@vertesia/common 1.6.0-dev.20261014.015055Z → 1.6.0-dev.20261019.172735Z

package/src/api-contract/components.generated.json

@@ -4547,11 +4547,7 @@
         }
       },
       "effort": {
-        "type": "string",
-        "enum": [
-          "none",
-          "high"
-        ]
+        "$ref": "#/components/schemas/ReasoningEffort"
       },
       "random_seed": {
         "type": "integer",
@@ -5852,6 +5848,23 @@
         "type": "string",
         "const": "mcp"
       },
+      "parameters": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9_]*$"
+        },
+        "additionalProperties": {
+          "$ref": "#/components/schemas/McpConnectionParameter"
+        }
+      },
+      "headers": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        },
+        "description": "HTTP header templates. Reference declared installation parameters with {{name}}. Never embed secrets."
+      },
       "id": {
         "type": "string",
         "description": "Stable identifier for this collection. Used to key oauth_bindings on AppInstallation — protects against collection renames. Required for new manifests."
@@ -5913,6 +5926,50 @@
     ],
     "description": "Authentication type for tool collections.\n- 'none': connect directly without credentials for MCP collections; does not disable authentication for Vertesia SDK collections\n- 'oauth': the runtime resolves a per-user or per-project OAuth access token\n- 'api_key': a static key held in the project's secret store is sent as the RFC 6750 bearer token (`Authorization: Bearer <key>`)\n- 'other' or omitted: use the legacy provider connection-details flow for MCP collections"
   },
+  "McpPublicParameter": {
+    "type": "object",
+    "properties": {
+      "title": {
+        "type": "string"
+      },
+      "description": {
+        "type": "string"
+      },
+      "required": {
+        "type": "boolean"
+      },
+      "type": {
+        "type": "string",
+        "const": "string"
+      },
+      "default": {
+        "type": "string"
+      }
+    },
+    "additionalProperties": false
+  },
+  "McpSecretParameter": {
+    "type": "object",
+    "properties": {
+      "title": {
+        "type": "string"
+      },
+      "description": {
+        "type": "string"
+      },
+      "required": {
+        "type": "boolean"
+      },
+      "type": {
+        "type": "string",
+        "const": "secret"
+      }
+    },
+    "required": [
+      "type"
+    ],
+    "additionalProperties": false
+  },
   "MCPOAuthConfig": {
     "type": "object",
     "properties": {
@@ -6019,6 +6076,16 @@
     "additionalProperties": false,
     "description": "Vertesia SDK tool collection configuration"
   },
+  "McpConnectionParameter": {
+    "anyOf": [
+      {
+        "$ref": "#/components/schemas/McpPublicParameter"
+      },
+      {
+        "$ref": "#/components/schemas/McpSecretParameter"
+      }
+    ]
+  },
   "ToolCollectionObject": {
     "oneOf": [
       {
@@ -6160,9 +6227,21 @@
   "AppGitSourceConfig": {
     "type": "object",
     "properties": {
+      "provider": {
+        "$ref": "#/components/schemas/AppGitSourceProvider",
+        "description": "Repository provider. Missing values are treated as `vertesia` for apps created before provider support."
+      },
       "url": {
         "type": "string"
       },
+      "installation_id": {
+        "type": "string",
+        "description": "Verified GitHub App installation id. Required when provider is `github`."
+      },
+      "repository": {
+        "type": "string",
+        "description": "GitHub repository in `owner/name` form. Required when provider is `github`."
