windmill-components 1.677.0 → 1.677.1

package/package/gen/types.gen.d.ts

@@ -105,6 +105,35 @@ export type FlowValue = {
      * Sticky notes attached to the flow
      */
     notes?: Array<FlowNote>;
+    /**
+     * Semantic groups of modules for organizational purposes
+     */
+    groups?: Array<{
+        /**
+         * Display name for this group
+         */
+        summary?: string;
+        /**
+         * Markdown note shown below the group header
+         */
+        note?: string;
+        /**
+         * If true, this group is collapsed by default in the flow editor. UI hint only.
+         */
+        autocollapse?: boolean;
+        /**
+         * ID of the first flow module in this group (topological entry point)
+         */
+        start_id: string;
+        /**
+         * ID of the last flow module in this group (topological exit point)
+         */
+        end_id: string;
+        /**
+         * Color for the group in the flow editor
+         */
+        color?: string;
+    }>;
 };
 /**
  * Retry configuration for failed module executions
@@ -167,9 +196,9 @@ export type StopAfterIf = {
      */
     expr: string;
     /**
-     * Custom error message shown when stopping
+     * Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.
      */
-    error_message?: string;
+    error_message?: string | null;
 };
 /**
  * A single step in a flow. Can be a script, subflow, loop, or branch
@@ -287,6 +316,31 @@ export type FlowModule = {
      * Retry configuration if this step fails
      */
     retry?: Retry;
+    /**
+     * Debounce configuration for this step (EE only)
+     */
+    debouncing?: {
+        /**
+         * Delay in seconds to debounce this step's executions across flow runs
+         */
+        debounce_delay_s?: number;
+        /**
+         * Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>
+         */
+        debounce_key?: string;
+        /**
+         * Array-type arguments to accumulate across debounced executions
+         */
+        debounce_args_to_accumulate?: Array<(string)>;
+        /**
+         * Maximum total time in seconds before forced execution
+         */
+        max_total_debouncing_time?: number;
+        /**
+         * Maximum number of debounces before forced execution
+         */
+        max_total_debounces_amount?: number;
+    };
 };
 /**
  * Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs
@@ -378,7 +432,7 @@ export type RawScript = {
     /**
      * Programming language for this script
      */
-    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb';
+    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb';
     /**
      * Optional path for saving this script
      */
@@ -628,12 +682,12 @@ export type AiAgent = {
          */
         output_schema?: InputTransform;
         /**
-         * Array of image references for vision-capable models.
+         * Array of file references (images or PDFs) for the AI agent.
          * Format: Array<{ bucket: string, key: string }> - S3 object references
-         * Example: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]
+         * Example: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]
          *
          */
-        user_images?: InputTransform;
+        user_attachments?: InputTransform;
         /**
          * Integer. Maximum number of tokens the AI will generate in its response.
          * Range: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.
@@ -1064,6 +1118,50 @@ export type VaultSettings = {
      */
     token?: string;
 };
+export type AzureKeyVaultSettings = {
+    /**
+     * Azure Key Vault URL (e.g., https://myvault.vault.azure.net)
+     */
+    vault_url: string;
+    /**
+     * Azure AD tenant ID
+     */
+    tenant_id: string;
+    /**
+     * Azure AD application (client) ID
+     */
+    client_id: string;
+    /**
+     * Azure AD client secret
+     */
+    client_secret?: string;
+    /**
+     * Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)
+     */
+    token?: string;
+};
+export type AwsSecretsManagerSettings = {
+    /**
+     * AWS region (e.g., us-east-1)
+     */
+    region: string;
+    /**
+     * AWS Access Key ID (optional, uses default credential chain if not provided)
+     */
+    access_key_id?: string;
+    /**
+     * AWS Secret Access Key (optional)
+     */
+    secret_access_key?: string;
+    /**
+     * Custom endpoint URL for testing (e.g., LocalStack)
+     */
+    endpoint_url?: string;
+    /**
+     * Prefix for secret names (e.g., windmill/)
+     */
+    prefix?: string;
+};
 export type SecretMigrationFailure = {
     /**
      * Workspace ID where the secret is located
@@ -1231,6 +1329,15 @@ export type AIConfig = {
         [key: string]: (number);
     };
 };
+export type InstanceAIProviderSummary = {
+    provider: AIProvider;
+    models: Array<(string)>;
+};
+export type InstanceAISummary = {
+    providers: Array<InstanceAIProviderSummary>;
+    default_model?: AIProviderModel;
+    code_completion_model?: AIProviderModel;
+};
 export type Alert = {
     name: string;
     tags_to_monitor: Array<(string)>;
@@ -1306,10 +1413,17 @@ export type Script = {
     timeout?: number;
     delete_after_use?: boolean;
     visible_to_runner_only?: boolean;
-    no_main_func: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor: boolean;
     on_behalf_of_email?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
+    labels?: Array<(string)>;
 };
 export type NewScript = {
     path: string;
@@ -1345,7 +1459,7 @@ export type NewScript = {
     max_total_debouncing_time?: number;
     max_total_debounces_amount?: number;
     visible_to_runner_only?: boolean;
-    no_main_func?: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor?: boolean;
     on_behalf_of_email?: string;
@@ -1359,6 +1473,13 @@ export type NewScript = {
         access_type?: 'r' | 'w' | 'rw';
         alt_access_type?: 'r' | 'w' | 'rw';
     }>;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
+    labels?: Array<(string)>;
 };
 export type NewScriptWithDraft = NewScript & {
     draft?: NewScript;
@@ -1649,6 +1770,7 @@ export type User = {
     folders: Array<(string)>;
     folders_owners: Array<(string)>;
     added_via?: (UserSource) | null;
+    is_service_account?: boolean;
 };
 export type UserSource = {
     /**
@@ -1717,6 +1839,7 @@ export type ListableVariable = {
     is_linked?: boolean;
     is_refreshed?: boolean;
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type ContextualVariable = {
     name: string;
@@ -1753,6 +1876,7 @@ export type CreateVariable = {
      * The expiration date of the variable
      */
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type EditVariable = {
     /**
@@ -1771,6 +1895,7 @@ export type EditVariable = {
      * The new description of the variable
      */
     description?: string;
+    labels?: Array<(string)>;
 };
 export type AuditLog = {
     workspace_id: string;
@@ -1814,10 +1939,24 @@ export type MainArgSignature = {
         has_default?: boolean;
