windmill-utils-internal 1.3.4 → 1.3.6

package/dist/esm/gen/types.gen.d.ts

@@ -17,6 +17,10 @@ export type OpenFlow = {
     schema?: {
         [key: string]: unknown;
     };
+    /**
+     * The flow will be run with the permissions of the user with this email.
+     */
+    on_behalf_of_email?: string;
 };
 /**
  * The flow structure containing modules and optional preprocessor/failure handlers
@@ -80,10 +84,10 @@ export type FlowValue = {
     cache_ttl?: number;
     cache_ignore_s3_path?: boolean;
     /**
-     * Environment variables available to all steps
+     * Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).
      */
     flow_env?: {
-        [key: string]: (string);
+        [key: string]: unknown;
     };
     /**
      * Execution priority (higher numbers run first)
@@ -101,6 +105,35 @@ export type FlowValue = {
      * Sticky notes attached to the flow
      */
     notes?: Array<FlowNote>;
+    /**
+     * Semantic groups of modules for organizational purposes
+     */
+    groups?: Array<{
+        /**
+         * Display name for this group
+         */
+        summary?: string;
+        /**
+         * Markdown note shown below the group header
+         */
+        note?: string;
+        /**
+         * If true, this group is collapsed by default in the flow editor. UI hint only.
+         */
+        autocollapse?: boolean;
+        /**
+         * ID of the first flow module in this group (topological entry point)
+         */
+        start_id: string;
+        /**
+         * ID of the last flow module in this group (topological exit point)
+         */
+        end_id: string;
+        /**
+         * Color for the group in the flow editor
+         */
+        color?: string;
+    }>;
 };
 /**
  * Retry configuration for failed module executions
@@ -163,9 +196,9 @@ export type StopAfterIf = {
      */
     expr: string;
     /**
-     * Custom error message shown when stopping
+     * Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised.
      */
-    error_message?: string;
+    error_message?: (string) | null;
 };
 /**
  * A single step in a flow. Can be a script, subflow, loop, or branch
@@ -283,6 +316,31 @@ export type FlowModule = {
      * Retry configuration if this step fails
      */
     retry?: Retry;
+    /**
+     * Debounce configuration for this step (EE only)
+     */
+    debouncing?: {
+        /**
+         * Delay in seconds to debounce this step's executions across flow runs
+         */
+        debounce_delay_s?: number;
+        /**
+         * Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>
+         */
+        debounce_key?: string;
+        /**
+         * Array-type arguments to accumulate across debounced executions
+         */
+        debounce_args_to_accumulate?: Array<(string)>;
+        /**
+         * Maximum total time in seconds before forced execution
+         */
+        max_total_debouncing_time?: number;
+        /**
+         * Maximum number of debounces before forced execution
+         */
+        max_total_debounces_amount?: number;
+    };
 };
 /**
  * Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs
@@ -420,7 +478,7 @@ export type RawScript = {
         /**
          * Type of asset
          */
-        kind: 's3object' | 'resource' | 'ducklake' | 'datatable';
+        kind: 's3object' | 'resource' | 'ducklake' | 'datatable' | 'volume';
         /**
          * Access level for this asset
          */
@@ -633,12 +691,12 @@ export type AiAgent = {
          */
         output_schema?: (InputTransform);
         /**
-         * Array of image references for vision-capable models.
+         * Array of file references (images or PDFs) for the AI agent.
          * Format: Array<{ bucket: string, key: string }> - S3 object references
-         * Example: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]
+         * Example: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]
          *
          */
-        user_images?: (InputTransform);
+        user_attachments?: (InputTransform);
         /**
          * Integer. Maximum number of tokens the AI will generate in its response.
          * Range: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.
@@ -834,6 +892,142 @@ export type FlowNote = {
  * Type of note - 'free' for standalone notes, 'group' for notes that group other nodes
  */
 export type type3 = 'free' | 'group';
+/**
+ * Health status response (cached with 5s TTL)
+ */
+export type HealthStatusResponse = {
+    /**
+     * Overall health status
+     */
+    status: 'healthy' | 'degraded' | 'unhealthy';
+    /**
+     * Timestamp when the health check was actually performed (not cache return time)
+     */
+    checked_at: string;
+    /**
+     * Whether the database is reachable
+     */
+    database_healthy: boolean;
+    /**
+     * Number of workers that pinged within last 5 minutes
+     */
+    workers_alive: number;
+};
+/**
+ * Overall health status
+ */
+export type status = 'healthy' | 'degraded' | 'unhealthy';
+/**
+ * Detailed health status response (always fresh, no caching)
+ */
+export type DetailedHealthResponse = {
+    /**
+     * Overall health status
+     */
+    status: 'healthy' | 'degraded' | 'unhealthy';
+    /**
+     * Timestamp when the health check was performed
+     */
+    checked_at: string;
+    /**
+     * Server version (e.g., "EE 1.615.3")
+     */
+    version: string;
+    checks: HealthChecks;
+};
+/**
+ * Detailed health checks
+ */
+export type HealthChecks = {
+    database: DatabaseHealth;
+    /**
+     * Worker status (null if database is unreachable)
+     */
+    workers?: (WorkersHealth) | null;
+    /**
+     * Queue status (null if database is unreachable)
+     */
+    queue?: (QueueHealth) | null;
+    readiness: ReadinessHealth;
+};
+/**
+ * Database health status
+ */
+export type DatabaseHealth = {
+    /**
+     * Whether the database is reachable
+     */
+    healthy: boolean;
+    /**
+     * Database query latency in milliseconds
+     */
+    latency_ms: number;
+    pool: PoolStats;
+};
+/**
+ * Database connection pool statistics
+ */
+export type PoolStats = {
+    /**
+     * Current number of connections in the pool
+     */
+    size: number;
+    /**
+     * Number of idle connections
+     */
+    idle: number;
+    /**
+     * Maximum number of connections allowed
+     */
+    max_connections: number;
+};
+/**
+ * Workers health status
+ */
+export type WorkersHealth = {
+    /**
+     * Whether any workers are active
+     */
+    healthy: boolean;
+    /**
+     * Number of active workers (pinged in last 5 minutes)
+     */
+    active_count: number;
+    /**
+     * List of active worker groups
+     */
+    worker_groups: Array<(string)>;
+    /**
+     * Minimum required worker version
+     */
+    min_version: string;
+    /**
+     * List of active worker versions
+     */
+    versions: Array<(string)>;
+};
+/**
+ * Job queue status
+ */
+export type QueueHealth = {
+    /**
+     * Number of pending jobs in the queue
+     */
+    pending_jobs: number;
+    /**
+     * Number of currently running jobs
+     */
+    running_jobs: number;
+};
+/**
+ * Server readiness status
+ */
+export type ReadinessHealth = {
+    /**
+     * Whether the server is ready to accept requests
+     */
+    healthy: boolean;
+};
 /**
  * Configuration for auto-inviting users to the workspace
  */
@@ -1095,7 +1289,7 @@ export type EndpointTool = {
     } | null;
 };
 export type AIProvider = 'openai' | 'azure_openai' | 'anthropic' | 'mistral' | 'deepseek' | 'googleai' | 'groq' | 'openrouter' | 'togetherai' | 'aws_bedrock' | 'customai';
-export type GitSyncObjectType = 'script' | 'flow' | 'app' | 'folder' | 'resource' | 'variable' | 'secret' | 'resourcetype' | 'schedule' | 'user' | 'group' | 'trigger' | 'settings' | 'key';
+export type GitSyncObjectType = 'script' | 'flow' | 'app' | 'folder' | 'resource' | 'variable' | 'secret' | 'resourcetype' | 'schedule' | 'user' | 'group' | 'trigger' | 'settings' | 'key' | 'workspacedependencies';
 export type AIProviderModel = {
     model: string;
     provider: AIProvider;
@@ -1117,6 +1311,15 @@ export type AIConfig = {
         [key: string]: (number);
     };
 };
+export type InstanceAIProviderSummary = {
+    provider: AIProvider;
+    models: Array<(string)>;
+};
+export type InstanceAISummary = {
+    providers: Array<InstanceAIProviderSummary>;
+    default_model?: AIProviderModel;
+    code_completion_model?: AIProviderModel;
+};
 export type Alert = {
     name: string;
     tags_to_monitor: Array<(string)>;
@@ -1192,17 +1395,23 @@ export type Script = {
     timeout?: number;
     delete_after_use?: boolean;
     visible_to_runner_only?: boolean;
-    no_main_func: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor: boolean;
     on_behalf_of_email?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
 };
 export type kind3 = 'script' | 'failure' | 'trigger' | 'command' | 'approval' | 'preprocessor';
 export type NewScript = {
     path: string;
     parent_hash?: string;
     summary: string;
-    description: string;
+    description?: string;
     content: string;
     schema?: {
         [key: string]: unknown;
@@ -1232,16 +1441,26 @@ export type NewScript = {
     max_total_debouncing_time?: number;
     max_total_debounces_amount?: number;
     visible_to_runner_only?: boolean;
-    no_main_func?: boolean;
+    auto_kind?: string;
     codebase?: string;
     has_preprocessor?: boolean;
     on_behalf_of_email?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it.
