@zocomputer/system-api 0.1.1 → 0.1.3

package/dist/generated/operations.d.ts

@@ -103,8 +103,18 @@ export interface ZoAgentCancelOutputV1 {
     state: ("idle" | "cancelling");
 }
 export interface ZoAgentCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     display_name: string;
+    /**
+     * Describe what this Agent is for in the user's terms.
+     */
+    description?: string;
     visibility?: ("workspace" | "protected");
     implementation: "zo.native";
     configuration: ZoAgentCreateInputV1NativeConfiguration;
@@ -114,9 +124,13 @@ export interface ZoAgentCreateInputV1 {
  */
 export interface ZoAgentCreateInputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -139,6 +153,7 @@ export interface ZoAgentCreateOutputV1 {
     type: "agent";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     implementation: "zo.native";
     configuration: ZoAgentCreateOutputV1NativeConfiguration;
@@ -159,9 +174,13 @@ export interface ZoAgentCreateOutputV1 {
  */
 export interface ZoAgentCreateOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -222,6 +241,7 @@ export interface ZoAgentGetOutputV1 {
     type: "agent";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     implementation: "zo.native";
     configuration: ZoAgentGetOutputV1NativeConfiguration;
@@ -242,9 +262,13 @@ export interface ZoAgentGetOutputV1 {
  */
 export interface ZoAgentGetOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -301,6 +325,7 @@ export interface ZoAgentListOutputV1Agent {
     type: "agent";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     implementation: "zo.native";
     configuration: ZoAgentListOutputV1NativeConfiguration;
@@ -321,9 +346,13 @@ export interface ZoAgentListOutputV1Agent {
  */
 export interface ZoAgentListOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -451,6 +480,14 @@ export interface ZoAgentListMessagesOutputV1MessageDelivery {
      */
     outcome: (("completed" | "cancelled" | "interrupted" | "failed") | null);
     outcome_reason: (string | null);
+    /**
+     * The model the message was admitted with: the one it named, else the session's.
+     */
+    model: (string | null);
+    /**
+     * The reasoning level the message was admitted with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentListMessagesQueryV1 {
     /**
@@ -477,6 +514,14 @@ export interface ZoAgentSendInputV1 {
      * How the message affects work already running in the session: wait behind it, join it, or stop it.
      */
     priority?: ("queue" | "steer" | "interrupt");
+    /**
+     * Make this the session's model, from the turn this message starts; a steer that joins a running turn changes the next one. Omit to keep the session's choice.
+     */
+    model?: (string | null);
+    /**
+     * The model's reasoning level; null for the model's default. Requires model.
+     */
+    reasoning?: (string | null);
 }
 export interface ZoAgentSendInputV1TextBlock {
     type: "text";
@@ -526,6 +571,10 @@ export interface ZoAgentUpdateInputV1 {
     agent_id: string;
     expected_revision: number;
     display_name?: (string | null);
+    /**
+     * Describe what this Agent is for in the user's terms.
+     */
+    description?: (string | null);
     configuration?: (ZoAgentUpdateInputV1NativeConfiguration | null);
 }
 /**
@@ -533,9 +582,13 @@ export interface ZoAgentUpdateInputV1 {
  */
 export interface ZoAgentUpdateInputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -558,6 +611,7 @@ export interface ZoAgentUpdateOutputV1 {
     type: "agent";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     implementation: "zo.native";
     configuration: ZoAgentUpdateOutputV1NativeConfiguration;
@@ -578,9 +632,13 @@ export interface ZoAgentUpdateOutputV1 {
  */
 export interface ZoAgentUpdateOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -639,6 +697,14 @@ export interface ZoAgentSessionGetOutputV1 {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
     /**
      * Server-sent events of the session's history, then its live output, read with the same Bearer credential. Authorized as zo.agent_session.history.
      */
@@ -697,6 +763,14 @@ export interface ZoAgentSessionListOutputV1AgentSession {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentSessionListQueryV1 {
     /**
@@ -729,6 +803,14 @@ export interface ZoAgentSessionListWorkspaceOutputV1AgentSession {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentSessionListWorkspaceQueryV1 {
     /**
@@ -747,6 +829,298 @@ export interface ZoAgentSessionListWorkspaceQueryV1 {
         agent_id?: (string | null);
     };
 }
+export interface ZoBillingListRatesInputV1 {
+    workspace_id: string;
+}
+export interface ZoBillingListRatesOutputV1 {
+    workspace_id: string;
+    observed_at: string;
+    rates: ZoBillingListRatesOutputV1BillingRate[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingListRatesOutputV1BillingRate {
+    /**
+     * Current catalog key; not an immutable historical price identifier.
+     */
+    rate_key: string;
+    product: string;
+    meter: string;
+    price: ZoBillingListRatesOutputV1AppliedPrice;
+    model_id?: (string | null);
+    tool_name?: (string | null);
+    provider?: (string | null);
+    sku?: (string | null);
+    resource_kind?: (string | null);
+    conditions?: ZoBillingListRatesOutputV1RateConditions;
+    promotional_end?: (string | null);
+    applicability?: ("active" | "no_usage_feed");
+}
+export interface ZoBillingListRatesOutputV1AppliedPrice {
+    amount: string;
+    currency?: "USD";
+    per: ZoBillingListRatesOutputV1BillingQuantity;
+    tariff_version?: (string | null);
+    usage_price_multiplier?: (string | null);
+}
+export interface ZoBillingListRatesOutputV1BillingQuantity {
+    amount: string;
+    unit: string;
+}
+export interface ZoBillingListRatesOutputV1RateConditions {
+    /**
+     * Inclusive request-size lower bound.
+     */
+    request_input_tokens_min?: (number | null);
+    /**
+     * Exclusive request-size upper bound.
+     */
+    request_input_tokens_max?: (number | null);
+    /**
+     * The matching tier prices the whole request.
+     */
+    whole_request?: boolean;
+    operation?: (string | null);
+    resolution?: (string | null);
+    quality?: (string | null);
+    duration_seconds?: (string | null);
+    quantity_min?: (string | null);
+    quantity_max?: (string | null);
+    included_quantity?: (string | null);
+    default_quantity?: (string | null);
+    quantity_argument?: (string | null);
+    selector?: {
+        [k: string]: JsonValue;
+    };
+    rounding?: ("none" | "ceil_step");
+}
+export interface ZoBillingListRatesQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: "rate_key.asc";
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        tool_name?: (string | null);
+        provider?: (string | null);
+        sku?: (string | null);
+    };
+}
+export interface ZoBillingListUsageEntriesInputV1 {
+    workspace_id: string;
+    period: ZoBillingListUsageEntriesInputV1BillingPeriod;
+}
+export interface ZoBillingListUsageEntriesInputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1 {
+    workspace_id: string;
+    period: ZoBillingListUsageEntriesOutputV1BillingPeriod;
+    history_mode?: "forward_only";
+    observed_at: string;
+    entries: ZoBillingListUsageEntriesOutputV1UsageEntry[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1UsageEntry {
+    id: string;
+    usage_id: string;
+    product: string;
+    meter: string;
+    quantity: ZoBillingListUsageEntriesOutputV1BillingQuantity;
+    cost: ZoBillingListUsageEntriesOutputV1BillingMoney;
+    /**
+     * Null for an explicit occurrence rounding adjustment.
+     */
+    applied_price: (ZoBillingListUsageEntriesOutputV1AppliedPrice | null);
+    occurred_at: string;
+    recorded_at: string;
+    interval_start: (string | null);
+    interval_end: (string | null);
+    attribution: ZoBillingListUsageEntriesOutputV1UsageAttribution;
+    correction_of_entry_id: (string | null);
+    correction_of_usage_id: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingQuantity {
+    amount: string;
+    unit: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingMoney {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingListUsageEntriesOutputV1AppliedPrice {
+    amount: string;
+    currency?: "USD";
+    per: ZoBillingListUsageEntriesOutputV1BillingQuantity;
+    tariff_version?: (string | null);
+    usage_price_multiplier?: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1UsageAttribution {
+    model_id?: (string | null);
+    resource_id?: (string | null);
+    /**
+     * Current name, including protected resources; null if unavailable.
+     */
+    resource_name?: (string | null);
+    agent_id?: (string | null);
+    agent_session_id?: (string | null);
+    agent_session_name?: (string | null);
+    turn_id?: (string | null);
+    host_id?: (string | null);
+    conversation_id?: (string | null);
+    run_id?: (string | null);
+    tool_call_id?: (string | null);
+    tool_name?: (string | null);
+    provider?: (string | null);
+    sku?: (string | null);
+    bucket?: (string | null);
+    operation?: (string | null);
+    attribution_kind?: (string | null);
+    provider_request_id?: (string | null);
+    catalog_revision?: (string | null);
+    gpu_type?: (string | null);
+    storage_component?: (string | null);
+    billing_model_slug?: (string | null);
+    output_count?: (number | null);
+}
+export interface ZoBillingListUsageEntriesQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: ("occurred_at.desc" | "occurred_at.asc");
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        resource_id?: (string | null);
+        agent_id?: (string | null);
+        agent_session_id?: (string | null);
+        turn_id?: (string | null);
+        usage_id?: (string | null);
+    };
+}
+export interface ZoBillingSummarizeUsageInputV1 {
+    workspace_id: string;
+    period: ZoBillingSummarizeUsageInputV1BillingPeriod;
+    /**
+     * @maxItems 4
+     */
+    group_by?: [] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")];
+    /**
+     * Add UTC calendar-day buckets to each group.
