@deepseek-ai/dsh-tool-cordis 0.2.1-rc.5 → 0.2.2-alpha.3

package/lib/types/api-catalog.js

@@ -13,6 +13,38 @@
  */
 /** Every harness `ctx.<key>` service, sorted by key. */
 export const SERVICE_API = [
+    {
+        key: 'actionCards',
+        summary: 'Card tool, kind registry, Session projection, user actions and status notices.',
+        description: 'Card tool, kind registry, Session projection, user actions and status notices.',
+        methods: [
+            {
+                signature: 'register<Details>(kind: ActionCardKind<Details>): () => void',
+                description: 'Register one action kind for the caller\'s lifetime.',
+                parameters: [{ name: 'kind', description: 'the kind\'s skill, details schema, verbs and handler.' }],
+                returns: 'disposer removing the kind; actions on its cards are then unavailable.',
+                throws: ['when another kind already registered the same action.'],
+            },
+            {
+                signature: 'record(agent: Agent, decision: ActionCardDecision): void',
+                description: 'Record a card decision in the Session log; the next model request reports it.',
+                parameters: [{ name: 'agent', description: 'agent whose Session owns the card.' }, { name: 'decision', description: 'the card\'s new state.' }],
+                throws: ['when no kind ever registered the decision\'s action with this service, or its phase is one the projection derives.'],
+            },
+            {
+                signature: 'view(session: Session): ActionCardView',
+                description: 'Read the cards of one Session.',
+                parameters: [{ name: 'session', description: 'a Session whose projections are prepared.' }],
+                returns: 'proposals and decisions by call id.',
+            },
+            {
+                signature: '@Remote act(agent: Agent, callId: ToolCallId, verb: string, payload?: Record<string, JsonValue>): Promise<ActionCardResult>',
+                description: 'Apply a user action to a logged card. Shared checks run first, then the kind reconciles the card; `dismiss` is recorded here and every other verb goes to the card\'s kind. `dismiss` also works on an unstarted card whose kind is no longer registered. Concurrent actions on one card share one operation.',
+                parameters: [{ name: 'agent', description: 'live root resolved from the displayed Session.' }, { name: 'callId', description: 'the card\'s `propose_action` call id.' }, { name: 'verb', description: '`dismiss` or one of the kind\'s verbs.' }, { name: 'payload', description: 'kind-defined fields such as a chosen location.' }],
+                returns: 'acceptance of background work, the decision in effect, or a refusal.',
+            },
+        ],
+    },
     {
         key: 'agentDefaultModel',
         summary: 'Owns the default model selection independently of any Host or transport.',
@@ -67,6 +99,12 @@ export const SERVICE_API = [
         summary: 'Registry of YAML-declared presets and the revisions live Agents retain.',
         description: 'Registry of YAML-declared presets and the revisions live Agents retain.',
         methods: [
+            {
+                signature: 'presetForSession(session: Session): string | null',
+                description: 'Read the preset recorded for a Session, including selections no longer in the roster.',
+                parameters: [{ name: 'session', description: 'Session whose committed preset selection is read.' }],
+                returns: 'the recorded preset, or null when none was selected.',
+            },
             {
                 signature: 'async register(definition: PresetDefinition): Promise<() => Promise<void>>',
                 description: 'Register and eagerly load a definition; activation failure remains visible in the roster.',
@@ -158,6 +196,12 @@ export const SERVICE_API = [
         summary: 'Agent service (`ctx.agents`): tracks live agents and carries the initiating Agent through one process-local asynchronous driver chain.',
         description: 'Agent service (`ctx.agents`): tracks live agents and carries the initiating Agent through one process-local asynchronous driver chain. Agent *creation* is provided by whichever plugin implements the AgentFactory (`@deepseek-ai/dsh-agent-loop`), registered via setFactory.\n\nInitiator methods provide same-process causal attribution only. Ambient presence is neither liveness proof nor authorization; subjects and owners remain explicit, as does identity at worker, process, persistence, and wire boundaries. Returned Promise boundaries drain during teardown, except a nested lineage that starts an owning-fiber unload is excluded from its own drain.',
         methods: [
+            {
+                signature: 'turnBoundaryOf(session: Session): TurnBoundaryProjection',
+                description: 'Read the turn and step positions recorded in a Session.',
+                parameters: [{ name: 'session', description: 'Session whose committed events are read.' }],
+                returns: 'the current turn and step positions; do not mutate the returned value.',
+            },
             {
                 signature: 'currentInitiator(): Agent | undefined',
                 description: 'Read the Agent that initiated the inherited asynchronous driver chain. Use this optional form for logging, tracing, metrics, or host attribution that also supports agentless calls. When a parent creates a child, setup reports the causal parent while the setup callback\'s Agent parameter identifies the child.',
@@ -371,8 +415,8 @@ export const SERVICE_API = [
             },
             {
                 signature: 'async admitPromptContent( content: readonly AttachmentAdmissionPart[], ): Promise<AdmittedPromptContentPart[]>',
-                description: 'Admit one Host prompt and replace each uploaded image with its durable reference. Text and durable file references pass through unchanged. A prompt without image parts performs no storage operation.',
-                parameters: [{ name: 'content', description: 'prompt parts in message order after file receipt resolution.' }],
+                description: 'Admit one Host prompt and replace each encoded image with its durable reference. Text, durable file references, and already stored images pass through unchanged. Every image part counts toward `maxImagesPerMessage` and `maxMessageImageBytes`; a stored image counts the bytes of the upload that stored it. Refused content starts no writes. A prompt without encoded images performs no storage operation.',
+                parameters: [{ name: 'content', description: 'prompt parts in message order after upload receipt resolution.' }],
                 returns: 'admitted prompt parts in the same order as `content`.',
                 throws: ['AttachmentError when the image batch is refused.'],
             },
@@ -397,8 +441,8 @@ export const SERVICE_API = [
             },
             {
                 signature: 'abstract readImage(ref: ImageAttachmentRef, signal?: AbortSignal): Promise<StoredImageAttachment>',
-                description: 'Read one image and verify that bytes still match the recorded reference.',
-                parameters: [{ name: 'ref', description: 'durable reference from the session log.' }, { name: 'signal', description: 'optional cancellation for backend read and verification work.' }],
+                description: 'Read one image and verify its ID, format, byte length, and dimensions against the supplied reference.',
+                parameters: [{ name: 'ref', description: 'supplied image reference; name and originalDimensions are preserved without file verification.' }, { name: 'signal', description: 'optional cancellation for backend read and verification work.' }],
                 returns: 'the verified bytes and normalized attachment reference.',
                 throws: ['the signal reason when aborted, or a storage error when verification fails.'],
             },
@@ -424,7 +468,7 @@ export const SERVICE_API = [
             {
                 signature: 'async *readFileStream( ref: FileAttachmentRef, signal?: AbortSignal, ): AsyncIterable<Uint8Array>',
                 description: 'Read and verify one verbatim stored file as bounded chunks. Providers must not collect the complete file in memory. Backends without verbatim file reads keep this default rejection.',
-                parameters: [{ name: 'ref', description: 'durable reference from the session log.' }, { name: 'signal', description: 'optional cancellation for backend reads and verification work.' }],
+                parameters: [{ name: 'ref', description: 'durable file reference from the session log.' }, { name: 'signal', description: 'optional cancellation for backend reads and verification work.' }],
                 returns: 'exact file bytes in order; integrity failures reject the iteration.',
             },
             {
@@ -521,8 +565,8 @@ export const SERVICE_API = [
     },
     {
         key: 'clientModules',
-        summary: 'The web plugin table service: incremental `dsh.client` scan + wire composition + bundle route + index injection rows.',
-        description: 'The web plugin table service: incremental `dsh.client` scan + wire composition + bundle route + index injection rows. Construction runs the activation scan synchronously — a malformed declaration or missing bundle among the already-loaded entries aggregates into one loud throw (FAILED fiber; the boot activation audit reports it).',
+        summary: 'The web plugin table service: incremental `dsh.client` scan + wire composition + bundle and package-asset route + index injection rows.',
+        description: 'The web plugin table service: incremental `dsh.client` scan + wire composition + bundle and package-asset route + index injection rows. Construction runs the activation scan synchronously — a malformed declaration or missing bundle among the already-loaded entries aggregates into one loud throw (FAILED fiber; the boot activation audit reports it).',
         methods: [
             {
                 signature: 'graph(): WebBootGraph',
@@ -538,7 +582,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'async fetchBundle(request: Request): Promise<Response>',
-                description: 'Serve an advertised revisioned bundle or source map without a Web server. Unknown URLs return 404, unsupported methods return 405, and `HEAD` returns the same immutable headers without materializing a body. Each body is built once on its first `GET`; script construction never reads maps.',
+                description: 'Serve an advertised revisioned bundle, source map, chunk, or package asset without a Web server. Unknown URLs return 404, unsupported methods return 405, and `HEAD` returns the same immutable headers without materializing a body. Each bundle body is built once on its first `GET`; script construction never reads maps. A package asset is read on every request and answers 304 without a body when `If-None-Match` equals its entity tag; its body holds the file open until the caller consumes or cancels it. A bundle, map, or chunk body is the held buffer itself, not a copy, so a caller must not modify its bytes.',
                 parameters: [{ name: 'request', description: 'shell-carrier request for a `/plugins` resource.' }],
                 returns: 'the exact response also exposed by the optional Web route.',
             },
@@ -550,13 +594,13 @@ export const SERVICE_API = [
             },
             {
                 signature: 'rebuilt(id: string): string | undefined',
-                description: 'Publish one completed bundle generation (the HMR watch\'s registration hook — the only entry point through which build changes reach the graph). Unchanged mtime, ctime and size preserve the graph without reading the bundle.',
+                description: 'Publish one completed bundle generation (the HMR watch\'s registration hook; an entry restart publishes through reconciliation instead). Unchanged mtime, ctime and size preserve the graph without reading the bundle.',
                 parameters: [{ name: 'id', description: 'entry id (package name).' }],
                 returns: 'the current artifact rev, or undefined for an unknown id.',
             },
             {
                 signature: 'onRebuilt(listener: (id: string, rev: string) => void): () => void',
-                description: 'Subscribe to bundle rebuilds; fires only when artifact metadata changes the rev.',
+                description: 'Subscribe to bundle rebuilds; fires when rebuilt changes a rev. A rev an entry restart publishes reaches only onGraphChanged listeners.',
                 parameters: [{ name: 'listener', description: 'receives the entry id and its new bundle rev.' }],
                 returns: 'the unsubscriber.',
             },
@@ -842,6 +886,67 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'cuaAccess',
+        summary: 'Browser controls for provider-owned native permission and application decisions.',
+        description: 'Browser controls for provider-owned native permission and application decisions.',
+        methods: [
+            {
+                signature: '@Remote ptcConfiguration(): { persistent: boolean; writable: boolean }',
+                description: 'Read PTC execution state separately from native permission checks.',
+                parameters: [],
+                returns: 'Whether the shared runtime retains memory and has an editable profile entry.',
+            },
+            {
+                signature: '@Remote async enablePersistentPtc(): Promise<void>',
+                description: 'Persist in-memory PTC execution through the existing profile editor and Loader lifecycle.',
+                parameters: [],
+                returns: 'Completion after the shared runtime reload; already-persistent runtimes are left intact.',
+            },
+            {
+                signature: '@Remote applications(): Promise<CuaApplicationState>',
+                description: 'Read fresh stored application decisions without issuing a native request.',
+                parameters: [],
+                returns: 'Saved grants, refused applications and durable-storage availability.',
+            },
+            {
+                signature: '@Remote async systemStatus(): Promise<CuaSystemPermissionState>',
+                description: 'Inspect system privileges independently of application decisions and icons.',
+                parameters: [],
+                returns: 'Fresh native preflight and launch metadata.',
+            },
+            {
+                signature: '@Remote async applicationIcons(): Promise<Record<string, string>>',
+                description: 'Load presentation icons separately from application decisions.',
+                parameters: [],
+                returns: 'Optional native PNG icons keyed by executable path; applications without paths are skipped.',
+            },
+            {
+                signature: '@Remote async requestPermission(permission: CuaSystemPermission, locale: string): Promise<CuaSystemPermissionState>',
+                description: 'Request the selected system privilege through the native provider.',
+                parameters: [{ name: 'permission', description: 'macOS privilege to request.' }, { name: 'locale', description: 'Current Client language for provider-owned permission UI.' }],
+                returns: 'Current permission observations; requesting does not establish consent.',
+            },
+            {
+                signature: '@Remote async openSettings(permission: CuaSystemPermission, locale: string): Promise<void>',
+                description: 'Open the macOS privacy pane selected by the user.',
+                parameters: [{ name: 'permission', description: 'Corresponding system privilege.' }, { name: 'locale', description: 'Current Client language for provider-owned recovery instructions.' }],
+                returns: 'Completion after macOS accepted the open request.',
+            },
+            {
+                signature: '@Remote revoke(id: CuaApplicationId): Promise<void>',
+                description: 'Remove saved and session access and join affected operations.',
+                parameters: [{ name: 'id', description: 'Application identity displayed on the permission page.' }],
+                returns: 'Completion after persistence and cancellation; dispatched input cannot be undone.',
+            },
+            {
+                signature: '@Remote async retryApproval(id: CuaApplicationId): Promise<void>',
+                description: 'Clear this application\'s refusals across sessions so each session may ask for access again.',
+                parameters: [{ name: 'id', description: 'Refused or revoked application displayed on the permission page.' }],
+                returns: 'Completion after clearing refusals; no permission is granted and no action is replayed.',
+            },
+        ],
+    },
     {
         key: 'deepseekAccount',
         summary: 'Account operations; only Host consumers can obtain a request credential.',
@@ -1009,7 +1114,7 @@ export const SERVICE_API = [
                 returns: 'disposer removing this resolver.',
             },
             {
-                signature: '@Remote(\'upload\') upload(agent: Agent, request: EncodedFileUploadRequest, signal: AbortSignal): Promise<FileUploadValue>',
+                signature: '@Remote(\'upload\') async upload(agent: Agent, request: EncodedFileUploadRequest, signal: AbortSignal): Promise<FileUploadValue>',
                 description: 'Persist one encoded upload and stage it under the Agent receiver selected by Typert.',
                 parameters: [{ name: 'agent', description: 'receiving Agent resolved from the Remote Agent scope.' }, { name: 'request', description: 'canonical base64 bytes and optional display name.' }, { name: 'signal', description: 'caller cancellation before storage begins.' }],
                 returns: 'the staged receipt and durable file reference.',
@@ -1021,10 +1126,16 @@ export const SERVICE_API = [
                 returns: 'the staged receipt and durable file reference.',
             },
             {
-                signature: 'resolve(agent: Agent, receiptId: FileUploadReceiptId): FileAttachmentRef | undefined',
+                signature: 'async uploadImageStream(request: { readonly sessionId: SessionId readonly data: AsyncIterable<Uint8Array> readonly mediaType: string readonly signal?: AbortSignal readonly name?: string }): Promise<ImageUploadValue>',
+                description: 'Persist one prompt image for a Session: read at most the smaller of the deployment\'s per-image and per-message byte limits, then validate, normalize, and store the image the way prompt admission does, so a later prompt cites it by receipt. Cancellation before storage begins stores nothing; a cancelled upload never receives a receipt, although an image whose storage already began stays in the content-addressed store.',
+                parameters: [{ name: 'request', description: 'Session identity, ordered bytes, the declared media type that this deployment must accept, cancellation, and optional display name.' }],
+                returns: 'the staged receipt and durable normalized image reference.',
+            },
+            {
+                signature: 'resolve(agent: Agent, receiptId: FileUploadReceiptId): StagedAttachment | undefined',
                 description: 'Resolve one staged receipt for the receiving Agent\'s exact Session.',
                 parameters: [{ name: 'agent', description: 'receiving Agent.' }, { name: 'receiptId', description: 'opaque receipt minted for one completed upload.' }],
-                returns: 'durable file reference, or `undefined` for an unknown or foreign receipt.',
+                returns: 'the staged file or image, or `undefined` for an unknown or foreign receipt.',
             },
             {
                 signature: 'bindPrompt( agent: Agent, receiptIds: readonly FileUploadReceiptId[], requestId: string, ): PromptFileBinding',
@@ -1039,10 +1150,290 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'forge',
+        summary: 'Registry of forge providers.',
+        description: 'Registry of forge providers. Watchers of one change request share a single polling loop; each forge has at most one fetch in flight, which batches every due change request of that forge.',
+        methods: [
+            {
+                signature: 'register(provider: ForgeProvider): () => Promise<void>',
+                description: 'Register the provider of one forge family as an effect on the calling fiber. Watches of that forge receive an `unavailable` failure when the registration ends. Unregistering cancels and awaits its in-flight calls; results from the withdrawn registration are discarded.',
+                parameters: [{ name: 'provider', description: 'provider to serve `provider.forge`.' }],
+                returns: 'the disposer that unregisters the provider and waits for its calls to finish.',
+                throws: ['when another provider already serves the same forge.'],
+            },
+            {
+                signature: 'repositoryFromRemote(url: string): ForgeRepository | undefined',
+                description: 'Map a Git remote URL to a repository through the first provider that serves it.',
+                parameters: [{ name: 'url', description: 'fetch or push URL as Git reports it.' }],
+                returns: 'the repository, or undefined when no provider serves the URL.',
+            },
+            {
+                signature: 'changeRequestFromUrl(url: string): ChangeRequestRef | undefined',
+                description: 'Map a change request web URL through the first provider that serves it.',
+                parameters: [{ name: 'url', description: 'web URL of a pull or merge request.' }],
+                returns: 'the change request, or undefined when no provider serves the URL.',
+            },
+            {
+                signature: 'changeRequestUrl(ref: ChangeRequestRef): string',
+                description: 'Build the canonical web URL of a change request.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }],
+                returns: 'the provider\'s canonical URL.',
+                throws: ['when no provider serves the change request\'s forge.'],
+            },
+            {
+                signature: 'async findByHead(repository: ForgeRepository, branch: string, signal: AbortSignal): Promise<readonly ChangeRequestRef[]>',
+                description: 'Find open change requests whose head is `branch`, excluding the default branch and forks.',
+                parameters: [{ name: 'repository', description: 'repository served by a registered provider.' }, { name: 'branch', description: 'head branch name on the host.' }, { name: 'signal', description: 'cancellation for the lookup.' }],
+                returns: 'matching change requests, newest first as the provider reports them.',
+                throws: ['when no provider serves the repository\'s forge or the lookup fails.'],
+            },
+            {
+                signature: 'async readiness(repository: ForgeRepository, signal: AbortSignal): Promise<ForgeReadiness>',
+                description: 'Report whether the provider can reach the repository\'s host with current credentials.',
+                parameters: [{ name: 'repository', description: 'repository served by a registered provider.' }, { name: 'signal', description: 'cancellation for the probe.' }],
+                returns: 'the provider\'s readiness for the host.',
+                throws: ['when no provider serves the repository\'s forge.'],
+            },
+            {
+                signature: 'async markReady(ref: ChangeRequestRef, signal: AbortSignal): Promise<ForgeActionFailure | undefined>',
+                description: 'Mark a draft change request ready for review, then poll it at once when it is watched.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'signal', description: 'cancellation of the request.' }],
+                returns: 'undefined once the host accepted the change, or why it did not.',
+                throws: ['when no provider serves the change request\'s forge, or with `signal.reason` when it aborts.'],
+            },
+            {
+                signature: 'async merge(ref: ChangeRequestRef, request: MergeRequest, signal: AbortSignal): Promise<ForgeActionFailure | undefined>',
+                description: 'Merge a change request while its head is still `request.headSha`, then poll it at once when it is watched.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'request', description: 'merge method and the head commit the user confirmed.' }, { name: 'signal', description: 'cancellation of the request.' }],
+                returns: 'undefined once the host merged it, or why it did not.',
+                throws: ['when no provider serves the change request\'s forge, or with `signal.reason` when it aborts.'],
+            },
+            {
+                signature: 'async fetchChecks(ref: ChangeRequestRef, signal: AbortSignal): Promise<ChangeRequestSnapshot | ForgeFailure>',
+                description: 'Read complete check details independently of periodic polling.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'signal', description: 'cancellation of the detail view.' }],
+                returns: 'a complete snapshot or the provider\'s failure; unsupported providers return unavailable.',
+                throws: ['on cancellation, provider disposal, or expiry of this read\'s own `fetchTimeoutMs` deadline.'],
+            },
+            {
+                signature: 'async diff(ref: ChangeRequestRef, signal: AbortSignal): Promise<string | ForgeFailure>',
+                description: 'Read the changes of a change request as its host computes them.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'signal', description: 'cancellation of the read.' }],
+                returns: 'one unified patch with `a/` and `b/` path prefixes, or why the host did not provide it.',
+                throws: ['when no provider serves the change request\'s forge, or with `signal.reason` when it aborts.'],
+            },
+            {
+                signature: 'async submitReview(ref: ChangeRequestRef, request: ForgeReviewRequest, signal: AbortSignal): Promise<ForgeReviewResult>',
+                description: 'Publish one comment or a completed review, then refresh the watched status.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'request', description: 'explicitly selected commit, comments, and review decision.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'a publication URL or a failure, including an unknown write outcome.',
