@zocomputer/system-api 0.1.2 → 0.1.4

package/dist/generated/operations.d.ts

@@ -103,6 +103,12 @@ export interface ZoAgentCancelOutputV1 {
     state: ("idle" | "cancelling");
 }
 export interface ZoAgentCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     display_name: string;
     /**
@@ -118,9 +124,13 @@ export interface ZoAgentCreateInputV1 {
  */
 export interface ZoAgentCreateInputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -164,9 +174,13 @@ export interface ZoAgentCreateOutputV1 {
  */
 export interface ZoAgentCreateOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -248,9 +262,13 @@ export interface ZoAgentGetOutputV1 {
  */
 export interface ZoAgentGetOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -328,9 +346,13 @@ export interface ZoAgentListOutputV1Agent {
  */
 export interface ZoAgentListOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -458,6 +480,14 @@ export interface ZoAgentListMessagesOutputV1MessageDelivery {
      */
     outcome: (("completed" | "cancelled" | "interrupted" | "failed") | null);
     outcome_reason: (string | null);
+    /**
+     * The model the message was admitted with: the one it named, else the session's.
+     */
+    model: (string | null);
+    /**
+     * The reasoning level the message was admitted with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentListMessagesQueryV1 {
     /**
@@ -484,6 +514,14 @@ export interface ZoAgentSendInputV1 {
      * How the message affects work already running in the session: wait behind it, join it, or stop it.
      */
     priority?: ("queue" | "steer" | "interrupt");
+    /**
+     * Make this the session's model, from the turn this message starts; a steer that joins a running turn changes the next one. Omit to keep the session's choice.
+     */
+    model?: (string | null);
+    /**
+     * The model's reasoning level; null for the model's default. Requires model.
+     */
+    reasoning?: (string | null);
 }
 export interface ZoAgentSendInputV1TextBlock {
     type: "text";
@@ -544,9 +582,13 @@ export interface ZoAgentUpdateInputV1 {
  */
 export interface ZoAgentUpdateInputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -590,9 +632,13 @@ export interface ZoAgentUpdateOutputV1 {
  */
 export interface ZoAgentUpdateOutputV1NativeConfiguration {
     /**
-     * Model identifier the runner calls.
+     * The model a new session starts with. Each session keeps its own choice after that.
      */
     model: string;
+    /**
+     * The reasoning level a new session starts with, one the model's catalog offers; null for the model's default.
+     */
+    reasoning?: (string | null);
     /**
      * The Agent's instructions.
      */
@@ -651,6 +697,14 @@ export interface ZoAgentSessionGetOutputV1 {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
     /**
      * Server-sent events of the session's history, then its live output, read with the same Bearer credential. Authorized as zo.agent_session.history.
      */
@@ -709,6 +763,14 @@ export interface ZoAgentSessionListOutputV1AgentSession {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentSessionListQueryV1 {
     /**
@@ -741,6 +803,14 @@ export interface ZoAgentSessionListWorkspaceOutputV1AgentSession {
      * When the session's newest message or event was delivered to it; created_at when it has none.
      */
     last_activity_at: string;
+    /**
+     * The model the session's next inputs run with.
+     */
+    model: string;
+    /**
+     * The reasoning level the session's next inputs run with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoAgentSessionListWorkspaceQueryV1 {
     /**
@@ -759,6 +829,298 @@ export interface ZoAgentSessionListWorkspaceQueryV1 {
         agent_id?: (string | null);
     };
 }
+export interface ZoBillingListRatesInputV1 {
+    workspace_id: string;
+}
+export interface ZoBillingListRatesOutputV1 {
+    workspace_id: string;
+    observed_at: string;
+    rates: ZoBillingListRatesOutputV1BillingRate[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingListRatesOutputV1BillingRate {
+    /**
+     * Current catalog key; not an immutable historical price identifier.
+     */
+    rate_key: string;
+    product: string;
+    meter: string;
+    price: ZoBillingListRatesOutputV1AppliedPrice;
+    model_id?: (string | null);
+    tool_name?: (string | null);
+    provider?: (string | null);
+    sku?: (string | null);
+    resource_kind?: (string | null);
+    conditions?: ZoBillingListRatesOutputV1RateConditions;
+    promotional_end?: (string | null);
+    applicability?: ("active" | "no_usage_feed");
+}
+export interface ZoBillingListRatesOutputV1AppliedPrice {
+    amount: string;
+    currency?: "USD";
+    per: ZoBillingListRatesOutputV1BillingQuantity;
+    tariff_version?: (string | null);
+    usage_price_multiplier?: (string | null);
+}
+export interface ZoBillingListRatesOutputV1BillingQuantity {
+    amount: string;
+    unit: string;
+}
+export interface ZoBillingListRatesOutputV1RateConditions {
+    /**
+     * Inclusive request-size lower bound.
+     */
+    request_input_tokens_min?: (number | null);
+    /**
+     * Exclusive request-size upper bound.
+     */
+    request_input_tokens_max?: (number | null);
+    /**
+     * The matching tier prices the whole request.
+     */
+    whole_request?: boolean;
+    operation?: (string | null);
+    resolution?: (string | null);
+    quality?: (string | null);
+    duration_seconds?: (string | null);
+    quantity_min?: (string | null);
+    quantity_max?: (string | null);
+    included_quantity?: (string | null);
+    default_quantity?: (string | null);
+    quantity_argument?: (string | null);
+    selector?: {
+        [k: string]: JsonValue;
+    };
+    rounding?: ("none" | "ceil_step");
+}
+export interface ZoBillingListRatesQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: "rate_key.asc";
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        tool_name?: (string | null);
+        provider?: (string | null);
+        sku?: (string | null);
+    };
+}
+export interface ZoBillingListUsageEntriesInputV1 {
+    workspace_id: string;
+    period: ZoBillingListUsageEntriesInputV1BillingPeriod;
+}
+export interface ZoBillingListUsageEntriesInputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1 {
+    workspace_id: string;
+    period: ZoBillingListUsageEntriesOutputV1BillingPeriod;
+    history_mode?: "forward_only";
+    observed_at: string;
+    entries: ZoBillingListUsageEntriesOutputV1UsageEntry[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1UsageEntry {
+    id: string;
+    usage_id: string;
+    product: string;
+    meter: string;
+    quantity: ZoBillingListUsageEntriesOutputV1BillingQuantity;
+    cost: ZoBillingListUsageEntriesOutputV1BillingMoney;
+    /**
+     * Null for an explicit occurrence rounding adjustment.
+     */
+    applied_price: (ZoBillingListUsageEntriesOutputV1AppliedPrice | null);
+    occurred_at: string;
+    recorded_at: string;
+    interval_start: (string | null);
+    interval_end: (string | null);
+    attribution: ZoBillingListUsageEntriesOutputV1UsageAttribution;
+    correction_of_entry_id: (string | null);
+    correction_of_usage_id: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingQuantity {
+    amount: string;
+    unit: string;
+}
+export interface ZoBillingListUsageEntriesOutputV1BillingMoney {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingListUsageEntriesOutputV1AppliedPrice {
+    amount: string;
+    currency?: "USD";
+    per: ZoBillingListUsageEntriesOutputV1BillingQuantity;
+    tariff_version?: (string | null);
+    usage_price_multiplier?: (string | null);
+}
+export interface ZoBillingListUsageEntriesOutputV1UsageAttribution {
+    model_id?: (string | null);
+    resource_id?: (string | null);
+    /**
+     * Current name, including protected resources; null if unavailable.
