windmill-components 1.665.1 → 1.677.1

package/package/gen/types.gen.d.ts

@@ -432,7 +432,7 @@ export type RawScript = {
     /**
      * Programming language for this script
      */
-    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb';
+    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb';
     /**
      * Optional path for saving this script
      */
@@ -682,12 +682,12 @@ export type AiAgent = {
          */
         output_schema?: InputTransform;
         /**
-         * Array of image references for vision-capable models.
+         * Array of file references (images or PDFs) for the AI agent.
          * Format: Array<{ bucket: string, key: string }> - S3 object references
-         * Example: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]
+         * Example: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]
          *
          */
-        user_images?: InputTransform;
+        user_attachments?: InputTransform;
         /**
          * Integer. Maximum number of tokens the AI will generate in its response.
          * Range: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.
@@ -1118,6 +1118,50 @@ export type VaultSettings = {
      */
     token?: string;
 };
+export type AzureKeyVaultSettings = {
+    /**
+     * Azure Key Vault URL (e.g., https://myvault.vault.azure.net)
+     */
+    vault_url: string;
+    /**
+     * Azure AD tenant ID
+     */
+    tenant_id: string;
+    /**
+     * Azure AD application (client) ID
+     */
+    client_id: string;
+    /**
+     * Azure AD client secret
+     */
+    client_secret?: string;
+    /**
+     * Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)
+     */
+    token?: string;
+};
+export type AwsSecretsManagerSettings = {
+    /**
+     * AWS region (e.g., us-east-1)
+     */
+    region: string;
+    /**
+     * AWS Access Key ID (optional, uses default credential chain if not provided)
+     */
+    access_key_id?: string;
+    /**
+     * AWS Secret Access Key (optional)
+     */
+    secret_access_key?: string;
+    /**
+     * Custom endpoint URL for testing (e.g., LocalStack)
+     */
+    endpoint_url?: string;
+    /**
+     * Prefix for secret names (e.g., windmill/)
+     */
+    prefix?: string;
+};
 export type SecretMigrationFailure = {
     /**
      * Workspace ID where the secret is located
@@ -1379,6 +1423,7 @@ export type Script = {
     modules?: {
         [key: string]: ScriptModule;
     } | null;
+    labels?: Array<(string)>;
 };
 export type NewScript = {
     path: string;
@@ -1434,6 +1479,7 @@ export type NewScript = {
     modules?: {
         [key: string]: ScriptModule;
     } | null;
+    labels?: Array<(string)>;
 };
 export type NewScriptWithDraft = NewScript & {
     draft?: NewScript;
@@ -1724,6 +1770,7 @@ export type User = {
     folders: Array<(string)>;
     folders_owners: Array<(string)>;
     added_via?: (UserSource) | null;
+    is_service_account?: boolean;
 };
 export type UserSource = {
     /**
@@ -1792,6 +1839,7 @@ export type ListableVariable = {
     is_linked?: boolean;
     is_refreshed?: boolean;
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type ContextualVariable = {
     name: string;
@@ -1828,6 +1876,7 @@ export type CreateVariable = {
      * The expiration date of the variable
      */
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type EditVariable = {
     /**
@@ -1846,6 +1895,7 @@ export type EditVariable = {
      * The new description of the variable
      */
     description?: string;
+    labels?: Array<(string)>;
 };
 export type AuditLog = {
     workspace_id: string;
@@ -1892,7 +1942,7 @@ export type MainArgSignature = {
     auto_kind: string | null;
     has_preprocessor: boolean | null;
 };
-export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb' | 'bunnative';
+export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb' | 'bunnative';
 /**
  * An additional module file associated with a script
  */
@@ -1971,6 +2021,7 @@ export type CreateResource = {
      * The resource_type associated with the resource
      */
     resource_type: string;
+    labels?: Array<(string)>;
 };
 export type EditResource = {
     /**
@@ -1986,6 +2037,7 @@ export type EditResource = {
      * The new resource_type to be associated with the resource
      */
     resource_type?: string;
+    labels?: Array<(string)>;
 };
 export type Resource = {
     workspace_id?: string;
@@ -1999,6 +2051,7 @@ export type Resource = {
     };
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ListableResource = {
     workspace_id?: string;
@@ -2017,6 +2070,7 @@ export type ListableResource = {
     account?: number;
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ResourceType = {
     workspace_id?: string;
@@ -2145,6 +2199,7 @@ export type Schedule = {
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
     dynamic_skip?: string | null;
+    labels?: Array<(string)>;
 };
 export type ScheduleWJobs = Schedule & {
     jobs?: Array<{
@@ -2248,6 +2303,7 @@ export type NewSchedule = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSchedule = {
     /**
@@ -2327,6 +2383,7 @@ export type EditSchedule = {
      * If true and user is admin/wm_deployers, preserve the provided permissioned_as instead of using the deploying user's identity
      */
     preserve_permissioned_as?: boolean | null;
+    labels?: Array<(string)>;
 };
 /**
  * job trigger kind (schedule, http, websocket...)