+            },
+            {
+                signature: 'async fileText(ref: ChangeRequestRef, commit: string, path: string, signal: AbortSignal): Promise<string | ForgeFailure>',
+                description: 'Read the text of one file at a commit of a change request\'s repository.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'commit', description: 'commit object name.' }, { name: 'path', description: 'path relative to the repository root.' }, { name: 'signal', description: 'cancellation of the read.' }],
+                returns: 'the text, or why the host did not provide it.',
+                throws: ['when no provider serves the change request\'s forge, or with `signal.reason` when it aborts.'],
+            },
+            {
+                signature: 'fileUrl(ref: ChangeRequestRef, commit: string, path: string): string',
+                description: 'Build the web page of one file at a commit of a change request\'s repository.',
+                parameters: [{ name: 'ref', description: 'change request served by a registered provider.' }, { name: 'commit', description: 'commit object name.' }, { name: 'path', description: 'path relative to the repository root.' }],
+                returns: 'the provider\'s URL.',
+                throws: ['when no provider serves the change request\'s forge.'],
+            },
+            {
+                signature: 'watch(ref: ChangeRequestRef, listener: ChangeRequestListener): () => void',
+                description: 'Watch one change request as an effect on the calling fiber. The first watcher starts polling at once; listeners receive every later result, and `latest` returns the current one. Polling stops when the last watcher leaves. Listeners must not throw; a thrown error is logged and skipped.',
+                parameters: [{ name: 'ref', description: 'change request to poll.' }, { name: 'listener', description: 'receives each polling result.' }],
+                returns: 'the disposer that stops this watch.',
+            },
+            {
+                signature: 'refresh(ref: ChangeRequestRef): void',
+                description: 'Poll a watched change request at once, including after a terminal state. A fetch already in flight is followed immediately by another fetch; an unwatched change request is unchanged.',
+                parameters: [{ name: 'ref', description: 'change request to poll.' }],
+            },
+            {
+                signature: 'latest(ref: ChangeRequestRef): ChangeRequestUpdate | undefined',
+                description: 'Read the latest polling result of a watched change request.',
+                parameters: [{ name: 'ref', description: 'change request to read.' }],
+                returns: 'the latest result, or undefined before the first result or without a watch.',
+            },
+        ],
+    },
+    {
+        key: 'forgePanel',
+        summary: 'Serves the forge panel.',
+        description: 'Serves the forge panel. Following a Session inspects the checkout of its current directory using the Session\'s permissions and execution world, recognizes the code host of the upstream remote or `origin`, probes sign-in for that host, and polls the Session\'s bound change requests through `ctx.forge` until the last follower of that Session leaves. A worktree request makes the panel create a branch and checkout through an optional `ctx.worktrees` and enter it while the Session\'s first message waits in the inbox, or at the first step proposal of a message no wait took. After a failed or stopped attempt the message keeps waiting for another attempt or for the request to be withdrawn. A message also waits while the worktree the Session works in is gone, until that worktree is checked out again or left for the source checkout. Changes to a Session\'s checkout run as Agent maintenance, so a message that arrives meanwhile waits for them.',
+        methods: [
+            {
+                signature: '@Remote({ mode: \'stream\' }) async *follow(session: Session, signal: AbortSignal): AsyncIterable<ForgePanelState>',
+                description: 'Stream the panel state of a Session: the current state first, then each later state. Intermediate states may be skipped when the reader is slower than the updates. The stream ends when `signal` aborts or the Remote stops.',
+                parameters: [{ name: 'session', description: 'Session to follow.' }, { name: 'signal', description: 'ends the stream.' }],
+                returns: 'panel states in publication order.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) async *changeRequestStates(signal: AbortSignal): AsyncIterable<ForgeChangeRequestStatesFrame>',
+                description: 'Stream the last known state of every change request that a listed Session the caller may read binds: the stored states first, then each state a poll changes or a new binding reveals. Listing reads no Session log: loaded Sessions report their bindings, others the cached Session summary, and a Session without one shows nothing until it is opened. Closed requests are polled at the idle cadence so reopening is observed. The stream ends when `signal` aborts or the Remote stops.',
+                parameters: [{ name: 'signal', description: 'ends the stream.' }],
+                returns: 'frames in publication order.',
+                throws: ['when the Host lacks the Session query, projection cache, storage, or Session store service.'],
+            },
+            {
+                signature: '@Remote async branches(session: Session, signal: AbortSignal): Promise<ForgeBranches>',
+                description: 'List the local branches that can start a worktree of the Session\'s current checkout.',
+                parameters: [{ name: 'session', description: 'Session whose current directory is listed.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'the checked-out branch and at most `maxBranches` local branches, the checked-out one first.',
+                throws: ['when the current directory is not inside a checkout or Git fails.'],
+            },
+            {
+                signature: '@Remote async track(session: Session, url: string, signal: AbortSignal): Promise<void>',
+                description: 'Bind a change request to a Session by URL, or restore a dismissed binding.',
+                parameters: [{ name: 'session', description: 'Session that receives the binding.' }, { name: 'url', description: 'web URL of the change request.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/unrecognized-url` when no registered provider serves the URL.'],
+            },
+            {
+                signature: '@Remote async dismiss(session: Session, url: string, signal: AbortSignal): Promise<void>',
+                description: 'Hide a visible binding of a Session; other URLs leave the Session unchanged.',
+                parameters: [{ name: 'session', description: 'Session that owns the binding.' }, { name: 'url', description: 'web URL of the change request.' }, { name: 'signal', description: 'request cancellation.' }],
+            },
+            {
+                signature: '@Remote async refresh(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Reinspect a followed Session\'s checkout, probe sign-in again, and poll its change requests at once; an unfollowed Session is unchanged.',
+                parameters: [{ name: 'session', description: 'Session whose panel refreshes.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'settles once the inspection and the sign-in probe have ended; poll results reach the panel stream later.',
+            },
+            {
+                signature: '@Remote async localDiff(session: Session, scope: ForgeLocalScope, signal: AbortSignal): Promise<ForgeLocalDiff>',
+                description: 'Read the changes one scope covers in the checkout of the Session\'s current directory, with Git using the Session\'s sandbox policy.',
+                parameters: [{ name: 'session', description: 'Session whose checkout is read.' }, { name: 'scope', description: 'which changes to read.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'the files, the base of the `branch` scope, and the untracked files left out.',
+                throws: ['`forgePanel/not-a-checkout` outside a checkout; `forgePanel/no-fork-point` for the `branch` scope of a checkout without one; `forgePanel/filter-config-failed` when filter configuration cannot be read completely, before any comparison; `forgePanel/diff-too-large` over `maxDiffBytes`; the Git error when Git fails.'],
+            },
+            {
+                signature: '@Remote async localText(session: Session, scope: ForgeLocalScope, path: string, signal: AbortSignal): Promise<string>',
+                description: 'Read the new side of one changed file in a scope, which supplies the unchanged lines between its hunks: the index for `staged`, else the working tree.',
+                parameters: [{ name: 'session', description: 'Session whose checkout is read.' }, { name: 'scope', description: 'the scope the diff was read in.' }, { name: 'path', description: 'path relative to the checkout\'s top-level directory, as the diff names it.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'the text.',
+                throws: ['`forgePanel/not-a-checkout` outside a checkout; `forgePanel/diff-too-large` over `maxDiffBytes`; an error for a path outside the checkout, binary content, or a failed read.'],
+            },
+            {
+                signature: '@Remote async changeRequestChecks(session: Session, url: string, headSha: string, signal: AbortSignal): Promise<ChangeRequestSnapshot>',
+                description: 'Load complete checks for the change request whose list the user opened.',
+                parameters: [{ name: 'session', description: 'Session retaining the visible binding.' }, { name: 'url', description: 'binding URL.' }, { name: 'headSha', description: 'commit displayed by the card; a different head rejects the result.' }, { name: 'signal', description: 'cancellation when the list closes.' }],
+                returns: 'the complete snapshot at the displayed head.',
+                throws: ['`forgePanel/not-bound` for an invisible binding, `forgePanel/stale-head` for a moved head, or `forgePanel/checks-failed` when the provider cannot complete the read.'],
+            },
+            {
+                signature: '@Remote async changeRequestDiff(session: Session, url: string, signal: AbortSignal): Promise<ForgeChangeRequestDiff>',
+                description: 'Read the changes of a change request of a Session as its code host computes them, at the head commit of its latest status. A patch already read at the same head commit and base branch is reused from memory, for any Session, until `maxCachedDiffBytes` evicts it.',
+                parameters: [{ name: 'session', description: 'Session the change request is bound to.' }, { name: 'url', description: 'binding URL of the change request.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'the files, the head commit, each file\'s web page, and the commits the checkout has beyond the head.',
+                throws: ['`forgePanel/not-bound` unless the URL is a visible binding of the Session that a provider serves; `forgePanel/diff-too-large` when the host or its provider refuses the diff over a size limit; `forgePanel/diff-failed` before its status was read and when the host does not provide the diff otherwise.'],
+            },
+            {
+                signature: '@Remote async changeRequestText(session: Session, url: string, commit: string, path: string, signal: AbortSignal): Promise<string>',
+                description: 'Read one file of a change request\'s repository at a commit, which supplies the unchanged lines between the hunks of its diff.',
+                parameters: [{ name: 'session', description: 'Session the change request is bound to.' }, { name: 'url', description: 'binding URL of the change request.' }, { name: 'commit', description: 'commit object name, the head commit of the diff.' }, { name: 'path', description: 'path relative to the repository root.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'the text.',
+                throws: ['`forgePanel/not-bound` unless the URL is a visible binding of the Session that a provider serves; `forgePanel/diff-too-large` when the host or its provider refuses the file over a size limit; `forgePanel/diff-failed` when the host does not provide the file otherwise.'],
+            },
+            {
+                signature: '@Remote async submitReview(session: Session, url: string, request: ForgeReviewRequest, signal: AbortSignal): Promise<ForgeReviewResult>',
+                description: 'Publish a line comment or completed review for a visible Session binding.',
+                parameters: [{ name: 'session', description: 'Session retaining the change request.' }, { name: 'url', description: 'visible binding URL.' }, { name: 'request', description: 'reviewed head, ranges, plain text, and explicit review decision.' }, { name: 'signal', description: 'request cancellation.' }],
+                returns: 'confirmed publication or a typed failure; unknown outcomes require reconciliation on the host.',
+            },
+            {
+                signature: '@Remote async markReady(session: Session, url: string, signal: AbortSignal): Promise<void>',
+                description: 'Mark a draft change request of a Session ready for review; the change request is polled again once the host answers.',
+                parameters: [{ name: 'session', description: 'Session the change request is bound to.' }, { name: 'url', description: 'binding URL of the change request.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/not-bound` unless the URL is a visible binding of the Session that a provider serves; `forgePanel/action-failed` with the host\'s reason when the host refuses or cannot be reached.'],
+            },
+            {
+                signature: '@Remote async merge(session: Session, url: string, method: MergeMethod, headSha: string, signal: AbortSignal): Promise<void>',
+                description: 'Merge a change request of a Session while its head is still `headSha`; the change request is polled again once the host answers.',
+                parameters: [{ name: 'session', description: 'Session the change request is bound to.' }, { name: 'url', description: 'binding URL of the change request.' }, { name: 'method', description: 'how the commits enter the base branch.' }, { name: 'headSha', description: 'head commit the user confirmed.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/not-bound` unless the URL is a visible binding of the Session that a provider serves; `forgePanel/stale-head` when the head moved past `headSha`; `forgePanel/action-failed` with the host\'s reason when the host refuses otherwise or cannot be reached.'],
+            },
+            {
+                signature: '@Remote async requestWorktree(session: Session, from: string | null, signal: AbortSignal): Promise<void>',
+                description: 'Ask for a new worktree before the Session\'s first turn, replacing an open request and forgetting a failed attempt. While the next message waits in the inbox, or else at the first step proposal, the panel creates a branch from `from`, or from HEAD of the current checkout when it is null, and enters its checkout. A message that already waits after a failed or stopped attempt keeps waiting for ForgePanelController.retryWorktree.',
+                parameters: [{ name: 'session', description: 'Session without a started turn.' }, { name: 'from', description: 'local base branch, or null for HEAD.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/invalid-branch` when `from` is empty; `forgePanel/worktrees-unavailable` without a worktree service; `forgePanel/session-started` after a turn started or the worktree was created; `forgePanel/session-busy` while the worktree is being created.'],
+            },
+            {
+                signature: '@Remote async cancelWorktree(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Withdraw the open worktree request of a Session with its failed attempt, which lets a waiting message go on in the current checkout; without a request the Session is unchanged. Withdrawing needs no worktree service.',
+                parameters: [{ name: 'session', description: 'Session without a started turn.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/session-started` after a turn started or the worktree was created; `forgePanel/session-busy` while the worktree is being created.'],
+            },
+            {
+                signature: '@Remote async stopCreation(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Stop the creation a message of the Session waits for; the message keeps waiting with the request still open. Without such a creation the Session is unchanged.',
+                parameters: [{ name: 'session', description: 'Session whose creation stops.' }, { name: 'signal', description: 'request cancellation.' }],
+            },
+            {
+                signature: '@Remote async retryWorktree(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Make another attempt, with a new branch name, at the worktree a message of the Session waits for after a failed or stopped attempt.',
+                parameters: [{ name: 'session', description: 'Session whose message waits.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/not-waiting` when no message waits or an attempt is running.'],
+            },
+            {
+                signature: '@Remote async restoreWorktree(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Check out the created worktree of a Session again at its recorded directory when that directory is gone: its branch when the branch still exists, otherwise a new branch of the same name at the base commit. Changes that were never committed are not recovered. Runs as Agent maintenance, inside the wait of a message that waits for the restoration, which then goes on; without a missing directory the Session is unchanged.',
+                parameters: [{ name: 'session', description: 'Session whose worktree directory is gone.' }, { name: 'signal', description: 'request cancellation, which aborts the restoration.' }],
+                throws: ['`forgePanel/no-worktree` without a created worktree; `forgePanel/worktrees-unavailable` without a worktree service; `forgePanel/session-busy` while the Session\'s Agent is not loaded or has other work; `forgePanel/restore-failed` when Git fails.'],
+            },
+            {
+                signature: '@Remote async continueInProject(session: Session, signal: AbortSignal): Promise<void>',
+                description: 'Move a Session from its created worktree to the source checkout the worktree came from; the Session no longer works in the worktree. Runs as Agent maintenance, inside the wait of a message that waits for the removed worktree, which then goes on.',
+                parameters: [{ name: 'session', description: 'Session with a created worktree.' }, { name: 'signal', description: 'request cancellation.' }],
+                throws: ['`forgePanel/no-worktree` without a created worktree; `forgePanel/session-busy` while the Session\'s Agent is not loaded or has other work; the working-directory service\'s error when the source checkout no longer exists.'],
+            },
+        ],
+    },
+    {
+        key: 'forgeSession',
+        summary: 'Session-scoped change request bindings.',
+        description: 'Session-scoped change request bindings. The `forgeChangeRequests` projection derives them from `gh pr create`, `gh pr view`, `gh pr edit`, `gh pr checkout`, and `git push` results and from `plugin:forge-session/binding` records. After each push result, and when a caller reports the branch a Session works on, the service looks up open change requests whose head is that branch and records the unbound ones as discovered. Watching a Session polls its visible change requests through `ctx.forge`.',
+        methods: [
+            {
+                signature: 'changeRequests(session: Session): SessionChangeRequest[]',
+                description: 'List the change requests bound to a Session and not dismissed.',
+                parameters: [{ name: 'session', description: 'Session whose bindings are read.' }],
+                returns: 'visible bindings in first-recorded order, each with its latest polling result.',
+            },
+            {
+                signature: 'track(session: Session, url: string): void',
+                description: 'Bind a change request to a Session by URL, or restore a dismissed binding. Appends a `track` record with the provider\'s canonical URL unless the change request is already visible.',
+                parameters: [{ name: 'session', description: 'Session that receives the binding.' }, { name: 'url', description: 'web URL of the change request.' }],
+                throws: ['when no registered provider recognizes the URL.'],
+            },
+            {
+                signature: 'discoverBranch(session: Session, remote: string, branch: string): Promise<void>',
+                description: 'Look up open change requests whose head is a branch the Session works on, and record the unbound ones as discovered, as after a push of that branch. A remote that no provider recognizes changes nothing; a failed lookup is logged and changes nothing.',
+                parameters: [{ name: 'session', description: 'Session that receives the bindings.' }, { name: 'remote', description: 'URL of the remote that holds the branch.' }, { name: 'branch', description: 'branch name on that remote.' }],
+                returns: 'resolves once the lookup has recorded its bindings or failed.',
+            },
+            {
+                signature: 'dismiss(session: Session, url: string): void',
+                description: 'Hide a visible binding. Appends a `dismiss` record; a URL that is not visibly bound leaves the log unchanged. Discovery never restores a dismissed binding; `track` does.',
+                parameters: [{ name: 'session', description: 'Session that owns the binding.' }, { name: 'url', description: 'web URL of the change request.' }],
+            },
+            {
+                signature: 'watch(session: Session, listener: SessionChangeRequestsListener): () => void',
+                description: 'Watch a Session\'s visible change requests as an effect on the calling fiber. Every visible change request that a provider recognizes is polled through `ctx.forge` while the Session has a watcher. Listeners receive the complete list after each later binding or provider change, or polling result; read the current list with changeRequests. Listeners must not throw; a thrown error is logged and skipped.',
+                parameters: [{ name: 'session', description: 'Session to watch.' }, { name: 'listener', description: 'receives the complete visible list.' }],
+                returns: 'the disposer that stops this watch.',
+            },
+        ],
+    },
     {
         key: 'fs',
         summary: 'Abstract filesystem provider.',
-        description: 'Abstract filesystem provider. Targets must preserve identity across aliases; reads expose regular UTF-8 text or typed errors, listings are stable and content-free, and mutations are atomic. Optional guards add stale protection without changing the unguarded provider contract.',
+        description: 'Abstract filesystem provider. Targets must preserve identity across aliases; reads expose regular UTF-8 text or typed errors, listings are stable and content-free, and single-file publication is atomic. Moves can retain their source after publishing the destination. Optional guards add stale protection without changing the unguarded provider contract.',
         methods: [
             {
                 signature: 'watch(target: FsTarget, changed: (error?: Error) => void, signal: AbortSignal): Promise<() => Promise<void>>',
@@ -1135,6 +1526,24 @@ export const SERVICE_API = [
                 parameters: [{ name: 'target', description: 'the resolved target to edit.' }, { name: 'edit', description: 'the literal search/replace request.' }, { name: 'expected', description: 'the version guard; omit for an unconditional edit.' }, { name: 'signal', description: 'aborts before atomic publication takes effect.' }, { name: 'sandboxPolicy', description: 'the per-call mode and workspace root this edit runs under; a sandboxing backend fences the edit by it, the bare backend ignores it. Omit to leave the backend its own default.' }],
                 returns: 'the outcome, including the version the edit produced.',
             },
+            {
+                signature: 'abstract patchText( target: FsTarget, hunks: readonly PatchHunk[], expected?: { version: FsVersion }, signal?: AbortSignal, sandboxPolicy?: SandboxExecutionPolicy, ): Promise<FsEditOutcome>',
+                description: 'Atomically apply parsed hunks to the LF-normalized text and restore the stored line-ending style. A missing or stale target reports `FS_STALE_VERSION`; an unmatched hunk reports `FS_PATCH_MISMATCH`.',
+                parameters: [{ name: 'target', description: 'the resolved regular file to patch.' }, { name: 'hunks', description: 'ordered hunks from `parsePatch`.' }, { name: 'expected', description: 'the version guard; omit for an unconditional patch.' }, { name: 'signal', description: 'aborts before atomic publication takes effect.' }, { name: 'sandboxPolicy', description: 'the per-call mode and workspace root this patch runs under; a sandboxing backend fences the patch by it, the bare backend ignores it. Omit to leave the backend its own default.' }],
+                returns: 'the outcome, including the version the patch produced.',
+            },
+            {
+                signature: 'abstract deleteFile( target: FsTarget, expected?: { version: FsVersion }, signal?: AbortSignal, sandboxPolicy?: SandboxExecutionPolicy, ): Promise<FsDeleteOutcome>',
+                description: 'Remove a regular file. A missing or stale target reports `FS_STALE_VERSION`; a directory or other non-file reports `FS_NOT_REGULAR_FILE`. Resolution has already followed symlinks, so the target is the real file.',
+                parameters: [{ name: 'target', description: 'the resolved file to remove.' }, { name: 'expected', description: 'the version guard; omit for an unconditional removal.' }, { name: 'signal', description: 'aborts before removal.' }, { name: 'sandboxPolicy', description: 'the per-call mode and workspace root this removal runs under; a sandboxing backend fences it, the bare backend ignores it. Omit to leave the backend its own default.' }],
+                returns: 'the bounded LF-normalized removed text, or null when no basis is available.',
