@@ -100,6 +100,11 @@ actions:
       x-speakeasy-group: agents
       x-speakeasy-name-override: updatePolicy
 
+  - target: $["paths"]["/api/v1/auth/runtime-token-exchange"]["post"]
+    update:
+      x-speakeasy-group: auth
+      x-speakeasy-name-override: runtimeTokenExchange
+
   - target: $["paths"]["/api/v1/control-bindings"]["get"]
     update:
       x-speakeasy-group: controlBindings
 
@@ -18,6 +18,7 @@ export interface AgentControlInitOptions {
 }
 
 export type AgentsApi = AgentControlSDK["agents"];
+export type AuthApi = AgentControlSDK["auth"];
 export type ControlBindingsApi = AgentControlSDK["controlBindings"];
 export type ControlsApi = AgentControlSDK["controls"];
 export type EvaluationApi = AgentControlSDK["evaluation"];
@@ -52,6 +53,10 @@ export class AgentControlClient {
     return this.requireSDK().agents;
   }
 
+  get auth(): AuthApi {
+    return this.requireSDK().auth;
+  }
+
   get controlBindings(): ControlBindingsApi {
     return this.requireSDK().controlBindings;
   }
 
@@ -0,0 +1,182 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { AgentControlSDKCore } from "../core.js";
+import { encodeJSON } from "../lib/encodings.js";
+import * as M from "../lib/matchers.js";
+import { compactMap } from "../lib/primitives.js";
+import { safeParse } from "../lib/schemas.js";
+import { RequestOptions } from "../lib/sdks.js";
+import { extractSecurity, resolveGlobalSecurity } from "../lib/security.js";
+import { pathToFunc } from "../lib/url.js";
+import { AgentControlSDKError } from "../models/errors/agent-control-sdk-error.js";
+import {
+  ConnectionError,
+  InvalidRequestError,
+  RequestAbortedError,
+  RequestTimeoutError,
+  UnexpectedClientError,
+} from "../models/errors/http-client-errors.js";
+import * as errors from "../models/errors/index.js";
+import { ResponseValidationError } from "../models/errors/response-validation-error.js";
+import { SDKValidationError } from "../models/errors/sdk-validation-error.js";
+import * as models from "../models/index.js";
+import { APICall, APIPromise } from "../types/async.js";
+import { Result } from "../types/fp.js";
+
+/**
+ * Exchange a credential for a runtime token bound to a target
+ *
+ * @remarks
+ * Mint a short-lived runtime token for the requested target.
+ *
+ * The caller's credential is authenticated and authorized by the
+ * installed default authorizer; the resulting :class:`Principal`
+ * supplies the actor identity and (when the upstream surfaces it)
+ * the grant scopes and expiry. This endpoint then mints a local HS256
+ * token whose lifetime cannot outlive the upstream grant.
+ *
+ * Runtime auth must be enabled via
+ * ``AGENT_CONTROL_RUNTIME_TOKEN_SECRET``; otherwise the endpoint
+ * returns 503.
+ */
+export function authRuntimeTokenExchange(
+  client: AgentControlSDKCore,
+  request: models.RuntimeTokenExchangeRequest,
+  options?: RequestOptions,
+): APIPromise<
+  Result<
+    models.RuntimeTokenExchangeResponse,
+    | errors.HTTPValidationError
+    | AgentControlSDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >
+> {
+  return new APIPromise($do(
+    client,
+    request,
+    options,
+  ));
+}
+
+async function $do(
+  client: AgentControlSDKCore,
+  request: models.RuntimeTokenExchangeRequest,
+  options?: RequestOptions,
+): Promise<
+  [
+    Result<
+      models.RuntimeTokenExchangeResponse,
+      | errors.HTTPValidationError
+      | AgentControlSDKError
+      | ResponseValidationError
+      | ConnectionError
+      | RequestAbortedError
+      | RequestTimeoutError
+      | InvalidRequestError
+      | UnexpectedClientError
+      | SDKValidationError
+    >,
+    APICall,
+  ]
+> {
+  const parsed = safeParse(
+    request,
+    (value) =>
+      z.parse(models.RuntimeTokenExchangeRequest$outboundSchema, value),
+    "Input validation failed",
+  );
+  if (!parsed.ok) {
+    return [parsed, { status: "invalid" }];
+  }
+  const payload = parsed.value;
+  const body = encodeJSON("body", payload, { explode: true });
+
+  const path = pathToFunc("/api/v1/auth/runtime-token-exchange")();
+
+  const headers = new Headers(compactMap({
+    "Content-Type": "application/json",
+    Accept: "application/json",
+  }));
+
+  const secConfig = await extractSecurity(client._options.apiKeyHeader);
+  const securityInput = secConfig == null ? {} : { apiKeyHeader: secConfig };
