-      "type": "any",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "stop_conditions",
@@ -918,6 +988,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -934,6 +1006,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -986,7 +1060,7 @@ var routes = {
       "name": "tool_choice",
       "description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
       "required": false,
-      "type": "any",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "stop_conditions",
@@ -1072,6 +1146,12 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the resource is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "patch-agent": {
@@ -1082,12 +1162,20 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "ai_provider_id",
       "description": "",
@@ -1134,7 +1222,7 @@ var routes = {
       "name": "tool_choice",
       "description": "Tool choice strategy. Accepts a string (`\"auto\"`, `\"required\"`) or an object (`{ \"type\": \"tool\", \"tool_name\": \"my_tool\" }`). A forcing value (`\"required\"` or the object form) forbids a final assistant message on every step of every turn, including a resumed or continued one, so it requires a `has_tool_call` entry in `stop_conditions` — otherwise the write is refused with `FORCED_TOOL_CHOICE_CANNOT_STOP`.",
       "required": false,
-      "type": "any",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "stop_conditions",
@@ -1220,6 +1308,12 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the resource is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-agent": {
@@ -1230,6 +1324,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["agent_id"],
     queryParams: ["force"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1252,6 +1348,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["agent_id"],
     queryParams: ["wait"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1326,7 +1424,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "knowledge_config",
-      "description": "Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, limit) use the per-generation value when present.",
+      "description": "Per-generation knowledge retrieval override. Array filters (memory_store_ids, document_ids, document_paths) are unioned with the agent's stored knowledge_config; `tags` pairs are merged with the override winning per key; scalar fields (min_score, rrf_k, recency_half_life_days, limit) use the per-generation value when present.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -1340,6 +1438,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["agent_id", "generation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1368,6 +1468,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["agent_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1396,6 +1498,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["agent_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1418,6 +1522,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["agent_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1446,6 +1552,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1486,6 +1594,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1502,6 +1612,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["agent_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "",
@@ -1518,6 +1630,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -1546,6 +1660,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -1598,6 +1714,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["ai_provider_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1614,6 +1732,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["ai_provider_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1666,6 +1786,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["ai_provider_id"],
     queryParams: ["force"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1688,6 +1810,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["ai_provider_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1704,6 +1828,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["ai_provider_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1720,6 +1846,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["ai_provider_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "AI Provider ID",
@@ -1742,6 +1870,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "limit",
       "description": "Maximum number of results to return",
@@ -1764,6 +1894,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "name",
       "description": "Key name for identification",
@@ -1792,6 +1924,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["api_key_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "api_key_id",
       "description": "API key public ID (key_ prefix)",
@@ -1808,6 +1942,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["api_key_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "api_key_id",
       "description": "API key public ID (key_ prefix)",
@@ -1842,6 +1978,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["api_key_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "api_key_id",
       "description": "API key public ID (key_ prefix)",
@@ -1858,6 +1996,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "status", "origin", "expires_before", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -1904,6 +2044,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "status", "min_count", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -1944,6 +2086,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["approval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "approval_id",
       "description": "Approval item ID",
@@ -1960,6 +2104,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["approval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "approval_id",
       "description": "Approval item ID",
@@ -1982,6 +2128,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["approval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "approval_id",
       "description": "Approval item ID",
@@ -2004,6 +2152,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "action", "principal_id", "resource_public_id", "resource_srn", "from", "to", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (scopes results; required if not using project key auth for a specific project)",
@@ -2068,6 +2218,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "action", "principal_id", "resource_public_id", "resource_srn", "from", "to"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project whose entries are exported",
@@ -2120,6 +2272,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["entry_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "entry_id",
       "description": "Audit entry ID",
@@ -2136,6 +2290,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "status", "agent_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -2176,6 +2332,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["chain_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "chain_id",
       "description": "Continuation chain ID",
@@ -2192,6 +2350,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to filter by",
@@ -2220,6 +2380,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "Public ID of the AI provider to pin. Optional: omit it to inherit the project's `default_model_route_id`, which gives the chat provider failover. Omitting it returns `400` when the project has no default, and cannot be combined with `model` — each route target names its own.",
@@ -2260,6 +2422,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["chat_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "chat_id",
       "description": "",
@@ -2276,6 +2440,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["chat_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "chat_id",
       "description": "",
@@ -2292,6 +2458,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ai_provider_id",
       "description": "Public ID of the AI provider to run the completion against. Mutually exclusive with `chat_id`; exactly one of the two is required.\n",
@@ -2338,6 +2506,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "actor_id", "tags", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (optional)",
@@ -2378,6 +2548,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID. Required for JWT auth; omit when using an project key.",
@@ -2418,6 +2590,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2434,6 +2608,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2468,6 +2644,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2484,6 +2662,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["conversation_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2512,6 +2692,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2544,7 +2726,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "Optional structured metadata to attach to the message (e.g. phone number, channel). Stored as-is and injected into the AI prompt context.",
+      "description": "Caller-owned annotations on the message (e.g. a phone number, a channel), stored as sent and returned verbatim. The platform does not read the bag, so nothing in it reaches the model: a value the model should see belongs in `message`.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -2558,6 +2740,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["conversation_id"],