@@ -2375,6 +2432,7 @@ export type TriggerExtraProperty = {
      * Trigger mode (enabled/disabled)
      */
     mode: TriggerMode;
+    labels?: Array<(string)>;
 };
 export type AuthenticationMethod = 'none' | 'windmill' | 'api_key' | 'basic_http' | 'custom_script' | 'signature';
 export type RunnableKind = 'script' | 'flow';
@@ -2589,6 +2647,7 @@ export type NewHttpTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditHttpTrigger = {
     /**
@@ -2688,6 +2747,7 @@ export type EditHttpTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type TriggersCount = {
     primary_schedule?: {
@@ -2708,6 +2768,20 @@ export type TriggersCount = {
     nextcloud_count?: number;
     google_count?: number;
 };
+export type WebsocketHeartbeat = {
+    /**
+     * Interval in seconds between heartbeat messages
+     */
+    interval_secs: number;
+    /**
+     * Message to send as heartbeat. Use {{state}} as a placeholder for a value extracted from incoming messages (see state_field).
+     */
+    message: string;
+    /**
+     * Optional. Top-level JSON field to extract from incoming messages. The extracted value replaces {{state}} in the heartbeat message.
+     */
+    state_field?: string;
+};
 export type WebsocketTrigger = TriggerExtraProperty & {
     /**
      * The WebSocket URL to connect to (can be a static URL or computed by a runnable)
@@ -2732,6 +2806,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2748,6 +2826,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2786,6 +2868,10 @@ export type NewWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2802,6 +2888,10 @@ export type NewWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2822,6 +2912,7 @@ export type NewWebsocketTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditWebsocketTrigger = {
     /**
@@ -2847,6 +2938,10 @@ export type EditWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2863,6 +2958,10 @@ export type EditWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2883,6 +2982,7 @@ export type EditWebsocketTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type WebsocketTriggerInitialMessage = {
     raw_message: string;
@@ -3015,6 +3115,7 @@ export type NewMqttTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditMqttTrigger = {
     /**
@@ -3074,6 +3175,7 @@ export type EditMqttTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 /**
  * Delivery mode for messages. 'push' for HTTP push delivery where messages are sent to a webhook endpoint, 'pull' for polling where the trigger actively fetches messages.
@@ -3204,6 +3306,7 @@ export type GcpTriggerData = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type GetAllTopicSubscription = {
     topic_id: string;
@@ -3326,6 +3429,7 @@ export type NewSqsTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSqsTrigger = {
     /**
@@ -3377,6 +3481,7 @@ export type EditSqsTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Slot = {
     name?: string;
@@ -3492,6 +3597,7 @@ export type NewPostgresTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditPostgresTrigger = {
     /**
@@ -3543,6 +3649,7 @@ export type EditPostgresTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type KafkaTrigger = TriggerExtraProperty & {
     /**
@@ -3561,6 +3668,10 @@ export type KafkaTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset. 'latest' starts from new messages only, 'earliest' starts from the beginning.
      */
@@ -3623,6 +3734,10 @@ export type NewKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3652,6 +3767,7 @@ export type NewKafkaTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditKafkaTrigger = {
     /**
@@ -3670,6 +3786,10 @@ export type EditKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3710,6 +3830,7 @@ export type EditKafkaTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type NatsTrigger = TriggerExtraProperty & {
     /**
@@ -3811,6 +3932,7 @@ export type NewNatsTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditNatsTrigger = {
     /**
@@ -3865,6 +3987,7 @@ export type EditNatsTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EmailTrigger = TriggerExtraProperty & {
     local_part: string;
@@ -3891,6 +4014,7 @@ export type NewEmailTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditEmailTrigger = {
     path: string;
@@ -3909,6 +4033,7 @@ export type EditEmailTrigger = {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
     preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Group = {
     name: string;
@@ -4061,6 +4186,7 @@ export type FlowMetadata = {
     timeout?: number;
     visible_to_runner_only?: boolean;
     on_behalf_of_email?: string;
+    labels?: Array<(string)>;
 };
 export type OpenFlowWPath = OpenFlow & {
     path: string;
@@ -4075,6 +4201,7 @@ export type OpenFlowWPath = OpenFlow & {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it.
