@vellumai/assistant 0.10.7 → 0.10.8-dev.202607102228.5945895

package/openapi.yaml

@@ -3,7 +3,7 @@
 openapi: 3.1.0
 info:
   title: Vellum Assistant API
-  version: 0.10.7
+  version: 0.10.8
   description: Auto-generated OpenAPI specification for the Vellum Assistant runtime HTTP server.
 servers:
   - url: http://127.0.0.1:7821
@@ -4037,18 +4037,10 @@ paths:
                           anyOf:
                             - type: number
                             - type: "null"
-                        verifiedVia:
-                          anyOf:
-                            - type: string
-                            - type: "null"
                         memberDisplayName:
                           type: string
                         interactionCount:
                           type: number
-                        lastInteraction:
-                          anyOf:
-                            - type: number
-                            - type: "null"
                         hasInterceptableVerificationSession:
                           type: boolean
                       required:
@@ -4514,6 +4506,60 @@ paths:
                   - domains
                   - callSites
                 additionalProperties: false
+  /v1/config/llm/default-provider:
+    get:
+      operationId: config_llm_defaultprovider_get
+      summary: Get the default provider and its availability
+      description:
+        Returns `llm.defaultProvider`, the connection name it resolves to, and whether that connection is currently
+        usable (connection exists, credential stored, Vellum authenticated). Availability is informational — a broken
+        default is a valid persisted state that surfaces explainable errors at resolution time.
+      tags:
+        - config
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/DefaultProviderStatus"
+    put:
+      operationId: config_llm_defaultprovider_put
+      summary: Set the default provider
+      description:
+        Replaces `llm.defaultProvider`. Strict-validates the body (unlike the generic config write paths, which
+        silently drop invalid values). Does not require the referenced connection to exist — a dangling name is allowed
+        by design and reported via the availability status.
+      tags:
+        - config
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                provider:
+                  type: string
+                  enum:
+                    - anthropic
+                    - openai
+                    - gemini
+                    - fireworks
+                    - openrouter
+                    - vellum
+                connectionName:
+                  type: string
+                  minLength: 1
+              required:
+                - provider
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/DefaultProviderStatus"
   /v1/config/llm/profiles:
     get:
       operationId: config_llm_profiles_get
@@ -6097,12 +6143,6 @@ paths:
           schema:
             type: integer
           description: Pagination offset (default 0)
-        - name: scope_id
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Scope ID (default "default")
       responses:
         "200":
           description: Successful response
@@ -6350,6 +6390,14 @@ paths:
                               required:
                                 - channelId
                               additionalProperties: false
+                            sourceLink:
+                              type: object
+                              properties:
+                                appUrl:
+                                  type: string
+                                webUrl:
+                                  type: string
+                              additionalProperties: false
                           required:
                             - sourceChannel
                             - externalChatId
@@ -6695,212 +6743,13 @@ paths:
                             required:
                               - channelId
                             additionalProperties: false
-                        required:
-                          - sourceChannel
-                          - externalChatId
-                          - externalUserId
-                          - displayName
-                          - username
-                        additionalProperties: false
-                      conversationOriginChannel:
-                        anyOf:
-                          - type: string
-                            enum:
-                              - telegram
-                              - phone
-                              - vellum
-                              - whatsapp
-                              - slack
-                              - email
-                              - platform
-                              - a2a
-                          - type: "null"
-                      assistantAttention:
-                        type: object
-                        properties:
-                          hasUnseenLatestAssistantMessage:
-                            type: boolean
-                          latestAssistantMessageAt:
-                            type: number
-                          lastSeenAssistantMessageAt:
-                            type: number
-                          lastSeenConfidence:
-                            type: string
-                            enum:
-                              - explicit
-                              - inferred
-                          lastSeenSignalType:
-                            type: string
-                            enum:
-                              - macos_notification_view
-                              - macos_conversation_opened
-                              - ios_conversation_opened
-                              - web_bulk_mark_read
-                              - telegram_inbound_message
-                              - telegram_callback
-                              - slack_inbound_message
-                              - slack_callback
-                        required:
-                          - hasUnseenLatestAssistantMessage
-                        additionalProperties: false
-                      isPinned:
-                        type: boolean
-                        const: true
-                      displayOrder:
-                        anyOf:
-                          - type: number
-                          - type: "null"
-                      groupId:
-                        anyOf:
-                          - type: string
-                          - type: "null"
-                      forkParent:
-                        type: object
-                        properties:
-                          conversationId:
-                            type: string
-                          messageId:
-                            type: string
-                          title:
-                            type: string
-                        required:
-                          - conversationId
-                          - messageId
-                          - title
-                        additionalProperties: false
-                      archivedAt:
-                        type: number
-                      surfacedAt:
-                        type: number
-                      inferenceProfile:
-                        type: string
-                      enabledPlugins:
-                        anyOf:
-                          - type: array
-                            items:
-                              type: string
-                          - type: "null"
-                      isProcessing:
-                        type: boolean
-                    required:
-                      - id
-                      - title
-                      - createdAt
-                      - updatedAt
-                      - lastMessageAt
-                      - conversationType
-                      - source
-                      - groupId
-                      - isProcessing
-                    additionalProperties: false
-                required:
-                  - conversation
-                additionalProperties: false
-  /v1/conversations/{id}/analyze:
-    post:
-      operationId: conversations_by_id_analyze_post
-      summary: Analyze a conversation
-      description: Create a new conversation with a structured self-assessment of an existing conversation.
-      tags:
-        - conversations
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  conversation:
-                    type: object
-                    properties:
-                      id:
-                        type: string
-                      title:
-                        type: string
-                      createdAt:
-                        type: number
-                      updatedAt:
-                        type: number
-                      lastMessageAt:
-                        anyOf:
-                          - type: number
-                          - type: "null"
-                      conversationType:
-                        type: string
-                        enum:
-                          - standard
-                          - background
-                          - scheduled
-                      source:
-                        type: string
-                      scheduleJobId:
-                        type: string
-                      channelBinding:
-                        type: object
-                        properties:
-                          sourceChannel:
-                            type: string
-                          externalChatId:
-                            type: string
-                          externalChatName:
-                            type: string
-                          externalThreadId:
-                            type: string
-                          externalUserId:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          displayName:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          username:
-                            anyOf:
-                              - type: string
-                              - type: "null"
-                          slackThread:
-                            type: object
-                            properties:
-                              channelId:
-                                type: string
-                              threadTs:
-                                type: string
-                              link:
-                                type: object
-                                properties:
-                                  appUrl:
-                                    type: string
-                                  webUrl:
-                                    type: string
-                                additionalProperties: false
-                            required:
-                              - channelId
-                              - threadTs
-                            additionalProperties: false
-                          slackChannel:
+                          sourceLink:
                             type: object
                             properties:
-                              channelId:
+                              appUrl:
                                 type: string
-                              name:
+                              webUrl:
                                 type: string
-                              link:
-                                type: object
-                                properties:
-                                  webUrl:
-                                    type: string
-                                required:
-                                  - webUrl
-                                additionalProperties: false
-                            required:
-                              - channelId
                             additionalProperties: false
                         required:
                           - sourceChannel
@@ -8054,6 +7903,14 @@ paths:
                             required:
                               - channelId
                             additionalProperties: false
+                          sourceLink:
+                            type: object
+                            properties:
+                              appUrl:
+                                type: string
+                              webUrl:
+                                type: string
+                            additionalProperties: false
                         required:
                           - sourceChannel
                           - externalChatId
@@ -9225,6 +9082,48 @@ paths:
                   - ok
                   - updated
                 additionalProperties: false
+  /v1/conversations/summarize:
+    post:
+      operationId: conversations_summarize_post
+      summary: Summarize a conversation up to a message
+      description:
+        Replace the conversation's context before the given message with a generated summary. The boundary snaps to
+        the start of the turn containing beforeMessageId; that turn and everything after stay verbatim. Messages are
+        never deleted.
