diff --git a/alert_rules.go b/alert_rules.go
index 5ac4e6a..d5b48f3 100644
--- a/alert_rules.go
+++ b/alert_rules.go
@@ -63,20 +63,6 @@ func (s *AlertRulesService) ReadCounterTotal(ctx context.Context) (*RuleCounterT
 	return out, resp, nil
 }
 
-// Export alert rules.
-//
-// Export the configuration of selected alert rules as a portable JSON array, compatible with `POST /monit/rule/import`.
-//
-// API: POST /monit/rule/export (monit-rule-read-export).
-func (s *AlertRulesService) ReadExport(ctx context.Context, req *RuleIDsRequest) (*AlertRuleExportListResponse, *Response, error) {
-	out := new(AlertRuleExportListResponse)
-	resp, err := s.client.do(ctx, "/monit/rule/export", req, out)
-	if err != nil {
-		return nil, resp, err
-	}
-	return out, resp, nil
-}
-
 // Get alert rule detail (V2).
 //
 // Return the full V2 configuration of an alert rule by ID, including lifecycle v2 recovery and ending modes.
@@ -151,20 +137,6 @@ func (s *AlertRulesService) WriteFieldsUpdate(ctx context.Context, req *RuleFiel
 	return out, resp, nil
 }
 
-// Import alert rules.
-//
-// Import one or more alert rules from a JSON array. Returns the result for each rule, indicating success or failure.
-//
-// API: POST /monit/rule/import (monit-rule-write-import).
-func (s *AlertRulesService) WriteImport(ctx context.Context, req *RuleImportRequest) (*RuleImportResponse, *Response, error) {
-	out := new(RuleImportResponse)
-	resp, err := s.client.do(ctx, "/monit/rule/import", req, out)
-	if err != nil {
-		return nil, resp, err
-	}
-	return out, resp, nil
-}
-
 // Move alert rules to folder.
 //
 // Move one or more alert rules to a different folder.
diff --git a/alert_rules_test.go b/alert_rules_test.go
index d6d5e08..fa11556 100644
--- a/alert_rules_test.go
+++ b/alert_rules_test.go
@@ -21,9 +21,11 @@ func TestAlertRuleUpdateV2PreservesInvestigationTargetsPresence(t *testing.T) {
 				Kind: "dashboard",
 				Dashboard: DashboardInvestigationTarget{
 					DashboardID: "01900000-0000-7000-8000-000000000001",
+					Variables:   map[string]string{},
 				},
+				TimeRange: InvestigationTimeRange{BeforeSeconds: 1800, AfterSeconds: 600},
 			}},
-			want: `[{"dashboard":{"dashboard_id":"01900000-0000-7000-8000-000000000001"},"kind":"dashboard"}]`,
+			want: `[{"dashboard":{"dashboard_id":"01900000-0000-7000-8000-000000000001","variables":{}},"kind":"dashboard","time_range":{"after_seconds":600,"before_seconds":1800}}]`,
 		},
 	}
 	for _, tt := range tests {
diff --git a/members.go b/members.go
index 796ba58..9214b55 100644
--- a/members.go
+++ b/members.go
@@ -69,7 +69,7 @@ func (s *MembersService) MemberList(ctx context.Context, req *MemberListRequest)
 
 // Notify members.
 //
-// Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with `AccessDenied`. Delivery is asynchronous — `accepted` means the email was queued, not that it was delivered. Call it with `dry_run` set to `true` before sending: `html` in the response is the email exactly as recipients will get it, so you can confirm the sanitizer kept everything the message depends on.
+// Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with `AccessDenied`. Delivery is asynchronous — `accepted` means the email was queued, not that it was delivered.
 //
 // API: POST /member/notify (memberNotify).
 func (s *MembersService) MemberNotify(ctx context.Context, req *MemberNotifyRequest) (*MemberNotifyResponse, *Response, error) {
diff --git a/models_gen.go b/models_gen.go
index 275c59a..e8f7765 100644
--- a/models_gen.go
+++ b/models_gen.go
@@ -808,59 +808,59 @@ type AlertPipelineUpsertRequest struct {
 // AlertRule is generated from the Flashduty OpenAPI schema.
 type AlertRule struct {
 	// Account ID. Filled by the server from the authenticated identity; do not provide.
-	AccountID uint64 `json:"account_id,omitempty" toon:"account_id,omitempty"`
+	AccountID uint64 `json:"account_id" toon:"account_id"`
 	// Annotation key-value pairs delivered with alert events; keys must not start with `$` (reserved for query fields).
-	Annotations map[string]string `json:"annotations,omitempty" toon:"annotations,omitempty"`
+	Annotations map[string]string `json:"annotations" toon:"annotations"`
 	// Channel IDs to send alerts to.
-	ChannelIDs []uint64 `json:"channel_ids,omitempty" toon:"channel_ids,omitempty"`
+	ChannelIDs []uint64 `json:"channel_ids" toon:"channel_ids"`
 	// Creation time as a Unix timestamp in seconds. Generated by the server; do not provide.
-	CreatedAt int64 `json:"created_at,omitempty" toon:"created_at,omitempty"`
+	CreatedAt Timestamp `json:"created_at" toon:"created_at"`
 	// Creator user ID. Filled by the server from the current user; do not provide.
-	CreatorID uint64 `json:"creator_id,omitempty" toon:"creator_id,omitempty"`
+	CreatorID uint64 `json:"creator_id" toon:"creator_id"`
 	// Creator name. Filled by the server; do not provide.
-	CreatorName string `json:"creator_name,omitempty" toon:"creator_name,omitempty"`
+	CreatorName string `json:"creator_name" toon:"creator_name"`
 	// Schedule expression: a 6-field cron (with seconds) or an `@every 30s` interval descriptor. Must not start with `CRON_TZ=` or `TZ=`; use the `timezone` field instead.
 	CronPattern string `json:"cron_pattern" toon:"cron_pattern"`
 	// Whether to enable debug logging; the edge emits detailed evaluation logs, useful for troubleshooting rules that do not trigger as expected.
-	DebugLogEnabled bool `json:"debug_log_enabled,omitempty" toon:"debug_log_enabled,omitempty"`
+	DebugLogEnabled bool `json:"debug_log_enabled" toon:"debug_log_enabled"`
 	// Seconds to shift the evaluation query window backward, compensating for data ingestion latency.
-	DelaySeconds int64 `json:"delay_seconds,omitempty" toon:"delay_seconds,omitempty"`
+	DelaySeconds int64 `json:"delay_seconds" toon:"delay_seconds"`
 	// Rule description, in Markdown.
-	Description string `json:"description,omitempty" toon:"description,omitempty"`
+	Description string `json:"description" toon:"description"`
 	// Format for the description. Defaults to `text` when omitted or empty. `text` = plain text; `markdown` = Markdown, rendered as Markdown in alert details.
-	DescriptionType string `json:"description_type,omitempty" toon:"description_type,omitempty"`
+	DescriptionType string `json:"description_type" toon:"description_type"`
 	// Datasource IDs, merged with `ds_list` to decide which datasources the rule monitors; IDs survive datasource renames. At least one of `ds_list` and `ds_ids` must be provided.
-	DsIDs []uint64 `json:"ds_ids,omitempty" toon:"ds_ids,omitempty"`
+	DsIDs []uint64 `json:"ds_ids" toon:"ds_ids"`
 	// Data source name patterns (supports wildcards). At least one of `ds_list` / `ds_ids` must be non-empty; the two are merged to decide which datasources the rule monitors.
-	DsList []string `json:"ds_list,omitempty" toon:"ds_list,omitempty"`
+	DsList []string `json:"ds_list" toon:"ds_list"`
 	// Datasource type identifier (e.g. `prometheus`, `elasticsearch`).
 	DsType string `json:"ds_type" toon:"ds_type"`
 	// Whether the rule is enabled. Updating to `false` makes the server clean up the rule's active alerts.
-	Enabled bool `json:"enabled,omitempty" toon:"enabled,omitempty"`
+	Enabled bool `json:"enabled" toon:"enabled"`
 	// Time windows when the rule is active. Defaults to all days from 00:00 to 23:59 when omitted or empty.
-	EnabledTimes []AlertRuleEnabledTimesItem `json:"enabled_times,omitempty" toon:"enabled_times,omitempty"`
+	EnabledTimes []AlertRuleEnabledTimesItem `json:"enabled_times" toon:"enabled_times"`
 	// ID of the folder the rule belongs to. Obtainable via `POST /monit/folder/list`.
 	FolderID uint64 `json:"folder_id" toon:"folder_id"`
 	// Rule ID. Required for update; omit for create (assigned by the server).
-	ID uint64 `json:"id,omitempty" toon:"id,omitempty"`
+	ID uint64 `json:"id" toon:"id"`
 	// Custom labels.
-	Labels map[string]string `json:"labels,omitempty" toon:"labels,omitempty"`
+	Labels map[string]string `json:"labels" toon:"labels"`
 	// Rule name. Must be unique within the same folder.
 	Name string `json:"name" toon:"name"`
 	// Notification repeat interval in seconds.
-	RepeatInterval int64 `json:"repeat_interval,omitempty" toon:"repeat_interval,omitempty"`
+	RepeatInterval int64 `json:"repeat_interval" toon:"repeat_interval"`
 	// Max number of repeat notifications.
-	RepeatTotal int64 `json:"repeat_total,omitempty" toon:"repeat_total,omitempty"`
+	RepeatTotal int64 `json:"repeat_total" toon:"repeat_total"`
 	// Check configuration: query list plus trigger/recovery conditions. Structure see `RuleConfigs`.
 	RuleConfigs RuleConfigs `json:"rule_configs" toon:"rule_configs"`
 	// Timezone in which the rule executes. Determines how the cron schedule and effective time windows are interpreted. Only IANA timezone names are accepted (e.g. `Asia/Shanghai`, `UTC`, `Europe/London`); shortcuts and offsets such as `Local`, `UTC+8`, or `CST` are rejected. Treated as `Asia/Shanghai` if empty.
-	Timezone string `json:"timezone,omitempty" toon:"timezone,omitempty"`
+	Timezone string `json:"timezone" toon:"timezone"`
 	// Last update time as a Unix timestamp in seconds. Generated by the server; do not provide.
-	UpdatedAt int64 `json:"updated_at,omitempty" toon:"updated_at,omitempty"`
+	UpdatedAt Timestamp `json:"updated_at" toon:"updated_at"`
 	// Last updater user ID. Filled by the server; do not provide.
-	UpdaterID uint64 `json:"updater_id,omitempty" toon:"updater_id,omitempty"`
+	UpdaterID uint64 `json:"updater_id" toon:"updater_id"`
 	// Last updater name. Filled by the server; do not provide.
-	UpdaterName string `json:"updater_name,omitempty" toon:"updater_name,omitempty"`
+	UpdaterName string `json:"updater_name" toon:"updater_name"`
 }
 
 // AlertRuleAnyDataV2 is generated from the Flashduty OpenAPI schema.
@@ -1318,7 +1318,7 @@ type AuditLog struct {
 	CreatedAt TimestampMilli `json:"created_at" toon:"created_at"`
 	// ID of the credential (the app key ID) when `credential_type` is `app_key`; 0 otherwise.
 	CredentialID uint64 `json:"credential_id" toon:"credential_id"`
-	// Credential type used for the call. `app_key` when authenticated with an app key; empty string for member sessions.
+	// Credential type used for the call. `app_key` for a long-lived console app key, `ephemeral_app_key` for a short-lived key issued to AI SRE, and an empty string for member sessions.
 	CredentialType string `json:"credential_type" toon:"credential_type"`
 	// Client IP address of the caller.
 	IP string `json:"ip" toon:"ip"`
@@ -2731,8 +2731,20 @@ type DashboardInvestigationTarget struct {
 	DashboardID string `json:"dashboard_id" toon:"dashboard_id"`
 	// Panel ID inside the dashboard; must be a canonical UUIDv7. Optional.
 	TargetID string `json:"target_id,omitempty" toon:"target_id,omitempty"`
-	// Dashboard variable bindings, keyed by dashboard variable name.
-	VariableBindings map[string]InvestigationVariableBinding `json:"variable_bindings,omitempty" toon:"variable_bindings,omitempty"`
+	// Dashboard variable values, keyed by variable name. Values may reference event labels through `{{ }}` templates; defaults to an empty object.
+	Variables map[string]string `json:"variables" toon:"variables"`
+}
+
+// DashboardQuery is generated from the Flashduty OpenAPI schema.
+type DashboardQuery struct {
+	// Named query arguments; defaults to an empty object. Values are passed through verbatim and must not contain `{{ }}` templates.
+	Args map[string]string `json:"args" toon:"args"`
+	// Query expression in the target data source's language. May reference event labels through `{{ }}` templates.
+	Expr string `json:"expr" toon:"expr"`
+	// Minimum step, in seconds. Only accepted when `mode` is `range`, and must be greater than zero; omit or pass null to let the server decide.
+	MinStepSeconds *int64 `json:"min_step_seconds,omitempty" toon:"min_step_seconds,omitempty"`
+	// Evaluation mode: `instant` evaluates at a single timestamp, `range` evaluates a stepped series, `window` returns raw rows inside a time window.
+	Mode string `json:"mode" toon:"mode"`
 }
 