         default?: unknown;
     }>;
-    no_main_func: boolean | null;
+    auto_kind: string | null;
     has_preprocessor: boolean | null;
 };
-export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb' | 'bunnative';
+export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb' | 'bunnative';
+/**
+ * An additional module file associated with a script
+ */
+export type ScriptModule = {
+    /**
+     * The source code content of this module
+     */
+    content: string;
+    language: ScriptLang;
+    /**
+     * Lock file content for this module's dependencies
+     */
+    lock?: string | null;
+};
 export type Preview = {
     /**
      * The code to run
@@ -1838,6 +1977,12 @@ export type Preview = {
     dedicated_worker?: boolean;
     lock?: string;
     flow_path?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
 };
 export type PreviewInline = {
     /**
@@ -1876,6 +2021,7 @@ export type CreateResource = {
      * The resource_type associated with the resource
      */
     resource_type: string;
+    labels?: Array<(string)>;
 };
 export type EditResource = {
     /**
@@ -1891,6 +2037,7 @@ export type EditResource = {
      * The new resource_type to be associated with the resource
      */
     resource_type?: string;
+    labels?: Array<(string)>;
 };
 export type Resource = {
     workspace_id?: string;
@@ -1904,6 +2051,7 @@ export type Resource = {
     };
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ListableResource = {
     workspace_id?: string;
@@ -1922,6 +2070,7 @@ export type ListableResource = {
     account?: number;
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ResourceType = {
     workspace_id?: string;
@@ -1982,6 +2131,10 @@ export type Schedule = {
      * Email of the user who owns this schedule, used for permissioned_as
      */
     email: string;
+    /**
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup')
+     */
+    permissioned_as: string;
     /**
      * Last error message if the schedule failed to trigger
      */
@@ -2046,6 +2199,7 @@ export type Schedule = {
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
     dynamic_skip?: string | null;
+    labels?: Array<(string)>;
 };
 export type ScheduleWJobs = Schedule & {
     jobs?: Array<{
@@ -2142,13 +2296,14 @@ export type NewSchedule = {
      */
     dynamic_skip?: string | null;
     /**
-     * Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.
+     * The user or group this schedule runs as. Used during deployment to preserve the original schedule owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSchedule = {
     /**
@@ -2221,13 +2376,14 @@ export type EditSchedule = {
      */
     dynamic_skip?: string | null;
     /**
-     * Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup'). Only admins and wm_deployers can set this via preserve_permissioned_as.
      */
-    email?: string;
+    permissioned_as?: string | null;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * If true and user is admin/wm_deployers, preserve the provided permissioned_as instead of using the deploying user's identity
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean | null;
+    labels?: Array<(string)>;
 };
 /**
  * job trigger kind (schedule, http, websocket...)
@@ -2247,9 +2403,9 @@ export type TriggerExtraProperty = {
      */
     script_path: string;
     /**
-     * Email of the user who owns this trigger, used for permissioned_as
+     * The user or group this trigger runs as (permissioned_as)
      */
-    email: string;
+    permissioned_as: string;
     /**
      * Additional permissions for this trigger
      */
@@ -2276,6 +2432,7 @@ export type TriggerExtraProperty = {
      * Trigger mode (enabled/disabled)
      */
     mode: TriggerMode;
+    labels?: Array<(string)>;
 };
 export type AuthenticationMethod = 'none' | 'windmill' | 'api_key' | 'basic_http' | 'custom_script' | 'signature';
 export type RunnableKind = 'script' | 'flow';
@@ -2483,13 +2640,14 @@ export type NewHttpTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditHttpTrigger = {
     /**
@@ -2582,13 +2740,14 @@ export type EditHttpTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type TriggersCount = {
     primary_schedule?: {
@@ -2609,6 +2768,20 @@ export type TriggersCount = {
     nextcloud_count?: number;
     google_count?: number;
 };
+export type WebsocketHeartbeat = {
+    /**
+     * Interval in seconds between heartbeat messages
+     */
+    interval_secs: number;
+    /**
+     * Message to send as heartbeat. Use {{state}} as a placeholder for a value extracted from incoming messages (see state_field).
+     */
+    message: string;
+    /**
+     * Optional. Top-level JSON field to extract from incoming messages. The extracted value replaces {{state}} in the heartbeat message.
+     */
+    state_field?: string;
+};
 export type WebsocketTrigger = TriggerExtraProperty & {
     /**
      * The WebSocket URL to connect to (can be a static URL or computed by a runnable)
@@ -2633,6 +2806,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2649,6 +2826,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2687,6 +2868,10 @@ export type NewWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2703,6 +2888,10 @@ export type NewWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2716,13 +2905,14 @@ export type NewWebsocketTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditWebsocketTrigger = {
     /**
@@ -2748,6 +2938,10 @@ export type EditWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2764,6 +2958,10 @@ export type EditWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2777,13 +2975,14 @@ export type EditWebsocketTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type WebsocketTriggerInitialMessage = {
     raw_message: string;
@@ -2909,13 +3108,14 @@ export type NewMqttTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditMqttTrigger = {
     /**
@@ -2968,13 +3168,14 @@ export type EditMqttTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 /**
  * Delivery mode for messages. 'push' for HTTP push delivery where messages are sent to a webhook endpoint, 'pull' for polling where the trigger actively fetches messages.
@@ -3098,13 +3299,14 @@ export type GcpTriggerData = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type GetAllTopicSubscription = {
     topic_id: string;
@@ -3220,13 +3422,14 @@ export type NewSqsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSqsTrigger = {
     /**
@@ -3271,13 +3474,14 @@ export type EditSqsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Slot = {
     name?: string;
@@ -3386,13 +3590,14 @@ export type NewPostgresTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditPostgresTrigger = {
     /**
@@ -3437,13 +3642,14 @@ export type EditPostgresTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type KafkaTrigger = TriggerExtraProperty & {
     /**
@@ -3462,6 +3668,10 @@ export type KafkaTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset. 'latest' starts from new messages only, 'earliest' starts from the beginning.