+      tags:
+        - conversations
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                conversationId:
+                  type: string
+                beforeMessageId:
+                  type: string
+                  description: Summarize all messages before this one
+              required:
+                - conversationId
+                - beforeMessageId
+      responses:
+        "202":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  accepted:
+                    type: boolean
+                    const: true
+                  conversationId:
+                    type: string
+                required:
+                  - accepted
+                  - conversationId
+                additionalProperties: false
   /v1/conversations/switch:
     post:
       operationId: conversations_switch_post
@@ -9349,6 +9248,54 @@ paths:
                   - invoked
                   - producedToolCalls
                 additionalProperties: false
+  /v1/credential-requests:
+    post:
+      operationId: credentialrequests_post
+      summary: Mint a one-time credential-collection link
+      description:
+        Create a single-use tokenized URL that collects one credential value via the public credential-entry page.
+        Link state lives in the gateway; the value is stored via the credential vault on submission.
+      tags:
+        - credentials
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                service:
+                  type: string
+                  minLength: 1
+                field:
+                  type: string
+                  minLength: 1
+                label:
+                  type: string
+              required:
+                - service
+                - field
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok:
+                    type: boolean
+                  url:
+                    type: string
+                  token:
+                    type: string
+                  expiresAt:
+                    type: number
+                  error:
+                    type: string
+                required:
+                  - ok
+                additionalProperties: false
   /v1/credentials/delete:
     post:
       operationId: credentials_delete_post
@@ -9552,6 +9499,12 @@ paths:
                     type: boolean
                   cancelled:
                     type: boolean
+                  pending:
+                    type: boolean
+                  collectionUrl:
+                    type: string
+                  expiresAt:
+                    type: number
                   error:
                     type: string
                   service:
@@ -9634,6 +9587,34 @@ paths:
                   type: array
                   items:
                     type: string
+                allowedDomains:
+                  description: Domains the credential may be sent to
+                  type: array
+                  items:
+                    type: string
+                injectionTemplates:
+                  description: How the credential is injected into requests
+                  type: array
+                  items:
+                    type: object
+                    properties:
+                      hostPattern:
+                        type: string
+                        minLength: 1
+                      injectionType:
+                        type: string
+                        enum:
+                          - header
+                          - query
+                      headerName:
+                        type: string
+                      valuePrefix:
+                        type: string
+                      queryParamName:
+                        type: string
+                    required:
+                      - hostPattern
+                      - injectionType
               required:
                 - service
                 - field
@@ -11320,6 +11301,76 @@ paths:
       responses:
         "204":
           description: Successful response
+  /v1/events/tail:
+    get:
+      operationId: events_tail_get
+      summary: Fetch a conversation's buffered event tail
+      description:
+        Return the ring-buffered assistant events for one conversation with seq greater than fromSeq — the
+        request/response twin of reconnecting the SSE stream with lastSeenSeq. A client recovering from a delivery gap
+        fetches the /messages snapshot (anchored at its seq watermark) and then this tail from that anchor, folding the
+        returned envelopes through the same apply path as live events; snapshot plus tail is deterministically complete.
+        complete=false means the ring no longer reaches back to fromSeq and the snapshot alone must serve as the
+        recovery.
+      tags:
+        - events
+      parameters:
+        - name: conversationId
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Assistant-minted internal conversation id whose events to return. Required.
+        - name: fromSeq
+          in: query
+          required: false
+          schema:
+            type: string
+          description:
+            Return buffered events with seq strictly greater than this value — typically the seq watermark of a
+            just-fetched /messages snapshot. Must be a non-negative integer.
+        - name: toSeq
+          in: query
+          required: false
+          schema:
+            type: string
+          description:
+            Optional inclusive upper bound on returned seqs. A caller that already knows where its live delivery
+            resumed (e.g. the first live event after a gap) can trim the response to exactly the hole. Purely a
+            bandwidth trim — client folds are seq-idempotent, so overlap with live delivery is harmless without it. Must
+            be an integer >= fromSeq.
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  events:
+                    type: array
+                    items: {}
+                    description:
+                      Buffered assistant event envelopes ({id, conversationId, emittedAt, seq, message}) with seq > fromSeq,
+                      ascending, filtered to the conversation and to the caller's delivery set (client identity
+                      headers). Same wire shape as the /events SSE data frames.
+                  complete:
+                    type: boolean
+                    description:
+                      True when the ring still covered fromSeq, so the returned events are the contiguous tail. False when
+                      eviction broke contiguity — events is empty and the caller must recover from the snapshot alone.
+                  frontier:
+                    anyOf:
+                      - type: number
+                      - type: "null"
+                    description:
+                      Seq of the last returned event (or fromSeq when the tail is empty but contiguous). Null when complete is
+                      false.
+                required:
+                  - events
+                  - complete
+                  - frontier
+                additionalProperties: false
   /v1/export:
     post:
       operationId: export_post
@@ -13744,6 +13795,96 @@ paths:
                   - images
                   - resolvedModel
                 additionalProperties: false
+  /v1/inference/active-profile:
+    put:
+      operationId: inference_activeprofile_put
+      summary: Set the active (chat) inference profile
+      description:
+        Set llm.activeProfile after validating the name against the effective profile catalog (provider-aware
+        default expansion included). Unknown or disabled profiles are rejected so the chat-model selection cannot be
+        silently stripped on the next config load.
+      tags:
+        - inference
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                name:
+                  type: string
+                  minLength: 1
+              required:
+                - name
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok:
+                    type: boolean
+                    const: true
+                  activeProfile:
+                    type: string
+                required:
+                  - ok
+                  - activeProfile
+                additionalProperties: false
+        "400":
+          description: Unknown or disabled profile name
+  /v1/inference/callsites:
+    get:
+      operationId: inference_callsites_get
+      summary: List call-site resolutions
+      description:
+        "Return the effective resolution for every LLM call site: the winning profile, its source (override /
+        active / call-site pin / shipped default), and the resolved provider/model plus notable tuning."
+      tags:
+        - inference
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  callSites:
+                    type: array
+                    items:
+                      $ref: "#/components/schemas/CallSiteResolutionSummary"
+                required:
+                  - callSites
+                additionalProperties: false
+  /v1/inference/callsites/{site}:
+    get:
+      operationId: inference_callsites_by_site_get
+      summary: Get a call-site resolution detail
+      description:
+        "Return the full resolution for one call site: the winner, the resolution chain (rungs considered and
+        skipped), the shipped default fragment, the user's pin fragment, and a preflight-derived resolution error when
+        dispatch would provably fail."
