@deepseek-ai/dsh-tool-cordis 0.1.2-alpha.5 → 0.1.3-alpha.2

package/lib/index.js

@@ -47,8 +47,8 @@ const SERVICE_API = [
 				parameters: []
 			},
 			{
-				signature: "create(id: SessionId, options: AgentOptions = {}, meta: Pick<SessionHeader, 'cwd'> = {}): Agent",
-				description: "Create an agent and session under one caller-supplied identity, owned by the accessing fiber. Constructor-driven config calls mint a fresh combined id before entering this boundary.",
+				signature: "async create(id: SessionId, options: AgentOptions = {}, meta: Pick<SessionHeader, 'cwd'> = {}): Promise<Agent>",
+				description: "Create an agent and session under one caller-supplied identity, owned by the accessing fiber. Constructor-driven config calls mint a fresh combined id before entering this boundary. When a persistence backend is mounted, the session's durable identity and any seed are stored before publication.",
 				parameters: [
 					{
 						name: "id",
@@ -464,7 +464,7 @@ const SERVICE_API = [
 					description: "exact live sending Team member."
 				}, {
 					name: "request",
-					description: "target name, content, scheduling mode, and pre-queue cancellation."
+					description: "target name, content, and pre-queue cancellation."
 				}],
 				returns: "durable message identity and immediate-delivery observation."
 			},
@@ -653,6 +653,35 @@ const SERVICE_API = [
 				}],
 				returns: "durable normalized attachment references in the same order after every member succeeds."
 			},
+			{
+				signature: "async admitPromptContent( content: readonly AttachmentAdmissionPart[], ): Promise<AdmittedPromptContentPart[]>",
+				description: "Admit one Host prompt and replace each uploaded image with its durable reference. Text and durable file references pass through unchanged. A prompt without image parts performs no storage operation.",
+				parameters: [{
+					name: "content",
+					description: "prompt parts in message order after file receipt resolution."
+				}],
+				returns: "admitted prompt parts in the same order as `content`.",
+				throws: ["AttachmentError when the image batch is refused."]
+			},
+			{
+				signature: "admitEncodedFile(input: EncodedFileAttachment): Promise<FileAttachmentRef>",
+				description: "Decode and durably commit one canonical base64 file upload.",
+				parameters: [{
+					name: "input",
+					description: "canonical base64 bytes and optional display name."
+				}],
+				returns: "the durable content-addressed file reference.",
+				throws: ["AttachmentError when the encoding or storage operation is refused."]
+			},
+			{
+				signature: "isAttachmentError(error: unknown): error is AttachmentError",
+				description: "Identify a failure emitted by this attachment capability by its stable code.",
+				parameters: [{
+					name: "error",
+					description: "value caught from an attachment operation."
+				}],
+				returns: "whether the value is an attachment failure."
+			},
 			{
 				signature: "abstract saveImage(input: SaveImageAttachment): Promise<ImageAttachmentRef>",
 				description: "Validate and durably commit one image before its owning session event is appended. The returned reference describes the persisted normalized image. When normalization reduces the raster, its `originalDimensions` records the orientation-applied input dimensions.",
@@ -685,6 +714,46 @@ const SERVICE_API = [
 				returns: "an absolute host path, or undefined when this backend is not host-file-backed.",
 				throws: ["an AttachmentError when the durable reference is invalid."]
 			},
+			{
+				signature: "saveFile(input: SaveFileAttachment): Promise<FileAttachmentRef>",
+				description: "Durably commit one file byte-for-byte before its owning session event is appended. Files carry no admission limits: any byte content and length is accepted, and the stored object is the exact submitted bytes. Backends without verbatim file storage keep this default rejection.",
+				parameters: [{
+					name: "input",
+					description: "exact bytes and optional display name."
+				}],
+				returns: "the durable content-addressed file reference."
+			},
+			{
+				signature: "saveFileStream(input: SaveFileStreamAttachment): Promise<FileAttachmentRef>",
+				description: "Durably commit one file byte-for-byte from bounded chunks. Providers must apply backpressure and must not collect the complete file in memory. Backends without streamed verbatim storage keep this default rejection.",
+				parameters: [{
+					name: "input",
+					description: "ordered exact bytes, optional cancellation, and display name."
+				}],
+				returns: "the durable content-addressed file reference."
+			},
+			{
+				signature: "async *readFileStream( ref: FileAttachmentRef, signal?: AbortSignal, ): AsyncIterable<Uint8Array>",
+				description: "Read and verify one verbatim stored file as bounded chunks. Providers must not collect the complete file in memory. Backends without verbatim file reads keep this default rejection.",
+				parameters: [{
+					name: "ref",
+					description: "durable reference from the session log."
+				}, {
+					name: "signal",
+					description: "optional cancellation for backend reads and verification work."
+				}],
+				returns: "exact file bytes in order; integrity failures reject the iteration."
+			},
+			{
+				signature: "fileHostPath(ref: FileAttachmentRef): string | undefined",
+				description: "Locate the verbatim stored file object in the harness host filesystem.",
+				parameters: [{
+					name: "ref",
+					description: "durable file reference."
+				}],
+				returns: "an absolute host path, or undefined when this backend is not host-file-backed.",
+				throws: ["an AttachmentError when the durable reference is invalid."]
+			},
 			{
 				signature: "readImageRequest( ref: ImageAttachmentRef, policy: ImageRequestPolicy, signal?: AbortSignal, ): Promise<RequestImageAttachment>",
 				description: "Generate or read one deterministic model-request version from the stored normalized image.",
@@ -854,6 +923,15 @@ const SERVICE_API = [
 				}],
 				returns: "the exact effect disposer that unregisters this definition."
 			},
+			{
+				signature: "registerFileReceiptResolver(resolver: CommandFileReceiptResolver): () => void",
+				description: "Register the sole authority that resolves staged file receipts for command submissions.",
+				parameters: [{
+					name: "resolver",
+					description: "Session-aware receipt resolver."
+				}],
+				returns: "disposer that removes this exact resolver."
+			},
 			{
 				signature: "@Remote list(agent: Agent): readonly CommandDescriptor[]",
 				description: "List the effective immutable command descriptors for one agent.",
@@ -876,8 +954,8 @@ const SERVICE_API = [
 				returns: "the scoped shadow or global definition."
 			},
 			{
-				signature: "@Remote async execute( agent: Agent, line: string, images: readonly EncodedImageAttachment[], signal: AbortSignal, ): Promise<CommandExecution | undefined>",
-				description: "Parse and execute a known command without sending it to the model.\n\nA resolved command's lifecycle is logged: `command/run` is appended before the handler is invoked and `command/done` after settlement (a thrown or aborted handler settles as `kind: 'error'`). Both are direct log-only appends — no turn wraps them, and persistence drains them at ordinary checkpoints. Admission misses (syntax or unknown name) log nothing — they never entered a handler. A `command/run` append failure fails the execution loud; a `command/done` append failure on the handler-failure path is contained so the handler's own error stays the reported failure.\n\nImage admission is enforced here, not in the composer: images sent to a command that does not declare `input.images`, an absent attachment store, and an exceeded attachment limit each settle as an error result before the handler runs, and a rejected batch publishes no durable object.",
+				signature: "@Remote async execute( agent: Agent, line: string, submittedAttachments: readonly CommandSubmitAttachment[], signal: AbortSignal, ): Promise<CommandExecution | undefined>",
+				description: "Parse and execute a known command without sending it to the model.\n\nA resolved command's lifecycle is logged: `command/run` is appended before the handler is invoked and `command/done` after settlement (a thrown or aborted handler settles as `kind: 'error'`). Both are direct log-only appends — no turn wraps them, and persistence drains them at ordinary checkpoints. Admission misses (syntax or unknown name) log nothing — they never entered a handler. A `command/run` append failure fails the execution loud; a `command/done` append failure on the handler-failure path is contained so the handler's own error stays the reported failure.\n\nAttachment admission is enforced here, not in the composer: attachments sent to a command that does not declare `input.attachments`, an absent attachment store, and an exceeded image limit each settle as an error result before the handler runs. Validation rejection starts no attachment writes; a storage failure can leave only unreachable content-addressed objects for deferred collection.",
 				parameters: [
 					{
 						name: "agent",
@@ -888,8 +966,8 @@ const SERVICE_API = [
 						description: "complete slash-command line."
 					},
 					{
-						name: "images",
-						description: "base64-encoded composer images accompanying the line, in submission order; empty for a plain invocation."
+						name: "submittedAttachments",
+						description: "encoded images and staged file receipts accompanying the line, in submission order; empty for a plain invocation."
 					},
 					{
 						name: "signal",
@@ -1220,6 +1298,92 @@ const SERVICE_API = [
 			returns: "deterministic path-only candidates."
 		}]
 	},
+	{
+		key: "fileUploads",
+		summary: "Host service owning upload storage and Agent-scoped staged receipts.",
+		description: "Host service owning upload storage and Agent-scoped staged receipts.",
+		methods: [
+			{
+				signature: "registerAgentResolver(resolve: AgentResolver): () => void",
+				description: "Register the ordinary-Session resolver used when a raw upload addresses a cold Session.",
+				parameters: [{
+					name: "resolve",
+					description: "resolver that returns the exact live Agent or throws a Remote error."
+				}],
+				returns: "disposer removing this resolver."
+			},
+			{
+				signature: "@Remote('upload') upload(agent: Agent, request: EncodedFileUploadRequest, signal: AbortSignal): Promise<FileUploadValue>",
+				description: "Persist one encoded upload and stage it under the Agent receiver selected by Typert.",
+				parameters: [
+					{
+						name: "agent",
+						description: "receiving Agent resolved from the Remote Agent scope."
+					},
+					{
+						name: "request",
+						description: "canonical base64 bytes and optional display name."
+					},
+					{
+						name: "signal",
+						description: "caller cancellation before storage begins."
+					}
+				],
+				returns: "the staged receipt and durable file reference."
