pgbeam 0.4.10 → 0.4.12

package/dist/operations.mjs

@@ -1,4 +1,4 @@
-export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-dojer3ji.js';
+export { o as operationsByPath, a as operationsByTag } from './operations-map.gen-cr323vpc.js';
 
 /**
  * Generated by generate-sdk-ts-maps.ts from backend/openapi/bundles/public.yaml — do not edit manually.
@@ -14,7 +14,15 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "path": "/v1/account/export",
         "summary": "Export account data",
         "description": "Returns all personal data associated with the authenticated user in a structured JSON format. Supports GDPR data portability and CCPA right to know. Audit logs are limited to the most recent 1000 entries.",
-        "parameters": [],
+        "parameters": [
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
         "requestBodyType": "",
         "requestBodyRequired": false,
         "responseType": "{ audit_logs: ({ action: string; created_at: string; id: string; ip_address?: string; resource_id?: string; resource_type?: string })[]; consents: ({ accepted_at: string; document_type: string; document_version: string; id: string; ip_address?: string })[]; databases: ({ created_at: string; host: string; id: string; name: string; port: number; project_id: string; role: string; ssl_mode: string })[]; email_preferences: { marketing_emails?: boolean; usage_limit_alerts?: boolean }; exported_at: string; organizations: ({ created_at: string; id: string; name: string; role: string; slug: string })[]; projects: ({ created_at: string; description: string; id: string; name: string; org_id: string; status: string })[]; sessions: ({ created_at: string; expires_at: string; id: string; ip_address?: string; user_agent?: string })[]; user: { created_at: string; email: string; email_verified: boolean; id: string; image?: string; name: string; updated_at: string } }",
@@ -47,6 +55,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -101,6 +116,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique agent credential identifier (prefixed, e.g. agt_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -113,7 +135,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "method": "PATCH",
         "path": "/v1/projects/{project_id}/agents/{agent_id}",
         "summary": "Enable or disable an agent credential",
-        "description": "Toggles the kill-switch. Disabling drops live connections within seconds.",
+        "description": "Toggles the kill-switch between active and disabled. Disabling drops live connections within seconds. Revocation is terminal and cannot be undone here: a revoked credential answers 409, because revoking does not change its secrets, so putting it back to active would make the revoked password and MCP token work again. Issue a new credential instead.",
         "parameters": [
             {
                 "name": "project_id",
@@ -128,6 +150,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique agent credential identifier (prefixed, e.g. agt_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
         "requestBodyType": "{ status: \"active\" | \"disabled\" }",
@@ -257,6 +286,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -325,6 +361,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -455,6 +498,20 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "number",
                 "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -558,6 +615,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -592,6 +656,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -599,13 +670,41 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "{ anchor_status?: string; anchor_verified_from_seq?: number; anchor_verified_through_seq?: number; chain_end_seq?: number; chain_start_seq?: number; failure_reason?: string; first_broken_seq?: number; keyed_count: number; link_status?: string; link_verified_from_seq?: number; ok: boolean; unchained_count: number; verified_at: string; verified_count: number }",
         "responseStatus": "200"
     },
+    "executeBatch": {
+        "operationId": "executeBatch",
+        "method": "POST",
+        "path": "/v1/projects/{project_id}/batch",
+        "summary": "Apply many project operations in one request",