+            },
+            {
+                signature: 'abstract moveFile( source: FsTarget, destination: FsTarget, options: { hunks?: readonly PatchHunk[] expectedSource?: { version: FsVersion } expectedDestination?: FsWriteIntent }, signal?: AbortSignal, sandboxPolicy?: SandboxExecutionPolicy, ): Promise<FsMoveOutcome>',
+                description: 'Publish the source text, optionally patched, at the destination, then remove the source. Both targets stay locked in canonical order. Identical targets report `FS_SAME_TARGET`; the source guard follows `patchText` and the destination guard follows `writeText`. The two effects are separate: a published destination with a retained source is a final outcome reported through `sourceDeleted: false`.',
+                parameters: [{ name: 'source', description: 'the resolved regular source; its line-ending style and mode carry over.' }, { name: 'destination', description: 'the resolved destination within the same provider.' }, { name: 'options', description: 'optional hunks and the source/destination guards; an omitted guard is unconditional.' }, { name: 'signal', description: 'checked before destination staging; the commit then completes both effects.' }, { name: 'sandboxPolicy', description: 'the per-call mode and workspace root both paths run under; a sandboxing backend fences them, the bare backend ignores it. Omit to leave the backend its own default.' }],
+                returns: 'the bounded LF source basis, the destination outcome, and the source-removal status.',
+            },
         ],
     },
     {
@@ -1205,6 +1614,43 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'headlessStartup',
+        summary: 'What the runner row reads from HEADLESS_STARTUP_SERVICE.',
+        description: 'What the runner row reads from HEADLESS_STARTUP_SERVICE.',
+        methods: [
+            {
+                signature: 'task: string | undefined',
+                description: 'The task text this invocation asked for; absent when the runner reads stdin.',
+                parameters: [],
+            },
+            {
+                signature: 'sessionId: string | undefined',
+                description: 'Exact Session identity to adopt; absent for a fresh random identity.',
+                parameters: [],
+            },
+            {
+                signature: 'json: boolean',
+                description: 'Whether stdout carries the machine-readable event stream instead of final text.',
+                parameters: [],
+            },
+            {
+                signature: 'permissionMode?: string',
+                description: 'Permission preset to apply before the task; absent preserves session policy.',
+                parameters: [],
+            },
+            {
+                signature: 'approvalPolicy?: ApprovalPolicy',
+                description: 'Approval behavior applied after the permission preset; absent keeps the current policy.',
+                parameters: [],
+            },
+            {
+                signature: 'additionalWritableRoots?: string[]',
+                description: 'Explicit absolute write grants for this invocation; absent adds no directories.',
+                parameters: [],
+            },
+        ],
+    },
     {
         key: 'hmr',
         summary: 'Hot reload service with Cordis-compatible module configuration and events.',
@@ -1355,6 +1801,85 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'liveshareShares',
+        summary: 'Owner-only Remote surface over the share-management operations.',
+        description: 'Owner-only Remote surface over the share-management operations.\n\nThe Gateway decides each call through remote access, so a `share-viewer` Peer is refused before a method runs; the owner Peer reaches the one implementation that owns each share-management side effect. `create` takes its Session as the `sessionId` of its single request object, so the Session resource kind\'s default resolver names that Session for the call without a reader declared here.',
+        methods: [
+            {
+                signature: '@Remote(\'create\') create(request: CreateShareRequest): Promise<CreatedShare>',
+                description: 'Publish one Session and store the share.',
+                parameters: [{ name: 'request', description: 'Session, title, access, lifetime, and both switches the owner chose.' }],
+                returns: 'The created share\'s link and stored values.',
+            },
+            {
+                signature: '@Remote(\'list\') list(): Promise<OwnerShareList>',
+                description: 'Refresh titles and Liveshare server authority, then list this host\'s shares.',
+                parameters: [],
+                returns: 'Every share this host publishes.',
+            },
+            {
+                signature: '@Remote(\'stop\') stop(request: StopShareRequest): Promise<StopShareResult>',
+                description: 'Stop one share locally, revoke its forks, and delete its row on the Liveshare server when reachable.',
+                parameters: [{ name: 'request', description: 'Share to stop.' }],
+                returns: 'Whether the row on the Liveshare server still needs a retry.',
+            },
+            {
+                signature: '@Remote(\'updatePermissions\') updatePermissions(request: UpdateSharePermissionsRequest): Promise<SharePermissions>',
+                description: 'Change one share\'s tier, fork switch, or both.',
+                parameters: [{ name: 'request', description: 'Share and the switches to change.' }],
+                returns: 'The permissions the share now carries.',
+            },
+            {
+                signature: '@Remote(\'setCapabilities\') setCapabilities(request: SetShareCapabilitiesRequest): Promise<ShareCapabilities>',
+                description: 'Replace one share\'s exposed plugin endpoints.',
+                parameters: [{ name: 'request', description: 'Share and the selection to store.' }],
+                returns: 'The capability selection the share now carries.',
+            },
+            {
+                signature: '@Remote(\'capabilities\') capabilities(): ShareCapabilityOffers',
+                description: 'Read the endpoints plugins currently offer.',
+                parameters: [],
+                returns: 'The live offer list.',
+            },
+            {
+                signature: '@Remote(\'relay\') relay(): OwnerRelayState',
+                description: 'Read the Liveshare server address the owner saved.',
+                parameters: [],
+                returns: 'The current Liveshare server state, with both address fields absent while none is saved.',
+            },
+            {
+                signature: '@Remote(\'setRelay\') setRelay(request: SetRelayRequest): Promise<OwnerRelayState>',
+                description: 'Choose the Liveshare server address later shares publish to.',
+                parameters: [{ name: 'request', description: 'Normalized address or null to clear the saved one.' }],
+                returns: 'The Liveshare server state after the change.',
+            },
+            {
+                signature: '@Remote(\'identity\') identity(request: OwnerIdentityRequest): Promise<OwnerIdentityStatus>',
+                description: 'Report this host\'s owner identity for one Liveshare server address.',
+                parameters: [{ name: 'request', description: 'Address to report, or the effective one when absent.' }],
+                returns: 'The owner identity status, without the credential.',
+            },
+            {
+                signature: '@Remote(\'audit\') audit(request: ShareAuditRequest): Promise<ShareAudit>',
+                description: 'Read the Liveshare server\'s durable audit trail for one share.',
+                parameters: [{ name: 'request', description: 'Share whose audit is read.' }],
+                returns: 'The audit events, or a structured failure when the Liveshare server cannot answer.',
+            },
+            {
+                signature: '@Remote(\'testRelay\') testRelay(): Promise<RelayConnectivityView>',
+                description: 'Check that the effective Liveshare server answers at all.',
+                parameters: [],
+                returns: 'The anonymous connectivity result.',
+            },
+            {
+                signature: '@Remote(\'testPublish\') testPublish(request: TestPublishRequest): Promise<RelayPublishView>',
+                description: 'Register one throwaway share to check whether this host may publish.',
+                parameters: [{ name: 'request', description: 'Session the throwaway registration names.' }],
+                returns: 'The Liveshare server\'s decision about this host\'s credential.',
+            },
+        ],
+    },
     {
         key: 'llm',
         summary: 'The abstract `llm` service: an adapter registry plus a streaming model-call API, interceptable via the `llm/stream` waterfall.',
@@ -1612,8 +2137,8 @@ export const SERVICE_API = [
     },
     {
         key: 'planMode',
-        summary: '`ctx.planMode`: owns logged plan state, applies and narrates selected state at step start, the `plan:policy` section, the `/plan` command, and the stable exit tool.',
-        description: '`ctx.planMode`: owns logged plan state, applies and narrates selected state at step start, the `plan:policy` section, the `/plan` command, and the stable exit tool. Client carriers expose the projection\'s cropped `{ active, pending }` view.',
+        summary: '`ctx.planMode`: owns logged plan state, applies and narrates selected state at step start, the `plan:policy` section, the `/plan` command, and the conditional exit tool.',
+        description: '`ctx.planMode`: owns logged plan state, applies and narrates selected state at step start, the `plan:policy` section, the `/plan` command, and the conditional exit tool. Client carriers expose the projection\'s cropped `{ active, pending }` view. Agent prompt assembly fails while the projection reader is not ready; callers must await plugin activation before running an agent.',
         methods: [
             {
                 signature: 'get(agent: Agent): { active: boolean; pending?: boolean }',
@@ -1634,6 +2159,13 @@ export const SERVICE_API = [
         summary: 'Manage profile files and apply their declared reload lifecycle.',
         description: 'Manage profile files and apply their declared reload lifecycle.',
         methods: [
+            {
+                signature: '@Remote async readBundleDetail(name: string, language: string, options?: { npmFileSources?: NpmFileSource[] }): Promise<BundleDetail>',
+                description: 'Read a bundle\'s long description: the Markdown file its locale `meta.detail` names in `language`, otherwise its README. An installed bundle is read from its directory without network access; an official bundle the installation offers before it is installed is read from the npm file CDNs at its offered version. Nothing is cached.',
+                parameters: [{ name: 'name', description: 'the bundle\'s package name, as `listBundles()` lists it.' }, { name: 'language', description: 'the display language, such as `zh-CN`; documents fall back through its prefixes to English.' }, { name: 'options', description: '`npmFileSources` names npm file CDNs to ask first for an offered bundle, in order, such as the one a Client measured as fastest; configured CDNs it omits follow, and CDNs that are not configured are not asked.' }],
+                returns: 'the document with its origin and path, or `none`.',
+                throws: ['{RemoteError} `plugin-manager/unknown-bundle`, `plugin-manager/invalid-language`, or `plugin-manager/detail-unavailable`.'],
+            },
             {
                 signature: '@Remote listVersionExemptions(): { exemptions: Record<string, string[]>; warnings: string[] }',
                 description: 'Read exact plugin-version exemptions saved in this profile.',
@@ -1670,6 +2202,18 @@ export const SERVICE_API = [
                 parameters: [{ name: 'spec', description: 'One package spec: a registry name, an absolute path, a git address, or a tarball.' }, { name: 'options', description: 'The registry asked first.' }, { name: 'signal', description: 'Ends a registry lookup early.' }],
                 returns: 'The package the spec names, or why it is refused.',
             },
+            {
+                signature: '@Remote async listVersions(name: string, options?: ListVersionsOptions, signal?: AbortSignal): Promise<PluginVersionList>',
+                description: 'Read the published versions newer than an installed registry package\'s version, from the first registry that answers. Official bundles follow the DSH version and are not listed.',
+                parameters: [{ name: 'name', description: 'Installed profile dependency name.' }, { name: 'options', description: 'The registry asked first; absent, the one the package was installed from in this process, else the configured one.' }, { name: 'signal', description: 'Ends the lookups early.' }],
+                returns: 'At most `versionListLimit` newer versions, newest first, with their tags, deprecation, bundle declaration, and DSH compatibility, and the registry that answered; or why no list could be read, with every registry asked.',
+            },
+            {
+                signature: '@Remote async updateBundle(name: string, version: string, options?: UpdateBundleOptions): Promise<PluginUpdateResult>',
+                description: 'Replace an installed registry bundle with a newer published version. The target is checked on the registry first: it must exist, declare a bundle, and accept the running DSH version, or nothing changes. With HMR the installed version is removed, so its plugins stop, and the target is installed with the same selection; when that installation fails or is cancelled, the removed version is installed again from the registry it came from. Without HMR the target is installed over the running version and the result reports the restart.',
+                parameters: [{ name: 'name', description: 'Installed profile dependency name.' }, { name: 'version', description: 'Exact published version newer than the installed one.' }, { name: 'options', description: 'The registry asked first, as for `listVersions`, and the request id naming the progress and the target installation\'s logs and cancellation.' }],
+                returns: 'The versions, the last step that ran with its result, and the reinstallation when one ran.',
+            },
             {
                 signature: '@Remote setPluginEnabled(id: PluginEntryId, enabled: boolean): Promise<ChangeResult>',
                 description: 'Persist a plugin entry\'s desired enablement and apply it on live profiles.',
@@ -1684,7 +2228,7 @@ export const SERVICE_API = [
             },
             {
                 signature: '@Remote installBundle(spec: string, options?: InstallBundleOptions): Promise<ChangeResult>',
-                description: 'Install a package using the same pnpm implementation as dsh plugin. GitHub repositories get a connection check bounded by githubConnectionTimeoutMs before pnpm starts; only network failures or timeouts stop installation, while pnpm owns authentication and transport fallback. A run that fails, is cancelled, or adds a package without a bundle patch restores `package.json` and `pnpm-lock.yaml` as they were; downloaded files can stay.',
+                description: 'Install a package using the same pnpm implementation as dsh plugin. GitHub repositories get a connection check bounded by githubConnectionTimeoutMs before pnpm starts; only network failures or timeouts stop installation, and a stop streams the check\'s diagnostic as the installation\'s install-log run under its request id, while pnpm owns authentication and transport fallback. An HTTP(S) Git URL on another host is installed over SSH instead when access probes bounded by gitTransportTimeoutMs find that only SSH can read it. A run that fails, is cancelled, or adds a package without a bundle patch restores `package.json` and `pnpm-lock.yaml` as they were; downloaded files can stay.',
                 parameters: [{ name: 'spec', description: 'One package spec, including local paths relative to the invocation directory.' }, { name: 'options', description: 'Whether to activate the installed bundle (defaults to true), the request id a cancellation names, the pending build scripts to allow, whether to save an exact dependency, and the registry asked first.' }],
                 returns: 'Package-manager diagnostics, the registries asked, and the observed activation outcome.',
             },
@@ -1739,6 +2283,26 @@ export const SERVICE_API = [
                 returns: 'the plugin with its default version, installation status, and annotated versions; undefined when the index does not list it.',
                 throws: ['{RemoteError} `plugin-market/unknown-index`, `plugin-market/invalid-index-url`, `plugin-market/fetch-failed`, or `plugin-market/invalid-index`.'],
             },
+            {
+                signature: '@Remote async readEntryDetail( url: string, name: string, version: string, language: string, options?: { refresh?: boolean; npmFileSources?: NpmFileSource[] }, ): Promise<PluginDetail>',
+                description: 'Read the long description of one listed version of a plugin market entry, from the version\'s source: the npm file CDNs for a public npm version, or its pinned Git commit. The Markdown file the package\'s locale `meta.detail` names in `language` comes first, then the package\'s README, then the README of the entry\'s `repository`, or for an npm version without one, of its `package.json` `repository`, at the default branch. An npm version from another registry has no readable package files, so only the entry\'s `repository` is read.',
+                parameters: [{ name: 'url', description: 'a configured index URL.' }, { name: 'name', description: 'the plugin\'s package name.' }, { name: 'version', description: 'one listed version.' }, { name: 'language', description: 'the display language, such as `zh-CN`; documents fall back through its prefixes to English.' }, { name: 'options', description: '`refresh` reads again instead of reusing a result cached for `cacheTtlMs`; `npmFileSources` names npm file CDNs to ask first for an npm version, in order; configured CDNs it omits follow, and CDNs that are not configured are not asked.' }],
+                returns: 'the document with its origin and image document id, or `none`.',
+                throws: ['{RemoteError} the failures of `search`, `plugin-market/unknown-plugin` for an unlisted plugin or version, `plugin-market/invalid-query`, or `plugin-market/detail-unavailable`.'],
+            },
+        ],
+    },
+    {
+        key: 'pluginRecommendations',
+        summary: 'Catalog lookups for card text and the enabling behind the `enable_official_plugin` card.',
+        description: 'Catalog lookups for card text and the enabling behind the `enable_official_plugin` card.',
+        methods: [
+            {
+                signature: '@Remote async describe(agent: Agent, callId: ToolCallId): Promise<RecommendationDetails>',
+                description: 'Read the current catalog text for a logged card.',
+                parameters: [{ name: 'agent', description: 'Exact live root resolved by the Gateway from the Session id.' }, { name: 'callId', description: 'The card\'s `propose_action` call id, never a package supplied by the browser.' }],
+                returns: 'the plugin\'s title, description and selection, or a refusal when the card names no available official plugin.',
+            },
         ],
     },
     {
@@ -1826,7 +2390,7 @@ export const SERVICE_API = [
         methods: [
             {
                 signature: 'abstract readonly language: string',
-                description: 'The source language run expects `program` to be written in, as a lowercase identifier. Informational, not gating — a consumer that generates language-specific presentation (typed SDK stubs, usage instructions) switches on it and fails loud on a language it cannot present. Well-known values: `\'typescript\'` and `\'python\'`, those `dsh-tools` presents; the TypeScript backend is released, the Python backend is experimental and private (not published).',
+                description: 'The source language run expects `program` to be written in, as a lowercase identifier. Informational, not gating — a consumer that generates language-specific presentation (typed SDK stubs, usage instructions) switches on it and fails loud on a language it cannot present. Well-known values: `\'typescript\'` and `\'python\'`, those `dsh-tool-executor-ptc` presents; the TypeScript backend is released, the Python backend is experimental and private (not published).',
                 parameters: [],
             },
             {
@@ -1887,7 +2451,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'snapshotFor(principal: Principal): RemoteAccessBaseline',
-                description: 'The baseline a page opens with before its snapshot stream connects. A business package rendering a non-owner page assigns this value to REMOTE_ACCESS_SNAPSHOT_KEY after every index injection row, replacing the owner baseline the webServer index carries.',
+                description: 'The baseline a page opens with before its snapshot stream connects; every index the webServer renders carries it under REMOTE_ACCESS_SNAPSHOT_KEY for the Peer the page speaks for.',
                 parameters: [{ name: 'principal', description: 'the page\'s caller identity.' }],
                 returns: 'the owner baseline for the owner; otherwise the principal\'s current grants.',
             },
@@ -1927,6 +2491,11 @@ export const SERVICE_API = [
                 description: 'The absolute `workspace-write` fallback root for calls without a session cwd.',
                 parameters: [],
             },
+            {
+                signature: 'readonly additionalWritableRoots: readonly string[] | undefined',
+                description: 'The frozen extra writable directories shared by every resolved policy, or `undefined` for none.',
+                parameters: [],
+            },
             {
                 signature: 'resolve(request: SandboxPolicyRequest = {}): SandboxExecutionPolicy',
                 description: 'Resolve the complete policy for one capability call. An approved explicit mode outranks the session\'s last `sandbox/mode` event, which outranks the deployment default. A session cwd is its workspace-write boundary; the configured root is the fallback for agentless calls and sessions without a cwd.',
@@ -1943,45 +2512,86 @@ export const SERVICE_API = [
     },
     {
         key: 'schedule',
-        summary: 'Shared management service; reads, deletion, and timing edits never activate a Session.',
-        description: 'Shared management service; reads, deletion, and timing edits never activate a Session.\n\n`sessionPersistence` is a load-order requirement rather than a directly called service: a delivery commits only when `ctx.sessions.flush()` reports that a `session/flush` listener participated, and the persistence backend providing this service is the plugin that registers that listener.',
+        summary: 'Shared management service; reads and management writes never activate a Session, and only delivery creates or resumes one.',
+        description: 'Shared management service; reads and management writes never activate a Session, and only delivery creates or resumes one.\n\n`sessionPersistence` supplies header-only target validation and the `session/flush` listener that acknowledges durable inbox delivery through `ctx.sessions.flush()`.',
         methods: [
             {
-                signature: 'async create(sessionId: SessionId, request: ScheduleCreateRequest, signal?: AbortSignal): Promise<ScheduleRecord>',
-                description: 'Create a reminder bound to the caller-selected Session without activating it.\n\nThe request must supply a title; a missing, blank-after-trim, or over-long title rejects with `invalid_prompt` instead of deriving one from the prompt. A Session a delegated child owns rejects with `subagent_session`, because delivery can never reach it: the child is one whose delegation depth is above zero. The record is built from the clock reading taken before the request joins the serialized queue, so a create that waits behind a longer operation keeps its request-time anchor and may already be due when the queue reaches it.',
-                parameters: [{ name: 'sessionId', description: 'Original Session receiving the reminder.' }, { name: 'request', description: 'Validated tool selector, required title, and reminder content.' }, { name: 'signal', description: 'Optional cancellation checked before persistence begins, including after FIFO waits.' }],
-                returns: 'The durably stored schedule. Cancellation does not roll back an in-flight write.',
+                signature: '@Remote(\'deliveryLimits\') deliveryLimits(): { readonly newSessionIntervalSeconds: number }',
+                description: 'Read effective delivery limits without loading or activating a task.',
+                parameters: [],
+                returns: 'The configured minimum spacing between deliveries that each create a Session, in seconds.',
+            },
+            {
+                signature: '@Remote(\'create\') async remoteCreate(request: ScheduleCreateRequest, signal?: AbortSignal): Promise<ScheduleCatalogEntry>',
+                description: 'Create one task with a Host-generated identity for a human Remote caller.',
+                parameters: [{ name: 'request', description: 'Title, prompt, recurrence, and delivery destination.' }, { name: 'signal', description: 'Cancellation checked before the durable write begins, including after FIFO waits.' }],
+                returns: 'The stored task. Cancellation does not roll back an in-flight write.',
+            },
+            {
+                signature: 'async create( request: ScheduleCreateRequest, actorSessionId?: SessionId, signal?: AbortSignal, ): Promise<ScheduleCatalogEntry>',
+                description: 'Create one task and record the acting Agent\'s Session as involved; the Remote form omits that Session.\n\nThe record is built from the clock reading taken before the request joins the serialized queue. A `session` target must exist and must not belong to a delegated child; a `new_once` target reserves its Session identity.',
+                parameters: [{ name: 'request', description: 'Title, prompt, recurrence, and delivery destination.' }, { name: 'actorSessionId', description: 'Session of the acting Agent, or undefined for a human caller.' }, { name: 'signal', description: 'Cancellation checked before the durable write begins, including after FIFO waits.' }],
