@standards/schema 1.0.0-alpha.418 → 1.0.0-alpha.419

package/dist/api/index.d.mts

@@ -1,8 +1,27 @@
 
-import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AgentWakeView, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionTransferTargets, DecisionWithRecipient, DeviceDesktopStatus, DeviceShell, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MoveImpact, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-B_nj48YC.mjs";
-import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-BQiNZXm5.mjs";
-import { AddAttributeInput, AgentDefinitionAudience, AgentSessionAudience, Attribute, CollectionContentSource, CreateCustomObjectInput, DeviceAudience, FilterState, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience, RecordQueryDefinition, RelationOption, RelationOptionsResponse, SortRule, UpdateObjectInput, ViewRead } from "../all-C-tG86Pt.mjs";
+import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AgentWakeView, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, BundleRemovalPreview, BundleStatusEntry, BundleUpdatePlan, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionTransferTargets, DecisionWithRecipient, DeviceDesktopStatus, DeviceShell, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpServerView, Member, MentionReference, ModelDefinition, MoveImpact, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, OAuthAttemptStarted, OAuthAttemptView, OAuthCompleteOutcome, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OperationWireOutput, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-D59FeAd4.mjs";
+import { TenantId } from "../utils-Bl7NhRVP.mjs";
+import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-C3d0YoMy.mjs";
+import { AddAttributeInput, AgentDefinitionAudience, AgentSessionAudience, Attribute, CollectionContentSource, CreateCustomObjectInput, DeviceAudience, FilterState, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience, RecordQueryDefinition, RelationOption, RelationOptionsResponse, SortRule, UpdateObjectInput, ViewRead } from "../all-CcI67hiC.mjs";
 import * as z$2 from "zod";
+/**
+ * A timestamp on the wire: an ISO 8601 string (`Date#toISOString()`, UTC),
+ * a `Date` on either side of it. An output schema built from it is a codec:
+ * the server encodes the handler's `Date` into the string, the client decodes
+ * the string back into a `Date`, so the type both read is the same.
+ */
+export declare const isoDateTime: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+/** A string the schema checks as a string and types as `T` (a branded id). */
+export declare function brandedString<T extends string>(): z$2.ZodType<T, string>;
+/** The runtime schema of an operation's output, `undefined` when it is declared by type only. */
+export declare function outputSchemaOf(op: Pick<OperationDefinition, "output">): z$2.ZodType | undefined;
+/**
+ * What a client makes of a JSON body: an operation with an output schema has
+ * its wire form decoded (ISO strings back into `Date`s), keys the schema does
+ * not declare dropped. A body the schema refuses — a server ahead of or
+ * behind this client — is handed on as it came; the server already logged it.
+ */
+export declare function decodeOperationOutput(op: Pick<OperationDefinition, "output">, body: unknown): unknown;
 /**
  * `encodeURIComponent` leaves `.` and `..` untouched, and `new URL(relative,
  * base)` resolves a bare `..` upwards — so those, and the empty segment, are
@@ -17,13 +36,18 @@ export declare function encodePathSegment(segment: string): string;
 export declare function pathParamNames(path: string): string[];
 /** Fills the `:param` slots of the operation's path from `input`, each encoded as one segment. */
 export declare function buildOperationPath(op: Operation, input: Record<string, unknown>): string;
-/**
- * Splits an operation input into what travels where: path parameters fill the
- * path, the keys the operation lists in `headers` travel as those headers, the
- * rest goes to the query string for a GET; otherwise the keys the operation
- * lists in `query` go to the query string and the rest to the body — or, for
- * an operation naming its `body` key, that key's value is the whole body.
- */
+/** Where one input key travels; `wholeBody` is the operation's `body` key, whose value is the body. */
+export type InputKeyLocation = "path" | "header" | "query" | "body" | "wholeBody";
+/**
+ * The one routing rule of an input key: path parameters fill the path, the
+ * keys the operation lists in `headers` travel as those headers, the rest
+ * goes to the query string for a GET; otherwise the keys the operation lists
+ * in `query` go to the query string and the rest to the body — or, for an
+ * operation naming its `body` key, that key's value is the whole body.
