@vertesia/common 1.6.0-dev.20261014.015055Z → 1.6.0-dev.20261022.120426Z

package/lib/api-contract/components.generated.json

@@ -1797,102 +1797,6 @@
         },
         "additionalProperties": false
     },
-    "ApiKeyReadResponse": {
-        "type": "object",
-        "properties": {
-            "id": {
-                "type": "string"
-            },
-            "name": {
-                "type": "string"
-            },
-            "type": {
-                "$ref": "#/components/schemas/ApiKeyTypes"
-            },
-            "role": {
-                "$ref": "#/components/schemas/SystemRoles"
-            },
-            "maskedValue": {
-                "type": "string"
-            },
-            "can_retrieve_value": {
-                "type": "boolean"
-            },
-            "account": {
-                "type": "string"
-            },
-            "project": {
-                "$ref": "#/components/schemas/ProjectRef"
-            },
-            "enabled": {
-                "type": "boolean"
-            },
-            "scim_provisioning": {
-                "type": "boolean",
-                "description": "Organization-wide SCIM provisioning credential. Only account administrators may create or manage these keys. May be enabled by account administrators on existing keys; disable or delete to revoke access."
-            },
-            "created_by": {
-                "type": "string"
-            },
-            "updated_by": {
-                "type": "string"
-            },
-            "created_at": {
-                "type": "string",
-                "format": "date-time"
-            },
-            "updated_at": {
-                "type": "string",
-                "format": "date-time"
-            },
-            "expires_at": {
-                "type": "string",
-                "format": "date-time"
-            },
-            "properties": {
-                "type": "object",
-                "additionalProperties": true,
-                "description": "Custom properties for dynamic permission matching (PrincipalSet / $principal. conditions)"
-            },
-            "clearance": {
-                "type": "number",
-                "description": "BLP clearance level — the maximum document sensitivity the key can access"
-            },
-            "compartments": {
-                "type": "array",
-                "items": {
-                    "type": "string"
-                },
-                "description": "Compartments the key belongs to — restricts access to matching documents"
-            },
-            "value": {
-                "type": "string"
-            }
-        },
-        "required": [
-            "id",
-            "name",
-            "type",
-            "role",
-            "account",
-            "project",
-            "enabled",
-            "created_by",
-            "updated_by",
-            "created_at",
-            "updated_at"
-        ],
-        "additionalProperties": false
-    },
-    "ApiKeyReadQuery": {
-        "type": "object",
-        "properties": {
-            "withValue": {
-                "type": "boolean"
-            }
-        },
-        "additionalProperties": false
-    },
     "CreateApiKeyPayload": {
         "type": "object",
         "properties": {
@@ -4547,11 +4451,7 @@
                 }
             },
             "effort": {
-                "type": "string",
-                "enum": [
-                    "none",
-                    "high"
-                ]
+                "$ref": "#/components/schemas/ReasoningEffort"
             },
             "random_seed": {
                 "type": "integer",
@@ -5852,6 +5752,23 @@
                 "type": "string",
                 "const": "mcp"
             },
+            "parameters": {
+                "type": "object",
+                "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "additionalProperties": {
+                    "$ref": "#/components/schemas/McpConnectionParameter"
+                }
+            },
+            "headers": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                },
+                "description": "HTTP header templates. Reference declared installation parameters with {{name}}. Never embed secrets."
+            },
             "id": {
                 "type": "string",
                 "description": "Stable identifier for this collection. Used to key oauth_bindings on AppInstallation — protects against collection renames. Required for new manifests."
@@ -5913,6 +5830,50 @@
         ],
         "description": "Authentication type for tool collections.\n- 'none': connect directly without credentials for MCP collections; does not disable authentication for Vertesia SDK collections\n- 'oauth': the runtime resolves a per-user or per-project OAuth access token\n- 'api_key': a static key held in the project's secret store is sent as the RFC 6750 bearer token (`Authorization: Bearer <key>`)\n- 'other' or omitted: use the legacy provider connection-details flow for MCP collections"
     },
+    "McpPublicParameter": {
+        "type": "object",
+        "properties": {
+            "title": {
+                "type": "string"
+            },
+            "description": {
+                "type": "string"
+            },
+            "required": {
+                "type": "boolean"
+            },
+            "type": {
+                "type": "string",
+                "const": "string"
+            },
+            "default": {
+                "type": "string"
+            }
+        },
+        "additionalProperties": false
+    },
+    "McpSecretParameter": {
+        "type": "object",
+        "properties": {
+            "title": {
+                "type": "string"
+            },
+            "description": {
+                "type": "string"
+            },
+            "required": {
+                "type": "boolean"
+            },
+            "type": {
+                "type": "string",
+                "const": "secret"
+            }
+        },
+        "required": [
+            "type"
+        ],
+        "additionalProperties": false
+    },
     "MCPOAuthConfig": {
         "type": "object",
         "properties": {
@@ -6019,6 +5980,16 @@
         "additionalProperties": false,
         "description": "Vertesia SDK tool collection configuration"
     },
+    "McpConnectionParameter": {
+        "anyOf": [
+            {
+                "$ref": "#/components/schemas/McpPublicParameter"
+            },
+            {
+                "$ref": "#/components/schemas/McpSecretParameter"
+            }
+        ]
+    },
     "ToolCollectionObject": {
         "oneOf": [
             {
@@ -6160,9 +6131,21 @@
     "AppGitSourceConfig": {
         "type": "object",
         "properties": {
+            "provider": {
+                "$ref": "#/components/schemas/AppGitSourceProvider",
+                "description": "Repository provider. Missing values are treated as `vertesia` for apps created before provider support."
