@astralbeam/sdk 0.20.3 → 0.22.0

package/dist/{index-BEH3ZhY5.d.ts → index-DatxwZpZ.d.ts}

@@ -1,4 +1,4 @@
-import { $n as personalMcpGetCatalog, H as CurrentUser, Ht as UploadedChatFile, at as McpConnectionEncoded, hr as JwtOptions, vt as PersonalMcpTestConnection200 } from "./index-DFxtXIXy.js";
+import { $n as personalMcpGetCatalog, V as CurrentUser, Wt as UploadedChatFile, X as GetThreadAttachmentParams, at as McpConnectionEncoded, hr as JwtOptions, vt as PersonalMcpTestConnection200 } from "./index-D8X2hDGe.js";
 //#region ../node_modules/.bun/@standard-schema+spec@1.1.0/node_modules/@standard-schema/spec/dist/index.d.ts
 /** The Standard Typed interface. This is a base type extended by other specs. */
 interface StandardTypedV1<Input = unknown, Output = Input> {
@@ -116,7 +116,60 @@ declare namespace StandardJSONSchemaV1 {
   type InferOutput<Schema extends StandardTypedV1> = StandardTypedV1.InferOutput<Schema>;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/interrupts.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/activities/chat/middleware/capabilities.d.ts
+/**
+ * The minimal context shape a capability accessor needs. The full
+ * `ChatMiddlewareContext` satisfies this (it has `capabilities`), so accessors
+ * accept any middleware context without referencing `any`.
+ */
+interface CapabilityContext {
+  capabilities: CapabilityRegistry;
+}
+/** Reads a capability value off a context. Overloaded so the flag narrows the return. */
+interface CapabilityGetter<TValue> {
+  (ctx: CapabilityContext): TValue;
+  (ctx: CapabilityContext, opts: {
+    optional: true;
+  }): TValue | undefined;
+}
+/** Writes a capability value onto a context. */
+type CapabilityProvider<TValue> = (ctx: CapabilityContext, value: TValue) => void;
+/**
+ * A capability handle. It is BOTH a `[get, provide]` tuple (array-destructurable)
+ * AND the identity used in middleware `requires`/`provides` declarations.
+ *
+ * Runtime identity is this object's reference. The `capabilityName` literal is
+ * used for diagnostics and COMPILE-TIME tracking only — capability names MUST be
+ * unique across an app or the type-level coverage check conflates them.
+ */
+type Capability<TValue = unknown, TName extends string = string> = readonly [get: CapabilityGetter<TValue>, provide: CapabilityProvider<TValue>] & {
+  readonly capabilityName: TName;
+  /** @internal Presence check for the post-setup assertion. */
+  has: (ctx: CapabilityContext) => boolean;
+};
+/**
+ * A capability handle with permissive value/name — for use as a constraint in
+ * `requires`/`provides` arrays. Concentrates `any` in one named alias (same
+ * convention as `AnyTextAdapter`/`AnyTool`); needed so `Capability<SpecificT>`
+ * is assignable to the handle-array element type.
+ */
+type CapabilityHandle = Capability<any, string>;
+/**
+ * Per-request bookkeeping: which capabilities were provided, plus the
+ * duplicate-provide notification. Capability VALUES live in per-capability
+ * WeakMaps (see `createCapability`), not here — this only tracks presence.
+ */
+declare class CapabilityRegistry {
+  private readonly provided;
+  private onDuplicate?;
+  /** Register a callback fired when a handle is provided more than once. */
+  setOnDuplicate(cb: (name: string) => void): void;
+  /** Record that `handle` was provided; fire the duplicate callback on repeats. */
+  markProvided(handle: CapabilityHandle): void;
+  has(handle: CapabilityHandle): boolean;
+}
+//#endregion
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/interrupts.d.ts
 interface InterruptCorrelation {
   threadId: string;
   interruptedRunId: string;
@@ -124,8 +177,8 @@ interface InterruptCorrelation {
   submissionId?: string;
   continuationRunId?: string;
 }
-type ItemInterruptErrorCode = 'invalid-payload' | 'invalid-edited-args' | 'invalid-tool-output' | 'invalid-response-schema' | 'unknown-interrupt' | 'expired' | 'stale' | 'conflict' | 'legacy-unsupported';
-type BatchInterruptErrorCode = 'incomplete-batch' | 'item-validation-failed' | 'unsupported-bulk-operation' | 'async-resolver' | 'inactive-transaction' | 'mixed-provenance' | 'transport' | 'server' | 'protocol' | 'invalid-response-schema' | 'expired' | 'stale' | 'conflict' | 'legacy-submit-failed';
+type ItemInterruptErrorCode = 'invalid-payload' | 'invalid-edited-args' | 'invalid-tool-output' | 'invalid-response-schema' | 'unknown-interrupt' | 'expired' | 'stale' | 'conflict';
+type BatchInterruptErrorCode = 'incomplete-batch' | 'item-validation-failed' | 'unsupported-bulk-operation' | 'async-resolver' | 'inactive-transaction' | 'mixed-provenance' | 'transport' | 'server' | 'protocol' | 'invalid-response-schema' | 'expired' | 'stale' | 'conflict';
 interface ItemInterruptError extends InterruptCorrelation {
   scope: 'item';
   interruptId: string;
@@ -199,7 +252,7 @@ declare global {
   var __TANSTACK_EVENT_TARGET__: EventTarget | null;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-event-client@0.13.1/node_modules/@tanstack/ai-event-client/dist/esm/envelope.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-event-client@1.0.0/node_modules/@tanstack/ai-event-client/dist/esm/envelope.d.ts
 type AIDevtoolsEventSource = 'client' | 'server' | 'devtools';
 type AIDevtoolsEventVisibility = 'user-visible' | 'client-state' | 'server-internal' | 'devtools-action';
 interface AIDevtoolsEventEnvelope {
@@ -225,7 +278,7 @@ declare global {
   var __TANSTACK_AI_DEVTOOLS_RUNTIME_ID__: string | undefined;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-event-client@0.13.1/node_modules/@tanstack/ai-event-client/dist/esm/index.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-event-client@1.0.0/node_modules/@tanstack/ai-event-client/dist/esm/index.d.ts
 /**
  * Detailed breakdown of prompt/input token usage.
  * Fields are populated based on provider support.
@@ -235,6 +288,11 @@ interface PromptTokensDetails {
   cachedTokens?: number;
   /** Tokens written to cache */
   cacheWriteTokens?: number;
+  /**
+   * The part of `cacheWriteTokens` written with a 1-hour retention.
+   * Providers price it higher than a 5-minute write.
+   */
+  cacheWrite1hTokens?: number;
   /** Audio input tokens */
   audioTokens?: number;
   /** Video input tokens */
@@ -343,19 +401,6 @@ interface TokenUsage$1<TProviderDetails = ProviderUsageDetails> {
    * unit. A quantity, distinct from the monetary `cost` / `costDetails`.