     queryParams: ["wait"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "",
@@ -2604,6 +2788,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["conversation_id", "document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2626,6 +2812,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2642,6 +2830,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2658,6 +2848,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["conversation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "conversation_id",
       "description": "Conversation ID",
@@ -2673,7 +2865,9 @@ var routes = {
     moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
     httpMethod: "get",
     pathParams: [],
-    queryParams: ["project_id", "path_prefix", "tags", "limit", "offset"],
+    queryParams: ["project_id", "path_prefix", "include_withdrawn", "related_to", "tags", "metadata", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (optional)",
@@ -2686,12 +2880,30 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "query"
+    }, {
+      "name": "include_withdrawn",
+      "description": "Include withdrawn documents. A withdrawn document leaves every default read and is not in the knowledge index at all — its chunks are dropped when it is withdrawn — so this shows it in the listing but never in a search.",
+      "required": false,
+      "type": "boolean",
+      "in": "query"
+    }, {
+      "name": "related_to",
+      "description": "Only documents related to this one, on either side of the edge: what it points at, and what points at it. An id with no relations narrows the listing to nothing.",
+      "required": false,
+      "type": "string",
+      "in": "query"
     }, {
       "name": "tags",
       "description": "Filter by tag pairs, written `key:value` (split on the first colon, so a value may contain colons). Repeat the parameter for several pairs; **all** must be present with exactly that value.\n",
       "required": false,
       "type": "array",
       "in": "query"
+    }, {
+      "name": "metadata",
+      "description": "A `MetadataFilter` as JSON, url-encoded. It travels as JSON rather than as `key:value` pairs because the match is exact and a query string cannot otherwise say whether `3` is the number or the string.",
+      "required": false,
+      "type": "string",
+      "in": "query"
     }, {
       "name": "limit",
       "description": "Maximum number of results to return",
@@ -2714,6 +2926,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID. Required for JWT auth; omit when using an project key.",
@@ -2752,7 +2966,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tags",
-      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -2784,6 +2998,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: ["wait"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "wait",
       "description": "When omitted or `false` (default), processing runs in the background and `202 Accepted` is returned immediately with `status=pending`. Pass `true` to block until processing completes and receive `201 Created` with `status=ready`.",
@@ -2810,7 +3026,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tags",
-      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -2834,6 +3050,30 @@ var routes = {
       "in": "body"
     }]
   },
+  "export-documents": {
+    serviceClass: "Documents",
+    operationId: "exportDocuments",
+    description: "Streams a project's documents as newline-delimited JSON — one document object per line, oldest first — for archiving the corpus or shipping it into another system. `project_id` is required: the export is per-project by design. The rows are the rows the listing returns for the same caller, so a policy that hides a document hides it here too, and withdrawn documents and the reserved `/.system/` root are left out.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id", "path_prefix"],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "Project whose documents are exported",
+      "required": true,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "path_prefix",
+      "description": "Only documents filed under this directory. The prefix is a path boundary, not a substring, exactly as on the listing.",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }]
+  },
   "get-document": {
     serviceClass: "Documents",
     operationId: "getDocument",
@@ -2842,6 +3082,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -2858,12 +3100,20 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "content",
       "description": "New text content",
@@ -2884,16 +3134,22 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "Arbitrary metadata object. Unlike other body fields, keys are stored and returned verbatim in the casing supplied — they are not converted between snake_case and camelCase.",
+      "description": "Arbitrary metadata object, replacing the stored bag; `null` clears it. Unlike other body fields, keys are stored and returned verbatim in the casing supplied — they are not converted between snake_case and camelCase.",
       "required": false,
       "type": "object",
       "in": "body"
     }, {
       "name": "tags",
-      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the document is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-document": {
@@ -2904,6 +3160,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -2912,6 +3170,78 @@ var routes = {
       "in": "path"
     }]
   },
+  "list-document-relations": {
+    serviceClass: "Documents",
+    operationId: "listDocumentRelations",
+    description: "Returns the typed edges this document asserts about others, oldest first. An edge is owned by the document it leaves, so this is what the document claims — use `?related_to=` on the listing to find what claims something about it.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "get",
+    pathParams: ["document_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "create-document-relation": {
+    serviceClass: "Documents",
+    operationId: "createDocumentRelation",
+    description: "Asserts a typed edge from this document to another in the same project. Asserting the same edge twice is `409`: an edge is a fact, and the second assertion is the same fact. Writing an edge is a write of the asserting document (`documents:UpdateDocument`); the document it points at is unchanged, which is what lets an agent record what its own report derives from without being able to make another report claim anything.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "post",
+    pathParams: ["document_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "type",
+      "description": "What this document claims about the other",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "to_document_id",
+      "description": "The document the edge points at. Must be in the same project, and visible to the caller.",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }]
+  },
+  "delete-document-relation": {
+    serviceClass: "Documents",
+    operationId: "deleteDocumentRelation",
+    description: "Removes an edge this document asserts. Both documents are left as they are — retracting a claim is not a change to what it was about.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "delete",
+    pathParams: ["document_id", "relation_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "relation_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
   "get-document-status": {
     serviceClass: "Documents",
     operationId: "getDocumentStatus",
@@ -2920,6 +3250,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -2928,6 +3260,126 @@ var routes = {
       "in": "path"
     }]
   },
+  "withdraw-document": {
+    serviceClass: "Documents",
+    operationId: "withdrawDocument",
+    description: "Takes a document out of every default read while keeping its history. The withdrawal is archived as a **tombstone version**, so one mechanism answers what a document holds now and there is no second lifecycle flag for a reader to miss. Its chunks are dropped from the knowledge index, so a withdrawn document costs a live search nothing. The content is not lost with them: it is in the version before the tombstone, which [`POST /api/v1/documents/{document_id}/versions/{version}/restore`](/docs/api/documents/restore-document-version) re-chunks from. `DELETE` stays what it is — permanent, and it removes the backing file. Withdrawal is the reversible act. It does not apply under `/.system/`: a platform-written document keeps the owning module's lifecycle.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "post",
+    pathParams: ["document_id"],
+    queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
+    }, {
+      "name": "version_label",
+      "description": "Optional tag for the tombstone version this write archives.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the withdrawal unless the document is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
+    }]
+  },
+  "list-document-versions": {
+    serviceClass: "Documents",
+    operationId: "listDocumentVersions",
+    description: "Returns the document's archived states, newest first. A version is written on create and on every subsequent write that changes the content or its annotations, and a withdrawal is archived as a version carrying no content.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "get",
