@claudexor/schema 3.0.4 → 3.1.1

package/dist/setup.d.ts

@@ -348,42 +348,42 @@ export declare const SetupNativeCommandReceipt: z.ZodEffects<z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     commandDigest: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
 }, {
     commandDigest: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
 }>, {
     commandDigest: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
 }, {
     commandDigest: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
 }>;
 export type SetupNativeCommandReceipt = z.infer<typeof SetupNativeCommandReceipt>;
@@ -405,12 +405,12 @@ export declare const ControlSetupJobOutcome: z.ZodObject<{
     signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strict", z.ZodTypeAny, {
     reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-    exitCode?: number | null | undefined;
     signal?: string | null | undefined;
+    exitCode?: number | null | undefined;
 }, {
     reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-    exitCode?: number | null | undefined;
     signal?: string | null | undefined;
+    exitCode?: number | null | undefined;
 }>;
 export type ControlSetupJobOutcome = z.infer<typeof ControlSetupJobOutcome>;
 export declare const SetupTerminationReconciliation: z.ZodObject<{
@@ -434,35 +434,39 @@ export declare const ControlSetupJobCreateRequest: z.ZodEffects<z.ZodObject<{
      * Absent = the harness's default session (unchanged behavior). */
     profileId: z.ZodOptional<z.ZodString>;
     /** Codex-only interactive login flow selection. Default (absent) is
-     * device_auth — completed in an isolated browser context it avoids the
-     * account-switch trigger that revokes sibling OpenAI sessions
-     * (v3.0.3 S6, live-verified). browser_redirect is the explicit opt-in
-     * localhost-callback flow. */
-    loginFlow: z.ZodOptional<z.ZodEnum<["device_auth", "browser_redirect"]>>;
+     * device_auth — the D-17 primary flow: typed device-code over the official
+     * codex app-server (NO Terminal), completed in an isolated browser context
+     * it avoids the account-switch trigger that revokes sibling OpenAI sessions
+     * (v3.0.3 S6, live-verified). browser_callback is the secondary opt-in
+     * app-server flow (`account/login/start {type:"chatgpt"}` → authUrl, no
+     * one-time code). browser_redirect is the explicit legacy Terminal
+     * localhost-callback flow (the typed fallback when the app-server lacks
+     * the auth methods). */
+    loginFlow: z.ZodOptional<z.ZodEnum<["device_auth", "browser_callback", "browser_redirect"]>>;
 }, "strict", z.ZodTypeAny, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
     profileId?: string | undefined;
-    loginFlow?: "device_auth" | "browser_redirect" | undefined;
+    loginFlow?: "device_auth" | "browser_callback" | "browser_redirect" | undefined;
 }, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
     profileId?: string | undefined;
-    loginFlow?: "device_auth" | "browser_redirect" | undefined;
+    loginFlow?: "device_auth" | "browser_callback" | "browser_redirect" | undefined;
 }>, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
     profileId?: string | undefined;
-    loginFlow?: "device_auth" | "browser_redirect" | undefined;
+    loginFlow?: "device_auth" | "browser_callback" | "browser_redirect" | undefined;
 }, {
     authRequest: "subscription";
     harness: "cursor" | "codex" | "claude";
     action: "login";
     profileId?: string | undefined;
-    loginFlow?: "device_auth" | "browser_redirect" | undefined;
+    loginFlow?: "device_auth" | "browser_callback" | "browser_redirect" | undefined;
 }>;
 export type ControlSetupJobCreateRequest = z.infer<typeof ControlSetupJobCreateRequest>;
 export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
@@ -480,12 +484,12 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
         signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, "strict", z.ZodTypeAny, {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     }, {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     }>>;
     command: z.ZodNullable<z.ZodString>;
     guideUrl: z.ZodNullable<z.ZodString>;
@@ -1580,42 +1584,42 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     }, "strict", z.ZodTypeAny, {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     }, {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     }>, {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     }, {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     }>>;
     terminationReconciliation: z.ZodOptional<z.ZodObject<{
@@ -1662,8 +1666,8 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     } | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     } | undefined;
     deadlineAt?: string | undefined;
     authCapability?: {
@@ -1796,12 +1800,12 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     nativeCommand?: {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     } | undefined;
     terminationReconciliation?: {
@@ -1842,8 +1846,8 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     } | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     } | undefined;