+                returns: 'The stored task. Cancellation does not roll back an in-flight write.',
             },
             {
-                signature: '@Remote(\'list\') async list(request: ScheduleListRequest): Promise<ScheduleRecord[]>',
-                description: 'Read the selected Session\'s active tasks without resuming its Agent.',
-                parameters: [{ name: 'request', description: 'Session whose task list is requested.' }],
-                returns: 'Persisted reminders in storage order.',
+                signature: 'async list(request: ScheduleListRequest = {}): Promise<ScheduleListResult>',
+                description: 'Read one page of Host tasks without activating target Sessions.',
+                parameters: [{ name: 'request', description: 'Optional activity filter, page size, and offset.' }],
+                returns: 'The requested page and total matching task count.',
+            },
+            {
+                signature: '@Remote(\'list\') async remoteList(request: ScheduleListRequest): Promise<ScheduleListResult>',
+                description: 'Remote form of the shared Host-wide list.',
+                parameters: [{ name: 'request', description: 'Optional activity filter, page size, and offset.' }],
+                returns: 'The requested page and total matching task count.',
             },
             {
                 signature: '@Remote(\'catalog\') async catalog(): Promise<ScheduleCatalogEntry[]>',
-                description: 'Read all active and inactive Host reminders with their original Session bindings. A deleted reminder has no row, so it is absent here. Does not activate Sessions or read Session history.',
+                description: 'Read every Host task without a page bound or Session activation.',
                 parameters: [],
-                returns: 'Reminders ordered by scheduledAt ascending, then lexicographically by id.',
+                returns: 'All tasks, active first, with target and execution metadata.',
+            },
+            {
+                signature: '@Remote(\'view\') async view(request: ScheduleViewRequest): Promise<ScheduleViewResult>',
+                description: 'Read one task without activating its target Sessions.',
+                parameters: [{ name: 'request', description: 'Task identity.' }],
+                returns: 'The task, or a non-mutating miss.',
             },
             {
-                signature: '@Remote(\'history\') async history(request: ScheduleDeliveryHistoryRequest): Promise<ScheduleDeliveryHistoryResult>',
-                description: 'Read saved inbox deliveries without activating or reading the original Session. The task\'s own row supplies its binding, so its records stay readable through this lookup.',
-                parameters: [{ name: 'request', description: 'Session binding, task identity, explicit limit, and optional exclusive message cursor.' }],
+                signature: 'async history(request: ScheduleDeliveryHistoryRequest): Promise<ScheduleDeliveryHistoryResult>',
+                description: 'Read one page of saved deliveries without activating or reading a target Session.',
+                parameters: [{ name: 'request', description: 'Task identity, explicit page size, and optional exclusive cursor.' }],
+                returns: 'Newest-first saved deliveries, or a task/cursor lookup failure.',
+            },
+            {
+                signature: '@Remote(\'history\') async remoteHistory(request: ScheduleDeliveryHistoryRequest): Promise<ScheduleDeliveryHistoryResult>',
+                description: 'Remote form of the target-based ScheduleService.history; an invalid limit rejects with `schedule/input-invalid`.',
+                parameters: [{ name: 'request', description: 'Task identity, explicit limit, and optional exclusive message cursor.' }],
                 returns: 'Newest-first deliveries in append order, or a task/cursor lookup failure.',
-                throws: ['ScheduleInputError when limit is not a safe integer from 1 through 100.'],
             },
             {
-                signature: '@Remote(\'delete\') async delete(request: ScheduleDeleteRequest, signal?: AbortSignal): Promise<ScheduleDeleteResult>',
-                description: 'Delete one task belonging to the selected Session, leaving queued messages intact.\n\nThe row is removed: the task no longer schedules, leaves `list` and `catalog`, and its saved delivery records go with it. A task bound to a Session a delegated child owns stays deletable even though creation and timing edits refuse that binding, so a task stored before that rule existed remains removable.',
-                parameters: [{ name: 'request', description: 'Session and exact task identity.' }, { name: 'signal', description: 'Optional cancellation checked before persistence begins, including after FIFO waits.' }],
-                returns: 'Whether that Session owned a deleted task. Cancellation does not roll back an in-flight write.',
+                signature: '@Remote(\'run\') async run(request: ScheduleRunRequest, signal?: AbortSignal): Promise<ScheduleRunResult>',
+                description: 'Deliver one task now without consuming or moving its scheduled occurrence; an archived destination Session rejects with `schedule/target-archived`.',
+                parameters: [{ name: 'request', description: 'Task identity.' }, { name: 'signal', description: 'Cancellation checked after entering the delivery transaction and before delivery.' }],
+                returns: 'Task state after Session persistence acknowledged the delivery, `schedule_execution_pending` while another execution of the task is queued, running, or inside its delivery floor, or a non-mutating miss.',
+            },
+            {
+                signature: '@Remote(\'deleteInactive\') async deleteInactive(): Promise<ScheduleDeleteInactiveResult>',
+                description: 'Delete every ended Host task, leaving active tasks armed.\n\nEnded tasks never schedule another delivery, so the removal changes no pending target and no timer is recomputed. Rows are enumerated and removed in one FIFO slot, so a delivery ordered behind this call ends its task after the enumeration rather than during it. The batch is one domain write: a normal failure rejects with every listed row still stored, while a backend `unknown-state` failure may have removed rows and quarantines the Host domain, so later schedule operations reject until the domain is reopened. A successful nonempty batch emits `schedule/changed` without Agent notices. A rejected batch announces `schedule/changed` because it does not establish which rows landed, and clients then re-read the catalog.',
+                parameters: [],
+                returns: 'Count of removed rows; zero when the Host held no ended task.',
+            },
+            {
+                signature: '@Remote(\'edit\') async remoteEdit(request: ScheduleEditRequest, signal?: AbortSignal): Promise<ScheduleEditResult>',
+                description: 'Update or delete one task for a human Remote caller; an invalid patch rejects with `schedule/input-invalid`.',
+                parameters: [{ name: 'request', description: 'Task identity and one update or delete operation.' }, { name: 'signal', description: 'Cancellation checked before the durable write begins, including after FIFO waits.' }],
+                returns: 'The updated task, the deletion outcome, or a non-mutating miss or conflict.',
             },
             {
-                signature: '@Remote(\'update\') async update(request: ScheduleUpdateRequest, signal?: AbortSignal): Promise<ScheduleUpdateResult>',
-                description: 'Update the name, instruction, and timing of an active task within the original Session binding without activating the Session or changing saved deliveries.\n\nEach supplied field replaces its stored value; an omitted field keeps it. A name or instruction change alone does not reset the committed target. A Session a delegated child owns returns the non-mutating `subagent_session` result, so an edit cannot re-arm a task bound to a Session delivery can never reach, and the Web editor can explain the refusal through the ordinary result it already renders.',
-                parameters: [{ name: 'request', description: 'Task binding, complete observed record, and any combination of timing, name, and instruction.' }, { name: 'signal', description: 'Cancellation checked after domain readiness and FIFO waits, before persistence begins.' }],
-                returns: 'The committed record, unchanged record for a no-op, or a non-mutating input/lookup/conflict/refusal result. Storage and lifecycle failures reject; cancellation after a write starts does not roll it back.',
+                signature: 'async edit( request: ScheduleEditRequest, actorSessionId?: SessionId, signal?: AbortSignal, ): Promise<ScheduleEditResult>',
+                description: 'Update or delete one task and record the acting Agent\'s Session as involved; the Remote form omits that Session.\n\nAn update applies every patch field in one write and recomputes the next occurrence when the rule changes or the task resumes. A supplied `expectedUpdatedAt` that differs from the stored value returns `schedule_conflict`.',
+                parameters: [{ name: 'request', description: 'Task identity and one update or delete operation.' }, { name: 'actorSessionId', description: 'Session of the acting Agent, or undefined for a human caller.' }, { name: 'signal', description: 'Cancellation checked before the durable write begins, including after FIFO waits.' }],
+                returns: 'The updated task, the deletion outcome, or a non-mutating miss or conflict.',
             },
         ],
     },
@@ -1996,12 +2606,6 @@ export const SERVICE_API = [
                 parameters: [{ name: 'sessionId', description: 'Session identity whose Agent owns the operation.' }],
                 returns: 'the live Agent or the stable Session-domain failure.',
             },
-            {
-                signature: 'inspect( sessionId: SessionId, signal?: AbortSignal, ): Promise<SessionInspection>',
-                description: 'Inspect one attached or persisted Session without activating its Agent.',
-                parameters: [{ name: 'sessionId', description: 'durable Session identity.' }, { name: 'signal', description: 'optional caller cancellation for persistence reads.' }],
-                returns: 'the current attached state or persisted header and event prefix.',
-            },
             {
                 signature: '@Remote(\'list\') async list(_request: SessionListRequest, signal: AbortSignal): Promise<SessionListValue>',
                 description: 'Read all visible Session rows without resuming an Agent.',
@@ -2084,8 +2688,8 @@ export const SERVICE_API = [
             },
             {
                 signature: '@Remote(\'attachment\') attachment(request: SessionAttachmentRequest): Promise<SessionAttachmentValue>',
-                description: 'Read one image proven reachable from the addressed Session log.',
-                parameters: [{ name: 'request', description: 'Session and attachment identities used for authorization.' }],
+                description: 'Read one image from the attachment store after gateway authorization.',
+                parameters: [{ name: 'request', description: 'image reference and gateway permission scope; Session existence is not checked.' }],
                 returns: 'the durable attachment reference and base64-encoded bytes.',
             },
             {
@@ -2101,19 +2705,49 @@ export const SERVICE_API = [
                 returns: 'acknowledgement that cancellation was requested.',
             },
             {
-                signature: '@Remote({ name: \'page\', resources: { session: addressedSession } }) page(request: SessionPageRequest, signal: AbortSignal): Promise<SessionPage>',
+                signature: '@Remote events(request: SessionPageRequest, signal: AbortSignal): Promise<SessionEventsPage>',
                 description: 'Read one cold-safe, message-aligned Session history page.',
-                parameters: [{ name: 'request', description: 'durable address, backward cursor, and page budget.' }, { name: 'signal', description: 'cancellation for persistence reads.' }],
-                returns: 'one chronological page.',
+                parameters: [{ name: 'request', description: 'durable address, optional fixed cut, backward cursor, and page budget.' }, { name: 'signal', description: 'cancellation for persistence reads.' }],
+                returns: 'one chronological page with its inclusive cursor.',
             },
             {
-                signature: '@Remote({ mode: \'stream\', resources: { session: addressedSession } }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
+                signature: '@Remote({ mode: \'stream\' }) observeEvent(request: SessionObserveEventRequest, signal: AbortSignal): AsyncIterable<SessionEventFrame>',
+                description: 'Subscribe to Session events without reading a snapshot.',
+                parameters: [{ name: 'request', description: 'Session address.' }, { name: 'signal', description: 'subscription cancellation.' }],
+                returns: 'readiness and subsequent events, without a snapshot.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) observeProjections(request: SessionProjectionsRequest, signal: AbortSignal): AsyncIterable<SessionProjectionFrame>',
+                description: 'Subscribe to Session projection changes.',
+                parameters: [{ name: 'request', description: 'target Session.' }, { name: 'signal', description: 'subscription cancellation.' }],
+                returns: 'readiness followed by one projection change frame per committed event.',
+            },
+            {
+                signature: '@Remote state(request: SessionStateRequest, signal: AbortSignal): Promise<SessionState>',
+                description: 'Read passive Session state.',
+                parameters: [{ name: 'request', description: 'target Session.' }, { name: 'signal', description: 'read cancellation.' }],
+                returns: 'current passive state.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) observeState(request: SessionStateRequest, signal: AbortSignal): AsyncIterable<SessionState>',
+                description: 'Subscribe to complete Session state replacements.',
+                parameters: [{ name: 'request', description: 'target Session.' }, { name: 'signal', description: 'subscription cancellation.' }],
+                returns: 'complete passive state replacements.',
+            },
+            {
+                signature: '@Remote wait(request: SessionWaitRequest, signal: AbortSignal): Promise<SessionWaitValue>',
+                description: 'Wait for Session quiescence or pending input with bounded assistant output.',
+                parameters: [{ name: 'request', description: 'Session, wait bounds and output window.' }, { name: 'signal', description: 'caller cancellation.' }],
+                returns: 'stopping state and bounded assistant output.',
+            },
+            {
+                signature: '@Remote({ mode: \'stream\' }) follow(request: SessionFollowRequest, signal: AbortSignal): AsyncIterable<SessionFollowFrame>',
                 description: 'Follow one Session log from its opening or resume cursor.',
                 parameters: [{ name: 'request', description: 'durable address and last committed sequence already held by the caller.' }, { name: 'signal', description: 'cancellation owned by the Remote stream carrier.' }],
                 returns: 'a complete opening snapshot followed by gap-free durable event frames and optional cursorless assistant-stream frames.',
             },
             {
-                signature: '@Remote(\'projections\') async projections(request: SessionProjectionsRequest, signal: AbortSignal): Promise<SessionProjectionsValue>',
+                signature: '@Remote(\'projections\') projections(request: SessionProjectionsRequest, signal: AbortSignal): Promise<SessionProjectionsValue>',
                 description: 'Read exact projections, returning cached hints only when migration is required.',
                 parameters: [{ name: 'request', description: 'Session whose current values are required.' }, { name: 'signal', description: 'cancellation for the Session read.' }],
                 returns: 'a sequenced baseline, cached hints when migration is deferred, or null when absent.',
@@ -2152,6 +2786,19 @@ export const SERVICE_API = [
             },
         ],
     },
+    {
+        key: 'sessionLogDeepSeek',
+        summary: 'Incremental Session-log contributor with caller-owned upload exclusions.',
+        description: 'Incremental Session-log contributor with caller-owned upload exclusions.',
+        methods: [
+            {
+                signature: 'registerExclusion(exclude: SessionLogUploadExclusion): () => Promise<void>',
+                description: 'Exclude matching requests before reading or preparing their log contribution. Any matching rule suppresses both the field and its acceptance callback. With no matching rules, normal upload eligibility applies. A throwing rule fails this contribution; the request-extension registry omits it and reports the error.',
+                parameters: [{ name: 'exclude', description: 'synchronous, side-effect-free predicate; `true` skips this upload.' }],
+                returns: 'effect disposer that removes this registration when called or when the caller unloads.',
+            },
+        ],
+    },
     {
         key: 'sessionPersistence',
         summary: 'Durable append-only session storage addressed through per-session handles.',
@@ -2203,7 +2850,7 @@ export const SERVICE_API = [
         description: 'The persisted projection cache service. Opens the `session_projcache` domain at init, checkpoints live sessions on a throttled write-behind (count/interval triggers from Config) plus three mandatory points — session creation, `turn/end`, and session disposal (the live-to-cold moment) — and serves the cached rows for a session header. Every durable write is fail-soft: failures log a warning and the cache self-heals on the next write.',
         methods: [
             {
-                signature: 'cachedSnapshot( meta: SessionHeader, keys?: readonly Extract<keyof SessionProjectionMap, string>[], ): ProjectionSnapshot | undefined',
+                signature: 'cachedSnapshot( meta: SessionHeader, keys?: ProjectionKeySelection, ): ProjectionSnapshot | undefined',
                 description: 'The zero-I/O listing read: whole values viewed straight from the stored rows (version-matching keys only) of the record bound to the caller\'s lifecycle. The header is the only identity witness a listing holds, so this face matches the lifecycle identity (`formatVersion`, `createdAt`, `cwd`, `isSeeded`) and not the inherited cut: within one format generation the cut is fixed at fork time, so it distinguishes no lifecycle the other fields do not, and a viewed value never seeds a fold. The view is as stale as the last durable checkpoint but never wrong and never from an unrelated log. Its `asOfSeq` is the lowest watermark among the served rows: the stored record\'s own position, which the header cannot relate to the log the caller later opens. The Session list therefore labels the block as cached, and the client lets every value the connected Session produces supersede it whatever this number says.',
                 parameters: [{ name: 'meta', description: 'the listed session\'s header (identity witness; no log read).' }, { name: 'keys', description: 'optional projection keys required by the caller\'s audience.' }],
                 returns: 'the viewed block, or `undefined` when no usable row exists for this lifecycle at the current Session format.',
@@ -2237,19 +2884,19 @@ export const SERVICE_API = [
     {
         key: 'sessionProjections',
         summary: '`ctx.sessionProjections`: the projection unit table and its drive.',
-        description: '`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit\'s `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Registration is an effect (disposer rides the calling fiber): an unloaded domain plugin\'s key disappears from snapshots and clients read it as capability absence. A host reader either declares `sessionProjections` in its plugin `inject` or fails explicitly when the registry or required key is absent. Contributors may preserve optional registration through `ctx.inject([\'sessionProjections\'], ...)`. Registrants sharing a key share one unit and are counted: the same tool package mounted in N agent presets registers N times, and the key survives until the last one unloads.',
+        description: '`ctx.sessionProjections`: the projection unit table and its drive. The service subscribes to `session/event` once; every committed event passes every registered unit\'s `apply` (eager drive). A changed state reference computes the next client view; the change feed is notified only when its raw result changes by `Object.is`. Cells build lazily — a unit registered after events flowed, or a session older than the registry, folds `init` over the in-memory log on first touch (event or read). Consumers declare `sessionProjections` as a required injection, await registration during activation, and retain its ready handle. Registrants sharing a key share one unit and are counted. The last release removes the unit from live drives, restores, and client snapshots, while checkpoints keep each Session\'s last cell of it until the key registers again and the new unit refolds the log; retained handles still fold new events on demand using the original unit.',
         methods: [
             {
-                signature: 'register< K extends keyof SessionProjectionMap, S extends SessionProjectionStateMap[K], >( definition: Omit<ProjectionDefinition<K, S>, \'wire\'> & { wire: NonNullable<ProjectionDefinition<K, S>[\'wire\']> }, ): () => void',
-                description: 'Register one domain\'s unit. The registration is an effect on the calling context\'s fiber: disposing the fiber (or calling the returned disposer) removes the key — and the unit\'s cached cells — from subsequent drives and snapshots.',
+                signature: 'register<K extends keyof SessionProjectionMap, S>( definition: Omit<ProjectionDefinition<K, S>, \'wire\'> & { wire: NonNullable<ProjectionDefinition<K, S>[\'wire\']> }, ): Promise<ProjectionHandle<S>>',
+                description: 'Register one domain\'s unit on the calling context\'s fiber. Fiber or handle disposal releases one reference; the final release removes live participation. Retained handles remain readable after release. Callers must await registration before publishing consumers; registration may perform asynchronous work.',
                 parameters: [{ name: 'definition', description: 'key, state schema, pure unit functions, and stateVersion.' }],
-                returns: 'the exact disposer that unregisters this unit.',
+                returns: 'an awaitable yielding a ready handle; the callable runtime value is deprecated.',
             },
             {
-                signature: 'register< K extends Exclude<keyof SessionProjectionStateMap, keyof SessionProjectionMap>, S extends SessionProjectionStateMap[K], >( definition: Omit<ProjectionDefinition<K, S>, \'wire\'>, ): () => void',
-                description: 'Register one host-only unit. Its state is omitted from client snapshots and always checkpointed like every other unit.',
+                signature: 'register<K extends string, S>( definition: ProjectionDefinition<K, S> & { key: Exclude<K, keyof SessionProjectionMap> }, ): Promise<ProjectionHandle<S>>',
+                description: 'Register one host-only unit. Its state is omitted from client snapshots and always checkpointed like every other unit. Callers must await registration before publishing consumers; registration may perform asynchronous work.',
                 parameters: [{ name: 'definition', description: 'key, state schema, pure unit functions, and stateVersion.' }],
-                returns: 'the exact disposer that unregisters this unit.',
+                returns: 'an awaitable yielding a ready handle; the callable runtime value is deprecated.',
             },
             {
                 signature: 'onChanged(listener: ProjectionChangeListener): () => void',
@@ -2258,37 +2905,37 @@ export const SERVICE_API = [
                 returns: 'the exact disposer that unsubscribes.',
             },
             {
-                signature: 'stateOf<K extends keyof SessionProjectionStateMap>( session: Session, key: K, ): SessionProjectionStateMap[K] | undefined',
-                description: 'Read one unit\'s current host state after materializing every registered unit at the Session cursor. Unrelated wire views are not produced. The returned value is live; callers must not mutate it.',
-                parameters: [{ name: 'session', description: 'the session whose state is read.' }, { name: 'key', description: 'the registered unit key.' }],
-                returns: 'current state, or `undefined` when the key is not registered.',
+                signature: 'onEventChanged(listener: ProjectionEventChangeListener): () => void',
+                description: 'Subscribe to the event-level change feed. The registration is an effect on the calling context\'s fiber. The listener runs synchronously inside the committed event\'s `session/event` handling, once after every unit has been driven and after every onChanged call for that event. If a unit or an onChanged listener throws during that drive, the listener still receives the changes made before the throw.',
+                parameters: [{ name: 'listener', description: 'called once per committed event that changed at least one client-visible unit\'s raw view by `Object.is`.' }],
+                returns: 'the exact disposer that unsubscribes.',
             },
             {
-                signature: 'snapshot( session: Session, keys?: readonly Extract<keyof SessionProjectionMap, string>[], ): ProjectionSnapshot',
-                description: 'One consistent cut over every registered client-visible unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). Fully synchronous — every value and `asOfSeq` reflect the same log position. Each value passes its unit\'s `viewSchema` before leaving.',
-                parameters: [{ name: 'session', description: 'the session whose projection values are read.' }, { name: 'keys', description: 'optional client-visible outputs; state materialization remains complete.' }],