+    pathParams: ["document_id"],
+    queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "limit",
+      "description": "Maximum number of results to return",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }, {
+      "name": "offset",
+      "description": "Number of results to skip",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }]
+  },
+  "get-document-version": {
+    serviceClass: "Documents",
+    operationId: "getDocumentVersion",
+    description: "Returns the exact content and annotations the document held at a given version, which is what lets a run that cited a version read what it read.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "get",
+    pathParams: ["document_id", "version"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "version",
+      "description": "",
+      "required": true,
+      "type": "integer",
+      "in": "path"
+    }]
+  },
+  "restore-document-version": {
+    serviceClass: "Documents",
+    operationId: "restoreDocumentVersion",
+    description: "Writes an archived version's content and annotations back as the document's live state, which archives them again as a **new** version rather than rewinding the counter — so a run citing any version in between still resolves. The restore runs through the ordinary update path, so the content is re-chunked and re-embedded; restoring the state the document already holds is a no-op and archives nothing. Restoring any content version of a withdrawn document brings it back into listings and search. A tombstone version has no content, so naming one is `400 VALIDATION_FAILED`: restore the version before it instead.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/documents",
+    httpMethod: "post",
+    pathParams: ["document_id", "version"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "document_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "version",
+      "description": "",
+      "required": true,
+      "type": "integer",
+      "in": "path"
+    }, {
+      "name": "label",
+      "description": "Optional tag for the version this restore archives. Defaults to `restored from v<version>`.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }]
+  },
   "reingest-document": {
     serviceClass: "Documents",
     operationId: "reingestDocument",
@@ -2936,6 +3388,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["document_id"],
     queryParams: ["wait"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -2976,6 +3430,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["document_id"],
     queryParams: ["token"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -3010,6 +3466,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -3026,6 +3484,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -3042,6 +3502,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["document_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "document_id",
       "description": "Document ID",
@@ -3058,6 +3520,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project the call's usage is billed to. Optional; a project-scoped credential supplies its own. Requires write access to the named project.",
@@ -3086,6 +3550,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -3114,6 +3580,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -3142,6 +3610,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["dataset_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3158,6 +3628,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["dataset_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3186,6 +3658,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["dataset_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3202,6 +3676,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["dataset_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3230,6 +3706,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["dataset_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3264,6 +3742,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["dataset_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3298,6 +3778,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["dataset_id", "item_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3338,6 +3820,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["dataset_id", "item_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "dataset_id",
       "description": "Dataset ID",
@@ -3360,6 +3844,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -3388,6 +3874,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -3434,6 +3922,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["eval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3450,6 +3940,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["eval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3496,6 +3988,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["eval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3512,6 +4006,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["eval_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3540,6 +4036,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["eval_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3586,6 +4084,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["eval_id", "eval_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3608,6 +4108,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["eval_id", "eval_run_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3642,6 +4144,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["eval_id", "eval_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "eval_id",
       "description": "Eval ID",
@@ -3664,6 +4168,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "status", "severity", "kind", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -3710,6 +4216,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["exception_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "exception_id",
       "description": "Exception item ID",
@@ -3726,6 +4234,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["exception_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "exception_id",
       "description": "Exception item ID",
@@ -3742,6 +4252,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["exception_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "exception_id",
       "description": "Exception item ID",
@@ -3764,6 +4276,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "path_prefix", "tags", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Filter files by project ID",
@@ -3804,6 +4318,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -3836,9 +4352,9 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "JSON string with additional metadata",
+      "description": "Caller-owned annotations on a resource, stored as the object they were written as: the types a value was written with are the types a read returns, so a filter can ask an ordering question about a number. Unlike other body fields, keys are stored and returned verbatim in the casing supplied — they are not converted between snake_case and camelCase.\n\nNo key is reserved, and that is the point: every piece of state the platform owns lives in its own typed column, so nothing written here reaches platform state. The platform never reads the bag — it is not an IAM context, not a policy input and not part of a prompt — which is what separates it from a tag bag.",
       "required": false,
-      "type": "string",
+      "type": "object",
       "in": "body"
     }]
   },
@@ -3850,6 +4366,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: []
   },
   "upload-file-base64": {
@@ -3860,6 +4378,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project",
@@ -3892,9 +4412,9 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "JSON string with additional metadata",
+      "description": "Caller-owned annotations on a resource, stored as the object they were written as: the types a value was written with are the types a read returns, so a filter can ask an ordering question about a number. Unlike other body fields, keys are stored and returned verbatim in the casing supplied — they are not converted between snake_case and camelCase.\n\nNo key is reserved, and that is the point: every piece of state the platform owns lives in its own typed column, so nothing written here reaches platform state. The platform never reads the bag — it is not an IAM context, not a policy input and not part of a prompt — which is what separates it from a tag bag.",
       "required": false,
-      "type": "string",
+      "type": "object",
       "in": "body"
     }]
   },
@@ -3906,6 +4426,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project",
@@ -3940,6 +4462,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["token"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "token",
       "description": "The single-use upload token (e.g. upt_...)",
@@ -3966,9 +4490,9 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "JSON string with additional metadata",