     deadlineAt?: string | undefined;
     authCapability?: {
@@ -1976,12 +1980,12 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     nativeCommand?: {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     } | undefined;
     terminationReconciliation?: {
@@ -2022,8 +2026,8 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     } | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     } | undefined;
     deadlineAt?: string | undefined;
     authCapability?: {
@@ -2156,12 +2160,12 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     nativeCommand?: {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     } | undefined;
     terminationReconciliation?: {
@@ -2202,8 +2206,8 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     } | undefined;
     outcome?: {
         reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-        exitCode?: number | null | undefined;
         signal?: string | null | undefined;
+        exitCode?: number | null | undefined;
     } | undefined;
     deadlineAt?: string | undefined;
     authCapability?: {
@@ -2336,12 +2340,12 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     nativeCommand?: {
         commandDigest: string;
         finishedAt: string;
+        signal: string | null;
         executionId: string;
         manifestDigest: string;
         permitIssuedAt: string | null;
         commandStarted: boolean;
         exitCode: number | null;
-        signal: string | null;
         errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     } | undefined;
     terminationReconciliation?: {
@@ -2350,6 +2354,34 @@ export declare const ControlSetupJob: z.ZodEffects<z.ZodObject<{
     } | undefined;
 }>;
 export type ControlSetupJob = z.infer<typeof ControlSetupJob>;
+/** The two app-server device-code login flows (D-17 primary path). */
+export declare const SetupAppServerLoginFlow: z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>;
+export type SetupAppServerLoginFlow = z.infer<typeof SetupAppServerLoginFlow>;
+/**
+ * TRANSIENT device-code disclosure surfaced by the D-17 app-server login flow.
+ *
+ * This is a READ-TIME PROJECTION ONLY: it is overlaid on a setup-job snapshot /
+ * SSE frame from the runner's transient device-code sidecar and is NEVER a
+ * field of the journaled {@link ControlSetupJob}. The one-time `userCode` is
+ * never journaled, logged, or persisted to the durable result receipt
+ * (INV-062 / D-17); the journal records only THAT a code was disclosed via the
+ * awaiting_user phase transition. `userCode` is empty for the browser-callback
+ * (`chatgpt`) flow, which surfaces only an authUrl.
+ */
+export declare const SetupDeviceCodeDisclosure: z.ZodObject<{
+    flow: z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>;
+    verificationUrl: z.ZodString;
+    userCode: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    flow: "chatgptDeviceCode" | "chatgpt";
+    verificationUrl: string;
+    userCode: string;
+}, {
+    flow: "chatgptDeviceCode" | "chatgpt";
+    verificationUrl: string;
+    userCode: string;
+}>;
+export type SetupDeviceCodeDisclosure = z.infer<typeof SetupDeviceCodeDisclosure>;
 export declare const ControlSetupJobListFilter: z.ZodObject<{
     harness: z.ZodOptional<z.ZodEnum<["codex", "claude", "cursor"]>>;
     action: z.ZodOptional<z.ZodLiteral<"login">>;
@@ -2391,12 +2423,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }>>;
         command: z.ZodNullable<z.ZodString>;
         guideUrl: z.ZodNullable<z.ZodString>;
@@ -3491,42 +3523,42 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         }, "strict", z.ZodTypeAny, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>>;
         terminationReconciliation: z.ZodOptional<z.ZodObject<{
@@ -3573,8 +3605,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -3707,12 +3739,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -3753,8 +3785,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -3887,12 +3919,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -3933,8 +3965,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -4067,12 +4099,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -4113,8 +4145,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -4247,12 +4279,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -4260,6 +4292,19 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             observedAt: string;
         } | undefined;
     }>;
+    deviceCode: z.ZodOptional<z.ZodObject<{
+        flow: z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>;
+        verificationUrl: z.ZodString;
+        userCode: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    }, {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    }>>;
 }, "strict", z.ZodTypeAny, {
     message: string;
     cursor: string;
@@ -4303,8 +4348,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -4437,12 +4482,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -4450,6 +4495,11 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }, {
     message: string;
     cursor: string;
@@ -4493,8 +4543,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -4627,12 +4677,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -4640,6 +4690,11 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }>, {