      */
@@ -3524,6 +3734,10 @@ export type NewKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3546,13 +3760,14 @@ export type NewKafkaTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditKafkaTrigger = {
     /**
@@ -3571,6 +3786,10 @@ export type EditKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3604,13 +3823,14 @@ export type EditKafkaTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type NatsTrigger = TriggerExtraProperty & {
     /**
@@ -3705,13 +3925,14 @@ export type NewNatsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditNatsTrigger = {
     /**
@@ -3759,13 +3980,14 @@ export type EditNatsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EmailTrigger = TriggerExtraProperty & {
     local_part: string;
@@ -3785,13 +4007,14 @@ export type NewEmailTrigger = {
     retry?: Retry;
     mode?: TriggerMode;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditEmailTrigger = {
     path: string;
@@ -3803,13 +4026,14 @@ export type EditEmailTrigger = {
     error_handler_args?: ScriptArgs;
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Group = {
     name: string;
@@ -3823,11 +4047,13 @@ export type InstanceGroup = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: 'superadmin' | 'devops' | null;
 };
 export type InstanceGroupWithWorkspaces = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: 'superadmin' | 'devops' | null;
     workspaces?: Array<WorkspaceInfo>;
 };
 export type WorkspaceInfo = {
@@ -3934,6 +4160,8 @@ export type GlobalUserInfo = {
     username?: string;
     operator_only?: boolean;
     first_time_user: boolean;
+    role_source: 'manual' | 'instance_group';
+    disabled: boolean;
 };
 export type Flow = OpenFlow & FlowMetadata & {
     lock_error_logs?: string;
@@ -3958,6 +4186,7 @@ export type FlowMetadata = {
     timeout?: number;
     visible_to_runner_only?: boolean;
     on_behalf_of_email?: string;
+    labels?: Array<(string)>;
 };
 export type OpenFlowWPath = OpenFlow & {
     path: string;
@@ -3972,6 +4201,7 @@ export type OpenFlowWPath = OpenFlow & {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it.
      */
     preserve_on_behalf_of?: boolean;
+    labels?: Array<(string)>;
 };
 export type FlowPreview = {
     value: FlowValue;
@@ -4021,6 +4251,7 @@ export type ListableApp = {
     edited_at: string;
     execution_mode: 'viewer' | 'publisher' | 'anonymous';
     raw_app?: boolean;
+    labels?: Array<(string)>;
 };
 export type ScopeDefinition = {
     value: string;
@@ -4043,6 +4274,7 @@ export type ListableRawApp = {
     starred?: boolean;
     version: number;
     edited_at: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersion = {
     id: number;
@@ -4061,6 +4293,7 @@ export type AppWithLastVersion = {
     custom_path?: string;
     raw_app: boolean;
     bundle_secret?: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersionWDraft = AppWithLastVersion & {
     draft_only?: boolean;
@@ -4313,6 +4546,7 @@ export type ExportedInstanceGroup = {
     id?: string;
     scim_display_name?: string;
     external_id?: string;
+    instance_role?: 'superadmin' | 'devops' | null;
 };
 export type JobSearchHit = {
     dancer?: string;
@@ -4436,7 +4670,7 @@ export type WorkspaceItemDiff = {
     /**
      * Type of the item
      */
-    kind: 'script' | 'flow' | 'app' | 'resource' | 'variable' | 'resource_type';
+    kind: 'script' | 'flow' | 'app' | 'raw_app' | 'resource' | 'variable' | 'resource_type';
     /**
      * Path of the item in the workspace
      */
@@ -4634,6 +4868,11 @@ export type RuleBypasserGroups = Array<(string)>;
  * Users that can bypass this ruleset
  */
 export type RuleBypasserUsers = Array<(string)>;
+export type QuotaInfo = {
+    used: number;
+    limit: number;
+    prunable: number;
+};
 export type NativeServiceName = 'nextcloud' | 'google';
 /**
  * A native trigger stored in Windmill
@@ -4666,6 +4905,10 @@ export type NativeTrigger = {
      * Error message if the trigger is in an error state
      */
     error?: string | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
 };
 /**
  * Full trigger response containing both Windmill data and external service data
@@ -4698,6 +4941,10 @@ export type NativeTriggerWithExternal = {
      * Error message if the trigger is in an error state
      */
     error?: string | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
     /**
      * Configuration data from the external service
      */
@@ -4760,6 +5007,10 @@ export type NativeTriggerData = {
     service_config: {
         [key: string]: unknown;
     };
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
 };
 /**
  * Response returned when a native trigger is created
@@ -5186,6 +5437,7 @@ export type GlobalUserUpdateData = {
         is_super_admin?: boolean;
         is_devops?: boolean;
         name?: string;
+        disabled?: boolean;
     };
 };
 export type GlobalUserUpdateResponse = string;
@@ -5292,6 +5544,20 @@ export type DeclineInviteData = {
     };
 };
 export type DeclineInviteResponse = string;
+export type ImpersonateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type ImpersonateServiceAccountResponse = string;
+export type ExitImpersonationData = {
+    requestBody: {
+        token: string;
+    };
+    workspace: string;
+};
+export type ExitImpersonationResponse = string;
 export type WhoisData = {
     username: string;
     workspace: string;
@@ -5417,6 +5683,21 @@ export type ImportInstallationData = {
     workspace: string;
 };
 export type ImportInstallationResponse = unknown;
+export type GhesInstallationCallbackData = {
+    requestBody: {
+        /**
+         * The GitHub App installation ID from GHES
+         */
+        installation_id: number;
+    };
+    workspace: string;
+};
+export type GhesInstallationCallbackResponse = unknown;
+export type GetGhesConfigResponse = {
+    base_url: string;
+    app_slug: string;
+    client_id: string;
+};
 export type ListWorkspacesResponse = Array<Workspace>;
 export type IsDomainAllowedResponse = boolean;
 export type ListUserWorkspacesResponse = UserWorkspaceList;
@@ -5512,6 +5793,13 @@ export type AddUserData = {
     workspace: string;
 };
 export type AddUserResponse = string;
+export type CreateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type CreateServiceAccountResponse = string;
 export type DeleteInviteData = {
     /**
      * WorkspaceInvite
@@ -5683,6 +5971,14 @@ export type GetDependentsData = {
     workspace: string;
 };
 export type GetDependentsResponse = Array<DependencyDependent>;
