@deepseek-ai/dsh-tool-cordis 0.2.1-alpha.1 → 0.2.1-alpha.3

package/lib/types/api-catalog.js

@@ -135,7 +135,7 @@ export const SERVICE_API = [
             },
             {
                 signature: '@Remote(\'select\') async select(agent: Agent, agentPreset: string): Promise<string>',
-                description: 'Select a preset before a session starts its first turn.',
+                description: 'Select a preset before a session starts its first turn. A Session whose log records the preset and whose Agent runs its current revision keeps its composition; nothing is logged or announced.',
                 parameters: [{ name: 'agent', description: 'Target Agent.' }, { name: 'agentPreset', description: 'Requested identity.' }],
                 returns: 'Committed preset identity.',
             },
@@ -274,9 +274,9 @@ export const SERVICE_API = [
             },
             {
                 signature: 'async sendMessage(caller: Agent, request: SendTeamMessageRequest): Promise<SendTeamMessageResult>',
-                description: 'Queue one durable peer message, then attempt immediate delivery.',
-                parameters: [{ name: 'caller', description: 'exact live sending Team member.' }, { name: 'request', description: 'target name, content, and pre-queue cancellation.' }],
-                returns: 'durable message identity and immediate-delivery observation.',
+                description: 'Steer one peer message into the target inbox or reject the attempt.',
+                parameters: [{ name: 'caller', description: 'exact live sending Team member.' }, { name: 'request', description: 'target name, content, and cancellation before acceptance.' }],
+                returns: 'accepted inbox identity; acceptance follows normal Agent persistence and does not await model processing.',
             },
             {
                 signature: 'async createTask(caller: Agent, request: CreateTeamTaskRequest): Promise<TeamTaskView>',
@@ -686,8 +686,13 @@ export const SERVICE_API = [
                 parameters: [],
             },
             {
-                signature: 'readonly operator: PeerScope',
-                description: 'The operator Peer every admitted request speaks for; its scope lives as long as Connection.',
+                signature: 'readonly browserPeer: PeerScope',
+                description: 'The owner Peer every authenticated browser connection shares.',
+                parameters: [],
+            },
+            {
+                signature: 'readonly allowsRemoteAuthorities: boolean',
+                description: 'Whether this deployment accepts authorities beyond loopback: true only when a validated `trustedHosts` entry names a non-loopback hostname.',
                 parameters: [],
             },
             {
@@ -704,13 +709,25 @@ export const SERVICE_API = [
             },
             {
                 signature: 'admit(request: ConnectionTrustRequest): PeerAdmission',
-                description: 'Admit one request: it passes requestRejection and speaks for the operator, or it is refused with that status.',
+                description: 'Admit an HTTP request against its signed browser or API credential and live Peer.',
                 parameters: [{ name: 'request', description: 'request headers from the HTTP or upgrade request.' }],
-                returns: 'the operator Peer, or the rejection status.',
+                returns: 'the credential\'s Peer, or the rejection status.',
+            },
+            {
+                signature: 'createPeer(options: { readonly principal: Principal; readonly interactions?: \'answer\' | \'none\' }): PeerScope',
+                description: 'Create an independent in-process Peer, disposed with the Context that read `ctx.connection`.',
+                parameters: [{ name: 'options', description: 'fixed principal and optional interaction participation (default `answer`).' }],
+                returns: 'a new Peer distinct from every other Peer.',
+            },
+            {
+                signature: 'admitConnection(request: ConnectionTrustRequest): ConnectionAdmission',
+                description: 'Claim a physical socket for an API Peer; browser sockets share their owner Peer.',
+                parameters: [{ name: 'request', description: 'authenticated upgrade request headers.' }],
+                returns: 'the Peer and idempotent release, or 409 for duplicate API ownership. The carrier releases on socket termination or failed upgrade; release removes API admission synchronously without cancelling independent HTTP calls.',
             },
             {
                 signature: 'authorizeIndex(request: ConnectionIndexRequest, response: ConnectionIndexResponse): boolean',
-                description: 'Authenticate one frontend index request, owning a token redirect or 401.',
+                description: 'Authenticate one frontend index request, owning a token redirect or 401. The cookie this mints is `Secure` when the mounted Web carrier serves TLS, which only that listener\'s protocol decides.',
                 parameters: [{ name: 'request', description: 'root or configured-index HTTP request.' }, { name: 'response', description: 'response owned when the result is false.' }],
                 returns: 'true only when the frontend may serve index.html.',
             },
@@ -722,10 +739,29 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'cotTranslation',
+        summary: 'Optional reasoning translation delegates Session-bound storage to the translator.',
+        description: 'Optional reasoning translation delegates Session-bound storage to the translator.',
+        methods: [
+            {
+                signature: '@Remote async limits(signal: AbortSignal): Promise<CotTranslationSnapshot>',
+                description: 'Read accepted translation preferences and the current request limit without sending text.',
+                parameters: [{ name: 'signal', description: 'browser query cancellation or Remote contribution withdrawal.' }],
+                returns: 'authoritative preferences, eligible routes, and maximum UTF-16 text length per request.',
+            },
+            {
+                signature: '@Remote async translate(request: TranslationRequest, signal: AbortSignal): Promise<string>',
+                description: 'Translate one displayed fragment through the reader\'s selected provider.',
+                parameters: [{ name: 'request', description: 'original text and Session identity supplied by the Client; provider and explicit target language match accepted preferences, while auto uses the browser locale.' }, { name: 'signal', description: 'browser cancellation or Remote contribution withdrawal.' }],
+                returns: 'translated text; an uncached inactive Session joins ordinary GUI activation before retry. Failures omit the source and provider response. Cancellation stops this caller\'s wait, not shared activation.',
+            },
+        ],
+    },
     {
         key: 'credentials',
         summary: 'Abstract credential service over two key spaces that answer two questions.',
-        description: 'Abstract credential service over two key spaces that answer two questions.\n\nA CredentialRef answers "what is behind this environment-variable name", layered over the process environment, the provider-managed store, and `.env` files. One seam-wide rule binds that half: an empty stored value is absent everywhere — `resolve` skips it, `describe` reports it unconfigured — so a blank never masquerades as a configured secret.\n\nA CredentialKey answers "what credential does this plugin hold for this id". Nothing can layer here — an authorization grant has no environment to be read from — so presence of the record is the whole fact, and modifyRecord is the only write path because a correct write depends on the current value (a token refresh is read-decide-replace under one lock).',
+        description: 'Abstract credential service over two key spaces that answer two questions.\n\nA CredentialRef answers "what is behind this environment-variable name": the provider-managed store first, then ambient fallbacks such as the process environment and `.env` files. One seam-wide rule binds that half: an empty stored value is absent everywhere — `resolve` skips it, `describe` reports it unconfigured — so a blank never masquerades as a configured secret.\n\nA CredentialKey answers "what credential does this plugin hold for this id". Nothing can layer here — an authorization grant has no environment to be read from — so presence of the record is the whole fact, and modifyRecord is the only write path because a correct write depends on the current value (a token refresh is read-decide-replace under one lock).',
         methods: [
             {
                 signature: 'abstract resolve(ref: CredentialRef): Promise<ResolvedCredential | undefined>',
@@ -741,12 +777,12 @@ export const SERVICE_API = [
             },
             {
                 signature: 'abstract set(ref: CredentialRef, value: string): Promise<void>',
-                description: 'Durably store one value in the provider-managed writable source. Rejects while a read-only source shadows the reference — the write would appear to succeed while resolution keeps returning the shadowing value — and rejects an empty value (use unset).',
+                description: 'Durably store one value in the provider-managed writable source. The stored value takes precedence over ambient fallbacks, and empty values are rejected (use unset).',
                 parameters: [{ name: 'ref', description: 'the reference to store.' }, { name: 'value', description: 'the non-empty secret value.' }],
             },
             {
                 signature: 'abstract unset(ref: CredentialRef): Promise<void>',
-                description: 'Remove one reference from the provider-managed writable source; removing an absent reference is a no-op. Rejects while a read-only source shadows the reference, like set.',
+                description: 'Remove one reference from the provider-managed writable source; removing an absent reference is a no-op. Ambient fallback layers may become effective again after removal.',
                 parameters: [{ name: 'ref', description: 'the reference to remove.' }],
             },
             {
@@ -819,7 +855,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'abstract getProfile(client: AccountClientMetadata): Promise<AccountDetails[\'profile\'] | null>',
-                description: 'Query Platform profile independently of wallet balances. A ready result whose stable profile ID first becomes available or changes notifies watch consumers, so identity consumers re-read getPlatformSession; repeated IDs stay silent.',
+                description: 'Query Platform profile independently of wallet balances. A ready result whose stable profile ID first becomes available or changes notifies identity-enabled watch consumers, so they re-read getPlatformSession; repeated IDs stay silent.',
                 parameters: [{ name: 'client', description: 'identity of the requesting UI for this call.' }],
                 returns: 'profile outcome, or null if signed out or the grant changed during the query.',
             },
@@ -860,9 +896,9 @@ export const SERVICE_API = [
                 returns: 'the signed-out state after local removal; remote failures never restore the grant.',
             },
             {
-                signature: 'abstract watch(signal: AbortSignal): AsyncIterable<AccountView>',
+                signature: 'abstract watch(signal: AbortSignal, includeIdentityChanges?: boolean): AsyncIterable<AccountView>',
                 description: 'Subscribe to snapshots including a complete initial state.',
-                parameters: [{ name: 'signal', description: 'subscription lifetime; ending it never cancels login.' }],
+                parameters: [{ name: 'signal', description: 'subscription lifetime; ending it never cancels login.' }, { name: 'includeIdentityChanges', description: 'also notify when cached Platform identity changes; defaults to false.' }],
                 returns: 'complete snapshots as account state changes.',
             },
             {
@@ -904,7 +940,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'async prepare(request: DeepSeekLlmApiExtensionRequest): Promise<PreparedDeepSeekLlmApiExtensions>',
-                description: 'Prepare every currently registered field from one immutable base request. Preparation failures reject before HTTP dispatch. Field values are cloned and frozen; providers retain no mutable alias to the outgoing request.',
+                description: 'Prepare every currently registered field from one immutable base request. A provider whose preparation throws, or whose value cannot be cloned, is omitted from this request; the first such failure per field is logged. Only cancellation rejects. Field values are cloned and frozen; providers retain no mutable alias to the outgoing request.',
                 parameters: [{ name: 'request', description: 'exact serialized request facts before extension fields.' }],
                 returns: 'detached fields and their idempotent joint acceptance transaction.',
             },
@@ -1203,6 +1239,13 @@ export const SERVICE_API = [
                 parameters: [{ name: 'url', description: 'Module URL.' }],
                 returns: 'Linked module URLs, or an empty list for an uncached module.',
             },
+            {
+                signature: 'async reconcileProfile(requiredIds: readonly string[] = []): Promise<ProfileReconciliation>',
+                description: 'Recompose the profile from its manifest and patch files, replacing running plugins whose loaded files below the profile directory or its linked package targets changed on disk, and publishing its runtime resolution. Changed modules are evicted and the Loader entries running them stop; app-boot\'s recomposeProfile then publishes the resolution, applies the generation, starts the stopped entries with the current files and configuration, imports entries whose import failed again, and judges activation. Afterwards the modules below the mappings the recomposition dropped are evicted, so a removed or deselected package is imported afresh when it returns. Callers run inside runExclusive.',
+                parameters: [{ name: 'requiredIds', description: 'Entry ids whose inactive state is reported as a failure even when it predates this call.' }],
+                returns: 'Inactive-entry diagnostics, the changed modules that load after a restart, and a profile-wide restart reason.',
+                throws: ['The patch read, publication, preparation, apply, or activation failure of the recomposition, including a replacement plugin that fails to load or start, whose previous code no longer runs.'],
+            },
         ],
     },
     {
@@ -1261,7 +1304,7 @@ export const SERVICE_API = [
                 signature: 'abstract start(spec: JobSpec): JobId',
                 description: 'Preflight access, validation, owner cleanup, and implementation-owned admission before starting and atomically registering work. Any preflight rejection leaves no job id or execution resource. A throwing starter leaves nothing registered; after it returns, registration cannot fail.',