+ * `splitOperationInput` and the OpenAPI document both read it.
+ */
+export declare function inputKeyLocation(op: Operation, key: string): InputKeyLocation;
+/** Splits an operation input into what travels where, by `inputKeyLocation`. */
 export declare function splitOperationInput(op: Operation, input: Record<string, unknown>): {
   path: string;
   query?: Record<string, unknown>;
@@ -930,7 +954,8 @@ export type BundleDecision = z$2.infer<typeof bundleDecision>;
 /**
  * The bundle registry of a workspace. A synced bundle keeps owning its pieces
  * (`sync`, `remove`); an added one is a copy the workspace owns (`preview`,
- * `add`). Validation, hashing, ownership and migration arbitration live in the
+ * `add`, `updatePreview`, `update`, `removalPreview`, then `remove` with the
+ * preview's fingerprint). Validation, hashing, ownership and migration arbitration live in the
  * runtime: a pushed bundle is handed on as sent. A CI sync carries a whole
  * bundle in one call, so every route is out of the host's throttler
  * (rate-limited upstream).
@@ -954,6 +979,61 @@ export declare const bundlesOperations: {
     readonly permission: readonly ["architect", "read"];
     readonly throttle: "skip";
   }>;
+  /**
+   * Each installed bundle's status and the bundles that depend on it, for the
+   * badge and the Installed tab. Not under `/bundles/…`, which `get` answers
+   * for any bundle name.
+   */
+  status: Operation<{
+    readonly name: "bundles.status";
+    readonly method: "GET";
+    readonly path: "/bundle-statuses";
+    readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
+    readonly output: OutputType<BundleStatusEntry[]>;
+    readonly permission: readonly ["architect", "read"];
+    readonly throttle: "skip";
+  }>;
+  /**
+   * What updating an added bundle to the version the host offers would do,
+   * piece by piece, in the locale it was added in, and the fingerprint
+   * `update` must carry.
+   */
+  updatePreview: Operation<{
+    readonly name: "bundles.updatePreview";
+    readonly method: "GET";
+    readonly path: "/bundles/:name/update";
+    readonly input: z$2.ZodObject<{
+      name: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<BundleUpdatePlan>;
+    readonly permission: readonly ["architect", "read"];
+    readonly throttle: "skip";
+  }>;
+  /**
+   * Update an added bundle as its preview showed: untouched pieces take the
+   * new version, a piece the admin changed is kept unless `take` names it,
+   * a missing one comes back unless `skipMissing` names it, nothing is
+   * removed. A routine written also needs `agents:manage`.
+   */
+  update: Operation<{
+    readonly name: "bundles.update";
+    readonly method: "POST";
+    readonly path: "/bundles/:name/update";
+    readonly input: z$2.ZodObject<{
+      name: z$2.ZodString;
+      fingerprint: z$2.ZodString;
+      take: z$2.ZodArray<z$2.ZodString>;
+      skipMissing: z$2.ZodArray<z$2.ZodString>;
+      decisions: z$2.ZodOptional<z$2.ZodRecord<z$2.ZodString, z$2.ZodUnion<readonly [z$2.ZodLiteral<"bind">, z$2.ZodLiteral<"skip">, z$2.ZodObject<{
+        rename: z$2.ZodString;
+      }, z$2.core.$strip>]>>>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<{
+      applied: number;
+    }>;
+    readonly permission: readonly ["architect", "update"];
+    readonly throttle: "skip";
+  }>;
   /** One installed bundle; 404 when it is not installed. */
   get: Operation<{
     readonly name: "bundles.get";
@@ -986,13 +1066,42 @@ export declare const bundlesOperations: {
     readonly permission: readonly ["architect", "update"];
     readonly throttle: "skip";
   }>;
-  /** Remove a synced bundle; its pieces are demoted, never deleted. */
+  /**
+   * What uninstalling an added bundle would delete: its objects with every
+   * record (private and trashed ones included), the views on them, its pages,
+   * agents and skills, and outside it the contents, relations and computed
+   * fields that open or read them, named only on what the caller sees; and
+   * what refuses the uninstall, the bundles that use it (`blockedBy`) and the
+   * labels citing a field that goes (`citedBy`). Under the permission of the
+   * `remove` it precedes.