+     */
+    daily?: boolean;
+}
+export interface ZoBillingSummarizeUsageInputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingSummarizeUsageOutputV1 {
+    workspace_id: string;
+    period: ZoBillingSummarizeUsageOutputV1BillingPeriod;
+    history_mode?: "forward_only";
+    observed_at: string;
+    recorded_cost: ZoBillingSummarizeUsageOutputV1BillingMoney;
+    entry_count: number;
+    groups: ZoBillingSummarizeUsageOutputV1UsageGroup[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingSummarizeUsageOutputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+/**
+ * Signed cost over every matching recorded entry, across all pages.
+ */
+export interface ZoBillingSummarizeUsageOutputV1BillingMoney {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingSummarizeUsageOutputV1UsageGroup {
+    /**
+     * Stable opaque ordering key for this combination of dimensions and UTC day.
+     */
+    key: string;
+    dimensions: ZoBillingSummarizeUsageOutputV1UsageFilter;
+    day: (string | null);
+    recorded_cost: ZoBillingSummarizeUsageOutputV1BillingMoney1;
+    entry_count: number;
+}
+export interface ZoBillingSummarizeUsageOutputV1UsageFilter {
+    product?: (string | null);
+    meter?: (string | null);
+    model_id?: (string | null);
+    resource_id?: (string | null);
+    agent_id?: (string | null);
+    agent_session_id?: (string | null);
+    turn_id?: (string | null);
+    usage_id?: (string | null);
+}
+export interface ZoBillingSummarizeUsageOutputV1BillingMoney1 {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingSummarizeUsageQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: "key.asc";
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        resource_id?: (string | null);
+        agent_id?: (string | null);
+        agent_session_id?: (string | null);
+        turn_id?: (string | null);
+        usage_id?: (string | null);
+    };
+}
 export interface ZoConnectionAuthorizeInputV1 {
     connection_id: string;
     expected_revision: number;
@@ -788,19 +1162,54 @@ export interface ZoConnectionAuthorizeOutputV1KeyAttached {
     revision: number;
 }
 export interface ZoConnectionCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
-    definition_id: string;
-    definition_version: number;
+    /**
+     * The published definition to connect to. Give it, or `values`, not both.
+     */
+    definition_id?: (string | null);
+    /**
+     * The version of `definition_id` to connect to; required with it.
+     */
+    definition_version?: (number | null);
     display_name: string;
-    configuration: {
+    /**
+     * Describe what this connection is for in the user's terms.
+     */
+    description?: string;
+    /**
+     * The connection's configuration; required with `definition_id`.
+     */
+    configuration?: ({
         [k: string]: JsonValue;
-    };
+    } | null);
     visibility?: ("workspace" | "protected");
+    /**
+     * Named values to store, in place of a definition: Zo publishes a private definition named after `display_name`, with one required key credential per name delivered as the environment variable of that name, creates the connection and stores every value. A definition name already taken in the workspace returns `conflict`. A name Zo refuses as an environment variable returns `invalid_input` with the `invalid_environment` violation.
+     */
+    values?: ({
+        /**
+         * Secret: the value. Stored sealed and never returned.
+         */
+        [k: string]: string;
+    } | null);
+    /**
+     * Environment variables delivered, exactly as written, to machines that list this connection, beside its credential and the variables its definition sets. Plain strings, not secrets: put a secret in the vault. Names are upper-case letters, digits and underscores; at most 64 variables of at most 4096 characters each.
+     */
+    environment?: {
+        [k: string]: string;
+    };
 }
 export interface ZoConnectionCreateOutputV1 {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -824,6 +1233,7 @@ export interface ZoConnectionDisconnectOutputV1 {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -838,6 +1248,7 @@ export interface ZoConnectionGetOutputV1 {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -847,6 +1258,9 @@ export interface ZoConnectionGetOutputV1 {
     account_labels: {
         [k: string]: string;
     };
+    environment: {
+        [k: string]: string;
+    };
 }
 export interface ZoConnectionListInputV1 {
     workspace_id: string;
@@ -859,6 +1273,7 @@ export interface ZoConnectionListOutputV1ConnectionWithAccountsResource {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -868,6 +1283,9 @@ export interface ZoConnectionListOutputV1ConnectionWithAccountsResource {
     account_labels: {
         [k: string]: string;
     };
+    environment: {
+        [k: string]: string;
+    };
 }
 export interface ZoConnectionListQueryV1 {
     /**
@@ -904,6 +1322,7 @@ export interface ZoConnectionSlackCompleteAuthorizationOutputV1 {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -913,6 +1332,9 @@ export interface ZoConnectionSlackCompleteAuthorizationOutputV1 {
     account_labels: {
         [k: string]: string;
     };
+    environment: {
+        [k: string]: string;
+    };
 }
 export interface ZoConnectionSlackStartAuthorizationInputV1 {
     connection_id: string;
@@ -936,11 +1358,32 @@ export interface ZoConnectionUpdateInputV1 {
      * A new name for the connection; omit it to keep the current name.
      */
     display_name?: (string | null);
+    /**
+     * Describe what this connection is for in the user's terms.
+     */
+    description?: (string | null);
+    /**
+     * Move the connection to this version of its definition, keeping its id and grants. Credentials in both versions keep their values, credentials only the current version has are erased, and credentials only the new version has start empty. Omit it to stay on the current version.
+     */
+    definition_version?: (number | null);
+    /**
+     * Named values to set, or `null` to remove a name, on a connection whose definition is private to its workspace and holds only single-value key credentials, as one created from `values` does. Changing a value replaces that credential. Adding or removing a name publishes the definition's next version from the connection's own version and moves the connection to it, keeping its id and grants; other connections to the definition stay on their versions. A connection keeps at least one name. Any other connection returns `invalid_input`.
+     */
+    values?: ({
+        [k: string]: string | null;
+    } | null);
+    /**
+     * The environment that replaces the stored one; omit it to keep the stored environment. Environment variables delivered, exactly as written, to machines that list this connection, beside its credential and the variables its definition sets. Plain strings, not secrets: put a secret in the vault. Names are upper-case letters, digits and underscores; at most 64 variables of at most 4096 characters each.
+     */
+    environment?: ({
+        [k: string]: string;
+    } | null);
 }
 export interface ZoConnectionUpdateOutputV1 {
     id: string;
     workspace_id: string;
     display_name: string;
+    description: string;
     definition_id: string;
     definition_version: number;
     visibility: ("workspace" | "protected");
@@ -1026,6 +1469,12 @@ export interface ZoConnectionDefinitionPublishOutputV1 {
     visibility: string;
 }
 export interface ZoDatabaseCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     /**
      * Required but ignored: a retried create can make a second database.
@@ -1738,6 +2187,12 @@ export interface ZoDatabaseUpdateOutputV1DatabaseStorage {
  * ``subject_type`` is the resource type an occurrence's ``subject`` names.
  */
 export interface ZoEventCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     publisher: string;
     name: string;
@@ -1790,6 +2245,12 @@ export interface ZoEventCreateOutputV1EventProperties {
  * to, which ``per_conversation`` Agent subscriptions key sessions by.
  */
 export interface ZoEventCreateInputV2 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     publisher: string;
     name: string;
@@ -2127,6 +2588,10 @@ export interface ZoFunctionCancelRunOutputV1 {
 export interface ZoFunctionCreateInputV1 {
     workspace_id: string;
     display_name: string;
+    /**
+     * Describe what this function is for in the user's terms.
+     */
+    description?: string;
     visibility?: ("workspace" | "protected");
 }
 export interface ZoFunctionCreateOutputV1 {
@@ -2135,6 +2600,7 @@ export interface ZoFunctionCreateOutputV1 {
     type: "function";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoFunctionCreateOutputV1FunctionProperties;
     active_deployment_id: (string | null);
@@ -2203,6 +2669,7 @@ export interface ZoFunctionGetOutputV1 {
     type: "function";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoFunctionGetOutputV1FunctionProperties;
     active_deployment_id: (string | null);
@@ -2323,6 +2790,7 @@ export interface ZoFunctionListOutputV1VisibleFunctionResource {
     type: "function";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoFunctionListOutputV1FunctionProperties;
     active_deployment_id: (string | null);
@@ -2385,6 +2853,34 @@ export interface ZoFunctionPublishContractOutputV1 {
     contract_version: number;
     digest: string;
 }
+/**
+ * Omitted fields keep their value.
+ */
+export interface ZoFunctionUpdateInputV1 {
+    function_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * "" clears the description.
+     */
+    description?: (string | null);
+}
+export interface ZoFunctionUpdateOutputV1 {
+    id: string;
+    workspace_id: string;
+    type: "function";
+    type_version: number;
+    display_name: string;
+    description: string;
+    revision: number;
+    properties: ZoFunctionUpdateOutputV1FunctionProperties;
+    active_deployment_id: (string | null);
+    visibility: ("workspace" | "protected");
+    owner_user_id: (string | null);
+}
+export interface ZoFunctionUpdateOutputV1FunctionProperties {
+    code_owner: ("zo" | "workspace");
+}
 export interface ZoMachineApplyPatchInputV1 {
     machine_id: string;
     path: string;
@@ -2406,22 +2902,51 @@ export interface ZoMachineApplyPatchOutputV1 {
     size: number;
     sha256: string;
 }
+export type ZoMachineCreateInputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export interface ZoMachineCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     idempotency_key: string;
     display_name: string;
+    /**
+     * Describe what this machine is for in the user's terms.
