windmill-components 1.677.0 → 1.687.0

package/package/gen/types.gen.d.ts

@@ -83,6 +83,10 @@ export type FlowValue = {
      */
     cache_ttl?: number;
     cache_ignore_s3_path?: boolean;
+    /**
+     * If set, delete the flow job's args, result and logs after this many seconds following job completion
+     */
+    delete_after_secs?: number;
     /**
      * Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).
      */
@@ -105,6 +109,35 @@ export type FlowValue = {
      * Sticky notes attached to the flow
      */
     notes?: Array<FlowNote>;
+    /**
+     * Semantic groups of modules for organizational purposes
+     */
+    groups?: Array<{
+        /**
+         * Display name for this group
+         */
+        summary?: string;
+        /**
+         * Markdown note shown below the group header
+         */
+        note?: string;
+        /**
+         * If true, this group is collapsed by default in the flow editor. UI hint only.
+         */
+        autocollapse?: boolean;
+        /**
+         * ID of the first flow module in this group (topological entry point)
+         */
+        start_id: string;
+        /**
+         * ID of the last flow module in this group (topological exit point)
+         */
+        end_id: string;
+        /**
+         * Color for the group in the flow editor
+         */
+        color?: string;
+    }>;
 };
 /**
  * Retry configuration for failed module executions
@@ -167,9 +200,9 @@ export type StopAfterIf = {
      */
     expr: string;
     /**
-     * Custom error message shown when stopping
+     * Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.
      */
-    error_message?: string;
+    error_message?: string | null;
 };
 /**
  * A single step in a flow. Can be a script, subflow, loop, or branch
@@ -211,9 +244,9 @@ export type FlowModule = {
      */
     timeout?: InputTransform;
     /**
-     * If true, this step's result is deleted after use to save memory
+     * If set, delete the step's args, result and logs after this many seconds following job completion
      */
-    delete_after_use?: boolean;
+    delete_after_secs?: number;
     /**
      * Short description of what this step does
      */
@@ -287,6 +320,31 @@ export type FlowModule = {
      * Retry configuration if this step fails
      */
     retry?: Retry;
+    /**
+     * Debounce configuration for this step (EE only)
+     */
+    debouncing?: {
+        /**
+         * Delay in seconds to debounce this step's executions across flow runs
+         */
+        debounce_delay_s?: number;
+        /**
+         * Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>
+         */
+        debounce_key?: string;
+        /**
+         * Array-type arguments to accumulate across debounced executions
+         */
+        debounce_args_to_accumulate?: Array<(string)>;
+        /**
+         * Maximum total time in seconds before forced execution
+         */
+        max_total_debouncing_time?: number;
+        /**
+         * Maximum number of debounces before forced execution
+         */
+        max_total_debounces_amount?: number;
+    };
 };
 /**
  * Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs
@@ -378,7 +436,7 @@ export type RawScript = {
     /**
      * Programming language for this script
      */
-    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb';
+    language: 'deno' | 'bun' | 'python3' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb';
     /**
      * Optional path for saving this script
      */
@@ -628,12 +686,12 @@ export type AiAgent = {
          */
         output_schema?: InputTransform;
         /**
-         * Array of image references for vision-capable models.
+         * Array of file references (images or PDFs) for the AI agent.
          * Format: Array<{ bucket: string, key: string }> - S3 object references
-         * Example: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]
+         * Example: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]
          *
          */
-        user_images?: InputTransform;
+        user_attachments?: InputTransform;
         /**
          * Integer. Maximum number of tokens the AI will generate in its response.
          * Range: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.
@@ -821,6 +879,12 @@ export type FlowNote = {
      */
     contained_node_ids?: Array<(string)>;
 };
+export type CiTestResult = {
+    test_script_path: string;
+    job_id?: string | null;
+    status?: string | null;
+    started_at?: string | null;
+};
 /**
  * Health status response (cached with 5s TTL)
  */
@@ -1063,6 +1127,54 @@ export type VaultSettings = {
      * Static Vault token for testing/development (optional, if provided this is used instead of JWT authentication)
      */
     token?: string;
+    /**
+     * Skip TLS certificate verification when connecting to Vault. Only use for self-signed certificates in development environments.
+     */
+    skip_ssl_verify?: boolean;
+};
+export type AzureKeyVaultSettings = {
+    /**
+     * Azure Key Vault URL (e.g., https://myvault.vault.azure.net)
+     */
+    vault_url: string;
+    /**
+     * Azure AD tenant ID
+     */
+    tenant_id: string;
+    /**
+     * Azure AD application (client) ID
+     */
+    client_id: string;
+    /**
+     * Azure AD client secret
+     */
+    client_secret?: string;
+    /**
+     * Static Bearer token for testing/development (optional, if provided this is used instead of OAuth2 authentication)
+     */
+    token?: string;
+};
+export type AwsSecretsManagerSettings = {
+    /**
+     * AWS region (e.g., us-east-1)
+     */
+    region: string;
+    /**
+     * AWS Access Key ID (optional, uses default credential chain if not provided)
+     */
+    access_key_id?: string;
+    /**
+     * AWS Secret Access Key (optional)
+     */
+    secret_access_key?: string;
+    /**
+     * Custom endpoint URL for testing (e.g., LocalStack)
+     */
+    endpoint_url?: string;
+    /**
+     * Prefix for secret names (e.g., windmill/)
+     */
+    prefix?: string;
 };
 export type SecretMigrationFailure = {
     /**
@@ -1231,6 +1343,15 @@ export type AIConfig = {
         [key: string]: (number);
     };
 };
+export type InstanceAIProviderSummary = {
+    provider: AIProvider;
+    models: Array<(string)>;
+};
+export type InstanceAISummary = {
+    providers: Array<InstanceAIProviderSummary>;
+    default_model?: AIProviderModel;
+    code_completion_model?: AIProviderModel;
+};
 export type Alert = {
     name: string;
     tags_to_monitor: Array<(string)>;
@@ -1304,12 +1425,22 @@ export type Script = {
     priority?: number;
     restart_unless_cancelled?: boolean;
     timeout?: number;
-    delete_after_use?: boolean;
+    /**
+     * If set, delete the job's args, result and logs after this many seconds following job completion
+     */
+    delete_after_secs?: number;
     visible_to_runner_only?: boolean;
-    no_main_func: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor: boolean;
     on_behalf_of_email?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
+    labels?: Array<(string)>;
 };
 export type NewScript = {
     path: string;
@@ -1336,7 +1467,10 @@ export type NewScript = {
     priority?: number;
     restart_unless_cancelled?: boolean;
     timeout?: number;
-    delete_after_use?: boolean;
+    /**
+     * If set, delete the job's args, result and logs after this many seconds following job completion
+     */
+    delete_after_secs?: number;
     deployment_message?: string;
     concurrency_key?: string;
     debounce_key?: string;
@@ -1345,7 +1479,7 @@ export type NewScript = {
     max_total_debouncing_time?: number;
     max_total_debounces_amount?: number;
     visible_to_runner_only?: boolean;
-    no_main_func?: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor?: boolean;
     on_behalf_of_email?: string;
@@ -1359,6 +1493,13 @@ export type NewScript = {
         access_type?: 'r' | 'w' | 'rw';
         alt_access_type?: 'r' | 'w' | 'rw';
     }>;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
+    labels?: Array<(string)>;
 };
 export type NewScriptWithDraft = NewScript & {
     draft?: NewScript;
@@ -1649,6 +1790,7 @@ export type User = {
     folders: Array<(string)>;
     folders_owners: Array<(string)>;
     added_via?: (UserSource) | null;
+    is_service_account?: boolean;
 };
 export type UserSource = {
     /**
@@ -1680,6 +1822,109 @@ export type EditWorkspaceUser = {
     operator?: boolean;
     disabled?: boolean;
 };
+export type OffboardAffectedPaths = {
+    scripts?: Array<(string)>;
+    flows?: Array<(string)>;
+    apps?: Array<(string)>;
+    resources?: Array<(string)>;
+    variables?: Array<(string)>;
+    schedules?: Array<(string)>;
+    triggers?: {
+        [key: string]: Array<(string)>;
+    };
+};
+export type OffboardPreview = {
+    /**
+     * Objects under u/{username}/ that will be reassigned
+     */
+    owned: OffboardAffectedPaths;
+    /**
+     * Objects not under the user's path but that execute on behalf of this user (permissioned_as/on_behalf_of will be updated)
+     */
+    executing_on_behalf: OffboardAffectedPaths;
+    /**
+     * Scripts/flows/apps/resources whose content or value references this user's paths (may break after reassignment)
+     */
+    referencing: OffboardAffectedPaths;
+    /**
+     * Tokens owned by this user (will be deleted)
+     */
+    tokens: Array<OffboardTokenInfo>;
+    /**
+     * HTTP triggers under the user's path (webhook URLs will change)
+     */
+    http_triggers: number;
+    /**
+     * Email triggers under the user's path (email addresses will change)
+     */
+    email_triggers: number;
+};
+export type OffboardTokenInfo = {
+    label: string;
+    scopes: Array<(string)>;
+    expiration?: string;
+};
+export type OffboardRequest = {
+    /**
+     * Target for reassignment: 'u/{username}' or 'f/{folder}'
+     */
+    reassign_to: string;
+    /**
+     * Required when reassign_to is a folder. The username whose identity will be used as permissioned_as for schedules and triggers.
+     */
+    new_on_behalf_of_user?: string;
+    /**
+     * Whether to also remove the user from the workspace
+     */
+    delete_user?: boolean;
+};
+export type OffboardResponse = {
+    /**
+     * List of path conflicts that block the offboarding. Empty on success.