+   */
+  removalPreview: Operation<{
+    readonly name: "bundles.removalPreview";
+    readonly method: "GET";
+    readonly path: "/bundles/:name/removal";
+    readonly input: z$2.ZodObject<{
+      name: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<BundleRemovalPreview>;
+    readonly permission: readonly ["architect", "delete"];
+    readonly throttle: "skip";
+  }>;
+  /**
+   * Remove a synced bundle: its pieces are demoted, never deleted. Uninstall
+   * an added bundle: `fingerprint` (its removal preview's) and
+   * `confirmedRecords` (the record total the admin confirmed) are then
+   * required, and everything the preview counted is deleted, all or nothing,
+   * its agents also under `agents:delete`. An uninstall confirmed with no
+   * records is refused as stale once records appeared.
+   */
   remove: Operation<{
     readonly name: "bundles.remove";
     readonly method: "DELETE";
     readonly path: "/bundles/:name";
     readonly input: z$2.ZodObject<{
       name: z$2.ZodString;
+      fingerprint: z$2.ZodOptional<z$2.ZodString>;
+      confirmedRecords: z$2.ZodOptional<z$2.ZodNumber>;
     }, z$2.core.$strip>;
     readonly output: OutputType<void>;
     readonly permission: readonly ["architect", "delete"];
@@ -1217,17 +1326,17 @@ export declare const uuidParam: z$2.ZodGUID;
  */
 export declare const actorListQuery: z$2.ZodPipe<z$2.ZodObject<{
   type: z$2.ZodOptional<z$2.ZodType<ActorType, ActorType, z$2.core.$ZodTypeInternals<ActorType, ActorType>>>;
-  status: z$2.ZodOptional<z$2.ZodType<ActorStatus, ActorStatus, z$2.core.$ZodTypeInternals<ActorStatus, ActorStatus>>>;
+  status: z$2.ZodOptional<z$2.ZodType<"active" | "deleted" | "suspended", "active" | "deleted" | "suspended", z$2.core.$ZodTypeInternals<"active" | "deleted" | "suspended", "active" | "deleted" | "suspended">>>;
   limit: z$2.ZodOptional<z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodNumber]>>;
   offset: z$2.ZodOptional<z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodNumber]>>;
 }, z$2.core.$strip>, z$2.ZodTransform<{
   type: ActorType | undefined;
-  status: ActorStatus | undefined;
+  status: "active" | "deleted" | "suspended" | undefined;
   limit: number;
   offset: number;
 }, {
   type?: ActorType | undefined;
-  status?: ActorStatus | undefined;
+  status?: "active" | "deleted" | "suspended" | undefined;
   limit?: string | number | undefined;
   offset?: string | number | undefined;
 }>>;
@@ -1248,21 +1357,164 @@ export declare const actorsOperations: {
     readonly path: "/actors";
     readonly input: z$2.ZodPipe<z$2.ZodObject<{
       type: z$2.ZodOptional<z$2.ZodType<ActorType, ActorType, z$2.core.$ZodTypeInternals<ActorType, ActorType>>>;
-      status: z$2.ZodOptional<z$2.ZodType<ActorStatus, ActorStatus, z$2.core.$ZodTypeInternals<ActorStatus, ActorStatus>>>;
+      status: z$2.ZodOptional<z$2.ZodType<"active" | "deleted" | "suspended", "active" | "deleted" | "suspended", z$2.core.$ZodTypeInternals<"active" | "deleted" | "suspended", "active" | "deleted" | "suspended">>>;
       limit: z$2.ZodOptional<z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodNumber]>>;
       offset: z$2.ZodOptional<z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodNumber]>>;
     }, z$2.core.$strip>, z$2.ZodTransform<{
       type: ActorType | undefined;
-      status: ActorStatus | undefined;