+            },
             "url": {
                 "type": "string"
             },
+            "installation_id": {
+                "type": "string",
+                "description": "Verified GitHub App installation id. Required when provider is `github`."
+            },
+            "repository": {
+                "type": "string",
+                "description": "GitHub repository in `owner/name` form. Required when provider is `github`."
+            },
             "default_branch": {
                 "type": "string"
             },
@@ -6175,6 +6158,13 @@
         },
         "additionalProperties": false
     },
+    "AppGitSourceProvider": {
+        "type": "string",
+        "enum": [
+            "vertesia",
+            "github"
+        ]
+    },
     "AppSourceConfig": {
         "type": "object",
         "properties": {
@@ -6201,9 +6191,18 @@
             "git": {
                 "type": "object",
                 "properties": {
+                    "provider": {
+                        "$ref": "#/components/schemas/AppGitSourceProvider"
+                    },
                     "url": {
                         "type": "string"
                     },
+                    "installation_id": {
+                        "type": "string"
+                    },
+                    "repository": {
+                        "type": "string"
+                    },
                     "default_branch": {
                         "type": "string"
                     },
@@ -6520,7 +6519,8 @@
         "enum": [
             "none",
             "client_secret_post",
-            "client_secret_basic"
+            "client_secret_basic",
+            "private_key_jwt"
         ]
     },
     "OAuthGrantType": {
@@ -6528,7 +6528,8 @@
         "enum": [
             "authorization_code",
             "refresh_token",
-            "urn:ietf:params:oauth:grant-type:device_code"
+            "urn:ietf:params:oauth:grant-type:device_code",
+            "urn:ietf:params:oauth:grant-type:token-exchange"
         ]
     },
     "OAuthResponseType": {
@@ -6622,6 +6623,12 @@
                     "type": "string"
                 }
             },
+            "token_endpoint_auth_signing_alg_values_supported": {
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
             "scopes_supported": {
                 "type": "array",
                 "items": {
@@ -6791,6 +6798,9 @@
             "client_name": {
                 "type": "string"
             },
+            "app_id": {
+                "type": "string"
+            },
             "client_metadata": {
                 "$ref": "#/components/schemas/OAuthClientDisplayMetadata"
             },
@@ -7064,9 +7074,372 @@
             "expires_in"
         ]
     },
+    "OidcFederationConnectionPayload": {
+        "type": "object",
+        "properties": {
+            "name": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 200
+            },
+            "issuer": {
+                "type": "string",
+                "format": "uri"
+            },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
+            "external_id_claim": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "pattern": "\\S",
+                "description": "Exact top-level verified token claim matched to SCIM externalId within the owning provisioning account."
+            },
+            "allowed_audiences": {
+                "minItems": 1,
+                "maxItems": 20,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                }
+            },
+            "allowed_algorithms": {
+                "minItems": 1,
+                "maxItems": 2,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "enum": [
+                        "RS256",
+                        "ES256"
+                    ]
+                }
+            },
+            "subject_token_type": {
+                "type": "string",
+                "enum": [
+                    "urn:ietf:params:oauth:token-type:jwt",
+                    "urn:ietf:params:oauth:token-type:id_token",
+                    "urn:ietf:params:oauth:token-type:access_token"
+                ]
+            },
+            "required_claims": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                },
+                "description": "Exact string matches against verified top-level IdP claims, such as tenant or azp."
+            },
+            "all_projects": {
+                "type": "boolean",
+                "description": "Explicitly allow all current and future projects in the owning organization, subject to the user’s current access. Defaults to false for existing allowlists. When true, allowed_project_ids must be empty."
+            },
+            "allowed_project_ids": {
+                "maxItems": 100,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "pattern": "^[a-fA-F0-9]{24}$"
+                },
+                "description": "Explicit project allowlist. Must contain 1–100 projects unless all_projects is true."
+            },
+            "allowed_client_ids": {
+                "minItems": 1,
+                "maxItems": 20,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 256
+                },
+                "description": "When set, require authentication by one of these account-owned confidential OAuth clients. Omit to allow exchanges without separate client authentication."
+            },
+            "allowed_scopes": {
+                "minItems": 1,
+                "maxItems": 100,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                },
+                "description": "Optional restriction on delegable Vertesia permissions, excluding account:admin. Omit to use the user’s current permissions. An explicit list further restricts the grant."