      */
     preserve_on_behalf_of?: boolean;
+    labels?: Array<(string)>;
 };
 export type FlowPreview = {
     value: FlowValue;
@@ -4124,6 +4251,7 @@ export type ListableApp = {
     edited_at: string;
     execution_mode: 'viewer' | 'publisher' | 'anonymous';
     raw_app?: boolean;
+    labels?: Array<(string)>;
 };
 export type ScopeDefinition = {
     value: string;
@@ -4146,6 +4274,7 @@ export type ListableRawApp = {
     starred?: boolean;
     version: number;
     edited_at: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersion = {
     id: number;
@@ -4164,6 +4293,7 @@ export type AppWithLastVersion = {
     custom_path?: string;
     raw_app: boolean;
     bundle_secret?: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersionWDraft = AppWithLastVersion & {
     draft_only?: boolean;
@@ -5414,6 +5544,20 @@ export type DeclineInviteData = {
     };
 };
 export type DeclineInviteResponse = string;
+export type ImpersonateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type ImpersonateServiceAccountResponse = string;
+export type ExitImpersonationData = {
+    requestBody: {
+        token: string;
+    };
+    workspace: string;
+};
+export type ExitImpersonationResponse = string;
 export type WhoisData = {
     username: string;
     workspace: string;
@@ -5649,6 +5793,13 @@ export type AddUserData = {
     workspace: string;
 };
 export type AddUserResponse = string;
+export type CreateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type CreateServiceAccountResponse = string;
 export type DeleteInviteData = {
     /**
      * WorkspaceInvite
@@ -5820,6 +5971,14 @@ export type GetDependentsData = {
     workspace: string;
 };
 export type GetDependentsResponse = Array<DependencyDependent>;
+export type GetImportsData = {
+    /**
+     * The script path to get imports for
+     */
+    importerPath: string;
+    workspace: string;
+};
+export type GetImportsResponse = Array<(string)>;
 export type GetDependentsAmountsData = {
     /**
      * List of imported paths to get dependents counts for
@@ -6392,7 +6551,44 @@ export type TestObjectStorageConfigData = {
     };
 };
 export type TestObjectStorageConfigResponse = string;
+export type GetObjectStorageUsageResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    current_prefix?: string | null;
+    scanned_objects: number;
+    folders: Array<{
+        prefix: string;
+        size: number;
+        partial?: boolean;
+    }>;
+    error?: string | null;
+} | null;
+export type ComputeObjectStorageUsageResponse = string;
+export type RunLogCleanupResponse = string;
+export type GetLogCleanupStatusResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    phase: string;
+    total_service: number;
+    processed_service: number;
+    total_jobs: number;
+    processed_jobs: number;
+    s3_deleted: number;
+    orphans_scanned: number;
+    orphans_deleted: number;
+    errors: number;
+    last_error?: string | null;
+} | null;
 export type SendStatsResponse = string;
+export type RestartWorkerGroupData = {
+    /**
+     * the name of the worker group to restart
+     */
+    workerGroup: string;
+};
+export type RestartWorkerGroupResponse = string;
 export type GetStatsResponse = {
     signature?: string;
     data?: string;
@@ -6457,6 +6653,39 @@ export type MigrateSecretsToDatabaseData = {
     requestBody: VaultSettings;
 };
 export type MigrateSecretsToDatabaseResponse = SecretMigrationReport;
+export type TestAzureKvBackendData = {
+    /**
+     * Azure Key Vault settings to test
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type TestAzureKvBackendResponse = string;
+export type MigrateSecretsToAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration target
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsToAzureKvResponse = SecretMigrationReport;
+export type MigrateSecretsFromAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration source
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsFromAzureKvResponse = SecretMigrationReport;
+export type TestAwsSmBackendData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type TestAwsSmBackendResponse = string;
+export type MigrateSecretsToAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsToAwsSmResponse = SecretMigrationReport;
+export type MigrateSecretsFromAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsFromAwsSmResponse = SecretMigrationReport;
 export type GetSecondaryStorageNamesData = {
     /**
      * If true, include "_default_" in the list if primary workspace storage is set
@@ -6615,6 +6844,10 @@ export type ListVariableData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -6898,6 +7131,10 @@ export type ListResourceData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -7134,6 +7371,10 @@ export type ListFlowsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7365,6 +7606,10 @@ export type ListAppsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7416,6 +7661,7 @@ export type CreateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7437,6 +7683,7 @@ export type CreateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7539,6 +7786,7 @@ export type UpdateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7559,6 +7807,7 @@ export type UpdateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7763,6 +8012,10 @@ export type ListScriptsData = {
      *
      */
     kinds?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * Filter to only include scripts written in the given languages.