+     */
+    preserve_on_behalf_of?: boolean;
     assets?: Array<{
         path: string;
         kind: AssetKind;
         access_type?: 'r' | 'w' | 'rw';
         alt_access_type?: 'r' | 'w' | 'rw';
     }>;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
 };
 export type NewScriptWithDraft = NewScript & {
     draft?: NewScript;
@@ -1706,11 +1925,25 @@ export type MainArgSignature = {
         has_default?: boolean;
         default?: unknown;
     }>;
-    no_main_func: (boolean) | null;
+    auto_kind: (string) | null;
     has_preprocessor: (boolean) | null;
 };
 export type type5 = 'Valid' | 'Invalid';
 export type ScriptLang = 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'oracledb' | 'graphql' | 'nativets' | 'bun' | 'php' | 'rust' | 'ansible' | 'csharp' | 'nu' | 'java' | 'ruby' | 'duckdb' | 'bunnative';
+/**
+ * An additional module file associated with a script
+ */
+export type ScriptModule = {
+    /**
+     * The source code content of this module
+     */
+    content: string;
+    language: ScriptLang;
+    /**
+     * Lock file content for this module's dependencies
+     */
+    lock?: (string) | null;
+};
 export type Preview = {
     /**
      * The code to run
@@ -1730,6 +1963,13 @@ export type Preview = {
     kind?: 'code' | 'identity' | 'http';
     dedicated_worker?: boolean;
     lock?: string;
+    flow_path?: string;
+    /**
+     * Additional script modules keyed by relative file path
+     */
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
 };
 export type kind4 = 'code' | 'identity' | 'http';
 export type PreviewInline = {
@@ -1740,6 +1980,9 @@ export type PreviewInline = {
     args: ScriptArgs;
     language: ScriptLang;
 };
+export type InlineScriptArgs = {
+    args?: ScriptArgs;
+};
 export type WorkflowTask = {
     args: ScriptArgs;
 };
@@ -1821,10 +2064,12 @@ export type ResourceType = {
     created_by?: string;
     edited_at?: string;
     format_extension?: string;
+    is_fileset?: boolean;
 };
 export type EditResourceType = {
     schema?: unknown;
     description?: string;
+    is_fileset?: boolean;
 };
 export type Schedule = {
     /**
@@ -1859,7 +2104,7 @@ export type Schedule = {
      * True if script_path points to a flow, false if it points to a script
      */
     is_flow: boolean;
-    args?: ScriptArgs;
+    args?: (ScriptArgs) | null;
     /**
      * Additional permissions for this schedule
      */
@@ -1870,50 +2115,54 @@ export type Schedule = {
      * Email of the user who owns this schedule, used for permissioned_as
      */
     email: string;
+    /**
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup')
+     */
+    permissioned_as: string;
     /**
      * Last error message if the schedule failed to trigger
      */
-    error?: string;
+    error?: (string) | null;
     /**
      * Path to a script or flow to run when the scheduled job fails
      */
-    on_failure?: string;
+    on_failure?: (string) | null;
     /**
      * Number of consecutive failures before the on_failure handler is triggered (default 1)
      */
-    on_failure_times?: number;
+    on_failure_times?: (number) | null;
     /**
      * If true, trigger on_failure handler only on exactly N failures, not on every failure after N
      */
-    on_failure_exact?: boolean;
-    on_failure_extra_args?: ScriptArgs;
+    on_failure_exact?: (boolean) | null;
+    on_failure_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run when the schedule recovers after failures
      */
-    on_recovery?: string;
+    on_recovery?: (string) | null;
     /**
      * Number of consecutive successes before the on_recovery handler is triggered (default 1)
      */
-    on_recovery_times?: number;
-    on_recovery_extra_args?: ScriptArgs;
+    on_recovery_times?: (number) | null;
+    on_recovery_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run after each successful execution
      */
-    on_success?: string;
-    on_success_extra_args?: ScriptArgs;
+    on_success?: (string) | null;
+    on_success_extra_args?: (ScriptArgs) | null;
     /**
      * If true, the workspace-level error handler will not be triggered for this schedule's failures
      */
     ws_error_handler_muted?: boolean;
-    retry?: Retry;
+    retry?: (Retry) | null;
     /**
      * Short summary describing the purpose of this schedule
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this schedule does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * If true, skip this schedule's execution if the previous run is still in progress (prevents concurrent runs)
      */
@@ -1921,19 +2170,19 @@ export type Schedule = {
     /**
      * Worker tag to route jobs to specific worker groups
      */
-    tag?: string;
+    tag?: (string) | null;
     /**
      * ISO 8601 datetime until which the schedule is paused. Schedule resumes automatically after this time
      */
-    paused_until?: string;
+    paused_until?: (string) | null;
     /**
      * Cron parser version. Use 'v2' for extended syntax with additional features
      */
-    cron_version?: string;
+    cron_version?: (string) | null;
     /**
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
-    dynamic_skip?: string;
+    dynamic_skip?: (string) | null;
 };
 export type ScheduleWJobs = Schedule & {
     jobs?: Array<{
@@ -1964,7 +2213,7 @@ export type NewSchedule = {
      * True if script_path points to a flow, false if it points to a script
      */
     is_flow: boolean;
-    args: ScriptArgs;
+    args: (ScriptArgs) | null;
     /**
      * Whether the schedule is currently active and will trigger jobs
      */
@@ -1972,35 +2221,35 @@ export type NewSchedule = {
     /**
      * Path to a script or flow to run when the scheduled job fails
      */
-    on_failure?: string;
+    on_failure?: (string) | null;
     /**
      * Number of consecutive failures before the on_failure handler is triggered (default 1)
      */
-    on_failure_times?: number;
+    on_failure_times?: (number) | null;
     /**
      * If true, trigger on_failure handler only on exactly N failures, not on every failure after N
      */
-    on_failure_exact?: boolean;
-    on_failure_extra_args?: ScriptArgs;
+    on_failure_exact?: (boolean) | null;
+    on_failure_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run when the schedule recovers after failures
      */
-    on_recovery?: string;
+    on_recovery?: (string) | null;
     /**
      * Number of consecutive successes before the on_recovery handler is triggered (default 1)
      */
-    on_recovery_times?: number;
-    on_recovery_extra_args?: ScriptArgs;
+    on_recovery_times?: (number) | null;
+    on_recovery_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run after each successful execution
      */
-    on_success?: string;
-    on_success_extra_args?: ScriptArgs;
+    on_success?: (string) | null;
+    on_success_extra_args?: (ScriptArgs) | null;
     /**
      * If true, the workspace-level error handler will not be triggered for this schedule's failures
      */
     ws_error_handler_muted?: boolean;
-    retry?: Retry;
+    retry?: (Retry) | null;
     /**
      * If true, skip this schedule's execution if the previous run is still in progress (prevents concurrent runs)
      */
@@ -2008,27 +2257,35 @@ export type NewSchedule = {
     /**
      * Short summary describing the purpose of this schedule
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this schedule does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * Worker tag to route jobs to specific worker groups
      */
-    tag?: string;
+    tag?: (string) | null;
     /**
      * ISO 8601 datetime until which the schedule is paused. Schedule resumes automatically after this time
      */
-    paused_until?: string;
+    paused_until?: (string) | null;
     /**
      * Cron parser version. Use 'v2' for extended syntax with additional features
      */
-    cron_version?: string;
+    cron_version?: (string) | null;
     /**
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
-    dynamic_skip?: string;
+    dynamic_skip?: (string) | null;
+    /**
+     * The user or group this schedule runs as. Used during deployment to preserve the original schedule owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditSchedule = {
     /**
@@ -2039,39 +2296,39 @@ export type EditSchedule = {
      * IANA timezone for the schedule (e.g., 'UTC', 'Europe/Paris', 'America/New_York')
      */
     timezone: string;
-    args: ScriptArgs;
+    args: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run when the scheduled job fails
      */
-    on_failure?: string;
+    on_failure?: (string) | null;
     /**
      * Number of consecutive failures before the on_failure handler is triggered (default 1)
      */
-    on_failure_times?: number;
+    on_failure_times?: (number) | null;
     /**
      * If true, trigger on_failure handler only on exactly N failures, not on every failure after N
      */
-    on_failure_exact?: boolean;
-    on_failure_extra_args?: ScriptArgs;
+    on_failure_exact?: (boolean) | null;
+    on_failure_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run when the schedule recovers after failures
      */
-    on_recovery?: string;
+    on_recovery?: (string) | null;
     /**
      * Number of consecutive successes before the on_recovery handler is triggered (default 1)
      */
-    on_recovery_times?: number;
-    on_recovery_extra_args?: ScriptArgs;
+    on_recovery_times?: (number) | null;
+    on_recovery_extra_args?: (ScriptArgs) | null;
     /**
      * Path to a script or flow to run after each successful execution
      */
-    on_success?: string;
-    on_success_extra_args?: ScriptArgs;
+    on_success?: (string) | null;
+    on_success_extra_args?: (ScriptArgs) | null;
     /**
      * If true, the workspace-level error handler will not be triggered for this schedule's failures
      */
     ws_error_handler_muted?: boolean;
-    retry?: Retry;
+    retry?: (Retry) | null;
     /**
      * If true, skip this schedule's execution if the previous run is still in progress (prevents concurrent runs)
      */
@@ -2079,32 +2336,40 @@ export type EditSchedule = {
     /**
      * Short summary describing the purpose of this schedule
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this schedule does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * Worker tag to route jobs to specific worker groups
      */
-    tag?: string;
+    tag?: (string) | null;
     /**
      * ISO 8601 datetime until which the schedule is paused. Schedule resumes automatically after this time
      */
-    paused_until?: string;
+    paused_until?: (string) | null;
     /**
      * Cron parser version. Use 'v2' for extended syntax with additional features
      */
-    cron_version?: string;
+    cron_version?: (string) | null;
     /**
      * Path to a script that validates scheduled datetimes. Receives scheduled_for datetime and returns boolean to skip (true) or run (false)
      */
-    dynamic_skip?: string;
+    dynamic_skip?: (string) | null;
+    /**
+     * The user or group this schedule runs as (e.g., 'u/admin' or 'g/mygroup'). Only admins and wm_deployers can set this via preserve_permissioned_as.
+     */
+    permissioned_as?: (string) | null;
+    /**
+     * If true and user is admin/wm_deployers, preserve the provided permissioned_as instead of using the deploying user's identity
+     */
+    preserve_permissioned_as?: (boolean) | null;
 };
 /**
  * job trigger kind (schedule, http, websocket...)
