feat: Updated OpenAPI spec

src/libs/OpenRouter/Generated/OpenRouter.AnalyticsClient.QueryAnalytics.g.cs

@@ -652,7 +652,7 @@ partial void ProcessQueryAnalyticsResponseContent(
             global::OpenRouter.QueryAnalyticsRequestClassifierDimensions? classifierDimensions = default,
             global::OpenRouter.QueryAnalyticsRequestClassifierFilters? classifierFilters = default,
             global::System.Collections.Generic.IList<string>? dimensions = default,
-            global::System.Collections.Generic.IList<global::OpenRouter.QueryAnalyticsRequestFilter>? filters = default,
+            global::System.Collections.Generic.IList<global::OpenRouter.Filter>? filters = default,
             string? granularity = default,
             int? groupLimit = default,
             int? limit = default,

src/libs/OpenRouter/Generated/OpenRouter.IAnalyticsClient.QueryAnalytics.g.cs

@@ -64,7 +64,7 @@ public partial interface IAnalyticsClient
             global::OpenRouter.QueryAnalyticsRequestClassifierDimensions? classifierDimensions = default,
             global::OpenRouter.QueryAnalyticsRequestClassifierFilters? classifierFilters = default,
             global::System.Collections.Generic.IList<string>? dimensions = default,
-            global::System.Collections.Generic.IList<global::OpenRouter.QueryAnalyticsRequestFilter>? filters = default,
+            global::System.Collections.Generic.IList<global::OpenRouter.Filter>? filters = default,
             string? granularity = default,
             int? groupLimit = default,
             int? limit = default,

src/libs/OpenRouter/Generated/OpenRouter.IModelsClient.ListForUser.g.cs

@@ -26,6 +26,10 @@ public partial interface IModelsClient
         /// Sort the returned models server-side. Prefer this over fetching the full list and sorting client-side. Options: pricing-low-to-high, pricing-high-to-low (average prompt/completion price), context-high-to-low (context length), throughput-high-to-low, latency-low-to-high (recent median performance), most-popular, top-weekly (tokens processed in the last week), newest (creation date), intelligence-high-to-low, coding-high-to-low, agentic-high-to-low (Artificial Analysis indices), design-arena-elo-high-to-low (best Design Arena ELO across arenas). Models without a score for the chosen benchmark are placed last. When omitted, the existing default ordering is preserved.<br/>
         /// Example: newest
         /// </param>
+        /// <param name="client">
+        /// Return only the models and presets the named harness offers: those that support tool calling, and, when one of your guardrails sets `enforce_first_party_harness_models`, only the harness vendor's own models (OpenAI for codex, Anthropic for claude_code and claude_desktop). One of: claude_code, claude_desktop, codex. Omit it to get every model you can use.<br/>
+        /// Example: codex
+        /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
         /// <param name="cancellationToken">The token to cancel the operation with</param>
         /// <exception cref="global::OpenRouter.ApiException"></exception>
@@ -34,6 +38,7 @@ public partial interface IModelsClient
             int? limit = default,
             string? outputModalities = default,
             global::OpenRouter.ListModelsUserSort? sort = default,
+            global::OpenRouter.ListModelsUserClient? client = default,
             global::OpenRouter.AutoSDKRequestOptions? requestOptions = default,
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
@@ -58,6 +63,10 @@ public partial interface IModelsClient
         /// Sort the returned models server-side. Prefer this over fetching the full list and sorting client-side. Options: pricing-low-to-high, pricing-high-to-low (average prompt/completion price), context-high-to-low (context length), throughput-high-to-low, latency-low-to-high (recent median performance), most-popular, top-weekly (tokens processed in the last week), newest (creation date), intelligence-high-to-low, coding-high-to-low, agentic-high-to-low (Artificial Analysis indices), design-arena-elo-high-to-low (best Design Arena ELO across arenas). Models without a score for the chosen benchmark are placed last. When omitted, the existing default ordering is preserved.<br/>
         /// Example: newest
         /// </param>
+        /// <param name="client">
+        /// Return only the models and presets the named harness offers: those that support tool calling, and, when one of your guardrails sets `enforce_first_party_harness_models`, only the harness vendor's own models (OpenAI for codex, Anthropic for claude_code and claude_desktop). One of: claude_code, claude_desktop, codex. Omit it to get every model you can use.<br/>
+        /// Example: codex
+        /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
         /// <param name="cancellationToken">The token to cancel the operation with</param>
         /// <exception cref="global::OpenRouter.ApiException"></exception>
@@ -66,6 +75,7 @@ public partial interface IModelsClient
             int? limit = default,
             string? outputModalities = default,
             global::OpenRouter.ListModelsUserSort? sort = default,
+            global::OpenRouter.ListModelsUserClient? client = default,
             global::OpenRouter.AutoSDKRequestOptions? requestOptions = default,
             global::System.Threading.CancellationToken cancellationToken = default);
     }

src/libs/OpenRouter/Generated/OpenRouter.IVaultClient.DeleteInternVaultSecret.g.cs

