@standards/schema 1.0.0-alpha.408 → 1.0.0-alpha.409

package/dist/api/index.d.mts

@@ -1,10 +1,10 @@
 
-import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-BlKiQcvh.mjs";
-import { AgentDefinitionAudience, AgentSessionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Cvc21DHf.mjs";
-import { Attribute } from "../attributes-CB6EJyu2.mjs";
-import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionWithRecipient, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-DfIVNu-r.mjs";
-import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-1spF7ByM.mjs";
-import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-CIS58KNs.mjs";
+import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-CmMd5DGH.mjs";
+import { AgentDefinitionAudience, AgentSessionAudience, DeviceAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-C9F-MirX.mjs";
+import { Attribute } from "../attributes-BgPCTw3y.mjs";
+import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionWithRecipient, DeviceDesktopStatus, DeviceShell, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MoveImpact, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-DDCXoccV.mjs";
+import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-BSKNqzGh.mjs";
+import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-BDkw6z3G.mjs";
 import * as z$2 from "zod";
 //#region src/api/path.d.ts
 /**
@@ -1826,7 +1826,7 @@ export declare const permissionsOperations: {
     readonly method: "GET";
     readonly path: "/permissions/me/system/:resource";
     readonly input: z$2.ZodObject<{
-      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
+      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing">>;
     }, z$2.core.$strip>;
     readonly output: OutputType<SystemPermissions>;
   }>;
@@ -4362,6 +4362,7 @@ export declare const recordOperationsOperations: {
             base: import("zod").ZodUnknown;
             props: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
           }, import("zod/v4/core").$strict>>;
+          parentId: import("zod").ZodOptional<import("zod").ZodUUID>;
         }, import("zod/v4/core").$strict>>;
       }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
         kind: import("zod").ZodLiteral<"record.delete">;
@@ -5662,8 +5663,8 @@ export declare const createDefinitionBody: z$2.ZodObject<{
   model: z$2.ZodObject<{
     provider: z$2.ZodEnum<{
       cursor: "cursor";
-      openai: "openai";
       anthropic: "anthropic";
+      openai: "openai";
       google: "google";
       spacexai: "spacexai";
       deepseek: "deepseek";
@@ -5728,8 +5729,8 @@ export declare const createDefinitionBody: z$2.ZodObject<{
     model: z$2.ZodOptional<z$2.ZodObject<{
       provider: z$2.ZodEnum<{
         cursor: "cursor";
-        openai: "openai";
         anthropic: "anthropic";
+        openai: "openai";
         google: "google";
         spacexai: "spacexai";
         deepseek: "deepseek";
@@ -5806,8 +5807,8 @@ export declare const updateDefinitionBody: z$2.ZodObject<{
   model: z$2.ZodOptional<z$2.ZodObject<{
     provider: z$2.ZodEnum<{
       cursor: "cursor";
-      openai: "openai";
       anthropic: "anthropic";
+      openai: "openai";
       google: "google";
       spacexai: "spacexai";
       deepseek: "deepseek";
@@ -5872,8 +5873,8 @@ export declare const updateDefinitionBody: z$2.ZodObject<{
     model: z$2.ZodOptional<z$2.ZodObject<{
       provider: z$2.ZodEnum<{
         cursor: "cursor";
-        openai: "openai";
         anthropic: "anthropic";
+        openai: "openai";
         google: "google";
         spacexai: "spacexai";
         deepseek: "deepseek";
@@ -5949,11 +5950,17 @@ export declare const applySetupBody: z$2.ZodObject<{
       private: "private";
     }>>;
     name: z$2.ZodOptional<z$2.ZodString>;
+    harness: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodEnum<{
+      cursor: "cursor";
+      "claude-code": "claude-code";
+      codex: "codex";
+    }>>>;
+    mcpServers: z$2.ZodOptional<z$2.ZodNever>;
     model: z$2.ZodOptional<z$2.ZodObject<{
       provider: z$2.ZodEnum<{
         cursor: "cursor";
-        openai: "openai";
         anthropic: "anthropic";
+        openai: "openai";
         google: "google";
         spacexai: "spacexai";
         deepseek: "deepseek";
@@ -5967,12 +5974,36 @@ export declare const applySetupBody: z$2.ZodObject<{
       model: z$2.ZodString;
       maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
     }, z$2.core.$strip>>;
-    harness: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodEnum<{