  */
-export type JobTriggerKind = 'webhook' | 'default_email' | 'email' | 'schedule' | 'http' | 'websocket' | 'postgres' | 'kafka' | 'nats' | 'mqtt' | 'sqs' | 'gcp';
+export type JobTriggerKind = 'webhook' | 'default_email' | 'email' | 'schedule' | 'http' | 'websocket' | 'postgres' | 'kafka' | 'nats' | 'mqtt' | 'sqs' | 'gcp' | 'google';
 /**
  * job trigger mode
  */
@@ -2119,9 +2384,9 @@ export type TriggerExtraProperty = {
      */
     script_path: string;
     /**
-     * Email of the user who owns this trigger, used for permissioned_as
+     * The user or group this trigger runs as (permissioned_as)
      */
-    email: string;
+    permissioned_as: string;
     /**
      * Additional permissions for this trigger
      */
@@ -2210,7 +2475,7 @@ export type HttpTrigger = TriggerExtraProperty & {
          * Filename for the static asset
          */
         filename?: string;
-    };
+    } | null;
     /**
      * HTTP method (get, post, put, delete, patch) that triggers this endpoint
      */
@@ -2218,15 +2483,15 @@ export type HttpTrigger = TriggerExtraProperty & {
     /**
      * Path to the resource containing authentication configuration (for api_key, basic_http, custom_script, signature methods)
      */
-    authentication_resource_path?: string;
+    authentication_resource_path?: (string) | null;
     /**
      * Short summary describing the purpose of this trigger
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this trigger does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * How the request is handled - 'sync' waits for result, 'async' returns job ID immediately, 'sync_sse' streams results via Server-Sent Events
      */
@@ -2284,11 +2549,11 @@ export type NewHttpTrigger = {
     /**
      * Short summary describing the purpose of this trigger
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this trigger does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * Configuration for serving static assets (s3 bucket, storage path, filename)
      */
@@ -2305,7 +2570,7 @@ export type NewHttpTrigger = {
          * Filename for the static asset
          */
         filename?: string;
-    };
+    } | null;
     /**
      * True if script_path points to a flow, false if it points to a script
      */
@@ -2317,7 +2582,7 @@ export type NewHttpTrigger = {
     /**
      * Path to the resource containing authentication configuration (for api_key, basic_http, custom_script, signature methods)
      */
-    authentication_resource_path?: string;
+    authentication_resource_path?: (string) | null;
     /**
      * Deprecated, use request_type instead
      */
@@ -2355,6 +2620,14 @@ export type NewHttpTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditHttpTrigger = {
     /**
@@ -2372,11 +2645,11 @@ export type EditHttpTrigger = {
     /**
      * Short summary describing the purpose of this trigger
      */
-    summary?: string;
+    summary?: (string) | null;
     /**
      * Detailed description of what this trigger does
      */
-    description?: string;
+    description?: (string) | null;
     /**
      * If true, the route includes the workspace ID in the path
      */
@@ -2397,11 +2670,11 @@ export type EditHttpTrigger = {
          * Filename for the static asset
          */
         filename?: string;
-    };
+    } | null;
     /**
      * Path to the resource containing authentication configuration (for api_key, basic_http, custom_script, signature methods)
      */
-    authentication_resource_path?: string;
+    authentication_resource_path?: (string) | null;
     /**
      * True if script_path points to a flow, false if it points to a script
      */
@@ -2446,6 +2719,14 @@ export type EditHttpTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type TriggersCount = {
     primary_schedule?: {
@@ -2464,6 +2745,7 @@ export type TriggersCount = {
     gcp_count?: number;
     sqs_count?: number;
     nextcloud_count?: number;
+    google_count?: number;
 };
 export type WebsocketTrigger = TriggerExtraProperty & {
     /**
@@ -2492,11 +2774,11 @@ export type WebsocketTrigger = TriggerExtraProperty & {
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
-    initial_messages?: Array<WebsocketTriggerInitialMessage>;
+    initial_messages?: Array<WebsocketTriggerInitialMessage> | null;
     /**
      * Arguments to pass to the script/flow that computes the WebSocket URL
      */
-    url_runnable_args?: ScriptArgs;
+    url_runnable_args?: (ScriptArgs) | null;
     /**
      * If true, the script can return a message to send back through the WebSocket
      */
@@ -2546,11 +2828,11 @@ export type NewWebsocketTrigger = {
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
-    initial_messages?: Array<WebsocketTriggerInitialMessage>;
+    initial_messages?: Array<WebsocketTriggerInitialMessage> | null;
     /**
      * Arguments to pass to the script/flow that computes the WebSocket URL
      */
-    url_runnable_args?: ScriptArgs;
+    url_runnable_args?: (ScriptArgs) | null;
     /**
      * If true, the script can return a message to send back through the WebSocket
      */
@@ -2571,6 +2853,14 @@ export type NewWebsocketTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditWebsocketTrigger = {
     /**
@@ -2599,11 +2889,11 @@ export type EditWebsocketTrigger = {
     /**
      * Messages to send immediately after connecting (can be raw strings or computed by runnables)
      */
-    initial_messages?: Array<WebsocketTriggerInitialMessage>;
+    initial_messages?: Array<WebsocketTriggerInitialMessage> | null;
     /**
      * Arguments to pass to the script/flow that computes the WebSocket URL
      */
-    url_runnable_args?: ScriptArgs;
+    url_runnable_args?: (ScriptArgs) | null;
     /**
      * If true, the script can return a message to send back through the WebSocket
      */
@@ -2624,6 +2914,14 @@ export type EditWebsocketTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type WebsocketTriggerInitialMessage = {
     raw_message: string;
@@ -2660,19 +2958,19 @@ export type MqttTrigger = TriggerExtraProperty & {
     /**
      * MQTT v3 specific configuration (clean_session)
      */
-    v3_config?: MqttV3Config;
+    v3_config?: (MqttV3Config) | null;
     /**
      * MQTT v5 specific configuration (clean_start, topic_alias_maximum, session_expiry_interval)
      */
-    v5_config?: MqttV5Config;
+    v5_config?: (MqttV5Config) | null;
     /**
      * MQTT client ID for this connection
      */
-    client_id?: string;
+    client_id?: (string) | null;
     /**
      * MQTT protocol version ('v3' or 'v5')
      */
-    client_version?: MqttClientVersion;
+    client_version?: (MqttClientVersion) | null;
     /**
      * ID of the server currently handling this trigger (internal)
      */
@@ -2710,19 +3008,19 @@ export type NewMqttTrigger = {
     /**
      * MQTT client ID for this connection
      */
-    client_id?: string;
+    client_id?: (string) | null;
     /**
      * MQTT v3 specific configuration (clean_session)
      */
-    v3_config?: MqttV3Config;
+    v3_config?: (MqttV3Config) | null;
     /**
      * MQTT v5 specific configuration (clean_start, topic_alias_maximum, session_expiry_interval)
      */
-    v5_config?: MqttV5Config;
+    v5_config?: (MqttV5Config) | null;
     /**
      * MQTT protocol version ('v3' or 'v5')
      */
-    client_version?: MqttClientVersion;
+    client_version?: (MqttClientVersion) | null;
     /**
      * The unique path identifier for this trigger
      */
@@ -2748,6 +3046,14 @@ export type NewMqttTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditMqttTrigger = {
     /**
@@ -2761,19 +3067,19 @@ export type EditMqttTrigger = {
     /**
      * MQTT client ID for this connection
      */
-    client_id?: string;
+    client_id?: (string) | null;
     /**
      * MQTT v3 specific configuration (clean_session)
      */
-    v3_config?: MqttV3Config;
+    v3_config?: (MqttV3Config) | null;
     /**
      * MQTT v5 specific configuration (clean_start, topic_alias_maximum, session_expiry_interval)
      */
-    v5_config?: MqttV5Config;
+    v5_config?: (MqttV5Config) | null;
     /**
      * MQTT protocol version ('v3' or 'v5')
      */
-    client_version?: MqttClientVersion;
+    client_version?: (MqttClientVersion) | null;
     /**
      * The unique path identifier for this trigger
      */
@@ -2799,6 +3105,14 @@ export type EditMqttTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 /**
  * Delivery mode for messages. 'push' for HTTP push delivery where messages are sent to a webhook endpoint, 'pull' for polling where the trigger actively fetches messages.
@@ -2838,7 +3152,7 @@ export type GcpTrigger = TriggerExtraProperty & {
      */
     server_id?: string;
     delivery_type: DeliveryType;
-    delivery_config?: PushConfig;
+    delivery_config?: (PushConfig) | null;
     subscription_mode: SubscriptionMode;
     /**
      * Timestamp of last server heartbeat (internal use).
@@ -2887,7 +3201,7 @@ export type GcpTriggerData = {
      */
     base_endpoint?: string;
     delivery_type?: DeliveryType;
-    delivery_config?: PushConfig;
+    delivery_config?: (PushConfig) | null;
     /**
      * The unique path identifier for this trigger.
      */
@@ -2921,6 +3235,14 @@ export type GcpTriggerData = {
      * Retry configuration for failed executions.
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type GetAllTopicSubscription = {
     topic_id: string;
@@ -2945,7 +3267,7 @@ export type SqsTrigger = TriggerExtraProperty & {
     /**
      * Array of SQS message attribute names to include with each message
      */
-    message_attributes?: Array<(string)>;
+    message_attributes?: Array<(string)> | null;
     /**
      * ID of the server currently handling this trigger (internal)
      */
@@ -3009,7 +3331,7 @@ export type NewSqsTrigger = {
     /**
      * Array of SQS message attribute names to include with each message
      */
-    message_attributes?: Array<(string)>;
+    message_attributes?: Array<(string)> | null;
     /**
      * The unique path identifier for this trigger
      */
@@ -3035,6 +3357,14 @@ export type NewSqsTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditSqsTrigger = {
     /**
@@ -3052,7 +3382,7 @@ export type EditSqsTrigger = {
     /**
      * Array of SQS message attribute names to include with each message
      */
-    message_attributes?: Array<(string)>;
+    message_attributes?: Array<(string)> | null;
     /**
      * The unique path identifier for this trigger
      */
@@ -3078,6 +3408,14 @@ export type EditSqsTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type Slot = {
     name?: string;
@@ -3185,6 +3523,14 @@ export type NewPostgresTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditPostgresTrigger = {
     /**
@@ -3228,6 +3574,14 @@ export type EditPostgresTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type KafkaTrigger = TriggerExtraProperty & {
     /**
@@ -3246,6 +3600,14 @@ export type KafkaTrigger = TriggerExtraProperty & {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Initial offset behavior when consumer group has no committed offset. 'latest' starts from new messages only, 'earliest' starts from the beginning.
