@aexhq/sdk 0.54.1 → 0.55.1

package/dist/generated/models.d.ts

@@ -1,853 +0,0 @@
-/**
- * The public wire model types used by the generated SDK resources.
- *
- * These declarations and identifier utilities are projected from the same
- * authored contract as `@aexhq/wire`, but carry no runtime validator dependency.
- */
-export declare const ID_PREFIXES: {
-    readonly user: "usr";
-    readonly account: "acc";
-    readonly organization: "org";
-    readonly membership: "mem";
-    readonly invitation: "inv";
-    readonly workspace: "wsp";
-    readonly api_key: "key";
-    readonly provider_credential: "pcr";
-    readonly session: "ses";
-    readonly message: "msg";
-    readonly agent: "agt";
-    readonly tool_call: "tcl";
-    readonly operation: "op";
-    readonly approval: "apr";
-    readonly generation: "gen";
-    readonly file_upload: "ful";
-    readonly file_download: "fdl";
-    readonly observation: "obs";
-    readonly upload: "upl";
-    readonly measurement: "msr";
-    readonly statement: "stm";
-    readonly payment_method: "pmt";
-    readonly billing_transaction: "txn";
-};
-export type IdKind = keyof typeof ID_PREFIXES;
-export type Id<K extends IdKind = IdKind> = `${(typeof ID_PREFIXES)[K]}_${string}`;
-export declare const ID_KINDS: readonly ("message" | "user" | "account" | "organization" | "membership" | "invitation" | "workspace" | "api_key" | "provider_credential" | "session" | "agent" | "tool_call" | "operation" | "approval" | "generation" | "file_upload" | "file_download" | "observation" | "upload" | "measurement" | "statement" | "payment_method" | "billing_transaction")[];
-export declare function idPatternSource(kind: IdKind): string;
-export declare function idPattern(kind: IdKind): RegExp;
-export declare function isId<K extends IdKind>(kind: K, value: unknown): value is Id<K>;
-export declare function assertId<K extends IdKind>(kind: K, value: unknown, label?: string): Id<K>;
-export declare function newId<K extends IdKind>(kind: K): Id<K>;
-export type JsonValue = null | boolean | number | string | JsonValue[] | {
-    [key: string]: JsonValue;
-};
-/** An account in good standing. */
-export interface AccountActiveState {
-    readonly changedAt: string;
-    readonly revision: number;
-}
-/** Whether the account may consume paid capacity. */
-export type AccountOperationalState = (AccountActiveState & {
-    readonly status: "active";
-}) | (AccountPausedState & {
-    readonly status: "paused";
-});
-/** Why the personal prepaid account cannot admit paid work. */
-export type AccountPauseReason = "top_up_required" | "payment_hold" | "dispute_hold" | "account_closed";
-/** A paused account and its customer-visible remedy. */
-export interface AccountPausedState {
-    readonly changedAt: string;
-    readonly minimumRestoreCents?: string;
-    readonly reason: AccountPauseReason;
-    readonly revision: number;
-}
-/** The one error envelope every failing request returns. */
-export interface ApiError {
-    readonly error: ApiErrorBody;
-}
-/** The failure itself. */
-export interface ApiErrorBody {
-    readonly code: "unauthenticated" | "forbidden" | "insufficient_scope" | "token_invalid" | "token_revoked" | "token_expired" | "malformed_token" | "slow_down" | "not_found" | "gone" | "idempotency_conflict" | "idempotency_in_flight" | "api_key_secret_unavailable" | "operation_idempotency_conflict" | "invalid_request" | "invalid_scope" | "invalid_cursor" | "invalid_file_selection" | "invalid_range" | "unsupported_media_type" | "payload_too_large" | "limit_exceeded" | "session_not_idle" | "session_terminated" | "workspace_activation_required" | "workspace_not_live" | "session_deleting" | "session_deleted" | "deletion_in_progress" | "resource_conflict" | "last_owner_required" | "operation_not_cancelable" | "approval_not_found" | "approval_already_resolved" | "approval_binding_changed" | "file_not_found" | "content_missing" | "download_grant_expired" | "invalid_query" | "invalid_network_policy" | "unsupported_package_ecosystem" | "package_resolution_failed" | "package_artifact_unavailable" | "package_integrity_mismatch" | "unknown_provider" | "unknown_model" | "invalid_auto_topup_policy" | "payment_method_required" | "authentication_unavailable" | "account_paused" | "account_state_unavailable" | "precondition_failed" | "wrong_workspace_region" | "usage_unavailable" | "usage_coverage_gap" | "rate_limited" | "upstream_error" | "workspace_provision_pending" | "commit_outcome_unknown" | "not_implemented" | "internal_error";
-    readonly details?: ErrorDetails;
-    readonly message: string;
-    readonly operationId?: Id<"operation">;