+        "description": "Applies up to 100 project-scoped operations in a single request, so an agent acting on many resources does not have to loop one call at a time. The loops this exists for are the ones the single-resource endpoints leave an operator running by hand: revoking or disabling every agent credential during an incident, triaging a burst of anomaly alerts, and importing the column descriptions for a whole schema.\n\nThe operation set is closed. A batch is not a tunnel for arbitrary requests; each kind it can perform is named in the contract, carries its own permission, and is authorized independently against the caller's scope before any of them runs, so a batch can never act outside the scope the caller already had. Every operation targets the project in the path, and an id belonging to another project is reported exactly as a nonexistent one is, so this cannot be used to probe for resources the caller cannot see.\n\n`mode` is required and decides what a failure means. `atomic` runs the whole batch in one transaction: the first runtime failure rolls it back, the response is 409, and every operation that did not itself fail is reported `not_applied`. `independent` applies each operation on its own and answers 200 with a per-operation status, so a caller can retry exactly the failures. Structural problems (an unknown operation kind, a missing field, a duplicate target) are all found before any work happens and are answered with a single 400.\n\nA batch costs the rate limiter one unit per operation, not one per HTTP request, so it is exactly as expensive as the loop it replaces and cannot be used to sidestep the quota. When the remaining quota cannot cover the whole batch the response is 429 and nothing runs, which is a better answer than a loop that discovers the same thing halfway through. A batch refused this way still costs the one unit any request costs, so an oversized batch is not a free way to probe the quota.",
+        "parameters": [
+            {
+                "name": "project_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            }
+        ],
+        "requestBodyType": "{ mode: \"atomic\" | \"independent\"; operations: ({ agent_id?: string; agent_status?: \"active\" | \"disabled\"; annotation?: { column_name?: string; description: string; schema_name?: string; table_name: string }; anomaly_id?: string; anomaly_status?: \"acknowledged\" | \"resolved\"; id: string; op: \"revoke_agent_credential\" | \"set_agent_credential_status\" | \"update_anomaly_alert\" | \"put_schema_annotation\" })[] }",
+        "requestBodyRequired": true,
+        "responseType": "{ applied: boolean; mode: \"atomic\" | \"independent\"; results: ({ error?: { code: \"invalid_input\" | \"not_found\" | \"conflict\" | \"internal\"; message: string }; id: string; op: string; status: \"succeeded\" | \"failed\" | \"not_applied\" })[]; summary: { failed: number; not_applied: number; requested: number; succeeded: number } }",
+        "responseStatus": "200"
+    },
     "listPlans": {
         "operationId": "listPlans",
         "method": "GET",
         "path": "/v1/plans",
         "summary": "List available plans",
         "description": "Returns all available plan tiers with their limits and pricing.",
-        "parameters": [],
+        "parameters": [
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
         "requestBodyType": "",
         "requestBodyRequired": false,
         "responseType": "{ plans: ({ annual_price?: number; description?: string; label: string; limits: { audit_retention_days: number; bytes_per_month: number; included_seats: number; max_agent_credentials: number; max_connections: number; max_databases: number; max_projects: number; max_query_shapes: number; queries_per_day: number; queries_per_second: number; sandbox_idle_seconds: number; sandbox_max_branches: number; sandbox_max_upstream_bytes: number; sandbox_ttl_seconds: number }; monthly_price: number; name: string; overage_text?: string; trial_days?: number })[] }",
@@ -624,6 +723,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique organization identifier."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -644,6 +750,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique organization identifier."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -725,6 +838,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -793,6 +913,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -861,6 +988,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -915,6 +1049,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -942,6 +1083,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
         "requestBodyType": "{ auto_read_routing?: boolean; cache_config?: { enabled: boolean; max_entries: number; swr_seconds: number; ttl_seconds: number }; host?: string; name?: string; password?: string; pool_config?: { max_active?: number; min_pool_size: number; pool_mode: \"session\" | \"transaction\" | \"statement\"; pool_size: number }; pool_region?: string; port?: number; query_timeout_ms?: number; role?: \"primary\" | \"replica\"; ssl_mode?: \"disable\" | \"allow\" | \"prefer\" | \"require\" | \"verify-ca\" | \"verify-full\"; username?: string }",
@@ -1050,6 +1198,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1057,6 +1212,50 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "{ error?: string; relations: ({ columns: ({ data_type: string; is_binary: boolean; name: string })[]; kind: \"table\" | \"view\" | \"materialized_view\" | \"other\"; name: string; schema: string })[]; scanned_columns: number; scanned_relations: number; truncated?: boolean }",
