codai-sdk 0.63.0 → 0.65.0

package/dist/index.d.ts

@@ -2405,6 +2405,29 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/os-gate/events': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Record an OS protection gate override
+     * @description Writes an `os_gate.override` entry to the account audit log when the user grants or revokes an override
+     *     of failing OS protection checks on a device. The body carries only the check ids, the surface, the app
+     *     version and the time; detection details never leave the device. The body is strict: an unknown key, an
+     *     unknown check id or an empty `checks` list is a 400. Answers 202 once the event is accepted.
+     */
+    readonly post: operations$1['recordOsGateEvent'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/phone/models': {
     readonly parameters: {
       readonly query?: never;
@@ -2430,6 +2453,30 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/policy': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    /**
+     * Read the effective client policy
+     * @description Client policy folded over every organization the caller belongs to. Today it carries the OS protection
+     *     gate: `os_gate.allow_override` is false when ANY of the caller's organizations forbids overriding a failing
+     *     BLOCK check (strictest wins; org admins set it in the hub under Team > Security). A caller in no organization
+     *     gets true. Clients cache the value (the response is `Cache-Control: private, max-age=300`) and keep using
+     *     the cached value offline. A database error is a 503 (`policy_unavailable`), never a permissive default.
+     */
+    readonly get: operations$1['getPolicy'];
+    readonly put?: never;
+    readonly post?: never;
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/projects': {
     readonly parameters: {
       readonly query?: never;
@@ -12735,6 +12782,31 @@ type components$1 = {
       readonly ownerUserId: string;
       readonly role: components$1['schemas']['OrgRole'];
     };
+    readonly OsGateEvent: {
+      /**
+       * @description Whether the user granted or revoked the override.
+       * @enum {string}
+       */
+      readonly action: 'granted' | 'revoked';
+      /** @description Version of the app that recorded the event. */
+      readonly app_version: string;
+      /**
+       * Format: date-time
+       * @description When the user granted or revoked the override (ISO 8601).
+       */
+      readonly at: string;
+      /** @description Ids of the checks the override covers (spec packages/agent-core/spec/os-gate.json). */
+      readonly checks: readonly ('win.uac_off' | 'win.uac_no_prompt' | 'win.elevated' | 'win.defender_rtp_off' | 'mac.sip_off' | 'mac.gatekeeper_off' | 'mac.filevault_off' | 'linux.root' | 'linux.root_container' | 'linux.sudo_nopasswd' | 'linux.no_screen_lock' | 'android.no_secure_lock' | 'android.lock_unknown' | 'android.adb_enabled' | 'android.rooted' | 'wear.no_secure_lock')[];
+      /**
+       * @description The codai app on which the override was granted or revoked.
+       * @enum {string}
+       */
+      readonly surface: 'desktop' | 'headless' | 'codaid' | 'phone' | 'mobile_agent' | 'wear' | 'vscode';
+    };
+    readonly OsGateEventAccepted: {
+      /** @constant */
+      readonly ok: true;
+    };
     /** Panel control */
     readonly PanelControl: {
       readonly control: components$1['schemas']['Control'];
@@ -12752,6 +12824,12 @@ type components$1 = {
      * @enum {string}
      */
     readonly PlatformId: 'tiktok' | 'reels' | 'shorts' | 'feed-square' | 'feed-portrait' | 'youtube';
+    readonly PolicyResponse: {
+      readonly os_gate: {
+        /** @description False when any organization of the caller forbids OS protection gate overrides. */
+        readonly allow_override: boolean;
+      };
+    };
     /** @enum {string} */
     readonly PortProtocol: 'http' | 'https' | 'tcp';
     /**
@@ -22140,6 +22218,47 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly recordOsGateEvent: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    /** @description The override event as recorded on the device. */
+    readonly requestBody: {
+      readonly content: {
+        /**
+         * @example {
+         *       "action": "granted",
+         *       "checks": [
+         *         "win.uac_off"
+         *       ],
+         *       "surface": "desktop",
+         *       "app_version": "0.9.4",
+         *       "at": "2026-10-19T21:00:00Z"
+         *     }
+         */
+        readonly 'application/json': components$1['schemas']['OsGateEvent'];
+      };
+    };
+    readonly responses: {
+      /** @description The event was accepted into the audit log. */
+      readonly 202: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['OsGateEventAccepted'];
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+    };
+  };
   readonly listPhoneModels: {
     readonly parameters: {
       readonly query?: never;
@@ -22167,6 +22286,48 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly getPolicy: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description The effective policy for the caller. */
+      readonly 200: {
+        headers: {
+          /** @description Always `private, max-age=300`. */
+          readonly 'Cache-Control'?: string;
+          readonly [name: string]: unknown;
+        };
+        content: {
+          /**
+           * @example {
+           *       "os_gate": {
+           *         "allow_override": true
+           *       }
+           *     }
+           */
+          readonly 'application/json': components$1['schemas']['PolicyResponse'];
+        };
+      };
+      readonly 401: components$1['responses']['Unauthorized'];
+      /** @description The policy store is unreachable (`code: policy_unavailable`); keep the cached value. */
+      readonly 503: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['Error'];
+        };
+      };
+    };
+  };
   readonly listProjects: {
     readonly parameters: {
       readonly query?: never;
@@ -32702,7 +32863,7 @@ export type Receipt = Reply<'getReceipt'>;
 export type FeedbackRequest = Mutable<Body<'submitFeedback'>>;
 export type FeedbackResponse = Reply<'submitFeedback'>;
 export type PhoneModel = Schema<'AccountPhoneModel'>;
-type CallOpts$36 = {
+type CallOpts$37 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -32710,9 +32871,9 @@ export declare class Account {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/account` — the full account card. */
-  get(opts?: CallOpts$36): Promise<AccountView>;
+  get(opts?: CallOpts$37): Promise<AccountView>;
   /** `PATCH /v1/account` — consents, username, referral (at least one field). */
-  update(body: AccountPatchRequest, opts?: CallOpts$36): Promise<AccountPatchResponse>;
+  update(body: AccountPatchRequest, opts?: CallOpts$37): Promise<AccountPatchResponse>;
 }
 export declare class Receipts {
   private readonly http;
@@ -32724,7 +32885,7 @@ export declare class Receipts {
   get(query?: {
     sessionId?: string;
     since?: string | Date;
-  }, opts?: CallOpts$36): Promise<Receipt>;
+  }, opts?: CallOpts$37): Promise<Receipt>;
 }
 export declare class Feedback {
   private readonly http;
@@ -32733,13 +32894,13 @@ export declare class Feedback {
    * `POST /v1/feedback` — rate one turn. Exactly one of `event_id`,
    * `session_id`, `client_request_id` must be present.
    */
-  submit(body: FeedbackRequest, opts?: CallOpts$36): Promise<FeedbackResponse>;
+  submit(body: FeedbackRequest, opts?: CallOpts$37): Promise<FeedbackResponse>;
 }
 export declare class PhoneModels {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/phone/models` — on-device model catalog with signed URLs. */
-  list(opts?: CallOpts$36): Promise<PhoneModel[]>;
+  list(opts?: CallOpts$37): Promise<PhoneModel[]>;
 }
 //#endregion
 //#region src/resources/agents.d.ts
@@ -32751,7 +32912,7 @@ export type AgentRun = Reply<'getAgentRun'>;
 export type AgentRunStep = Schema<'AgentRunStep'>;
 export type AgentRunStats = Reply<'getAgentRunStats'>;
 export type AgentRunStatus = Schema<'AgentRunStatus'>;
-type CallOpts$35 = {
+type CallOpts$36 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -32788,28 +32949,28 @@ export declare class AgentRuns {
   private readonly http;
   constructor(http: HttpClient);
   /** `POST /v1/agents/runs` — returns 202 with the run id. */
-  create(body: AgentRunCreateRequest, opts?: CallOpts$35): Promise<AgentRunAccepted>;
+  create(body: AgentRunCreateRequest, opts?: CallOpts$36): Promise<AgentRunAccepted>;
   /** `GET /v1/agents/runs/{id}` */
-  get(id: string, opts?: CallOpts$35): Promise<AgentRun>;
+  get(id: string, opts?: CallOpts$36): Promise<AgentRun>;
   /** `GET /v1/agents/runs/{id}/steps` — newest first. */
-  steps(id: string, opts?: CallOpts$35): Promise<AgentRunStep[]>;
+  steps(id: string, opts?: CallOpts$36): Promise<AgentRunStep[]>;
   /** `GET /v1/agents/runs/stats?days=` */
-  stats(days?: number, opts?: CallOpts$35): Promise<AgentRunStats>;
+  stats(days?: number, opts?: CallOpts$36): Promise<AgentRunStats>;
   /** `POST /v1/agents/runs/{id}/cancel` */
-  cancel(id: string, opts?: CallOpts$35): Promise<Reply<'cancelAgentRun'>>;
+  cancel(id: string, opts?: CallOpts$36): Promise<Reply<'cancelAgentRun'>>;
   /**
    * `GET /v1/agents/runs/{id}/stream` — async iterator over `step` / `done` /
    * `timeout` events. The iterator ends after `done`; on `timeout` (30 min)
    * it also ends and you may reconnect (full replay from seq 0).
    */
-  stream(id: string, opts?: CallOpts$35): AsyncGenerator<AgentRunStreamEvent, void, undefined>;
+  stream(id: string, opts?: CallOpts$36): AsyncGenerator<AgentRunStreamEvent, void, undefined>;
 }
 export declare class Agents {
   private readonly http;
   readonly runs: AgentRuns;
   constructor(http: HttpClient);
   /** `POST /v1/agents/run` — blocks until the agent loop finishes. */
-  run(body: AgentRunRequest, opts?: CallOpts$35): Promise<AgentRunResult>;
+  run(body: AgentRunRequest, opts?: CallOpts$36): Promise<AgentRunResult>;
 }
 //#endregion
 //#region src/resources/audio.d.ts
@@ -32974,7 +33135,7 @@ export interface StudioQuoteQuery {
   model?: string;
   n?: number;
 }
-type CallOpts$34 = {
+type CallOpts$35 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -32998,16 +33159,16 @@ export declare class Billing {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/billing` — plan, wallet, auto top-up, cards and pay links (read-only). */
-  get(opts?: CallOpts$34): Promise<BillingOverview>;
+  get(opts?: CallOpts$35): Promise<BillingOverview>;
   /** `GET /v1/billing/invoices` — fiscal invoices and credit notes, newest first. */
   invoices(query?: {
     limit?: number;
-  }, opts?: CallOpts$34): Promise<BillingInvoice[]>;
+  }, opts?: CallOpts$35): Promise<BillingInvoice[]>;
   /**
    * `GET /v1/studio/quote` — what a Studio action costs (USD and wallet EUR micros) and your spendable balance,
    * before you run it. Paid Studio calls answer 402 `insufficient_funds` when `sufficient` is false. Free.
    */
-  studioQuote(query: StudioQuoteQuery, opts?: CallOpts$34): Promise<StudioQuote>;
+  studioQuote(query: StudioQuoteQuery, opts?: CallOpts$35): Promise<StudioQuote>;
   /**
    * Poll `get()` every `intervalMs` and call `onLow` once each time the wallet
    * balance crosses below `thresholdEur`. Read-only: never creates a checkout.
@@ -33052,7 +33213,7 @@ export interface CardsRendered {
   width: number | null;
   height: number | null;
 }
-type CallOpts$33 = {
+type CallOpts$34 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -33061,59 +33222,59 @@ export declare class Cards {
   constructor(http: HttpClient);
   private get;
   /** `GET /v1/cards/weather` — `weather` block from MET Norway (cached 30–60 min per 0.01°, free). */
-  weather(params: CardsWeatherParams, opts?: CallOpts$33): Promise<CardsWeatherResponse>;
+  weather(params: CardsWeatherParams, opts?: CallOpts$34): Promise<CardsWeatherResponse>;
   /**
    * `GET /v1/cards/places` — `places` block from Google Places: Text Search with `q` (biased to `lat`/`lng`/`radius`),
    * Nearby Search without it. Billed per call; `block` is null when nothing matched.
    */
-  places(params: CardsPlacesParams, opts?: CallOpts$33): Promise<CardsPlacesResponse>;
+  places(params: CardsPlacesParams, opts?: CallOpts$34): Promise<CardsPlacesResponse>;
   /** `GET /v1/cards/geocode` — `map` block (≤ 5 markers) plus raw `results` (Google Geocoding, billed). */
-  geocode(params: CardsGeocodeParams, opts?: CallOpts$33): Promise<CardsGeocodeResponse>;
+  geocode(params: CardsGeocodeParams, opts?: CallOpts$34): Promise<CardsGeocodeResponse>;
   /**
    * `GET /v1/cards/static-map` — PNG from Google Maps Static proxied through the gateway (no maps key on the client).
    * Needs `center` or `markers` (`lat,lng[,L]` joined by `|`); ≤ 640×400 points. Billed per call.
    */
-  staticMap(params: CardsStaticMapParams, opts?: CallOpts$33): Promise<CardsStaticMap>;
+  staticMap(params: CardsStaticMapParams, opts?: CallOpts$34): Promise<CardsStaticMap>;
   /**
    * `GET /v1/cards/fx` — BNR (default) or ECB reference rates: a `metric` block with `from`+`to`, otherwise a `table`
    * block against `quote`, optionally limited to `symbols` (comma-separated). Free.