-    readonly requestId: string;
-    readonly retryable: boolean;
-}
-/** Workspace API key metadata. Secret material is never returned by reads. */
-export interface ApiKey {
-    readonly createdAt: string;
-    readonly id: Id<"api_key">;
-    readonly name: string;
-    readonly revokedAt?: string;
-    readonly scopes: ReadonlyArray<"account:read" | "account:write" | "api_keys:read" | "api_keys:write" | "billing:read" | "billing:write" | "sessions:read" | "sessions:write" | "sessions:delete" | "resources:read" | "resources:write">;
-    readonly workspaceId: Id<"workspace">;
-}
-/** Mint a key for the account's fixed workspace. */
-export interface ApiKeyCreateRequest {
-    readonly name: string;
-    readonly scopes: ReadonlyArray<"account:read" | "account:write" | "api_keys:read" | "api_keys:write" | "billing:read" | "billing:write" | "sessions:read" | "sessions:write" | "sessions:delete" | "resources:read" | "resources:write">;
-    readonly workspaceId: Id<"workspace">;
-}
-/** One bounded page of API key metadata. */
-export interface ApiKeyPage {
-    readonly items: ReadonlyArray<ApiKey>;
-    readonly nextCursor?: string;
-}
-/** The closed first-party client completing Google authorization. */
-export type AuthClient = "dashboard" | "cli";
-/** The current prepaid position of the caller's personal account. */
-export interface BillingBalance {
-    readonly accountId: Id<"account">;
-    readonly availableCents: string;
-    readonly currency: Currency;
-    readonly pendingCents: string;
-    readonly reservedCents: string;
-    readonly updatedAt: string;
-}
-/** One immutable customer-visible ledger transaction. */
-export interface BillingTransaction {
-    readonly amountCents: string;
-    readonly balanceAfterCents: string;
-    readonly currency: Currency;
-    readonly direction: BillingTransactionDirection;
-    readonly id: Id<"billing_transaction">;
-    readonly kind: BillingTransactionKind;
-    readonly occurredAt: string;
-    readonly reversesTransactionId?: Id<"billing_transaction">;
-    readonly sessionId?: Id<"session">;
-}
-/** Whether the transaction increases or decreases available prepaid value. */
-export type BillingTransactionDirection = "credit" | "debit";
-/** The customer-visible reason for an immutable balanced ledger transaction. */
-export type BillingTransactionKind = "top_up" | "usage" | "refund" | "reversal" | "reservation" | "reservation_release";
-/** One newest-first page of immutable ledger transactions. */
-export interface BillingTransactionPage {
-    readonly items: ReadonlyArray<BillingTransaction>;
-    readonly nextCursor?: string;
-}
-/** The independently measured and rated launch categories. */
-export type BillingUsageCategory = "model" | "runtime" | "storage" | "transfer";
-/** The trustworthy completeness boundary for one usage answer. */
-export interface BillingUsageCoverage {
-    readonly completeThrough: string;
-    readonly hasGap: boolean;
-    readonly includesThrough: string;
-}
-/** One bounded rated-usage aggregate with exact charge evidence. */
-export interface BillingUsageItem {
-    readonly amountCents: string;
-    readonly category: BillingUsageCategory;
-    readonly chargedQuantity: string;
-    readonly currency: Currency;
-    readonly model?: string;
-    readonly provider?: ProviderId;
-    readonly quantity: string;
-    readonly serviceTime: TimeRange;
-    readonly sessionId?: Id<"session">;
-    readonly settlement: BillingUsageSettlement;
-    readonly unit: string;
-}
-/** One bounded page of rated usage and its explicit completeness boundary. */
-export interface BillingUsagePage {
-    readonly coverage: BillingUsageCoverage;
-    readonly items: ReadonlyArray<BillingUsageItem>;
-    readonly nextCursor?: string;
-}
-/** Whether this rated row has been posted to the money ledger. */
-export type BillingUsageSettlement = "pending" | "settled";
-/** How inline blob bytes are encoded. */
-export type BlobEncoding = "utf8" | "base64";
-/** A small value carried in the request. */
-export interface BlobInline {
-    readonly data: string;
-    readonly encoding: BlobEncoding;
-    readonly sha256: string;
-}
-/** Where a registered value's bytes come from. */
-export type BlobInput = (BlobInline & {
-    readonly type: "inline";
-}) | (BlobUpload & {
-    readonly type: "upload";
-}) | (BlobUrl & {
-    readonly type: "url";
-});
-/** A large value staged through the upload surface. */
-export interface BlobUpload {
-    readonly sha256: string;
-    readonly sizeBytes: string;
-    readonly uploadId: Id<"upload">;
-}
