diff --git a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageApiKeysClient.CreateKeys.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageApiKeysClient.CreateKeys.g.cs
index 72743774..8e486db2 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageApiKeysClient.CreateKeys.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageApiKeysClient.CreateKeys.g.cs
@@ -6,7 +6,7 @@ public partial interface ISubpackageApiKeysClient
     {
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -19,7 +19,7 @@ public partial interface ISubpackageApiKeysClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -32,7 +32,7 @@ public partial interface ISubpackageApiKeysClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="creatorUserId">
         /// Optional user ID of the key creator. Only meaningful for organization-owned keys where a specific member is creating the key.
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageByokClient.CreateByokKey.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageByokClient.CreateByokKey.g.cs
index 4bfbef91..bdc4fe16 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageByokClient.CreateByokKey.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageByokClient.CreateByokKey.g.cs
@@ -6,7 +6,7 @@ public partial interface ISubpackageByokClient
     {
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -19,7 +19,7 @@ public partial interface ISubpackageByokClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -32,7 +32,7 @@ public partial interface ISubpackageByokClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="allowedModels">
         /// Optional allowlist of model slugs this credential may be used for. `null` means no restriction.
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
index 60600a71..ed7f6985 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
@@ -6,7 +6,7 @@ public partial interface ISubpackageGuardrailsClient
     {
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -21,7 +21,7 @@ public partial interface ISubpackageGuardrailsClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -36,7 +36,7 @@ public partial interface ISubpackageGuardrailsClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="keyHashes">
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.UpdateGuardrail.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.UpdateGuardrail.g.cs
index 16a9d20a..c5d9aed1 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.UpdateGuardrail.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageGuardrailsClient.UpdateGuardrail.g.cs
@@ -6,7 +6,7 @@ public partial interface ISubpackageGuardrailsClient
     {
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -21,7 +21,7 @@ public partial interface ISubpackageGuardrailsClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -36,7 +36,7 @@ public partial interface ISubpackageGuardrailsClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="allowedModels">
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageWorkspacesClient.DeleteWorkspace.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageWorkspacesClient.DeleteWorkspace.g.cs
index 9ea05398..07df4a6d 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageWorkspacesClient.DeleteWorkspace.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.ISubpackageWorkspacesClient.DeleteWorkspace.g.cs
@@ -6,7 +6,7 @@ public partial interface ISubpackageWorkspacesClient
     {
         /// <summary>
         /// Delete a workspace<br/>
-        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted; remove the keys first. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -18,7 +18,7 @@ public partial interface ISubpackageWorkspacesClient
             global::System.Threading.CancellationToken cancellationToken = default);
         /// <summary>
         /// Delete a workspace<br/>
-        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted; remove the keys first. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.Models.ImageGenerationResponseDataItems.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.Models.ImageGenerationResponseDataItems.g.cs
index 5aeb9569..1b7a0d20 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.Models.ImageGenerationResponseDataItems.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.Models.ImageGenerationResponseDataItems.g.cs
@@ -15,6 +15,12 @@ public sealed partial class ImageGenerationResponseDataItems
         [global::System.Text.Json.Serialization.JsonRequired]
         public required string B64Json { get; set; }
 
+        /// <summary>
+        /// Media type (MIME type) of the image. Omitted when the output is a standard raster format (PNG). Present for non-raster outputs such as SVG (`image/svg+xml`).
+        /// </summary>
+        [global::System.Text.Json.Serialization.JsonPropertyName("media_type")]
+        public string? MediaType { get; set; }
+
         /// <summary>
         /// Additional properties that are not explicitly defined in the schema
         /// </summary>
@@ -27,13 +33,18 @@ public sealed partial class ImageGenerationResponseDataItems
         /// <param name="b64Json">
         /// Base64-encoded image bytes
         /// </param>
+        /// <param name="mediaType">
+        /// Media type (MIME type) of the image. Omitted when the output is a standard raster format (PNG). Present for non-raster outputs such as SVG (`image/svg+xml`).
+        /// </param>
 #if NET7_0_OR_GREATER
         [global::System.Diagnostics.CodeAnalysis.SetsRequiredMembers]
 #endif
         public ImageGenerationResponseDataItems(
-            string b64Json)
+            string b64Json,
+            string? mediaType)
         {
             this.B64Json = b64Json ?? throw new global::System.ArgumentNullException(nameof(b64Json));
+            this.MediaType = mediaType;
         }
 
         /// <summary>
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageApiKeysClient.CreateKeys.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageApiKeysClient.CreateKeys.g.cs
index a6033c82..c25c59ba 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageApiKeysClient.CreateKeys.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageApiKeysClient.CreateKeys.g.cs
@@ -43,7 +43,7 @@ partial void ProcessCreateKeysResponseContent(
 
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -66,7 +66,7 @@ partial void ProcessCreateKeysResponseContent(
         }
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -620,7 +620,7 @@ partial void ProcessCreateKeysResponseContent(
         }
         /// <summary>
         /// Create a new API key<br/>
-        /// Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="creatorUserId">
         /// Optional user ID of the key creator. Only meaningful for organization-owned keys where a specific member is creating the key.
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageByokClient.CreateByokKey.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageByokClient.CreateByokKey.g.cs
index ad512c9f..ef08d5a0 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageByokClient.CreateByokKey.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageByokClient.CreateByokKey.g.cs
@@ -43,7 +43,7 @@ partial void ProcessCreateByokKeyResponseContent(
 