         "responseStatus": "200"
     },
+    "getDemo": {
+        "operationId": "getDemo",
+        "method": "GET",
+        "path": "/v1/demo",
+        "summary": "Describe the demo sandbox",
+        "description": "Returns everything an unauthenticated caller needs before asking for a demo credential: whether the demo is up, how much of the global ceiling is left, what each tier costs, the dataset schema with the treatment the demo policy applies to every column, and the walkthrough of statements that demonstrate each guardrail. Requires no account and no key.",
+        "parameters": [],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ available: boolean; dataset: { schema: string; tables: ({ columns: ({ name: string; treatment: \"visible\" | \"redacted\" | \"hashed\" | \"nulled\"; type: string })[]; description: string; name: string; reachable: boolean })[] }; live_sessions: number; max_live_sessions: number; max_sessions_per_hour_per_client: number; retry_after_seconds?: number; tiers: ({ max_rows: number; name: \"free\" | \"extended\"; price_usd_cents: number; purchasable: boolean; query_budget: number; resource?: string; ttl_seconds: number })[]; unavailable_reason?: string; upgrade: { description: string; docs_url: string; policy_endpoint: string; signup_url: string }; walkthrough: ({ expect: \"allow\" | \"masked\" | \"blocked\"; expect_columns?: ({ name: string; treatment: \"visible\" | \"redacted\" | \"hashed\" | \"nulled\"; type: string })[]; expect_rule?: string; sql: string; step: number; title: string; why: string })[] }",
+        "responseStatus": "200"
+    },
+    "createDemoCredential": {
+        "operationId": "createDemoCredential",
+        "method": "POST",
+        "path": "/v1/demo/credentials",
+        "summary": "Issue a demo credential",
+        "description": "Issues a scoped, read-only, short-lived PostgreSQL credential plus a hosted MCP token against PgBeam's own demo database, with no account and no key. The credential is governed by the same wire-protocol policy engine every customer credential runs through, so a SELECT of a PII column comes back masked, a statement naming the table left off the allowlist is blocked, and a write is refused, all with machine-readable reasons. The connection string and MCP token are shown once. The response also carries the policy document that governed the demo, so a caller who then opens an account can create the same policy on its own database verbatim.\nRefusals are distinct on purpose. 429 means this client has asked for too many credentials in the last hour and should wait. 503 with a Retry-After header means the global ceiling on concurrent demo credentials is full, so backing off individually will not help; the header says when the oldest session expires. 503 also covers a deployment with no demo database configured.",
+        "parameters": [],
+        "requestBodyType": "{ label?: string; payment_proof?: string; tier?: \"free\" | \"extended\" }",
+        "requestBodyRequired": false,
+        "responseType": "{ connection_string: string; dataset: { schema: string; tables: ({ columns: ({ name: string; treatment: \"visible\" | \"redacted\" | \"hashed\" | \"nulled\"; type: string })[]; description: string; name: string; reachable: boolean })[] }; expires_at: string; mcp_token: string; mcp_url: string; policy_template: { access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }; query_budget: number; session_id: string; tier: string; ttl_seconds: number; upgrade: { description: string; docs_url: string; policy_endpoint: string; signup_url: string }; walkthrough: ({ expect: \"allow\" | \"masked\" | \"blocked\"; expect_columns?: ({ name: string; treatment: \"visible\" | \"redacted\" | \"hashed\" | \"nulled\"; type: string })[]; expect_rule?: string; sql: string; step: number; title: string; why: string })[] }",
+        "responseStatus": "201"
+    },
+    "releaseDemoCredential": {
+        "operationId": "releaseDemoCredential",
+        "method": "POST",
+        "path": "/v1/demo/credentials/{session_id}/release",
+        "summary": "Release a demo credential",
+        "description": "Revokes a demo credential before its TTL runs out and returns its slot to the global ceiling. Callers that finish early should do this so the next evaluating agent is not turned away by a session nobody is using. The MCP token issued with the credential proves the caller holds it. Releasing an already-expired or already-released session succeeds with released=false.",
+        "parameters": [
+            {
+                "name": "session_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "The demo session to release, as returned when it was issued."