+  const requestSecurity = resolveGlobalSecurity(securityInput);
+
+  const context = {
+    options: client._options,
+    baseURL: options?.serverURL ?? client._baseURL ?? "",
+    operationID:
+      "runtime_token_exchange_api_v1_auth_runtime_token_exchange_post",
+    oAuth2Scopes: null,
+
+    resolvedSecurity: requestSecurity,
+
+    securitySource: client._options.apiKeyHeader,
+    retryConfig: options?.retries
+      || client._options.retryConfig
+      || { strategy: "none" },
+    retryCodes: options?.retryCodes || ["429", "500", "502", "503", "504"],
+  };
+
+  const requestRes = client._createRequest(context, {
+    security: requestSecurity,
+    method: "POST",
+    baseURL: options?.serverURL,
+    path: path,
+    headers: headers,
+    body: body,
+    userAgent: client._options.userAgent,
+    timeoutMs: options?.timeoutMs || client._options.timeoutMs || -1,
+  }, options);
+  if (!requestRes.ok) {
+    return [requestRes, { status: "invalid" }];
+  }
+  const req = requestRes.value;
+
+  const doResult = await client._do(req, {
+    context,
+    errorCodes: ["422", "4XX", "5XX"],
+    retryConfig: context.retryConfig,
+    retryCodes: context.retryCodes,
+  });
+  if (!doResult.ok) {
+    return [doResult, { status: "request-error", request: req }];
+  }
+  const response = doResult.value;
+
+  const responseFields = {
+    HttpMeta: { Response: response, Request: req },
+  };
+
+  const [result] = await M.match<
+    models.RuntimeTokenExchangeResponse,
+    | errors.HTTPValidationError
+    | AgentControlSDKError
+    | ResponseValidationError
+    | ConnectionError
+    | RequestAbortedError
+    | RequestTimeoutError
+    | InvalidRequestError
+    | UnexpectedClientError
+    | SDKValidationError
+  >(
+    M.json(200, models.RuntimeTokenExchangeResponse$inboundSchema),
+    M.jsonErr(422, errors.HTTPValidationError$inboundSchema),
+    M.fail("4XX"),
+    M.fail("5XX"),
+  )(response, req, { extraFields: responseFields });
+  if (!result.ok) {
+    return [result, { status: "complete", request: req, response }];
+  }
+
+  return [result, { status: "complete", request: req, response }];
+}
@@ -32,9 +32,12 @@ import { Result } from "../types/fp.js";
  * @remarks
  * Attach a control to an opaque external target.
  *
- * Each binding row is an attachment scoped to the request's namespace; the
- * ``enabled`` flag is a soft toggle. Per-agent overrides and exemptions are
- * intentionally out of scope; see ``ControlBinding`` for the forward path.
+ * Each binding row is scoped to the request namespace as resolved by
+ * ``get_namespace_key``. The auth chain still runs via
+ * ``require_operation`` for authentication and authorization, but the
+ * storage namespace is taken from the same resolver the rest of the
+ * server uses so binding writes and runtime reads stay in lockstep
+ * until auth-derived namespace resolution lands across every endpoint.
  */
 export function controlBindingsCreate(
   client: AgentControlSDKCore,
 
@@ -28,7 +28,15 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Delete a control binding
+ * Delete a control binding (namespace-wide)
+ *
+ * @remarks
+ * Delete a control binding by surrogate ID.
+ *
+ * See the GET-by-id docstring for the authorization scope: this route
+ * is namespace-wide because the target identifiers are not available
+ * before the binding is loaded. Use ``POST /by-key:delete`` for
+ * target-scoped detach that forwards the target to the authorizer.
  */
 export function controlBindingsDelete(
   client: AgentControlSDKCore,
 
@@ -28,7 +28,18 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Get a control binding
+ * Get a control binding (namespace-wide)
+ *
+ * @remarks
+ * Read a single control binding by surrogate ID.
+ *
+ * Authorization is namespace-wide: the binding's target identifiers
+ * are not forwarded to the upstream because they are only discoverable
+ * after the row is loaded, and ``require_operation`` is single-pass.
+ * Callers whose authorization model requires per-target permissions
+ * should use the natural-key endpoints (``PUT /by-key``,
+ * ``POST /by-key:delete``) and the target-filtered list endpoint, all
+ * of which forward ``(target_type, target_id)`` to the authorizer.
  */
 export function controlBindingsGet(
   client: AgentControlSDKCore,
 