-      cursor: "cursor";
-      "claude-code": "claude-code";
-      codex: "codex";
-    }>>>;
-    mcpServers: z$2.ZodOptional<z$2.ZodNever>;
+    systemPrompt: z$2.ZodOptional<z$2.ZodString>;
+    maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
+    maxTreeCostUsd: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
+    critic: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
+      enabled: z$2.ZodBoolean;
+      model: z$2.ZodOptional<z$2.ZodObject<{
+        provider: z$2.ZodEnum<{
+          cursor: "cursor";
+          anthropic: "anthropic";
+          openai: "openai";
+          google: "google";
+          spacexai: "spacexai";
+          deepseek: "deepseek";
+          moonshotai: "moonshotai";
+          alibaba: "alibaba";
+          mistral: "mistral";
+          minimax: "minimax";
+          meta: "meta";
+          zai: "zai";
+        }>;
+        model: z$2.ZodString;
+        maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
+      }, z$2.core.$strip>>;
+      systemPrompt: z$2.ZodOptional<z$2.ZodString>;
+      maxRetries: z$2.ZodOptional<z$2.ZodNumber>;
+    }, z$2.core.$strip>>>;
+    toolGroups: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
+    environmentId: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodGUID>>;
+    tools: z$2.ZodOptional<z$2.ZodNever>;
+    canDelegate: z$2.ZodOptional<z$2.ZodNever>;
     avatar: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
       type: z$2.ZodEnum<{
         circle: "circle";
@@ -6007,37 +6038,7 @@ export declare const applySetupBody: z$2.ZodObject<{
       }>>;
     }, z$2.core.$strict>>>;
     starters: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodArray<z$2.ZodString>>>;
-    systemPrompt: z$2.ZodOptional<z$2.ZodString>;
-    toolGroups: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
-    maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
-    maxTreeCostUsd: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
-    critic: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
-      enabled: z$2.ZodBoolean;
-      model: z$2.ZodOptional<z$2.ZodObject<{
-        provider: z$2.ZodEnum<{
-          cursor: "cursor";
-          openai: "openai";
-          anthropic: "anthropic";
-          google: "google";
-          spacexai: "spacexai";
-          deepseek: "deepseek";
-          moonshotai: "moonshotai";
-          alibaba: "alibaba";
-          mistral: "mistral";
-          minimax: "minimax";
-          meta: "meta";
-          zai: "zai";
-        }>;
-        model: z$2.ZodString;
-        maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
-      }, z$2.core.$strip>>;
-      systemPrompt: z$2.ZodOptional<z$2.ZodString>;
-      maxRetries: z$2.ZodOptional<z$2.ZodNumber>;
-    }, z$2.core.$strip>>>;
     autoDecide: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodBoolean>>;
-    environmentId: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodGUID>>;
-    tools: z$2.ZodOptional<z$2.ZodNever>;
-    canDelegate: z$2.ZodOptional<z$2.ZodNever>;
     kind: z$2.ZodOptional<z$2.ZodEnum<{
       agent: "agent";
       routine: "routine";
@@ -6230,7 +6231,7 @@ export declare const applySetupBody: z$2.ZodObject<{
       })[];
     } | {
       family: "workflow";
-      actions: ("in_progress" | "requested" | "completed")[];
+      actions: ("in_progress" | "completed" | "requested")[];
       repositories: string[];
       sender: GithubTriggerSender;
       conditions: ({
@@ -6508,7 +6509,7 @@ export declare const applySetupBody: z$2.ZodObject<{
       })[];
     } | {
       family: "workflow";
-      actions: ("in_progress" | "requested" | "completed")[];
+      actions: ("in_progress" | "completed" | "requested")[];
       repositories: string[];
       sender: GithubTriggerSender;
       conditions: ({
@@ -6746,11 +6747,17 @@ export declare const agentDefinitionsOperations: {
           private: "private";
         }>>;
         name: z$2.ZodOptional<z$2.ZodString>;
+        harness: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodEnum<{
+          cursor: "cursor";
+          "claude-code": "claude-code";
+          codex: "codex";
+        }>>>;
+        mcpServers: z$2.ZodOptional<z$2.ZodNever>;
         model: z$2.ZodOptional<z$2.ZodObject<{
           provider: z$2.ZodEnum<{
             cursor: "cursor";
-            openai: "openai";
             anthropic: "anthropic";
+            openai: "openai";
             google: "google";
             spacexai: "spacexai";