+            }
+        ],
+        "requestBodyType": "{ mcp_token: string }",
+        "requestBodyRequired": true,
+        "responseType": "{ live_sessions: number; released: boolean; session_id: string }",
+        "responseStatus": "200"
+    },
     "listCustomDomains": {
         "operationId": "listCustomDomains",
         "method": "GET",
@@ -1084,6 +1283,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1178,7 +1384,15 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "path": "/v1/health",
         "summary": "Health check",
         "description": "Returns the health status of the API server.",
-        "parameters": [],
+        "parameters": [
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
         "requestBodyType": "",
         "requestBodyRequired": false,
         "responseType": "{ image_sha: string; status: \"ok\" | \"degraded\"; timestamp?: string; version: string }",
@@ -1211,6 +1425,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1265,6 +1486,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique honeytoken identifier (prefixed, e.g. hnt_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1292,6 +1520,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique honeytoken identifier (prefixed, e.g. hnt_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
         "requestBodyType": "{ action: \"audit_only\" | \"kill\"; relation_name: string; schema_name?: string }",
@@ -1353,6 +1588,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "number",
                 "description": "Maximum number of top queries to return (1-100)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1360,6 +1602,196 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "{ cache: { hit_rate: number; total_hits: number; total_misses: number }; latency: { avg_ms: number; p99_ms: number }; queries: ({ avg_latency_ms: number; p99_latency_ms: number; query_hash: string; query_pattern: string; total_cache_hits: number; total_cache_misses: number; total_count: number })[] }",
         "responseStatus": "200"
     },
+    "listOrgMembers": {
+        "operationId": "listOrgMembers",
+        "method": "GET",
+        "path": "/v1/organizations/{org_id}/members",
+        "summary": "List organization members",
+        "description": "Lists the people who belong to the organization, and their roles.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ members: ({ created_at: string; email: string; id: string; image?: string; name: string; role: \"owner\" | \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\"; user_id: string })[]; next_page_token?: string }",
+        "responseStatus": "200"
+    },
+    "updateOrgMemberRole": {
+        "operationId": "updateOrgMemberRole",
+        "method": "PATCH",
+        "path": "/v1/organizations/{org_id}/members/{member_id}",
+        "summary": "Change a member's role",
+        "description": "Changes what a member is allowed to do. An organization must keep at least one owner, so the last owner cannot be demoted, and `owner` cannot be assigned here: ownership transfer is a separate, higher-privilege flow.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "member_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization membership identifier. Unlike the resources PgBeam mints itself, memberships carry no type prefix: the id is opaque and is assigned when the membership row is created. Read it from `listOrgMembers` rather than constructing it."
+            }
+        ],
+        "requestBodyType": "{ role: \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\" }",
+        "requestBodyRequired": true,
+        "responseType": "{ created_at: string; email: string; id: string; image?: string; name: string; role: \"owner\" | \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\"; user_id: string }",
+        "responseStatus": "200"
+    },
+    "removeOrgMember": {
+        "operationId": "removeOrgMember",
+        "method": "DELETE",
+        "path": "/v1/organizations/{org_id}/members/{member_id}",
+        "summary": "Remove a member",
+        "description": "Removes someone from the organization. An organization must keep at least one owner, so the last remaining owner cannot be removed and cannot be demoted either: transfer ownership first.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "member_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization membership identifier. Unlike the resources PgBeam mints itself, memberships carry no type prefix: the id is opaque and is assigned when the membership row is created. Read it from `listOrgMembers` rather than constructing it."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "",
+        "responseStatus": "204"
+    },
+    "listOrgInvitations": {
+        "operationId": "listOrgInvitations",
+        "method": "GET",
+        "path": "/v1/organizations/{org_id}/invitations",
+        "summary": "List invitations",
+        "description": "Lists invitations to join the organization and where each has got to.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "status",
+                "in": "query",
+                "required": false,
+                "type": "\"pending\" | \"accepted\" | \"rejected\" | \"canceled\"",
+                "description": "Filter to a single status. Omit to list every invitation."