+                signature: 'snapshot( session: Session, keys?: ProjectionKeySelection, ): ProjectionSnapshot',
+                description: 'One consistent cut over every registered client-visible unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). Only the returned units are computed: other units, including Host-only units without `wire`, are neither folded nor advanced by this read. Fully synchronous — every value and `asOfSeq` reflect the same log position. Each value passes its unit\'s `viewSchema` before leaving.',
+                parameters: [{ name: 'session', description: 'the session whose projection values are read.' }, { name: 'keys', description: 'optional client-visible outputs; only these units are computed.' }],
                 returns: 'the snapshot; `values` is empty when no selected client-visible unit is registered.',
             },
             {
-                signature: 'cachedSnapshot( session: Session, keys?: readonly Extract<keyof SessionProjectionMap, string>[], ): ProjectionSnapshot | undefined',
-                description: 'Read only already-materialized client-visible cells without folding history. Values may trail the live Session and are therefore hints, not a complete baseline. Missing cells are omitted.',
-                parameters: [{ name: 'session', description: 'attached Session whose cached cells are inspected.' }, { name: 'keys', description: 'optional wire keys to view.' }],
-                returns: 'the lowest common cached cut, or `undefined` when no wire cell exists.',
+                signature: 'summaryKeys(): ReadonlySet<Extract<keyof SessionProjectionMap, string>>',
+                description: 'The keys a Session summary carries: every registered client-visible key whose unit does not declare `summary: false`. The returned set is stable — the same instance on every call — until a registration or its disposal changes the key table, so a consumer may hold it across rows. Callers pass it to a key-taking read face such as `snapshot(session, summaryKeys())` or `viewCheckpoint(rows, summaryKeys())`; those faces use the set as-is.',
+                parameters: [],
+                returns: 'the current summary key set; do not mutate it.',
             },
             {
                 signature: 'checkpoint(session: Session): ProjectionCheckpoint',
-                description: 'State-level checkpoint of every persisted unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). This is the write side of the persisted projection cache: the returned rows are the `(key → {ver, seq, val})` part of the durable `(sessionId, key, ver, seq, val)` rows. Every `val` is a DETACHED structured clone — never the live cell reference: the watermark cache is this registry\'s authoritative mutable state, and a caller reaching the live reference could corrupt every subsequent snapshot and frame through it (plain JSON by the unit contract, so the clone is total).',
+                description: 'State-level checkpoint of every persisted unit for one session, read from the watermark cache (missing cells fold lazily over the in-memory log). This is the write side of the persisted projection cache: the returned rows are the `(key → {ver, seq, val})` part of the durable `(sessionId, key, ver, seq, val)` rows. Every `val` is a DETACHED structured clone — never the live cell reference: the watermark cache is this registry\'s authoritative mutable state, and a caller reaching the live reference could corrupt every subsequent snapshot and frame through it (plain JSON by the unit contract, so the clone is total). A released unit contributes the Session\'s last cell. The registry no longer advances that cell, while a retained handle read still advances it forward, so a writer running after a plugin unloads keeps that unit\'s latest state; a Session that has no cell of it gets no row. restore folds only live units, so its refreshed rows omit released units.',
                 parameters: [{ name: 'session', description: 'the session whose unit states are checkpointed.' }],
-                returns: 'one row per registered key.',
+                returns: 'one row per registered key, plus one per released key with a cell for this Session.',
             },
             {
                 signature: 'restoreFloor(checkpoint: ProjectionCheckpoint): SessionLogOffset | undefined',
                 description: 'The stored seq a restore tail read over `checkpoint` must start at: one event BELOW the lowest usable watermark (a row is usable when its `ver` matches the live unit\'s `stateVersion`; an absent or mismatched row pulls the floor to `0` — that key must refold the full log). The one-below anchor is load-bearing: the tail then proves how far the stored log still extends, so restore can detect a log that shrank below a row\'s watermark (crash-repair truncation) instead of serving the stale row as current — an empty tail read from the anchor yields an end below every watermark and the restore rejects for a full re-read.',
                 parameters: [{ name: 'checkpoint', description: 'persisted rows for one session (possibly stale or empty).' }],
-                returns: 'the offset for the stored-log suffix read (`SessionHandle.read`), or `undefined` when no unit is registered (no read needed — {@link restore} would serve empty values regardless).',
+                returns: 'the offset for the stored-log suffix read (`SessionHandle.read`), or `undefined` when no live unit is registered (released predecessors do not count; no read needed — {@link restore} would serve empty values regardless).',
             },
             {
-                signature: 'viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: readonly Extract<keyof SessionProjectionMap, string>[], ): Partial<SessionProjectionMap>',
+                signature: 'viewCheckpoint( checkpoint: ProjectionCheckpoint, keys?: ProjectionKeySelection, ): Partial<SessionProjectionMap>',
                 description: 'View a checkpoint\'s rows without any log read: for every registered client-visible unit whose row\'s `ver` matches, serve the schema-validated `view` of the schema-validated stored state; mismatched, malformed, or absent rows leave their key absent (a cold or listing consumer treats it as not-yet-available and a fuller read path refolds it). The zero-I/O rung of the read ladder — values are as stale as their rows, never wrong.',
                 parameters: [{ name: 'checkpoint', description: 'persisted rows for one session (possibly stale or empty).' }, { name: 'keys', description: 'optional wire keys to view.' }],
                 returns: 'whole values per key with a usable row; empty when none.',
@@ -2297,7 +2944,7 @@ export const SERVICE_API = [
                 signature: 'restore( checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, header: SessionHeader, inheritedEventCount: SessionLogOffset, ): { snapshot: ProjectionSnapshot; checkpoint: ProjectionCheckpoint }',
                 description: 'Cold read: fold every persisted unit over a stored log suffix, seeding each from its checkpoint row when usable — the one read recipe (cached state + forward tail replay + `view`) applied without a live `Session`. Call with the stored events at or past `restoreFloor(checkpoint)` (a `SessionHandle.read` slice) and that same floor as `baseSeq`; the floor\'s one-below anchor makes the supplied end honest, so a shrunk log is detected here. A row is usable iff its `ver` matches the live unit\'s `stateVersion`, it does not predate `baseSeq` (`seq >= baseSeq - 1`), and it does not claim events past the supplied end (`seq <= endSeq`); an unusable row is discarded and its key refolds from `init` — which is only sound over the full log, so a discarded row with `baseSeq > 0` throws (the caller re-reads from seq 0, e.g. after a crash-repair truncation shrank the log below a row\'s watermark).',
                 parameters: [{ name: 'checkpoint', description: 'persisted rows for one session (possibly stale or empty).' }, { name: 'events', description: 'the stored events with `seq >= baseSeq`, in seq order.' }, { name: 'baseSeq', description: 'the seq `events` starts at (its first event\'s seq when non-empty).' }, { name: 'header', description: 'immutable metadata for the Session being restored.' }, { name: 'inheritedEventCount', description: 'exact fork-inherited prefix length supplied to unit initialization.' }],
-                returns: 'the snapshot cut at the supplied log end (`asOfSeq` is the last supplied event\'s seq, `baseSeq - 1` for an empty tail) plus the refreshed checkpoint rows at that cut, ready for a durable write-back.',
+                returns: 'the snapshot cut at the supplied log end (`asOfSeq` is the last supplied event\'s seq, `baseSeq - 1` for an empty tail) plus the refreshed checkpoint rows at that cut, ready for a durable write-back. The rows cover live units only: a released unit has no cell for a log folded without a live `Session`, so a write-back of them omits it.',
             },
             {
                 signature: 'hydrate( session: Session, checkpoint: ProjectionCheckpoint, events: readonly SessionEvent[], baseSeq: SessionLogOffset, ): ProjectionSnapshot',
@@ -2426,9 +3073,9 @@ export const SERVICE_API = [
                 returns: 'mention-carrying candidates in rank order.',
             },
             {
-                signature: 'async prepare( agent: Agent, content: ContentBlock[], references: SessionReferenceInput[], signal?: AbortSignal, ): Promise<PreparedReferencedMessage>',
-                description: 'Snapshot all references for one accepted direct message and return one aggregated durable context. Automatic budgets use the last assembled route, or agent options before any assembly. Missing model capacity or adapter uses 64 KiB; other metadata lookup failures and cancellation reject preparation. Truncated previews include omission facts and a full-snapshot spill locator, or an explicit unavailable notice. Cancellation prevents context publication, including when storage completes after cancellation.',
-                parameters: [{ name: 'agent', description: 'target agent; references to it are rejected.' }, { name: 'content', description: 'already host-normalized readable message content.' }, { name: 'references', description: 'structured source sessions in mention order.' }, { name: 'signal', description: 'optional cancellation boundary for the active turn.' }],
+                signature: 'async prepare( agent: Agent, content: ContentBlock[], references: SessionReferenceInput[], route: Readonly<Pick<LlmCallConfig, \'provider\' | \'model\'>>, signal?: AbortSignal, ): Promise<PreparedReferencedMessage>',
+                description: 'Snapshot all references for one accepted direct message and return one aggregated durable context. Automatic budgets use the context capacity of `route`. Missing model capacity or adapter uses 64 KiB; other metadata lookup failures and cancellation reject preparation. Truncated previews include omission facts and a full-snapshot spill locator, or an explicit unavailable notice. Cancellation prevents context publication, including when storage completes after cancellation.',
+                parameters: [{ name: 'agent', description: 'target agent; references to it are rejected.' }, { name: 'content', description: 'already host-normalized readable message content.' }, { name: 'references', description: 'structured source sessions in mention order.' }, { name: 'route', description: 'provider and model whose context capacity sizes the previews.' }, { name: 'signal', description: 'optional cancellation boundary for the active turn.' }],
                 returns: 'detached content and optional referenced-session context.',
             },
         ],
@@ -2456,19 +3103,19 @@ export const SERVICE_API = [
                 signature: 'prepare(id?: SessionId, options?: PrepareSessionOptions): Session',
                 description: 'Build a session WITHOUT entering it into the store — validate the id/cwd and construct the Session (with its immutable SessionHeader). Pairs with enter + announce: a caller that owns a composite `ctx.effect` (the agent factory) folds the session lifecycle into that ONE effect so a fiber unload tears the session + agent down as a single ORDERED chain rather than as racing sibling effects — which would remove the publication hooks before the driver\'s closing events commit, dropping them.',
                 parameters: [{ name: 'id', description: 'the session id; omitted, the store mints `session-<n>`.' }, { name: 'options', description: 'seed events and/or creation metadata for the header. With `eventState`, every seed event is either independently owned or any shared value is deeply frozen; {@link Session.fromRestore} validates and adopts those values without copying or freezing them.' }],
-                returns: 'the constructed session, NOT yet in the store.',
+                returns: 'the store-owned session, not yet entered and read-only until announced.',
                 throws: ['if a session with `id` already exists, metadata is not a plain lossless-JSON record with valid scalar fields, or `meta.cwd` is a non-absolute path.'],
             },
             {
                 signature: 'enter(session: Session): () => void',
-                description: 'Enter a prepared session into the store: install the module-private append publication hooks and add it to the store. Returns the DETACH disposer (hooks + store removal). Does NOT emit `session/created` — the caller yields this disposer inside its effect and THEN calls announce, so a throwing `session/created` listener rolls the attach back instead of leaking it.\n\nRe-checks the id for a duplicate: `prepare` and `enter` are public cross-package primitives and a caller may interleave arbitrary work (or another create) between them, so a stale prepared session must NOT overwrite a live store entry of the same id — its detach disposer would later delete the REAL session. The create convenience and the agent factory call the two back-to-back so they never trip this, but the public API cannot assume that.',
-                parameters: [{ name: 'session', description: 'a {@link prepare}d session not yet in the store.' }],
+                description: 'Enter a session into the store: install the module-private append publication hooks and add it to the store. Writes remain disabled until announce completes successfully. Returns the DETACH disposer (hooks + store removal). Does NOT emit `session/created` — the caller yields this disposer inside its effect and THEN calls announce, so a throwing `session/created` listener rolls the attach back instead of leaking it.\n\nRe-checks the id for a duplicate: `prepare` and `enter` are public cross-package primitives and a caller may interleave arbitrary work (or another create) between them, so a stale prepared session must NOT overwrite a live store entry of the same id — its detach disposer would later delete the REAL session. The create convenience and the agent factory call the two back-to-back so they never trip this, but the public API cannot assume that.',
+                parameters: [{ name: 'session', description: 'an unentered session; independent instances become store-owned.' }],
                 returns: 'the detach disposer (publication hooks + store removal). When called from a synchronous `session/created` listener, removal and disposal wait until that creation dispatch unwinds.',
                 throws: ['if a session with this id is already in the store.'],
             },
             {
                 signature: 'announce(session: Session): void',
-                description: 'Emit `session/created` exactly once for an entered session (with the carrier enter captured). Separate from enter so the caller can yield the detach disposer first (rollback safety — see enter).',
+                description: 'Emit `session/created` exactly once for an entered session (with the carrier enter captured). Separate from enter so the caller can yield the detach disposer first (rollback safety — see enter). The Session remains read-only throughout synchronous dispatch; successful completion enables appends. A failed announcement leaves it read-only and cannot be retried.',
                 parameters: [{ name: 'session', description: 'the entered session to announce to listeners.' }],
                 throws: ['if the session is not live or its announcement already began, including a reentrant call from a creation listener.'],
             },
@@ -2493,7 +3140,7 @@ export const SERVICE_API = [
             },
             {
                 signature: 'fork(source: SessionForkSource, boundary?: SessionSeq, childSessionId?: SessionId): Session',
-                description: 'Create a live child session from an exact prefix of a live source. `boundary` is an inclusive source event seq; omitted means the source\'s current last event. An open tail receives synthetic tool results and step/turn closers with the forked cause. Closed steps and turns remain unchanged, including any failed tool calls already missing results. `inheritedEventCount` counts only copied source events, excluding these closers.',
+                description: 'Create an independent live session from an exact prefix of a live source. `boundary` is an inclusive source event seq; omitted means the source\'s current last event. An open tail receives synthetic tool results and step/turn closers with the forked cause. Closed steps and turns remain unchanged, including any failed tool calls already missing results. `inheritedEventCount` counts only copied source events, excluding these closers.',
                 parameters: [{ name: 'source', description: 'Live source session object or id.' }, { name: 'boundary', description: 'Inclusive source event seq to fork through; omitted means the source\'s current last event, and omitted on an empty source forks an empty child.' }, { name: 'childSessionId', description: 'Optional child session id; omitted delegates to `SessionStore`\'s id policy.' }],
                 returns: 'The created live child session.',
             },
@@ -2933,16 +3580,9 @@ export const SERVICE_API = [
     },
     {
         key: 'subagentModelSelection',
-        summary: 'Singleton settings owner read when delegation tools are composed for a Session.',
-        description: 'Singleton settings owner read when delegation tools are composed for a Session.',
-        methods: [
-            {
-                signature: 'current(): SubagentModelSelectionSettings',
-                description: 'Read a detached selection preference for the next eligible Session composition.',
-                parameters: [],
-                returns: 'the enabled state and exact allowed routes.',
-            },
-        ],
+        summary: 'Host settings owner that records Session authorization before the first model request.',
+        description: 'Host settings owner that records Session authorization before the first model request.',
+        methods: [],
     },
     {
         key: 'subagents',
@@ -3135,9 +3775,9 @@ export const SERVICE_API = [
             },
             {
                 signature: 'async assemble(context: AssembleContext = {}): Promise<PromptAssembly>',
-                description: 'Assemble global and scoped providers, detach tool parameters, apply canonical ordering, then run the assembly waterfall. Scoped sections and variables shadow globals. The returned waterfall value is authoritative except that an effective complete section is restored afterwards as the sole prompt section.',
-                parameters: [{ name: 'context', description: 'the optional scope and plugin-defined assembly fields.' }],
-                returns: 'the post-waterfall assembly with any complete prompt enforced.',
+                description: 'Assemble global and scoped providers, detach tool parameters, apply canonical ordering, then run the presentation waterfall. Scoped sections and variables shadow globals. The waterfall\'s text is authoritative except that an effective complete section is restored afterwards as the sole prompt section; tool declarations stay provider-owned.',
+                parameters: [{ name: 'context', description: 'the optional scope, step tool set, and plugin-defined assembly fields.' }],
+                returns: 'the post-waterfall assembly with ordered tool declarations and any complete prompt enforced.',
             },
         ],
     },
@@ -3282,12 +3922,12 @@ export const SERVICE_API = [
                 parameters: [],
             },
             {
-                signature: 'throttle<F extends (...args: any[]) => void>(callback: F, delay: number, noTrailing?: boolean): F & { dispose: () => void }',
+                signature: 'throttle<F extends (...args: any[]) => any>(callback: F, delay: number, noTrailing?: boolean): ((...args: Parameters<F>) => void) & { dispose: () => void }',
                 description: 'Return a throttled function whose timer is disposed with the current fiber.',
                 parameters: [],
             },
             {
-                signature: 'debounce<F extends (...args: any[]) => void>(callback: F, delay: number): F & { dispose: () => void }',
+                signature: 'debounce<F extends (...args: any[]) => any>(callback: F, delay: number): ((...args: Parameters<F>) => void) & { dispose: () => void }',
                 description: 'Return a debounced function whose timer is disposed with the current fiber.',
                 parameters: [],
             },
@@ -3298,6 +3938,12 @@ export const SERVICE_API = [
         summary: 'Replay owner for one service-wide estimator and isolated per-session folds.',
         description: 'Replay owner for one service-wide estimator and isolated per-session folds.',
         methods: [
+            {
+                signature: 'contextPressure(session: Session): Pick<ContextPressureProjection, \'pressureTokens\' | \'contextWindow\'>',
+                description: 'Read the latest logged provider prompt size and route capacity.',
+                parameters: [{ name: 'session', description: 'Session whose committed usage and request capacity are read.' }],
+                returns: 'context pressure; fields remain absent until their source events are recorded.',
+            },
             {
                 signature: 'measure(session: Session, requestHeader?: EpochHeader): TokenMeasurement',
                 description: 'Measure current request pressure and surface through the durable tail.\n\nThe effective envelope\'s routed provider/model selects the request-image pricing every node is priced under: a route whose adapter declares image pricing charges each retained image its visual tokens plus its model-visible text, while other routes keep the fixed heuristic. Provider usage is reused only when the latest successful call\'s canonical request envelope matches `requestHeader` and its total is no lower than that call\'s full route-priced anchor; otherwise the complete envelope and surface are repriced. The anchor includes all surface nodes immediately before the assistant message, including inputs admitted after step/start.\n\n`requestHeader` replaces the latest logged envelope for pressure and node pricing; the node set always describes the current session surface. Every call clones those positional nodes, so measurement is O(surface).',
@@ -3345,19 +3991,13 @@ export const SERVICE_API = [
     },
     {
         key: 'tools',
-        summary: 'Tool registry and execution pipeline.',
-        description: 'Tool registry and execution pipeline. Scoped registrations shadow globals; one visibility resolver feeds presentation, lookup, and dispatch.',
+        summary: 'Concrete tool registry and scoped executor dispatcher.',
+        description: 'Concrete tool registry and scoped executor dispatcher.',
         methods: [
             {
-                signature: 'presentAs(mode: ToolPresentationMode): () => void',
-                description: 'Present the calling scope\'s tools in `mode` instead of the deployment default. Nearest scope on the chain wins, so a preset\'s standing declaration covers every agent joined under it.\n\nScoped only, and one declaration per scope: this is how an agent preset composes PTC mode agents beside native ones in the same process, and a process-global override would be the `mode` config field instead.',
-                parameters: [{ name: 'mode', description: 'the presentation the covered agents\' models see.' }],
-                returns: 'the exact disposer that restores the deployment default.',
-            },
-            {
-                signature: 'register(definition: ToolDefinition): () => void',
+                signature: 'register(definition: ToolDefinition, options: ToolRegistrationOptions = {}): () => void',
                 description: 'Register globally or in the calling agent scope. Scoped tools shadow globals; duplicates within one layer and the reserved `run_code` name fail.',
-                parameters: [{ name: 'definition', description: 'tool schema, execution, and optional finalization/presentation callbacks.' }],
+                parameters: [{ name: 'definition', description: 'tool schema, execution, and optional finalization/presentation callbacks.' }, { name: 'options', description: 'optional step-time activation condition.' }],
                 returns: 'the exact disposer that unregisters the tool.',
             },
             {
@@ -3367,34 +4007,58 @@ export const SERVICE_API = [
                 returns: 'the exact disposer that lifts this restriction.',
             },
             {
-                signature: 'guard(guard: ToolGuard): () => void',
-                description: 'Register a monotonic guard after the extensible `tools/pre-execute` waterfall. A plain-context guard applies globally; one registered through `agent.ctx` applies only to that agent. Any matching guard may deny by returning a reason, while no guard can force-allow a call another guard denied. The exact effect disposer is returned for ordered ownership and HMR cleanup.',
-                parameters: [{ name: 'guard', description: 'synchronous check; a returned string denies the execution.' }],
-                returns: 'the exact disposer that unregisters the guard.',
-            },
-            {
-                signature: 'get(name: string, scope?: ScopeKey): ToolDefinition | undefined',
+                signature: 'get(name: string, scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolDefinition | undefined',
                 description: 'Look up a tool as one scope sees it (scoped shadows global; a restricted-away global reads as absent). Presenters pass the calling agent so the rendered card matches the definition that actually executed.',