+      },
       "default_branch": {
         "type": "string"
       },
@@ -6175,6 +6254,13 @@
     },
     "additionalProperties": false
   },
+  "AppGitSourceProvider": {
+    "type": "string",
+    "enum": [
+      "vertesia",
+      "github"
+    ]
+  },
   "AppSourceConfig": {
     "type": "object",
     "properties": {
@@ -6201,9 +6287,18 @@
       "git": {
         "type": "object",
         "properties": {
+          "provider": {
+            "$ref": "#/components/schemas/AppGitSourceProvider"
+          },
           "url": {
             "type": "string"
           },
+          "installation_id": {
+            "type": "string"
+          },
+          "repository": {
+            "type": "string"
+          },
           "default_branch": {
             "type": "string"
           },
@@ -6520,7 +6615,8 @@
     "enum": [
       "none",
       "client_secret_post",
-      "client_secret_basic"
+      "client_secret_basic",
+      "private_key_jwt"
     ]
   },
   "OAuthGrantType": {
@@ -6528,7 +6624,8 @@
     "enum": [
       "authorization_code",
       "refresh_token",
-      "urn:ietf:params:oauth:grant-type:device_code"
+      "urn:ietf:params:oauth:grant-type:device_code",
+      "urn:ietf:params:oauth:grant-type:token-exchange"
     ]
   },
   "OAuthResponseType": {
@@ -6622,6 +6719,12 @@
           "type": "string"
         }
       },
+      "token_endpoint_auth_signing_alg_values_supported": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
       "scopes_supported": {
         "type": "array",
         "items": {
@@ -6791,6 +6894,9 @@
       "client_name": {
         "type": "string"
       },
+      "app_id": {
+        "type": "string"
+      },
       "client_metadata": {
         "$ref": "#/components/schemas/OAuthClientDisplayMetadata"
       },
@@ -7064,9 +7170,372 @@
       "expires_in"
     ]
   },
+  "OidcFederationConnectionPayload": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 200
+      },
+      "issuer": {
+        "type": "string",
+        "format": "uri"
+      },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
+      "external_id_claim": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 256,
+        "pattern": "\\S",
+        "description": "Exact top-level verified token claim matched to SCIM externalId within the owning provisioning account."
+      },
+      "allowed_audiences": {
+        "minItems": 1,
+        "maxItems": 20,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "allowed_algorithms": {
+        "minItems": 1,
+        "maxItems": 2,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "enum": [
+            "RS256",
+            "ES256"
+          ]
+        }
+      },
+      "subject_token_type": {
+        "type": "string",
+        "enum": [
+          "urn:ietf:params:oauth:token-type:jwt",
+          "urn:ietf:params:oauth:token-type:id_token",
+          "urn:ietf:params:oauth:token-type:access_token"
+        ]
+      },
+      "required_claims": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        },
+        "description": "Exact string matches against verified top-level IdP claims, such as tenant or azp."
+      },
+      "all_projects": {
+        "type": "boolean",
+        "description": "Explicitly allow all current and future projects in the owning organization, subject to the user’s current access. Defaults to false for existing allowlists. When true, allowed_project_ids must be empty."
+      },
+      "allowed_project_ids": {
+        "maxItems": 100,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "pattern": "^[a-fA-F0-9]{24}$"
+        },
+        "description": "Explicit project allowlist. Must contain 1–100 projects unless all_projects is true."
+      },
+      "allowed_client_ids": {
+        "minItems": 1,
+        "maxItems": 20,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "description": "When set, require authentication by one of these account-owned confidential OAuth clients. Omit to allow exchanges without separate client authentication."
+      },
+      "allowed_scopes": {
+        "minItems": 1,
+        "maxItems": 100,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": "Optional restriction on delegable Vertesia permissions, excluding account:admin. Omit to use the user’s current permissions. An explicit list further restricts the grant."
+      },
+      "max_token_ttl_seconds": {
+        "type": "integer",
+        "minimum": 30,
+        "maximum": 300
+      },
+      "max_subject_token_age_seconds": {
+        "type": "integer",
+        "minimum": 30,
+        "maximum": 86400,
+        "description": "Maximum age since the signed iat claim. Defaults to 3600 seconds; 60 seconds of clock tolerance applies."
+      },
+      "enabled": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "name",
+      "issuer",
+      "external_id_claim",
+      "allowed_audiences",
+      "allowed_algorithms",
+      "subject_token_type",
+      "allowed_project_ids",
+      "max_token_ttl_seconds",
+      "enabled"
+    ],
+    "additionalProperties": false
+  },
+  "OidcFederationConnection": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 200
+      },
+      "issuer": {
+        "type": "string",
+        "format": "uri"
+      },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
+      "external_id_claim": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 256,
+        "pattern": "\\S",
+        "description": "Exact top-level verified token claim matched to SCIM externalId within the owning provisioning account."