+			},
+			{
+				signature: "async uploadStream(request: { readonly sessionId: SessionId readonly data: AsyncIterable<Uint8Array> readonly signal?: AbortSignal readonly name?: string }): Promise<FileUploadValue>",
+				description: "Persist raw chunks for one Session without aggregating the upload.",
+				parameters: [{
+					name: "request",
+					description: "Session identity, ordered bytes, cancellation, and optional display name."
+				}],
+				returns: "the staged receipt and durable file reference."
+			},
+			{
+				signature: "resolve(agent: Agent, receiptId: FileUploadReceiptId): FileAttachmentRef | undefined",
+				description: "Resolve one staged receipt inside its receiving Agent scope.",
+				parameters: [{
+					name: "agent",
+					description: "receiving Agent."
+				}, {
+					name: "receiptId",
+					description: "opaque receipt minted for one completed upload."
+				}],
+				returns: "durable file reference, or `undefined` for an unknown or foreign receipt."
+			},
+			{
+				signature: "bindPrompt( agent: Agent, receiptIds: readonly FileUploadReceiptId[], requestId: string, ): PromptFileBinding",
+				description: "Bind receipts while one prompt enters an Agent inbox. Disposal restores every prior binding unless the caller commits successful delivery.",
+				parameters: [
+					{
+						name: "agent",
+						description: "receiving Agent."
+					},
+					{
+						name: "receiptIds",
+						description: "distinct staged receipts referenced by the prompt."
+					},
+					{
+						name: "requestId",
+						description: "prompt identity later observed in queue or history."
+					}
+				],
+				returns: "binding kept after commit until queue or history observation retires its receipts."
+			},
+			{
+				signature: "retirePrompt(agent: Agent, requestId: string): void",
+				description: "Retire every receipt accepted by one removed queue occurrence.",
+				parameters: [{
+					name: "agent",
+					description: "receiving Agent."
+				}, {
+					name: "requestId",
+					description: "prompt identity carried by the queue occurrence."
+				}]
+			}
+		]
+	},
 	{
 		key: "fs",
 		summary: "Abstract filesystem provider.",
@@ -1826,6 +1990,15 @@ const SERVICE_API = [
 				}],
 				returns: "the owning adapter's image pricing for the route, when declared."
 			},
+			{
+				signature: "fileRequestText(ref: FileAttachmentRef): string",
+				description: "Resolve the exact text one durable file occurrence contributes to every provider request in the current execution environment.",
+				parameters: [{
+					name: "ref",
+					description: "durable verbatim file reference from model history."
+				}],
+				returns: "the same deterministic handle text used at adapter dispatch."
+			},
 			{
 				signature: "async listModels(provider: string): Promise<LlmModelInfo[]>",
 				description: "Discover models advertised by one registered provider. Catalog membership is advisory and never changes routing or request validation.",
@@ -1916,35 +2089,35 @@ const SERVICE_API = [
 	},
 	{
 		key: "messageFeedback",
-		summary: "Storage-domain sidecar service.",
-		description: "Storage-domain sidecar service. It inspects persisted Session history and never creates or resumes an Agent or Session.",
+		summary: "Session-log service; cold operations never construct a Session or Agent.",
+		description: "Session-log service; cold operations never construct a Session or Agent.",
 		methods: [
 			{
-				signature: "@Remote('list') async list(request: MessageFeedbackListRequest): Promise<MessageFeedbackListResult>",
-				description: "Read feedback belonging to the current persisted Session lifecycle. A stale row from a reused Session id is invisible.",
+				signature: "@Remote('list') list(request: MessageFeedbackListRequest): Promise<MessageFeedbackListResult>",
+				description: "Read current feedback from the canonical log.",
 				parameters: [{
 					name: "request",
-					description: "Session identity to inspect and list."
+					description: "Session to inspect."
 				}],
-				returns: "current immutable items or `session-not-found`."
+				returns: "immutable items or a definite persistence miss."
 			},
 			{
 				signature: "@Remote('put') put(request: MessageFeedbackPutRequest): Promise<MessageFeedbackPutResult>",
-				description: "Create or replace feedback for one derived append-origin assistant message. Every request must match the addressed item's current version; a matching no-op returns the stored item without changing its revision.",
+				description: "Create or replace feedback after checking its current version. Matching no-ops retain the version and append no event.",
 				parameters: [{
 					name: "request",
-					description: "target, desired value, and observed item version."
+					description: "Target, desired value, and observed item version."
 				}],
-				returns: "the committed item or an explicit business failure."
+				returns: "the durable item or an explicit business failure."
 			},
 			{
 				signature: "@Remote('delete') delete(request: MessageFeedbackDeleteRequest): Promise<MessageFeedbackDeleteResult>",
-				description: "Delete one feedback item. Absence is successful regardless of the supplied version; an existing item requires an exact version match.",
+				description: "Delete one item after checking its version; absence succeeds without an event.",
 				parameters: [{
 					name: "request",
 					description: "Session, message, and observed item version."
 				}],
-				returns: "the stable absent postcondition, or an explicit failure."
+				returns: "the stable absent postcondition or an explicit failure."
 			}
 		]
 	},
@@ -2253,7 +2426,7 @@ const SERVICE_API = [
 					name: "signal",
 					description: "cancellation owned by the Remote stream carrier."
 				}],
-				returns: "a complete opening snapshot followed by gap-free event frames."
+				returns: "a complete opening snapshot followed by gap-free durable event frames and optional cursorless assistant-stream frames."
 			},
 			{
 				signature: "@Remote({ mode: 'stream' }) control(signal: AbortSignal): AsyncIterable<SessionControlFrame>",
@@ -2292,147 +2465,69 @@ const SERVICE_API = [
 	},
 	{
 		key: "sessionPersistence",
-		summary: "Durable append-only session storage.",
-		description: "Durable append-only session storage. Implementations preserve contiguous, losslessly JSON-serializable events; append resolves only after durability, and load balances a complete interrupted tail without rewriting committed events.",
+		summary: "Durable append-only session storage addressed through per-session handles.",
+		description: "Durable append-only session storage addressed through per-session handles.\n\nStorage semantics shared by every backend: events are contiguous from seq 0 and never rewritten; a torn physical tail is never returned to a reader and is truncated by the write path before its first append; reads validate current-format records only and refuse unknown vocabulary fail-closed. `append` persists best-effort; `flush` — per handle or service-wide — is the durability barrier.\n\nVisibility: a created session is observable through `stat`/`list`/`open` in this process from the moment `create` resolves, even while a backend defers physical materialization (a pure optimization); other processes see the session only once it materializes, and a session that never materialized before a crash never existed. `SessionHandle.flush` forces materialization.\n\nFreshness: once an `append` or `flush` resolves, reads started afterwards on this backend instance observe at least that prefix.",
 		methods: [
 			{
-				signature: "abstract locate(meta: SessionHeader): SessionLocation | undefined",
-				description: "Resolve this backend's independent local artifact for a session without reading, creating, flushing, or otherwise materializing it. A backend that does not own one artifact per Session returns `undefined`.",
-				parameters: [{
-					name: "meta",
-					description: "the immutable session header whose artifact is requested."
-				}],
-				returns: "the backend-specific absolute location, when one exists."
-			},
-			{
-				signature: "abstract readonly supportsRawArtifacts: boolean",
-				description: "Whether this backend exposes one verbatim raw artifact per session. A backend that declares `true` must override readRaw.",
-				parameters: []
-			},
-			{
-				signature: "readRaw(_id: SessionId, signal?: AbortSignal): Promise<SessionRawArtifact | undefined>",
-				description: "Read a session's backend-owned artifact text verbatim — the exact durable bytes the backend wrote (decoded from its physical encoding, e.g. a decompressed JSONL). The returned `content` is the raw text, not a reconstruction from parsed events, so it preserves backend-specific serialization (chunk packing, key order, line breaks). Callers first test supportsRawArtifacts; `undefined` then means only that the requested session has no materialized artifact.",
-				parameters: [{
-					name: "_id",
-					description: "the persisted session to read (unused by the default: no per-session artifact)."
-				}, {
-					name: "signal",
-					description: "optional cancellation for backend read work."
-				}],
-				returns: "the raw artifact plus its parsed header, or `undefined` when the session is absent.",
-				throws: ["when this backend does not expose per-session raw artifacts."]
-			},
-			{
-				signature: "abstract create(meta: SessionHeader, inheritedEventCount?: SessionLogOffset): Promise<void>",
-				description: "Register a new session's metadata. A backend MAY defer the physical write until the first append (lazy materialization), in which case a created-but-never-appended session is absent from list — abandoned sessions leave nothing behind.",
-				parameters: [{
-					name: "meta",
-					description: "the immutable header (id, version, cwd, lineage) to record."
-				}, {
-					name: "inheritedEventCount",
-					description: "exact fork-inherited prefix length. Required for a seeded header and omitted only for an unseeded header."
-				}]
-			},
-			{
-				signature: "ensureMaterialized(_session: Session): Promise<void>",
-				description: "Ensure a live session has a durable header even when it has no events. Ordinary sessions remain lazily materialized; lifecycle frontends call this only when an empty session itself is a durable resumable resource.",
-				parameters: [{
-					name: "_session",
-					description: "exact live session whose registered header is materialized."
-				}]
-			},
-			{
-				signature: "abstract append(id: SessionId, events: readonly SessionEvent[]): Promise<void>",
-				description: "Durably persist a batch of events. Honors the append-only and contiguous- seq contracts: the first event's `seq` MUST equal the stored next-seq (after `load` has durably closed any interrupted turn). Rejects non-JSON- serializable `event.data` with an error naming the offending event type. A seeded session's first materializing batch must reach its complete inherited prefix.",
-				parameters: [{
-					name: "id",
-					description: "the session the batch belongs to."
-				}, {
-					name: "events",
-					description: "the contiguous batch to persist, in seq order."