-                parameters: [{ name: 'name', description: 'the tool name as registered.' }, { name: 'scope', description: 'the viewing scope (the agent); omitted = the global view.' }],
+                parameters: [{ name: 'name', description: 'the tool name as registered.' }, { name: 'scope', description: 'the viewing scope (the agent); omitted = the global view.' }, { name: 'toolSet', description: 'step admission; omit only to inspect registered definitions.' }],
                 returns: 'the definition the scope resolves, or undefined when none is visible.',
             },
             {
-                signature: 'schemas(scope?: ScopeKey): ToolSchema[]',
+                signature: 'executable(name: string, scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolDefinition | undefined',
+                description: 'Resolve the definition a call may execute. With a step\'s admitted set, the set decides; without one, conditional registrations are unavailable.',
+                parameters: [{ name: 'name', description: 'the tool name as registered.' }, { name: 'scope', description: 'the calling agent; omitted = the global view.' }, { name: 'toolSet', description: 'step admission, or omitted for a call outside a model step.' }],
+                returns: 'the executable definition, or undefined when the call must fail as `UNKNOWN_TOOL`.',
+            },
+            {
+                signature: 'async resolve(context: ToolActivationContext): Promise<ResolvedToolSet>',
+                description: 'Resolve conditions once for this step without changing shared registrations. Cancellation or a rejected condition publishes no partial selection. Removed registrations cannot be restored by a late condition result.',
+                parameters: [{ name: 'context', description: 'preparing agent, captured model selection, and cancellation.' }],
+                returns: 'the complete selection; the caller disposes it after its tool batch settles.',
+            },
+            {
+                signature: 'definitions(scope?: ScopeKey, toolSet?: ResolvedToolSet): readonly ToolDefinition[]',
+                description: 'Read the visible capability definitions for descriptions and program bindings.',
+                parameters: [{ name: 'scope', description: 'viewing Agent or preset; omitted selects the global view.' }, { name: 'toolSet', description: 'step admission; omit only to inspect registered definitions.' }],
+                returns: 'definitions after scoped shadowing and restrictions, limited to the step\'s admission when given.',
+            },
+            {
+                signature: 'schemas(scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolSchema[]',
                 description: 'Project visible definitions onto the allowlisted model-facing schema fields, excluding execution and presentation callbacks.',
-                parameters: [{ name: 'scope', description: 'the viewing scope (the agent); omitted = the global view.' }],
+                parameters: [{ name: 'scope', description: 'the viewing scope (the agent); omitted = the global view.' }, { name: 'toolSet', description: 'step admission, or omitted for registered-definition inspection.' }],
                 returns: 'one deep-cloned schema per visible tool.',
             },
             {
-                signature: 'executionMode(exec: ToolExecutionInput): ToolExecutionMode',
-                description: 'Classify a pending call through the caller\'s visible tool definition. Only an exact `true` is parallel; unknown, hidden, undeclared, invalid, or throwing classifiers are exclusive.',
-                parameters: [{ name: 'exec', description: 'call name, parsed arguments, and optional agent scope.' }],
-                returns: 'the fail-closed scheduling mode.',
+                signature: 'setExecutor(executor: ToolExecutor): () => void',
+                description: 'Provide the executor for the calling scope; an unscoped contribution is the deployment default. Rendering any executor-owned section requires the viewing scope\'s selection to remain available.',
+                parameters: [{ name: 'executor', description: 'initialized provider owned by the contributing plugin.' }],
+                returns: 'the effect disposer. Unloading leaves the selection unavailable until it is replaced.',
+            },
+            {
+                signature: 'async execute(input: ToolBatchInput): Promise<ToolBatchResult>',
+                description: 'Delegate a raw call batch to its Agent\'s provider or the deployment default. Select at dispatch; accepted batches settle through that provider even if it unloads.',
+                parameters: [{ name: 'input', description: 'original calls, optional owning Agent, and optional logging step.' }],
+                returns: 'the selected executor\'s settled batch; unavailable selections reject.',
             },
             {
-                signature: 'async execute(exec: ToolExecutionInput): Promise<ToolExecutionResult>',
-                description: 'Execute through pre-policy, guards, around-dispatch, post-policy, definition-owned content finalization, and final notification. Tool and listener failures resolve as materialized error results; an invisible tool reports `UNKNOWN_TOOL`. The returned outcome is the same lossless, frozen snapshot final observers receive. Cancellation arriving after entry and before final result materialization skips a not-yet-started body with `ABORTED_BEFORE_DISPATCH` or replaces a successful started outcome with `ABORTED`; already-started work is still drained and may retain a tool-owned structured error.',
-                parameters: [{ name: 'exec', description: 'the typed same-process call input. The registry assigns its correlation token before policy begins.' }],
-                returns: 'the materialized final result.',
+                signature: 'guard(guard: ToolGuard): () => void',
+                description: 'Register a monotonic denial in the calling scope.',
+                parameters: [{ name: 'guard', description: 'evaluated after extensible pre-execute policy by the shared pipeline.' }],
+                returns: 'the effect disposer that removes this guard.',
+            },
+            {
+                signature: 'checkGuards(exec: ToolExecution): string | undefined',
+                description: 'Check global and inherited guards after pre-execute policy and approval resolve.',
+                parameters: [{ name: 'exec', description: 'invocation whose guards are checked before dispatch.' }],
+                returns: 'the first denial reason, or undefined when no guard denies.',
             },
         ],
     },
@@ -3489,6 +4153,12 @@ export const SERVICE_API = [
                 parameters: [],
                 returns: 'whether an owner stream is open and has not been cancelled.',
             },
+            {
+                signature: 'getPendingRemoteEvents(): readonly PendingRemoteEventInfo[]',
+                description: 'Inspect unsettled forwarded events without changing their lifetime.',
+                parameters: [],
+                returns: 'detached event names and Agent identities.',
+            },
             {
                 signature: 'registerRemoteEvents( source: TypertRemoteEventSource, host: RemoteEventHostInfo, ): () => Promise<void>',
                 description: 'Register the sole application-selected forwarded-event source.',
@@ -3567,12 +4237,24 @@ export const SERVICE_API = [
                 parameters: [{ name: 'request', description: 'the query and optional result limit.' }, { name: 'signal', description: 'optional cancellation signal forwarded to the provider.' }],
                 returns: 'the provider\'s results, capped to `request.maxResults`.',
             },
+            {
+                signature: 'async searchReady(llmProvider?: string): Promise<boolean>',
+                description: 'Whether the provider `search()` would select can authenticate a search made for a model request on the `llmProvider` chat route. Asks only that provider\'s `ready()`; one without `ready()` counts as ready. Makes no network calls. A selection failure answers true, because `search()` reports that failure as a structured `WebError`.',
+                parameters: [{ name: 'llmProvider', description: 'the provider route id of the model request, when known.' }],
+                returns: 'false only when the selected provider reports that it cannot authenticate.',
+            },
             {
                 signature: 'async fetch(request: WebFetchRequest, signal?: AbortSignal): Promise<WebFetchResult>',
                 description: 'Retrieve one URL through the selected provider. Resolves the provider at call time with the selection rules above; throws WebError when the capability cannot run. A non-2xx response is a result, not a throw.',
                 parameters: [{ name: 'request', description: 'the URL plus retrieval options.' }, { name: 'signal', description: 'optional cancellation signal forwarded to the provider.' }],
                 returns: 'the retrieval outcome; non-2xx responses resolve descriptively.',
             },
+            {
+                signature: 'async fetchReady(llmProvider?: string): Promise<boolean>',
+                description: 'Whether the provider `fetch()` would select can authenticate a fetch made for a model request on the `llmProvider` chat route. Asks only that provider\'s `ready()`; one without `ready()` counts as ready. Makes no network calls. A selection failure answers true, because `fetch()` reports that failure as a structured `WebError`.',
+                parameters: [{ name: 'llmProvider', description: 'the provider route id of the model request, when known.' }],
+                returns: 'false only when the selected provider reports that it cannot authenticate.',
+            },
         ],
     },
     {
@@ -3610,7 +4292,7 @@ export const SERVICE_API = [
     {
         key: 'webServer',
         summary: 'The browser HTTP carrier service.',
-        description: 'The browser HTTP carrier service. Activation loads any configured TLS material, then listens immediately; a material or listen failure rejects initialization, and the boot process reports the failed fiber. Route registration order does not affect requests because configured named routes must be distinct, and the fallback handler answers anything not yet claimed during startup with 404 until its owner registers.',
+        description: 'The browser HTTP carrier service. Activation loads any configured TLS material, then listens immediately; a material or listen failure rejects initialization, and the boot process reports the failed fiber. Route registration order does not affect requests because configured named routes must be distinct, and a request no named route matches is answered 404 until the fallback owner registers.',
         methods: [
             {
                 signature: 'getOrigin(): string',
@@ -3620,9 +4302,9 @@ export const SERVICE_API = [
                 throws: ['before `listen` binds a port, or when the bind address has no URL form.'],
             },
             {
-                signature: 'register(route: WebRoute): () => void',
+                signature: 'register(route: WebRoute | WebResourceRoute): () => void',
                 description: 'Register a named route. Duplicate (kind, path) throws — route patterns are a composition-level contract, so a collision is a misconfiguration.',
-                parameters: [{ name: 'route', description: 'kind, path, and the owning handler.' }],
+                parameters: [{ name: 'route', description: 'kind, path, and the owning handler or resource.' }],
                 returns: 'the disposer removing the route.',
             },
             {
@@ -3632,11 +4314,17 @@ export const SERVICE_API = [
                 returns: 'the disposer removing the route.',
             },
             {
-                signature: 'registerFallback(handler: WebRoute[\'handler\']): () => void',
-                description: 'Claim the fallback seat: the handler answering every request no named route matches (the SPA dist server in the shipped Web composition). One owner only — a second registration throws, because two fallbacks cannot compose.',
-                parameters: [{ name: 'handler', description: 'owns the full response lifecycle of unmatched requests.' }],
+                signature: 'registerFallback(fallback: WebRoute[\'handler\'] | Pick<WebResourceRoute, \'resource\'>): () => void',
+                description: 'Claim the fallback seat: the handler or resource answering every request no named route matches (the SPA dist server in the shipped Web composition). One owner only — a second registration throws, because two fallbacks cannot compose.',
+                parameters: [{ name: 'fallback', description: 'a handler owning the full response lifecycle of unmatched requests, or `{ resource }` answering them.' }],
                 returns: 'the disposer releasing the seat.',
             },
+            {
+                signature: 'async readResource(request: Request, peer: PeerScope): Promise<Response>',
+                description: 'Read the response an HTTP request for the same URL would receive, as the resource computes it for `peer`, without an HTTP exchange. The request path picks the responder by the HTTP match order — exact, longest prefix, then the fallback — and only a resource answers. This method checks no cookie, Host, or Origin: the caller admits the reader before reading.',
+                parameters: [{ name: 'request', description: 'the read; its URL path selects the responder.' }, { name: 'peer', description: 'the Peer the read speaks for, passed to the resource.' }],
+                returns: 'the resource\'s response, without a body for HEAD as over HTTP; 405 with `Allow: GET, HEAD` for any other method, checked before matching, where over HTTP a handler route or an unmatched path answers such a method itself; 404 when the path matches a handler route, or reaches the fallback seat while it is unclaimed or holds a handler. A resource that throws rejects the read, where an HTTP request would receive 400.',
+            },
             {
                 signature: 'tapIndex(transform: (html: string) => string): () => void',
                 description: 'Register a raw-HTML index transform, the escape hatch for markup no IndexInjection row expresses: renderIndex applies taps in registration order after rendering the structured rows.',
@@ -3650,15 +4338,15 @@ export const SERVICE_API = [
                 returns: 'the transformed body.',
             },
             {
-                signature: 'collectIndexInjections(): IndexInjection[]',
-                description: 'Gather the structured injection table: one `webserver/index-inject` emit, every subscriber pushes its current rows. Fresh per call, so subscribers read live state (module graph, theme preference) at emit time.',
-                parameters: [],
+                signature: 'collectIndexInjections(peer: PeerScope): IndexInjection[]',
+                description: 'Gather the structured injection table for one Peer: one `webserver/index-inject` emit, every subscriber pushes its current rows. Fresh per call, so subscribers read live state (module graph, theme preference, the Peer\'s access) at emit time.',
+                parameters: [{ name: 'peer', description: 'the Peer the page speaks for.' }],
                 returns: 'rows in subscriber activation order.',
             },
             {
-                signature: 'renderIndex(html: string): string',
-                description: 'Render one index.html body: the structured injection table first, then the raw `tapIndex` transforms over the result.',
-                parameters: [{ name: 'html', description: 'the raw index.html body.' }],
+                signature: 'renderIndex(html: string, peer: PeerScope): string',
+                description: 'Render one index.html body for one Peer: the structured injection table first, then the raw `tapIndex` transforms over the result.',
+                parameters: [{ name: 'html', description: 'the raw index.html body.' }, { name: 'peer', description: 'the Peer the page speaks for.' }],
                 returns: 'the transformed body.',
             },
         ],
@@ -3918,11 +4606,17 @@ export const SERVICE_API = [
         description: 'Creates retained Git worktrees under the mounted filesystem and sandbox providers.',
         methods: [
             {
-                signature: 'async create(agent: Agent, request: CreateWorktreeRequest = {}, signal?: AbortSignal): Promise<CreatedWorktree>',
+                signature: 'async create( agent: Agent, request: CreateWorktreeRequest = {}, signal?: AbortSignal, onPhase?: (phase: CreateWorktreePhase) => void, ): Promise<CreatedWorktree>',
                 description: 'Create a fresh branch and checkout at a pinned local revision, then enter it. Existing branches or checkout paths fail. Uncommitted files stay in the source checkout. Checkout disables configured clean, smudge, and process filters without changing Git config. Repository-local replacement refs still apply; baseCommit reports the resolved object name. The new checkout becomes current only after Git setup succeeds. Failures may retain newly allocated Git/filesystem artifacts; no branch or checkout is removed automatically.',
-                parameters: [{ name: 'agent', description: 'caller whose current directory selects the source repository and file policy.' }, { name: 'request', description: 'optional new name and local revision; defaults are generated name and HEAD.' }, { name: 'signal', description: 'cancellation of lookup, creation, and working-directory publication.' }],
+                parameters: [{ name: 'agent', description: 'caller whose current directory selects the source repository and file policy.' }, { name: 'request', description: 'optional new name and local revision; defaults are generated name and HEAD.' }, { name: 'signal', description: 'cancellation of lookup, creation, and working-directory publication.' }, { name: 'onPhase', description: 'receives each stage before it begins; it must not throw.' }],
                 returns: 'canonical checkout path, branch name, pinned commit, and source repository root.',
             },
+            {
+                signature: 'async restore( agent: Agent, request: RestoreWorktreeRequest, signal?: AbortSignal, onPhase?: (phase: CreateWorktreePhase) => void, ): Promise<RestoredWorktree>',
+                description: 'Check out a removed worktree again at its recorded directory: its branch when the branch still exists, otherwise a new branch of the same name at `baseCommit`. Only the missing target\'s unlocked registration is removed, and an existing directory fails. Changes that were never committed are not recovered. Checkout disables configured clean, smudge, and process filters, as creation does. The calling Session\'s working directory does not change. Failures may retain newly allocated Git/filesystem artifacts.',
+                parameters: [{ name: 'agent', description: 'caller whose sandbox policy confines the commands.' }, { name: 'request', description: 'recorded directory, branch, base commit, and source repository root.' }, { name: 'signal', description: 'cancellation of the restoration.' }, { name: 'onPhase', description: 'receives each stage before it begins; it must not throw.' }],
+                returns: 'the directory and whether the branch was created again.',
+            },
         ],
     },
 ];
@@ -4003,18 +4697,10 @@ export const EVENT_API = [
     {
         name: 'agent/pre-step',
         mode: 'waterfall',
-        signature: '\'agent/pre-step\'(this: Scoped<Agent>, payload: { agent: Agent; messages: UserMessage[]; turn: number; step: number; signal: AbortSignal }, next: () => Promise<PreStepDecision>): Promise<PreStepDecision>',
+        signature: '\'agent/pre-step\'(this: Scoped<Agent>, payload: { agent: Agent; messages: UserMessage[]; turn: number; step: number; signal: AbortSignal; modelSelection: Readonly<ModelSelection> }, next: () => Promise<PreStepDecision>): Promise<PreStepDecision>',
         summary: 'Reject a proposed step or replace the messages that enter it.',
         description: 'Reject a proposed step or replace the messages that enter it. Calling `next()` preserves the current messages.',
-        parameters: [{ name: 'payload', description: '.signal - the current turn\'s cancellation signal. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.' }],
-    },
-    {
-        name: 'agent/request',
-        mode: 'waterfall',
-        signature: '\'agent/request\'(this: Scoped<Agent>, payload: { agent: Agent; turn: number; step: number; signal: AbortSignal }, next: () => Promise<LlmCallConfig>): Promise<LlmCallConfig>',
-        summary: 'Replace the frozen call configuration.',
-        description: 'Replace the frozen call configuration. `await next()` yields the config the machine would use (agent options on the first request, the logged header afterwards); return a replacement to switch. On step admission, this runs after assembly and `step/start`, before the system prompt and accepted user batch are committed. Cancellation here or during subsequent `prepareCall()` resolution commits neither. The prepared call capability governs prompt admission. Model-visible content must use logged channels; this waterfall cannot mutate messages.',
-        parameters: [{ name: 'payload', description: '.signal - the current turn\'s explicit abort signal. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.' }],
+        parameters: [{ name: 'payload', description: '.modelSelection - captured step selection, retained across retries; omitted effort uses adapter defaults. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent.' }],
     },
     {
         name: 'agent/request-error',
@@ -4232,6 +4918,22 @@ export const EVENT_API = [
         description: 'Observe a durable cold feedback mutation without publishing a live Session. Observers run before write ownership is released and must not await another message-feedback operation for this Session. The payload is borrowed read-only; deep-clone it before transferring ownership (for example, to Session.fromRestore).',
         parameters: [{ name: 'inspection', description: 'committed canonical prefix, including the feedback as its last event.' }],
     },
+    {
+        name: 'forge/providers-changed',
+        mode: 'parallel',
+        signature: '\'forge/providers-changed\'(forge: string): void | Promise<void>',
+        summary: 'Announces a provider registration or withdrawal after the registry changes.',
+        description: 'Announces a provider registration or withdrawal after the registry changes. Listener failures are logged without preventing other listeners from running.',
+        parameters: [{ name: 'forge', description: 'family whose provider changed.' }],
+    },
+    {
+        name: 'fs/delete-intent',
+        mode: 'waterfall',
+        signature: '\'fs/delete-intent\'(target: FsTarget, actor: object | undefined, next: () => { version: FsVersion } | undefined | Promise<{ version: FsVersion } | undefined>): Promise<{ version: FsVersion } | undefined>',
+        summary: 'Single-slot decision for FileSystem.deleteFile; the first returned guard wins.',
+        description: 'Single-slot decision for FileSystem.deleteFile; the first returned guard wins. Calling next() delegates to an unconditional deletion.',
+        parameters: [{ name: 'target', description: 'the resolved source about to be removed.' }, { name: 'actor', description: 'the opaque tool-execution context used to select observed state.' }],
+    },
     {
         name: 'fs/edit-intent',
         mode: 'waterfall',
@@ -4288,6 +4990,14 @@ export const EVENT_API = [
         description: 'Module replacements have finished loading.',
         parameters: [{ name: 'reloads', description: 'Replaced plugins and their module locations.' }],
     },
+    {
+        name: 'llm-pi-ai/request-headers',
+        mode: 'waterfall',
+        signature: '\'llm-pi-ai/request-headers\'(request: PiAiRequestHeaderContext, headers: Headers, next: () => Headers): Headers',
+        summary: 'Prepare headers for one pi-ai inference call, excluding model discovery.',
+        description: 'Prepare headers for one pi-ai inference call, excluding model discovery. Listeners run synchronously and must call next(); they may edit only the request-owned headers and must not retain them. Throws fail the call with REQUEST_HEADERS before inference I/O. Harness attribution wins afterward. Non-TypeError messages are user-visible and must exclude secrets. TypeError details and non-Error values are replaced with safe guidance.',
+        parameters: [{ name: 'request', description: 'immutable routing metadata from the exact prepared call.' }, { name: 'headers', description: 'fresh profile headers, shared only within this dispatch.' }, { name: 'next', description: 'continue header preparation through the remaining listeners.' }],
+    },
     {
         name: 'llm/adapters-updated',
         mode: 'emit',
@@ -4296,6 +5006,14 @@ export const EVENT_API = [
         description: 'The provider topology changed: an adapter registered or unregistered routes, or the configurable-provider directory gained or lost entries. This payload-free registry notification fires at each commit point (including registration disposal); consumers re-read `listProviders()`, `listModels()`, or `listConfigurableProviders()` for the new state. Observer failures are contained and cannot veto the registry mutation.',
         parameters: [],
     },
+    {
+        name: 'llm/models-updated',
+        mode: 'emit',
+        signature: '\'llm/models-updated\'(provider: string): void',
+        summary: 'A provider\'s advertised models or display metadata changed; consumers reload `listModels()`.',
+        description: 'A provider\'s advertised models or display metadata changed; consumers reload `listModels()`.',
+        parameters: [{ name: 'provider', description: 'route whose model catalog changed.' }],
+    },
     {
         name: 'llm/stream',
         mode: 'waterfall',
@@ -4324,8 +5042,8 @@ export const EVENT_API = [
         name: 'plugin-manager/install-log',
         mode: 'emit',
         signature: '\'plugin-manager/install-log\'(chunk: PluginInstallLogChunk): void',
-        summary: 'One chunk of a pnpm run\'s output, streamed as the run produces it.',
-        description: 'One chunk of a pnpm run\'s output, streamed as the run produces it.',
+        summary: 'One chunk of an installation run\'s output, streamed as the run produces it.',
+        description: 'One chunk of an installation run\'s output, streamed as the run produces it.',
         parameters: [{ name: 'chunk', description: 'the chunk and the run it belongs to.' }],