+     */
+    resource_name?: (string | null);
+    agent_id?: (string | null);
+    agent_session_id?: (string | null);
+    agent_session_name?: (string | null);
+    turn_id?: (string | null);
+    host_id?: (string | null);
+    conversation_id?: (string | null);
+    run_id?: (string | null);
+    tool_call_id?: (string | null);
+    tool_name?: (string | null);
+    provider?: (string | null);
+    sku?: (string | null);
+    bucket?: (string | null);
+    operation?: (string | null);
+    attribution_kind?: (string | null);
+    provider_request_id?: (string | null);
+    catalog_revision?: (string | null);
+    gpu_type?: (string | null);
+    storage_component?: (string | null);
+    billing_model_slug?: (string | null);
+    output_count?: (number | null);
+}
+export interface ZoBillingListUsageEntriesQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: ("occurred_at.desc" | "occurred_at.asc");
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        resource_id?: (string | null);
+        agent_id?: (string | null);
+        agent_session_id?: (string | null);
+        turn_id?: (string | null);
+        usage_id?: (string | null);
+    };
+}
+export interface ZoBillingSummarizeUsageInputV1 {
+    workspace_id: string;
+    period: ZoBillingSummarizeUsageInputV1BillingPeriod;
+    /**
+     * @maxItems 4
+     */
+    group_by?: [] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")] | [("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id"), ("product" | "meter" | "model_id" | "resource_id" | "agent_id" | "agent_session_id" | "turn_id" | "usage_id")];
+    /**
+     * Add UTC calendar-day buckets to each group.
+     */
+    daily?: boolean;
+}
+export interface ZoBillingSummarizeUsageInputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+export interface ZoBillingSummarizeUsageOutputV1 {
+    workspace_id: string;
+    period: ZoBillingSummarizeUsageOutputV1BillingPeriod;
+    history_mode?: "forward_only";
+    observed_at: string;
+    recorded_cost: ZoBillingSummarizeUsageOutputV1BillingMoney;
+    entry_count: number;
+    groups: ZoBillingSummarizeUsageOutputV1UsageGroup[];
+    next_cursor: (string | null);
+}
+export interface ZoBillingSummarizeUsageOutputV1BillingPeriod {
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    start: string;
+    /**
+     * An ISO 8601 timestamp with a time zone.
+     */
+    end: string;
+}
+/**
+ * Signed cost over every matching recorded entry, across all pages.
+ */
+export interface ZoBillingSummarizeUsageOutputV1BillingMoney {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingSummarizeUsageOutputV1UsageGroup {
+    /**
+     * Stable opaque ordering key for this combination of dimensions and UTC day.
+     */
+    key: string;
+    dimensions: ZoBillingSummarizeUsageOutputV1UsageFilter;
+    day: (string | null);
+    recorded_cost: ZoBillingSummarizeUsageOutputV1BillingMoney1;
+    entry_count: number;
+}
+export interface ZoBillingSummarizeUsageOutputV1UsageFilter {
+    product?: (string | null);
+    meter?: (string | null);
+    model_id?: (string | null);
+    resource_id?: (string | null);
+    agent_id?: (string | null);
+    agent_session_id?: (string | null);
+    turn_id?: (string | null);
+    usage_id?: (string | null);
+}
+export interface ZoBillingSummarizeUsageOutputV1BillingMoney1 {
+    amount: string;
+    currency?: "USD";
+}
+export interface ZoBillingSummarizeUsageQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: "key.asc";
+    filter?: {
+        product?: (string | null);
+        meter?: (string | null);
+        model_id?: (string | null);
+        resource_id?: (string | null);
+        agent_id?: (string | null);
+        agent_session_id?: (string | null);
+        turn_id?: (string | null);
+        usage_id?: (string | null);
+    };
+}
 export interface ZoConnectionAuthorizeInputV1 {
     connection_id: string;
     expected_revision: number;
@@ -800,6 +1162,12 @@ export interface ZoConnectionAuthorizeOutputV1KeyAttached {
     revision: number;
 }
 export interface ZoConnectionCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     /**
      * The published definition to connect to. Give it, or `values`, not both.
@@ -1101,11 +1469,18 @@ export interface ZoConnectionDefinitionPublishOutputV1 {
     visibility: string;
 }
 export interface ZoDatabaseCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     /**
-     * Required but ignored: a retried create can make a second database.
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
      */
-    idempotency_key: string;
+    idempotency_key?: (string | null);
     display_name: string;
     /**
      * What the database holds. Members and their agents choose a database from `zo.database.list` by it.
@@ -1813,6 +2188,12 @@ export interface ZoDatabaseUpdateOutputV1DatabaseStorage {
  * ``subject_type`` is the resource type an occurrence's ``subject`` names.
  */
 export interface ZoEventCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     publisher: string;
     name: string;
@@ -1865,6 +2246,12 @@ export interface ZoEventCreateOutputV1EventProperties {
  * to, which ``per_conversation`` Agent subscriptions key sessions by.
  */
 export interface ZoEventCreateInputV2 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     publisher: string;
     name: string;
@@ -2467,6 +2854,34 @@ export interface ZoFunctionPublishContractOutputV1 {
     contract_version: number;
     digest: string;
 }
+/**
+ * Omitted fields keep their value.
+ */
+export interface ZoFunctionUpdateInputV1 {
+    function_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * "" clears the description.
+     */
+    description?: (string | null);
+}
+export interface ZoFunctionUpdateOutputV1 {
+    id: string;
+    workspace_id: string;
+    type: "function";
+    type_version: number;
+    display_name: string;
+    description: string;
+    revision: number;
+    properties: ZoFunctionUpdateOutputV1FunctionProperties;
+    active_deployment_id: (string | null);
+    visibility: ("workspace" | "protected");
+    owner_user_id: (string | null);
+}
+export interface ZoFunctionUpdateOutputV1FunctionProperties {
+    code_owner: ("zo" | "workspace");
+}
 export interface ZoMachineApplyPatchInputV1 {
     machine_id: string;
     path: string;
@@ -2490,8 +2905,18 @@ export interface ZoMachineApplyPatchOutputV1 {
 }
 export type ZoMachineCreateInputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export interface ZoMachineCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
     display_name: string;
     /**
      * Describe what this machine is for in the user's terms.
@@ -2521,6 +2946,12 @@ export interface ZoMachineCreateInputV1 {
      * @maxItems 100
      */
     credentials?: string[];
+    /**
+     * Header rules: on HTTPS requests from the machine to a rule's hosts, Zo sets a header built from a connection's credential, and the credential never enters the machine. A rule names the connection (`credential`) and one of its definition's slots (`slot`). With only those two, it uses the hosts, header and format the slot declares in its `injections`. It may give its own `hosts`, `location` and `format`, all three together, only for a slot that declares an `environment_variable`. Formats: `bearer` (`Bearer <value>`), `basic` with a `username` (`Basic` with base64 of `<username>:<value>`) and `raw` (the value as stored). A rule sets its header only while the machine holds a use grant on the connection. Two rules can't set the same header on the same host, and all rules together set at most 25 header values. Requests to a host with a rule use HTTP/1.1.
