codai-sdk 0.65.0 → 0.67.0

package/dist/index.d.ts

@@ -2549,7 +2549,7 @@ type paths$1 = {
     };
     /**
      * List pending prompts
-     * @description Your prompts, soonest `not_before` first (prompts without one lead), then newest. `status=due` returns open prompts whose `not_before` is empty or already passed; `all` returns every status.
+     * @description Your prompts, soonest `not_before` first (prompts without one lead), then newest. `status=due` returns open prompts whose `not_before` is empty or already passed; `all` returns every status. Optional filters, combined with AND, are `tag`, `priority_min`, `q` and `templates` (templates are hidden by default); `sort` + `order` change the order.
      */
     readonly get: operations$1['listPrompts'];
     readonly put?: never;
@@ -2592,6 +2592,49 @@ type paths$1 = {
     readonly patch: operations$1['updatePrompt'];
     readonly trace?: never;
   };
+  readonly '/v1/prompts/{id}/events': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    /**
+     * Prompt history
+     * @description What happened to the prompt, newest first (at most 200 events): created, edited (with the changed keys),
+     *     status changes, launches, recurrences, chain steps and verifications.
+     */
+    readonly get: operations$1['listPromptEvents'];
+    readonly put?: never;
+    readonly post?: never;
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
+  readonly '/v1/prompts/{id}/instantiate': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Create a prompt from a template
+     * @description Creates a new `open` copy of the prompt (usually a template, `is_template: true`) with the same text, tags,
+     *     priority, recurrence, chain and launch preset; the copy is never a template and records the source in
+     *     `origin.template_id`. Works on any of your prompts.
+     */
+    readonly post: operations$1['instantiatePrompt'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/prompts/{id}/launch': {
     readonly parameters: {
       readonly query?: never;
@@ -2657,6 +2700,53 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/prompts/bulk': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Apply one action to many prompts
+     * @description Applies `action` to up to 200 of your prompts: `done` / `dismiss` close them (stamping `done_at`),
+     *     `delete` removes them, `snooze` sets `not_before` and re-arms the due reminder, `tag` / `untag` add or
+     *     remove `tags`, `priority` sets `priority`. Ids that are not yours are ignored. `done` also advances each
+     *     prompt's `next_prompt_id` chain. Every change is published on the prompt stream and logged in the history.
+     */
+    readonly post: operations$1['bulkPrompts'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
+  readonly '/v1/prompts/export': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    /**
+     * Export prompts as CSV or Markdown
+     * @description Downloads your prompts with the same filters as `GET /v1/prompts` (but `status` defaults to `all`, up to
+     *     5 000 rows). `format=csv` is RFC 4180 CSV (CRLF line breaks) with the columns `title, status, priority, tags,
+     *     source, repo, created_at, not_before, prompt` (tags space-separated); `format=md` is one Markdown section per
+     *     prompt with its metadata and the prompt text in a code fence. Sent as an attachment
+     *     (`prompts-YYYY-MM-DD.csv` / `.md`).
+     */
+    readonly get: operations$1['exportPrompts'];
+    readonly put?: never;
+    readonly post?: never;
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/prompts/stream': {
     readonly parameters: {
       readonly query?: never;
@@ -3725,6 +3815,8 @@ type paths$1 = {
      *     only knows the server id, opens the session. Set `e2e: true` when payloads are
      *     end-to-end encrypted client-side (`payload: { hide: base64 }`); the server never
      *     inspects payloads either way.
+     *     With `stub: true` the session is a title-only mirror (listed, but no events yet) until the executor
+     *     appends its first events; viewers ask for the transcript with a `hydrate` control.
      */
     readonly post: operations$1['createSession'];
     readonly delete?: never;
@@ -3795,6 +3887,7 @@ type paths$1 = {
      *     (`payload: { control: {...}, applied: false }`, `client_event_id: control:<id>`) and
      *     pushed to subscribers as a `control` frame, then answered `202`. This endpoint has
      *     no device target — use `POST …/dispatch` to aim a `send` at one device and wake it.
+     *     `send`, `hydrate`, `answer`, `approve` and `deny` are accepted only from the session owner.
      */
     readonly post: operations$1['submitSessionControl'];
     readonly delete?: never;
@@ -7199,6 +7292,26 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/vault/grants/revoke-task': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Revoke the grants of a task
+     * @description Revokes every live grant whose `task` matches (task id, client task id or session key sent as `task` on `/v1/vault/use`). The gateway also does this on task confirm, session delete and every 5 minutes for closed tasks.
+     */
+    readonly post: operations$1['revokeVaultTaskGrants'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/vault/http': {
     readonly parameters: {
       readonly query?: never;
@@ -7283,6 +7396,66 @@ type paths$1 = {
     readonly patch?: never;
     readonly trace?: never;
   };
+  readonly '/v1/vault/items/{id}/limits': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    /**
+     * Set per-handle limits
+     * @description Editor or above on the item's vault. Send all three keys; null removes a cap, all null removes the limits. Over a cap `/v1/vault/use`, `/v1/vault/http` and `/v1/vault/resolve` answer 429 `vault_rate_limited` with `Retry-After`.
+     */
+    readonly put: operations$1['setVaultItemLimits'];
+    readonly post?: never;
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
+  readonly '/v1/vault/limits': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    /**
+     * List per-handle limits
+     * @description Usage caps set on your items. Only allowed uses count; an `http` use costs 2 units, other modes 1.