+            },
+            "max_token_ttl_seconds": {
+                "type": "integer",
+                "minimum": 30,
+                "maximum": 300
+            },
+            "max_subject_token_age_seconds": {
+                "type": "integer",
+                "minimum": 30,
+                "maximum": 86400,
+                "description": "Maximum age since the signed iat claim. Defaults to 3600 seconds; 60 seconds of clock tolerance applies."
+            },
+            "enabled": {
+                "type": "boolean"
+            }
+        },
+        "required": [
+            "name",
+            "issuer",
+            "external_id_claim",
+            "allowed_audiences",
+            "allowed_algorithms",
+            "subject_token_type",
+            "allowed_project_ids",
+            "max_token_ttl_seconds",
+            "enabled"
+        ],
+        "additionalProperties": false
+    },
+    "OidcFederationConnection": {
+        "type": "object",
+        "properties": {
+            "name": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 200
+            },
+            "issuer": {
+                "type": "string",
+                "format": "uri"
+            },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
+            "external_id_claim": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "pattern": "\\S",
+                "description": "Exact top-level verified token claim matched to SCIM externalId within the owning provisioning account."
+            },
+            "allowed_audiences": {
+                "minItems": 1,
+                "maxItems": 20,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                }
+            },
+            "allowed_algorithms": {
+                "minItems": 1,
+                "maxItems": 2,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "enum": [
+                        "RS256",
+                        "ES256"
+                    ]
+                }
+            },
+            "subject_token_type": {
+                "type": "string",
+                "enum": [
+                    "urn:ietf:params:oauth:token-type:jwt",
+                    "urn:ietf:params:oauth:token-type:id_token",
+                    "urn:ietf:params:oauth:token-type:access_token"
+                ]
+            },
+            "required_claims": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                },
+                "description": "Exact string matches against verified top-level IdP claims, such as tenant or azp."
+            },
+            "all_projects": {
+                "type": "boolean",
+                "description": "Explicitly allow all current and future projects in the owning organization, subject to the user’s current access. Defaults to false for existing allowlists. When true, allowed_project_ids must be empty."
+            },
+            "allowed_project_ids": {
+                "maxItems": 100,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "pattern": "^[a-fA-F0-9]{24}$"
+                },
+                "description": "Explicit project allowlist. Must contain 1–100 projects unless all_projects is true."
+            },
+            "allowed_client_ids": {
+                "minItems": 1,
+                "maxItems": 20,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 256
+                },
+                "description": "When set, require authentication by one of these account-owned confidential OAuth clients. Omit to allow exchanges without separate client authentication."
+            },
+            "allowed_scopes": {
+                "minItems": 1,
+                "maxItems": 100,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "minLength": 1
+                },
+                "description": "Optional restriction on delegable Vertesia permissions, excluding account:admin. Omit to use the user’s current permissions. An explicit list further restricts the grant."
+            },
+            "max_token_ttl_seconds": {
+                "type": "integer",
+                "minimum": 30,
+                "maximum": 300
+            },
+            "max_subject_token_age_seconds": {
+                "type": "integer",
+                "minimum": 30,
+                "maximum": 86400
+            },
+            "enabled": {
+                "type": "boolean"
+            },
+            "id": {
+                "type": "string",
+                "pattern": "^[a-fA-F0-9]{24}$"
+            },
+            "account_id": {
+                "type": "string",
+                "pattern": "^[a-fA-F0-9]{24}$"
+            }
+        },
+        "required": [
+            "name",
+            "issuer",
+            "external_id_claim",
+            "allowed_audiences",
+            "allowed_algorithms",
+            "subject_token_type",
+            "allowed_project_ids",
+            "max_token_ttl_seconds",
+            "max_subject_token_age_seconds",
+            "enabled",
+            "id",
+            "account_id"
+        ],
+        "additionalProperties": false
+    },
+    "OidcFederationConnectionArray": {
+        "type": "array",
+        "items": {
+            "$ref": "#/components/schemas/OidcFederationConnection"
+        }
+    },
+    "OAuthTokenExchangeRequest": {
+        "type": "object",
+        "properties": {
+            "grant_type": {
+                "type": "string",
+                "const": "urn:ietf:params:oauth:grant-type:token-exchange"
+            },
+            "subject_token": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 65536
+            },
+            "subject_token_type": {
+                "type": "string",
+                "enum": [
+                    "urn:ietf:params:oauth:token-type:jwt",
+                    "urn:ietf:params:oauth:token-type:id_token",
+                    "urn:ietf:params:oauth:token-type:access_token"
+                ]
+            },
+            "requested_token_type": {
+                "type": "string",
+                "const": "urn:ietf:params:oauth:token-type:access_token"
+            },
+            "federation_connection_id": {
+                "type": "string",
+                "pattern": "^[a-fA-F0-9]{24}$"
+            },
+            "client_id": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256
+            },
+            "client_secret": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 4096
+            },
+            "client_assertion": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 16384
+            },
+            "client_assertion_type": {
+                "type": "string",
+                "const": "urn:ietf:params:oauth:client-assertion-type:jwt-bearer"
+            },
+            "project_id": {
+                "type": "string",
+                "pattern": "^[a-fA-F0-9]{24}$"
+            },
+            "resource": {
+                "type": "string",
+                "minLength": 1
+            },
+            "scope": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 4096,
+                "description": "Optional space-separated permission subset. Omit to use current user permissions within the connection policy."