+     *
+     * @maxItems 25
+     */
+    outbound_network_policies?: ZoMachineCreateInputV1OutboundNetworkPolicy[];
     /**
      * `workspace` (default): every member can see and use it. `protected`: only you, and whoever you share it with; workspace-wide grants don't reach it. Fixed at creation.
      */
@@ -2551,6 +2982,48 @@ export interface ZoMachineCreateInputV1MachineLifecycleInput {
     idle_timeout_seconds?: (number | null);
     max_run_seconds: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineCreateInputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineCreateInputV1HeaderLocation | null);
+    format?: ((ZoMachineCreateInputV1BearerFormat | ZoMachineCreateInputV1BasicFormat | ZoMachineCreateInputV1RawFormat) | null);
+}
+export interface ZoMachineCreateInputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineCreateInputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineCreateInputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineCreateInputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export type ZoMachineCreateOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineCreateOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
 /**
@@ -2604,11 +3077,54 @@ export interface ZoMachineCreateOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineCreateOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineCreateOutputV1MachineGpu {
     type: ZoMachineCreateOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineCreateOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineCreateOutputV1HeaderLocation | null);
+    format?: ((ZoMachineCreateOutputV1BearerFormat | ZoMachineCreateOutputV1BasicFormat | ZoMachineCreateOutputV1RawFormat) | null);
+}
+export interface ZoMachineCreateOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineCreateOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineCreateOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineCreateOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineCreateOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -2616,7 +3132,11 @@ export interface ZoMachineCreateOutputV1MachineBootedView {
 export interface ZoMachineDestroyInputV1 {
     machine_id: string;
     expected_revision: number;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
 }
 export type ZoMachineDestroyOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineDestroyOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
@@ -2671,11 +3191,54 @@ export interface ZoMachineDestroyOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineDestroyOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineDestroyOutputV1MachineGpu {
     type: ZoMachineDestroyOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineDestroyOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineDestroyOutputV1HeaderLocation | null);
+    format?: ((ZoMachineDestroyOutputV1BearerFormat | ZoMachineDestroyOutputV1BasicFormat | ZoMachineDestroyOutputV1RawFormat) | null);
+}
+export interface ZoMachineDestroyOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineDestroyOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineDestroyOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineDestroyOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineDestroyOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -2751,11 +3314,54 @@ export interface ZoMachineGetOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineGetOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineGetOutputV1MachineGpu {
     type: ZoMachineGetOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineGetOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineGetOutputV1HeaderLocation | null);
+    format?: ((ZoMachineGetOutputV1BearerFormat | ZoMachineGetOutputV1BasicFormat | ZoMachineGetOutputV1RawFormat) | null);
+}
+export interface ZoMachineGetOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineGetOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineGetOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineGetOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineGetOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -2820,11 +3426,54 @@ export interface ZoMachineListOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineListOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineListOutputV1MachineGpu {
     type: ZoMachineListOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineListOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineListOutputV1HeaderLocation | null);
+    format?: ((ZoMachineListOutputV1BearerFormat | ZoMachineListOutputV1BasicFormat | ZoMachineListOutputV1RawFormat) | null);
+}
+export interface ZoMachineListOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineListOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineListOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineListOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineListOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -2932,7 +3581,11 @@ export interface ZoMachineReadBytesOutputV1 {
 export interface ZoMachineResumeInputV1 {
     machine_id: string;
     expected_revision: number;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
     accept_recovery?: boolean;
 }
 export type ZoMachineResumeOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
@@ -2988,11 +3641,54 @@ export interface ZoMachineResumeOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineResumeOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineResumeOutputV1MachineGpu {
     type: ZoMachineResumeOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineResumeOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineResumeOutputV1HeaderLocation | null);
+    format?: ((ZoMachineResumeOutputV1BearerFormat | ZoMachineResumeOutputV1BasicFormat | ZoMachineResumeOutputV1RawFormat) | null);
+}
+export interface ZoMachineResumeOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineResumeOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineResumeOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineResumeOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineResumeOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -3055,7 +3751,11 @@ export interface ZoMachineSnapshotOutputV1MachineImageProperties {
 export interface ZoMachineStopInputV1 {
     machine_id: string;
     expected_revision: number;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
 }
 export type ZoMachineStopOutputV1GpuType = ("T4" | "L4" | "A10" | "L40S" | "A100" | "A100-40GB" | "A100-80GB" | "RTX-PRO-6000" | "H100" | "H100!" | "H200" | "B200" | "B200+" | "B300");
 export type ZoMachineStopOutputV1ObservedState = ("creating" | "running" | "stopping" | "stopped" | "resuming" | "destroying" | "destroyed" | "failed");
@@ -3110,11 +3810,54 @@ export interface ZoMachineStopOutputV1MachineProperties {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (ZoMachineStopOutputV1OutboundNetworkPolicy[] | null);
 }
 export interface ZoMachineStopOutputV1MachineGpu {
     type: ZoMachineStopOutputV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineStopOutputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineStopOutputV1HeaderLocation | null);
+    format?: ((ZoMachineStopOutputV1BearerFormat | ZoMachineStopOutputV1BasicFormat | ZoMachineStopOutputV1RawFormat) | null);
+}
+export interface ZoMachineStopOutputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineStopOutputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineStopOutputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineStopOutputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineStopOutputV1MachineBootedView {
     init: ("none" | "image");
     command: (string[] | null);
@@ -3239,6 +3982,10 @@ export interface ZoMachineUpdateInputV1 {
      * The list that replaces the stored one; omit it to keep it. Connection IDs whose credentials the machine receives as environment variables, in the boot process and every command. Each slot of a listed connection sets the variable its definition names, with the variables the slot and the connection declare. The machine also needs a use grant on each connection (`zo.grant.create` with the machine as assignee); a listed connection without one delivers nothing. When two listed connections set the same variable, the later one in the list wins. At most 100 connections, each listed once.
      */
     credentials?: (string[] | null);
+    /**
+     * The rules that replace the stored ones; omit them to keep them. A running machine's requests use the new rules once the update returns. Header rules: on HTTPS requests from the machine to a rule's hosts, Zo sets a header built from a connection's credential, and the credential never enters the machine. A rule names the connection (`credential`) and one of its definition's slots (`slot`). With only those two, it uses the hosts, header and format the slot declares in its `injections`. It may give its own `hosts`, `location` and `format`, all three together, only for a slot that declares an `environment_variable`. Formats: `bearer` (`Bearer <value>`), `basic` with a `username` (`Basic` with base64 of `<username>:<value>`) and `raw` (the value as stored). A rule sets its header only while the machine holds a use grant on the connection. Two rules can't set the same header on the same host, and all rules together set at most 25 header values. Requests to a host with a rule use HTTP/1.1.