+     */
+    readonly get: operations$1['listVaultLimits'];
+    readonly put?: never;
+    readonly post?: never;
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
+  readonly '/v1/vault/lock': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Panic lock
+     * @description Revokes every live grant, denies every pending approval and locks the vault: from then on every agent use is denied with reason `vault_locked` (`/v1/vault/http` and `/v1/vault/resolve` answer 403 `vault_denied`). Device keys stay enrolled. The body is optional; idempotent (a second call keeps the first lock time).
+     */
+    readonly post: operations$1['lockVault'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/vault/resolve': {
     readonly parameters: {
       readonly query?: never;
@@ -7361,12 +7534,52 @@ type paths$1 = {
     readonly options?: never;
     readonly head?: never;
     /**
-     * Change the default agent tier
-     * @description Default approval tier for items without a matching rule (t3 = explicit approval).
+     * Change the default tier and anomaly guards
+     * @description Send `default_tier` (approval tier for items without a matching rule; t3 = explicit approval), `guards` (partial anomaly settings, merged over the current ones) or both. A use on a new host, in a burst or outside the allowed hours is forced to t4 with reason `anomaly:new_host`, `anomaly:burst` or `anomaly:hour`. Answers the effective settings.
      */
     readonly patch: operations$1['patchVaultSettings'];
     readonly trace?: never;
   };
+  readonly '/v1/vault/unlock': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Unlock the vault
+     * @description Ends a panic or honeytoken lock with a device key (phone, desktop) or passkey proof over the unlock challenge. Watch keys are refused (`wear_t3_only`). Errors (403): `challenge_invalid`, `unknown_device`, `device_revoked`, `wear_t3_only`, `invalid_signature`, `passkey_invalid`.
+     */
+    readonly post: operations$1['unlockVault'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
+  readonly '/v1/vault/unlock/challenge': {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly get?: never;
+    readonly put?: never;
+    /**
+     * Get an unlock challenge
+     * @description Single-use challenge valid for 5 minutes. Sign `codai-vault/unlock/v1|<challenge>|<device_id>` with a device key, or use base64url(SHA-256(`codai-vault/unlock/v1|<challenge>|passkey`)) as the WebAuthn challenge.
+     */
+    readonly post: operations$1['createVaultUnlockChallenge'];
+    readonly delete?: never;
+    readonly options?: never;
+    readonly head?: never;
+    readonly patch?: never;
+    readonly trace?: never;
+  };
   readonly '/v1/vault/use': {
     readonly parameters: {
       readonly query?: never;
@@ -12952,6 +13165,10 @@ type components$1 = {
       readonly head_sha: string | null;
       /** Format: uuid */
       readonly id: string;
+      /** @description Template prompts are hidden from the default list and never notified or auto-run. */
+      readonly is_template: boolean;
+      /** @description Launch preset, or `null`. */
+      readonly launch: components$1['schemas']['PromptLaunchConfig'] | null;
       /** Format: date-time */
       readonly launched_at: string | null;
       /** @description Session id or key the prompt was sent in. */
@@ -12960,6 +13177,11 @@ type components$1 = {
       readonly match_score: number | null;
       /** @description Turn id of that chat turn. */
       readonly match_turn_id: string | null;
+      /**
+       * Format: uuid
+       * @description Prompt opened when this one becomes `done`.
+       */
+      readonly next_prompt_id: string | null;
       /**
        * Format: date-time
        * @description The prompt is due from this moment on.
@@ -12973,7 +13195,11 @@ type components$1 = {
       readonly origin: {
         readonly [key: string]: unknown;
       };
+      /** @description 0 none, 1 low, 2 normal, 3 high. */
+      readonly priority: number;
       readonly prompt: string;
+      /** @description Repeat rule, or `null`. */
+      readonly recurrence: components$1['schemas']['PromptRecurrence'] | null;
       readonly repo: string | null;
       /** @description Last verification report, or `null`. */
       readonly report: components$1['schemas']['PromptReport'] | null;
@@ -12991,6 +13217,8 @@ type components$1 = {
       readonly sent_at: string | null;
       readonly source: components$1['schemas']['PromptSource'];
       readonly status: components$1['schemas']['PromptStatus'];
+      /** @description Lowercased, deduplicated tags (max 20). */
+      readonly tags: readonly string[];
       /** Format: uuid */
       readonly target_device_id: string | null;
       /** @description Defaults to the first line of the prompt (max 120 chars). */
@@ -13004,6 +13232,17 @@ type components$1 = {
        */
       readonly verified_at: string | null;
     };
+    readonly PromptBulkRequest: {
+      /** @enum {string} */
+      readonly action: 'done' | 'dismiss' | 'delete' | 'snooze' | 'tag' | 'untag' | 'priority';
+      readonly ids: readonly string[];
+      /** @description Required for `snooze`: ISO datetime with offset, or `YYYY-MM-DD` (07:00 UTC). */
+      readonly not_before?: string;
+      /** @description Required for `priority`. */
+      readonly priority?: number;
+      /** @description Required (non-empty) for `tag` / `untag`. */
+      readonly tags?: readonly string[];
+    };
     readonly PromptCreate: {
       /**
        * @description Launch automatically when due.