+            }
+        },
+        "required": [
+            "grant_type",
+            "subject_token",
+            "subject_token_type",
+            "federation_connection_id",
+            "project_id",
+            "resource"
+        ],
+        "additionalProperties": false
+    },
+    "OAuthTokenExchangeResponse": {
+        "type": "object",
+        "properties": {
+            "access_token": {
+                "type": "string"
+            },
+            "token_type": {
+                "type": "string",
+                "const": "Bearer"
+            },
+            "expires_in": {
+                "type": "number"
+            },
+            "scope": {
+                "type": "string"
+            },
+            "issued_token_type": {
+                "type": "string",
+                "const": "urn:ietf:params:oauth:token-type:access_token"
+            }
+        },
+        "required": [
+            "access_token",
+            "token_type",
+            "expires_in",
+            "issued_token_type"
+        ],
+        "additionalProperties": false
+    },
     "OAuthClient": {
         "type": "object",
         "properties": {
+            "app_id": {
+                "type": "string",
+                "description": "App associated with this client. Authorization requires an installation explicitly enabling this client and current user app access."
+            },
             "client_name": {
                 "type": "string"
             },
@@ -7094,6 +7467,10 @@
             "token_endpoint_auth_method": {
                 "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
             },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
             "allowed_scopes": {
                 "type": "array",
                 "items": {
@@ -7168,6 +7545,10 @@
     "OAuthClientCreateResponse": {
         "type": "object",
         "properties": {
+            "app_id": {
+                "type": "string",
+                "description": "App associated with this client. Authorization requires an installation explicitly enabling this client and current user app access."
+            },
             "client_name": {
                 "type": "string"
             },
@@ -7195,6 +7576,10 @@
             "token_endpoint_auth_method": {
                 "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
             },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
             "allowed_scopes": {
                 "type": "array",
                 "items": {
@@ -7308,6 +7693,10 @@
             "token_endpoint_auth_method": {
                 "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
             },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
             "allowed_scopes": {
                 "type": "array",
                 "items": {
@@ -7370,6 +7759,10 @@
             "token_endpoint_auth_method": {
                 "$ref": "#/components/schemas/OAuthTokenEndpointAuthMethod"
             },
+            "jwks_uri": {
+                "type": "string",
+                "format": "uri"
+            },
             "allowed_scopes": {
                 "type": "array",
                 "items": {
@@ -7385,6 +7778,10 @@
             "status": {
                 "$ref": "#/components/schemas/OAuthClientStatus"
             },
+            "revoke_previous_client_secret": {
+                "type": "boolean",
+                "description": "Immediately revoke the previous rotation secret while retaining the current secret."
+            },
             "project_binding_mode": {
                 "$ref": "#/components/schemas/OAuthProjectBindingMode"
             },
@@ -10475,10 +10872,14 @@
         "type": "object",
         "properties": {
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "status": {
                 "$ref": "#/components/schemas/InteractionStatus"
@@ -12582,7 +12983,8 @@
             "fallback_coordination_unavailable",
             "fallback_wait_timeout",
             "minimum_token_rejection",
-            "unusable_resource_recreated"
+            "unusable_resource_recreated",
+            "unsupported_model"
         ]
     },
     "InteractionExecutionError": {
@@ -13172,6 +13574,16 @@
         "additionalProperties": false,
         "description": "Interaction execution payload for creating a new run It uses interaction field (from NamedInteractionExecutionPayload) to pass the interaction ID to run"
     },
+    "GetRunQuery": {
+        "type": "object",
+        "properties": {
+            "include_prompt": {
+                "type": "boolean",
+                "description": "Whether the run includes the rendered `prompt` sent to the model. Defaults to true. Pass false when the caller does not read the prompt: it can be large (for example when media is inlined), and it is then not loaded from storage."
+            }
+        },
+        "additionalProperties": false
+    },
     "SortOrder": {
         "type": "string",
         "enum": [
@@ -13292,13 +13704,13 @@
         "properties": {
             "limit": {
                 "type": "integer",
-                "minimum": -9007199254740991,
+                "minimum": 0,
                 "maximum": 9007199254740991,
                 "description": "Maximum number of runs to return."
             },
             "offset": {
                 "type": "integer",
-                "minimum": -9007199254740991,
+                "minimum": 0,
                 "maximum": 9007199254740991,
                 "description": "Number of runs to skip."
             },
@@ -13382,10 +13794,14 @@
                 "$ref": "#/components/schemas/RunSearchQuery"
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "select": {
                 "type": "string"
@@ -14309,11 +14725,25 @@
         "additionalProperties": false,
         "description": "A retrieved execution run whose completion result is reported in the pre-versioning format. A run that has no result yet is returned unchanged, so `result` may still hold the current array form."