+      tags:
+        - inference
+      parameters:
+        - name: site
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/CallSiteResolutionDetail"
+        "400":
+          description: Unknown call site
   /v1/inference/chatgpt-subscription/auth:
     post:
       operationId: inference_chatgptsubscription_auth_post
@@ -13805,11 +13946,13 @@ paths:
                 required:
                   - ok
                 additionalProperties: false
-  /v1/inference/provider-connections:
+  /v1/inference/models:
     get:
-      operationId: inference_providerconnections_get
-      summary: List provider connections
-      description: Return all provider connections. Optionally filter by provider with ?provider=<name>.
+      operationId: inference_models_get
+      summary: List inference catalog models
+      description:
+        Return every model in the code-owned provider catalog, each tagged with its provider. Optionally filter by
+        provider with ?provider=<id>.
       tags:
         - inference
       parameters:
@@ -13819,8 +13962,8 @@ paths:
           schema:
             type: string
           description:
-            "Filter by provider. One of: anthropic, openai, gemini, ollama, fireworks, together, openrouter,
-            openai-compatible, minimax, atlascloud, vellum"
+            "Filter by provider id. One of: anthropic, openai, gemini, ollama, fireworks, together, openrouter,
+            vercel-ai-gateway, openai-compatible, minimax, atlascloud"
       responses:
         "200":
           description: Successful response
@@ -13829,17 +13972,45 @@ paths:
               schema:
                 type: object
                 properties:
-                  connections:
+                  models:
                     type: array
                     items:
-                      $ref: "#/components/schemas/ProviderConnection"
+                      $ref: "#/components/schemas/CatalogModel"
                 required:
-                  - connections
+                  - models
+                additionalProperties: false
+        "400":
+          description: Unknown provider filter
+  /v1/inference/profiles:
+    get:
+      operationId: inference_profiles_get
+      summary: List effective inference profiles
+      description:
+        "Return the effective profile catalog: code-defined managed defaults merged with user profiles, each
+        annotated with source and (when it has a connection) availability."
+      tags:
+        - inference
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  profiles:
+                    type: array
+                    items:
+                      $ref: "#/components/schemas/InferenceProfileSummary"
+                required:
+                  - profiles
                 additionalProperties: false
     post:
-      operationId: inference_providerconnections_post
-      summary: Create a provider connection
-      description: Create a new named provider connection. Fails with 409 if a connection with this name already exists.
+      operationId: inference_profiles_post
+      summary: Create an inference profile
+      description:
+        Create a validated custom profile. The provider must be a known LLM provider, the model must be in the
+        catalog (unless allowUnlisted), and a referenced connection must exist. Managed default names cannot be created.
       tags:
         - inference
       requestBody:
@@ -13853,17 +14024,220 @@ paths:
                   type: string
                   minLength: 1
                 provider:
-                  $ref: "#/components/schemas/ConnectionProvider"
-                auth:
-                  $ref: "#/components/schemas/Auth"
-                label:
                   type: string
                   minLength: 1
-                base_url:
-                  anyOf:
-                    - type: string
-                      format: uri
-                    - type: "null"
+                model:
+                  type: string
+                  minLength: 1
+                connection:
+                  type: string
+                  minLength: 1
+                label:
+                  type: string
+                  minLength: 1
+                effort:
+                  type: string
+                maxTokens:
+                  type: integer
+                  exclusiveMinimum: 0
+                  maximum: 9007199254740991
+                temperature:
+                  type: number
+                thinking:
+                  type: boolean
+                description:
+                  type: string
+                allowUnlisted:
+                  type: boolean
+              required:
+                - name
+                - provider
+                - model
+      responses:
+        "201":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InferenceProfileWriteResult"
+        "400":
+          description: Invalid provider, uncataloged model, or missing connection
+        "409":
+          description: A profile with this name already exists
+  /v1/inference/profiles/{name}:
+    delete:
+      operationId: inference_profiles_by_name_delete
+      summary: Delete an inference profile
+      description: Delete a custom profile. Managed default profiles cannot be deleted (they are re-seeded on boot).
+      tags:
+        - inference
+      parameters:
+        - name: name
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok:
+                    type: boolean
+                    const: true
+                  name:
+                    type: string
+                required:
+                  - ok
+                  - name
+                additionalProperties: false
+        "400":
+          description: Attempt to delete a managed profile
+        "404":
+          description: Profile not found
+        "409":
+          description: Profile is still referenced by activeProfile, advisorProfile, a call site, or a mix arm
+    get:
+      operationId: inference_profiles_by_name_get
+      summary: Get an effective inference profile
+      description: Return a single effective profile by name, with availability.
+      tags:
+        - inference
+      parameters:
+        - name: name
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InferenceProfileDetail"
+        "404":
+          description: Profile not found
+    patch:
+      operationId: inference_profiles_by_name_patch
+      summary: Update an inference profile
+      description:
+        Partial update of a custom profile with the same write-time validation as create. Managed default profiles
+        are read-only.
+      tags:
+        - inference
+      parameters:
+        - name: name
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                provider:
+                  type: string
+                  minLength: 1
+                model:
+                  type: string
+                  minLength: 1
+                connection:
+                  type: string
+                  minLength: 1
+                label:
+                  type: string
+                  minLength: 1
+                effort:
+                  type: string
+                maxTokens:
+                  type: integer
+                  exclusiveMinimum: 0
+                  maximum: 9007199254740991
+                temperature:
+                  type: number
+                thinking:
+                  type: boolean
+                description:
+                  type: string
+                allowUnlisted:
+                  type: boolean
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/InferenceProfileWriteResult"
+        "400":
+          description: Invalid fields, or attempt to edit a managed profile
+        "404":
+          description: Profile not found
+  /v1/inference/provider-connections:
+    get:
+      operationId: inference_providerconnections_get
+      summary: List provider connections
+      description: Return all provider connections. Optionally filter by provider with ?provider=<name>.
+      tags:
+        - inference
+      parameters:
+        - name: provider
+          in: query
+          required: false
+          schema:
+            type: string
+          description:
+            "Filter by provider. One of: anthropic, openai, gemini, ollama, fireworks, together, openrouter,
+            vercel-ai-gateway, openai-compatible, minimax, atlascloud, vellum"
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  connections:
+                    type: array
+                    items:
+                      $ref: "#/components/schemas/ProviderConnection"
+                required:
+                  - connections
+                additionalProperties: false
+    post:
+      operationId: inference_providerconnections_post
+      summary: Create a provider connection
+      description: Create a new named provider connection. Fails with 409 if a connection with this name already exists.