@@ -13012,15 +13251,30 @@ type components$1 = {
       readonly auto_run?: boolean;
       /** @description Stable key of the goal; a new prompt supersedes older open ones with the same key. */
       readonly goal_key?: string;
+      /** @description A template is hidden from the default list, never notified or auto-run; use `POST /v1/prompts/{id}/instantiate`. */
+      readonly is_template?: boolean;
+      /** @description Launch preset, or `null`. */
+      readonly launch?: components$1['schemas']['PromptLaunchConfig'] | null;
+      /**
+       * Format: uuid
+       * @description One of your prompts to open when this one becomes `done` (a template is instantiated instead). Cannot be the prompt itself.
+       */
+      readonly next_prompt_id?: string | null;
       /** @description ISO datetime with offset, or `YYYY-MM-DD` (07:00 UTC). `null` = due immediately. */
       readonly not_before?: string | null;
       /** @description Free-form capture metadata (session, transcript, host). */
       readonly origin?: {
         readonly [key: string]: unknown;
       };
+      /** @description 0 none, 1 low, 2 normal, 3 high. */
+      readonly priority?: number;
       readonly prompt: string;
+      /** @description Repeat rule, or `null` for none. */
+      readonly recurrence?: components$1['schemas']['PromptRecurrence'] | null;
       readonly repo?: string;
       readonly source?: components$1['schemas']['PromptSource'];
+      /** @description Tags; trimmed, lowercased and deduplicated. */
+      readonly tags?: readonly string[];
       /** Format: uuid */
       readonly target_device_id?: string | null;
       readonly title?: string;
@@ -13032,17 +13286,66 @@ type components$1 = {
       /** @description Older open prompts with the same `goal_key` now `superseded`. */
       readonly superseded: number;
     };
+    /** @description One history entry of a prompt. */
+    readonly PromptEvent: {
+      /** Format: date-time */
+      readonly created_at: string;
+      /** @description Kind-specific details (e.g. `from` / `to` for status, `keys` for edits). */
+      readonly detail: {
+        readonly [key: string]: unknown;
+      };
+      /** @enum {string} */
+      readonly kind: 'created' | 'edited' | 'status' | 'launched' | 'recurred' | 'chained' | 'verified';
+    };
+    /** @description Preset used when the prompt is launched. */
+    readonly PromptLaunchConfig: {
+      /** @description Agent to run it with. */
+      readonly agent?: string;
+      /** @description Working folder. */
+      readonly folder?: string;
+      /** @description Model to use. */
+      readonly model?: string;
+    };
     readonly PromptPatch: {
       readonly auto_run?: boolean;
+      /** @description A template is hidden from the default list, never notified or auto-run; use `POST /v1/prompts/{id}/instantiate`. */
+      readonly is_template?: boolean;
+      /** @description Launch preset, or `null`. */
+      readonly launch?: components$1['schemas']['PromptLaunchConfig'] | null;
+      /**
+       * Format: uuid
+       * @description One of your prompts to open when this one becomes `done` (a template is instantiated instead). Cannot be the prompt itself.
+       */
+      readonly next_prompt_id?: string | null;
       /** @description ISO datetime with offset, or `YYYY-MM-DD` (07:00 UTC). `null` = due immediately. */
       readonly not_before?: string | null;
+      /** @description 0 none, 1 low, 2 normal, 3 high. */
+      readonly priority?: number;
       readonly prompt?: string;
+      /** @description Repeat rule, or `null` for none. */
+      readonly recurrence?: components$1['schemas']['PromptRecurrence'] | null;
       readonly status?: components$1['schemas']['PromptStatus'];
+      /** @description Tags; trimmed, lowercased and deduplicated. */
+      readonly tags?: readonly string[];
       /** Format: uuid */
       readonly target_device_id?: string | null;
       readonly title?: string;
       readonly tracker?: string | null;
     };
+    /**
+     * @description `{ every: day | week | month, at?: HH:MM }` (UTC): once the prompt left `open`, its next occurrence is created
+     *     as a new `open` prompt due at the next slot (months keep the day, clamped to the month end).
+     *     `{ on: session_end }`: the prompt is reopened when the session it ran in (or was captured from) ends a turn.
+     */
+    readonly PromptRecurrence: {
+      /** @description Time of day, HH:MM UTC. */
+      readonly at?: string;
+      /** @enum {string} */
+      readonly every: 'day' | 'week' | 'month';
+    } | {
+      /** @enum {string} */
+      readonly on: 'session_end';
+    };
     /** @description LLM verification report of a prompt. */
     readonly PromptReport: {
       /** Format: date-time */
@@ -13921,6 +14224,8 @@ type components$1 = {
        * @example desktop-2026-09-23-main
        */
       readonly session_key: string;
+      /** @description Title-only mirror without events yet; cleared by the first appended event batch. */
+      readonly stub: boolean;
       readonly title: string | null;
     };
     /** SessionControl */
@@ -13957,10 +14262,10 @@ type components$1 = {
       readonly seq: number | null;
     };
     /**
-     * @description Kind of control a non-executor can send to the executor.
+     * @description Kind of control a non-executor can send to the executor. `hydrate` asks the executor to upload the transcript of a stub session (session owner only, like `send`).