     },
+    "ExecuteNamedInteractionQuery": {
+        "type": "object",
+        "properties": {
+            "include_prompt": {
+                "type": "boolean",
+                "description": "Whether the synchronous execution result includes the rendered `prompt` sent to the model. Defaults to true. Pass false when the caller does not read the prompt: it can be large (for example when media is inlined). It is still stored with the run unless run data storage is restricted."
+            }
+        },
+        "additionalProperties": false
+    },
     "ExecuteInteractionByEndpointQuery": {
         "type": "object",
         "properties": {
             "tag": {
                 "type": "string"
+            },
+            "include_prompt": {
+                "type": "boolean",
+                "description": "Whether the synchronous execution result includes the rendered `prompt` sent to the model. Defaults to true. Pass false when the caller does not read the prompt: it can be large (for example when media is inlined). It is still stored with the run unless run data storage is restricted."
             }
         },
         "additionalProperties": false
@@ -14417,6 +14847,12 @@
                 },
                 "description": "An array of endpoint URLs to be notified upon execution"
             },
+            "idempotency_key": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "description": "Client-chosen key, unique per intended run, that makes this request safe to retry. A repeat of the request with the same key and the same body returns the agent run the first request started instead of starting another. Reusing a key with a different body is rejected with 409, and a repeat that arrives while the first request is still starting the run may be answered with 503 and `Retry-After`. Keys are scoped to the project and stay bound to their run for as long as it exists; once the run is deleted, the same key starts a new one."
+            },
             "task_queue": {
                 "type": "string"
             },
@@ -15554,10 +15990,14 @@
             },
             "limit": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Maximum number of prompts to return. Defaults to 100."
             },
             "offset": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Number of prompts to skip."
             },
             "role": {
@@ -17387,10 +17827,14 @@
             },
             "limit": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Pagination: number of items to return (default 50, max 200)"
             },
             "offset": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Pagination: offset"
             }
         },
@@ -19657,6 +20101,275 @@
         },
         "additionalProperties": false
     },
+    "AppGithubConfiguration": {
+        "type": "object",
+        "properties": {
+            "enabled": {
+                "type": "boolean"
+            },
+            "app_slug": {
+                "type": "string"
+            },
+            "install_url": {
+                "type": "string"
+            },
+            "relay_url": {
+                "type": "string"
+            }
+        },
+        "required": [
+            "enabled"
+        ]
+    },
+    "StartAppGithubAuthorizationResponse": {
+        "type": "object",
+        "properties": {
+            "authorization_url": {
+                "type": "string"
+            }
+        },
+        "required": [
+            "authorization_url"
+        ]
+    },
+    "ExchangeAppGithubAuthorizationRequest": {
+        "type": "object",
+        "properties": {
+            "code": {
+                "type": "string"
+            },
+            "state": {
+                "type": "string"
+            }
+        },
+        "required": [
+            "code",
+            "state"
+        ]
+    },
+    "AppGithubRepositoriesQuery": {
+        "type": "object",
+        "properties": {
+            "connection_id": {
+                "type": "string",
+                "minLength": 1
+            },
+            "installation_id": {
+                "type": "string",
+                "minLength": 1
+            }
+        },
+        "required": [
+            "connection_id",
+            "installation_id"
+        ]
+    },
+    "AppGithubInstallation": {
+        "type": "object",
+        "properties": {
+            "id": {
+                "type": "string"
+            },
+            "account_login": {
+                "type": "string"
+            },
+            "account_type": {
+                "type": "string"
+            },
+            "repository_selection": {
+                "type": "string",
+                "enum": [
+                    "all",
+                    "selected"
+                ]
+            }
+        },
+        "required": [
+            "id",
+            "account_login",
+            "repository_selection"
+        ]
+    },
+    "AppGithubAccount": {
+        "type": "object",
+        "properties": {
+            "login": {
+                "type": "string"
+            },
+            "account_type": {
+                "type": "string"
+            },
+            "avatar_url": {
+                "type": "string"
+            }
+        },
+        "required": [
+            "login",
+            "account_type"
+        ]
+    },
+    "ExchangeAppGithubAuthorizationResponse": {
+        "type": "object",
+        "properties": {
+            "connection_id": {
+                "type": "string"
+            },
+            "installations": {
+                "type": "array",
+                "items": {
+                    "$ref": "#/components/schemas/AppGithubInstallation"
+                }
+            },
+            "accounts": {
+                "type": "array",
+                "items": {
+                    "$ref": "#/components/schemas/AppGithubAccount"
+                }
+            }
+        },
+        "required": [
+            "connection_id",
+            "installations",
+            "accounts"
+        ]
+    },
+    "AppGithubRepository": {
+        "type": "object",
+        "properties": {
+            "name": {
+                "type": "string"
+            },
+            "full_name": {
+                "type": "string"
+            },
+            "private": {
+                "type": "boolean"
+            },
+            "default_branch": {
+                "type": "string"
+            },
+            "html_url": {
+                "type": "string"
+            }
+        },
+        "required": [
+            "name",
+            "full_name",
+            "private",
+            "default_branch",
+            "html_url"
+        ]
+    },
+    "AppGithubRepositoryCreation": {
+        "type": "object",
+        "properties": {
+            "name": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 100,
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$",
+                "description": "Name of the empty GitHub repository to create in the verified installation."