                 parameters: [{ name: 'spec', description: 'job identity, owner, output sources, and synchronous starter.' }],
-                returns: 'the registry-issued `<kind>-N` id.',
+                returns: 'the registry-issued `<kind>-<short-uuid>` id.',
             },
             {
                 signature: 'abstract list(caller?: SessionId): JobView[]',
@@ -1372,6 +1415,12 @@ export const SERVICE_API = [
                 parameters: [{ name: 'provider', description: 'provider route named by a request header.' }, { name: 'model', description: 'exact model id named by the same header.' }],
                 returns: 'the owning adapter\'s image pricing for the route, when declared.',
             },
+            {
+                signature: 'imageRequestTarget(provider: string, model: string, image: ImageAttachmentRef): ImageRequestTarget',
+                description: 'Resolve the image projection for an exact registered model route.',
+                parameters: [{ name: 'provider', description: 'registered provider route.' }, { name: 'model', description: 'exact model id.' }, { name: 'image', description: 'normalized image reference.' }],
+                returns: 'dimensions and byte target used by the adapter\'s request serializer.',
+            },
             {
                 signature: 'fileRequestText(ref: FileAttachmentRef): string',
                 description: 'Resolve the exact text one durable file occurrence contributes to every provider request in the current execution environment.',
@@ -1397,9 +1446,9 @@ export const SERVICE_API = [
                 returns: 'a detached config only when a default must be materialized.',
             },
             {
-                signature: 'async prepareCall(config: LlmCallConfig, signal?: AbortSignal): Promise<PreparedLlmCall>',
-                description: 'Resolve one call under its current adapter registration. The returned one-shot handle keeps that registration across header logging and dispatch, so HMR cannot combine one adapter\'s capability result with another adapter.',
-                parameters: [{ name: 'config', description: 'provider/model route and optional request controls.' }, { name: 'signal', description: 'optional cancellation for adapter-owned capability lookup.' }],
+                signature: 'async prepareCall( config: LlmCallConfig, signal?: AbortSignal, configure?: ConfigureCall, ): Promise<PreparedLlmCall>',
+                description: 'Resolve one call under its current adapter registration. The returned one-shot handle keeps that registration across header logging and dispatch, so HMR cannot combine one adapter\'s capability result with another adapter. An optional synchronous callback selects concrete controls using captured model metadata. Defaults and validation apply to its result. Callback failures and cancellation reject preparation before dispatch.',
+                parameters: [{ name: 'config', description: 'provider/model route and optional concrete request controls.' }, { name: 'signal', description: 'optional cancellation for adapter-owned capability lookup.' }, { name: 'configure', description: 'pure control selection, called once before defaults and validation.' }],
                 returns: 'a prepared config and its registration-bound stream entry point.',
             },
             {
@@ -1605,7 +1654,7 @@ export const SERVICE_API = [
             },
             {
                 signature: '@Remote listBundles(): Promise<BundleInfo[]>',
-                description: 'Read the profile\'s installed bundles, the bundles this dsh installation supplies, and the selected names that are not bundles. A dependency without a bundle patch is listed, as a `not-bundle` problem, only while it is selected.',
+                description: 'Read installed, installation-provided, and offline Official catalog bundles, plus selected non-bundle names. A dependency without a bundle patch is listed, as a `not-bundle` problem, only while it is selected.',
                 parameters: [],
                 returns: 'Package versions, manifest descriptions, the installable spec of profile dependencies, rows, optional display metadata, activation selections, whether the installation offers the bundle, and removal availability.',
             },
@@ -1636,7 +1685,7 @@ export const SERVICE_API = [
             {
                 signature: '@Remote installBundle(spec: string, options?: InstallBundleOptions): Promise<ChangeResult>',
                 description: 'Install a package using the same pnpm implementation as dsh plugin. GitHub repositories get a connection check bounded by githubConnectionTimeoutMs before pnpm starts; only network failures or timeouts stop installation, while pnpm owns authentication and transport fallback. A run that fails, is cancelled, or adds a package without a bundle patch restores `package.json` and `pnpm-lock.yaml` as they were; downloaded files can stay.',
-                parameters: [{ name: 'spec', description: 'One package spec, including local paths relative to the invocation directory.' }, { name: 'options', description: 'Whether to activate the installed bundle (defaults to true), the request id a cancellation names, the pending build scripts to allow for this profile before pnpm runs, and the registry asked first.' }],
+                parameters: [{ name: 'spec', description: 'One package spec, including local paths relative to the invocation directory.' }, { name: 'options', description: 'Whether to activate the installed bundle (defaults to true), the request id a cancellation names, the pending build scripts to allow, whether to save an exact dependency, and the registry asked first.' }],
                 returns: 'Package-manager diagnostics, the registries asked, and the observed activation outcome.',
             },
             {
@@ -1740,7 +1789,7 @@ export const SERVICE_API = [
     {
         key: 'ptcRuntime',
         summary: 'Registers one `ctx.ptcRuntime` implementation.',
-        description: 'Registers one `ctx.ptcRuntime` implementation. Program, budget, abort, and substrate failures resolve in PtcRunResult; only Service Definition contract misuse rejects. Implementations bridge structured-cloneable bindings, materialize each declared namespace rejection class, treat programs as hostile peers, isolate runs from one another, and terminate and await in-flight runs during disposal.',
+        description: 'Registers one `ctx.ptcRuntime` implementation. Program, budget, abort, and substrate failures resolve in PtcRunResult; only Service Definition contract misuse rejects. Implementations bridge structured-cloneable bindings, materialize each declared namespace rejection class, treat programs as hostile peers, isolate distinct state owners, and terminate and await in-flight runs during disposal.',
         methods: [
             {
                 signature: 'abstract readonly language: string',
@@ -1752,6 +1801,13 @@ export const SERVICE_API = [
                 description: 'The execution substrate, as a lowercase identifier. Informational, not gating — a descriptor so deployments and diagnostics can tell backends apart, not a security claim. Well-known values: `\'worker-thread\'`, `\'process\'`, `\'container\'`.',
                 parameters: [],
             },
+            {
+                signature: 'release(owner: object): Promise<void>',
+                description: 'Release an owner\'s retained environment and await its execution resources. Stateless providers have no retained resources to release.',
+                parameters: [{ name: 'owner', description: 'The exact object supplied as the request\'s state owner.' }],
+                returns: 'Completion after all owned execution resources have been released.',
+                throws: ['When managed resource cleanup fails.'],
+            },
             {
                 signature: 'abstract resolve(request: PtcRunRequest): PtcRunSpec',
                 description: 'Resolve supported options and provider defaults before execution.',
@@ -1767,6 +1823,49 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'remoteAccess',
+        summary: 'Registry of access policies, the Gateway\'s access decisions, list filtering, and the per-Peer access snapshot.',
+        description: 'Registry of access policies, the Gateway\'s access decisions, list filtering, and the per-Peer access snapshot. Every composition that mounts the Gateway mounts this service too.',
+        methods: [
+            {
+                signature: 'registerPolicy<K extends Exclude<keyof PrincipalMap, \'owner\'>>(kind: K, policy: RemoteAccessPolicy<PrincipalMap[K]>): () => void',
+                description: 'Register the policy of one non-owner principal kind in the caller\'s fiber; open snapshots are recomputed on registration and removal.',
+                parameters: [{ name: 'kind', description: 'the principal kind the policy serves; never `owner`.' }, { name: 'policy', description: 'business-owned bindings and refusal reasons for principals of `kind`.' }],
+                returns: 'disposer removing this policy.',
+                throws: ['Error when `kind` already has a policy.'],
+            },
+            {
+                signature: 'invalidate(principal?: Principal): void',
+                description: 'Report that the bindings or condition answers for `principal` may have changed. Business packages call this on every grant, revocation, mode change, and expiry; open snapshots re-push, and the next failure of each policy is logged again.',
+                parameters: [{ name: 'principal', description: 'affected principal; omitted for every principal.' }],
+            },
+            {
+                signature: 'decide(request: RemoteAccessRequest<Principal>): RemoteAccessDecision',
+                description: 'Gateway-only: decide one request whose resources the Gateway resolved. The owner is allowed, and so is `remoteAccess/follow`: every Peer reads its own snapshot. Otherwise the action is allowed only when, on every listed resource, some binding of the principal\'s policy names that resource, has a role listing the action, and has no condition or a condition that allows. `bindings()` is called once per decision.',
+                parameters: [{ name: 'request', description: 'the caller or recipient, the action, the resources it touches, and a call\'s arguments.' }],
+                returns: '`allow`; or `deny` with `no-allow` when the principal kind has no policy, the first refusing condition\'s reason on the first resource no binding allows, else `explain()`\'s reason, else `no-allow`; `policy-failed` when `bindings()`, a condition, or `explain()` throws, logged once per policy until the next `invalidate()`. The Gateway throws `remote-access/denied` for a denied call and drops a denied event.',
+            },
+            {
+                signature: 'allows(resource: RemoteAccessResource): boolean',
+                description: 'Filter items inside a Remote method. The invocation is read from the Context that accessed this service, so call it as `this.ctx.remoteAccess.allows(resource)` from the Remote method. Each check reads the policy\'s bindings again, so a long-running stream sees binding changes from the next check on.',
+                parameters: [{ name: 'resource', description: 'resource of one result item.' }],
+                returns: 'true for the owner and outside a Remote call; otherwise whether the invocation\'s endpoint action is allowed on `resource` without call arguments, false when the policy is absent or fails.',
+            },
+            {
+                signature: 'snapshotFor(principal: Principal): RemoteAccessBaseline',
+                description: 'The baseline a page opens with before its snapshot stream connects. A business package rendering a non-owner page assigns this value to REMOTE_ACCESS_SNAPSHOT_KEY after every index injection row, replacing the owner baseline the webServer index carries.',
+                parameters: [{ name: 'principal', description: 'the page\'s caller identity.' }],
+                returns: 'the owner baseline for the owner; otherwise the principal\'s current grants.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) async *follow(signal: AbortSignal): AsyncIterable<RemoteAccessFrame>',
+                description: 'Stream the calling Peer\'s access snapshot: one baseline, then `upsert` and `remove` frames after each `invalidate()` and each policy registration or removal that changes a grant. The owner receives only `{ owner: true }`. The generation ends when `signal` aborts or this service unloads, so a reloaded service starts every reader from a fresh baseline.',
+                parameters: [{ name: 'signal', description: 'generation cancellation.' }],
+                returns: 'the access frames of one generation.',
+            },
+        ],
+    },
     {
         key: 'sandbox',
         summary: 'Abstract process-sandbox service.',
@@ -1877,16 +1976,16 @@ export const SERVICE_API = [
                 returns: 'visible Session summaries ordered by activity.',
             },
             {
-                signature: '@Remote(\'search\') search(request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>',
-                description: 'Search visible Session content without resuming an Agent.',
+                signature: '@Remote(\'search\') async search(request: SessionSearchRequest, signal: AbortSignal): Promise<SessionSearchValue>',
+                description: 'Search visible Session content without resuming an Agent. A non-owner receives only the hits whose Session `allows()` admits; `hasMore` describes the bounded result before that filtering.',
                 parameters: [{ name: 'request', description: 'literal message-content query.' }, { name: 'signal', description: 'cancellation for list and search reads.' }],
                 returns: 'authorized bounded Session search results.',
             },
             {
                 signature: '@Remote(\'create\') create(request: SessionCreateRequest): Promise<SessionCreateValue>',
-                description: 'Create or idempotently adopt one ordinary Session.',
-                parameters: [{ name: 'request', description: 'requested identity, location, and Agent preset.' }],
-                returns: 'the Session identity and resolved preset when configured.',
+                description: 'Create one ordinary Session for a new conversation, reusing the named blank Session while it is reusable.',
+                parameters: [{ name: 'request', description: 'optional blank Session to reuse, location, and Agent preset.' }],
+                returns: 'the created or reused Session identity and its preset when configured.',
             },
             {
                 signature: '@Remote(\'selectModel\') selectModel(request: SessionSelectModelRequest): Promise<SessionSelectModelValue>',
@@ -1939,13 +2038,13 @@ export const SERVICE_API = [
                 returns: 'the accepted title and durable event sequence.',
             },
             {
-                signature: '@Remote(\'fork\') fork(request: SessionForkRequest): Promise<SessionForkValue>',