      * @enum {string}
      */
-    readonly SessionControlKind: 'send' | 'answer' | 'approve' | 'deny' | 'cancel' | 'steer' | 'inject' | 'pause' | 'resume';
+    readonly SessionControlKind: 'send' | 'answer' | 'approve' | 'deny' | 'cancel' | 'steer' | 'inject' | 'pause' | 'resume' | 'hydrate';
     readonly SessionControlRequest: {
       /** @description Id of the question being answered / approved / denied. */
       readonly ask_id?: string;
@@ -13985,6 +14290,11 @@ type components$1 = {
        * @example desktop-2026-09-23-main
        */
       readonly session_key?: string;
+      /**
+       * @description Create a title-only stub (no events yet); viewers request the transcript with a `hydrate` control.
+       * @default false
+       */
+      readonly stub?: boolean;
       readonly title?: string;
     };
     readonly SessionDetail: components$1['schemas']['Session'] & {
@@ -16760,6 +17070,17 @@ type components$1 = {
       readonly default_tier: 't1' | 't2' | 't3' | 't4';
       /** @description Public key fingerprint to compare between devices. */
       readonly fingerprint: string;
+      readonly guards?: components$1['schemas']['VaultGuards'];
+      /**
+       * @description Why the vault is locked.
+       * @enum {string|null}
+       */
+      readonly lock_reason?: 'panic' | 'honeytoken' | null;
+      /**
+       * Format: date-time
+       * @description When the vault was locked (panic or honeytoken); null when unlocked. While locked every agent use is denied with reason `vault_locked`.
+       */
+      readonly locked_at?: string | null;
       readonly revision: number;
     };
     /** @description Proven step-up for a decision. `device`: an enrolled device key signs `codai-vault/approve/v2|<approval_id>|<action_hash>|<decision>|<scope>|<device_id>`. `passkey`: a WebAuthn assertion whose challenge is base64url(SHA-256(the same message with device id `passkey`)). With `match_number` the message is v3: `codai-vault/approve/v3|<approval_id>|<action_hash>|<decision>|<scope>|<device_id>|<preview_digest>|<match_number>`, where `preview_digest` = base64url(SHA-256(the canonical text of `request.preview`)). */
@@ -16836,6 +17157,20 @@ type components$1 = {
       /** @enum {string} */
       readonly surface: 'phone' | 'wear' | 'desktop';
     };
+    readonly VaultGuards: {
+      /** @description Agent requests for one item within `burst_window_s` that count as a burst (`anomaly:burst`); 0 = off. */
+      readonly burst_max: number;
+      /** @description Burst window in seconds. */
+      readonly burst_window_s: number;
+      /** @description End of the allowed hours (exclusive) in `tz`; a use outside [hour_start, hour_end) is `anomaly:hour`. */
+      readonly hour_end: number | null;
+      /** @description Start of the allowed hours (inclusive) in `tz`; null together with `hour_end` turns the hours check off. */
+      readonly hour_start: number | null;
+      /** @description Flag a use on a host with no allowed use or grant for that item in the last 30 days (`anomaly:new_host`). */
+      readonly new_host: boolean;
+      /** @description IANA time zone for the hours check, e.g. `Europe/Bucharest`. */
+      readonly tz: string;
+    };
     readonly VaultItemEnvelope: {
       /** @description Public catalogue entry for agents (title, sensitivity, hosts, env var). Never secret values. */
       readonly agent_meta?: {
@@ -16856,6 +17191,35 @@ type components$1 = {
       /** @description Per-item key wrapped under the vault key (`v1.<nonce>.<ciphertext>`). */
       readonly wrapped_key: string;
     };
+    readonly VaultItemLimits: {
+      /** Format: uuid */
+      readonly item_id: string;
+      /** @description Allowed uses per 24 hours; null = no cap. */
+      readonly per_day: number | null;
+      /** @description Allowed uses per minute; null = no cap. */
+      readonly per_minute: number | null;
+      /** @description Units per 24 hours (an `http` use costs 2, other modes 1); null = no cap. */
+      readonly units_per_day: number | null;
+    };
+    readonly VaultLockResult: {
+      /** @description Pending approvals denied by this lock. */
+      readonly approvals_denied: number;
+      /** @description Live grants revoked by this lock. */
+      readonly grants_revoked: number;
+      /** Format: date-time */
+      readonly locked_at: string;
+    };
+    readonly VaultUnlockChallenge: {
+      /** @description 32 random bytes, base64url. Single use. */
+      readonly challenge: string;
+      /**
+       * Format: date-time
+       * @description 5 minutes after issue.