+     */
+    outbound_network_policies?: (ZoMachineUpdateInputV1OutboundNetworkPolicy[] | null);
 }
 /**
  * The timers a caller may change after create. Modal fixes them at
@@ -3248,6 +3995,48 @@ export interface ZoMachineUpdateInputV1MachineLifecycleUpdate {
     idle_timeout_seconds?: (number | null);
     max_run_seconds?: (number | null);
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface ZoMachineUpdateInputV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (ZoMachineUpdateInputV1HeaderLocation | null);
+    format?: ((ZoMachineUpdateInputV1BearerFormat | ZoMachineUpdateInputV1BasicFormat | ZoMachineUpdateInputV1RawFormat) | null);
+}
+export interface ZoMachineUpdateInputV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface ZoMachineUpdateInputV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface ZoMachineUpdateInputV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface ZoMachineUpdateInputV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export interface ZoMachineUpdateOutputV1 {
     machine_id: string;
     revision: number;
@@ -3271,7 +4060,11 @@ export interface ZoMachineWriteBytesOutputV1 {
 export interface ZoMachineImageDeleteInputV1 {
     machine_image_id: string;
     expected_revision: number;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
 }
 export type ZoMachineImageDeleteOutputV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
 export type ZoMachineImageDeleteOutputV1ImageStatus = ("pending" | "preparing" | "ready" | "failed" | "deleting" | "deleted");
@@ -3357,7 +4150,11 @@ export interface ZoMachineImageImportInputV1 {
      */
     visibility?: ("workspace" | "protected");
     workspace_id: string;
-    idempotency_key: string;
+    /**
+     * @deprecated
+     * Ignored compatibility field. Omit it; supplying a key does not deduplicate this operation.
+     */
+    idempotency_key?: (string | null);
     source: ZoMachineImageImportInputV1RegistrySourceInput;
 }
 export interface ZoMachineImageImportInputV1RegistrySourceInput {
@@ -3403,18 +4200,73 @@ export interface ZoMachineImageImportOutputV1MachineImageProperties {
 export interface ZoMachineImageListInputV1 {
     workspace_id: string;
 }
-export type ZoMachineImageListOutputV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
-export type ZoMachineImageListOutputV1ImageStatus = ("pending" | "preparing" | "ready" | "failed" | "deleting" | "deleted");
-export interface ZoMachineImageListOutputV1 {
-    machine_images: ZoMachineImageListOutputV1MachineImageView[];
-    next_cursor?: (string | null);
+export type ZoMachineImageListOutputV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
+export type ZoMachineImageListOutputV1ImageStatus = ("pending" | "preparing" | "ready" | "failed" | "deleting" | "deleted");
+export interface ZoMachineImageListOutputV1 {
+    machine_images: ZoMachineImageListOutputV1MachineImageView[];
+    next_cursor?: (string | null);
+}
+/**
+ * A `machine_image` resource with its preparation status. ``source_digest``
+ * is the pinned manifest digest once resolved; ``error_code`` is set only for
+ * an image that failed.
+ */
+export interface ZoMachineImageListOutputV1MachineImageView {
+    id: string;
+    workspace_id: string;
+    type: "machine_image";
+    type_version: number;
+    display_name: string;
+    description: string;
+    visibility: ("workspace" | "protected");
+    revision: number;
+    properties: ZoMachineImageListOutputV1MachineImageProperties;
+    status: ZoMachineImageListOutputV1ImageStatus;
+    source_digest: (string | null);
+    error_code: (string | null);
+    created_at: string;
+    ready_at: (string | null);
+    deleted_at: (string | null);
+}
+/**
+ * Public properties of a `machine_image` resource, type version 1: what
+ * the image is, fixed when it was admitted. Status and the resolved digest
+ * live on the ``machine_images`` row, not in the registry.
+ */
+export interface ZoMachineImageListOutputV1MachineImageProperties {
+    origin: ZoMachineImageListOutputV1ImageOrigin;
+    artifact_format: ("oci" | "provider_filesystem_snapshot");
+    architecture: ("amd64" | "arm64");
+    source_ref: (string | null);
+}
+export interface ZoMachineImageListQueryV1 {
+    /**
+     * Rows per page, at most 200; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: ("id.asc" | "created_at.desc" | "created_at.asc" | "display_name.asc");
+}
+export interface ZoMachineImageUpdateInputV1 {
+    machine_image_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * "" clears the description.
+     */
+    description?: (string | null);
 }
+export type ZoMachineImageUpdateOutputV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
+export type ZoMachineImageUpdateOutputV1ImageStatus = ("pending" | "preparing" | "ready" | "failed" | "deleting" | "deleted");
 /**
  * A `machine_image` resource with its preparation status. ``source_digest``
  * is the pinned manifest digest once resolved; ``error_code`` is set only for
  * an image that failed.
  */
-export interface ZoMachineImageListOutputV1MachineImageView {
+export interface ZoMachineImageUpdateOutputV1 {
     id: string;
     workspace_id: string;
     type: "machine_image";
@@ -3423,8 +4275,8 @@ export interface ZoMachineImageListOutputV1MachineImageView {
     description: string;
     visibility: ("workspace" | "protected");
     revision: number;
-    properties: ZoMachineImageListOutputV1MachineImageProperties;
-    status: ZoMachineImageListOutputV1ImageStatus;
+    properties: ZoMachineImageUpdateOutputV1MachineImageProperties;
+    status: ZoMachineImageUpdateOutputV1ImageStatus;
     source_digest: (string | null);
     error_code: (string | null);
     created_at: string;
@@ -3436,23 +4288,12 @@ export interface ZoMachineImageListOutputV1MachineImageView {
  * the image is, fixed when it was admitted. Status and the resolved digest
  * live on the ``machine_images`` row, not in the registry.
  */
-export interface ZoMachineImageListOutputV1MachineImageProperties {
-    origin: ZoMachineImageListOutputV1ImageOrigin;
+export interface ZoMachineImageUpdateOutputV1MachineImageProperties {
+    origin: ZoMachineImageUpdateOutputV1ImageOrigin;
     artifact_format: ("oci" | "provider_filesystem_snapshot");
     architecture: ("amd64" | "arm64");
     source_ref: (string | null);
 }
-export interface ZoMachineImageListQueryV1 {
-    /**
-     * Rows per page, at most 200; a larger value is reduced to it.
-     */
-    limit?: number;
-    /**
-     * The previous page's next_cursor, sent with the same sort, filter and search.
-     */
-    cursor?: string;
-    sort?: ("id.asc" | "created_at.desc" | "created_at.asc" | "display_name.asc");
-}
 export interface ZoMessageGetInputV1 {
     /**
      * The Agent that sent or received the message.
@@ -3520,6 +4361,14 @@ export interface ZoMessageGetOutputV1MessageDelivery {
      */
     outcome: (("completed" | "cancelled" | "interrupted" | "failed") | null);
     outcome_reason: (string | null);
+    /**
+     * The model the message was admitted with: the one it named, else the session's.
+     */
+    model: (string | null);
+    /**
+     * The reasoning level the message was admitted with; null for the model's default.