+            },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ invitations: ({ created_at: string; email: string; expires_at: string; id: string; role: \"owner\" | \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\"; status: \"pending\" | \"accepted\" | \"rejected\" | \"canceled\" })[]; next_page_token?: string }",
+        "responseStatus": "200"
+    },
+    "createOrgInvitation": {
+        "operationId": "createOrgInvitation",
+        "method": "POST",
+        "path": "/v1/organizations/{org_id}/invitations",
+        "summary": "Invite someone to the organization",
+        "description": "Creates an invitation and emails it. Inviting an address that already has a pending invitation returns a conflict rather than a second invitation. `owner` cannot be invited: ownership transfer is a separate, higher-privilege flow.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            }
+        ],
+        "requestBodyType": "{ email: string; role?: \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\" }",
+        "requestBodyRequired": true,
+        "responseType": "{ created_at: string; email: string; expires_at: string; id: string; role: \"owner\" | \"admin\" | \"member\" | \"security_admin\" | \"billing_admin\" | \"auditor\" | \"policy-author\" | \"approver\"; status: \"pending\" | \"accepted\" | \"rejected\" | \"canceled\" }",
+        "responseStatus": "201"
+    },
+    "revokeOrgInvitation": {
+        "operationId": "revokeOrgInvitation",
+        "method": "DELETE",
+        "path": "/v1/organizations/{org_id}/invitations/{invitation_id}",
+        "summary": "Revoke an invitation",
+        "description": "Cancels a pending invitation so it can no longer be accepted.",
+        "parameters": [
+            {
+                "name": "org_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization identifier."
+            },
+            {
+                "name": "invitation_id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Unique organization invitation identifier. Opaque, with no type prefix. Invitations created through this API are 32 lowercase hex characters; invitations created in the dashboard carry an id of a different shape, so treat it as opaque and read it from `listOrgInvitations`."
+            }
+        ],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "",
+        "responseStatus": "204"
+    },
     "lintMigration": {
         "operationId": "lintMigration",
         "method": "POST",
@@ -1393,6 +1825,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique organization identifier."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1426,12 +1865,59 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "path": "/v1/organizations",
         "summary": "List organizations",
         "description": "Lists the organizations visible to the caller's credential. An organization-scoped API key (pbo_) returns exactly the organization it belongs to. A user credential (account-scoped API key or dashboard session token) returns the organizations the user is a member of, including the caller's role in each.",
-        "parameters": [],
+        "parameters": [
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
         "requestBodyType": "",
         "requestBodyRequired": false,
         "responseType": "{ organizations: ({ id: string; name: string; role?: string; slug: string })[] }",
         "responseStatus": "200"
     },
+    "listPaymentResources": {
+        "operationId": "listPaymentResources",
+        "method": "GET",
+        "path": "/v1/payments/resources",
+        "summary": "List priced resources",
+        "description": "Lists what an agent can buy over the Machine Payments Protocol, with the\nunit, the pack size, and the price of one pack. Discovery only: the\n`WWW-Authenticate: Payment` challenge returned by a priced operation is\nalways authoritative.\n\nThis endpoint takes no authentication so an agent can read the price\nbefore it holds a credential.\n",
+        "parameters": [],
+        "requestBodyType": "",
+        "requestBodyRequired": false,
+        "responseType": "{ resources: ({ amount_per_pack: number; currency: string; description?: string; id: string; max_packs: number; min_packs: number; operation_id?: string; title: string; unit: string; units_per_pack: number })[] }",
+        "responseStatus": "200"
+    },
+    "createBudgetTopup": {
+        "operationId": "createBudgetTopup",
+        "method": "POST",
+        "path": "/v1/payments/budget-topups",
+        "summary": "Buy query budget for an agent credential",
+        "description": "Buys additional queries for the agent credential this request is\nauthenticated as, using the Machine Payments Protocol (HTTP 402 with the\n`Payment` authentication scheme).\n\nAuthenticate with the credential's hosted MCP token (`pba_...`) as a\nbearer token. The credential identifies itself, so no human and no\ndashboard session is involved.\n\nWithout a payment credential the response is `402` carrying a complete\n`WWW-Authenticate: Payment` challenge. Fulfil it, then repeat the request\nwith the credential in the `Payment-Authorization` header (the challenge\nselects that field so the bearer token can stay in `Authorization`). On\nsuccess the queries are granted, streamed to the data planes, and the\nresponse carries a `Payment-Receipt` header.\n\nPurchased queries do not raise the credential's policy budget. They are a\nseparate pool the proxy spends only once the policy's hourly and daily\nwindows have refused a statement, and they expire.\n",