+                signature: '@Remote(\'fork\') async fork(request: SessionForkRequest): Promise<SessionForkValue>',
                 description: 'Fork one cold-readable exact event prefix into a new Session. An omitted boundary selects the latest completed-turn prefix; an open cut receives synthetic fork closers.',
-                parameters: [{ name: 'request', description: 'source Session and optional exact inclusive event boundary.' }],
+                parameters: [{ name: 'request', description: 'source Session, optional exact inclusive event boundary, and migration preflight choice.' }],
                 returns: 'the new Session identity.',
             },
             {
-                signature: '@Remote(\'prompt\') prompt(request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>',
+                signature: '@Remote(\'prompt\') async prompt(request: SessionPromptRequest, signal: AbortSignal): Promise<SessionPromptValue>',
                 description: 'Admit one prompt after explicitly resuming its Session.',
                 parameters: [{ name: 'request', description: 'Session identity, prompt content, source metadata, and delivery mode.' }, { name: 'signal', description: 'caller cancellation before prompt admission begins.' }],
                 returns: 'acknowledgement that the Agent accepted the prompt.',
@@ -1969,25 +2068,25 @@ export const SERVICE_API = [
                 returns: 'acknowledgement that cancellation was requested.',
             },
             {
-                signature: '@Remote(\'page\') page(request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>',
+                signature: '@Remote({ name: \'page\', resources: { session: addressedSession } }) page(request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>',
                 description: 'Read one cold-safe, message-aligned Session history page.',
                 parameters: [{ name: 'request', description: 'durable address, backward cursor, and page budget.' }, { name: 'signal', description: 'cancellation for persistence reads.' }],
                 returns: 'one chronological page.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
+                signature: '@Remote({ mode: \'stream\', resources: { session: addressedSession } }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
                 description: 'Follow one Session log from its opening or resume cursor.',
                 parameters: [{ name: 'request', description: 'durable address and last committed sequence already held by the caller.' }, { name: 'signal', description: 'cancellation owned by the Remote stream carrier.' }],
                 returns: 'a complete opening snapshot followed by gap-free durable event frames and optional cursorless assistant-stream frames.',
             },
             {
                 signature: '@Remote(\'projections\') async projections(request: SessionProjectionsRequest, signal: AbortSignal): Promise<SessionProjectionsValue>',
-                description: 'Read all registered projections without activating an Agent.',
-                parameters: [{ name: 'request', description: 'Session whose current values are required.' }, { name: 'signal', description: 'cancellation for the Session observation.' }],
-                returns: 'complete baseline, or null when the Session does not exist.',
+                description: 'Read exact projections, returning cached hints only when migration is required.',
+                parameters: [{ name: 'request', description: 'Session whose current values are required.' }, { name: 'signal', description: 'cancellation for the Session read.' }],
+                returns: 'a sequenced baseline, cached hints when migration is deferred, or null when absent.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) control(signal: AbortSignal): AsyncIterable<SessionControlFrame>',
+                signature: '@Remote({ mode: \'stream\' }) async *control(signal: AbortSignal): AsyncIterable<SessionControlFrame>',
                 description: 'Stream a complete live-control baseline followed by replacement frames.',
                 parameters: [{ name: 'signal', description: 'cancellation owned by the Remote stream carrier.' }],
                 returns: 'one complete baseline followed by live replacement frames.',
@@ -2435,7 +2534,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'register(provider: SessionTitleProvider): () => Promise<void>',
-                description: 'Register the sole optional title provider. Disposal aborts its pending and active work before another provider may register.',
+                description: 'Register the sole optional title provider. Disposal aborts its pending and active work; a replacement may register once disposal has started, and the closing provider\'s late results never commit.',
                 parameters: [{ name: 'provider', description: 'provider identity, cadence, and generation function.' }],
                 returns: 'exact Cordis effect disposer, which settles after active calls quiesce.',
             },
@@ -2814,8 +2913,8 @@ export const SERVICE_API = [
     },
     {
         key: 'subagents',
-        summary: 'Named provider registry with one-shot runs, durable discovery, and continuable-child operations.',
-        description: 'Named provider registry with one-shot runs, durable discovery, and continuable-child operations.',
+        summary: 'Named provider registry with managed activations, durable discovery, and local child messaging.',
+        description: 'Named provider registry with managed activations, durable discovery, and local child messaging.',
         methods: [
             {
                 signature: 'resolveMaxDepth(configured?: number | \'provider-managed\'): number | undefined',
@@ -2824,11 +2923,22 @@ export const SERVICE_API = [
                 returns: 'The numeric limit, or undefined when the provider owns depth enforcement.',
             },
             {
-                signature: 'async startContinuable(spec: ContinuableStartSpec): Promise<ContinuableStart>',
-                description: 'Establish one durable continuable child and deliver its initial prompt. Resolves when the child\'s inbox accepts that prompt, without waiting for the turn to start or for the message to reach the Session log; any earlier failure rejects with no ids and rolls back the child entirely.',
-                parameters: [{ name: 'spec', description: 'provider, delegation request, and caller cancellation.' }],
-                returns: 'the durable child id and the accepted prompt\'s message id.',
-                throws: ['when continuation services are unavailable or materialization fails.'],
+                signature: 'startActivation(spec: SubagentActivationSpec & { readonly childId: SessionId }): Promise<SubagentActivation & { readonly messageId: MessageId }>',
+                description: 'Start a local child under its reserved identity.',
+                parameters: [{ name: 'spec', description: 'local task, reserved child id, and result recipient.' }],
+                returns: 'activation with its accepted initial message id.',
+            },
+            {
+                signature: 'startActivation(spec: SubagentActivationSpec): Promise<SubagentActivation>',
+                description: 'Start a local or external child.',
+                parameters: [{ name: 'spec', description: 'task, backend, and result recipient.' }],
+                returns: 'activation with a message id only for local children.',
+            },
+            {
+                signature: 'async waitForChildren(parent: Agent): Promise<boolean>',
+                description: 'Join progressing descendants without cancelling them. Idle descendants whose inboxes require a later wake stay resident and do not delay host completion.',
+                parameters: [{ name: 'parent', description: 'the exact parent whose descendant work is observed.' }],
+                returns: 'whether work was joined; hosts recheck parent idle after true.',
             },
             {
                 signature: 'async sendMessage( sender: Agent, targetId: SessionId, content: ContentBlock[], options: SubagentSendMessageOptions, ): Promise<MessageId>',
@@ -2839,22 +2949,22 @@ export const SERVICE_API = [
             },
             {
                 signature: 'interrupt(targetSessionId: SessionId, authority: SubagentInterruptAuthority): void',
-                description: 'Interrupt one live continuable child\'s current turn under a human parent address or an exact live ancestor Agent. Fire-and-return: the cancel signal is issued before this returns, but the target may keep running until it observes the signal. Unclaimed pending inbox work, the Activation, and published descendants are preserved; claimed work is not requeued. Once the interrupted driver is idle, a waking send resumes the parked FIFO queue. An absent target — including a one-shot or unknown id — is an accepted no-op, as is a manager-less composition, which cannot own a live Activation.',
+                description: 'Interrupt one live child\'s current execution under a human parent address or an exact live ancestor Agent. Fire-and-return: the cancel signal is issued before this returns, but the target may keep running until it observes the signal. Unclaimed pending inbox work, the Activation, and published descendants are preserved; claimed work is not requeued. Once the interrupted Agent is idle, a waking send resumes the parked FIFO queue. External backends stop their single execution. An absent target is an accepted no-op, as is a manager-less composition, which cannot own a live Activation.',
                 parameters: [{ name: 'targetSessionId', description: 'the durable child session id to interrupt.' }, { name: 'authority', description: 'the human parent address or exact live ancestor Agent.' }],
                 throws: ['{SubagentError} `UNAUTHORIZED` when the authority does not own the live target.'],
             },
             {
-                signature: 'async drainContinuableDescendants(parents: readonly Agent[]): Promise<void>',
-                description: 'Close continuable admission below exact live parent Agents, stop only their visible descendant Activations synchronously, then await admitted scoped materializations and release those forests child-first. The scoped cutoff lasts until each exact parent leaves the registry; unrelated parent trees remain live.',
+                signature: 'async drainDescendants(parents: readonly Agent[]): Promise<void>',
+                description: 'Close subagent admission below exact live parent Agents, stop only their visible descendant Activations synchronously, then await admitted scoped materializations and release those forests child-first. The scoped cutoff lasts until each exact parent leaves the registry; unrelated parent trees remain live.',
                 parameters: [{ name: 'parents', description: 'exact host-owned parent Agents entering teardown.' }],
-                returns: 'once every retained descendant Activation released its `AgentHandle`.',
+                returns: 'once every retained descendant activation released its execution handle.',
                 throws: ['an aggregate error after all branches settle when any failed.'],
             },
             {
-                signature: 'async drainContinuableChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>',
-                description: 'Release selected resident continuable direct children of one exact live parent. Other children of the same parent remain admitted and resident. Absent targets and a manager-less composition are accepted no-ops.',
+                signature: 'async drainChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>',
+                description: 'Release selected resident direct children of one exact live parent. Other children of the same parent remain admitted and resident. Absent targets and a manager-less composition are accepted no-ops.',
                 parameters: [{ name: 'parent', description: 'exact live direct parent authorizing the selected release.' }, { name: 'childIds', description: 'durable direct-child ids to release when resident.' }],
-                returns: 'once every selected Activation released its `AgentHandle`.',
+                returns: 'once every selected activation released its execution handle.',
                 throws: ['{SubagentError} `UNAUTHORIZED` when a resident target belongs to a different parent or the supplied parent identity is stale.'],
             },
             {
@@ -2866,7 +2976,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'listDescendants(rootSessionId: SessionId, signal?: AbortSignal): Promise<SubagentDescendantListEntry[]>',
-                description: 'Recursively list reachable parent catalogs in stable pre-order, preserving each catalog\'s event order. Each row carries its catalog parent and depth; one-shot and unknown-mode children remain traversal nodes. Unknown modes produce unsupported diagnostics. Unreadable child catalogs produce corrupt or unavailable diagnostics and stop only that branch. Root read failures, missing services or projections, and cancellation reject the whole listing. Each catalog is observed once and released before the next read. No Agent is loaded or resumed; Sessions absent from reachable catalogs are omitted.',
+                description: 'Recursively list reachable parent catalogs in stable pre-order, preserving each catalog\'s event order. Each row carries its catalog parent and depth; external children are leaves; one-shot and unknown-mode children remain traversal nodes. Unknown modes produce unsupported diagnostics. Unreadable child catalogs produce corrupt or unavailable diagnostics and stop only that branch. Root read failures, missing services or projections, and cancellation reject the whole listing. Each catalog is observed once and released before the next read. No Agent is loaded or resumed; Sessions absent from reachable catalogs are omitted.',
                 parameters: [{ name: 'rootSessionId', description: 'session whose catalog starts descendant discovery.' }, { name: 'signal', description: 'cancellation forwarded to and checked around each catalog read.' }],
                 returns: 'children and branch diagnostics in parent-catalog pre-order.',
                 throws: ['{@link SubagentError} when listing dependencies are unavailable or the caller cancels.', 'SessionQueryError when the root catalog cannot be read.'],
@@ -2887,7 +2997,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'registerProvider(provider: SubagentProvider): () => void',
-                description: 'Register a provider under its name. Registration is effect-scoped and HMR safe; removing a provider blocks new starts but does not revoke runs that were already returned to their holders.',
+                description: 'Register a provider under its name. Registration is effect-scoped and HMR safe; removing a provider blocks new starts but does not revoke runs that were already returned to their holders. Providers without either execution method are rejected with UNSUPPORTED_CAPABILITY before registration.',
                 parameters: [{ name: 'provider', description: 'the trusted provider implementation.' }],