+     */
+    auto_offset_reset?: 'latest' | 'earliest';
+    /**
+     * When true (default), offsets are committed automatically after receiving each message. When false, you must manually commit offsets using the commit_offsets endpoint.
+     */
+    auto_commit?: boolean;
     /**
      * ID of the server currently handling this trigger (internal)
      */
@@ -3271,6 +3633,10 @@ export type KafkaTrigger = TriggerExtraProperty & {
      */
     retry?: Retry;
 };
+/**
+ * Initial offset behavior when consumer group has no committed offset. 'latest' starts from new messages only, 'earliest' starts from the beginning.
+ */
+export type auto_offset_reset = 'latest' | 'earliest';
 export type NewKafkaTrigger = {
     /**
      * The unique path identifier for this trigger
@@ -3300,6 +3666,14 @@ export type NewKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Initial offset behavior when consumer group has no committed offset.
+     */
+    auto_offset_reset?: 'latest' | 'earliest';
+    /**
+     * When true (default), offsets are committed automatically after receiving each message. When false, you must manually commit offsets using the commit_offsets endpoint.
+     */
+    auto_commit?: boolean;
     mode?: TriggerMode;
     /**
      * Path to a script or flow to run when the triggered job fails
@@ -3313,6 +3687,14 @@ export type NewKafkaTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditKafkaTrigger = {
     /**
@@ -3331,6 +3713,14 @@ export type EditKafkaTrigger = {
         key: string;
         value: unknown;
     }>;
+    /**
+     * Initial offset behavior when consumer group has no committed offset.
+     */
+    auto_offset_reset?: 'latest' | 'earliest';
+    /**
+     * When true (default), offsets are committed automatically after receiving each message. When false, you must manually commit offsets using the commit_offsets endpoint.
+     */
+    auto_commit?: boolean;
     /**
      * The unique path identifier for this trigger
      */
@@ -3355,6 +3745,14 @@ export type EditKafkaTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type NatsTrigger = TriggerExtraProperty & {
     /**
@@ -3368,11 +3766,11 @@ export type NatsTrigger = TriggerExtraProperty & {
     /**
      * JetStream stream name (required when use_jetstream is true)
      */
-    stream_name?: string;
+    stream_name?: (string) | null;
     /**
      * JetStream consumer name (required when use_jetstream is true)
      */
-    consumer_name?: string;
+    consumer_name?: (string) | null;
     /**
      * Array of NATS subjects to subscribe to
      */
@@ -3426,11 +3824,11 @@ export type NewNatsTrigger = {
     /**
      * JetStream stream name (required when use_jetstream is true)
      */
-    stream_name?: string;
+    stream_name?: (string) | null;
     /**
      * JetStream consumer name (required when use_jetstream is true)
      */
-    consumer_name?: string;
+    consumer_name?: (string) | null;
     /**
      * Array of NATS subjects to subscribe to
      */
@@ -3448,6 +3846,14 @@ export type NewNatsTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditNatsTrigger = {
     /**
@@ -3461,11 +3867,11 @@ export type EditNatsTrigger = {
     /**
      * JetStream stream name (required when use_jetstream is true)
      */
-    stream_name?: string;
+    stream_name?: (string) | null;
     /**
      * JetStream consumer name (required when use_jetstream is true)
      */
-    consumer_name?: string;
+    consumer_name?: (string) | null;
     /**
      * Array of NATS subjects to subscribe to
      */
@@ -3494,6 +3900,14 @@ export type EditNatsTrigger = {
      * Retry configuration for failed executions
      */
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EmailTrigger = TriggerExtraProperty & {
     local_part: string;
@@ -3512,6 +3926,14 @@ export type NewEmailTrigger = {
     error_handler_args?: ScriptArgs;
     retry?: Retry;
     mode?: TriggerMode;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type EditEmailTrigger = {
     path: string;
@@ -3522,6 +3944,14 @@ export type EditEmailTrigger = {
     error_handler_path?: string;
     error_handler_args?: ScriptArgs;
     retry?: Retry;
+    /**
+     * The user or group this trigger runs as. Used during deployment to preserve the original trigger owner.
+     */
+    permissioned_as?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original permissioned_as value instead of overwriting it.
+     */
+    preserve_permissioned_as?: boolean;
 };
 export type Group = {
     name: string;
@@ -3535,11 +3965,14 @@ export type InstanceGroup = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: ('superadmin' | 'devops') | null;
 };
+export type instance_role = 'superadmin' | 'devops';
 export type InstanceGroupWithWorkspaces = {
     name: string;
     summary?: string;
     emails?: Array<(string)>;
+    instance_role?: ('superadmin' | 'devops') | null;
     workspaces?: Array<WorkspaceInfo>;
 };
 export type WorkspaceInfo = {
@@ -3578,6 +4011,7 @@ export type WorkerPing = {
     memory_usage?: number;
     wm_memory_usage?: number;
     job_isolation?: string;
+    native_mode?: boolean;
 };
 export type UserWorkspaceList = {
     email: string;
@@ -3646,8 +4080,11 @@ export type GlobalUserInfo = {
     username?: string;
     operator_only?: boolean;
     first_time_user: boolean;
+    role_source: 'manual' | 'instance_group';
+    disabled: boolean;
 };
 export type login_type = 'password' | 'github';
+export type role_source = 'manual' | 'instance_group';
 export type Flow = OpenFlow & FlowMetadata & {
     lock_error_logs?: string;
     version_id?: number;
@@ -3681,6 +4118,10 @@ export type OpenFlowWPath = OpenFlow & {
     timeout?: number;
     visible_to_runner_only?: boolean;
     on_behalf_of_email?: string;
+    /**
+     * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of_email value instead of overwriting it.
+     */
+    preserve_on_behalf_of?: boolean;
 };
 export type FlowPreview = {
     value: FlowValue;
@@ -3762,9 +4203,7 @@ export type AppWithLastVersion = {
     versions: Array<(number)>;
     created_by: string;
     created_at: string;
-    value: {
-        [key: string]: unknown;
-    };
+    value: unknown;
     policy: Policy;
     execution_mode: 'viewer' | 'publisher' | 'anonymous';
     extra_perms: {
@@ -3935,10 +4374,11 @@ export type S3PermissionRule = {
     allow: string;
 };
 export type GitRepositorySettings = {
-    script_path: string;
+    script_path?: string;
     git_repo_resource_path: string;
     use_individual_branch?: boolean;
     group_by_folder?: boolean;
+    force_branch?: string;
     collapsed?: boolean;
     settings?: {
         include_path?: Array<(string)>;
@@ -3993,9 +4433,28 @@ export type ExportedUser = {
 };
 export type GlobalSetting = {
     name: string;
-    value: {
+    value: unknown;
+};
+/**
+ * Unified instance configuration combining global settings and worker group configs
+ */
+export type InstanceConfig = {
+    /**
+     * Global settings keyed by setting name. Known fields include base_url, license_key, retention_period_secs, smtp_settings, otel, etc. Unknown fields are preserved as-is.
+     *
+     */
+    global_settings?: {
         [key: string]: unknown;
     };
+    /**
+     * Worker group configurations keyed by group name (e.g. "default", "gpu"). Each value contains worker_tags, init_bash, autoscaling, etc.