             deepseek: "deepseek";
@@ -6764,12 +6771,36 @@ export declare const agentDefinitionsOperations: {
           model: z$2.ZodString;
           maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
         }, z$2.core.$strip>>;
-        harness: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodEnum<{
-          cursor: "cursor";
-          "claude-code": "claude-code";
-          codex: "codex";
-        }>>>;
-        mcpServers: z$2.ZodOptional<z$2.ZodNever>;
+        systemPrompt: z$2.ZodOptional<z$2.ZodString>;
+        maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
+        maxTreeCostUsd: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
+        critic: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
+          enabled: z$2.ZodBoolean;
+          model: z$2.ZodOptional<z$2.ZodObject<{
+            provider: z$2.ZodEnum<{
+              cursor: "cursor";
+              anthropic: "anthropic";
+              openai: "openai";
+              google: "google";
+              spacexai: "spacexai";
+              deepseek: "deepseek";
+              moonshotai: "moonshotai";
+              alibaba: "alibaba";
+              mistral: "mistral";
+              minimax: "minimax";
+              meta: "meta";
+              zai: "zai";
+            }>;
+            model: z$2.ZodString;
+            maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
+          }, z$2.core.$strip>>;
+          systemPrompt: z$2.ZodOptional<z$2.ZodString>;
+          maxRetries: z$2.ZodOptional<z$2.ZodNumber>;
+        }, z$2.core.$strip>>>;
+        toolGroups: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
+        environmentId: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodGUID>>;
+        tools: z$2.ZodOptional<z$2.ZodNever>;
+        canDelegate: z$2.ZodOptional<z$2.ZodNever>;
         avatar: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
           type: z$2.ZodEnum<{
             circle: "circle";
@@ -6804,37 +6835,7 @@ export declare const agentDefinitionsOperations: {
           }>>;
         }, z$2.core.$strict>>>;
         starters: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodArray<z$2.ZodString>>>;
-        systemPrompt: z$2.ZodOptional<z$2.ZodString>;
-        toolGroups: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
-        maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
-        maxTreeCostUsd: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
-        critic: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
-          enabled: z$2.ZodBoolean;
-          model: z$2.ZodOptional<z$2.ZodObject<{
-            provider: z$2.ZodEnum<{
-              cursor: "cursor";
-              openai: "openai";
-              anthropic: "anthropic";
-              google: "google";
-              spacexai: "spacexai";
-              deepseek: "deepseek";
-              moonshotai: "moonshotai";
-              alibaba: "alibaba";
-              mistral: "mistral";
-              minimax: "minimax";
-              meta: "meta";
-              zai: "zai";
-            }>;
-            model: z$2.ZodString;
-            maxTokens: z$2.ZodOptional<z$2.ZodNumber>;
-          }, z$2.core.$strip>>;
-          systemPrompt: z$2.ZodOptional<z$2.ZodString>;
-          maxRetries: z$2.ZodOptional<z$2.ZodNumber>;
-        }, z$2.core.$strip>>>;
         autoDecide: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodBoolean>>;
-        environmentId: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodGUID>>;
-        tools: z$2.ZodOptional<z$2.ZodNever>;
-        canDelegate: z$2.ZodOptional<z$2.ZodNever>;
         kind: z$2.ZodOptional<z$2.ZodEnum<{
           agent: "agent";
           routine: "routine";
@@ -7027,7 +7028,7 @@ export declare const agentDefinitionsOperations: {
           })[];
         } | {
           family: "workflow";
-          actions: ("in_progress" | "requested" | "completed")[];
+          actions: ("in_progress" | "completed" | "requested")[];
           repositories: string[];
           sender: GithubTriggerSender;
           conditions: ({
@@ -7305,7 +7306,7 @@ export declare const agentDefinitionsOperations: {
           })[];
         } | {
           family: "workflow";
-          actions: ("in_progress" | "requested" | "completed")[];
+          actions: ("in_progress" | "completed" | "requested")[];
           repositories: string[];
           sender: GithubTriggerSender;
           conditions: ({