+       */
+      readonly expires_at: string;
+      /** @description `codai-vault/unlock/v1|<challenge>|<device_id or passkey>`: the UTF-8 message the proof covers. */
+      readonly message_template: string;
+    };
     readonly VaultUseDecision: {
       /** @description Hash of the exact request the approver signs. */
       readonly action_hash?: string;
@@ -16865,6 +17229,7 @@ type components$1 = {
       readonly cloud_usable?: boolean;
       /** @description Two digits to show the user with the approval request; they tap the same number on the approving device (number matching). Null when no approval is needed. */
       readonly match_number?: string | null;
+      /** @description Why this tier. Guard reasons: `vault_locked` (the vault is locked, tier `deny`), `anomaly:new_host`, `anomaly:burst`, `anomaly:hour` (tier forced to t4; grants not approved at t4 are ignored). */
       readonly reasons: readonly string[];
       /** @enum {string} */
       readonly tier: 't0' | 't1' | 't2' | 't3' | 't4' | 'deny';
@@ -22518,8 +22883,20 @@ interface operations$1 {
       readonly query?: {
         /** @description Maximum rows (1–200). */
         readonly limit?: number;
+        /** @description Sort direction. Default `desc`, except `asc` for `sort=not_before` (empty dates last). */
+        readonly order?: 'asc' | 'desc';
+        /** @description Only prompts with `priority` at least this value (0–3). */
+        readonly priority_min?: number;
+        /** @description Case-insensitive text search in the title, the prompt text and `origin.session_title`. */
+        readonly q?: string;
+        /** @description Sort key. Without it: soonest `not_before` first (prompts without one lead), then newest. */
+        readonly sort?: 'created' | 'updated' | 'priority' | 'not_before';
         /** @description Filter: a prompt status, `active` (open, launched, sent or answered), `due` or `all`. */
         readonly status?: 'open' | 'due' | 'all' | 'launched' | 'done' | 'dismissed' | 'superseded' | 'active' | 'sent' | 'answered' | 'verified';
+        /** @description Tag filter, repeatable or a comma list; every tag must be present (AND). Matched lowercased. */
+        readonly tag?: readonly string[];
+        /** @description `exclude` (default) hides templates, `only` returns just templates. */
+        readonly templates?: 'only' | 'exclude';
       };
       readonly header?: {
         /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
@@ -22678,6 +23055,66 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly listPromptEvents: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path: {
+        /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+        readonly id: string;
+      };
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description The history events. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly events: readonly components$1['schemas']['PromptEvent'][];
+          };
+        };
+      };
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 402: components$1['responses']['PaymentRequired'];
+      readonly 404: components$1['responses']['NotFound'];
+    };
+  };
+  readonly instantiatePrompt: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path: {
+        /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+        readonly id: string;
+      };
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description The new prompt. */
+      readonly 201: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['Prompt'];
+        };
+      };
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 402: components$1['responses']['PaymentRequired'];
+      readonly 404: components$1['responses']['NotFound'];
+    };
+  };
   readonly launchPrompt: {
     readonly parameters: {
       readonly query?: never;
@@ -22834,6 +23271,84 @@ interface operations$1 {
       };
     };
   };
+  readonly bulkPrompts: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody: {
+      readonly content: {
+        readonly 'application/json': components$1['schemas']['PromptBulkRequest'];
+      };
+    };
+    readonly responses: {
+      /** @description How many prompts were changed (or deleted). */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly updated: number;
+          };
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 402: components$1['responses']['PaymentRequired'];
+    };
+  };
+  readonly exportPrompts: {
+    readonly parameters: {
+      readonly query?: {
+        /** @description Output format. */
+        readonly format?: 'csv' | 'md';
+        /** @description Maximum rows (1–5000). */
+        readonly limit?: number;
+        /** @description Sort direction. Default `desc`, except `asc` for `sort=not_before` (empty dates last). */
+        readonly order?: 'asc' | 'desc';
+        /** @description Only prompts with `priority` at least this value (0–3). */
+        readonly priority_min?: number;
+        /** @description Case-insensitive text search in the title, the prompt text and `origin.session_title`. */
+        readonly q?: string;
+        /** @description Sort key. Without it: soonest `not_before` first (prompts without one lead), then newest. */
+        readonly sort?: 'created' | 'updated' | 'priority' | 'not_before';
+        /** @description Same values as for the list; default `all`. */
+        readonly status?: 'open' | 'due' | 'all' | 'launched' | 'done' | 'dismissed' | 'superseded' | 'active' | 'sent' | 'answered' | 'verified';
+        /** @description Tag filter, repeatable or a comma list; every tag must be present (AND). Matched lowercased. */
+        readonly tag?: readonly string[];
+        /** @description `exclude` (default) hides templates, `only` returns just templates. */
+        readonly templates?: 'only' | 'exclude';
+      };
+      readonly header?: {
+        /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+        readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+      };