    */
-  fx(params?: CardsFxParams, opts?: CallOpts$33): Promise<CardsFxResponse>;
+  fx(params?: CardsFxParams, opts?: CallOpts$34): Promise<CardsFxResponse>;
   /**
    * `GET /v1/cards/route` — travel time from Google Routes: `route` { mode, durationS, staticDurationS, distanceM,
    * polyline } and a `map` block. `origin`/`destination` as "lat,lng" or `from`/`to` as addresses; `mode` drive
    * (traffic-aware, default), walk, bicycle, transit, two_wheeler. Billed per call; both null when no route exists.
    */
-  route(params: CardsRouteParams, opts?: CallOpts$33): Promise<CardsRouteResponse>;
+  route(params: CardsRouteParams, opts?: CallOpts$34): Promise<CardsRouteResponse>;
   /**
    * `GET /v1/cards/track` — parcel history as a `timeline` block plus `result` (carrier, configured, found,
    * delivered, events, trackingUrl). `carrier` (sameday | fan | cargus | dpd) is guessed from the AWB when omitted;
    * carriers without gateway credentials answer `configured: false` with only the tracking link. Free.
    */
-  track(params: CardsTrackParams, opts?: CallOpts$33): Promise<CardsTrackResponse>;
+  track(params: CardsTrackParams, opts?: CallOpts$34): Promise<CardsTrackResponse>;
   /**
    * `GET /v1/cards/efactura` — your fiscal documents issued through Brivio with their ANAF e-Factura status
    * (`documents[]` + a `table` block, null when there are none). Free.
    */
-  efactura(params?: CardsEfacturaParams, opts?: CallOpts$33): Promise<CardsEfacturaResponse>;
+  efactura(params?: CardsEfacturaParams, opts?: CallOpts$34): Promise<CardsEfacturaResponse>;
   /**
    * `POST /v1/cards/unfurl` — `links` block (variant `preview`) for a public https page; SSRF-guarded, cached 24 h.
    * Private targets throw 400 `unfurl_blocked`, non-https pages 422 `unfurl_not_https`.
    */
-  unfurl(url: string, opts?: CallOpts$33): Promise<CardsUnfurlResponse>;
+  unfurl(url: string, opts?: CallOpts$34): Promise<CardsUnfurlResponse>;
   /**
    * `POST /v1/cards/product` — `products` block with one item from a public https product page's schema.org
    * `Product` JSON-LD (or OpenGraph product tags): name, image, price + currency (lowest offer), old price, rating
    * (0–5), reviews, seller, availability badge in `lang` (en default). Only what the page states; never sponsored.
    * SSRF-guarded like `unfurl`, cached 6 h. No product data throws 422 `product_not_found`.
    */
-  product(url: string, lang?: 'en' | 'ro', opts?: CallOpts$33): Promise<CardsProductResponse>;
+  product(url: string, lang?: 'en' | 'ro', opts?: CallOpts$34): Promise<CardsProductResponse>;
   /**
    * `POST /v1/cards/render` — renders a `chart` or `qr` block to `format` (`png` default, or `svg`) at
    * `width` x `height` CSS px (64–1200, defaults 480 x 300; QR is square) times `scale` (1–3, PNG only).
    * Other block types (Mermaid `diagram`, `math`, …) throw 422 `render_unsupported`. Free; 2000 renders per day.
    */
-  render(body: CardsRenderBody, opts?: CallOpts$33): Promise<CardsRendered>;
+  render(body: CardsRenderBody, opts?: CallOpts$34): Promise<CardsRendered>;
 }
 //#endregion
 //#region src/resources/chat.d.ts
@@ -33229,7 +33390,7 @@ export type Device = Schema<'DeviceListItem'>;
 export type DevicePatch = Mutable<Body<'updateDevice'>>;
 export type DevicePatched = Reply<'updateDevice'>;
 export type DispatchInbox = Reply<'getMyDispatchInbox'>;
-type CallOpts$32 = {
+type CallOpts$33 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -33237,23 +33398,23 @@ export declare class Devices {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/devices` — most recently seen first. */
-  list(opts?: CallOpts$32): Promise<Device[]>;
+  list(opts?: CallOpts$33): Promise<Device[]>;
   /** `PATCH /v1/devices/{id}` — push token and/or capabilities. */
-  update(id: string, body: DevicePatch, opts?: CallOpts$32): Promise<DevicePatched>;
+  update(id: string, body: DevicePatch, opts?: CallOpts$33): Promise<DevicePatched>;
   /** `DELETE /v1/devices/{id}` */
-  delete(id: string, opts?: CallOpts$32): Promise<Reply<'deleteDevice'>>;
+  delete(id: string, opts?: CallOpts$33): Promise<Reply<'deleteDevice'>>;
   /**
    * `POST /v1/keys/self/revoke` — the API key this client uses revokes ITSELF (sign out).
    * Every later call with it fails with 401.
    */
-  revokeSelfKey(opts?: CallOpts$32): Promise<Reply<'revokeSelfKey'>>;
+  revokeSelfKey(opts?: CallOpts$33): Promise<Reply<'revokeSelfKey'>>;
   /**
    * `GET /v1/devices/me/dispatch?limit=` — pending controls dispatched at the
    * calling device (`x-codai-device` required) across all owned sessions.
    */
   dispatchInbox(query?: {
     limit?: number;
-  }, opts?: CallOpts$32): Promise<DispatchInbox>;
+  }, opts?: CallOpts$33): Promise<DispatchInbox>;
 }
 //#endregion
 //#region src/resources/embeddings.d.ts
@@ -33316,7 +33477,7 @@ export type EnvironmentJobStartBody = Mutable<Body<'startEnvironmentJob'>>;
 export type EnvironmentJobStarted = Schema<'EnvironmentJobStarted'>;
 export type EnvironmentJob = Schema<'EnvironmentJob'>;
 export type GetEnvironmentJobQuery = Mutable<QueryOf<'getEnvironmentJob'>>;
-type CallOpts$31 = {
+type CallOpts$32 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -33324,70 +33485,70 @@ export declare class EnvironmentMembers {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/environments/{id}/members` — any role. */
-  list(envId: string, opts?: CallOpts$31): Promise<EnvironmentMember[]>;
+  list(envId: string, opts?: CallOpts$32): Promise<EnvironmentMember[]>;
   /** `POST /v1/environments/{id}/members` — exactly one of `user_id` / `email`. */
-  add(envId: string, body: EnvironmentAddMemberBody, opts?: CallOpts$31): Promise<EnvironmentMemberCreated>;
+  add(envId: string, body: EnvironmentAddMemberBody, opts?: CallOpts$32): Promise<EnvironmentMemberCreated>;
   /** `PUT /v1/environments/{id}/members/me/ssh-key` — one `authorized_keys` line. */
-  setSshKey(envId: string, publicKey: string, opts?: CallOpts$31): Promise<Reply<'setMyEnvironmentSshKey'>>;
+  setSshKey(envId: string, publicKey: string, opts?: CallOpts$32): Promise<Reply<'setMyEnvironmentSshKey'>>;
   /** `PATCH /v1/environments/{id}/members/{userId}` — 409 `last_owner` on demoting the last owner. */
-  setRole(envId: string, userId: string, role: EnvironmentRole, opts?: CallOpts$31): Promise<Reply<'setEnvironmentMemberRole'>['member']>;
+  setRole(envId: string, userId: string, role: EnvironmentRole, opts?: CallOpts$32): Promise<Reply<'setEnvironmentMemberRole'>['member']>;
   /** `DELETE /v1/environments/{id}/members/{userId}` — pass your own id to leave. */
-  remove(envId: string, userId: string, opts?: CallOpts$31): Promise<Reply<'removeEnvironmentMember'>>;
+  remove(envId: string, userId: string, opts?: CallOpts$32): Promise<Reply<'removeEnvironmentMember'>>;
   /** `POST /v1/environments/{id}/members/me/ssh-cert` — 12 h OpenSSH user certificate for your key. */
-  sshCert(envId: string, body: EnvironmentSshCertBody, opts?: CallOpts$31): Promise<EnvironmentSshCert>;
+  sshCert(envId: string, body: EnvironmentSshCertBody, opts?: CallOpts$32): Promise<EnvironmentSshCert>;
 }
 /** `/v1/environments/{id}/tasks` — fire-and-forget agent tasks run in the environment. */
 export declare class EnvironmentTasks {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/environments/{id}/tasks` */
-  list(envId: string, opts?: CallOpts$31): Promise<EnvironmentTaskList>;
+  list(envId: string, opts?: CallOpts$32): Promise<EnvironmentTaskList>;
   /** `POST /v1/environments/{id}/tasks` — queued; you get a notification when it finishes. */
-  create(envId: string, body: EnvironmentTaskCreateBody, opts?: CallOpts$31): Promise<EnvironmentTaskCreated>;
+  create(envId: string, body: EnvironmentTaskCreateBody, opts?: CallOpts$32): Promise<EnvironmentTaskCreated>;
   /** `GET /v1/environments/{id}/tasks/{taskId}` */
-  get(envId: string, taskId: string, opts?: CallOpts$31): Promise<EnvironmentTaskDetail>;
+  get(envId: string, taskId: string, opts?: CallOpts$32): Promise<EnvironmentTaskDetail>;
 }
 /** `/v1/environments/{id}/files` — read/write/list over the relay (developer role or higher). */
 export declare class EnvironmentFiles {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/environments/{id}/files?path=` — directory entries; no path → your workspace. */
-  list(envId: string, path?: string, opts?: CallOpts$31): Promise<EnvironmentFileList>;
+  list(envId: string, path?: string, opts?: CallOpts$32): Promise<EnvironmentFileList>;
   /** `GET /v1/environments/{id}/files/{path}` — UTF-8 text (64 KB default, `maxBytes` ≤ 512 KB). */
   get(envId: string, path: string, options?: {
     maxBytes?: number;
-  } & CallOpts$31): Promise<EnvironmentFile>;
+  } & CallOpts$32): Promise<EnvironmentFile>;
   /** `PUT /v1/environments/{id}/files/{path}` — replace with UTF-8 text (≤ 2 MB). */
-  put(envId: string, path: string, content: string, opts?: CallOpts$31): Promise<EnvironmentFileWritten>;
+  put(envId: string, path: string, content: string, opts?: CallOpts$32): Promise<EnvironmentFileWritten>;
 }
 /** `/v1/environments/{id}/jobs` — background jobs on the environment daemon. */
 export declare class EnvironmentJobs {
   private readonly http;
   constructor(http: HttpClient);
   /** `POST /v1/environments/{id}/jobs` — returns at once with `job_id`. */
-  start(envId: string, body: EnvironmentJobStartBody, opts?: CallOpts$31): Promise<EnvironmentJobStarted>;
+  start(envId: string, body: EnvironmentJobStartBody, opts?: CallOpts$32): Promise<EnvironmentJobStarted>;
   /** `GET /v1/environments/{id}/jobs/{jobId}` — status + output (`since` = previous `next_offset`). */
-  get(envId: string, jobId: string | number, query?: GetEnvironmentJobQuery, opts?: CallOpts$31): Promise<EnvironmentJob>;
+  get(envId: string, jobId: string | number, query?: GetEnvironmentJobQuery, opts?: CallOpts$32): Promise<EnvironmentJob>;
 }
 export declare class EnvironmentPorts {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/environments/{id}/ports` — published (forwarded) ports. */
-  list(envId: string, opts?: CallOpts$31): Promise<EnvironmentPort[]>;
+  list(envId: string, opts?: CallOpts$32): Promise<EnvironmentPort[]>;
   /** `PUT /v1/environments/{id}/ports/{port}` — publish or change visibility (upsert). */
-  set(envId: string, port: number, body: EnvironmentPortBody, opts?: CallOpts$31): Promise<EnvironmentPort>;
+  set(envId: string, port: number, body: EnvironmentPortBody, opts?: CallOpts$32): Promise<EnvironmentPort>;
   /** `DELETE /v1/environments/{id}/ports/{port}` — unpublish. */
-  remove(envId: string, port: number, opts?: CallOpts$31): Promise<Reply<'removeEnvironmentPort'>>;
+  remove(envId: string, port: number, opts?: CallOpts$32): Promise<Reply<'removeEnvironmentPort'>>;
 }
 export declare class EnvironmentSecrets {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/environments/{id}/secrets` — names and timestamps only, never values. */
-  list(envId: string, opts?: CallOpts$31): Promise<EnvironmentSecret[]>;
+  list(envId: string, opts?: CallOpts$32): Promise<EnvironmentSecret[]>;
   /** `PUT /v1/environments/{id}/secrets/{name}` — upsert; `name` is `ENV_STYLE`. */
-  set(envId: string, name: string, value: string, opts?: CallOpts$31): Promise<EnvironmentSecretSet>;
+  set(envId: string, name: string, value: string, opts?: CallOpts$32): Promise<EnvironmentSecretSet>;
   /** `DELETE /v1/environments/{id}/secrets/{name}` */
-  remove(envId: string, name: string, opts?: CallOpts$31): Promise<Reply<'removeEnvironmentSecret'>>;
+  remove(envId: string, name: string, opts?: CallOpts$32): Promise<Reply<'removeEnvironmentSecret'>>;
 }
 export declare class Environments {
   private readonly http;
@@ -33402,41 +33563,41 @@ export declare class Environments {
    * `POST /v1/environments/{id}/exec` — run one relay op and wait (developer+). `op` defaults to
    * `shell` with `command`; 409 `environment_offline`, 504 `host_timeout`.