+        "parameters": [
+            {
+                "name": "Payment-Authorization",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "The MPP payment credential, `Payment <base64url>`, echoing the\nchallenge from the `402` and carrying the method-specific proof. For\nthe `stripe` method the payload is `{\"spt\": \"spt_...\"}`, a single-use\nShared Payment Token.\n"
+            },
+            {
+                "name": "Accept-Payment",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Payment method and intent preferences, for example `stripe/charge`.\nIgnored when it matches nothing this endpoint offers.\n"
+            }
+        ],
+        "requestBodyType": "{ packs?: number }",
+        "requestBodyRequired": false,
+        "responseType": "{ amount: number; credential_id: string; currency: string; expires_at: string; grant_id: string; payment_reference?: string; queries: number; receipt?: string }",
+        "responseStatus": "201"
+    },
     "listPolicyProfiles": {
         "operationId": "listPolicyProfiles",
         "method": "GET",
@@ -1459,6 +1945,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1513,6 +2006,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique policy profile identifier (prefixed, e.g. pol_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1540,6 +2040,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique policy profile identifier (prefixed, e.g. pol_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
         "requestBodyType": "{ access_mode?: \"read_only\" | \"read_write\"; approval_auto_max_rows?: number; approval_mode?: \"off\" | \"writes\" | \"ddl\" | \"all\"; approval_timeout_seconds?: number; budget_queries_per_day?: number; budget_queries_per_hour?: number; egress_bytes_per_day?: number; masking_rules?: ({ column: string; kind: \"redact\" | \"null\" | \"hash\"; table: string })[]; max_affected_rows?: number; max_rows?: number; migration_safety?: \"off\" | \"warn\" | \"block\"; name: string; row_filters?: ({ predicate: string; table: string })[]; statement_rules?: { allow?: string[]; deny?: string[] }; statement_timeout_ms?: number; table_allowlist?: string[]; table_denylist?: string[]; write_mode?: \"normal\" | \"rollback\" | \"sandbox\" }",
@@ -1648,6 +2155,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "\"name\" | \"created_at\" | \"active_connections\"",
                 "description": "Sort field for projects list."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1688,6 +2202,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1708,6 +2229,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique project identifier (prefixed, e.g. prj_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
         "requestBodyType": "{ agents_disabled?: boolean; allowed_cidrs?: ({ cidr: string; label?: string })[]; default_policy_profile_id?: string; description?: string; name?: string; residency?: \"any\" | \"us\" | \"eu\"; status?: \"active\" | \"suspended\" | \"deleted\"; tags?: string[] }",
@@ -1762,6 +2290,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Filter metrics by region code."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1775,7 +2310,15 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "path": "/v1/regions",
         "summary": "List available regions",
         "description": "Returns all active data plane regions.",
-        "parameters": [],
+        "parameters": [
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
+            }
+        ],
         "requestBodyType": "",
         "requestBodyRequired": false,
         "responseType": "{ regions: ({ available: boolean; continent?: string; country?: string; id: string; name: string; provider: \"aws\" | \"azure\" | \"gcp\"; status: \"active\" | \"draining\" | \"inactive\" })[] }",
@@ -1786,7 +2329,7 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "method": "GET",
         "path": "/v1/databases/{database_id}/replicas",
         "summary": "List replicas",
-        "description": "Lists all read replicas for a database.",
+        "description": "Lists a database's read replicas.",
         "parameters": [
             {
                 "name": "database_id",
@@ -1794,6 +2337,27 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique database identifier (prefixed, e.g. db_xxx)."
+            },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1882,6 +2446,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -1963,11 +2534,32 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique organization identifier."
+            },
+            {
+                "name": "page_size",
+                "in": "query",
+                "required": false,
+                "type": "number",
+                "description": "Maximum number of items to return (1-100, default 20)."