+     */
+    description?: string;
     source: ZoMachineCreateInputV1MachineSourceInput;
     resources: ZoMachineCreateInputV1MachineResourcesInput;
     lifecycle: ZoMachineCreateInputV1MachineLifecycleInput;
     region?: string;
     /**
-     * Which process runs first at boot. `none` (default): nothing; the machine waits for exec. `image`: the init system inside the machine's image (systemd, OpenRC) becomes PID 1 and starts the services enabled on its disk. This does not choose the image; `source.machine_image_id` does. Debian and Ubuntu images need `systemd systemd-sysv` installed first. A unit restarts after a crash only when it sets `Restart=`.
+     * Which process runs first at boot. `none` (default): nothing; the machine waits for exec. `image`: the init system inside the machine's image (systemd, OpenRC) becomes PID 1 and starts the services enabled on its disk. This does not choose the image; `source.machine_image_id` does. Debian and Ubuntu images need `systemd systemd-sysv` installed first. A unit restarts after a crash only when it sets `Restart=`. GPU machines require `none`.
      */
     init?: ("none" | "image");
     /**
-     * Run these arguments as the main process on every boot, without a shell. Use ["sh", "-c", ...] for shell syntax. Find ENTRYPOINT and CMD on the image's registry page; Zo does not return them. Pass ENTRYPOINT then CMD. With `init: image`, the command must wait for services it needs. The machine stops when it exits; resume runs it again. It may run more than once after a lost create or resume response, so make it safe to rerun. Each argument is at most 4,096 UTF-8 bytes and all arguments total at most 65,536 bytes. A running command is not activity: set `idle_timeout_seconds` at least as long as the job. The maximum is published by `zo.machine.list_configurations` (3,600 s today); a longer job needs Zo exec or file calls, or HTTP through a tunnel or connect token. After exit, `get` may show `running` for a few minutes until the stop is recorded. Zo reports no exit reason or code. Write a job's result to disk. A resume runs the command again, so to read it, clear the command, resume, then use `zo.machine.read_bytes`. With `init: image` and a command, a missing `/sbin/init` ends the generation as an exit stop, without `incompatible_image`.
+     * Run these arguments as the main process on every boot, without a shell. Use ["sh", "-c", ...] for shell syntax. Find ENTRYPOINT and CMD on the image's registry page; Zo does not return them. Pass ENTRYPOINT then CMD. With `init: image`, the command must wait for services it needs. The machine stops when it exits; resume runs it again. It may run more than once after a lost create or resume response, so make it safe to rerun. Each argument is at most 4,096 UTF-8 bytes and all arguments total at most 65,536 bytes. A running command is not activity: set `idle_timeout_seconds` at least as long as the job. The maximum is published by `zo.machine.list_configurations`: 3,600 s for CPU machines and 86,400 s for GPU machines. Longer CPU jobs need Zo exec or file calls, or HTTP through a tunnel or connect token. After exit, `get` may show `running` for a few minutes until the stop is recorded. Zo reports no exit reason or code. Write a job's result to disk. A resume runs the command again, so to read it, clear the command, resume, then use `zo.machine.read_bytes`. With `init: image` and a command, a missing `/sbin/init` ends the generation as an exit stop, without `incompatible_image`.
      */
     command?: ([string, ...(string)[]] | null);
+    /**
+     * Environment variables set, exactly as written, in the boot process and every command run on the machine. Plain strings, not secrets: they are part of the machine's configuration, which anyone who can read the machine sees. Names are upper-case letters, digits and underscores, and reserved names such as `PATH` or ones starting with `ZO_` are refused; at most 64 variables of at most 4096 characters each. A variable here wins over a connection in `credentials` that sets the same name.
+     */
+    environment?: {
+        [k: string]: string;
+    };
+    /**
+     * Connection IDs whose credentials the machine receives as environment variables, in the boot process and every command. Each slot of a listed connection sets the variable its definition names, with the variables the slot and the connection declare. The machine also needs a use grant on each connection (`zo.grant.create` with the machine as assignee); a listed connection without one delivers nothing. When two listed connections set the same variable, the later one in the list wins. At most 100 connections, each listed once.
+     *
+     * @maxItems 100
+     */
+    credentials?: string[];
+    /**
+     * Header rules: on HTTPS requests from the machine to a rule's hosts, Zo sets a header built from a connection's credential, and the credential never enters the machine. A rule names the connection (`credential`) and one of its definition's slots (`slot`). With only those two, it uses the hosts, header and format the slot declares in its `injections`. It may give its own `hosts`, `location` and `format`, all three together, only for a slot that declares an `environment_variable`. Formats: `bearer` (`Bearer <value>`), `basic` with a `username` (`Basic` with base64 of `<username>:<value>`) and `raw` (the value as stored). A rule sets its header only while the machine holds a use grant on the connection. Two rules can't set the same header on the same host, and all rules together set at most 25 header values. Requests to a host with a rule use HTTP/1.1.
+     *
+     * @maxItems 25
+     */
+    outbound_network_policies?: ZoMachineCreateInputV1OutboundNetworkPolicy[];
     /**
      * `workspace` (default): every member can see and use it. `protected`: only you, and whoever you share it with; workspace-wide grants don't reach it. Fixed at creation.
      */
@@ -2439,11 +2964,62 @@ export interface ZoMachineCreateInputV1MachineResourcesInput {
      */
     vcpus: number;
     memory_mib: number;
+    gpu?: (ZoMachineCreateInputV1MachineGpu | null);
+}
+export interface ZoMachineCreateInputV1MachineGpu {
+    type: ZoMachineCreateInputV1GpuType;
+    count: number;
 }
 export interface ZoMachineCreateInputV1MachineLifecycleInput {
-    idle_timeout_seconds?: number;
+    /**
+     * Omit for 900 seconds on CPU. For GPU, the default is the smaller of 300 seconds and max_run_seconds. An explicit GPU idle timeout must not exceed max_run_seconds.
+     */
+    idle_timeout_seconds?: (number | null);
     max_run_seconds: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineCreateInputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineCreateInputV1HeaderLocation | null);
+    format?: ((ZoMachineCreateInputV1BearerFormat | ZoMachineCreateInputV1BasicFormat | ZoMachineCreateInputV1RawFormat) | null);
+}
+export interface ZoMachineCreateInputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineCreateInputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineCreateInputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineCreateInputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
+export type ZoMachineCreateOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineCreateOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
  * A machine's registry envelope, boot settings and row-owned lifecycle state.
@@ -2454,6 +3030,7 @@ export interface ZoMachineCreateOutputV1 {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineCreateOutputV1MachineProperties;
@@ -2465,6 +3042,8 @@ export interface ZoMachineCreateOutputV1 {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2483,11 +3062,63 @@ export interface ZoMachineCreateOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineCreateOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineCreateOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineCreateOutputV1MachineGpu {
+    type: ZoMachineCreateOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineCreateOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineCreateOutputV1HeaderLocation | null);
+    format?: ((ZoMachineCreateOutputV1BearerFormat | ZoMachineCreateOutputV1BasicFormat | ZoMachineCreateOutputV1RawFormat) | null);
+}
+export interface ZoMachineCreateOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineCreateOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineCreateOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineCreateOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineCreateOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2498,6 +3129,7 @@ export interface ZoMachineDestroyInputV1 {
     expected_revision: number;
     idempotency_key: string;
 }
+export type ZoMachineDestroyOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineDestroyOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
  * A machine's registry envelope, boot settings and row-owned lifecycle state.
@@ -2508,6 +3140,7 @@ export interface ZoMachineDestroyOutputV1 {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineDestroyOutputV1MachineProperties;
@@ -2519,6 +3152,8 @@ export interface ZoMachineDestroyOutputV1 {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2537,11 +3172,63 @@ export interface ZoMachineDestroyOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineDestroyOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineDestroyOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineDestroyOutputV1MachineGpu {
+    type: ZoMachineDestroyOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineDestroyOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineDestroyOutputV1HeaderLocation | null);
+    format?: ((ZoMachineDestroyOutputV1BearerFormat | ZoMachineDestroyOutputV1BasicFormat | ZoMachineDestroyOutputV1RawFormat) | null);
+}
+export interface ZoMachineDestroyOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineDestroyOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineDestroyOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineDestroyOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineDestroyOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2565,6 +3252,7 @@ export interface ZoMachineExecOutputV1 {
 export interface ZoMachineGetInputV1 {
     machine_id: string;
 }
+export type ZoMachineGetOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineGetOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
  * A machine's registry envelope, boot settings and row-owned lifecycle state.