+     */
+    conflicts?: Array<(string)>;
+    summary?: OffboardSummary;
+};
+export type OffboardSummary = {
+    scripts_reassigned: number;
+    flows_reassigned: number;
+    apps_reassigned: number;
+    resources_reassigned: number;
+    variables_reassigned: number;
+    schedules_reassigned: number;
+    triggers_reassigned: number;
+    drafts_deleted: number;
+};
+export type GlobalOffboardPreview = {
+    workspaces: Array<WorkspaceOffboardPreview>;
+};
+export type WorkspaceOffboardPreview = {
+    workspace_id: string;
+    username: string;
+    preview: OffboardPreview;
+};
+export type GlobalOffboardRequest = {
+    /**
+     * Map of workspace_id to reassignment config
+     */
+    reassignments?: {
+        [key: string]: WorkspaceReassignment;
+    };
+    /**
+     * Whether to also remove the user from the instance
+     */
+    delete_user?: boolean;
+};
+export type WorkspaceReassignment = {
+    /**
+     * Target: 'u/{username}' or 'f/{folder}'
+     */
+    reassign_to: string;
+    /**
+     * Required when reassign_to is a folder. Username to use as permissioned_as.
+     */
+    new_on_behalf_of_user?: string;
+};
 export type TruncatedToken = {
     label?: string;
     expiration?: string;
@@ -1689,6 +1934,17 @@ export type TruncatedToken = {
     scopes?: Array<(string)>;
     email?: string;
 };
+export type ExternalJwtToken = {
+    jwt_hash: number;
+    email: string;
+    username: string;
+    is_admin: boolean;
+    is_operator: boolean;
+    workspace_id?: string;
+    label?: string;
+    scopes?: Array<(string)>;
+    last_used_at: string;
+};
 export type NewToken = {
     label?: string;
     expiration?: string;
@@ -1717,6 +1973,7 @@ export type ListableVariable = {
     is_linked?: boolean;
     is_refreshed?: boolean;
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type ContextualVariable = {
     name: string;
@@ -1753,6 +2010,7 @@ export type CreateVariable = {
      * The expiration date of the variable
      */
     expires_at?: string;
+    labels?: Array<(string)>;
 };
 export type EditVariable = {
     /**
@@ -1771,6 +2029,7 @@ export type EditVariable = {
      * The new description of the variable
      */
     description?: string;
+    labels?: Array<(string)>;
 };
 export type AuditLog = {
     workspace_id: string;
@@ -1814,10 +2073,24 @@ export type MainArgSignature = {
         has_default?: boolean;
         default?: unknown;
     }>;
-    no_main_func: boolean | null;
+    auto_kind: string | null;
     has_preprocessor: boolean | null;
 };
-export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb' | 'bunnative';
+export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'rlang' | 'duckdb' | 'bunnative';
+/**
+ * An additional module file associated with a script
+ */
+export type ScriptModule = {
+    /**
+     * The source code content of this module
+     */
+    content: string;
+    language: ScriptLang;
+    /**
+     * Lock file content for this module's dependencies
+     */
+    lock?: string | null;
+};
 export type Preview = {
     /**
      * The code to run
@@ -1838,6 +2111,12 @@ export type Preview = {
     dedicated_worker?: boolean;
     lock?: string;
     flow_path?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
 };
 export type PreviewInline = {
     /**
@@ -1876,6 +2155,7 @@ export type CreateResource = {
      * The resource_type associated with the resource
      */
     resource_type: string;
+    labels?: Array<(string)>;
 };
 export type EditResource = {
     /**
@@ -1891,6 +2171,7 @@ export type EditResource = {
      * The new resource_type to be associated with the resource
      */
     resource_type?: string;
+    labels?: Array<(string)>;
 };
 export type Resource = {
     workspace_id?: string;
@@ -1904,6 +2185,7 @@ export type Resource = {
     };
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ListableResource = {
     workspace_id?: string;
@@ -1922,6 +2204,7 @@ export type ListableResource = {
     account?: number;
     created_by?: string;
     edited_at?: string;
+    labels?: Array<(string)>;
 };
 export type ResourceType = {
     workspace_id?: string;
@@ -1982,6 +2265,10 @@ export type Schedule = {
      * Email of the user who owns this schedule, used for permissioned_as
      */
     email: string;
+    /**
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup')
+     */
+    permissioned_as: string;
     /**
      * Last error message if the schedule failed to trigger
      */
@@ -2046,6 +2333,7 @@ export type Schedule = {
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
     dynamic_skip?: string | null;
+    labels?: Array<(string)>;
 };
 export type ScheduleWJobs = Schedule & {
     jobs?: Array<{
@@ -2142,13 +2430,14 @@ export type NewSchedule = {
      */
     dynamic_skip?: string | null;
     /**
-     * Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.
+     * The user or group this schedule runs as. Used during deployment to preserve the original schedule owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSchedule = {
     /**
@@ -2221,18 +2510,19 @@ export type EditSchedule = {
      */
     dynamic_skip?: string | null;
     /**
-     * Email of the user who the scheduled jobs run as. Used during deployment to preserve the original schedule owner.
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup'). Only admins and wm_deployers can set this via preserve_permissioned_as.
      */
-    email?: string;
+    permissioned_as?: string | null;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * If true and user is admin/wm_deployers, preserve the provided permissioned_as instead of using the deploying user's identity
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean | null;
+    labels?: Array<(string)>;
 };
 /**
  * job trigger kind (schedule, http, websocket...)
  */
-export type JobTriggerKind = 'webhook' | 'default_email' | 'email' | 'schedule' | 'http' | 'websocket' | 'postgres' | 'kafka' | 'nats' | 'mqtt' | 'sqs' | 'gcp' | 'google';
+export type JobTriggerKind = 'webhook' | 'default_email' | 'email' | 'schedule' | 'http' | 'websocket' | 'postgres' | 'kafka' | 'nats' | 'mqtt' | 'sqs' | 'gcp' | 'google' | 'github';
 /**
  * job trigger mode
  */
@@ -2247,9 +2537,9 @@ export type TriggerExtraProperty = {
      */
     script_path: string;
     /**
-     * Email of the user who owns this trigger, used for permissioned_as
+     * The user or group this trigger runs as (permissioned_as)
      */
-    email: string;
+    permissioned_as: string;
     /**
      * Additional permissions for this trigger
      */
@@ -2276,6 +2566,7 @@ export type TriggerExtraProperty = {
      * Trigger mode (enabled/disabled)
      */
     mode: TriggerMode;
+    labels?: Array<(string)>;
 };
 export type AuthenticationMethod = 'none' | 'windmill' | 'api_key' | 'basic_http' | 'custom_script' | 'signature';
 export type RunnableKind = 'script' | 'flow';
@@ -2483,13 +2774,14 @@ export type NewHttpTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditHttpTrigger = {
     /**
@@ -2582,13 +2874,14 @@ export type EditHttpTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type TriggersCount = {
     primary_schedule?: {
@@ -2608,6 +2901,21 @@ export type TriggersCount = {
     sqs_count?: number;
     nextcloud_count?: number;
     google_count?: number;
+    github_count?: number;
+};
+export type WebsocketHeartbeat = {
+    /**
+     * Interval in seconds between heartbeat messages
+     */
+    interval_secs: number;
+    /**
+     * Message to send as heartbeat. Use {{state}} as a placeholder for a value extracted from incoming messages (see state_field).
+     */
+    message: string;
+    /**
+     * Optional. Top-level JSON field to extract from incoming messages. The extracted value replaces {{state}} in the heartbeat message.
+     */
+    state_field?: string;
 };
 export type WebsocketTrigger = TriggerExtraProperty & {
     /**
@@ -2633,6 +2941,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2649,6 +2961,10 @@ export type WebsocketTrigger = TriggerExtraProperty & {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2687,6 +3003,10 @@ export type NewWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2703,6 +3023,10 @@ export type NewWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2716,13 +3040,14 @@ export type NewWebsocketTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditWebsocketTrigger = {
     /**
@@ -2748,6 +3073,10 @@ export type EditWebsocketTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
@@ -2764,6 +3093,10 @@ export type EditWebsocketTrigger = {
      * If true, error results are sent back through the WebSocket
      */
     can_return_error_result: boolean;
+    /**
+     * Optional periodic heartbeat message configuration
+     */
+    heartbeat?: WebsocketHeartbeat | null;
     /**
      * Path to a script or flow to run when the triggered job fails
      */
@@ -2777,13 +3110,14 @@ export type EditWebsocketTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type WebsocketTriggerInitialMessage = {
     raw_message: string;
@@ -2909,13 +3243,14 @@ export type NewMqttTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditMqttTrigger = {
     /**
@@ -2968,13 +3303,14 @@ export type EditMqttTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 /**
  * Delivery mode for messages. 'push' for HTTP push delivery where messages are sent to a webhook endpoint, 'pull' for polling where the trigger actively fetches messages.
@@ -3098,13 +3434,14 @@ export type GcpTriggerData = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type GetAllTopicSubscription = {
     topic_id: string;
@@ -3220,13 +3557,14 @@ export type NewSqsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditSqsTrigger = {
     /**
@@ -3271,13 +3609,14 @@ export type EditSqsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Slot = {
     name?: string;
@@ -3386,13 +3725,14 @@ export type NewPostgresTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditPostgresTrigger = {
     /**
@@ -3437,13 +3777,14 @@ export type EditPostgresTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type KafkaTrigger = TriggerExtraProperty & {
     /**
@@ -3462,6 +3803,10 @@ export type KafkaTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset. 'latest' starts from new messages only, 'earliest' starts from the beginning.
      */
@@ -3524,6 +3869,10 @@ export type NewKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3546,13 +3895,14 @@ export type NewKafkaTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditKafkaTrigger = {
     /**
@@ -3571,6 +3921,10 @@ export type EditKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Logic to apply when evaluating filters. 'and' requires all filters to match, 'or' requires any filter to match.
+     */
+    filter_logic?: 'and' | 'or';
     /**
      * Initial offset behavior when consumer group has no committed offset.