+      },
+      "allowed_audiences": {
+        "minItems": 1,
+        "maxItems": 20,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1
+        }
+      },
+      "allowed_algorithms": {
+        "minItems": 1,
+        "maxItems": 2,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "enum": [
+            "RS256",
+            "ES256"
+          ]
+        }
+      },
+      "subject_token_type": {
+        "type": "string",
+        "enum": [
+          "urn:ietf:params:oauth:token-type:jwt",
+          "urn:ietf:params:oauth:token-type:id_token",
+          "urn:ietf:params:oauth:token-type:access_token"
+        ]
+      },
+      "required_claims": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        },
+        "description": "Exact string matches against verified top-level IdP claims, such as tenant or azp."
+      },
+      "all_projects": {
+        "type": "boolean",
+        "description": "Explicitly allow all current and future projects in the owning organization, subject to the user’s current access. Defaults to false for existing allowlists. When true, allowed_project_ids must be empty."
+      },
+      "allowed_project_ids": {
+        "maxItems": 100,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "pattern": "^[a-fA-F0-9]{24}$"
+        },
+        "description": "Explicit project allowlist. Must contain 1–100 projects unless all_projects is true."
+      },
+      "allowed_client_ids": {
+        "minItems": 1,
+        "maxItems": 20,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 256
+        },
+        "description": "When set, require authentication by one of these account-owned confidential OAuth clients. Omit to allow exchanges without separate client authentication."
+      },
+      "allowed_scopes": {
+        "minItems": 1,
+        "maxItems": 100,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "minLength": 1
+        },
+        "description": "Optional restriction on delegable Vertesia permissions, excluding account:admin. Omit to use the user’s current permissions. An explicit list further restricts the grant."
+      },
+      "max_token_ttl_seconds": {
+        "type": "integer",
+        "minimum": 30,
+        "maximum": 300
+      },
+      "max_subject_token_age_seconds": {
+        "type": "integer",
+        "minimum": 30,
+        "maximum": 86400
+      },
+      "enabled": {
+        "type": "boolean"
+      },
+      "id": {
+        "type": "string",
+        "pattern": "^[a-fA-F0-9]{24}$"
+      },
+      "account_id": {
+        "type": "string",
+        "pattern": "^[a-fA-F0-9]{24}$"
+      }
+    },
+    "required": [
+      "name",
+      "issuer",
+      "external_id_claim",
+      "allowed_audiences",
+      "allowed_algorithms",
+      "subject_token_type",
+      "allowed_project_ids",
+      "max_token_ttl_seconds",
+      "max_subject_token_age_seconds",
+      "enabled",
+      "id",
+      "account_id"
+    ],
+    "additionalProperties": false
+  },
+  "OidcFederationConnectionArray": {
+    "type": "array",
+    "items": {
+      "$ref": "#/components/schemas/OidcFederationConnection"
+    }
+  },
+  "OAuthTokenExchangeRequest": {
+    "type": "object",
+    "properties": {
+      "grant_type": {
+        "type": "string",
+        "const": "urn:ietf:params:oauth:grant-type:token-exchange"
+      },
+      "subject_token": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 65536
+      },
+      "subject_token_type": {
+        "type": "string",
+        "enum": [
+          "urn:ietf:params:oauth:token-type:jwt",
+          "urn:ietf:params:oauth:token-type:id_token",
+          "urn:ietf:params:oauth:token-type:access_token"
+        ]
+      },
+      "requested_token_type": {
+        "type": "string",
+        "const": "urn:ietf:params:oauth:token-type:access_token"
+      },
+      "federation_connection_id": {
+        "type": "string",
+        "pattern": "^[a-fA-F0-9]{24}$"
+      },
+      "client_id": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 256
+      },
+      "client_secret": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 4096
+      },
+      "client_assertion": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 16384
+      },
+      "client_assertion_type": {
+        "type": "string",
+        "const": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
+      },
+      "project_id": {
+        "type": "string",
+        "pattern": "^[a-fA-F0-9]{24}$"
+      },
+      "resource": {
+        "type": "string",
+        "minLength": 1
+      },
+      "scope": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 4096,
+        "description": "Optional space-separated permission subset. Omit to use current user permissions within the connection policy."