    */
-  exec(envId: string, body: EnvironmentExecBody, opts?: CallOpts$31): Promise<EnvironmentExecResult>;
+  exec(envId: string, body: EnvironmentExecBody, opts?: CallOpts$32): Promise<EnvironmentExecResult>;
   /** `GET /v1/environments/{id}/ssh-ca` — CA public keys to trust (`@cert-authority` lines). */
-  sshCa(envId: string, opts?: CallOpts$31): Promise<EnvironmentSshCa>;
+  sshCa(envId: string, opts?: CallOpts$32): Promise<EnvironmentSshCa>;
   /** `GET /v1/environments?project_id=&for_user_id=me` — newest first, every state. */
-  list(query?: ListEnvironmentsQuery, opts?: CallOpts$31): Promise<Environment[]>;
+  list(query?: ListEnvironmentsQuery, opts?: CallOpts$32): Promise<Environment[]>;
   /**
    * `POST /v1/environments` — `byo` starts `pending`; managed providers start
    * `creating`. 409 `already_has_env` in a `vm_per_dev` project (the error
    * body carries the `environment_id` to reuse).
    */
-  create(body: EnvironmentCreateBody, opts?: CallOpts$31): Promise<Environment>;
+  create(body: EnvironmentCreateBody, opts?: CallOpts$32): Promise<Environment>;
   /**
    * `POST /v1/environments/enroll` — daemon side. The one-time `codai_env_…`
    * token in the body is the only credential; the client's API key header is
    * ignored by this route. Managed environments additionally receive a
    * freshly minted `api_key`, returned exactly once.
    */
-  enroll(body: EnvironmentEnrollBody, opts?: CallOpts$31): Promise<EnvironmentEnrolled>;
+  enroll(body: EnvironmentEnrollBody, opts?: CallOpts$32): Promise<EnvironmentEnrolled>;
   /** `GET /v1/environments/{id}` — environment, your role, members, ports, recent events. */
-  get(envId: string, opts?: CallOpts$31): Promise<EnvironmentDetail>;
+  get(envId: string, opts?: CallOpts$32): Promise<EnvironmentDetail>;
   /** `PATCH /v1/environments/{id}` — `name` and/or `idle_timeout_minutes` (5..1440). */
-  update(envId: string, body: EnvironmentPatchBody, opts?: CallOpts$31): Promise<Environment>;
+  update(envId: string, body: EnvironmentPatchBody, opts?: CallOpts$32): Promise<Environment>;
   /** `POST /v1/environments/{id}/start` — managed providers only (`stopped` → `starting`). */
-  start(envId: string, opts?: CallOpts$31): Promise<EnvironmentTransition>;
+  start(envId: string, opts?: CallOpts$32): Promise<EnvironmentTransition>;
   /** `POST /v1/environments/{id}/stop` — managed providers only (`running` → `stopping`). */
-  stop(envId: string, opts?: CallOpts$31): Promise<EnvironmentTransition>;
+  stop(envId: string, opts?: CallOpts$32): Promise<EnvironmentTransition>;
   /** `POST /v1/environments/{id}/archive` — keeps history, releases the machine. */
-  archive(envId: string, opts?: CallOpts$31): Promise<EnvironmentTransition>;
+  archive(envId: string, opts?: CallOpts$32): Promise<EnvironmentTransition>;
   /** `POST /v1/environments/{id}/destroy` — owner only; terminal. */
-  destroy(envId: string, opts?: CallOpts$31): Promise<EnvironmentTransition>;
+  destroy(envId: string, opts?: CallOpts$32): Promise<EnvironmentTransition>;
   /**
    * `POST /v1/environments/{id}/enroll-token` — `byo` only; a 30-minute
    * one-time token for `enroll()`. Minting again replaces the previous one.
    */
-  enrollToken(envId: string, opts?: CallOpts$31): Promise<EnvironmentEnrollToken>;
+  enrollToken(envId: string, opts?: CallOpts$32): Promise<EnvironmentEnrollToken>;
   private transition;
 }
 //#endregion
@@ -33473,7 +33634,7 @@ export type HostExecBody = Mutable<Body<'execOnHost'>>;
 export type HostExecResponse = Reply<'execOnHost'>;
 export type HostExecRequest = Schema<'HostExecRequest'>;
 export type HostExecResultBody = Mutable<Body<'postHostExecResult'>>;
-type CallOpts$30 = {
+type CallOpts$31 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -33500,7 +33661,7 @@ export declare class Hosts {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/hosts` — your devices currently connected as hosts. */
-  list(opts?: CallOpts$30): Promise<HostPresence[]>;
+  list(opts?: CallOpts$31): Promise<HostPresence[]>;
   /**
    * `POST /v1/hosts/{deviceId}/exec` — run one op on a connected host and
    * block until it answers (or `timeout_ms`, default 60 s).
@@ -33508,9 +33669,9 @@ export declare class Hosts {
   exec(deviceId: string, op: HostOp, args?: Record<string, unknown>, extra?: {
     timeoutMs?: number;
     label?: string;
-  } & CallOpts$30): Promise<HostExecResponse>;
+  } & CallOpts$31): Promise<HostExecResponse>;
   /** `POST /v1/hosts/exec/{reqId}/result` — host side: deliver an exec result. */
-  postResult(reqId: string, body: HostExecResultBody, opts?: CallOpts$30): Promise<Reply<'postHostExecResult'>>;
+  postResult(reqId: string, body: HostExecResultBody, opts?: CallOpts$31): Promise<Reply<'postHostExecResult'>>;
   /**
    * `GET /v1/hosts/stream?os=&hostname=&roots=` — host side: announce this
    * device and receive `hello` / `ping` / `exec` events. Closed by the server
@@ -33520,7 +33681,7 @@ export declare class Hosts {
     os?: string;
     hostname?: string;
     roots?: string[];
-  }, opts?: CallOpts$30): AsyncGenerator<HostStreamEvent, void, undefined>;
+  }, opts?: CallOpts$31): AsyncGenerator<HostStreamEvent, void, undefined>;
 }
 //#endregion
 //#region src/resources/assets.d.ts
@@ -33532,7 +33693,7 @@ export type AssetDeleted = Reply<'deleteAsset'>;
 export type AssetListQuery = QueryOf<'listAssets'>;
 /** `b64_json` (default, inline bytes) or `url` (stored asset + 1 h signed URL; 503 `assets_unavailable` without storage). */
 export type MediaResponseFormat = Schema<'MediaResponseFormat'>;
-type CallOpts$29 = {
+type CallOpts$30 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -33542,25 +33703,25 @@ export declare class Assets {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/assets` — newest first, `limit` ≤ 100 (default 30). Paginate by passing `next_before` as `before`. */
-  list(query?: AssetListQuery, opts?: CallOpts$29): Promise<AssetList>;
+  list(query?: AssetListQuery, opts?: CallOpts$30): Promise<AssetList>;
   /** Iterate every asset across pages (`list` with `before` = previous `next_before`). */
-  iterate(query?: Omit<AssetListQuery, 'before'>, opts?: CallOpts$29): AsyncGenerator<AssetDto, void, undefined>;
+  iterate(query?: Omit<AssetListQuery, 'before'>, opts?: CallOpts$30): AsyncGenerator<AssetDto, void, undefined>;
   /** `GET /v1/assets/{id}` — one asset with a fresh 1 h signed `url` (`null` while not `ready`). */
-  retrieve(id: string, opts?: CallOpts$29): Promise<AssetDto>;
+  retrieve(id: string, opts?: CallOpts$30): Promise<AssetDto>;
   /**
    * A fresh signed URL of the asset's bytes (valid 1 h), from `GET /v1/assets/{id}`. Throws when the asset has no
    * content yet. Use it in `<audio>`/`<video>`/`fetch` — it needs no Authorization header.
    */
-  contentUrl(id: string, opts?: CallOpts$29): Promise<string>;
+  contentUrl(id: string, opts?: CallOpts$30): Promise<string>;
   /**
    * The authenticated redirect endpoint `GET /v1/assets/{id}/content` (302 to the signed URL). Useful for tools that
    * follow redirects with the API key (`curl -L -H 'Authorization: Bearer …'`); browsers should use `contentUrl()`.
    */
   contentPath(id: string): string;
   /** Download the asset's bytes (fetches the signed URL, no API key sent to storage). */
-  content(id: string, opts?: CallOpts$29): Promise<Uint8Array>;
+  content(id: string, opts?: CallOpts$30): Promise<Uint8Array>;
   /** `DELETE /v1/assets/{id}` — deletes the object; signed URLs already handed out stop working. */
-  delete(id: string, opts?: CallOpts$29): Promise<AssetDeleted>;
+  delete(id: string, opts?: CallOpts$30): Promise<AssetDeleted>;
 }
 //#endregion
 //#region src/resources/images.d.ts
@@ -34063,11 +34224,11 @@ export type DocumentPreview = Reply<'retrievePreview'>;
 export type DocumentPreviewStatus = DocumentPreview['status'];
 export type DocumentVideoRequest = Mutable<Body<'createDocumentVideo'>>;
 export type DocumentVideoAccepted = Reply<'createDocumentVideo', 202>;
-type CallOpts$28 = {
+type CallOpts$29 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
-export interface DocumentPollOptions extends CallOpts$28 {
+export interface DocumentPollOptions extends CallOpts$29 {
   /** Delay between polls (default 3000 ms for previews, 5000 ms for videos). */
   pollIntervalMs?: number;
   /** Give up after this long (default 300 000 ms for previews, 900 000 ms for videos). */
@@ -34082,21 +34243,21 @@ export declare class Documents {
    * `sheet` -> `SheetSpec`); invalid specs are 400 `invalid_spec`. Files are free. `based_on` creates the next version
    * of one of your documents; `preview: true` also queues a (billed) preview, returned as `preview`.
    */
-  create(body: DocumentCreateRequest, opts?: CallOpts$28): Promise<StudioDocument>;
+  create(body: DocumentCreateRequest, opts?: CallOpts$29): Promise<StudioDocument>;
   /** `GET /v1/studio/documents/{id}` — fresh 1 h signed `file.url`, the stored `spec` and `latest_preview_id`. */
-  retrieve(id: string, opts?: CallOpts$28): Promise<StudioDocument>;
+  retrieve(id: string, opts?: CallOpts$29): Promise<StudioDocument>;
   /**
    * Queue a preview (`POST /v1/studio/documents/{id}/previews`, HTTP 202): tagged PDF, page PNGs (1280 px) and a
    * contact sheet. Billed once on the first poll that sees the result; at most 3 active previews per user (429).
    */
-  preview(id: string, body?: DocumentPreviewRequest, opts?: CallOpts$28): Promise<DocumentPreviewAccepted>;
+  preview(id: string, body?: DocumentPreviewRequest, opts?: CallOpts$29): Promise<DocumentPreviewAccepted>;
   /** Poll a preview (`GET /v1/studio/previews/{id}`): `queued` | `rendering` | `succeeded` | `failed`. */
-  retrievePreview(previewId: string, opts?: CallOpts$28): Promise<DocumentPreview>;
+  retrievePreview(previewId: string, opts?: CallOpts$29): Promise<DocumentPreview>;
   /**
    * Turn a deck into an MP4 (`POST /v1/studio/documents/{id}/video`, HTTP 202). Returns a render: poll it with
    * `renders.retrieve(id)` or use `videoAndWait`. Narration (`narrate`) is synthesized and billed now.
    */
-  video(id: string, body?: DocumentVideoRequest, opts?: CallOpts$28): Promise<DocumentVideoAccepted>;
+  video(id: string, body?: DocumentVideoRequest, opts?: CallOpts$29): Promise<DocumentVideoAccepted>;
   /** Queue a preview and poll until it succeeds. Throws on `failed` or timeout. */
   createPreviewAndWait(id: string, opts?: DocumentPollOptions & {
     body?: DocumentPreviewRequest;
@@ -34118,11 +34279,11 @@ export interface LottieDownload {
   filename: string | null;
   contentType: string | null;
 }
-type CallOpts$27 = {
+type CallOpts$28 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
-export interface ExportWaitOptions extends CallOpts$27 {
+export interface ExportWaitOptions extends CallOpts$28 {
   /** Delay between polls (default 3000 ms). */
   intervalMs?: number;
   /** Give up after this long (default 900 000 ms = 15 min). */
@@ -34132,7 +34293,7 @@ export declare class Exports {
   private readonly http;
   constructor(http: HttpClient);
   /** The export: `queued` / `running`, then `succeeded` (signed `url`, valid 1 h) or `failed` (`error`). Free. */
-  retrieve(id: string, opts?: CallOpts$27): Promise<StudioExport>;
+  retrieve(id: string, opts?: CallOpts$28): Promise<StudioExport>;
   /**
    * Poll `retrieve` every `intervalMs` (default 3 s) until the export is `succeeded` or `failed` and resolve with it
    * (a `failed` export resolves too — check `status` / `error`). Throws when it is not done within `timeoutMs`
@@ -34265,7 +34426,7 @@ export interface CreativeEditRequest {
   /** Bypass locked nodes and variables. */
   force?: boolean;
 }
-type CallOpts$26 = {
+type CallOpts$27 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34273,49 +34434,49 @@ export declare class Creatives {
   private readonly http;
   constructor(http: HttpClient);
   /** List your creatives, most recently updated first (`next_before` pages). */
-  list(query?: CreativeListQuery, opts?: CallOpts$26): Promise<CreativeList>;
+  list(query?: CreativeListQuery, opts?: CallOpts$27): Promise<CreativeList>;
   /**
    * Create a creative (`kind` + optional `title` / `doc`); without `doc` you get an empty document for the kind.