+     */
+    reasoning: (string | null);
 }
 export interface ZoOauthAppCreateInputV1 {
     workspace_id: string;
@@ -3658,7 +4507,174 @@ export interface ZoOauthAppUpdateOutputV1 {
     connection_id: (string | null);
     state: string;
 }
+export interface ZoQuotaGetInputV1 {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+}
+export interface ZoQuotaGetOutputV1 {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+    description: string;
+    kind: ("capacity" | "windowed" | "per_resource_bound");
+    scope: ZoQuotaGetOutputV1QuotaScope;
+    unit: string;
+    limit: ZoQuotaGetOutputV1QuotaLimit;
+    measurement: ZoQuotaGetOutputV1QuotaMeasurement;
+    headroom: ZoQuotaGetOutputV1QuotaRemainder;
+    overage: ZoQuotaGetOutputV1QuotaRemainder;
+}
+export interface ZoQuotaGetOutputV1QuotaScope {
+    kind: ("workspace" | "resource");
+    resource_type?: (string | null);
+}
+export interface ZoQuotaGetOutputV1QuotaLimit {
+    kind: ("finite" | "unlimited" | "not_configured" | "unavailable");
+    amount?: (string | null);
+}
+export interface ZoQuotaGetOutputV1QuotaMeasurement {
+    status: ("available" | "unavailable" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+    observed_at?: (string | null);
+    basis?: (string | null);
+    used?: (string | null);
+    reserved?: (string | null);
+    window?: (ZoQuotaGetOutputV1QuotaWindow | null);
+}
+export interface ZoQuotaGetOutputV1QuotaWindow {
+    start: string;
+    end: string;
+    rule: ("trailing_86400_seconds" | "billing_period");
+}
+export interface ZoQuotaGetOutputV1QuotaRemainder {
+    status: ("available" | "unknown" | "unlimited" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListInputV1 {
+    workspace_id: string;
+}
+export interface ZoQuotaListOutputV1 {
+    quotas: ZoQuotaListOutputV1QuotaReading[];
+    next_cursor?: (string | null);
+    observed_at: string;
+}
+export interface ZoQuotaListOutputV1QuotaReading {
+    workspace_id: string;
+    /**
+     * Public quota definitions:
+     * database.count: Databases not yet deleted, including creation and deletion in progress. Kind: capacity; scope: workspace; unit: database; measurement: databases_not_deleted.
+     * database.storage_per_database: Desired storage ceiling for each database; a provider update may still be pending. Kind: per_resource_bound; scope: resource (database); unit: byte; measurement: not_applicable.
+     * knowledge.storage: Stored and reserved Knowledge bytes. Kind: capacity; scope: workspace; unit: byte; measurement: stored_bytes_plus_reserved_bytes.
+     * machine.allocated_gpus: GPU count in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: gpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_machines: Unreleased machine compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: machine; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_memory: Memory in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: MiB; measurement: unreleased_allocations_including_pending_starts.
+     * machine.allocated_vcpus: vCPUs in unreleased compute allocations, including pending starts. Kind: capacity; scope: workspace; unit: vcpu; measurement: unreleased_allocations_including_pending_starts.
+     * machine.concurrent_image_builds: Image builds in pending or preparing states. Kind: capacity; scope: workspace; unit: build; measurement: pending_and_preparing_images.
+     * machine.image_builds_24h: Registry and build-origin images created in the trailing 86400 seconds. Kind: windowed; scope: workspace; unit: build; measurement: registry_and_build_images_created_in_trailing_86400_seconds.
+     * machine.image_lineage_depth: Maximum lineage depth of one machine image. Kind: per_resource_bound; scope: resource (machine_image); unit: level; measurement: not_applicable.
+     * machine.memory_per_machine: Maximum memory allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: MiB; measurement: not_applicable.
+     * machine.period_spend: Billed and proven unbilled machine compute in the workspace billing period; this allowance is not available credit. Kind: windowed; scope: workspace; unit: USD; measurement: billed_and_proven_unbilled_compute_in_billing_period.
+     * machine.retained_images: Images not yet deleted, including unfinished images. Kind: capacity; scope: workspace; unit: image; measurement: images_not_deleted.
+     * machine.retained_storage: Latest retained root and volume storage measurements under admission retention rules. Kind: capacity; scope: workspace; unit: byte; measurement: latest_retained_root_and_volume_measurements.
+     * machine.vcpus_per_machine: Maximum vCPUs allocated to one machine. Kind: per_resource_bound; scope: resource (machine); unit: vcpu; measurement: not_applicable.
+     * workspace.members: Memberships and live invitations occupying admission slots. Kind: capacity; scope: workspace; unit: member; measurement: memberships_and_live_invitations.
+     */
+    quota_key: ("database.count" | "database.storage_per_database" | "knowledge.storage" | "machine.allocated_gpus" | "machine.allocated_machines" | "machine.allocated_memory" | "machine.allocated_vcpus" | "machine.concurrent_image_builds" | "machine.image_builds_24h" | "machine.image_lineage_depth" | "machine.memory_per_machine" | "machine.period_spend" | "machine.retained_images" | "machine.retained_storage" | "machine.vcpus_per_machine" | "workspace.members");
+    description: string;
+    kind: ("capacity" | "windowed" | "per_resource_bound");
+    scope: ZoQuotaListOutputV1QuotaScope;
+    unit: string;
+    limit: ZoQuotaListOutputV1QuotaLimit;
+    measurement: ZoQuotaListOutputV1QuotaMeasurement;
+    headroom: ZoQuotaListOutputV1QuotaRemainder;
+    overage: ZoQuotaListOutputV1QuotaRemainder;
+}
+export interface ZoQuotaListOutputV1QuotaScope {
+    kind: ("workspace" | "resource");
+    resource_type?: (string | null);
+}
+export interface ZoQuotaListOutputV1QuotaLimit {
+    kind: ("finite" | "unlimited" | "not_configured" | "unavailable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListOutputV1QuotaMeasurement {
+    status: ("available" | "unavailable" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+    observed_at?: (string | null);
+    basis?: (string | null);
+    used?: (string | null);
+    reserved?: (string | null);
+    window?: (ZoQuotaListOutputV1QuotaWindow | null);
+}
+export interface ZoQuotaListOutputV1QuotaWindow {
+    start: string;
+    end: string;
+    rule: ("trailing_86400_seconds" | "billing_period");
+}
+export interface ZoQuotaListOutputV1QuotaRemainder {
+    status: ("available" | "unknown" | "unlimited" | "not_configured" | "not_applicable");
+    amount?: (string | null);
+}
+export interface ZoQuotaListQueryV1 {
+    /**
+     * Rows per page, at most 100; a larger value is reduced to it.
+     */
+    limit?: number;
+    /**
+     * The previous page's next_cursor, sent with the same sort, filter and search.
+     */
+    cursor?: string;
+    sort?: ("quota_key.asc" | "quota_key.desc");
+    filter?: {
+        kind?: (("capacity" | "windowed" | "per_resource_bound") | null);
+        scope?: (("workspace" | "resource") | null);
+        resource_type?: (("machine" | "machine_image" | "database") | null);
+    };
+}
 export interface ZoScheduleCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     display_name: string;
     /**
@@ -3871,6 +4887,12 @@ export type ZoSubscriptionCreateInputV1InputContractKind = ("exact_event" | "gen
  * account the handler runs as. Omit ``filter`` to receive every occurrence.