@@ -7505,8 +7506,8 @@ export declare const agentDefinitionsOperations: {
       model: z$2.ZodObject<{
         provider: z$2.ZodEnum<{
           cursor: "cursor";
-          openai: "openai";
           anthropic: "anthropic";
+          openai: "openai";
           google: "google";
           spacexai: "spacexai";
           deepseek: "deepseek";
@@ -7571,8 +7572,8 @@ export declare const agentDefinitionsOperations: {
         model: z$2.ZodOptional<z$2.ZodObject<{
           provider: z$2.ZodEnum<{
             cursor: "cursor";
-            openai: "openai";
             anthropic: "anthropic";
+            openai: "openai";
             google: "google";
             spacexai: "spacexai";
             deepseek: "deepseek";
@@ -7661,8 +7662,8 @@ export declare const agentDefinitionsOperations: {
       model: z$2.ZodOptional<z$2.ZodObject<{
         provider: z$2.ZodEnum<{
           cursor: "cursor";
-          openai: "openai";
           anthropic: "anthropic";
+          openai: "openai";
           google: "google";
           spacexai: "spacexai";
           deepseek: "deepseek";
@@ -7727,8 +7728,8 @@ export declare const agentDefinitionsOperations: {
         model: z$2.ZodOptional<z$2.ZodObject<{
           provider: z$2.ZodEnum<{
             cursor: "cursor";
-            openai: "openai";
             anthropic: "anthropic";
+            openai: "openai";
             google: "google";
             spacexai: "spacexai";
             deepseek: "deepseek";
@@ -7895,11 +7896,11 @@ export declare const listRunsQuery: z$2.ZodObject<{
     routine: "routine";
   }>>;
   status: z$2.ZodOptional<z$2.ZodEnum<{
-    completed: "completed";
-    pending: "pending";
     running: "running";
+    completed: "completed";
     failed: "failed";
     cancelled: "cancelled";
+    pending: "pending";
     paused: "paused";
   }>>;
   limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
@@ -7934,11 +7935,11 @@ export declare const agentRunsOperations: {
         routine: "routine";
       }>>;
       status: z$2.ZodOptional<z$2.ZodEnum<{
-        completed: "completed";
-        pending: "pending";
         running: "running";
+        completed: "completed";
         failed: "failed";
         cancelled: "cancelled";
+        pending: "pending";
         paused: "paused";
       }>>;
       limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
@@ -8141,7 +8142,7 @@ export declare const createTriggerBody: z$2.ZodType<{
     })[];
   } | {
     family: "workflow";
-    actions: ("in_progress" | "requested" | "completed")[];
+    actions: ("in_progress" | "completed" | "requested")[];
     repositories: string[];
     sender: GithubTriggerSender;
     conditions: ({
@@ -8420,7 +8421,7 @@ export declare const createTriggerBody: z$2.ZodType<{
     })[];
   } | {
     family: "workflow";
-    actions: ("in_progress" | "requested" | "completed")[];
+    actions: ("in_progress" | "completed" | "requested")[];
     repositories: string[];
     sender: GithubTriggerSender;
     conditions: ({
@@ -8845,7 +8846,7 @@ export declare const updateTriggerBody: z$2.ZodObject<{
     })[];
   } | {
     family: "workflow";
-    actions: ("in_progress" | "requested" | "completed")[];
+    actions: ("in_progress" | "completed" | "requested")[];
     repositories: string[];
     sender: GithubTriggerSender;
     conditions: ({
@@ -9331,7 +9332,7 @@ export declare const agentTriggersOperations: {
         })[];
       } | {
         family: "workflow";
-        actions: ("in_progress" | "requested" | "completed")[];
+        actions: ("in_progress" | "completed" | "requested")[];
         repositories: string[];
         sender: GithubTriggerSender;
         conditions: ({
@@ -9610,7 +9611,7 @@ export declare const agentTriggersOperations: {
         })[];
       } | {
         family: "workflow";
-        actions: ("in_progress" | "requested" | "completed")[];
+        actions: ("in_progress" | "completed" | "requested")[];
         repositories: string[];
         sender: GithubTriggerSender;
         conditions: ({
@@ -10067,7 +10068,7 @@ export declare const agentTriggersOperations: {
         })[];
       } | {
         family: "workflow";
-        actions: ("in_progress" | "requested" | "completed")[];
+        actions: ("in_progress" | "completed" | "requested")[];
         repositories: string[];
         sender: GithubTriggerSender;
         conditions: ({
@@ -10366,8 +10367,8 @@ export declare const createSessionBody: z$2.ZodObject<{
     model: z$2.ZodObject<{
       provider: z$2.ZodEnum<{