+      }
+    },
+    "required": [
+      "grant_type",
+      "subject_token",
+      "subject_token_type",
+      "federation_connection_id",
+      "project_id",
+      "resource"
+    ],
+    "additionalProperties": false
+  },
+  "OAuthTokenExchangeResponse": {
+    "type": "object",
+    "properties": {
+      "access_token": {
+        "type": "string"
+      },
+      "token_type": {
+        "type": "string",
+        "const": "Bearer"
+      },
+      "expires_in": {
+        "type": "number"
+      },
+      "scope": {
+        "type": "string"
+      },
+      "issued_token_type": {
+        "type": "string",
+        "const": "urn:ietf:params:oauth:token-type:access_token"
+      }
+    },
+    "required": [
+      "access_token",
+      "token_type",
+      "expires_in",
+      "issued_token_type"
+    ],
+    "additionalProperties": false
+  },
   "OAuthClient": {
     "type": "object",
     "properties": {
+      "app_id": {
+        "type": "string",
+        "description": "App associated with this client. Authorization requires an installation explicitly enabling this client and current user app access."
+      },
       "client_name": {
         "type": "string"
       },
@@ -7094,6 +7563,10 @@
       "token_endpoint_auth_method": {
         "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
       },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
       "allowed_scopes": {
         "type": "array",
         "items": {
@@ -7168,6 +7641,10 @@
   "OAuthClientCreateResponse": {
     "type": "object",
     "properties": {
+      "app_id": {
+        "type": "string",
+        "description": "App associated with this client. Authorization requires an installation explicitly enabling this client and current user app access."
+      },
       "client_name": {
         "type": "string"
       },
@@ -7195,6 +7672,10 @@
       "token_endpoint_auth_method": {
         "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
       },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
       "allowed_scopes": {
         "type": "array",
         "items": {
@@ -7308,6 +7789,10 @@
       "token_endpoint_auth_method": {
         "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
       },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
       "allowed_scopes": {
         "type": "array",
         "items": {
@@ -7370,6 +7855,10 @@
       "token_endpoint_auth_method": {
         "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
       },
+      "jwks_uri": {
+        "type": "string",
+        "format": "uri"
+      },
       "allowed_scopes": {
         "type": "array",
         "items": {
@@ -7385,6 +7874,10 @@
       "status": {
         "$ref": "#/components/schemas/OAuthClientStatus"
       },
+      "revoke_previous_client_secret": {
+        "type": "boolean",
+        "description": "Immediately revoke the previous rotation secret while retaining the current secret."
+      },
       "project_binding_mode": {
         "$ref": "#/components/schemas/OAuthProjectBindingMode"
       },
@@ -10475,10 +10968,14 @@
     "type": "object",
     "properties": {
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "status": {
         "$ref": "#/components/schemas/InteractionStatus"
@@ -12582,7 +13079,8 @@
       "fallback_coordination_unavailable",
       "fallback_wait_timeout",
       "minimum_token_rejection",
-      "unusable_resource_recreated"
+      "unusable_resource_recreated",
+      "unsupported_model"
     ]
   },
   "InteractionExecutionError": {
@@ -13292,13 +13790,13 @@
     "properties": {
       "limit": {
         "type": "integer",
-        "minimum": -9007199254740991,
+        "minimum": 0,
         "maximum": 9007199254740991,
         "description": "Maximum number of runs to return."
       },
       "offset": {
         "type": "integer",
-        "minimum": -9007199254740991,
+        "minimum": 0,
         "maximum": 9007199254740991,
         "description": "Number of runs to skip."