      * Accepts multiple values as a comma-separated list.
@@ -10234,11 +10487,21 @@ export type ListConversationMessagesData = {
     workspace: string;
 };
 export type ListConversationMessagesResponse = Array<FlowConversationMessage>;
+export type ListPathAutocompletePathsData = {
+    workspace: string;
+};
+export type ListPathAutocompletePathsResponse = {
+    paths: Array<(string)>;
+};
 export type ListRawAppsData = {
     /**
      * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -10381,6 +10644,10 @@ export type ListSchedulesData = {
      * filter schedules by whether they target a flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10491,6 +10758,10 @@ export type GetHttpTriggerData = {
 export type GetHttpTriggerResponse = HttpTrigger;
 export type ListHttpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10562,6 +10833,10 @@ export type GetWebsocketTriggerData = {
 export type GetWebsocketTriggerResponse = WebsocketTrigger;
 export type ListWebsocketTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10635,6 +10910,10 @@ export type GetKafkaTriggerData = {
 export type GetKafkaTriggerResponse = KafkaTrigger;
 export type ListKafkaTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10726,6 +11005,10 @@ export type GetNatsTriggerData = {
 export type GetNatsTriggerResponse = NatsTrigger;
 export type ListNatsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10799,6 +11082,10 @@ export type GetSqsTriggerData = {
 export type GetSqsTriggerResponse = SqsTrigger;
 export type ListSqsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10948,6 +11235,10 @@ export type ListNativeTriggersData = {
      * filter by is_flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11054,6 +11345,10 @@ export type GetMqttTriggerData = {
 export type GetMqttTriggerResponse = MqttTrigger;
 export type ListMqttTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11127,6 +11422,10 @@ export type GetGcpTriggerData = {
 export type GetGcpTriggerResponse = GcpTrigger;
 export type ListGcpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11318,6 +11617,10 @@ export type GetPostgresTriggerData = {
 export type GetPostgresTriggerResponse = PostgresTrigger;
 export type ListPostgresTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11389,6 +11692,10 @@ export type GetEmailTriggerData = {
 export type GetEmailTriggerResponse = EmailTrigger;
 export type ListEmailTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11735,6 +12042,17 @@ export type ListAutoscalingEventsData = {
 export type ListAutoscalingEventsResponse = Array<AutoscalingEvent>;
 export type NativeKubernetesAutoscalingHealthcheckResponse = unknown;
 export type ListAvailablePythonVersionsResponse = Array<(string)>;
+export type ListAllWorkspaceDependenciesResponse = Array<{
+    workspace_id: string;
+    name?: string;
+    language: ScriptLang;
+}>;
+export type ListAllDedicatedWithDepsResponse = Array<{
+    workspace_id: string;
+    path: string;
+    language: ScriptLang;
+    workspace_dep_names: Array<(string)>;
+}>;
 export type CreateAgentTokenData = {
     /**
      * agent token
@@ -13273,6 +13591,38 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/users/impersonate_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * impersonation token
+                 */
+                201: string;
+            };
+        };
+    };
+    '/w/{workspace}/users/exit_impersonation': {
+        post: {
+            req: {
+                requestBody: {
+                    token: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * exited impersonation
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/users/whois/{username}': {
         get: {
             req: {
@@ -13797,6 +14147,22 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/create_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * service account created
+                 */
+                201: string;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/delete_invite': {
         post: {
             req: {
@@ -14155,6 +14521,23 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/get_imports/{importer_path}': {
+        get: {
+            req: {
+                /**
+                 * The script path to get imports for
+                 */
+                importerPath: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of imported script paths
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/get_dependents_amounts': {
         post: {
             req: {
@@ -15274,6 +15657,70 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/object_storage_usage': {
+        get: {
+            res: {
+                /**
+                 * current or last storage-usage computation state
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    current_prefix?: string | null;
+                    scanned_objects: number;
+                    folders: Array<{
+                        prefix: string;
+                        size: number;
+                        partial?: boolean;
+                    }>;
+                    error?: string | null;
+                } | null;
+            };
+        };
+        post: {
+            res: {
+                /**
+                 * computation started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/run_log_cleanup': {
+        post: {
+            res: {
+                /**
+                 * cleanup started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/log_cleanup_status': {
+        get: {
+            res: {
+                /**
+                 * current or last log cleanup status (null if never run)
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    phase: string;