         cursor: "cursor";
-        openai: "openai";
         anthropic: "anthropic";
+        openai: "openai";
         google: "google";
         spacexai: "spacexai";
         deepseek: "deepseek";
@@ -10407,8 +10408,8 @@ export declare const createSessionBody: z$2.ZodObject<{
       model: z$2.ZodOptional<z$2.ZodObject<{
         provider: z$2.ZodEnum<{
           cursor: "cursor";
-          openai: "openai";
           anthropic: "anthropic";
+          openai: "openai";
           google: "google";
           spacexai: "spacexai";
           deepseek: "deepseek";
@@ -10434,8 +10435,8 @@ export declare const createSessionBody: z$2.ZodObject<{
     model: z$2.ZodOptional<z$2.ZodObject<{
       provider: z$2.ZodEnum<{
         cursor: "cursor";
-        openai: "openai";
         anthropic: "anthropic";
+        openai: "openai";
         google: "google";
         spacexai: "spacexai";
         deepseek: "deepseek";
@@ -10580,8 +10581,8 @@ export declare const sessionInferenceOverridesInput: z$2.ZodObject<{
   model: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
     provider: z$2.ZodEnum<{
       cursor: "cursor";
-      openai: "openai";
       anthropic: "anthropic";
+      openai: "openai";
       google: "google";
       spacexai: "spacexai";
       deepseek: "deepseek";
@@ -10701,8 +10702,8 @@ export declare const agentSessionsOperations: {
         model: z$2.ZodObject<{
           provider: z$2.ZodEnum<{
             cursor: "cursor";
-            openai: "openai";
             anthropic: "anthropic";
+            openai: "openai";
             google: "google";
             spacexai: "spacexai";
             deepseek: "deepseek";
@@ -10742,8 +10743,8 @@ export declare const agentSessionsOperations: {
           model: z$2.ZodOptional<z$2.ZodObject<{
             provider: z$2.ZodEnum<{
               cursor: "cursor";
-              openai: "openai";
               anthropic: "anthropic";
+              openai: "openai";
               google: "google";
               spacexai: "spacexai";
               deepseek: "deepseek";
@@ -10769,8 +10770,8 @@ export declare const agentSessionsOperations: {
         model: z$2.ZodOptional<z$2.ZodObject<{
           provider: z$2.ZodEnum<{
             cursor: "cursor";
-            openai: "openai";
             anthropic: "anthropic";
+            openai: "openai";
             google: "google";
             spacexai: "spacexai";
             deepseek: "deepseek";
@@ -10999,8 +11000,8 @@ export declare const agentSessionsOperations: {
       model: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodObject<{
         provider: z$2.ZodEnum<{
           cursor: "cursor";
-          openai: "openai";
           anthropic: "anthropic";
+          openai: "openai";
           google: "google";
           spacexai: "spacexai";
           deepseek: "deepseek";
@@ -11734,6 +11735,12 @@ export interface CreateRecordOptions {
    * `unknown`: narrowed through `parseResourceVisibility`.
    */
   visibility?: unknown;
+  /**
+   * The parent record, of the same hierarchical object. The child takes its
+   * parent's path and its root's visibility and owner. Accepted on create
+   * only; `unknown`: narrowed to a UUID by the record requests.
+   */
+  parentId?: unknown;
 }
 /**
  * `POST /records/:objectName` — `data` is an object (not null, not an array),
@@ -11799,6 +11806,14 @@ export declare const BulkDeleteRecordsDto: z$2.ZodObject<{
   ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
 }, z$2.core.$strip>;
 export type BulkDeleteRecordsBody = z$2.infer<typeof BulkDeleteRecordsDto>;
+/**
+ * `POST /records/:objectName/deletion-count`: what deleting these records
+ * would take, counted by the reads the delete runs. The record requests
+ * refuse an id that is not a UUID.
+ */
+export declare const CountRecordDeletionDto: z$2.ZodObject<{
+  ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
+}, z$2.core.$strip>;
 /**
  * `PUT /records/:objectName/:recordId/appearance`: the icon facet only. The
  * image goes through `PUT …/image` as an upload — a file id is never accepted
@@ -11819,6 +11834,31 @@ export declare const SetRecordVisibilityDto: z$2.ZodObject<{
   visibility: z$2.ZodOptional<z$2.ZodUnknown>;
 }, z$2.core.$strip>;
 export type SetRecordVisibilityBody = z$2.infer<typeof SetRecordVisibilityDto>;
+/**
+ * `POST /records/:objectName/:recordId/move-impact`: who would gain and lose
+ * access if the record moved under `parentId` (`null`: to the top level).