-/** An HTTPS source fetched asynchronously under the platform SSRF, redirect, time and size policy. */
-export interface BlobUrl {
-    readonly url: string;
-}
-/** An explicit inclusive byte range over an immutable object. */
-export interface ByteRange {
-    readonly endInclusive: string;
-    readonly start: string;
-}
-/** Customer-safe card-network display metadata reported by Stripe. */
-export type CardBrand = "visa" | "mastercard" | "amex" | "discover" | "diners" | "jcb" | "unionpay" | "unknown";
-/** Public, non-secret Google authorization configuration for the native CLI. */
-export interface CliAuthConfig {
-    readonly authorizationUrl: string;
-    readonly clientId: string;
-    readonly redirectUri: string;
-}
-/** One resolved sandbox compute dimension. */
-export interface ComputeShape {
-    readonly memoryMiB: number;
-    readonly vcpus: number;
-}
-/** A reference to a stored payload. The bytes are never published in a registry response; they are reached through a download grant. */
-export interface ContentRef {
-    readonly sha256: string;
-    readonly sizeBytes: string;
-}
-/** The only launch currency. */
-export type Currency = "USD";
-/** The single bounded read that fills the launch dashboard shell. */
-export interface DashboardBootstrap {
-    readonly accountId: Id<"account">;
-    readonly accountState: AccountOperationalState;
-    readonly email: string;
-    readonly generatedAt: string;
-    readonly userId: Id<"user">;
-    readonly workspace: Workspace;
-}
-/** A rotated first-party user session returned exactly once. */
-export interface DashboardSessionCredential {
-    readonly expiresAt: string;
-    readonly session: string;
-    readonly userId: Id<"user">;
-}
-/** Complete a Google OAuth sign-in using PKCE-bound state and one registered first-party callback. */
-export interface DashboardSessionRequest {
-    readonly client: AuthClient;
-    readonly code: string;
-    readonly codeVerifier: string;
-    readonly state: string;
-}
-/** Minimal deletion marker returned while content cleanup runs. */
-export interface DeletingSession {
-    readonly id: Id<"session">;
-    readonly operationId: Id<"operation">;
-    readonly startedAt: string;
-}
-/** A short-lived signed grant for exactly one object and range. */
-export interface DownloadGrant {
-    readonly authorizedBytes: string;
-    readonly expiresAt: string;
-    readonly measurementId: Id<"measurement">;
-    readonly range?: ByteRange;
-    readonly sha256: string;
-    readonly sizeBytes: string;
-    readonly url: string;
-}
-/** One effective workspace safety limit. There is no public mutation route. */
-export interface EffectiveWorkspaceLimit {
-    readonly changedAt: string;
-    readonly effectiveValue: LimitValue;
-    readonly id: "context.tool_result_bytes" | "session.materialized_agents" | "session.initial_files_bytes" | "session.initial_files_count" | "session.agent_execution" | "session.run_budget" | "api.json_body" | "query.page" | "registry.entries" | "registry.value_bytes";
-    readonly revision: number;
-    readonly source: LimitSource;
-}
-/** One page of effective workspace limits. */
-export interface EffectiveWorkspaceLimitPage {
-    readonly items: ReadonlyArray<EffectiveWorkspaceLimit>;
-    readonly nextCursor?: string;
-}
-/** A body that carries no fields; still strict, so an extra member is rejected. */
-export type EmptyRequest = Readonly<Record<string, never>>;
-/** Closed, typed remediation detail; never an untyped bag. */
-export type ErrorDetails = (ErrorDetailsRequiredScope & {
-    readonly type: "required_scope";
-}) | (ErrorDetailsLimit & {
-    readonly type: "limit";
-}) | (ErrorDetailsQuota & {
-    readonly type: "quota";
-}) | (ErrorDetailsRegion & {
-    readonly type: "region";
-}) | (ErrorDetailsRetry & {
-    readonly type: "retry";
-}) | (ErrorDetailsOperation & {
-    readonly type: "operation";
-}) | (ErrorDetailsValidation & {
-    readonly type: "validation";
-});
-/** The effective limit that was exceeded. */
-export interface ErrorDetailsLimit {
-    readonly effective: string;
-    readonly limit: "context.tool_result_bytes" | "session.materialized_agents" | "session.initial_files_bytes" | "session.initial_files_count" | "session.agent_execution" | "session.run_budget" | "api.json_body" | "query.page" | "registry.entries" | "registry.value_bytes";
-    readonly measured: string;
-}
-/** The original operation the replay resolved to. */
-export interface ErrorDetailsOperation {
-    readonly operationId: Id<"operation">;
-}
-/** The quota dimension that was exhausted. */
-export interface ErrorDetailsQuota {