+     *
+     */
+    worker_configs?: {
+        [key: string]: {
+            [key: string]: unknown;
+        };
+    };
 };
 export type Config = {
     name: string;
@@ -4010,6 +4469,7 @@ export type ExportedInstanceGroup = {
     id?: string;
     scim_display_name?: string;
     external_id?: string;
+    instance_role?: ('superadmin' | 'devops') | null;
 };
 export type JobSearchHit = {
     dancer?: string;
@@ -4133,7 +4593,7 @@ export type WorkspaceItemDiff = {
     /**
      * Type of the item
      */
-    kind: 'script' | 'flow' | 'app' | 'resource' | 'variable' | 'resource_type';
+    kind: 'script' | 'flow' | 'app' | 'raw_app' | 'resource' | 'variable' | 'resource_type';
     /**
      * Path of the item in the workspace
      */
@@ -4162,7 +4622,7 @@ export type WorkspaceItemDiff = {
 /**
  * Type of the item
  */
-export type kind5 = 'script' | 'flow' | 'app' | 'resource' | 'variable' | 'resource_type';
+export type kind5 = 'script' | 'flow' | 'app' | 'raw_app' | 'resource' | 'variable' | 'resource_type';
 export type CompareSummary = {
     /**
      * Total number of items with differences
@@ -4292,12 +4752,55 @@ export type TeamsChannel = {
 };
 export type AssetUsageKind = 'script' | 'flow' | 'job';
 export type AssetUsageAccessType = 'r' | 'w' | 'rw';
-export type AssetKind = 's3object' | 'resource' | 'ducklake' | 'datatable';
+export type AssetKind = 's3object' | 'resource' | 'ducklake' | 'datatable' | 'volume';
 export type Asset = {
     path: string;
     kind: AssetKind;
 };
-export type NativeServiceName = 'nextcloud';
+export type Volume = {
+    name: string;
+    size_bytes: number;
+    file_count: number;
+    created_at: string;
+    created_by: string;
+    updated_at?: (string) | null;
+    last_used_at?: (string) | null;
+    extra_perms?: {
+        [key: string]: unknown;
+    };
+};
+/**
+ * A workspace protection rule defining restrictions and bypass permissions
+ */
+export type ProtectionRuleset = {
+    /**
+     * Unique name for the protection rule
+     */
+    name: string;
+    workspace_id?: string;
+    rules: ProtectionRules;
+    bypass_groups: RuleBypasserGroups;
+    bypass_users: RuleBypasserUsers;
+};
+/**
+ * Configuration of protection restrictions
+ */
+export type ProtectionRules = Array<ProtectionRuleKind>;
+export type ProtectionRuleKind = 'DisableDirectDeployment' | 'DisableWorkspaceForking';
+/**
+ * Groups that can bypass this ruleset
+ */
+export type RuleBypasserGroups = Array<(string)>;
+/**
+ * Users that can bypass this ruleset
+ */
+export type RuleBypasserUsers = Array<(string)>;
+export type QuotaInfo = {
+    used: number;
+    limit: number;
+    prunable: number;
+};
+export type NativeServiceName = 'nextcloud' | 'google';
 /**
  * A native trigger stored in Windmill
  */
@@ -4329,6 +4832,10 @@ export type NativeTrigger = {
      * Error message if the trigger is in an error state
      */
     error?: (string) | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: (string) | null;
 };
 /**
  * Full trigger response containing both Windmill data and external service data
@@ -4361,6 +4868,10 @@ export type NativeTriggerWithExternal = {
      * Error message if the trigger is in an error state
      */
     error?: (string) | null;
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: (string) | null;
     /**
      * Configuration data from the external service
      */
@@ -4371,6 +4882,10 @@ export type NativeTriggerWithExternal = {
 export type WorkspaceIntegrations = {
     service_name: NativeServiceName;
     oauth_data?: (WorkspaceOAuthConfig) | null;
+    /**
+     * Path to the resource storing the OAuth token
+     */
+    resource_path?: (string) | null;
 };
 export type WorkspaceOAuthConfig = {
     /**
@@ -4420,6 +4935,10 @@ export type NativeTriggerData = {
     service_config: {
         [key: string]: unknown;
     };
+    /**
+     * Short summary to be displayed when listed
+     */
+    summary?: (string) | null;
 };
 /**
  * Response returned when a native trigger is created
@@ -4444,6 +4963,25 @@ export type NextCloudEventType = {
     category?: string;
     path: string;
 };
+export type GoogleCalendarEntry = {
+    id: string;
+    summary: string;
+    primary?: boolean;
+};
+export type GoogleDriveFile = {
+    id: string;
+    name: string;
+    mime_type: string;
+    is_folder?: boolean;
+};
+export type GoogleDriveFilesResponse = {
+    files: Array<GoogleDriveFile>;
+    next_page_token?: string;
+};
+export type SharedDriveEntry = {
+    id: string;
+    name: string;
+};
 export type ParameterId = string;
 export type ParameterKey = string;
 export type ParameterWorkspaceId = string;
@@ -4472,23 +5010,23 @@ export type ParameterPage = number;
  */
 export type ParameterPerPage = number;
 /**
- * trigger kind (schedule, http, websocket...)
+ * filter by trigger kind. Supports comma-separated list (e.g. 'schedule,webhook') and negation by prefixing all values with '!' (e.g. '!schedule,!webhook')
  */
-export type ParameterJobTriggerKind = JobTriggerKind;
+export type ParameterJobTriggerKind = string;
 /**
  * order by desc order (default true)
  */
 export type ParameterOrderDesc = boolean;
 /**
- * mask to filter exact matching user creator
+ * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
  */
 export type ParameterCreatedBy = string;
 /**
- * mask to filter exact matching job's label (job labels are completed jobs with as a result an object containing a string in the array at key 'wm_labels')
+ * filter by exact matching job label. Supports comma-separated list (e.g. 'deploy,release') and negation by prefixing all values with '!' (e.g. '!deploy,!release')
  */
 export type ParameterLabel = string;
 /**
- * worker this job was ran on
+ * filter by worker this job ran on. Supports comma-separated list (e.g. 'worker-1,worker-2') and negation by prefixing all values with '!' (e.g. '!worker-1,!worker-2')
  */
 export type ParameterWorker = string;
 /**
@@ -4529,7 +5067,7 @@ export type ParameterSkipPreprocessor = boolean;
  */
 export type ParameterPayload = string;
 /**
- * mask to filter matching starting path
+ * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
  */
 export type ParameterScriptStartPath = string;
 /**
@@ -4537,11 +5075,11 @@ export type ParameterScriptStartPath = string;
  */
 export type ParameterSchedulePath = string;
 /**
- * mask to filter by trigger path
+ * filter by trigger path. Supports comma-separated list (e.g. 'f/trigger1,f/trigger2') and negation by prefixing all values with '!' (e.g. '!f/trigger1,!f/trigger2')
  */
 export type ParameterTriggerPath = string;
 /**
- * mask to filter exact matching path
+ * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
  */
 export type ParameterScriptExactPath = string;
 /**
@@ -4609,7 +5147,7 @@ export type ParameterAllowWildcards = boolean;
  */
 export type ParameterArgsFilter = string;
 /**
- * filter on jobs with a given tag/worker group
+ * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
  */
 export type ParameterTag = string;
 /**
@@ -4637,7 +5175,7 @@ export type ParameterResourceName = string;
  */
 export type ParameterActionKind = 'Create' | 'Update' | 'Delete' | 'Execute';
 /**
- * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+ * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
  */
 export type ParameterJobKinds = string;
 export type ParameterRunnableId = string;
@@ -4647,6 +5185,14 @@ export type ParameterGetStarted = boolean;
 export type ParameterConcurrencyId = string;
 export type ParameterRunnableKind = 'script' | 'flow';
 export type BackendVersionResponse = (string);
+export type GetHealthStatusData = {
+    /**
+     * Force a fresh check, bypassing the cache
+     */
+    force?: boolean;
+};
+export type GetHealthStatusResponse = (HealthStatusResponse);
+export type GetHealthDetailedResponse = (DetailedHealthResponse);
 export type BackendUptodateResponse = (string);
 export type GetLicenseIdResponse = (string);
 export type QueryDocumentationData = {
@@ -4819,6 +5365,7 @@ export type GlobalUserUpdateData = {
         is_super_admin?: boolean;
         is_devops?: boolean;
         name?: string;
+        disabled?: boolean;
     };
 };
 export type GlobalUserUpdateResponse = (string);
@@ -5037,6 +5584,10 @@ export type TestObjectStorageConfigData = {
 };
 export type TestObjectStorageConfigResponse = (string);
 export type SendStatsResponse = (string);
+export type GetStatsResponse = ({
+    signature?: string;
+    data?: string;
+});
 export type GetLatestKeyRenewalAttemptResponse = ({
     result: string;
     attempted_at: string;
@@ -5057,6 +5608,14 @@ export type TestMetadataData = {
 };
 export type TestMetadataResponse = (string);
 export type ListGlobalSettingsResponse = (Array<GlobalSetting>);
+export type GetInstanceConfigResponse = (InstanceConfig);
+export type SetInstanceConfigData = {
+    /**
+     * full instance configuration to apply
+     */
+    requestBody: InstanceConfig;
+};
+export type SetInstanceConfigResponse = (string);
 export type GetMinKeepAliveVersionResponse = ({
     /**
      * minimum version for normal workers
@@ -5172,6 +5731,21 @@ export type ImportInstallationData = {
     workspace: string;
 };
 export type ImportInstallationResponse = (unknown);
+export type GhesInstallationCallbackData = {
+    requestBody: {
+        /**
+         * The GitHub App installation ID from GHES
+         */
+        installation_id: number;
+    };
+    workspace: string;
+};
+export type GhesInstallationCallbackResponse = (unknown);
+export type GetGhesConfigResponse = ({
+    base_url: string;
+    app_slug: string;
+    client_id: string;
+});
 export type AcceptInviteData = {
     /**
      * accept invite
@@ -5412,6 +5986,14 @@ export type GetDependentsData = {
     workspace: string;
 };
 export type GetDependentsResponse = (Array<DependencyDependent>);
+export type GetImportsData = {
+    /**
+     * The script path to get imports for
+     */
+    importerPath: string;
+    workspace: string;
+};
+export type GetImportsResponse = (Array<(string)>);
 export type GetDependentsAmountsData = {
     /**
      * List of imported paths to get dependents counts for
@@ -5600,7 +6182,20 @@ export type EditCopilotConfigData = {
     requestBody: AIConfig;
     workspace: string;
 };
-export type EditCopilotConfigResponse = (string);
+export type EditCopilotConfigResponse = ({
+    effective_ai_config: AIConfig;
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+});
+export type GetCopilotSettingsStateData = {
+    workspace: string;
+};
+export type GetCopilotSettingsStateResponse = ({
+    has_instance_ai_config: boolean;
+    uses_instance_ai_config: boolean;
+    instance_ai_summary?: InstanceAISummary;
+});
 export type GetCopilotInfoData = {
     workspace: string;
 };
@@ -5663,6 +6258,16 @@ export type EditDataTableConfigData = {
     workspace: string;
 };
 export type EditDataTableConfigResponse = (unknown);
+export type GetGitSyncEnabledData = {