+ * The record requests refuse a `parentId` that is not a UUID.
+ */
+export declare const MoveRecordImpactDto: z$2.ZodObject<{
+  parentId: z$2.ZodNullable<z$2.ZodString>;
+}, z$2.core.$strip>;
+/**
+ * `POST /records/:objectName/:recordId/move`. `expected` is the impact the
+ * client showed: when the audience changed since, the move is refused with
+ * `RECORD_MOVE_IMPACT_CHANGED` carrying the new one.
+ */
+export declare const MoveRecordDto: z$2.ZodObject<{
+  parentId: z$2.ZodNullable<z$2.ZodString>;
+  expected: z$2.ZodOptional<z$2.ZodReadonly<z$2.ZodObject<{
+    added: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    removed: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    roleChanged: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    workspaceBefore: z$2.ZodBoolean;
+    workspaceAfter: z$2.ZodBoolean;
+    subtreeSize: z$2.ZodNumber;
+  }, z$2.core.$strip>>>;
+}, z$2.core.$strip>;
+export type MoveRecordBody = z$2.infer<typeof MoveRecordDto>;
 /**
  * `GET /records/:objectName` — the page as query strings. Lenient, as it
  * always was: a `limit` that is not a positive integer reads as 20 (above 1000
@@ -11892,6 +11932,15 @@ export interface RecordsBulkDeleteResult {
     code: SchemaErrorCode;
   }[];
 }
+/**
+ * What deleting records would take (hierarchical records, spec §7): the
+ * incoming links it would break, and the descendants beyond the selection
+ * that would go to the trash with it. The confirmation names `descendants`.
+ */
+export interface RecordDeletionCount {
+  incomingReferences: number;
+  descendants: number;
+}
 /** What attaching a file to a record answers. */
 export interface AttachedRecordDocument {
   document: Document;
@@ -12106,6 +12155,22 @@ export declare const recordsOperations: {
       readonly action: "delete";
     };
   }>;
+  /** What deleting the records would take, before the confirmation is shown. */
+  deletionCount: Operation<{
+    readonly name: "records.deletionCount";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/deletion-count";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<RecordDeletionCount>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "delete";
+    };
+  }>;
   /**
    * Create several records (set-based, import semantics): an invalid or
    * DB-rejected item lands in `errors` with its index while its siblings are
@@ -12158,6 +12223,55 @@ export declare const recordsOperations: {
       readonly action: "update";
     };
   }>;
+  /**
+   * Who would gain and lose access if the record moved (hierarchical
+   * records): the client shows it before confirming the move.
+   */
+  moveImpact: Operation<{
+    readonly name: "records.moveImpact";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/:recordId/move-impact";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      parentId: z$2.ZodNullable<z$2.ZodString>;
+      recordId: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<MoveImpact>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "update";
+    };
+  }>;
+  /**
+   * Move the record and its descendants under `parentId`, or to the top level
+   * with `null`; the subtree takes its new root's access. Needs `own` on the
+   * record's current root and `write` on the new parent.
+   */
+  move: Operation<{
+    readonly name: "records.move";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/:recordId/move";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      parentId: z$2.ZodNullable<z$2.ZodString>;
+      expected: z$2.ZodOptional<z$2.ZodReadonly<z$2.ZodObject<{
+        added: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        removed: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        roleChanged: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        workspaceBefore: z$2.ZodBoolean;
+        workspaceAfter: z$2.ZodBoolean;
+        subtreeSize: z$2.ZodNumber;
+      }, z$2.core.$strip>>>;
+      recordId: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<ObjectRecord<Record<string, unknown>>>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "update";
+    };
+  }>;
   /**
    * Set the record's icon; its image, if any, is removed. Answers the record
    * row as written (reference attributes not hydrated).
@@ -12523,15 +12637,67 @@ export declare const recordAccessOperations: {
   }>;
 };
 //#endregion
+//#region src/api/device-access.operations.d.ts
+/** `PUT /devices/:id/access/:actorId` — the role to grant. */
+export declare const grantDeviceAccessBody: z$2.ZodObject<{
+  role: z$2.ZodEnum<{
+    runner: "runner";
+  }>;
+}, z$2.core.$strip>;
+export type GrantDeviceAccessBody = z$2.infer<typeof grantDeviceAccessBody>;
+/**
+ * Who may run commands on a device beyond its owner (spec 2026-11-02 §4.2).