+            },
+            "private": {
+                "type": "boolean",
+                "description": "Create a private repository. Defaults to true when omitted."
+            }
+        },
+        "required": [
+            "name"
+        ]
+    },
+    "AppGithubRepositoryList": {
+        "type": "object",
+        "properties": {
+            "repositories": {
+                "type": "array",
+                "items": {
+                    "$ref": "#/components/schemas/AppGithubRepository"
+                }
+            }
+        },
+        "required": [
+            "repositories"
+        ]
+    },
+    "AppGithubRepositorySetupQuery": {
+        "type": "object",
+        "properties": {
+            "connection_id": {
+                "type": "string",
+                "minLength": 1
+            },
+            "installation_id": {
+                "type": "string",
+                "minLength": 1
+            },
+            "repository": {
+                "type": "string",
+                "minLength": 1
+            },
+            "branch": {
+                "type": "string",
+                "minLength": 1
+            }
+        },
+        "required": [
+            "connection_id",
+            "installation_id",
+            "repository",
+            "branch"
+        ]
+    },
+    "AppGithubBranchState": {
+        "type": "object",
+        "properties": {
+            "name": {
+                "type": "string"
+            },
+            "exists": {
+                "type": "boolean"
+            },
+            "empty": {
+                "type": "boolean"
+            }
+        },
+        "required": [
+            "name",
+            "exists",
+            "empty"
+        ]
+    },
+    "AppGithubRepositorySetup": {
+        "type": "object",
+        "properties": {
+            "default_branch": {
+                "type": "string"
+            },
+            "branches": {
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "selected_branch": {
+                "$ref": "#/components/schemas/AppGithubBranchState"
+            }
+        },
+        "required": [
+            "default_branch",
+            "branches",
+            "selected_branch"
+        ],
+        "description": "Branch choices and write-safety state for a verified GitHub repository."
+    },
+    "AppScaffoldSourceMode": {
+        "type": "string",
+        "enum": [
+            "generate",
+            "existing"
+        ],
+        "description": "How App Builder should use a connected source repository. `generate` writes a starter app to an empty branch; `existing` only binds the repository."
+    },
     "StartAppScaffoldRequest": {
         "type": "object",
         "properties": {
@@ -19691,6 +20404,22 @@
             "create_version": {
                 "type": "boolean",
                 "description": "Start an initial app version build after the source has been pushed. Defaults to true."
+            },
+            "source_mode": {
+                "$ref": "#/components/schemas/AppScaffoldSourceMode",
+                "description": "Explicit source setup behavior for external repositories. Omit to retain the legacy automatic behavior."
+            },
+            "source": {
+                "$ref": "#/components/schemas/AppSourceConfig",
+                "description": "Source repository to bind to the app. Omit to create and scaffold a Vertesia-managed repository."
+            },
+            "github_connection_id": {
+                "type": "string",
+                "description": "Short-lived proof that the current user verified the selected GitHub installation."
+            },
+            "github_repository_creation": {
+                "$ref": "#/components/schemas/AppGithubRepositoryCreation",
+                "description": "Create an empty repository in the verified GitHub installation before generating the app source."
             }
         },
         "required": [
@@ -20123,6 +20852,9 @@
                 "type": "string",
                 "description": "The collection name"
             },
+            "collection_id": {
+                "type": "string"
+            },
             "description": {
                 "type": "string",
                 "description": "Optional collection description"
@@ -20585,6 +21317,54 @@
             "app_id": {
                 "type": "string"
             },
+            "instance_key": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9_-]{0,31}$"
+            },
+            "display_name": {
+                "type": "string",
+                "maxLength": 120,
+                "description": "Optional instance label. Send an empty string to clear the saved label; omit to preserve it."
+            },
+            "namespace_overrides": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string",
+                    "maxLength": 24,
+                    "pattern": "^[a-z]([a-z0-9]|_[a-z0-9])*_?$"
+                }
+            },
+            "mcp_shared_parameters": {
+                "type": "object",
+                "additionalProperties": {
+                    "anyOf": [
+                        {
+                            "type": "string"
+                        },
+                        {
+                            "type": "null"
+                        }
+                    ]
+                },
+                "description": "Shared MCP parameter overrides. Omitted values are retained; null clears an override or restores its default."
+            },
+            "mcp_parameters": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "object",
+                    "additionalProperties": {
+                        "anyOf": [
+                            {
+                                "type": "string"
+                            },
+                            {
+                                "type": "null"
+                            }
+                        ]
+                    }
+                },
+                "description": "Installation parameter overrides by MCP collection id. Omit to preserve; null clears an override. Secret inputs are write-only."