 // DataSourceItem is generated from the Flashduty OpenAPI schema.
@@ -3776,6 +3788,8 @@ type FeedDetailWorkItemUpdated struct {
 type FeedItem struct {
 	// Account ID.
 	AccountID int64 `json:"account_id" toon:"account_id"`
+	// AI SRE session that produced the entry. Omitted when no agent wrote it.
+	AgentSessionID string `json:"agent_session_id" toon:"agent_session_id"`
 	// Creation timestamp in Unix epoch milliseconds.
 	CreatedAt TimestampMilli `json:"created_at" toon:"created_at"`
 	// Member ID of the creator. 0 for system-generated entries.
@@ -3789,6 +3803,8 @@ type FeedItem struct {
 	Type  AlertFeedType `json:"type" toon:"type"`
 	// Last update timestamp in Unix epoch milliseconds.
 	UpdatedAt TimestampMilli `json:"updated_at" toon:"updated_at"`
+	// Surface that wrote the entry on a user's behalf; currently only `ai_sre`. Omitted when a user created the entry directly.
+	Via string `json:"via" toon:"via"`
 }
 
 // FieldDeleteReference is generated from the Flashduty OpenAPI schema.
@@ -4583,16 +4599,20 @@ type InsightTopkAlertByLabelRequest struct {
 type InvestigationTarget struct {
 	// Configuration for the `dashboard` kind; required when `kind` is `dashboard`.
 	Dashboard DashboardInvestigationTarget `json:"dashboard,omitzero" toon:"dashboard,omitempty"`
-	// Entry type; currently only `dashboard` is supported.
+	// Entry kind: `dashboard` opens a dashboard panel, `query` opens an Explore query. It decides whether `dashboard` or `query` must be supplied; supplying the other one is rejected.
 	Kind string `json:"kind" toon:"kind"`
+	// Configuration for the `query` kind; required when `kind` is `query`, and rejected when `kind` is `dashboard`.
+	Query QueryInvestigationTarget `json:"query,omitzero" toon:"query,omitempty"`
+	// Window around the event time, required on every saved entry. A zero-length window is rejected; defaults belong to the editor.
+	TimeRange InvestigationTimeRange `json:"time_range" toon:"time_range"`
 }
 
-// InvestigationVariableBinding is generated from the Flashduty OpenAPI schema.
-type InvestigationVariableBinding struct {
-	// Alert event label name; must follow Prometheus label naming rules and must not be a reserved label.
-	Key string `json:"key" toon:"key"`
-	// Where the bound value comes from; currently only `event_label` (the alert event's label value) is supported.
-	Source string `json:"source" toon:"source"`
+// InvestigationTimeRange is generated from the Flashduty OpenAPI schema.
+type InvestigationTimeRange struct {
+	// Seconds to look forward from the event time, so behaviour after the event stays visible.
+	AfterSeconds int64 `json:"after_seconds" toon:"after_seconds"`
+	// Seconds to look back from the event time.
+	BeforeSeconds int64 `json:"before_seconds" toon:"before_seconds"`
 }
 
 // InviteMemberItem is generated from the Flashduty OpenAPI schema.
@@ -5782,9 +5802,7 @@ type MemberListResponse struct {
 
 // MemberNotifyRequest is generated from the Flashduty OpenAPI schema.
 type MemberNotifyRequest struct {
-	// Check without sending. When `true`, every check runs and the response returns the exact email in `html`, but nothing is queued and neither the hourly limit nor the per-turn duplicate check is consumed. Defaults to `false`.
-	DryRun bool `json:"dry_run,omitempty" toon:"dry_run,omitempty"`
-	// Email body as an HTML fragment (no `<html>`/`<head>`/`<body>` wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: `<script>`, `<style>`, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<input>`, `<button>`, `<svg>`, `<meta>`, `<link>`, and `<base>` tags and all `on*` event handlers are removed; images are kept only when their `src` is `https` — images with any other or no `src`, including `data:`, are removed; links are restricted to `http`, `https`, and `mailto`. Inline `style` attributes are kept as written.
+	// Email body as an HTML fragment (no `<html>`/`<head>`/`<body>` wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. `<script>`, `<meta>`, `<link>`, and `<base>` tags and all `on*` event handlers are silently removed before sending, since email clients never execute them; inline `style` attributes are kept as written. `<style>`, `<svg>`, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<input>`, and `<button>` tags, an `<img>` with a missing or non-`https` `src` (including `data:`), or an `<a>` whose href scheme is not `http`, `https`, or `mailto` are rejected instead of stripped: the request fails with `400` rather than silently changing what recipients see.
 	HTML string `json:"html" toon:"html"`
 	// Recipient member IDs. Optional, up to 20, no duplicates. Omitted or empty sends to the caller only.
 	PersonIDs []int64 `json:"person_ids,omitempty" toon:"person_ids,omitempty"`
@@ -5794,9 +5812,9 @@ type MemberNotifyRequest struct {
 
 // MemberNotifyResponse is generated from the Flashduty OpenAPI schema.
 type MemberNotifyResponse struct {
-	// Only present when `dry_run` is `true`: the complete email HTML exactly as recipients would receive it, after sanitization.
-	HTML string `json:"html" toon:"html"`
-	// One result per resolved recipient, in the same order as the resolved recipient list. With `dry_run`, each result is what a real send would return.
+	// Present when the submitted HTML body does not follow the default email layout (no `max-width:600px` wrapper table): guidance telling the calling AI SRE agent how to conform. Advisory only — a format the caller deliberately chose needs no change.
+	AgentInstructions string `json:"agent_instructions" toon:"agent_instructions"`
+	// One result per resolved recipient, in the same order as the resolved recipient list.
 	Recipients []MemberNotifyResultItem `json:"recipients" toon:"recipients"`
 }
 
@@ -6138,6 +6156,22 @@ type PastIncidentItem struct {
 	UpdatedAt Timestamp `json:"updated_at" toon:"updated_at"`
 }
 
+// PendingUserMessage is generated from the Flashduty OpenAPI schema.
+type PendingUserMessage struct {
+	// Client-supplied message ID, echoed back for de-duplication. Omitted when absent.
+	ClientMsgID string `json:"client_msg_id" toon:"client_msg_id"`
+	// Invocation ID of the queued message.
+	InvocationID string `json:"invocation_id" toon:"invocation_id"`
+	// Request parts passed through verbatim (text, file, ref, or skill entries). Omitted when the original message carried none.
+	Parts []map[string]any `json:"parts" toon:"parts"`
+	// Person ID of the sender.
+	PersonID int64 `json:"person_id" toon:"person_id"`
+	// Message text.
+	Query string `json:"query" toon:"query"`
+	// True when the message was sent as a mid-turn steering instruction. Omitted when false.
+	Steering bool `json:"steering" toon:"steering"`
+}
+
 // PermissionFactorItem is generated from the Flashduty OpenAPI schema.
 type PermissionFactorItem struct {
 	// Factor identifier (e.g., 'template:read:info').
@@ -6392,6 +6426,10 @@ type PreviewRemoteConfigResponse struct {
 type PreviewTemplateRequest struct {
 	// Template content to render.
 	Content string `json:"content" toon:"content"`
+	// Render the preview as a Feishu app card v2 message.
+	FeishuAppCardV2Enabled bool `json:"feishu_app_card_v2_enabled,omitempty" toon:"feishu_app_card_v2_enabled,omitempty"`
+	// Keep blank lines in the body of the Feishu app card v2 preview.
+	FeishuAppCardV2PreserveBlankLines bool `json:"feishu_app_card_v2_preserve_blank_lines,omitempty" toon:"feishu_app_card_v2_preserve_blank_lines,omitempty"`
 	// Incident card fields to hide per IM app when previewing.
 	IncidentCardHiddenFields IncidentCardHiddenFields `json:"incident_card_hidden_fields,omitempty" toon:"incident_card_hidden_fields,omitempty"`
 	// Incident ID whose data is used to render the template; mock data is used when omitted. A MongoDB ObjectID hex string.
@@ -6546,6 +6584,14 @@ type QueryFramesResult struct {
 	Kind string `json:"kind" toon:"kind"`
 }
 
+// QueryInvestigationTarget is generated from the Flashduty OpenAPI schema.
+type QueryInvestigationTarget struct {
+	// Data source the query runs against.
+	DatasourceID int64 `json:"datasource_id" toon:"datasource_id"`
+	// Query payload.
+	Query DashboardQuery `json:"query" toon:"query"`
+}
+
 // QueryRecordsResult is generated from the Flashduty OpenAPI schema.
 type QueryRecordsResult struct {
 	// Result-kind discriminator, always `records`, indicating the `records` payload of schemaless record objects.
@@ -7024,15 +7070,15 @@ type RouteSection struct {
 // RuleConfigs is generated from the Flashduty OpenAPI schema.
 type RuleConfigs struct {
 	// Any-data check configuration. Fires when the query returns any data rows.
-	CheckAnydata RuleConfigsCheckAnydata `json:"check_anydata,omitzero" toon:"check_anydata,omitempty"`
+	CheckAnydata RuleConfigsCheckAnydata `json:"check_anydata" toon:"check_anydata"`
 	// No-data check configuration.
-	CheckNodata RuleConfigsCheckNodata `json:"check_nodata,omitzero" toon:"check_nodata,omitempty"`
+	CheckNodata RuleConfigsCheckNodata `json:"check_nodata" toon:"check_nodata"`
 	// Threshold check configuration.
-	CheckThreshold RuleConfigsCheckThreshold `json:"check_threshold,omitzero" toon:"check_threshold,omitempty"`
+	CheckThreshold RuleConfigsCheckThreshold `json:"check_threshold" toon:"check_threshold"`
 	// Query list with at least one entry; each needs a unique `name` (`R` and `__all__` are reserved) and a non-empty, non-duplicate `expr`.
 	Queries []RuleConfigsQueriesItem `json:"queries" toon:"queries"`
 	// Optional auxiliary queries whose results are attached to alert events as context. Each entry must have a unique `name` (not duplicating any query name) and a non-empty `expr`.
-	RelateQueries []RuleConfigsRelateQueriesItem `json:"relate_queries,omitempty" toon:"relate_queries,omitempty"`
+	RelateQueries []RuleConfigsRelateQueriesItem `json:"relate_queries" toon:"relate_queries"`
 }
 
 // RuleCreateResponse is generated from the Flashduty OpenAPI schema.
@@ -7151,6 +7197,8 @@ type RUMApplicationCreateRequest struct {
 	NoGeo bool `json:"no_geo,omitempty" toon:"no_geo,omitempty"`
 	// Do not collect IP addresses.
 	NoIP bool `json:"no_ip,omitempty" toon:"no_ip,omitempty"`
+	// Source code repositories to link, in order; the first entry is the primary repository. At most 10 entries.
+	Repositories []RUMApplicationRepository `json:"repositories,omitempty" toon:"repositories,omitempty"`
 	// Owning team ID. Get team IDs via `POST /team/list`.
 	TeamID int64 `json:"team_id" toon:"team_id"`
 	// Optional APM tracing integration configuration.
@@ -7225,6 +7273,8 @@ type RUMApplicationItem struct {
 	NoGeo bool `json:"no_geo" toon:"no_geo"`
 	// If `true`, IP addresses are not collected.
 	NoIP bool `json:"no_ip" toon:"no_ip"`
+	// Linked source code repositories, in order; the first entry is the primary repository. Linking grants no access by itself: AI sessions can only read repositories granted to the account's GitHub App installations.
+	Repositories []RUMApplicationRepository `json:"repositories" toon:"repositories"`
 	// Application status. One of `enabled` (active, receiving data), `disabled` (deactivated), `deleted` (soft-delete marker; every query filters it out, so it never actually appears in responses).
 	Status string `json:"status" toon:"status"`
 	// Owning team ID.
@@ -7314,6 +7364,14 @@ type RUMApplicationListResponse struct {
 	Total int64 `json:"total" toon:"total"`
 }
 