+      tags:
+        - inference
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                name:
+                  type: string
+                  minLength: 1
+                provider:
+                  $ref: "#/components/schemas/ConnectionProvider"
+                auth:
+                  $ref: "#/components/schemas/Auth"
+                label:
+                  type: string
+                  minLength: 1
+                base_url:
+                  anyOf:
+                    - type: string
+                      format: uri
+                    - type: "null"
                 models:
                   anyOf:
                     - type: array
@@ -15565,6 +15939,54 @@ paths:
                     required:
                       - skipped
                     additionalProperties: false
+  /v1/internal/telemetry/watchdog:
+    post:
+      operationId: internal_telemetry_watchdog_post
+      summary: Relay a watchdog telemetry event
+      description:
+        Emits a gateway-origin watchdog telemetry event directly to platform ingest, bypassing the SQLite watchdog
+        buffer, so integrity alarms never depend on the state they report on.
+      tags:
+        - internal
+        - telemetry
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                check_name:
+                  type: string
+                  minLength: 1
+                  maxLength: 128
+                detail:
+                  anyOf:
+                    - type: object
+                      propertyNames:
+                        type: string
+                      additionalProperties: {}
+                    - type: "null"
+                value:
+                  anyOf:
+                    - type: number
+                    - type: "null"
+              required:
+                - check_name
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  ok:
+                    type: boolean
+                    const: true
+                required:
+                  - ok
+                additionalProperties: false
   /v1/internal/twilio/status:
     post:
       operationId: internal_twilio_status_post
@@ -15930,41 +16352,148 @@ paths:
                 format: binary
         "500":
           description: Failed to create archive
-  /v1/memory-items:
+  /v1/memory-graph:
     get:
-      operationId: memoryitems_get
-      summary: List memory items
-      description: Return memory items with filtering, search, sorting, and pagination.
+      operationId: memorygraph_get
+      summary: Get the memory graph
+      description:
+        Return the assistant's memory as a backend-agnostic graph of nodes (concepts, skills, capabilities) and
+        edges (authored links and learned associations). Returns supported=false when the active backend exposes no
+        graph.
       tags:
         - memory
-      parameters:
-        - name: kind
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Filter by kind
-        - name: status
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Filter by status (default active)
-        - name: search
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Full-text search query
-        - name: sort
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Sort field (default lastSeenAt)
-        - name: order
-          in: query
-          required: false
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  backend:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                  supported:
+                    type: boolean
+                  nodes:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        label:
+                          type: string
+                        summary:
+                          type: string
+                        kind:
+                          type: string
+                        weight:
+                          type: number
+                        updatedAtMs:
+                          type: number
+                      required:
+                        - id
+                        - label
+                      additionalProperties: false
+                  edges:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        source:
+                          type: string
+                        target:
+                          type: string
+                        kind:
+                          type: string
+                        weight:
+                          type: number
+                        description:
+                          type: string
+                        directed:
+                          type: boolean
+                      required:
+                        - source
+                        - target
+                      additionalProperties: false
+                  truncated:
+                    type: boolean
+                required:
+                  - backend
+                  - supported
+                  - nodes
+                  - edges
+                additionalProperties: false
+  /v1/memory-graph-node:
+    get:
+      operationId: memorygraphnode_get
+      summary: Get a memory graph node's content
+      description:
+        "Return the rendered markdown content of a single concept node by id, for the graph's node-detail view.
+        `found: false` when the node has no readable page."
+      tags:
+        - memory
+      parameters:
+        - name: id
+          in: query
+          required: false
+          schema:
+            type: string
+          description: "Node id from the graph payload (memory-v3: the concept-page slug)."
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  found:
+                    type: boolean
+                  title:
+                    type: string
+                  content:
+                    type: string
+                required:
+                  - found
+                additionalProperties: false
+  /v1/memory-items:
+    get:
+      operationId: memoryitems_get
+      summary: List memory items
+      description: Return memory items with filtering, search, sorting, and pagination.
+      tags:
+        - memory
+      parameters:
+        - name: kind
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Filter by kind
+        - name: status
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Filter by status (default active)
+        - name: search
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Full-text search query
+        - name: sort
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Sort field (default lastSeenAt)
+        - name: order
+          in: query
+          required: false
           schema:
             type: string
           description: asc or desc (default desc)
@@ -16084,7 +16613,7 @@ paths:
                     type: object
                     properties: {}
                     additionalProperties: {}
-                    description: Memory item with scopeLabel and graph metadata
+                    description: Memory item with graph metadata
                 required:
                   - item
                 additionalProperties: false
@@ -16135,6 +16664,147 @@ paths:
                 additionalProperties: false
         "409":
           description: Another memory item with this content already exists
+  /v1/memory-nodes:
+    get:
+      operationId: memorynodes_get
+      summary: List memory graph nodes
+      description:
+        Return active memory graph nodes ordered by significance. With `search`, all nodes are scanned so the
+        content filter is exhaustive; without it the query is capped at `limit` rows.
+      tags:
+        - memory
+      parameters:
+        - name: search
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Filter nodes whose content contains the query
+        - name: limit
+          in: query
+          required: false
+          schema:
+            type: integer
+          description: Max results (default 50, max 200)
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  message:
+                    type: string
+                  nodes:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        content:
+                          type: string
+                        type:
+                          type: string
+                        fidelity:
+                          type: string
+                        created:
+                          type: number
+                      required:
+                        - id
+                        - content
+                        - type
+                        - fidelity
+                        - created
+                      additionalProperties: false
+                  total:
+                    type: number
+                required:
+                  - success
+                  - message
+                  - nodes
+                  - total
+                additionalProperties: false
+  /v1/memory-nodes/delete:
+    post:
+      operationId: memorynodes_delete_post
+      summary: Delete a memory graph node by content match
+      description:
+        "Delete the single memory graph node matching `content`: a case-insensitive exact match takes priority;
+        with no exact match, a substring match is tried. Fails as `{ success: false }` when zero or multiple nodes
+        match."
+      tags:
+        - memory
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                content:
+                  type: string
+              required:
+                - content
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  message:
+                    type: string
+                required:
+                  - success
+                  - message
+                additionalProperties: false
+  /v1/memory-nodes/update:
+    post:
+      operationId: memorynodes_update_post
+      summary: Update a memory graph node by content match
+      description:
+        "Replace the content of the single memory graph node matching `oldContent`: a case-insensitive exact match
+        takes priority; with no exact match, a substring match is tried. Fails as `{ success: false }` when zero or
+        multiple nodes match, or when another active node already has `newContent`."
+      tags:
+        - memory
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              properties:
+                oldContent:
+                  type: string
+                newContent:
+                  type: string
+              required:
+                - oldContent
+                - newContent
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  success:
+                    type: boolean
+                  message:
+                    type: string
+                required:
+                  - success
+                  - message
+                additionalProperties: false
   /v1/memory/eval/run:
     post:
       operationId: memory_eval_run_post
@@ -17057,10 +17727,6 @@ paths:
                           enum:
                             - user
                             - assistant
-                        content:
-                          type: string
-                          deprecated: true
-                          description: "Deprecated: superseded by contentBlocks. Flat plain-text body (joined text segments)."
                         timestamp:
                           type: string
                         attachments:
@@ -17115,6 +17781,10 @@ paths:
                                 type: array
                                 items:
                                   type: string
+                              imageAttachmentIds:
+                                type: array
+                                items:
+                                  type: string
                               startedAt:
                                 type: number
                               previewStartedAt:
@@ -17547,6 +18217,10 @@ paths:
                                         type: array
                                         items:
                                           type: string
+                                      imageAttachmentIds:
+                                        type: array
+                                        items:
+                                          type: string
                                       startedAt:
                                         type: number
                                       previewStartedAt:
@@ -21404,6 +22078,19 @@ paths:
                           anyOf:
                             - type: string
                             - type: "null"
+                        icon:
+                          description: Author-declared emoji icon from the plugin's package.json vellum.icon; absent when none.