    * `brand_kit_id` applies one of your brand kits (`brandKits`) to version 1: `brand = { kitId, tokens }` + its logo.
    * `template` (+ `vars`, values by var key) starts from one of your templates (`templates`) instead of `doc`.
    */
-  create(body: CreativeCreateRequest, opts?: CallOpts$26): Promise<Creative>;
+  create(body: CreativeCreateRequest, opts?: CallOpts$27): Promise<Creative>;
   /** The document at the head (or `seq`) with signed `assets` (1 h URLs). */
   retrieve(id: string, query?: {
     seq?: number;
-  }, opts?: CallOpts$26): Promise<CreativeDetail>;
+  }, opts?: CallOpts$27): Promise<CreativeDetail>;
   /** Compact text outline (+ formats and vars) — the cheapest structure for a prompt. */
-  outline(id: string, opts?: CallOpts$26): Promise<CreativeOutline>;
+  outline(id: string, opts?: CallOpts$27): Promise<CreativeOutline>;
   /** Node ids matching `query` (a string = text/name/id substring, or `{ text, type, sceneId, assetId, locked }`). */
-  find(id: string, query: CreativeFindRequest['query'], opts?: CallOpts$26): Promise<CreativeFindResult>;
+  find(id: string, query: CreativeFindRequest['query'], opts?: CallOpts$27): Promise<CreativeFindResult>;
   /** Full JSON of `ids` (scene ids return whole scenes) or of one `sceneId`. */
-  subtree(id: string, body: CreativeSubtreeRequest, opts?: CallOpts$26): Promise<CreativeSubtree>;
+  subtree(id: string, body: CreativeSubtreeRequest, opts?: CallOpts$27): Promise<CreativeSubtree>;
   /**
    * Apply an op batch (all or nothing) authored against `baseSeq`. A stale base is rebased when the touched
    * targets did not change meanwhile; otherwise the call throws `CodaiError` 409 `stale` (reload and retry). Rejected
    * ops throw 400 with `code` (`invalid`, `not_found`, `locked`, `duplicate_id`).
    */
-  edit(id: string, body: CreativeEditRequest, opts?: CallOpts$26): Promise<CreativeOpsResult>;
+  edit(id: string, body: CreativeEditRequest, opts?: CallOpts$27): Promise<CreativeOpsResult>;
   /** Version history, newest first (`beforeSeq` pages). */
   versions(id: string, query?: {
     beforeSeq?: number;
     limit?: number;
-  }, opts?: CallOpts$26): Promise<CreativeVersionList>;
+  }, opts?: CallOpts$27): Promise<CreativeVersionList>;
   /** New head whose document is version `seq`'s (undo / redo). */
-  revert(id: string, seq: number, opts?: CallOpts$26): Promise<CreativeRevertResult>;
+  revert(id: string, seq: number, opts?: CallOpts$27): Promise<CreativeRevertResult>;
   /** New creative from version `seq` (default the head). */
-  fork(id: string, body?: CreativeForkRequest, opts?: CallOpts$26): Promise<Creative>;
+  fork(id: string, body?: CreativeForkRequest, opts?: CallOpts$27): Promise<Creative>;
   /** Soft-delete the creative. */
-  delete(id: string, opts?: CallOpts$26): Promise<CreativeDeleted>;
+  delete(id: string, opts?: CallOpts$27): Promise<CreativeDeleted>;
   /**
    * Contrast, safe area, empty text, missing assets, brand colours, platform safe zones and text floors, alt text,
    * missing captions, reading speed, flashing, missing / stale translations. Issues carry `format` / `fixable` /
    * `locale`; `fixable` counts them (`lintFix`). `locale` lints the translated document (adds
    * `text_overflow_locale`); 404 `Locale not found.` for an unknown locale.
    */
-  lint(id: string, body?: CreativeLintRequest, opts?: CallOpts$26): Promise<CreativeLintResult>;
+  lint(id: string, body?: CreativeLintRequest, opts?: CallOpts$27): Promise<CreativeLintResult>;
   /** Preview HTML (signed asset URLs) for `format` / one `scene` / a translation (`locale`). */
-  compiled(id: string, query?: CreativeCompiledQuery, opts?: CallOpts$26): Promise<CreativeCompiled>;
+  compiled(id: string, query?: CreativeCompiledQuery, opts?: CallOpts$27): Promise<CreativeCompiled>;
   /**
    * Queue an MP4 render of the head (`codai-render`, HTTP 202, `cached: false`); poll `renders.retrieve(render_id)`.
    * When the same render already exists for this version / format / quality / fps you get it back at once
@@ -34324,48 +34485,48 @@ export declare class Creatives {
    * `ai_label` (`none` | `corner` | `end_card`, EU AI Act art. 50(4)) burns a visible AI label into the video; omitted =
    * `corner` when the creative uses TTS narration or AI images, else `none` (`none` with narration: 400 `ai_label_required`).
    */
-  render(id: string, body?: CreativeRenderRequest, opts?: CallOpts$26): Promise<CreativeRenderResult>;
+  render(id: string, body?: CreativeRenderRequest, opts?: CallOpts$27): Promise<CreativeRenderResult>;
   /**
    * PNG still frames at up to 6 times (`t_ms`). `exact: false` (default) screenshots the compiled HTML; `exact: true`
    * cuts them from a draft render of the covering scenes. Waits up to ~90 s: frames (`status: 'succeeded'`) or a
    * running job (`status: 'running'`) to poll with `frameJob(id, frame_job_id)`. Cached frames are free; 60 frame
    * jobs per UTC day are free, then billed (`billed_micro_usd`).
    */
-  frame(id: string, body: CreativeFrameRequest, opts?: CallOpts$26): Promise<CreativeFrameResult>;
+  frame(id: string, body: CreativeFrameRequest, opts?: CallOpts$27): Promise<CreativeFrameResult>;
   /**
    * Turn a comment pinned on a frame (`t_ms`, optional `node_id` / `scene_id`) into an edit: one bounded `codai`
    * model turn proposes ops, applied like `edit` against `base_seq` (rebased when possible, 409 `stale` else).
    * 422 `no_edit` when the model made no edit (its answer in `error.text`); `apply: false` only proposes the ops.
    * Token-metered like any `codai` text call.
    */
-  comment(id: string, body: CreativeCommentRequest, opts?: CallOpts$26): Promise<CreativeCommentResult>;
+  comment(id: string, body: CreativeCommentRequest, opts?: CallOpts$27): Promise<CreativeCommentResult>;
   /**
    * Generate A/B variants: one bounded `codai` model turn proposes `count` (default 3) variants changing only
    * `focus` (default hook / title / cta); each becomes a fork of the creative at `base_seq` with the ops applied, plus
    * a queued draft render (`render: false` to skip; poll `renders.retrieve(render_id)`). The original is unchanged
    * until `pickVariant`. 422 `no_edit` when no valid variant came back, 504 `timeout` after 90 s. Token-metered.
    */
-  variants(id: string, body: CreativeVariantsRequest, opts?: CallOpts$26): Promise<CreativeVariantsResult>;
+  variants(id: string, body: CreativeVariantsRequest, opts?: CallOpts$27): Promise<CreativeVariantsResult>;
   /** The latest variant group of a creative (`group_id: null` when none) with statuses and stored render state. */
-  listVariants(id: string, opts?: CallOpts$26): Promise<CreativeVariantList>;
+  listVariants(id: string, opts?: CallOpts$27): Promise<CreativeVariantList>;
   /**
    * Pick the winner: its ops are applied to the original against `base_seq` (rebased when possible, 409 `stale`
    * else); the winner is marked `winner`, the rest of its group `rejected`.
    */
-  pickVariant(id: string, variantId: string, body: CreativeVariantPickRequest, opts?: CallOpts$26): Promise<CreativeVariantPickResult>;
+  pickVariant(id: string, variantId: string, body: CreativeVariantPickRequest, opts?: CallOpts$27): Promise<CreativeVariantPickResult>;
   /**
    * Save the creative (at `seq`, default the head) as a private template: each `vars` entry turns a text node's text
    * (`prop: 'text'`) or an image node's asset (`prop: 'image'`) into a variable whose default is the current value.
    * 400 `node_not_found` / `invalid_pick` / `duplicate_key`. Free.
    */
-  saveTemplate(id: string, body: SaveTemplateRequest, opts?: CallOpts$26): Promise<CreativeTemplate>;
+  saveTemplate(id: string, body: SaveTemplateRequest, opts?: CallOpts$27): Promise<CreativeTemplate>;
   /**
    * Queue an FCPXML export of a video creative (`seq`, default the head; `format`, default the first 1920×1080 /
    * 1080×1920 / 1080×1080 format): a zip with `project.fcpxml` + per-scene MP4 segments + audio, for Final Cut Pro,
    * DaVinci Resolve or Premiere. Resolves to the queued export; poll it with `exports.wait(e.id)`. Only newly
    * rendered seconds are billed (final render price). 400 `unsupported_kind` / `unsupported_format` / `too_long`.
    */
-  exportFcpxml(id: string, query?: ExportFcpxmlQuery, opts?: CallOpts$26): Promise<StudioExport>;
+  exportFcpxml(id: string, query?: ExportFcpxmlQuery, opts?: CallOpts$27): Promise<StudioExport>;
   /**
    * Export a video creative as a Lottie animation (`seq`, default the head; `format`, default the document's default
    * format, or `formats: 'all'`; `container: 'json'` (default, Bodymovin JSON with embedded images) or `'dotlottie'`).
@@ -34373,33 +34534,33 @@ export declare class Creatives {
    * fidelity report in `warnings` (video, chart, HTML block, table, cell grid and audio nodes are not exported).
    * 400 `unsupported_kind` / `invalid_request`, 413 `too_large` (over 20 MB).
    */
-  exportLottie(id: string, query?: ExportLottieQuery, opts?: CallOpts$26): Promise<StudioExport>;
+  exportLottie(id: string, query?: ExportLottieQuery, opts?: CallOpts$27): Promise<StudioExport>;
   /**
    * The Lottie file itself (`download=1`, nothing stored): `application/json` for one Bodymovin JSON, `application/zip`
    * for a dotLottie archive or a zip of JSON files (`formats: 'all'`). Same options and errors as `exportLottie`. Free.
    */
-  downloadLottie(id: string, query?: ExportLottieQuery, opts?: CallOpts$26): Promise<LottieDownload>;
+  downloadLottie(id: string, query?: ExportLottieQuery, opts?: CallOpts$27): Promise<LottieDownload>;
   /**
    * Turn one of your Studio documents (deck, doc, sheet) into an editable creative — slides become scenes with a
    * `layout` and speaker `notes`, doc pages a `flow` group, sheets a `cell_grid`; nodes carry semantic `role`s.
    * Idempotent: a document that already has a creative resolves to it (`existing: true`). Free. 404 unknown document,
    * 409 `document_spec_missing`, 400 `invalid_spec`, 413 `too_large`.
    */
-  fromDocument(documentId: string, opts?: CallOpts$26): Promise<StudioCreativeFromDocument>;
+  fromDocument(documentId: string, opts?: CallOpts$27): Promise<StudioCreativeFromDocument>;
   /**
    * Build a deck / doc / sheet creative (at `seq`, default the head) into a PPTX / DOCX / XLSX — a new version of its
    * Studio document (`document`, exactly the `POST /v1/studio/documents` body). Converter notes come back in
    * `warnings`. The file is free; `preview: true` also queues a billed preview (poll it with
    * `documents.waitForPreview`). 400 `not_supported_for_kind` (video / image) or `invalid_spec`.
    */
-  build(id: string, body?: CreativeBuildRequest, opts?: CallOpts$26): Promise<StudioCreativeBuild>;
+  build(id: string, body?: CreativeBuildRequest, opts?: CallOpts$27): Promise<StudioCreativeBuild>;
   /**
    * Re-apply a brand kit (`brand_kit_id`) or a flat token map (`tokens`) to the creative as one new version: literal
    * colours equal to the old brand become token refs, `snap: true` maps every other colour to the nearest kit colour,
    * `fonts` (default true) sets heading / body font refs by role, locked nodes are skipped unless `force`. The kit
    * logo is registered too. `base_seq` defaults to the head (rebased like `edit`, 409 `stale` else). Free.
    */
-  restyle(id: string, body: CreativeRestyleRequest, opts?: CallOpts$26): Promise<CreativeRestyleResult>;
+  restyle(id: string, body: CreativeRestyleRequest, opts?: CallOpts$27): Promise<CreativeRestyleResult>;
   /**
    * Auto-captions: transcribe a voice clip (`clip_id`, default the first voice clip) word by word and add or update a
    * captions node (`preset`, default `bold-pill`) as one new version. Words are cached on the asset (free next time
@@ -34407,83 +34568,83 @@ export declare class Creatives {
    * transcription is billed at the speech-to-text rate (`cost_micro_usd`). Video creatives only (400
    * `unsupported_kind`); 403 `residency_unavailable`, 503 `transcription_unavailable`.