+// RUMApplicationRepository is generated from the Flashduty OpenAPI schema.
+type RUMApplicationRepository struct {
+	// GitHub repository in `owner/name` form.
+	Repo string `json:"repo" toon:"repo"`
+	// Directory holding the application inside the repository, relative to the repository root. `.` is the repository root; an empty value is saved as `.`.
+	Subdir string `json:"subdir,omitempty" toon:"subdir,omitempty"`
+}
+
 // RUMApplicationTracing is generated from the Flashduty OpenAPI schema.
 type RUMApplicationTracing struct {
 	// Whether tracing integration is enabled.
@@ -7340,6 +7398,8 @@ type RUMApplicationUpdateRequest struct {
 	NoGeo *bool `json:"no_geo,omitempty" toon:"no_geo,omitempty"`
 	// When `true`, stop collecting user IP addresses; when `false`, resume collecting them. Omit to leave unchanged.
 	NoIP *bool `json:"no_ip,omitempty" toon:"no_ip,omitempty"`
+	// Replaces the linked source code repositories when present; an empty array removes all links, and omitting the field leaves them unchanged. At most 10 entries.
+	Repositories []RUMApplicationRepository `json:"repositories,omitzero" toon:"repositories,omitempty"`
 	// Owning team ID. Get team IDs via `POST /team/list`. Omit to leave unchanged.
 	TeamID *int64 `json:"team_id,omitempty" toon:"team_id,omitempty"`
 	// APM tracing integration configuration. Omit to leave unchanged.
@@ -8853,6 +8913,8 @@ type SessionGetResponse struct {
 	Events []EventItem `json:"events" toon:"events"`
 	// True when older events remain beyond this page.
 	HasMoreOlder bool `json:"has_more_older" toon:"has_more_older"`
+	// Human messages queued but not yet picked up by the agent, in execution order. Always an array — empty when nothing is queued.
+	PendingMessages []PendingUserMessage `json:"pending_messages" toon:"pending_messages"`
 	// Opaque keyset cursor; pass back as search_after_ctx to fetch the next older page. Omitted when has_more_older is false.
 	SearchAfterCtx string      `json:"search_after_ctx" toon:"search_after_ctx"`
 	Session        SessionItem `json:"session" toon:"session"`
@@ -8889,6 +8951,8 @@ type SessionItem struct {
 	ContextWindow int64 `json:"context_window" toon:"context_window"`
 	// Unix timestamp in milliseconds when the session was created.
 	CreatedAt TimestampMilli `json:"created_at" toon:"created_at"`
+	// Display name of the session creator, resolved when the response is rendered. Omitted when the member lookup fails.
+	CreatorName string `json:"creator_name" toon:"creator_name"`
 	// Size in tokens of the LLM context window as of the most recent turn. 0 means no turn has completed.
 	CurrentContextTokens int64 `json:"current_context_tokens" toon:"current_context_tokens"`
 	// Active working duration in milliseconds for the current or most recent round, excluding time spent waiting on ask_user; resets to 0 at the start of each new round.
@@ -8936,6 +9000,8 @@ type SessionItem struct {
 	SharedAt TimestampMilli `json:"shared_at" toon:"shared_at"`
 	// Person ID that most recently enabled sharing; 0 if never shared.
 	SharedBy int64 `json:"shared_by" toon:"shared_by"`
+	// Number of process-type tasks (background shell or monitor) still alive when the response was rendered.
+	StandingTasks int64 `json:"standing_tasks" toon:"standing_tasks"`
 	// Raw session-state bag (session-scoped keys). Omitted when empty.
 	State map[string]any `json:"state" toon:"state"`
 	// Lifecycle status. One of: `enabled` (active), `deleted` (soft-deleted, no longer accessible).
@@ -9848,8 +9914,14 @@ type TemplateCreateRequest struct {
 	Feishu string `json:"feishu,omitempty" toon:"feishu,omitempty"`
 	// Feishu app message template source.
 	FeishuApp string `json:"feishu_app,omitempty" toon:"feishu_app,omitempty"`
+	// Keep blank lines in the body of Feishu app card v2 messages.
+	FeishuAppCardV2PreserveBlankLines bool `json:"feishu_app_card_v2_preserve_blank_lines,omitempty" toon:"feishu_app_card_v2_preserve_blank_lines,omitempty"`
 	// Render alert labels as a table in Feishu app cards.
 	FeishuAppCardV2TableEnabled bool `json:"feishu_app_card_v2_table_enabled,omitempty" toon:"feishu_app_card_v2_table_enabled,omitempty"`
+	// Show the Create War Room button on Feishu app cards.
+	FeishuAppWarRoomEnabled bool `json:"feishu_app_war_room_enabled,omitempty" toon:"feishu_app_war_room_enabled,omitempty"`
+	// IM apps whose closed-incident cards keep the custom action buttons. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. An empty list hides the buttons on every app.
+	IncidentCardClosedActionApps []string `json:"incident_card_closed_action_apps,omitempty" toon:"incident_card_closed_action_apps,omitempty"`
 	// Incident card fields hidden per IM app type.
 	IncidentCardHiddenFields IncidentCardHiddenFields `json:"incident_card_hidden_fields,omitempty" toon:"incident_card_hidden_fields,omitempty"`
 	// Slack robot message template source.
@@ -9872,6 +9944,8 @@ type TemplateCreateRequest struct {
 	Wecom string `json:"wecom,omitempty" toon:"wecom,omitempty"`
 	// WeCom app message template source.
 	WecomApp string `json:"wecom_app,omitempty" toon:"wecom_app,omitempty"`
+	// Send WeCom robot notifications as `markdown_v2` messages instead of plain markdown.
+	WecomMarkdownV2Enabled bool `json:"wecom_markdown_v2_enabled,omitempty" toon:"wecom_markdown_v2_enabled,omitempty"`
 	// Zoom bot message template source.
 	Zoom string `json:"zoom,omitempty" toon:"zoom,omitempty"`
 }
@@ -9912,8 +9986,14 @@ type TemplateItem struct {
 	Feishu string `json:"feishu" toon:"feishu"`
 	// Feishu app message template source.
 	FeishuApp string `json:"feishu_app" toon:"feishu_app"`
+	// Whether Feishu app card v2 messages keep blank lines in the body.
+	FeishuAppCardV2PreserveBlankLines bool `json:"feishu_app_card_v2_preserve_blank_lines" toon:"feishu_app_card_v2_preserve_blank_lines"`
 	// Whether alert labels use table rendering in Feishu app cards.
 	FeishuAppCardV2TableEnabled bool `json:"feishu_app_card_v2_table_enabled" toon:"feishu_app_card_v2_table_enabled"`
+	// Whether Feishu app cards show the Create War Room button. Hidden when the incident has no responders.
+	FeishuAppWarRoomEnabled bool `json:"feishu_app_war_room_enabled" toon:"feishu_app_war_room_enabled"`
+	// IM apps whose closed-incident cards keep the custom action buttons. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. An empty list hides the buttons on every app.
+	IncidentCardClosedActionApps []string `json:"incident_card_closed_action_apps" toon:"incident_card_closed_action_apps"`
 	// Incident card fields hidden per IM app type; an empty object when none are configured.
 	IncidentCardHiddenFields IncidentCardHiddenFields `json:"incident_card_hidden_fields" toon:"incident_card_hidden_fields"`
 	// Slack robot message template source.
@@ -9944,6 +10024,8 @@ type TemplateItem struct {
 	Wecom string `json:"wecom" toon:"wecom"`
 	// WeCom app message template source.
 	WecomApp string `json:"wecom_app" toon:"wecom_app"`
+	// Whether WeCom robot notifications use the `markdown_v2` message format.
+	WecomMarkdownV2Enabled bool `json:"wecom_markdown_v2_enabled" toon:"wecom_markdown_v2_enabled"`
 	// Zoom bot message template source.
 	Zoom string `json:"zoom" toon:"zoom"`
 }
@@ -9989,8 +10071,14 @@ type TemplateUpdateRequest struct {
 	Feishu *string `json:"feishu,omitempty" toon:"feishu,omitempty"`
 	// Feishu app message template source. Omit to keep the current content; send an empty string to clear it.
 	FeishuApp *string `json:"feishu_app,omitempty" toon:"feishu_app,omitempty"`
+	// When set, keep or drop blank lines in the body of Feishu app card v2 messages. Omit to keep the existing setting.
+	FeishuAppCardV2PreserveBlankLines *bool `json:"feishu_app_card_v2_preserve_blank_lines,omitempty" toon:"feishu_app_card_v2_preserve_blank_lines,omitempty"`
 	// When set, enable or disable table rendering for alert labels in Feishu app cards. Omit to keep the existing setting.
 	FeishuAppCardV2TableEnabled *bool `json:"feishu_app_card_v2_table_enabled,omitempty" toon:"feishu_app_card_v2_table_enabled,omitempty"`
+	// When set, show or hide the Create War Room button on Feishu app cards. Omit to keep the existing setting.
+	FeishuAppWarRoomEnabled *bool `json:"feishu_app_war_room_enabled,omitempty" toon:"feishu_app_war_room_enabled,omitempty"`
+	// Replaces the retained-app list when sent. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. Omit the field to leave it unchanged.
+	IncidentCardClosedActionApps []string `json:"incident_card_closed_action_apps,omitempty" toon:"incident_card_closed_action_apps,omitempty"`
 	// Incident card fields hidden per IM app type.
 	IncidentCardHiddenFields IncidentCardHiddenFields `json:"incident_card_hidden_fields,omitempty" toon:"incident_card_hidden_fields,omitempty"`
 	// Slack robot message template source. Omit to keep the current content; send an empty string to clear it.
@@ -10015,6 +10103,8 @@ type TemplateUpdateRequest struct {
 	Wecom *string `json:"wecom,omitempty" toon:"wecom,omitempty"`
 	// WeCom app message template source. Omit to keep the current content; send an empty string to clear it.
 	WecomApp *string `json:"wecom_app,omitempty" toon:"wecom_app,omitempty"`
+	// When set, switch WeCom robot notifications between `markdown_v2` and plain markdown. Omit to keep the existing setting.
+	WecomMarkdownV2Enabled *bool `json:"wecom_markdown_v2_enabled,omitempty" toon:"wecom_markdown_v2_enabled,omitempty"`
 	// Zoom bot message template source. Omit to keep the current content; send an empty string to clear it.
 	Zoom *string `json:"zoom,omitempty" toon:"zoom,omitempty"`
 }
@@ -10476,6 +10566,8 @@ type WarRoomItem struct {
 	AccountID int64 `json:"account_id" toon:"account_id"`
 	// Chat/group ID on the IM side.
 	ChatID string `json:"chat_id" toon:"chat_id"`
+	// Display name of the group chat on the IM side.
+	ChatName string `json:"chat_name" toon:"chat_name"`
 	// Creation timestamp (seconds).
 	CreatedAt Timestamp `json:"created_at" toon:"created_at"`
 	// Member ID that created the war room.
@@ -10484,6 +10576,8 @@ type WarRoomItem struct {
 	IncidentID string `json:"incident_id" toon:"incident_id"`
 	// IM integration ID.
 	IntegrationID int64 `json:"integration_id" toon:"integration_id"`
+	// True when the IM integration behind this war room is disabled or no longer exists.
+	IntegrationUnavailable bool `json:"integration_unavailable" toon:"integration_unavailable"`
 	// IM plugin type (e.g. `feishu`, `dingtalk`, `wecom`, `slack`).
 	PluginType string `json:"plugin_type" toon:"plugin_type"`
 	// War room record status: `enabled` active, `deleted` disbanded.
@@ -10689,11 +10783,11 @@ type AddIncidentResponderRequestNotify struct {
 // AlertRuleEnabledTimesItem is generated from the Flashduty OpenAPI schema.
 type AlertRuleEnabledTimesItem struct {
 	// Days of week (0=Sunday).
-	Days []int64 `json:"days,omitempty" toon:"days,omitempty"`
+	Days []int64 `json:"days" toon:"days"`
 	// End time, e.g. `18:00`.
-	Etime string `json:"etime,omitempty" toon:"etime,omitempty"`
+	Etime string `json:"etime" toon:"etime"`
 	// Start time, e.g. `09:00`.
-	Stime string `json:"stime,omitempty" toon:"stime,omitempty"`
+	Stime string `json:"stime" toon:"stime"`
 }
 
 // AlertRuleConfigsV2QueriesItem is generated from the Flashduty OpenAPI schema.
@@ -11054,81 +11148,81 @@ type PostMortemItemContent struct {
 // RuleConfigsCheckAnydata is generated from the Flashduty OpenAPI schema.
 type RuleConfigsCheckAnydata struct {
 	// Number of consecutive evaluations that must satisfy the condition before alerting; minimum 1.
-	AlertingCheckTimes int64 `json:"alerting_check_times,omitempty" toon:"alerting_check_times,omitempty"`
+	AlertingCheckTimes int64 `json:"alerting_check_times" toon:"alerting_check_times"`
 	// Whether any-data checking is enabled: any returned data row triggers an alert.
-	Enabled bool `json:"enabled,omitempty" toon:"enabled,omitempty"`
+	Enabled bool `json:"enabled" toon:"enabled"`
 	// Whether to push a recovery event notification when the alert resolves.
-	PushRecoveryEvent bool `json:"push_recovery_event,omitempty" toon:"push_recovery_event,omitempty"`
+	PushRecoveryEvent bool `json:"push_recovery_event" toon:"push_recovery_event"`
 	// Recovery condition for any-data check. If omitted or `mode` is empty, treated as `nodata`.
-	Recovery RuleConfigsCheckAnydataRecovery `json:"recovery,omitzero" toon:"recovery,omitempty"`
+	Recovery RuleConfigsCheckAnydataRecovery `json:"recovery" toon:"recovery"`
 	// Number of consecutive evaluations that must satisfy the recovery condition before resolving; minimum 1.
-	RecoveryCheckTimes int64 `json:"recovery_check_times,omitempty" toon:"recovery_check_times,omitempty"`
+	RecoveryCheckTimes int64 `json:"recovery_check_times" toon:"recovery_check_times"`
 	// Severity of any-data alert events; case-sensitive.
-	Severity string `json:"severity,omitempty" toon:"severity,omitempty"`
+	Severity string `json:"severity" toon:"severity"`
 }
 