@@ -2575,6 +3263,7 @@ export interface ZoMachineGetOutputV1 {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineGetOutputV1MachineProperties;
@@ -2586,6 +3275,8 @@ export interface ZoMachineGetOutputV1 {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2604,11 +3295,63 @@ export interface ZoMachineGetOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineGetOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineGetOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineGetOutputV1MachineGpu {
+    type: ZoMachineGetOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineGetOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineGetOutputV1HeaderLocation | null);
+    format?: ((ZoMachineGetOutputV1BearerFormat | ZoMachineGetOutputV1BasicFormat | ZoMachineGetOutputV1RawFormat) | null);
+}
+export interface ZoMachineGetOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineGetOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineGetOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineGetOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineGetOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2617,6 +3360,7 @@ export interface ZoMachineGetOutputV1MachineBootedView {
 export interface ZoMachineListInputV1 {
     workspace_id: string;
 }
+export type ZoMachineListOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineListOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 export interface ZoMachineListOutputV1 {
     machines: ZoMachineListOutputV1ManagedMachineView[];
@@ -2631,6 +3375,7 @@ export interface ZoMachineListOutputV1ManagedMachineView {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineListOutputV1MachineProperties;
@@ -2642,6 +3387,8 @@ export interface ZoMachineListOutputV1ManagedMachineView {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2660,11 +3407,63 @@ export interface ZoMachineListOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineListOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineListOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineListOutputV1MachineGpu {
+    type: ZoMachineListOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineListOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineListOutputV1HeaderLocation | null);
+    format?: ((ZoMachineListOutputV1BearerFormat | ZoMachineListOutputV1BasicFormat | ZoMachineListOutputV1RawFormat) | null);
+}
+export interface ZoMachineListOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineListOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineListOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineListOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineListOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2691,6 +3490,8 @@ export interface ZoMachineListConfigurationsInputV1 {
  */
 export interface ZoMachineListConfigurationsOutputV1 {
     resources: ZoMachineListConfigurationsOutputV1MachineResourceBounds;
+    gpus: ZoMachineListConfigurationsOutputV1MachineGpuOffer[];
+    runtime: "vm";
     vcpu_microusd_per_second: number;
     memory_gib_microusd_per_second: number;
     regions: string[];
@@ -2709,16 +3510,26 @@ export interface ZoMachineListConfigurationsOutputV1MachineRunBounds {
     minimum: number;
     maximum: number;
 }
-export interface ZoMachineListConfigurationsOutputV1MachineCommandOffer {
-    supported: boolean;
-    max_args: number;
-    max_arg_bytes: number;
+export interface ZoMachineListConfigurationsOutputV1MachineGpuOffer {
+    type: string;
+    count: ZoMachineListConfigurationsOutputV1MachineRunBounds;
+    vram_gb: number;
+    gpu_microusd_per_second: number;
+    runtime: "gvisor";
+    init: ("none")[];
+    idle_timeout_seconds: ZoMachineListConfigurationsOutputV1MachineIdleTimeoutBounds;
+    max_run_seconds: ZoMachineListConfigurationsOutputV1MachineRunBounds;
 }
 export interface ZoMachineListConfigurationsOutputV1MachineIdleTimeoutBounds {
     minimum: number;
     maximum: number;
     default: number;
 }
+export interface ZoMachineListConfigurationsOutputV1MachineCommandOffer {
+    supported: boolean;
+    max_args: number;
+    max_arg_bytes: number;
+}
 export interface ZoMachineListFilesInputV1 {
     machine_id: string;
     path: string;
@@ -2764,6 +3575,7 @@ export interface ZoMachineResumeInputV1 {
     idempotency_key: string;
     accept_recovery?: boolean;
 }
+export type ZoMachineResumeOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineResumeOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
  * A machine's registry envelope, boot settings and row-owned lifecycle state.
@@ -2774,6 +3586,7 @@ export interface ZoMachineResumeOutputV1 {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineResumeOutputV1MachineProperties;
@@ -2785,6 +3598,8 @@ export interface ZoMachineResumeOutputV1 {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2803,11 +3618,63 @@ export interface ZoMachineResumeOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineResumeOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineResumeOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineResumeOutputV1MachineGpu {
+    type: ZoMachineResumeOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineResumeOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineResumeOutputV1HeaderLocation | null);
+    format?: ((ZoMachineResumeOutputV1BearerFormat | ZoMachineResumeOutputV1BasicFormat | ZoMachineResumeOutputV1RawFormat) | null);
+}
+export interface ZoMachineResumeOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineResumeOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineResumeOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineResumeOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineResumeOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2824,6 +3691,10 @@ export interface ZoMachineSnapshotInputV1 {
 }
 export interface ZoMachineSnapshotInputV1MachineImageCreateOptions {
     display_name: string;
+    /**
+     * Describe what this machine image is for in the user's terms.
+     */
+    description?: string;
     /**
      * Image visibility. Omit or pass null to use the creating operation's default. Protected images use ordinary verified-human creator ownership.
      */
@@ -2842,6 +3713,7 @@ export interface ZoMachineSnapshotOutputV1 {
     type: "machine_image";
     type_version: number;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineSnapshotOutputV1MachineImageProperties;
@@ -2868,6 +3740,7 @@ export interface ZoMachineStopInputV1 {
     expected_revision: number;
     idempotency_key: string;
 }
+export type ZoMachineStopOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineStopOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
  * A machine's registry envelope, boot settings and row-owned lifecycle state.
@@ -2878,6 +3751,7 @@ export interface ZoMachineStopOutputV1 {
     type: "machine";
     type_version: 1;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineStopOutputV1MachineProperties;
@@ -2889,6 +3763,8 @@ export interface ZoMachineStopOutputV1 {
     created_at: string;
     updated_at: string;
     destroyed_at: (string | null);
+    recoverable_until?: (string | null);
+    recovery_acceptance_required?: boolean;
 }
 /**
  * Public properties of a `machine` resource.
@@ -2907,11 +3783,63 @@ export interface ZoMachineStopOutputV1MachineProperties {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (ZoMachineStopOutputV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineStopOutputV1OutboundNetworkPolicy[] | null);
+}
+export interface ZoMachineStopOutputV1MachineGpu {
+    type: ZoMachineStopOutputV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineStopOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineStopOutputV1HeaderLocation | null);
+    format?: ((ZoMachineStopOutputV1BearerFormat | ZoMachineStopOutputV1BasicFormat | ZoMachineStopOutputV1RawFormat) | null);
+}
+export interface ZoMachineStopOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineStopOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineStopOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineStopOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export interface ZoMachineStopOutputV1MachineBootedView {
     init: ("none" | "image");
@@ -2923,6 +3851,7 @@ export interface ZoMachineSystemInfoInputV1 {
 export type ZoMachineSystemInfoOutputV1DesiredState = ("running" | "stopped" | "destroyed");
 export type ZoMachineSystemInfoOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 export type ZoMachineSystemInfoOutputV1InfoSource = ("provider" | "zo_control");
+export type ZoMachineSystemInfoOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineSystemInfoOutputV1InfoGroup = ("architecture" | "os" | "allocation" | "guest" | "disk" | "network" | "accelerators" | "capabilities");
 export type ZoMachineSystemInfoOutputV1InfoUnknownReason = ("not_observed" | "driver_unavailable");
 /**
@@ -2971,9 +3900,14 @@ export interface ZoMachineSystemInfoOutputV1MachineInfoAllocation {
     observed_at: string;
     requested_vcpus: number;
     requested_memory_mib: number;
+    requested_gpu?: (ZoMachineSystemInfoOutputV1MachineGpu | null);
     verified_vcpus: (number | null);
     verified_memory_mib: (number | null);
 }
+export interface ZoMachineSystemInfoOutputV1MachineGpu {
+    type: ZoMachineSystemInfoOutputV1GpuType;
+    count: number;
+}
 /**
  * What the machine's driver supports, not what the caller may do.
  * ``stop`` keeps the filesystem; ``pause`` keeps memory too.
@@ -3004,19 +3938,37 @@ export interface ZoMachineUpdateInputV1 {
     machine_id: string;
     expected_revision: number;
     display_name?: (string | null);
+    /**
+     * Describe what this machine is for in the user's terms.
+     */
+    description?: (string | null);
     lifecycle?: (ZoMachineUpdateInputV1MachineLifecycleUpdate | null);
     /**
-     * Which process runs first at boot. `none` (default): nothing; the machine waits for exec. `image`: the image's init system (systemd, OpenRC) becomes PID 1 and starts enabled services. `source.machine_image_id` chooses the image. Debian and Ubuntu need `systemd systemd-sysv`. Setting `image` needs exec permission; approval-gated exec is denied. Write access to boot files can run code as root at next boot.
+     * Which process runs first at boot. `none` (default): nothing; the machine waits for exec. `image`: the image's init system (systemd, OpenRC) becomes PID 1 and starts enabled services. `source.machine_image_id` chooses the image. Debian and Ubuntu need `systemd systemd-sysv`. Write access to boot files can run code as root at next boot.
      */
     init?: (("none" | "image") | null);
     /**
-     * Set the main process for the next resume. Arguments run without a shell; use ["sh", "-c", ...] for shell syntax. Find ENTRYPOINT and CMD on the image's registry page; Zo does not return them. Pass ENTRYPOINT then CMD. With `init: image`, wait for needed services. The machine stops when the command exits; resume runs it again. It may run more than once after a lost create or resume response, so make it safe to rerun. Each argument is at most 4,096 UTF-8 bytes and all arguments total at most 65,536 bytes. A running command is not activity: set `idle_timeout_seconds` at least as long as the job. The maximum is published by `zo.machine.list_configurations` (3,600 s today); a longer job needs Zo exec or file calls, or HTTP through a tunnel or connect token. After exit, `get` may show `running` for a few minutes. Zo reports no exit reason or code. Write a job's result to disk. A resume runs the command again, so to read it, clear the command, resume, then use `zo.machine.read_bytes`. With `init: image` and a command, a missing `/sbin/init` ends the generation as an exit stop, without `incompatible_image`. Changing the command needs exec permission; approval-gated exec is denied. Write access to its script can run code as root at next boot.