       },
@@ -13382,10 +13880,14 @@
         "$ref": "#/components/schemas/RunSearchQuery"
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "select": {
         "type": "string"
@@ -15554,10 +16056,14 @@
       },
       "limit": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Maximum number of prompts to return. Defaults to 100."
       },
       "offset": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Number of prompts to skip."
       },
       "role": {
@@ -17387,10 +17893,14 @@
       },
       "limit": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Pagination: number of items to return (default 50, max 200)"
       },
       "offset": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Pagination: offset"
       }
     },
@@ -19657,6 +20167,275 @@
     },
     "additionalProperties": false
   },
+  "AppGithubConfiguration": {
+    "type": "object",
+    "properties": {
+      "enabled": {
+        "type": "boolean"
+      },
+      "app_slug": {
+        "type": "string"
+      },
+      "install_url": {
+        "type": "string"
+      },
+      "relay_url": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "enabled"
+    ]
+  },
+  "StartAppGithubAuthorizationResponse": {
+    "type": "object",
+    "properties": {
+      "authorization_url": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "authorization_url"
+    ]
+  },
+  "ExchangeAppGithubAuthorizationRequest": {
+    "type": "object",
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "state": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "code",
+      "state"
+    ]
+  },
+  "AppGithubRepositoriesQuery": {
+    "type": "object",
+    "properties": {
+      "connection_id": {
+        "type": "string",
+        "minLength": 1
+      },
+      "installation_id": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "required": [
+      "connection_id",
+      "installation_id"
+    ]
+  },
+  "AppGithubInstallation": {
+    "type": "object",
+    "properties": {
+      "id": {
+        "type": "string"
+      },
+      "account_login": {
+        "type": "string"
+      },
+      "account_type": {
+        "type": "string"
+      },
+      "repository_selection": {
+        "type": "string",
+        "enum": [
+          "all",
+          "selected"
+        ]
+      }
+    },
+    "required": [
+      "id",
+      "account_login",
+      "repository_selection"
+    ]
+  },
+  "AppGithubAccount": {
+    "type": "object",
+    "properties": {
+      "login": {
+        "type": "string"
+      },
+      "account_type": {
+        "type": "string"
+      },
+      "avatar_url": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "login",
+      "account_type"
+    ]
+  },
+  "ExchangeAppGithubAuthorizationResponse": {
+    "type": "object",
+    "properties": {
+      "connection_id": {
+        "type": "string"
+      },
+      "installations": {
+        "type": "array",
+        "items": {
+          "$ref": "#/components/schemas/AppGithubInstallation"
+        }
+      },
+      "accounts": {
+        "type": "array",
+        "items": {
+          "$ref": "#/components/schemas/AppGithubAccount"
+        }
+      }
+    },
+    "required": [
+      "connection_id",
+      "installations",
+      "accounts"
+    ]
+  },
+  "AppGithubRepository": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string"
+      },
+      "full_name": {
+        "type": "string"
+      },
+      "private": {
+        "type": "boolean"
+      },
+      "default_branch": {
+        "type": "string"
+      },
+      "html_url": {
+        "type": "string"
+      }
+    },
+    "required": [
+      "name",
+      "full_name",
+      "private",
+      "default_branch",
+      "html_url"
+    ]
+  },
+  "AppGithubRepositoryCreation": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 100,
+        "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$",
+        "description": "Name of the empty GitHub repository to create in the verified installation."
+      },
+      "private": {
+        "type": "boolean",
+        "description": "Create a private repository. Defaults to true when omitted."