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description The export file. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'text/csv': string;
+          readonly 'text/markdown': string;
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 402: components$1['responses']['PaymentRequired'];
+    };
+  };
   readonly streamPrompts: {
     readonly parameters: {
       readonly query?: never;
@@ -31925,6 +32440,36 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly revokeVaultTaskGrants: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody: {
+      readonly content: {
+        readonly 'application/json': {
+          readonly task: string;
+        };
+      };
+    };
+    readonly responses: {
+      /** @description OK. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly revoked: number;
+          };
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+    };
+  };
   readonly vaultHttp: {
     readonly parameters: {
       readonly query?: never;
@@ -31977,7 +32522,7 @@ interface operations$1 {
       };
       readonly 400: components$1['responses']['BadRequest'];
       readonly 401: components$1['responses']['Unauthorized'];
-      /** @description Denied by policy. */
+      /** @description Denied by policy (`vault_denied`; reasons include `vault_locked` while the vault is locked). */
       readonly 403: {
         headers: {
           readonly [name: string]: unknown;
@@ -31989,6 +32534,17 @@ interface operations$1 {
         };
       };
       readonly 404: components$1['responses']['NotFound'];
+      /** @description `vault_rate_limited`: a per-handle limit is reached (`PUT /v1/vault/items/{id}/limits`). Read `Retry-After` (60 s for the per-minute cap, 3600 s for the daily caps). */
+      readonly 429: {
+        headers: {
+          /** @description Seconds to wait before retrying. */
+          readonly 'Retry-After'?: number;
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['Error'];
+        };
+      };
     };
   };
   readonly listVaultItems: {
@@ -32136,6 +32692,96 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly setVaultItemLimits: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path: {
+        /** @description Resource id (uuid). */
+        readonly id: string;
+      };
+      readonly cookie?: never;
+    };
+    readonly requestBody: {
+      readonly content: {
+        readonly 'application/json': {
+          readonly per_day: number | null;
+          readonly per_minute: number | null;
+          readonly units_per_day: number | null;
+        };
+      };
+    };
+    readonly responses: {
+      /** @description OK; `limits` is null when removed. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly limits: components$1['schemas']['VaultItemLimits'];
+          };
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 404: components$1['responses']['NotFound'];
+    };
+  };
+  readonly listVaultLimits: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description OK. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly limits: readonly components$1['schemas']['VaultItemLimits'][];
+          };
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+    };
+  };
+  readonly lockVault: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: {
+      readonly content: {
+        readonly 'application/json': {
+          /** @enum {string} */
+          readonly via?: 'hub' | 'desktop' | 'phone' | 'wear' | 'extension';
+        };
+      };
+    };
+    readonly responses: {
+      /** @description Locked. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['VaultLockResult'];
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      readonly 404: components$1['responses']['NotFound'];
+    };
+  };
   readonly vaultResolve: {
     readonly parameters: {
       readonly query?: never;
@@ -32204,6 +32850,17 @@ interface operations$1 {
           };
         };
       };
+      /** @description `vault_rate_limited`: a per-handle limit is reached (`PUT /v1/vault/items/{id}/limits`). Read `Retry-After` (60 s for the per-minute cap, 3600 s for the daily caps). */
+      readonly 429: {
+        headers: {
+          /** @description Seconds to wait before retrying. */
+          readonly 'Retry-After'?: number;
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['Error'];
+        };
+      };
     };
   };
   readonly listVaultRules: {
@@ -32306,19 +32963,36 @@ interface operations$1 {
       readonly content: {
         readonly 'application/json': {
           /** @enum {string} */
-          readonly default_tier: 't1' | 't2' | 't3' | 't4';
+          readonly default_tier?: 't1' | 't2' | 't3' | 't4';
+          /** @description Any subset of `VaultGuards`; `hour_start` and `hour_end` are both null (off) or both set. */
+          readonly guards?: {
+            /** @description Agent requests for one item within `burst_window_s` that count as a burst (`anomaly:burst`); 0 = off. */
+            readonly burst_max?: number;
+            /** @description Burst window in seconds. */
+            readonly burst_window_s?: number;
+            /** @description End of the allowed hours (exclusive) in `tz`; a use outside [hour_start, hour_end) is `anomaly:hour`. */
+            readonly hour_end?: number | null;
+            /** @description Start of the allowed hours (inclusive) in `tz`; null together with `hour_end` turns the hours check off. */
+            readonly hour_start?: number | null;
+            /** @description Flag a use on a host with no allowed use or grant for that item in the last 30 days (`anomaly:new_host`). */
+            readonly new_host?: boolean;
+            /** @description IANA time zone for the hours check, e.g. `Europe/Bucharest`. */
+            readonly tz?: string;
+          };
         };
       };
     };
     readonly responses: {
-      /** @description OK. */
+      /** @description Effective settings. */
       readonly 200: {
         headers: {
           readonly [name: string]: unknown;
         };
         content: {
           readonly 'application/json': {