     message: string;
     cursor: string;
@@ -4683,8 +4738,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -4817,12 +4872,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -4830,6 +4885,11 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }, {
     message: string;
     cursor: string;
@@ -4873,8 +4933,8 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -5007,12 +5067,12 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -5020,6 +5080,11 @@ export declare const ControlSetupJobEvent: z.ZodEffects<z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }>;
 export type ControlSetupJobEvent = z.infer<typeof ControlSetupJobEvent>;
 export declare const ControlSetupJobSnapshot: z.ZodObject<{
@@ -5038,12 +5103,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
             signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }>>;
         command: z.ZodNullable<z.ZodString>;
         guideUrl: z.ZodNullable<z.ZodString>;
@@ -6138,42 +6203,42 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         }, "strict", z.ZodTypeAny, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>>;
         terminationReconciliation: z.ZodOptional<z.ZodObject<{
@@ -6220,8 +6285,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -6354,12 +6419,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -6400,8 +6465,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -6534,12 +6599,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -6580,8 +6645,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -6714,12 +6779,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -6760,8 +6825,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -6894,12 +6959,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -6909,6 +6974,19 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
     }>;
     cursor: z.ZodString;
     sequence: z.ZodNumber;
+    deviceCode: z.ZodOptional<z.ZodObject<{
+        flow: z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>;
+        verificationUrl: z.ZodString;
+        userCode: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    }, {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    }>>;
 }, "strict", z.ZodTypeAny, {
     cursor: string;
     sequence: number;
@@ -6946,8 +7024,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -7080,12 +7158,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -7093,6 +7171,11 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }, {
     cursor: string;
     sequence: number;
@@ -7130,8 +7213,8 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -7264,12 +7347,12 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -7277,6 +7360,11 @@ export declare const ControlSetupJobSnapshot: z.ZodObject<{
             observedAt: string;
         } | undefined;
     };
+    deviceCode?: {
+        flow: "chatgptDeviceCode" | "chatgpt";
+        verificationUrl: string;
+        userCode: string;
+    } | undefined;
 }>;
 export type ControlSetupJobSnapshot = z.infer<typeof ControlSetupJobSnapshot>;
 export declare const ControlSetupJobListResponse: z.ZodObject<{
@@ -7295,12 +7383,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
             signal: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, "strict", z.ZodTypeAny, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }, {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         }>>;
         command: z.ZodNullable<z.ZodString>;
         guideUrl: z.ZodNullable<z.ZodString>;
@@ -8395,42 +8483,42 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         }, "strict", z.ZodTypeAny, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }, {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         }>>;
         terminationReconciliation: z.ZodOptional<z.ZodObject<{
@@ -8477,8 +8565,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -8611,12 +8699,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -8657,8 +8745,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -8791,12 +8879,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -8837,8 +8925,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -8971,12 +9059,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -9017,8 +9105,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -9151,12 +9239,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -9199,8 +9287,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -9333,12 +9421,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -9381,8 +9469,8 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         } | undefined;
         outcome?: {
             reason: "completed" | "interrupted_unknown" | "interrupted" | "timed_out" | "not_supported" | "launch_failed" | "command_failed" | "auth_not_ready" | "capability_verification_failed" | "credential_route_mismatch" | "cancelled_by_user" | "cancelled_on_restart" | "termination_unconfirmed";
-            exitCode?: number | null | undefined;
             signal?: string | null | undefined;
+            exitCode?: number | null | undefined;
         } | undefined;
         deadlineAt?: string | undefined;