      */
@@ -3604,13 +3958,14 @@ export type EditKafkaTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type NatsTrigger = TriggerExtraProperty & {
     /**
@@ -3705,13 +4060,14 @@ export type NewNatsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditNatsTrigger = {
     /**
@@ -3759,13 +4115,14 @@ export type EditNatsTrigger = {
      */
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EmailTrigger = TriggerExtraProperty & {
     local_part: string;
@@ -3785,13 +4142,14 @@ export type NewEmailTrigger = {
     retry?: Retry;
     mode?: TriggerMode;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type EditEmailTrigger = {
     path: string;
@@ -3803,13 +4161,14 @@ export type EditEmailTrigger = {
     error_handler_args?: ScriptArgs;
     retry?: Retry;
     /**
-     * Email of the user who triggered jobs run as. Used during deployment to preserve the original trigger owner.
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
      */
-    email?: string;
+    permissioned_as?: string;
     /**
-     * When true and the caller is a member of the 'wm_deployers' group, preserves the original email value instead of overwriting it.
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
      */
-    preserve_email?: boolean;
+    preserve_permissioned_as?: boolean;
+    labels?: Array<(string)>;
 };
 export type Group = {
     name: string;
@@ -3823,11 +4182,13 @@ export type InstanceGroup = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: 'superadmin' | 'devops' | null;
 };
 export type InstanceGroupWithWorkspaces = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: 'superadmin' | 'devops' | null;
     workspaces?: Array<WorkspaceInfo>;
 };
 export type WorkspaceInfo = {
@@ -3844,7 +4205,24 @@ export type Folder = {
     summary?: string;
     created_by?: string;
     edited_at?: string;
+    default_permissioned_as?: FolderDefaultPermissionedAs;
 };
+/**
+ * Ordered list of rules applied at create-time when admins or `wm_deployers` members deploy items in this folder. The first rule whose `path_glob` matches the item path (relative to the folder root) wins, and its `permissioned_as` is used as the default.
+ *
+ */
+export type FolderDefaultPermissionedAs = Array<{
+    /**
+     * Glob pattern evaluated against the item path *relative* to the folder root (e.g. "jobs**" matches every item whose full path is `f/<folder>/jobs/...`). Supports `*`, `**`, `?`, `[abc]`, `{a,b}`.
+     *
+     */
+    path_glob: string;
+    /**
+     * Target identity the matched item should be permissioned as. Must be `u/<username>`, `g/<groupname>`, or an email that exists in this workspace.
+     *
+     */
+    permissioned_as: string;
+}>;
 export type WorkerPing = {
     worker: string;
     worker_instance: string;
@@ -3891,6 +4269,16 @@ export type CreateWorkspaceFork = {
     id: string;
     name: string;
     color?: string;
+    forked_datatables?: Array<{
+        /**
+         * Datatable name
+         */
+        name: string;
+        /**
+         * New database name for the fork
+         */
+        new_dbname: string;
+    }>;
 };
 export type Workspace = {
     id: string;
@@ -3934,6 +4322,8 @@ export type GlobalUserInfo = {
     username?: string;
     operator_only?: boolean;
     first_time_user: boolean;
+    role_source: 'manual' | 'instance_group';
+    disabled: boolean;
 };
 export type Flow = OpenFlow & FlowMetadata & {
     lock_error_logs?: string;
@@ -3958,6 +4348,7 @@ export type FlowMetadata = {
     timeout?: number;
     visible_to_runner_only?: boolean;
     on_behalf_of_email?: string;
+    labels?: Array<(string)>;
 };
 export type OpenFlowWPath = OpenFlow & {
     path: string;
@@ -3972,6 +4363,7 @@ export type OpenFlowWPath = OpenFlow & {
      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it.
      */
     preserve_on_behalf_of?: boolean;
+    labels?: Array<(string)>;
 };
 export type FlowPreview = {
     value: FlowValue;
@@ -4021,6 +4413,7 @@ export type ListableApp = {
     edited_at: string;
     execution_mode: 'viewer' | 'publisher' | 'anonymous';
     raw_app?: boolean;
+    labels?: Array<(string)>;
 };
 export type ScopeDefinition = {
     value: string;
@@ -4043,6 +4436,7 @@ export type ListableRawApp = {
     starred?: boolean;
     version: number;
     edited_at: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersion = {
     id: number;
@@ -4061,6 +4455,7 @@ export type AppWithLastVersion = {
     custom_path?: string;
     raw_app: boolean;
     bundle_secret?: string;
+    labels?: Array<(string)>;
 };
 export type AppWithLastVersionWDraft = AppWithLastVersion & {
     draft_only?: boolean;
@@ -4077,10 +4472,9 @@ export type FlowVersion = {
 };
 export type SlackToken = {
     access_token: string;
-    team_id: string;
-    team_name: string;
-    bot: {
-        bot_access_token?: string;
+    team?: {
+        id: string;
+        name: string;
     };
 };
 export type TokenResponse = {
@@ -4133,12 +4527,23 @@ export type DataTableSettings = {
                 resource_type: 'postgresql' | 'instance';
                 resource_path?: string;
             };
-        };
-    };
-};
-export type DataTableSchema = {
-    datatable_name: string;
-    /**
+            /**
+             * Fork origin info with schema snapshot
+             */
+            forked_from?: {
+                /**
+                 * Schema snapshot at fork time
+                 */
+                schema?: {
+                    [key: string]: unknown;
+                };
+            };
+        };
+    };
+};
+export type DataTableSchema = {
+    datatable_name: string;
+    /**
      * Hierarchical schema: schema_name -> table_name -> column_name -> compact_type (e.g. 'int4', 'text?', 'int4?=0')
      */
     schemas: {
@@ -4313,6 +4718,7 @@ export type ExportedInstanceGroup = {
     id?: string;
     scim_display_name?: string;
     external_id?: string;
+    instance_role?: 'superadmin' | 'devops' | null;
 };
 export type JobSearchHit = {
     dancer?: string;
@@ -4436,7 +4842,7 @@ export type WorkspaceItemDiff = {
     /**
      * Type of the item
      */
-    kind: 'script' | 'flow' | 'app' | 'resource' | 'variable' | 'resource_type';
+    kind: 'script' | 'flow' | 'app' | 'raw_app' | 'resource' | 'variable' | 'resource_type';
     /**
      * Path of the item in the workspace
      */
@@ -4625,7 +5031,7 @@ export type ProtectionRuleset = {
  * Configuration of protection restrictions
  */
 export type ProtectionRules = Array<ProtectionRuleKind>;
-export type ProtectionRuleKind = 'DisableDirectDeployment' | 'DisableWorkspaceForking';
+export type ProtectionRuleKind = 'DisableDirectDeployment' | 'DisableWorkspaceForking' | 'RestrictDeployToDeployers';
 /**
  * Groups that can bypass this ruleset
  */
@@ -4634,7 +5040,42 @@ export type RuleBypasserGroups = Array<(string)>;
  * Users that can bypass this ruleset
  */
 export type RuleBypasserUsers = Array<(string)>;
-export type NativeServiceName = 'nextcloud' | 'google';
+export type DeploymentRequestEligibleDeployer = {
+    username: string;
+    email: string;
+    is_admin: boolean;
+};
+export type DeploymentRequestAssignee = {
+    username: string;
+    email: string;
+};
+export type DeploymentRequestComment = {
+    id: number;
+    parent_id?: number | null;
+    author: string;
+    author_email: string;
+    body: string;
+    anchor_kind?: string | null;
+    anchor_path?: string | null;
+    obsolete: boolean;
+    created_at: string;
+};
+export type DeploymentRequest = {
+    id: number;
+    source_workspace_id: string;
+    fork_workspace_id: string;
+    requested_by: string;
+    requested_by_email: string;
+    requested_at: string;
+    assignees: Array<DeploymentRequestAssignee>;
+    comments: Array<DeploymentRequestComment>;
+};
+export type QuotaInfo = {
+    used: number;
+    limit: number;
+    prunable: number;
+};
+export type NativeServiceName = 'nextcloud' | 'google' | 'github';
 /**
  * A native trigger stored in Windmill
  */
@@ -4666,6 +5107,10 @@ export type NativeTrigger = {
      * Error message if the trigger is in an error state
      */
     error?: string | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
 };
 /**
  * Full trigger response containing both Windmill data and external service data
@@ -4698,6 +5143,10 @@ export type NativeTriggerWithExternal = {
      * Error message if the trigger is in an error state
      */
     error?: string | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
     /**
      * Configuration data from the external service
      */
@@ -4760,6 +5209,10 @@ export type NativeTriggerData = {
     service_config: {
         [key: string]: unknown;
     };
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: string | null;
 };
 /**
  * Response returned when a native trigger is created
@@ -4803,6 +5256,12 @@ export type SharedDriveEntry = {
     id: string;
     name: string;
 };
+export type GithubRepoEntry = {
+    full_name: string;
+    name: string;
+    owner: string;
+    private: boolean;
+};
 export type ParameterId = string;
 export type ParameterKey = string;