+     * Set the main process for the next resume. Arguments run without a shell; use ["sh", "-c", ...] for shell syntax. Find ENTRYPOINT and CMD on the image's registry page; Zo does not return them. Pass ENTRYPOINT then CMD. With `init: image`, wait for needed services. The machine stops when the command exits; resume runs it again. It may run more than once after a lost create or resume response, so make it safe to rerun. Each argument is at most 4,096 UTF-8 bytes and all arguments total at most 65,536 bytes. A running command is not activity: set `idle_timeout_seconds` at least as long as the job. The maximum is published by `zo.machine.list_configurations`: 3,600 s for CPU machines and 86,400 s for GPU machines. Longer CPU jobs need Zo exec or file calls, or HTTP through a tunnel or connect token. After exit, `get` may show `running` for a few minutes. Zo reports no exit reason or code. Write a job's result to disk. A resume runs the command again, so to read it, clear the command, resume, then use `zo.machine.read_bytes`. With `init: image` and a command, a missing `/sbin/init` ends the generation as an exit stop, without `incompatible_image`. Write access to its script can run code as root at next boot.
      */
     command?: ([string, ...(string)[]] | null);
     /**
-     * Remove the main process on the next resume. Requires manage permission only.
+     * Remove the main process on the next resume.
      */
     clear_command?: boolean;
+    /**
+     * The environment that replaces the stored one; omit it to keep it. Environment variables set, exactly as written, in the boot process and every command run on the machine. Plain strings, not secrets: they are part of the machine's configuration, which anyone who can read the machine sees. Names are upper-case letters, digits and underscores, and reserved names such as `PATH` or ones starting with `ZO_` are refused; at most 64 variables of at most 4096 characters each. A variable here wins over a connection in `credentials` that sets the same name.
+     */
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    /**
+     * The list that replaces the stored one; omit it to keep it. Connection IDs whose credentials the machine receives as environment variables, in the boot process and every command. Each slot of a listed connection sets the variable its definition names, with the variables the slot and the connection declare. The machine also needs a use grant on each connection (`zo.grant.create` with the machine as assignee); a listed connection without one delivers nothing. When two listed connections set the same variable, the later one in the list wins. At most 100 connections, each listed once.
+     */
+    credentials?: (string[] | null);
+    /**
+     * The rules that replace the stored ones; omit them to keep them. A running machine's requests use the new rules once the update returns. Header rules: on HTTPS requests from the machine to a rule's hosts, Zo sets a header built from a connection's credential, and the credential never enters the machine. A rule names the connection (`credential`) and one of its definition's slots (`slot`). With only those two, it uses the hosts, header and format the slot declares in its `injections`. It may give its own `hosts`, `location` and `format`, all three together, only for a slot that declares an `environment_variable`. Formats: `bearer` (`Bearer <value>`), `basic` with a `username` (`Basic` with base64 of `<username>:<value>`) and `raw` (the value as stored). A rule sets its header only while the machine holds a use grant on the connection. Two rules can't set the same header on the same host, and all rules together set at most 25 header values. Requests to a host with a rule use HTTP/1.1.
+     */
+    outbound_network_policies?: (ZoMachineUpdateInputV1OutboundNetworkPolicy[] | null);
 }
 /**
  * The timers a caller may change after create. Modal fixes them at
@@ -3026,10 +3978,53 @@ export interface ZoMachineUpdateInputV1MachineLifecycleUpdate {
     idle_timeout_seconds?: (number | null);
     max_run_seconds?: (number | null);
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineUpdateInputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineUpdateInputV1HeaderLocation | null);
+    format?: ((ZoMachineUpdateInputV1BearerFormat | ZoMachineUpdateInputV1BasicFormat | ZoMachineUpdateInputV1RawFormat) | null);
+}
+export interface ZoMachineUpdateInputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineUpdateInputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineUpdateInputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineUpdateInputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineUpdateOutputV1 {
     machine_id: string;
     revision: number;
     display_name: string;
+    description: string;
     idle_timeout_seconds: number;
     max_run_seconds: (number | null);
 }
@@ -3063,6 +4058,7 @@ export interface ZoMachineImageDeleteOutputV1 {
     type: "machine_image";
     type_version: number;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineImageDeleteOutputV1MachineImageProperties;
@@ -3100,6 +4096,7 @@ export interface ZoMachineImageGetOutputV1 {
     type: "machine_image";
     type_version: number;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineImageGetOutputV1MachineImageProperties;
@@ -3123,6 +4120,10 @@ export interface ZoMachineImageGetOutputV1MachineImageProperties {
 }
 export interface ZoMachineImageImportInputV1 {
     display_name: string;
+    /**
+     * Describe what this machine image is for in the user's terms.
+     */
+    description?: string;
     /**
      * `workspace` (default): every member can see and use it. `protected`: only you, and whoever you share it with; workspace-wide grants don't reach it. Fixed at creation.
      */
@@ -3149,6 +4150,7 @@ export interface ZoMachineImageImportOutputV1 {
     type: "machine_image";
     type_version: number;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineImageImportOutputV1MachineImageProperties;
@@ -3190,6 +4192,7 @@ export interface ZoMachineImageListOutputV1MachineImageView {
     type: "machine_image";
     type_version: number;
     display_name: string;
+    description: string;
     visibility: ("workspace" | "protected");
     revision: number;
     properties: ZoMachineImageListOutputV1MachineImageProperties;
@@ -3222,6 +4225,50 @@ export interface ZoMachineImageListQueryV1 {
     cursor?: string;
     sort?: ("id.asc" | "created_at.desc" | "created_at.asc" | "display_name.asc");
 }
+export interface ZoMachineImageUpdateInputV1 {
+    machine_image_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * "" clears the description.
+     */
+    description?: (string | null);
+}
+export type ZoMachineImageUpdateOutputV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
+export type ZoMachineImageUpdateOutputV1ImageStatus = ("pending" | "preparing" | "ready" | "failed" | "deleting" | "deleted");
+/**
+ * A `machine_image` resource with its preparation status. ``source_digest``
+ * is the pinned manifest digest once resolved; ``error_code`` is set only for
+ * an image that failed.
+ */
+export interface ZoMachineImageUpdateOutputV1 {
+    id: string;
+    workspace_id: string;
+    type: "machine_image";
+    type_version: number;
+    display_name: string;
+    description: string;
+    visibility: ("workspace" | "protected");
+    revision: number;
+    properties: ZoMachineImageUpdateOutputV1MachineImageProperties;
+    status: ZoMachineImageUpdateOutputV1ImageStatus;
+    source_digest: (string | null);
+    error_code: (string | null);
+    created_at: string;
+    ready_at: (string | null);
+    deleted_at: (string | null);
+}
+/**
+ * Public properties of a `machine_image` resource, type version 1: what
+ * the image is, fixed when it was admitted. Status and the resolved digest
+ * live on the ``machine_images`` row, not in the registry.
+ */
+export interface ZoMachineImageUpdateOutputV1MachineImageProperties {
+    origin: ZoMachineImageUpdateOutputV1ImageOrigin;
+    artifact_format: ("oci" | "provider_filesystem_snapshot");
+    architecture: ("amd64" | "arm64");
+    source_ref: (string | null);
+}
 export interface ZoMessageGetInputV1 {
     /**
      * The Agent that sent or received the message.
@@ -3289,6 +4336,14 @@ export interface ZoMessageGetOutputV1MessageDelivery {
      */
     outcome: (("completed" | "cancelled" | "interrupted" | "failed") | null);
     outcome_reason: (string | null);
+    /**
+     * The model the message was admitted with: the one it named, else the session's.