    */
   billed?: BilledUsage;
-  /**
-   * @deprecated Read {@link TokenUsage.billed} instead, which pairs the same
-   * duration with an explicit `unit: 'seconds'`. Still populated alongside
-   * `billed` for backward compatibility; will be removed in a future release.
-   */
-  durationSeconds?: number;
-  /**
-   * @deprecated Read {@link TokenUsage.billed} instead, which pairs the same
-   * count with the unit it is denominated in (`seconds`, `units`, …) — this
-   * bare count is ambiguous across providers. Still populated alongside
-   * `billed` for backward compatibility; will be removed in a future release.
-   */
-  unitsBilled?: number;
   /** Provider-specific usage details not covered by standard fields */
   providerUsageDetails?: TProviderDetails;
   /** Provider-reported cost for the request, when available. */
@@ -2828,11 +2873,21 @@ type SubagentInfo = {
   description?: string;
 };
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/utilities/ag-ui-usage.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/utilities/ag-ui-usage.d.ts
 /** TokenUsage fields that have no AG-UI `usage[]` equivalent. */
 type TokenUsageLeftover = Omit<TokenUsage$1, 'promptTokens' | 'completionTokens' | 'totalTokens'>;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/types.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/utilities/subagent-wire.d.ts
+/**
+ * Card data that travels on each child wire message, in
+ * `metadata.tanstack.subagent`. The messages carry the AG-UI `subagentRunId`.
+ */
+interface SubagentWireInfo extends SubagentInfo, Pick<SubagentHandleData, 'status' | 'error' | 'interruptIds' | 'parentSubagentRunId' | 'parentToolCallId' | 'metadata'> {
+  /** The child has no messages yet. This wire message only holds the card. */
+  placeholder?: true;
+}
+//#endregion
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/types.d.ts
 /**
  * Tool call states - track the lifecycle of a tool call
  */
@@ -2962,6 +3017,33 @@ interface DocumentPart<TMetadata = unknown> extends DocumentPart$1 {
  * @template TDocumentMeta - Provider-specific document metadata type
  */
 type ContentPart<TTextMeta = unknown, TImageMeta = unknown, TAudioMeta = unknown, TVideoMeta = unknown, TDocumentMeta = unknown> = TextPart$1<TTextMeta> | ImagePart<TImageMeta> | AudioPart<TAudioMeta> | VideoPart<TVideoMeta> | DocumentPart<TDocumentMeta>;
+/**
+ * The mid-conversation record that `chat()` saves on the first assistant
+ * message of a model call. It holds tool names and prompt hashes only, so it
+ * does not depend on a provider.
+ */
+interface MidConversationChange {
+  /** A start point: the names of every tool. */
+  tools?: Array<string>;
+  /** Tool names added since the last record. */
+  toolsAdded?: Array<string>;
+  /** Short prompt hashes: every prompt on a start point, the added prompts otherwise. */
+  systemPrompts?: Array<string>;
+}
+/**
+ * One block of an assistant `ModelMessage`, in the order the model sent it.
+ * Each entry points into a field of the message. See `ModelMessage.blockOrder`.
+ */
+type ModelMessageBlock = {
+  type: 'thinking';
+  index: number;
+} | {
+  type: 'text';
+  length: number;
+} | {
+  type: 'tool-call';
+  id: string;
+};
 interface ModelMessage<TContent extends string | null | Array<ContentPart> = string | null | Array<ContentPart>> {
   role: 'user' | 'assistant' | 'tool';
   content: TContent;
@@ -2978,8 +3060,22 @@ interface ModelMessage<TContent extends string | null | Array<ContentPart> = str
     signature?: string;
     redacted?: boolean;
   }>;
+  /**
+   * The order of the blocks of an assistant message, when it is not the
+   * default order (all thinking, then the text, then the tool calls). Each
+   * entry points into `thinking`, into `content` (a string, by UTF-16 length),
+   * or into `toolCalls`. The library writes and reads this field. A reader
+   * that finds a map that does not match the message uses the default order.
+   */
+  blockOrder?: Array<ModelMessageBlock>;
   /** Error reported by an AG-UI tool message. */
   error?: string;
+  /**
+   * The tools and system prompts that changed before this assistant message.
+   * `chat()` writes it when the adapter has a mid-conversation channel.
+   * Providers ignore it: adapters read `TextOptions.midConversationChanges`.
+   */
+  midConversationChange?: MidConversationChange;
   /** Optional AG-UI message metadata. TanStack-owned fields live under `tanstack`. */
   metadata?: Record<string, any>;
   /**
@@ -3162,11 +3258,95 @@ interface UIResourcePart {
   meta?: Record<string, unknown>;
 }
 type MessagePart$1<TData = unknown> = TextPart$1 | ImagePart | AudioPart | VideoPart | DocumentPart | ToolCallPart$2 | ToolResultPart$1 | ThinkingPart$1 | ActivityPart | StructuredOutputPart<TData> | UIResourcePart | SubagentPart$1;
+/** Provider, wire API, and requested model of an assistant message. */
+interface MessageSource {
+  provider: string;
+  api: string;
+  model: string;
+}
+/**
+ * Shape of `metadata.tanstack` on a message.
+ * `createdAt` is an ISO-8601 string.
+ */
+interface TanStackMessageMetadata {
+  createdAt?: string;
+  model?: string;
+  source?: MessageSource;
+  stopReason?: 'error' | 'aborted';
+  responseId?: string;
+  /**
+   * Why the model call of this assistant message ended. A `'length'` message
+   * stopped at the output limit, so its tool calls are not complete.
+   */
+  finishReason?: TanStackRunMetadata['finishReason'];
+  /**
+   * The provider's answer items of this assistant message, in order, for a
+   * same-model replay. The OpenAI Responses adapter keeps each output
+   * message item's `id` and `phase` (`commentary` or `final_answer`).
+   */
+  responseItems?: Array<{
+    id: string;
+    phase?: string;
+  }>;
+  /**
+   * The model call of this assistant message sent a reasoning item. The
+   * OpenAI Responses adapter sets it. A replay that lost that reasoning item
+   * sends the message without its item ids, because the API refuses a
+   * `msg_`/`fc_` item without the reasoning item that made it.
+   */
+  reasoningItem?: boolean;
+  /** Parent chat run that produced this assistant message. */
+  runId?: string;
+  /**
+   * The chat run that produced this assistant message. `withPersistence` sets
+   * `id`. `reconstructChat` with `includeRuns: true` adds the finished run's
+   * timings, in epoch ms.