+export type GetImportsData = {
+    /**
+     * The script path to get imports for
+     */
+    importerPath: string;
+    workspace: string;
+};
+export type GetImportsResponse = Array<(string)>;
 export type GetDependentsAmountsData = {
     /**
      * List of imported paths to get dependents counts for
@@ -5871,7 +6167,20 @@ export type EditCopilotConfigData = {
     requestBody: AIConfig;
     workspace: string;
 };
-export type EditCopilotConfigResponse = string;
+export type EditCopilotConfigResponse = {
+    effective_ai_config: AIConfig;
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+};
+export type GetCopilotSettingsStateData = {
+    workspace: string;
+};
+export type GetCopilotSettingsStateResponse = {
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+};
 export type GetCopilotInfoData = {
     workspace: string;
 };
@@ -5934,6 +6243,16 @@ export type EditDataTableConfigData = {
     workspace: string;
 };
 export type EditDataTableConfigResponse = unknown;
+export type GetGitSyncEnabledData = {
+    workspace: string;
+};
+export type GetGitSyncEnabledResponse = {
+    enabled?: boolean;
+    reason?: string | null;
+    max_repos?: number | null;
+    user_count?: number | null;
+    max_users?: number | null;
+};
 export type EditWorkspaceGitSyncConfigData = {
     /**
      * Workspace Git sync settings
@@ -6036,6 +6355,7 @@ export type GetWorkspaceDefaultAppData = {
 };
 export type GetWorkspaceDefaultAppResponse = {
     default_app_path?: string;
+    default_app_raw?: boolean;
 };
 export type GetWorkspaceUsageData = {
     workspace: string;
@@ -6101,6 +6421,35 @@ export type DeleteProtectionRuleData = {
     workspace: string;
 };
 export type DeleteProtectionRuleResponse = string;
+export type LogAiChatData = {
+    requestBody: {
+        session_id: string;
+        provider: string;
+        model: string;
+        mode: string;
+    };
+    workspace: string;
+};
+export type LogAiChatResponse = void;
+export type GetCloudQuotasData = {
+    workspace: string;
+};
+export type GetCloudQuotasResponse = {
+    scripts: QuotaInfo;
+    flows: QuotaInfo;
+    apps: QuotaInfo;
+    variables: QuotaInfo;
+    resources: QuotaInfo;
+};
+export type PruneVersionsData = {
+    requestBody: {
+        resource_type: 'scripts' | 'flows' | 'apps';
+    };
+    workspace: string;
+};
+export type PruneVersionsResponse = {
+    pruned: number;
+};
 export type RefreshCustomInstanceUserPwdResponse = {
     [key: string]: unknown;
 };
@@ -6202,8 +6551,48 @@ export type TestObjectStorageConfigData = {
     };
 };
 export type TestObjectStorageConfigResponse = string;
+export type GetObjectStorageUsageResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    current_prefix?: string | null;
+    scanned_objects: number;
+    folders: Array<{
+        prefix: string;
+        size: number;
+        partial?: boolean;
+    }>;
+    error?: string | null;
+} | null;
+export type ComputeObjectStorageUsageResponse = string;
+export type RunLogCleanupResponse = string;
+export type GetLogCleanupStatusResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    phase: string;
+    total_service: number;
+    processed_service: number;
+    total_jobs: number;
+    processed_jobs: number;
+    s3_deleted: number;
+    orphans_scanned: number;
+    orphans_deleted: number;
+    errors: number;
+    last_error?: string | null;
+} | null;
 export type SendStatsResponse = string;
-export type GetStatsResponse = string;
+export type RestartWorkerGroupData = {
+    /**
+     * the name of the worker group to restart
+     */
+    workerGroup: string;
+};
+export type RestartWorkerGroupResponse = string;
+export type GetStatsResponse = {
+    signature?: string;
+    data?: string;
+};
 export type GetLatestKeyRenewalAttemptResponse = {
     result: string;
     attempted_at: string;
@@ -6264,6 +6653,39 @@ export type MigrateSecretsToDatabaseData = {
     requestBody: VaultSettings;
 };
 export type MigrateSecretsToDatabaseResponse = SecretMigrationReport;
+export type TestAzureKvBackendData = {
+    /**
+     * Azure Key Vault settings to test
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type TestAzureKvBackendResponse = string;
+export type MigrateSecretsToAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration target
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsToAzureKvResponse = SecretMigrationReport;
+export type MigrateSecretsFromAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration source
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsFromAzureKvResponse = SecretMigrationReport;
+export type TestAwsSmBackendData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type TestAwsSmBackendResponse = string;
+export type MigrateSecretsToAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsToAwsSmResponse = SecretMigrationReport;
+export type MigrateSecretsFromAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsFromAwsSmResponse = SecretMigrationReport;
 export type GetSecondaryStorageNamesData = {
     /**
      * If true, include "_default_" in the list if primary workspace storage is set
@@ -6422,6 +6844,10 @@ export type ListVariableData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -6509,8 +6935,12 @@ export type CreateAccountData = {
          * MCP server URL for MCP OAuth token refresh
          */
         mcp_server_url?: string;
-    };
-    workspace: string;
+        /**
+         * OAuth scopes to use for token refresh. Overrides instance-level scopes.
+         */
+        scopes?: Array<(string)>;
+    };
+    workspace: string;
 };
 export type CreateAccountResponse = string;
 export type ConnectClientCredentialsData = {
@@ -6701,6 +7131,10 @@ export type ListResourceData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -6937,6 +7371,10 @@ export type ListFlowsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7168,6 +7606,10 @@ export type ListAppsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7219,6 +7661,7 @@ export type CreateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7240,6 +7683,7 @@ export type CreateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7342,6 +7786,7 @@ export type UpdateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7362,6 +7807,7 @@ export type UpdateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7566,6 +8012,10 @@ export type ListScriptsData = {
      *
      */
     kinds?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * Filter to only include scripts written in the given languages.