+      status: "active" | "deleted" | "suspended" | undefined;
       limit: number;
       offset: number;
     }, {
       type?: ActorType | undefined;
-      status?: ActorStatus | undefined;
+      status?: "active" | "deleted" | "suspended" | undefined;
       limit?: string | number | undefined;
       offset?: string | number | undefined;
     }>>;
-    readonly output: OutputType<Actor[]>;
+    readonly output: z$2.ZodArray<z$2.ZodDiscriminatedUnion<[z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      type: z$2.ZodLiteral<"system">;
+      status: z$2.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        suspended: "suspended";
+      }>;
+      subjectId: z$2.ZodOptional<z$2.ZodNull>;
+    }, z$2.core.$strip>], "type">>;
     readonly permission: readonly ["people", "read"];
   }>;
   /**
@@ -1274,7 +1526,150 @@ export declare const actorsOperations: {
     readonly method: "GET";
     readonly path: "/actors/me";
     readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
-    readonly output: OutputType<Actor>;
+    readonly output: z$2.ZodDiscriminatedUnion<[z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      type: z$2.ZodLiteral<"system">;
+      status: z$2.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        suspended: "suspended";
+      }>;
+      subjectId: z$2.ZodOptional<z$2.ZodNull>;
+    }, z$2.core.$strip>], "type">;
     readonly actor: "required";
   }>;
   /** `ids` comma-separated; absent or empty answers `[]`. Identity bootstrap: ungated. */
@@ -1289,7 +1684,150 @@ export declare const actorsOperations: {
     }, {
       ids?: string | undefined;
     }>>;
-    readonly output: OutputType<Actor[]>;
+    readonly output: z$2.ZodArray<z$2.ZodDiscriminatedUnion<[z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      type: z$2.ZodLiteral<"system">;
+      status: z$2.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        suspended: "suspended";
+      }>;
+      subjectId: z$2.ZodOptional<z$2.ZodNull>;
+    }, z$2.core.$strip>], "type">>;
   }>;
   /**
    * One actor. The id must be UUID-shaped, so a stray static segment is a 400
@@ -1302,7 +1840,150 @@ export declare const actorsOperations: {
     readonly input: z$2.ZodObject<{
       id: z$2.ZodGUID;
     }, z$2.core.$strip>;
-    readonly output: OutputType<Actor>;
+    readonly output: z$2.ZodDiscriminatedUnion<[z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"user">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"agent">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodDiscriminatedUnion<[z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"active">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"suspended">;
+      subjectId: z$2.ZodString;
+    }, z$2.core.$strip>, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+    } & {
+      type: z$2.ZodLiteral<"api_key">;
+      status: z$2.ZodLiteral<"deleted">;
+      subjectId: z$2.ZodNullable<z$2.ZodString>;
+    }, z$2.core.$strip>], "status">, z$2.ZodObject<{
+      id: z$2.ZodString;
+      tenantId: z$2.ZodType<TenantId, string, z$2.core.$ZodTypeInternals<TenantId, string>>;
+      displayName: z$2.ZodString;
+      avatarUrl: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>;
+      metadata: z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>;