-				}]
-			},
-			{
-				signature: "async prepare(id: SessionId, signal?: AbortSignal): Promise<SessionPreparation>",
-				description: "Prepare the exact unpublished Session used by resume. Implementations may reuse object graphs retained by an earlier inspect after confirming their durable revision is still current; disposal releases an unpublished reservation. Revision retries require the durable log to remain unchanged for one read/check round trip; continuous external writers may delay completion.",
-				parameters: [{
-					name: "id",
-					description: "persisted session to prepare."
-				}, {
-					name: "signal",
-					description: "optional cancellation for preparation work."
-				}],
-				returns: "one owned unpublished Session preparation."
-			},
-			{
-				signature: "abstract load(id: SessionId): Promise<SessionInspection>",
-				description: "Load an immutable balanced logical view and commit any required cold recovery. A complete interrupted final turn is preserved and durably closed with missing tool errors plus any open step and turn boundaries; only a torn final record is discarded. Unknown versions and corruption in the committed prefix reject. Implementations MUST NOT crash-repair an identity still bound to a live Session: a balanced live log may return as a durable snapshot, while an open live turn rejects. Returned values may be shared with immutable live or prepared state and must not be mutated. Revision-based implementations may wait for one stable read/check round trip.",
+				signature: "abstract create(header: SessionHeader, options?: SessionPersistenceCreateOptions): Promise<SessionHandle>",
+				description: "Create a new stored session and take its write ownership.",
 				parameters: [{
-					name: "id",
-					description: "the persisted session to reload."
-				}],
-				returns: "the header and a log ending on a balanced `turn/end`."
-			},
-			{
-				signature: "abstract inspect(id: SessionId, signal?: AbortSignal): Promise<SessionInspection>",
-				description: "Inspect an immutable logical session without committing recovery or publishing it. A cold complete interrupted turn receives synthetic closers in memory and a torn physical tail remains untouched. An already-live Session instead yields its current immutable snapshot, which may contain an open turn and its `session/end-seed` boundary. Coordinator-backed implementations retain the exact cold unpublished Session for bounded reuse by a later prepare. A stale ready source is reloaded; a source already committing or reserved for resume remains exclusive, and inspection may borrow its immutable view. Callers borrow only the immutable header and log. Continuous external writers may delay revision convergence.",
-				parameters: [{
-					name: "id",
-					description: "the persisted session to inspect."
+					name: "header",
+					description: "the immutable header (id, version, cwd, lineage) to store."
 				}, {
-					name: "signal",
-					description: "optional cancellation for queued and backend read work."
-				}],
-				returns: "the validated header and current logical event log."
-			},
-			{
-				signature: "abstract borrowSession(id: SessionId, signal?: AbortSignal): Promise<BorrowedSessionSource>",
-				description: "Borrow one exact inspection while retaining any reusable prepared source. A cold observation must pin the exact prepared Session that a later prepare reserves. Implementations must not degrade this operation to a detached inspect result.",
-				parameters: [{
-					name: "id",
-					description: "persisted session to observe."
-				}, {
-					name: "signal",
-					description: "optional cancellation for preparation work."
+					name: "options",
+					description: "optional cancellation."
 				}],
-				returns: "a disposable immutable observation."
+				returns: "a `write` handle owned by the caller; close it to release ownership.",
+				throws: ["{SessionAlreadyExistsError} when the id already exists."]
 			},
 			{
-				signature: "abstract readFrom(id: SessionId, fromSeq: SessionLogOffset, signal?: AbortSignal): Promise<SessionEventSuffix>",
-				description: "Read the stored events from `fromSeq` onward — the read-from-seq primitive for read models that resume from a watermark (e.g. a persisted projection cache folding only the tail past its checkpoint). Unlike inspect, it is a detached physical suffix read: no preparation cache, torn-tail truncation, synthetic closers, or coordinator-state publication. Only events from the valid contiguous stored prefix are returned, so a torn fragment never reaches the caller. `fromSeq` at or beyond the stored prefix returns an empty event list (never an error). A backend whose medium can seek by seq may read only the suffix; sequential media such as JSONL still parse the whole artifact and skip forward. The primitive bounds what is returned and refolded, not every backend's physical read.",
+				signature: "abstract open(id: SessionId, access: SessionAccess, options?: SessionPersistenceOpenOptions): Promise<SessionHandle>",
+				description: "Open an existing stored session.\n\n`read` never takes ownership and works while another handle (or process) holds write ownership. `write` atomically claims single-writer ownership; an existing active owner rejects.",
 				parameters: [
 					{
 						name: "id",
-						description: "the persisted session to read."
+						description: "the stored session to open."
 					},
 					{
-						name: "fromSeq",
-						description: "first event offset to include."
+						name: "access",
+						description: "`read` or `write`."
 					},
 					{
-						name: "signal",
-						description: "optional cancellation for queued and backend read work."
+						name: "options",
+						description: "optional cancellation."
 					}
 				],
-				returns: "storage metadata, the requested offset, and stored events with `seq >= fromSeq`."
+				returns: "the open handle.",
+				throws: ["{SessionPersistenceNotFoundError} when the session does not exist.", "{SessionAlreadyOwnedError} for `write` when ownership is taken."]
+			},
+			{
+				signature: "abstract flush(): Promise<void>",
+				description: "Flush every active write handle owned by this service instance in one durability barrier: each handle's routed live events drain durably and its session materializes, exactly as that handle's own `SessionHandle.flush` would. Read handles buffer nothing and are untouched. A handle closed concurrently counts as flushed — close itself drains durably.",
+				parameters: [],
+				returns: "resolution once every write handle active at the call has flushed.",
+				throws: ["{AggregateError} naming each session whose flush failed; the remaining handles still flush."]
 			},
 			{
-				signature: "abstract list(signal?: AbortSignal): Promise<SessionHeader[]>",
-				description: "Lightweight listing from metadata, without a full-log parse.",
+				signature: "abstract stat(id: SessionId, options?: SessionPersistenceStatOptions): Promise<SessionPersistenceSnapshot | undefined>",
+				description: "Observe one stored session without reading its event log or taking ownership.\n\nThe snapshot's `revision` is an opaque change token comparable only against revisions from the same service instance and session id: equal revisions may be treated as an unchanged log; unequal revisions promise nothing. Write-ownership churn does not change a revision. It exists for derived read-model caches keyed off `stat`/`list`; it plays no part in open, read, or resume.",
 				parameters: [{
-					name: "signal",
-					description: "optional cancellation for backend listing work."
+					name: "id",
+					description: "the stored session to observe."
+				}, {
+					name: "options",
+					description: "optional cancellation."
 				}],
-				returns: "one header per materialized session."
+				returns: "the snapshot, or `undefined` when the session does not exist."
 			},
 			{
-				signature: "abstract listSnapshots(signal?: AbortSignal): Promise<SessionPersistenceSnapshot[]>",
-				description: "List materialized sessions with cheap per-log change tokens.\n\nRepeated observations of an unchanged log return the same revision. A successful mutating load repair changes the next listed revision. Revisions also distinguish independently backed stores so backend-local counters cannot compare equal across different persistence sources.",
+				signature: "abstract list(options?: SessionPersistenceListOptions): Promise<readonly SessionPersistenceSnapshot[]>",
+				description: "List every stored session visible to this process, in no promised order.",
 				parameters: [{
-					name: "signal",
-					description: "optional cancellation for backend snapshot-listing work."
+					name: "options",
+					description: "optional cancellation."
 				}],
-				returns: "one header and opaque revision per materialized session without loading full logs."
+				returns: "one snapshot per stored session."
 			}
 		]
 	},
@@ -2460,6 +2555,18 @@ const SERVICE_API = [
 				],
 				returns: "the cut (`asOfSeq` = lowest served-row watermark), or `undefined` when no usable row exists for this lifecycle."
 			},
+			{
+				signature: "cachedPredecessorTitle( meta: SessionHeader, inheritedEventCount: SessionLogOffset, ): ProjectionSnapshot | undefined",
+				description: "Read only a predecessor checkpoint's title as a zero-I/O listing hint.\n\nThe authoritative Session header supplies the lifecycle identity. A cache checkpoint can lag that log but cannot lead it because writes flush the log first, so a matching predecessor title is a genuine (possibly stale) fact from this Session. The registry still requires the current title projection's row version and schema. No other predecessor projection is exposed: format normalization can change their current meaning, and the strict cachedSnapshot / hydration paths continue to reject them.",
+				parameters: [{
+					name: "meta",
+					description: "authoritative listed Session header."
+				}, {
+					name: "inheritedEventCount",
+					description: "exact inherited cut completing the lifecycle identity."
+				}],
+				returns: "a title-only checkpoint view with `asOfSeq: -1`, or `undefined` when the record is current, newer, unrelated, missing, or incompatible with the title unit. The sentinel avoids reusing a sequence that a cardinality-changing Session migration may have remapped."
+			},
 			{
 				signature: "hydratePrepared( session: Session, events: readonly SessionEvent[], ): ProjectionSnapshot",
 				description: "Hydrate projection cells for an already-prepared Session without another persistence read. The cache seeds matching rows; the supplied exact log advances every unit to the observation cut. No checkpoint is written because the logical observation may contain recovery events not yet durable.",
@@ -2586,7 +2693,7 @@ const SERVICE_API = [
 					name: "checkpoint",
 					description: "persisted rows for one session (possibly stale or empty)."
 				}],
-				returns: "the seq to hand the persistence `readFrom`, or `undefined` when no unit is registered (no read needed — {@link restore} would serve empty values regardless)."
+				returns: "the offset for the stored-log suffix read (`SessionHandle.read`), or `undefined` when no unit is registered (no read needed — {@link restore} would serve empty values regardless)."