+      "description": "Caller-owned annotations on a resource, stored as the object they were written as: the types a value was written with are the types a read returns, so a filter can ask an ordering question about a number. Unlike other body fields, keys are stored and returned verbatim in the casing supplied — they are not converted between snake_case and camelCase.\n\nNo key is reserved, and that is the point: every piece of state the platform owns lives in its own typed column, so nothing written here reaches platform state. The platform never reads the bag — it is not an IAM context, not a policy input and not part of a prompt — which is what separates it from a tag bag.",
       "required": false,
-      "type": "string",
+      "type": "object",
       "in": "body"
     }]
   },
@@ -3980,6 +4504,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -3996,6 +4522,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "ID of the file to delete",
@@ -4012,6 +4540,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["file_id"],
     queryParams: ["token"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4034,6 +4564,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4042,9 +4574,9 @@ var routes = {
       "in": "path"
     }, {
       "name": "metadata",
-      "description": "New metadata as a JSON string",
+      "description": "Replaces the stored bag; `null` clears it.",
       "required": false,
-      "type": "string",
+      "type": "object",
       "in": "body"
     }, {
       "name": "prefix",
@@ -4068,6 +4600,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["file_id"],
     queryParams: ["token"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4090,6 +4624,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4106,6 +4642,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4122,6 +4660,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["file_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "file_id",
       "description": "File ID",
@@ -4138,11 +4678,13 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "template",
       "description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
       "required": false,
-      "type": "string",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "parameters",
@@ -4160,6 +4702,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -4176,7 +4720,7 @@ var routes = {
       "name": "template",
       "description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
       "required": true,
-      "type": "string",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "parameters",
@@ -4194,6 +4738,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -4222,6 +4768,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -4238,7 +4786,7 @@ var routes = {
       "name": "template",
       "description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
       "required": true,
-      "type": "string",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "parameters",
@@ -4262,6 +4810,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["formation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "formation_id",
       "description": "",
@@ -4278,6 +4828,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["formation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "formation_id",
       "description": "",
@@ -4288,7 +4840,7 @@ var routes = {
       "name": "template",
       "description": "A formation template supplied as either a JSON object or a YAML/JSON string. When a string is provided the server parses it with a YAML parser (JSON is valid YAML) before processing.\n",
       "required": false,
-      "type": "string",
+      "type": "unknown",
       "in": "body"
     }, {
       "name": "parameters",
@@ -4312,6 +4864,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["formation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "formation_id",
       "description": "",
@@ -4328,6 +4882,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["formation_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "formation_id",
       "description": "",
@@ -4356,6 +4912,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["agent_id", "trace_id", "session_id", "actor_id", "initiator_generation_id", "chain_id", "orchestration_run_id", "node_id", "status", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "Filter by agent public ID",
@@ -4432,6 +4990,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["generation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "generation_id",
       "description": "Public ID of the generation",
@@ -4448,6 +5008,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["generation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "generation_id",
       "description": "Public ID of the generation",
@@ -4470,6 +5032,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["generation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "generation_id",
       "description": "Public ID of the generation",
@@ -4486,6 +5050,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["generation_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "generation_id",
       "description": "Public ID of the generation",
@@ -4502,6 +5068,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to filter by",
@@ -4530,6 +5098,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project",
@@ -4582,6 +5152,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["guardrail_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4598,12 +5170,20 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["guardrail_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "name",
       "description": "",
@@ -4640,6 +5220,12 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the resource is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-guardrail": {
@@ -4650,6 +5236,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["guardrail_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4666,6 +5254,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["guardrail_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4694,6 +5284,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["guardrail_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4716,6 +5308,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["guardrail_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4744,6 +5338,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["guardrail_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "guardrail_id",
       "description": "",
@@ -4778,6 +5374,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -4806,6 +5404,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -4888,6 +5488,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["ingestion_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ingestion_rule_id",
       "description": "Ingestion rule ID",
@@ -4904,6 +5506,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["ingestion_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ingestion_rule_id",
       "description": "Ingestion rule ID",
@@ -4972,7 +5576,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "metadata",
-      "description": "",
+      "description": "A `MetadataBag` on a field where `null` is meaningful — a full-replacement update that clears the bag, or a record whose bag was never set.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -4986,6 +5590,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["ingestion_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "ingestion_rule_id",
       "description": "Ingestion rule ID",
@@ -5002,6 +5608,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Limit search to a specific project",
@@ -5074,6 +5682,12 @@ var routes = {
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "metadata",
+      "description": "Filter document results by their `metadata` bag. A document-store filter: a memory carries no such bag, so passing it alone searches documents, as `document_paths` does.",
+      "required": false,
+      "type": "object",
+      "in": "body"
     }]
   },
   "list-memories": {
@@ -5084,6 +5698,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["memory_store_id", "tags", "limit", "offset", "include_invalidated"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Memory store to list memories from (mstore_...)",
@@ -5110,7 +5726,7 @@ var routes = {
       "in": "query"
     }, {
       "name": "include_invalidated",
-      "description": "Include invalidated (superseded) memories. They are excluded by default; set this to audit the supersede history.",
+      "description": "Include invalidated memories — superseded or retracted. They are excluded by default; set this to audit what a store once held.",
       "required": false,
       "type": "boolean",
       "in": "query"
@@ -5124,6 +5740,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Memory store to add the memory to (mstore_...)",
@@ -5188,6 +5806,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "",
@@ -5204,12 +5824,20 @@ var routes = {
     httpMethod: "put",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "content",
       "description": "Updated text content",
@@ -5228,6 +5856,12 @@ var routes = {
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the memory is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-memory": {
@@ -5238,6 +5872,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "",
@@ -5246,6 +5882,36 @@ var routes = {
       "in": "path"
     }]
   },
+  "retract-memory": {
+    serviceClass: "Memories",
+    operationId: "retractMemory",