 // RuleConfigsCheckNodata is generated from the Flashduty OpenAPI schema.
 type RuleConfigsCheckNodata struct {
 	// Whether to trigger an alert when every query returns an empty result.
-	AlertOnEmptyResult bool `json:"alert_on_empty_result,omitempty" toon:"alert_on_empty_result,omitempty"`
+	AlertOnEmptyResult bool `json:"alert_on_empty_result" toon:"alert_on_empty_result"`
 	// Severity of empty-result alerts, case-sensitive; only effective when `alert_on_empty_result` is enabled.
-	AlertOnEmptyResultSeverity string `json:"alert_on_empty_result_severity,omitempty" toon:"alert_on_empty_result_severity,omitempty"`
+	AlertOnEmptyResultSeverity string `json:"alert_on_empty_result_severity" toon:"alert_on_empty_result_severity"`
 	// Number of consecutive evaluations that must satisfy the condition before alerting; minimum 1.
-	AlertingCheckTimes int64 `json:"alerting_check_times,omitempty" toon:"alerting_check_times,omitempty"`
+	AlertingCheckTimes int64 `json:"alerting_check_times" toon:"alerting_check_times"`
 	// Whether no-data checking is enabled: a previously-seen series that stops returning data triggers an alert.
-	Enabled bool `json:"enabled,omitempty" toon:"enabled,omitempty"`
+	Enabled bool `json:"enabled" toon:"enabled"`
 	// Whether to push a recovery event notification when the alert resolves.
-	PushRecoveryEvent bool `json:"push_recovery_event,omitempty" toon:"push_recovery_event,omitempty"`
+	PushRecoveryEvent bool `json:"push_recovery_event" toon:"push_recovery_event"`
 	// Number of consecutive evaluations that must satisfy the recovery condition before resolving; minimum 1.
-	RecoveryCheckTimes int64 `json:"recovery_check_times,omitempty" toon:"recovery_check_times,omitempty"`
+	RecoveryCheckTimes int64 `json:"recovery_check_times" toon:"recovery_check_times"`
 	// Auto-resolve after N seconds.
-	ResolveTimeout int64 `json:"resolve_timeout,omitempty" toon:"resolve_timeout,omitempty"`
+	ResolveTimeout int64 `json:"resolve_timeout" toon:"resolve_timeout"`
 	// Severity of no-data alert events; case-sensitive.
-	Severity string `json:"severity,omitempty" toon:"severity,omitempty"`
+	Severity string `json:"severity" toon:"severity"`
 }
 
 // RuleConfigsCheckThreshold is generated from the Flashduty OpenAPI schema.
 type RuleConfigsCheckThreshold struct {
 	// Number of consecutive evaluations that must satisfy the condition before alerting; minimum 1.
-	AlertingCheckTimes int64 `json:"alerting_check_times,omitempty" toon:"alerting_check_times,omitempty"`
+	AlertingCheckTimes int64 `json:"alerting_check_times" toon:"alerting_check_times"`
 	// Critical threshold expression referencing query results via `$<query>` or `$<query>.<value_field>`, e.g. `$A > 90`; at least one severity must be configured.
-	Critical string `json:"critical,omitempty" toon:"critical,omitempty"`
+	Critical string `json:"critical" toon:"critical"`
 	// Whether threshold checking is enabled.
-	Enabled bool `json:"enabled,omitempty" toon:"enabled,omitempty"`
+	Enabled bool `json:"enabled" toon:"enabled"`
 	// Info threshold expression, same syntax as `critical`.
-	Info string `json:"info,omitempty" toon:"info,omitempty"`
+	Info string `json:"info" toon:"info"`
 	// Whether to push a recovery event notification when the alert resolves.
-	PushRecoveryEvent bool `json:"push_recovery_event,omitempty" toon:"push_recovery_event,omitempty"`
+	PushRecoveryEvent bool `json:"push_recovery_event" toon:"push_recovery_event"`
 	// Recovery evaluation configuration for threshold checks.
-	Recovery RuleConfigsCheckThresholdRecovery `json:"recovery,omitzero" toon:"recovery,omitempty"`
+	Recovery RuleConfigsCheckThresholdRecovery `json:"recovery" toon:"recovery"`
 	// Number of consecutive evaluations that must satisfy the recovery condition before resolving; minimum 1.
-	RecoveryCheckTimes int64 `json:"recovery_check_times,omitempty" toon:"recovery_check_times,omitempty"`
+	RecoveryCheckTimes int64 `json:"recovery_check_times" toon:"recovery_check_times"`
 	// Warning threshold expression, same syntax as `critical`.
-	Warning string `json:"warning,omitempty" toon:"warning,omitempty"`
+	Warning string `json:"warning" toon:"warning"`
 }
 
 // RuleConfigsQueriesItem is generated from the Flashduty OpenAPI schema.
 type RuleConfigsQueriesItem struct {
 	// Datasource-specific query options keyed by the `<datasource>.<option>` convention (e.g. `es.type`, `tencent_cls.limit`); most datasources need none.
-	Args map[string]string `json:"args,omitempty" toon:"args,omitempty"`
+	Args map[string]string `json:"args" toon:"args"`
 	// Query expression.
-	Expr string `json:"expr,omitempty" toon:"expr,omitempty"`
+	Expr string `json:"expr" toon:"expr"`
 	// Result fields that become alert event labels — identical label sets collapse into one alert; must not overlap `value_fields`; applies to table-shaped results (SQL/ES-style datasources).
-	LabelFields []string `json:"label_fields,omitempty" toon:"label_fields,omitempty"`
+	LabelFields []string `json:"label_fields" toon:"label_fields"`
 	// Query identifier (letter, e.g. `A`). The name `R` is reserved and must not be used.
-	Name string `json:"name,omitempty" toon:"name,omitempty"`
+	Name string `json:"name" toon:"name"`
 	// Numeric result fields used in threshold evaluation (referenced as `$A.<field>` in threshold expressions); required for threshold checks unless the datasource is `prometheus`/`loki`/`victorialogs`; field names must not contain `.`.
-	ValueFields []string `json:"value_fields,omitempty" toon:"value_fields,omitempty"`
+	ValueFields []string `json:"value_fields" toon:"value_fields"`
 }
 
 // RuleConfigsRelateQueriesItem is generated from the Flashduty OpenAPI schema.
 type RuleConfigsRelateQueriesItem struct {
 	// Datasource-specific options for the auxiliary query, same convention as `queries[].args`.
-	Args map[string]string `json:"args,omitempty" toon:"args,omitempty"`
+	Args map[string]string `json:"args" toon:"args"`
 	// Query expression.
-	Expr string `json:"expr,omitempty" toon:"expr,omitempty"`
+	Expr string `json:"expr" toon:"expr"`
 	// Relate-query identifier.
-	Name string `json:"name,omitempty" toon:"name,omitempty"`
+	Name string `json:"name" toon:"name"`
 }
 
 // RUMIssueItemError is generated from the Flashduty OpenAPI schema.
@@ -11283,23 +11377,23 @@ type CreateStatusPageChangeRequestUpdatesItemComponentChangesItem struct {
 // RuleConfigsCheckAnydataRecovery is generated from the Flashduty OpenAPI schema.
 type RuleConfigsCheckAnydataRecovery struct {
 	// Datasource-specific options for the recovery query, same convention as `queries[].args`; required for Elasticsearch datasources when `mode` is `ql`.
-	Args map[string]string `json:"args,omitempty" toon:"args,omitempty"`
+	Args map[string]string `json:"args" toon:"args"`
 	// Recovery expression. Required when `mode` is `ql`.
-	Condition string `json:"condition,omitempty" toon:"condition,omitempty"`
+	Condition string `json:"condition" toon:"condition"`
 	// `nodata` = recover when the query returns no data; `ql` = recover when the `condition` expression evaluates to true. When `mode` is `ql`, only a single query (`name=A`) is permitted.
-	Mode string `json:"mode,omitempty" toon:"mode,omitempty"`
+	Mode string `json:"mode" toon:"mode"`
 }
 
 // RuleConfigsCheckThresholdRecovery is generated from the Flashduty OpenAPI schema.
 type RuleConfigsCheckThresholdRecovery struct {
 	// Datasource-specific extra parameters for the recovery query, using the same `<datasource>.<param>` key convention as query `args`. Omitted when empty.
-	Args map[string]string `json:"args,omitempty" toon:"args,omitempty"`
+	Args map[string]string `json:"args" toon:"args"`
 	// Recovery condition expression; required when `mode` is `threshold` or `ql`, and must be empty for `invert`.
-	Condition string `json:"condition,omitempty" toon:"condition,omitempty"`
+	Condition string `json:"condition" toon:"condition"`
 	// Recovery mode: `invert` = resolve when the alert expression no longer holds (`condition` stays empty); `threshold` = resolve when the `condition` threshold expression holds; `ql` = resolve when the `condition` query expression evaluates true.
-	Mode string `json:"mode,omitempty" toon:"mode,omitempty"`
+	Mode string `json:"mode" toon:"mode"`
 	// Numeric result fields the recovery `condition` references as `$A.<field>`; same semantics as the query's `value_fields`. Omitted when empty.
-	ValueFields []string `json:"value_fields,omitempty" toon:"value_fields,omitempty"`
+	ValueFields []string `json:"value_fields" toon:"value_fields"`
 }
 