+      }
+    },
+    "required": [
+      "name"
+    ]
+  },
+  "AppGithubRepositoryList": {
+    "type": "object",
+    "properties": {
+      "repositories": {
+        "type": "array",
+        "items": {
+          "$ref": "#/components/schemas/AppGithubRepository"
+        }
+      }
+    },
+    "required": [
+      "repositories"
+    ]
+  },
+  "AppGithubRepositorySetupQuery": {
+    "type": "object",
+    "properties": {
+      "connection_id": {
+        "type": "string",
+        "minLength": 1
+      },
+      "installation_id": {
+        "type": "string",
+        "minLength": 1
+      },
+      "repository": {
+        "type": "string",
+        "minLength": 1
+      },
+      "branch": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "required": [
+      "connection_id",
+      "installation_id",
+      "repository",
+      "branch"
+    ]
+  },
+  "AppGithubBranchState": {
+    "type": "object",
+    "properties": {
+      "name": {
+        "type": "string"
+      },
+      "exists": {
+        "type": "boolean"
+      },
+      "empty": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "name",
+      "exists",
+      "empty"
+    ]
+  },
+  "AppGithubRepositorySetup": {
+    "type": "object",
+    "properties": {
+      "default_branch": {
+        "type": "string"
+      },
+      "branches": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "selected_branch": {
+        "$ref": "#/components/schemas/AppGithubBranchState"
+      }
+    },
+    "required": [
+      "default_branch",
+      "branches",
+      "selected_branch"
+    ],
+    "description": "Branch choices and write-safety state for a verified GitHub repository."
+  },
+  "AppScaffoldSourceMode": {
+    "type": "string",
+    "enum": [
+      "generate",
+      "existing"
+    ],
+    "description": "How App Builder should use a connected source repository. `generate` writes a starter app to an empty branch; `existing` only binds the repository."
+  },
   "StartAppScaffoldRequest": {
     "type": "object",
     "properties": {
@@ -19691,6 +20470,22 @@
       "create_version": {
         "type": "boolean",
         "description": "Start an initial app version build after the source has been pushed. Defaults to true."
+      },
+      "source_mode": {
+        "$ref": "#/components/schemas/AppScaffoldSourceMode",
+        "description": "Explicit source setup behavior for external repositories. Omit to retain the legacy automatic behavior."
+      },
+      "source": {
+        "$ref": "#/components/schemas/AppSourceConfig",
+        "description": "Source repository to bind to the app. Omit to create and scaffold a Vertesia-managed repository."
+      },
+      "github_connection_id": {
+        "type": "string",
+        "description": "Short-lived proof that the current user verified the selected GitHub installation."
+      },
+      "github_repository_creation": {
+        "$ref": "#/components/schemas/AppGithubRepositoryCreation",
+        "description": "Create an empty repository in the verified GitHub installation before generating the app source."
       }
     },
     "required": [
@@ -20123,6 +20918,9 @@
         "type": "string",
         "description": "The collection name"
       },
+      "collection_id": {
+        "type": "string"
+      },
       "description": {
         "type": "string",
         "description": "Optional collection description"
@@ -20585,6 +21383,54 @@
       "app_id": {
         "type": "string"
       },
+      "instance_key": {
+        "type": "string",
+        "pattern": "^[a-z][a-z0-9_-]{0,31}$"
+      },
+      "display_name": {
+        "type": "string",
+        "maxLength": 120,
+        "description": "Optional instance label. Send an empty string to clear the saved label; omit to preserve it."
+      },
+      "namespace_overrides": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string",
+          "maxLength": 24,
+          "pattern": "^[a-z]([a-z0-9]|_[a-z0-9])*_?$"
+        }
+      },
+      "mcp_shared_parameters": {
+        "type": "object",
+        "additionalProperties": {
+          "anyOf": [
+            {
+              "type": "string"
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "description": "Shared MCP parameter overrides. Omitted values are retained; null clears an override or restores its default."
+      },
+      "mcp_parameters": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "object",
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        },
+        "description": "Installation parameter overrides by MCP collection id. Omit to preserve; null clears an override. Secret inputs are write-only."