 			},
 			{
 				signature: "viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: readonly Extract<keyof SessionProjectionMap, string>[], ): Partial<SessionProjectionMap>",
@@ -2602,7 +2709,7 @@ const SERVICE_API = [
 			},
 			{
 				signature: "restore( checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, header: SessionHeader, inheritedEventCount: SessionLogOffset, ): { snapshot: ProjectionSnapshot; checkpoint: ProjectionCheckpoint }",
-				description: "Cold read: fold every persisted unit over a stored log suffix, seeding each from its checkpoint row when usable — the one read recipe (cached state + forward tail replay + `view`) applied without a live `Session`. Call with the events returned by a persistence `readFrom(id, restoreFloor(checkpoint))` and that same floor as `baseSeq`; the floor's one-below anchor makes the supplied end honest, so a shrunk log is detected here. A row is usable iff its `ver` matches the live unit's `stateVersion`, it does not predate `baseSeq` (`seq >= baseSeq - 1`), and it does not claim events past the supplied end (`seq <= endSeq`); an unusable row is discarded and its key refolds from `init` — which is only sound over the full log, so a discarded row with `baseSeq > 0` throws (the caller re-reads from seq 0, e.g. after a crash-repair truncation shrank the log below a row's watermark).",
+				description: "Cold read: fold every persisted unit over a stored log suffix, seeding each from its checkpoint row when usable — the one read recipe (cached state + forward tail replay + `view`) applied without a live `Session`. Call with the stored events at or past `restoreFloor(checkpoint)` (a `SessionHandle.read` slice) and that same floor as `baseSeq`; the floor's one-below anchor makes the supplied end honest, so a shrunk log is detected here. A row is usable iff its `ver` matches the live unit's `stateVersion`, it does not predate `baseSeq` (`seq >= baseSeq - 1`), and it does not claim events past the supplied end (`seq <= endSeq`); an unusable row is discarded and its key refolds from `init` — which is only sound over the full log, so a discarded row with `baseSeq > 0` throws (the caller re-reads from seq 0, e.g. after a crash-repair truncation shrank the log below a row's watermark).",
 				parameters: [
 					{
 						name: "checkpoint",
@@ -2880,7 +2987,7 @@ const SERVICE_API = [
 			},
 			{
 				signature: "async prepare( agent: Agent, content: ContentBlock[], references: SessionReferenceInput[], signal?: AbortSignal, ): Promise<PreparedReferencedMessage>",
-				description: "Snapshot all references for one accepted direct message and return one aggregated durable context.",
+				description: "Snapshot all references for one accepted direct message and return one aggregated durable context. Automatic budgets use the last assembled route, or agent options before any assembly. Missing model capacity or adapter uses 64 KiB; other metadata lookup failures and cancellation reject preparation. Truncated previews include omission facts and a full-snapshot spill locator, or an explicit unavailable notice. Cancellation prevents context publication, including when storage completes after cancellation.",
 				parameters: [
 					{
 						name: "agent",
@@ -2906,7 +3013,7 @@ const SERVICE_API = [
 	{
 		key: "sessions",
 		summary: "In-memory session store (`ctx.sessions`).",
-		description: "In-memory session store (`ctx.sessions`).\n\nPersistence is intentionally not implemented here — persistence plugins subscribe to `session/event` and flush on `session/flush` / dispose.",
+		description: "In-memory session store (`ctx.sessions`).\n\nPersistence is intentionally not implemented here — the agent lifecycle attaches a session-log writer to each published session's write handle; a session published outside that lifecycle persists nothing.",
 		methods: [
 			{
 				signature: "create(id?: SessionId, options?: CreateSessionOptions): Session",
@@ -2929,7 +3036,7 @@ const SERVICE_API = [
 					description: "the session id; omitted, the store mints `session-<n>`."
 				}, {
 					name: "options",
-					description: "seed events and/or creation metadata for the header. With `seedSource: 'persistence'`, metadata and events must be fresh detached graphs whose ownership transfers to this call: they are validated and frozen in place through {@link Session.fromRestore}, so the caller must retain no mutable aliases."
+					description: "seed events and/or creation metadata for the header. With `eventState`, every seed event is either independently owned or any shared value is deeply frozen; {@link Session.fromRestore} validates and adopts those values without copying or freezing them."
 				}],
 				returns: "the constructed session, NOT yet in the store.",
 				throws: ["if a session with `id` already exists, metadata is not a plain lossless-JSON record with valid scalar fields, or `meta.cwd` is a non-absolute path."]
@@ -3024,7 +3131,7 @@ const SERVICE_API = [
 		methods: [
 			{
 				signature: "abstract readonly sharing: SessionTelemetrySharingStatus",
-				description: "Deployment-selected session-sharing policy, disclosed for acknowledgement surfaces that report whether recorded feedback leaves the process. Every backend must disclose its policy; a consumer renders \"not configured\" only when no telemetry service is mounted. The seam owns this vocabulary so the disclosure is backend-independent.",
+				description: "Deployment-selected sharing mode, independent of SDK delivery.",
 				parameters: []
 			},
 			{
@@ -3666,10 +3773,10 @@ const SERVICE_API = [
 			},
 			{
 				signature: "@Remote('prompt') async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>",
-				description: "Deliver one browser-authored message to a continuable child through the exact live direct parent, retaining the caller-minted request identity and validated browser zone on the accepted message. Success identifies the message the child's FIFO inbox accepted; later execution is independent of this call. Image parts are admitted and persisted through the attachment store before delivery, and the child's model must accept image input.",
+				description: "Deliver one browser-authored message to a continuable child through the exact live direct parent, retaining the caller-minted request identity and validated browser zone on the accepted message. Success identifies the message the child's inbox accepted; later execution is independent of this call. Queue delivery targets a later turn; steer delivery targets the nearest step and retains the Agent loop's best-effort fallback semantics. Image parts are admitted and persisted through the attachment store before delivery, and the child's model must accept image input.",
 				parameters: [{
 					name: "request",
-					description: "durable address, minted identity, content, and optional browser zone."
+					description: "durable address, delivery, minted identity, content, and optional browser zone."
 				}, {
 					name: "signal",
 					description: "carrier cancellation, owning the call until inbox acceptance."
@@ -3738,7 +3845,7 @@ const SERVICE_API = [
 	{
 		key: "subprocess",
 		summary: "Abstract subprocess service.",
-		description: "Abstract subprocess service. Subclass, implement spawn, and load the subclass as a plugin — it registers as `ctx.subprocess` (one implementation per context; loading a second throws, which is cordis' standard duplicate-service behavior).\n\nImplementations must honor these semantics:\n\n- Executable paths belong to one execution world shared with the mounted filesystem provider.\n- spawn returns immediately with a live handle; `done` resolves at process close with exit facts and rejects only for spawn-level failures.\n- Collect-mode readers are offset-based and non-consuming, so independent readers never consume one another's output; lossy reads report truncation and the spill file holding the complete stream when one exists. Piped streams are handed to the caller raw and never buffered here.\n- SubprocessHandle.terminate (and the spec's abort signal) escalates SIGTERM→grace→SIGKILL — the only termination verb — tree-scoped on every platform. SubprocessHandle.waitForExit observes whole-tree liveness, so a consumer-owned teardown ladder can hold each tier on real quiescence.\n- Disposal of the service terminates all still-running managed processes and awaits their exit.\n- spawnTerminal owns terminal allocation, text transport, foreground groups, signalling, and whole-session quiescence behind one awaited termination method; readiness and persistent-shell policy stay in the PTY consumer. Its output stream ends after queued terminal output when the top-level process exits.",
+		description: "Abstract subprocess service. Subclass, implement spawn, and load the subclass as a plugin — it registers as `ctx.subprocess` (one implementation per context; loading a second throws, which is cordis' standard duplicate-service behavior).\n\nImplementations must honor these semantics:\n\n- Executable paths belong to one execution world shared with the mounted filesystem provider.\n- spawn returns a live handle synchronously. Target identity remains provider-private; `done` resolves with the spawned command's exit facts and may reject for spawn or provider failures.\n- Collect-mode readers are offset-based and non-consuming, so independent readers never consume one another's output; lossy reads report truncation and the spill file holding the complete stream when one exists. Piped streams are handed to the caller raw and never buffered here.\n- SubprocessHandle.terminate (and the spec's abort signal) starts the provider's documented procedure against its managed range. SubprocessHandle.waitForExit observes that same range so a consumer-owned teardown ladder can hold each tier on real quiescence; each provider documents its signalling and observability limits.\n- Disposal of the service terminates all still-running managed processes and awaits their exit.\n- spawnTerminal owns terminal allocation, text transport, foreground groups, signalling, and whole-session quiescence behind one awaited termination method; readiness and persistent-shell policy stay in the PTY consumer. Its output stream ends after queued terminal output when the top-level process exits.",
 		methods: [
 			{
 				signature: "abstract resolveExecutable( command: string, env?: Readonly<Record<string, string>>, signal?: AbortSignal, ): Promise<string>",
@@ -3766,11 +3873,12 @@ const SERVICE_API = [
 					name: "spec",
 					description: "argv, directory, stdio dispositions, grace, cancellation, and environment."
 				}],
-				returns: "the live process handle (streams/readers, signalling, outcome promise)."
+				returns: "the live process handle (streams/readers, signalling, outcome promise).",
+				throws: ["synchronously when pre-aborted or when argv, cwd, environment, or grace is invalid before handle creation."]
 			},
 			{
 				signature: "abstract spawnTerminal(spec: SubprocessTerminalSpawnSpec): Promise<SubprocessTerminalHandle>",
-				description: "Allocate a real terminal and start one owned process session. This is the only non-pipe process primitive: implementations own terminal byte I/O, foreground groups, signals, and complete session-tree cleanup.",
+				description: "Allocate a real terminal and start one owned process session. This is the only non-pipe process primitive: implementations own terminal byte I/O, foreground groups, signals, and whole-session quiescence.",
 				parameters: [{
 					name: "spec",
 					description: "fully specified argv, cwd, environment, dimensions, grace, and allocation cancellation."