@@ -13,7 +13,7 @@ public partial interface IVaultClient
         /// Example: 7c9e6679-7425-40de-944b-e07fc1f90ae7
         /// </param>
         /// <param name="name">
-        /// Secret name. Lowercase letters, digits and single underscores, starting with a letter and not ending with an underscore, 1 to 255 characters.<br/>
+        /// Existing secret name. Accepts legacy names stored before the 255-character write bound; new writes still require the documented name format.<br/>
         /// Example: github_token
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -33,7 +33,7 @@ public partial interface IVaultClient
         /// Example: 7c9e6679-7425-40de-944b-e07fc1f90ae7
         /// </param>
         /// <param name="name">
-        /// Secret name. Lowercase letters, digits and single underscores, starting with a letter and not ending with an underscore, 1 to 255 characters.<br/>
+        /// Existing secret name. Accepts legacy names stored before the 255-character write bound; new writes still require the documented name format.<br/>
         /// Example: github_token
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>

src/libs/OpenRouter/Generated/OpenRouter.IVaultClient.DeleteVaultSecret.g.cs

@@ -9,7 +9,7 @@ public partial interface IVaultClient
         /// Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
         /// </summary>
         /// <param name="name">
-        /// Secret name. Lowercase letters, digits and single underscores, starting with a letter and not ending with an underscore, 1 to 255 characters.<br/>
+        /// Existing secret name. Accepts legacy names stored before the 255-character write bound; new writes still require the documented name format.<br/>
         /// Example: github_token
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -24,7 +24,7 @@ public partial interface IVaultClient
         /// Deletes a secret from the workspace of the authenticated API key. Returns 204 with no body on success and 404 when the secret does not exist in the selected scope. Writes return 503 while vault writes are disabled for the caller. The scope is selected by the API key: workspace routes act on the key's active workspace and intern routes act on one intern inside that workspace. There is no default workspace and no fallback to another scope. Every vault route, including reads, requires access to the Intern API programme and returns 404 outside it. An intern's own API key is confined to that intern: it can always read the intern's secrets and effective secrets, writes to them follow the rules above, and every other intern and every workspace route answers 404. Requests on regional hostnames such as `eu.openrouter.ai` are refused. [API key](/docs/api-reference/authentication) required.
         /// </summary>
         /// <param name="name">
-        /// Secret name. Lowercase letters, digits and single underscores, starting with a letter and not ending with an underscore, 1 to 255 characters.<br/>
+        /// Existing secret name. Accepts legacy names stored before the 255-character write bound; new writes still require the documented name format.<br/>
         /// Example: github_token
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>

src/libs/OpenRouter/Generated/OpenRouter.IVaultClient.StoreInternVaultSecret.g.cs

@@ -66,7 +66,7 @@ public partial interface IVaultClient
         /// Exact DNS hostnames the secret may be sent to, 1 to 100 entries. Each entry is lowercased and a trailing dot is removed, so `API.Example.com.` is stored as `api.example.com`. Schemes, ports, paths, wildcards and empty values are rejected. Duplicates after normalization are collapsed. Matching is exact: a secret bound to `api.example.com` is never released to `example.com` or any other hostname.
         /// </param>
         /// <param name="value">
-        /// Secret value, 1 to 65536 characters. It is encrypted at rest and never returned.
+        /// Secret value, 1 to 65536 characters; a header-set credential (a JSON object of header name to value) may run to 985721 characters. It is encrypted at rest and never returned.
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
         /// <param name="cancellationToken">The token to cancel the operation with</param>

src/libs/OpenRouter/Generated/OpenRouter.IVaultClient.StoreVaultSecret.g.cs

@@ -52,7 +52,7 @@ public partial interface IVaultClient
         /// Exact DNS hostnames the secret may be sent to, 1 to 100 entries. Each entry is lowercased and a trailing dot is removed, so `API.Example.com.` is stored as `api.example.com`. Schemes, ports, paths, wildcards and empty values are rejected. Duplicates after normalization are collapsed. Matching is exact: a secret bound to `api.example.com` is never released to `example.com` or any other hostname.
         /// </param>
         /// <param name="value">
-        /// Secret value, 1 to 65536 characters. It is encrypted at rest and never returned.
+        /// Secret value, 1 to 65536 characters; a header-set credential (a JSON object of header name to value) may run to 985721 characters. It is encrypted at rest and never returned.
         /// </param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
         /// <param name="cancellationToken">The token to cancel the operation with</param>