    */
-  captions(id: string, body?: CreativeCaptionsRequest, opts?: CallOpts$26): Promise<CreativeCaptionsResult>;
+  captions(id: string, body?: CreativeCaptionsRequest, opts?: CallOpts$27): Promise<CreativeCaptionsResult>;
   /** The captions as SubRip text on the document timeline (`node_id`, `seq` optional); 404 without captions. Free. */
-  captionsSrt(id: string, query?: CreativeCaptionsQuery, opts?: CallOpts$26): Promise<string>;
+  captionsSrt(id: string, query?: CreativeCaptionsQuery, opts?: CallOpts$27): Promise<string>;
   /** The captions as WebVTT text on the document timeline (`node_id`, `seq` optional); 404 without captions. Free. */
-  captionsVtt(id: string, query?: CreativeCaptionsQuery, opts?: CallOpts$26): Promise<string>;
+  captionsVtt(id: string, query?: CreativeCaptionsQuery, opts?: CallOpts$27): Promise<string>;
   /**
    * Adapt to platforms (`tiktok`, `reels`, `shorts`, `feed-square`, `feed-portrait`, `youtube`): one format per
    * platform in one new version, text kept inside each platform's safe zone and above its legible size.
    * `focal: 'vision'` (token-metered) finds the focal point of full-bleed images; it fails open. Free otherwise.
    */
-  adapt(id: string, body: CreativeAdaptRequest, opts?: CallOpts$26): Promise<CreativeAdaptResult>;
+  adapt(id: string, body: CreativeAdaptRequest, opts?: CallOpts$27): Promise<CreativeAdaptResult>;
   /**
    * Fix lint issues as one new version: deterministic fixes (free) for `off_brand_color`, `text_too_small`,
    * `outside_platform_safe_zone` and `flashing` (`codes` limits them); `agent: true` (token-metered) gives the rest
    * to one `codai` turn. Nothing to fix: the current `seq`, empty `fixed`, no new version.
    */
-  lintFix(id: string, body?: CreativeLintFixRequest, opts?: CallOpts$26): Promise<CreativeLintFixResult>;
+  lintFix(id: string, body?: CreativeLintFixRequest, opts?: CallOpts$27): Promise<CreativeLintFixResult>;
   /**
    * The tweak panel model: one control per variable (stored `meta.controls` entry or derived from the type). Change
    * values with a `setVar` op and controls with a `setControl` op (`edit`). Free.
    */
-  controls(id: string, opts?: CallOpts$26): Promise<CreativeControls>;
+  controls(id: string, opts?: CallOpts$27): Promise<CreativeControls>;
   /**
    * Localisation state: source locale, glossary, unit count and per locale translated / missing / stale / voice.
    * With `locale` (+ `units`, default 1) also the units of that locale (paged with `offset` / `limit` ≤ 500). Free.
    */
-  locales(id: string, query?: CreativeLocalesQuery, opts?: CallOpts$26): Promise<CreativeLocaleStatus>;
+  locales(id: string, query?: CreativeLocalesQuery, opts?: CallOpts$27): Promise<CreativeLocaleStatus>;
   /**
    * Translate every text into up to 10 BCP-47 `locales` as per-locale overrides (one new version, author `agent`).
    * Token-metered `codai` turns; `glossary` terms and the brand kit name stay verbatim, `tone` picks the address,
    * `only_missing` (default true) skips fresh translations, `voice: true` (video, billed) narrates voice clips again.
    * 400 `nothing_to_translate`; 503 `localize_unavailable` when every locale failed.
    */
-  localize(id: string, body: CreativeLocalizeRequest, opts?: CallOpts$26): Promise<CreativeLocalizeResult>;
+  localize(id: string, body: CreativeLocalizeRequest, opts?: CallOpts$27): Promise<CreativeLocalizeResult>;
   /**
    * Save `locale` as a new standalone creative (translations applied, overrides dropped, `fork_of` recorded; default
    * title `<title> (<locale>)`). 404 `Locale not found.`. Free (HTTP 201).
    */
-  forkLocale(id: string, locale: string, body?: CreativeLocaleForkRequest, opts?: CallOpts$26): Promise<CreativeLocaleForkResult>;
+  forkLocale(id: string, locale: string, body?: CreativeLocaleForkRequest, opts?: CallOpts$27): Promise<CreativeLocaleForkResult>;
   /**
    * Create a public link: `view` (read-only preview of version `seq` or the head; `allow_remix` default false) or
    * `review` (comments by name, no account; `can_approve` lets the holder approve). The `token` and `url` are shown
    * only in this answer (HTTP 201). 400 `unknown_seq`; 409 `too_many_shares` (20 active links). Free.
    */
-  createShare(id: string, body: StudioShareCreateRequest, opts?: CallOpts$26): Promise<StudioShareCreated>;
+  createShare(id: string, body: StudioShareCreateRequest, opts?: CallOpts$27): Promise<StudioShareCreated>;
   /** The active links (not revoked, not expired), newest first; `url` is always null. Free. */
-  listShares(id: string, opts?: CallOpts$26): Promise<StudioShareList>;
+  listShares(id: string, opts?: CallOpts$27): Promise<StudioShareList>;
   /** Revoke a link: it answers 404 from now on. 404 when unknown or already revoked. Free. */
-  revokeShare(id: string, shareId: string, opts?: CallOpts$26): Promise<void>;
+  revokeShare(id: string, shareId: string, opts?: CallOpts$27): Promise<void>;
   /**
    * The review state: `status` (`draft` → `in_review` → `approved` | `changes_requested`), requested / approved
    * version (`approved_is_head` false once the creative changed), decider and thread counts. Free.
    */
-  review(id: string, opts?: CallOpts$26): Promise<StudioReview>;
+  review(id: string, opts?: CallOpts$27): Promise<StudioReview>;
   /** Send the head to review (`in_review`, earlier decision cleared) so approver links can decide. Free. */
-  requestReview(id: string, opts?: CallOpts$26): Promise<StudioReview>;
+  requestReview(id: string, opts?: CallOpts$27): Promise<StudioReview>;
   /** Back to `draft` (decision cleared, comments kept). Free. */
-  resetReview(id: string, opts?: CallOpts$26): Promise<StudioReview>;
+  resetReview(id: string, opts?: CallOpts$27): Promise<StudioReview>;
   /** Comment threads, newest first (≤ 200), replies oldest first; `status` `open` | `resolved` | `all`. Free. */
-  reviewThreads(id: string, query?: StudioReviewThreadsQuery, opts?: CallOpts$26): Promise<StudioReviewThreadList>;
+  reviewThreads(id: string, query?: StudioReviewThreadsQuery, opts?: CallOpts$27): Promise<StudioReviewThreadList>;
   /**
    * Start a thread as the owner, optionally anchored to `node_id` / `scene_id` / `t_ms` (checked against the head:
    * 400 `unknown_node` / `unknown_scene`; HTTP 201). 409 `too_many_comments`. Free.
    */
-  createReviewThread(id: string, body: StudioReviewThreadCreateRequest, opts?: CallOpts$26): Promise<StudioReviewThread>;
+  createReviewThread(id: string, body: StudioReviewThreadCreateRequest, opts?: CallOpts$27): Promise<StudioReviewThread>;
   /** Reply in a thread as the owner (HTTP 201) — returns the whole thread. Free. */
   replyReviewThread(id: string, threadId: string, body: {
     body: string;
-  }, opts?: CallOpts$26): Promise<StudioReviewThread>;
+  }, opts?: CallOpts$27): Promise<StudioReviewThread>;
   /** Resolve a thread. Free. */
-  resolveReviewThread(id: string, threadId: string, opts?: CallOpts$26): Promise<StudioReviewThread>;
+  resolveReviewThread(id: string, threadId: string, opts?: CallOpts$27): Promise<StudioReviewThread>;
   /** Reopen a resolved thread. Free. */
-  reopenReviewThread(id: string, threadId: string, opts?: CallOpts$26): Promise<StudioReviewThread>;
+  reopenReviewThread(id: string, threadId: string, opts?: CallOpts$27): Promise<StudioReviewThread>;
   /** Delete any comment (owner moderation; deleting a root hides the thread). 404 when unknown. Free. */
-  deleteReviewComment(id: string, commentId: string, opts?: CallOpts$26): Promise<void>;
+  deleteReviewComment(id: string, commentId: string, opts?: CallOpts$27): Promise<void>;
   /** Poll a frame job: frames when done (`status: 'succeeded'`), `status: 'running'` meanwhile; 404 unknown job. */
-  frameJob(id: string, jobId: string, opts?: CallOpts$26): Promise<CreativeFrameResult>;
+  frameJob(id: string, jobId: string, opts?: CallOpts$27): Promise<CreativeFrameResult>;
 }
 //#endregion
 //#region src/resources/brand-kits.d.ts
@@ -34499,7 +34660,7 @@ export type BrandKitCreateRequest = Mutable<Body<'createBrandKit'>>;
 export type BrandKitUpdateRequest = Mutable<Body<'updateBrandKit'>>;
 export type BrandKitList = Reply<'listBrandKits'>;
 export type BrandKitDeleted = Reply<'deleteBrandKit'>;
-type CallOpts$25 = {
+type CallOpts$26 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34511,29 +34672,29 @@ export declare class BrandKits {
    * (import) — exactly one. 400 `invalid_tokens` (with `details.issues`) for an invalid DTCG document, 404 when
    * `logo_asset_id` is not one of your ready image assets. Free.
    */
-  create(body: BrandKitCreateRequest, opts?: CallOpts$25): Promise<BrandKit>;
+  create(body: BrandKitCreateRequest, opts?: CallOpts$26): Promise<BrandKit>;
   /**
    * Edit a kit: `tokens` is merged onto the current kit, `dtcg` replaces the whole document (not both),
    * `logo_asset_id: null` removes the logo. Creatives keep their tokens until `creatives.restyle`. Free.
    */
-  update(id: string, body: BrandKitUpdateRequest, opts?: CallOpts$25): Promise<BrandKit>;
+  update(id: string, body: BrandKitUpdateRequest, opts?: CallOpts$26): Promise<BrandKit>;
   /** The kit as a DTCG 2025.10 JSON document (`$extensions['ro.codai']` = kit id, name, logo asset id). Free. */
-  exportDtcg(id: string, opts?: CallOpts$25): Promise<BrandKitDtcg>;
+  exportDtcg(id: string, opts?: CallOpts$26): Promise<BrandKitDtcg>;
   /**
    * Extract a brand kit from a public `https` page (`{ url }`) or from one of your logo images
    * (`{ logo_asset_id }`, PNG / JPEG / WebP up to 5 MB; it becomes the kit logo): palette (primary, secondary, accent,
    * background, text) and heading / body fonts. One bounded `codai` model call (token-metered); 400 `url_blocked` for
    * private hosts, 400 `unsupported_media` for a bad logo, 422 `fetch_failed` / `extract_failed`, 504 `timeout`.
    */
-  extract(body: BrandKitExtractRequest, opts?: CallOpts$25): Promise<BrandKit>;
+  extract(body: BrandKitExtractRequest, opts?: CallOpts$26): Promise<BrandKit>;
   /** Your brand kits, newest first (`limit` 1–100, default 50). Free. */
   list(query?: {
     limit?: number;
-  }, opts?: CallOpts$25): Promise<BrandKitList>;
+  }, opts?: CallOpts$26): Promise<BrandKitList>;
   /** One kit with a signed logo URL (1 h), its `dtcg` and the WCAG `contrast` pairs. Free. */
-  retrieve(id: string, opts?: CallOpts$25): Promise<BrandKit>;
+  retrieve(id: string, opts?: CallOpts$26): Promise<BrandKit>;
   /** Delete a kit (creatives keep their tokens; the logo asset stays). Free. */
-  delete(id: string, opts?: CallOpts$25): Promise<BrandKitDeleted>;
+  delete(id: string, opts?: CallOpts$26): Promise<BrandKitDeleted>;
 }
 //#endregion
 //#region src/resources/templates.d.ts
@@ -34541,7 +34702,7 @@ export type CreativeTemplateVar = Schema<'CreativeTemplateVar'>;
 export type CreativeTemplateList = Reply<'listCreativeTemplates'>;
 export type CreativeTemplateListQuery = QueryOf<'listCreativeTemplates'>;
 export type CreativeTemplateDeleted = Reply<'deleteCreativeTemplate'>;
-type CallOpts$24 = {
+type CallOpts$25 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34554,25 +34715,25 @@ export declare class Templates {
    * (default). `kind` filters both. Without `doc`. Free. A starter id works anywhere a template id does
    * (`retrieve`, `creatives.create({ template })`, batches); starters cannot be deleted.