+    workspace: string;
+};
+export type GetGitSyncEnabledResponse = ({
+    enabled?: boolean;
+    reason?: (string) | null;
+    max_repos?: (number) | null;
+    user_count?: (number) | null;
+    max_users?: (number) | null;
+});
 export type EditWorkspaceGitSyncConfigData = {
     /**
      * Workspace Git sync settings
@@ -5765,6 +6370,7 @@ export type GetWorkspaceDefaultAppData = {
 };
 export type GetWorkspaceDefaultAppResponse = ({
     default_app_path?: string;
+    default_app_raw?: boolean;
 });
 export type GetWorkspaceUsageData = {
     workspace: string;
@@ -5784,6 +6390,7 @@ export type GetUsedTriggersResponse = ({
     sqs_used: boolean;
     email_used: boolean;
     nextcloud_used: boolean;
+    google_used: boolean;
 });
 export type ListUsersData = {
     workspace: string;
@@ -5919,10 +6526,22 @@ export type ExistsVariableData = {
 };
 export type ExistsVariableResponse = (boolean);
 export type ListVariableData = {
+    /**
+     * broad search across multiple fields (case-insensitive substring match)
+     */
+    broadFilter?: string;
+    /**
+     * pattern match filter for description field (case-insensitive)
+     */
+    description?: string;
     /**
      * which page to return (start at 1, default 1)
      */
     page?: number;
+    /**
+     * exact path match filter
+     */
+    path?: string;
     /**
      * filter variables by path prefix
      */
@@ -5931,6 +6550,10 @@ export type ListVariableData = {
      * number of items to return for a given page (default 30, max 100)
      */
     perPage?: number;
+    /**
+     * pattern match filter for non-secret variable values (case-insensitive)
+     */
+    value?: string;
     workspace: string;
 };
 export type ListVariableResponse = (Array<ListableVariable>);
@@ -5988,6 +6611,79 @@ export type WorkspaceMuteCriticalAlertsUiData = {
     workspace: string;
 };
 export type WorkspaceMuteCriticalAlertsUiResponse = (string);
+export type ListProtectionRulesData = {
+    workspace: string;
+};
+export type ListProtectionRulesResponse = (Array<ProtectionRuleset>);
+export type CreateProtectionRuleData = {
+    /**
+     * New protection rule configuration
+     */
+    requestBody: {
+        /**
+         * Unique name for the protection rule
+         */
+        name: string;
+        rules: ProtectionRules;
+        bypass_groups: RuleBypasserGroups;
+        bypass_users: RuleBypasserUsers;
+    };
+    workspace: string;
+};
+export type CreateProtectionRuleResponse = (string);
+export type UpdateProtectionRuleData = {
+    /**
+     * Updated protection rule configuration
+     */
+    requestBody: {
+        rules: ProtectionRules;
+        bypass_groups: RuleBypasserGroups;
+        bypass_users: RuleBypasserUsers;
+    };
+    /**
+     * Name of the protection rule to update
+     */
+    ruleName: string;
+    workspace: string;
+};
+export type UpdateProtectionRuleResponse = (string);
+export type DeleteProtectionRuleData = {
+    /**
+     * Name of the protection rule to delete
+     */
+    ruleName: string;
+    workspace: string;
+};
+export type DeleteProtectionRuleResponse = (string);
+export type LogAiChatData = {
+    requestBody: {
+        session_id: string;
+        provider: string;
+        model: string;
+        mode: string;
+    };
+    workspace: string;
+};
+export type LogAiChatResponse = (void);
+export type GetCloudQuotasData = {
+    workspace: string;
+};
+export type GetCloudQuotasResponse = ({
+    scripts: QuotaInfo;
+    flows: QuotaInfo;
+    apps: QuotaInfo;
+    variables: QuotaInfo;
+    resources: QuotaInfo;
+});
+export type PruneVersionsData = {
+    requestBody: {
+        resource_type: 'scripts' | 'flows' | 'apps';
+    };
+    workspace: string;
+};
+export type PruneVersionsResponse = ({
+    pruned: number;
+});
 export type SetPublicAppRateLimitData = {
     /**
      * Public app rate limit configuration
@@ -6072,6 +6768,10 @@ export type CreateAccountData = {
          * MCP server URL for MCP OAuth token refresh
          */
         mcp_server_url?: string;
+        /**
+         * OAuth scopes to use for token refresh. Overrides instance-level scopes.
+         */
+        scopes?: Array<(string)>;
     };
     workspace: string;
 };
@@ -6256,10 +6956,22 @@ export type ExistsResourceData = {
 };
 export type ExistsResourceResponse = (boolean);
 export type ListResourceData = {
+    /**
+     * broad search across multiple fields (case-insensitive substring match)
+     */
+    broadFilter?: string;
+    /**
+     * pattern match filter for description field (case-insensitive)
+     */
+    description?: string;
     /**
      * which page to return (start at 1, default 1)
      */
     page?: number;
+    /**
+     * exact path match filter
+     */
+    path?: string;
     /**
      * filter resources by path prefix
      */
@@ -6276,6 +6988,10 @@ export type ListResourceData = {
      * resource_types to not list from, separated by ',',
      */
     resourceTypeExclude?: string;
+    /**
+     * JSONB subset match filter using base64 encoded JSON
+     */
+    value?: string;
     workspace: string;
 };
 export type ListResourceResponse = (Array<ListableResource>);
@@ -6316,7 +7032,12 @@ export type CreateResourceTypeResponse = (string);
 export type FileResourceTypeToFileExtMapData = {
     workspace: string;
 };
-export type FileResourceTypeToFileExtMapResponse = (unknown);
+export type FileResourceTypeToFileExtMapResponse = ({
+    [key: string]: {
+        format_extension?: (string) | null;
+        is_fileset?: boolean;
+    };
+});
 export type DeleteResourceTypeData = {
     path: string;
     workspace: string;
@@ -6566,7 +7287,7 @@ export type ListSearchScriptResponse = (Array<{
 }>);
 export type ListScriptsData = {
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -6838,6 +7559,14 @@ export type UpdateScriptHistoryData = {
     workspace: string;
 };
 export type UpdateScriptHistoryResponse = (string);
+export type ListDedicatedWithDepsData = {
+    workspace: string;
+};
+export type ListDedicatedWithDepsResponse = (Array<{
+    path: string;
+    language: 'python3' | 'deno' | 'go' | 'bash' | 'powershell' | 'postgresql' | 'mysql' | 'bigquery' | 'snowflake' | 'mssql' | 'graphql' | 'nativets' | 'bun' | 'bunnative' | 'php' | 'rust' | 'ansible' | 'csharp' | 'oracledb' | 'duckdb' | 'java' | 'ruby';
+    workspace_dep_names: Array<(string)>;
+}>);
 export type RawScriptByPathData = {
     path: string;
     workspace: string;
@@ -6875,6 +7604,47 @@ export type GetScriptDeploymentStatusResponse = ({
     lock_error_logs?: string;
     job_id?: string;
 });
+export type StoreRawScriptTempData = {
+    /**
+     * script content to store
+     */
+    requestBody: string;
+    workspace: string;
+};
+export type StoreRawScriptTempResponse = (string);
+export type DiffRawScriptsWithDeployedData = {
+    /**
+     * scripts and workspace deps to diff against deployed versions
+     */
+    requestBody: {
+        /**
+         * map of script path to SHA256 content hash
+         */
+        scripts: {
+            [key: string]: (string);
+        };
+        /**
+         * workspace dependencies to diff
+         */
+        workspace_deps?: Array<{
+            /**
+             * CLI path (e.g. dependencies/package.json)
+             */
+            path: string;
+            language: ScriptLang;
+            /**
+             * named workspace dependency (null for default)
+             */
+            name?: string;
+            /**
+             * SHA256 content hash
+             */
+            hash: string;
+        }>;
+    };
+    workspace: string;
+};
+export type DiffRawScriptsWithDeployedResponse = (Array<(string)>);
 export type ListSelectedJobGroupsData = {
     /**
      * script args
@@ -7476,7 +8246,7 @@ export type ListSearchFlowResponse = (Array<{
 }>);
 export type ListFlowsData = {
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -7712,7 +8482,7 @@ export type ListConversationMessagesData = {
 export type ListConversationMessagesResponse = (Array<FlowConversationMessage>);
 export type ListRawAppsData = {
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -7758,7 +8528,7 @@ export type ListSearchAppResponse = (Array<{
 }>);
 export type ListAppsData = {
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -7814,6 +8584,10 @@ export type CreateAppData = {
         draft_only?: boolean;
         deployment_message?: string;
         custom_path?: string;
+        /**
+         * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
+         */
+        preserve_on_behalf_of?: boolean;
     };
     workspace: string;
 };
@@ -7831,6 +8605,10 @@ export type CreateAppRawData = {
             draft_only?: boolean;
             deployment_message?: string;
             custom_path?: string;
+            /**
+             * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
+             */
+            preserve_on_behalf_of?: boolean;
         };
         js?: string;
         css?: string;
@@ -7929,6 +8707,10 @@ export type UpdateAppData = {
         policy?: Policy;
         deployment_message?: string;
         custom_path?: string;
+        /**
+         * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
+         */
+        preserve_on_behalf_of?: boolean;
     };
     workspace: string;
 };
@@ -7945,6 +8727,10 @@ export type UpdateAppRawData = {
             policy?: Policy;
             deployment_message?: string;
             custom_path?: string;
+            /**
+             * When true and the caller is a member of the 'wm_deployers' group, preserves the original on_behalf_of value in the policy instead of overwriting it.
+             */
+            preserve_on_behalf_of?: boolean;
         };
         js?: string;
         css?: string;
@@ -8281,6 +9067,24 @@ export type RunScriptPreviewInlineData = {
     workspace: string;
 };
 export type RunScriptPreviewInlineResponse = (unknown);
+export type RunScriptByPathInlineData = {
+    path: string;
+    /**
+     * script args
+     */
+    requestBody: InlineScriptArgs;
+    workspace: string;
+};
+export type RunScriptByPathInlineResponse = (unknown);
+export type RunScriptByHashInlineData = {
+    hash: string;
+    /**
+     * script args
+     */
+    requestBody: InlineScriptArgs;
+    workspace: string;
+};
+export type RunScriptByHashInlineResponse = (unknown);
 export type RunScriptPreviewAndWaitResultData = {
     /**
      * preview
@@ -8372,7 +9176,7 @@ export type ListQueueData = {
      */
     args?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -8380,7 +9184,7 @@ export type ListQueueData = {
      */
     isNotSchedule?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
@@ -8420,11 +9224,11 @@ export type ListQueueData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -8444,19 +9248,19 @@ export type ListQueueData = {
      */
     suspended?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     /**
-     * trigger kind (schedule, http, websocket...)