+      },
       "settings": {
         "type": "object",
         "additionalProperties": true
@@ -20628,6 +21474,18 @@
     ],
     "additionalProperties": false
   },
+  "AppInstanceAvailability": {
+    "type": "object",
+    "properties": {
+      "enabled": {
+        "type": "boolean"
+      }
+    },
+    "required": [
+      "enabled"
+    ],
+    "additionalProperties": false
+  },
   "AppDevelopmentTaskDetails": {
     "type": "object",
     "properties": {
@@ -23013,15 +23871,47 @@
     "additionalProperties": false,
     "description": "Dashboard definition contributed by an app package.\n\nApp dashboard IDs are local to the app. The platform exposes them as `app:<app_name>:<id>` when listing or retrieving dashboards."
   },
+  "AppOAuthClientConfig": {
+    "type": "object",
+    "properties": {
+      "redirect_uris": {
+        "minItems": 1,
+        "type": "array",
+        "items": {
+          "type": "string",
+          "format": "uri"
+        }
+      }
+    },
+    "required": [
+      "redirect_uris"
+    ],
+    "additionalProperties": false,
+    "description": "Standalone public PKCE OAuth. Installation automatically provisions an app client with these exact callback URLs."
+  },
   "AppManifestData": {
     "type": "object",
     "properties": {
+      "parameters": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9_]*$"
+        },
+        "additionalProperties": {
+          "$ref": "#/components/schemas/McpConnectionParameter"
+        },
+        "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+      },
       "oauth_scopes": {
         "type": "array",
         "items": {
           "type": "string"
         }
       },
+      "oauth_client": {
+        "$ref": "#/components/schemas/AppOAuthClientConfig"
+      },
       "name": {
         "type": "string",
         "description": "The name of the app, used as the id in the system. Must be in kebab case (e.g. my-app)."
@@ -23152,12 +24042,26 @@
   "UpdateAppPayload": {
     "type": "object",
     "properties": {
+      "parameters": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9_]*$"
+        },
+        "additionalProperties": {
+          "$ref": "#/components/schemas/McpConnectionParameter"
+        },
+        "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+      },
       "oauth_scopes": {
         "type": "array",
         "items": {
           "type": "string"
         }
       },
+      "oauth_client": {
+        "$ref": "#/components/schemas/AppOAuthClientConfig"
+      },
       "name": {
         "type": "string",
         "description": "The name of the app, used as the id in the system. Must be in kebab case (e.g. my-app)."
@@ -23294,12 +24198,26 @@
   "AppManifest": {
     "type": "object",
     "properties": {
+      "parameters": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9_]*$"
+        },
+        "additionalProperties": {
+          "$ref": "#/components/schemas/McpConnectionParameter"
+        },
+        "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+      },
       "oauth_scopes": {
         "type": "array",
         "items": {
           "type": "string"
         }
       },
+      "oauth_client": {
+        "$ref": "#/components/schemas/AppOAuthClientConfig"
+      },
       "edit_revision": {
         "type": "integer",
         "minimum": 1,
@@ -24501,6 +25419,9 @@
   "AppPackage": {
     "type": "object",
     "properties": {
+      "oauth_client": {
+        "$ref": "#/components/schemas/AppOAuthClientConfig"
+      },
       "oauth_scopes": {
         "type": "array",
         "items": {
@@ -24623,9 +25544,82 @@
       "project": {
         "type": "string"
       },
+      "instance_key": {
+        "type": "string"
+      },
+      "display_name": {
+        "type": "string"
+      },
+      "installation_version": {
+        "type": "number",
+        "const": 1
+      },
+      "namespace_overrides": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        }
+      },
+      "reserved_namespaces": {
+        "minItems": 1,
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "namespace_conflicts": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
       "manifest": {
         "type": "string"
       },
+      "mcp_configuration": {
+        "type": "object",
+        "properties": {
+          "revision": {
+            "type": "string"
+          },
+          "values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            }
+          },
+          "configured_secrets": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "shared_values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            }
+          },
+          "configured_shared_secrets": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "revision",
+          "values",
+          "configured_secrets"
+        ],
+        "additionalProperties": false
+      },
       "oauth_approval": {
         "type": "object",
         "properties": {
@@ -24649,6 +25643,9 @@
         ],
         "additionalProperties": false
       },
+      "oauth_client_id": {
+        "type": "string"
+      },
       "settings": {
         "type": "object",
         "additionalProperties": true
@@ -24715,6 +25712,79 @@