      * Accepts multiple values as a comma-separated list.
@@ -7743,6 +8193,14 @@ export type UpdateScriptHistoryData = {
     workspace: string;
 };
 export type UpdateScriptHistoryResponse = string;
+export type ListDedicatedWithDepsData = {
+    workspace: string;
+};
+export type ListDedicatedWithDepsResponse = Array<{
+    path: string;
+    language: 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'graphql' | 'nativets' | 'bun' | 'bunnative' | 'php' | 'rust' | 'ansible' | 'csharp' | 'oracledb' | 'duckdb' | 'java' | 'ruby';
+    workspace_dep_names: Array<(string)>;
+}>;
 export type RawScriptByPathData = {
     path: string;
     workspace: string;
@@ -7780,6 +8238,47 @@ export type GetScriptDeploymentStatusResponse = {
     lock_error_logs?: string;
     job_id?: string;
 };
+export type StoreRawScriptTempData = {
+    /**
+     * script content to store
+     */
+    requestBody: string;
+    workspace: string;
+};
+export type StoreRawScriptTempResponse = string;
+export type DiffRawScriptsWithDeployedData = {
+    /**
+     * scripts and workspace deps to diff against deployed versions
+     */
+    requestBody: {
+        /**
+         * map of script path to SHA256 content hash
+         */
+        scripts: {
+            [key: string]: (string);
+        };
+        /**
+         * workspace dependencies to diff
+         */
+        workspace_deps?: Array<{
+            /**
+             * CLI path (e.g. dependencies/package.json)
+             */
+            path: string;
+            language: ScriptLang;
+            /**
+             * named workspace dependency (null for default)
+             */
+            name?: string;
+            /**
+             * SHA256 content hash
+             */
+            hash: string;
+        }>;
+    };
+    workspace: string;
+};
+export type DiffRawScriptsWithDeployedResponse = Array<(string)>;
 export type CreateDraftData = {
     requestBody: {
         path: string;
@@ -9523,6 +10022,7 @@ export type GetJobUpdatesResponse = {
     workflow_as_code_status?: WorkflowStatus;
 };
 export type GetJobUpdatesSseData = {
+    fast?: boolean;
     getProgress?: boolean;
     id: string;
     logOffset?: number;
@@ -9680,6 +10180,65 @@ export type GetTeamsApprovalPayloadData = {
     workspace: string;
 };
 export type GetTeamsApprovalPayloadResponse = unknown;
+export type ResumeSuspendedData = {
+    jobId: string;
+    requestBody: {
+        /**
+         * payload to send to the resumed job
+         */
+        payload?: unknown;
+        /**
+         * approval token for unauthenticated access
+         */
+        approval_token?: string;
+        /**
+         * whether to approve (true) or cancel (false) the job
+         */
+        approved?: boolean;
+    };
+    workspace: string;
+};
+export type ResumeSuspendedResponse = string;
+export type GetApprovalInfoData = {
+    jobId: string;
+    /**
+     * approval token for unauthenticated access
+     */
+    token?: string;
+    workspace: string;
+};
+export type GetApprovalInfoResponse = {
+    flow_id: string;
+    /**
+     * form schema for the approval step
+     */
+    form_schema?: unknown;
+    /**
+     * description of the approval step
+     */
+    description?: unknown;
+    approval_conditions?: {
+        user_auth_required: boolean;
+        user_groups_required: Array<(string)>;
+        self_approval_disabled: boolean;
+    };
+    /**
+     * whether the current user/token holder can approve
+     */
+    can_approve: boolean;
+    /**
+     * whether user authentication is required to approve
+     */
+    user_auth_required: boolean;
+    /**
+     * whether to hide the cancel button in the UI
+     */
+    hide_cancel?: boolean;
+    approvers: Array<{
+        resume_id: number;
+        approver: string;
+    }>;
+};
 export type ResumeSuspendedJobGetData = {
     approver?: string;
     id: string;
@@ -9928,11 +10487,21 @@ export type ListConversationMessagesData = {
     workspace: string;
 };
 export type ListConversationMessagesResponse = Array<FlowConversationMessage>;
+export type ListPathAutocompletePathsData = {
+    workspace: string;
+};
+export type ListPathAutocompletePathsResponse = {
+    paths: Array<(string)>;
+};
 export type ListRawAppsData = {
     /**
      * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -10075,6 +10644,10 @@ export type ListSchedulesData = {
      * filter schedules by whether they target a flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10185,6 +10758,10 @@ export type GetHttpTriggerData = {
 export type GetHttpTriggerResponse = HttpTrigger;
 export type ListHttpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10256,6 +10833,10 @@ export type GetWebsocketTriggerData = {
 export type GetWebsocketTriggerResponse = WebsocketTrigger;
 export type ListWebsocketTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10329,6 +10910,10 @@ export type GetKafkaTriggerData = {
 export type GetKafkaTriggerResponse = KafkaTrigger;
 export type ListKafkaTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10420,6 +11005,10 @@ export type GetNatsTriggerData = {
 export type GetNatsTriggerResponse = NatsTrigger;
 export type ListNatsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10493,6 +11082,10 @@ export type GetSqsTriggerData = {
 export type GetSqsTriggerResponse = SqsTrigger;
 export type ListSqsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10642,6 +11235,10 @@ export type ListNativeTriggersData = {
      * filter by is_flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10748,6 +11345,10 @@ export type GetMqttTriggerData = {
 export type GetMqttTriggerResponse = MqttTrigger;
 export type ListMqttTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10821,6 +11422,10 @@ export type GetGcpTriggerData = {
 export type GetGcpTriggerResponse = GcpTrigger;
 export type ListGcpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11012,6 +11617,10 @@ export type GetPostgresTriggerData = {
 export type GetPostgresTriggerResponse = PostgresTrigger;
 export type ListPostgresTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11083,6 +11692,10 @@ export type GetEmailTriggerData = {
 export type GetEmailTriggerResponse = EmailTrigger;
 export type ListEmailTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11129,7 +11742,7 @@ export type ListInstanceGroupsWithWorkspacesResponse = Array<InstanceGroupWithWo
 export type GetInstanceGroupData = {
     name: string;
 };
-export type GetInstanceGroupResponse = InstanceGroup;
+export type GetInstanceGroupResponse = InstanceGroupWithWorkspaces;
 export type CreateInstanceGroupData = {
     /**
      * create instance group
@@ -11147,6 +11760,10 @@ export type UpdateInstanceGroupData = {
      */
     requestBody: {
         new_summary: string;
+        /**
+         * Instance-level role for group members. 'superadmin', 'devops', 'user' or empty to clear.