@@ -4541,10 +4649,10 @@ const SERVICE_API = [
 		methods: [
 			{
 				signature: "async create(path: string, title?: string): Promise<Workspace>",
-				description: "Create or reuse a workspace for an existing directory. The path is canonicalized through `fs.realpath`; a nonexistent path rejects with the original error and a non-directory rejects. Repeated calls for the same canonical path return the existing entity without changing its title. A newly created workspace is prepended to the durable registry order. Different canonical paths may share a display title.",
+				description: "Create or reuse a workspace for an existing directory. The fully qualified path is canonicalized through `fs.realpath`; a relative, nonexistent, or non-directory path rejects. Repeated calls for the same canonical path return the existing entity without changing its title. A newly created workspace is prepended to the durable registry order. Different canonical paths may share a display title.",
 				parameters: [{
 					name: "path",
-					description: "Existing directory to own, in any path spelling."
+					description: "Existing directory to own, in a fully qualified path spelling."
 				}, {
 					name: "title",
 					description: "Display title used only when a new record is created."
@@ -4601,7 +4709,7 @@ const SERVICE_API = [
 				description: "Resolve by canonical directory path without creating or mutating a workspace. A missing path rejects during `realpath`; an existing unowned directory returns `undefined`.",
 				parameters: [{
 					name: "path",
-					description: "Existing directory path in any spelling."
+					description: "Existing directory path in a fully qualified spelling."
 				}],
 				returns: "the workspace owning the canonical path, when one exists."
 			}
@@ -4635,6 +4743,17 @@ const EVENT_API = [
 			description: "the preset recorded by the committed selection."
 		}]
 	},
+	{
+		name: "agent/assistant-stream",
+		mode: "emit",
+		signature: "'agent/assistant-stream'(this: Scoped<Agent>, payload: { agent: Agent; frame: AssistantStreamFrame }): void",
+		summary: "Process-local assistant-stream publication.",
+		description: "Process-local assistant-stream publication. Chunk frames are transient; the loop appends one final v2 `assistant/message` or `assistant/attempt` with the same stream before a committed end frame.",
+		parameters: [{
+			name: "payload",
+			description: ".frame - one ordered start, chunk, or end publication. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent."
+		}]
+	},
 	{
 		name: "agent/created",
 		mode: "emit",
@@ -4963,6 +5082,17 @@ const EVENT_API = [
 			description: "domain, table (`''` for global), key (`''` for global), operation discriminant, and on `put` the new snapshot."
 		}]
 	},
+	{
+		name: "feedback/committed",
+		mode: "parallel",
+		signature: "'feedback/committed'(inspection: SessionInspection): void",
+		summary: "Observe a durable cold feedback mutation without publishing a live Session.",
+		description: "Observe a durable cold feedback mutation without publishing a live Session. Observers run before write ownership is released and must not await another message-feedback operation for this Session. The payload is borrowed read-only; deep-clone it before transferring ownership (for example, to Session.fromRestore).",
+		parameters: [{
+			name: "inspection",
+			description: "committed canonical prefix, including the feedback as its last event."
+		}]
+	},
 	{
 		name: "fs/edit-intent",
 		mode: "waterfall",
@@ -5392,6 +5522,10 @@ const TYPE_API = [
 		name: "AdapterRegistrationHandle",
 		declaration: "export interface AdapterRegistrationHandle {\n    (): void;\n    replace(providers: string[]): void;\n}"
 	},
+	{
+		name: "AdmittedPromptContentPart",
+		declaration: "export type AdmittedPromptContentPart = {\n    readonly type: 'text';\n    readonly text: string;\n} | {\n    readonly type: 'image';\n    readonly attachment: ImageAttachmentRef;\n} | {\n    readonly type: 'file';\n    readonly attachment: FileAttachmentRef;\n};"
+	},
 	{
 		name: "Agent",
 		declaration: "export interface Agent {\n    readonly id: SessionId;\n}"
@@ -5440,6 +5574,10 @@ const TYPE_API = [
 		name: "AgentPresetRow",
 		declaration: "export interface AgentPresetRow {\n    readonly id: string;\n    readonly trust: PresetTrust;\n    readonly isDefault: boolean;\n    readonly name?: string;\n    readonly description?: string;\n    readonly broken?: string;\n}"
 	},
+	{
+		name: "AgentResolver",
+		declaration: "export type AgentResolver = (sessionId: SessionId) => Promise<Agent>;"
+	},
 	{
 		name: "AgentSetup",
 		declaration: "export type AgentSetup = (agentCtx: Context) => AgentSetupCommit | Promise<AgentSetupCommit | void> | void;"
@@ -5528,6 +5666,26 @@ const TYPE_API = [
 		name: "AssistantProvenance",
 		declaration: "export interface AssistantProvenance {\n    provider: string;\n    model: string;\n    replayState?: unknown;\n}"
 	},
+	{
+		name: "AssistantStreamFrame",
+		declaration: "export type AssistantStreamFrame = {\n    readonly type: 'start';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly turn: number;\n    readonly step: number;\n} | {\n    readonly type: 'chunk';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly index: number;\n    readonly time: number;\n    readonly chunk: StreamChunk;\n} | {\n    readonly type: 'end';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly index: number;\n    readonly outcome: {\n        readonly kind: 'committed';\n        readonly eventType: 'assistant/message' | 'assistant/attempt';\n        readonly seq: SessionSeq;\n    } | {\n        readonly kind: 'abandoned';\n    };\n};"
+	},
+	{
+		name: "AssistantStreamRecord",
+		declaration: "export type AssistantStreamRecord = {\n    readonly type: 'text-chunks';\n    readonly time0: number;\n    readonly index: number;\n    readonly dt: readonly number[];\n    readonly texts: readonly string[];\n} | {\n    readonly type: 'reasoning-chunks';\n    readonly time0: number;\n    readonly index: number;\n    readonly dt: readonly number[];\n    readonly texts: readonly string[];\n} | {\n    readonly type: 'tool-call-chunks';\n    readonly time0: number;\n    readonly index: number;\n    readonly dt: readonly number[];\n    readonly id: ToolCallId;\n    readonly name?: string;\n    readonly args: readonly string[];\n} | {\n    readonly type: 'chunk';\n    readonly time: number;\n    readonly chunk: StreamChunk;\n};"
+	},
+	{
+		name: "AttachmentAdmissionPart",
+		declaration: "export type AttachmentAdmissionPart = PromptContentPart | {\n    readonly type: 'file';\n    readonly attachment: FileAttachmentRef;\n};"
+	},
+	{
+		name: "AttachmentError",
+		declaration: "export class AttachmentError extends Error {\n    readonly code: AttachmentErrorCode;\n    constructor(message: string, code: AttachmentErrorCode, options?: ErrorOptions);\n}"
+	},
+	{
+		name: "AttachmentErrorCode",
+		declaration: "export type AttachmentErrorCode = typeof ATTACHMENT_ERROR_CODES[number];"
+	},
 	{
 		name: "AttachmentId",
 		declaration: "export type AttachmentId = Branded<'AttachmentId'>;"
@@ -5596,10 +5754,6 @@ const TYPE_API = [
 		name: "BashEnvVariableInfo",
 		declaration: "export interface BashEnvVariableInfo extends BashEnvVariable {\n    contributor: string;\n    key: DshEnvironmentKey;\n}"
 	},
-	{
-		name: "BorrowedSessionSource",
-		declaration: "export type BorrowedSessionSource = Disposable & ({\n    readonly source: 'prepared';\n    readonly inspection: SessionInspection;\n    readonly revision: SessionPersistenceRevision;\n    readonly preparedSession: Session;\n} | {\n    readonly source: 'live';\n    readonly inspection: SessionInspection;\n});"
-	},
 	{
 		name: "Branded",
 		declaration: "export type Branded<B extends string> = string & {\n    readonly [BRAND]: B;\n};"
@@ -5608,14 +5762,6 @@ const TYPE_API = [
 		name: "BrandedNumber",
 		declaration: "export type BrandedNumber<B extends string> = number & {\n    readonly [BRAND]: B;\n};"
 	},
-	{
-		name: "ChunkRow",
-		declaration: "export type ChunkRow = {\n    type: 'text-chunks';\n    seq0: SessionSeqType;\n    time0: number;\n    data: TextRunData;\n} | {\n    type: 'reasoning-chunks';\n    seq0: SessionSeqType;\n    time0: number;\n    data: TextRunData;\n} | {\n    type: 'tool-call-chunks';\n    seq0: SessionSeqType;\n    time0: number;\n    data: ToolCallRunData;\n};"
-	},
-	{
-		name: "ChunkRowEvent",
-		declaration: "export type ChunkRowEvent = {\n    [Kind in ChunkRow['type']]: {\n        readonly type: `chunkrow/${Kind}`;\n        readonly seq: number;\n        readonly time: number;\n        readonly data: Extract<ChunkRow, {\n            readonly type: Kind;\n        }>['data'];\n    };\n}[ChunkRow['type']];"
-	},
 	{
 		name: "ClientArtifactBaseline",
 		declaration: "export interface ClientArtifactBaseline {\n    readonly path: string;\n    readonly mtimeMs: number;\n    readonly size: number;\n}"
@@ -5664,22 +5810,30 @@ const TYPE_API = [
 		name: "CommandExecution",
 		declaration: "export interface CommandExecution {\n    readonly commandId: CommandId;\n    readonly result: CommandResult;\n}"
 	},
+	{
+		name: "CommandFileReceiptResolver",
+		declaration: "export type CommandFileReceiptResolver = (agent: Agent, receiptId: string) => FileAttachmentRef | undefined;"
+	},
 	{
 		name: "CommandId",
 		declaration: "export type CommandId = Branded<'CommandId'>;"
 	},
 	{
 		name: "CommandInputDescriptor",
-		declaration: "export interface CommandInputDescriptor {\n    readonly hint: string;\n    readonly images?: boolean;\n}"