+ * Operations only: every rule (who may read, grant or revoke, the anti-oracle
+ * on a device the caller cannot see) lives in the runtime's
+ * `ResourceAccessService`, and the gate is the owner or a `devices: manage`
+ * holder, judged there rather than by a catalog floor.
+ */
+export declare const deviceAccessOperations: {
+  /** The audience. */
+  list: Operation<{
+    readonly name: "deviceAccess.list";
+    readonly method: "GET";
+    readonly path: "/devices/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+  /** `{ role }`: lend the device to an actor. */
+  grant: Operation<{
+    readonly name: "deviceAccess.grant";
+    readonly method: "PUT";
+    readonly path: "/devices/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+      role: z$2.ZodEnum<{
+        runner: "runner";
+      }>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+  revoke: Operation<{
+    readonly name: "deviceAccess.revoke";
+    readonly method: "DELETE";
+    readonly path: "/devices/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+};
+//#endregion
 //#region src/api/devices.operations.d.ts
-export type RemoteDevicePlatform = "darwin" | "linux";
+export declare const REMOTE_DEVICE_PLATFORMS: readonly ["darwin", "linux", "win32"];
+export type RemoteDevicePlatform = (typeof REMOTE_DEVICE_PLATFORMS)[number];
 export type RemoteDeviceStatus = "online" | "offline" | "revoked";
 /** A computer paired to its owner; agents run shell commands on it once authorized. */
 export interface RemoteDeviceView {
   id: string;
   tenantId: string;
   ownerActorId: string;
-  installationId: string;
   name: string;
   platform: RemoteDevicePlatform;
   arch: string;
@@ -12539,6 +12705,12 @@ export interface RemoteDeviceView {
   lastSeenAt: string | null;
   revokedAt: string | null;
   agentExecutionAuthorizedAt: string | null;
+  /** Enrolled through a fleet token: managers other than the owner may administer it. */
+  managed: boolean;
+  /** Last `agent-desktop status` the worker announced; null when it announced none. */
+  desktopStatus: DeviceDesktopStatus | null;
+  /** The shell sessions open in; null until the worker announces one. */
+  shell: DeviceShell | null;
   createdAt: string;
   updatedAt: string;
   status: RemoteDeviceStatus;
@@ -12555,10 +12727,60 @@ export declare const pairDeviceBody: z$2.ZodObject<{
   platform: z$2.ZodEnum<{
     darwin: "darwin";
     linux: "linux";
+    win32: "win32";
   }>;
   arch: z$2.ZodString;
   hostname: z$2.ZodString;
 }, z$2.core.$strict>;
+/** `POST /devices/enroll`: the token names the tenant; a known installation also proves itself. */
+export declare const enrollDeviceBody: z$2.ZodObject<{
+  token: z$2.ZodString;
+  installationId: z$2.ZodUUID;
+  hostname: z$2.ZodString;
+  platform: z$2.ZodEnum<{
+    darwin: "darwin";
+    linux: "linux";
+    win32: "win32";
+  }>;
+  arch: z$2.ZodString;
+  currentCredential: z$2.ZodOptional<z$2.ZodString>;
+}, z$2.core.$strict>;
+/** A fleet token: many machines, one name prefix, optional runners and execution switch. */
+export declare const createEnrollmentTokenBody: z$2.ZodObject<{
+  namePrefix: z$2.ZodOptional<z$2.ZodString>;
+  runnerActorIds: z$2.ZodDefault<z$2.ZodArray<z$2.ZodGUID>>;
+  agentExecutionAuthorized: z$2.ZodDefault<z$2.ZodBoolean>;
+  maxUses: z$2.ZodDefault<z$2.ZodNumber>;
+  expiresInSeconds: z$2.ZodDefault<z$2.ZodNumber>;
+}, z$2.core.$strict>;
+export type EnrollDeviceBody = z$2.infer<typeof enrollDeviceBody>;
+export type CreateEnrollmentTokenBody = z$2.infer<typeof createEnrollmentTokenBody>;
+/** What enrolling answers: the credential the machine authenticates its channel with, shown once. */
+export interface EnrolledDevice {
+  deviceId: string;
+  deviceToken: string;
+  name: string;
+}
+export type EnrollmentTokenKind = "fleet" | "personal";
+/** An enrollment token as listed; the secret is never returned again. */
+export interface EnrollmentTokenView {
+  id: string;
+  kind: EnrollmentTokenKind;
+  namePrefix: string | null;
+  runnerActorIds: string[];
+  agentExecutionAuthorized: boolean;
+  maxUses: number;
+  uses: number;
+  createdBy: string;
+  expiresAt: string;
+  revokedAt: string | null;
+  createdAt: string;
+}
+/** A freshly created token: its secret (tenant-scoped enrollment token), shown once. */
+export interface CreatedEnrollmentToken {
+  token: string;
+  enrollmentToken: EnrollmentTokenView;
+}
 export declare const updateDeviceBody: z$2.ZodObject<{
   name: z$2.ZodOptional<z$2.ZodString>;
   agentExecutionAuthorized: z$2.ZodOptional<z$2.ZodBoolean>;
@@ -12591,12 +12813,39 @@ export declare const devicesOperations: {
       platform: z$2.ZodEnum<{
         darwin: "darwin";
         linux: "linux";
+        win32: "win32";
       }>;
       arch: z$2.ZodString;
       hostname: z$2.ZodString;
     }, z$2.core.$strict>;
     readonly output: OutputType<PairedRemoteDevice>;
   }>;
+  /**
+   * A machine enrolls with a token. Unauthenticated: the token names the
+   * tenant. Ten attempts a minute per address: a token is a secret to guess.