+         */
+        instance_role?: string | null;
     };
 };
 export type UpdateInstanceGroupResponse = string;
@@ -11425,6 +12042,17 @@ export type ListAutoscalingEventsData = {
 export type ListAutoscalingEventsResponse = Array<AutoscalingEvent>;
 export type NativeKubernetesAutoscalingHealthcheckResponse = unknown;
 export type ListAvailablePythonVersionsResponse = Array<(string)>;
+export type ListAllWorkspaceDependenciesResponse = Array<{
+    workspace_id: string;
+    name?: string;
+    language: ScriptLang;
+}>;
+export type ListAllDedicatedWithDepsResponse = Array<{
+    workspace_id: string;
+    path: string;
+    language: ScriptLang;
+    workspace_dep_names: Array<(string)>;
+}>;
 export type CreateAgentTokenData = {
     /**
      * agent token
@@ -12064,6 +12692,10 @@ export type CountSearchLogsIndexResponse = {
         [key: string]: unknown;
     };
 };
+export type GetIndexDiskStorageSizesResponse = {
+    job_index_disk_size_bytes?: number | null;
+    log_index_disk_size_bytes?: number | null;
+};
 export type ClearIndexData = {
     idxName: 'JobIndex' | 'ServiceLogIndex';
 };
@@ -12667,6 +13299,7 @@ export type $OpenApiTs = {
                     is_super_admin?: boolean;
                     is_devops?: boolean;
                     name?: string;
+                    disabled?: boolean;
                 };
             };
             res: {
@@ -12958,6 +13591,38 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/users/impersonate_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * impersonation token
+                 */
+                201: string;
+            };
+        };
+    };
+    '/w/{workspace}/users/exit_impersonation': {
+        post: {
+            req: {
+                requestBody: {
+                    token: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * exited impersonation
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/users/whois/{username}': {
         get: {
             req: {
@@ -13237,6 +13902,39 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/github_app/ghes_installation_callback': {
+        post: {
+            req: {
+                requestBody: {
+                    /**
+                     * The GitHub App installation ID from GHES
+                     */
+                    installation_id: number;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * GHES installation registered successfully
+                 */
+                200: unknown;
+            };
+        };
+    };
+    '/github_app/ghes_config': {
+        get: {
+            res: {
+                /**
+                 * GHES app configuration
+                 */
+                200: {
+                    base_url: string;
+                    app_slug: string;
+                    client_id: string;
+                };
+            };
+        };
+    };
     '/workspaces/list': {
         get: {
             res: {
@@ -13449,6 +14147,22 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/create_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * service account created
+                 */
+                201: string;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/delete_invite': {
         post: {
             req: {
@@ -13807,6 +14521,23 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/get_imports/{importer_path}': {
+        get: {
+            req: {
+                /**
+                 * The script path to get imports for
+                 */
+                importerPath: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of imported script paths
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/get_dependents_amounts': {
         post: {
             req: {
@@ -14141,7 +14872,29 @@ export type $OpenApiTs = {
                 /**
                  * status
                  */
-                200: string;
+                200: {
+                    effective_ai_config: AIConfig;
+                    has_instance_ai_config: boolean;
+                    uses_instance_ai_config: boolean;
+                    instance_ai_summary?: InstanceAISummary;
+                };
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/get_copilot_settings_state': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: {
+                    has_instance_ai_config: boolean;
+                    uses_instance_ai_config: boolean;
+                    instance_ai_summary?: InstanceAISummary;
+                };
             };
         };
     };
@@ -14288,6 +15041,25 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/git_sync_enabled': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * Git sync availability status
+                 */
+                200: {
+                    enabled?: boolean;
+                    reason?: string | null;
+                    max_repos?: number | null;
+                    user_count?: number | null;
+                    max_users?: number | null;
+                };
+            };
+        };
+    };
     '/w/{workspace}/workspaces/edit_git_sync_config': {
         post: {
             req: {
@@ -14482,6 +15254,7 @@ export type $OpenApiTs = {
                  */
                 200: {
                     default_app_path?: string;
+                    default_app_raw?: boolean;
                 };
             };
         };
@@ -14612,6 +15385,62 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/log_chat': {
+        post: {
+            req: {
+                requestBody: {
+                    session_id: string;
+                    provider: string;
+                    model: string;
+                    mode: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * logged
+                 */
+                204: void;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/cloud_quotas': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * cloud quota usage and limits
+                 */
+                200: {
+                    scripts: QuotaInfo;
+                    flows: QuotaInfo;
+                    apps: QuotaInfo;
+                    variables: QuotaInfo;
+                    resources: QuotaInfo;
+                };
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/prune_versions': {
+        post: {
+            req: {
+                requestBody: {
+                    resource_type: 'scripts' | 'flows' | 'apps';
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * number of pruned versions
+                 */
+                200: {
+                    pruned: number;
+                };
+            };
+        };
+    };
     '/settings/refresh_custom_instance_user_pwd': {
         post: {
             res: {
@@ -14828,6 +15657,70 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/object_storage_usage': {
+        get: {
+            res: {
+                /**
+                 * current or last storage-usage computation state
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    current_prefix?: string | null;
+                    scanned_objects: number;
+                    folders: Array<{
+                        prefix: string;
+                        size: number;
+                        partial?: boolean;
+                    }>;
+                    error?: string | null;
+                } | null;
+            };
+        };
+        post: {
+            res: {
+                /**
+                 * computation started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/run_log_cleanup': {
+        post: {
+            res: {
+                /**
+                 * cleanup started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/log_cleanup_status': {
+        get: {
+            res: {
+                /**
+                 * current or last log cleanup status (null if never run)
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    phase: string;
+                    total_service: number;
+                    processed_service: number;
+                    total_jobs: number;
+                    processed_jobs: number;
+                    s3_deleted: number;
+                    orphans_scanned: number;
+                    orphans_deleted: number;
+                    errors: number;
+                    last_error?: string | null;
+                } | null;
+            };
+        };
+    };
     '/settings/send_stats': {
         post: {
             res: {
@@ -14838,13 +15731,32 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/restart_worker_group/{worker_group}': {
+        post: {
+            req: {
+                /**
+                 * the name of the worker group to restart
+                 */
+                workerGroup: string;
+            };
+            res: {
+                /**
+                 * restart signal sent
+                 */
+                200: string;
+            };
+        };
+    };
     '/settings/get_stats': {
         get: {
             res: {
                 /**
-                 * base64-encoded encrypted telemetry blob
+                 * telemetry stats JSON with signature
                  */
-                200: string;
+                200: {
+                    signature?: string;
+                    data?: string;
+                };
             };
         };
     };
@@ -14925,70 +15837,160 @@ export type $OpenApiTs = {
         put: {
             req: {
                 /**
-                 * full instance configuration to apply
+                 * full instance configuration to apply
+                 */
+                requestBody: InstanceConfig;
+            };
+            res: {
+                /**
+                 * instance config updated
+                 */
+                200: string;
+            };
+        };
+    };
+    '/min_keep_alive_version': {
+        get: {
+            res: {
+                /**
+                 * minimum keep-alive versions for workers and agents
+                 */
+                200: {
+                    /**
+                     * minimum version for normal workers
+                     */
+                    worker: string;
+                    /**
+                     * minimum version for agent workers
+                     */
+                    agent: string;
+                };
+            };
+        };
+    };
+    '/.well-known/jwks.json': {
+        get: {
+            res: {
+                /**
+                 * JSON Web Key Set
+                 */
+                200: JwksResponse;
+            };
+        };
+    };
+    '/settings/test_secret_backend': {
+        post: {
+            req: {
+                /**
+                 * Vault settings to test
+                 */
+                requestBody: VaultSettings;
+            };
+            res: {
+                /**
+                 * connection successful
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_vault': {
+        post: {
+            req: {
+                /**
+                 * Vault settings for migration target
+                 */
+                requestBody: VaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_database': {
+        post: {
+            req: {
+                /**
+                 * Vault settings for migration source
+                 */
+                requestBody: VaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/test_azure_kv_backend': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings to test
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * connection successful
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_azure_kv': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings for migration target
                  */
-                requestBody: InstanceConfig;
+                requestBody: AzureKeyVaultSettings;
             };
             res: {
                 /**
-                 * instance config updated
+                 * migration report
                  */
-                200: string;
+                200: SecretMigrationReport;
             };
         };
     };
-    '/min_keep_alive_version': {
-        get: {
-            res: {
+    '/settings/migrate_secrets_from_azure_kv': {
+        post: {
+            req: {
                 /**
-                 * minimum keep-alive versions for workers and agents
+                 * Azure Key Vault settings for migration source
                  */
-                200: {
-                    /**
-                     * minimum version for normal workers
-                     */
-                    worker: string;
-                    /**
-                     * minimum version for agent workers
-                     */
-                    agent: string;
-                };
+                requestBody: AzureKeyVaultSettings;
             };
-        };
-    };
-    '/.well-known/jwks.json': {
-        get: {
             res: {
                 /**
-                 * JSON Web Key Set
+                 * migration report
                  */
-                200: JwksResponse;
+                200: SecretMigrationReport;
             };
         };
     };
-    '/settings/test_secret_backend': {
+    '/settings/test_aws_sm_backend': {
         post: {
             req: {
-                /**
-                 * Vault settings to test
-                 */
-                requestBody: VaultSettings;
+                requestBody: AwsSecretsManagerSettings;
             };
             res: {
                 /**
-                 * connection successful
+                 * connection test result
                  */
                 200: string;
             };
         };
     };
-    '/settings/migrate_secrets_to_vault': {
+    '/settings/migrate_secrets_to_aws_sm': {
         post: {
             req: {
-                /**
-                 * Vault settings for migration target
-                 */
-                requestBody: VaultSettings;
+                requestBody: AwsSecretsManagerSettings;
             };
             res: {
                 /**
@@ -14998,13 +16000,10 @@ export type $OpenApiTs = {
             };
         };
     };
-    '/settings/migrate_secrets_to_database': {
+    '/settings/migrate_secrets_from_aws_sm': {
         post: {
             req: {
-                /**
-                 * Vault settings for migration source
-                 */
-                requestBody: VaultSettings;
+                requestBody: AwsSecretsManagerSettings;
             };
             res: {
                 /**
@@ -15318,6 +16317,10 @@ export type $OpenApiTs = {
                  * pattern match filter for description field (case-insensitive)
                  */
                 description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -15450,6 +16453,10 @@ export type $OpenApiTs = {
                      * MCP server URL for MCP OAuth token refresh
                      */
                     mcp_server_url?: string;
+                    /**
+                     * OAuth scopes to use for token refresh. Overrides instance-level scopes.
+                     */
+                    scopes?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -15822,6 +16829,10 @@ export type $OpenApiTs = {
                  * pattern match filter for description field (case-insensitive)
                  */
                 description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -16256,6 +17267,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -16694,6 +17709,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -16754,6 +17773,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -16784,6 +17804,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17021,6 +18042,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -17050,6 +18072,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17362,6 +18385,10 @@ export type $OpenApiTs = {
                  *
                  */
                 kinds?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * Filter to only include scripts written in the given languages.
                  * Accepts multiple values as a comma-separated list.
@@ -17690,6 +18717,23 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/scripts/list_dedicated_with_deps': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of dedicated scripts with their workspace dependency names
+                 */
+                200: Array<{
+                    path: string;
+                    language: 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'graphql' | 'nativets' | 'bun' | 'bunnative' | 'php' | 'rust' | 'ansible' | 'csharp' | 'oracledb' | 'duckdb' | 'java' | 'ruby';
+                    workspace_dep_names: Array<(string)>;
+                }>;
+            };
+        };
+    };
     '/w/{workspace}/scripts/raw/p/{path}': {
         get: {
             req: {
@@ -17781,6 +18825,65 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/scripts/raw_temp/store': {
+        post: {
+            req: {
+                /**
+                 * script content to store
+                 */
+                requestBody: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * hash of stored content
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/scripts/raw_temp/diff': {
+        post: {
+            req: {
+                /**
+                 * scripts and workspace deps to diff against deployed versions
+                 */
+                requestBody: {
+                    /**
+                     * map of script path to SHA256 content hash
+                     */
+                    scripts: {
+                        [key: string]: (string);
+                    };
+                    /**
+                     * workspace dependencies to diff
+                     */
+                    workspace_deps?: Array<{
+                        /**
+                         * CLI path (e.g. dependencies/package.json)
+                         */
+                        path: string;
+                        language: ScriptLang;
+                        /**
+                         * named workspace dependency (null for default)
+                         */
+                        name?: string;
+                        /**
+                         * SHA256 content hash
+                         */
+                        hash: string;
+                    }>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of paths that differ from deployed versions
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
     '/w/{workspace}/drafts/create': {
         post: {
             req: {
@@ -20153,6 +21256,7 @@ export type $OpenApiTs = {
     '/w/{workspace}/jobs_u/getupdate_sse/{id}': {
         get: {
             req: {
+                fast?: boolean;
                 getProgress?: boolean;
                 id: string;
                 logOffset?: number;
@@ -20461,6 +21565,83 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/jobs_u/flow/resume_suspended/{job_id}': {
+        post: {
+            req: {
+                jobId: string;
+                requestBody: {
+                    /**
+                     * payload to send to the resumed job
+                     */
+                    payload?: unknown;
+                    /**
+                     * approval token for unauthenticated access
+                     */
+                    approval_token?: string;
+                    /**
+                     * whether to approve (true) or cancel (false) the job
+                     */
+                    approved?: boolean;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * job resumed
+                 */
+                201: string;
+            };
+        };
+    };
+    '/w/{workspace}/jobs_u/flow/approval_info/{job_id}': {
+        get: {
+            req: {
+                jobId: string;
+                /**
+                 * approval token for unauthenticated access
+                 */
+                token?: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * approval info
+                 */
+                200: {
+                    flow_id: string;
+                    /**
+                     * form schema for the approval step
+                     */
+                    form_schema?: unknown;
+                    /**
+                     * description of the approval step
+                     */
+                    description?: unknown;
+                    approval_conditions?: {
+                        user_auth_required: boolean;
+                        user_groups_required: Array<(string)>;
+                        self_approval_disabled: boolean;
+                    };
+                    /**
+                     * whether the current user/token holder can approve
+                     */
+                    can_approve: boolean;
+                    /**
+                     * whether user authentication is required to approve
+                     */
+                    user_auth_required: boolean;
+                    /**
+                     * whether to hide the cancel button in the UI
+                     */
+                    hide_cancel?: boolean;
+                    approvers: Array<{
+                        resume_id: number;
+                        approver: string;
+                    }>;
+                };
+            };
+        };
+    };
     '/w/{workspace}/jobs_u/resume/{id}/{resume_id}/{signature}': {
         get: {
             req: {
@@ -20811,6 +21992,21 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/path_autocomplete/list_paths': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * deduplicated path list, sorted lexicographically
+                 */
+                200: {
+                    paths: Array<(string)>;
+                };
+            };
+        };
+    };
     '/w/{workspace}/raw_apps/list': {
         get: {
             req: {
@@ -20818,6 +22014,10 @@ export type $OpenApiTs = {
                  * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
                  */
                 createdBy?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -21050,6 +22250,10 @@ export type $OpenApiTs = {
                  * filter schedules by whether they target a flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21250,6 +22454,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21393,6 +22601,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21538,6 +22750,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21719,6 +22935,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21864,6 +23084,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22157,6 +23381,10 @@ export type $OpenApiTs = {
                  * filter by is_flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22371,6 +23599,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22516,6 +23748,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22914,6 +24150,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23057,6 +24297,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23161,7 +24405,7 @@ export type $OpenApiTs = {
                 /**
                  * instance group
                  */
-                200: InstanceGroup;
+                200: InstanceGroupWithWorkspaces;
             };
         };
     };
@@ -23193,6 +24437,10 @@ export type $OpenApiTs = {
                  */
                 requestBody: {
                     new_summary: string;
+                    /**
+                     * Instance-level role for group members. 'superadmin', 'devops', 'user' or empty to clear.
+                     */
+                    instance_role?: string | null;
                 };
             };
             res: {
@@ -23777,6 +25025,35 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/configs/list_all_workspace_dependencies': {
+        get: {
+            res: {
+                /**
+                 * a list of workspace dependency summaries
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    name?: string;
+                    language: ScriptLang;
+                }>;
+            };
+        };
+    };
+    '/configs/list_all_dedicated_with_deps': {
+        get: {
+            res: {
+                /**
+                 * a list of dedicated scripts with workspace dependencies
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    path: string;
+                    language: ScriptLang;
+                    workspace_dep_names: Array<(string)>;
+                }>;
+            };
+        };
+    };
     '/agent_workers/create_agent_token': {
         post: {
             req: {
@@ -24918,6 +26195,19 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/srch/index/storage/disk': {
+        get: {
+            res: {
+                /**
+                 * disk storage sizes for each index
+                 */
+                200: {
+                    job_index_disk_size_bytes?: number | null;
+                    log_index_disk_size_bytes?: number | null;
+                };
+            };
+        };
+    };
     '/indexer/delete/{idx_name}': {
         delete: {
             req: {