+                          type: string
+                        hasIcon:
+                          description:
+                            Whether the plugin ships a valid author-bundled `icon.png` (PNG magic + dimensions + size validated).
+                            Drives whether a client fetches the bundled icon.
+                          type: boolean
+                        iconVersion:
+                          description:
+                            Content hash of the validated `icon.png`; present only when `hasIcon` is true. Use it as a cache-buster for
+                            the bundled-icon endpoint.
+                          type: string
                       required:
                         - id
                         - name
@@ -21432,7 +22119,8 @@ paths:
         Remove the directory at `<workspaceDir>/plugins/<name>/`. Mirrors the CLI's `assistant plugins uninstall
         <name>` (without the interactive confirmation — the API caller is responsible for any prompt). The plugin name
         is sanitized by the same regex the CLI uses; `../escape`-style values, hidden names, and absolute paths return
-        400. Missing plugins return 404. The assistant must be restarted to drop the plugin from the running runtime.
+        400. Missing plugins return 404. The plugin is dropped from the running runtime live on the next read (no
+        restart required).
       tags:
         - plugins
       parameters:
@@ -21572,6 +22260,23 @@ paths:
                     description:
                       Prebuilt client artifact from `package.json` `vellum.artifact`, or null when the plugin ships none or its
                       descriptor is incomplete (e.g. a placeholder sha256).
+                  icon:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                    description: Author-declared emoji icon from the plugin's `package.json` `vellum.icon`, or null when none.
+                  hasIcon:
+                    type: boolean
+                    description:
+                      Whether the locally installed copy ships a valid author-bundled `icon.png` (PNG magic + dimensions + size
+                      validated). Always false when the plugin is not installed.
+                  iconVersion:
+                    anyOf:
+                      - type: string
+                      - type: "null"
+                    description:
+                      Content hash of the validated `icon.png`; null when `hasIcon` is false. Use it as a cache-buster for the
+                      bundled-icon endpoint.
                 required:
                   - name
                   - installed
@@ -21583,6 +22288,9 @@ paths:
                   - readme
                   - ref
                   - artifact
+                  - icon
+                  - hasIcon
+                  - iconVersion
                 additionalProperties: false
         "400":
           description: The plugin name failed sanitization (e.g. contained slashes, dots, or uppercase letters).
@@ -21765,9 +22473,38 @@ paths:
           description: No plugin directory exists with the given name.
         "409":
           description: The plugin is already enabled.
-  /v1/plugins/{name}/inspect:
+  /v1/plugins/{name}/icon:
     get:
-      operationId: plugins_by_name_inspect_get
+      operationId: plugins_by_name_icon_get
+      summary: Serve a plugin's bundled icon
+      description:
+        Serve the installed plugin's validated author-bundled `icon.png` as `image/png`. The PNG is re-validated on
+        read (magic bytes + IHDR dimensions + size) and served with an immutable `Cache-Control` plus a content-hash
+        `ETag` — the `iconVersion` reported by `GET /v1/plugins` and `GET /v1/plugins/:name` — so clients cache
+        aggressively and only refetch when the hash changes. A plugin with no valid bundled icon returns 404; a
+        malformed name returns 400. Pair with the `hasIcon` / `iconVersion` fields on the list and detail responses to
+        decide whether to fetch.
+      tags:
+        - plugins
+      parameters:
+        - name: name
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        "200":
+          description: Successful response
+          content:
+            image/png:
+              schema:
+                type: string
+                format: binary
+        "404":
+          description: No installed plugin with the given name has an icon.
+  /v1/plugins/{name}/inspect:
+    get:
+      operationId: plugins_by_name_inspect_get
       summary: Inspect a plugin's install drift
       description:
         'Compare the locally installed copy of a plugin against the marketplace''s current pinned commit and report
@@ -22030,14 +22767,14 @@ paths:
         `<workspaceDir>/plugins/<name>/`. Always resolves against the curated marketplace pin (no caller-supplied ref),
         mirroring `plugins install`''s curation boundary. A no-op (`outcome: "already-up-to-date"`) when the installed
         commit already equals the pin; pass `dryRun` to preview the move (`outcome: "would-upgrade"`) without touching
-        the install. Installs lacking provenance are re-pinned to the current SHA. The assistant must be restarted to
-        load the upgraded code. `strategy` controls how local edits are reconciled: `overwrite` (default) discards them
-        and re-installs the pin wholesale; `ours`/`theirs`/`assistant` perform a three-way merge against the
-        re-materialized install commit, carrying non-conflicting edits from both sides forward and resolving conflicting
-        hunks toward the local edit (`ours`) or the pin (`theirs`), or writing git conflict markers into the file and
-        reporting them in `conflicts`/`binaryConflicts` for the assistant to resolve (`assistant`). A merge strategy
-        whose install-time baseline cannot be reconstructed returns 409. Mirrors the CLI''s `assistant plugins upgrade
-        <name> [--strategy <s>]`.'
+        the install. Installs lacking provenance are re-pinned to the current SHA. The upgraded code is picked up live
+        on the next read (no restart required). `strategy` controls how local edits are reconciled: `overwrite`
+        (default) discards them and re-installs the pin wholesale; `ours`/`theirs`/`assistant` perform a three-way merge
+        against the re-materialized install commit, carrying non-conflicting edits from both sides forward and resolving
+        conflicting hunks toward the local edit (`ours`) or the pin (`theirs`), or writing git conflict markers into the
+        file and reporting them in `conflicts`/`binaryConflicts` for the assistant to resolve (`assistant`). A merge
+        strategy whose install-time baseline cannot be reconstructed returns 409. Mirrors the CLI''s `assistant plugins
+        upgrade <name> [--strategy <s>]`.'
       tags:
         - plugins
       parameters:
@@ -22239,9 +22976,9 @@ paths:
         "Install a plugin by name from the canonical source — a whitelisted `plugins/marketplace.json` entry.
         Always resolves against the curated default git ref (no caller-supplied ref): installing from an unreviewed
         revision would bypass the marketplace curation boundary and let attacker-controlled code be loaded. Materializes
-        the plugin under `<workspaceDir>/plugins/<name>/`; the assistant must be restarted to load it. Mirrors the CLI's
-        `assistant plugins install <name>`. An already-installed name without `force` returns 409; a name that resolves
-        to nothing returns 404. Sibling to `POST /v1/skills/install`."