         authCapability?: {
@@ -9515,12 +9603,12 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
         nativeCommand?: {
             commandDigest: string;
             finishedAt: string;
+            signal: string | null;
             executionId: string;
             manifestDigest: string;
             permitIssuedAt: string | null;
             commandStarted: boolean;
             exitCode: number | null;
-            signal: string | null;
             errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
         } | undefined;
         terminationReconciliation?: {
@@ -9532,7 +9620,7 @@ export declare const ControlSetupJobListResponse: z.ZodObject<{
 export type ControlSetupJobListResponse = z.infer<typeof ControlSetupJobListResponse>;
 /** Internal, file-backed protocol between claudexord and the detached native-login runner. */
 export declare const SetupLoginProtocolVersion: z.ZodLiteral<2>;
-export declare const SetupLoginManifest: z.ZodObject<{
+export declare const SetupLoginManifest: z.ZodEffects<z.ZodObject<{
     version: z.ZodLiteral<2>;
     jobId: z.ZodString;
     executionId: z.ZodString;
@@ -9545,6 +9633,19 @@ export declare const SetupLoginManifest: z.ZodObject<{
      * codex CODEX_HOME). OPTIONAL, not defaulted: absent on default-store jobs so
      * pre-existing manifests keep their sealed digest across a daemon upgrade. */
     profileConfigDir: z.ZodOptional<z.ZodString>;
+    /** D-17: how the runner performs the login. Absent (or "terminal") = the
+     * legacy Terminal-hosted vendor `codex login`. "device_code" = the primary
+     * flow: the runner hosts `codex app-server --stdio` and drives typed
+     * device-code auth (no Terminal). OPTIONAL/undefaulted so pre-existing
+     * sealed manifests keep their digest across a daemon upgrade. */
+    loginMode: z.ZodOptional<z.ZodEnum<["terminal", "device_code"]>>;
+    /** Which app-server auth flow the device_code runner requests. Present only
+     * with loginMode "device_code". */
+    appServerFlow: z.ZodOptional<z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>>;
+    /** Sidecar the device_code runner writes its transient disclosure to; read
+     * by the daemon for the snapshot overlay, never journaled. Present only with
+     * loginMode "device_code" (optional so terminal manifests keep their digest). */
+    deviceCodePath: z.ZodOptional<z.ZodString>;
     statePath: z.ZodString;
     resultPath: z.ZodString;
     permitPath: z.ZodString;
@@ -9597,6 +9698,9 @@ export declare const SetupLoginManifest: z.ZodObject<{
     permitPath: string;
     permitDeadlineAt: string;
     profileConfigDir?: string | undefined;
+    loginMode?: "terminal" | "device_code" | undefined;
+    appServerFlow?: "chatgptDeviceCode" | "chatgpt" | undefined;
+    deviceCodePath?: string | undefined;
 }, {
     harness: "cursor" | "codex" | "claude";
     binary: string;
@@ -9621,8 +9725,98 @@ export declare const SetupLoginManifest: z.ZodObject<{
     permitPath: string;
     permitDeadlineAt: string;
     profileConfigDir?: string | undefined;
+    loginMode?: "terminal" | "device_code" | undefined;
+    appServerFlow?: "chatgptDeviceCode" | "chatgpt" | undefined;
+    deviceCodePath?: string | undefined;
+}>, {
+    harness: "cursor" | "codex" | "claude";
+    binary: string;
+    version: 2;
+    args: string[];
+    cwd: string;
+    commandDigest: string;
+    jobId: string;
+    executionId: string;
+    manifestDigest: string;
+    executable: {
+        sha256: string;
+        mode: number;
+        realpath: string;
+        size: number;
+        device: string;
+        inode: string;
+    };
+    jobDir: string;
+    statePath: string;
+    resultPath: string;
+    permitPath: string;
+    permitDeadlineAt: string;
+    profileConfigDir?: string | undefined;
+    loginMode?: "terminal" | "device_code" | undefined;
+    appServerFlow?: "chatgptDeviceCode" | "chatgpt" | undefined;
+    deviceCodePath?: string | undefined;
+}, {
+    harness: "cursor" | "codex" | "claude";
+    binary: string;
+    version: 2;
+    args: string[];
+    cwd: string;
+    commandDigest: string;
+    jobId: string;
+    executionId: string;
+    manifestDigest: string;
+    executable: {
+        sha256: string;
+        mode: number;
+        realpath: string;
+        size: number;
+        device: string;
+        inode: string;
+    };
+    jobDir: string;
+    statePath: string;
+    resultPath: string;
+    permitPath: string;
+    permitDeadlineAt: string;
+    profileConfigDir?: string | undefined;
+    loginMode?: "terminal" | "device_code" | undefined;
+    appServerFlow?: "chatgptDeviceCode" | "chatgpt" | undefined;
+    deviceCodePath?: string | undefined;
 }>;
 export type SetupLoginManifest = z.infer<typeof SetupLoginManifest>;
+/**
+ * TRANSIENT device-code sidecar the device_code runner writes after
+ * `account/login/start` succeeds. Bound to the job + execution like the state
+ * sidecar. The daemon reads it to overlay {@link SetupDeviceCodeDisclosure} on
+ * snapshots/SSE; its `userCode` is NEVER journaled, logged, or copied into the
+ * durable result receipt (INV-062 / D-17).