-    readonly attempted: string;
-    readonly dimension: "context.tool_result_bytes" | "session.materialized_agents" | "session.initial_files_bytes" | "session.initial_files_count" | "session.agent_execution" | "session.run_budget" | "api.json_body" | "query.page" | "registry.entries" | "registry.value_bytes";
-    readonly used: string;
-}
-/** The authoritative placement of the workspace. */
-export interface ErrorDetailsRegion {
-    readonly apiUrl: string;
-    readonly expected: "us-east-1" | "us-east-2" | "us-west-2" | "ap-northeast-1" | "eu-west-1";
-}
-/** The scope the credential lacks. */
-export interface ErrorDetailsRequiredScope {
-    readonly scope: "account:read" | "account:write" | "api_keys:read" | "api_keys:write" | "billing:read" | "billing:write" | "sessions:read" | "sessions:write" | "sessions:delete" | "resources:read" | "resources:write";
-}
-/** How long to wait before retrying. */
-export interface ErrorDetailsRetry {
-    readonly retryAfterMs: number;
-}
-/** Exactly where the body failed validation. */
-export interface ErrorDetailsValidation {
-    readonly pointer: string;
-    readonly reason: string;
-}
-/** The sandbox network policy. */
-export interface HandsNetworkRequest {
-    readonly mode: NetworkMode;
-}
-/** A short-lived hosted provider page. */
-export interface HostedSession {
-    readonly expiresAt: string;
-    readonly url: string;
-}
-/** One request header a signed grant requires the caller to send verbatim. */
-export interface HttpHeader {
-    readonly name: string;
-    readonly value: string;
-}
-/** A limit whose effective value is a map of named dimensions. */
-export interface LimitMapValue {
-    readonly values: Readonly<Record<string, string>>;
-}
-/** A single non-negative integer limit. */
-export interface LimitScalarValue {
-    readonly value: string;
-}
-/** Where an effective limit value came from. */
-export type LimitSource = "default" | "workspace_override";
-/** The effective value of a limit, discriminated by shape. */
-export type LimitValue = (LimitScalarValue & {
-    readonly shape: "scalar";
-}) | (LimitMapValue & {
-    readonly shape: "map";
-});
-/** One frozen MCP definition and its bounded tool namespace. */
-export interface McpServer {
-    readonly name: string;
-    readonly transport: McpTransport;
-}
-/** The two admitted MCP transports. */
-export type McpTransport = (RemoteMcpServer & {
-    readonly kind: "remote_http";
-}) | (SandboxMcpServer & {
-    readonly kind: "sandbox_process";
-});
-/** One complete sealed message in immutable visibility order. */
-export interface Message {
-    readonly content: ReadonlyArray<MessagePart>;
-    readonly createdAt: string;
-    readonly id: Id<"message">;
-    readonly role: MessageRole;
-    readonly sessionId: Id<"session">;
-}
-/** One page of complete messages. */
-export interface MessagePage {
-    readonly items: ReadonlyArray<Message>;
-    readonly nextCursor?: string;
-}
-/** One part of a complete committed message. */
-export type MessagePart = (MessagePartText & {
-    readonly type: "text";
-}) | (MessagePartToolCall & {
-    readonly type: "tool_call";
-}) | (MessagePartToolResult & {
-    readonly type: "tool_result";
-});
-/** Text content. */
-export interface MessagePartText {
-    readonly text: string;
-}
-/** Canonical provider-independent tool call. */
-export interface MessagePartToolCall {
-    readonly arguments: JsonValue;
-    readonly id: Id<"tool_call">;
-    readonly name: string;
-}
-/** Bounded tool result; large/full bytes remain at its sandbox path unless storage.persist explicitly registers them as a workspace file. */
-export interface MessagePartToolResult {
-    readonly id: Id<"tool_call">;
-    readonly preview: string;
-    readonly sandboxPath?: string;
-    readonly sha256?: string;
-    readonly sizeBytes?: string;
-    readonly truncated: boolean;
-}
-/** Who produced a committed message. */
-export type MessageRole = "user" | "assistant" | "tool";
-/** Text-only user message; arbitrary files are referenced by mounted paths in this text. */
-export interface MessageSendRequest {
-    readonly deadline?: string;
-    readonly maxSpendCents?: string;
-    readonly responseFormat?: ResponseFormat;
-    readonly text: string;
-}
-/** The admitted user message and session now processing it. */
-export interface MessageSendResult {
-    readonly message: Message;
-    readonly session: Session;
-}
-/** One bounded NDJSON assistant-stream frame. */
-export interface MessageStreamFrame {
-    readonly kind: MessageStreamKind;
-    readonly message?: Message;
-    readonly messageId?: Id<"message">;