-            readonly [key: string]: unknown;
+            /** @enum {string} */
+            readonly default_tier: 't1' | 't2' | 't3' | 't4';
+            readonly guards: components$1['schemas']['VaultGuards'];
           };
         };
       };
@@ -32327,6 +33001,74 @@ interface operations$1 {
       readonly 404: components$1['responses']['NotFound'];
     };
   };
+  readonly unlockVault: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody: {
+      readonly content: {
+        readonly 'application/json': {
+          /** @description Challenge from `POST /v1/vault/unlock/challenge`. */
+          readonly challenge: string;
+          readonly proof: components$1['schemas']['VaultApprovalProof'];
+          /** @enum {string} */
+          readonly via?: 'hub' | 'desktop' | 'phone' | 'wear' | 'extension';
+        };
+      };
+    };
+    readonly responses: {
+      /** @description Unlocked. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly unlocked: boolean;
+          };
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+      /** @description `challenge_invalid`, `unknown_device`, `device_revoked`, `wear_t3_only`, `invalid_signature` or `passkey_invalid`. */
+      readonly 403: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': {
+            readonly [key: string]: unknown;
+          };
+        };
+      };
+      readonly 404: components$1['responses']['NotFound'];
+    };
+  };
+  readonly createVaultUnlockChallenge: {
+    readonly parameters: {
+      readonly query?: never;
+      readonly header?: never;
+      readonly path?: never;
+      readonly cookie?: never;
+    };
+    readonly requestBody?: never;
+    readonly responses: {
+      /** @description OK. */
+      readonly 200: {
+        headers: {
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['VaultUnlockChallenge'];
+        };
+      };
+      readonly 400: components$1['responses']['BadRequest'];
+      readonly 401: components$1['responses']['Unauthorized'];
+    };
+  };
   readonly vaultUse: {
     readonly parameters: {
       readonly query?: never;
@@ -32363,6 +33105,17 @@ interface operations$1 {
       readonly 400: components$1['responses']['BadRequest'];
       readonly 401: components$1['responses']['Unauthorized'];
       readonly 404: components$1['responses']['NotFound'];
+      /** @description `vault_rate_limited`: a per-handle limit is reached (`PUT /v1/vault/items/{id}/limits`). Read `Retry-After` (60 s for the per-minute cap, 3600 s for the daily caps). */
+      readonly 429: {
+        headers: {
+          /** @description Seconds to wait before retrying. */
+          readonly 'Retry-After'?: number;
+          readonly [name: string]: unknown;
+        };
+        content: {
+          readonly 'application/json': components$1['schemas']['Error'];
+        };
+      };
     };
   };
   readonly listVaults: {
@@ -34906,6 +35659,20 @@ export type VaultUseRequest = Mutable<Body<'vaultUse'>>;
 export type VaultHttpRequest = Mutable<Body<'vaultHttp'>>;
 export type VaultResolveRequest = Mutable<Body<'vaultResolve'>>;
 export type VaultTier = VaultAccount['default_tier'];
+/** Anomaly guards (V-32): new host, burst, allowed hours. An anomaly forces t4. */
+export type VaultGuards = Schema<'VaultGuards'>;
+export type VaultSettingsPatch = Mutable<Body<'patchVaultSettings'>>;
+export type VaultSettings = Reply<'patchVaultSettings'>;
+export type VaultLockResult = Schema<'VaultLockResult'>;
+export type VaultUnlockChallenge = Schema<'VaultUnlockChallenge'>;
+export type VaultUnlockRequest = Mutable<Body<'unlockVault'>>;
+/** Per-handle limits (V-21); an `http` use costs 2 units, other modes 1. */
+export type VaultItemLimits = Schema<'VaultItemLimits'>;
+export type VaultItemLimitsInput = Mutable<Body<'setVaultItemLimits'>>;
+/** Where a lock/unlock was triggered from. */
+export type VaultVia = 'hub' | 'desktop' | 'phone' | 'wear' | 'extension';
+/** The UTF-8 message an unlock proof covers: `codai-vault/unlock/v1|<challenge>|<device_id or "passkey">`. */
+export declare function vaultUnlockMessage(challenge: string, deviceIdOrPasskey: string): string;
 /** Loose JSON object answers (lists, acks) as documented in the OpenAPI spec. */
 export type VaultObject = Record<string, unknown>;
 type CallOpts$21 = {
@@ -34939,6 +35706,32 @@ export declare class Vault {
   putAccount(body: VaultAccountPut, opts?: CallOpts$21): Promise<VaultObject>;
   /** `PATCH /v1/vault/settings` — default approval tier for items without a matching rule. */
   setDefaultTier(defaultTier: VaultTier, opts?: CallOpts$21): Promise<VaultObject>;
+  /**
+   * `PATCH /v1/vault/settings` — `default_tier` and/or partial anomaly `guards` (merged over the current ones).
+   * Answers the effective `{ default_tier, guards }`.
+   */
+  updateSettings(body: VaultSettingsPatch, opts?: CallOpts$21): Promise<VaultSettings>;
+  /**
+   * `POST /v1/vault/lock` — panic: revoke every live grant, deny every pending approval, lock the vault (agent uses
+   * then answer `vault_locked`). Device keys stay enrolled. Idempotent.
+   */
+  lock(params?: {
+    via?: VaultVia;
+  }, opts?: CallOpts$21): Promise<VaultLockResult>;
+  /** `POST /v1/vault/unlock/challenge` — single-use unlock challenge, valid 5 minutes. */
+  unlockChallenge(opts?: CallOpts$21): Promise<VaultUnlockChallenge>;
+  /**
+   * `POST /v1/vault/unlock` — end a lock with a device-key proof over {@link vaultUnlockMessage} or a passkey whose
+   * challenge is base64url(SHA-256(that message with `passkey`)). 403 `challenge_invalid`, `wear_t3_only`, …
+   */
+  unlock(body: VaultUnlockRequest, opts?: CallOpts$21): Promise<Reply<'unlockVault'>>;
+  /** `GET /v1/vault/limits` — per-handle usage caps on your items. */
+  limits(opts?: CallOpts$21): Promise<VaultItemLimits[]>;
+  /**
+   * `PUT /v1/vault/items/{id}/limits` — all three keys required; `null` removes a cap, all `null` removes the limits
+   * (answers `null`). Over a cap the broker calls answer 429 `vault_rate_limited` with `Retry-After`.