+		declaration: "export interface CommandInputDescriptor {\n    readonly hint: string;\n    readonly attachments?: boolean;\n}"
 	},
 	{
 		name: "CommandInvocation",
-		declaration: "export interface CommandInvocation {\n    readonly commandId: CommandId;\n    readonly agent: Agent;\n    readonly rawInput: string;\n    readonly attachments: readonly ImageBlock[];\n    readonly signal: AbortSignal;\n}"
+		declaration: "export interface CommandInvocation {\n    readonly commandId: CommandId;\n    readonly agent: Agent;\n    readonly rawInput: string;\n    readonly attachments: readonly (ImageBlock | FileBlock)[];\n    readonly signal: AbortSignal;\n}"
 	},
 	{
 		name: "CommandResult",
 		declaration: "export type CommandResult = {\n    readonly kind: 'success';\n    readonly text?: string;\n    readonly sourceEventSeq?: SessionSeq;\n} | {\n    readonly kind: 'error';\n    readonly text: string;\n};"
 	},
+	{
+		name: "CommandSubmitAttachment",
+		declaration: "export type CommandSubmitAttachment = ({\n    readonly type: 'image';\n} & EncodedImageAttachment) | {\n    readonly type: 'file';\n    readonly receiptId: string;\n};"
+	},
 	{
 		name: "CompactionAgentContext",
 		declaration: "export interface CompactionAgentContext {\n    session: Session;\n    options: {\n        provider?: string;\n        model?: string;\n    };\n}"
@@ -5710,7 +5864,7 @@ const TYPE_API = [
 	},
 	{
 		name: "ContentBlockMap",
-		declaration: "export interface ContentBlockMap {\n    'text': TextBlock;\n    'reasoning': ReasoningBlock;\n    'image': ImageBlock;\n    'tool-call': ToolCallBlock;\n    'tool-result': ToolResultBlock;\n}"
+		declaration: "export interface ContentBlockMap {\n    'text': TextBlock;\n    'reasoning': ReasoningBlock;\n    'image': ImageBlock;\n    'file': FileBlock;\n    'tool-call': ToolCallBlock;\n    'tool-result': ToolResultBlock;\n}"
 	},
 	{
 		name: "ContentBlockType",
@@ -5980,6 +6134,14 @@ const TYPE_API = [
 		name: "EditGoalRequest",
 		declaration: "export interface EditGoalRequest {\n    readonly objective?: string;\n    readonly maxGoalRounds?: number;\n}"
 	},
+	{
+		name: "EncodedFileAttachment",
+		declaration: "export interface EncodedFileAttachment {\n    data: string;\n    name?: string;\n}"
+	},
+	{
+		name: "EncodedFileUploadRequest",
+		declaration: "export interface EncodedFileUploadRequest {\n    readonly data: string;\n    readonly name?: string;\n}"
+	},
 	{
 		name: "EncodedImageAttachment",
 		declaration: "export interface EncodedImageAttachment {\n    mediaType: ImageMediaType;\n    data: string;\n    name?: string;\n}"
@@ -5992,6 +6154,14 @@ const TYPE_API = [
 		name: "FiberState",
 		declaration: "export type FiberState = FiberStateEnum;"
 	},
+	{
+		name: "FileAttachmentRef",
+		declaration: "export interface FileAttachmentRef {\n    attachmentId: AttachmentId;\n    name: string;\n    bytes: number;\n}"
+	},
+	{
+		name: "FileBlock",
+		declaration: "export interface FileBlock {\n    type: 'file';\n    attachment: FileAttachmentRef;\n}"
+	},
 	{
 		name: "FileDiff",
 		declaration: "export interface FileDiff {\n    path: string;\n    oldText: string | null;\n    newText: string;\n}"
@@ -6004,6 +6174,14 @@ const TYPE_API = [
 		name: "FileReferenceCandidate",
 		declaration: "export interface FileReferenceCandidate {\n    path: string;\n    kind: 'file' | 'directory';\n}"
 	},
+	{
+		name: "FileUploadReceiptId",
+		declaration: "export type FileUploadReceiptId = Branded<'file-upload-receipt-id'>;"
+	},
+	{
+		name: "FileUploadValue",
+		declaration: "export interface FileUploadValue {\n    readonly receiptId: FileUploadReceiptId;\n    readonly file: FileAttachmentRef;\n}"
+	},
 	{
 		name: "FinishReason",
 		declaration: "export type FinishReason = FinishReasonMap[keyof FinishReasonMap];"
@@ -6264,6 +6442,10 @@ const TYPE_API = [
 		name: "LlmAdapter",
 		declaration: "export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}"
 	},
+	{
+		name: "LlmAttemptId",
+		declaration: "export type LlmAttemptId = Branded<'LlmAttemptId'>;"
+	},
 	{
 		name: "LlmCallConfig",
 		declaration: "export interface LlmCallConfig {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n}"
@@ -6322,7 +6504,7 @@ const TYPE_API = [
 	},
 	{
 		name: "LlmRuntime",
-		declaration: "export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote('discoverModels')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(config: LlmCallConfig, signal?: AbortSignal): Promise<PreparedLlmCall>;\n    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}"
+		declaration: "export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote('discoverModels')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    fileRequestText(ref: FileAttachmentRef): string;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(config: LlmCallConfig, signal?: AbortSignal): Promise<PreparedLlmCall>;\n    stream(options: GenerateOptions) /* …truncated — full shape in source */"
 	},
 	{
 		name: "LspHover",
@@ -6538,7 +6720,7 @@ const TYPE_API = [
 	},
 	{
 		name: "PrepareSessionOptions",
-		declaration: "export type PrepareSessionOptions = (CreateSessionOptions & {\n    readonly seedSource?: undefined;\n}) | RestoredSessionOptions;"
+		declaration: "export type PrepareSessionOptions = (CreateSessionOptions & {\n    readonly eventState?: undefined;\n}) | RestoredSessionOptions;"
 	},
 	{
 		name: "PresetOption",
@@ -6592,6 +6774,10 @@ const TYPE_API = [
 		name: "PromptContextOrderName",
 		declaration: "export type PromptContextOrderName = keyof typeof CONTEXT_ORDERS;"
 	},
+	{
+		name: "PromptFileBinding",
+		declaration: "export interface PromptFileBinding extends Disposable {\n    commit(): void;\n}"
+	},
 	{
 		name: "PromptSection",
 		declaration: "export interface PromptSection {\n    readonly name: string;\n    readonly order: number;\n    readonly text: string | ((context: AssembleContext) => string);\n    readonly complete?: boolean;\n}"
@@ -6702,7 +6888,7 @@ const TYPE_API = [
 	},
 	{
 		name: "RestoredSessionOptions",
-		declaration: "export interface RestoredSessionOptions {\n    readonly seed: SessionEvent[];\n    readonly meta: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    readonly seedSource: 'persistence';\n}"
+		declaration: "export interface RestoredSessionOptions {\n    readonly seed: SessionEvent[];\n    readonly meta: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    readonly eventState: SessionSeedEventState;\n}"
 	},
 	{
 		name: "ResumeAgentOptions",
@@ -6732,6 +6918,14 @@ const TYPE_API = [
 		name: "SandboxPolicyRequest",
 		declaration: "export interface SandboxPolicyRequest {\n    session?: Session;\n    mode?: SandboxMode;\n}"
 	},
+	{
+		name: "SaveFileAttachment",
+		declaration: "export interface SaveFileAttachment {\n    data: Uint8Array;\n    name?: string;\n}"
+	},
+	{
+		name: "SaveFileStreamAttachment",
+		declaration: "export interface SaveFileStreamAttachment {\n    data: AsyncIterable<Uint8Array>;\n    signal?: AbortSignal;\n    name?: string;\n}"
+	},
 	{
 		name: "SaveImageAttachment",
 		declaration: "export interface SaveImageAttachment {\n    data: Uint8Array;\n    mediaType: ImageMediaType;\n    name?: string;\n}"
@@ -6778,7 +6972,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SendTeamMessageRequest",
-		declaration: "export interface SendTeamMessageRequest {\n    readonly target: string;\n    readonly content: ContentBlock[];\n    readonly delivery: 'quiet' | 'wakeup';\n    readonly signal: AbortSignal;\n}"
+		declaration: "export interface SendTeamMessageRequest {\n    readonly target: string;\n    readonly content: ContentBlock[];\n    readonly signal: AbortSignal;\n}"
 	},
 	{
 		name: "SendTeamMessageResult",
@@ -6786,12 +6980,28 @@ const TYPE_API = [
 	},
 	{
 		name: "Session",
-		declaration: "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    static create(id: SessionId, seed?: readonly SessionEvent[], header?: SessionHeader, inheritedEventCount?: SessionLogOffset): Session;\n    static fromRestore(id: SessionId, seed: readonly SessionEvent[], header: SessionHeader, inheritedEventCount: SessionLogOffset): Session;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [\n        opts: SurfaceIntent\n    ] : [\n    ]): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
+		declaration: "export class Session {\n    get surface(): SessionSurface;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    get id(): SessionId;\n    readonly firstLiveSeq: SessionLogOffset;\n    static create(id: SessionId, seed?: readonly SessionEvent[], header?: SessionHeader, inheritedEventCount?: SessionLogOffset): Session;\n    static fromRestore(id: SessionId, seed: readonly SessionEvent[], header: SessionHeader, inheritedEventCount: SessionLogOffset, eventState: SessionSeedEventState): Session;\n    eventAt(seq: SessionSeq): SessionEvent | undefined;\n    snapshotEvents(fromSeq: SessionLogOffset = SessionLogOffset(0), toSeqExclusive: SessionLogOffset = this.seq): readonly SessionEvent[];\n    ownEvents(): readonly SessionEvent[];\n    isOwnSeq(seq: SessionSeq): boolean;\n    get seq(): SessionLogOffset;\n    append<T extends SessionEventType>(type: T, data: SessionEventMap[T], ...opts: T extends SurfaceEventType ? [\n        opts: SurfaceIntent<T>\n    ] : [\n    ]): SessionEvent<T>;\n    requestHeader(): EpochHeader | undefined;\n    requestContext(): RequestContext | undefined;\n    deriveMessages(): Message[];\n    deriveEventMessage(event: SessionEvent): Message | null;\n}"
+	},
+	{
+		name: "SessionAccess",
+		declaration: "export type SessionAccess = 'read' | 'write';"