 // CreateChannelRequestEscalateRuleTargetBy is generated from the Flashduty OpenAPI schema.
diff --git a/openapi/openapi.en.json b/openapi/openapi.en.json
index c50b073..9ea6dd5 100644
--- a/openapi/openapi.en.json
+++ b/openapi/openapi.en.json
@@ -2982,7 +2982,7 @@
             "type": "integer"
           },
           "credential_type": {
-            "description": "Credential type used for the call. `app_key` when authenticated with an app key; empty string for member sessions.",
+            "description": "Credential type used for the call. `app_key` for a long-lived console app key, `ephemeral_app_key` for a short-lived key issued to AI SRE, and an empty string for member sessions.",
             "type": "string"
           },
           "ip": {
@@ -3494,7 +3494,8 @@
           },
           "limit": {
             "default": 20,
-            "description": "Page size.",
+            "description": "Page size. Values below 1 fall back to 20; values above 200 are capped at 200.",
+            "maximum": 200,
             "type": "integer"
           },
           "p": {
@@ -7575,6 +7576,46 @@
           }
         }
       },
+      "PendingUserMessage": {
+        "type": "object",
+        "description": "A queued user message that the agent has not consumed yet, as carried by `pending_messages`.",
+        "required": [
+          "invocation_id",
+          "person_id",
+          "query"
+        ],
+        "properties": {
+          "invocation_id": {
+            "type": "string",
+            "description": "Invocation ID of the queued message."
+          },
+          "client_msg_id": {
+            "type": "string",
+            "description": "Client-supplied message ID, echoed back for de-duplication. Omitted when absent."
+          },
+          "person_id": {
+            "type": "integer",
+            "format": "int64",
+            "description": "Person ID of the sender."
+          },
+          "steering": {
+            "type": "boolean",
+            "description": "True when the message was sent as a mid-turn steering instruction. Omitted when false."
+          },
+          "query": {
+            "type": "string",
+            "description": "Message text."
+          },
+          "parts": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": true
+            },
+            "description": "Request parts passed through verbatim (text, file, ref, or skill entries). Omitted when the original message carried none."
+          }
+        }
+      },
       "PrometheusQueryParams": {
         "type": "object",
         "additionalProperties": true,
@@ -10511,6 +10552,14 @@
             "description": "Last update timestamp in Unix epoch milliseconds.",
             "format": "int64",
             "type": "integer"
+          },
+          "via": {
+            "type": "string",
+            "description": "Surface that wrote the entry on a user's behalf; currently only `ai_sre`. Omitted when a user created the entry directly."
+          },
+          "agent_session_id": {
+            "type": "string",
+            "description": "AI SRE session that produced the entry. Omitted when no agent wrote it."
           }
         },
         "required": [
@@ -17263,6 +17312,14 @@
             "description": "Template content to render.",
             "type": "string"
           },
+          "feishu_app_card_v2_enabled": {
+            "type": "boolean",
+            "description": "Render the preview as a Feishu app card v2 message."
+          },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "Keep blank lines in the body of the Feishu app card v2 preview."
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "Incident card fields to hide per IM app when previewing."
@@ -19368,6 +19425,14 @@
             "$ref": "#/components/schemas/RumApplicationLinks",
             "description": "Optional external-link integration configuration."
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "Source code repositories to link, in order; the first entry is the primary repository. At most 10 entries."
+          },
           "no_geo": {
             "description": "Do not infer geographic location.",
             "type": "boolean"
@@ -19514,6 +19579,14 @@
             "$ref": "#/components/schemas/RumApplicationLinks",
             "description": "External-link integration configuration."
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "Linked source code repositories, in order; the first entry is the primary repository. Linking grants no access by itself: AI sessions can only read repositories granted to the account's GitHub App installations."
+          },
           "no_geo": {
             "description": "If `true`, geographic location is not inferred from IP.",
             "type": "boolean"
@@ -19770,6 +19843,15 @@
             "description": "External-link integration configuration. Omit to leave unchanged.",
             "x-flashduty-preserve-absence": true
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "Replaces the linked source code repositories when present; an empty array removes all links, and omitting the field leaves them unchanged. At most 10 entries.",
+            "x-flashduty-preserve-absence": true
+          },
           "no_geo": {
             "description": "When `true`, stop inferring geographic location from IP; when `false`, resume inferring it. Omit to leave unchanged.",
             "type": [
@@ -23643,13 +23725,21 @@
           "suggest_init": {
             "description": "Account-wide onboarding flag: true when the account has zero knowledge packs in any scope; not specific to this session.",
             "type": "boolean"
+          },
+          "pending_messages": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/PendingUserMessage"
+            },
+            "description": "Human messages queued but not yet picked up by the agent, in execution order. Always an array — empty when nothing is queued."
           }
         },
         "required": [
           "session",
           "events",
           "has_more_older",
-          "suggest_init"
+          "suggest_init",
+          "pending_messages"
         ],
         "type": "object"
       },
@@ -23760,6 +23850,10 @@
             "description": "True when an agent turn is currently in flight for this session.",
             "type": "boolean"
           },
+          "standing_tasks": {
+            "type": "integer",
+            "description": "Number of process-type tasks (background shell or monitor) still alive when the response was rendered."
+          },
           "last_event_at": {
             "description": "Unix timestamp in milliseconds of the most recent assistant-side event.",
             "format": "int64",
@@ -23773,6 +23867,10 @@
             "description": "Creator person id.",
             "type": "string"
           },
+          "creator_name": {
+            "type": "string",
+            "description": "Display name of the session creator, resolved when the response is rendered. Omitted when the member lookup fails."
+          },
           "pinned_at": {
             "description": "Caller's per-user pin time as a Unix timestamp in milliseconds; 0 means not pinned.",
             "format": "int64",
@@ -23864,6 +23962,7 @@
           "archived_at",
           "pinned_at",
           "is_running",
+          "standing_tasks",
           "has_unread",
           "current_turn_started_at",
           "current_turn_active_ms",
@@ -26086,11 +26185,33 @@
             "description": "Feishu app message template source.",
             "type": "string"
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "Keep blank lines in the body of Feishu app card v2 messages."
+          },
           "feishu_app_card_v2_table_enabled": {
             "default": false,
             "description": "Render alert labels as a table in Feishu app cards.",
             "type": "boolean"
           },
+          "feishu_app_war_room_enabled": {
+            "type": "boolean",
+            "description": "Show the Create War Room button on Feishu app cards."
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "IM apps whose closed-incident cards keep the custom action buttons. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. An empty list hides the buttons on every app."
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "Incident card fields hidden per IM app type."
@@ -26140,6 +26261,10 @@
             "description": "WeCom app message template source.",
             "type": "string"
           },
+          "wecom_markdown_v2_enabled": {
+            "type": "boolean",
+            "description": "Send WeCom robot notifications as `markdown_v2` messages instead of plain markdown."
+          },
           "zoom": {
             "description": "Zoom bot message template source.",
             "type": "string"
@@ -26233,10 +26358,32 @@
             "description": "Feishu app message template source.",
             "type": "string"
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "Whether Feishu app card v2 messages keep blank lines in the body."
+          },
           "feishu_app_card_v2_table_enabled": {
             "description": "Whether alert labels use table rendering in Feishu app cards.",
             "type": "boolean"
           },
+          "feishu_app_war_room_enabled": {
+            "type": "boolean",
+            "description": "Whether Feishu app cards show the Create War Room button. Hidden when the incident has no responders."
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "IM apps whose closed-incident cards keep the custom action buttons. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. An empty list hides the buttons on every app."
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "Incident card fields hidden per IM app type; an empty object when none are configured."
@@ -26307,6 +26454,10 @@
             "description": "WeCom app message template source.",
             "type": "string"
           },
+          "wecom_markdown_v2_enabled": {
+            "type": "boolean",
+            "description": "Whether WeCom robot notifications use the `markdown_v2` message format."
+          },
           "zoom": {
             "description": "Zoom bot message template source.",
             "type": "string"
@@ -26326,6 +26477,9 @@
           "feishu",
           "feishu_app",
           "feishu_app_card_v2_table_enabled",
+          "wecom_markdown_v2_enabled",
+          "feishu_app_card_v2_preserve_blank_lines",
+          "feishu_app_war_room_enabled",
           "dingtalk_app",
           "wecom_app",
           "slack_app",
@@ -26338,6 +26492,7 @@
           "updated_by",
           "created_at",
           "updated_at",
+          "incident_card_closed_action_apps",
           "incident_card_hidden_fields"
         ],
         "type": "object"
@@ -26476,6 +26631,13 @@
               "null"
             ]
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "When set, keep or drop blank lines in the body of Feishu app card v2 messages. Omit to keep the existing setting."
+          },
           "feishu_app_card_v2_table_enabled": {
             "description": "When set, enable or disable table rendering for alert labels in Feishu app cards. Omit to keep the existing setting.",
             "type": [
@@ -26483,6 +26645,27 @@
               "null"
             ]
           },
+          "feishu_app_war_room_enabled": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "When set, show or hide the Create War Room button on Feishu app cards. Omit to keep the existing setting."
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "Replaces the retained-app list when sent. Supported values: `feishu_app`, `dingtalk_app`, `wecom_app`, `slack_app`, `teams_app`. Omit the field to leave it unchanged."
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "Incident card fields hidden per IM app type."
@@ -26563,6 +26746,13 @@
               "null"
             ]
           },
+          "wecom_markdown_v2_enabled": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "When set, switch WeCom robot notifications between `markdown_v2` and plain markdown. Omit to keep the existing setting."
+          },
           "zoom": {
             "description": "Zoom bot message template source. Omit to keep the current content; send an empty string to clear it.",
             "type": [
@@ -27965,6 +28155,14 @@
               "deleted"
             ],
             "type": "string"
+          },
+          "chat_name": {
+            "type": "string",
+            "description": "Display name of the group chat on the IM side."
+          },
+          "integration_unavailable": {
+            "type": "boolean",
+            "description": "True when the IM integration behind this war room is disabled or no longer exists."
           }
         },
         "required": [
@@ -27975,7 +28173,8 @@
           "incident_id",
           "status",
           "created_at",
-          "plugin_type"
+          "plugin_type",
+          "chat_name"
         ],
         "type": "object"
       },
@@ -28585,6 +28784,7 @@
             "items": {
               "$ref": "#/components/schemas/InvestigationTarget"
             },
+            "maxItems": 20,
             "description": "Drill-down entries linked from the alert event detail page; at most 20 items, duplicates rejected. On update the field is presence-based: omit it to keep the current value, pass `[]` to clear.",
             "x-flashduty-preserve-absence": true
           },
@@ -28885,14 +29085,23 @@
       },
       "InvestigationTarget": {
         "type": "object",
-        "description": "Drill-down entry linked to alert events. A deliberately closed tagged union: new kinds require explicit server support.",
+        "description": "Alert-event drill-down entry. A deliberately closed tagged union: new kinds require explicit server support, and unknown fields inside a target are rejected.",
         "properties": {
           "kind": {
             "type": "string",
             "enum": [
-              "dashboard"
+              "dashboard",
+              "query"
             ],
-            "description": "Entry type; currently only `dashboard` is supported."
+            "description": "Entry kind: `dashboard` opens a dashboard panel, `query` opens an Explore query. It decides whether `dashboard` or `query` must be supplied; supplying the other one is rejected."
+          },
+          "time_range": {
+            "$ref": "#/components/schemas/InvestigationTimeRange",
+            "description": "Window around the event time, required on every saved entry. A zero-length window is rejected; defaults belong to the editor."
+          },
+          "query": {
+            "$ref": "#/components/schemas/QueryInvestigationTarget",
+            "description": "Configuration for the `query` kind; required when `kind` is `query`, and rejected when `kind` is `dashboard`."
           },
           "dashboard": {
             "$ref": "#/components/schemas/DashboardInvestigationTarget",
@@ -28900,7 +29109,8 @@
           }
         },
         "required": [
-          "kind"
+          "kind",
+          "time_range"
         ]
       },
       "DashboardInvestigationTarget": {
@@ -28915,37 +29125,103 @@
             "type": "string",
             "description": "Panel ID inside the dashboard; must be a canonical UUIDv7. Optional."
           },
-          "variable_bindings": {
+          "variables": {
             "type": "object",
             "additionalProperties": {
-              "$ref": "#/components/schemas/InvestigationVariableBinding"
+              "type": "string"
             },
-            "description": "Dashboard variable bindings, keyed by dashboard variable name."