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -66,7 +66,7 @@ partial void ProcessCreateByokKeyResponseContent(
         }
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="request"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -583,7 +583,7 @@ partial void ProcessCreateByokKeyResponseContent(
         }
         /// <summary>
         /// Create a BYOK provider credential<br/>
-        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="allowedModels">
         /// Optional allowlist of model slugs this credential may be used for. `null` means no restriction.
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
index 59709975..a4a91a83 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.BulkAssignKeysToGuardrail.g.cs
@@ -45,7 +45,7 @@ partial void ProcessBulkAssignKeysToGuardrailResponseContent(
 
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -71,7 +71,7 @@ partial void ProcessBulkAssignKeysToGuardrailResponseContent(
         }
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -592,7 +592,7 @@ partial void ProcessBulkAssignKeysToGuardrailResponseContent(
         }
         /// <summary>
         /// Bulk assign keys to a guardrail<br/>
-        /// Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="keyHashes">
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.UpdateGuardrail.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.UpdateGuardrail.g.cs
index be755b6e..42541157 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.UpdateGuardrail.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageGuardrailsClient.UpdateGuardrail.g.cs
@@ -45,7 +45,7 @@ partial void ProcessUpdateGuardrailResponseContent(
 
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -71,7 +71,7 @@ partial void ProcessUpdateGuardrailResponseContent(
         }
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="request"></param>
@@ -592,7 +592,7 @@ partial void ProcessUpdateGuardrailResponseContent(
         }
         /// <summary>
         /// Update a guardrail<br/>
-        /// Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="allowedModels">
diff --git a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageWorkspacesClient.DeleteWorkspace.g.cs b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageWorkspacesClient.DeleteWorkspace.g.cs
index c688cff6..6780ad9e 100644
--- a/src/libs/OpenRouter/Generated/OpenRouter.SubpackageWorkspacesClient.DeleteWorkspace.g.cs
+++ b/src/libs/OpenRouter/Generated/OpenRouter.SubpackageWorkspacesClient.DeleteWorkspace.g.cs
@@ -43,7 +43,7 @@ partial void ProcessDeleteWorkspaceResponseContent(
 
         /// <summary>
         /// Delete a workspace<br/>
-        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted; remove the keys first. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
@@ -64,7 +64,7 @@ partial void ProcessDeleteWorkspaceResponseContent(
         }
         /// <summary>
         /// Delete a workspace<br/>
-        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted. [Management key](/docs/guides/overview/auth/management-api-keys) required.
+        /// Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted; remove the keys first. [Management key](/docs/guides/overview/auth/management-api-keys) required.
         /// </summary>
         /// <param name="id"></param>
         /// <param name="requestOptions">Per-request overrides such as headers, query parameters, timeout, retries, and response buffering.</param>
diff --git a/src/libs/OpenRouter/openapi.yaml b/src/libs/OpenRouter/openapi.yaml
index b8536793..a33a4b8e 100644
--- a/src/libs/OpenRouter/openapi.yaml
+++ b/src/libs/OpenRouter/openapi.yaml
@@ -1280,7 +1280,7 @@
       "post": {
         "operationId": "create-byok-key",
         "summary": "Create a BYOK provider credential",
-        "description": "Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
+        "description": "Create a new bring-your-own-key (BYOK) provider credential. The raw key is encrypted at rest and never returned in API responses. Defaults to the authenticated entity's default workspace; use the `workspace_id` body field to scope to a different workspace. Treat the raw key as write-only; it is never returned after creation. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
         "tags": [
           "subpackage_byok"
         ],
@@ -3247,7 +3247,7 @@
       "patch": {
         "operationId": "update-guardrail",
         "summary": "Update a guardrail",
-        "description": "Update an existing guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
+        "description": "Update an existing guardrail. Collection fields use replace semantics: send the full desired set on every update. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
         "tags": [
           "subpackage_guardrails"
         ],
@@ -3410,7 +3410,7 @@
       "post": {
         "operationId": "bulk-assign-keys-to-guardrail",
         "summary": "Bulk assign keys to a guardrail",
-        "description": "Assign multiple API keys to a specific guardrail. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
+        "description": "Assign multiple API keys to a specific guardrail. A key may hold at most one guardrail; assigning replaces any existing assignment. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
         "tags": [
           "subpackage_guardrails"
         ],
@@ -4069,7 +4069,7 @@
       "post": {
         "operationId": "create-keys",
         "summary": "Create a new API key",
-        "description": "Create a new API key for the authenticated user. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
+        "description": "Create a new API key for the authenticated user. The plaintext `key` is returned only in this response. Treat it as a write-only, sensitive value; it cannot be retrieved later. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
         "tags": [
           "subpackage_apiKeys"
         ],
@@ -6365,7 +6365,7 @@
         ],
         "responses": {
           "200": {
-            "description": "Video content stream",
+            "description": "Video content stream. The body is the raw video bytes proxied from the upstream provider, and the Content-Type reflects the provider media type (video/mp4).",
             "content": {
               "application/octet-stream": {
                 "schema": {
@@ -6668,7 +6668,7 @@
       "delete": {
         "operationId": "delete-workspace",
         "summary": "Delete a workspace",
-        "description": "Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
+        "description": "Delete an existing workspace. The default workspace cannot be deleted. Workspaces with active API keys cannot be deleted; remove the keys first. [Management key](/docs/guides/overview/auth/management-api-keys) required.",
         "tags": [
           "subpackage_workspaces"
         ],
@@ -19113,6 +19113,10 @@
           "b64_json": {
             "type": "string",
             "description": "Base64-encoded image bytes"
+          },
+          "media_type": {
+            "type": "string",
+            "description": "Media type (MIME type) of the image. Omitted when the output is a standard raster format (PNG). Present for non-raster outputs such as SVG (`image/svg+xml`)."
           }
         },
         "required": [