+      deletedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      anonymizedAt: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>>>;
+      createdAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      updatedAt: z$2.ZodCodec<z$2.ZodISODateTime, z$2.ZodDate>;
+      type: z$2.ZodLiteral<"system">;
+      status: z$2.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        suspended: "suspended";
+      }>;
+      subjectId: z$2.ZodOptional<z$2.ZodNull>;
+    }, z$2.core.$strip>], "type">;
   }>;
 };
 /**
@@ -2342,13 +3023,17 @@ export declare const startMcpOAuthBody: z$2.ZodObject<{
     workspace: "workspace";
   }>>;
   catalogEntryId: z$2.ZodPipe<z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>, z$2.ZodTransform<string | null, string | null | undefined>>;
-  completionMode: z$2.ZodOptional<z$2.ZodEnum<typeof McpOAuthCompletionMode>>;
+  mode: z$2.ZodOptional<z$2.ZodEnum<{
+    desktop: "desktop";
+  }>>;
   returnUrl: z$2.ZodOptional<z$2.ZodString>;
 }, z$2.core.$strip>;
 /** `POST /mcp-servers/:id/oauth/attempts` — body optional. */
 export declare const reconnectMcpOAuthBody: z$2.ZodObject<{
   scope: z$2.ZodOptional<z$2.ZodString>;
-  completionMode: z$2.ZodOptional<z$2.ZodEnum<typeof McpOAuthCompletionMode>>;
+  mode: z$2.ZodOptional<z$2.ZodEnum<{
+    desktop: "desktop";
+  }>>;
   returnUrl: z$2.ZodOptional<z$2.ZodString>;
 }, z$2.core.$strip>;
 export type ConnectMcpServerBody = z$2.input<typeof connectMcpServerBody>;
@@ -2374,22 +3059,14 @@ export declare const mcpServersOperations: {
         workspace: "workspace";
       }>>;
       catalogEntryId: z$2.ZodPipe<z$2.ZodOptional<z$2.ZodNullable<z$2.ZodString>>, z$2.ZodTransform<string | null, string | null | undefined>>;
-      completionMode: z$2.ZodOptional<z$2.ZodEnum<typeof McpOAuthCompletionMode>>;
+      mode: z$2.ZodOptional<z$2.ZodEnum<{
+        desktop: "desktop";
+      }>>;
       returnUrl: z$2.ZodOptional<z$2.ZodString>;
     }, z$2.core.$strip>;
     readonly output: OutputType<McpOAuthAttemptStarted>;
     readonly permission: readonly ["connectors", "create"];
   }>;
-  /** A missing attempt, or another actor's, is a 404. */
-  oauthAttempt: Operation<{
-    readonly name: "mcpServers.oauthAttempt";
-    readonly method: "GET";
-    readonly path: "/mcp-servers/oauth/attempts/:id";
-    readonly input: z$2.ZodObject<{
-      id: z$2.ZodString;
-    }, z$2.core.$strip>;
-    readonly output: OutputType<McpOAuthAttemptView>;
-  }>;
   /** The vendored catalog, verbatim and in order: the combobox ranks by it. */
   catalog: Operation<{
     readonly name: "mcpServers.catalog";
@@ -2437,7 +3114,9 @@ export declare const mcpServersOperations: {
     readonly path: "/mcp-servers/:id/oauth/attempts";
     readonly input: z$2.ZodObject<{
       scope: z$2.ZodOptional<z$2.ZodString>;
-      completionMode: z$2.ZodOptional<z$2.ZodEnum<typeof McpOAuthCompletionMode>>;
+      mode: z$2.ZodOptional<z$2.ZodEnum<{
+        desktop: "desktop";
+      }>>;
       returnUrl: z$2.ZodOptional<z$2.ZodString>;
       id: z$2.ZodString;
     }, z$2.core.$strip>;
@@ -2497,7 +3176,7 @@ export declare const mcpServersOperations: {
 /**
  * `POST /connectors/auth/start`. `read` is implied by every auth start; only
  * the tiers beyond it are requested. A `returnUrl` that is not a string is
- * dropped, not refused.
+ * dropped here and refused by the start as no completion.