+            },
             "settings": {
                 "type": "object",
                 "additionalProperties": true
@@ -20628,6 +21408,18 @@
         ],
         "additionalProperties": false
     },
+    "AppInstanceAvailability": {
+        "type": "object",
+        "properties": {
+            "enabled": {
+                "type": "boolean"
+            }
+        },
+        "required": [
+            "enabled"
+        ],
+        "additionalProperties": false
+    },
     "AppDevelopmentTaskDetails": {
         "type": "object",
         "properties": {
@@ -23013,15 +23805,47 @@
         "additionalProperties": false,
         "description": "Dashboard definition contributed by an app package.\n\nApp dashboard IDs are local to the app. The platform exposes them as `app:<app_name>:<id>` when listing or retrieving dashboards."
     },
+    "AppOAuthClientConfig": {
+        "type": "object",
+        "properties": {
+            "redirect_uris": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                    "type": "string",
+                    "format": "uri"
+                }
+            }
+        },
+        "required": [
+            "redirect_uris"
+        ],
+        "additionalProperties": false,
+        "description": "Standalone public PKCE OAuth. Installation automatically provisions an app client with these exact callback URLs."
+    },
     "AppManifestData": {
         "type": "object",
         "properties": {
+            "parameters": {
+                "type": "object",
+                "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "additionalProperties": {
+                    "$ref": "#/components/schemas/McpConnectionParameter"
+                },
+                "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+            },
             "oauth_scopes": {
                 "type": "array",
                 "items": {
                     "type": "string"
                 }
             },
+            "oauth_client": {
+                "$ref": "#/components/schemas/AppOAuthClientConfig"
+            },
             "name": {
                 "type": "string",
                 "description": "The name of the app, used as the id in the system. Must be in kebab case (e.g. my-app)."
@@ -23152,12 +23976,26 @@
     "UpdateAppPayload": {
         "type": "object",
         "properties": {
+            "parameters": {
+                "type": "object",
+                "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "additionalProperties": {
+                    "$ref": "#/components/schemas/McpConnectionParameter"
+                },
+                "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+            },
             "oauth_scopes": {
                 "type": "array",
                 "items": {
                     "type": "string"
                 }
             },
+            "oauth_client": {
+                "$ref": "#/components/schemas/AppOAuthClientConfig"
+            },
             "name": {
                 "type": "string",
                 "description": "The name of the app, used as the id in the system. Must be in kebab case (e.g. my-app)."
@@ -23294,12 +24132,26 @@
     "AppManifest": {
         "type": "object",
         "properties": {
+            "parameters": {
+                "type": "object",
+                "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "additionalProperties": {
+                    "$ref": "#/components/schemas/McpConnectionParameter"
+                },
+                "description": "Shared MCP installation parameters available to every collection. Collection-local names must not overlap."
+            },
             "oauth_scopes": {
                 "type": "array",
                 "items": {
                     "type": "string"
                 }
             },
+            "oauth_client": {
+                "$ref": "#/components/schemas/AppOAuthClientConfig"
+            },
             "edit_revision": {
                 "type": "integer",
                 "minimum": 1,
@@ -24501,6 +25353,9 @@
     "AppPackage": {
         "type": "object",
         "properties": {
+            "oauth_client": {
+                "$ref": "#/components/schemas/AppOAuthClientConfig"
+            },
             "oauth_scopes": {
                 "type": "array",
                 "items": {
@@ -24623,9 +25478,82 @@
             "project": {
                 "type": "string"
             },
+            "instance_key": {
+                "type": "string"
+            },
+            "display_name": {
+                "type": "string"
+            },
+            "installation_version": {
+                "type": "number",
+                "const": 1
+            },
+            "namespace_overrides": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                }
+            },
+            "reserved_namespaces": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "namespace_conflicts": {
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
             "manifest": {
                 "type": "string"
             },
+            "mcp_configuration": {
+                "type": "object",
+                "properties": {
+                    "revision": {
+                        "type": "string"
+                    },
+                    "values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "object",
+                            "additionalProperties": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "configured_secrets": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "shared_values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "string"
+                        }
+                    },
+                    "configured_shared_secrets": {
+                        "type": "array",
+                        "items": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "required": [
+                    "revision",
+                    "values",
+                    "configured_secrets"
+                ],
+                "additionalProperties": false
+            },
             "oauth_approval": {
                 "type": "object",
                 "properties": {
@@ -24649,6 +25577,9 @@
                 ],
                 "additionalProperties": false
             },
+            "oauth_client_id": {
+                "type": "string"
+            },
             "settings": {
                 "type": "object",
                 "additionalProperties": true
@@ -24715,6 +25646,79 @@
             "project": {
                 "type": "string"
             },
+            "instance_key": {
+                "type": "string"
+            },
+            "display_name": {
+                "type": "string"
+            },
+            "installation_version": {
+                "type": "number",
+                "const": 1
+            },
+            "namespace_overrides": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                }
+            },
+            "reserved_namespaces": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "namespace_conflicts": {
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "mcp_configuration": {
+                "type": "object",
+                "properties": {
+                    "revision": {
+                        "type": "string"
+                    },