       "project": {
         "type": "string"
       },
+      "instance_key": {
+        "type": "string"
+      },
+      "display_name": {
+        "type": "string"
+      },
+      "installation_version": {
+        "type": "number",
+        "const": 1
+      },
+      "namespace_overrides": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        }
+      },
+      "reserved_namespaces": {
+        "minItems": 1,
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "namespace_conflicts": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "mcp_configuration": {
+        "type": "object",
+        "properties": {
+          "revision": {
+            "type": "string"
+          },
+          "values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            }
+          },
+          "configured_secrets": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "shared_values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            }
+          },
+          "configured_shared_secrets": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "revision",
+          "values",
+          "configured_secrets"
+        ],
+        "additionalProperties": false
+      },
       "oauth_approval": {
         "type": "object",
         "properties": {
@@ -24738,6 +25808,9 @@
         ],
         "additionalProperties": false
       },
+      "oauth_client_id": {
+        "type": "string"
+      },
       "settings": {
         "type": "object",
         "additionalProperties": true
@@ -24808,6 +25881,79 @@
       "project": {
         "type": "string"
       },
+      "instance_key": {
+        "type": "string"
+      },
+      "display_name": {
+        "type": "string"
+      },
+      "installation_version": {
+        "type": "number",
+        "const": 1
+      },
+      "namespace_overrides": {
+        "type": "object",
+        "additionalProperties": {
+          "type": "string"
+        }
+      },
+      "reserved_namespaces": {
+        "minItems": 1,
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "namespace_conflicts": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        }
+      },
+      "mcp_configuration": {
+        "type": "object",
+        "properties": {
+          "revision": {
+            "type": "string"
+          },
+          "values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "object",
+              "additionalProperties": {
+                "type": "string"
+              }
+            }
+          },
+          "configured_secrets": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "shared_values": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            }
+          },
+          "configured_shared_secrets": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          }
+        },
+        "required": [
+          "revision",
+          "values",
+          "configured_secrets"
+        ],
+        "additionalProperties": false
+      },
       "oauth_approval": {
         "type": "object",
         "properties": {
@@ -24831,6 +25977,9 @@
         ],
         "additionalProperties": false
       },
+      "oauth_client_id": {
+        "type": "string"
+      },
       "settings": {
         "type": "object",
         "additionalProperties": true
@@ -26550,10 +27699,14 @@
         ]
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       }
     },
     "additionalProperties": false
@@ -26943,10 +28096,14 @@
         "type": "boolean"
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       }
     },
     "additionalProperties": false
@@ -26967,10 +28124,14 @@
         "type": "boolean"
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       }
     },
     "additionalProperties": false
@@ -28314,6 +29475,12 @@
       "comment": {
         "type": "string",
         "description": "Optional publish note."
+      },
+      "idempotency_key": {
+        "type": "string",
+        "minLength": 1,
+        "maxLength": 256,
+        "description": "Client-chosen key that makes this request safe to retry. Publishing is otherwise not idempotent: a repeat of a publish that already succeeded is rejected because the revision is no longer a draft. When the revision was published by a request with the same key and the same body, the repeat returns that revision instead. Reusing the key with a different body is rejected with 409. The key is bound to the revision it published."
       }
     },
     "required": [
@@ -34174,10 +35341,14 @@
         "$ref": "#/components/schemas/CollectionStatus"
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "name": {
         "type": "string"
@@ -34363,10 +35534,14 @@
         "type": "string"
       },
       "limit": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       },
       "offset": {
-        "type": "number"
+        "type": "number",
+        "minimum": 0,
+        "multipleOf": 1
       }
     }
   },
@@ -36458,10 +37633,14 @@
       },
       "limit": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Maximum number of results (default: 50)"
       },
       "offset": {
         "type": "number",
+        "minimum": 0,
+        "multipleOf": 1,
         "description": "Offset for pagination"
       },
       "cursor": {