+     */
+    model: (string | null);
+    /**
+     * The reasoning level the message was admitted with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoOauthAppCreateInputV1 {
     workspace_id: string;
@@ -3422,14 +4477,185 @@ export interface ZoOauthAppUpdateOutputV1 {
     manager_ref: {
         [k: string]: JsonValue;
     };
-    visibility: ("private" | "public");
-    requested_scopes: string[];
-    connection_id: (string | null);
-    state: string;
+    visibility: ("private" | "public");
+    requested_scopes: string[];
+    connection_id: (string | null);
+    state: string;
+}
+export interface ZoQuotaGetInputV1 {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+}
+export interface ZoQuotaGetOutputV1 {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+    description: string;
+    kind: ("capacity" | "windowed" | "per_resource_bound");
+    scope: ZoQuotaGetOutputV1QuotaScope;
+    unit: string;
+    limit: ZoQuotaGetOutputV1QuotaLimit;
+    measurement: ZoQuotaGetOutputV1QuotaMeasurement;
+    headroom: ZoQuotaGetOutputV1QuotaRemainder;
+    overage: ZoQuotaGetOutputV1QuotaRemainder;
+}
+export interface ZoQuotaGetOutputV1QuotaScope {
+    kind: ("workspace" | "resource");
+    resource_type?: (string | null);
+}
+export interface ZoQuotaGetOutputV1QuotaLimit {
+    kind: ("finite" | "unlimited" | "not_configured" | "unavailable");
+    amount?: (string | null);
+}
+export interface ZoQuotaGetOutputV1QuotaMeasurement {
+    status: ("available" | "unavailable" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+    observed_at?: (string | null);
+    basis?: (string | null);
+    used?: (string | null);
+    reserved?: (string | null);
+    window?: (ZoQuotaGetOutputV1QuotaWindow | null);
+}
+export interface ZoQuotaGetOutputV1QuotaWindow {
+    start: string;
+    end: string;
+    rule: ("trailing_86400_seconds" | "billing_period");
+}
+export interface ZoQuotaGetOutputV1QuotaRemainder {
+    status: ("available" | "unknown" | "unlimited" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListInputV1 {
+    workspace_id: string;
+}
+export interface ZoQuotaListOutputV1 {
+    quotas: ZoQuotaListOutputV1QuotaReading[];
+    next_cursor?: (string | null);
+    observed_at: string;
+}
+export interface ZoQuotaListOutputV1QuotaReading {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+    description: string;
+    kind: ("capacity" | "windowed" | "per_resource_bound");
+    scope: ZoQuotaListOutputV1QuotaScope;
+    unit: string;
+    limit: ZoQuotaListOutputV1QuotaLimit;
+    measurement: ZoQuotaListOutputV1QuotaMeasurement;
+    headroom: ZoQuotaListOutputV1QuotaRemainder;
+    overage: ZoQuotaListOutputV1QuotaRemainder;
+}
+export interface ZoQuotaListOutputV1QuotaScope {
+    kind: ("workspace" | "resource");
+    resource_type?: (string | null);
+}
+export interface ZoQuotaListOutputV1QuotaLimit {
+    kind: ("finite" | "unlimited" | "not_configured" | "unavailable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListOutputV1QuotaMeasurement {
+    status: ("available" | "unavailable" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+    observed_at?: (string | null);
+    basis?: (string | null);
+    used?: (string | null);
+    reserved?: (string | null);
+    window?: (ZoQuotaListOutputV1QuotaWindow | null);
+}
+export interface ZoQuotaListOutputV1QuotaWindow {
+    start: string;
+    end: string;
+    rule: ("trailing_86400_seconds" | "billing_period");
+}
+export interface ZoQuotaListOutputV1QuotaRemainder {
+    status: ("available" | "unknown" | "unlimited" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListQueryV1 {
+    /**
+     * Rows per page, at most 100; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: ("quota_key.asc" | "quota_key.desc");
+    filter?: {
+        kind?: (("capacity" | "windowed" | "per_resource_bound") | null);
+        scope?: (("workspace" | "resource") | null);
+        resource_type?: (("machine" | "machine_image" | "database") | null);
+    };
 }
 export interface ZoScheduleCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     display_name: string;
+    /**
+     * Describe what this schedule is for in the user's terms.
+     */
+    description?: string;
     rrule: string;
     start_at: string;
     timezone: string;
@@ -3444,6 +4670,7 @@ export interface ZoScheduleCreateOutputV1 {
     type: "schedule";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     visibility: ("workspace" | "protected");
     owner_user_id: (string | null);
@@ -3483,6 +4710,7 @@ export interface ZoScheduleGetOutputV1 {
     type: "schedule";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     visibility: ("workspace" | "protected");
     owner_user_id: (string | null);
@@ -3518,6 +4746,7 @@ export interface ZoScheduleListOutputV1ScheduleView {
     type: "schedule";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     visibility: ("workspace" | "protected");
     owner_user_id: (string | null);
@@ -3551,6 +4780,10 @@ export interface ZoScheduleUpdateInputV1 {
     schedule_id: string;
     expected_revision: number;
     display_name: string;
+    /**
+     * Describe what this schedule is for in the user's terms.
+     */
+    description?: (string | null);
     rrule: string;
     start_at: string;
     timezone: string;
@@ -3565,6 +4798,7 @@ export interface ZoScheduleUpdateOutputV1 {
     type: "schedule";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     visibility: ("workspace" | "protected");
     owner_user_id: (string | null);
@@ -3628,6 +4862,12 @@ export type ZoSubscriptionCreateInputV1InputContractKind = ("exact_event" | "gen
  * account the handler runs as. Omit ``filter`` to receive every occurrence.
  */
 export interface ZoSubscriptionCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     event_id: string;
     display_name: string;
@@ -3831,9 +5071,19 @@ export type ZoSubscriptionCreateInputV2InputContractKind = ("exact_event" | "gen
  * occurrence.
  */
 export interface ZoSubscriptionCreateInputV2 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     event_id: string;
     display_name: string;
+    /**
+     * Describe what this subscription is for in the user's terms.
+     */
+    description?: string;
     filter?: ((ZoSubscriptionCreateInputV2EqFilter | ZoSubscriptionCreateInputV2InFilter | ZoSubscriptionCreateInputV2ExistsFilter | ZoSubscriptionCreateInputV2All1 | ZoSubscriptionCreateInputV2Any1) | null);
     handler_resource_type: ("function" | "workflow" | "agent");
     handler_resource_id?: (string | null);
@@ -3940,6 +5190,7 @@ export interface ZoSubscriptionCreateOutputV2 {
     type: "event_subscription";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoSubscriptionCreateOutputV2EventSubscriptionProperties;
     event_type: string;
@@ -4213,6 +5464,7 @@ export interface ZoSubscriptionGetOutputV2 {
     type: "event_subscription";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoSubscriptionGetOutputV2EventSubscriptionProperties;
     event_type: string;
@@ -4516,6 +5768,7 @@ export interface ZoSubscriptionListOutputV2SubscriptionResourceV2 {
     type: "event_subscription";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoSubscriptionListOutputV2EventSubscriptionProperties;
     event_type: string;
@@ -4834,8 +6087,9 @@ export interface ZoSubscriptionUpdateOutputV1PrincipalRef {
 }
 export type ZoSubscriptionUpdateInputV2InputContractKind = ("exact_event" | "generic_envelope");
 /**
- * Full replacement of every create field but the workspace and the event (a new
- * definition or version is a new subscription), plus ``lifecycle``: ``active``
+ * Replace create fields except workspace, event and optional description.
+ * A new event definition or version requires a new subscription.
+ * Omitted or null description keeps its value. ``lifecycle``: ``active``
  * resumes a paused or suspended subscription, ``paused`` pauses it;
  * ``zo.subscription.delete`` retires. ``handler_resource_type`` must be the
  * subscription's own: a different handler type is a new subscription.
@@ -4844,6 +6098,10 @@ export interface ZoSubscriptionUpdateInputV2 {
     subscription_id: string;
     expected_revision: number;
     display_name: string;
+    /**
+     * Describe what this subscription is for in the user's terms.
+     */
+    description?: (string | null);
     filter?: ((ZoSubscriptionUpdateInputV2EqFilter | ZoSubscriptionUpdateInputV2InFilter | ZoSubscriptionUpdateInputV2ExistsFilter | ZoSubscriptionUpdateInputV2All1 | ZoSubscriptionUpdateInputV2Any1) | null);
     handler_resource_type: ("function" | "workflow" | "agent");
     handler_resource_id?: (string | null);
@@ -4950,6 +6208,7 @@ export interface ZoSubscriptionUpdateOutputV2 {
     type: "event_subscription";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     properties: ZoSubscriptionUpdateOutputV2EventSubscriptionProperties;
     event_type: string;
@@ -5053,7 +6312,12 @@ export interface ZoSubscriptionUpdateOutputV2PrincipalRef {
 }
 export interface ZoTagAssignInputV1 {
     workspace_id: string;
-    target: ZoTagAssignInputV1TargetRef;
+    target?: ZoTagAssignInputV1TargetRef;
+    /**
+     * @minItems 1
+     * @maxItems 200
+     */
+    targets?: [ZoTagAssignInputV1TargetRef, ...(ZoTagAssignInputV1TargetRef)[]];
     /**
      * Tags by ID or name.
      *
@@ -5066,7 +6330,7 @@ export interface ZoTagAssignInputV1 {
 }
 export interface ZoTagAssignInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5075,15 +6339,19 @@ export interface ZoTagAssignInputV1TargetRef {
     id: string;
 }
 export interface ZoTagAssignOutputV1 {
-    target: ZoTagAssignOutputV1TargetRef;
     /**
-     * The object's tags, alphabetically.
+     * @minItems 1
+     * @maxItems 200
      */
-    tags: ZoTagAssignOutputV1TagView[];
+    objects: [ZoTagAssignOutputV1ObjectChanges, ...(ZoTagAssignOutputV1ObjectChanges)[]];
+}
+export interface ZoTagAssignOutputV1ObjectChanges {
+    target: ZoTagAssignOutputV1TargetRef;
+    changed: number;
 }
 export interface ZoTagAssignOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5091,13 +6359,6 @@ export interface ZoTagAssignOutputV1TargetRef {
      */
     id: string;
 }
-export interface ZoTagAssignOutputV1TagView {
-    id: string;
-    /**
-     * The tag's name, spelled as first written.
-     */
-    name: string;
-}
 export interface ZoTagDeleteInputV1 {
     workspace_id: string;
     /**
@@ -5150,7 +6411,7 @@ export interface ZoTagItemsQueryV1 {
     cursor?: string;
     filter?: {
         /**
-         * Only objects of these kinds (task, agent, schedule, website, connection, event, event_subscription, machine, database or file).
+         * Only objects of these kinds (task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file).
          */
         kinds?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
     };
@@ -5198,7 +6459,7 @@ export interface ZoTagOfInputV1 {
 }
 export interface ZoTagOfInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5221,7 +6482,7 @@ export interface ZoTagOfOutputV1ObjectTags {
 }
 export interface ZoTagOfOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5256,7 +6517,12 @@ export interface ZoTagRenameOutputV1 {
 }
 export interface ZoTagUnassignInputV1 {
     workspace_id: string;
-    target: ZoTagUnassignInputV1TargetRef;
+    target?: ZoTagUnassignInputV1TargetRef;
+    /**
+     * @minItems 1
+     * @maxItems 200
+     */
+    targets?: [ZoTagUnassignInputV1TargetRef, ...(ZoTagUnassignInputV1TargetRef)[]];
     /**
      * Tags by ID or name.