+        the plugin under `<workspaceDir>/plugins/<name>/`; the plugin is picked up live on the next read (no restart
+        required). Mirrors the CLI's `assistant plugins install <name>`. An already-installed name without `force`
+        returns 409; a name that resolves to nothing returns 404. Sibling to `POST /v1/skills/install`."
       tags:
         - plugins
       requestBody:
@@ -24432,6 +25169,29 @@ paths:
                           anyOf:
                             - type: number
                             - type: "null"
+                        conversations:
+                          type: array
+                          items:
+                            type: object
+                            properties:
+                              id:
+                                type: string
+                              title:
+                                anyOf:
+                                  - type: string
+                                  - type: "null"
+                              exists:
+                                type: boolean
+                              archivedAt:
+                                anyOf:
+                                  - type: number
+                                  - type: "null"
+                            required:
+                              - id
+                              - title
+                              - exists
+                              - archivedAt
+                            additionalProperties: false
                         estimatedCostUsd:
                           type: number
                         createdAt:
@@ -24448,6 +25208,7 @@ paths:
                         - conversationId
                         - conversationExists
                         - conversationArchivedAt
+                        - conversations
                         - estimatedCostUsd
                         - createdAt
                       additionalProperties: false
@@ -26247,6 +27008,11 @@ paths:
                           origin:
                             type: string
                             const: assistant-memory
+                          sourceConversationId:
+                            description:
+                              Conversation whose trace the retrospective distilled this skill from. Present only when recorded in
+                              install-meta.
+                            type: string
                         required:
                           - id
                           - name
@@ -27373,8 +28139,9 @@ paths:
               - "true"
               - "false"
           description:
-            "When 'true', only return conversations the connected identity is in: channels/groups with is_member, plus
-            all DMs and group DMs"
+            "When 'true', only return rooms the connected identity is in: channels with is_member plus group DMs. 1:1
+            DMs are excluded — they are person-scoped, and Slack materializes IM rows without any conversation
+            happening."
       responses:
         "200":
           description: Successful response
@@ -27472,6 +28239,47 @@ paths:
                   - ts
                   - channel
                 additionalProperties: false
+  /v1/slack/users:
+    get:
+      operationId: slack_users_get
+      summary: List Slack workspace users
+      description:
+        List human members of the connected Slack workspace for the contact account-linking picker. Deleted users
+        and bots are excluded.
+      tags:
+        - integrations
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  users:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        username:
+                          type: string
+                        displayName:
+                          type: string
+                        imageUrl:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                      required:
+                        - id
+                        - username
+                        - displayName
+                        - imageUrl
+                      additionalProperties: false
+                required:
+                  - users
+                additionalProperties: false
   /v1/sounds/available:
     get:
       operationId: sounds_available_get
@@ -28593,11 +29401,12 @@ paths:
       summary: List registered tools with metadata and schemas
       description:
         "Return registered tools. Without `conversationId`, returns every tool in the global registry; `tools`
-        carries per-tool metadata (description, author-asserted risk level, category, and contributing source: core,
-        skill, plugin, or MCP server) and `names`/`schemas` additionally cover skill tools whose manifests are present
-        but not yet loaded, for the permission-simulator catalog. With `conversationId`, scopes the result to the tools
-        available to that conversation as of its most recent turn (including skill/MCP tools registered over its
-        lifecycle); 404 if no such conversation is active."
+        carries per-tool metadata (description, author-asserted risk level, category, and contributing source: default
+        (built-in), skill, plugin, or MCP server) and `names`/`schemas` additionally cover skill tools whose manifests
+        are present but not yet loaded, for the permission-simulator catalog. With `conversationId`, scopes the result
+        to the tools available to that conversation as of its most recent turn (including skill/MCP tools registered
+        over its lifecycle); 404 if no such conversation is active. With `agent`, simulates the subagent tool projection
+        for a given role or resolves a live subagent's conversation."
       tags:
         - tools
       parameters:
@@ -28607,6 +29416,14 @@ paths:
           schema:
             type: string
           description: When set, scope the tool inventory to this conversation's most recent turn instead of the global registry.
+        - name: agent
+          in: query
+          required: false
+          schema:
+            type: string
+          description:
+            A subagent role name or a live subagent id. Simulates the subagent tool projection for that role or
+            resolves the live subagent's conversation.
       responses:
         "200":
           description: Successful response
@@ -28644,8 +29461,8 @@ paths:
                         source:
                           type: string
                           description:
-                            'Tool origin: "core" for built-ins, otherwise "<kind>:<id>" (e.g. "plugin:echo", "skill:my-skill",
-                            "mcp:server").'
+                            Tool origin as "<kind>:<id>" (e.g. "default:default" for built-ins, "plugin:echo", "skill:my-skill",
+                            "mcp:server").
                       required:
                         - name
                         - description
@@ -29790,28 +30607,13 @@ paths:
                   - path
                   - mode
                 additionalProperties: false
-  /v1/work-items:
+  /v1/workflows:
     get:
-      operationId: workitems_get
-      summary: List work items
-      description: Return work items, optionally filtered by status.
+      operationId: workflows_get
+      summary: List saved workflows
+      description: Return the saved (named) workflows the assistant can run.
       tags:
-        - work-items
-      parameters:
-        - name: status
-          in: query
-          required: false
-          schema:
-            type: string
-            enum:
-              - pending
-              - running
-              - awaiting_review
-              - done
-              - failed
-              - cancelled
-              - archived
-          description: Filter by work item status
+        - workflows
       responses:
         "200":
           description: Successful response
@@ -29820,376 +30622,127 @@ paths:
               schema:
                 type: object
                 properties:
-                  items:
+                  workflows:
                     type: array
-                    items: {}
+                    items:
+                      type: object
+                      properties:
+                        name:
+                          type: string
+                        description:
+                          type: string
+                        path:
+                          type: string
+                      required:
+                        - name
+                        - description
+                        - path
+                      additionalProperties: false
+                    description: Saved workflow entries
                 required:
-                  - items
+                  - workflows
                 additionalProperties: false
-  /v1/work-items/{id}:
-    delete:
-      operationId: workitems_by_id_delete
-      summary: Delete a work item
-      description: Permanently remove a work item.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
+  /v1/workflows/runs:
     get:
-      operationId: workitems_by_id_get
-      summary: Get a work item
-      description: Return a single work item by ID.
+      operationId: workflows_runs_get
+      summary: List workflow runs
+      description: Return recent workflow runs, newest first.
       tags:
-        - work-items
+        - workflows
       parameters:
-        - name: id
-          in: path
-          required: true
+        - name: limit
+          in: query
+          required: false
+          schema:
+            type: integer
+          description: Max runs to return (default 50, max 200)
+        - name: status
+          in: query
+          required: false
           schema:
             type: string
+          description: Filter by run status (running, completed, failed, aborted, cap_exceeded, interrupted).
       responses:
         "200":
           description: Successful response
-    patch:
-      operationId: workitems_by_id_patch
-      summary: Update a work item
-      description: Partially update a work item's title, notes, status, or priority.