    */
-  list(query?: CreativeTemplateListQuery, opts?: CallOpts$24): Promise<CreativeTemplateList>;
+  list(query?: CreativeTemplateListQuery, opts?: CallOpts$25): Promise<CreativeTemplateList>;
   /** One template with its variables and `doc`. Free. */
-  retrieve(id: string, opts?: CallOpts$24): Promise<Schema<'CreativeTemplate'>>;
+  retrieve(id: string, opts?: CallOpts$25): Promise<Schema<'CreativeTemplate'>>;
   /** Delete a template (creatives made from it are not affected). Free. */
-  delete(id: string, opts?: CallOpts$24): Promise<CreativeTemplateDeleted>;
+  delete(id: string, opts?: CallOpts$25): Promise<CreativeTemplateDeleted>;
 }
 //#endregion
 //#region src/resources/productions.d.ts
 export type StudioProductionCreate = Mutable<Body<'createStudioProduction'>>;
 export type StudioProduction = Schema<'StudioProduction'>;
-type CallOpts$23 = {
+type CallOpts$24 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
-export interface ProductionCreateOptions extends CallOpts$23 {
+export interface ProductionCreateOptions extends CallOpts$24 {
   /** `Idempotency-Key`: a retry with the same key replays the first production instead of starting another one. */
   idempotencyKey?: string;
 }
-export interface ProductionWaitOptions extends CallOpts$23 {
+export interface ProductionWaitOptions extends CallOpts$24 {
   /** Delay between polls (default 5000 ms). */
   intervalMs?: number;
   /** Give up after this long (default 600 000 ms = 10 min). */
@@ -34585,7 +34746,7 @@ export declare class Productions {
   /** `POST /v1/studio/productions` — brief → storyboard → assets → creative → queued draft render (202). */
   create(body: StudioProductionCreate, opts?: ProductionCreateOptions): Promise<StudioProduction>;
   /** `GET /v1/studio/productions/{id}` — advances the production and returns it (another account's id is a 404). */
-  retrieve(id: string, opts?: CallOpts$23): Promise<StudioProduction>;
+  retrieve(id: string, opts?: CallOpts$24): Promise<StudioProduction>;
   /**
    * Poll `retrieve` every `intervalMs` (default 5 s) until the production `succeeded` or `failed` (a failed one
    * resolves too — check `status` / `error`). Throws after `timeoutMs` (default 10 min) or when `signal` aborts.
@@ -34612,11 +34773,11 @@ export type StudioBatchDryRun = Schema<'StudioBatchDryRun'>;
 export type StudioBatchCreateRequest = Mutable<Schema<'StudioBatchCreateRequest'>>;
 export type StudioBatchListQuery = QueryOf<'listStudioBatches'>;
 export type StudioBatchGetQuery = QueryOf<'getStudioBatch'>;
-type CallOpts$22 = {
+type CallOpts$23 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
-export interface BatchWaitOptions extends CallOpts$22 {
+export interface BatchWaitOptions extends CallOpts$23 {
   /** Delay between polls (default 3000 ms). */
   intervalMs?: number;
   /** Give up after this long (default 600 000 ms = 10 min). */
@@ -34629,24 +34790,24 @@ export declare class Batches {
    * Create a batch: rows are validated (invalid rows are stored as `failed`) and run in the background; poll `get`
    * or `wait`. 400 `invalid_rows` when every row is invalid. Free (translations and renders are billed as usual).
    */
-  create(body: StudioBatchCreateRequest, opts?: CallOpts$22): Promise<StudioBatchDetail>;
+  create(body: StudioBatchCreateRequest, opts?: CallOpts$23): Promise<StudioBatchDetail>;
   /** Validate only (`dry_run: true`): the mapping, row errors, a 3-row preview and an estimate; nothing stored. Free. */
-  dryRun(body: StudioBatchCreateRequest, opts?: CallOpts$22): Promise<StudioBatchDryRun>;
+  dryRun(body: StudioBatchCreateRequest, opts?: CallOpts$23): Promise<StudioBatchDryRun>;
   /** Your batches, newest first (`limit` 1–50, `before` = the previous `next_before`). Free. */
-  list(query?: StudioBatchListQuery, opts?: CallOpts$22): Promise<StudioBatchList>;
+  list(query?: StudioBatchListQuery, opts?: CallOpts$23): Promise<StudioBatchList>;
   /** The batch (`rows: 1` adds rows; `status`, `offset`, `limit` ≤ 100). Each poll advances it a little. Free. */
-  get(id: string, query?: StudioBatchGetQuery, opts?: CallOpts$22): Promise<StudioBatchDetail>;
+  get(id: string, query?: StudioBatchGetQuery, opts?: CallOpts$23): Promise<StudioBatchDetail>;
   /** Stop the batch; rows not started become `skipped`. 409 `not_cancellable` when already finished. Free. */
-  cancel(id: string, opts?: CallOpts$22): Promise<StudioBatch>;
+  cancel(id: string, opts?: CallOpts$23): Promise<StudioBatch>;
   /** Queue the failed rows again (≤ 3 attempts each). 409 `nothing_to_retry`. Free. */
-  retry(id: string, opts?: CallOpts$22): Promise<StudioBatch>;
+  retry(id: string, opts?: CallOpts$23): Promise<StudioBatch>;
   /** The original CSV plus `creative_id`, `status`, `error`, `render_url` per row (formula-safe). Free. */
-  exportCsv(id: string, opts?: CallOpts$22): Promise<string>;
+  exportCsv(id: string, opts?: CallOpts$23): Promise<string>;
   /**
    * Start building a ZIP of the finished renders (202, `zip.status: 'building'`; unchanged when already building or
    * ready). Poll `get` until `zip.status` is `ready` (signed `zip.url`). 409 `no_renders`. Free.
    */
-  zip(id: string, opts?: CallOpts$22): Promise<StudioBatch>;
+  zip(id: string, opts?: CallOpts$23): Promise<StudioBatch>;
   /**
    * Poll `get` every `intervalMs` (default 3 s) until the batch is `completed`, `failed` or `cancelled` and resolve
    * with it. Throws when it is not done within `timeoutMs` (default 10 min) or when `signal` aborts.
@@ -34674,7 +34835,7 @@ export type StudioPublicShareQuery = {
   format?: string;
   locale?: string;
 };
-type CallOpts$21 = {
+type CallOpts$22 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34691,25 +34852,25 @@ export declare class Shares {
    * `locale` (null for images); review links add the review state and every thread. 404 for unknown, revoked or
    * expired links. No key needed.
    */
-  get(tokenOrUrl: string, query?: StudioPublicShareQuery, opts?: CallOpts$21): Promise<StudioPublicShare>;
+  get(tokenOrUrl: string, query?: StudioPublicShareQuery, opts?: CallOpts$22): Promise<StudioPublicShare>;
   /**
    * Copy the version a `view` link shows into a new creative of yours (the owner's ready assets are copied, the
    * foreign brand kit dropped; HTTP 201). 404 for review links or links without remix; 413 `remix_too_large`. Free.
    */
-  remix(tokenOrUrl: string, body?: StudioRemixRequest, opts?: CallOpts$21): Promise<StudioRemixResult>;
+  remix(tokenOrUrl: string, body?: StudioRemixRequest, opts?: CallOpts$22): Promise<StudioRemixResult>;
   /** Start a thread through a review link (`name`, `body`, optional anchor; HTTP 201). 400 `invalid_name`. */
-  comment(tokenOrUrl: string, body: StudioPublicThreadCreateRequest, opts?: CallOpts$21): Promise<StudioReviewThread>;
+  comment(tokenOrUrl: string, body: StudioPublicThreadCreateRequest, opts?: CallOpts$22): Promise<StudioReviewThread>;
   /** Reply in a thread through a review link (`name`, `body`; HTTP 201) — returns the whole thread. */
-  reply(tokenOrUrl: string, threadId: string, body: StudioPublicReplyRequest, opts?: CallOpts$21): Promise<StudioReviewThread>;
+  reply(tokenOrUrl: string, threadId: string, body: StudioPublicReplyRequest, opts?: CallOpts$22): Promise<StudioReviewThread>;
   /** Resolve a thread through a review link (`resolved_by` = `name`). */
-  resolve(tokenOrUrl: string, threadId: string, body: StudioPublicNameRequest, opts?: CallOpts$21): Promise<StudioReviewThread>;
+  resolve(tokenOrUrl: string, threadId: string, body: StudioPublicNameRequest, opts?: CallOpts$22): Promise<StudioReviewThread>;
   /** Reopen a resolved thread through a review link. */
-  reopen(tokenOrUrl: string, threadId: string, body: StudioPublicNameRequest, opts?: CallOpts$21): Promise<StudioReviewThread>;
+  reopen(tokenOrUrl: string, threadId: string, body: StudioPublicNameRequest, opts?: CallOpts$22): Promise<StudioReviewThread>;
   /**
    * Approve or request changes (approver review links only). 403 `not_an_approver`, 409 `review_not_open`, 409
    * `stale` (with `head_seq`) when `seq` is not the head. Returns the new review state.
    */
-  decide(tokenOrUrl: string, body: StudioPublicDecisionRequest, opts?: CallOpts$21): Promise<StudioPublicReview>;
+  decide(tokenOrUrl: string, body: StudioPublicDecisionRequest, opts?: CallOpts$22): Promise<StudioPublicReview>;
 }
 //#endregion
 //#region src/resources/voice-revocations.d.ts
@@ -34747,7 +34908,7 @@ export type VaultResolveRequest = Mutable<Body<'vaultResolve'>>;
 export type VaultTier = VaultAccount['default_tier'];
 /** Loose JSON object answers (lists, acks) as documented in the OpenAPI spec. */
 export type VaultObject = Record<string, unknown>;
-type CallOpts$20 = {
+type CallOpts$21 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34756,15 +34917,15 @@ export declare class VaultDevices {
   private readonly http;
   constructor(http: HttpClient);
   /** `POST /v1/vault/devices/challenge` — single-use enrolment nonce, valid 5 minutes. */
-  challenge(opts?: CallOpts$20): Promise<VaultDeviceChallenge>;
+  challenge(opts?: CallOpts$21): Promise<VaultDeviceChallenge>;
   /** `POST /v1/vault/devices` — enrol (or re-enrol) a device key; vault-signed, possession-proven, attested (201). */
-  enroll(body: VaultDeviceEnroll, opts?: CallOpts$20): Promise<VaultDeviceKey>;
+  enroll(body: VaultDeviceEnroll, opts?: CallOpts$21): Promise<VaultDeviceKey>;
   /** `GET /v1/vault/devices` — your device keys, revoked ones included, newest first. */
-  list(opts?: CallOpts$20): Promise<VaultDeviceKey[]>;
+  list(opts?: CallOpts$21): Promise<VaultDeviceKey[]>;
   /** `PATCH /v1/vault/devices/{id}` — change the display name (1-80 characters). */
-  rename(id: string, name: string, opts?: CallOpts$20): Promise<VaultDeviceKey>;
+  rename(id: string, name: string, opts?: CallOpts$21): Promise<VaultDeviceKey>;
   /** `DELETE /v1/vault/devices/{id}` — revoke at once; later proofs answer 403 `device_revoked`. */
-  revoke(id: string, opts?: CallOpts$20): Promise<Reply<'revokeVaultDevice'>>;
+  revoke(id: string, opts?: CallOpts$21): Promise<Reply<'revokeVaultDevice'>>;
 }
 export declare class Vault {
   private readonly http;
@@ -34773,52 +34934,52 @@ export declare class Vault {
   private get;
   private send;
   /** `GET /v1/vault/account` — bundle, fingerprint, default tier, revision (404 `vault_not_setup` before setup). */
-  account(opts?: CallOpts$20): Promise<VaultAccount>;
+  account(opts?: CallOpts$21): Promise<VaultAccount>;
   /** `PUT /v1/vault/account` — upload the client-built bundle; updates send the current `revision` (409 otherwise). */
-  putAccount(body: VaultAccountPut, opts?: CallOpts$20): Promise<VaultObject>;
+  putAccount(body: VaultAccountPut, opts?: CallOpts$21): Promise<VaultObject>;
   /** `PATCH /v1/vault/settings` — default approval tier for items without a matching rule. */
-  setDefaultTier(defaultTier: VaultTier, opts?: CallOpts$20): Promise<VaultObject>;
+  setDefaultTier(defaultTier: VaultTier, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/vaults` — vaults you belong to, with your role and sealed vault key. */
-  vaults(opts?: CallOpts$20): Promise<VaultObject>;
+  vaults(opts?: CallOpts$21): Promise<VaultObject>;
   /** `POST /v1/vault/vaults` — register a vault created client-side (HTTP 201). */
-  createVault(body: VaultCreate, opts?: CallOpts$20): Promise<VaultObject>;
+  createVault(body: VaultCreate, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/items` — envelopes you can read; with `since` (ISO) only changes after it, tombstones included. */
-  items(params?: QueryOf<'listVaultItems'>, opts?: CallOpts$20): Promise<VaultObject>;
+  items(params?: QueryOf<'listVaultItems'>, opts?: CallOpts$21): Promise<VaultObject>;
   /** `PUT /v1/vault/items/{id}` — store an envelope (new = revision 1, update = revision + 1, 409 otherwise). */
-  putItem(id: string, envelope: VaultItemEnvelope, opts?: CallOpts$20): Promise<VaultObject>;
+  putItem(id: string, envelope: VaultItemEnvelope, opts?: CallOpts$21): Promise<VaultObject>;
   /** `DELETE /v1/vault/items/{id}` — tombstone; revokes every grant on the item and drops its cloud copy. */
-  deleteItem(id: string, opts?: CallOpts$20): Promise<VaultObject>;
+  deleteItem(id: string, opts?: CallOpts$21): Promise<VaultObject>;
   /** `PUT /v1/vault/items/{id}/cloud` — owner only: the decrypted item to seal with KMS for cloud agents, or null. */
-  setItemCloud(id: string, item: Record<string, unknown> | null, opts?: CallOpts$20): Promise<VaultObject>;
+  setItemCloud(id: string, item: Record<string, unknown> | null, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/rules` — policy rules (item, agent glob, mode → tier). */
-  rules(opts?: CallOpts$20): Promise<VaultObject>;
+  rules(opts?: CallOpts$21): Promise<VaultObject>;
   /** `POST /v1/vault/rules` — add a rule (HTTP 201). Host binding and honeytokens cannot be overridden. */
-  createRule(body: VaultRuleCreate, opts?: CallOpts$20): Promise<VaultObject>;
+  createRule(body: VaultRuleCreate, opts?: CallOpts$21): Promise<VaultObject>;
   /** `DELETE /v1/vault/rules/{id}`. */
-  deleteRule(id: string, opts?: CallOpts$20): Promise<VaultObject>;
+  deleteRule(id: string, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/grants` — standing grants created by your approvals. */
-  grants(opts?: CallOpts$20): Promise<VaultObject>;
+  grants(opts?: CallOpts$21): Promise<VaultObject>;
   /** `DELETE /v1/vault/grants/{id}` — revoke a grant immediately. */
-  revokeGrant(id: string, opts?: CallOpts$20): Promise<VaultObject>;
+  revokeGrant(id: string, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/events` — append-only audit log (never contains secret values). */
-  events(params?: QueryOf<'listVaultEvents'>, opts?: CallOpts$20): Promise<VaultObject>;
+  events(params?: QueryOf<'listVaultEvents'>, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/approvals` — agent requests waiting for your decision. */
-  approvals(opts?: CallOpts$20): Promise<VaultObject>;
+  approvals(opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/approvals/{id}` — pending, approved, denied or expired. */
-  approval(id: string, opts?: CallOpts$20): Promise<VaultObject>;
+  approval(id: string, opts?: CallOpts$21): Promise<VaultObject>;
   /**
    * `POST /v1/vault/approvals/{id}/decide` — send `signature` (v1 vault key) or `proof` (v2 device key / passkey),
    * never both. Deny needs no proof; a t4 approve needs a device or passkey proof (Wear: t3 only).