+            },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[] }",
+        "responseType": "{ enrollments: ({ created_at: string; created_by?: string; description?: string; expires_at?: string; id: string; last_seen_at?: string; org_id: string; region_label?: string; revoked_at?: string })[]; next_page_token?: string }",
         "responseStatus": "200"
     },
     "createSelfHostEnrollment": {
@@ -2093,17 +2685,31 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "type": "number",
                 "description": "Number of results per page (1-100, default 20)."
             },
+            {
+                "name": "page_token",
+                "in": "query",
+                "required": false,
+                "type": "string",
+                "description": "Opaque token for cursor-based pagination."
+            },
             {
                 "name": "page",
                 "in": "query",
                 "required": false,
                 "type": "number",
                 "description": "Page number (1-based, default 1)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; total: number }",
+        "responseType": "{ cases: ({ case_number: number; closed_at?: string; created_at: string; id: string; message_count?: number; org_id: string; severity: number; slack_channel_id?: string; slack_thread_ts?: string; status: \"open\" | \"closed\"; title: string; updated_at: string; user_id: string })[]; next_page_token?: string; total: number }",
         "responseStatus": "200"
     },
     "createSupportCase": {
@@ -2153,6 +2759,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique support case identifier (prefixed, e.g. sc_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -2233,6 +2846,18 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
         "responseType": "",
         "responseStatus": "200"
     },
+    "scanText": {
+        "operationId": "scanText",
+        "method": "POST",
+        "path": "/v1/scan/text",
+        "summary": "Scan untrusted text for prompt injection",
+        "description": "Inspects one piece of untrusted text for the techniques used to smuggle instructions into a model's context, and returns a verdict, a recommended action, and the evidence behind it.\n\nTwo detector families run. The structural layer reads codepoints and scripts: invisible-codepoint runs, Unicode Tag smuggling, unterminated bidirectional overrides, and mixed-script words. None of those has a legitimate reason to appear in ordinary text, so a structural finding is a fact worth acting on. The lexical layer is exact-phrase matching with Unicode normalization, which is worth what exact-phrase matching is worth: it is a reason to look, and a support ticket quoting an attack contains the attack. Neither layer is a semantic classifier, and this endpoint does not pretend to catch prose that is hostile only in its meaning. The measured confusion matrix and the list of evasions that are known to work are published at https://pgbeam.com/docs/prompt-scan.\n\nAuthentication is optional. Anonymous callers get a free daily allowance keyed on their source address; an API key moves the allowance onto the organization. Past the allowance the endpoint answers 402 with a payment challenge.\n\nThe submitted text is held in memory for the duration of the request and is never logged, stored, or used to train anything. An `Idempotency-Key` is refused on this operation rather than honoured, because honouring it would persist the response, and the response quotes the submitted text back. The operation has no side effects beyond metering, so a retry is safe without one.",
+        "parameters": [],
+        "requestBodyType": "{ include_evidence?: boolean; layers?: (\"structural\" | \"lexical\")[]; text: string }",
+        "requestBodyRequired": true,
+        "responseType": "{ action: \"allow\" | \"review\" | \"block\"; action_reason: string; advice: string; engine: string; findings: ({ confidence: \"low\" | \"medium\" | \"high\"; detail: string; evidence?: string; layer: \"structural\" | \"lexical\"; offset: number; technique: \"invisible_run\" | \"tag_smuggling\" | \"bidi_override\" | \"mixed_script\" | \"instruction_phrase\" | \"invalid_encoding\" | \"truncated\" })[]; has_structural: boolean; highest_confidence?: \"low\" | \"medium\" | \"high\"; quota: { free_limit: number; free_remaining: number; paid_remaining: number; resets_at: string }; scanned_bytes: number; truncated: boolean; verdict: \"clean\" | \"suspicious\" | \"unscannable\" }",
+        "responseStatus": "200"
+    },
     "getOrganizationUsage": {
         "operationId": "getOrganizationUsage",
         "method": "GET",
@@ -2260,6 +2885,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "End date (inclusive, YYYY-MM-DD)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -2294,6 +2926,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "End date (inclusive, YYYY-MM-DD)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -2328,6 +2967,13 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Return entries strictly older than this timestamp (cursor / upper bound)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
@@ -2362,11 +3008,18 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": false,
                 "type": "string",
                 "description": "Opaque token for cursor-based pagination."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ next_page_token?: string; webhooks: ({ created_at: string; description?: string; enabled: boolean; event_types?: string[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string })[] }",