  */
 export interface ZoSubscriptionCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     event_id: string;
     display_name: string;
@@ -4074,6 +5096,12 @@ export type ZoSubscriptionCreateInputV2InputContractKind = ("exact_event" | "gen
  * occurrence.
  */
 export interface ZoSubscriptionCreateInputV2 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     event_id: string;
     display_name: string;
@@ -4712,7 +5740,7 @@ export interface ZoSubscriptionListOutputV1PrincipalRef {
 }
 export interface ZoSubscriptionListQueryV1 {
     /**
-     * Rows per page, at most 7; a larger value is reduced to it.
+     * Rows per page, at most 100; a larger value is reduced to it.
      */
     limit?: number;
     /**
@@ -4869,7 +5897,7 @@ export interface ZoSubscriptionListOutputV2PrincipalRef {
 }
 export interface ZoSubscriptionListQueryV2 {
     /**
-     * Rows per page, at most 7; a larger value is reduced to it.
+     * Rows per page, at most 100; a larger value is reduced to it.
      */
     limit?: number;
     /**
@@ -5309,7 +6337,12 @@ export interface ZoSubscriptionUpdateOutputV2PrincipalRef {
 }
 export interface ZoTagAssignInputV1 {
     workspace_id: string;
-    target: ZoTagAssignInputV1TargetRef;
+    target?: ZoTagAssignInputV1TargetRef;
+    /**
+     * @minItems 1
+     * @maxItems 200
+     */
+    targets?: [ZoTagAssignInputV1TargetRef, ...(ZoTagAssignInputV1TargetRef)[]];
     /**
      * Tags by ID or name.
      *
@@ -5322,7 +6355,7 @@ export interface ZoTagAssignInputV1 {
 }
 export interface ZoTagAssignInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5331,15 +6364,19 @@ export interface ZoTagAssignInputV1TargetRef {
     id: string;
 }
 export interface ZoTagAssignOutputV1 {
-    target: ZoTagAssignOutputV1TargetRef;
     /**
-     * The object's tags, alphabetically.
+     * @minItems 1
+     * @maxItems 200
      */
-    tags: ZoTagAssignOutputV1TagView[];
+    objects: [ZoTagAssignOutputV1ObjectChanges, ...(ZoTagAssignOutputV1ObjectChanges)[]];
+}
+export interface ZoTagAssignOutputV1ObjectChanges {
+    target: ZoTagAssignOutputV1TargetRef;
+    changed: number;
 }
 export interface ZoTagAssignOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5347,13 +6384,6 @@ export interface ZoTagAssignOutputV1TargetRef {
      */
     id: string;
 }
-export interface ZoTagAssignOutputV1TagView {
-    id: string;
-    /**
-     * The tag's name, spelled as first written.
-     */
-    name: string;
-}
 export interface ZoTagDeleteInputV1 {
     workspace_id: string;
     /**
@@ -5406,7 +6436,7 @@ export interface ZoTagItemsQueryV1 {
     cursor?: string;
     filter?: {
         /**
-         * Only objects of these kinds (task, agent, schedule, website, connection, event, event_subscription, machine, database or file).
+         * Only objects of these kinds (task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file).
          */
         kinds?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
     };
@@ -5454,7 +6484,7 @@ export interface ZoTagOfInputV1 {
 }
 export interface ZoTagOfInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5477,7 +6507,7 @@ export interface ZoTagOfOutputV1ObjectTags {
 }
 export interface ZoTagOfOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5512,7 +6542,12 @@ export interface ZoTagRenameOutputV1 {
 }
 export interface ZoTagUnassignInputV1 {
     workspace_id: string;
-    target: ZoTagUnassignInputV1TargetRef;
+    target?: ZoTagUnassignInputV1TargetRef;
+    /**
+     * @minItems 1
+     * @maxItems 200
+     */
+    targets?: [ZoTagUnassignInputV1TargetRef, ...(ZoTagUnassignInputV1TargetRef)[]];
     /**
      * Tags by ID or name.
      *
@@ -5525,7 +6560,7 @@ export interface ZoTagUnassignInputV1 {
 }
 export interface ZoTagUnassignInputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5534,15 +6569,19 @@ export interface ZoTagUnassignInputV1TargetRef {
     id: string;
 }
 export interface ZoTagUnassignOutputV1 {
-    target: ZoTagUnassignOutputV1TargetRef;
     /**
-     * The object's tags, alphabetically.
+     * @minItems 1
+     * @maxItems 200
      */
-    tags: ZoTagUnassignOutputV1TagView[];
+    objects: [ZoTagUnassignOutputV1ObjectChanges, ...(ZoTagUnassignOutputV1ObjectChanges)[]];
+}
+export interface ZoTagUnassignOutputV1ObjectChanges {
+    target: ZoTagUnassignOutputV1TargetRef;
+    changed: number;
 }
 export interface ZoTagUnassignOutputV1TargetRef {
     /**
-     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database or file.
+     * The object's kind: task, agent, schedule, website, connection, event, event_subscription, machine, database, function, workflow, machine_image, vault or file.
      */
     kind: string;
     /**
@@ -5550,13 +6589,6 @@ export interface ZoTagUnassignOutputV1TargetRef {
      */
     id: string;
 }
-export interface ZoTagUnassignOutputV1TagView {
-    id: string;
-    /**
-     * The tag's name, spelled as first written.
-     */
-    name: string;
-}
 export interface ZoTaskBlockerAddInputV1 {
     workspace_id: string;
     /**
@@ -5572,6 +6604,7 @@ export interface ZoTaskBlockerAddOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskBlockerAddOutputV1PrincipalView | null);
     /**
@@ -5640,6 +6673,7 @@ export interface ZoTaskBlockerAddOutputV1PrincipalView {
 export interface ZoTaskBlockerAddOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskBlockerAddOutputV1TaskComment {
@@ -5678,6 +6712,7 @@ export interface ZoTaskBlockerRemoveOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskBlockerRemoveOutputV1PrincipalView | null);
     /**
@@ -5746,6 +6781,7 @@ export interface ZoTaskBlockerRemoveOutputV1PrincipalView {
 export interface ZoTaskBlockerRemoveOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskBlockerRemoveOutputV1TaskComment {
@@ -5936,7 +6972,14 @@ export interface ZoTaskCommentUpdateOutputV1PrincipalView {
     active: boolean;
 }
 export interface ZoTaskCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
+    title: string;
     body?: string;
     status?: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee?: (ZoTaskCreateInputV1PrincipalInput | null);
@@ -5953,6 +6996,7 @@ export interface ZoTaskCreateOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskCreateOutputV1PrincipalView | null);
     /**
@@ -6021,6 +7065,7 @@ export interface ZoTaskCreateOutputV1PrincipalView {
 export interface ZoTaskCreateOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskCreateOutputV1TaskComment {
@@ -6066,6 +7111,7 @@ export interface ZoTaskGetOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskGetOutputV1PrincipalView | null);
     /**
@@ -6134,6 +7180,7 @@ export interface ZoTaskGetOutputV1PrincipalView {
 export interface ZoTaskGetOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskGetOutputV1TaskComment {
@@ -6172,6 +7219,7 @@ export interface ZoTaskListOutputV1TaskSummary {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskListOutputV1PrincipalView | null);
     /**
@@ -6222,6 +7270,10 @@ export interface ZoTaskListQueryV1 {
          * Only blocked tasks, or only unblocked ones.