+     * filter by trigger kind. Supports comma-separated list (e.g. 'schedule,webhook') and negation by prefixing all values with '!' (e.g. '!schedule,!webhook')
      */
-    triggerKind?: JobTriggerKind;
+    triggerKind?: string;
     /**
-     * mask to filter by trigger path
+     * filter by trigger path. Supports comma-separated list (e.g. 'f/trigger1,f/trigger2') and negation by prefixing all values with '!' (e.g. '!f/trigger1,!f/trigger2')
      */
     triggerPath?: string;
     /**
-     * worker this job was ran on
+     * filter by worker this job ran on. Supports comma-separated list (e.g. 'worker-1,worker-2') and negation by prefixing all values with '!' (e.g. '!worker-1,!worker-2')
      */
     worker?: string;
     workspace: string;
@@ -8521,7 +9325,7 @@ export type ListFilteredJobsUuidsData = {
      */
     createdBeforeQueue?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -8541,11 +9345,11 @@ export type ListFilteredJobsUuidsData = {
      */
     isSkipped?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
-     * mask to filter exact matching job's label (job labels are completed jobs with as a result an object containing a string in the array at key 'wm_labels')
+     * filter by exact matching job label. Supports comma-separated list (e.g. 'deploy,release') and negation by prefixing all values with '!' (e.g. '!deploy,!release')
      */
     label?: string;
     /**
@@ -8581,11 +9385,11 @@ export type ListFilteredJobsUuidsData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -8605,11 +9409,11 @@ export type ListFilteredJobsUuidsData = {
      */
     suspended?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     /**
-     * worker this job was ran on
+     * filter by worker this job ran on. Supports comma-separated list (e.g. 'worker-1,worker-2') and negation by prefixing all values with '!' (e.g. '!worker-1,!worker-2')
      */
     worker?: string;
     workspace: string;
@@ -8630,7 +9434,7 @@ export type ListFilteredQueueUuidsData = {
     args?: string;
     concurrencyKey?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -8638,7 +9442,7 @@ export type ListFilteredQueueUuidsData = {
      */
     isNotSchedule?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
@@ -8678,11 +9482,11 @@ export type ListFilteredQueueUuidsData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -8702,7 +9506,7 @@ export type ListFilteredQueueUuidsData = {
      */
     suspended?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     workspace: string;
@@ -8776,7 +9580,7 @@ export type ListCompletedJobsData = {
      */
     args?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -8796,11 +9600,11 @@ export type ListCompletedJobsData = {
      */
     isSkipped?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
-     * mask to filter exact matching job's label (job labels are completed jobs with as a result an object containing a string in the array at key 'wm_labels')
+     * filter by exact matching job label. Supports comma-separated list (e.g. 'deploy,release') and negation by prefixing all values with '!' (e.g. '!deploy,!release')
      */
     label?: string;
     /**
@@ -8832,11 +9636,11 @@ export type ListCompletedJobsData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -8852,11 +9656,11 @@ export type ListCompletedJobsData = {
      */
     success?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     /**
-     * worker this job was ran on
+     * filter by worker this job ran on. Supports comma-separated list (e.g. 'worker-1,worker-2') and negation by prefixing all values with '!' (e.g. '!worker-1,!worker-2')
      */
     worker?: string;
     workspace: string;
@@ -8914,6 +9718,10 @@ export type ListJobsData = {
      * filter on jobs containing those args as a json subset (@> in postgres)
      */
     args?: string;
+    /**
+     * broad search across multiple fields (case-insensitive substring match on path, tag, schedule path, trigger kind, label)
+     */
+    broadFilter?: string;
     /**
      * filter on started after (exclusive) timestamp
      */
@@ -8939,7 +9747,7 @@ export type ListJobsData = {
      */
     createdBeforeQueue?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -8959,11 +9767,11 @@ export type ListJobsData = {
      */
     isSkipped?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
-     * mask to filter exact matching job's label (job labels are completed jobs with as a result an object containing a string in the array at key 'wm_labels')
+     * filter by exact matching job label. Supports comma-separated list (e.g. 'deploy,release') and negation by prefixing all values with '!' (e.g. '!deploy,!release')
      */
     label?: string;
     /**
@@ -8995,11 +9803,11 @@ export type ListJobsData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -9019,15 +9827,15 @@ export type ListJobsData = {
      */
     suspended?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     /**
-     * trigger kind (schedule, http, websocket...)
+     * filter by trigger kind. Supports comma-separated list (e.g. 'schedule,webhook') and negation by prefixing all values with '!' (e.g. '!schedule,!webhook')
      */
-    triggerKind?: JobTriggerKind;
+    triggerKind?: string;
     /**
-     * worker this job was ran on
+     * filter by worker this job ran on. Supports comma-separated list (e.g. 'worker-1,worker-2') and negation by prefixing all values with '!' (e.g. '!worker-1,!worker-2')
      */
     worker?: string;
     workspace: string;
@@ -9106,6 +9914,7 @@ export type GetJobUpdatesResponse = ({
     workflow_as_code_status?: WorkflowStatus;
 });
 export type GetJobUpdatesSseData = {
+    fast?: boolean;
     getProgress?: boolean;
     id: string;
     logOffset?: number;
@@ -9237,28 +10046,91 @@ export type GetResumeUrlsResponse = ({
 });
 export type GetSlackApprovalPayloadData = {
     approver?: string;
+    cancelButtonText?: string;
     channelId: string;
     defaultArgsJson?: string;
     dynamicEnumsJson?: string;
     flowStepId: string;
     id: string;
     message?: string;
+    resumeButtonText?: string;
     slackResourcePath: string;
     workspace: string;
 };
 export type GetSlackApprovalPayloadResponse = (unknown);
 export type GetTeamsApprovalPayloadData = {
     approver?: string;
+    cancelButtonText?: string;
     channelName: string;
     defaultArgsJson?: string;
     dynamicEnumsJson?: string;
     flowStepId: string;
     id: string;
     message?: string;
+    resumeButtonText?: string;
     teamName: string;
     workspace: string;
 };
 export type GetTeamsApprovalPayloadResponse = (unknown);
+export type ResumeSuspendedData = {
+    jobId: string;
+    requestBody: {
+        /**
+         * payload to send to the resumed job
+         */
+        payload?: unknown;
+        /**
+         * approval token for unauthenticated access
+         */
+        approval_token?: string;
+        /**
+         * whether to approve (true) or cancel (false) the job
+         */
+        approved?: boolean;
+    };
+    workspace: string;
+};
+export type ResumeSuspendedResponse = (string);
+export type GetApprovalInfoData = {
+    jobId: string;
+    /**
+     * approval token for unauthenticated access
+     */
+    token?: string;
+    workspace: string;
+};
+export type GetApprovalInfoResponse = ({
+    flow_id: string;
+    /**
+     * form schema for the approval step
+     */
+    form_schema?: unknown;
+    /**
+     * description of the approval step
+     */
+    description?: unknown;
+    approval_conditions?: {
+        user_auth_required: boolean;
+        user_groups_required: Array<(string)>;
+        self_approval_disabled: boolean;
+    };
+    /**
+     * whether the current user/token holder can approve
+     */
+    can_approve: boolean;
+    /**
+     * whether user authentication is required to approve
+     */
+    user_auth_required: boolean;
+    /**
+     * whether to hide the cancel button in the UI
+     */
+    hide_cancel?: boolean;
+    approvers: Array<{
+        resume_id: number;
+        approver: string;
+    }>;
+});
 export type ResumeSuspendedJobGetData = {
     approver?: string;
     id: string;
@@ -9400,6 +10272,14 @@ export type ListSchedulesData = {
      * filter on jobs containing those args as a json subset (@> in postgres)
      */
     args?: string;
+    /**
+     * broad search across multiple fields (case-insensitive substring match)
+     */
+    broadFilter?: string;
+    /**
+     * pattern match filter for description field (case-insensitive)
+     */
+    description?: string;
     /**
      * filter schedules by whether they target a flow
      */
@@ -9409,7 +10289,7 @@ export type ListSchedulesData = {
      */
     page?: number;
     /**
-     * filter by path
+     * filter by path (script path)
      */
     path?: string;
     /**
@@ -9420,6 +10300,14 @@ export type ListSchedulesData = {
      * number of items to return for a given page (default 30, max 100)
      */
     perPage?: number;
+    /**
+     * exact match on the schedule's path
+     */
+    schedulePath?: string;
+    /**
+     * pattern match filter for summary field (case-insensitive)
+     */
+    summary?: string;
     workspace: string;
 };
 export type ListSchedulesResponse = (Array<Schedule>);
@@ -9694,6 +10582,24 @@ export type TestKafkaConnectionData = {
     workspace: string;
 };
 export type TestKafkaConnectionResponse = (string);
+export type ResetKafkaOffsetsData = {
+    path: string;
+    workspace: string;
+};
+export type ResetKafkaOffsetsResponse = (unknown);
+export type CommitKafkaOffsetsData = {
+    path: string;
+    /**
+     * offsets to commit
+     */
+    requestBody: {
+        topic: string;
+        partition: number;
+        offset: number;
+    };
+    workspace: string;
+};
+export type CommitKafkaOffsetsResponse = (unknown);
 export type CreateNatsTriggerData = {
     /**
      * new nats trigger
@@ -9867,19 +10773,36 @@ export type GenerateNativeTriggerServiceConnectUrlData = {
     workspace: string;
 };
 export type GenerateNativeTriggerServiceConnectUrlResponse = (string);
+export type CheckInstanceSharingAvailableData = {
+    serviceName: NativeServiceName;
+    workspace: string;
+};
+export type CheckInstanceSharingAvailableResponse = (boolean);
+export type GenerateInstanceConnectUrlData = {
+    /**
+     * redirect_uri
+     */
+    requestBody: RedirectUri;
+    serviceName: NativeServiceName;
+    workspace: string;
+};
+export type GenerateInstanceConnectUrlResponse = (string);
 export type DeleteNativeTriggerServiceData = {
     serviceName: NativeServiceName;
     workspace: string;
 };
 export type DeleteNativeTriggerServiceResponse = (string);
 export type NativeTriggerServiceCallbackData = {
-    code: string;
     /**
-     * redirect_uri
+     * OAuth callback data
      */
-    requestBody: RedirectUri;
+    requestBody: {
+        code: string;
+        state: string;
+        redirect_uri: string;
+        resource_path?: string;
+    };
     serviceName: NativeServiceName;
-    state: string;
     workspace: string;
 };
 export type NativeTriggerServiceCallbackResponse = (string);
@@ -9962,6 +10885,34 @@ export type ListNextCloudEventsData = {
     workspace: string;
 };
 export type ListNextCloudEventsResponse = (Array<NextCloudEventType>);
+export type ListGoogleCalendarsData = {
+    workspace: string;
+};
+export type ListGoogleCalendarsResponse = (Array<GoogleCalendarEntry>);
+export type ListGoogleDriveFilesData = {
+    /**
+     * token for next page of results
+     */
+    pageToken?: string;
+    /**
+     * folder ID to list children of
+     */
+    parentId?: string;
+    /**
+     * search query to filter files by name
+     */
+    q?: string;
+    /**
+     * if true, list files shared with the user
+     */
+    sharedWithMe?: boolean;
+    workspace: string;
+};
+export type ListGoogleDriveFilesResponse = (GoogleDriveFilesResponse);
+export type ListGoogleSharedDrivesData = {
+    workspace: string;
+};
+export type ListGoogleSharedDrivesResponse = (Array<SharedDriveEntry>);
 export type NativeTriggerWebhookData = {
     /**
      * The internal database ID of the trigger
@@ -10387,7 +11338,7 @@ export type ListInstanceGroupsWithWorkspacesResponse = (Array<InstanceGroupWithW
 export type GetInstanceGroupData = {
     name: string;
 };
-export type GetInstanceGroupResponse = (InstanceGroup);
+export type GetInstanceGroupResponse = (InstanceGroupWithWorkspaces);
 export type CreateInstanceGroupData = {
     /**
      * create instance group
@@ -10405,6 +11356,10 @@ export type UpdateInstanceGroupData = {
      */
     requestBody: {
         new_summary: string;
+        /**
+         * Instance-level role for group members. 'superadmin', 'devops', 'user' or empty to clear.