+   */
+  run?: {
+    id: string;
+    startedAt?: number;
+    finishedAt?: number;
+  };
+  /** Card data on a child wire message. See `uiMessagesToWire`. */
+  subagent?: SubagentWireInfo;
+  /** Thinking signature for a `role: 'reasoning'` fan-out message. */
+  signature?: string;
+  /** Per-tool-call provider metadata keyed by tool call id (e.g. Gemini thoughtSignature). */
+  toolCallMetadata?: Record<string, unknown>;
+  toolResult?: {
+    id?: string;
+    createdAt?: string;
+    content?: Array<ContentPart>;
+  };
+  /** Outcome of a cancelled or denied tool result; when present, the UI state is `error`. */
+  toolResultOutcome?: ToolResultOutcome;
+  structuredOutput?: {
+    status?: 'streaming' | 'complete' | 'error';
+    partial?: unknown;
+    data?: unknown;
+    raw?: string;
+    reasoning?: string;
+    errorMessage?: string;
+  };
+  uiResources?: Array<UIResourcePart>;
+  /**
+   * On an assistant wire row that exists only to keep the block order: the
+   * id of the assistant row before it. Our server joins the two rows into
+   * one message with a `blockOrder` map. See `uiMessagesToWire`.
+   */
+  continues?: string;
+}
 /**
  * Shape of `metadata.tanstack` on run events.
  */
 interface TanStackRunMetadata {
+  source?: MessageSource;
   model?: string;
+  responseId?: string;
+  /** The answer items of this model call. See `TanStackMessageMetadata.responseItems`. */
+  responseItems?: TanStackMessageMetadata['responseItems'];
+  /** See `TanStackMessageMetadata.reasoningItem`. */
+  reasoningItem?: boolean;
   finishReason?: 'stop' | 'length' | 'content_filter' | 'tool_calls' | null;
   /** TokenUsage fields that have no AG-UI `usage[]` equivalent. */
   usage?: TokenUsageLeftover;
@@ -3177,9 +3357,17 @@ interface TanStackRunMetadata {
   index?: number;
   /** On a `RUN_ERROR`. See `RunErrorEvent.retryAfterMs`. */
   retryAfterMs?: number;
+  /** On a `RUN_ERROR`. See `RunErrorEvent.rawText`. */
+  rawText?: string;
+  /** On a `RUN_ERROR`. See `RunErrorEvent.errorType`. */
+  errorType?: string;
+  /** On a `RUN_ERROR`. See `RunErrorEvent.requestId`. */
+  requestId?: string;
   state?: ToolOutputState;
   /** Parsed `TOOL_CALL_END` input. Spec `TOOL_CALL_END` has no top-level `input`. */
   input?: unknown;
+  /** The raw tool argument string on `TOOL_CALL_END`, as the provider sent it. */
+  args?: string;
 }
 /**
  * UIMessage - Domain-specific message format optimized for building chat UIs
@@ -3252,6 +3440,13 @@ type ToolInputResponse = {
 type ToolExecutionContext<TContext = unknown> = RuntimeContextField<TContext> & {
   /** The ID of the tool call being executed */
   toolCallId?: string;
+  /**
+   * The thread id of the chat run. `chat()` sets it to the same value as
+   * `ctx.threadId` in middleware. A tool can use it to keep its own state
+   * for each conversation. It is missing when a tool runs outside a chat,
+   * for example from an MCP server, WebMCP, or a direct `execute()` call.
+   */
+  threadId?: string;
   /**
    * Abort signal for the current chat run. Aborts when the run's
    * `abortController` fires (or middleware aborts). Long-running tools —
@@ -3264,6 +3459,44 @@ type ToolExecutionContext<TContext = unknown> = RuntimeContextField<TContext> &
    * interrupt for this tool call.
    */
   inputResponse?: ToolInputResponse;
+  /**
+   * Set when the host can move this call to the background. Pass it the
+   * work of the call, and race the two promises. It resolves to a short
+   * note for the model when the user moves the call. The work keeps
+   * running, and the host tells the model its result when it ends.
+   * `chat()` does not set it: a host wraps the tool's `execute` to add it.
+   * The note is a string. An object `outputSchema` rejects it. A string
+   * schema, or no schema, accepts it.
+   *
+   * @example
+   * ```ts
+   * const work = runJob(args)
+   * return context?.detach ? Promise.race([work, context.detach(work)]) : work
+   * ```
+   */
+  detach?: (work: Promise<unknown>) => Promise<string>;
+  /**
+   * The run of the call, when a host knows it. `chat()` does not set it:
+   * a host such as the harness wraps the tool's `execute` to add it.
+   */
+  runId?: string;
+  /**
+   * Read a capability that a middleware of the run provided, by its
+   * handle. It works like `ctx.get` in middleware and throws if the
+   * capability was never provided. `chat()` sets it. It is missing when a
+   * tool runs outside a chat.
+   *
+   * @example
+   * ```ts
+   * const sandbox = context?.get?.(SandboxCapability)
+   * ```
+   */
+  get?: <TValue>(capability: Capability<TValue>) => TValue;
+  /**
+   * Read a capability by its handle. Returns `undefined` if no middleware
+   * provided it. It works like `ctx.getOptional` in middleware.
+   */
+  getOptional?: <TValue>(capability: Capability<TValue>) => TValue | undefined;
   /**
    * Emit a custom event during tool execution.
    * Events are streamed to the client in real-time as AG-UI CUSTOM events.
@@ -3400,6 +3633,13 @@ interface Tool$1<TInput extends SchemaInput | undefined = SchemaInput, TOutput e
   needsApproval?: boolean;
   /** If true, this tool is lazy and will only be sent to the LLM after being discovered via the lazy tool discovery mechanism. Works with both chat() (the synthetic discovery tool) and Code Mode (kept out of the system prompt and revealed via discover_tools). */
   lazy?: boolean;
+  /**
+   * Whether a host may run this tool again after a crash cut the run
+   * between the call and its result. `'safe'` runs it again. Omit the
+   * field, or set `'never'`, when a second run is not safe. The host
+   * writes the model note. `chat()` does not read this field.
+   */
+  replay?: 'safe' | 'never';
   /** Additional metadata for adapters or custom extensions */
   metadata?: Record<string, any> | undefined;
 }
@@ -3427,6 +3667,8 @@ interface RunFinishedEvent extends Pick<RunFinishedEvent$1, 'threadId' | 'runId'
   usage?: Array<TokenUsage> | TokenUsage$1;
   /** Restored on the client from `metadata.tanstack`. */
   model?: string;
+  /** Provider generation ID. Restored from `metadata.tanstack`. */
+  responseId?: string;
   /** Restored on the client from `metadata.tanstack`. */
   finishReason?: 'stop' | 'length' | 'content_filter' | 'tool_calls' | null;
   metadata?: {
@@ -3454,12 +3696,30 @@ interface RunErrorEvent extends Pick<RunErrorEvent$1, 'message' | 'code' | 'time
     message: string;
     code?: string;
   };
+  /**
+   * The model text of a failed structured output: JSON that did not parse,
+   * or a value that failed the `outputSchema` check. `chat()` moves it to
+   * `metadata.tanstack.rawText`.