          */
         is_blocked?: (boolean | null);
+        /**
+         * Tasks carrying any of these workspace tag IDs.
+         */
+        tags?: (string[] | null);
     };
 }
 /**
@@ -6240,6 +7292,7 @@ export interface ZoTaskUpdateInputV1 {
      * The task's number ("42" or "#42") or its tsk_ ID.
      */
     task: string;
+    title?: (string | null);
     body?: (string | null);
     status?: (("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled") | null);
     /**
@@ -6263,6 +7316,7 @@ export interface ZoTaskUpdateOutputV1 {
     id: string;
     workspace_id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
     assignee: (ZoTaskUpdateOutputV1PrincipalView | null);
     /**
@@ -6331,6 +7385,7 @@ export interface ZoTaskUpdateOutputV1PrincipalView {
 export interface ZoTaskUpdateOutputV1TaskLink {
     id: string;
     number: number;
+    title: string;
     status: ("backlog" | "ready" | "in_progress" | "failed" | "done" | "cancelled");
 }
 export interface ZoTaskUpdateOutputV1TaskComment {
@@ -6841,7 +7896,143 @@ export interface ZoVaultUpdateOutputV1RawFormat {
      */
     type: "raw";
 }
+export interface ZoWebFetchInputV1 {
+    workspace_id: string;
+    /**
+     * The pages to read. A URL listed twice is read and charged once and returned at each position.
+     *
+     * @minItems 1
+     * @maxItems 100
+     *
+     * Items: An http or https URL.
+     */
+    urls: [string, ...(string)[]];
+    /**
+     * The most text to return per page. The response size limit can shorten pages further; a shortened page is marked truncated.
+     */
+    max_characters?: number;
+    /**
+     * Fetch each page now instead of using a cached copy. Use it for prices, status pages and anything else that changes by the hour.
+     */
+    live?: boolean;
+}
+export interface ZoWebFetchOutputV1 {
+    /**
+     * One entry per requested URL, in the order requested. A page that couldn't be read has status failed; the call still succeeds.
+     */
+    pages: (ZoWebFetchOutputV1WebPage | ZoWebFetchOutputV1WebPageFailure)[];
+}
+export interface ZoWebFetchOutputV1WebPage {
+    /**
+     * The URL as requested.
+     */
+    url: string;
+    status: "ok";
+    title: (string | null);
+    /**
+     * The page's estimated publication date, YYYY-MM-DD.
+     */
+    published_date: (string | null);
+    author: (string | null);
+    /**
+     * The page's main content as Markdown.
+     */
+    text: string;
+    /**
+     * Whether the page had more text than was returned.
+     */
+    truncated: boolean;
+}
+export interface ZoWebFetchOutputV1WebPageFailure {
+    /**
+     * The URL as requested.
+     */
+    url: string;
+    status: "failed";
+    /**
+     * not_found: the page doesn't exist. blocked: the site refused access. timeout: the page took too long to load. unsupported: the URL can't be read. unavailable: anything else; trying again later may work.
+     */
+    error: ("not_found" | "blocked" | "timeout" | "unsupported" | "unavailable");
+}
+export interface ZoWebSearchInputV1 {
+    workspace_id: string;
+    /**
+     * Describe the pages you want, as a sentence, rather than keywords. Restrict sites with include_domains, not site: in the query.
+     */
+    query: string;
+    /**
+     * Goal for this search turn; say which documents should rank first, which should be excluded, and what specific facts or figures to pull from them.
+     */
+    objective?: (string | null);
+    /**
+     * Focus on one kind of page. Omit for the general web. company and people can't take published dates; people can't take exclude_domains.
+     */
+    category?: (("news" | "company" | "people" | "financial_report" | "publication" | "personal_site") | null);
+    /**
+     * How many results to return.
+     */
+    num_results?: number;
+    /**
+     * Only return pages from these domains.
+     */
+    include_domains?: (string[] | null);
+    /**
+     * Never return pages from these domains.
+     */
+    exclude_domains?: (string[] | null);
+    /**
+     * Only pages published on or after the start of this day, UTC.
+     */
+    published_after?: (string | null);
+    /**
+     * Only pages published before the start of this day, UTC.
+     */
+    published_before?: (string | null);
+}
+export interface ZoWebSearchOutputV1 {
+    /**
+     * Ranked pages, best first.
+     */
+    results: ZoWebSearchOutputV1WebSearchHit[];
+    /**
+     * Notes on how the results were produced, such as a restriction in the query that was relaxed because it matched nothing. Omitted when there are none.
+     */
+    notices?: (ZoWebSearchOutputV1WebNotice[] | null);
+}
+export interface ZoWebSearchOutputV1WebSearchHit {
+    url: string;
+    title: (string | null);
+    /**
+     * The page's estimated publication date, YYYY-MM-DD.
+     */
+    published_date: (string | null);
+    author: (string | null);
+    /**
+     * The passages most relevant to the query.
+     */
+    highlights: string[];
+}
+export interface ZoWebSearchOutputV1WebNotice {
+    /**
+     * An open set of codes, such as RESTRICTIONS_RELAXED.
+     */
+    code: string;
+    /**
+     * What the notice means, written for a model reading the results.
+     */
+    message: string;
+    /**
+     * The input field the notice is about, as a JSON Pointer.
+     */
+    path?: (string | null);
+}
 export interface ZoWebsiteCreateInputV1 {
+    /**
+     * @maxItems 100
+     *
+     * Items: A tag ID or name; unknown names are created, unknown IDs are refused.
+     */
+    tags?: string[];
     workspace_id: string;
     slug: string;
     display_name: string;
@@ -7519,6 +8710,29 @@ export interface ZoWorkflowRevisionGetOutputV1 {
     status: ZoWorkflowRevisionGetOutputV1RevisionStatus;
     error_code: (string | null);
 }
+export interface ZoWorkflowUpdateInputV1 {
+    workflow_id: string;
+    expected_revision: number;
+    display_name?: (string | null);
+    /**
+     * Omitted or null keeps the description; "" clears it.
+     */
+    description?: (string | null);
+}
+export interface ZoWorkflowUpdateOutputV1 {
+    id: string;
+    workspace_id: string;
+    type: "workflow";
+    type_version: number;
+    display_name: string;
+    description: string;
+    revision: number;
+    active_revision_id: (string | null);
+    latest_revision_id: (string | null);
+    created_at: string;
+    visibility: ("workspace" | "protected");
+    owner_user_id: (string | null);
+}
 export interface ZoWorkspaceGetInputV1 {
     workspace_id: string;
 }
@@ -7644,11 +8858,54 @@ export interface MachineV1 {
         [k: string]: string;
     } | null);
     credentials?: (string[] | null);
+    outbound_network_policies?: (MachineV1OutboundNetworkPolicy[] | null);
 }
 export interface MachineV1MachineGpu {
     type: MachineV1GpuType;
     count: number;
 }
+/**
+ * Send one slot's credential as a header on HTTPS requests to some hosts.