                 returns: 'the exact Cordis effect disposer.',
             },
@@ -2903,12 +3013,6 @@ export const SERVICE_API = [
                 parameters: [],
                 returns: 'the registered names.',
             },
-            {
-                signature: 'async start(name: string, request: SubagentStartRequest): Promise<SubagentRun>',
-                description: 'Establish a published child on the named provider. Capability and semantic checks run before delegation. Provider ownership lasts until its promise fulfills; a rejection therefore has no run for the caller to dispose and emits no run lifecycle events. Post-publication turn and infrastructure failures settle through the returned run. A catalog append failure disposes the run and handles its result rejection; the caller receives the catalog error even if disposal also fails.',
-                parameters: [{ name: 'name', description: 'the provider to use.' }, { name: 'request', description: 'child label, prompt, parent, signal, and optional capabilities.' }],
-                returns: 'the published holder-owned run.',
-            },
         ],
     },
     {
@@ -2974,7 +3078,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'suppressRuntimeContext(): () => void',
-                description: 'Suppress every dynamic runtime-context contribution in the calling context\'s scope without changing the services that own or enforce those facts. Multiple suppressors remain independently disposable.',
+                description: 'Suppress optional dynamic runtime-context contributions in the calling context\'s scope without changing the services that own or enforce those facts. Multiple suppressors remain independently disposable.',
                 parameters: [],
                 returns: 'the exact Cordis effect disposer.',
             },
@@ -2990,6 +3094,12 @@ export const SERVICE_API = [
                 parameters: [{ name: 'name', description: 'the `[a-z][a-z0-9_]*` reference name.' }, { name: 'provider', description: 'evaluated for each assembly.' }],
                 returns: 'the exact Cordis effect disposer.',
             },
+            {
+                signature: 'refreshContext(assembly: PromptAssembly, context: AssembleContext = {}): PromptAssembly',
+                description: 'Refresh accepted registered runtime facts for request admission. Contexts added only by the assembly waterfall retain their accepted values. Current suppression removes optional contexts, and missing required registrations are restored in registry order. Sections, tools, and interpolation variables retain the accepted assembly; their providers and waterfall do not rerun.',
+                parameters: [{ name: 'assembly', description: 'accepted assembly for this scope and step.' }, { name: 'context', description: 'the same scope and current plugin-defined assembly fields.' }],
+                returns: 'the accepted assembly with current runtime-context provider text.',
+            },
             {
                 signature: 'async assemble(context: AssembleContext = {}): Promise<PromptAssembly>',
                 description: 'Assemble global and scoped providers, detach tool parameters, apply canonical ordering, then run the assembly waterfall. Scoped sections and variables shadow globals. The returned waterfall value is authoritative except that an effective complete section is restored afterwards as the sole prompt section.',
@@ -3005,9 +3115,9 @@ export const SERVICE_API = [
         methods: [
             {
                 signature: '@Remote environment(agent: Agent, signal: AbortSignal): TerminalEnvironment',
-                description: 'Read the Session working directory and terminal limits without resolving a shell.',
+                description: 'Read the Session\'s current directory and terminal limits without filesystem validation or shell lookup.',
                 parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'signal', description: 'request cancellation.' }],
-                returns: 'the Session workspace directory and terminal limits.',
+                returns: 'the logged current directory and terminal limits; retained terminals keep their own process directories.',
             },
             {
                 signature: '@Remote shells(agent: Agent, signal: AbortSignal): Promise<TerminalShell[]>',
@@ -3034,22 +3144,10 @@ export const SERVICE_API = [
                 returns: 'a hold acknowledgement followed by an open lifetime stream.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, signal: AbortSignal): AsyncIterable<TerminalFrame>',
-                description: 'Attach to a terminal without binding its process lifetime to the transport.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'new exclusive input attachment.' }, { name: 'signal', description: 'physical stream cancellation.' }],
-                returns: 'screen recovery followed by output and metadata changes.',
-            },
-            {
-                signature: '@Remote async write(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, data: string): Promise<void>',
-                description: 'Deliver raw input, including Tab completion and control characters.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'current writable attachment.' }, { name: 'data', description: 'input bytes represented as UTF-8 text.' }],
-                returns: 'after provider input acceptance.',
-            },
-            {
-                signature: '@Remote async resize(agent: Agent, id: WebTerminalId, attachmentId: TerminalAttachmentId, cols: number, rows: number): Promise<void>',
-                description: 'Update the dimensions of the PTY and recovery screen.',
-                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'attachmentId', description: 'current writable attachment.' }, { name: 'cols', description: 'column count.' }, { name: 'rows', description: 'row count.' }],
-                returns: 'after the resize completes.',
+                signature: '@Remote({ mode: \'stream\' }) attach(agent: Agent, id: WebTerminalId, signal: AbortSignal): RemoteStream<TerminalFrame, TerminalInput>',
+                description: 'Attach terminal input and output to one physical Remote stream.',
+                parameters: [{ name: 'agent', description: 'Session owner supplied by the Gateway.' }, { name: 'id', description: 'terminal identity.' }, { name: 'signal', description: 'attachment cancellation; the process remains alive and input is never replayed.' }],
+                returns: 'screen recovery, output, writable state and provider-acceptance acknowledgements.',
             },
             {
                 signature: '@Remote rename(agent: Agent, id: WebTerminalId, title: string): void',
@@ -3267,6 +3365,31 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'translator',
+        summary: 'One Host service with explicit routing, cancellation and quiescent unload.',
+        description: 'One Host service with explicit routing, cancellation and quiescent unload.',
+        methods: [
+            {
+                signature: 'async availableProviders(signal?: AbortSignal): Promise<readonly TranslationProvider[]>',
+                description: 'Inspect eligible native routes without inference; saved results remain readable for unavailable routes.',
+                parameters: [{ name: 'signal', description: 'optional caller cancellation, combined with service disposal.' }],
+                returns: 'anonymous choices followed by eligible explicitly selected paid routes.',
+            },
+            {
+                signature: 'resolve(request: TranslationRequest): TranslationSpec',
+                description: 'Resolve provider and source-language defaults without sending text.',
+                parameters: [{ name: 'request', description: 'consumer text, destination and optional routing choices.' }],
+                returns: 'a complete specification; exceeding `maxTextChars` throws `TRANSLATION_TEXT_LIMIT`.',
+            },
+            {
+                signature: 'async translate(spec: TranslationSpec, signal?: AbortSignal): Promise<string>',
+                description: 'Translate one resolved specification; the selected provider receives its text.',
+                parameters: [{ name: 'spec', description: 'complete routing and language choices from `resolve()`.' }, { name: 'signal', description: 'optional caller cancellation, combined with service disposal.' }],
+                returns: 'translated plain text, durably retained before return when a Session is supplied. An uncached supplied Session must be active; otherwise rejects with `TRANSLATION_SESSION_INACTIVE` before dispatch. Rejects provider/storage/limit failures and preserves cancellation reasons.',
+            },
+        ],
+    },
     {
         key: 'typert',
         summary: 'Registry of generated schemas, package reflection, invocations, and Remote dependency providers.',
@@ -3329,9 +3452,9 @@ export const SERVICE_API = [
             },
             {
                 signature: 'hasLiveClient(): boolean',
-                description: 'Check for an active Client event stream.',
+                description: 'Check for an active owner Client event stream, the only kind that can answer forwarded waterfalls.',
                 parameters: [],
-                returns: 'whether a stream is open and has not been cancelled.',
+                returns: 'whether an owner stream is open and has not been cancelled.',
             },
             {
                 signature: 'registerRemoteEvents( source: TypertRemoteEventSource, host: RemoteEventHostInfo, ): () => Promise<void>',
@@ -3419,6 +3542,19 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'webApp',
+        summary: 'The Web GUI this process serves, provided by the `web-runtime` row.',
+        description: 'The Web GUI this process serves, provided by the `web-runtime` row.',
+        methods: [
+            {
+                signature: 'getAdvertisedUrl(): string',
+                description: 'The URL this GUI advertises, also used for `DSH_WEB_URL` and the startup URL line.',
+                parameters: [],
+                returns: 'the configured `publicUrl`, otherwise the listener origin.',
+            },
+        ],
+    },
     {
         key: 'webhookRuntime',
         summary: 'Fire-and-forget rule runtime.',
@@ -3441,8 +3577,15 @@ export const SERVICE_API = [
     {
         key: 'webServer',
         summary: 'The browser HTTP carrier service.',
-        description: 'The browser HTTP carrier service. Activation listens immediately. Route registration order does not affect requests because configured named routes must be distinct, and the fallback handler answers anything not yet claimed during startup with 404 until its owner registers. A listen failure rejects initialization, and the boot process reports the failed fiber.',
+        description: 'The browser HTTP carrier service. Activation loads any configured TLS material, then listens immediately; a material or listen failure rejects initialization, and the boot process reports the failed fiber. Route registration order does not affect requests because configured named routes must be distinct, and the fallback handler answers anything not yet claimed during startup with 404 until its owner registers.',
         methods: [
+            {
+                signature: 'getOrigin(): string',
+                description: 'The root URL local clients use to reach the bound listener: the protocol, the bindUrlHost form of the bind address, and the listening port.',
+                parameters: [],
+                returns: 'the origin, for example `http://127.0.0.1:3080`.',
+                throws: ['before `listen` binds a port, or when the bind address has no URL form.'],
+            },
             {
                 signature: 'register(route: WebRoute): () => void',
                 description: 'Register a named route. Duplicate (kind, path) throws — route patterns are a composition-level contract, so a collision is a misconfiguration.',
@@ -3500,6 +3643,38 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'workingDirectory',
+        summary: 'One owner for each Session\'s effective directory and its model-visible changes.',
+        description: 'One owner for each Session\'s effective directory and its model-visible changes.',
+        methods: [
+            {
+                signature: 'readonly defaultDirectory: string',
+                description: 'Absolute deployment fallback for Sessions with no recorded original directory.',
+                parameters: [],
+            },
+            {
+                signature: 'get(session: Session): string',
+                description: 'Read the committed directory without filesystem I/O.',
+                parameters: [{ name: 'session', description: 'Session whose directory is requested.' }],
+                returns: 'its effective absolute directory.',
+            },
+            {
+                signature: 'ensure(agent: Agent, signal?: AbortSignal): Promise<string>',
+                description: 'Validate the current directory and restore the original project when it disappeared.',
+                parameters: [{ name: 'agent', description: 'live or unpublished Agent owning the Session.' }, { name: 'signal', description: 'cancellation for filesystem inspection.' }],
+                returns: 'the existing directory; recovery is committed before fulfillment. A notice failure is warned without reverting the committed state.',
+                throws: ['when the original project is also unavailable.'],
+            },
+            {
+                signature: 'set(agent: Agent, path: string, signal?: AbortSignal): Promise<string>',
+                description: 'Change one Session\'s directory without changing existing processes or permissions.',
+                parameters: [{ name: 'agent', description: 'live or unpublished Agent owning the Session.' }, { name: 'path', description: 'absolute path or a path relative to its current directory.' }, { name: 'signal', description: 'cancellation before the durable change.' }],
+                returns: 'the canonical absolute directory, committed before fulfillment. A notice failure is warned; the next request still receives the committed directory.',
+                throws: ['when the requested path is not an existing directory.'],
+            },
+        ],
+    },
     {
         key: 'workspaceChanges',
         summary: 'Serves the summaries and file comparisons the recorder keeps for live Sessions.',
@@ -3586,8 +3761,8 @@ export const SERVICE_API = [
                 returns: 'the complete resulting pin set, most recently pinned first.',
             },
             {
-                signature: '@Remote({ mode: \'stream\' }) follow(signal: AbortSignal): AsyncIterable<WorkspaceFollowFrame>',
-                description: 'Stream a complete Workspace baseline followed by ordered increments.',
+                signature: '@Remote({ mode: \'stream\' }) async *follow(signal: AbortSignal): AsyncIterable<WorkspaceFollowFrame>',