    */
-  decide(id: string, body: VaultDecision, opts?: CallOpts$20): Promise<VaultObject>;
+  decide(id: string, body: VaultDecision, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/catalog` — items exposed to agents (handle, title, kind, hosts, env name); no values. */
-  catalog(opts?: CallOpts$20): Promise<VaultObject>;
+  catalog(opts?: CallOpts$21): Promise<VaultObject>;
   /** `POST /v1/vault/use` — a policy decision for one use; t3/t4 return a pending approval id. */
-  use(body: VaultUseRequest, opts?: CallOpts$20): Promise<VaultUseDecision>;
+  use(body: VaultUseRequest, opts?: CallOpts$21): Promise<VaultUseDecision>;
   /** `POST /v1/vault/http` — brokered HTTPS call with `{{vault:<slug>}}` handles; 202 = approval required. */
-  httpCall(body: VaultHttpRequest, opts?: CallOpts$20): Promise<VaultObject>;
+  httpCall(body: VaultHttpRequest, opts?: CallOpts$21): Promise<VaultObject>;
   /** `POST /v1/vault/resolve` — codai local brokers only (cloud fallback of `codaid vault run`); 202 = approval. */
-  resolve(body: VaultResolveRequest, opts?: CallOpts$20): Promise<VaultObject>;
+  resolve(body: VaultResolveRequest, opts?: CallOpts$21): Promise<VaultObject>;
 }
 //#endregion
 //#region src/resources/abuse-reports.d.ts
@@ -34925,7 +35086,7 @@ export type Org = Schema<'OrgWithRole'>;
 export type OrgMember = Schema<'OrgMember'>;
 export type OrgRole = Schema<'OrgRole'>;
 export type OrgAddMemberBody = Mutable<Body<'addOrgMember'>>;
-type CallOpts$19 = {
+type CallOpts$20 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34933,20 +35094,20 @@ export declare class OrgMembers {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/orgs/{id}/members` */
-  list(orgId: string, opts?: CallOpts$19): Promise<OrgMember[]>;
+  list(orgId: string, opts?: CallOpts$20): Promise<OrgMember[]>;
   /** `POST /v1/orgs/{id}/members` — add or re-role (owner/admin). */
-  add(orgId: string, body: OrgAddMemberBody, opts?: CallOpts$19): Promise<Reply<'addOrgMember', 201>>;
+  add(orgId: string, body: OrgAddMemberBody, opts?: CallOpts$20): Promise<Reply<'addOrgMember', 201>>;
   /** `DELETE /v1/orgs/{id}/members/{userId}` */
-  remove(orgId: string, userId: string, opts?: CallOpts$19): Promise<Reply<'removeOrgMember'>>;
+  remove(orgId: string, userId: string, opts?: CallOpts$20): Promise<Reply<'removeOrgMember'>>;
 }
 export declare class Orgs {
   private readonly http;
   readonly members: OrgMembers;
   constructor(http: HttpClient);
   /** `POST /v1/orgs` */
-  create(name: string, opts?: CallOpts$19): Promise<Org>;
+  create(name: string, opts?: CallOpts$20): Promise<Org>;
   /** `GET /v1/orgs` */
-  list(opts?: CallOpts$19): Promise<Org[]>;
+  list(opts?: CallOpts$20): Promise<Org[]>;
 }
 //#endregion
 //#region src/resources/projects.d.ts
@@ -34955,7 +35116,7 @@ export type ProjectIsolation = Schema<'ProjectIsolation'>;
 export type ProjectCreateBody = Mutable<Body<'createProject'>>;
 export type ProjectPatchBody = Mutable<Body<'updateProject'>>;
 export type ProjectDetail = Reply<'getProject'>;
-type CallOpts$18 = {
+type CallOpts$19 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -34963,15 +35124,15 @@ export declare class Projects {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/projects` — projects you own plus those of your orgs, newest first. */
-  list(opts?: CallOpts$18): Promise<Project[]>;
+  list(opts?: CallOpts$19): Promise<Project[]>;
   /** `POST /v1/projects` — 409 `slug_taken` when the slug is already yours. */
-  create(body: ProjectCreateBody, opts?: CallOpts$18): Promise<Project>;
+  create(body: ProjectCreateBody, opts?: CallOpts$19): Promise<Project>;
   /** `GET /v1/projects/{id}` — the project plus every environment in it. */
-  get(projectId: string, opts?: CallOpts$18): Promise<ProjectDetail>;
+  get(projectId: string, opts?: CallOpts$19): Promise<ProjectDetail>;
   /** `PATCH /v1/projects/{id}` — owner or org owner/admin; the slug cannot change. */
-  update(projectId: string, body: ProjectPatchBody, opts?: CallOpts$18): Promise<Project>;
+  update(projectId: string, body: ProjectPatchBody, opts?: CallOpts$19): Promise<Project>;
   /** `DELETE /v1/projects/{id}` — 409 `project_has_environments` until all are destroyed. */
-  delete(projectId: string, opts?: CallOpts$18): Promise<Reply<'deleteProject'>>;
+  delete(projectId: string, opts?: CallOpts$19): Promise<Reply<'deleteProject'>>;
 }
 //#endregion
 //#region src/resources/realtime.d.ts
@@ -35118,7 +35279,7 @@ export declare class Realtime {
 export type ReferralsView = Reply<'getReferrals'>;
 export type ReferralRow = Schema<'ReferralRow'>;
 export type ReferralStats = Schema<'AccountReferral'>;
-type CallOpts$17 = {
+type CallOpts$18 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -35126,15 +35287,15 @@ export declare class Referrals {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/referrals` — stats, redeem deadline and invitees (masked, no PII). */
-  get(opts?: CallOpts$17): Promise<ReferralsView>;
+  get(opts?: CallOpts$18): Promise<ReferralsView>;
   /**
    * Redeem a referrer's code (their username) — `PATCH /v1/account
    * { referral_code }`. Allowed within 7 days of signup; the outcome is in
    * `referral_result` of the response.
    */
-  redeem(code: string, opts?: CallOpts$17): Promise<AccountPatchResponse>;
+  redeem(code: string, opts?: CallOpts$18): Promise<AccountPatchResponse>;
   /** Opt in/out of the referral programme — `PATCH /v1/account { referral_consent }`. */
-  setConsent(consent: boolean, opts?: CallOpts$17): Promise<AccountPatchResponse>;
+  setConsent(consent: boolean, opts?: CallOpts$18): Promise<AccountPatchResponse>;
   private patch;
 }
 //#endregion
@@ -36179,7 +36340,7 @@ export interface ResolveWaitOptions {
   /** Called with every polled job (progress UIs). */
   onPoll?: (job: ResolveJob) => void;
 }
-type CallOpts$16 = {
+type CallOpts$17 = {
   signal?: AbortSignal;
 };
 /** Query of `resolve.list()` / `resolve.iterate()`. */
@@ -36200,20 +36361,20 @@ export declare class Resolve {
    * (`status: 'accepted'`) or a decline (`status: 'declined'`). Never retried:
    * a retry could create a second job.
    */
-  submit(body: ResolveIntake, opts?: CallOpts$16): Promise<ResolveSubmitResult>;
+  submit(body: ResolveIntake, opts?: CallOpts$17): Promise<ResolveSubmitResult>;
   /** `GET /v1/resolve/jobs/{id}` — status, quote, reasons, cost and attestation pointer. */
-  get(id: string, opts?: CallOpts$16): Promise<ResolveJob>;
+  get(id: string, opts?: CallOpts$17): Promise<ResolveJob>;
   /**
    * `GET /v1/resolve/jobs` — one page of your jobs, newest first. Pass the
    * page's `next_cursor` back as `cursor` for the next page (`null` = last).
    * `status` filters by one or more statuses.
    */
-  list(query?: ResolveListQuery, opts?: CallOpts$16): Promise<ResolveJobList>;
+  list(query?: ResolveListQuery, opts?: CallOpts$17): Promise<ResolveJobList>;
   /**
    * Every job matching `query`, newest first, following `next_cursor` page by
    * page (`limit` = page size). Stop early with `break`.
    */
-  iterate(query?: Omit<ResolveListQuery, 'cursor'>, opts?: CallOpts$16): AsyncGenerator<ResolveJob, void, undefined>;
+  iterate(query?: Omit<ResolveListQuery, 'cursor'>, opts?: CallOpts$17): AsyncGenerator<ResolveJob, void, undefined>;
   /**
    * `POST /v1/resolve/jobs/{id}/accept` — accept a paid quote and start the job.
    * The result's `paid_with` says how it was paid (`intro` €1 hold, `credit`
@@ -36221,18 +36382,18 @@ export declare class Resolve {
    * carries `topupUrl`, plus `bundleUrl` for t7) when the wallet is short,
    * `ResolveError` 409 when the job is not `quoted`.
    */
-  accept(id: string, opts?: CallOpts$16): Promise<ResolveAccepted>;
+  accept(id: string, opts?: CallOpts$17): Promise<ResolveAccepted>;
   /**
    * `GET /v1/resolve/attestations/{id}` — public execution proof (no auth needed
    * server-side). Accepts the attestation id or the job's `attestation_url`.