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  runs:
+                    type: array
+                    items:
+                      type: object
+                      properties:
+                        id:
+                          type: string
+                        name:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        scriptHash:
+                          type: string
+                        status:
+                          type: string
+                          enum:
+                            - running
+                            - completed
+                            - failed
+                            - aborted
+                            - cap_exceeded
+                            - interrupted
+                        conversationId:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        agentsSpawned:
+                          type: number
+                        inputTokens:
+                          type: number
+                        outputTokens:
+                          type: number
+                        error:
+                          anyOf:
+                            - type: string
+                            - type: "null"
+                        createdAt:
+                          anyOf:
+                            - type: number
+                            - type: "null"
+                        updatedAt:
+                          anyOf:
+                            - type: number
+                            - type: "null"
+                        finishedAt:
+                          anyOf:
+                            - type: number
+                            - type: "null"
+                      required:
+                        - id
+                        - name
+                        - scriptHash
+                        - status
+                        - conversationId
+                        - agentsSpawned
+                        - inputTokens
+                        - outputTokens
+                        - error
+                        - createdAt
+                        - updatedAt
+                        - finishedAt
+                      additionalProperties: false
+                    description: Workflow run objects
+                required:
+                  - runs
+                additionalProperties: false
+  /v1/workflows/runs/{id}:
+    get:
+      operationId: workflows_runs_by_id_get
+      summary: Get workflow run
+      description: Return a single workflow run by ID.
       tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                title:
-                  type: string
-                notes:
-                  type: string
-                status:
-                  type: string
-                priorityTier:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-                sortIndex:
-                  type: integer
-                  minimum: -9007199254740991
-                  maximum: 9007199254740991
-              required:
-                - title
-                - notes
-                - status
-                - priorityTier
-                - sortIndex
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/approve-permissions:
-    post:
-      operationId: workitems_by_id_approvepermissions_post
-      summary: Approve tool permissions
-      description: Pre-approve a set of tools for a work item before it runs.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                approvedTools:
-                  type: array
-                  items: {}
-                  description: Array of tool names to approve
-              required:
-                - approvedTools
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/cancel:
-    post:
-      operationId: workitems_by_id_cancel_post
-      summary: Cancel a running work item
-      description: Abort a running work item and set its status to cancelled.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-        "404":
-          description: Work item not found
-        "409":
-          description: Work item is not running
-  /v1/work-items/{id}/complete:
-    post:
-      operationId: workitems_by_id_complete_post
-      summary: Complete a work item
-      description: Transition a work item from awaiting_review to done.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-  /v1/work-items/{id}/output:
-    get:
-      operationId: workitems_by_id_output_get
-      summary: Get work item output
-      description: Return the final output of a completed work item run.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  id:
-                    type: string
-                  success:
-                    type: boolean
-                  output:
-                    type: object
-                    properties: {}
-                    additionalProperties: {}
-                required:
-                  - id
-                  - success
-                  - output
-                additionalProperties: false
-  /v1/work-items/{id}/preflight:
-    post:
-      operationId: workitems_by_id_preflight_post
-      summary: Preflight check
-      description: Check tool permissions needed before running a work item.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  id:
-                    type: string
-                  success:
-                    type: boolean
-                  permissions:
-                    type: object
-                    properties: {}
-                    additionalProperties: {}
-                required:
-                  - id
-                  - success
-                  - permissions
-                additionalProperties: false
-  /v1/work-items/{id}/run:
-    post:
-      operationId: workitems_by_id_run_post
-      summary: Run a work item
-      description: Execute the task associated with a work item. Returns immediately; execution happens in the background.
-      tags:
-        - work-items
-      parameters:
-        - name: id
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: Successful response
-        "403":
-          description: Required tool permissions not approved
-        "404":
-          description: Work item or associated task not found
-        "409":
-          description: Work item is already running or not runnable
-  /v1/workflows:
-    get:
-      operationId: workflows_get
-      summary: List saved workflows
-      description: Return the saved (named) workflows the assistant can run.
-      tags:
-        - workflows
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  workflows:
-                    type: array
-                    items:
-                      type: object
-                      properties:
-                        name:
-                          type: string
-                        description:
-                          type: string
-                        path:
-                          type: string
-                      required:
-                        - name
-                        - description
-                        - path
-                      additionalProperties: false
-                    description: Saved workflow entries
-                required:
-                  - workflows
-                additionalProperties: false
-  /v1/workflows/runs:
-    get:
-      operationId: workflows_runs_get
-      summary: List workflow runs
-      description: Return recent workflow runs, newest first.
-      tags:
-        - workflows
-      parameters:
-        - name: limit
-          in: query
-          required: false
-          schema:
-            type: integer
-          description: Max runs to return (default 50, max 200)
-        - name: status
-          in: query
-          required: false
-          schema:
-            type: string
-          description: Filter by run status (running, completed, failed, aborted, cap_exceeded, interrupted).
-      responses:
-        "200":
-          description: Successful response
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  runs:
-                    type: array
-                    items:
-                      type: object
-                      properties:
-                        id:
-                          type: string
-                        name:
-                          anyOf:
-                            - type: string
-                            - type: "null"
-                        scriptHash:
-                          type: string
-                        status:
-                          type: string
-                          enum:
-                            - running
-                            - completed
-                            - failed
-                            - aborted
-                            - cap_exceeded
-                            - interrupted
-                        conversationId:
-                          anyOf:
-                            - type: string
-                            - type: "null"
-                        agentsSpawned:
-                          type: number
-                        inputTokens:
-                          type: number
-                        outputTokens:
-                          type: number
-                        error:
-                          anyOf:
-                            - type: string
-                            - type: "null"
-                        createdAt:
-                          anyOf:
-                            - type: number
-                            - type: "null"
-                        updatedAt:
-                          anyOf:
-                            - type: number
-                            - type: "null"
-                        finishedAt:
-                          anyOf:
-                            - type: number
-                            - type: "null"
-                      required:
-                        - id
-                        - name
-                        - scriptHash
-                        - status
-                        - conversationId
-                        - agentsSpawned
-                        - inputTokens
-                        - outputTokens
-                        - error
-                        - createdAt
-                        - updatedAt
-                        - finishedAt
-                      additionalProperties: false
-                    description: Workflow run objects
-                required:
-                  - runs
-                additionalProperties: false
-  /v1/workflows/runs/{id}:
-    get:
-      operationId: workflows_runs_by_id_get
-      summary: Get workflow run
-      description: Return a single workflow run by ID.
-      tags:
-        - workflows
+        - workflows
       parameters:
         - name: id
           in: path
@@ -30625,6 +31178,93 @@ paths:
                   - oldPath
                   - newPath
                 additionalProperties: false
+  /v1/workspace/theme:
+    get:
+      operationId: workspace_theme_get
+      summary: Get workspace theme
+      description:
+        "Return validated design-token overrides from the workspace ui/theme.json. Absent or rejected files yield
+        theme: null with the rejection reasons in issues; clients fall back to built-in theme defaults."