+                description: 'Stream a complete Workspace baseline followed by ordered increments. A non-owner receives only the Workspaces and Sessions `allows()` admits. When a delivered Workspace is no longer admitted at its next change or the next order change, the stream sends a `replace` frame with the complete filtered state instead of a `remove`, because a Client never resurrects a removed Workspace; a `remove` frame reports a deletion and reaches only a Client that received that Workspace.',
                 parameters: [{ name: 'signal', description: 'generation cancellation.' }],
                 returns: 'baseline followed by ordered Workspace increments.',
             },
@@ -3704,6 +3879,19 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'worktrees',
+        summary: 'Creates retained Git worktrees under the mounted filesystem and sandbox providers.',
+        description: 'Creates retained Git worktrees under the mounted filesystem and sandbox providers.',
+        methods: [
+            {
+                signature: 'async create(agent: Agent, request: CreateWorktreeRequest = {}, signal?: AbortSignal): Promise<CreatedWorktree>',
+                description: 'Create a fresh branch and checkout at a pinned local revision, then enter it. Existing branches or checkout paths fail. Uncommitted files stay in the source checkout. Checkout disables configured clean, smudge, and process filters without changing Git config. Repository-local replacement refs still apply; baseCommit reports the resolved object name. The new checkout becomes current only after Git setup succeeds. Failures may retain newly allocated Git/filesystem artifacts; no branch or checkout is removed automatically.',
+                parameters: [{ name: 'agent', description: 'caller whose current directory selects the source repository and file policy.' }, { name: 'request', description: 'optional new name and local revision; defaults are generated name and HEAD.' }, { name: 'signal', description: 'cancellation of lookup, creation, and working-directory publication.' }],
+                returns: 'canonical checkout path, branch name, pinned commit, and source repository root.',
+            },
+        ],
+    },
 ];
 /** Every harness event, sorted by name. */
 export const EVENT_API = [
@@ -4470,6 +4658,14 @@ export const TYPE_API = [
         name: 'AgentStatus',
         declaration: 'export type AgentStatus = \'idle\' | \'running\';',
     },
+    {
+        name: 'AnonymousTranslationProvider',
+        declaration: 'export type AnonymousTranslationProvider = \'google\' | \'bing\';',
+    },
+    {
+        name: 'AnonymousTranslationSpec',
+        declaration: 'export interface AnonymousTranslationSpec extends TranslationSpecFields {\n    readonly provider: AnonymousTranslationProvider;\n}',
+    },
     {
         name: 'AnyHook',
         declaration: 'export type AnyHook = ModHook<unknown, unknown>;',
@@ -4544,7 +4740,7 @@ export const TYPE_API = [
     },
     {
         name: 'AssembledContext',
-        declaration: 'export interface AssembledContext {\n    name: string;\n    text: string;\n}',
+        declaration: 'export interface AssembledContext {\n    name: string;\n    text: string;\n    interpolate?: boolean;\n}',
     },
     {
         name: 'AssembledSection',
@@ -4672,7 +4868,7 @@ export const TYPE_API = [
     },
     {
         name: 'BundleInfo',
-        declaration: 'export interface BundleInfo {\n    name: string;\n    version?: string;\n    meta?: PluginLocalizedMeta;\n    description?: string;\n    enabled: boolean;\n    installed: boolean;\n    source?: string;\n    optional: boolean;\n    removable: boolean;\n    readOnlyReason?: ReadOnlyReason;\n    error?: ManagementError;\n    rows: BundleRowInfo[];\n    overrides: string[];\n}',
+        declaration: 'export interface BundleInfo {\n    name: string;\n    official: boolean;\n    availability: \'installation\' | \'profile\' | \'missing\';\n    installTarget?: {\n        spec: string;\n        version: string;\n    };\n    version?: string;\n    meta?: PluginLocalizedMeta;\n    description?: string;\n    enabled: boolean;\n    installed: boolean;\n    source?: string;\n    optional: boolean;\n    removable: boolean;\n    readOnlyReason?: ReadOnlyReason;\n    error?: ManagementError;\n    rows: BundleRowInfo[];\n    overrides: string[];\n}',
     },
     {
         name: 'BundleRowInfo',
@@ -4684,7 +4880,7 @@ export const TYPE_API = [
     },
     {
         name: 'ChangeResult',
-        declaration: 'export interface ChangeResult {\n    changed: boolean;\n    application: \'applied\' | \'restart-required\' | \'overridden\' | \'failed\' | \'cancelled\';\n    stage: \'install\' | \'enable\' | \'remove\';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    version?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n    registries?: Registry[];\n    failedAt?: \'registry\' | \'spec-host\';\n}',
+        declaration: 'export interface ChangeResult {\n    changed: boolean;\n    application: \'applied\' | \'restart-required\' | \'overridden\' | \'failed\' | \'cancelled\';\n    restartReason?: RestartReason;\n    stage: \'install\' | \'enable\' | \'remove\';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    version?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n    registries?: Registry[];\n    failedAt?: \'registry\' | \'spec-host\';\n}',
     },
     {
         name: 'ClientArtifactBaseline',
@@ -4774,6 +4970,10 @@ export const TYPE_API = [
         name: 'ComputerUseProviderName',
         declaration: 'export type ComputerUseProviderName = Branded<\'ComputerUseProviderName\'>;',
     },
+    {
+        name: 'ConfigureCall',
+        declaration: 'export type ConfigureCall = (controls: Readonly<LlmCallControls>, model: Readonly<LlmResolvedModelInfo>) => LlmCallControls;',
+    },
     {
         name: 'ConfinedArgv',
         declaration: 'export interface ConfinedArgv {\n    argv: string[];\n    enforcement: SandboxEnforcement;\n    denialSignatures: readonly string[];\n    runnerFailureRules: readonly RunnerFailureRule[];\n}',
@@ -4782,9 +4982,13 @@ export const TYPE_API = [
         name: 'ConfinedSandboxMode',
         declaration: 'export type ConfinedSandboxMode = Exclude<SandboxMode, \'danger-full-access\'>;',
     },
+    {
+        name: 'ConnectionAdmission',
+        declaration: 'export type ConnectionAdmission = {\n    readonly peer: PeerScope;\n    readonly release: () => Promise<void>;\n} | {\n    readonly rejection: 401 | 403 | 409;\n};',
+    },
     {
         name: 'ConnectionFetchHandler',
-        declaration: 'export interface ConnectionFetchHandler {\n    requestBodyMode(request: {\n        readonly method: string;\n        readonly url: URL;\n    }): ConnectionRequestBodyMode;\n    fetch(request: Request): Promise<Response>;\n}',
+        declaration: 'export interface ConnectionFetchHandler {\n    requestBodyMode(request: {\n        readonly method: string;\n        readonly url: URL;\n    }): ConnectionRequestBodyMode;\n    fetch(request: Request, peer: PeerScope): Promise<Response>;\n}',
     },
     {
         name: 'ConnectionFetchMethod',
@@ -4848,24 +5052,12 @@ export const TYPE_API = [
     },
     {
         name: 'ContinuableCreateRequest',
-        declaration: 'export interface ContinuableCreateRequest {\n    readonly sessionId: SessionId;\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n}',
+        declaration: 'export interface ContinuableCreateRequest {\n    readonly cwd: string;\n    readonly sessionId: SessionId;\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n}',
     },
     {
         name: 'ContinuableCreateSpec',
         declaration: 'export interface ContinuableCreateSpec {\n    readonly seed?: readonly SessionEvent[];\n}',
     },
-    {
-        name: 'ContinuableStart',
-        declaration: 'export interface ContinuableStart {\n    readonly childId: SessionId;\n    readonly messageId: MessageId;\n}',
-    },
-    {
-        name: 'ContinuableStartSpec',
-        declaration: 'export interface ContinuableStartSpec {\n    readonly provider: string;\n    readonly label: string;\n    readonly childId?: SessionId;\n    readonly request: Omit<SubagentStartRequest, \'label\' | \'signal\' | \'outputSchema\'>;\n    readonly signal: AbortSignal;\n}',
-    },
-    {
-        name: 'ContinuableSubagentDescriptorData',
-        declaration: 'export interface ContinuableSubagentDescriptorData extends SubagentDescriptorBase {\n    readonly mode: \'continuable\';\n    readonly label: string;\n    readonly agentProvider?: string;\n    readonly agentModel?: string;\n    readonly agentReasoningEffort?: ReasoningEffortId;\n    readonly persona?: string;\n    readonly toolFilter?: ToolRestriction;\n}',
-    },
     {
         name: 'CordisDynamicPackageId',
         declaration: 'export type CordisDynamicPackageId = Branded<\'CordisDynamicPackageId\'>;',
@@ -4934,10 +5126,22 @@ export const TYPE_API = [
         name: 'CordisRuntimeTreeReader',
         declaration: 'export interface CordisRuntimeTreeReader {\n    getTree(): Promise<CordisRuntimeTree>;\n}',
     },
+    {
+        name: 'CotTranslationPreferences',
+        declaration: 'export interface CotTranslationPreferences {\n    provider: TranslationProvider;\n    targetLanguage: string;\n}',
+    },
+    {
+        name: 'CotTranslationSnapshot',
+        declaration: 'export interface CotTranslationSnapshot {\n    maxTextChars: number;\n    preferences: CotTranslationPreferences;\n    availableProviders: readonly TranslationProvider[];\n}',
+    },
     {
         name: 'CreateAgentOptions',
         declaration: 'export interface CreateAgentOptions {\n    readonly sessionId: SessionId;\n    readonly parentAgent?: Agent;\n    readonly meta?: {\n        readonly cwd?: string;\n        readonly parentSession?: SessionId;\n        readonly isSeeded?: boolean;\n        readonly origin?: \'subagent\';\n        readonly delegationDepth?: number;\n        readonly agentPreset?: string;\n    };\n    readonly inheritedEventCount?: SessionLogOffset;\n    readonly seed?: readonly SessionEvent[];\n    readonly agentOptions?: AgentOptions;\n    readonly signal?: AbortSignal;\n    readonly setup?: AgentSetup;\n}',
     },
+    {
+        name: 'CreatedWorktree',
+        declaration: 'export interface CreatedWorktree {\n    path: string;\n    branch: string;\n    baseCommit: string;\n    repositoryRoot: string;\n}',
+    },
     {
         name: 'CreateGoalRequest',
         declaration: 'export interface CreateGoalRequest {\n    readonly objective: string;\n    readonly maxGoalRounds?: number;\n}',
@@ -4954,6 +5158,10 @@ export const TYPE_API = [
         name: 'CreateTeamTaskRequest',
         declaration: 'export interface CreateTeamTaskRequest {\n    readonly subject: string;\n    readonly description: string;\n    readonly blockedBy?: readonly TeamTaskId[];\n    readonly writeScopes?: readonly string[];\n}',
     },
+    {
+        name: 'CreateWorktreeRequest',
+        declaration: 'export interface CreateWorktreeRequest {\n    name?: string;\n    from?: string;\n}',
+    },
     {
         name: 'CredentialInfo',
         declaration: 'export interface CredentialInfo {\n    configured: boolean;\n    source?: string;\n    writable: boolean;\n}',
@@ -5144,7 +5352,7 @@ export const TYPE_API = [
     },
     {
         name: 'EventLogOptions',
-        declaration: 'export interface EventLogOptions {\n    exporter: SessionLogOptions[\'exporter\'];\n    resourceAttributes: Attributes;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    processor: Omit<BatchLogRecordProcessorOptions, \'exporter\'>;\n    onFailure: SessionLogOptions[\'onFailure\'];\n}',
+        declaration: 'export interface EventLogOptions {\n    exporter: LogExporterOptions;\n    resourceAttributes: Attributes;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    processor: Omit<BatchLogRecordProcessorOptions, \'exporter\'>;\n    onFailure: SessionLogOptions[\'onFailure\'];\n}',
     },
     {
         name: 'EventLogReporter',
@@ -5392,7 +5600,7 @@ export const TYPE_API = [
     },
     {
         name: 'InstallBundleOptions',
-        declaration: 'export interface InstallBundleOptions {\n    enabled?: boolean;\n    requestId?: PluginInstallRequestId;\n    approvedBuilds?: string[];\n    registry?: Registry;\n}',
+        declaration: 'export interface InstallBundleOptions {\n    enabled?: boolean;\n    saveExact?: boolean;\n    requestId?: PluginInstallRequestId;\n    approvedBuilds?: string[];\n    registry?: Registry;\n}',
     },
     {
         name: 'InstallSpecKind',
@@ -5420,11 +5628,11 @@ export const TYPE_API = [
     },
     {
         name: 'InvocationDescriptor',
-        declaration: 'export interface InvocationDescriptor {\n    readonly id: string;\n    readonly service: string;\n    readonly namespace: string;\n    readonly method: string;\n    readonly implementation?: string;\n    readonly mode?: \'stream\';\n    readonly invocation: {\n        readonly kind: \'direct\';\n    } | {\n        readonly kind: \'context\';\n        readonly context: string;\n        readonly wire: string;\n        readonly codec: TypertCodec;\n    };\n    readonly scope?: {\n        readonly context: string;\n        readonly wire: string;\n    };\n    readonly parameters: readonly InvocationParameterDescriptor[];\n    readonly uplink?: {\n        readonly codec: TypertCodec;\n    };\n    readonly cancellation?: {\n        readonly parameter: \'signal\';\n    };\n    readonly result: TypertCodec;\n    readonly sourceLocation?: InvocationSourceLocation;\n}',
+        declaration: 'export interface InvocationDescriptor {\n    readonly id: string;\n    readonly service: string;\n    readonly namespace: string;\n    readonly method: string;\n    readonly implementation?: string;\n    readonly mode?: \'stream\';\n    readonly invocation: {\n        readonly kind: \'direct\';\n    } | {\n        readonly kind: \'context\';\n        readonly context: string;\n        readonly wire: string;\n        readonly codec: TypertCodec;\n    };\n    readonly scope?: {\n        readonly context: string;\n        readonly wire: string;\n    };\n    readonly parameters: readonly InvocationParameterDescriptor[];\n    readonly uplink?: {\n        readonly codec: TypertCodec;\n    };\n    readonly cancellation?: {\n        readonly parameter: \'signal\';\n    };\n    readonly result: TypertCodec;\n    readonly description?: string;\n    readonly sourceLocation?: InvocationSourceLocation;\n}',
     },
     {
         name: 'InvocationParameterDescriptor',
-        declaration: 'export interface InvocationParameterDescriptor {\n    readonly name: string;\n    readonly wire: string;\n    readonly source: \'json\' | \'lookup\';\n    readonly lookup?: string;\n    readonly codec: TypertCodec;\n    readonly acceptsUndefined?: true;\n}',
+        declaration: 'export interface InvocationParameterDescriptor {\n    readonly name: string;\n    readonly description?: string;\n    readonly wire: string;\n    readonly source: \'json\' | \'lookup\';\n    readonly lookup?: string;\n    readonly codec: TypertCodec;\n    readonly acceptsUndefined?: true;\n}',
     },
     {
         name: 'InvocationSourceLocation',
@@ -5432,7 +5640,7 @@ export const TYPE_API = [
     },
     {
         name: 'InvokeRemoteRequest',