+            "description": "Dashboard variable values, keyed by variable name. Values may reference event labels through `{{ }}` templates; defaults to an empty object."
           }
         },
         "required": [
-          "dashboard_id"
+          "dashboard_id",
+          "variables"
         ]
       },
-      "InvestigationVariableBinding": {
+      "InvestigationTimeRange": {
         "type": "object",
-        "description": "Binding between a dashboard variable and alert event data.",
+        "description": "Window around the alert event time, expressed as two offsets. Both directions must be non-negative and at least one must be greater than zero, so an entry never resolves to an empty window.",
         "properties": {
-          "source": {
+          "before_seconds": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 0,
+            "maximum": 9007199254740,
+            "description": "Seconds to look back from the event time."
+          },
+          "after_seconds": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 0,
+            "maximum": 9007199254740,
+            "description": "Seconds to look forward from the event time, so behaviour after the event stays visible."
+          }
+        },
+        "required": [
+          "before_seconds",
+          "after_seconds"
+        ]
+      },
+      "QueryInvestigationTarget": {
+        "type": "object",
+        "description": "Explore query used by a `query` drill-down entry. The expression may reference event labels through `{{ }}` templates, while `args` values may not.",
+        "properties": {
+          "datasource_id": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 1,
+            "maximum": 9007199254740991,
+            "description": "Data source the query runs against."
+          },
+          "query": {
+            "$ref": "#/components/schemas/DashboardQuery",
+            "description": "Query payload."
+          }
+        },
+        "required": [
+          "datasource_id",
+          "query"
+        ]
+      },
+      "DashboardQuery": {
+        "type": "object",
+        "description": "Query payload shared by dashboards and drill-down entries.",
+        "properties": {
+          "mode": {
             "type": "string",
             "enum": [
-              "event_label"
+              "instant",
+              "range",
+              "window"
             ],
-            "description": "Where the bound value comes from; currently only `event_label` (the alert event's label value) is supported."
+            "description": "Evaluation mode: `instant` evaluates at a single timestamp, `range` evaluates a stepped series, `window` returns raw rows inside a time window."
           },
-          "key": {
+          "expr": {
             "type": "string",
-            "description": "Alert event label name; must follow Prometheus label naming rules and must not be a reserved label."
+            "description": "Query expression in the target data source's language. May reference event labels through `{{ }}` templates."
+          },
+          "args": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "Named query arguments; defaults to an empty object. Values are passed through verbatim and must not contain `{{ }}` templates."
+          },
+          "min_step_seconds": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "format": "int64",
+            "minimum": 1,
+            "maximum": 9007199254740,
+            "description": "Minimum step, in seconds. Only accepted when `mode` is `range`, and must be greater than zero; omit or pass null to let the server decide."
           }
         },
         "required": [
-          "source",
-          "key"
+          "mode",
+          "expr",
+          "args"
         ]
       },
       "MemberNotifyRequest": {
@@ -28975,12 +29251,7 @@
           "html": {
             "type": "string",
             "maxLength": 102400,
-            "description": "Email body as an HTML fragment (no `<html>`/`<head>`/`<body>` wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. Sanitized server-side: `<script>`, `<style>`, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<input>`, `<button>`, `<svg>`, `<meta>`, `<link>`, and `<base>` tags and all `on*` event handlers are removed; images are kept only when their `src` is `https` — images with any other or no `src`, including `data:`, are removed; links are restricted to `http`, `https`, and `mailto`. Inline `style` attributes are kept as written."
-          },
-          "dry_run": {
-            "type": "boolean",
-            "default": false,
-            "description": "Check without sending. When `true`, every check runs and the response returns the exact email in `html`, but nothing is queued and neither the hourly limit nor the per-turn duplicate check is consumed. Defaults to `false`."
+            "description": "Email body as an HTML fragment (no `<html>`/`<head>`/`<body>` wrapper needed); recipients receive it as the whole email body. Required, up to 102,400 bytes of raw UTF-8 input (larger messages are clipped by common email clients), and must be non-empty after sanitization. `<script>`, `<meta>`, `<link>`, and `<base>` tags and all `on*` event handlers are silently removed before sending, since email clients never execute them; inline `style` attributes are kept as written. `<style>`, `<svg>`, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<input>`, and `<button>` tags, an `<img>` with a missing or non-`https` `src` (including `data:`), or an `<a>` whose href scheme is not `http`, `https`, or `mailto` are rejected instead of stripped: the request fails with `400` rather than silently changing what recipients see."
           }
         }
       },
@@ -28993,11 +29264,11 @@
             "items": {
               "$ref": "#/components/schemas/MemberNotifyResultItem"
             },
-            "description": "One result per resolved recipient, in the same order as the resolved recipient list. With `dry_run`, each result is what a real send would return."
+            "description": "One result per resolved recipient, in the same order as the resolved recipient list."
           },
-          "html": {
+          "agent_instructions": {
             "type": "string",
-            "description": "Only present when `dry_run` is `true`: the complete email HTML exactly as recipients would receive it, after sanitization."
+            "description": "Present when the submitted HTML body does not follow the default email layout (no `max-width:600px` wrapper table): guidance telling the calling AI SRE agent how to conform. Advisory only — a format the caller deliberately chose needs no change."
           }
         }
       },
@@ -29035,6 +29306,29 @@
             "description": "Why the recipient was skipped. Only present when `status` is `skipped`. `not_member` — not an active member of the caller's account; `no_email` — the member has no email address on file; `email_disabled` — the member's notification preferences for this kind of message exclude email; `duplicate` — this recipient already received a message from the same AI SRE session turn; `rate_limited` — this recipient has already been sent 20 emails through this endpoint within the last hour; `send_failed` — enqueueing the email failed."
           }
         }
+      },
+      "RumApplicationRepository": {
+        "type": "object",
+        "description": "Source code repository that builds the application.",
+        "required": [
+          "repo"
+        ],
+        "properties": {
+          "repo": {
+            "type": "string",
+            "description": "GitHub repository in `owner/name` form.",
+            "examples": [
+              "acme/web-app"
+            ]
+          },
+          "subdir": {
+            "type": "string",
+            "description": "Directory holding the application inside the repository, relative to the repository root. `.` is the repository root; an empty value is saved as `.`.",
+            "examples": [
+              "apps/web"
+            ]
+          }
+        }
       }
     },
     "securitySchemes": {
@@ -43932,180 +44226,6 @@
         }
       }
     },
-    "/monit/rule/export": {
-      "post": {
-        "description": "Export the configuration of selected alert rules as a portable JSON array, compatible with `POST /monit/rule/import`.",
-        "operationId": "monit-rule-read-export",
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "example": {
-                "ids": [
-                  50001
-                ]
-              },
-              "schema": {
-                "$ref": "#/components/schemas/RuleIDsRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "example": {
-                  "data": [
-                    {
-                      "cron_pattern": "0 * * * * *",
-                      "ds_list": [
-                        "prometheus*"
-                      ],
-                      "ds_type": "prometheus",
-                      "enabled": true,
-                      "name": "CPU High"
-                    }
-                  ],
-                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4"
-                },
-                "schema": {
-                  "allOf": [
-                    {
-                      "$ref": "#/components/schemas/SuccessEnvelope"
-                    },
-                    {
-                      "properties": {
-                        "data": {
-                          "$ref": "#/components/schemas/AlertRuleExportListResponse"
-                        }
-                      },
-                      "type": "object"
-                    }
-                  ]
-                }
-              }
-            },
-            "description": "Success"
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "429": {
-            "$ref": "#/components/responses/TooManyRequests"
-          },
-          "500": {
-            "$ref": "#/components/responses/ServerError"
-          }
-        },
-        "summary": "Export alert rules",
-        "tags": [
-          "Monitors/Alert rules"
-        ],
-        "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/day**; **200 requests/minute**; **20 requests/second** per account |\n| Permissions | **Alerting Rules Read** (`monit`) |",
-          "href": "/en/api-reference/monitors/alert-rules/monit-rule-read-export",
-          "metadata": {
-            "sidebarTitle": "Export alert rules"
-          }
-        }
-      }
-    },
-    "/monit/rule/import": {
-      "post": {
-        "description": "Import one or more alert rules from a JSON array. Returns the result for each rule, indicating success or failure.",
-        "operationId": "monit-rule-write-import",
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "example": [
-                {
-                  "cron_pattern": "0 * * * * *",
-                  "ds_list": [
-                    "prometheus*"
-                  ],
-                  "ds_type": "prometheus",
-                  "enabled": true,
-                  "folder_id": 100,
-                  "name": "CPU High",
-                  "rule_configs": {
-                    "queries": [
-                      {
-                        "expr": "avg(cpu_usage_idle) < 10",
-                        "name": "A"
-                      }
-                    ]
-                  }
-                }
-              ],
-              "schema": {
-                "$ref": "#/components/schemas/RuleImportRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "example": {
-                  "data": [
-                    {
-                      "message": "",
-                      "name": "CPU High"
-                    }
-                  ],
-                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4"
-                },
-                "schema": {
-                  "allOf": [
-                    {
-                      "$ref": "#/components/schemas/SuccessEnvelope"
-                    },
-                    {
-                      "properties": {
-                        "data": {
-                          "$ref": "#/components/schemas/RuleImportResponse"
-                        }
-                      },
-                      "type": "object"
-                    }
-                  ]
-                }
-              }
-            },
-            "description": "Success"
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "429": {
-            "$ref": "#/components/responses/TooManyRequests"
-          },
-          "500": {
-            "$ref": "#/components/responses/ServerError"
-          }
-        },
-        "summary": "Import alert rules",
-        "tags": [
-          "Monitors/Alert rules"
-        ],
-        "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **20 requests/minute**; **2 requests/second** per account |\n| Permissions | **Alerting Rules Manage** (`monit`) |\n\n## Usage\n\n- The request body is a JSON array of rule export objects (compatible with the output of `POST /monit/rule/export`).\n- Each object must include `folder_id`, `ds_type`, and either `ds_list` or `ds_ids`.\n- Some rules may fail (e.g. duplicate name). Check each result for individual status.\n- Every call is recorded in the account audit log. Don't put secrets in request fields.",
-          "href": "/en/api-reference/monitors/alert-rules/monit-rule-write-import",
-          "metadata": {
-            "sidebarTitle": "Import alert rules"
-          }
-        }
-      }
-    },
     "/monit/rule/list/basic": {
       "post": {
         "description": "Return the basic information of all alert rules in a folder. For full rule details, call `POST /monit/rule/v2/info`.",
@@ -60140,12 +60260,12 @@
       "post": {
         "operationId": "memberNotify",
         "summary": "Notify members",
-        "description": "Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with `AccessDenied`. Delivery is asynchronous — `accepted` means the email was queued, not that it was delivered. Call it with `dry_run` set to `true` before sending: `html` in the response is the email exactly as recipients will get it, so you can confirm the sanitizer kept everything the message depends on.",
+        "description": "Send an email to account members on behalf of the caller, with content the caller supplies. Only callable with a credential minted for an AI SRE session; any other credential is rejected with `AccessDenied`. Delivery is asynchronous — `accepted` means the email was queued, not that it was delivered.",
         "tags": [
           "Platform/Members"