 export type ParameterWorkspaceId = string;
@@ -5093,6 +5552,7 @@ export type LoginData = {
 export type LoginResponse = string;
 export type LogoutResponse = string;
 export type IsSmtpConfiguredResponse = boolean;
+export type IsPasswordLoginDisabledResponse = boolean;
 export type RequestPasswordResetData = {
     /**
      * email to send password reset link to
@@ -5186,6 +5646,7 @@ export type GlobalUserUpdateData = {
         is_super_admin?: boolean;
         is_devops?: boolean;
         name?: string;
+        disabled?: boolean;
     };
 };
 export type GlobalUserUpdateResponse = string;
@@ -5221,6 +5682,15 @@ export type GlobalUsersOverwriteData = {
 };
 export type GlobalUsersOverwriteResponse = string;
 export type GlobalUsersExportResponse = Array<ExportedUser>;
+export type ListExtJwtTokensData = {
+    /**
+     * only tokens used in the last 30 days
+     */
+    activeOnly?: boolean;
+    page?: number;
+    perPage?: number;
+};
+export type ListExtJwtTokensResponse = Array<ExternalJwtToken>;
 export type SubmitOnboardingDataData = {
     requestBody: {
         touch_point?: string;
@@ -5233,6 +5703,26 @@ export type DeleteUserData = {
     workspace: string;
 };
 export type DeleteUserResponse = string;
+export type OffboardPreviewData = {
+    username: string;
+    workspace: string;
+};
+export type OffboardPreviewResponse = OffboardPreview;
+export type OffboardWorkspaceUserData = {
+    requestBody: OffboardRequest;
+    username: string;
+    workspace: string;
+};
+export type OffboardWorkspaceUserResponse = OffboardResponse;
+export type GlobalOffboardPreviewData = {
+    email: string;
+};
+export type GlobalOffboardPreviewResponse = GlobalOffboardPreview;
+export type OffboardGlobalUserData = {
+    email: string;
+    requestBody: GlobalOffboardRequest;
+};
+export type OffboardGlobalUserResponse = OffboardResponse;
 export type ConvertUserToGroupData = {
     username: string;
     workspace: string;
@@ -5292,6 +5782,20 @@ export type DeclineInviteData = {
     };
 };
 export type DeclineInviteResponse = string;
+export type ImpersonateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type ImpersonateServiceAccountResponse = string;
+export type ExitImpersonationData = {
+    requestBody: {
+        token: string;
+    };
+    workspace: string;
+};
+export type ExitImpersonationResponse = string;
 export type WhoisData = {
     username: string;
     workspace: string;
@@ -5417,6 +5921,22 @@ export type ImportInstallationData = {
     workspace: string;
 };
 export type ImportInstallationResponse = unknown;
+export type GhesInstallationCallbackData = {
+    requestBody: {
+        /**
+         * The GitHub App installation ID from GHES
+         */
+        installation_id: number;
+    };
+    workspace: string;
+};
+export type GhesInstallationCallbackResponse = unknown;
+export type GetGhesConfigResponse = {
+    base_url: string;
+    app_slug: string;
+    client_id: string;
+    app_owner?: string | null;
+};
 export type ListWorkspacesResponse = Array<Workspace>;
 export type IsDomainAllowedResponse = boolean;
 export type ListUserWorkspacesResponse = UserWorkspaceList;
@@ -5512,6 +6032,13 @@ export type AddUserData = {
     workspace: string;
 };
 export type AddUserResponse = string;
+export type CreateServiceAccountData = {
+    requestBody: {
+        username: string;
+    };
+    workspace: string;
+};
+export type CreateServiceAccountResponse = string;
 export type DeleteInviteData = {
     /**
      * WorkspaceInvite
@@ -5683,6 +6210,14 @@ export type GetDependentsData = {
     workspace: string;
 };
 export type GetDependentsResponse = Array<DependencyDependent>;
+export type GetImportsData = {
+    /**
+     * The script path to get imports for
+     */
+    importerPath: string;
+    workspace: string;
+};
+export type GetImportsResponse = Array<(string)>;
 export type GetDependentsAmountsData = {
     /**
      * List of imported paths to get dependents counts for
@@ -5871,7 +6406,20 @@ export type EditCopilotConfigData = {
     requestBody: AIConfig;
     workspace: string;
 };
-export type EditCopilotConfigResponse = string;
+export type EditCopilotConfigResponse = {
+    effective_ai_config: AIConfig;
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+};
+export type GetCopilotSettingsStateData = {
+    workspace: string;
+};
+export type GetCopilotSettingsStateResponse = {
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+};
 export type GetCopilotInfoData = {
     workspace: string;
 };
@@ -5909,7 +6457,11 @@ export type ListDucklakesResponse = Array<(string)>;
 export type ListDataTablesData = {
     workspace: string;
 };
-export type ListDataTablesResponse = Array<(string)>;
+export type ListDataTablesResponse = Array<{
+    name: string;
+    resource_type: 'postgres' | 'instance';
+    resource_path: string;
+}>;
 export type ListDataTableSchemasData = {
     workspace: string;
 };
@@ -5934,6 +6486,109 @@ export type EditDataTableConfigData = {
     workspace: string;
 };
 export type EditDataTableConfigResponse = unknown;
+export type CreatePgDatabaseData = {
+    /**
+     * Create pg database request
+     */
+    requestBody: {
+        /**
+         * Datatable source to determine connection info: 'datatable://name' or '$res:path'
+         */
+        source: string;
+        /**
+         * Name for the new database
+         */
+        target_dbname: string;
+    };
+    workspace: string;
+};
+export type CreatePgDatabaseResponse = string;
+export type DropForkedDatatableDatabasesData = {
+    requestBody: {
+        datatable_names: Array<(string)>;
+    };
+    workspace: string;
+};
+export type DropForkedDatatableDatabasesResponse = Array<(string)>;
+export type ImportPgDatabaseData = {
+    /**
+     * Import pg database request
+     */
+    requestBody: {
+        /**
+         * Source database: 'datatable://name' or '$res:path'
+         */
+        source: string;
+        /**
+         * Target database: 'datatable://name' or '$res:path'
+         */
+        target: string;
+        /**
+         * Override the target database name
+         */
+        target_dbname_override?: string;
+        fork_behavior: 'schema_only' | 'schema_and_data' | 'keep_original';
+    };
+    workspace: string;
+};
+export type ImportPgDatabaseResponse = string;
+export type ExportPgSchemaData = {
+    /**
+     * Export pg schema request
+     */
+    requestBody: {
+        /**
+         * Source database: 'datatable://name' or '$res:path'
+         */
+        source: string;
+    };
+    workspace: string;
+};
+export type ExportPgSchemaResponse = string;
+export type GetDatatableFullSchemaData = {
+    requestBody: {
+        /**
+         * Source datatable, e.g. 'datatable://main'
+         */
+        source: string;
+    };
+    workspace: string;
+};
+export type GetDatatableFullSchemaResponse = {
+    [key: string]: {
+        [key: string]: {
+            name: string;
+            columns: Array<{
+                name: string;
+                datatype: string;
+                primary_key?: boolean;
+                default_value?: string;
+                nullable?: boolean;
+            }>;
+            foreign_keys: Array<{
+                target_table?: string;
+                columns: Array<{
+                    source_column?: string;
+                    target_column?: string;
+                }>;
+                on_delete: string;
+                on_update: string;
+                fk_constraint_name?: string;
+            }>;
+            pk_constraint_name?: string;
+        };
+    };
+};
+export type GetGitSyncEnabledData = {
+    workspace: string;
+};
+export type GetGitSyncEnabledResponse = {
+    enabled?: boolean;
+    reason?: string | null;
+    max_repos?: number | null;
+    user_count?: number | null;
+    max_users?: number | null;
+};
 export type EditWorkspaceGitSyncConfigData = {
     /**
      * Workspace Git sync settings
@@ -6036,6 +6691,7 @@ export type GetWorkspaceDefaultAppData = {
 };
 export type GetWorkspaceDefaultAppResponse = {
     default_app_path?: string;
+    default_app_raw?: boolean;
 };
 export type GetWorkspaceUsageData = {
     workspace: string;
@@ -6056,6 +6712,7 @@ export type GetUsedTriggersResponse = {
     email_used: boolean;
     nextcloud_used: boolean;
     google_used: boolean;
+    github_used: boolean;
 };
 export type ListProtectionRulesData = {
     workspace: string;
@@ -6101,6 +6758,74 @@ export type DeleteProtectionRuleData = {
     workspace: string;
 };
 export type DeleteProtectionRuleResponse = string;
+export type ListDeploymentRequestEligibleDeployersData = {
+    workspace: string;
+};
+export type ListDeploymentRequestEligibleDeployersResponse = Array<DeploymentRequestEligibleDeployer>;
+export type GetOpenDeploymentRequestData = {
+    workspace: string;
+};
+export type GetOpenDeploymentRequestResponse = (DeploymentRequest) | null;
+export type CreateDeploymentRequestData = {
+    requestBody: {
+        /**
+         * Usernames in the parent workspace. Must be admin or wm_deployers.