  */
 export declare const startConnectorAuthBody: z$2.ZodObject<{
   provider: z$2.ZodEnum<{
@@ -2513,15 +3192,21 @@ export declare const startConnectorAuthBody: z$2.ZodObject<{
     tenant: "tenant";
   }>;
   returnUrl: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodUnknown, z$2.ZodTransform<string | undefined, unknown>>>;
+  mode: z$2.ZodOptional<z$2.ZodEnum<{
+    desktop: "desktop";
+  }>>;
   loginHint: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodUnknown, z$2.ZodTransform<string | undefined, unknown>>>;
   capabilities: z$2.ZodOptional<z$2.ZodArray<z$2.ZodEnum<{
     modify: "modify";
     send: "send";
   }>>>;
 }, z$2.core.$strip>;
-/** `POST /connectors/github/install` and `/connections/:id/github-account`; body optional. */
+/** `POST /connectors/github/install` and `/connections/:id/github-account`. */
 export declare const startGitHubAuthBody: z$2.ZodObject<{
   returnUrl: z$2.ZodOptional<z$2.ZodString>;
+  mode: z$2.ZodOptional<z$2.ZodEnum<{
+    desktop: "desktop";
+  }>>;
 }, z$2.core.$strip>;
 /** `POST /connectors/connections/:id/shared-mailboxes` — the address and who sees it. */
 export declare const addSharedMailboxBody: z$2.ZodObject<{
@@ -2600,13 +3285,16 @@ export declare const connectorsOperations: {
         tenant: "tenant";
       }>;
       returnUrl: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodUnknown, z$2.ZodTransform<string | undefined, unknown>>>;
+      mode: z$2.ZodOptional<z$2.ZodEnum<{
+        desktop: "desktop";
+      }>>;
       loginHint: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodUnknown, z$2.ZodTransform<string | undefined, unknown>>>;
       capabilities: z$2.ZodOptional<z$2.ZodArray<z$2.ZodEnum<{
         modify: "modify";
         send: "send";
       }>>>;
     }, z$2.core.$strip>;
-    readonly output: OutputType<StartConnectorAuthResult>;
+    readonly output: OutputType<OAuthAttemptStarted>;
     readonly permission: readonly ["connectors", "create"];
   }>;
   startGitHubInstallation: Operation<{
@@ -2615,8 +3303,24 @@ export declare const connectorsOperations: {
     readonly path: "/connectors/github/install";
     readonly input: z$2.ZodObject<{
       returnUrl: z$2.ZodOptional<z$2.ZodString>;
+      mode: z$2.ZodOptional<z$2.ZodEnum<{
+        desktop: "desktop";
+      }>>;
     }, z$2.core.$strip>;
-    readonly output: OutputType<StartConnectorAuthResult>;
+    readonly output: OutputType<OAuthAttemptStarted>;
+    readonly permission: readonly ["connectors", "create"];
+  }>;
+  /** Binds one of the installations offered by `oauth.complete` (`status: "choose"`). */
+  chooseGitHubInstallation: Operation<{
+    readonly name: "connectors.chooseGitHubInstallation";
+    readonly credential: "session";
+    readonly method: "POST";
+    readonly path: "/connectors/github/installations/choose";
+    readonly input: z$2.ZodObject<{
+      attemptId: z$2.ZodString;
+      installationId: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<OAuthAttemptStarted>;
     readonly permission: readonly ["connectors", "create"];
   }>;
   githubRepositories: Operation<{
@@ -2655,9 +3359,12 @@ export declare const connectorsOperations: {
     readonly path: "/connectors/connections/:id/github-account";
     readonly input: z$2.ZodObject<{
       returnUrl: z$2.ZodOptional<z$2.ZodString>;
+      mode: z$2.ZodOptional<z$2.ZodEnum<{
+        desktop: "desktop";
+      }>>;
       id: z$2.ZodString;
     }, z$2.core.$strip>;
-    readonly output: OutputType<StartConnectorAuthResult>;
+    readonly output: OutputType<OAuthAttemptStarted>;
     readonly permission: readonly ["connectors", "create"];
   }>;
   /** Soft and reversible (status `disconnected`): an update, not a delete. */
@@ -2719,6 +3426,34 @@ export declare const connectorsOperations: {
     readonly status: 200;
   }>;
 };
+/**
+ * Outbound OAuth, both kinds (connector and remote MCP). Neither declares a
+ * `permission`: the attempt's own tenant and actor are the gate.