+                    "values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "object",
+                            "additionalProperties": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "configured_secrets": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "shared_values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "string"
+                        }
+                    },
+                    "configured_shared_secrets": {
+                        "type": "array",
+                        "items": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "required": [
+                    "revision",
+                    "values",
+                    "configured_secrets"
+                ],
+                "additionalProperties": false
+            },
             "oauth_approval": {
                 "type": "object",
                 "properties": {
@@ -24738,6 +25742,9 @@
                 ],
                 "additionalProperties": false
             },
+            "oauth_client_id": {
+                "type": "string"
+            },
             "settings": {
                 "type": "object",
                 "additionalProperties": true
@@ -24808,6 +25815,79 @@
             "project": {
                 "type": "string"
             },
+            "instance_key": {
+                "type": "string"
+            },
+            "display_name": {
+                "type": "string"
+            },
+            "installation_version": {
+                "type": "number",
+                "const": 1
+            },
+            "namespace_overrides": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                }
+            },
+            "reserved_namespaces": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "namespace_conflicts": {
+                "type": "array",
+                "items": {
+                    "type": "string"
+                }
+            },
+            "mcp_configuration": {
+                "type": "object",
+                "properties": {
+                    "revision": {
+                        "type": "string"
+                    },
+                    "values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "object",
+                            "additionalProperties": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "configured_secrets": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "array",
+                            "items": {
+                                "type": "string"
+                            }
+                        }
+                    },
+                    "shared_values": {
+                        "type": "object",
+                        "additionalProperties": {
+                            "type": "string"
+                        }
+                    },
+                    "configured_shared_secrets": {
+                        "type": "array",
+                        "items": {
+                            "type": "string"
+                        }
+                    }
+                },
+                "required": [
+                    "revision",
+                    "values",
+                    "configured_secrets"
+                ],
+                "additionalProperties": false
+            },
             "oauth_approval": {
                 "type": "object",
                 "properties": {
@@ -24831,6 +25911,9 @@
                 ],
                 "additionalProperties": false
             },
+            "oauth_client_id": {
+                "type": "string"
+            },
             "settings": {
                 "type": "object",
                 "additionalProperties": true
@@ -26550,10 +27633,14 @@
                 ]
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             }
         },
         "additionalProperties": false
@@ -26943,10 +28030,14 @@
                 "type": "boolean"
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             }
         },
         "additionalProperties": false
@@ -26967,10 +28058,14 @@
                 "type": "boolean"
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             }
         },
         "additionalProperties": false
@@ -28314,6 +29409,12 @@
             "comment": {
                 "type": "string",
                 "description": "Optional publish note."
+            },
+            "idempotency_key": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "description": "Client-chosen key that makes this request safe to retry. Publishing is otherwise not idempotent: a repeat of a publish that already succeeded is rejected because the revision is no longer a draft. When the revision was published by a request with the same key and the same body, the repeat returns that revision instead. Reusing the key with a different body is rejected with 409. The key is bound to the revision it published."
             }
         },
         "required": [
@@ -34174,10 +35275,14 @@
                 "$ref": "#/components/schemas/CollectionStatus"
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "name": {
                 "type": "string"
@@ -34363,10 +35468,14 @@
                 "type": "string"
             },
             "limit": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             },
             "offset": {
-                "type": "number"
+                "type": "number",
+                "minimum": 0,
+                "multipleOf": 1
             }
         }
     },
@@ -35792,6 +36901,12 @@
             "started_by": {
                 "type": "string",
                 "description": "Principal ref of the user who initiated the run (for server-to-server forwarding)"
+            },
+            "idempotency_key": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 256,
+                "description": "Client-chosen key, unique per intended run, that makes this request safe to retry. A repeat of the request with the same key and the same body returns the agent run the first request started instead of starting another. Reusing a key with a different body is rejected with 409, and a repeat that arrives while the first request is still starting the run may be answered with 503 and `Retry-After`. Keys are scoped to the project and stay bound to their run for as long as it exists; once the run is deleted, the same key starts a new one."
             }
         },
         "required": [
@@ -36458,10 +37573,14 @@
             },
             "limit": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Maximum number of results (default: 50)"
             },
             "offset": {
                 "type": "number",
+                "minimum": 0,
+                "multipleOf": 1,
                 "description": "Offset for pagination"
             },
             "cursor": {
@@ -41565,7 +42684,10 @@
         "properties": {
             "name": {
                 "type": "string",
-                "description": "Store name (unique within project)"
+                "minLength": 1,
+                "maxLength": 128,
+                "pattern": "^[^\\x00-\\x20\\x7f-\\x9f/\\\\.](?:[^\\x00-\\x1f\\x7f-\\x9f/\\\\]*[^\\x00-\\x20\\x7f-\\x9f/\\\\])?$",
+                "description": "Store name (unique within project). 1 to 128 characters; must not contain `/`, `\\` or control characters, start with a dot, or start or end with a space."
             },
             "description": {
                 "type": "string",