+         */
+        assignees: Array<(string)>;
+    };
+    workspace: string;
+};
+export type CreateDeploymentRequestResponse = DeploymentRequest;
+export type CancelDeploymentRequestData = {
+    id: number;
+    workspace: string;
+};
+export type CancelDeploymentRequestResponse = string;
+export type CloseDeploymentRequestMergedData = {
+    id: number;
+    workspace: string;
+};
+export type CloseDeploymentRequestMergedResponse = string;
+export type CreateDeploymentRequestCommentData = {
+    id: number;
+    requestBody: {
+        body: string;
+        parent_id?: number | null;
+        anchor_kind?: string | null;
+        anchor_path?: string | null;
+    };
+    workspace: string;
+};
+export type CreateDeploymentRequestCommentResponse = DeploymentRequestComment;
+export type LogAiChatData = {
+    requestBody: {
+        session_id: string;
+        provider: string;
+        model: string;
+        mode: string;
+    };
+    workspace: string;
+};
+export type LogAiChatResponse = void;
+export type GetCloudQuotasData = {
+    workspace: string;
+};
+export type GetCloudQuotasResponse = {
+    scripts: QuotaInfo;
+    flows: QuotaInfo;
+    apps: QuotaInfo;
+    variables: QuotaInfo;
+    resources: QuotaInfo;
+};
+export type PruneVersionsData = {
+    requestBody: {
+        resource_type: 'scripts' | 'flows' | 'apps';
+    };
+    workspace: string;
+};
+export type PruneVersionsResponse = {
+    pruned: number;
+};
 export type RefreshCustomInstanceUserPwdResponse = {
     [key: string]: unknown;
 };
@@ -6117,6 +6842,13 @@ export type SetupCustomInstanceDbData = {
     };
 };
 export type SetupCustomInstanceDbResponse = CustomInstanceDb;
+export type DropCustomInstanceDbData = {
+    /**
+     * The name of the database to drop
+     */
+    name: string;
+};
+export type DropCustomInstanceDbResponse = string;
 export type GetGlobalData = {
     key: string;
 };
@@ -6131,6 +6863,7 @@ export type SetGlobalData = {
     };
 };
 export type SetGlobalResponse = string;
+export type GetRuffConfigResponse = string;
 export type GetLocalResponse = unknown;
 export type TestSmtpData = {
     /**
@@ -6202,8 +6935,48 @@ export type TestObjectStorageConfigData = {
     };
 };
 export type TestObjectStorageConfigResponse = string;
+export type GetObjectStorageUsageResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    current_prefix?: string | null;
+    scanned_objects: number;
+    folders: Array<{
+        prefix: string;
+        size: number;
+        partial?: boolean;
+    }>;
+    error?: string | null;
+} | null;
+export type ComputeObjectStorageUsageResponse = string;
+export type RunLogCleanupResponse = string;
+export type GetLogCleanupStatusResponse = {
+    running: boolean;
+    started_at: string;
+    finished_at?: string | null;
+    phase: string;
+    total_service: number;
+    processed_service: number;
+    total_jobs: number;
+    processed_jobs: number;
+    s3_deleted: number;
+    orphans_scanned: number;
+    orphans_deleted: number;
+    errors: number;
+    last_error?: string | null;
+} | null;
 export type SendStatsResponse = string;
-export type GetStatsResponse = string;
+export type RestartWorkerGroupData = {
+    /**
+     * the name of the worker group to restart
+     */
+    workerGroup: string;
+};
+export type RestartWorkerGroupResponse = string;
+export type GetStatsResponse = {
+    signature?: string;
+    data?: string;
+};
 export type GetLatestKeyRenewalAttemptResponse = {
     result: string;
     attempted_at: string;
@@ -6264,6 +7037,39 @@ export type MigrateSecretsToDatabaseData = {
     requestBody: VaultSettings;
 };
 export type MigrateSecretsToDatabaseResponse = SecretMigrationReport;
+export type TestAzureKvBackendData = {
+    /**
+     * Azure Key Vault settings to test
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type TestAzureKvBackendResponse = string;
+export type MigrateSecretsToAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration target
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsToAzureKvResponse = SecretMigrationReport;
+export type MigrateSecretsFromAzureKvData = {
+    /**
+     * Azure Key Vault settings for migration source
+     */
+    requestBody: AzureKeyVaultSettings;
+};
+export type MigrateSecretsFromAzureKvResponse = SecretMigrationReport;
+export type TestAwsSmBackendData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type TestAwsSmBackendResponse = string;
+export type MigrateSecretsToAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsToAwsSmResponse = SecretMigrationReport;
+export type MigrateSecretsFromAwsSmData = {
+    requestBody: AwsSecretsManagerSettings;
+};
+export type MigrateSecretsFromAwsSmResponse = SecretMigrationReport;
 export type GetSecondaryStorageNamesData = {
     /**
      * If true, include "_default_" in the list if primary workspace storage is set
@@ -6422,6 +7228,10 @@ export type ListVariableData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -6509,6 +7319,10 @@ export type CreateAccountData = {
          * MCP server URL for MCP OAuth token refresh
          */
         mcp_server_url?: string;
+        /**
+         * OAuth scopes to use for token refresh. Overrides instance-level scopes.
+         */
+        scopes?: Array<(string)>;
     };
     workspace: string;
 };
@@ -6701,6 +7515,10 @@ export type ListResourceData = {
      * pattern match filter for description field (case-insensitive)
      */
     description?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -6937,6 +7755,10 @@ export type ListFlowsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7168,6 +7990,10 @@ export type ListAppsData = {
      *
      */
     includeDraftOnly?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -7219,6 +8045,7 @@ export type CreateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7240,6 +8067,7 @@ export type CreateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7342,6 +8170,7 @@ export type UpdateAppData = {
          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
          */
         preserve_on_behalf_of?: boolean;
+        labels?: Array<(string)>;
     };
     workspace: string;
 };
@@ -7362,6 +8191,7 @@ export type UpdateAppRawData = {
              * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
              */
             preserve_on_behalf_of?: boolean;
+            labels?: Array<(string)>;
         };
         js?: string;
         css?: string;
@@ -7566,6 +8396,10 @@ export type ListScriptsData = {
      *
      */
     kinds?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * Filter to only include scripts written in the given languages.
      * Accepts multiple values as a comma-separated list.
@@ -7743,6 +8577,14 @@ export type UpdateScriptHistoryData = {
     workspace: string;
 };
 export type UpdateScriptHistoryResponse = string;
+export type ListDedicatedWithDepsData = {
+    workspace: string;
+};
+export type ListDedicatedWithDepsResponse = Array<{
+    path: string;
+    language: 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'graphql' | 'nativets' | 'bun' | 'bunnative' | 'php' | 'rust' | 'ansible' | 'csharp' | 'oracledb' | 'duckdb' | 'java' | 'ruby';
+    workspace_dep_names: Array<(string)>;
+}>;
 export type RawScriptByPathData = {
     path: string;
     workspace: string;
@@ -7780,40 +8622,99 @@ export type GetScriptDeploymentStatusResponse = {
     lock_error_logs?: string;
     job_id?: string;
 };
-export type CreateDraftData = {
-    requestBody: {
-        path: string;
-        typ: 'flow' | 'script' | 'app';
-        value?: unknown;
-    };
-    workspace: string;
-};
-export type CreateDraftResponse = string;
-export type DeleteDraftData = {
-    kind: 'script' | 'flow' | 'app';
+export type GetCiTestResultsData = {
+    kind: 'script' | 'flow' | 'resource';
     path: string;
     workspace: string;
 };
-export type DeleteDraftResponse = string;
-export type GetCustomTagsData = {
-    showWorkspaceRestriction?: boolean;
-};
-export type GetCustomTagsResponse = Array<(string)>;
-export type GetCustomTagsForWorkspaceData = {
+export type GetCiTestResultsResponse = Array<CiTestResult>;
+export type GetCiTestResultsBatchData = {
+    requestBody: {
+        items: Array<{
+            path: string;
+            kind: 'script' | 'flow' | 'resource';
+        }>;
+    };
     workspace: string;
 };
-export type GetCustomTagsForWorkspaceResponse = Array<(string)>;
-export type GeDefaultTagsResponse = Array<(string)>;
-export type IsDefaultTagsPerWorkspaceResponse = boolean;
-export type ListWorkersData = {
+export type GetCiTestResultsBatchResponse = {
+    [key: string]: Array<CiTestResult>;
+};
+export type StoreRawScriptTempData = {
     /**
-     * which page to return (start at 1, default 1)
+     * script content to store
      */
-    page?: number;
+    requestBody: string;
+    workspace: string;
+};
+export type StoreRawScriptTempResponse = string;
+export type DiffRawScriptsWithDeployedData = {
     /**
-     * number of items to return for a given page (default 30, max 100)
+     * scripts and workspace deps to diff against deployed versions
      */
-    perPage?: number;
+    requestBody: {
+        /**
+         * map of script path to SHA256 content hash
+         */
+        scripts: {
+            [key: string]: (string);
+        };
+        /**
+         * workspace dependencies to diff
+         */
+        workspace_deps?: Array<{
+            /**
+             * CLI path (e.g. dependencies/package.json)
+             */
+            path: string;
+            language: ScriptLang;
+            /**
+             * named workspace dependency (null for default)
+             */
+            name?: string;
+            /**
+             * SHA256 content hash
+             */
+            hash: string;
+        }>;
+    };
+    workspace: string;
+};
+export type DiffRawScriptsWithDeployedResponse = Array<(string)>;
+export type CreateDraftData = {
+    requestBody: {
+        path: string;
+        typ: 'flow' | 'script' | 'app';
+        value?: unknown;
+    };
+    workspace: string;
+};
+export type CreateDraftResponse = string;
+export type DeleteDraftData = {
+    kind: 'script' | 'flow' | 'app';
+    path: string;
+    workspace: string;
+};
+export type DeleteDraftResponse = string;
+export type GetCustomTagsData = {
+    showWorkspaceRestriction?: boolean;
+};
+export type GetCustomTagsResponse = Array<(string)>;
+export type GetCustomTagsForWorkspaceData = {
+    workspace: string;
+};
+export type GetCustomTagsForWorkspaceResponse = Array<(string)>;
+export type GeDefaultTagsResponse = Array<(string)>;
+export type IsDefaultTagsPerWorkspaceResponse = boolean;
+export type ListWorkersData = {
+    /**
+     * which page to return (start at 1, default 1)
+     */
+    page?: number;
+    /**
+     * number of items to return for a given page (default 30, max 100)
+     */
+    perPage?: number;
     /**
      * number of seconds the worker must have had a last ping more recent of (default to 300)
      */
@@ -9483,6 +10384,11 @@ export type GetJobLogsData = {
     workspace: string;
 };
 export type GetJobLogsResponse = string;
+export type GetFlowAllLogsData = {
+    id: string;
+    workspace: string;
+};
+export type GetFlowAllLogsResponse = string;
 export type GetCompletedJobLogsTailData = {
     id: string;
     workspace: string;
@@ -9523,6 +10429,7 @@ export type GetJobUpdatesResponse = {
     workflow_as_code_status?: WorkflowStatus;
 };
 export type GetJobUpdatesSseData = {
+    fast?: boolean;
     getProgress?: boolean;
     id: string;
     logOffset?: number;
@@ -9680,6 +10587,65 @@ export type GetTeamsApprovalPayloadData = {
     workspace: string;
 };
 export type GetTeamsApprovalPayloadResponse = unknown;
+export type ResumeSuspendedData = {
+    jobId: string;
+    requestBody: {
+        /**
+         * payload to send to the resumed job
+         */
+        payload?: unknown;
+        /**
+         * approval token for unauthenticated access
+         */
+        approval_token?: string;
+        /**
+         * whether to approve (true) or cancel (false) the job
+         */
+        approved?: boolean;
+    };
+    workspace: string;
+};
+export type ResumeSuspendedResponse = string;
+export type GetApprovalInfoData = {
+    jobId: string;
+    /**
+     * approval token for unauthenticated access
+     */
+    token?: string;
+    workspace: string;
+};
+export type GetApprovalInfoResponse = {
+    flow_id: string;
+    /**
+     * form schema for the approval step
+     */
+    form_schema?: unknown;
+    /**
+     * description of the approval step
+     */
+    description?: unknown;
+    approval_conditions?: {
+        user_auth_required: boolean;
+        user_groups_required: Array<(string)>;
+        self_approval_disabled: boolean;
+    };
+    /**
+     * whether the current user/token holder can approve
+     */
+    can_approve: boolean;
+    /**
+     * whether user authentication is required to approve
+     */
+    user_auth_required: boolean;
+    /**
+     * whether to hide the cancel button in the UI
+     */
+    hide_cancel?: boolean;
+    approvers: Array<{
+        resume_id: number;
+        approver: string;
+    }>;
+};
 export type ResumeSuspendedJobGetData = {
     approver?: string;
     id: string;
@@ -9928,11 +10894,21 @@ export type ListConversationMessagesData = {