+    description: "Retires a fact that stopped holding with nothing replacing it. The memory leaves the default listing, [knowledge search](/docs/api/knowledge/search-knowledge) and write deduplication, so restating the fact later lands as a new memory. It is an invalidation with no successor, which is what tells it apart from a supersede: `invalidated_at` is set and `superseded_by_memory_id` stays null. The retraction is appended to the assertion ledger with outcome `retracted`, so who withdrew the fact is part of the record. The memory stays readable by id, with its text and its assertions. `DELETE` remains the way to remove it outright.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/memories",
+    httpMethod: "post",
+    pathParams: ["memory_id"],
+    queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
+    flags: [{
+      "name": "memory_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the retraction unless the memory is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
+    }]
+  },
   "list-memory-assertions": {
     serviceClass: "Memories",
     operationId: "listMemoryAssertions",
@@ -5254,6 +5920,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "",
@@ -5282,6 +5950,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "Memory ID",
@@ -5298,6 +5968,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "Memory ID",
@@ -5314,6 +5986,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["memory_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_id",
       "description": "Memory ID",
@@ -5330,6 +6004,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["memory_store_id", "project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Only the rules of this memory store",
@@ -5364,6 +6040,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "The destination store, and the rule's owning scope",
@@ -5440,6 +6118,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_rule_id",
       "description": "Memory rule ID",
@@ -5456,6 +6136,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["memory_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_rule_id",
       "description": "Memory rule ID",
@@ -5532,6 +6214,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["memory_rule_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_rule_id",
       "description": "Memory rule ID",
@@ -5548,6 +6232,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "tags", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -5582,6 +6268,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -5628,6 +6316,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "",
@@ -5644,6 +6334,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "",
@@ -5690,6 +6382,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "",
@@ -5706,6 +6400,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_store_id"],
     queryParams: ["mechanism", "outcome", "generation_id", "since", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "",
@@ -5750,6 +6446,36 @@ var routes = {
       "in": "query"
     }]
   },
+  "export-memories": {
+    serviceClass: "MemoryStores",
+    operationId: "exportMemories",
+    description: "Streams one store's memories as newline-delimited JSON — one memory object per line, oldest first. Invalidated memories (retracted or superseded) are left out unless `include_invalidated` asks for them, so the file holds what the store currently asserts. The rows are the rows the listing returns for the same caller.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/memory-stores",
+    httpMethod: "get",
+    pathParams: ["memory_store_id"],
+    queryParams: ["include_invalidated", "tags"],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "memory_store_id",
+      "description": "Memory store whose memories are exported",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "include_invalidated",
+      "description": "Include memories that were retracted or superseded",
+      "required": false,
+      "type": "boolean",
+      "in": "query"
+    }, {
+      "name": "tags",
+      "description": "Filter by tag pairs, written `key:value` (split on the first colon, so a value may contain colons). Repeat the parameter for several pairs; **all** must be present with exactly that value.\n",
+      "required": false,
+      "type": "array",
+      "in": "query"
+    }]
+  },
   "get-memory-store-tags": {
     serviceClass: "MemoryStores",
     operationId: "getMemoryStoreTags",
@@ -5758,6 +6484,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Memory store ID",
@@ -5774,6 +6502,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Memory store ID",
@@ -5790,6 +6520,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["memory_store_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "memory_store_id",
       "description": "Memory store ID",
@@ -5798,6 +6530,174 @@ var routes = {
       "in": "path"
     }]
   },
+  "list-metadata-schemas": {
+    serviceClass: "MetadataSchemas",
+    operationId: "listMetadataSchemas",
+    description: "Returns the declarations in scope, oldest first. `resource_type` narrows them to one governed resource.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "get",
+    pathParams: [],
+    queryParams: ["project_id", "resource_type", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "Project public ID (proj_ prefix)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "resource_type",
+      "description": "Return only the declarations governing this resource.",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "limit",
+      "description": "Maximum number of results to return",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }, {
+      "name": "offset",
+      "description": "Number of results to skip",
+      "required": false,
+      "type": "integer",
+      "in": "query"
+    }]
+  },
+  "create-metadata-schema": {
+    serviceClass: "MetadataSchemas",
+    operationId: "createMetadataSchema",
+    description: "Declares what `metadata` must satisfy for one resource type under one selector. A document is selected by `path_prefix`, matched on a path boundary: `/reports` covers `/reports/q1.txt` and never `/reports-archive/q1.txt`. The schema is compiled here, so one JSON Schema cannot parse is refused rather than stored — a stored one would be a rule that silently governs nothing. One selector has one schema per resource type; a second declaration of the same one is `409 NAME_CONFLICT`. The reserved root `/.system` cannot be governed: a platform-written document carries no caller metadata.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "post",
+    pathParams: [],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "Project the declaration governs. Optional for a project-scoped API key, which supplies it.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "resource_type",
+      "description": "The resource whose metadata this declaration governs. A type appears here once its write path reads the registry, so a declaration always has a door that enforces it.",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "path_prefix",
+      "description": "The selector a `document` declaration must carry: the directory it governs.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "schema",
+      "description": "A JSON Schema. Its keywords are its own vocabulary and are stored as written.",
+      "required": true,
+      "type": "object",
+      "in": "body"
+    }]
+  },
+  "validate-metadata": {
+    serviceClass: "MetadataSchemas",
+    operationId: "validateMetadata",
+    description: "Answers what a write would be told, without writing: a caller preparing a batch learns which declaration would refuse it, and why, before it sends anything. It reports; it does not enforce. The refusal itself lives in each resource's own write path, because a check a writer has to call is advisory and the writer who skips it is the one the rule exists for.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "post",
+    pathParams: [],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "project_id",
+      "description": "",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "path",
+      "description": "The path the document would be filed at, which decides which declaration governs it.",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "metadata",
+      "description": "The bag to judge. Absent or `null` is judged as an empty bag.",
+      "required": false,
+      "type": "object",
+      "in": "body"
+    }]
+  },
+  "get-metadata-schema": {
+    serviceClass: "MetadataSchemas",
+    operationId: "getMetadataSchema",
+    description: "Get a metadata schema",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "get",
+    pathParams: ["metadata_schema_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "metadata_schema_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "update-metadata-schema": {
+    serviceClass: "MetadataSchemas",
+    operationId: "updateMetadataSchema",
+    description: "Changes the schema, the selector, or both. `resource_type` is fixed at creation: it decides the selector's spelling and which write path reads the row, so changing it would silently repoint the declaration at a different door — delete it and declare again instead.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "patch",