-        declaration: 'export interface InvokeRemoteRequest {\n    readonly namespace: string;\n    readonly method: string;\n    readonly args: Readonly<Record<string, unknown>>;\n    readonly uplink?: AsyncIterable<unknown>;\n    readonly peer?: PeerScope;\n    readonly signal?: AbortSignal;\n}',
+        declaration: 'export interface InvokeRemoteRequest {\n    readonly namespace: string;\n    readonly method: string;\n    readonly args: Readonly<Record<string, unknown>>;\n    readonly uplink?: AsyncIterable<unknown>;\n    readonly uplinkWindow?: RemoteUplinkWindow | undefined;\n    readonly peer: PeerScope;\n    readonly signal?: AbortSignal;\n}',
     },
     {
         name: 'JobAppendOptions',
@@ -5496,7 +5704,7 @@ export const TYPE_API = [
     },
     {
         name: 'JobKindMap',
-        declaration: 'export interface JobKindMap {\n    bash: \'bash\';\n    subagent: \'subagent\';\n}',
+        declaration: 'export interface JobKindMap {\n    bash: \'bash\';\n}',
     },
     {
         name: 'JobListFrame',
@@ -5532,12 +5740,16 @@ export const TYPE_API = [
     },
     {
         name: 'JobSpec',
-        declaration: 'export interface JobSpec {\n    kind: JobKind;\n    label: string;\n    owner?: SessionId;\n    outputLimitBytes?: number;\n    output?: readonly JobOutputSource[];\n    run(job: JobHandle): JobHooks;\n}',
+        declaration: 'export interface JobSpec {\n    kind: JobKind;\n    label: string;\n    owner?: SessionId;\n    toolCall?: JobToolCall;\n    outputLimitBytes?: number;\n    output?: readonly JobOutputSource[];\n    run(job: JobHandle): JobHooks;\n}',
     },
     {
         name: 'JobStatus',
         declaration: 'export type JobStatus = \'running\' | \'stopping\' | \'completed\' | \'killed\' | \'failed\';',
     },
+    {
+        name: 'JobToolCall',
+        declaration: 'export interface JobToolCall {\n    readonly callId: SessionEventMap[\'tool/call\'][\'callId\'];\n    readonly rootCallId: SessionEventMap[\'tool/call\'][\'callId\'];\n}',
+    },
     {
         name: 'JobView',
         declaration: 'export interface JobView {\n    readonly id: JobId;\n    readonly kind: string;\n    readonly label: string;\n    readonly owner?: SessionId;\n    readonly outputLimitBytes?: number;\n    readonly status: JobStatus;\n    readonly progress?: string;\n    readonly detail?: string;\n    readonly startedAt: number;\n    readonly finishedAt?: number;\n    readonly output: {\n        readonly total: number;\n        readonly earliest: number;\n        readonly spillPaths?: readonly string[];\n    };\n}',
@@ -5576,7 +5788,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmAdapter',
-        declaration: 'export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}',
+        declaration: 'export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    imageRequestTarget(_provider: string, _model: string, image: ImageAttachmentRef): ImageRequestTarget;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}',
     },
     {
         name: 'LlmAttemptId',
@@ -5584,15 +5796,19 @@ export const TYPE_API = [
     },
     {
         name: 'LlmCallConfig',
-        declaration: 'export interface LlmCallConfig {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n}',
+        declaration: 'export interface LlmCallConfig extends LlmCallControls {\n    provider: string;\n    model: string;\n}',
     },
     {
         name: 'LlmCallConfigAdapterDefaults',
         declaration: 'export interface LlmCallConfigAdapterDefaults {\n    reasoningEffort?: true;\n    maxTokens?: true;\n}',
     },
+    {
+        name: 'LlmCallControls',
+        declaration: 'export interface LlmCallControls {\n    reasoningEffort?: ReasoningEffortId;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n}',
+    },
     {
         name: 'LlmConfigurableProvider',
-        declaration: 'export interface LlmConfigurableProvider {\n    provider: string;\n    displayName: string;\n    settingsNs: string;\n    settingsPath: readonly string[];\n    declared?: boolean;\n    error?: string;\n}',
+        declaration: 'export interface LlmConfigurableProvider {\n    provider: string;\n    displayName: string;\n    settingsNs: string;\n    settingsPath: readonly string[];\n    declared?: boolean;\n    defaultBaseURL?: string;\n    baseURLEnv?: readonly string[];\n    nativeAuth?: LlmNativeAuth;\n    error?: string;\n}',
     },
     {
         name: 'LlmDiscoveredModel',
@@ -5626,6 +5842,10 @@ export const TYPE_API = [
         name: 'LlmModelReasoningInfo',
         declaration: 'export interface LlmModelReasoningInfo {\n    efforts: readonly LlmReasoningEffortInfo[];\n    defaultEffort?: ReasoningEffortId;\n}',
     },
+    {
+        name: 'LlmNativeAuth',
+        declaration: 'export interface LlmNativeAuth {\n    env: readonly string[];\n    oauth: boolean;\n}',
+    },
     {
         name: 'LlmProviderInfo',
         declaration: 'export interface LlmProviderInfo {\n    id: string;\n    name: string;\n}',
@@ -5640,7 +5860,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmRuntime',
-        declaration: 'export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote(\'discoverModels\')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    fileRequestText(ref: FileAttachmentRef): string;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(config: LlmCallConfig, signal?: AbortSignal): Promise<PreparedLlmCall>;\n    stream(options: GenerateOptions) /* …truncated — full shape in source */',
+        declaration: 'export class LlmRuntime extends TypertRemoteService {\n    constructor(ctx: Context);\n    registerAdapter(providers: string[], adapter: LlmAdapter): AdapterRegistrationHandle;\n    @Remote\n    listProviders(): LlmProviderInfo[];\n    registerConfigurableProviders(entries: readonly LlmConfigurableProvider[]): DirectoryRegistrationHandle;\n    @Remote\n    listConfigurableProviders(): LlmConfigurableProvider[];\n    registerModelDiscovery(settingsNs: string, discover: (request: LlmModelDiscoveryRequest, signal?: AbortSignal) => Promise<readonly LlmDiscoveredModel[]>): () => void;\n    async discoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal?: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    @Remote(\'discoverModels\')\n    async remoteDiscoverModels(settingsNs: string, request: LlmModelDiscoveryRequest, signal: AbortSignal): Promise<LlmDiscoveredModel[]>;\n    providerRetryPolicy(provider: string): ResolvedRetryPolicy;\n    imageRequestPricing(provider: string, model: string): LlmImageRequestPricing | undefined;\n    imageRequestTarget(provider: string, model: string, image: ImageAttachmentRef): ImageRequestTarget;\n    fileRequestText(ref: FileAttachmentRef): string;\n    async listModels(provider: string): Promise<LlmModelInfo[]>;\n    async resolveModelInfo(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async resolveCallConfig(config: LlmCallConfig, signal?: AbortSignal): Promise<LlmCallConfig>;\n    async prepareCall(conf /* …truncated — full shape in source */',
     },
     {
         name: 'LocalAtInput',
@@ -5650,6 +5870,10 @@ export const TYPE_API = [
         name: 'LocalizedText',
         declaration: 'export type LocalizedText = string | {\n    readonly en: string;\n    readonly [locale: string]: string;\n};',
     },
+    {
+        name: 'LogExporterOptions',
+        declaration: 'export type LogExporterOptions = Omit<OTLPExporterNodeConfigBase, \'selfObsMeterProvider\'> & {\n    url: string;\n};',
+    },
     {
         name: 'LspHover',
         declaration: 'export interface LspHover {\n    readonly contents: string;\n    readonly range?: LspRange;\n}',
@@ -5692,7 +5916,7 @@ export const TYPE_API = [
     },
     {
         name: 'ManagementError',
-        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
+        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'already-installed\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
     },
     {
         name: 'ManualCompactAgentContext',
@@ -5914,10 +6138,6 @@ export const TYPE_API = [
         name: 'OneShotScheduleRecord',
         declaration: 'export type OneShotScheduleRecord = AfterScheduleRecord | AtScheduleRecord;',
     },
-    {
-        name: 'OneShotSubagentDescriptorData',
-        declaration: 'export interface OneShotSubagentDescriptorData extends SubagentDescriptorBase {\n    readonly mode: \'one-shot\';\n    readonly label?: string;\n}',
-    },
     {
         name: 'OptionalSessionSeq',
         declaration: 'export type OptionalSessionSeq = SessionSeq | null;',
@@ -5934,6 +6154,14 @@ export const TYPE_API = [
         name: 'PackageResult',
         declaration: 'export interface PackageResult {\n    exitCode: number;\n    output: string;\n    truncated: boolean;\n    logPath: string;\n    kind?: PluginInstallFailureKind;\n    timedOut?: boolean;\n    incompatible?: IncompatiblePlugin[];\n}',
     },
+    {
+        name: 'PaidTranslationProvider',
+        declaration: 'export type PaidTranslationProvider = \'deepseek-account\' | \'deepseek-official\';',
+    },
+    {
+        name: 'PaidTranslationSpec',
+        declaration: 'export interface PaidTranslationSpec extends TranslationSpecFields {\n    readonly provider: PaidTranslationProvider;\n    readonly sessionId: SessionId;\n}',
+    },
     {
         name: 'PaneOpenArgs',
         declaration: 'export interface PaneOpenArgs {\n    id: string;\n    title?: string;\n    focus?: true;\n    closeOnEscape?: true;\n    holdToasts?: true;\n    rows?: number;\n    columns?: number;\n}',
@@ -5952,7 +6180,11 @@ export const TYPE_API = [
     },
     {
         name: 'PeerScope',
-        declaration: 'export interface PeerScope {\n    readonly id: PeerId;\n    readonly ctx: Context;\n    dispose(): Promise<void>;\n}',
+        declaration: 'export interface PeerScope {\n    readonly id: PeerId;\n    readonly ctx: Context;\n    readonly principal: Principal;\n    readonly signal: AbortSignal;\n    readonly interactions: \'answer\' | \'none\';\n    dispose(): Promise<void>;\n}',
+    },
+    {
+        name: 'PendingModule',
+        declaration: 'export interface PendingModule {\n    url: string;\n    reason: \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';\n}',
     },
     {
         name: 'PermissionCatalog',
@@ -6074,6 +6306,14 @@ export const TYPE_API = [
         name: 'PreToolDecision',
         declaration: 'export type PreToolDecision = {\n    kind: \'allow\';\n} | {\n    kind: \'deny\';\n    reason: string;\n    info?: ToolErrorInfo;\n} | {\n    kind: \'cancel\';\n} | {\n    kind: \'ask\';\n    reason?: string;\n    displayReason?: {\n        readonly en: string;\n        readonly [locale: string]: string;\n    };\n};',
     },
+    {
+        name: 'Principal',
+        declaration: 'export type Principal = PrincipalMap[keyof PrincipalMap];',
+    },
+    {
+        name: 'PrincipalMap',
+        declaration: 'export interface PrincipalMap {\n    owner: {\n        readonly kind: \'owner\';\n    };\n}',
+    },
     {
         name: 'ProductEvent',
         declaration: 'export type ProductEvent = {\n    [K in keyof ProductEventMap]: {\n        eventName: K;\n        attributes: ProductEventMap[K];\n        timestamp: number;\n    };\n}[keyof ProductEventMap];',
@@ -6090,6 +6330,10 @@ export const TYPE_API = [
         name: 'ProfilePnpmInvocation',
         declaration: 'export interface ProfilePnpmInvocation {\n    readonly command: string;\n    readonly args: readonly string[];\n    readonly env: Readonly<Record<string, string>>;\n}',
     },
+    {
+        name: 'ProfileReconciliation',
+        declaration: 'export interface ProfileReconciliation {\n    warnings: string[];\n    pending: PendingModule[];\n    restartReason?: \'module-comparison\' | \'package-moved\';\n}',
+    },
     {
         name: 'ProjectionChangeListener',
         declaration: 'export type ProjectionChangeListener = (session: Session, key: Extract<keyof SessionProjectionMap, string>, value: unknown, seq: SessionSeq) => void;',
@@ -6116,7 +6360,7 @@ export const TYPE_API = [
     },
     {
         name: 'PromptContext',
-        declaration: 'export interface PromptContext {\n    readonly name: string;\n    readonly order: number;\n    readonly text: string | ((context: AssembleContext) => string);\n}',
+        declaration: 'export interface PromptContext {\n    readonly name: string;\n    readonly order: number;\n    readonly text: string | ((context: AssembleContext) => string);\n    readonly interpolate?: boolean;\n    readonly required?: boolean;\n}',
     },
     {
         name: 'PromptContextOrderName',
@@ -6188,7 +6432,7 @@ export const TYPE_API = [
     },
     {
         name: 'PtcRunRequest',
-        declaration: 'export interface PtcRunRequest {\n    program: string;\n    bindings: PtcBindingNamespace[];\n    cwd?: string;\n    timeoutMs?: number | null;\n    sandboxPolicy?: SandboxExecutionPolicy;\n    signal?: AbortSignal;\n}',
+        declaration: 'export interface PtcRunRequest {\n    program: string;\n    stateOwner?: object;\n    bindings: PtcBindingNamespace[];\n    cwd?: string;\n    timeoutMs?: number | null;\n    sandboxPolicy?: SandboxExecutionPolicy;\n    signal?: AbortSignal;\n}',
     },
     {
         name: 'PtcRunResult',
@@ -6242,6 +6486,62 @@ export const TYPE_API = [
         name: 'Reload',
         declaration: 'export interface Reload {\n    filename: string;\n    modules: ReloadModules;\n    runtime?: Plugin.Runtime | undefined;\n}',
     },
+    {
+        name: 'RemoteAccessAction',
+        declaration: 'export type RemoteAccessAction = RemoteAccessEndpoint | `event:${string}`;',
+    },
+    {
+        name: 'RemoteAccessBaseline',
+        declaration: 'export type RemoteAccessBaseline = Extract<RemoteAccessFrame, {\n    type: \'baseline\';\n}>;',
+    },
+    {
+        name: 'RemoteAccessBinding',
+        declaration: 'export type RemoteAccessBinding = {\n    [K in RemoteAccessResourceKind]: {\n        readonly role: RemoteAccessRole<K>;\n        readonly resource: RemoteAccessResourceOf<K>;\n        readonly condition?: RemoteAccessCondition<K>;\n    };\n}[RemoteAccessResourceKind];',
+    },
+    {
+        name: 'RemoteAccessCondition',
+        declaration: 'export type RemoteAccessCondition<K extends RemoteAccessResourceKind> = (request: {\n    readonly action: RemoteAccessAction;\n    readonly resource: RemoteAccessResourceOf<K>;\n    readonly args?: Readonly<Record<string, unknown>>;\n}) => RemoteAccessDecision;',
+    },
+    {
+        name: 'RemoteAccessDecision',
+        declaration: 'export type RemoteAccessDecision = {\n    readonly kind: \'allow\';\n} | {\n    readonly kind: \'deny\';\n    readonly reason: string;\n};',
+    },
+    {
+        name: 'RemoteAccessEndpoint',
+        declaration: 'export type RemoteAccessEndpoint = `${string}/${string}`;',
+    },
+    {
+        name: 'RemoteAccessFrame',
+        declaration: 'export type RemoteAccessFrame = {\n    readonly type: \'baseline\';\n    readonly owner: true;\n} | {\n    readonly type: \'baseline\';\n    readonly owner: false;\n    readonly grants: readonly RemoteAccessGrant[];\n} | {\n    readonly type: \'upsert\';\n    readonly grant: RemoteAccessGrant;\n} | {\n    readonly type: \'remove\';\n    readonly resource: RemoteAccessResource;\n};',
+    },
+    {
+        name: 'RemoteAccessGrant',
+        declaration: 'export interface RemoteAccessGrant {\n    readonly resource: RemoteAccessResource;\n    readonly actions: readonly string[];\n}',