     workspace: string;
 };
 export type ListConversationMessagesResponse = Array<FlowConversationMessage>;
+export type ListPathAutocompletePathsData = {
+    workspace: string;
+};
+export type ListPathAutocompletePathsResponse = {
+    paths: Array<(string)>;
+};
 export type ListRawAppsData = {
     /**
      * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * order by desc order (default true)
      */
@@ -10075,6 +11051,10 @@ export type ListSchedulesData = {
      * filter schedules by whether they target a flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10185,6 +11165,10 @@ export type GetHttpTriggerData = {
 export type GetHttpTriggerResponse = HttpTrigger;
 export type ListHttpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10256,6 +11240,10 @@ export type GetWebsocketTriggerData = {
 export type GetWebsocketTriggerResponse = WebsocketTrigger;
 export type ListWebsocketTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10329,6 +11317,10 @@ export type GetKafkaTriggerData = {
 export type GetKafkaTriggerResponse = KafkaTrigger;
 export type ListKafkaTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10420,6 +11412,10 @@ export type GetNatsTriggerData = {
 export type GetNatsTriggerResponse = NatsTrigger;
 export type ListNatsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10493,6 +11489,10 @@ export type GetSqsTriggerData = {
 export type GetSqsTriggerResponse = SqsTrigger;
 export type ListSqsTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10642,6 +11642,10 @@ export type ListNativeTriggersData = {
      * filter by is_flow
      */
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10704,6 +11708,10 @@ export type ListGoogleSharedDrivesData = {
     workspace: string;
 };
 export type ListGoogleSharedDrivesResponse = Array<SharedDriveEntry>;
+export type ListGithubReposData = {
+    workspace: string;
+};
+export type ListGithubReposResponse = Array<GithubRepoEntry>;
 export type NativeTriggerWebhookData = {
     /**
      * The internal database ID of the trigger
@@ -10748,6 +11756,10 @@ export type GetMqttTriggerData = {
 export type GetMqttTriggerResponse = MqttTrigger;
 export type ListMqttTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -10821,6 +11833,10 @@ export type GetGcpTriggerData = {
 export type GetGcpTriggerResponse = GcpTrigger;
 export type ListGcpTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11012,6 +12028,10 @@ export type GetPostgresTriggerData = {
 export type GetPostgresTriggerResponse = PostgresTrigger;
 export type ListPostgresTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11083,6 +12103,10 @@ export type GetEmailTriggerData = {
 export type GetEmailTriggerResponse = EmailTrigger;
 export type ListEmailTriggersData = {
     isFlow?: boolean;
+    /**
+     * Filter by label
+     */
+    label?: string;
     /**
      * which page to return (start at 1, default 1)
      */
@@ -11129,7 +12153,7 @@ export type ListInstanceGroupsWithWorkspacesResponse = Array<InstanceGroupWithWo
 export type GetInstanceGroupData = {
     name: string;
 };
-export type GetInstanceGroupResponse = InstanceGroup;
+export type GetInstanceGroupResponse = InstanceGroupWithWorkspaces;
 export type CreateInstanceGroupData = {
     /**
      * create instance group
@@ -11147,6 +12171,10 @@ export type UpdateInstanceGroupData = {
      */
     requestBody: {
         new_summary: string;
+        /**
+         * Instance-level role for group members. 'superadmin', 'devops', 'user' or empty to clear.
+         */
+        instance_role?: string | null;
     };
 };
 export type UpdateInstanceGroupResponse = string;
@@ -11304,6 +12332,7 @@ export type CreateFolderData = {
         summary?: string;
         owners?: Array<(string)>;
         extra_perms?: unknown;
+        default_permissioned_as?: FolderDefaultPermissionedAs;
     };
     workspace: string;
 };
@@ -11317,6 +12346,7 @@ export type UpdateFolderData = {
         summary?: string;
         owners?: Array<(string)>;
         extra_perms?: unknown;
+        default_permissioned_as?: FolderDefaultPermissionedAs;
     };
     workspace: string;
 };
@@ -11425,6 +12455,17 @@ export type ListAutoscalingEventsData = {
 export type ListAutoscalingEventsResponse = Array<AutoscalingEvent>;
 export type NativeKubernetesAutoscalingHealthcheckResponse = unknown;
 export type ListAvailablePythonVersionsResponse = Array<(string)>;
+export type ListAllWorkspaceDependenciesResponse = Array<{
+    workspace_id: string;
+    name?: string;
+    language: ScriptLang;
+}>;
+export type ListAllDedicatedWithDepsResponse = Array<{
+    workspace_id: string;
+    path: string;
+    language: ScriptLang;
+    workspace_dep_names: Array<(string)>;
+}>;
 export type CreateAgentTokenData = {
     /**
      * agent token
@@ -12064,6 +13105,10 @@ export type CountSearchLogsIndexResponse = {
         [key: string]: unknown;
     };
 };
+export type GetIndexDiskStorageSizesResponse = {
+    job_index_disk_size_bytes?: number | null;
+    log_index_disk_size_bytes?: number | null;
+};
 export type ClearIndexData = {
     idxName: 'JobIndex' | 'ServiceLogIndex';
 };
@@ -12483,6 +13528,16 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/auth/is_password_login_disabled': {
+        get: {
+            res: {
+                /**
+                 * returns true if password login is disabled
+                 */
+                200: boolean;
+            };
+        };
+    };
     '/auth/request_password_reset': {
         post: {
             req: {
@@ -12667,6 +13722,7 @@ export type $OpenApiTs = {
                     is_super_admin?: boolean;
                     is_devops?: boolean;
                     name?: string;
+                    disabled?: boolean;
                 };
             };
             res: {
@@ -12754,6 +13810,24 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/users/ext_jwt_tokens': {
+        get: {
+            req: {
+                /**
+                 * only tokens used in the last 30 days
+                 */
+                activeOnly?: boolean;
+                page?: number;
+                perPage?: number;
+            };
+            res: {
+                /**
+                 * list of external JWT tokens
+                 */
+                200: Array<ExternalJwtToken>;
+            };
+        };
+    };
     '/users/onboarding': {
         post: {
             req: {
@@ -12784,6 +13858,62 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/users/offboard_preview/{username}': {
+        get: {
+            req: {
+                username: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * offboard preview with object counts
+                 */
+                200: OffboardPreview;
+            };
+        };
+    };
+    '/w/{workspace}/users/offboard/{username}': {
+        post: {
+            req: {
+                requestBody: OffboardRequest;
+                username: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * offboard response with conflicts or summary
+                 */
+                200: OffboardResponse;
+            };
+        };
+    };
+    '/users/offboard_preview/{email}': {
+        get: {
+            req: {
+                email: string;
+            };
+            res: {
+                /**
+                 * per-workspace offboard previews
+                 */
+                200: GlobalOffboardPreview;
+            };
+        };
+    };
+    '/users/offboard/{email}': {
+        post: {
+            req: {
+                email: string;
+                requestBody: GlobalOffboardRequest;
+            };
+            res: {
+                /**
+                 * offboard result
+                 */
+                200: OffboardResponse;
+            };
+        };
+    };
     '/w/{workspace}/users/convert_to_group/{username}': {
         post: {
             req: {
@@ -12958,6 +14088,38 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/users/impersonate_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * impersonation token
+                 */
+                201: string;
+            };
+        };
+    };
+    '/w/{workspace}/users/exit_impersonation': {
+        post: {
+            req: {
+                requestBody: {
+                    token: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * exited impersonation
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/users/whois/{username}': {
         get: {
             req: {
@@ -13237,33 +14399,67 @@ export type $OpenApiTs = {
             };
         };
     };
-    '/workspaces/list': {
-        get: {
+    '/w/{workspace}/github_app/ghes_installation_callback': {
+        post: {
+            req: {
+                requestBody: {
+                    /**
+                     * The GitHub App installation ID from GHES
+                     */
+                    installation_id: number;
+                };
+                workspace: string;
+            };
             res: {
                 /**
-                 * all workspaces
+                 * GHES installation registered successfully
                  */
-                200: Array<Workspace>;
+                200: unknown;
             };
         };
     };
-    '/workspaces/allowed_domain_auto_invite': {
+    '/github_app/ghes_config': {
         get: {
             res: {
                 /**
-                 * domain allowed or not
+                 * GHES app configuration
                  */
-                200: boolean;
+                200: {
+                    base_url: string;
+                    app_slug: string;
+                    client_id: string;
+                    app_owner?: string | null;
+                };
             };
         };
     };
-    '/workspaces/users': {
+    '/workspaces/list': {
         get: {
             res: {
                 /**
-                 * workspace with associated username
+                 * all workspaces
                  */
-                200: UserWorkspaceList;
+                200: Array<Workspace>;
+            };
+        };
+    };
+    '/workspaces/allowed_domain_auto_invite': {
+        get: {
+            res: {
+                /**
+                 * domain allowed or not
+                 */
+                200: boolean;
+            };
+        };
+    };
+    '/workspaces/users': {
+        get: {
+            res: {
+                /**
+                 * workspace with associated username
+                 */
+                200: UserWorkspaceList;
             };
         };
     };
@@ -13449,6 +14645,22 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/create_service_account': {
+        post: {
+            req: {
+                requestBody: {
+                    username: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * service account created
+                 */
+                201: string;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/delete_invite': {
         post: {
             req: {
@@ -13807,6 +15019,23 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/get_imports/{importer_path}': {
+        get: {
+            req: {
+                /**
+                 * The script path to get imports for
+                 */
+                importerPath: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of imported script paths
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/get_dependents_amounts': {
         post: {
             req: {
@@ -14141,7 +15370,29 @@ export type $OpenApiTs = {
                 /**
                  * status
                  */
-                200: string;
+                200: {
+                    effective_ai_config: AIConfig;
+                    has_instance_ai_config: boolean;
+                    uses_instance_ai_config: boolean;
+                    instance_ai_summary?: InstanceAISummary;
+                };
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/get_copilot_settings_state': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: {
+                    has_instance_ai_config: boolean;
+                    uses_instance_ai_config: boolean;
+                    instance_ai_summary?: InstanceAISummary;
+                };
             };
         };
     };
@@ -14233,7 +15484,11 @@ export type $OpenApiTs = {
                 /**
                  * status
                  */
-                200: Array<(string)>;
+                200: Array<{
+                    name: string;
+                    resource_type: 'postgres' | 'instance';
+                    resource_path: string;
+                }>;
             };
         };
     };
@@ -14288,6 +15543,163 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/workspaces/create_pg_database': {
+        post: {
+            req: {
+                /**
+                 * Create pg database request
+                 */
+                requestBody: {
+                    /**
+                     * Datatable source to determine connection info: 'datatable://name' or '$res:path'
+                     */
+                    source: string;
+                    /**
+                     * Name for the new database
+                     */
+                    target_dbname: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/drop_forked_datatable_databases': {
+        post: {
+            req: {
+                requestBody: {