+ */
+export declare const oauthOperations: {
+  /** The attempt of the caller, read while the consent is in flight. */
+  readonly attempt: Operation<{
+    readonly name: "oauth.attempt";
+    readonly method: "GET";
+    readonly path: "/oauth/attempts/:id";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<OAuthAttemptView>;
+  }>;
+  /** Redeems the one-time ticket a return URL carries; a person's own session only. */
+  readonly complete: Operation<{
+    readonly name: "oauth.complete";
+    readonly credential: "session";
+    readonly method: "POST";
+    readonly path: "/oauth/complete";
+    readonly input: z$2.ZodObject<{
+      ticket: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<OAuthCompleteOutcome>;
+    readonly status: 200;
+  }>;
+};
 /**
  * Custom email categories and sender rules, behind `emails` (#6753); the
  * services answer who may read or change the workspace's ones. Without the
@@ -3839,7 +4574,7 @@ export declare const formsOperations: {
     readonly output: OutputType<FormSubmission>;
     readonly permission: readonly ["forms", "read"];
   }>;
-  /** Auto-save one step's values without validating them. */
+  /** Auto-save one step's values without validating them. A completed submission: `STATE_GATE`. */
   saveStep: Operation<{
     readonly name: "forms.saveStep";
     readonly method: "PATCH";
@@ -3853,7 +4588,7 @@ export declare const formsOperations: {
     readonly output: OutputType<FormSubmission>;
     readonly permission: readonly ["forms", "read"];
   }>;
-  /** Validate the current step and move past it. */
+  /** Validate the current step and move past it. A completed submission: `STATE_GATE`. */
   advance: Operation<{
     readonly name: "forms.advance";
     readonly method: "POST";
@@ -3866,6 +4601,7 @@ export declare const formsOperations: {
     readonly output: OutputType<FormSubmission>;
     readonly permission: readonly ["forms", "read"];
   }>;
+  /** Return to the previous step. A completed submission: `STATE_GATE`. */
   back: Operation<{
     readonly name: "forms.back";
     readonly method: "POST";
@@ -4149,6 +4885,8 @@ export interface CatalogResult {
   description?: string;
   /** Community results only. */
   installs?: number;
+  /** `top` results only: the last eight weeks of installs, oldest first. */
+  weeklyInstalls?: number[];
 }
 /** What a source would install, at the commit `pinnedSource` names. */
 export interface SkillPreview {
@@ -4168,12 +4906,19 @@ export interface SkillPreview {
 export declare const SKILL_CATALOG_SEARCH_MAX_LIMIT = 50;
 /** The longest text a catalogue search takes. */
 export declare const SKILL_CATALOG_QUERY_MAX_LENGTH = 200;
-/** `POST /skills/catalog/search`: our index for `official`, skills.sh for `community`. */
+/**
+ * `POST /skills/catalog/search`: our index for `official`, skills.sh's search
+ * for `community`, and its leaderboards for `top` (installs of all time) and
+ * `trending` (the last 24 hours), which take no `query`. Every skills.sh
+ * result passed its three security audits.