 	},
 	{
 		name: "SessionAddress",
 		declaration: "export type SessionAddress = {\n    readonly kind: 'session';\n    readonly sessionId: SessionId;\n} | {\n    readonly kind: 'subagent';\n    readonly parentSessionId: SessionId;\n    readonly childSessionId: SessionId;\n    readonly mode: 'one-shot' | 'continuable';\n};"
 	},
+	{
+		name: "SessionAssistantStreamAttempt",
+		declaration: "export interface SessionAssistantStreamAttempt {\n    readonly attemptId: LlmAttemptId;\n    readonly startedAfterSeq: SessionSeqCursor;\n    readonly turn: number;\n    readonly step: number;\n    readonly nextIndex: number;\n    readonly stream: readonly JsonValue[];\n}"
+	},
+	{
+		name: "SessionAssistantStreamBaseline",
+		declaration: "export interface SessionAssistantStreamBaseline {\n    readonly revision: number;\n    readonly activeAttempt?: SessionAssistantStreamAttempt;\n}"
+	},
+	{
+		name: "SessionAssistantStreamFrame",
+		declaration: "export type SessionAssistantStreamFrame = {\n    readonly type: 'start';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly startedAfterSeq: SessionSeqCursor;\n    readonly turn: number;\n    readonly step: number;\n} | {\n    readonly type: 'chunk';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly index: number;\n    readonly time: number;\n    readonly chunk: JsonValue;\n} | {\n    readonly type: 'end';\n    readonly attemptId: LlmAttemptId;\n    readonly revision: number;\n    readonly index: number;\n    readonly outcome: {\n        readonly kind: 'committed';\n        readonly eventType: 'assistant/message' | 'assistant/attempt';\n        readonly seq: number;\n    } | {\n        readonly kind: 'abandoned';\n    };\n};"
+	},
 	{
 		name: "SessionAttachmentRequest",
 		declaration: "export interface SessionAttachmentRequest {\n    readonly sessionId: SessionId;\n    readonly attachmentId: AttachmentIdType;\n}"
@@ -6812,10 +7022,6 @@ const TYPE_API = [
 		name: "SessionCancelValue",
 		declaration: "export interface SessionCancelValue {\n    readonly accepted: true;\n}"
 	},
-	{
-		name: "SessionChunkRun",
-		declaration: "export interface SessionChunkRun {\n    readonly type: 'chunks';\n    readonly event: ChunkRowEvent;\n}"
-	},
 	{
 		name: "SessionControlBaseline",
 		declaration: "export interface SessionControlBaseline {\n    readonly queues: Readonly<Record<SessionId, readonly SessionQueuedItem[]>>;\n    readonly jobs: Readonly<Record<SessionId, readonly SessionJob[]>>;\n    readonly projections: Readonly<Record<SessionId, SessionProjectionBaseline>>;\n}"
@@ -6842,7 +7048,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SessionEventMap",
-		declaration: "export interface SessionEventMap {\n    'turn/start': {\n        turn: number;\n    };\n    'turn/end': {\n        turn: number;\n        reason: TurnEndReason;\n    };\n    'step/start': {\n        turn: number;\n        step: number;\n    };\n    'step/end': {\n        turn: number;\n        step: number;\n    };\n    'user/message': UserMessage;\n    'assistant/chunk': {\n        turn: number;\n        step: number;\n        chunk: StreamChunk;\n    };\n    'assistant/message': {\n        turn: number;\n        step: number;\n        message: AssistantMessage;\n        usage?: TokenUsage;\n        interrupted?: true;\n    };\n    'tool/call': {\n        turn: number;\n        step: number;\n        callId: ToolCallId;\n        name: string;\n        arguments: string;\n    };\n    'tool/result': {\n        turn: number;\n        step: number;\n        message: ToolResultMessage;\n        error?: {\n            name: string;\n            code: string;\n        };\n        meta?: JsonValue;\n    };\n    'request/header': {\n        header: EpochHeader;\n        reason: RequestHeaderReason;\n        startsSeries?: true;\n    };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n}"
+		declaration: "export interface SessionEventMap {\n    'turn/start': {\n        turn: number;\n    };\n    'turn/end': {\n        turn: number;\n        reason: TurnEndReason;\n    };\n    'step/start': {\n        turn: number;\n        step: number;\n    };\n    'step/end': {\n        turn: number;\n        step: number;\n    };\n    'user/message': UserMessage;\n    'assistant/message': {\n        turn: number;\n        step: number;\n        message: AssistantMessage;\n        stream: AssistantStreamRecord[];\n        usage?: TokenUsage;\n        interrupted?: true;\n    };\n    'assistant/attempt': {\n        turn: number;\n        step: number;\n        stream: AssistantStreamRecord[];\n    };\n    'tool/call': {\n        turn: number;\n        step: number;\n        callId: ToolCallId;\n        name: string;\n        arguments: string;\n    };\n    'tool/result': {\n        turn: number;\n        step: number;\n        message: ToolResultMessage;\n        error?: {\n            name: string;\n            code: string;\n        };\n        meta?: JsonValue;\n    };\n    'request/header': {\n        header: EpochHeader;\n        reason: RequestHeaderReason;\n        startsSeries?: true;\n    };\n    'request/context': RequestContext;\n    'session/end-seed': {\n        inherited?: true;\n    };\n}"
 	},
 	{
 		name: "SessionEventMetadataFilter",
@@ -6876,10 +7082,6 @@ const TYPE_API = [
 		name: "SessionEventSearchRequest",
 		declaration: "export interface SessionEventSearchRequest {\n    sessionId: SessionId;\n    query: string;\n    filters?: readonly SessionEventMetadataFilter[];\n    limit?: number;\n    cursor?: SessionSearchCursor;\n}"
 	},
-	{
-		name: "SessionEventSuffix",
-		declaration: "export interface SessionEventSuffix extends SessionStorageMetadata {\n    readonly fromSeq: SessionLogOffset;\n    readonly events: readonly SessionEvent[];\n}"
-	},
 	{
 		name: "SessionEventSurface",
 		declaration: "export type SessionEventSurface = 'current' | 'shadowed' | 'log-only';"
@@ -6906,11 +7108,11 @@ const TYPE_API = [
 	},
 	{
 		name: "SessionFollowFrame",
-		declaration: "export type SessionFollowFrame = {\n    readonly type: 'snapshot';\n    readonly header: SessionWireHeader;\n    readonly cursor: number;\n    readonly records: readonly SessionHistoryRecord[];\n    readonly hasMore: boolean;\n    readonly projections: SessionProjectionBaseline;\n} | SessionEventEntry;"
+		declaration: "export type SessionFollowFrame = {\n    readonly type: 'snapshot';\n    readonly header: SessionWireHeader;\n    readonly cursor: number;\n    readonly records: readonly SessionHistoryRecord[];\n    readonly hasMore: boolean;\n    readonly projections: SessionProjectionBaseline;\n    readonly assistantStream?: SessionAssistantStreamBaseline;\n} | SessionEventEntry | {\n    readonly type: 'assistant-stream';\n    readonly frame: SessionAssistantStreamFrame;\n};"
 	},
 	{
 		name: "SessionFollowRequest",
-		declaration: "export interface SessionFollowRequest {\n    readonly address: SessionAddress;\n    readonly maxMessages?: number;\n}"
+		declaration: "export interface SessionFollowRequest {\n    readonly address: SessionAddress;\n    readonly maxMessages?: number;\n    readonly assistantStream?: true;\n}"
 	},
 	{
 		name: "SessionForkRequest",
@@ -6924,13 +7126,33 @@ const TYPE_API = [
 		name: "SessionForkValue",
 		declaration: "export interface SessionForkValue {\n    readonly sessionId: SessionId;\n}"
 	},
+	{
+		name: "SessionHandle",
+		declaration: "export interface SessionHandle extends AsyncDisposable {\n    readonly id: SessionId;\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    readonly access: SessionAccess;\n    read(offset?: number, length?: number, options?: SessionHandleReadOptions): Promise<SessionHandleReadResult>;\n    append(events: readonly SessionEvent[], options?: SessionHandleAppendOptions): Promise<void>;\n    flush(options?: SessionHandleFlushOptions): Promise<void>;\n    close(): Promise<void>;\n}"
+	},
+	{
+		name: "SessionHandleAppendOptions",
+		declaration: "export interface SessionHandleAppendOptions {\n    readonly signal?: AbortSignal;\n}"
+	},
+	{
+		name: "SessionHandleFlushOptions",
+		declaration: "export interface SessionHandleFlushOptions {\n    readonly signal?: AbortSignal;\n}"
+	},
+	{
+		name: "SessionHandleReadOptions",
+		declaration: "export interface SessionHandleReadOptions {\n    readonly signal?: AbortSignal;\n}"
+	},
+	{
+		name: "SessionHandleReadResult",
+		declaration: "export interface SessionHandleReadResult {\n    readonly eventState: SessionSeedEventState;\n    readonly events: readonly SessionEvent[];\n}"
+	},
 	{
 		name: "SessionHeader",
-		declaration: "export interface SessionHeader {\n    readonly version: number;\n    readonly id: SessionId;\n    readonly createdAt: number;\n    readonly cwd?: string;\n    readonly parentSession?: SessionId;\n    readonly isSeeded: boolean;\n    readonly origin?: 'subagent';\n    readonly delegationDepth?: number;\n    readonly agentPreset?: string;\n}"
+		declaration: "export interface SessionHeader {\n    readonly version: typeof SESSION_FORMAT_VERSION;\n    readonly id: SessionId;\n    readonly createdAt: number;\n    readonly cwd?: string;\n    readonly parentSession?: SessionId;\n    readonly isSeeded: boolean;\n    readonly origin?: 'subagent';\n    readonly delegationDepth?: number;\n    readonly agentPreset?: string;\n}"
 	},
 	{
 		name: "SessionHistoryRecord",
-		declaration: "export type SessionHistoryRecord = SessionEventEntry | SessionChunkRun;"
+		declaration: "export type SessionHistoryRecord = SessionEventEntry;"
 	},
 	{
 		name: "SessionId",
@@ -6960,10 +7182,6 @@ const TYPE_API = [