+   */
+  rawText?: string;
   /**
    * How long the provider asks you to wait before a retry, in milliseconds.
    * Adapters read it from the `retry-after-ms` or `retry-after` header.
    * `chat()` moves it to `metadata.tanstack.retryAfterMs`.
    */
   retryAfterMs?: number;
+  /**
+   * The provider's error type, for example `overloaded_error` or
+   * `rate_limit_exceeded`. `code` stays the HTTP status. A string of at most
+   * 128 characters. `chat()` moves it to `metadata.tanstack.errorType`.
+   */
+  errorType?: string;
+  /**
+   * The provider's request id, from the SDK error or the `request-id` /
+   * `x-request-id` header. Give it to the provider's support.
+   * `chat()` moves it to `metadata.tanstack.requestId`.
+   */
+  requestId?: string;
   metadata?: {
     tanstack?: TanStackRunMetadata;
   } & Record<string, any>;
@@ -3490,8 +3750,6 @@ interface TextMessageEndEvent extends TextMessageEndEvent$1 {}
  */
 interface ToolCallStartEvent extends Omit<ToolCallStartEvent$1, 'type'> {
   type: 'TOOL_CALL_START';
-  /** Alias of `toolCallName`. Kept so existing stream readers still compile. */
-  toolName?: string;
   /** Provider-specific metadata to carry into the ToolCall. */
   metadata?: Record<string, any>;
 }
@@ -3655,7 +3913,7 @@ interface SubagentErrorEvent extends SubagentErrorEvent$1 {}
  */
 type StreamChunk = AGUIEvent;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/interrupt-definition.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/interrupt-definition.d.ts
 type PortableSchema = StandardJSONSchemaV1<any, any> | StandardSchemaV1$1<any, any>;
 type InterruptInput<TPayloadSchema extends PortableSchema | undefined, TPayload = unknown> = {
   key: string;
@@ -3697,7 +3955,7 @@ interface InterruptDefinition<TId extends string, TPayloadSchema extends Portabl
   interrupt: InterruptRequestMethod<TId, TPayloadSchema, TResponseSchema, TPayload, TPayloadInput>;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/activities/chat/tools/tool-definition.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/activities/chat/tools/tool-definition.d.ts
 /**
  * Type-level brand key for {@link ToolApprovalCapabilityMarker}. Only ever used
  * in type positions, but it must stay exported: a `unique symbol` referenced by
@@ -3739,6 +3997,7 @@ interface ClientTool<TInput extends SchemaInput | undefined = undefined, TOutput
   approvalSchema?: TApprovalSchema;
   execution?: 'task';
   lazy?: boolean;
+  replay?: 'safe' | 'never';
   metadata?: Record<string, unknown>;
   execute?: ToolExecuteFunction<TInput, TOutput, TContext>;
 }
@@ -3778,7 +4037,7 @@ type InferToolOutput<T> = T extends {
   outputSchema?: infer TOutput;
 } ? TOutput extends StandardJSONSchemaV1<any, any> ? InferSchemaType<TOutput> : TOutput extends StandardSchemaV1$1<any, any> ? InferSchemaType<TOutput> : TOutput extends JSONSchema ? unknown : InferSchemaType<TOutput> : unknown;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/byok/define-provider.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/byok/define-provider.d.ts
 /**
  * A BYOK provider declared by an adapter. `id` is the `x-byok-<id>` slug and
  * is required — `{ id?: string }` is not a {@link ByokProvider}.
@@ -3798,14 +4057,14 @@ interface ByokProvider<TId extends string = string> {
   readonly with?: ReadonlyArray<ByokProvider>;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/byok/providers.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/byok/providers.d.ts
 /**
  * Provider ids are open slugs, not a closed catalog. `@tanstack/ai` does not
  * list adapters. Any matching string is a valid id and becomes `x-byok-<id>`.
  */
 type ProviderId = string;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai@0.68.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/activities/chat/stream/types.d.ts
+//#region ../node_modules/.bun/@tanstack+ai@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai/dist/esm/activities/chat/stream/types.d.ts
 /**
  * Strategy for determining when to emit text updates
  */
@@ -3823,7 +4082,7 @@ interface ChunkStrategy {
   reset?: () => void;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/byok/storage.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/byok/storage.d.ts
 type Keyring = Partial<Record<ProviderId, string>>;
 type KeyPreview = Partial<Record<ProviderId, string>>;
 interface KeyringStorage {
@@ -3838,7 +4097,7 @@ interface KeyringStorage {
   clear: () => void | Promise<void>;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/byok/client.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/byok/client.d.ts
 type KeyStatus = {
   state: 'empty';
 } | {
@@ -3893,7 +4152,7 @@ declare class ByokClient {
   unlock(): Promise<void>;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/events.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/events.d.ts
 interface ChatClientRunEventContext {
   threadId: string;
   runId: string;
@@ -4003,17 +4262,13 @@ declare abstract class ChatClientEventEmitter {
    * Emit tool result added event
    */
   toolResultAdded(toolCallId: string, toolName: string, output: unknown, state: string, context?: ChatClientEventContext): void;
-  /**
-   * Emit tool approval responded event
-   */
-  toolApprovalResponded(approvalId: string, toolCallId: string, approved: boolean, context?: ChatClientRunEventContext): void;
   /**
    * Emit tool fixture applied event.
    */
   toolFixtureApplied(fixture: ChatClientToolFixtureAppliedEvent): void;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/devtools.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/devtools.d.ts
 interface AIDevtoolsDisplayOptions {
   name?: string;
 }
@@ -4057,7 +4312,7 @@ type AIDevtoolsRunEventType = 'run:created' | 'run:started' | 'run:updated' | 'r
 type AIDevtoolsRunStatus = 'created' | 'started' | 'updated' | 'completed' | 'errored' | 'cancelled';
 interface AIDevtoolsBridgeOptions<TSnapshot extends object> {
   hookId: string;
-  threadId?: string;
+  threadId: string;
   clientId: string;
   metadata: AIDevtoolsClientMetadata;
   getSnapshot: () => TSnapshot;
@@ -4181,10 +4436,10 @@ declare class ChatDevtoolsBridge extends ClientDevtoolsBridge<AIDevtoolsChatSnap
   private findClientTool;
 }
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/devtools-noop.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/devtools-noop.d.ts
 type ChatDevtoolsBridgeFactory = (options: ChatDevtoolsBridgeOptions) => ChatDevtoolsBridge;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/types.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/types.d.ts
 interface ChatResumeState {
   threadId: string;
   runId: string;
@@ -4214,8 +4469,6 @@ interface BoundInterruptBase {
   readonly generation: number;
   readonly status: InterruptItemStatus;
   readonly errors: ReadonlyArray<ItemInterruptError>;
-  /** @deprecated Use `errors[0]`. */
-  readonly error?: ItemInterruptError;
   /**
    * Whether the binding/schema allows resolution at hydrate time.