+                    datatable_names: Array<(string)>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of errors (empty if all succeeded)
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/import_pg_database': {
+        post: {
+            req: {
+                /**
+                 * Import pg database request
+                 */
+                requestBody: {
+                    /**
+                     * Source database: 'datatable://name' or '$res:path'
+                     */
+                    source: string;
+                    /**
+                     * Target database: 'datatable://name' or '$res:path'
+                     */
+                    target: string;
+                    /**
+                     * Override the target database name
+                     */
+                    target_dbname_override?: string;
+                    fork_behavior: 'schema_only' | 'schema_and_data' | 'keep_original';
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/export_pg_schema': {
+        post: {
+            req: {
+                /**
+                 * Export pg schema request
+                 */
+                requestBody: {
+                    /**
+                     * Source database: 'datatable://name' or '$res:path'
+                     */
+                    source: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * schema dump
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/get_datatable_full_schema': {
+        post: {
+            req: {
+                requestBody: {
+                    /**
+                     * Source datatable, e.g. 'datatable://main'
+                     */
+                    source: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * Schema as { schema_name: { table_name: TableEditorValues } }
+                 */
+                200: {
+                    [key: string]: {
+                        [key: string]: {
+                            name: string;
+                            columns: Array<{
+                                name: string;
+                                datatype: string;
+                                primary_key?: boolean;
+                                default_value?: string;
+                                nullable?: boolean;
+                            }>;
+                            foreign_keys: Array<{
+                                target_table?: string;
+                                columns: Array<{
+                                    source_column?: string;
+                                    target_column?: string;
+                                }>;
+                                on_delete: string;
+                                on_update: string;
+                                fk_constraint_name?: string;
+                            }>;
+                            pk_constraint_name?: string;
+                        };
+                    };
+                };
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/git_sync_enabled': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * Git sync availability status
+                 */
+                200: {
+                    enabled?: boolean;
+                    reason?: string | null;
+                    max_repos?: number | null;
+                    user_count?: number | null;
+                    max_users?: number | null;
+                };
+            };
+        };
+    };
     '/w/{workspace}/workspaces/edit_git_sync_config': {
         post: {
             req: {
@@ -14482,6 +15894,7 @@ export type $OpenApiTs = {
                  */
                 200: {
                     default_app_path?: string;
+                    default_app_raw?: boolean;
                 };
             };
         };
@@ -14520,6 +15933,7 @@ export type $OpenApiTs = {
                     email_used: boolean;
                     nextcloud_used: boolean;
                     google_used: boolean;
+                    github_used: boolean;
                 };
             };
         };
@@ -14612,6 +16026,167 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/deployment_request/eligible_deployers': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of eligible deployers
+                 */
+                200: Array<DeploymentRequestEligibleDeployer>;
+            };
+        };
+    };
+    '/w/{workspace}/deployment_request/open': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * the open request or null if none exists
+                 */
+                200: (DeploymentRequest) | null;
+            };
+        };
+    };
+    '/w/{workspace}/deployment_request': {
+        post: {
+            req: {
+                requestBody: {
+                    /**
+                     * Usernames in the parent workspace. Must be admin or wm_deployers.
+                     */
+                    assignees: Array<(string)>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * request created
+                 */
+                200: DeploymentRequest;
+                /**
+                 * invalid assignees
+                 */
+                400: unknown;
+                /**
+                 * a deployment request is already open for this fork
+                 */
+                409: unknown;
+            };
+        };
+    };
+    '/w/{workspace}/deployment_request/{id}/cancel': {
+        post: {
+            req: {
+                id: number;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * cancelled
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/deployment_request/{id}/close_merged': {
+        post: {
+            req: {
+                id: number;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * closed
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/deployment_request/{id}/comment': {
+        post: {
+            req: {
+                id: number;
+                requestBody: {
+                    body: string;
+                    parent_id?: number | null;
+                    anchor_kind?: string | null;
+                    anchor_path?: string | null;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * comment created
+                 */
+                200: DeploymentRequestComment;
+                /**
+                 * invalid input or request closed
+                 */
+                400: unknown;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/log_chat': {
+        post: {
+            req: {
+                requestBody: {
+                    session_id: string;
+                    provider: string;
+                    model: string;
+                    mode: string;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * logged
+                 */
+                204: void;
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/cloud_quotas': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * cloud quota usage and limits
+                 */
+                200: {
+                    scripts: QuotaInfo;
+                    flows: QuotaInfo;
+                    apps: QuotaInfo;
+                    variables: QuotaInfo;
+                    resources: QuotaInfo;
+                };
+            };
+        };
+    };
+    '/w/{workspace}/workspaces/prune_versions': {
+        post: {
+            req: {
+                requestBody: {
+                    resource_type: 'scripts' | 'flows' | 'apps';
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * number of pruned versions
+                 */
+                200: {
+                    pruned: number;
+                };
+            };
+        };
+    };
     '/settings/refresh_custom_instance_user_pwd': {
         post: {
             res: {
@@ -14655,6 +16230,22 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/drop_custom_instance_pg_database/{name}': {
+        post: {
+            req: {
+                /**
+                 * The name of the database to drop
+                 */
+                name: string;
+            };
+            res: {
+                /**
+                 * status
+                 */
+                200: string;
+            };
+        };
+    };
     '/settings/global/{key}': {
         get: {
             req: {
@@ -14685,6 +16276,16 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings_u/ruff_config': {
+        get: {
+            res: {
+                /**
+                 * ruff.toml content (may be empty)
+                 */
+                200: string;
+            };
+        };
+    };
     '/settings/local': {
         get: {
             res: {
@@ -14828,6 +16429,70 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/object_storage_usage': {
+        get: {
+            res: {
+                /**
+                 * current or last storage-usage computation state
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    current_prefix?: string | null;
+                    scanned_objects: number;
+                    folders: Array<{
+                        prefix: string;
+                        size: number;
+                        partial?: boolean;
+                    }>;
+                    error?: string | null;
+                } | null;
+            };
+        };
+        post: {
+            res: {
+                /**
+                 * computation started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/run_log_cleanup': {
+        post: {
+            res: {
+                /**
+                 * cleanup started
+                 */
+                202: string;
+            };
+        };
+    };
+    '/settings/log_cleanup_status': {
+        get: {
+            res: {
+                /**
+                 * current or last log cleanup status (null if never run)
+                 */
+                200: {
+                    running: boolean;
+                    started_at: string;
+                    finished_at?: string | null;
+                    phase: string;
+                    total_service: number;
+                    processed_service: number;
+                    total_jobs: number;
+                    processed_jobs: number;
+                    s3_deleted: number;
+                    orphans_scanned: number;
+                    orphans_deleted: number;
+                    errors: number;
+                    last_error?: string | null;
+                } | null;
+            };
+        };
+    };
     '/settings/send_stats': {
         post: {
             res: {
@@ -14838,13 +16503,32 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/restart_worker_group/{worker_group}': {
+        post: {
+            req: {
+                /**
+                 * the name of the worker group to restart
+                 */
+                workerGroup: string;
+            };
+            res: {
+                /**
+                 * restart signal sent
+                 */
+                200: string;
+            };
+        };
+    };
     '/settings/get_stats': {
         get: {
             res: {
                 /**
-                 * base64-encoded encrypted telemetry blob
+                 * telemetry stats JSON with signature
                  */
-                200: string;
+                200: {
+                    signature?: string;
+                    data?: string;
+                };
             };
         };
     };
@@ -15014,6 +16698,93 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/settings/test_azure_kv_backend': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings to test
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * connection successful
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_azure_kv': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings for migration target
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/migrate_secrets_from_azure_kv': {
+        post: {
+            req: {
+                /**
+                 * Azure Key Vault settings for migration source
+                 */
+                requestBody: AzureKeyVaultSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/test_aws_sm_backend': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * connection test result
+                 */
+                200: string;
+            };
+        };
+    };
+    '/settings/migrate_secrets_to_aws_sm': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
+    '/settings/migrate_secrets_from_aws_sm': {
+        post: {
+            req: {
+                requestBody: AwsSecretsManagerSettings;
+            };
+            res: {
+                /**
+                 * migration report
+                 */
+                200: SecretMigrationReport;
+            };
+        };
+    };
     '/w/{workspace}/workspaces/get_secondary_storage_names': {
         get: {
             req: {
@@ -15317,7 +17088,11 @@ export type $OpenApiTs = {
                 /**
                  * pattern match filter for description field (case-insensitive)
                  */
-                description?: string;
+                description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -15450,6 +17225,10 @@ export type $OpenApiTs = {
                      * MCP server URL for MCP OAuth token refresh
                      */
                     mcp_server_url?: string;
+                    /**
+                     * OAuth scopes to use for token refresh. Overrides instance-level scopes.