 		name: "SessionListValue",
 		declaration: "export interface SessionListValue {\n    readonly items: readonly SessionSummary[];\n}"
 	},
-	{
-		name: "SessionLocation",
-		declaration: "export interface SessionLocation {\n    readonly kind: string;\n    readonly path: string;\n}"
-	},
 	{
 		name: "SessionLogOffset",
 		declaration: "export type SessionLogOffset = BrandedNumber<'SessionLogOffset'>;"
@@ -6974,7 +7192,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SessionObservation",
-		declaration: "export interface SessionObservation extends Disposable {\n    readonly source: 'live' | 'prepared';\n    readonly header: SessionHeader;\n    readonly events: readonly SessionEvent[];\n    readonly inheritedEventCount: SessionLogOffsetType;\n    readonly cursor: SessionSeqCursor;\n    readonly revision?: SessionPersistenceRevision;\n    readonly projections?: ProjectionSnapshot;\n    retain(): SessionObservation;\n}"
+		declaration: "export interface SessionObservation extends Disposable {\n    readonly source: 'live' | 'prepared';\n    readonly header: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffsetType;\n    readonly events: readonly SessionEvent[];\n    readonly cursor: SessionSeqCursor;\n    readonly revision?: SessionPersistenceRevision;\n    readonly projections?: ProjectionSnapshot;\n    retain(): SessionObservation;\n}"
 	},
 	{
 		name: "SessionObservationOptions",
@@ -6996,21 +7214,29 @@ const TYPE_API = [
 		name: "SessionPageRequest",
 		declaration: "export interface SessionPageRequest {\n    readonly address: SessionAddress;\n    readonly throughSeq: number;\n    readonly beforeSeq?: number;\n    readonly maxMessages?: number;\n}"
 	},
+	{
+		name: "SessionPersistenceCreateOptions",
+		declaration: "export interface SessionPersistenceCreateOptions {\n    readonly signal?: AbortSignal;\n    readonly inheritedEventCount?: SessionLogOffset;\n}"
+	},
+	{
+		name: "SessionPersistenceListOptions",
+		declaration: "export interface SessionPersistenceListOptions {\n    readonly signal?: AbortSignal;\n}"
+	},
+	{
+		name: "SessionPersistenceOpenOptions",
+		declaration: "export interface SessionPersistenceOpenOptions {\n    readonly signal?: AbortSignal;\n}"
+	},
 	{
 		name: "SessionPersistenceRevision",
 		declaration: "export type SessionPersistenceRevision = Branded<'SessionPersistenceRevision'>;"
 	},
 	{
 		name: "SessionPersistenceSnapshot",
-		declaration: "export interface SessionPersistenceSnapshot {\n    header: SessionHeader;\n    revision: SessionPersistenceRevision;\n}"
-	},
-	{
-		name: "SessionPreparation",
-		declaration: "export class SessionPreparation implements Disposable {\n    readonly session: Session;\n    static create(session: Session, options?: SessionPreparationOptions): SessionPreparation;\n    [Symbol.dispose](): void;\n}"
+		declaration: "export interface SessionPersistenceSnapshot {\n    readonly header: SessionHeader;\n    readonly revision: SessionPersistenceRevision;\n    readonly eventCount?: number;\n    readonly sizeBytes?: number;\n}"
 	},
 	{
-		name: "SessionPreparationOptions",
-		declaration: "export interface SessionPreparationOptions {\n    readonly release?: () => void;\n}"
+		name: "SessionPersistenceStatOptions",
+		declaration: "export interface SessionPersistenceStatOptions {\n    readonly signal?: AbortSignal;\n}"
 	},
 	{
 		name: "SessionProjectionBaseline",
@@ -7052,10 +7278,6 @@ const TYPE_API = [
 		name: "SessionQueuedItem",
 		declaration: "export interface SessionQueuedItem {\n    readonly id: MessageId;\n    readonly placement: 'queued' | 'steering' | 'context';\n    readonly rpcId?: SessionRequestId;\n    readonly message: {\n        readonly id: MessageId;\n        readonly content: readonly JsonValue[];\n    };\n}"
 	},
-	{
-		name: "SessionRawArtifact",
-		declaration: "export interface SessionRawArtifact extends SessionStorageMetadata {\n    readonly filename: string;\n    readonly content: string;\n}"
-	},
 	{
 		name: "SessionRecord",
 		declaration: "export interface SessionRecord {\n    header: SessionHeader;\n    live: boolean;\n    persisted: boolean;\n}"
@@ -7116,6 +7338,10 @@ const TYPE_API = [
 		name: "SessionSearchValue",
 		declaration: "export interface SessionSearchValue {\n    readonly items: readonly SessionSearchItem[];\n    readonly hasMore: boolean;\n}"
 	},
+	{
+		name: "SessionSeedEventState",
+		declaration: "export type SessionSeedEventState = 'detached' | 'shared-frozen';"
+	},
 	{
 		name: "SessionSelectModelRequest",
 		declaration: "export interface SessionSelectModelRequest extends ModelSelection {\n    readonly sessionId: SessionId;\n}"
@@ -7222,7 +7448,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SessionWireHeader",
-		declaration: "export interface SessionWireHeader {\n    readonly version: number;\n    readonly id: SessionId;\n    readonly createdAt: number;\n    readonly cwd?: string;\n    readonly parentSession?: SessionId;\n    readonly seedLength?: number;\n    readonly origin?: 'subagent';\n    readonly delegationDepth?: number;\n    readonly agentPreset?: string;\n}"
+		declaration: "export interface SessionWireHeader {\n    readonly version: number;\n    readonly id: SessionId;\n    readonly createdAt: number;\n    readonly cwd?: string;\n    readonly parentSession?: SessionId;\n    readonly isSeeded: boolean;\n    readonly origin?: 'subagent';\n    readonly delegationDepth?: number;\n    readonly agentPreset?: string;\n}"
 	},
 	{
 		name: "SessionWireSurfaceOp",
@@ -7394,7 +7620,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SpillSource",
-		declaration: "export interface SpillSource {\n    toolName: string;\n    callId: ToolCallId;\n    label: string;\n}"
+		declaration: "export type SpillSource = {\n    kind: 'tool';\n    toolName: string;\n    callId: ToolCallId;\n    label: string;\n} | {\n    kind: 'session-reference';\n    sessionId: SessionId;\n    label: string;\n};"
 	},
 	{
 		name: "StorageBackend",
@@ -7446,7 +7672,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SubagentPromptRequest",
-		declaration: "export interface SubagentPromptRequest {\n    readonly requestId: SubagentPromptRequestId;\n    readonly parentSessionId: SessionId;\n    readonly childSessionId: SessionId;\n    readonly mode: 'continuable';\n    readonly content: readonly PromptContentPart[];\n    readonly clientTimeZone?: string;\n}"
+		declaration: "export interface SubagentPromptRequest {\n    readonly requestId: SubagentPromptRequestId;\n    readonly parentSessionId: SessionId;\n    readonly childSessionId: SessionId;\n    readonly mode: 'continuable';\n    readonly delivery: 'queue' | 'steer';\n    readonly content: readonly PromptContentPart[];\n    readonly clientTimeZone?: string;\n}"
 	},
 	{
 		name: "SubagentPromptRequestId",
@@ -7506,7 +7732,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SubprocessHandle",
-		declaration: "export interface SubprocessHandle {\n    readonly pid: number;\n    readonly stdin: Writable | undefined;\n    readonly stdout: Readable | undefined;\n    readonly stderr: Readable | undefined;\n    readonly collected: SubprocessCollectedOutputs;\n    readonly done: Promise<SubprocessOutcome>;\n    terminate(): void;\n    waitForExit(signal?: AbortSignal): Promise<boolean>;\n}"
+		declaration: "export interface SubprocessHandle {\n    readonly stdin: Writable | undefined;\n    readonly stdout: Readable | undefined;\n    readonly stderr: Readable | undefined;\n    readonly collected: SubprocessCollectedOutputs;\n    readonly done: Promise<SubprocessOutcome>;\n    terminate(): void;\n    waitForExit(signal?: AbortSignal): Promise<boolean>;\n}"
 	},
 	{
 		name: "SubprocessOutcome",
@@ -7562,7 +7788,7 @@ const TYPE_API = [
 	},
 	{
 		name: "SurfaceIntent",
-		declaration: "export interface SurfaceIntent {\n    surfaceOp: SurfaceOp;\n    sourceEventSeqs?: SessionSeq[];\n}"
+		declaration: "export type SurfaceIntent<T extends SurfaceEventType = SurfaceEventType> = {\n    surfaceOp: SurfaceOp;\n} & (T extends 'assistant/message' ? {\n    sourceEventSeqs?: never;\n} : {\n    sourceEventSeqs?: SessionSeq[];\n});"
 	},
 	{
 		name: "SurfaceOp",

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@deepseek-ai/dsh-tool-cordis",
   "description": "Self-referential cordis toolset: inspect the live runtime, mount and dispose model-written plugins",
-  "version": "0.1.2-alpha.5",
+  "version": "0.1.3-alpha.2",
   "publishConfig": {
     "access": "public"
   },
@@ -27,24 +27,24 @@
   ],
   "license": "MIT",
   "peerDependencies": {
-    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-session": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.5",
+    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-scope": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
     "@deepseek-ai/cordis": "^4.0.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
-    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-llm": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-scope": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-session": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-system-prompt": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-agent": "^0.1.2-alpha.5",
-    "@deepseek-ai/dsh-tools": "^0.1.2-alpha.5",
+    "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-scope": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-cordis-host-runner": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-system-prompt": "^0.1.3-alpha.2",
+    "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
     "@deepseek-ai/cordis": "^4.0.2"
   }
 }