    * Does not flip on submit/expiry — gate UI on `status`, `resuming`, and
@@ -4303,14 +4556,12 @@ type ResolvableChatInterrupt<TTools extends ReadonlyArray<AnyClientTool> = Reado
 type BoundInterrupts<TTools extends ReadonlyArray<AnyClientTool> = ReadonlyArray<AnyClientTool>, TInterrupts extends ReadonlyArray<InterruptDefinition<any, any, any, any>> = readonly []> = ReadonlyArray<ChatInterrupt<TTools, TInterrupts>>;
 interface ChatInterruptState<TTools extends ReadonlyArray<AnyClientTool> = ReadonlyArray<AnyClientTool>, TInterrupts extends ReadonlyArray<InterruptDefinition<any, any, any, any>> = readonly []> {
   readonly interrupts: BoundInterrupts<TTools, TInterrupts>;
-  /** @deprecated Use `interrupts`. Same snapshot today. */
-  readonly pendingInterrupts: BoundInterrupts<TTools, TInterrupts>;
   readonly interruptErrors: ReadonlyArray<BatchInterruptError>;
   readonly resuming: boolean;
 }
 /**
  * `messages` is the full UIMessage history (not a delta). `data` is the
- * merged body — `ChatClientOptions.body` plus any per-call data passed to
+ * merged body — `ChatClientOptions.forwardedProps` plus any per-call data passed to
  * `sendMessage(...)`. `threadId` / `runId` are the AG-UI correlation ids
  * the chat client uses to track this turn — forward them to your server
  * if it needs to correlate requests.
@@ -4339,6 +4590,7 @@ interface ChatFetcherOptions {
  * @example
  * ```ts
  * useChat({
+ *   threadId,
  *   fetcher: ({ messages }, { signal }) =>
  *     chatFn({ data: { messages }, signal }),
  * })
@@ -4376,6 +4628,26 @@ type ToolResultState = 'streaming' | 'complete' | 'error';
  * ChatClient state - track the lifecycle of a chat
  */
 type ChatClientState = 'ready' | 'submitted' | 'streaming' | 'error';
+/**
+ * UI snapshot published by {@link ChatClient.subscribeSnapshot} /
+ * {@link ChatClient.getSnapshot}.
+ */
+interface ChatClientSnapshot<TTools extends ReadonlyArray<AnyClientTool> = any, TInterrupts extends ReadonlyArray<InterruptDefinition<any, any, any, any>> = readonly []> {
+  readonly messages: ReadonlyArray<UIMessage<TTools>>;
+  readonly status: ChatClientState;
+  readonly isLoading: boolean;
+  readonly error: Error | undefined;
+  readonly isSubscribed: boolean;
+  readonly connectionStatus: ConnectionStatus;
+  readonly sessionGenerating: boolean;
+  readonly queue: ReadonlyArray<QueuedMessage>;
+  readonly runId: string | null;
+  /** True when the last hydrate or older-page response said more messages exist. */
+  readonly hasOlderMessages: boolean;
+  /** True while a store or server load may still repaint the transcript. */
+  readonly isHydrating: boolean;
+  readonly interruptState: ChatInterruptState<TTools, TInterrupts>;
+}
 /**
  * Connection lifecycle state for the subscription loop.
  */
@@ -4621,6 +4893,11 @@ interface SubagentHandle extends SubagentHandleData {
    * keeps going.
    */
   stop?: () => void;
+  /**
+   * The checked input of an agent with `inputSchema`: what the parent model
+   * wrote when it started this child. Set by ChatClient from the card.
+   */
+  input?: unknown;
 }
 interface SubagentPart {
   type: 'subagent';
@@ -4638,6 +4915,8 @@ type SubagentClientAgent = {
     name: string;
   }>;
   interrupts?: ReadonlyArray<InterruptDefinition<any, any, any, any>>;
+  /** Types `part.subagent.input`. */
+  inputSchema?: unknown;
   outputSchema?: SchemaInput;
 };
 type AgentToolList<TAgent> = TAgent extends {
@@ -4646,10 +4925,21 @@ type AgentToolList<TAgent> = TAgent extends {
 type AgentOutputData<TAgent> = TAgent extends {
   outputSchema?: infer TSchema;
 } ? Exclude<TSchema, undefined> extends SchemaInput ? [Exclude<TSchema, undefined>] extends [never] ? unknown : InferSchemaType<Exclude<TSchema, undefined>> : unknown : unknown;
+type AgentInputData<TAgent> = TAgent extends {
+  inputSchema?: infer TSchema;
+} ? [Exclude<TSchema, undefined>] extends [never] ? undefined : Exclude<TSchema, undefined> extends {
+  '~standard': {
+    types?: {
+      output: infer TOutput;
+    };
+  };
+} ? TOutput : Exclude<TSchema, undefined> extends SchemaInput ? InferSchemaType<Exclude<TSchema, undefined>> : unknown : undefined;
 /** One child handle. `name` is the discriminant. */
-type SubagentHandleOf<TAgent extends SubagentClientAgent> = Omit<SubagentHandle, 'name' | 'messages'> & {
+type SubagentHandleOf<TAgent extends SubagentClientAgent> = Omit<SubagentHandle, 'name' | 'messages' | 'input'> & {
   name: TAgent['name'];
   messages: Array<UIMessage<AgentToolList<TAgent>, AgentOutputData<TAgent>>>;
+  /** Unset on a card saved before the input was kept. */
+  input?: AgentInputData<TAgent>;
 };
 type SubagentHandles<TAgents extends ReadonlyArray<SubagentClientAgent> | undefined> = [TAgents] extends [undefined] ? SubagentHandle : unknown extends TAgents ? SubagentHandle : TAgents extends ReadonlyArray<infer TAgent> ? TAgent extends SubagentClientAgent ? SubagentHandleOf<TAgent> : SubagentHandle : SubagentHandle;
 type SubagentPartOf<TAgents extends ReadonlyArray<SubagentClientAgent> | undefined> = [TAgents] extends [undefined] ? SubagentPart : unknown extends TAgents ? SubagentPart : {
@@ -4702,28 +4992,23 @@ interface ChatPersistedState<TTools extends ReadonlyArray<AnyClientTool> = any>
  * message transcript and the resume snapshot as one {@link ChatPersistedState}
  * record, so a full page reload restores the conversation AND can rejoin an
  * in-flight run / rehydrate pending interrupts.