+   */
+  setLimits(id: string, limits: VaultItemLimitsInput, opts?: CallOpts$21): Promise<VaultItemLimits | null>;
   /** `GET /v1/vault/vaults` — vaults you belong to, with your role and sealed vault key. */
   vaults(opts?: CallOpts$21): Promise<VaultObject>;
   /** `POST /v1/vault/vaults` — register a vault created client-side (HTTP 201). */
@@ -34961,6 +35754,8 @@ export declare class Vault {
   grants(opts?: CallOpts$21): Promise<VaultObject>;
   /** `DELETE /v1/vault/grants/{id}` — revoke a grant immediately. */
   revokeGrant(id: string, opts?: CallOpts$21): Promise<VaultObject>;
+  /** `POST /v1/vault/grants/revoke-task` — revoke every live grant of a task / session; answers `{ revoked }`. */
+  revokeTaskGrants(task: string, opts?: CallOpts$21): Promise<Reply<'revokeVaultTaskGrants'>>;
   /** `GET /v1/vault/events` — append-only audit log (never contains secret values). */
   events(params?: QueryOf<'listVaultEvents'>, opts?: CallOpts$21): Promise<VaultObject>;
   /** `GET /v1/vault/approvals` — agent requests waiting for your decision. */
@@ -36857,11 +37652,21 @@ export declare class Notifications {
 }
 //#endregion
 //#region src/resources/prompts.d.ts
+/** PR-07 recurrence: repeat every day/week/month (at HH:MM UTC), or reopen when the run session ends. */
+export type PromptRecurrence = Mutable<Schema<'PromptRecurrence'>>;
+/** PR-07 launch preset applied when the prompt is started. */
+export type PromptLaunchConfig = Mutable<Schema<'PromptLaunchConfig'>>;
 export type Prompt = Schema<'Prompt'>;
+/** PR-04 / PR-07 organise fields (present on every prompt row). */
+export type PromptOrganizeFields = Pick<Prompt, 'tags' | 'priority' | 'recurrence' | 'next_prompt_id' | 'launch' | 'is_template'>;
 export type PromptStatus = Schema<'PromptStatus'>;
 export type PromptSource = Schema<'PromptSource'>;
 export type PromptList = Reply<'listPrompts'>;
-export type PromptListQuery = Mutable<QueryOf<'listPrompts'>>;
+/** PR-04 list / export filters; `tag` also accepts one string (a single tag or a comma list). AND semantics. */
+export type PromptListFilters = Omit<Mutable<QueryOf<'listPrompts'>>, 'tag' | 'status' | 'limit'> & {
+  tag?: string | string[];
+};
+export type PromptListQuery = Omit<Mutable<QueryOf<'listPrompts'>>, 'tag'> & PromptListFilters;
 export type PromptCreateRequest = Mutable<Body<'createPrompt'>>;
 export type PromptCreated = Reply<'createPrompt'>;
 export type PromptPatch = Mutable<Body<'updatePrompt'>>;
@@ -36874,6 +37679,13 @@ export type PromptVerifyRequest = Mutable<Body<'verifyPrompt'>>;
 export type PromptVerified = Reply<'verifyPrompt'>;
 export type PromptVerifyManyRequest = Mutable<Body<'verifyPrompts'>>;
 export type PromptVerifyManyResult = Reply<'verifyPrompts'>;
+/** PR-05 `POST /v1/prompts/bulk`. */
+export type PromptBulkRequest = Mutable<Body<'bulkPrompts'>>;
+export type PromptBulkResult = Reply<'bulkPrompts'>;
+export type PromptHistoryEvent = Schema<'PromptEvent'>;
+export type PromptEventKind = PromptHistoryEvent['kind'];
+export type PromptEventList = Reply<'listPromptEvents'>;
+export type PromptExportQuery = Omit<Mutable<QueryOf<'exportPrompts'>>, 'tag'> & PromptListFilters;
 /** One `event: prompt` frame of `GET /v1/prompts/stream`. */
 export interface PromptStreamEvent {
   op: 'upsert' | 'delete';
@@ -36889,7 +37701,10 @@ type CallOpts$10 = {
 export declare class Prompts {
   private readonly http;
   constructor(http: HttpClient);
-  /** `GET /v1/prompts?status=&limit=` — default `open`; `due` = open and `not_before` empty or passed. */
+  /**
+   * `GET /v1/prompts?status=&limit=&tag=&priority_min=&q=&templates=&sort=&order=` — default `open`, templates
+   * excluded; `due` = open and `not_before` empty or passed; several tags = AND.
+   */
   list(query?: PromptListQuery, opts?: CallOpts$10): Promise<PromptList>;
   /** `POST /v1/prompts` — idempotent on the text (`created: false` for a duplicate); `goal_key` supersedes older open ones. */
   create(body: PromptCreateRequest, opts?: CallOpts$10): Promise<PromptCreated>;
@@ -36910,6 +37725,14 @@ export declare class Prompts {
   verify(id: string, body?: PromptVerifyRequest, opts?: CallOpts$10): Promise<PromptVerified>;
   /** `POST /v1/prompts/verify` — transcript-only verification of up to 20 prompts, sequentially. */
   verifyMany(body: PromptVerifyManyRequest, opts?: CallOpts$10): Promise<PromptVerifyManyResult>;
+  /** `POST /v1/prompts/bulk` — one action over up to 200 of your prompts → `{ updated }`. */
+  bulk(body: PromptBulkRequest, opts?: CallOpts$10): Promise<PromptBulkResult>;
+  /** `GET /v1/prompts/{id}/events` — history, newest first (max 200). */
+  events(id: string, opts?: CallOpts$10): Promise<PromptEventList>;
+  /** `POST /v1/prompts/{id}/instantiate` — open copy of a template (201). */
+  instantiate(id: string, opts?: CallOpts$10): Promise<Prompt>;
+  /** `GET /v1/prompts/export?format=csv|md` — list filters apply (status defaults to `all`); returns the document text. */
+  exportPrompts(query?: PromptExportQuery, opts?: CallOpts$10): Promise<string>;
   /** `GET /v1/prompts/stream` — live `prompt` events (keepalive comments are skipped). Closed by the server after 6 h. */
   stream(opts?: CallOpts$10): AsyncGenerator<PromptStreamEvent, void, undefined>;
 }