+        "responseType": "{ next_page_token?: string; webhooks: ({ created_at: string; description?: string; enabled: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string })[] }",
         "responseStatus": "200"
     },
     "createWebhookEndpoint": {
@@ -2391,9 +3044,9 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "description": "Client-generated key that makes a retry of this request safe. The first request carrying a given key executes normally and its response (status, content type and body) is stored for 24 hours; a later request with the same key returns that stored response without running the operation again, so a retry after a lost or timed-out response cannot create a second resource.\n\nReusing a key with a different request body returns `409 Conflict`: a key is a promise about one specific request, so a changed body is a client bug rather than a retry. Keys are scoped to the calling organization (or to the user, for account-scoped tokens), so one tenant can never read another's stored response.\n\nA `5xx`, `408` or `429` is never stored, because those describe a request that produced no settled answer and the next attempt with the same key must run for real. A `4xx` is stored: it is the server's settled answer about this exact request.\n\nUse a fresh UUID per logical operation. The PgBeam SDKs generate one per call and reuse it across their own automatic retries."
             }
         ],
-        "requestBodyType": "{ description?: string; enabled?: boolean; event_types?: string[]; format?: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; secret?: string; url: string }",
+        "requestBodyType": "{ description?: string; enabled?: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format?: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; secret?: string; url: string }",
         "requestBodyRequired": true,
-        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: string[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
+        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
         "responseStatus": "201"
     },
     "getWebhookEndpoint": {
@@ -2416,11 +3069,18 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique webhook endpoint identifier (prefixed, e.g. whk_xxx)."
+            },
+            {
+                "name": "If-None-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the client already holds, taken from the `ETag` of an earlier response. When it still matches the current representation the server answers `304 Not Modified` with no body, so a poll that finds nothing changed costs a round trip rather than a transfer.\n\nA comma-separated list is accepted, and `*` matches any current representation."
             }
         ],
         "requestBodyType": "",
         "requestBodyRequired": false,
-        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: string[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
+        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
         "responseStatus": "200"
     },
     "updateWebhookEndpoint": {
@@ -2443,11 +3103,18 @@ export { o as operationsByPath, a as operationsByTag } from './operations-map.ge
                 "required": true,
                 "type": "string",
                 "description": "Unique webhook endpoint identifier (prefixed, e.g. whk_xxx)."
+            },
+            {
+                "name": "If-Match",
+                "in": "header",
+                "required": false,
+                "type": "string",
+                "description": "Entity tag the write is based on, taken from the `ETag` of the read that produced the values being sent. The write proceeds only if it still matches the current representation; otherwise it is refused with `412 Precondition Failed` and nothing is changed.\n\nThis is what makes a read-modify-write safe. Without it the last writer wins and a concurrent edit is silently discarded, which is the failure an agent is most likely to cause and least likely to notice. The `412` response carries the current `ETag`, so a caller can re-read, re-apply its change and retry.\n\nOmitting the header keeps the old unconditional behaviour. `*` matches any current representation, which asserts only that the resource exists."
             }
         ],
-        "requestBodyType": "{ description?: string; enabled?: boolean; event_types?: string[]; format?: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; secret?: string; url: string }",
+        "requestBodyType": "{ description?: string; enabled?: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format?: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; secret?: string; url: string }",
         "requestBodyRequired": true,
-        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: string[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
+        "responseType": "{ created_at: string; description?: string; enabled: boolean; event_types?: (\"query_blocked\" | \"budget_exhausted\" | \"kill_switch\" | \"masked\" | \"migration_flagged\" | \"approval_requested\" | \"anomaly_alert\" | \"canary_tripped\" | \"audit_checkpoint\" | \"webhook.test\")[]; format: \"json\" | \"splunk_hec\" | \"datadog\" | \"elastic\"; id: string; project_id: string; updated_at: string; url: string }",
         "responseStatus": "200"
     },
     "deleteWebhookEndpoint": {