-    readonly sequence: string;
-    readonly text?: string;
-}
-/** Preview/commit reconciliation protocol. */
-export type MessageStreamKind = "preview" | "committed" | "reconcile" | "gap" | "heartbeat";
-/** An explicit provider and model pair; a model-only override is rejected. */
-export interface ModelSelection {
-    readonly model: string;
-    readonly provider: ProviderId;
-}
-/** What the sandbox may reach. */
-export type NetworkMode = "none" | "public_internet";
-/** A freshly minted key; its value is returned once and never stored. */
-export interface NewApiKey {
-    readonly createdAt: string;
-    readonly id: Id<"api_key">;
-    readonly name: string;
-    readonly scopes: ReadonlyArray<"account:read" | "account:write" | "api_keys:read" | "api_keys:write" | "billing:read" | "billing:write" | "sessions:read" | "sessions:write" | "sessions:delete" | "resources:read" | "resources:write">;
-    readonly value: string;
-    readonly workspaceId: Id<"workspace">;
-}
-/** Supported setup package ecosystems. */
-export type PackageEcosystem = "apt" | "pip" | "npm";
-/** One exactly pinned setup package. */
-export interface PackageRequest {
-    readonly ecosystem: PackageEcosystem;
-    readonly name: string;
-    readonly version: string;
-}
-/** Display-only metadata for one Stripe card; never PAN, CVC, or a client secret. */
-export interface PaymentMethod {
-    readonly brand: CardBrand;
-    readonly createdAt: string;
-    readonly expiryMonth: number;
-    readonly expiryYear: number;
-    readonly id: Id<"payment_method">;
-    readonly isDefault: boolean;
-    readonly last4: string;
-}
-/** The bounded set of cards attached to the caller's account. */
-export interface PaymentMethodPage {
-    readonly items: ReadonlyArray<PaymentMethod>;
-}
-/** Request a Stripe-hosted card setup session. */
-export interface PaymentMethodSessionRequest {
-    readonly cancelUrl?: string;
-    readonly consent: boolean;
-    readonly successUrl?: string;
-}
-/** The candidate official BYOK authorities. Only models admitted by the current Rig-backed catalog are selectable; arbitrary base URLs are not accepted. */
-export type ProviderId = "openai" | "anthropic" | "deepseek" | "xai" | "meta" | "moonshotai" | "alibaba";
-/** A registered file entry, complete. */
-export interface RegisteredFile {
-    readonly createdAt: string;
-    readonly failureCode?: string;
-    readonly name: string;
-    readonly state: RegisteredState;
-    readonly updatedAt: string;
-    readonly value?: RegisteredFileRead;
-}
-/** The two permitted registered-file modes. */
-export type RegisteredFileMode = "0644" | "0755";
-/** One page of registered files. */
-export interface RegisteredFilePage {
-    readonly items: ReadonlyArray<RegisteredFileRow>;
-    readonly nextCursor?: string;
-}
-/** What a registered file is, as published. The payload bytes are referenced, never inlined; fetch them with a download grant. */
-export interface RegisteredFileRead {
-    readonly content: ContentRef;
-    readonly mediaType: string;
-    readonly mode: RegisteredFileMode;
-}
-/** One registered file as a collection row. A listing carries no value document; read the entry itself to get one. */
-export interface RegisteredFileRow {
-    readonly createdAt: string;
-    readonly failureCode?: string;
-    readonly name: string;
-    readonly state: RegisteredState;
-    readonly updatedAt: string;
-}
-/** A latest-only registered file replacement. */
-export interface RegisteredFileValue {
-    readonly content: BlobInput;
-    readonly mediaType: string;
-    readonly mode: RegisteredFileMode;
-}
-/** State of the single current value; prior values are never addressable. */
-export type RegisteredState = "pending" | "ready" | "failed";
-/** Mint a download grant for a registered file. */
-export interface RegistryDownloadRequest {
-    readonly range?: ByteRange;
-}
-/** A remote Streamable HTTP MCP server frozen at session setup and invoked on demand inside the sandbox. */
-export interface RemoteMcpServer {
-    readonly headers?: Readonly<Record<string, string>>;
-    readonly url: string;
-}
-/** Complete provider-derived capacity of the frozen shape. */
-export interface ResolvedCompute {
-    readonly baseline: ComputeShape;
-    readonly endpointBandwidthMBps: number;
-    readonly maxConcurrentConnections: number;
-    readonly maxDiskGiB: number;
-    readonly peak: ComputeShape;
-    readonly size: "512mb" | "1gb" | "2gb" | "4gb" | "8gb";
-}
-/** Customer-safe frozen session configuration; all plaintext secrets are omitted. */
-export interface ResolvedConfig {