+      tags:
+        - workspace
+      responses:
+        "200":
+          description: Successful response
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  theme:
+                    anyOf:
+                      - type: object
+                        properties:
+                          version:
+                            type: number
+                            const: 1
+                          base:
+                            type: string
+                            enum:
+                              - light
+                              - dark
+                              - velvet
+                              - system
+                          tokens:
+                            type: object
+                            properties:
+                              accent:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              background:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              surface:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              surfaceRaised:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              border:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              text:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              textMuted:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              assistantBubbleBackground:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              assistantBubbleText:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              userBubbleBackground:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                              userBubbleText:
+                                type: string
+                                pattern: ^#(?:[0-9a-fA-F]{3}|[0-9a-fA-F]{6})$
+                            additionalProperties: false
+                        required:
+                          - version
+                        additionalProperties: false
+                      - type: "null"
+                  source:
+                    type: string
+                    enum:
+                      - workspace
+                      - invalid
+                      - none
+                  issues:
+                    type: array
+                    items:
+                      type: string
+                required:
+                  - theme
+                  - source
+                  - issues
+                additionalProperties: false
   /v1/workspace/tree:
     get:
       operationId: workspace_tree_get
@@ -31098,6 +31738,7 @@ components:
         - ollama
         - fireworks
         - openrouter
+        - vercel-ai-gateway
         - openai-compatible
         - minimax
         - atlascloud
@@ -31474,6 +32115,7 @@ components:
         - fireworks
         - together
         - openrouter
+        - vercel-ai-gateway
         - openai-compatible
         - minimax
         - atlascloud
@@ -31670,6 +32312,24 @@ components:
                 provider_connection:
                   type: string
               additionalProperties: false
+            defaultProvider:
+              type: object
+              properties:
+                provider:
+                  type: string
+                  enum:
+                    - anthropic
+                    - openai
+                    - gemini
+                    - fireworks
+                    - openrouter
+                    - vellum
+                connectionName:
+                  type: string
+                  minLength: 1
+              required:
+                - provider
+              additionalProperties: false
             profiles:
               type: object
               propertyNames:
@@ -32024,6 +32684,318 @@ components:
         invariant:
           type: boolean
       additionalProperties: {}
+    DefaultProviderStatus:
+      type: object
+      properties:
+        provider:
+          anyOf:
+            - type: string
+              enum:
+                - anthropic
+                - openai
+                - gemini
+                - fireworks
+                - openrouter
+                - vellum
+            - type: "null"
+        connectionName:
+          type: string
+        resolvedConnectionName:
+          anyOf:
+            - type: string
+            - type: "null"
+        availability:
+          type: object
+          properties:
+            status:
+              type: string
+              enum:
+                - ok
+                - missing_default
+                - missing_connection
+                - missing_credential
+                - provider_mismatch
+                - unsupported_auth
+                - vellum_unauthenticated
+                - unknown
+            message:
+              type: string
+          required:
+            - status
+          additionalProperties: false
+      required:
+        - provider
+        - resolvedConnectionName
+        - availability
+      additionalProperties: false
+    CallSiteResolutionSummary:
+      type: object
+      properties:
+        callSite:
+          type: string
+        profile:
+          anyOf:
+            - type: string
+            - type: "null"
+        label:
+          anyOf:
+            - type: string
+            - type: "null"
+        source:
+          type: string
+          enum:
+            - override
+            - active
+            - call_site
+            - default
+        provider:
+          type: string
+        model:
+          type: string
+        effort:
+          type: string
+        maxTokens:
+          type: number
+        maxInputTokens:
+          type: number
+      required:
+        - callSite
+        - profile
+        - label
+        - source
+        - provider
+        - model
+        - effort
+        - maxTokens
+      additionalProperties: false
+    CallSiteResolutionDetail:
+      type: object
+      properties:
+        callSite:
+          type: string
+        winner:
+          type: object
+          properties:
+            profile:
+              anyOf:
+                - type: string
+                - type: "null"
+            label:
+              anyOf:
+                - type: string
+                - type: "null"
+            source:
+              type: string
+              enum:
+                - override
+                - active
+                - call_site
+                - default
+          required:
+            - profile
+            - label
+            - source
+          additionalProperties: false
+        resolved:
+          type: object
+          properties:
+            provider:
+              type: string
+            model:
+              type: string
+            maxTokens:
+              type: number
+            effort:
+              type: string
+            temperature:
+              anyOf:
+                - type: number
+                - type: "null"
+            maxInputTokens:
+              type: number
+          required:
+            - provider
+            - model
+            - maxTokens
+            - effort
+            - temperature
+          additionalProperties: false
+        resolutionChain:
+          type: array
+          items:
+            type: object
+            properties:
+              requested:
+                type: string
+              reason:
+                type: string
+                enum:
+                  - missing
+                  - disabled
+                  - incomplete
+            required:
+              - requested
+              - reason
+            additionalProperties: false
+        shippedDefault:
+          type: object
+          propertyNames:
+            type: string
+          additionalProperties: {}
+        userPin:
+          anyOf:
+            - type: object
+              propertyNames:
+                type: string
+              additionalProperties: {}
+            - type: "null"
+        resolutionError:
+          type: object
+          properties:
+            reason:
+              type: string
+            message:
+              type: string
+          required:
+            - reason
+            - message
+          additionalProperties: false
+      required:
+        - callSite
+        - winner
+        - resolved
+        - resolutionChain
+        - shippedDefault
+        - userPin
+      additionalProperties: false
+    CatalogModel:
+      type: object
+      properties:
+        provider:
+          type: string
+        id:
+          type: string
+        displayName:
+          type: string
+        contextWindowTokens:
+          type: number
+        maxOutputTokens:
+          type: number
+        supportsThinking:
+          type: boolean
+        supportsVision:
+          type: boolean
+        supportsToolUse:
+          type: boolean
+        featureFlag:
+          type: string
+      required:
+        - provider
+        - id
+        - displayName
+      additionalProperties: false
+    InferenceProfileSummary:
+      type: object
+      properties:
+        name:
+          type: string
+        label:
+          anyOf:
+            - type: string
+            - type: "null"
+        provider:
+          anyOf:
+            - type: string
+            - type: "null"
+        model:
+          anyOf:
+            - type: string
+            - type: "null"
+        status:
+          type: string
+          enum:
+            - active
+            - disabled
+        source:
+          type: string
+          enum:
+            - managed
+            - user
+        provider_connection:
+          type: string
+        availability:
+          anyOf:
+            - $ref: "#/components/schemas/ProfileConnectionAvailability"
+            - type: "null"
+      required:
+        - name
+        - label
+        - provider
+        - model
+        - status
+        - source
+        - availability
+      additionalProperties: false
+    ProfileConnectionAvailability:
+      type: object
+      properties:
+        status:
+          type: string
+          enum:
+            - ok
+            - missing_connection
+            - missing_credential
+            - provider_mismatch
+            - unsupported_auth
+            - vellum_unauthenticated
+            - unknown
+        message:
+          type: string
+      required:
+        - status
+      additionalProperties: false
+    InferenceProfileWriteResult:
+      type: object
+      properties:
+        ok:
+          type: boolean
+          const: true
+        name:
+          type: string
+        entry:
+          type: object
+          propertyNames:
+            type: string
+          additionalProperties: {}
+        warnings:
+          type: array
+          items:
+            type: string
+      required:
+        - ok
+        - name
+        - entry
+        - warnings
+      additionalProperties: false
+    InferenceProfileDetail:
+      type: object
+      properties:
+        name:
+          type: string
+        entry:
+          type: object
+          propertyNames:
+            type: string
+          additionalProperties: {}
+        availability:
+          anyOf:
+            - $ref: "#/components/schemas/ProfileConnectionAvailability"
+            - type: "null"
+      required:
+        - name
+        - entry
+        - availability
+      additionalProperties: false
     ProviderConnection:
       type: object
       properties: