windmill-components 1.677.0 → 1.687.0

package/package/gen/schemas.gen.js

@@ -61,7 +61,7 @@ export const $FlowValue = {
             description: 'Time window in seconds for concurrent_limit'
         },
         debounce_delay_s: {
-            type: 'number',
+            type: 'integer',
             description: 'Delay in seconds to debounce flow executions'
         },
         debounce_key: {
@@ -76,11 +76,11 @@ export const $FlowValue = {
             }
         },
         max_total_debouncing_time: {
-            type: 'number',
+            type: 'integer',
             description: 'Maximum total time in seconds that a job can be debounced'
         },
         max_total_debounces_amount: {
-            type: 'number',
+            type: 'integer',
             description: 'Maximum number of times a job can be debounced'
         },
         skip_expr: {
@@ -94,6 +94,10 @@ export const $FlowValue = {
         cache_ignore_s3_path: {
             type: 'boolean'
         },
+        delete_after_secs: {
+            type: 'integer',
+            description: "If set, delete the flow job's args, result and logs after this many seconds following job completion"
+        },
         flow_env: {
             type: 'object',
             description: "Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).",
@@ -117,6 +121,42 @@ export const $FlowValue = {
             items: {
                 '$ref': '#/components/schemas/FlowNote'
             }
+        },
+        groups: {
+            type: 'array',
+            description: 'Semantic groups of modules for organizational purposes',
+            items: {
+                type: 'object',
+                description: 'A semantic group of flow modules for organizational purposes. Does not affect execution — modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.',
+                properties: {
+                    summary: {
+                        type: 'string',
+                        description: 'Display name for this group'
+                    },
+                    note: {
+                        type: 'string',
+                        description: 'Markdown note shown below the group header'
+                    },
+                    autocollapse: {
+                        type: 'boolean',
+                        default: false,
+                        description: 'If true, this group is collapsed by default in the flow editor. UI hint only.'
+                    },
+                    start_id: {
+                        type: 'string',
+                        description: 'ID of the first flow module in this group (topological entry point)'
+                    },
+                    end_id: {
+                        type: 'string',
+                        description: 'ID of the last flow module in this group (topological exit point)'
+                    },
+                    color: {
+                        type: 'string',
+                        description: 'Color for the group in the flow editor'
+                    }
+                },
+                required: ['start_id', 'end_id']
+            }
         }
     },
     required: ['modules']
@@ -191,7 +231,8 @@ export const $StopAfterIf = {
         },
         error_message: {
             type: 'string',
-            description: 'Custom error message shown when stopping'
+            nullable: true,
+            description: 'Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.'
         }
     },
     required: ['expr']
@@ -241,9 +282,9 @@ export const $FlowModule = {
             description: 'Maximum execution time in seconds (static value or expression)',
             '$ref': '#/components/schemas/InputTransform'
         },
-        delete_after_use: {
-            type: 'boolean',
-            description: "If true, this step's result is deleted after use to save memory"
+        delete_after_secs: {
+            type: 'integer',
+            description: "If set, delete the step's args, result and logs after this many seconds following job completion"
         },
         summary: {
             type: 'string',
@@ -317,6 +358,35 @@ export const $FlowModule = {
         retry: {
             description: 'Retry configuration if this step fails',
             '$ref': '#/components/schemas/Retry'
+        },
+        debouncing: {
+            description: 'Debounce configuration for this step (EE only)',
+            type: 'object',
+            properties: {
+                debounce_delay_s: {
+                    type: 'integer',
+                    description: "Delay in seconds to debounce this step's executions across flow runs"
+                },
+                debounce_key: {
+                    type: 'string',
+                    description: 'Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>'
+                },
+                debounce_args_to_accumulate: {
+                    type: 'array',
+                    description: 'Array-type arguments to accumulate across debounced executions',
+                    items: {
+                        type: 'string'
+                    }
+                },
+                max_total_debouncing_time: {
+                    type: 'integer',
+                    description: 'Maximum total time in seconds before forced execution'
+                },
+                max_total_debounces_amount: {
+                    type: 'integer',
+                    description: 'Maximum number of debounces before forced execution'
+                }
+            }
         }
     },
     required: ['value', 'id']
@@ -538,7 +608,7 @@ export const $RawScript = {
         language: {
             type: 'string',
             description: 'Programming language for this script',
-            enum: ['deno', 'bun', 'python3', 'go', 'bash', 'powershell', 'postgresql', 'mysql', 'bigquery', 'snowflake', 'mssql', 'oracledb', 'graphql', 'nativets', 'php', 'rust', 'ansible', 'csharp', 'nu', 'java', 'ruby', 'duckdb']
+            enum: ['deno', 'bun', 'python3', 'go', 'bash', 'powershell', 'postgresql', 'mysql', 'bigquery', 'snowflake', 'mssql', 'oracledb', 'graphql', 'nativets', 'php', 'rust', 'ansible', 'csharp', 'nu', 'java', 'ruby', 'rlang', 'duckdb']
         },
         path: {
             type: 'string',
@@ -936,15 +1006,15 @@ Supports standard JSON Schema properties: type, properties, required, items, enu
 Example: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }
 `
                 },
-                user_images: {
+                user_attachments: {
                     allOf: [
                         {
                             '$ref': '#/components/schemas/InputTransform'
                         }
                     ],
-                    description: `Array of image references for vision-capable models.
+                    description: `Array of file references (images or PDFs) for the AI agent.
 Format: Array<{ bucket: string, key: string }> - S3 object references
-Example: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]
+Example: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]
 `
                 },
                 max_completion_tokens: {
@@ -1405,6 +1475,29 @@ export const $FlowNote = {
     },
     required: ['id', 'text', 'color', 'type']
 };
+export const $CiTestResult = {
+    type: 'object',
+    properties: {
+        test_script_path: {
+            type: 'string'
+        },
+        job_id: {
+            type: 'string',
+            format: 'uuid',
+            nullable: true
+        },
+        status: {
+            type: 'string',
+            nullable: true
+        },
+        started_at: {
+            type: 'string',
+            format: 'date-time',
+            nullable: true
+        }
+    },
+    required: ['test_script_path']
+};
 export const $HealthStatusResponse = {
     type: 'object',
     description: 'Health status response (cached with 5s TTL)',
@@ -1756,6 +1849,62 @@ export const $VaultSettings = {
         token: {
             type: 'string',
             description: 'Static Vault token for testing/development (optional, if provided this is used instead of JWT authentication)'
+        },
+        skip_ssl_verify: {
+            type: 'boolean',
+            description: 'Skip TLS certificate verification when connecting to Vault. Only use for self-signed certificates in development environments.'
+        }
+    }
+};
+export const $AzureKeyVaultSettings = {
+    type: 'object',
+    required: ['vault_url', 'tenant_id', 'client_id'],
+    properties: {
+        vault_url: {
+            type: 'string',
+            description: 'Azure Key Vault URL (e.g., https://myvault.vault.azure.net)'
+        },
+        tenant_id: {
+            type: 'string',
+            description: 'Azure AD tenant ID'
+        },
+        client_id: {
+            type: 'string',
+            description: 'Azure AD application (client) ID'
+        },
+        client_secret: {
+            type: 'string',
+            description: 'Azure AD client secret'
+        },
+        token: {
+            type: 'string',
+            description: 'Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)'
+        }
+    }
+};
+export const $AwsSecretsManagerSettings = {
+    type: 'object',
+    required: ['region'],
+    properties: {
+        region: {
+            type: 'string',
+            description: 'AWS region (e.g., us-east-1)'
+        },
+        access_key_id: {
+            type: 'string',
+            description: 'AWS Access Key ID (optional, uses default credential chain if not provided)'
+        },
+        secret_access_key: {
+            type: 'string',
+            description: 'AWS Secret Access Key (optional)'
+        },
+        endpoint_url: {
+            type: 'string',
+            description: 'Custom endpoint URL for testing (e.g., LocalStack)'
+        },
+        prefix: {
+            type: 'string',
+            description: 'Prefix for secret names (e.g., windmill/)'
         }
     }
 };
@@ -2008,6 +2157,39 @@ export const $AIConfig = {
         }
     }
 };
+export const $InstanceAIProviderSummary = {
+    type: 'object',
+    properties: {
+        provider: {
+            '$ref': '#/components/schemas/AIProvider'
+        },
+        models: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        }
+    },
+    required: ['provider', 'models']
+};
+export const $InstanceAISummary = {
+    type: 'object',
+    properties: {
+        providers: {
+            type: 'array',
+            items: {
+                '$ref': '#/components/schemas/InstanceAIProviderSummary'
+            }
+        },
+        default_model: {
+            '$ref': '#/components/schemas/AIProviderModel'
+        },
+        code_completion_model: {
+            '$ref': '#/components/schemas/AIProviderModel'
+        }
+    },
+    required: ['providers']
+};
 export const $Alert = {
     type: 'object',
     properties: {
@@ -2226,14 +2408,15 @@ export const $Script = {
         timeout: {
             type: 'integer'
         },
-        delete_after_use: {
-            type: 'boolean'
+        delete_after_secs: {
+            type: 'integer',
+            description: "If set, delete the job's args, result and logs after this many seconds following job completion"
         },
         visible_to_runner_only: {
             type: 'boolean'
         },
-        no_main_func: {
-            type: 'boolean'
+        auto_kind: {
+            type: 'string'
         },
         codebase: {
             type: 'string'
@@ -2243,9 +2426,24 @@ export const $Script = {
         },
         on_behalf_of_email: {
             type: 'string'
+        },
+        modules: {
+            type: 'object',
+            nullable: true,
+            description: 'Additional script modules keyed by relative file path',
+            additionalProperties: {
+                '$ref': '#/components/schemas/ScriptModule'
+            }
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
-    required: ['hash', 'path', 'summary', 'description', 'content', 'created_by', 'created_at', 'archived', 'deleted', 'is_template', 'extra_perms', 'language', 'kind', 'starred', 'no_main_func', 'has_preprocessor']
+    required: ['hash', 'path', 'summary', 'description', 'content', 'created_by', 'created_at', 'archived', 'deleted', 'is_template', 'extra_perms', 'language', 'kind', 'starred', 'has_preprocessor']
 };
 export const $NewScript = {
     type: 'object',
@@ -2320,8 +2518,9 @@ export const $NewScript = {
         timeout: {
             type: 'integer'
         },
-        delete_after_use: {
-            type: 'boolean'
+        delete_after_secs: {
+            type: 'integer',
+            description: "If set, delete the job's args, result and logs after this many seconds following job completion"
         },
         deployment_message: {
             type: 'string'
@@ -2350,8 +2549,8 @@ export const $NewScript = {
         visible_to_runner_only: {
             type: 'boolean'
         },
-        no_main_func: {
-            type: 'boolean'
+        auto_kind: {
+            type: 'string'
         },
         codebase: {
             type: 'string'
@@ -2388,6 +2587,20 @@ export const $NewScript = {
                     }
                 }
             }
+        },
+        modules: {
+            type: 'object',
+            nullable: true,
+            description: 'Additional script modules keyed by relative file path',
+            additionalProperties: {
+                '$ref': '#/components/schemas/ScriptModule'
+            }
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'summary', 'content', 'language']
@@ -3150,6 +3363,9 @@ export const $User = {
                     '$ref': '#/components/schemas/UserSource'
                 }
             ]
+        },
+        is_service_account: {
+            type: 'boolean'
         }
     },
     required: ['email', 'username', 'is_admin', 'is_super_admin', 'created_at', 'operator', 'disabled', 'folders', 'folders_owners']
@@ -3219,83 +3435,344 @@ export const $EditWorkspaceUser = {
         }
     }
 };
-export const $TruncatedToken = {
+export const $OffboardAffectedPaths = {
     type: 'object',
     properties: {
-        label: {
-            type: 'string'
+        scripts: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         },
-        expiration: {
-            type: 'string',
-            format: 'date-time'
+        flows: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         },
-        token_prefix: {
-            type: 'string'
+        apps: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         },
-        created_at: {
-            type: 'string',
-            format: 'date-time'
+        resources: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         },
-        last_used_at: {
-            type: 'string',
-            format: 'date-time'
+        variables: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         },
-        scopes: {
+        schedules: {
             type: 'array',
             items: {
                 type: 'string'
             }
         },
-        email: {
-            type: 'string'
+        triggers: {
+            type: 'object',
+            additionalProperties: {
+                type: 'array',
+                items: {
+                    type: 'string'
+                }
+            }
+        }
+    }
+};
+export const $OffboardPreview = {
+    type: 'object',
+    properties: {
+        owned: {
+            '$ref': '#/components/schemas/OffboardAffectedPaths',
+            description: 'Objects under u/{username}/ that will be reassigned'
+        },
+        executing_on_behalf: {
+            '$ref': '#/components/schemas/OffboardAffectedPaths',
+            description: "Objects not under the user's path but that execute on behalf of this user (permissioned_as/on_behalf_of will be updated)"
+        },
+        referencing: {
+            '$ref': '#/components/schemas/OffboardAffectedPaths',
+            description: "Scripts/flows/apps/resources whose content or value references this user's paths (may break after reassignment)"
+        },
+        tokens: {
+            type: 'array',
+            items: {
+                '$ref': '#/components/schemas/OffboardTokenInfo'
+            },
+            description: 'Tokens owned by this user (will be deleted)'
+        },
+        http_triggers: {
+            type: 'integer',
+            description: "HTTP triggers under the user's path (webhook URLs will change)"
+        },
+        email_triggers: {
+            type: 'integer',
+            description: "Email triggers under the user's path (email addresses will change)"
         }
     },
-    required: ['token_prefix', 'created_at', 'last_used_at']
+    required: ['owned', 'executing_on_behalf', 'referencing', 'tokens', 'http_triggers', 'email_triggers']
 };
-export const $NewToken = {
+export const $OffboardTokenInfo = {
     type: 'object',
     properties: {
         label: {
             type: 'string'
         },
-        expiration: {
-            type: 'string',
-            format: 'date-time'
-        },
         scopes: {
             type: 'array',
             items: {
                 type: 'string'
             }
         },
-        workspace_id: {
+        expiration: {
             type: 'string'
         }
-    }
+    },
+    required: ['label', 'scopes']
 };
-export const $NewTokenImpersonate = {
+export const $OffboardRequest = {
     type: 'object',
     properties: {
-        label: {
-            type: 'string'
-        },
-        expiration: {
+        reassign_to: {
             type: 'string',
-            format: 'date-time'
+            description: "Target for reassignment: 'u/{username}' or 'f/{folder}'"
         },
-        impersonate_email: {
-            type: 'string'
+        new_on_behalf_of_user: {
+            type: 'string',
+            description: 'Required when reassign_to is a folder. The username whose identity will be used as permissioned_as for schedules and triggers.'
         },
-        workspace_id: {
-            type: 'string'
+        delete_user: {
+            type: 'boolean',
+            default: true,
+            description: 'Whether to also remove the user from the workspace'
         }
     },
-    required: ['impersonate_email']
+    required: ['reassign_to']
 };
-export const $ListableVariable = {
+export const $OffboardResponse = {
     type: 'object',
     properties: {
-        workspace_id: {
+        conflicts: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            description: 'List of path conflicts that block the offboarding. Empty on success.'
+        },
+        summary: {
+            '$ref': '#/components/schemas/OffboardSummary'
+        }
+    }
+};
+export const $OffboardSummary = {
+    type: 'object',
+    properties: {
+        scripts_reassigned: {
+            type: 'integer'
+        },
+        flows_reassigned: {
+            type: 'integer'
+        },
+        apps_reassigned: {
+            type: 'integer'
+        },
+        resources_reassigned: {
+            type: 'integer'
+        },
+        variables_reassigned: {
+            type: 'integer'
+        },
+        schedules_reassigned: {
+            type: 'integer'
+        },
+        triggers_reassigned: {
+            type: 'integer'
+        },
+        drafts_deleted: {
+            type: 'integer'
+        }
+    },
+    required: ['scripts_reassigned', 'flows_reassigned', 'apps_reassigned', 'resources_reassigned', 'variables_reassigned', 'schedules_reassigned', 'triggers_reassigned', 'drafts_deleted']
+};
+export const $GlobalOffboardPreview = {
+    type: 'object',
+    properties: {
+        workspaces: {
+            type: 'array',
+            items: {
+                '$ref': '#/components/schemas/WorkspaceOffboardPreview'
+            }
+        }
+    },
+    required: ['workspaces']
+};
+export const $WorkspaceOffboardPreview = {
+    type: 'object',
+    properties: {
+        workspace_id: {
+            type: 'string'
+        },
+        username: {
+            type: 'string'
+        },
+        preview: {
+            '$ref': '#/components/schemas/OffboardPreview'
+        }
+    },
+    required: ['workspace_id', 'username', 'preview']
+};
+export const $GlobalOffboardRequest = {
+    type: 'object',
+    properties: {
+        reassignments: {
+            type: 'object',
+            additionalProperties: {
+                '$ref': '#/components/schemas/WorkspaceReassignment'
+            },
+            description: 'Map of workspace_id to reassignment config'
+        },
+        delete_user: {
+            type: 'boolean',
+            default: true,
+            description: 'Whether to also remove the user from the instance'
+        }
+    }
+};
+export const $WorkspaceReassignment = {
+    type: 'object',
+    properties: {
+        reassign_to: {
+            type: 'string',
+            description: "Target: 'u/{username}' or 'f/{folder}'"
+        },
+        new_on_behalf_of_user: {
+            type: 'string',
+            description: 'Required when reassign_to is a folder. Username to use as permissioned_as.'
+        }
+    },
+    required: ['reassign_to']
+};
+export const $TruncatedToken = {
+    type: 'object',
+    properties: {
+        label: {
+            type: 'string'
+        },
+        expiration: {
+            type: 'string',
+            format: 'date-time'
+        },
+        token_prefix: {
+            type: 'string'
+        },
+        created_at: {
+            type: 'string',
+            format: 'date-time'
+        },
+        last_used_at: {
+            type: 'string',
+            format: 'date-time'
+        },
+        scopes: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        },
+        email: {
+            type: 'string'
+        }
+    },
+    required: ['token_prefix', 'created_at', 'last_used_at']
+};
+export const $ExternalJwtToken = {
+    type: 'object',
+    properties: {
+        jwt_hash: {
+            type: 'integer',
+            format: 'int64'
+        },
+        email: {
+            type: 'string'
+        },
+        username: {
+            type: 'string'
+        },
+        is_admin: {
+            type: 'boolean'
+        },
+        is_operator: {
+            type: 'boolean'
+        },
+        workspace_id: {
+            type: 'string'
+        },
+        label: {
+            type: 'string'
+        },
+        scopes: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        },
+        last_used_at: {
+            type: 'string',
+            format: 'date-time'
+        }
+    },
+    required: ['jwt_hash', 'email', 'username', 'is_admin', 'is_operator', 'last_used_at']
+};
+export const $NewToken = {
+    type: 'object',
+    properties: {
+        label: {
+            type: 'string'
+        },
+        expiration: {
+            type: 'string',
+            format: 'date-time'
+        },
+        scopes: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
+        },
+        workspace_id: {
+            type: 'string'
+        }
+    }
+};
+export const $NewTokenImpersonate = {
+    type: 'object',
+    properties: {
+        label: {
+            type: 'string'
+        },
+        expiration: {
+            type: 'string',
+            format: 'date-time'
+        },
+        impersonate_email: {
+            type: 'string'
+        },
+        workspace_id: {
+            type: 'string'
+        }
+    },
+    required: ['impersonate_email']
+};
+export const $ListableVariable = {
+    type: 'object',
+    properties: {
+        workspace_id: {
             type: 'string'
         },
         path: {
@@ -3337,6 +3814,12 @@ export const $ListableVariable = {
         expires_at: {
             type: 'string',
             format: 'date-time'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['workspace_id', 'path', 'is_secret', 'extra_perms']
@@ -3390,6 +3873,12 @@ export const $CreateVariable = {
             type: 'string',
             description: 'The expiration date of the variable',
             format: 'date-time'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'value', 'is_secret', 'description']
@@ -3412,6 +3901,12 @@ export const $EditVariable = {
         description: {
             type: 'string',
             description: 'The new description of the variable'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     }
 };
@@ -3577,8 +4072,8 @@ export const $MainArgSignature = {
                 required: ['name', 'typ']
             }
         },
-        no_main_func: {
-            type: 'boolean',
+        auto_kind: {
+            type: 'string',
             nullable: true
         },
         has_preprocessor: {
@@ -3586,11 +4081,30 @@ export const $MainArgSignature = {
             nullable: true
         }
     },
-    required: ['star_args', 'start_kwargs', 'args', 'type', 'error', 'no_main_func', 'has_preprocessor']
+    required: ['star_args', 'start_kwargs', 'args', 'type', 'error', 'auto_kind', 'has_preprocessor']
 };
 export const $ScriptLang = {
     type: 'string',
-    enum: ['python3', 'deno', 'go', 'bash', 'powershell', 'postgresql', 'mysql', 'bigquery', 'snowflake', 'mssql', 'oracledb', 'graphql', 'nativets', 'bun', 'php', 'rust', 'ansible', 'csharp', 'nu', 'java', 'ruby', 'duckdb', 'bunnative']
+    enum: ['python3', 'deno', 'go', 'bash', 'powershell', 'postgresql', 'mysql', 'bigquery', 'snowflake', 'mssql', 'oracledb', 'graphql', 'nativets', 'bun', 'php', 'rust', 'ansible', 'csharp', 'nu', 'java', 'ruby', 'rlang', 'duckdb', 'bunnative']
+};
+export const $ScriptModule = {
+    type: 'object',
+    description: 'An additional module file associated with a script',
+    properties: {
+        content: {
+            type: 'string',
+            description: 'The source code content of this module'
+        },
+        language: {
+            '$ref': '#/components/schemas/ScriptLang'
+        },
+        lock: {
+            type: 'string',
+            nullable: true,
+            description: "Lock file content for this module's dependencies"
+        }
+    },
+    required: ['content', 'language']
 };
 export const $Preview = {
     type: 'object',
@@ -3628,6 +4142,14 @@ export const $Preview = {
         },
         flow_path: {
             type: 'string'
+        },
+        modules: {
+            type: 'object',
+            nullable: true,
+            description: 'Additional script modules keyed by relative file path',
+            additionalProperties: {
+                '$ref': '#/components/schemas/ScriptModule'
+            }
         }
     },
     required: ['args']
@@ -3705,6 +4227,12 @@ export const $CreateResource = {
         resource_type: {
             type: 'string',
             description: 'The resource_type associated with the resource'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'value', 'resource_type']
@@ -3724,6 +4252,12 @@ export const $EditResource = {
         resource_type: {
             type: 'string',
             description: 'The new resource_type to be associated with the resource'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     }
 };
@@ -3758,6 +4292,12 @@ export const $Resource = {
         edited_at: {
             type: 'string',
             format: 'date-time'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'resource_type', 'is_oauth']
@@ -3808,6 +4348,12 @@ export const $ListableResource = {
         edited_at: {
             type: 'string',
             format: 'date-time'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'resource_type', 'is_oauth', 'is_linked', 'is_refreshed']
@@ -3904,6 +4450,10 @@ export const $Schedule = {
             type: 'string',
             description: 'Email of the user who owns this schedule, used for permissioned_as'
         },
+        permissioned_as: {
+            type: 'string',
+            description: "The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup')"
+        },
         error: {
             type: 'string',
             nullable: true,
@@ -3993,9 +4543,16 @@ export const $Schedule = {
             type: 'string',
             nullable: true,
             description: 'Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
-    required: ['path', 'edited_by', 'edited_at', 'schedule', 'script_path', 'timezone', 'extra_perms', 'is_flow', 'enabled', 'email']
+    required: ['path', 'edited_by', 'edited_at', 'schedule', 'script_path', 'timezone', 'extra_perms', 'is_flow', 'enabled', 'email', 'permissioned_as']
 };
 export const $ScheduleWJobs = {
     allOf: [
@@ -4147,13 +4704,19 @@ export const $NewSchedule = {
             nullable: true,
             description: 'Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.'
+            description: 'The user or group this schedule runs as. Used during deployment to preserve the original schedule owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'schedule', 'timezone', 'script_path', 'is_flow', 'args']
@@ -4258,13 +4821,21 @@ export const $EditSchedule = {
             nullable: true,
             description: 'Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.'
+            nullable: true,
+            description: "The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup'). Only admins and wm_deployers can set this via preserve_permissioned_as."
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            nullable: true,
+            description: "If true and user is admin/wm_deployers, preserve the provided permissioned_as instead of using the deploying user's identity"
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['schedule', 'timezone', 'args']
@@ -4272,7 +4843,7 @@ export const $EditSchedule = {
 export const $JobTriggerKind = {
     description: 'job trigger kind (schedule, http, websocket...)',
     type: 'string',
-    enum: ['webhook', 'default_email', 'email', 'schedule', 'http', 'websocket', 'postgres', 'kafka', 'nats', 'mqtt', 'sqs', 'gcp', 'google']
+    enum: ['webhook', 'default_email', 'email', 'schedule', 'http', 'websocket', 'postgres', 'kafka', 'nats', 'mqtt', 'sqs', 'gcp', 'google', 'github']
 };
 export const $TriggerMode = {
     description: 'job trigger mode',
@@ -4290,9 +4861,9 @@ export const $TriggerExtraProperty = {
             type: 'string',
             description: 'Path to the script or flow to execute when triggered'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who owns this trigger, used for permissioned_as'
+            description: 'The user or group this trigger runs as (permissioned_as)'
         },
         extra_perms: {
             type: 'object',
@@ -4321,9 +4892,16 @@ export const $TriggerExtraProperty = {
         mode: {
             '$ref': '#/components/schemas/TriggerMode',
             description: 'Trigger mode (enabled/disabled)'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
-    required: ['path', 'script_path', 'email', 'extra_perms', 'workspace_id', 'edited_by', 'edited_at', 'is_flow', 'mode']
+    required: ['path', 'script_path', 'permissioned_as', 'extra_perms', 'workspace_id', 'edited_by', 'edited_at', 'is_flow', 'mode']
 };
 export const $AuthenticationMethod = {
     type: 'string',
@@ -4643,13 +5221,19 @@ export const $NewHttpTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'route_path', 'is_flow', 'authentication_method', 'http_method', 'is_static_website']
@@ -4752,13 +5336,19 @@ export const $EditHttpTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'kind', 'authentication_method', 'http_method', 'is_static_website']
@@ -4815,9 +5405,31 @@ export const $TriggersCount = {
         },
         google_count: {
             type: 'number'
+        },
+        github_count: {
+            type: 'number'
         }
     }
 };
+export const $WebsocketHeartbeat = {
+    type: 'object',
+    properties: {
+        interval_secs: {
+            type: 'integer',
+            minimum: 1,
+            description: 'Interval in seconds between heartbeat messages'
+        },
+        message: {
+            type: 'string',
+            description: 'Message to send as heartbeat. Use {{state}} as a placeholder for a value extracted from incoming messages (see state_field).'
+        },
+        state_field: {
+            type: 'string',
+            description: 'Optional. Top-level JSON field to extract from incoming messages. The extracted value replaces {{state}} in the heartbeat message.'
+        }
+    },
+    required: ['interval_secs', 'message']
+};
 export const $WebsocketTrigger = {
     allOf: [
         {
@@ -4857,6 +5469,12 @@ export const $WebsocketTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         initial_messages: {
             type: 'array',
             nullable: true,
@@ -4878,6 +5496,11 @@ export const $WebsocketTrigger = {
             type: 'boolean',
             description: 'If true, error results are sent back through the WebSocket'
         },
+        heartbeat: {
+            '$ref': '#/components/schemas/WebsocketHeartbeat',
+            nullable: true,
+            description: 'Optional periodic heartbeat message configuration'
+        },
         error_handler_path: {
             type: 'string',
             description: 'Path to a script or flow to run when the triggered job fails'
@@ -4929,6 +5552,12 @@ export const $NewWebsocketTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         initial_messages: {
             type: 'array',
             nullable: true,
@@ -4950,6 +5579,11 @@ export const $NewWebsocketTrigger = {
             type: 'boolean',
             description: 'If true, error results are sent back through the WebSocket'
         },
+        heartbeat: {
+            '$ref': '#/components/schemas/WebsocketHeartbeat',
+            nullable: true,
+            description: 'Optional periodic heartbeat message configuration'
+        },
         error_handler_path: {
             type: 'string',
             description: 'Path to a script or flow to run when the triggered job fails'
@@ -4962,13 +5596,19 @@ export const $NewWebsocketTrigger = {
             description: 'Retry configuration for failed executions',
             '$ref': '#/components/schemas/Retry'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'url', 'is_flow', 'filters', 'can_return_message', 'can_return_error_result']
@@ -5006,6 +5646,12 @@ export const $EditWebsocketTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         initial_messages: {
             type: 'array',
             nullable: true,
@@ -5027,6 +5673,11 @@ export const $EditWebsocketTrigger = {
             type: 'boolean',
             description: 'If true, error results are sent back through the WebSocket'
         },
+        heartbeat: {
+            '$ref': '#/components/schemas/WebsocketHeartbeat',
+            nullable: true,
+            description: 'Optional periodic heartbeat message configuration'
+        },
         error_handler_path: {
             type: 'string',
             description: 'Path to a script or flow to run when the triggered job fails'
@@ -5039,13 +5690,19 @@ export const $EditWebsocketTrigger = {
             description: 'Retry configuration for failed executions',
             '$ref': '#/components/schemas/Retry'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'url', 'is_flow', 'filters', 'can_return_message', 'can_return_error_result']
@@ -5254,13 +5911,19 @@ export const $NewMqttTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'subscribe_topics', 'mqtt_resource_path']
@@ -5326,13 +5989,19 @@ export const $EditMqttTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'enabled', 'subscribe_topics', 'mqtt_resource_path']
@@ -5489,13 +6158,19 @@ export const $GcpTriggerData = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions.'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'gcp_resource_path', 'topic_id', 'subscription_mode']
@@ -5682,13 +6357,19 @@ export const $NewSqsTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['queue_url', 'aws_resource_path', 'path', 'script_path', 'is_flow', 'aws_auth_resource_type']
@@ -5743,13 +6424,19 @@ export const $EditSqsTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['queue_url', 'aws_resource_path', 'path', 'script_path', 'is_flow', 'enabled', 'aws_auth_resource_type']
@@ -5940,13 +6627,19 @@ export const $NewPostgresTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'enabled', 'postgres_resource_path']
@@ -5997,13 +6690,19 @@ export const $EditPostgresTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'enabled', 'postgres_resource_path', 'publication_name', 'replication_slot_name']
@@ -6044,6 +6743,12 @@ export const $KafkaTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         auto_offset_reset: {
             type: 'string',
             enum: ['latest', 'earliest'],
@@ -6126,6 +6831,12 @@ export const $NewKafkaTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         auto_offset_reset: {
             type: 'string',
             enum: ['latest', 'earliest'],
@@ -6152,13 +6863,19 @@ export const $NewKafkaTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'kafka_resource_path', 'group_id', 'topics', 'filters']
@@ -6194,6 +6911,12 @@ export const $EditKafkaTrigger = {
                 required: ['key', 'value']
             }
         },
+        filter_logic: {
+            type: 'string',
+            enum: ['and', 'or'],
+            default: 'and',
+            description: "Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match."
+        },
         auto_offset_reset: {
             type: 'string',
             enum: ['latest', 'earliest'],
@@ -6229,13 +6952,19 @@ export const $EditKafkaTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'kafka_resource_path', 'group_id', 'topics', 'filters', 'is_flow']
@@ -6356,13 +7085,19 @@ export const $NewNatsTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow', 'nats_resource_path', 'use_jetstream', 'subjects']
@@ -6419,13 +7154,19 @@ export const $EditNatsTrigger = {
             '$ref': '#/components/schemas/Retry',
             description: 'Retry configuration for failed executions'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'nats_resource_path', 'use_jetstream', 'subjects', 'is_flow']
@@ -6486,13 +7227,19 @@ export const $NewEmailTrigger = {
         mode: {
             '$ref': '#/components/schemas/TriggerMode'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'local_part', 'is_flow']
@@ -6524,13 +7271,19 @@ export const $EditEmailTrigger = {
         retry: {
             '$ref': '#/components/schemas/Retry'
         },
-        email: {
+        permissioned_as: {
             type: 'string',
-            description: 'Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.'
+            description: 'The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.'
         },
-        preserve_email: {
+        preserve_permissioned_as: {
             type: 'boolean',
-            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it."
+            description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it."
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            }
         }
     },
     required: ['path', 'script_path', 'is_flow']
@@ -6574,6 +7327,11 @@ export const $InstanceGroup = {
             items: {
                 type: 'string'
             }
+        },
+        instance_role: {
+            type: 'string',
+            nullable: true,
+            enum: ['superadmin', 'devops']
         }
     }
 };
@@ -6593,6 +7351,11 @@ export const $InstanceGroupWithWorkspaces = {
                 type: 'string'
             }
         },
+        instance_role: {
+            type: 'string',
+            nullable: true,
+            enum: ['superadmin', 'devops']
+        },
         workspaces: {
             type: 'array',
             items: {
@@ -6643,10 +7406,34 @@ export const $Folder = {
         edited_at: {
             type: 'string',
             format: 'date-time'
+        },
+        default_permissioned_as: {
+            '$ref': '#/components/schemas/FolderDefaultPermissionedAs'
         }
     },
     required: ['name', 'owners', 'extra_perms']
 };
+export const $FolderDefaultPermissionedAs = {
+    description: `Ordered list of rules applied at create-time when admins or \`wm_deployers\` members deploy items in this folder. The first rule whose \`path_glob\` matches the item path (relative to the folder root) wins, and its \`permissioned_as\` is used as the default.
+`,
+    type: 'array',
+    items: {
+        type: 'object',
+        required: ['path_glob', 'permissioned_as'],
+        properties: {
+            path_glob: {
+                type: 'string',
+                description: `Glob pattern evaluated against the item path *relative* to the folder root (e.g. "jobs/**" matches every item whose full path is \`f/<folder>/jobs/...\`). Supports \`*\`, \`**\`, \`?\`, \`[abc]\`, \`{a,b}\`.
+`
+            },
+            permissioned_as: {
+                type: 'string',
+                description: `Target identity the matched item should be permissioned as. Must be \`u/<username>\`, \`g/<groupname>\`, or an email that exists in this workspace.
+`
+            }
+        }
+    }
+};
 export const $WorkerPing = {
     type: 'object',
     properties: {
@@ -6793,6 +7580,23 @@ export const $CreateWorkspaceFork = {
         },
         color: {
             type: 'string'
+        },
+        forked_datatables: {
+            type: 'array',
+            items: {
+                type: 'object',
+                required: ['name', 'new_dbname'],
+                properties: {
+                    name: {
+                        type: 'string',
+                        description: 'Datatable name'
+                    },
+                    new_dbname: {
+                        type: 'string',
+                        description: 'New database name for the fork'
+                    }
+                }
+            }
         }
     },
     required: ['id', 'name', 'parent_workspace_id']
@@ -6935,9 +7739,16 @@ export const $GlobalUserInfo = {
         },
         first_time_user: {
             type: 'boolean'
+        },
+        role_source: {
+            type: 'string',
+            enum: ['manual', 'instance_group']
+        },
+        disabled: {
+            type: 'boolean'
         }
     },
-    required: ['email', 'login_type', 'super_admin', 'verified', 'first_time_user']
+    required: ['email', 'login_type', 'super_admin', 'verified', 'first_time_user', 'role_source', 'disabled']
 };
 export const $Flow = {
     allOf: [
@@ -7014,6 +7825,13 @@ export const $FlowMetadata = {
         },
         on_behalf_of_email: {
             type: 'string'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
     required: ['path', 'edited_by', 'edited_at', 'archived', 'extra_perms']
@@ -7053,6 +7871,12 @@ export const $OpenFlowWPath = {
                 preserve_on_behalf_of: {
                     type: 'boolean',
                     description: "When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it."
+                },
+                labels: {
+                    type: 'array',
+                    items: {
+                        type: 'string'
+                    }
                 }
             },
             required: ['path']
@@ -7182,6 +8006,13 @@ export const $ListableApp = {
         },
         raw_app: {
             type: 'boolean'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
     required: ['id', 'workspace_id', 'path', 'summary', 'version', 'extra_perms', 'edited_at', 'execution_mode']
@@ -7251,6 +8082,13 @@ export const $ListableRawApp = {
         edited_at: {
             type: 'string',
             format: 'date-time'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
     required: ['workspace_id', 'path', 'summary', 'extra_perms', 'version', 'edited_at']
@@ -7305,6 +8143,13 @@ export const $AppWithLastVersion = {
         },
         bundle_secret: {
             type: 'string'
+        },
+        labels: {
+            type: 'array',
+            items: {
+                type: 'string'
+            },
+            default: []
         }
     },
     required: ['id', 'workspace_id', 'path', 'summary', 'versions', 'created_by', 'created_at', 'value', 'policy', 'execution_mode', 'extra_perms', 'raw_app']
@@ -7359,22 +8204,20 @@ export const $SlackToken = {
         access_token: {
             type: 'string'
         },
-        team_id: {
-            type: 'string'
-        },
-        team_name: {
-            type: 'string'
-        },
-        bot: {
+        team: {
             type: 'object',
             properties: {
-                bot_access_token: {
+                id: {
+                    type: 'string'
+                },
+                name: {
                     type: 'string'
                 }
-            }
+            },
+            required: ['id', 'name']
         }
     },
-    required: ['access_token', 'team_id', 'team_name', 'bot']
+    required: ['access_token']
 };
 export const $TokenResponse = {
     type: 'object',
@@ -7529,6 +8372,17 @@ export const $DataTableSettings = {
                             }
                         },
                         required: ['resource_type']
+                    },
+                    forked_from: {
+                        type: 'object',
+                        description: 'Fork origin info with schema snapshot',
+                        properties: {
+                            schema: {
+                                type: 'object',
+                                description: 'Schema snapshot at fork time',
+                                additionalProperties: true
+                            }
+                        }
                     }
                 }
             }
@@ -8008,6 +8862,11 @@ export const $ExportedInstanceGroup = {
         },
         external_id: {
             type: 'string'
+        },
+        instance_role: {
+            type: 'string',
+            nullable: true,
+            enum: ['superadmin', 'devops']
         }
     },
     required: ['name']
@@ -8206,7 +9065,7 @@ export const $WorkspaceItemDiff = {
     properties: {
         kind: {
             type: 'string',
-            enum: ['script', 'flow', 'app', 'resource', 'variable', 'resource_type'],
+            enum: ['script', 'flow', 'app', 'raw_app', 'resource', 'variable', 'resource_type'],
             description: 'Type of the item'
         },
         path: {
@@ -8530,7 +9389,7 @@ export const $ProtectionRules = {
 };
 export const $ProtectionRuleKind = {
     type: 'string',
-    enum: ['DisableDirectDeployment', 'DisableWorkspaceForking']
+    enum: ['DisableDirectDeployment', 'DisableWorkspaceForking', 'RestrictDeployToDeployers']
 };
 export const $RuleBypasserGroups = {
     type: 'array',
@@ -8546,9 +9405,128 @@ export const $RuleBypasserUsers = {
         type: 'string'
     }
 };
+export const $DeploymentRequestEligibleDeployer = {
+    type: 'object',
+    required: ['username', 'email', 'is_admin'],
+    properties: {
+        username: {
+            type: 'string'
+        },
+        email: {
+            type: 'string'
+        },
+        is_admin: {
+            type: 'boolean'
+        }
+    }
+};
+export const $DeploymentRequestAssignee = {
+    type: 'object',
+    required: ['username', 'email'],
+    properties: {
+        username: {
+            type: 'string'
+        },
+        email: {
+            type: 'string'
+        }
+    }
+};
+export const $DeploymentRequestComment = {
+    type: 'object',
+    required: ['id', 'author', 'author_email', 'body', 'obsolete', 'created_at'],
+    properties: {
+        id: {
+            type: 'integer',
+            format: 'int64'
+        },
+        parent_id: {
+            type: 'integer',
+            format: 'int64',
+            nullable: true
+        },
+        author: {
+            type: 'string'
+        },
+        author_email: {
+            type: 'string'
+        },
+        body: {
+            type: 'string'
+        },
+        anchor_kind: {
+            type: 'string',
+            nullable: true
+        },
+        anchor_path: {
+            type: 'string',
+            nullable: true
+        },
+        obsolete: {
+            type: 'boolean'
+        },
+        created_at: {
+            type: 'string',
+            format: 'date-time'
+        }
+    }
+};
+export const $DeploymentRequest = {
+    type: 'object',
+    required: ['id', 'source_workspace_id', 'fork_workspace_id', 'requested_by', 'requested_by_email', 'requested_at', 'assignees', 'comments'],
+    properties: {
+        id: {
+            type: 'integer',
+            format: 'int64'
+        },
+        source_workspace_id: {
+            type: 'string'
+        },
+        fork_workspace_id: {
+            type: 'string'
+        },
+        requested_by: {
+            type: 'string'
+        },
+        requested_by_email: {
+            type: 'string'
+        },
+        requested_at: {
+            type: 'string',
+            format: 'date-time'
+        },
+        assignees: {
+            type: 'array',
+            items: {
+                '$ref': '#/components/schemas/DeploymentRequestAssignee'
+            }
+        },
+        comments: {
+            type: 'array',
+            items: {
+                '$ref': '#/components/schemas/DeploymentRequestComment'
+            }
+        }
+    }
+};
+export const $QuotaInfo = {
+    type: 'object',
+    properties: {
+        used: {
+            type: 'integer'
+        },
+        limit: {
+            type: 'integer'
+        },
+        prunable: {
+            type: 'integer'
+        }
+    },
+    required: ['used', 'limit', 'prunable']
+};
 export const $NativeServiceName = {
     type: 'string',
-    enum: ['nextcloud', 'google']
+    enum: ['nextcloud', 'google', 'github']
 };
 export const $NativeTrigger = {
     type: 'object',
@@ -8582,6 +9560,11 @@ export const $NativeTrigger = {
             type: 'string',
             nullable: true,
             description: 'Error message if the trigger is in an error state'
+        },
+        summary: {
+            type: 'string',
+            nullable: true,
+            description: 'Short summary to be displayed when listed'
         }
     },
     required: ['external_id', 'workspace_id', 'service_name', 'script_path', 'is_flow', 'service_config']
@@ -8619,6 +9602,11 @@ export const $NativeTriggerWithExternal = {
             nullable: true,
             description: 'Error message if the trigger is in an error state'
         },
+        summary: {
+            type: 'string',
+            nullable: true,
+            description: 'Short summary to be displayed when listed'
+        },
         external_data: {
             type: 'object',
             description: 'Configuration data from the external service',
@@ -8712,6 +9700,11 @@ export const $NativeTriggerData = {
             type: 'object',
             description: 'Service-specific configuration (e.g., event types, filters)',
             additionalProperties: true
+        },
+        summary: {
+            type: 'string',
+            nullable: true,
+            description: 'Short summary to be displayed when listed'
         }
     },
     required: ['script_path', 'is_flow', 'service_config']
@@ -8834,3 +9827,21 @@ export const $SharedDriveEntry = {
     },
     required: ['id', 'name']
 };
+export const $GithubRepoEntry = {
+    type: 'object',
+    properties: {
+        full_name: {
+            type: 'string'
+        },
+        name: {
+            type: 'string'
+        },
+        owner: {
+            type: 'string'
+        },
+        private: {
+            type: 'boolean'
+        }
+    },
+    required: ['full_name', 'name', 'owner', 'private']
+};