+   */
+  enroll: Operation<{
+    readonly name: "devices.enroll";
+    readonly method: "POST";
+    readonly path: "/devices/enroll";
+    readonly input: z$2.ZodObject<{
+      token: z$2.ZodString;
+      installationId: z$2.ZodUUID;
+      hostname: z$2.ZodString;
+      platform: z$2.ZodEnum<{
+        darwin: "darwin";
+        linux: "linux";
+        win32: "win32";
+      }>;
+      arch: z$2.ZodString;
+      currentCredential: z$2.ZodOptional<z$2.ZodString>;
+    }, z$2.core.$strict>;
+    readonly output: OutputType<EnrolledDevice>;
+    readonly throttle: {
+      readonly limit: 10;
+      readonly ttlMs: 60000;
+    };
+  }>;
   update: Operation<{
     readonly name: "devices.update";
     readonly method: "PATCH";
@@ -12620,6 +12869,59 @@ export declare const devicesOperations: {
     }>;
   }>;
 };
+/**
+ * Enrollment tokens: fleet tokens for `devices: manage` holders, from the
+ * platform UI only; a personal one for the caller's own machine, from a
+ * session or the CLI's personal API key.
+ */
+export declare const deviceEnrollmentTokensOperations: {
+  /** A fleet token, for a manager enrolling many machines. */
+  create: Operation<{
+    readonly name: "deviceEnrollmentTokens.create";
+    readonly method: "POST";
+    readonly path: "/devices/enrollment-tokens";
+    readonly input: z$2.ZodObject<{
+      namePrefix: z$2.ZodOptional<z$2.ZodString>;
+      runnerActorIds: z$2.ZodDefault<z$2.ZodArray<z$2.ZodGUID>>;
+      agentExecutionAuthorized: z$2.ZodDefault<z$2.ZodBoolean>;
+      maxUses: z$2.ZodDefault<z$2.ZodNumber>;
+      expiresInSeconds: z$2.ZodDefault<z$2.ZodNumber>;
+    }, z$2.core.$strict>;
+    readonly output: OutputType<CreatedEnrollmentToken>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  list: Operation<{
+    readonly name: "deviceEnrollmentTokens.list";
+    readonly method: "GET";
+    readonly path: "/devices/enrollment-tokens";
+    readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
+    readonly output: OutputType<EnrollmentTokenView[]>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  revoke: Operation<{
+    readonly name: "deviceEnrollmentTokens.revoke";
+    readonly method: "DELETE";
+    readonly path: "/devices/enrollment-tokens/:id";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<{
+      success: true;
+    }>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  /** A single-use, 10 minute token for the caller's own machine; replaces `pair`. */
+  createPersonal: Operation<{
+    readonly name: "deviceEnrollmentTokens.createPersonal";
+    readonly method: "POST";
+    readonly path: "/devices/enrollment-tokens/personal";
+    readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
+    readonly output: OutputType<CreatedEnrollmentToken>;
+  }>;
+};
 //#endregion
 //#region src/api/connected-apps.operations.d.ts
 /** One OAuth connection of the caller, on one of their workspaces. */