      *
@@ -5269,7 +6535,7 @@ export interface ZoTagUnassignInputV1 {
 }
 export interface ZoTagUnassignInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5278,15 +6544,19 @@ export interface ZoTagUnassignInputV1TargetRef {
     id: string;
 }
 export interface ZoTagUnassignOutputV1 {
-    target: ZoTagUnassignOutputV1TargetRef;
     /**
-     * The object's tags, alphabetically.
+     * @minItems 1
+     * @maxItems 200
      */
-    tags: ZoTagUnassignOutputV1TagView[];
+    objects: [ZoTagUnassignOutputV1ObjectChanges, ...(ZoTagUnassignOutputV1ObjectChanges)[]];
+}
+export interface ZoTagUnassignOutputV1ObjectChanges {
+    target: ZoTagUnassignOutputV1TargetRef;
+    changed: number;
 }
 export interface ZoTagUnassignOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5294,13 +6564,6 @@ export interface ZoTagUnassignOutputV1TargetRef {
      */
     id: string;
 }
-export interface ZoTagUnassignOutputV1TagView {
-    id: string;
-    /**
-     * The tag's name, spelled as first written.
-     */
-    name: string;
-}
 export interface ZoTaskBlockerAddInputV1 {
     workspace_id: string;
     /**
@@ -5316,6 +6579,7 @@ export interface ZoTaskBlockerAddOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskBlockerAddOutputV1PrincipalView | null);
     /**
@@ -5384,6 +6648,7 @@ export interface ZoTaskBlockerAddOutputV1PrincipalView {
 export interface ZoTaskBlockerAddOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskBlockerAddOutputV1TaskComment {
@@ -5422,6 +6687,7 @@ export interface ZoTaskBlockerRemoveOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskBlockerRemoveOutputV1PrincipalView | null);
     /**
@@ -5490,6 +6756,7 @@ export interface ZoTaskBlockerRemoveOutputV1PrincipalView {
 export interface ZoTaskBlockerRemoveOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskBlockerRemoveOutputV1TaskComment {
@@ -5680,7 +6947,14 @@ export interface ZoTaskCommentUpdateOutputV1PrincipalView {
     active: boolean;
 }
 export interface ZoTaskCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
+    title: string;
     body?: string;
     status?: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee?: (ZoTaskCreateInputV1PrincipalInput | null);
@@ -5697,6 +6971,7 @@ export interface ZoTaskCreateOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskCreateOutputV1PrincipalView | null);
     /**
@@ -5765,6 +7040,7 @@ export interface ZoTaskCreateOutputV1PrincipalView {
 export interface ZoTaskCreateOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskCreateOutputV1TaskComment {
@@ -5810,6 +7086,7 @@ export interface ZoTaskGetOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskGetOutputV1PrincipalView | null);
     /**
@@ -5878,6 +7155,7 @@ export interface ZoTaskGetOutputV1PrincipalView {
 export interface ZoTaskGetOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskGetOutputV1TaskComment {
@@ -5916,6 +7194,7 @@ export interface ZoTaskListOutputV1TaskSummary {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskListOutputV1PrincipalView | null);
     /**
@@ -5984,6 +7263,7 @@ export interface ZoTaskUpdateInputV1 {
      * The task's number ("42" or "#42") or its tsk_ ID.
      */
     task: string;
+    title?: (string | null);
     body?: (string | null);
     status?: (("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled") | null);
     /**
@@ -6007,6 +7287,7 @@ export interface ZoTaskUpdateOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskUpdateOutputV1PrincipalView | null);
     /**
@@ -6075,6 +7356,7 @@ export interface ZoTaskUpdateOutputV1PrincipalView {
 export interface ZoTaskUpdateOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskUpdateOutputV1TaskComment {
@@ -6585,10 +7867,150 @@ export interface ZoVaultUpdateOutputV1RawFormat {
      */
     type: "raw";
 }
+export interface ZoWebFetchInputV1 {
+    workspace_id: string;
+    /**
+     * The pages to read. A URL listed twice is read and charged once and returned at each position.
+     *
+     * @minItems 1
+     * @maxItems 100
+     *
+     * Items: An http or https URL.
+     */
+    urls: [string, ...(string)[]];
+    /**
+     * The most text to return per page. The response size limit can shorten pages further; a shortened page is marked truncated.
+     */
+    max_characters?: number;
+    /**
+     * Fetch each page now instead of using a cached copy. Use it for prices, status pages and anything else that changes by the hour.
+     */
+    live?: boolean;
+}
+export interface ZoWebFetchOutputV1 {
+    /**
+     * One entry per requested URL, in the order requested. A page that couldn't be read has status failed; the call still succeeds.
+     */
+    pages: (ZoWebFetchOutputV1WebPage | ZoWebFetchOutputV1WebPageFailure)[];
+}
+export interface ZoWebFetchOutputV1WebPage {
+    /**
+     * The URL as requested.
+     */
+    url: string;
+    status: "ok";
+    title: (string | null);
+    /**
+     * The page's estimated publication date, YYYY-MM-DD.
+     */
+    published_date: (string | null);
+    author: (string | null);
+    /**
+     * The page's main content as Markdown.
+     */
+    text: string;
+    /**
+     * Whether the page had more text than was returned.
+     */
+    truncated: boolean;
+}
+export interface ZoWebFetchOutputV1WebPageFailure {
+    /**
+     * The URL as requested.
+     */
+    url: string;
+    status: "failed";
+    /**
+     * not_found: the page doesn't exist. blocked: the site refused access. timeout: the page took too long to load. unsupported: the URL can't be read. unavailable: anything else; trying again later may work.
+     */
+    error: ("not_found" | "blocked" | "timeout" | "unsupported" | "unavailable");
+}
+export interface ZoWebSearchInputV1 {
+    workspace_id: string;
+    /**
+     * Describe the pages you want, as a sentence, rather than keywords. Restrict sites with include_domains, not site: in the query.
+     */
+    query: string;
+    /**
+     * Goal for this search turn; say which documents should rank first, which should be excluded, and what specific facts or figures to pull from them.
+     */
+    objective?: (string | null);
+    /**
+     * Focus on one kind of page. Omit for the general web. company and people can't take published dates; people can't take exclude_domains.
+     */
+    category?: (("news" | "company" | "people" | "financial_report" | "publication" | "personal_site") | null);
+    /**
+     * How many results to return.
+     */
+    num_results?: number;
+    /**
+     * Only return pages from these domains.
+     */
+    include_domains?: (string[] | null);
+    /**
+     * Never return pages from these domains.
+     */
+    exclude_domains?: (string[] | null);
+    /**
+     * Only pages published on or after the start of this day, UTC.
+     */
+    published_after?: (string | null);
+    /**
+     * Only pages published before the start of this day, UTC.
+     */
+    published_before?: (string | null);
+}
+export interface ZoWebSearchOutputV1 {
+    /**
+     * Ranked pages, best first.
+     */
+    results: ZoWebSearchOutputV1WebSearchHit[];
+    /**
+     * Notes on how the results were produced, such as a restriction in the query that was relaxed because it matched nothing. Omitted when there are none.
+     */
+    notices?: (ZoWebSearchOutputV1WebNotice[] | null);
+}
+export interface ZoWebSearchOutputV1WebSearchHit {
+    url: string;
+    title: (string | null);
+    /**
+     * The page's estimated publication date, YYYY-MM-DD.
+     */
+    published_date: (string | null);
+    author: (string | null);
+    /**
+     * The passages most relevant to the query.
+     */
+    highlights: string[];
+}
+export interface ZoWebSearchOutputV1WebNotice {
+    /**
+     * An open set of codes, such as RESTRICTIONS_RELAXED.
+     */
+    code: string;
+    /**
+     * What the notice means, written for a model reading the results.
+     */
+    message: string;
+    /**
+     * The input field the notice is about, as a JSON Pointer.
+     */
+    path?: (string | null);
+}
 export interface ZoWebsiteCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     slug: string;
     display_name: string;
+    /**
+     * Describe what this Website is for in the user's terms.
+     */
+    description?: string;
     visibility?: ("workspace" | "protected");
 }
 export interface ZoWebsiteCreateOutputV1 {
@@ -6596,6 +8018,7 @@ export interface ZoWebsiteCreateOutputV1 {
     workspace_id: string;
     slug: string;
     display_name: string;
+    description: string;
     generated_hostname: string;
     custom_hostname: (ZoWebsiteCreateOutputV1WebsiteHostname | null);
     access: "public";
@@ -6625,6 +8048,7 @@ export interface ZoWebsiteGetOutputV1 {
     workspace_id: string;
     slug: string;
     display_name: string;
+    description: string;
     generated_hostname: string;
     custom_hostname: (ZoWebsiteGetOutputV1WebsiteHostname | null);
     access: "public";
@@ -6650,6 +8074,7 @@ export interface ZoWebsiteListOutputV1WebsiteListItem {
     workspace_id: string;
     slug: string;
     display_name: string;
+    description: string;
     generated_hostname: string;
     custom_hostname: (ZoWebsiteListOutputV1WebsiteHostname | null);
     access: "public";
@@ -6711,6 +8136,10 @@ export interface ZoWebsiteUpdateInputV1 {
     website_id: string;
     expected_revision: number;
     display_name?: (string | null);
+    /**
+     * Describe what this Website is for in the user's terms.