+                    total_service: number;
+                    processed_service: number;
+                    total_jobs: number;
+                    processed_jobs: number;
+                    s3_deleted: number;
+                    orphans_scanned: number;
+                    orphans_deleted: number;
+                    errors: number;
+                    last_error?: string | null;
+                } | null;
+            };
+        };
+    };
     '/settings/send_stats': {
         post: {
             res: {
@@ -15284,6 +15731,22 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/restart_worker_group/{worker_group}': {
+        post: {
+            req: {
+                /**
+                 * the name of the worker group to restart
+                 */
+                workerGroup: string;
+            };
+            res: {
+                /**
+                 * restart signal sent
+                 */
+                200: string;
+            };
+        };
+    };
     '/settings/get_stats': {
         get: {
             res: {
@@ -15463,6 +15926,93 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/test_azure_kv_backend': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings to test
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * connection successful
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_azure_kv': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings for migration target
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/migrate_secrets_from_azure_kv': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings for migration source
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/test_aws_sm_backend': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * connection test result
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_aws_sm': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/migrate_secrets_from_aws_sm': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/get_secondary_storage_names': {
         get: {
             req: {
@@ -15767,6 +16317,10 @@ export type $OpenApiTs = {
                  * pattern match filter for description field (case-insensitive)
                  */
                 description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -16275,6 +16829,10 @@ export type $OpenApiTs = {
                  * pattern match filter for description field (case-insensitive)
                  */
                 description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -16709,6 +17267,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -17147,6 +17709,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -17207,6 +17773,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -17237,6 +17804,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17474,6 +18042,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -17503,6 +18072,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17815,6 +18385,10 @@ export type $OpenApiTs = {
                  *
                  */
                 kinds?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * Filter to only include scripts written in the given languages.
                  * Accepts multiple values as a comma-separated list.
@@ -21418,6 +21992,21 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/path_autocomplete/list_paths': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * deduplicated path list, sorted lexicographically
+                 */
+                200: {
+                    paths: Array<(string)>;
+                };
+            };
+        };
+    };
     '/w/{workspace}/raw_apps/list': {
         get: {
             req: {
@@ -21425,6 +22014,10 @@ export type $OpenApiTs = {
                  * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
                  */
                 createdBy?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -21657,6 +22250,10 @@ export type $OpenApiTs = {
                  * filter schedules by whether they target a flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21857,6 +22454,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22000,6 +22601,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22145,6 +22750,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22326,6 +22935,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22471,6 +23084,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22764,6 +23381,10 @@ export type $OpenApiTs = {
                  * filter by is_flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22978,6 +23599,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23123,6 +23748,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23521,6 +24150,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23664,6 +24297,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -24388,6 +25025,35 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/configs/list_all_workspace_dependencies': {
+        get: {
+            res: {
+                /**
+                 * a list of workspace dependency summaries
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    name?: string;
+                    language: ScriptLang;
+                }>;
+            };
+        };
+    };
+    '/configs/list_all_dedicated_with_deps': {
+        get: {
+            res: {
+                /**
+                 * a list of dedicated scripts with workspace dependencies
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    path: string;
+                    language: ScriptLang;
+                    workspace_dep_names: Array<(string)>;
+                }>;
+            };
+        };
+    };
     '/agent_workers/create_agent_token': {
         post: {
             req: {