+ */
+export interface MachineV1OutboundNetworkPolicy {
+    /**
+     * The connection ID.
+     */
+    credential: string;
+    /**
+     * The connection definition's slot, by name.
+     */
+    slot: string;
+    hosts?: ([string] | [string, string] | [string, string, string] | [string, string, string, string] | [string, string, string, string, string] | [string, string, string, string, string, string] | [string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | [string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string, string] | null);
+    location?: (MachineV1HeaderLocation | null);
+    format?: ((MachineV1BearerFormat | MachineV1BasicFormat | MachineV1RawFormat) | null);
+}
+export interface MachineV1HeaderLocation {
+    type: "header";
+    /**
+     * The header to set, such as `Authorization` or `X-API-Key`.
+     */
+    name: string;
+}
+export interface MachineV1BearerFormat {
+    /**
+     * `Bearer <value>`.
+     */
+    type: "bearer";
+}
+export interface MachineV1BasicFormat {
+    /**
+     * `Basic` with base64 of `<username>:<value>`.
+     */
+    type: "basic";
+    username: string;
+}
+export interface MachineV1RawFormat {
+    /**
+     * The value as it is.
+     */
+    type: "raw";
+}
 export type MachineImageV1ImageOrigin = ("registry" | "build" | "machine_snapshot");
 /**
  * Public properties of a `machine_image` resource, type version 1: what
@@ -7781,6 +9038,27 @@ export type Operations = {
             query: ZoAgentSessionListWorkspaceQueryV1;
         };
     };
+    "zo.billing.list_rates": {
+        1: {
+            input: ZoBillingListRatesInputV1;
+            output: ZoBillingListRatesOutputV1;
+            query: ZoBillingListRatesQueryV1;
+        };
+    };
+    "zo.billing.list_usage_entries": {
+        1: {
+            input: ZoBillingListUsageEntriesInputV1;
+            output: ZoBillingListUsageEntriesOutputV1;
+            query: ZoBillingListUsageEntriesQueryV1;
+        };
+    };
+    "zo.billing.summarize_usage": {
+        1: {
+            input: ZoBillingSummarizeUsageInputV1;
+            output: ZoBillingSummarizeUsageOutputV1;
+            query: ZoBillingSummarizeUsageQueryV1;
+        };
+    };
     "zo.connection.authorize": {
         1: {
             input: ZoConnectionAuthorizeInputV1;
@@ -8035,6 +9313,12 @@ export type Operations = {
             output: ZoFunctionPublishContractOutputV1;
         };
     };
+    "zo.function.update": {
+        1: {
+            input: ZoFunctionUpdateInputV1;
+            output: ZoFunctionUpdateOutputV1;
+        };
+    };
     "zo.machine.apply_patch": {
         1: {
             input: ZoMachineApplyPatchInputV1;
@@ -8152,6 +9436,12 @@ export type Operations = {
             query: ZoMachineImageListQueryV1;
         };
     };
+    "zo.machine_image.update": {
+        1: {
+            input: ZoMachineImageUpdateInputV1;
+            output: ZoMachineImageUpdateOutputV1;
+        };
+    };
     "zo.message.get": {
         1: {
             input: ZoMessageGetInputV1;
@@ -8189,6 +9479,19 @@ export type Operations = {
             output: ZoOauthAppUpdateOutputV1;
         };
     };
+    "zo.quota.get": {
+        1: {
+            input: ZoQuotaGetInputV1;
+            output: ZoQuotaGetOutputV1;
+        };
+    };
+    "zo.quota.list": {
+        1: {
+            input: ZoQuotaListInputV1;
+            output: ZoQuotaListOutputV1;
+            query: ZoQuotaListQueryV1;
+        };
+    };
     "zo.schedule.create": {
         1: {
             input: ZoScheduleCreateInputV1;
@@ -8435,6 +9738,18 @@ export type Operations = {
             output: ZoVaultUpdateOutputV1;
         };
     };
+    "zo.web.fetch": {
+        1: {
+            input: ZoWebFetchInputV1;
+            output: ZoWebFetchOutputV1;
+        };
+    };
+    "zo.web.search": {
+        1: {
+            input: ZoWebSearchInputV1;
+            output: ZoWebSearchOutputV1;
+        };
+    };
     "zo.website.create": {
         1: {
             input: ZoWebsiteCreateInputV1;
@@ -8577,6 +9892,12 @@ export type Operations = {
             output: ZoWorkflowRevisionGetOutputV1;
         };
     };
+    "zo.workflow.update": {
+        1: {
+            input: ZoWorkflowUpdateInputV1;
+            output: ZoWorkflowUpdateOutputV1;
+        };
+    };
     "zo.workspace.get": {
         1: {
             input: ZoWorkspaceGetInputV1;
@@ -8605,6 +9926,9 @@ export type DefaultVersions = {
     "zo.agent_session.history": 1;
     "zo.agent_session.list": 1;
     "zo.agent_session.list_workspace": 1;
+    "zo.billing.list_rates": 1;
+    "zo.billing.list_usage_entries": 1;
+    "zo.billing.summarize_usage": 1;
     "zo.connection.authorize": 1;
     "zo.connection.create": 1;
     "zo.connection.delete": 1;
@@ -8645,6 +9969,7 @@ export type DefaultVersions = {
     "zo.function.list": 1;
     "zo.function.list_runs": 1;
     "zo.function.publish_contract": 1;
+    "zo.function.update": 1;
     "zo.machine.apply_patch": 1;
     "zo.machine.create": 1;
     "zo.machine.destroy": 1;
@@ -8664,12 +9989,15 @@ export type DefaultVersions = {
     "zo.machine_image.get": 1;
     "zo.machine_image.import": 1;
     "zo.machine_image.list": 1;
+    "zo.machine_image.update": 1;
     "zo.message.get": 1;
     "zo.oauth_app.create": 1;
     "zo.oauth_app.delete": 1;
     "zo.oauth_app.get": 1;
     "zo.oauth_app.list": 1;
     "zo.oauth_app.update": 1;
+    "zo.quota.get": 1;
+    "zo.quota.list": 1;
     "zo.schedule.create": 1;
     "zo.schedule.delete": 1;
     "zo.schedule.get": 1;
@@ -8707,6 +10035,8 @@ export type DefaultVersions = {
     "zo.vault.list": 1;
     "zo.vault.rotate": 1;
     "zo.vault.update": 1;
+    "zo.web.fetch": 1;
+    "zo.web.search": 1;
     "zo.website.create": 1;
     "zo.website.delete": 1;
     "zo.website.get": 1;
@@ -8730,6 +10060,7 @@ export type DefaultVersions = {
     "zo.workflow.list_runs": 1;
     "zo.workflow.publish": 1;
     "zo.workflow.revision.get": 1;
+    "zo.workflow.update": 1;
     "zo.workspace.get": 1;
     "zo.workspace.list_resources": 1;
 };