- *
- * For backward compatibility `getItem` may also return a bare `UIMessage[]`
- * (the legacy messages-only format); the client normalizes it to
- * `{ messages }`. `setItem` always writes the combined record.
  */
 interface ChatClientPersistence<TTools extends ReadonlyArray<AnyClientTool> = any> {
-  getItem: (id: string) => ChatPersistedState<TTools> | Array<UIMessage<TTools>> | null | undefined | Promise<ChatPersistedState<TTools> | Array<UIMessage<TTools>> | null | undefined>;
+  getItem: (id: string) => ChatPersistedState<TTools> | null | undefined | Promise<ChatPersistedState<TTools> | null | undefined>;
   setItem: (id: string, state: ChatPersistedState<TTools>) => void | Promise<void>;
   removeItem: (id: string) => void | Promise<void>;
 }
 /**
  * The `persistence` / `threadId` pairing for `ChatClient` and the chat hooks.
  *
- * Persistence that is on (`true` or a storage adapter) requires a `threadId`.
- * A minted id changes every reload, so nothing would restore. The compiler
- * asks for the conversation id instead.
+ * `threadId` is always required. It is the conversation id for the wire,
+ * DevTools, and persistence. Use a stable id for each conversation, for
+ * example the id from your route or database.
  *
- * Omit `persistence`, or set it to `false`, and `threadId` stays optional.
- * The client then mints one after mount for the wire and DevTools.
+ * `history` is allowed only with `persistence: true`.
  *
  * Intersect this onto `ChatClientOptions`. Do not apply a later plain `Omit`
- * to that type: it collapses the union and the requirement disappears. Use
+ * to that type: it collapses the union and the `history` rule disappears. Use
  * {@link DistributedOmit}.
  */
 type ChatPersistenceOptions<TTools extends ReadonlyArray<AnyClientTool> = any> = {
@@ -4737,13 +5022,9 @@ type ChatPersistenceOptions<TTools extends ReadonlyArray<AnyClientTool> = any> =
     pageSize: number;
   };
 } | {
-  persistence: ChatClientPersistence<TTools>;
+  persistence?: ChatClientPersistence<TTools> | false | undefined;
   threadId: string;
   history?: never;
-} | {
-  persistence?: false | undefined;
-  threadId?: string;
-  history?: never;
 };
 type IsUnknown<T> = unknown extends T ? [T] extends [unknown] ? true : false : false;
 type KnownContext<T> = IsUnknown<T> extends true ? never : T;
@@ -4788,19 +5069,8 @@ interface ChatClientBaseOptions<TTools extends ReadonlyArray<AnyClientTool> = an
    * AG-UI `RunAgentInput.forwardedProps` field. Use this for per-session
    * options like provider/model selection or feature flags that the
    * server endpoint should read.
-   *
-   * Replaces the legacy `body` option. If both are provided,
-   * `forwardedProps` wins on key collision.
    */
   forwardedProps?: Record<string, any>;
-  /**
-   * @deprecated Use `forwardedProps` instead. `body` continues to work
-   * unchanged — its values are merged into the AG-UI
-   * `RunAgentInput.forwardedProps` field on the wire and are also
-   * mirrored under the legacy `data` field for servers that have not
-   * migrated yet. Will be removed in a future major release.
-   */
-  body?: Record<string, any>;
   /**
    * Optional BYOK keyring. On each send the client prepares the resolved
    * provider and stamps `x-byok-*` request headers. Keys never go in the body.
@@ -4845,7 +5115,8 @@ interface ChatClientBaseOptions<TTools extends ReadonlyArray<AnyClientTool> = an
    */
   onError?: (error: Error) => void;
   /**
-   * Callback when messages change
+   * Callback when messages change. Receives the client's live array, not the
+   * frozen snapshot copy. Do not change it in place; use `setMessagesManually`.
    */
   onMessagesChange?: (messages: Array<UIMessage<TTools>>) => void;
   /**
@@ -4894,7 +5165,7 @@ interface ChatClientBaseOptions<TTools extends ReadonlyArray<AnyClientTool> = an
   queue?: QueueOption;
   /**
    * Callback when the pending send queue changes (enqueue, cancel, drain,
-   * or flush).
+   * or flush). Receives a live array, not the frozen snapshot copy.
    */
   onQueueChange?: (queue: Array<QueuedMessage>) => void;
   /**
@@ -4958,12 +5229,12 @@ interface ChatClientBaseOptions<TTools extends ReadonlyArray<AnyClientTool> = an
 }
 /**
  * Options for `ChatClient`. Exactly one of `connection` or `fetcher` must be
- * provided — the type-level XOR is enforced via `ChatTransport`. Persistence
- * that is on requires a `threadId` via {@link ChatPersistenceOptions}.
+ * provided — the type-level XOR is enforced via `ChatTransport`. `threadId`
+ * is required. See {@link ChatPersistenceOptions}.
  */
 type ChatClientOptions<TTools extends ReadonlyArray<AnyClientTool> = any, TContext = InferredClientContext<TTools>, TInterrupts extends ReadonlyArray<InterruptDefinition<any, any, any, any>> = readonly []> = DistributedOmit<ChatClientBaseOptions<TTools, TContext, TInterrupts>, 'context'> & ClientContextOptionFromTools<TTools, TContext> & ChatTransport & ChatPersistenceOptions<TTools>;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/connection-adapters.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/connection-adapters.d.ts
 /**
  * Per-send context provided by the chat client to the connection adapter.
  * The adapter combines this with serialized messages to build a full
@@ -4990,7 +5261,7 @@ interface ConnectConnectionAdapter {
   /**
    * Connect and return an async iterable of StreamChunks.
    */
-  connect: (messages: Array<UIMessage$1> | Array<ModelMessage>, data?: Record<string, any>, abortSignal?: AbortSignal, runContext?: RunAgentInputContext) => AsyncIterable<StreamChunk>;
+  connect: (messages: Array<UIMessage$1> | Array<ModelMessage>, data: Record<string, any> | undefined, abortSignal: AbortSignal | undefined, runContext: RunAgentInputContext) => AsyncIterable<StreamChunk>;
   /**
    * Fetch server-driven hydration for a generation `threadId`: the last
    * generation's resume snapshot, plus a cursor to a run still generating if
@@ -5086,6 +5357,12 @@ interface ChatHydrationResult {
     runId: string;
     pending: Array<ChatPendingInterrupt>;
   } | null;
+  /**
+   * Every wait of the thread, also one with no interrupt, for example a
+   * question that a tool asks. A harness server sends the `pendingWaits` of
+   * its snapshot. Old servers omit it.
+   */
+  pendingWaits?: Array<unknown>;
   /**
    * Whether this window is a slice of a longer thread.
    * `cursor` is set when `truncated` is true and is sent back as `before`.