-    readonly compute?: ResolvedCompute;
-    readonly lifecycle: SessionLifecyclePolicy;
-    readonly mcpServerNames: ReadonlyArray<string>;
-    readonly model: string;
-    readonly network?: ResolvedNetwork;
-    readonly packages: ReadonlyArray<PackageRequest>;
-    readonly provider: ProviderId;
-    readonly registered: SessionRegisteredSelection;
-    readonly sandboxEnabled: boolean;
-}
-/** Resolved sandbox network policy. */
-export interface ResolvedNetwork {
-    readonly hands: HandsNetworkRequest;
-}
-/** Optional native structured-output request; prompt emulation is never presented as strict. */
-export interface ResponseFormat {
-    readonly kind: ResponseFormatKind;
-    readonly schema?: JsonValue;
-}
-/** Requested final response format. */
-export type ResponseFormatKind = "text" | "json_schema";
-/** An MCP process launched inside the sandbox after workspace materialization. */
-export interface SandboxMcpServer {
-    readonly args?: ReadonlyArray<string>;
-    readonly command: string;
-    readonly environment?: Readonly<Record<string, string>>;
-    readonly workingDirectory?: string;
-}
-/** Observable preparation state of the session's single default-on sandbox. */
-export type SandboxStatus = "disabled" | "requested" | "ready" | "suspending" | "suspended" | "resuming" | "lost";
-/** The only public execution resource; sandbox loss never terminates agent state. */
-export interface Session {
-    readonly activeMessageId?: Id<"message">;
-    readonly createdAt: string;
-    readonly expiresAt: string;
-    readonly id: Id<"session">;
-    readonly metadata?: Readonly<Record<string, string | number | boolean | null>>;
-    readonly resolvedConfig: ResolvedConfig;
-    readonly revision: number;
-    readonly sandboxStatus: SandboxStatus;
-    readonly status: SessionStatus;
-    readonly terminatedAt?: string;
-    readonly updatedAt: string;
-    readonly workspaceId: Id<"workspace">;
-}
-/** Admission receipt for an asynchronous session command; there is no generic operations resource. */
-export interface SessionCommandReceipt {
-    readonly acceptedAt: string;
-    readonly operationId: Id<"operation">;
-    readonly sessionId: Id<"session">;
-}
-/** The single sandbox's bounded compute selector. */
-export interface SessionComputeRequest {
-    readonly size?: "512mb" | "1gb" | "2gb" | "4gb" | "8gb";
-}
-/** Create a durable session with a write-only BYOK key, frozen file/MCP config and a default-on eager sandbox. */
-export interface SessionCreateRequest {
-    readonly expiresAt?: string;
-    readonly maxSpendCents?: string;
-    readonly mcpServers?: ReadonlyArray<McpServer>;
-    readonly metadata?: Readonly<Record<string, string | number | boolean | null>>;
-    readonly model: string;
-    readonly provider: ProviderId;
-    readonly providerApiKey: string;
-    readonly registered?: SessionRegisteredSelection;
-    readonly sandbox?: SessionSandboxRequest;
-}
-/** Immutable public session bounds; sandbox suspension is an internal lifecycle. */
-export interface SessionLifecyclePolicy {
-    readonly maximumLifetimeSeconds: number;
-    readonly maximumSubagentDepth: number;
-    readonly maximumSubagents: number;
-}
-/** Bounded collection projection. */
-export interface SessionListItem {
-    readonly activeMessageId?: Id<"message">;
-    readonly createdAt: string;
-    readonly expiresAt: string;
-    readonly id: Id<"session">;
-    readonly model: string;
-    readonly provider: ProviderId;
-    readonly sandboxStatus: SandboxStatus;
-    readonly status: SessionStatus;
-    readonly updatedAt: string;
-    readonly workspaceId: Id<"workspace">;
-}
-/** One page of sessions. */
-export interface SessionListPage {
-    readonly items: ReadonlyArray<SessionListItem>;
-    readonly nextCursor?: string;
-}
-/** Network policy for the one sandbox. */
-export interface SessionNetworkRequest {
-    readonly hands: HandsNetworkRequest;
-}
-/** Files resolved once at session admission; later workspace overwrites cannot mutate this manifest. */
-export interface SessionRegisteredSelection {
-    readonly mounts: ReadonlyArray<WorkspaceFileMount>;
-}
-/** Default-on sandbox configuration; enabled=false creates no Hand. */
-export interface SessionSandboxRequest {
-    readonly compute?: SessionComputeRequest;
-    readonly enabled?: boolean;
-    readonly network?: SessionNetworkRequest;
-    readonly packages?: ReadonlyArray<PackageRequest>;
-}
-/** Customer-visible session lifecycle, independent of sandbox suspension. */
-export type SessionStatus = "idle" | "running" | "terminating" | "terminated" | "deleting";