@@ -31,10 +31,12 @@ import { Result } from "../types/fp.js";
  * List control bindings
  *
  * @remarks
- * Return bindings in the current namespace with optional filters and
- * cursor-based pagination. Bindings are ordered by ID descending (newest
- * first). The cursor is opaque to clients: pass back the
- * ``next_cursor`` value verbatim to fetch the following page.
+ * Return bindings in the request namespace with optional filters and
+ * cursor-based pagination. Bindings are ordered by ID descending
+ * (newest first). The cursor is opaque to clients: pass back the
+ * ``next_cursor`` value verbatim to fetch the following page. The
+ * storage namespace is resolved by ``get_namespace_key`` so this
+ * listing stays in lockstep with the rest of the server's reads.
  */
 export function controlBindingsList(
   client: AgentControlSDKCore,
 
@@ -28,10 +28,15 @@ import { APICall, APIPromise } from "../types/async.js";
 import { Result } from "../types/fp.js";
 
 /**
- * Update a control binding
+ * Update a control binding (namespace-wide)
  *
  * @remarks
  * Update the ``enabled`` flag on a control binding.
+ *
+ * See the GET-by-id docstring for the authorization scope: this route
+ * is namespace-wide because the target identifiers are not available
+ * before the binding is loaded. Use ``PUT /by-key`` for target-scoped
+ * upserts that forward the target to the authorizer.
  */
 export function controlBindingsUpdate(
   client: AgentControlSDKCore,
 
@@ -85,6 +85,8 @@ export * from "./regex-template-parameter.js";
 export * from "./remove-agent-control-response.js";
 export * from "./render-control-template-request.js";
 export * from "./render-control-template-response.js";
+export * from "./runtime-token-exchange-request.js";
+export * from "./runtime-token-exchange-response.js";
 export * from "./security.js";
 export * from "./set-control-data-request.js";
 export * from "./set-control-data-response.js";
 
@@ -0,0 +1,53 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4-mini";
+import { remap as remap$ } from "../lib/primitives.js";
+
+/**
+ * Body for the runtime token exchange endpoint.
+ */
+export type RuntimeTokenExchangeRequest = {
+  /**
+   * Opaque target identifier.
+   */
+  targetId: string;
+  /**
+   * Opaque target kind (e.g., ``log_stream``).
+   */
+  targetType: string;
+};
+
+/** @internal */
+export type RuntimeTokenExchangeRequest$Outbound = {
+  target_id: string;
+  target_type: string;
+};
+
+/** @internal */
+export const RuntimeTokenExchangeRequest$outboundSchema: z.ZodMiniType<
+  RuntimeTokenExchangeRequest$Outbound,
+  RuntimeTokenExchangeRequest
+> = z.pipe(
+  z.object({
+    targetId: z.string(),
+    targetType: z.string(),
+  }),
+  z.transform((v) => {
+    return remap$(v, {
+      targetId: "target_id",
+      targetType: "target_type",
+    });
+  }),
+);
+
+export function runtimeTokenExchangeRequestToJSON(
+  runtimeTokenExchangeRequest: RuntimeTokenExchangeRequest,
+): string {
+  return JSON.stringify(
+    RuntimeTokenExchangeRequest$outboundSchema.parse(
+      runtimeTokenExchangeRequest,
+    ),
+  );
+}
Original file line number	Diff line number	Diff line change
`@@ -18,6 +18,7 @@ export interface AgentControlInitOptions {`
`18`	`18`	`}`
`19`	`19`
`20`	`20`	`export type AgentsApi = AgentControlSDK["agents"];`
	`21`	`+export type AuthApi = AgentControlSDK["auth"];`
`21`	`22`	`export type ControlBindingsApi = AgentControlSDK["controlBindings"];`
`22`	`23`	`export type ControlsApi = AgentControlSDK["controls"];`
`23`	`24`	`export type EvaluationApi = AgentControlSDK["evaluation"];`
`@@ -52,6 +53,10 @@ export class AgentControlClient {`
`52`	`53`	`return this.requireSDK().agents;`
`53`	`54`	`}`
`54`	`55`
	`56`	`+ get auth(): AuthApi {`
	`57`	`+ return this.requireSDK().auth;`
	`58`	`+ }`
	`59`	`+`
`55`	`60`	`get controlBindings(): ControlBindingsApi {`
`56`	`61`	`return this.requireSDK().controlBindings;`
`57`	`62`	`}`