@@ -5105,7 +5382,7 @@ interface SubscribeConnectionAdapter {
   /**
    * Send a request; chunks arrive through subscribe().
    */
-  send: (messages: Array<UIMessage$1> | Array<ModelMessage>, data?: Record<string, any>, abortSignal?: AbortSignal, runContext?: RunAgentInputContext) => Promise<void>;
+  send: (messages: Array<UIMessage$1> | Array<ModelMessage>, data: Record<string, any> | undefined, abortSignal: AbortSignal | undefined, runContext: RunAgentInputContext) => Promise<void>;
   /**
    * Re-attach to an existing run by id, replaying its stream from the start off
    * the server's delivery-durability sink. Present only when the underlying
@@ -5126,12 +5403,10 @@ interface SubscribeConnectionAdapter {
  */
 type ConnectionAdapter = ConnectConnectionAdapter | SubscribeConnectionAdapter;
 //#endregion
-//#region ../node_modules/.bun/@tanstack+ai-client@0.39.2+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/chat-client.d.ts
+//#region ../node_modules/.bun/@tanstack+ai-client@1.0.0+367daa2260c029d6/node_modules/@tanstack/ai-client/dist/esm/chat-client.d.ts
 type ChatClientUpdateOptionsWithoutContext<TTools extends ReadonlyArray<AnyClientTool>, TInterrupts extends ReadonlyArray<InterruptDefinition<any, any, any, any>> = readonly []> = {
   connection?: ConnectionAdapter;
   fetcher?: ChatFetcher;
-  /** @deprecated Use `forwardedProps` instead. */
-  body?: Record<string, any>;
   forwardedProps?: Record<string, any>;
   byok?: ByokClient;
   byokProvider?: () => string | undefined;
@@ -5172,11 +5447,19 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   private readonly subagentHandles;
   private readonly stoppedSubagentIds;
   private connection;
-  private uniqueId;
-  private threadId;
+  private readonly threadId;
   private readonly persistor?;
   private readonly clearedStreamTracker;
-  private currentRunId;
+  private readonly snapshotAtom;
+  private get status();
+  private get isLoading();
+  private get error();
+  private get isSubscribed();
+  private get connectionStatus();
+  private get sessionGenerating();
+  private get hasOlderMessages();
+  private get isHydrating();
+  private get currentRunId();
   private lastResume;
   private readonly runParents;
   private readonly supersededInterruptRunIds;
@@ -5190,7 +5473,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   private pendingResumeItems;
   private activeResumeThreadId;
   private activeResumeRunId;
-  private bodyOption;
   private forwardedPropsOption;
   private byok;
   private byokProvider;
@@ -5221,11 +5503,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
    * deliverers cannot both append a user message before only one stream runs.
    */
   private deliverClaim;
-  private isLoading;
-  private isSubscribed;
-  private error;
-  private status;
-  private connectionStatus;
   private abortController;
   private readonly clientToolsRef;
   private readonly devtoolsBridge;
@@ -5258,7 +5535,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   private streamContinuationGeneration;
   private continuationSkipped;
   private draining;
-  private sessionGenerating;
   private readonly activeRunIds;
   /** Latched by `dispose()`; stops any late async callback starting new work. */
   private disposed;
@@ -5270,8 +5546,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   private hydrationInFlight;
   /** An async storage adapter is still reading the persisted transcript. */
   private storeHydrating;
-  /** See {@link getIsHydrating}. */
-  private isHydrating;
   /** Constructor inputs `attach()` needs on every re-attach, not just the first. */
   private readonly rejoinRunId;
   private readonly cachesMessages;
@@ -5280,7 +5554,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
    * `persistence === true`.
    */
   private readonly historyPageSize;
-  private hasOlderMessages;
   private olderMessagesCursor;
   private readonly knownServerMessageIds;
   private loadOlderMessagesInFlight;
@@ -5360,7 +5633,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
    */
   private failHydration;
   mountDevtools(): void;
-  private ensureThreadId;
   /**
    * Drain a runId-less RUN_ERROR that belongs to a cleared run the client is
    * still tracking. The persistor owns the cleared-run bookkeeping; the client
@@ -5395,8 +5667,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   private setCurrentRunId;
   getInterruptState(): ChatInterruptState<TTools, TInterrupts>;
   getInterrupts(): BoundInterrupts<TTools, TInterrupts>;
-  /** @deprecated Use getInterrupts(). */
-  getPendingInterrupts(): BoundInterrupts<TTools, TInterrupts>;
   resolveInterrupts(approved: boolean): void;
   resolveInterrupts(resolver: (interrupt: ResolvableChatInterrupt<TTools, TInterrupts>) => undefined): void;
   cancelInterrupts(): void;
@@ -5404,12 +5674,27 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   /** Unsafe low-level resume escape hatch. Prefer bound interrupt methods. */
   resumeInterruptsUnsafe(resume: Array<RunAgentResumeItem>, state?: ChatResumeState): Promise<boolean>;
   private resumeInterruptsUnsafeForGeneration;
-  /** @deprecated Use bound interrupt methods or resumeInterruptsUnsafe(). */
-  resumeInterrupts(resume: Array<RunAgentResumeItem>, state?: ChatResumeState): Promise<boolean>;
   private submitInterruptBatch;
   private takeInterruptSubmissionFailure;
   private interruptGeneration;
   private generateUniqueId;
+  /** Frozen copies of unchanged messages and parts, keyed by the live object. */
+  private readonly frozenMessages;
+  private freezeSnapshotQueue;
+  /** The atom with messages, queue, and interrupt state read fresh. */
+  private readSnapshot;
+  /**
+   * Subscribe to UI snapshot changes. Does not fire with the current value;
+   * read {@link getSnapshot} first.
+   *
+   * Named separately from {@link subscribe} (the live connection loop).
+   */
+  subscribeSnapshot: (listener: () => void) => (() => void);
+  /**
+   * Current UI snapshot. The snapshot, `messages`, `queue`, and their entries
+   * are frozen copies. `interruptState` is the interrupt manager's own state.
+   */
+  getSnapshot: () => ChatClientSnapshot<TTools, TInterrupts>;
   private setIsLoading;
   /**
    * A send or a clear now owns the transcript. A load that is still pending can
@@ -5496,12 +5781,13 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
    * @param content - The message content. Can be:
    *   - A simple string for text-only messages
    *   - A MultimodalContent object with content array and optional custom ID
-   * @param body - Optional body parameters to merge with the client's base body for this request.
-   *               Uses shallow merge with per-message body taking priority.
+   * @param body - Optional body parameters to merge into this request's
+   *               forwardedProps, over the forwardedProps option. Uses
+   *               shallow merge with per-message body taking priority.