-/** Minimal marker after irreversible deletion. */
-export interface SessionTombstone {
-    readonly deletedAt: string;
-    readonly id: Id<"session">;
-}
-/** Short-lived signed download for one immutable compressed telemetry export. */
-export interface TelemetryDownloadGrant {
-    readonly expiresAt: string;
-    readonly mediaType: string;
-    readonly sha256: string;
-    readonly sizeBytes: string;
-    readonly url: string;
-}
-/** Select a bounded half-open telemetry export. */
-export interface TelemetryDownloadRequest {
-    readonly fromSequence?: string;
-    readonly toSequence?: string;
-}
-/** One bounded normalized telemetry frame transmitted live and persisted in compressed S3 segments. */
-export interface TelemetryFrame {
-    readonly body?: JsonValue;
-    readonly kind: TelemetryKind;
-    readonly occurredAt: string;
-    readonly preview?: string;
-    readonly sequence: string;
-    readonly spanId?: string;
-    readonly traceId?: string;
-    readonly truncated: boolean;
-}
-/** Trusted live and retained session signals. */
-export type TelemetryKind = "assistant" | "tool" | "runtime" | "log" | "span" | "usage" | "gap" | "heartbeat";
-/** A half-open instant range, `gte` inclusive and `lt` exclusive. */
-export interface TimeRange {
-    readonly gte: string;
-    readonly lt: string;
-}
-/** Request a one-time Stripe-hosted prepaid top-up. */
-export interface TopUpCheckoutRequest {
-    readonly amountCents: string;
-    readonly cancelUrl?: string;
-    readonly successUrl?: string;
-}
-/** One staged multipart upload. Uploads are transport plumbing, not assets. */
-export interface Upload {
-    readonly contentType: string;
-    readonly createdAt: string;
-    readonly expiresAt: string;
-    readonly id: Id<"upload">;
-    readonly partCount: number;
-    readonly partSizeBytes: string;
-    readonly sha256: string;
-    readonly sizeBytes: string;
-    readonly state: UploadState;
-}
-/** One pending current-file overwrite and every bounded part grant needed to upload it; no extra public grant route exists. */
-export interface UploadAdmission {
-    readonly grants: ReadonlyArray<UploadPartGrant>;
-    readonly upload: Upload;
-}
-/** Complete a staged upload. */
-export interface UploadCompleteRequest {
-    readonly parts: ReadonlyArray<UploadPart>;
-}
-/** Stage a large current workspace-file replacement. */
-export interface UploadCreateRequest {
-    readonly contentType: string;
-    readonly name: string;
-    readonly parts: ReadonlyArray<UploadPartRequest>;
-    readonly sha256: string;
-    readonly sizeBytes: string;
-}
-/** One written part and the entity tag the store returned. */
-export interface UploadPart {
-    readonly etag: string;
-    readonly partNumber: number;
-}
-/** One presigned PUT grant. The headers must be sent verbatim: they carry the part checksum and length the signature covers, and a PUT without them is rejected by the object store. */
-export interface UploadPartGrant {
-    readonly expiresAt: string;
-    readonly headers: ReadonlyArray<HttpHeader>;
-    readonly partNumber: number;
-    readonly url: string;
-}
-/** One part to presign. The part's own SHA-256 is required because S3 verifies it on the way up and the completion manifest checks it again; the server never sees the bytes, so it cannot compute it. */
-export interface UploadPartRequest {
-    readonly partNumber: number;
-    readonly sha256: string;
-    readonly sizeBytes: string;
-}
-/** Where a staged upload is in its lifecycle. */
-export type UploadState = "staging" | "ready";
-/** One resource aggregate, discriminated by category. */
-export type UsageAggregate = (UsageStorageAggregate & {
-    readonly category: "storage";
-}) | (UsageComputeAggregate & {
-    readonly category: "compute";
-}) | (UsageMemoryAggregate & {
-    readonly category: "memory";
-}) | (UsageDataTransferAggregate & {
-    readonly category: "data_transfer";
-});
-/** What a regional aggregate is attributed to. */
-export interface UsageAttribution {
-    readonly operationId?: Id<"operation">;
-    readonly region: "us-east-1" | "us-east-2" | "us-west-2" | "ap-northeast-1" | "eu-west-1";
-    readonly serviceTime: TimeRange;
-    readonly sessionId?: Id<"session">;
-    readonly source: string;
-    readonly workspaceId: Id<"workspace">;
-}
-/** The three authorities that admit usage facts. There are three rather than
-four because memory and compute are one contiguous fact sequence behind
-one authority, so they share one frontier; publishing four frontiers with
-two of them always identical would claim an independence that does not
-exist.