+    pathParams: ["metadata_schema_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "metadata_schema_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "path_prefix",
+      "description": "The declaration's new selector.",
+      "required": false,
+      "type": "string",
+      "in": "body"
+    }, {
+      "name": "schema",
+      "description": "Replaces the declared JSON Schema.",
+      "required": false,
+      "type": "object",
+      "in": "body"
+    }]
+  },
+  "delete-metadata-schema": {
+    serviceClass: "MetadataSchemas",
+    operationId: "deleteMetadataSchema",
+    description: "Removes the declaration. Documents already stored keep the metadata they hold — the rule governed writes, not rows.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/metadata-schemas",
+    httpMethod: "delete",
+    pathParams: ["metadata_schema_id"],
+    queryParams: [],
+    headerParams: [],
+    cookieParams: [],
+    flags: [{
+      "name": "metadata_schema_id",
+      "description": "",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
   "list-model-routes": {
     serviceClass: "ModelRoutes",
     operationId: "listModelRoutes",
@@ -5806,6 +6706,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -5834,6 +6736,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -5880,6 +6784,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["route_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "route_id",
       "description": "Model route ID",
@@ -5896,6 +6802,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["route_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "route_id",
       "description": "Model route ID",
@@ -5942,6 +6850,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["route_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "route_id",
       "description": "Model route ID",
@@ -5958,6 +6868,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Filter by project public ID",
@@ -5986,6 +6898,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -6044,6 +6958,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "nodes",
       "description": "",
@@ -6072,6 +6988,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: []
   },
   "get-orchestration": {
@@ -6082,6 +7000,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["orchestration_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
@@ -6098,12 +7018,20 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["orchestration_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "name",
       "description": "",
@@ -6146,6 +7074,12 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the resource is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-orchestration": {
@@ -6156,6 +7090,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["orchestration_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
@@ -6172,6 +7108,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["orchestration_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
@@ -6200,6 +7138,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["orchestration_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
@@ -6222,6 +7162,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["orchestration_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Public ID of the orchestration (orch_...)",
@@ -6250,6 +7192,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["orchestration_id", "parent_orchestration_run_id", "nested", "status", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Filter by orchestration public ID (orch_...)",
@@ -6296,6 +7240,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_id",
       "description": "Orchestration to run (orch_...).",
@@ -6310,7 +7256,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tool_context",
-      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.\n\nThe bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.\n\nThe reserved identity keys (`session_id`, `actor_id`, `actor_external_id`) are stripped at generation time — a caller cannot address them from here.",
+      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call made by an agent node of this run — including the agents of any child run a `loop` or `sub_orchestration` node starts. The header name is `X-Soat-Context-` plus the key verbatim; no character is re-cased.\n\nThe bag is stored on the run and re-read on every step, so it survives an `awaiting_input` pause, a `sleeping` wait, a background worker drive and a crash redrive. It is **write-only**: a run is a record every principal who may read runs can read, and a credential in it is not theirs to see, so it is never returned on one. It also does not outlive the run: reaching a terminal status (`succeeded`, `failed`, `cancelled` or `expired`) clears it. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY` and no run is created.\n\nThe reserved identity keys (`session_id`, `actor_id`, `actor_external_id`) are stripped at generation time — a caller cannot address them from here.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -6342,6 +7288,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["orchestration_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_run_id",
       "description": "Public ID of the run (run_...)",
@@ -6358,6 +7306,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["orchestration_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_run_id",
       "description": "Public ID of the run (run_...)",
@@ -6380,6 +7330,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["orchestration_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_run_id",
       "description": "Public ID of the run (run_...)",
@@ -6408,6 +7360,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["orchestration_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_run_id",
       "description": "Public ID of the run (run_...)",
@@ -6424,6 +7378,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["orchestration_run_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "orchestration_run_id",
       "description": "Public ID of the run (run_...)",
@@ -6440,6 +7396,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["user_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "user_id",
       "description": "Return only policies attached to this user (user_...)",
@@ -6468,6 +7426,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "name",
       "description": "",
@@ -6496,6 +7456,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["policy_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "policy_id",
       "description": "Policy public ID (pol_ prefix)",
@@ -6512,6 +7474,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["policy_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "policy_id",
       "description": "Policy public ID (pol_ prefix)",
@@ -6546,6 +7510,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["policy_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "policy_id",
       "description": "Policy public ID (pol_ prefix)",
@@ -6562,6 +7528,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "limit",
       "description": "Maximum number of results to return",
@@ -6584,6 +7552,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "name",
       "description": "",
@@ -6600,6 +7570,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["project_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID (proj_ prefix)",
@@ -6611,11 +7583,13 @@ var routes = {
   "update-project": {
     serviceClass: "Projects",
     operationId: "updateProject",
-    description: "Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.",
+    description: "Updates a project's name, its attached guardrails (`guardrail_ids` — the project-scope baseline governing every tool call by every agent in the project), its orchestration concurrency limit (`max_concurrent_runs`), its continuation-chain ceiling (`max_chain_generations`), its orchestration nesting bound (`max_orchestration_run_depth`), its inherited model route (`default_model_route_id`), its read-auditing opt-in (`audit_reads_enabled`), its priced-model requirement (`require_priced_model`), its trace-content retention window (`trace_content_retention_days`), and/or its zero-retention setting (`trace_content_mode`). At least one field is required. Requires admin role. Detaching a guardrail (removing an id) additionally requires guardrails:DetachGuardrail.",
     moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/projects",
     httpMethod: "patch",
     pathParams: ["project_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID (proj_ prefix)",
@@ -6664,6 +7638,12 @@ var routes = {
       "required": false,
       "type": "boolean",
       "in": "body"
+    }, {
+      "name": "require_priced_model",
+      "description": "Refuse a generation whose model carries no price row for every billable token component, with `409 MODEL_NOT_PRICED`. Defaults to `false`, where an unpriced model runs and meters at `cost_usd: null`. The check runs before the provider is called, so a refused turn spends nothing, and covers every target of a model route the turn may fail over to.",
+      "required": false,
+      "type": "boolean",
+      "in": "body"
     }, {
       "name": "default_conversation_retrieval",