+     */
+    description?: (string | null);
     custom_hostname?: (ZoWebsiteUpdateInputV1CustomHostnameChange | null);
 }
 export interface ZoWebsiteUpdateInputV1CustomHostnameChange {
@@ -6721,6 +8150,7 @@ export interface ZoWebsiteUpdateOutputV1 {
     workspace_id: string;
     slug: string;
     display_name: string;
+    description: string;
     generated_hostname: string;
     custom_hostname: (ZoWebsiteUpdateOutputV1WebsiteHostname | null);
     access: "public";
@@ -7058,6 +8488,10 @@ export interface ZoWorkflowCancelRunOutputV1 {
 export interface ZoWorkflowCreateInputV1 {
     workspace_id: string;
     display_name: string;
+    /**
+     * Describe what this workflow is for in the user's terms.
+     */
+    description?: string;
     visibility?: ("workspace" | "protected");
 }
 export interface ZoWorkflowCreateOutputV1 {
@@ -7066,6 +8500,7 @@ export interface ZoWorkflowCreateOutputV1 {
     type: "workflow";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     active_revision_id: (string | null);
     latest_revision_id: (string | null);
@@ -7090,6 +8525,7 @@ export interface ZoWorkflowGetOutputV1 {
     type: "workflow";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     active_revision_id: (string | null);
     latest_revision_id: (string | null);
@@ -7167,6 +8603,7 @@ export interface ZoWorkflowListOutputV1VisibleWorkflowResource {
     type: "workflow";
     type_version: number;
     display_name: string;
+    description: string;
     revision: number;
     active_revision_id: (string | null);
     latest_revision_id: (string | null);
@@ -7244,6 +8681,29 @@ export interface ZoWorkflowRevisionGetOutputV1 {
     status: ZoWorkflowRevisionGetOutputV1RevisionStatus;
     error_code: (string | null);
 }
+export interface ZoWorkflowUpdateInputV1 {
+    workflow_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * Omitted or null keeps the description; "" clears it.
+     */
+    description?: (string | null);
+}
+export interface ZoWorkflowUpdateOutputV1 {
+    id: string;
+    workspace_id: string;
+    type: "workflow";
+    type_version: number;
+    display_name: string;
+    description: string;
+    revision: number;
+    active_revision_id: (string | null);
+    latest_revision_id: (string | null);
+    created_at: string;
+    visibility: ("workspace" | "protected");
+    owner_user_id: (string | null);
+}
 export interface ZoWorkspaceGetInputV1 {
     workspace_id: string;
 }
@@ -7341,6 +8801,7 @@ export interface EventSubscriptionV1 {
 export interface FunctionV1 {
     code_owner: ("zo" | "workspace");
 }
+export type MachineV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 /**
  * Public properties of a `machine` resource.
  *
@@ -7358,11 +8819,63 @@ export interface MachineV1 {
     machine_image_id: (string | null);
     vcpus: (number | null);
     memory_mib: (number | null);
+    gpu?: (MachineV1MachineGpu | null);
     region: (string | null);
     idle_timeout_seconds: (number | null);
     max_run_seconds: (number | null);
     init?: (("none" | "image") | null);
     command?: ([string, ...(string)[]] | null);
+    environment?: ({
+        [k: string]: string;
+    } | null);
+    credentials?: (string[] | null);
+    outbound_network_policies?: (MachineV1OutboundNetworkPolicy[] | null);
+}
+export interface MachineV1MachineGpu {
+    type: MachineV1GpuType;
+    count: number;
+}
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface MachineV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (MachineV1HeaderLocation | null);
+    format?: ((MachineV1BearerFormat | MachineV1BasicFormat | MachineV1RawFormat) | null);
+}
+export interface MachineV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface MachineV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface MachineV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface MachineV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
 }
 export type MachineImageV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
 /**
@@ -7496,6 +9009,27 @@ export type Operations = {
             query: ZoAgentSessionListWorkspaceQueryV1;
         };
     };
+    "zo.billing.list_rates": {
+        1: {
+            input: ZoBillingListRatesInputV1;
+            output: ZoBillingListRatesOutputV1;
+            query: ZoBillingListRatesQueryV1;
+        };
+    };
+    "zo.billing.list_usage_entries": {
+        1: {
+            input: ZoBillingListUsageEntriesInputV1;
+            output: ZoBillingListUsageEntriesOutputV1;
+            query: ZoBillingListUsageEntriesQueryV1;
+        };
+    };
+    "zo.billing.summarize_usage": {
+        1: {
+            input: ZoBillingSummarizeUsageInputV1;
+            output: ZoBillingSummarizeUsageOutputV1;
+            query: ZoBillingSummarizeUsageQueryV1;
+        };
+    };
     "zo.connection.authorize": {
         1: {
             input: ZoConnectionAuthorizeInputV1;
@@ -7750,6 +9284,12 @@ export type Operations = {
             output: ZoFunctionPublishContractOutputV1;
         };
     };
+    "zo.function.update": {
+        1: {
+            input: ZoFunctionUpdateInputV1;
+            output: ZoFunctionUpdateOutputV1;
+        };
+    };
     "zo.machine.apply_patch": {
         1: {
             input: ZoMachineApplyPatchInputV1;
@@ -7867,6 +9407,12 @@ export type Operations = {
             query: ZoMachineImageListQueryV1;
         };
     };
+    "zo.machine_image.update": {
+        1: {
+            input: ZoMachineImageUpdateInputV1;
+            output: ZoMachineImageUpdateOutputV1;
+        };
+    };
     "zo.message.get": {
         1: {
             input: ZoMessageGetInputV1;
@@ -7904,6 +9450,19 @@ export type Operations = {
             output: ZoOauthAppUpdateOutputV1;
         };
     };
+    "zo.quota.get": {
+        1: {
+            input: ZoQuotaGetInputV1;
+            output: ZoQuotaGetOutputV1;
+        };
+    };
+    "zo.quota.list": {
+        1: {
+            input: ZoQuotaListInputV1;
+            output: ZoQuotaListOutputV1;
+            query: ZoQuotaListQueryV1;
+        };
+    };
     "zo.schedule.create": {
         1: {
             input: ZoScheduleCreateInputV1;
@@ -8150,6 +9709,18 @@ export type Operations = {
             output: ZoVaultUpdateOutputV1;
         };
     };
+    "zo.web.fetch": {
+        1: {
+            input: ZoWebFetchInputV1;
+            output: ZoWebFetchOutputV1;
+        };
+    };
+    "zo.web.search": {
+        1: {
+            input: ZoWebSearchInputV1;
+            output: ZoWebSearchOutputV1;
+        };
+    };
     "zo.website.create": {
         1: {
             input: ZoWebsiteCreateInputV1;
@@ -8292,6 +9863,12 @@ export type Operations = {
             output: ZoWorkflowRevisionGetOutputV1;
         };
     };
+    "zo.workflow.update": {
+        1: {
+            input: ZoWorkflowUpdateInputV1;
+            output: ZoWorkflowUpdateOutputV1;
+        };
+    };
     "zo.workspace.get": {
         1: {
             input: ZoWorkspaceGetInputV1;
@@ -8320,6 +9897,9 @@ export type DefaultVersions = {
     "zo.agent_session.history": 1;
     "zo.agent_session.list": 1;
     "zo.agent_session.list_workspace": 1;
+    "zo.billing.list_rates": 1;
+    "zo.billing.list_usage_entries": 1;
+    "zo.billing.summarize_usage": 1;
     "zo.connection.authorize": 1;
     "zo.connection.create": 1;
     "zo.connection.delete": 1;
@@ -8360,6 +9940,7 @@ export type DefaultVersions = {
     "zo.function.list": 1;
     "zo.function.list_runs": 1;
     "zo.function.publish_contract": 1;
+    "zo.function.update": 1;
     "zo.machine.apply_patch": 1;
     "zo.machine.create": 1;
     "zo.machine.destroy": 1;
@@ -8379,12 +9960,15 @@ export type DefaultVersions = {
     "zo.machine_image.get": 1;
     "zo.machine_image.import": 1;
     "zo.machine_image.list": 1;
+    "zo.machine_image.update": 1;
     "zo.message.get": 1;
     "zo.oauth_app.create": 1;
     "zo.oauth_app.delete": 1;
     "zo.oauth_app.get": 1;
     "zo.oauth_app.list": 1;
     "zo.oauth_app.update": 1;
+    "zo.quota.get": 1;
+    "zo.quota.list": 1;
     "zo.schedule.create": 1;
     "zo.schedule.delete": 1;
     "zo.schedule.get": 1;
@@ -8422,6 +10006,8 @@ export type DefaultVersions = {
     "zo.vault.list": 1;
     "zo.vault.rotate": 1;
     "zo.vault.update": 1;
+    "zo.web.fetch": 1;
+    "zo.web.search": 1;
     "zo.website.create": 1;
     "zo.website.delete": 1;
     "zo.website.get": 1;
@@ -8445,6 +10031,7 @@ export type DefaultVersions = {
     "zo.workflow.list_runs": 1;
     "zo.workflow.publish": 1;
     "zo.workflow.revision.get": 1;
+    "zo.workflow.update": 1;
     "zo.workspace.get": 1;
     "zo.workspace.list_resources": 1;
 };