+         */
+        instance_role?: (string) | null;
     };
 };
 export type UpdateInstanceGroupResponse = (string);
@@ -10793,7 +11748,7 @@ export type ListBlacklistedAgentTokensResponse = (Array<{
 }>);
 export type GetMinVersionResponse = (string);
 export type GetGranularAclsData = {
-    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger';
+    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger' | 'volume';
     path: string;
     workspace: string;
 };
@@ -10801,7 +11756,7 @@ export type GetGranularAclsResponse = ({
     [key: string]: (boolean);
 });
 export type AddGranularAclsData = {
-    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger';
+    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger' | 'volume';
     path: string;
     /**
      * acl to add
@@ -10814,7 +11769,7 @@ export type AddGranularAclsData = {
 };
 export type AddGranularAclsResponse = (string);
 export type RemoveGranularAclsData = {
-    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger';
+    kind: 'script' | 'group_' | 'resource' | 'schedule' | 'variable' | 'flow' | 'folder' | 'app' | 'raw_app' | 'http_trigger' | 'websocket_trigger' | 'kafka_trigger' | 'nats_trigger' | 'postgres_trigger' | 'mqtt_trigger' | 'gcp_trigger' | 'sqs_trigger' | 'email_trigger' | 'volume';
     path: string;
     /**
      * acl to add
@@ -11329,7 +12284,7 @@ export type ListExtendedJobsData = {
      */
     createdBeforeQueue?: string;
     /**
-     * mask to filter exact matching user creator
+     * filter by exact matching user creator. Supports comma-separated list (e.g. 'alice,bob') and negation by prefixing all values with '!' (e.g. '!alice,!bob')
      */
     createdBy?: string;
     /**
@@ -11349,11 +12304,11 @@ export type ListExtendedJobsData = {
      */
     isSkipped?: boolean;
     /**
-     * filter on job kind (values 'preview', 'script', 'dependencies', 'flow') separated by,
+     * filter by job kind. Supports comma-separated list of values ('preview', 'script', 'dependencies', 'flow') and negation by prefixing all values with '!' (e.g. '!preview,!dependencies')
      */
     jobKinds?: string;
     /**
-     * mask to filter exact matching job's label (job labels are completed jobs with as a result an object containing a string in the array at key 'wm_labels')
+     * filter by exact matching job label. Supports comma-separated list (e.g. 'deploy,release') and negation by prefixing all values with '!' (e.g. '!deploy,!release')
      */
     label?: string;
     /**
@@ -11390,11 +12345,11 @@ export type ListExtendedJobsData = {
      */
     scriptHash?: string;
     /**
-     * mask to filter exact matching path
+     * filter by exact matching script path. Supports comma-separated list (e.g. 'f/script1,f/script2') and negation by prefixing all values with '!' (e.g. '!f/script1,!f/script2')
      */
     scriptPathExact?: string;
     /**
-     * mask to filter matching starting path
+     * filter by script path prefix. Supports comma-separated list (e.g. 'f/folder1,f/folder2') and negation by prefixing all values with '!' (e.g. '!f/folder1,!f/folder2')
      */
     scriptPathStart?: string;
     /**
@@ -11410,13 +12365,13 @@ export type ListExtendedJobsData = {
      */
     success?: boolean;
     /**
-     * filter on jobs with a given tag/worker group
+     * filter by tag/worker group. Supports comma-separated list (e.g. 'gpu,highmem') and negation by prefixing all values with '!' (e.g. '!gpu,!highmem')
      */
     tag?: string;
     /**
-     * trigger kind (schedule, http, websocket...)
+     * filter by trigger kind. Supports comma-separated list (e.g. 'schedule,webhook') and negation by prefixing all values with '!' (e.g. '!schedule,!webhook')
      */
-    triggerKind?: JobTriggerKind;
+    triggerKind?: string;
     workspace: string;
 };
 export type ListExtendedJobsResponse = (ExtendedJobs);
@@ -11450,6 +12405,10 @@ export type SearchJobsIndexResponse = ({
          * Is the current indexer service being replaced
          */
         lost_lock_ownership?: boolean;
+        /**
+         * Maximum time window in seconds for indexing
+         */
+        max_index_time_window_secs?: number;
     };
 });
 export type SearchLogsIndexData = {
@@ -11487,10 +12446,44 @@ export type CountSearchLogsIndexResponse = ({
         [key: string]: unknown;
     };
 });
+export type GetIndexDiskStorageSizesResponse = ({
+    job_index_disk_size_bytes?: (number) | null;
+    log_index_disk_size_bytes?: (number) | null;
+});
 export type ClearIndexData = {
     idxName: 'JobIndex' | 'ServiceLogIndex';
 };
 export type ClearIndexResponse = (string);
+export type GetIndexStorageSizesResponse = ({
+    job_index?: {
+        disk_size_bytes?: (number) | null;
+        s3_size_bytes?: (number) | null;
+    };
+    service_log_index?: {
+        disk_size_bytes?: (number) | null;
+        s3_size_bytes?: (number) | null;
+    };
+});
+export type GetIndexerStatusResponse = ({
+    job_indexer?: {
+        is_alive?: boolean;
+        last_locked_at?: (string) | null;
+        owner?: (string) | null;
+        storage?: {
+            disk_size_bytes?: (number) | null;
+            s3_size_bytes?: (number) | null;
+        };
+    };
+    log_indexer?: {
+        is_alive?: boolean;
+        last_locked_at?: (string) | null;
+        owner?: (string) | null;
+        storage?: {
+            disk_size_bytes?: (number) | null;
+            s3_size_bytes?: (number) | null;
+        };
+    };
+});
 export type ListAssetsData = {
     /**
      * Filter by asset kinds (multiple values allowed)
@@ -11500,6 +12493,14 @@ export type ListAssetsData = {
      * Filter by asset path (case-insensitive partial match)
      */
     assetPath?: string;
+    /**
+     * broad search across multiple fields (case-insensitive substring match)
+     */
+    broadFilter?: string;
+    /**
+     * JSONB subset match filter for columns using base64 encoded JSON
+     */
+    columns?: string;
     /**
      * Cursor timestamp for pagination (created_at of last item from previous page)
      */
@@ -11508,6 +12509,10 @@ export type ListAssetsData = {
      * Cursor ID for pagination (id of last item from previous page)
      */
     cursorId?: number;
+    /**
+     * exact path match filter
+     */
+    path?: string;
     /**
      * Number of items per page (max 1000, default 50)
      */
@@ -11594,6 +12599,26 @@ export type ListFavoriteAssetsResponse = (Array<{
      */
     path: string;
 }>);
+export type ListVolumesData = {
+    workspace: string;
+};
+export type ListVolumesResponse = (Array<Volume>);
+export type GetVolumeStorageData = {
+    workspace: string;
+};
+export type GetVolumeStorageResponse = ((string) | null);
+export type CreateVolumeData = {
+    requestBody: {
+        name: string;
+    };
+    workspace: string;
+};
+export type CreateVolumeResponse = (string);
+export type DeleteVolumeData = {
+    name: string;
+    workspace: string;
+};
+export type DeleteVolumeResponse = (string);
 export type ListMcpToolsData = {
     workspace: string;
 };