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **200 requests/minute**; **10 requests/second** per account |\n| Permissions | None — callable only with an AI SRE session credential; any other credential is rejected with `AccessDenied` |\n\n## Usage\n\n- Recipients that are not active members of the caller's account, or that have no email address on file, are skipped rather than failing the whole request.\n- Whether email is included follows each recipient's own notification preferences for this kind of message; a recipient with no preference set defaults to receiving it.\n- Recipients receive exactly the sanitized `html` as the email body, with nothing added around it. The sender name shows the caller's name followed by \"(via AI SRE)\".\n- Set `dry_run` to `true` to run every check and get the exact email back in `html` without sending: nothing is queued, and neither the hourly limit nor the per-turn duplicate check is consumed.\n- At most 20 emails are delivered to the same recipient through this endpoint per hour; further deliveries to that recipient in the same window are skipped with `rate_limited`.\n- Retrying the same call within the same AI SRE session turn does not send a duplicate email to a recipient who already received one; the repeat is skipped with `duplicate`.",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **200 requests/minute**; **10 requests/second** per account |\n| Permissions | None — callable only with an AI SRE session credential; any other credential is rejected with `AccessDenied` |\n\n## Usage\n\n- Recipients that are not active members of the caller's account, or that have no email address on file, are skipped rather than failing the whole request.\n- Whether email is included follows each recipient's own notification preferences for this kind of message; a recipient with no preference set defaults to receiving it.\n- Recipients receive exactly the sanitized `html` as the email body, with nothing added around it. The sender name shows the caller's name followed by \"(via AI SRE)\".\n- Before sending, the server inspects the submitted `html` and rejects the request with `400` / `InvalidParameter` when it contains constructs whose removal would change what recipients see (`<style>`, `<svg>`, `<iframe>`, `<object>`, `<embed>`, `<form>`, `<input>`, `<button>`, an `<img>` with a missing or non-`https` `src`, or an `<a>` whose href scheme is not `http`, `https`, or `mailto`); the error message names each construct and what to change, and nothing is queued — neither the hourly limit nor the per-turn duplicate check is consumed. Tags whose removal does not change rendering (`<script>`, `<meta>`, `<link>`, `<base>`, `on*` handlers) are still sanitized silently and never trigger a rejection.\n- At most 20 emails are delivered to the same recipient through this endpoint per hour; further deliveries to that recipient in the same window are skipped with `rate_limited`.\n- Retrying the same call within the same AI SRE session turn does not send a duplicate email to a recipient who already received one; the repeat is skipped with `duplicate`.",
           "href": "/en/api-reference/platform/members/member-notify",
           "metadata": {
             "sidebarTitle": "Notify members"
@@ -60191,7 +60311,21 @@
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "description": "The submitted `html` contains a construct that the sanitizer would otherwise remove and that would change what recipients see (see the `html` field description for the full list); the request is rejected instead, and nothing is queued.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                },
+                "example": {
+                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
+                  "error": {
+                    "code": "InvalidParameter",
+                    "message": "email html contains 2 construct(s) the sanitizer removes, which would change what recipients see. Fix and send again: <style> x2 - move these rules into inline style=\"...\" attributes; <img> without an https src x3 - host the image over https, or drop it"
+                  }
+                }
+              }
+            }
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
diff --git a/openapi/openapi.zh.json b/openapi/openapi.zh.json
index 2b6ee4d..0f9564b 100644
--- a/openapi/openapi.zh.json
+++ b/openapi/openapi.zh.json
@@ -2982,7 +2982,7 @@
             "type": "integer"
           },
           "credential_type": {
-            "description": "调用使用的凭据类型。使用 App Key 调用时为 `app_key`；成员会话为空字符串。",
+            "description": "调用使用的凭据类型。控制台长期有效的 App Key 为 `app_key`，AI SRE 签发的短期 Key 为 `ephemeral_app_key`，成员会话为空字符串。",
             "type": "string"
           },
           "ip": {
@@ -3494,7 +3494,8 @@
           },
           "limit": {
             "default": 20,
-            "description": "每页数量。",
+            "description": "每页数量。小于 1 时回退为 20，大于 200 时按 200 处理。",
+            "maximum": 200,
             "type": "integer"
           },
           "p": {
@@ -7575,6 +7576,46 @@
           }
         }
       },
+      "PendingUserMessage": {
+        "type": "object",
+        "description": "尚未被智能体消费的排队用户消息，由 `pending_messages` 返回。",
+        "required": [
+          "invocation_id",
+          "person_id",
+          "query"
+        ],
+        "properties": {
+          "invocation_id": {
+            "type": "string",
+            "description": "该排队消息的 invocation ID。"
+          },
+          "client_msg_id": {
+            "type": "string",
+            "description": "客户端传入的消息 ID，原样返回用于去重；未传时不返回。"
+          },
+          "person_id": {
+            "type": "integer",
+            "format": "int64",
+            "description": "发送者 person ID。"
+          },
+          "steering": {
+            "type": "boolean",
+            "description": "该消息是轮次中的 steering 指令时为 true；false 时不返回。"
+          },
+          "query": {
+            "type": "string",
+            "description": "消息正文。"
+          },
+          "parts": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": true
+            },
+            "description": "原样透传的请求 parts（text / file / ref / skill 等）；原消息未携带时不返回。"
+          }
+        }
+      },
       "PrometheusQueryParams": {
         "type": "object",
         "additionalProperties": true,
@@ -10511,6 +10552,14 @@
             "description": "最后更新时间，Unix 毫秒时间戳。",
             "format": "int64",
             "type": "integer"
+          },
+          "via": {
+            "type": "string",
+            "description": "由 AI SRE 代为写入该记录时的来源标识，目前只有 `ai_sre`；用户直接操作创建的记录不返回该字段。"
+          },
+          "agent_session_id": {
+            "type": "string",
+            "description": "写入该记录的 AI SRE 会话 ID；非智能体写入时不返回该字段。"
           }
         },
         "required": [
@@ -17263,6 +17312,14 @@
             "description": "要渲染的模板内容。",
             "type": "string"
           },
+          "feishu_app_card_v2_enabled": {
+            "type": "boolean",
+            "description": "按飞书应用卡片 v2 消息渲染预览。"
+          },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "飞书应用卡片 v2 预览保留正文中的空行。"
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "预览时按 IM 应用隐藏的故障卡片字段。"
@@ -19368,6 +19425,14 @@
             "$ref": "#/components/schemas/RumApplicationLinks",
             "description": "外部链接集成配置，可选。"
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "要关联的代码仓库，有序；第一个为主仓库。最多 10 个。"
+          },
           "no_geo": {
             "description": "不推断地理位置。",
             "type": "boolean"
@@ -19514,6 +19579,14 @@
             "$ref": "#/components/schemas/RumApplicationLinks",
             "description": "外部链接集成配置。"
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "关联的代码仓库，有序；第一个为主仓库。关联本身不授予任何访问权限：AI 会话只能读取本账户 GitHub App 安装已授权的仓库。"
+          },
           "no_geo": {
             "description": "为 `true` 时不推断地理位置。",
             "type": "boolean"
@@ -19770,6 +19843,15 @@
             "description": "外部链接集成配置；不传则保持不变。",
             "x-flashduty-preserve-absence": true
           },
+          "repositories": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/RumApplicationRepository"
+            },
+            "maxItems": 10,
+            "description": "传入时整体替换关联的代码仓库；传空数组表示清空，不传则保持不变。最多 10 个。",
+            "x-flashduty-preserve-absence": true
+          },
           "no_geo": {
             "description": "为 `true` 时不再基于 IP 推断地理位置，为 `false` 时恢复推断；不传则保持不变。",
             "type": [
@@ -23643,13 +23725,21 @@
           "suggest_init": {
             "description": "账户级引导标志：当账户在任何范围内都没有知识包时为 true；并非该会话独有的属性。",
             "type": "boolean"
+          },
+          "pending_messages": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/PendingUserMessage"
+            },
+            "description": "已排队但尚未被智能体消费的用户消息，按执行顺序排列。始终返回数组；无排队消息时为空数组。"
           }
         },
         "required": [
           "session",
           "events",
           "has_more_older",
-          "suggest_init"
+          "suggest_init",
+          "pending_messages"
         ],
         "type": "object"
       },
@@ -23760,6 +23850,10 @@
             "description": "当该会话当前有正在进行的智能体轮次时为 true。",
             "type": "boolean"
           },
+          "standing_tasks": {
+            "type": "integer",
+            "description": "渲染响应时仍存活的进程型任务数（后台命令或 monitor）。"
+          },
           "last_event_at": {
             "description": "最近一条助手侧事件的时间，Unix 毫秒时间戳。",
             "format": "int64",
@@ -23773,6 +23867,10 @@
             "description": "创建者人员 ID。",
             "type": "string"
           },
+          "creator_name": {
+            "type": "string",
+            "description": "会话创建者的显示名，渲染响应时解析得到；成员查询失败时不返回该字段。"
+          },
           "pinned_at": {
             "description": "调用者的个人置顶时间，Unix 毫秒时间戳；0 表示未置顶。",
             "format": "int64",
@@ -23864,6 +23962,7 @@
           "archived_at",
           "pinned_at",
           "is_running",
+          "standing_tasks",
           "has_unread",
           "current_turn_started_at",
           "current_turn_active_ms",
@@ -26086,11 +26185,33 @@
             "description": "飞书应用消息模板源。",
             "type": "string"
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "飞书应用卡片 v2 消息保留正文中的空行。"
+          },
           "feishu_app_card_v2_table_enabled": {
             "default": false,
             "description": "是否在飞书应用卡片中以表格渲染告警标签，默认关闭。",
             "type": "boolean"
           },
+          "feishu_app_war_room_enabled": {
+            "type": "boolean",
+            "description": "飞书应用卡片展示「创建作战室」按钮。"
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "已关闭故障的卡片仍保留自定义操作按钮的 IM 应用。可选值：`feishu_app`、`dingtalk_app`、`wecom_app`、`slack_app`、`teams_app`；空列表表示所有应用都隐藏这些按钮。"
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "按 IM 应用类型隐藏的故障卡片字段。"
@@ -26140,6 +26261,10 @@
             "description": "企业微信应用消息模板源。",
             "type": "string"
           },
+          "wecom_markdown_v2_enabled": {
+            "type": "boolean",
+            "description": "企业微信群机器人通知使用 `markdown_v2` 消息格式，而非普通 markdown。"
+          },
           "zoom": {
             "description": "Zoom 机器人消息模板源。",
             "type": "string"
@@ -26233,10 +26358,32 @@
             "description": "飞书应用消息模板源。",
             "type": "string"
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": "boolean",
+            "description": "飞书应用卡片 v2 消息是否保留正文中的空行。"
+          },
           "feishu_app_card_v2_table_enabled": {
             "description": "是否在飞书应用卡片中以表格渲染告警标签。",
             "type": "boolean"
           },
+          "feishu_app_war_room_enabled": {
+            "type": "boolean",
+            "description": "飞书应用卡片是否展示「创建作战室」按钮；故障无响应人时不展示。"
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "已关闭故障的卡片仍保留自定义操作按钮的 IM 应用。可选值：`feishu_app`、`dingtalk_app`、`wecom_app`、`slack_app`、`teams_app`；空列表表示所有应用都隐藏这些按钮。"
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "按 IM 应用类型配置的故障卡片隐藏字段，未配置时为空对象。"
@@ -26307,6 +26454,10 @@
             "description": "企业微信应用消息模板源。",
             "type": "string"
           },
+          "wecom_markdown_v2_enabled": {
+            "type": "boolean",
+            "description": "企业微信群机器人通知是否使用 `markdown_v2` 消息格式。"
+          },
           "zoom": {
             "description": "Zoom 机器人消息模板源。",
             "type": "string"
@@ -26326,6 +26477,9 @@
           "feishu",
           "feishu_app",
           "feishu_app_card_v2_table_enabled",
+          "wecom_markdown_v2_enabled",
+          "feishu_app_card_v2_preserve_blank_lines",
+          "feishu_app_war_room_enabled",
           "dingtalk_app",
           "wecom_app",
           "slack_app",
@@ -26338,6 +26492,7 @@
           "updated_by",
           "created_at",
           "updated_at",
+          "incident_card_closed_action_apps",
           "incident_card_hidden_fields"
         ],
         "type": "object"
@@ -26476,6 +26631,13 @@
               "null"
             ]
           },
+          "feishu_app_card_v2_preserve_blank_lines": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "设置后决定飞书应用卡片 v2 消息是否保留正文空行；省略时保持当前设置。"
+          },
           "feishu_app_card_v2_table_enabled": {
             "description": "设置后开启或关闭飞书应用卡片中的告警标签表格渲染；省略时保持当前设置。",
             "type": [
@@ -26483,6 +26645,27 @@
               "null"
             ]
           },
+          "feishu_app_war_room_enabled": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "设置后决定飞书应用卡片是否展示「创建作战室」按钮；省略时保持当前设置。"
+          },
+          "incident_card_closed_action_apps": {
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "feishu_app",
+                "dingtalk_app",
+                "wecom_app",
+                "slack_app",
+                "teams_app"
+              ]
+            },
+            "description": "传入时整体替换保留自定义操作按钮的应用列表。可选值：`feishu_app`、`dingtalk_app`、`wecom_app`、`slack_app`、`teams_app`；不传该字段则保持不变。"
+          },
           "incident_card_hidden_fields": {
             "$ref": "#/components/schemas/IncidentCardHiddenFields",
             "description": "按 IM 应用类型隐藏的故障卡片字段。"
@@ -26563,6 +26746,13 @@
               "null"
             ]
           },
+          "wecom_markdown_v2_enabled": {
+            "type": [
+              "boolean",
+              "null"
+            ],
+            "description": "设置后切换企业微信群机器人通知的 `markdown_v2` / 普通 markdown 格式；省略时保持当前设置。"
+          },
           "zoom": {
             "description": "Zoom 机器人消息模板源。省略时保持当前内容；传空字符串表示清空。",
             "type": [
@@ -27965,6 +28155,14 @@
               "deleted"
             ],
             "type": "string"
+          },
+          "chat_name": {
+            "type": "string",
+            "description": "IM 侧群聊的显示名称。"
+          },
+          "integration_unavailable": {
+            "type": "boolean",
+            "description": "该作战室背后的 IM 集成已禁用或已不存在时为 true。"
           }
         },
         "required": [
@@ -27975,7 +28173,8 @@
           "incident_id",
           "status",
           "created_at",
-          "plugin_type"
+          "plugin_type",
+          "chat_name"
         ],
         "type": "object"
       },
@@ -28585,6 +28784,7 @@
             "items": {
               "$ref": "#/components/schemas/InvestigationTarget"
             },
+            "maxItems": 20,
             "description": "告警事件详情页关联的排障入口列表，最多 20 项，不允许重复。更新接口中该字段按 presence 处理：省略时保留原配置，传 `[]` 清空。",
             "x-flashduty-preserve-absence": true
           },
@@ -28885,14 +29085,23 @@
       },
       "InvestigationTarget": {
         "type": "object",
-        "description": "告警事件的关联排障入口，为封闭的 tagged union：新增类型需服务端显式支持。",
+        "description": "告警事件的关联排障入口，为封闭的 tagged union：新增类型需服务端显式支持，入口内出现未知字段会被拒绝。",
         "properties": {
           "kind": {
             "type": "string",
             "enum": [
-              "dashboard"
+              "dashboard",
+              "query"
             ],
-            "description": "排障入口类型，目前仅支持 `dashboard`。"
+            "description": "入口类型：`dashboard` 打开仪表盘面板，`query` 打开 Explore 查询。它决定必须提供 `dashboard` 还是 `query`，提供另一个会被拒绝。"
+          },
+          "time_range": {
+            "$ref": "#/components/schemas/InvestigationTimeRange",
+            "description": "事件时间前后的取数窗口，每个已保存的入口都必填。长度为 0 的窗口会被拒绝；默认值由前端编辑器提供。"
+          },
+          "query": {
+            "$ref": "#/components/schemas/QueryInvestigationTarget",
+            "description": "`query` 类型的入口配置；`kind` 为 `query` 时必填，`kind` 为 `dashboard` 时不允许出现。"
           },
           "dashboard": {
             "$ref": "#/components/schemas/DashboardInvestigationTarget",
@@ -28900,7 +29109,8 @@
           }
         },
         "required": [
-          "kind"
+          "kind",
+          "time_range"
         ]
       },
       "DashboardInvestigationTarget": {
@@ -28915,37 +29125,103 @@
             "type": "string",
             "description": "仪表盘内目标面板 ID，须为规范的 UUIDv7；可选。"
           },
-          "variable_bindings": {
+          "variables": {
             "type": "object",