+    },
+    {
+        name: 'RemoteAccessPolicy',
+        declaration: 'export interface RemoteAccessPolicy<P extends Principal> {\n    bindings(principal: P): readonly RemoteAccessBinding[];\n    explain?(request: RemoteAccessRequest<P>): string | undefined;\n}',
+    },
+    {
+        name: 'RemoteAccessRequest',
+        declaration: 'export interface RemoteAccessRequest<P extends Principal> {\n    readonly principal: P;\n    readonly action: RemoteAccessAction;\n    readonly resources: readonly RemoteAccessResource[];\n    readonly args?: Readonly<Record<string, unknown>>;\n}',
+    },
+    {
+        name: 'RemoteAccessResource',
+        declaration: 'export type RemoteAccessResource = {\n    readonly kind: \'global\';\n} | {\n    [Kind in TypertResourceKind]: {\n        readonly kind: Kind;\n        readonly id: TypertResourceId<TypertResourceMap[Kind]>;\n    };\n}[TypertResourceKind];',
+    },
+    {
+        name: 'RemoteAccessResourceKind',
+        declaration: 'export type RemoteAccessResourceKind = \'global\' | TypertResourceKind;',
+    },
+    {
+        name: 'RemoteAccessResourceOf',
+        declaration: 'export type RemoteAccessResourceOf<K extends RemoteAccessResourceKind> = Extract<RemoteAccessResource, {\n    readonly kind: K;\n}>;',
+    },
+    {
+        name: 'RemoteAccessRole',
+        declaration: 'export interface RemoteAccessRole<K extends RemoteAccessResourceKind> {\n    readonly name: string;\n    readonly resource: K;\n    readonly actions: readonly RemoteAccessAction[];\n}',
+    },
     {
         name: 'RemoteError',
         declaration: 'export class RemoteError<Code extends RemoteErrorCode = RemoteErrorCode> extends Error {\n    readonly isDSHRemoteError: true;\n    constructor(readonly code: Code, message: string, readonly details: RemoteErrorDetailsMap[Code], options?: ErrorOptions);\n}',
@@ -6258,6 +6558,14 @@ export const TYPE_API = [
         name: 'RemoteEventHostInfo',
         declaration: 'export interface RemoteEventHostInfo {\n    readonly home: string;\n}',
     },
+    {
+        name: 'RemoteStream',
+        declaration: 'export type RemoteStream<Out, In = never> = AsyncIterable<Out> & {\n    readonly [STREAM_UPLINK]?: In;\n};',
+    },
+    {
+        name: 'RemoteUplinkWindow',
+        declaration: 'export interface RemoteUplinkWindow {\n    readonly maxBytes: number;\n    readonly frameOverheadBytes: number;\n}',
+    },
     {
         name: 'RenderedDocumentBytes',
         declaration: 'export interface RenderedDocumentBytes extends WorkspaceFileBytes {\n    readonly missingFonts: string[];\n    readonly generation: OfficeToPdfGeneration;\n}',
@@ -6316,7 +6624,11 @@ export const TYPE_API = [
     },
     {
         name: 'ResolvedSubagentStartRequest',
-        declaration: 'export interface ResolvedSubagentStartRequest extends SubagentStartRequest {\n    readonly descriptor: SubagentDescriptorData;\n}',
+        declaration: 'export interface ResolvedSubagentStartRequest extends SubagentStartRequest {\n    readonly cwd: string;\n}',
+    },
+    {
+        name: 'RestartReason',
+        declaration: 'export type RestartReason = \'no-hmr\' | \'package-moved\' | \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';',
     },
     {
         name: 'RestoredSessionOptions',
@@ -6480,7 +6792,7 @@ export const TYPE_API = [
     },
     {
         name: 'SendTeamMessageResult',
-        declaration: 'export interface SendTeamMessageResult {\n    readonly messageId: TeamMessageId;\n    readonly status: \'accepted\' | \'queued\';\n}',
+        declaration: 'export interface SendTeamMessageResult {\n    readonly messageId: MessageId;\n}',
     },
     {
         name: 'SerializedElement',
@@ -6676,7 +6988,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionForkRequest',
-        declaration: 'export interface SessionForkRequest {\n    readonly sessionId: SessionId;\n    readonly atSeq?: number;\n}',
+        declaration: 'export interface SessionForkRequest {\n    readonly sessionId: SessionId;\n    readonly atSeq?: number;\n    readonly allowMigration?: boolean;\n}',
     },
     {
         name: 'SessionForkSource',
@@ -6744,7 +7056,11 @@ export const TYPE_API = [
     },
     {
         name: 'SessionLogOptions',
-        declaration: 'export interface SessionLogOptions {\n    exporter: OTLPExporterNodeConfigBase & {\n        url: string;\n    };\n    processor?: Omit<BatchLogRecordProcessorOptions, \'exporter\'>;\n    maxRequestBytes?: number;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    resourceAttributes: Attributes;\n    onFailure: (message: string, error?: Error) => void;\n}',
+        declaration: 'export interface SessionLogOptions {\n    exporter: LogExporterOptions;\n    processor?: SessionLogProcessorOptions;\n    maxRequestBytes?: number;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    resourceAttributes: Attributes;\n    onFailure: (message: string, error?: Error) => void;\n}',
+    },
+    {
+        name: 'SessionLogProcessorOptions',
+        declaration: 'export type SessionLogProcessorOptions = Omit<BatchLogRecordProcessorOptions, \'exporter\' | \'selfObsMeterProvider\'>;',
     },
     {
         name: 'SessionLogRecord',
@@ -6812,7 +7128,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionPersistenceSnapshot',
-        declaration: 'export interface SessionPersistenceSnapshot {\n    readonly header: SessionHeader;\n    readonly revision: SessionPersistenceRevision;\n    readonly eventCount?: number;\n    readonly sizeBytes?: number;\n}',
+        declaration: 'export interface SessionPersistenceSnapshot {\n    readonly header: SessionHeader;\n    readonly formatStatus?: \'current\' | \'migration-required\';\n    readonly revision: SessionPersistenceRevision;\n    readonly eventCount?: number;\n    readonly sizeBytes?: number;\n}',
     },
     {
         name: 'SessionPersistenceStatOptions',
@@ -6840,7 +7156,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionProjectionsValue',
-        declaration: 'export type SessionProjectionsValue = SessionProjectionBaseline | null;',
+        declaration: 'export type SessionProjectionsValue = (SessionProjectionBaseline & {\n    readonly kind: \'sequenced\';\n}) | {\n    readonly kind: \'migration-required\';\n    readonly values: SessionProjectionValues;\n} | null;',
     },
     {
         name: 'SessionProjectionUpdate',
@@ -6864,7 +7180,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionRecord',
-        declaration: 'export interface SessionRecord {\n    header: SessionHeader;\n    live: boolean;\n    persisted: boolean;\n}',
+        declaration: 'export interface SessionRecord {\n    header: SessionHeader;\n    live: boolean;\n    persisted: boolean;\n    formatStatus?: \'current\' | \'migration-required\';\n}',
     },
     {
         name: 'SessionReferenceCandidate',
@@ -6960,7 +7276,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionSummary',
-        declaration: 'export interface SessionSummary {\n    readonly agentAvailable: boolean;\n    readonly sessionId: SessionId;\n    readonly updatedAt: number;\n    readonly running: boolean;\n    readonly blank: boolean;\n    readonly parentSessionId?: SessionId;\n    readonly origin?: \'subagent\';\n    readonly cwd?: string;\n    readonly projections?: SessionProjectionHints;\n}',
+        declaration: 'export interface SessionSummary {\n    readonly agentAvailable: boolean;\n    readonly formatStatus?: \'current\' | \'migration-required\';\n    readonly sessionId: SessionId;\n    readonly updatedAt: number;\n    readonly running: boolean;\n    readonly blank: boolean;\n    readonly parentSessionId?: SessionId;\n    readonly origin?: \'subagent\';\n    readonly cwd?: string;\n    readonly projections?: SessionProjectionHints;\n}',
     },
     {
         name: 'SessionSurface',
@@ -7008,7 +7324,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionTitleProviderRequest',
-        declaration: 'export interface SessionTitleProviderRequest {\n    readonly session: Session;\n    readonly messages: readonly SessionTitleUserMessage[];\n    readonly route?: SessionTitleModelIdentity;\n    readonly signal: AbortSignal;\n}',
+        declaration: 'export interface SessionTitleProviderRequest {\n    readonly session: Session;\n    readonly messages: readonly SessionTitleUserMessage[];\n    readonly route?: SessionTitleModelIdentity;\n    readonly currentTitle?: SessionTitleSnapshot;\n    readonly signal: AbortSignal;\n}',
     },
     {
         name: 'SessionTitleProviderResult',
@@ -7314,26 +7630,30 @@ export const TYPE_API = [
         name: 'StreamChunk',
         declaration: 'export type StreamChunk = {\n    type: \'block-start\';\n    index: number;\n    blockType: ContentBlockType;\n} | {\n    type: \'text-delta\';\n    index: number;\n    text: string;\n} | {\n    type: \'reasoning-delta\';\n    index: number;\n    text: string;\n} | {\n    type: \'tool-call-delta\';\n    index: number;\n    id: ToolCallId;\n    name?: string;\n    argumentsDelta: string;\n} | {\n    type: \'block-end\';\n    index: number;\n    block: ContentBlock;\n} | {\n    type: \'usage\';\n    usage: TokenUsage;\n} | {\n    type: \'finish\';\n    reason: FinishReason;\n    replayState?: ReplayEnvelope;\n};',
     },
+    {
+        name: 'SubagentActivation',
+        declaration: 'export interface SubagentActivation {\n    readonly childId: SessionId;\n    readonly messageId?: MessageId;\n    readonly result: Promise<SubagentResult>;\n    dispose(): Promise<void>;\n}',
+    },
+    {
+        name: 'SubagentActivationSpec',
+        declaration: 'export interface SubagentActivationSpec {\n    readonly provider: string;\n    readonly label: string;\n    readonly childId?: SessionId;\n    readonly request: Omit<SubagentStartRequest, \'label\' | \'signal\'>;\n    readonly signal: AbortSignal;\n    readonly delivery: \'parent\' | \'caller\';\n}',
+    },
     {
         name: 'SubagentCapabilities',
-        declaration: 'export interface SubagentCapabilities {\n    readonly agentOptions: boolean;\n    readonly outputSchema: boolean;\n    readonly depthLimit: boolean;\n    readonly toolFilter: boolean;\n    readonly persona: boolean;\n}',
+        declaration: 'export interface SubagentCapabilities {\n    readonly agentOptions: boolean;\n    readonly agentPreset: boolean;\n    readonly outputSchema: boolean;\n    readonly depthLimit: boolean;\n}',
     },
     {
         name: 'SubagentCatalogEntry',
-        declaration: 'export type SubagentCatalogEntry = {\n    readonly id: SessionId;\n    readonly createdAt: number;\n} & ({\n    readonly mode: \'one-shot\';\n    readonly label?: string;\n} | {\n    readonly mode: \'continuable\';\n    readonly label: string;\n} | {\n    readonly mode: \'unknown\';\n    readonly label?: string;\n});',
+        declaration: 'export type SubagentCatalogEntry = {\n    readonly id: SessionId;\n    readonly createdAt: number;\n} & ({\n    readonly mode: \'one-shot\';\n    readonly label?: string;\n} | {\n    readonly mode: \'external\';\n    readonly label?: string;\n} | {\n    readonly mode: \'continuable\';\n    readonly label: string;\n} | {\n    readonly mode: \'unknown\';\n    readonly label?: string;\n});',
     },
     {
         name: 'SubagentCatalogRow',
-        declaration: 'export type SubagentCatalogRow = {\n    readonly id: SessionId;\n    readonly activity: \'running\' | \'inactive\';\n} & ({\n    readonly mode: \'one-shot\';\n    readonly label?: string;\n} | {\n    readonly mode: \'continuable\';\n    readonly label: string;\n});',
+        declaration: 'export type SubagentCatalogRow = {\n    readonly id: SessionId;\n    readonly activity: \'running\' | \'inactive\';\n} & ({\n    readonly mode: \'one-shot\';\n    readonly label?: string;\n} | {\n    readonly mode: \'external\';\n    readonly label?: string;\n} | {\n    readonly mode: \'continuable\';\n    readonly label: string;\n});',
     },
     {
         name: 'SubagentDescendantListEntry',
         declaration: 'export type SubagentDescendantListEntry = SubagentListEntry & {\n    readonly parentId: SessionId;\n    readonly depth: number;\n};',
     },
-    {
-        name: 'SubagentDescriptorData',
-        declaration: 'export type SubagentDescriptorData = OneShotSubagentDescriptorData | ContinuableSubagentDescriptorData;',
-    },
     {
         name: 'SubagentInterruptAuthority',
         declaration: 'export type SubagentInterruptAuthority = {\n    readonly kind: \'user\';\n    readonly parentSessionId: SessionId;\n} | {\n    readonly kind: \'ancestor\';\n    readonly agent: Agent;\n};',
@@ -7360,7 +7680,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentProvider',
-        declaration: 'export interface SubagentProvider {\n    readonly name: string;\n    readonly capabilities: SubagentCapabilities;\n    readonly inheritsParentContext: boolean;\n    readonly agentRouteDefaults?: Readonly<{\n        provider: string;\n        model: string;\n    }>;\n    start(request: ResolvedSubagentStartRequest): Promise<SubagentRun>;\n    prepareContinuable?(request: ContinuableCreateRequest): Promise<ContinuableCreateSpec>;\n}',
+        declaration: 'export interface SubagentProvider {\n    readonly name: string;\n    readonly capabilities: SubagentCapabilities;\n    readonly inheritsParentContext: boolean;\n    readonly agentRouteDefaults?: Readonly<{\n        provider: string;\n        model: string;\n    }>;\n    start?(request: ResolvedSubagentStartRequest): Promise<SubagentRun>;\n    prepareContinuable?(request: ContinuableCreateRequest): Promise<ContinuableCreateSpec>;\n}',
     },
     {
         name: 'SubagentResult',
@@ -7368,7 +7688,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentRun',
-        declaration: 'export interface SubagentRun {\n    readonly id: SessionId;\n    readonly localAgent: Agent | undefined;\n    readonly result: Promise<SubagentResult>;\n    dispose(): Promise<void>;\n}',
+        declaration: 'export interface SubagentRun {\n    readonly id: SessionId;\n    readonly result: Promise<SubagentResult>;\n    dispose(): Promise<void>;\n}',
     },
     {
         name: 'SubagentRunEndInfo',
@@ -7384,7 +7704,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentRuntime',
-        declaration: 'export class SubagentRuntime extends TypertRemoteService {\n    static Config;\n    constructor(ctx: Context, private config: Config);\n    resolveMaxDepth(configured?: number | \'provider-managed\'): number | undefined;\n    async startContinuable(spec: ContinuableStartSpec): Promise<ContinuableStart>;\n    async sendMessage(sender: Agent, targetId: SessionId, content: ContentBlock[], options: SubagentSendMessageOptions): Promise<MessageId>;\n    interrupt(targetSessionId: SessionId, authority: SubagentInterruptAuthority): void;\n    async drainContinuableDescendants(parents: readonly Agent[]): Promise<void>;\n    async drainContinuableChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>;\n    listChildren(parentSessionId: SessionId, signal?: AbortSignal): Promise<SubagentCatalogEntry[]>;\n    listDescendants(rootSessionId: SessionId, signal?: AbortSignal): Promise<SubagentDescendantListEntry[]>;\n    @Remote(\'prompt\')\n    async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>;\n    @Remote(\'interruptByParent\')\n    interruptByParent(childSessionId: SessionId, parentSessionId: SessionId, mode: \'continuable\'): SubagentInterruptReceipt;\n    registerProvider(provider: SubagentProvider): () => void;\n    getProvider(name: string): SubagentProvider | undefined;\n    list(): string[];\n    async start(name: string, request: SubagentStartRequest): Promise<SubagentRun>;\n}',