+                     */
+                    scopes?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -15822,6 +17601,10 @@ export type $OpenApiTs = {
                  * pattern match filter for description field (case-insensitive)
                  */
                 description?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -16256,6 +18039,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -16694,6 +18481,10 @@ export type $OpenApiTs = {
                  *
                  */
                 includeDraftOnly?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -16754,6 +18545,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -16784,6 +18576,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17021,6 +18814,7 @@ export type $OpenApiTs = {
                      * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                      */
                     preserve_on_behalf_of?: boolean;
+                    labels?: Array<(string)>;
                 };
                 workspace: string;
             };
@@ -17050,6 +18844,7 @@ export type $OpenApiTs = {
                          * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
                          */
                         preserve_on_behalf_of?: boolean;
+                        labels?: Array<(string)>;
                     };
                     js?: string;
                     css?: string;
@@ -17362,6 +19157,10 @@ export type $OpenApiTs = {
                  *
                  */
                 kinds?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * Filter to only include scripts written in the given languages.
                  * Accepts multiple values as a comma-separated list.
@@ -17690,6 +19489,23 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/scripts/list_dedicated_with_deps': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of dedicated scripts with their workspace dependency names
+                 */
+                200: Array<{
+                    path: string;
+                    language: 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'graphql' | 'nativets' | 'bun' | 'bunnative' | 'php' | 'rust' | 'ansible' | 'csharp' | 'oracledb' | 'duckdb' | 'java' | 'ruby';
+                    workspace_dep_names: Array<(string)>;
+                }>;
+            };
+        };
+    };
     '/w/{workspace}/scripts/raw/p/{path}': {
         get: {
             req: {
@@ -17781,6 +19597,101 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/scripts/ci_test_results/{kind}/{path}': {
+        get: {
+            req: {
+                kind: 'script' | 'flow' | 'resource';
+                path: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * CI test results
+                 */
+                200: Array<CiTestResult>;
+            };
+        };
+    };
+    '/w/{workspace}/scripts/ci_test_results_batch': {
+        post: {
+            req: {
+                requestBody: {
+                    items: Array<{
+                        path: string;
+                        kind: 'script' | 'flow' | 'resource';
+                    }>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * CI test results by item key
+                 */
+                200: {
+                    [key: string]: Array<CiTestResult>;
+                };
+            };
+        };
+    };
+    '/w/{workspace}/scripts/raw_temp/store': {
+        post: {
+            req: {
+                /**
+                 * script content to store
+                 */
+                requestBody: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * hash of stored content
+                 */
+                200: string;
+            };
+        };
+    };
+    '/w/{workspace}/scripts/raw_temp/diff': {
+        post: {
+            req: {
+                /**
+                 * scripts and workspace deps to diff against deployed versions
+                 */
+                requestBody: {
+                    /**
+                     * map of script path to SHA256 content hash
+                     */
+                    scripts: {
+                        [key: string]: (string);
+                    };
+                    /**
+                     * workspace dependencies to diff
+                     */
+                    workspace_deps?: Array<{
+                        /**
+                         * CLI path (e.g. dependencies/package.json)
+                         */
+                        path: string;
+                        language: ScriptLang;
+                        /**
+                         * named workspace dependency (null for default)
+                         */
+                        name?: string;
+                        /**
+                         * SHA256 content hash
+                         */
+                        hash: string;
+                    }>;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of paths that differ from deployed versions
+                 */
+                200: Array<(string)>;
+            };
+        };
+    };
     '/w/{workspace}/drafts/create': {
         post: {
             req: {
@@ -20075,6 +21986,20 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/jobs_u/get_flow_all_logs/{id}': {
+        get: {
+            req: {
+                id: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * concatenated logs of all flow steps
+                 */
+                200: string;
+            };
+        };
+    };
     '/w/{workspace}/jobs_u/get_completed_logs_tail/{id}': {
         get: {
             req: {
@@ -20153,6 +22078,7 @@ export type $OpenApiTs = {
     '/w/{workspace}/jobs_u/getupdate_sse/{id}': {
         get: {
             req: {
+                fast?: boolean;
                 getProgress?: boolean;
                 id: string;
                 logOffset?: number;
@@ -20461,6 +22387,83 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/jobs_u/flow/resume_suspended/{job_id}': {
+        post: {
+            req: {
+                jobId: string;
+                requestBody: {
+                    /**
+                     * payload to send to the resumed job
+                     */
+                    payload?: unknown;
+                    /**
+                     * approval token for unauthenticated access
+                     */
+                    approval_token?: string;
+                    /**
+                     * whether to approve (true) or cancel (false) the job
+                     */
+                    approved?: boolean;
+                };
+                workspace: string;
+            };
+            res: {
+                /**
+                 * job resumed
+                 */
+                201: string;
+            };
+        };
+    };
+    '/w/{workspace}/jobs_u/flow/approval_info/{job_id}': {
+        get: {
+            req: {
+                jobId: string;
+                /**
+                 * approval token for unauthenticated access
+                 */
+                token?: string;
+                workspace: string;
+            };
+            res: {
+                /**
+                 * approval info
+                 */
+                200: {
+                    flow_id: string;
+                    /**
+                     * form schema for the approval step
+                     */
+                    form_schema?: unknown;
+                    /**
+                     * description of the approval step
+                     */
+                    description?: unknown;
+                    approval_conditions?: {
+                        user_auth_required: boolean;
+                        user_groups_required: Array<(string)>;
+                        self_approval_disabled: boolean;
+                    };
+                    /**
+                     * whether the current user/token holder can approve
+                     */
+                    can_approve: boolean;
+                    /**
+                     * whether user authentication is required to approve
+                     */
+                    user_auth_required: boolean;
+                    /**
+                     * whether to hide the cancel button in the UI
+                     */
+                    hide_cancel?: boolean;
+                    approvers: Array<{
+                        resume_id: number;
+                        approver: string;
+                    }>;
+                };
+            };
+        };
+    };
     '/w/{workspace}/jobs_u/resume/{id}/{resume_id}/{signature}': {
         get: {
             req: {
@@ -20811,6 +22814,21 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/path_autocomplete/list_paths': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * deduplicated path list, sorted lexicographically
+                 */
+                200: {
+                    paths: Array<(string)>;
+                };
+            };
+        };
+    };
     '/w/{workspace}/raw_apps/list': {
         get: {
             req: {
@@ -20818,6 +22836,10 @@ export type $OpenApiTs = {
                  * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
                  */
                 createdBy?: string;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * order by desc order (default true)
                  */
@@ -21050,6 +23072,10 @@ export type $OpenApiTs = {
                  * filter schedules by whether they target a flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21250,6 +23276,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21393,6 +23423,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21538,6 +23572,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21719,6 +23757,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -21864,6 +23906,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22157,6 +24203,10 @@ export type $OpenApiTs = {
                  * filter by is_flow
                  */
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22280,6 +24330,19 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/w/{workspace}/native_triggers/github/repos': {
+        get: {
+            req: {
+                workspace: string;
+            };
+            res: {
+                /**
+                 * list of GitHub repositories
+                 */
+                200: Array<GithubRepoEntry>;
+            };
+        };
+    };
     '/native_triggers/{service_name}/w/{workspace_id}/webhook/{internal_id}': {
         post: {
             req: {
@@ -22371,6 +24434,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22516,6 +24583,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -22914,6 +24985,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23057,6 +25132,10 @@ export type $OpenApiTs = {
         get: {
             req: {
                 isFlow?: boolean;
+                /**
+                 * Filter by label
+                 */
+                label?: string;
                 /**
                  * which page to return (start at 1, default 1)
                  */
@@ -23161,7 +25240,7 @@ export type $OpenApiTs = {
                 /**
                  * instance group
                  */
-                200: InstanceGroup;
+                200: InstanceGroupWithWorkspaces;
             };
         };
     };
@@ -23193,6 +25272,10 @@ export type $OpenApiTs = {
                  */
                 requestBody: {
                     new_summary: string;
+                    /**
+                     * Instance-level role for group members. 'superadmin', 'devops', 'user' or empty to clear.
+                     */
+                    instance_role?: string | null;
                 };
             };
             res: {
@@ -23503,6 +25586,7 @@ export type $OpenApiTs = {
                     summary?: string;
                     owners?: Array<(string)>;
                     extra_perms?: unknown;
+                    default_permissioned_as?: FolderDefaultPermissionedAs;
                 };
                 workspace: string;
             };
@@ -23525,6 +25609,7 @@ export type $OpenApiTs = {
                     summary?: string;
                     owners?: Array<(string)>;
                     extra_perms?: unknown;
+                    default_permissioned_as?: FolderDefaultPermissionedAs;
                 };
                 workspace: string;
             };
@@ -23777,6 +25862,35 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/configs/list_all_workspace_dependencies': {
+        get: {
+            res: {
+                /**
+                 * a list of workspace dependency summaries
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    name?: string;
+                    language: ScriptLang;
+                }>;
+            };
+        };
+    };
+    '/configs/list_all_dedicated_with_deps': {
+        get: {
+            res: {
+                /**
+                 * a list of dedicated scripts with workspace dependencies
+                 */
+                200: Array<{
+                    workspace_id: string;
+                    path: string;
+                    language: ScriptLang;
+                    workspace_dep_names: Array<(string)>;
+                }>;
+            };
+        };
+    };
     '/agent_workers/create_agent_token': {
         post: {
             req: {
@@ -24918,6 +27032,19 @@ export type $OpenApiTs = {
             };
         };
     };
+    '/srch/index/storage/disk': {
+        get: {
+            res: {
+                /**
+                 * disk storage sizes for each index
+                 */
+                200: {
+                    job_index_disk_size_bytes?: number | null;
+                    log_index_disk_size_bytes?: number | null;
+                };
+            };
+        };
+    };
     '/indexer/delete/{idx_name}': {
         delete: {
             req: {