+ */
+export declare const SetupLoginDeviceCode: z.ZodObject<{
+    version: z.ZodLiteral<2>;
+    jobId: z.ZodString;
+    executionId: z.ZodString;
+    flow: z.ZodEnum<["chatgptDeviceCode", "chatgpt"]>;
+    verificationUrl: z.ZodString;
+    userCode: z.ZodString;
+    disclosedAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    version: 2;
+    jobId: string;
+    executionId: string;
+    flow: "chatgptDeviceCode" | "chatgpt";
+    verificationUrl: string;
+    userCode: string;
+    disclosedAt: string;
+}, {
+    version: 2;
+    jobId: string;
+    executionId: string;
+    flow: "chatgptDeviceCode" | "chatgpt";
+    verificationUrl: string;
+    userCode: string;
+    disclosedAt: string;
+}>;
+export type SetupLoginDeviceCode = z.infer<typeof SetupLoginDeviceCode>;
 export declare const SetupLoginRunnerState: z.ZodObject<{
     version: z.ZodLiteral<2>;
     jobId: z.ZodString;
@@ -9706,6 +9900,7 @@ export declare const SetupLoginRunnerState: z.ZodObject<{
     version: 2;
     commandDigest: string;
     jobId: string;
+    stage: "running" | "awaiting_permit";
     executionId: string;
     manifestDigest: string;
     processGroup: {
@@ -9720,12 +9915,12 @@ export declare const SetupLoginRunnerState: z.ZodObject<{
             processGroupId: number;
         };
     };
-    stage: "running" | "awaiting_permit";
 }, {
     observedAt: string;
     version: 2;
     commandDigest: string;
     jobId: string;
+    stage: "running" | "awaiting_permit";
     executionId: string;
     manifestDigest: string;
     processGroup: {
@@ -9740,7 +9935,6 @@ export declare const SetupLoginRunnerState: z.ZodObject<{
             processGroupId: number;
         };
     };
-    stage: "running" | "awaiting_permit";
 }>;
 export type SetupLoginRunnerState = z.infer<typeof SetupLoginRunnerState>;
 export declare const SetupLoginPermit: z.ZodObject<{
@@ -9789,12 +9983,12 @@ export declare const SetupLoginRunnerResult: z.ZodEffects<z.ZodObject<{
     commandDigest: string;
     jobId: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     outputTail?: string | undefined;
 }, {
@@ -9802,12 +9996,12 @@ export declare const SetupLoginRunnerResult: z.ZodEffects<z.ZodObject<{
     commandDigest: string;
     jobId: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     outputTail?: string | undefined;
 }>, {
@@ -9815,12 +10009,12 @@ export declare const SetupLoginRunnerResult: z.ZodEffects<z.ZodObject<{
     commandDigest: string;
     jobId: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     outputTail?: string | undefined;
 }, {
@@ -9828,12 +10022,12 @@ export declare const SetupLoginRunnerResult: z.ZodEffects<z.ZodObject<{
     commandDigest: string;
     jobId: string;
     finishedAt: string;
+    signal: string | null;
     executionId: string;
     manifestDigest: string;
     permitIssuedAt: string | null;
     commandStarted: boolean;
     exitCode: number | null;
-    signal: string | null;
     errorCode?: "permit_timeout" | "spawn_failed" | "device_auth_unsupported" | undefined;
     outputTail?: string | undefined;
 }>;