             "additionalProperties": {
-              "$ref": "#/components/schemas/InvestigationVariableBinding"
+              "type": "string"
             },
-            "description": "仪表盘变量绑定，键为仪表盘变量名。"
+            "description": "仪表盘变量取值，键为变量名。值可通过 `{{ }}` 模板引用事件标签；默认空对象。"
           }
         },
         "required": [
-          "dashboard_id"
+          "dashboard_id",
+          "variables"
         ]
       },
-      "InvestigationVariableBinding": {
+      "InvestigationTimeRange": {
         "type": "object",
-        "description": "仪表盘变量与告警事件数据的绑定。",
+        "description": "以两个偏移量表示告警事件时间前后的取数窗口。两个方向都必须非负，且至少一个大于 0，因此入口不会解析出空窗口。",
         "properties": {
-          "source": {
+          "before_seconds": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 0,
+            "maximum": 9007199254740,
+            "description": "相对事件时间向前回溯的秒数。"
+          },
+          "after_seconds": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 0,
+            "maximum": 9007199254740,
+            "description": "相对事件时间向后延伸的秒数，用于保留事件发生后的表现。"
+          }
+        },
+        "required": [
+          "before_seconds",
+          "after_seconds"
+        ]
+      },
+      "QueryInvestigationTarget": {
+        "type": "object",
+        "description": "`query` 类型入口使用的 Explore 查询。表达式可通过 `{{ }}` 模板引用事件标签，`args` 的值不允许包含模板。",
+        "properties": {
+          "datasource_id": {
+            "type": "integer",
+            "format": "int64",
+            "minimum": 1,
+            "maximum": 9007199254740991,
+            "description": "查询所用的数据源。"
+          },
+          "query": {
+            "$ref": "#/components/schemas/DashboardQuery",
+            "description": "查询内容。"
+          }
+        },
+        "required": [
+          "datasource_id",
+          "query"
+        ]
+      },
+      "DashboardQuery": {
+        "type": "object",
+        "description": "仪表盘与排障入口共用的查询内容。",
+        "properties": {
+          "mode": {
             "type": "string",
             "enum": [
-              "event_label"
+              "instant",
+              "range",
+              "window"
             ],
-            "description": "绑定值来源，目前仅支持 `event_label`（取告警事件的标签值）。"
+            "description": "求值模式：`instant` 在单个时间点求值，`range` 求值一条按步长采样的曲线，`window` 返回时间窗口内的原始数据。"
           },
-          "key": {
+          "expr": {
             "type": "string",
-            "description": "告警事件标签名，须符合 Prometheus 标签命名规则，且不能使用保留标签。"
+            "description": "目标数据源语法下的查询表达式，可通过 `{{ }}` 模板引用事件标签。"
+          },
+          "args": {
+            "type": "object",
+            "additionalProperties": {
+              "type": "string"
+            },
+            "description": "命名查询参数，默认空对象。值按原样透传，不允许包含 `{{ }}` 模板。"
+          },
+          "min_step_seconds": {
+            "type": [
+              "integer",
+              "null"
+            ],
+            "format": "int64",
+            "minimum": 1,
+            "maximum": 9007199254740,
+            "description": "最小步长（秒）。仅在 `mode` 为 `range` 时可用，且必须大于 0；省略或传 null 由服务端决定。"
           }
         },
         "required": [
-          "source",
-          "key"
+          "mode",
+          "expr",
+          "args"
         ]
       },
       "MemberNotifyRequest": {
@@ -28975,12 +29251,7 @@
           "html": {
             "type": "string",
             "maxLength": 102400,
-            "description": "邮件正文，HTML 片段（无需 `<html>`/`<head>`/`<body>` 包裹），即收件人看到的完整邮件正文。必填，原始 UTF-8 内容不超过 102,400 字节（更大的正文会被常见邮件客户端截断），且清洗后不能为空。服务端会进行清洗：`<script>`、`<style>`、`<iframe>`、`<object>`、`<embed>`、`<form>`、`<input>`、`<button>`、`<svg>`、`<meta>`、`<link>`、`<base>` 标签及所有 `on*` 事件处理属性会被移除；图片仅在 `src` 为 `https` 时保留，其他来源或没有 `src` 的图片（包括 `data:`）会被移除；链接仅允许 `http`、`https`、`mailto`。内联 `style` 属性按原样保留。"
-          },
-          "dry_run": {
-            "type": "boolean",
-            "default": false,
-            "description": "仅检查不发送。为 `true` 时执行全部检查，并在响应的 `html` 中返回将要发送的完整邮件，但不会入队，也不占用每小时限额和同轮次去重。默认 `false`。"
+            "description": "邮件正文，HTML 片段（无需 `<html>`/`<head>`/`<body>` 包裹），即收件人看到的完整邮件正文。必填，原始 UTF-8 内容不超过 102,400 字节（更大的正文会被常见邮件客户端截断），且清洗后不能为空。`<script>`、`<meta>`、`<link>`、`<base>` 标签及所有 `on*` 事件处理属性会在发送前被静默移除——邮件客户端本就不会执行它们；内联 `style` 属性按原样保留。`<style>`、`<svg>`、`<iframe>`、`<object>`、`<embed>`、`<form>`、`<input>`、`<button>` 标签，`src` 缺失或不是 `https`（包括 `data:`）的 `<img>`，以及 href 不属于 `http`、`https`、`mailto` 的 `<a>`，会被直接拒绝而非静默清洗：请求会返回 `400`，而不是悄悄改变收件人看到的内容。"
           }
         }
       },
@@ -28993,11 +29264,11 @@
             "items": {
               "$ref": "#/components/schemas/MemberNotifyResultItem"
             },
-            "description": "每个已解析收件人对应一条结果，顺序与解析后的收件人列表一致。`dry_run` 时为实际发送将得到的结果。"
+            "description": "每个已解析收件人对应一条结果，顺序与解析后的收件人列表一致。"
           },
-          "html": {
+          "agent_instructions": {
             "type": "string",
-            "description": "仅当 `dry_run` 为 `true` 时返回：清洗后、收件人将收到的完整邮件 HTML。"
+            "description": "当提交的 HTML 正文不符合默认邮件版式（缺少 `max-width:600px` 外层包裹表格）时返回：告知调用的 AI SRE agent 如何对齐的指引。仅为建议——调用方有意选择的格式无需改动。"
           }
         }
       },
@@ -29035,6 +29306,29 @@
             "description": "跳过原因，仅当 `status` 为 `skipped` 时出现。`not_member` —— 不是调用方账户的活跃成员；`no_email` —— 该成员没有邮箱地址；`email_disabled` —— 该成员针对此类消息的通知偏好中未包含邮件；`duplicate` —— 该收件人在同一个 AI SRE 会话轮次中已经收到过一次消息；`rate_limited` —— 该收件人通过该接口在过去一小时内已被发送 20 封邮件；`send_failed` —— 邮件入队失败。"
           }
         }
+      },
+      "RumApplicationRepository": {
+        "type": "object",
+        "description": "构建该应用的代码仓库。",
+        "required": [
+          "repo"
+        ],
+        "properties": {
+          "repo": {
+            "type": "string",
+            "description": "GitHub 仓库，格式为 `owner/name`。",
+            "examples": [
+              "acme/web-app"
+            ]
+          },
+          "subdir": {
+            "type": "string",
+            "description": "应用在仓库内所在的目录，相对仓库根目录。`.` 表示仓库根目录；传空值时保存为 `.`。",
+            "examples": [
+              "apps/web"
+            ]
+          }
+        }
       }
     },
     "securitySchemes": {
@@ -43932,180 +44226,6 @@
         }
       }
     },
-    "/monit/rule/export": {
-      "post": {
-        "description": "将选定告警规则的配置导出为可移植的 JSON 数组，与 `POST /monit/rule/import` 兼容。",
-        "operationId": "monit-rule-read-export",
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "example": {
-                "ids": [
-                  50001
-                ]
-              },
-              "schema": {
-                "$ref": "#/components/schemas/RuleIDsRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "example": {
-                  "data": [
-                    {
-                      "cron_pattern": "0 * * * * *",
-                      "ds_list": [
-                        "prometheus*"
-                      ],
-                      "ds_type": "prometheus",
-                      "enabled": true,
-                      "name": "CPU High"
-                    }
-                  ],
-                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4"
-                },
-                "schema": {
-                  "allOf": [
-                    {
-                      "$ref": "#/components/schemas/SuccessEnvelope"
-                    },
-                    {
-                      "properties": {
-                        "data": {
-                          "$ref": "#/components/schemas/AlertRuleExportListResponse"
-                        }
-                      },
-                      "type": "object"
-                    }
-                  ]
-                }
-              }
-            },
-            "description": "成功"
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "429": {
-            "$ref": "#/components/responses/TooManyRequests"
-          },
-          "500": {
-            "$ref": "#/components/responses/ServerError"
-          }
-        },
-        "summary": "导出告警规则",
-        "tags": [
-          "Monitors/告警规则"
-        ],
-        "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个账户 **1,000 次/天**；**200 次/分钟**；**20 次/秒** |\n| 权限要求 | **告警规则查看**（`monit`） |",
-          "href": "/zh/api-reference/monitors/alert-rules/monit-rule-read-export",
-          "metadata": {
-            "sidebarTitle": "导出告警规则"
-          }
-        }
-      }
-    },
-    "/monit/rule/import": {
-      "post": {
-        "description": "从 JSON 数组导入一条或多条告警规则，返回每条规则的导入结果（成功或失败）。",
-        "operationId": "monit-rule-write-import",
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "example": [
-                {
-                  "cron_pattern": "0 * * * * *",
-                  "ds_list": [
-                    "prometheus*"
-                  ],
-                  "ds_type": "prometheus",
-                  "enabled": true,
-                  "folder_id": 100,
-                  "name": "CPU High",
-                  "rule_configs": {
-                    "queries": [
-                      {
-                        "expr": "avg(cpu_usage_idle) < 10",
-                        "name": "A"
-                      }
-                    ]
-                  }
-                }
-              ],
-              "schema": {
-                "$ref": "#/components/schemas/RuleImportRequest"
-              }
-            }
-          },
-          "required": true
-        },
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "example": {
-                  "data": [
-                    {
-                      "message": "",
-                      "name": "CPU High"
-                    }
-                  ],
-                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4"
-                },
-                "schema": {
-                  "allOf": [
-                    {
-                      "$ref": "#/components/schemas/SuccessEnvelope"
-                    },
-                    {
-                      "properties": {
-                        "data": {
-                          "$ref": "#/components/schemas/RuleImportResponse"
-                        }
-                      },
-                      "type": "object"
-                    }
-                  ]
-                }
-              }
-            },
-            "description": "成功"
-          },
-          "400": {
-            "$ref": "#/components/responses/BadRequest"
-          },
-          "401": {
-            "$ref": "#/components/responses/Unauthorized"
-          },
-          "429": {
-            "$ref": "#/components/responses/TooManyRequests"
-          },
-          "500": {
-            "$ref": "#/components/responses/ServerError"
-          }
-        },
-        "summary": "导入告警规则",
-        "tags": [
-          "Monitors/告警规则"
-        ],
-        "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个账户 **20 次/分钟**；**2 次/秒** |\n| 权限要求 | **告警规则管理**（`monit`） |\n\n## 使用说明\n\n- 请求体为规则导出对象的 JSON 数组（与 `POST /monit/rule/export` 输出兼容）。\n- 每个对象必须包含 `folder_id`、`ds_type` 以及 `ds_list` 或 `ds_ids` 之一。\n- 部分规则可能失败（如名称重复），请检查每条结果的状态。\n- 每次调用都会记录到账户审计日志，请不要把敏感信息放在请求字段中。",
-          "href": "/zh/api-reference/monitors/alert-rules/monit-rule-write-import",
-          "metadata": {
-            "sidebarTitle": "导入告警规则"
-          }
-        }
-      }
-    },
     "/monit/rule/list/basic": {
       "post": {
         "description": "返回指定文件夹下所有告警规则的基础信息。如需完整规则详情，请调用 `POST /monit/rule/v2/info`。",
@@ -60140,12 +60260,12 @@
       "post": {
         "operationId": "memberNotify",
         "summary": "通知成员",
-        "description": "以调用方身份向账户成员发送邮件，邮件内容由调用方提供。仅可使用 AI SRE 会话凭据调用；使用其他凭据调用会返回 AccessDenied 错误。邮件投递是异步的——`accepted` 表示邮件已入队，并不代表已送达。发送前先将 `dry_run` 设为 `true` 调用一次：响应中的 `html` 就是收件人将收到的邮件，可据此确认清洗后正文依赖的内容都还在。",
+        "description": "以调用方身份向账户成员发送邮件，邮件内容由调用方提供。仅可使用 AI SRE 会话凭据调用；使用其他凭据调用会返回 AccessDenied 错误。邮件投递是异步的——`accepted` 表示邮件已入队，并不代表已送达。",
         "tags": [
           "平台/成员管理"
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ----- |\n| 速率限制 | 每个账户 **200 次/分钟**；**10 次/秒** |\n| 权限要求 | 无——仅可使用 AI SRE 会话凭据调用；使用其他凭据调用会返回 AccessDenied |\n\n## 使用说明\n\n- 不是调用方账户内活跃成员、或没有邮箱地址的收件人会被跳过，不会导致整个请求失败。\n- 是否发送邮件取决于每个收件人针对此类消息的通知偏好设置；未设置偏好的收件人默认会收到邮件。\n- 收件人收到的邮件正文就是清洗后的 `html`，平台不会在其前后添加任何内容；发件人名称显示为调用方姓名加“(via AI SRE)”。\n- 将 `dry_run` 设为 `true` 可执行全部检查并在 `html` 中返回将要发送的完整邮件，但不会发送：不会入队，也不占用每小时限额和同轮次去重。\n- 同一收件人通过该接口每小时最多收到 20 封邮件；超出后同一窗口内该收件人的后续投递会被跳过并返回 `rate_limited`。\n- 在同一个 AI SRE 会话轮次内重复调用，不会向已收到邮件的收件人重复发送；重复的收件人会被跳过并返回 `duplicate`。",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ----- |\n| 速率限制 | 每个账户 **200 次/分钟**；**10 次/秒** |\n| 权限要求 | 无——仅可使用 AI SRE 会话凭据调用；使用其他凭据调用会返回 AccessDenied |\n\n## 使用说明\n\n- 不是调用方账户内活跃成员、或没有邮箱地址的收件人会被跳过，不会导致整个请求失败。\n- 是否发送邮件取决于每个收件人针对此类消息的通知偏好设置；未设置偏好的收件人默认会收到邮件。\n- 收件人收到的邮件正文就是清洗后的 `html`，平台不会在其前后添加任何内容；发件人名称显示为调用方姓名加“(via AI SRE)”。\n- 发送前，服务端会检查提交的 `html`，如果其中包含移除后会改变收件人所见内容的构造（`<style>`、`<svg>`、`<iframe>`、`<object>`、`<embed>`、`<form>`、`<input>`、`<button>`、`src` 缺失或不是 `https` 的 `<img>`，或 href 不属于 `http`/`https`/`mailto` 的 `<a>`），会返回 `400` / `InvalidParameter` 并拒绝请求；错误消息会逐一列出触发的构造及需要如何修改，且不会入队——不占用每小时限额，也不占用同轮次去重。不影响渲染效果的标签（`<script>`、`<meta>`、`<link>`、`<base>`、`on*` 事件属性）仍会被静默清洗，不会触发拒绝。\n- 同一收件人通过该接口每小时最多收到 20 封邮件；超出后同一窗口内该收件人的后续投递会被跳过并返回 `rate_limited`。\n- 在同一个 AI SRE 会话轮次内重复调用，不会向已收到邮件的收件人重复发送；重复的收件人会被跳过并返回 `duplicate`。",
           "href": "/zh/api-reference/platform/members/member-notify",
           "metadata": {
             "sidebarTitle": "通知成员"
@@ -60191,7 +60311,21 @@
             }
           },
           "400": {
-            "$ref": "#/components/responses/BadRequest"
+            "description": "提交的 `html` 中包含移除后会改变收件人所见内容的构造（完整列表见 `html` 字段的描述），请求会被拒绝而不是静默移除，且不会入队。",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                },
+                "example": {
+                  "request_id": "01HK8XQE3Z7JM2NTFQ5YJ8P9R4",
+                  "error": {
+                    "code": "InvalidParameter",
+                    "message": "email html contains 2 construct(s) the sanitizer removes, which would change what recipients see. Fix and send again: <style> x2 - move these rules into inline style=\"...\" attributes; <img> without an https src x3 - host the image over https, or drop it"
+                  }
+                }
+              }
+            }
           },
           "401": {
             "$ref": "#/components/responses/Unauthorized"
diff --git a/roundtrip_gen_test.go b/roundtrip_gen_test.go
index 463fdb9..78981b7 100644
--- a/roundtrip_gen_test.go
+++ b/roundtrip_gen_test.go
@@ -116,8 +116,6 @@ var exampleDataDecoders = map[string]func(json.RawMessage) error{
 	"POST /monit/rule/audits":                            func(d json.RawMessage) error { var v RuleAuditListResponse; return json.Unmarshal(d, &v) },
 	"POST /monit/rule/counter/channel":                   func(d json.RawMessage) error { var v RuleCounterChannelResponse; return json.Unmarshal(d, &v) },
 	"POST /monit/rule/counter/total":                     func(d json.RawMessage) error { var v RuleCounterTotalResponse; return json.Unmarshal(d, &v) },
-	"POST /monit/rule/export":                            func(d json.RawMessage) error { var v AlertRuleExportListResponse; return json.Unmarshal(d, &v) },
-	"POST /monit/rule/import":                            func(d json.RawMessage) error { var v RuleImportResponse; return json.Unmarshal(d, &v) },
 	"POST /monit/rule/list/basic":                        func(d json.RawMessage) error { var v RuleBasicListResponse; return json.Unmarshal(d, &v) },
 	"POST /monit/rule/move":                              func(d json.RawMessage) error { var v RuleNameMessageListResponse; return json.Unmarshal(d, &v) },
 	"POST /monit/rule/update/fields":                     func(d json.RawMessage) error { var v RuleNameMessageListResponse; return json.Unmarshal(d, &v) },