    */
-  attestation(idOrUrl: string, opts?: CallOpts$16): Promise<ResolveAttestation>;
+  attestation(idOrUrl: string, opts?: CallOpts$17): Promise<ResolveAttestation>;
   /** `GET /health` — liveness of the Resolve service. */
-  health(opts?: CallOpts$16): Promise<ResolveHealth>;
+  health(opts?: CallOpts$17): Promise<ResolveHealth>;
   /** `GET /v1/resolve/balance` — fix credits (t7 only), intro availability and wallet balance. */
-  balance(opts?: CallOpts$16): Promise<ResolveBalance>;
+  balance(opts?: CallOpts$17): Promise<ResolveBalance>;
   /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
-  keys(opts?: CallOpts$16): Promise<ResolveKeys>;
+  keys(opts?: CallOpts$17): Promise<ResolveKeys>;
   /**
    * Verify an attestation's signature and that the signed statement matches
    * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
@@ -36333,7 +36494,7 @@ export type SessionShare = Schema<'OrgSessionShare'>;
 export type SessionShareCreateRequest = Mutable<Body<'createSessionShare'>>;
 export type SessionShareCreated = Reply<'createSessionShare', 201>;
 export type SharedSession = Schema<'OrgSharedSession'>;
-type CallOpts$15 = {
+type CallOpts$16 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
@@ -36380,19 +36541,19 @@ export declare class SessionLease {
   private readonly http;
   constructor(http: HttpClient);
   /** `POST /v1/sessions/{id}/lease` — CAS claim; `force: true` takes over a live lease. */
-  acquire(sessionId: string, body?: SessionLeaseClaimRequest, opts?: CallOpts$15): Promise<SessionLeaseResponse>;
+  acquire(sessionId: string, body?: SessionLeaseClaimRequest, opts?: CallOpts$16): Promise<SessionLeaseResponse>;
   /** `PUT /v1/sessions/{id}/lease` — heartbeat every 10 s (TTL 30 s). */
-  renew(sessionId: string, opts?: CallOpts$15): Promise<SessionLeaseResponse>;
+  renew(sessionId: string, opts?: CallOpts$16): Promise<SessionLeaseResponse>;
   /** `DELETE /v1/sessions/{id}/lease` */
-  release(sessionId: string, opts?: CallOpts$15): Promise<Reply<'releaseSessionLease'>>;
+  release(sessionId: string, opts?: CallOpts$16): Promise<Reply<'releaseSessionLease'>>;
 }
 export declare class SessionEvents {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/sessions/{id}/events?after=&limit=` */
-  list(sessionId: string, query?: Mutable<QueryOf<'listSessionEvents'>>, opts?: CallOpts$15): Promise<SessionEventsPage>;
+  list(sessionId: string, query?: Mutable<QueryOf<'listSessionEvents'>>, opts?: CallOpts$16): Promise<SessionEventsPage>;
   /** `POST /v1/sessions/{id}/events` — executor only (needs the live lease). */
-  append(sessionId: string, body: SessionEventsAppendRequest, opts?: CallOpts$15): Promise<SessionEventsAppendResponse>;
+  append(sessionId: string, body: SessionEventsAppendRequest, opts?: CallOpts$16): Promise<SessionEventsAppendResponse>;
 }
 export declare class SessionControls {
   private readonly http;
@@ -36401,25 +36562,25 @@ export declare class SessionControls {
   list(sessionId: string, query?: {
     applied?: boolean;
     target?: 'me' | string;
-  }, opts?: CallOpts$15): Promise<SessionControl[]>;
+  }, opts?: CallOpts$16): Promise<SessionControl[]>;
   /** `POST /v1/sessions/{id}/control` — send a control to the executor (editor+). */
-  submit(sessionId: string, body: SessionControlRequest, opts?: CallOpts$15): Promise<SessionControlAccepted>;
+  submit(sessionId: string, body: SessionControlRequest, opts?: CallOpts$16): Promise<SessionControlAccepted>;
   /** `POST /v1/sessions/{id}/control/{cid}/applied` — executor only. */
-  markApplied(sessionId: string, controlId: string, opts?: CallOpts$15): Promise<Reply<'markSessionControlApplied'>>;
+  markApplied(sessionId: string, controlId: string, opts?: CallOpts$16): Promise<Reply<'markSessionControlApplied'>>;
 }
 export declare class SessionShares {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/sessions/{id}/shares` — owner only. */
-  list(sessionId: string, opts?: CallOpts$15): Promise<SessionShare[]>;
+  list(sessionId: string, opts?: CallOpts$16): Promise<SessionShare[]>;
   /** `POST /v1/sessions/{id}/shares` — `token` is returned once for link shares. */
-  create(sessionId: string, body: SessionShareCreateRequest, opts?: CallOpts$15): Promise<SessionShareCreated>;
+  create(sessionId: string, body: SessionShareCreateRequest, opts?: CallOpts$16): Promise<SessionShareCreated>;
   /** `DELETE /v1/sessions/{id}/shares/{shareId}` */
-  delete(sessionId: string, shareId: string, opts?: CallOpts$15): Promise<Reply<'deleteSessionShare'>>;
+  delete(sessionId: string, shareId: string, opts?: CallOpts$16): Promise<Reply<'deleteSessionShare'>>;
   /** `GET /v1/sessions/shared-with-me` */
   sharedWithMe(query?: {
     archived?: boolean;
-  }, opts?: CallOpts$15): Promise<SharedSession[]>;
+  }, opts?: CallOpts$16): Promise<SharedSession[]>;
 }
 export declare class Sessions {
   private readonly http;
@@ -36429,27 +36590,27 @@ export declare class Sessions {
   readonly shares: SessionShares;
   constructor(http: HttpClient);
   /** `POST /v1/sessions` — idempotent on `session_key` (200 existing / 201 created). */
-  create(body?: SessionCreateRequest, opts?: CallOpts$15): Promise<Session & {
+  create(body?: SessionCreateRequest, opts?: CallOpts$16): Promise<Session & {
     created: boolean;
   }>;
   /** `GET /v1/sessions?limit=&archived=` — own sessions first, then shared. */
   list(query?: {
     limit?: number;
     archived?: boolean;
-  }, opts?: CallOpts$15): Promise<SessionListItem[]>;
+  }, opts?: CallOpts$16): Promise<SessionListItem[]>;
   /** `GET /v1/sessions/{id}` — detail with members, lease and presence. */
   get(sessionId: string, query?: {
     share?: string;
-  }, opts?: CallOpts$15): Promise<SessionDetail>;
+  }, opts?: CallOpts$16): Promise<SessionDetail>;
   /** `PATCH /v1/sessions/{id}` — rename / archive (owner). */
-  update(sessionId: string, body: SessionPatchRequest, opts?: CallOpts$15): Promise<Session>;
+  update(sessionId: string, body: SessionPatchRequest, opts?: CallOpts$16): Promise<Session>;
   /** `DELETE /v1/sessions/{id}` — irreversible (owner). */
-  delete(sessionId: string, opts?: CallOpts$15): Promise<Reply<'deleteSession'>>;
+  delete(sessionId: string, opts?: CallOpts$16): Promise<Reply<'deleteSession'>>;
   /**
    * `POST /v1/sessions/{id}/dispatch` — queue a `send` for one device and wake it over FCM.
    * `{ mode: 'open' }` hands the session off instead: the target just opens it (no user turn).
    */
-  dispatch(sessionId: string, body: SessionDispatchRequest, opts?: CallOpts$15): Promise<SessionDispatchResponse>;
+  dispatch(sessionId: string, body: SessionDispatchRequest, opts?: CallOpts$16): Promise<SessionDispatchResponse>;
   /**
    * `GET /v1/sessions/{id}/stream?after=` — live SSE of `event` / `control` /
    * `lease` / `presence` frames. `: ping` heartbeats are skipped. The server
@@ -36458,7 +36619,7 @@ export declare class Sessions {
   stream(sessionId: string, query?: {
     after?: number;
     share?: string;
-  }, opts?: CallOpts$15): AsyncGenerator<SessionStreamEvent, void, undefined>;
+  }, opts?: CallOpts$16): AsyncGenerator<SessionStreamEvent, void, undefined>;
 }
 //#endregion
 //#region src/resources/settings.d.ts
@@ -36470,11 +36631,11 @@ export type SettingsConflict = Schema<'SettingsConflict'>;
 export type SettingsPatch = {
   transcripts?: { -readonly [K in keyof TranscriptsSettings]?: TranscriptsSettings[K]; };
 };
-type CallOpts$14 = {
+type CallOpts$15 = {
   ext?: CodaiRequestExtensions;
   signal?: AbortSignal;
 };
-type UpdateOpts = CallOpts$14 & {
+type UpdateOpts = CallOpts$15 & {
   version?: number;
 };
 /** The `current` state of a 409 `version_conflict` thrown by `settings.update`, else null. */
@@ -36483,7 +36644,7 @@ export declare class Settings {
   private readonly http;
   constructor(http: HttpClient);
   /** `GET /v1/settings` — full settings with defaults; `version` 0 / `updatedAt` null until the first write. */
-  get(opts?: CallOpts$14): Promise<SettingsResponse>;
+  get(opts?: CallOpts$15): Promise<SettingsResponse>;
   /**
    * `PATCH /v1/settings` — deep-merge `partial` into the stored settings. With `opts.version` the write is
    * conditional (409 `version_conflict` on a mismatch). Unknown keys / invalid values throw a 400 `CodaiError`.
@@ -36491,6 +36652,28 @@ export declare class Settings {
   update(partial: SettingsPatch, opts?: UpdateOpts): Promise<SettingsResponse>;
 }
 //#endregion
+//#region src/resources/os-gate.d.ts
+export type PolicyResponse = Reply<'getPolicy'>;
+export type OsGateEvent = Schema<'OsGateEvent'>;
+export type OsGateCheckId = OsGateEvent['checks'][number];
+export type OsGateSurface = OsGateEvent['surface'];
+export type OsGateEventAccepted = Schema<'OsGateEventAccepted'>;
+type CallOpts$14 = {
+  ext?: CodaiRequestExtensions;
+  signal?: AbortSignal;
+};
+export declare class OsGate {
+  private readonly http;
+  constructor(http: HttpClient);
+  /** `GET /v1/policy` — `{ os_gate: { allow_override } }` folded over every org of the caller (strictest wins). */
+  policy(opts?: CallOpts$14): Promise<PolicyResponse>;
+  /**
+   * `POST /v1/os-gate/events` — record that the user granted or revoked an override of `checks` on `surface`.
+   * The body is strict: unknown keys, unknown check ids or an empty `checks` list throw a 400 `CodaiError`.
+   */
+  recordEvent(event: OsGateEvent, opts?: CallOpts$14): Promise<OsGateEventAccepted>;
+}
+//#endregion
 //#region src/resources/sfx.d.ts
 /** One sound (always `license: 'CC0-1.0'`). */
 export type SfxDto = Schema<'SfxDto'>;
@@ -37010,9 +37193,12 @@ export declare class Sandboxes {
   readonly files: SandboxFiles;
   constructor(http: HttpClient);
   /**
-   * `POST /v1/sandboxes` — start a sandbox (`ttl_seconds` 60–86400, default 3600; `egress` none by default).
-   * `backend: 'v2'` (closed canary) starts a long-lived pod with memory snapshots and accepts `template`
-   * `codai-base` | `brivio-acte` | `desktop`; its reply may carry `restored`.
+   * `POST /v1/sandboxes` — start a sandbox (`ttl_seconds` default 3600, max 86400 on v1 / 604800 on v2;
+   * `egress` none by default, or a `pypi`/`npm` preset / allowlist on both backends).
+   * `backend` defaults to `'v2'`: a long-lived pod with memory snapshots, Node 24 + npm, `template`
+   * `codai-base` | `brivio-acte` | `desktop`; its reply may carry `restored`. When `backend` is omitted and v2
+   * is unavailable for the key the gateway falls back to `'v1'` (check `backend` on the reply).
+   * Errors: 429 `sandbox_concurrency_limit` (3 per key, 5 running v2 per user), 503 `sandbox_capacity` (retry).
    */
   create(input?: SandboxCreateInput, opts?: CallOpts$6): Promise<Sandbox>;
   /** `GET /v1/sandboxes` — your sandboxes, newest first, optionally one `status`. */
@@ -37033,7 +37219,7 @@ export declare class Sandboxes {
   execStream(id: string, input: SandboxExecInput, opts?: IdemOpts): AsyncGenerator<SandboxExecEvent, void, undefined>;
   /** `GET /v1/sandboxes/{id}/artifacts` — collect `/workspace/out` (scanned, signed 1 h links). */
   artifacts(id: string, opts?: CallOpts$6): Promise<SandboxArtifactList>;
-  /** `POST /v1/sandboxes/{id}/snapshot` — store a compressed copy of the workspace. */
+  /** `POST /v1/sandboxes/{id}/snapshot` (v1 only; v2 answers 409 `not_supported_on_v2`) — store a compressed copy of the workspace. */
   snapshot(id: string, input?: SandboxSnapshotInput, opts?: CallOpts$6): Promise<SandboxSnapshot>;
   /**
    * `POST /v1/sandboxes/{id}/run_code` (v2) — run Python in the persistent kernel; globals survive between
@@ -37042,7 +37228,10 @@ export declare class Sandboxes {
   runCode(id: string, input: SandboxRunCodeInput, opts?: CallOpts$6): Promise<SandboxRunCodeResult>;
   /** `POST /v1/sandboxes/{id}/kernel/reset` (v2) — restart the kernel; globals are lost, files kept. */
   resetKernel(id: string, opts?: CallOpts$6): Promise<void>;
-  /** `POST /v1/sandboxes/{id}/pause` (v2) — memory snapshot, then stop the pod (status `paused`). */
+  /**
+   * `POST /v1/sandboxes/{id}/pause` (v2) — memory snapshot, then stop the pod (status `paused`).
+   * At most 10 paused v2 sandboxes per user (429 `sandbox_paused_limit`).
+   */
   pause(id: string, opts?: CallOpts$6): Promise<Sandbox>;
   /** `POST /v1/sandboxes/{id}/resume` (v2) — restore a paused sandbox; `restored: false` = cold start. */
   resume(id: string, opts?: CallOpts$6): Promise<SandboxResumed>;
@@ -37820,13 +38009,15 @@ export declare class Codai {
   readonly orgs: Orgs;
   readonly projects: Projects;
   readonly environments: Environments;
-  /** Agent sandboxes (beta) — isolated gVisor workspaces: `sandboxes.create/exec/execStream/files/artifacts/run`. */
+  /** Agent sandboxes (backend v2 by default) — isolated gVisor workspaces: `sandboxes.create/exec/execStream/files/artifacts/run`. */
   readonly sandboxes: Sandboxes;
   /** EXPERIMENTAL (HIDE, unaudited): verify signed agent outputs. Provenance only. */
   readonly verify: Verify;
   readonly account: Account;
   /** Account-level settings shared by every device (`settings.get()`, `settings.update(partial, { version })`). */
   readonly settings: Settings;
+  /** OS protection gate: `osGate.policy()` (org override policy) and `osGate.recordEvent(event)` (audit). */
+  readonly osGate: OsGate;
   /** READ-ONLY billing: plan, wallet, invoices, `watchBalance` (pay via the returned links, never via the SDK). */
   readonly billing: Billing;
   /** Referral stats and invitees; `redeem(code)` / `setConsent(bool)` go through `PATCH /v1/account`. */