     },
     {
@@ -4336,6 +5054,22 @@ export const EVENT_API = [
         description: 'An installation moved between its Host phases. `installing` is announced once per registry the installation asks, with the attempt\'s registry and position; `cancelling` and `applying` once.',
         parameters: [{ name: 'progress', description: 'the installation\'s request id and phase, with the attempt while installing.' }],
     },
+    {
+        name: 'plugin-manager/operation',
+        mode: 'parallel',
+        signature: '\'plugin-manager/operation\'(operation: PluginOperation): void | Promise<void>',
+        summary: 'One manager invocation started or ended; subscribers run independently without delaying management.',
+        description: 'One manager invocation started or ended; subscribers run independently without delaying management.',
+        parameters: [{ name: 'operation', description: 'Correlated operation facts; a start without an end has an unknown outcome.' }],
+    },
+    {
+        name: 'plugin-manager/update-state',
+        mode: 'emit',
+        signature: '\'plugin-manager/update-state\'(progress: PluginUpdateProgress): void',
+        summary: 'An update moved to its next step: checking the target, removing the installed version, installing the target, or reinstalling the removed version after the target failed.',
+        description: 'An update moved to its next step: checking the target, removing the installed version, installing the target, or reinstalling the removed version after the target failed. Announced once per step.',
+        parameters: [{ name: 'progress', description: 'the update\'s request id and step.' }],
+    },
     {
         name: 'plugin-market/changed',
         mode: 'emit',
@@ -4352,6 +5086,14 @@ export const EVENT_API = [
         description: 'Durable task set changed; clients refetch global task and Session-active catalogs.',
         parameters: [],
     },
+    {
+        name: 'schedule/resolve-agent',
+        mode: 'waterfall',
+        signature: '\'schedule/resolve-agent\'(sessionId: SessionId, next: () => Promise<Agent>): Promise<Agent>',
+        summary: 'Restore a reminder\'s Session through its embedding\'s owning controller.',
+        description: 'Restore a reminder\'s Session through its embedding\'s owning controller. Call next() to use the Web Session controller.',
+        parameters: [{ name: 'sessionId', description: 'Original Session receiving the reminder.' }],
+    },
     {
         name: 'session-telemetry/record',
         mode: 'waterfall',
@@ -4364,8 +5106,8 @@ export const EVENT_API = [
         name: 'session/created',
         mode: 'emit',
         signature: '\'session/created\'(this: Scoped<Session>, session: Session): void',
-        summary: 'Creation announcement during session publication.',
-        description: 'Creation announcement during session publication. A synchronous throw vetoes and rolls back with a paired disposal; detach requested during dispatch is deferred. A returned-promise rejection is logged but cannot retroactively veto this synchronous boundary. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only sessions entered through that agent\'s context.',
+        summary: 'Read-only creation announcement after store entry.',
+        description: 'Read-only creation announcement after store entry. New events reject until every synchronous listener has returned successfully. A synchronous throw vetoes creation and rolls back with a paired disposal; detach requested during dispatch is deferred. A returned-promise rejection is logged but cannot retroactively veto this synchronous boundary. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only sessions entered through that agent\'s context.',
         parameters: [{ name: 'session', description: 'the session just entered and announced.' }],
     },
     {
@@ -4443,9 +5185,9 @@ export const EVENT_API = [
     {
         name: 'system-prompt/assemble',
         mode: 'waterfall',
-        signature: '\'system-prompt/assemble\'(this: Scoped<SystemPrompt>, assembly: PromptAssembly, context: AssembleContext, next: () => Promise<PromptAssembly>): Promise<PromptAssembly>',
-        summary: 'Expert waterfall over the assembled sections, contexts, tools, and variables.',
-        description: 'Expert waterfall over the assembled sections, contexts, tools, and variables. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): scoped listeners receive only that scope\'s assemblies. The returned value is authoritative. A supplied signal controls only this explicit assembly request and must not be retained to control later turns. A registered complete section is restored after this waterfall, so listeners cannot add to or replace that scope\'s system prompt.',
+        signature: '\'system-prompt/assemble\'(this: Scoped<SystemPrompt>, assembly: PromptPresentation, context: AssembleContext, next: () => Promise<PromptPresentation>): Promise<PromptPresentation>',
+        summary: 'Presentation waterfall over assembled sections, contexts, and variables.',
+        description: 'Presentation waterfall over assembled sections, contexts, and variables. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): scoped listeners receive only that scope\'s assemblies. The returned text is authoritative; tool declarations remain provider-owned. A supplied signal controls only this explicit assembly request and must not be retained to control later turns. A registered complete section is restored after this waterfall, so listeners cannot add to or replace that scope\'s system prompt.',
         parameters: [{ name: 'assembly', description: 'the mutable assembly built from registered providers.' }, { name: 'context', description: 'the caller\'s per-assembly context.' }],
     },
     {
@@ -4460,14 +5202,14 @@ export const EVENT_API = [
         name: 'tools/change',
         mode: 'emit',
         signature: '\'tools/change\'(): void',
-        summary: 'A tool was registered or unregistered, or a scoped restriction changed (the available tool set changed — possibly for one scope only).',
-        description: 'A tool was registered or unregistered, or a scoped restriction changed (the available tool set changed — possibly for one scope only). An UNFILTERED registry-subject notification, deliberately not scope-filtered dispatch: a global change concerns every agent\'s next assembly, so a scoped listener subscribing here sees every change, not just its own scope\'s.',
+        summary: 'A tool was registered or unregistered, or a scoped restriction changed.',
+        description: 'A tool was registered or unregistered, or a scoped restriction changed. Unfiltered registry notification: scoped listeners receive changes from every scope because a global contribution can affect every agent\'s next assembly.',
         parameters: [],
     },
     {
         name: 'tools/execute',
         mode: 'waterfall',
-        signature: '\'tools/execute\'(this: Scoped<ToolRuntime>, exec: ToolDispatchExecution, next: () => Promise<ToolExecutionResult>): Promise<ToolExecutionResult>',
+        signature: '\'tools/execute\'(this: Scoped<ToolsService>, exec: ToolDispatchExecution, next: () => Promise<ToolExecutionResult>): Promise<ToolExecutionResult>',
         summary: 'Around-dispatch waterfall for timeout, retry, or metrics.',
         description: 'Around-dispatch waterfall for timeout, retry, or metrics. `next()` returns a normalized result; wrappers may change only `exec.signal`, while call identity remains immutable. The registry re-fuses the original caller signal before the body, so replacement cannot detach caller cancellation; wrappers must still restore their signal and reach quiescence. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent\'s calls.',
         parameters: [{ name: 'exec', description: 'the allowed call about to dispatch (name, parsed arguments, caller agent, signal).' }],
@@ -4475,7 +5217,7 @@ export const EVENT_API = [
     {
         name: 'tools/post-execute',
         mode: 'waterfall',
-        signature: '\'tools/post-execute\'(this: Scoped<ToolRuntime>, exec: ToolExecution, result: Readonly<ToolExecutionResult>, next: () => Promise<PostToolDecision>): Promise<PostToolDecision>',
+        signature: '\'tools/post-execute\'(this: Scoped<ToolsService>, exec: ToolExecution, result: Readonly<ToolExecutionResult>, next: () => Promise<PostToolDecision>): Promise<PostToolDecision>',
         summary: 'Accept, replace, enrich, or block a normalized dispatch result.',
         description: 'Accept, replace, enrich, or block a normalized dispatch result. `next()` accepts it unchanged; thrown tools still reach this waterfall as errors. Async listeners must observe `exec.signal`; after they settle, caller cancellation replaces only a successful accepted outcome with the code selected by whether the tool body was invoked. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent\'s calls.',
         parameters: [{ name: 'exec', description: 'the call that just ran (name, parsed arguments, caller agent).' }, { name: 'result', description: 'the dispatch outcome a listener may accept, replace, or block.' }],
@@ -4483,7 +5225,7 @@ export const EVENT_API = [
     {
         name: 'tools/pre-execute',
         mode: 'waterfall',
-        signature: '\'tools/pre-execute\'(this: Scoped<ToolRuntime>, exec: ToolExecution, next: () => Promise<PreToolDecision>): Promise<PreToolDecision>',
+        signature: '\'tools/pre-execute\'(this: Scoped<ToolsService>, exec: ToolExecution, next: () => Promise<PreToolDecision>): Promise<PreToolDecision>',
         summary: 'Allow, deny, cancel, or ask before dispatch.',
         description: 'Allow, deny, cancel, or ask before dispatch. `next()` delegates to allow; `cancel` selects the canonical pre-dispatch cancellation result, and missing approval support turns `ask` into denial. Async gates must observe `exec.signal`; the registry rechecks cancellation after they settle but never abandons their promise. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent\'s calls.',
         parameters: [{ name: 'exec', description: 'the pending call (name, parsed arguments, caller agent).' }],
@@ -4491,7 +5233,7 @@ export const EVENT_API = [
     {
         name: 'tools/ptc-dispatch-log',
         mode: 'waterfall',
-        signature: '\'tools/ptc-dispatch-log\'(this: Scoped<ToolRuntime>, dispatch: PtcDispatchLog, next: () => Promise<ContentBlock[]>): Promise<ContentBlock[]>',
+        signature: '\'tools/ptc-dispatch-log\'(this: Scoped<ToolsService>, dispatch: PtcDispatchLog, next: () => Promise<ContentBlock[]>): Promise<ContentBlock[]>',
         summary: 'Allow a listener to replace content in the DURABLE LOG COPY of one `run_code` sub-dispatch outcome before the bridge appends its `tool/ptc-dispatch` event.',
         description: 'Allow a listener to replace content in the DURABLE LOG COPY of one `run_code` sub-dispatch outcome before the bridge appends its `tool/ptc-dispatch` event. `next()` keeps the content unchanged; a listener may return replacement blocks (e.g. the spill policy\'s preview + locator for an oversized text result). Only the logged copy is affected — the program already received the complete value, and the model sees neither. A throwing listener is contained: the bridge falls back to logging the original settled content. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): agent-scoped listeners receive only that agent\'s dispatches.',
         parameters: [{ name: 'dispatch', description: 'the parent execution, sub-call identity, and the settled content to log.' }],
@@ -4499,7 +5241,7 @@ export const EVENT_API = [
     {
         name: 'tools/result',
         mode: 'emit',
-        signature: '\'tools/result\'(this: Scoped<ToolRuntime>, exec: Readonly<ToolExecution>, result: Readonly<ToolExecutionResult>): undefined',
+        signature: '\'tools/result\'(this: Scoped<ToolsService>, exec: Readonly<ToolExecution>, result: Readonly<ToolExecutionResult>): undefined',
         summary: 'Observe the frozen, lossless-JSON final outcome.',
         description: 'Observe the frozen, lossless-JSON final outcome. Listener failures are contained. Scope-filtered dispatch (`@deepseek-ai/dsh-scope`): keyed by `exec.agent`.',
         parameters: [{ name: 'exec', description: 'the execution object that traversed the pipeline.' }, { name: 'result', description: 'a deep-frozen snapshot of the final returned result.' }],
@@ -4515,10 +5257,10 @@ export const EVENT_API = [
     {
         name: 'webserver/index-inject',
         mode: 'emit',
-        signature: '\'webserver/index-inject\'(table: IndexInjection[]): void',
-        summary: 'Collect the structured index injection table.',
-        description: 'Collect the structured index injection table. Emitted on every index render and every worker boot-payload request; listeners push their current rows, so a row\'s data is read fresh at emit time.',
-        parameters: [{ name: 'table', description: 'Mutable row table; listeners append in activation order.' }],
+        signature: '\'webserver/index-inject\'(table: IndexInjection[], peer: PeerScope): void',
+        summary: 'Collect the structured index injection table for the page `peer` speaks for.',
+        description: 'Collect the structured index injection table for the page `peer` speaks for. Emitted on every index render and every worker boot-payload request; listeners push their current rows, so a row\'s data is read fresh at emit time.',
+        parameters: [{ name: 'table', description: 'Mutable row table; listeners append in activation order.' }, { name: 'peer', description: 'The Peer the rendered page speaks for.' }],
     },
     {
         name: 'workflow/agent-end',
@@ -4627,6 +5369,38 @@ export const TYPE_API = [
         name: 'AccountWallet',
         declaration: 'export interface AccountWallet {\n    readonly currency: \'CNY\' | \'USD\';\n    readonly balance: string;\n}',
     },
+    {
+        name: 'ActionCardDecision',
+        declaration: 'export interface ActionCardDecision {\n    readonly callId: ToolCallId;\n    readonly action: string;\n    readonly phase: string;\n    readonly data?: ActionCardFields | undefined;\n}',
+    },
+    {
+        name: 'ActionCardFields',
+        declaration: 'export type ActionCardFields = Readonly<Record<string, JsonValue>>;',
+    },
+    {
+        name: 'ActionCardKind',
+        declaration: 'export interface ActionCardKind<Details> {\n    readonly action: string;\n    readonly skill: string;\n    readonly invitation: string;\n    readonly details: ZodType<Details>;\n    readonly verbs: Readonly<Record<string, ActionCardVerb>>;\n    readonly openPhases?: readonly string[];\n    readonly statusGuidance?: string;\n    readonly statusFields?: readonly string[];\n    dismissal?(proposal: ActionCardProposalOf<Details>, payload: ActionCardFields | undefined): ActionCardFields | undefined;\n    reconcile?(agent: Agent, proposal: ActionCardProposalOf<Details>): Promise<void>;\n    act(agent: Agent, proposal: ActionCardProposalOf<Details>, verb: string, payload: ActionCardFields | undefined): Promise<ActionCardResult>;\n}',
+    },
+    {
+        name: 'ActionCardProposal',
+        declaration: 'export interface ActionCardProposal {\n    readonly callId: ToolCallId;\n    readonly turn: number;\n    readonly action: string;\n    readonly title: string;\n    readonly brief: string;\n    readonly details: ActionCardFields;\n}',
+    },
+    {
+        name: 'ActionCardProposalOf',
+        declaration: 'export type ActionCardProposalOf<Details> = Omit<ActionCardProposal, \'details\'> & {\n    readonly details: Details;\n};',
+    },
+    {
+        name: 'ActionCardResult',
+        declaration: 'export type ActionCardResult = {\n    readonly status: \'accepted\';\n} | {\n    readonly status: \'settled\';\n    readonly decision: ActionCardDecision;\n} | {\n    readonly status: \'refused\';\n    readonly reason: string;\n} | {\n    readonly status: \'unconfirmed\';\n    readonly reason: string;\n};',
+    },
+    {
+        name: 'ActionCardVerb',
+        declaration: 'export interface ActionCardVerb {\n    readonly global?: true;\n    readonly writes?: true;\n}',
+    },
+    {
+        name: 'ActionCardView',
+        declaration: 'export interface ActionCardView {\n    readonly proposals: Readonly<Record<string, ActionCardProposal>>;\n    readonly decisions: Readonly<Record<string, ActionCardDecision>>;\n}',
+    },
     {
         name: 'AdapterRegistrationHandle',
         declaration: 'export interface AdapterRegistrationHandle {\n    (): void;\n    replace(providers: string[]): void;\n}',
@@ -4657,7 +5431,7 @@ export const TYPE_API = [
     },
     {
         name: 'AgentOptions',
-        declaration: 'export interface AgentOptions {\n    provider?: string;\n    model?: string;\n    reasoningEffort?: ReasoningEffortId;\n    maxTokens?: number;\n}',
+        declaration: 'export interface AgentOptions {\n    provider?: string;\n    model?: string;\n    reasoningEffort?: ReasoningEffortId | undefined;\n    maxTokens?: number;\n}',
     },
     {
         name: 'AgentPresetComposition',
@@ -4761,7 +5535,7 @@ export const TYPE_API = [
     },
     {
         name: 'AskUserQuestionIntent',
-        declaration: 'export type AskUserQuestionIntent = {\n    kind: \'plan-review\';\n    approve: string;\n    callId?: ToolCallId;\n};',
+        declaration: 'export type AskUserQuestionIntent = {\n    kind: \'plan-review\';\n    approve: string;\n    callId?: ToolCallId;\n} | {\n    kind: \'approval\';\n    approve: string;\n    reject: string;\n    always?: string;\n    subject?: {\n        name: string;\n        icon?: string;\n    };\n    display?: {\n        question: {\n            en: string;\n            [locale: string]: string;\n        };\n        detail?: {\n            en: string;\n            [locale: string]: string;\n        };\n        approve?: {\n            en: string;\n            [locale: string]: string;\n        };\n    };\n};',
     },
     {
         name: 'AskUserQuestionItem',
@@ -4817,7 +5591,7 @@ export const TYPE_API = [
     },
     {
         name: 'AttachmentAdmissionPart',
-        declaration: 'export type AttachmentAdmissionPart = PromptContentPart | {\n    readonly type: \'file\';\n    readonly attachment: FileAttachmentRef;\n};',
+        declaration: 'export type AttachmentAdmissionPart = PromptContentPart | {\n    readonly type: \'file\';\n    readonly attachment: FileAttachmentRef;\n} | {\n    readonly type: \'image\';\n    readonly attachment: ImageAttachmentRef;\n    readonly encodedBytes: number;\n};',
     },
     {
         name: 'AttachmentError',
@@ -4895,6 +5669,10 @@ export const TYPE_API = [
         name: 'BashEnvVariableInfo',
         declaration: 'export interface BashEnvVariableInfo extends BashEnvVariable {\n    contributor: string;\n    key: DshEnvironmentKey;\n}',
     },
+    {
+        name: 'BindingOrigin',
+        declaration: 'export type BindingOrigin = \'created\' | \'referenced\' | \'discovered\' | \'tracked\';',
+    },
     {
         name: 'BoxProps',
         declaration: 'export interface BoxProps {\n    readonly flexDirection?: \'row\' | \'column\' | undefined;\n    readonly paddingX?: number | undefined;\n    readonly paddingY?: number | undefined;\n    readonly padding?: number | undefined;\n    readonly gap?: number | undefined;\n    readonly border?: boolean | string | undefined;\n    readonly borderColor?: string | undefined;\n    readonly children?: UiNode | undefined;\n}',
@@ -4911,9 +5689,13 @@ export const TYPE_API = [
         name: 'BrowserUseProviderName',
         declaration: 'export type BrowserUseProviderName = Branded<\'BrowserUseProviderName\'>;',
     },
+    {
+        name: 'BundleDetail',
+        declaration: 'export type BundleDetail = {\n    readonly status: \'found\';\n    readonly origin: \'locale\' | \'readme\';\n    readonly path: string;\n    readonly markdown: string;\n} | {\n    readonly status: \'none\';\n};',
+    },
     {
         name: 'BundleInfo',
-        declaration: 'export interface BundleInfo {\n    name: string;\n    official: boolean;\n    availability: \'installation\' | \'profile\' | \'missing\';\n    installTarget?: {\n        spec: string;\n        version: string;\n    };\n    version?: string;\n    meta?: PluginLocalizedMeta;\n    description?: string;\n    enabled: boolean;\n    installed: boolean;\n    source?: string;\n    optional: boolean;\n    removable: boolean;\n    readOnlyReason?: ReadOnlyReason;\n    error?: ManagementError;\n    rows: BundleRowInfo[];\n    overrides: string[];\n}',
+        declaration: 'export interface BundleInfo {\n    name: string;\n    official: boolean;\n    availability: \'installation\' | \'profile\' | \'missing\';\n    installTarget?: {\n        spec: string;\n        version: string;\n    };\n    version?: string;\n    meta?: PluginLocalizedMeta;\n    description?: string;\n    listedByDefault?: boolean;\n    enabled: boolean;\n    installed: boolean;\n    source?: string;\n    optional: boolean;\n    removable: boolean;\n    updatable: boolean;\n    readOnlyReason?: ReadOnlyReason;\n    error?: ManagementError;\n    rows: BundleRowInfo[];\n    overrides: string[];\n}',
     },
     {
         name: 'BundleRowInfo',
@@ -4923,10 +5705,50 @@ export const TYPE_API = [
         name: 'ButtonProps',
         declaration: 'export interface ButtonProps {\n    readonly label: string;\n    readonly hotkey?: string | undefined;\n    readonly disabled?: boolean | undefined;\n    readonly onPress?: (() => unknown) | undefined;\n}',
     },
+    {
+        name: 'ChangeRequestCheck',
+        declaration: 'export interface ChangeRequestCheck {\n    readonly name: string;\n    readonly state: CheckState;\n    readonly url: string | null;\n    readonly workflow: string | null;\n    readonly startedAt: string | null;\n    readonly completedAt: string | null;\n}',
+    },
+    {
+        name: 'ChangeRequestKey',
+        declaration: 'export type ChangeRequestKey = Branded<\'ChangeRequestKey\'>;',
+    },
+    {
+        name: 'ChangeRequestListener',
+        declaration: 'export type ChangeRequestListener = (update: ChangeRequestUpdate) => void;',
+    },
+    {
+        name: 'ChangeRequestRef',
+        declaration: 'export interface ChangeRequestRef {\n    readonly repository: ForgeRepository;\n    readonly number: number;\n}',
+    },
+    {
+        name: 'ChangeRequestSnapshot',
+        declaration: 'export interface ChangeRequestSnapshot {\n    readonly ref: ChangeRequestRef;\n    readonly url: string;\n    readonly title: string;\n    readonly state: ChangeRequestState;\n    readonly draft: boolean;\n    readonly author: string | null;\n    readonly headBranch: string;\n    readonly headSha: string;\n    readonly baseBranch: string;\n    readonly additions: number;\n    readonly deletions: number;\n    readonly mergeability: Mergeability;\n    readonly mergeReady: boolean;\n    readonly mergeMethods: readonly MergeMethod[];\n    readonly reviewDecision: ReviewDecision;\n    readonly checks: readonly ChangeRequestCheck[];\n    readonly checksRollup: ChecksRollup;\n    readonly checksTruncated: boolean;\n    readonly unresolvedThreads: number;\n    readonly updatedAt: string;\n    readonly closedAt: string | null;\n}',
+    },
+    {
+        name: 'ChangeRequestState',
+        declaration: 'export type ChangeRequestState = \'open\' | \'closed\' | \'merged\';',
+    },
+    {
+        name: 'ChangeRequestUpdate',
+        declaration: 'export type ChangeRequestUpdate = {\n    readonly key: ChangeRequestKey;\n    readonly fetchedAt: number;\n} & ({\n    readonly snapshot: ChangeRequestSnapshot;\n} | {\n    readonly failure: ForgeFailure;\n});',
+    },
     {
         name: 'ChangeResult',
         declaration: 'export interface ChangeResult {\n    changed: boolean;\n    application: \'applied\' | \'restart-required\' | \'overridden\' | \'failed\' | \'cancelled\';\n    restartReason?: RestartReason;\n    stage: \'install\' | \'enable\' | \'remove\';\n    target: string;\n    enabled?: boolean;\n    error?: ManagementError;\n    warnings?: string[];\n    packageResult?: PackageResult;\n    bundle?: string;\n    version?: string;\n    pendingBuilds?: string[];\n    approvedBuilds?: string[];\n    registries?: Registry[];\n    failedAt?: \'registry\' | \'spec-host\';\n}',
     },
+    {
+        name: 'ChecksRollup',
+        declaration: 'export type ChecksRollup = \'none\' | \'pending\' | \'success\' | \'failure\';',
+    },
+    {
+        name: 'CheckState',
+        declaration: 'export type CheckState = \'pending\' | \'success\' | \'failure\' | \'neutral\' | \'skipped\' | \'cancelled\';',
+    },
+    {
+        name: 'ClaimOutcome',
+        declaration: 'export interface ClaimOutcome {\n    readonly claimed: number;\n    readonly skipped: number;\n}',
+    },
     {
         name: 'ClientArtifactBaseline',
         declaration: 'export interface ClientArtifactBaseline {\n    readonly path: string;\n    readonly mtimeMs: number;\n    readonly ctimeMs: number;\n    readonly size: number;\n}',
@@ -5095,6 +5917,10 @@ export const TYPE_API = [
         name: 'ContentBlockType',
         declaration: 'export type ContentBlockType = keyof ContentBlockMap;',
     },
+    {
+        name: 'ContextPressureProjection',
+        declaration: 'export interface ContextPressureProjection {\n    pressureTokens?: number;\n    projectedTokens?: number;\n    contextWindow?: number;\n}',
+    },
     {
         name: 'ContinuableCreateRequest',
         declaration: 'export interface ContinuableCreateRequest {\n    readonly cwd: string;\n    readonly sessionId: SessionId;\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n}',
@@ -5183,6 +6009,10 @@ export const TYPE_API = [
         name: 'CreateAgentOptions',
         declaration: 'export interface CreateAgentOptions {\n    readonly sessionId: SessionId;\n    readonly parentAgent?: Agent;\n    readonly meta?: {\n        readonly cwd?: string;\n        readonly parentSession?: SessionId;\n        readonly isSeeded?: boolean;\n        readonly origin?: \'subagent\';\n        readonly delegationDepth?: number;\n        readonly agentPreset?: string;\n    };\n    readonly inheritedEventCount?: SessionLogOffset;\n    readonly seed?: readonly SessionEvent[];\n    readonly agentOptions?: AgentOptions;\n    readonly signal?: AbortSignal;\n    readonly setup?: AgentSetup;\n}',
     },
+    {
+        name: 'CreatedShare',
+        declaration: 'export interface CreatedShare {\n    readonly link: string;\n    readonly shareId: string;\n    readonly sessionId: string;\n    readonly sessionMode: \'view\' | \'write\';\n    readonly access: ShareAccess;\n}',
+    },
     {
         name: 'CreatedWorktree',
         declaration: 'export interface CreatedWorktree {\n    path: string;\n    branch: string;\n    baseCommit: string;\n    repositoryRoot: string;\n}',