+ */
 export declare const searchSkillCatalogBody: z$2.ZodObject<{
   query: z$2.ZodString;
   scope: z$2.ZodEnum<{
     community: "community";
     official: "official";
+    top: "top";
+    trending: "trending";
   }>;
   limit: z$2.ZodNumber;
 }, z$2.core.$strip>;
@@ -4281,6 +5026,8 @@ export declare const skillCatalogOperations: {
       scope: z$2.ZodEnum<{
         community: "community";
         official: "official";
+        top: "top";
+        trending: "trending";
       }>;
       limit: z$2.ZodNumber;
     }, z$2.core.$strip>;
@@ -12920,6 +13667,6 @@ export declare const dictationOperations: {
   }>;
 };
 declare namespace app_operation_groups_d_exports {
-  export { actorsOperations, agentAccessOperations, agentApprovalsOperations, agentDefinitionsOperations, agentEnvVarsOperations, agentMemoryOperations, agentMessagesOperations, agentRolesOperations, agentRunsOperations, agentSessionAccessOperations, agentSessionsOperations, agentTriggersOperations, aiOperations, apiKeysOperations, artifactsOperations, auditOperations, browserProfilesOperations, bundlesOperations, cloudBrowsersOperations, connectedAppsOperations, connectorsOperations, decisionsOperations, deviceAccessOperations, deviceEnrollmentTokensOperations, devicesOperations, dictationOperations, documentsOperations, emailCategoriesOperations, emailClassificationOperations, emailsOperations, embeddingsAdminOperations, envVarsOperations, environmentEnvVarsOperations, environmentsOperations, filesOperations, foldersOperations, formsOperations, geocodingOperations, logosOperations, mailDraftsOperations, mailSignaturesOperations, mcpServersOperations, meetingsAdminOperations, meetingsOperations, memoryAdminOperations, modelsOperations, newsOperations, pageAccessOperations, pagesOperations, permissionsOperations, privateEnvVarsOperations, quotasOperations, recentActivityOperations, recordAccessOperations, recordMemoryOperations, recordOperationsOperations, recordsOperations, relationsOperations, schemaDraftOperations, schemaGroupsOperations, schemaObjectsOperations, schemaStateOperations, screensOperations, searchAdminOperations, searchOperations, skillCatalogOperations, skillsOperations, tenantInvitationsOperations, tenantSettingsOperations, usersOperations, viewsOperations, workspaceLoginsOperations };
+  export { actorsOperations, agentAccessOperations, agentApprovalsOperations, agentDefinitionsOperations, agentEnvVarsOperations, agentMemoryOperations, agentMessagesOperations, agentRolesOperations, agentRunsOperations, agentSessionAccessOperations, agentSessionsOperations, agentTriggersOperations, aiOperations, apiKeysOperations, artifactsOperations, auditOperations, browserProfilesOperations, bundlesOperations, cloudBrowsersOperations, connectedAppsOperations, connectorsOperations, decisionsOperations, deviceAccessOperations, deviceEnrollmentTokensOperations, devicesOperations, dictationOperations, documentsOperations, emailCategoriesOperations, emailClassificationOperations, emailsOperations, embeddingsAdminOperations, envVarsOperations, environmentEnvVarsOperations, environmentsOperations, filesOperations, foldersOperations, formsOperations, geocodingOperations, logosOperations, mailDraftsOperations, mailSignaturesOperations, mcpServersOperations, meetingsAdminOperations, meetingsOperations, memoryAdminOperations, modelsOperations, newsOperations, oauthOperations, pageAccessOperations, pagesOperations, permissionsOperations, privateEnvVarsOperations, quotasOperations, recentActivityOperations, recordAccessOperations, recordMemoryOperations, recordOperationsOperations, recordsOperations, relationsOperations, schemaDraftOperations, schemaGroupsOperations, schemaObjectsOperations, schemaStateOperations, screensOperations, searchAdminOperations, searchOperations, skillCatalogOperations, skillsOperations, tenantInvitationsOperations, tenantSettingsOperations, usersOperations, viewsOperations, workspaceLoginsOperations };
 }
-export { BinaryResponse, DownloadedFile, HttpMethod, MEETINGS_MAX_ONLY_CONNECTIONS, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PathParams, UploadedPart, app_operation_groups_d_exports as appOperationGroups, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type };
+export { BinaryResponse, DownloadedFile, HttpMethod, MEETINGS_MAX_ONLY_CONNECTIONS, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OperationWireOutput, OutputType, PathParams, UploadedPart, app_operation_groups_d_exports as appOperationGroups, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type };