       "description": "What a conversation that names no `retrieval` of its own does. `none` by default: a turn is embedded because someone asked for the conversation to be retrievable, never merely because it was said. Turns are stored and chunked on both settings.",
@@ -6692,6 +7672,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["project_id"],
     queryParams: ["force"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID (proj_ prefix)",
@@ -6714,6 +7696,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["project_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID (proj_ prefix)",
@@ -6730,6 +7714,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["project_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID (proj_ prefix)",
@@ -6752,6 +7738,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -6780,6 +7768,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -6844,6 +7834,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["quota_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "quota_id",
       "description": "Quota ID",
@@ -6860,6 +7852,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["quota_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "quota_id",
       "description": "Quota ID",
@@ -6894,6 +7888,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["quota_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "quota_id",
       "description": "Quota ID",
@@ -6910,6 +7906,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -6938,6 +7936,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project ID (required if not using project key auth)",
@@ -6966,6 +7966,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["secret_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "secret_id",
       "description": "Secret ID",
@@ -6982,6 +7984,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["secret_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "secret_id",
       "description": "Secret ID",
@@ -7010,6 +8014,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["secret_id"],
     queryParams: ["force"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "secret_id",
       "description": "Secret ID",
@@ -7032,6 +8038,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "agent_id", "actor_id", "status", "tags", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Filter by project public ID. Required for `soat:ResourceTag` policy conditions to narrow the listing: a policy is read per project, so without it the listing is scoped to the projects the caller can access and nothing further.\n",
@@ -7084,6 +8092,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "Agent this session belongs to",
@@ -7110,7 +8120,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tool_context",
-      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.",
+      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are stored exactly as sent and never case-converted. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`. `session_id`, `actor_id` and `actor_external_id` are server-derived and dropped from the stored bag, in any casing. Write-only: no read of a session returns it. It also does not outlive the session: closing or expiring it clears the bag.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -7136,6 +8146,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7152,6 +8164,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7178,7 +8192,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tool_context",
-      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are never case-converted — they round-trip exactly as sent. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`.",
+      "description": "Key-value pairs forwarded as `X-Soat-Context-<key>` headers on every `http`, `mcp` and `builtin` tool call in this session. The header name is the deployment's configured context prefix (`X-Soat-Context-` by default) plus the key verbatim — no character is re-cased. Keys are stored exactly as sent and never case-converted. A key that is not a valid HTTP header name, or two keys that map to the same header, are rejected with `400 INVALID_TOOL_CONTEXT_KEY`. `session_id`, `actor_id` and `actor_external_id` are server-derived and dropped from the stored bag, in any casing. Write-only: no read of a session returns it. It also does not outlive the session: closing or expiring it clears the bag.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -7204,6 +8218,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7220,6 +8236,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7260,6 +8278,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["session_id"],
     queryParams: ["wait"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7294,6 +8314,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7322,6 +8344,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7348,7 +8372,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "tags",
-      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.",
+      "description": "Key-value labels on a resource. A flat object of string values — an array, a nested object or a number is rejected with `400 VALIDATION_FAILED`, never coerced. Keys are opaque and stored verbatim, so `cost_center` and `costCenter` are two different tags. Matched by JSONB containment wherever tags are read: the `?tags=` filter, knowledge search, and the IAM `soat:ResourceTag/<key>` condition.\n\nKeys beginning `system.` are reserved: the platform writes them to record which conversation, actor, agent and role a row came from, and a write naming one is refused with `400 RESERVED_TAG_KEY`. They are read and filtered like any other tag.\n\nThe bag is bounded, because every pair reaches the IAM context of every access check on the resource: at most 50 keys, each key at most 128 characters and each value at most 256. A write past a bound — including a merge that would grow the stored bag past the key count — is `400 VALIDATION_FAILED` with `meta.limit` naming the bound it crossed. `system.*` keys are the platform's and do not count against the 50.",
       "required": false,
       "type": "object",
       "in": "body"
@@ -7368,6 +8392,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["session_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7396,6 +8422,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7412,6 +8440,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7428,6 +8458,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["session_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "session_id",
       "description": "Session public ID",
@@ -7444,6 +8476,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "workflow_id", "state", "status", "automation_status", "assignee", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -7502,6 +8536,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -7560,6 +8596,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7576,6 +8614,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7610,6 +8650,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7626,6 +8668,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7660,6 +8704,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7682,6 +8728,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7698,6 +8746,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["task_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "task_id",
       "description": "",
@@ -7714,6 +8764,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to filter by",
@@ -7742,6 +8794,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project",
@@ -7836,6 +8890,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["tool_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "tool_id",
       "description": "",
@@ -7852,6 +8908,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["tool_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "tool_id",
       "description": "",
@@ -7946,6 +9004,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["tool_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "tool_id",
       "description": "",
@@ -7962,6 +9022,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["tool_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "tool_id",
       "description": "",
@@ -7996,6 +9058,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to filter by",
@@ -8024,6 +9088,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["trace_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trace_id",
       "description": "Public ID of the trace",
@@ -8040,6 +9106,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["trace_id"],
     queryParams: ["include"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trace_id",
       "description": "Public ID of any trace in the tree (root or child)",
@@ -8062,6 +9130,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["trace_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trace_id",
       "description": "Public ID of the trace",
@@ -8078,6 +9148,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "type", "target_type", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -8118,6 +9190,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -8166,6 +9240,12 @@ var routes = {
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "tool_context",