+        declaration: 'export class SubagentRuntime extends TypertRemoteService {\n    static Config;\n    static inject;\n    constructor(ctx: Context, private config: Config);\n    resolveMaxDepth(configured?: number | \'provider-managed\'): number | undefined;\n    startActivation(spec: SubagentActivationSpec & {\n        readonly childId: SessionId;\n    }): Promise<SubagentActivation & {\n        readonly messageId: MessageId;\n    }>;\n    startActivation(spec: SubagentActivationSpec): Promise<SubagentActivation>;\n    async startActivation(spec: SubagentActivationSpec): Promise<SubagentActivation>;\n    async waitForChildren(parent: Agent): Promise<boolean>;\n    async sendMessage(sender: Agent, targetId: SessionId, content: ContentBlock[], options: SubagentSendMessageOptions): Promise<MessageId>;\n    interrupt(targetSessionId: SessionId, authority: SubagentInterruptAuthority): void;\n    async drainDescendants(parents: readonly Agent[]): Promise<void>;\n    async drainChildren(parent: Agent, childIds: readonly SessionId[]): Promise<void>;\n    listChildren(parentSessionId: SessionId, signal?: AbortSignal): Promise<SubagentCatalogEntry[]>;\n    listDescendants(rootSessionId: SessionId, signal?: AbortSignal): Promise<SubagentDescendantListEntry[]>;\n    @Remote(\'prompt\')\n    async prompt(request: SubagentPromptRequest, signal: AbortSignal): Promise<SubagentPromptReceipt>;\n    @Remote(\'interruptByParent\')\n    interruptByParent(childSessionId: SessionId, parentSessionId: SessionId, mode: \'continuable\'): SubagentIn /* …truncated — full shape in source */',
     },
     {
         name: 'SubagentSendMessageOptions',
@@ -7396,7 +7716,7 @@ export const TYPE_API = [
     },
     {
         name: 'SubagentStartRequest',
-        declaration: 'export interface SubagentStartRequest {\n    readonly label?: string;\n    readonly prompt: ContentBlock[];\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n    readonly agentOptions?: AgentOptions;\n    readonly outputSchema?: ObjectJsonSchema;\n    readonly maxDepth?: number;\n    readonly toolFilter?: ToolRestriction;\n    readonly persona?: string;\n}',
+        declaration: 'export interface SubagentStartRequest {\n    readonly cwd?: string;\n    readonly agentPreset?: string;\n    readonly label?: string;\n    readonly prompt: ContentBlock[];\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n    readonly agentOptions?: AgentOptions;\n    readonly outputSchema?: ObjectJsonSchema;\n    readonly maxDepth?: number;\n}',
     },
     {
         name: 'SubagentStopReason',
@@ -7496,7 +7816,7 @@ export const TYPE_API = [
     },
     {
         name: 'SystemPrompt',
-        declaration: 'export class SystemPrompt extends Service {\n    static Config: z<Config>;\n    constructor(ctx: Context, config: Config);\n    section(section: PromptSection): () => void;\n    getSectionOrder(name: PromptSectionOrderName): number;\n    getContextOrder(name: PromptContextOrderName): number;\n    context(context: PromptContext): () => void;\n    suppressRuntimeContext(): () => void;\n    tools(provider: (context: AssembleContext) => ToolProviderResult): () => void;\n    variable(name: string, provider: (context: AssembleContext) => string | undefined): () => void;\n    async assemble(context: AssembleContext = {}): Promise<PromptAssembly>;\n}',
+        declaration: 'export class SystemPrompt extends Service {\n    static Config: z<Config>;\n    constructor(ctx: Context, config: Config);\n    section(section: PromptSection): () => void;\n    getSectionOrder(name: PromptSectionOrderName): number;\n    getContextOrder(name: PromptContextOrderName): number;\n    context(context: PromptContext): () => void;\n    suppressRuntimeContext(): () => void;\n    tools(provider: (context: AssembleContext) => ToolProviderResult): () => void;\n    variable(name: string, provider: (context: AssembleContext) => string | undefined): () => void;\n    refreshContext(assembly: PromptAssembly, context: AssembleContext = {}): PromptAssembly;\n    async assemble(context: AssembleContext = {}): Promise<PromptAssembly>;\n}',
     },
     {
         name: 'SystemPromptMessageSource',
@@ -7526,10 +7846,6 @@ export const TYPE_API = [
         name: 'TeamMemberView',
         declaration: 'export interface TeamMemberView {\n    readonly id: SessionId;\n    readonly name: string;\n    readonly role: \'lead\' | \'teammate\';\n    readonly status: \'running\' | \'inactive\' | \'provisioning\' | \'failed\';\n    readonly description?: string;\n    readonly provider?: string;\n    readonly context?: \'fresh\' | \'fork\';\n    readonly model?: string;\n    readonly diagnostics: string[];\n}',
     },
-    {
-        name: 'TeamMessageId',
-        declaration: 'export type TeamMessageId = Branded<\'TeamMessageId\'>;',
-    },
     {
         name: 'TeamTaskAction',
         declaration: 'export type TeamTaskAction = \'claim\' | \'release\' | \'edit\' | \'set_dependencies\' | \'complete\' | \'reopen\' | \'reassign\' | \'delete\';',
@@ -7550,10 +7866,6 @@ export const TYPE_API = [
         name: 'TeamWaitResult',
         declaration: 'export interface TeamWaitResult {\n    readonly timedOut: boolean;\n}',
     },
-    {
-        name: 'TerminalAttachmentId',
-        declaration: 'export type TerminalAttachmentId = Branded<\'TerminalAttachmentId\'>;',
-    },
     {
         name: 'TerminalBackend',
         declaration: 'export interface TerminalBackend {\n    readonly type: string;\n    spawn(spec: TerminalBackendSpawnSpec): Promise<TerminalBackendSession>;\n}',
@@ -7576,11 +7888,15 @@ export const TYPE_API = [
     },
     {
         name: 'TerminalEnvironment',
-        declaration: 'export interface TerminalEnvironment {\n    readonly cwd: string;\n    readonly maxInputBytes: number;\n    readonly maxCols: number;\n    readonly maxRows: number;\n    readonly scrollback: number;\n}',
+        declaration: 'export interface TerminalEnvironment {\n    readonly cwd: string;\n    readonly maxInputBytes: number;\n    readonly maxBufferedBytes: number;\n    readonly maxCols: number;\n    readonly maxRows: number;\n    readonly scrollback: number;\n}',
     },
     {
         name: 'TerminalFrame',
-        declaration: 'export type TerminalFrame = {\n    readonly type: \'snapshot\';\n    readonly sequence: number;\n    readonly screen: string;\n    readonly info: WebTerminalInfo;\n} | {\n    readonly type: \'output\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'state\';\n    readonly info: WebTerminalInfo;\n};',
+        declaration: 'export type TerminalFrame = {\n    readonly type: \'snapshot\';\n    readonly sequence: number;\n    readonly screen: string;\n    readonly info: WebTerminalInfo;\n    readonly writable: boolean;\n    readonly inputWindow?: RemoteUplinkWindow;\n} | {\n    readonly type: \'output\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'state\';\n    readonly info: WebTerminalInfo;\n    readonly writable: boolean;\n} | {\n    readonly type: \'ack\';\n    readonly sequence: number;\n    readonly refusal?: \'read-only\' | \'not-running\';\n};',
+    },
+    {
+        name: 'TerminalInput',
+        declaration: 'export type TerminalInput = {\n    readonly type: \'write\';\n    readonly sequence: number;\n    readonly data: string;\n} | {\n    readonly type: \'resize\';\n    readonly sequence: number;\n    readonly cols: number;\n    readonly rows: number;\n};',
     },
     {
         name: 'TerminalReadRequest',
@@ -7780,7 +8096,7 @@ export const TYPE_API = [
     },
     {
         name: 'ToolPresentationMode',
-        declaration: 'export type ToolPresentationMode = \'native\' | \'ptc\' | \'both\';',
+        declaration: 'export type ToolPresentationMode = \'native\' | \'ptc\';',
     },
     {
         name: 'ToolProviderResult',
@@ -7842,6 +8158,18 @@ export const TYPE_API = [
         name: 'TranscriptionRequest',
         declaration: 'export interface TranscriptionRequest {\n    readonly audioBase64: string;\n    readonly providerId?: SpeechProviderId;\n    readonly language?: string;\n}',
     },
+    {
+        name: 'TranslationProvider',
+        declaration: 'export type TranslationProvider = AnonymousTranslationProvider | PaidTranslationProvider;',
+    },
+    {
+        name: 'TranslationRequest',
+        declaration: 'export interface TranslationRequest {\n    readonly text: string;\n    readonly targetLanguage: string;\n    readonly sourceLanguage?: string;\n    readonly provider?: TranslationProvider;\n    readonly sessionId?: SessionId;\n}',
+    },
+    {
+        name: 'TranslationSpec',
+        declaration: 'export type TranslationSpec = AnonymousTranslationSpec | PaidTranslationSpec;',
+    },
     {
         name: 'TurnCompleteInput',
         declaration: 'export interface TurnCompleteInput {\n    turnId: string;\n    answer: string;\n    durationMs: number;\n    isAborted: boolean;\n    reason: \'answer\' | \'aborted\' | \'error\';\n    agentId?: string;\n    usage?: TurnUsage;\n}',
@@ -7876,7 +8204,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertCodec',
-        declaration: 'export type TypertCodec = {\n    readonly mode: \'strict\';\n    readonly typeSymbol: string;\n    readonly create: () => TypertSchema;\n    readonly decode?: (value: unknown) => unknown;\n    readonly encode?: (value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown;\n} | {\n    readonly mode: \'src-json\';\n};',
+        declaration: 'export type TypertCodec<Value = unknown> = TypertRemoteValue<Value> & {\n    readonly mode: \'strict\';\n    readonly typeSymbol: string;\n    readonly decode?: ((value: unknown) => unknown) | undefined;\n    readonly encode?: ((value: unknown, writeBytes: (bytes: Uint8Array, path: readonly (string | number)[]) => null) => unknown) | undefined;\n} | {\n    readonly mode: \'src-json\';\n};',
     },
     {
         name: 'TypertContribution',
@@ -7904,7 +8232,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertGatewayWireStream',
-        declaration: 'export interface TypertGatewayWireStream {\n    readonly open: (endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: PeerScope | undefined, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;\n    readonly failure: (error: unknown) => {\n        readonly code: string;\n        readonly message: string;\n        readonly details: object;\n    };\n}',
+        declaration: 'export interface TypertGatewayWireStream {\n    readonly open: (endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: PeerScope, signal: AbortSignal) => Promise<AsyncIterable<unknown>>;\n    readonly failure: (error: unknown) => {\n        readonly code: string;\n        readonly message: string;\n        readonly details: object;\n    };\n}',
     },
     {
         name: 'TypertMemberModel',
@@ -7936,7 +8264,7 @@ export const TYPE_API = [
     },
     {
         name: 'TypertRemoteEventFrame',
-        declaration: 'export interface TypertRemoteEventFrame {\n    readonly event: string;\n    readonly args: readonly unknown[];\n}',
+        declaration: 'export interface TypertRemoteEventFrame {\n    readonly event: string;\n    readonly args: readonly unknown[];\n    readonly resources?: Readonly<Record<string, TypertResourceReader>>;\n}',
     },
     {
         name: 'TypertRemoteEventInvocation',
@@ -7954,6 +8282,30 @@ export const TYPE_API = [
         name: 'TypertRemoteService',
         declaration: 'export abstract class TypertRemoteService<out T = never> extends Service<T> {\n    readonly typertRemote: TypertGatewayBinding<this>;\n}',
     },
+    {
+        name: 'TypertRemoteValue',
+        declaration: 'export interface TypertRemoteValue<Value = unknown> {\n    readonly create: () => TypertSchema<Value>;\n    readonly description?: string | undefined;\n    readonly jsonSchema?: Readonly<Record<string, unknown>> | undefined;\n    readonly jsonSchemaError?: string | undefined;\n}',
+    },
+    {
+        name: 'TypertResource',
+        declaration: 'export interface TypertResource<Id> {\n    readonly [RESOURCE_ID]: Id;\n}',
+    },
+    {
+        name: 'TypertResourceId',
+        declaration: 'export type TypertResourceId<Resource> = Resource extends TypertResource<infer Id> ? Id : never;',
+    },
+    {
+        name: 'TypertResourceKind',
+        declaration: 'export type TypertResourceKind = Extract<keyof TypertResourceMap, string>;',
+    },
+    {
+        name: 'TypertResourceMap',
+        declaration: 'export interface TypertResourceMap {\n}',
+    },
+    {
+        name: 'TypertResourceReader',
+        declaration: 'export type TypertResourceReader = {\n    read(...args: readonly unknown[]): unknown;\n}[\'read\'];',
+    },
     {
         name: 'TypertSchema',
         declaration: 'export interface TypertSchema<Output = unknown> {\n    parse(value: unknown): Output;\n}',
@@ -8124,7 +8476,7 @@ export const TYPE_API = [
     },
     {
         name: 'WebTerminalInfo',
-        declaration: 'export interface WebTerminalInfo {\n    readonly id: WebTerminalId;\n    readonly title: string;\n    readonly shell: TerminalShell;\n    readonly cwd: string;\n    readonly cols: number;\n    readonly rows: number;\n    readonly state: \'running\' | \'exited\' | \'failed\';\n    readonly exitCode: number | null;\n    readonly error?: string;\n    readonly controllerId?: TerminalAttachmentId;\n}',
+        declaration: 'export interface WebTerminalInfo {\n    readonly id: WebTerminalId;\n    readonly title: string;\n    readonly shell: TerminalShell;\n    readonly cwd: string;\n    readonly cols: number;\n    readonly rows: number;\n    readonly state: \'running\' | \'exited\' | \'failed\';\n    readonly exitCode: number | null;\n    readonly error?: string;\n}',
     },
     {
         name: 'WebUpgradeRoute',
@@ -8284,7 +8636,7 @@ export const TYPE_API = [
     },
     {
         name: 'WorkspaceFollowIncrement',
-        declaration: 'export type WorkspaceFollowIncrement = {\n    readonly type: \'upsert\';\n    readonly workspace: WorkspaceView;\n} | {\n    readonly type: \'remove\';\n    readonly workspaceId: WorkspaceId;\n} | {\n    readonly type: \'order\';\n    readonly workspaceIds: readonly WorkspaceId[];\n} | {\n    readonly type: \'archived\';\n    readonly archivedSessionIds: readonly SessionId[];\n} | {\n    readonly type: \'pinned\';\n    readonly pinnedSessionIds: readonly SessionId[];\n};',
+        declaration: 'export type WorkspaceFollowIncrement = {\n    readonly type: \'replace\';\n    readonly value: WorkspaceBaseline;\n} | {\n    readonly type: \'upsert\';\n    readonly workspace: WorkspaceView;\n} | {\n    readonly type: \'remove\';\n    readonly workspaceId: WorkspaceId;\n} | {\n    readonly type: \'order\';\n    readonly workspaceIds: readonly WorkspaceId[];\n} | {\n    readonly type: \'archived\';\n    readonly archivedSessionIds: readonly SessionId[];\n} | {\n    readonly type: \'pinned\';\n    readonly pinnedSessionIds: readonly SessionId[];\n};',
     },
     {
         name: 'WorkspaceInsertBeforeRequest',