- */
-export type UsageAuthority = "storage" | "compute" | "transfer";
-/** The time grain one usage query answers at. All bucketing is UTC and there
-is no timezone parameter; a range must be aligned to whole buckets of the
-requested grain and a misaligned range is refused rather than widened to
-the enclosing buckets.
- */
-export type UsageBucket = "hour" | "day" | "total";
-/** The four priced categories. */
-export type UsageCategory = "storage" | "compute" | "memory" | "data_transfer";
-/** Millicpu-milliseconds of guest compute. */
-export interface UsageComputeAggregate {
-    readonly attribution: UsageAttribution;
-    readonly millicpuMilliseconds: string;
-    readonly settlement: UsageSettlement;
-}
-/** Measured outbound bytes. */
-export interface UsageDataTransferAggregate {
-    readonly attribution: UsageAttribution;
-    readonly egressBytes: string;
-    readonly settlement: UsageSettlement;
-}
-/** How far the pipeline has advanced for one workspace and authority. The
-answer is exact at or below `completeThrough` and contains nothing above
-`includesThrough`; between the two it is partial, and saying so is the
-point. Both are monotone across repeated queries.
- */
-export interface UsageFrontier {
-    readonly acceptedSequence: string;
-    readonly category: UsageAuthority;
-    readonly completeThrough: string;
-    readonly includesThrough: string;
-    readonly projectedSequence: string;
-    readonly publishedSequence: string;
-    readonly region: "us-east-1" | "us-east-2" | "us-west-2" | "ap-northeast-1" | "eu-west-1";
-    readonly serviceThrough?: string;
-    readonly settledSequence: string;
-    readonly stallReason?: string;
-    readonly stalledAt?: string;
-    readonly state: UsageFrontierState;
-    readonly workspaceId: Id<"workspace">;
-}
-/** Whether a fold is advancing or parked. */
-export type UsageFrontierState = "advancing" | "stalled";
-/** The axes a usage query may group by. Session, run and operation are
-deliberately absent: every stored aggregate row is keyed by a hash of a
-seven-member dimension tuple that includes the session, so grouping by one
-of them would read hundreds of thousands of rows for a single monthly
-total. "How much did session X cost?" is not answerable by any route in
-v1, and publishing an axis that is always refused would be a false
-capability.
- */
-export type UsageGrouping = "category" | "region" | "workspace";
-/** Byte-milliseconds of guest memory. */
-export interface UsageMemoryAggregate {
-    readonly attribution: UsageAttribution;
-    readonly byteMilliseconds: string;
-    readonly settlement: UsageSettlement;
-}
-/** One page of usage quantities plus the frontiers that bound its completeness. Monetary statements remain a central finance read. */
-export interface UsagePage {
-    readonly frontiers: ReadonlyArray<UsageFrontier>;
-    readonly items: ReadonlyArray<UsageAggregate>;
-    readonly nextCursor?: string;
-}
-/** A bounded query over authoritative regional usage quantities. */
-export interface UsageQuery {
-    readonly bucket: UsageBucket;
-    readonly categories?: ReadonlyArray<UsageCategory>;
-    readonly cursor?: string;
-    readonly groupBy?: ReadonlyArray<UsageGrouping>;
-    readonly limit?: number;
-    readonly timeRange: TimeRange;
-}
-/** Whether an item is covered by a committed settlement receipt as of
-`completeThrough`. Not permanently terminal: a correction or a void
-arrives as a new fact at a higher sequence and re-opens its bucket to
-`provisional`.
- */
-export type UsageSettlement = "settled" | "provisional";
-/** Retained bytes over time. */
-export interface UsageStorageAggregate {
-    readonly attribution: UsageAttribution;
-    readonly byteMinutes: string;
-    readonly settlement: UsageSettlement;
-}
-/** The account's fixed eu-west-1 execution and content boundary. */
-export interface Workspace {
-    readonly apiUrl: string;
-    readonly createdAt: string;
-    readonly id: Id<"workspace">;
-    readonly name: string;
-    readonly operationalState: WorkspaceOperationalState;
-    readonly region: "us-east-1" | "us-east-2" | "us-west-2" | "ap-northeast-1" | "eu-west-1";
-}
-/** Which retained session generation answered a live workspace call. */
-export interface WorkspaceAccess {
-    readonly generationId: Id<"generation">;
-    readonly resumed: boolean;
-}
-/** Resolve one current workspace-file name to a private immutable hash and mount path at admission. */
-export interface WorkspaceFileMount {
-    readonly name: string;
-    readonly path: string;
-}
-/** The fixed workspace's inherited personal-account state. */
-export interface WorkspaceOperationalState {
-    readonly accountId: Id<"account">;
-    readonly state: AccountOperationalState;
-}