+      "description": "Caller context every firing forwards to the run it starts, so an agent whose tools authorize through `{{context:<key>}}` can be put on a schedule — a firing has no request to carry one. Each key is forwarded as one `X-Soat-Context-<key>` header.\n\n**Write-only.** It is accepted here and never returned on a read, so the record cannot be used to recover a value.\n\nA value may be a `{{secret:...}}` reference, which keeps the credential in the [secret](/docs/modules/secrets) store and leaves only its name on the trigger; it is resolved at fire time, so rotating the secret changes the next firing without touching the trigger. A reference naming a secret that does not exist in this project is refused here rather than at fire time.\n",
+      "required": false,
+      "type": "object",
+      "in": "body"
     }, {
       "name": "cron",
       "description": "5-field cron expression (UTC). Required when type is schedule",
@@ -8200,6 +9280,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8216,6 +9298,8 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8258,6 +9342,12 @@ var routes = {
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "tool_context",
+      "description": "Replaces the stored bag; `null` clears it. Write-only and resolved at fire time — see `CreateTriggerRequest.tool_context`.\n",
+      "required": false,
+      "type": "object",
+      "in": "body"
     }, {
       "name": "cron",
       "description": "",
@@ -8292,6 +9382,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8308,6 +9400,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8320,6 +9414,12 @@ var routes = {
       "required": false,
       "type": "object",
       "in": "body"
+    }, {
+      "name": "tool_context",
+      "description": "Fire-time caller context, shallow-merged per key over the trigger's stored `tool_context`. A manual fire has a caller, so this is the one path that can supply a value without storing it.\n\nForwarded exactly as written: a `{{secret:...}}` reference is resolved only in the trigger's stored bag, never in one supplied here.\n",
+      "required": false,
+      "type": "object",
+      "in": "body"
     }]
   },
   "get-trigger-secret": {
@@ -8330,6 +9430,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8346,6 +9448,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["trigger_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "",
@@ -8362,6 +9466,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["trigger_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "trigger_id",
       "description": "Trigger to list firings for (trg_...)",
@@ -8390,6 +9496,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["firing_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "firing_id",
       "description": "",
@@ -8406,6 +9514,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["agent_id", "generation_id", "trace_id", "actor_id", "session_id", "ai_provider_id", "orchestration_run_id", "orchestration_id", "model", "trigger_id", "action_id", "meter_type", "source", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "agent_id",
       "description": "Filter by agent public ID",
@@ -8506,6 +9616,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "group_by", "include", "from", "to", "meter_type", "session_id", "actor_id", "agent_id", "ai_provider_id", "orchestration_run_id", "orchestration_id", "generation_id", "trace_id", "model", "source", "trigger_id", "action_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Project public ID to aggregate usage for",
@@ -8636,6 +9748,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Filter by project public ID",
@@ -8664,6 +9778,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -8698,6 +9814,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["threshold_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "threshold_id",
       "description": "Threshold public ID",
@@ -8714,6 +9832,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["generation_id", "orchestration_run_id"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "generation_id",
       "description": "Generation public ID. Mutually exclusive with orchestration_run_id.\n",
@@ -8736,6 +9856,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: []
   },
   "upsert-price-book": {
@@ -8746,6 +9868,8 @@ var routes = {
     httpMethod: "put",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "prices",
       "description": "",
@@ -8762,6 +9886,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: []
   },
   "list-users": {
@@ -8772,6 +9898,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "limit",
       "description": "Maximum number of results to return",
@@ -8794,6 +9922,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "username",
       "description": "",
@@ -8822,6 +9952,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["user_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "user_id",
       "description": "User ID",
@@ -8838,6 +9970,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["user_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "user_id",
       "description": "User ID",
@@ -8854,6 +9988,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "username",
       "description": "",
@@ -8876,6 +10012,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "username",
       "description": "",
@@ -8898,6 +10036,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["user_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "user_id",
       "description": "User public ID (user_ prefix)",
@@ -8920,6 +10060,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -8948,6 +10090,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "Public ID of the project. Optional when authenticating with a project-scoped API key, which defaults to the key's project; required otherwise.",
@@ -8994,6 +10138,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["webhook_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "",
@@ -9010,6 +10156,8 @@ var routes = {
     httpMethod: "put",
     pathParams: ["webhook_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "",
@@ -9062,6 +10210,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["webhook_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "",
@@ -9078,6 +10228,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["webhook_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "Webhook to list deliveries for (wh_...)",
@@ -9106,6 +10258,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["delivery_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "delivery_id",
       "description": "",
@@ -9122,6 +10276,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["delivery_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "delivery_id",
       "description": "Delivery to send again (wh_deliv_...)",
@@ -9138,6 +10294,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["webhook_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "",
@@ -9154,6 +10312,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["webhook_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "webhook_id",
       "description": "",
@@ -9170,6 +10330,8 @@ var routes = {
     httpMethod: "get",
     pathParams: [],
     queryParams: ["project_id", "limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -9198,6 +10360,8 @@ var routes = {
     httpMethod: "post",
     pathParams: [],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "project_id",
       "description": "",
@@ -9250,6 +10414,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["workflow_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",
@@ -9266,12 +10432,20 @@ var routes = {
     httpMethod: "patch",
     pathParams: ["workflow_id"],
     queryParams: [],
+    headerParams: ["If-Match"],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",
       "required": true,
       "type": "string",
       "in": "path"
+    }, {
+      "name": "If-Match",
+      "description": "The version the caller believes the resource holds, as an entity tag (`3` or `\"3\"`). Equivalent to `expected_version` in the request body; `*` states no precondition beyond the resource existing. A mismatch is `409 VERSION_CONFLICT`.",
+      "required": false,
+      "type": "string",
+      "in": "header"
     }, {
       "name": "name",
       "description": "",
@@ -9308,6 +10482,12 @@ var routes = {
       "required": false,
       "type": "string",
       "in": "body"
+    }, {
+      "name": "expected_version",
+      "description": "Refuses the write unless the resource is at this version.",
+      "required": false,
+      "type": "integer",
+      "in": "body"
     }]
   },
   "delete-workflow": {
@@ -9318,6 +10498,8 @@ var routes = {
     httpMethod: "delete",
     pathParams: ["workflow_id"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",
@@ -9334,6 +10516,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["workflow_id"],
     queryParams: ["limit", "offset"],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",
@@ -9362,6 +10546,8 @@ var routes = {
     httpMethod: "get",
     pathParams: ["workflow_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",
@@ -9384,6 +10570,8 @@ var routes = {
     httpMethod: "post",
     pathParams: ["workflow_id", "version"],
     queryParams: [],
+    headerParams: [],
+    cookieParams: [],
     flags: [{
       "name": "workflow_id",
       "description": "",