    * @param sendOptions - Per-call overrides. `{ whenBusy }` overrides the
    *                      queue policy for this one send. `{ body }`
    *                      shallow-merges with `body` and with the chat-level
-   *                      `body` / `forwardedProps`. `sendOptions.body` wins
+   *                      `forwardedProps`. `sendOptions.body` wins
    *                      on key collisions. Framework hooks forward this
    *                      object as their second argument.
    *
@@ -5605,13 +5891,6 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   addToolResult(result: ClientToolResult): Promise<void>;
   private addToolResultForClientTool;
   private validateClientToolOutput;
-  /**
-   * Respond to a tool approval request
-   */
-  addToolApprovalResponse(response: {
-    id: string;
-    approved: boolean;
-  }): Promise<void>;
   /**
    * Queue an action to be executed after the current stream ends
    */
@@ -5652,6 +5931,7 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
    * are; {@link getHasOlderMessages} stays true.
    */
   loadOlderMessages(): Promise<void>;
+  private setHasOlderMessages;
   private resetHistoryPaging;
   private applyHydrationPage;
   private rememberServerMessageIds;
@@ -5731,7 +6011,7 @@ declare class ChatClient<TTools extends ReadonlyArray<AnyClientTool> = any, TCon
   /**
    * Manually set messages
    */
-  setMessagesManually(messages: Array<UIMessage<TTools>>): void;
+  setMessagesManually(messages: ReadonlyArray<UIMessage<TTools>>): void;
   /**
    * Update options refs (for use in React hooks to avoid recreating client)
    */
@@ -6039,8 +6319,9 @@ type RenderWidget = (input: RenderWidgetInput, toolCallId: string) => Promise<{
 }>;
 /** What declaring a widget to the agent needs; `render` stays with whoever draws it. */
 type WidgetDeclaration = Pick<WidgetDefinition, "description" | "parameters">;
+type HostExecutionGuard = (name: string, declaration: ToolDefinition, toolCallId?: string) => () => ToolDefinition;
 /** The full tool set declared to the agent; `render_widget` only when widgets are registered. */
-declare function buildAgentTools(widgets: Record<string, WidgetDeclaration>, hostTools: Record<string, ToolDefinition>, renderWidget: RenderWidget, debug?: DebugLogger): ((ClientTool<{
+declare function buildAgentTools(widgets: Record<string, WidgetDeclaration>, hostTools: Record<string, ToolDefinition>, renderWidget: RenderWidget, debug?: DebugLogger, guardHostExecution?: HostExecutionGuard): ((ClientTool<{
   type: "object";
   properties: {
     widget: {
@@ -6406,11 +6687,12 @@ interface AstralBeamChatCore {
     filename: string;
     mimeType: string;
   }) => Promise<UploadedChatFile>;
-  getFile: (fileId: string) => Promise<Blob>;
+  getThreadAttachment: (params: GetThreadAttachmentParams, options?: {
+    preview?: boolean;
+  }) => Promise<Blob>;
   getMcpCatalog: () => Promise<McpCatalog>;
   manageMcpConnection: (operation: McpConnectionOperation) => ReturnType<typeof manageMcpConnection>;
   authorizeMcpConnection: (input: Parameters<typeof authorizeMcpConnection>[0]) => Promise<void>;
-  getAttachment: (messageId: string, partId: string) => Promise<Blob>;
   /** Tears the session down: the connection, authentication, and widget renders. */
   dispose: () => void;
 }
@@ -6499,4 +6781,4 @@ interface WebPartMetadata {
   web?: WebEvidence;
 }
 //#endregion
-export { ToolDefinition as $, ChatSubmissionCallbacks as A, RenderWidgetInput as B, lastPartInProgress as C, AstralBeamChatState as D, AstralBeamChatCoreOptions as E, McpCatalog as F, SandboxStatus as G, SandboxArtifact as H, McpConnectionOperation as I, AstralBeamTokenSource as J, AstralBeamChatColorScheme as K, ChatAuthenticationState as L, createAstralBeamChat as M, ChatPendingInteraction as N, ChatStreamCallbacks as O, ChatThread as P, StandardSchemaV1 as Q, WidgetDeclaration as R, isSettledToolCall as S, AstralBeamChatCore as T, SandboxCommandRun as U, SandboxActivity as V, SandboxFileWrite as W, JsonSchemaObject as X, InferParameters as Y, ParametersSchema as Z, readSandboxArtifact as _, defineTool as a, sandboxRefusal as b, SANDBOX_LIST_FILES_TOOL as c, SANDBOX_RUN_COMMAND_TOOL as d, SANDBOX_STATUS_EVENT as f, isSandboxTool as g, describeSandboxCommandRun as h, WebSource as i, WidgetRenderRequest as j, ChatSubmission as k, SANDBOX_PUBLISH_ARTIFACT_TOOL as l, collectSandboxActivity as m, WebEvidence as n, ASK_QUESTIONNAIRE_TOOL as o, SANDBOX_WRITE_FILE_TOOL as p, AstralBeamChatTheme as q, WebPartMetadata as r, RENDER_WIDGET_TOOL as s, WebCitation as t, SANDBOX_READ_FILE_TOOL as u, readSandboxCommandRun as v, AgentToolInfo as w, hasPendingToolRun as x, readSandboxFileWrite as y, buildAgentTools as z };
+export { ChatSubmissionCallbacks as A, RenderWidgetInput as B, lastPartInProgress as C, AstralBeamChatState as D, AstralBeamChatCoreOptions as E, McpCatalog as F, SandboxStatus as G, SandboxArtifact as H, McpConnectionOperation as I, ParametersSchema as J, InferParameters as K, ChatAuthenticationState as L, createAstralBeamChat as M, ChatPendingInteraction as N, ChatStreamCallbacks as O, ChatThread as P, WidgetDeclaration as R, isSettledToolCall as S, AstralBeamChatCore as T, SandboxCommandRun as U, SandboxActivity as V, SandboxFileWrite as W, ToolDefinition as X, StandardSchemaV1 as Y, readSandboxArtifact as _, defineTool as a, sandboxRefusal as b, SANDBOX_LIST_FILES_TOOL as c, SANDBOX_RUN_COMMAND_TOOL as d, SANDBOX_STATUS_EVENT as f, isSandboxTool as g, describeSandboxCommandRun as h, WebSource as i, WidgetRenderRequest as j, ChatSubmission as k, SANDBOX_PUBLISH_ARTIFACT_TOOL as l, collectSandboxActivity as m, WebEvidence as n, ASK_QUESTIONNAIRE_TOOL as o, SANDBOX_WRITE_FILE_TOOL as p, JsonSchemaObject as q, WebPartMetadata as r, RENDER_WIDGET_TOOL as s, WebCitation as t, SANDBOX_READ_FILE_TOOL as u, readSandboxCommandRun as v, AgentToolInfo as w, hasPendingToolRun as x, readSandboxFileWrite as y, buildAgentTools as z };