@@ -5199,10 +6029,18 @@ export const TYPE_API = [
         name: 'CreateSessionOptions',
         declaration: 'export interface CreateSessionOptions {\n    readonly seed?: readonly SessionEvent[];\n    readonly inheritedEventCount?: SessionLogOffset;\n    readonly meta?: {\n        readonly cwd?: string;\n        readonly parentSession?: SessionId;\n        readonly createdAt?: number;\n        readonly isSeeded?: boolean;\n        readonly origin?: \'subagent\';\n        readonly delegationDepth?: number;\n        readonly agentPreset?: string;\n    };\n}',
     },
+    {
+        name: 'CreateShareRequest',
+        declaration: 'export interface CreateShareRequest {\n    readonly sessionId: string;\n    readonly sessionTitle?: string;\n    readonly accessMode?: \'open\' | \'selected\';\n    readonly ttlMinutes?: number;\n    readonly allowedSubjectIds?: readonly string[];\n    readonly allowsFork?: boolean;\n    readonly sessionMode?: \'view\' | \'write\';\n}',
+    },
     {
         name: 'CreateTeamTaskRequest',
         declaration: 'export interface CreateTeamTaskRequest {\n    readonly subject: string;\n    readonly description: string;\n    readonly blockedBy?: readonly TeamTaskId[];\n    readonly writeScopes?: readonly string[];\n}',
     },
+    {
+        name: 'CreateWorktreePhase',
+        declaration: 'export type CreateWorktreePhase = \'prepare\' | \'checkout\';',
+    },
     {
         name: 'CreateWorktreeRequest',
         declaration: 'export interface CreateWorktreeRequest {\n    name?: string;\n    from?: string;\n}',
@@ -5239,6 +6077,30 @@ export const TYPE_API = [
         name: 'CronScheduleRecord',
         declaration: 'export interface CronScheduleRecord {\n    readonly id: ScheduleId;\n    readonly kind: \'cron\';\n    readonly title: string;\n    readonly prompt: string;\n    readonly expression: string;\n    readonly timeZone: string;\n    readonly scheduledAt: string;\n}',
     },
+    {
+        name: 'CuaApplicationGrant',
+        declaration: 'export interface CuaApplicationGrant {\n    id: CuaApplicationId;\n    name: string;\n    executablePath?: string | undefined;\n}',
+    },
+    {
+        name: 'CuaApplicationId',
+        declaration: 'export type CuaApplicationId = Branded<\'CuaApplicationId\'>;',
+    },
+    {
+        name: 'CuaApplicationState',
+        declaration: 'export interface CuaApplicationState {\n    allowedApps: readonly CuaApplicationGrant[];\n    blockedApps: readonly CuaApplicationGrant[];\n    persistentAvailable: boolean;\n}',
+    },
+    {
+        name: 'CuaPermissionProcess',
+        declaration: 'export interface CuaPermissionProcess {\n    pid: number;\n    path?: string | undefined;\n    name?: string | undefined;\n}',
+    },
+    {
+        name: 'CuaSystemPermission',
+        declaration: 'export type CuaSystemPermission = \'accessibility\' | \'screenRecording\';',
+    },
+    {
+        name: 'CuaSystemPermissionState',
+        declaration: 'export interface CuaSystemPermissionState {\n    accessibility: boolean;\n    screenRecording: boolean;\n    helper: CuaPermissionProcess;\n    parent: CuaPermissionProcess;\n    launchApplication?: {\n        name: string;\n        path: string;\n        icon?: string | undefined;\n    } | undefined;\n}',
+    },
     {
         name: 'DailyInput',
         declaration: 'export interface DailyInput {\n    readonly time: string;\n    readonly time_zone: string;\n}',
@@ -5257,7 +6119,7 @@ export const TYPE_API = [
     },
     {
         name: 'DeepSeekLlmApiExtensionRequest',
-        declaration: 'export interface DeepSeekLlmApiExtensionRequest {\n    readonly body: Readonly<Record<string, DeepSeekLlmApiJson>>;\n    readonly sessionId?: string;\n    readonly purpose?: \'compaction\' | \'session-title\';\n    readonly signal: AbortSignal;\n}',
+        declaration: 'export interface DeepSeekLlmApiExtensionRequest {\n    readonly body: Readonly<Record<string, DeepSeekLlmApiJson>>;\n    readonly sessionId?: string;\n    readonly purpose?: string;\n    readonly signal: AbortSignal;\n}',
     },
     {
         name: 'DeepSeekLlmApiJson',
@@ -5388,72 +6250,200 @@ export const TYPE_API = [
         declaration: 'export interface EncodedFileUploadRequest {\n    readonly data: string;\n    readonly name?: string;\n}',
     },
     {
-        name: 'EncodedImageAttachment',
-        declaration: 'export interface EncodedImageAttachment {\n    mediaType: ImageMediaType;\n    data: string;\n    name?: string;\n}',
+        name: 'EncodedImageAttachment',
+        declaration: 'export interface EncodedImageAttachment {\n    mediaType: ImageMediaType;\n    data: string;\n    name?: string;\n}',
+    },
+    {
+        name: 'EpochHeader',
+        declaration: 'export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n    system?: never;\n}',
+    },
+    {
+        name: 'EventLogOptions',
+        declaration: 'export interface EventLogOptions {\n    exporter: LogExporterOptions;\n    resourceAttributes: Attributes;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    processor: Omit<BatchLogRecordProcessorOptions, \'exporter\'>;\n    onFailure: SessionLogOptions[\'onFailure\'];\n}',
+    },
+    {
+        name: 'EventLogReporter',
+        declaration: 'export class EventLogReporter {\n    constructor(options: EventLogOptions);\n    emit(record: OTelEventRecord): void;\n    async shutdown(signal?: AbortSignal): Promise<void>;\n}',
+    },
+    {
+        name: 'EveryScheduleRecord',
+        declaration: 'export interface EveryScheduleRecord {\n    readonly id: ScheduleId;\n    readonly kind: \'every\';\n    readonly title: string;\n    readonly prompt: string;\n    readonly everySeconds: number;\n    readonly scheduledAt: string;\n}',
+    },
+    {
+        name: 'FeedbackCategory',
+        declaration: 'export type FeedbackCategory = \'task-result\' | \'instruction-following\' | \'product-interaction\' | \'service-stability\' | \'resource-cost\' | \'security-privacy-permission\' | \'other\';',
+    },
+    {
+        name: 'FiberState',
+        declaration: 'export const enum FiberState {\n    PENDING,\n    LOADING,\n    ACTIVE,\n    FAILED,\n    DISPOSED,\n    UNLOADING\n}',
+    },
+    {
+        name: 'FileAttachmentRef',
+        declaration: 'export interface FileAttachmentRef {\n    attachmentId: AttachmentId;\n    name: string;\n    bytes: number;\n}',
+    },
+    {
+        name: 'FileBlock',
+        declaration: 'export interface FileBlock {\n    type: \'file\';\n    attachment: FileAttachmentRef;\n}',
+    },
+    {
+        name: 'FileDiff',
+        declaration: 'export interface FileDiff {\n    path: string;\n    oldText: string | null;\n    newText: string;\n}',
+    },
+    {
+        name: 'FileLocation',
+        declaration: 'export interface FileLocation {\n    path: string;\n    line?: number;\n}',
+    },
+    {
+        name: 'FileReferenceCandidate',
+        declaration: 'export interface FileReferenceCandidate {\n    path: string;\n    kind: \'file\' | \'directory\';\n}',
+    },
+    {
+        name: 'FileUploadReceiptId',
+        declaration: 'export type FileUploadReceiptId = Branded<\'file-upload-receipt-id\'>;',
+    },
+    {
+        name: 'FileUploadValue',
+        declaration: 'export interface FileUploadValue {\n    readonly receiptId: FileUploadReceiptId;\n    readonly file: FileAttachmentRef;\n}',
+    },
+    {
+        name: 'FinishReason',
+        declaration: 'export type FinishReason = FinishReasonMap[keyof FinishReasonMap];',
+    },
+    {
+        name: 'FinishReasonMap',
+        declaration: 'export interface FinishReasonMap {\n    \'stop\': {\n        kind: \'stop\';\n    };\n    \'tool-calls\': {\n        kind: \'tool-calls\';\n    };\n    \'max-tokens\': {\n        kind: \'max-tokens\';\n    };\n    \'aborted\': {\n        kind: \'aborted\';\n        failure: LlmFailure;\n    };\n    \'error\': {\n        kind: \'error\';\n        failure: LlmFailure;\n    };\n}',
+    },
+    {
+        name: 'ForgeActionFailure',
+        declaration: 'export interface ForgeActionFailure {\n    readonly code: \'unauthenticated\' | \'stale\' | \'failed\';\n    readonly message: string;\n}',
+    },
+    {
+        name: 'ForgeBranches',
+        declaration: 'export interface ForgeBranches {\n    readonly current: string | null;\n    readonly branches: readonly string[];\n}',
+    },
+    {
+        name: 'ForgeChangedFile',
+        declaration: 'export interface ForgeChangedFile {\n    readonly path: string;\n    readonly additions: number;\n    readonly deletions: number;\n    readonly binary: boolean;\n}',
+    },
+    {
+        name: 'ForgeChangeRequestDiff',
+        declaration: 'export interface ForgeChangeRequestDiff {\n    readonly headSha: string;\n    readonly files: readonly ForgeDiffFile[];\n    readonly localAhead: number | null;\n    readonly fileUrls: Readonly<Record<string, string>>;\n}',
+    },
+    {
+        name: 'ForgeChangeRequestListState',
+        declaration: 'export type ForgeChangeRequestListState = Pick<ChangeRequestSnapshot, \'url\' | \'title\' | \'state\' | \'draft\' | \'checksRollup\' | \'reviewDecision\' | \'mergeability\'> & {\n    readonly number: number;\n};',
+    },
+    {
+        name: 'ForgeChangeRequestStatesFrame',
+        declaration: 'export type ForgeChangeRequestStatesFrame = {\n    readonly type: \'baseline\';\n    readonly states: readonly ForgeChangeRequestListState[];\n} | {\n    readonly type: \'changed\';\n    readonly states: readonly ForgeChangeRequestListState[];\n};',
+    },
+    {
+        name: 'ForgeCheckout',
+        declaration: 'export interface ForgeCheckout {\n    readonly root: string;\n    readonly branch: string | null;\n    readonly linked: boolean;\n    readonly commit: string | null;\n}',
+    },
+    {
+        name: 'ForgeCheckoutState',
+        declaration: 'export type ForgeCheckoutState = {\n    readonly state: \'pending\';\n} | {\n    readonly state: \'none\';\n} | {\n    readonly state: \'failed\';\n    readonly message: string;\n} | {\n    readonly state: \'ready\';\n    readonly checkout: ForgeCheckout;\n};',
+    },
+    {
+        name: 'ForgeDiffFile',
+        declaration: 'export interface ForgeDiffFile {\n    readonly path: string;\n    readonly previousPath: string | null;\n    readonly status: ForgeDiffStatus;\n    readonly binary: boolean;\n    readonly oversized: boolean;\n    readonly untracked: boolean;\n    readonly additions: number;\n    readonly deletions: number;\n    readonly hunks: readonly ForgeDiffHunk[];\n}',
+    },
+    {
+        name: 'ForgeDiffHunk',
+        declaration: 'export interface ForgeDiffHunk {\n    readonly oldStart: number;\n    readonly oldLines: number;\n    readonly newStart: number;\n    readonly newLines: number;\n    readonly lines: readonly string[];\n}',
+    },
+    {
+        name: 'ForgeDiffStatus',
+        declaration: 'export type ForgeDiffStatus = \'added\' | \'deleted\' | \'modified\' | \'renamed\';',
+    },
+    {
+        name: 'ForgeFailure',
+        declaration: 'export interface ForgeFailure {\n    readonly code: \'not-found\' | \'unauthenticated\' | \'too-large\' | \'unavailable\';\n    readonly message: string;\n}',
+    },
+    {
+        name: 'ForgeLineComment',
+        declaration: 'export interface ForgeLineComment {\n    readonly path: string;\n    readonly side: \'L\' | \'R\';\n    readonly startLine: number;\n    readonly endLine: number;\n    readonly body: string;\n}',
+    },
+    {
+        name: 'ForgeLocalChanges',
+        declaration: 'export interface ForgeLocalChanges {\n    readonly base: string;\n    readonly files: readonly ForgeChangedFile[];\n}',
+    },
+    {
+        name: 'ForgeLocalDiff',
+        declaration: 'export interface ForgeLocalDiff {\n    readonly base: string | null;\n    readonly files: readonly ForgeDiffFile[];\n    readonly omitted: number;\n}',
+    },
+    {
+        name: 'ForgeLocalScope',
+        declaration: 'export type ForgeLocalScope = {\n    readonly kind: \'branch\';\n} | {\n    readonly kind: \'uncommitted\';\n} | {\n    readonly kind: \'unstaged\';\n} | {\n    readonly kind: \'staged\';\n};',
+    },
+    {
+        name: 'ForgeMissingWorktree',
+        declaration: 'export interface ForgeMissingWorktree {\n    readonly branchExists: boolean | null;\n}',
     },
     {
-        name: 'EpochHeader',
-        declaration: 'export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    tools?: ToolSchema[];\n    system?: never;\n}',
+        name: 'ForgePanelChangeRequest',
+        declaration: 'export interface ForgePanelChangeRequest extends SessionChangeRequest {\n    readonly snapshot: ChangeRequestSnapshot | null;\n}',
     },
     {
-        name: 'EventLogOptions',
-        declaration: 'export interface EventLogOptions {\n    exporter: LogExporterOptions;\n    resourceAttributes: Attributes;\n    scope: {\n        name: string;\n        version?: string;\n    };\n    processor: Omit<BatchLogRecordProcessorOptions, \'exporter\'>;\n    onFailure: SessionLogOptions[\'onFailure\'];\n}',
+        name: 'ForgePanelState',
+        declaration: 'export interface ForgePanelState {\n    readonly directory: string;\n    readonly checkout: ForgeCheckoutState;\n    readonly repository: ForgeRepository | null;\n    readonly readiness: ForgeReadiness | null;\n    readonly changeRequests: readonly ForgePanelChangeRequest[];\n    readonly worktree: ForgePanelWorktree;\n    readonly local: ForgeLocalChanges | null;\n}',
     },
     {
-        name: 'EventLogReporter',
-        declaration: 'export class EventLogReporter {\n    constructor(options: EventLogOptions);\n    emit(record: OTelEventRecord): void;\n    async shutdown(signal?: AbortSignal): Promise<void>;\n}',
+        name: 'ForgePanelWorktree',
+        declaration: 'export interface ForgePanelWorktree {\n    readonly editable: boolean;\n    readonly blocker: ForgeWorktreeBlocker | null;\n    readonly request: ForgeWorktreeRequest | null;\n    readonly created: ForgeSessionWorktree | null;\n    readonly creation: ForgeWorktreeCreation | null;\n    readonly failure: ForgeWorktreeFailure | null;\n    readonly missing: ForgeMissingWorktree | null;\n    readonly restoration: ForgeWorktreeRestoration | null;\n    readonly waiting: ForgeWorktreeWaiting | null;\n}',
     },
     {
-        name: 'EveryScheduleRecord',
-        declaration: 'export interface EveryScheduleRecord {\n    readonly id: ScheduleId;\n    readonly kind: \'every\';\n    readonly title: string;\n    readonly prompt: string;\n    readonly everySeconds: number;\n    readonly scheduledAt: string;\n}',
+        name: 'ForgeProvider',
+        declaration: 'export interface ForgeProvider {\n    readonly forge: string;\n    submitReview?(ref: ChangeRequestRef, request: ForgeReviewRequest, signal: AbortSignal): Promise<ForgeReviewResult>;\n    repositoryFromRemote(url: string): ForgeRepository | undefined;\n    changeRequestFromUrl(url: string): ChangeRequestRef | undefined;\n    changeRequestUrl(ref: ChangeRequestRef): string;\n    fetch(refs: readonly ChangeRequestRef[], signal: AbortSignal): Promise<ReadonlyMap<ChangeRequestKey, ChangeRequestSnapshot | ForgeFailure>>;\n    fetchChecks?(ref: ChangeRequestRef, signal: AbortSignal): Promise<ChangeRequestSnapshot | ForgeFailure>;\n    findByHead(repository: ForgeRepository, branch: string, signal: AbortSignal): Promise<readonly ChangeRequestRef[]>;\n    readiness(host: string, signal: AbortSignal): Promise<ForgeReadiness>;\n    markReady(ref: ChangeRequestRef, signal: AbortSignal): Promise<ForgeActionFailure | undefined>;\n    merge(ref: ChangeRequestRef, request: MergeRequest, signal: AbortSignal): Promise<ForgeActionFailure | undefined>;\n    diff(ref: ChangeRequestRef, signal: AbortSignal): Promise<string | ForgeFailure>;\n    fileText(ref: ChangeRequestRef, commit: string, path: string, signal: AbortSignal): Promise<string | ForgeFailure>;\n    fileUrl(ref: ChangeRequestRef, commit: string, path: string): string;\n}',
     },
     {
-        name: 'FeedbackCategory',
-        declaration: 'export type FeedbackCategory = \'task-result\' | \'instruction-following\' | \'product-interaction\' | \'service-stability\' | \'resource-cost\' | \'security-privacy-permission\' | \'other\';',
+        name: 'ForgeReadiness',
+        declaration: 'export interface ForgeReadiness {\n    readonly state: \'ready\' | \'unauthenticated\' | \'unavailable\';\n    readonly message: string | null;\n}',
     },
     {
-        name: 'FiberState',
-        declaration: 'export const enum FiberState {\n    PENDING,\n    LOADING,\n    ACTIVE,\n    FAILED,\n    DISPOSED,\n    UNLOADING\n}',
+        name: 'ForgeRepository',
+        declaration: 'export interface ForgeRepository {\n    readonly forge: string;\n    readonly host: string;\n    readonly owner: string;\n    readonly name: string;\n}',
     },
     {
-        name: 'FileAttachmentRef',
-        declaration: 'export interface FileAttachmentRef {\n    attachmentId: AttachmentId;\n    name: string;\n    bytes: number;\n}',
+        name: 'ForgeReviewRequest',
+        declaration: 'export type ForgeReviewRequest = {\n    readonly headSha: string;\n} & ({\n    readonly kind: \'comment\';\n    readonly comment: ForgeLineComment;\n} | {\n    readonly kind: \'review\';\n    readonly event: \'comment\' | \'approve\' | \'request-changes\';\n    readonly body: string;\n    readonly comments: readonly ForgeLineComment[];\n});',
     },
     {
-        name: 'FileBlock',
-        declaration: 'export interface FileBlock {\n    type: \'file\';\n    attachment: FileAttachmentRef;\n}',
+        name: 'ForgeReviewResult',
+        declaration: 'export type ForgeReviewResult = {\n    readonly ok: true;\n    readonly url: string;\n} | {\n    readonly ok: false;\n    readonly code: \'unsupported\' | \'stale\' | \'failed\' | \'unknown\';\n    readonly message: string;\n};',
     },
     {
-        name: 'FileDiff',
-        declaration: 'export interface FileDiff {\n    path: string;\n    oldText: string | null;\n    newText: string;\n}',
+        name: 'ForgeSessionWorktree',
+        declaration: 'export interface ForgeSessionWorktree {\n    readonly path: string;\n    readonly branch: string;\n    readonly from: string | null;\n    readonly baseCommit: string;\n    readonly repositoryRoot: string;\n}',
     },
     {
-        name: 'FileLocation',
-        declaration: 'export interface FileLocation {\n    path: string;\n    line?: number;\n}',
+        name: 'ForgeWorktreeBlocker',
+        declaration: 'export type ForgeWorktreeBlocker = \'not-git\' | \'outside-writable-root\' | \'read-only\';',
     },
     {
-        name: 'FileReferenceCandidate',
-        declaration: 'export interface FileReferenceCandidate {\n    path: string;\n    kind: \'file\' | \'directory\';\n}',
+        name: 'ForgeWorktreeCreation',
+        declaration: 'export interface ForgeWorktreeCreation {\n    readonly phase: \'prepare\' | \'checkout\';\n    readonly branch: string;\n    readonly from: string | null;\n    readonly held: boolean;\n}',
     },
     {
-        name: 'FileUploadReceiptId',
-        declaration: 'export type FileUploadReceiptId = Branded<\'file-upload-receipt-id\'>;',
+        name: 'ForgeWorktreeFailure',
+        declaration: 'export interface ForgeWorktreeFailure {\n    readonly branch: string | null;\n    readonly from: string | null;\n    readonly phase: \'prepare\' | \'checkout\';\n    readonly message: string;\n}',
     },
     {
-        name: 'FileUploadValue',
-        declaration: 'export interface FileUploadValue {\n    readonly receiptId: FileUploadReceiptId;\n    readonly file: FileAttachmentRef;\n}',
+        name: 'ForgeWorktreeRequest',
+        declaration: 'export interface ForgeWorktreeRequest {\n    readonly from: string | null;\n}',
     },
     {
-        name: 'FinishReason',
-        declaration: 'export type FinishReason = FinishReasonMap[keyof FinishReasonMap];',
+        name: 'ForgeWorktreeRestoration',
+        declaration: 'export interface ForgeWorktreeRestoration {\n    readonly phase: \'prepare\' | \'checkout\';\n}',
     },
     {
-        name: 'FinishReasonMap',
-        declaration: 'export interface FinishReasonMap {\n    \'stop\': {\n        kind: \'stop\';\n    };\n    \'tool-calls\': {\n        kind: \'tool-calls\';\n    };\n    \'max-tokens\': {\n        kind: \'max-tokens\';\n    };\n    \'aborted\': {\n        kind: \'aborted\';\n        failure: LlmFailure;\n    };\n    \'error\': {\n        kind: \'error\';\n        failure: LlmFailure;\n    };\n}',
+        name: 'ForgeWorktreeWaiting',
+        declaration: 'export type ForgeWorktreeWaiting = \'creation\' | \'restoration\';',
     },
     {
-        name: 'FrequencyTooHighError',
-        declaration: 'export interface FrequencyTooHighError {\n    readonly code: \'frequency_too_high\';\n    readonly message: string;\n}',
+        name: 'FsDeleteOutcome',
+        declaration: 'export interface FsDeleteOutcome {\n    before: string | null;\n}',
     },
     {
         name: 'FsDirEntry',
@@ -5467,10 +6457,22 @@ export const TYPE_API = [
         name: 'FsEditRequest',
         declaration: 'export interface FsEditRequest {\n    oldString: string;\n    newString: string;\n    replaceAll: boolean;\n}',
     },
+    {
+        name: 'FsErrorCode',
+        declaration: 'export type FsErrorCode = typeof FS_ERROR_CODES[number];',
+    },
     {
         name: 'FsInfo',
         declaration: 'export interface FsInfo {\n    version: FsVersion;\n    type: \'file\' | \'directory\' | \'other\';\n    size?: number;\n}',
     },
+    {
+        name: 'FsMoveOutcome',
+        declaration: 'export type FsMoveOutcome = {\n    sourceBefore: string | null;\n    destination: FsWriteOutcome;\n    sourceDeleted: true;\n} | {\n    sourceBefore: string | null;\n    destination: FsWriteOutcome;\n    sourceDeleted: false;\n    sourceFailure: FsMoveSourceFailure;\n};',
+    },
+    {
+        name: 'FsMoveSourceFailure',
+        declaration: 'export interface FsMoveSourceFailure {\n    code: FsErrorCode;\n    message: string;\n}',
+    },
     {
         name: 'FsObservation',
         declaration: 'export type FsObservation = {\n    readonly kind: \'present\';\n    readonly version: FsVersion;\n} | {\n    readonly kind: \'absent\';\n};',
@@ -5501,7 +6503,7 @@ export const TYPE_API = [
     },
     {
         name: 'GenerateOptions',
-        declaration: 'export interface GenerateOptions {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    messages: RequestMessage[];\n    system?: string;\n    tools?: ToolSchema[];\n    toolHistory?: ToolHistory;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n    signal?: AbortSignal;\n    sessionId?: Branded<\'SessionId\'>;\n    purpose?: \'compaction\' | \'session-title\';\n}',
+        declaration: 'export interface GenerateOptions<Purpose extends string = LlmRequestPurpose> {\n    provider: string;\n    model: string;\n    reasoningEffort?: ReasoningEffortId;\n    messages: RequestMessage[];\n    system?: string;\n    tools?: ToolSchema[];\n    toolHistory?: ToolHistory;\n    temperature?: number;\n    maxTokens?: number;\n    stop?: string[];\n    signal?: AbortSignal;\n    sessionId?: Branded<\'SessionId\'>;\n    purpose?: Purpose;\n}',
     },
     {
         name: 'GenericCallView',
@@ -5607,6 +6609,10 @@ export const TYPE_API = [
         name: 'ImageRequestTarget',
         declaration: 'export interface ImageRequestTarget {\n    width: number;\n    height: number;\n    maxBytes: number;\n}',
     },
+    {
+        name: 'ImageUploadValue',
+        declaration: 'export interface ImageUploadValue {\n    readonly receiptId: FileUploadReceiptId;\n    readonly image: ImageAttachmentRef;\n}',
+    },
     {
         name: 'ImageVariantId',
         declaration: 'export type ImageVariantId = Branded<\'ImageVariantId\'>;',
@@ -5651,26 +6657,6 @@ export const TYPE_API = [
         name: 'InstallSpecKind',
         declaration: 'export type InstallSpecKind = \'registry\' | \'path\' | \'git\' | \'tarball\';',
     },
-    {
-        name: 'InternalScheduleError',
-        declaration: 'export interface InternalScheduleError {\n    readonly code: \'internal_error\';\n    readonly message: string;\n}',
-    },
-    {
-        name: 'InvalidPromptError',
-        declaration: 'export interface InvalidPromptError {\n    readonly code: \'invalid_prompt\';\n    readonly message: string;\n}',
-    },
-    {
-        name: 'InvalidRuleError',
-        declaration: 'export interface InvalidRuleError {\n    readonly code: \'invalid_rule\';\n    readonly message: string;\n}',
-    },
-    {
-        name: 'InvalidSelectorError',
-        declaration: 'export interface InvalidSelectorError {\n    readonly code: \'invalid_selector\';\n    readonly message: string;\n}',
-    },
-    {
-        name: 'InvalidTimeZoneError',
-        declaration: 'export interface InvalidTimeZoneError {\n    readonly code: \'invalid_time_zone\';\n    readonly message: string;\n}',
-    },
     {
         name: 'InvocationDescriptor',
         declaration: 'export interface InvocationDescriptor {\n    readonly id: string;\n    readonly service: string;\n    readonly namespace: string;\n    readonly method: string;\n    readonly implementation?: string;\n    readonly mode?: \'stream\';\n    readonly invocation: {\n        readonly kind: \'direct\';\n    } | {\n        readonly kind: \'context\';\n        readonly context: string;\n        readonly wire: string;\n        readonly codec: TypertCodec;\n    };\n    readonly scope?: {\n        readonly context: string;\n        readonly wire: string;\n    };\n    readonly parameters: readonly InvocationParameterDescriptor[];\n    readonly uplink?: {\n        readonly codec: TypertCodec;\n    };\n    readonly cancellation?: {\n        readonly parameter: \'signal\';\n    };\n    readonly result: TypertCodec;\n    readonly description?: string;\n    readonly sourceLocation?: InvocationSourceLocation;\n}',
@@ -5821,16 +6807,20 @@ export const TYPE_API = [
     },
     {
         name: 'KvTable',
-        declaration: 'export interface KvTable<K extends string, V> {\n    get(key: K): V | undefined;\n    entries(): IterableIterator<[\n        K,\n        V\n    ]>;\n    keys(): IterableIterator<K>;\n    readonly size: number;\n    put(key: K, value: V): Promise<void>;\n    delete(key: K): Promise<boolean>;\n    update(key: K, fn: (current: V) => V): Promise<V>;\n}',
+        declaration: 'export interface KvTable<K extends string, V> {\n    get(key: K): V | undefined;\n    entries(): IterableIterator<[\n        K,\n        V\n    ]>;\n    keys(): IterableIterator<K>;\n    readonly size: number;\n    put(key: K, value: V): Promise<void>;\n    delete(key: K): Promise<boolean>;\n    deleteMany(keys: readonly K[]): Promise<number>;\n    update(key: K, fn: (current: V) => V): Promise<V>;\n}',
     },
     {
         name: 'KvUnit',
-        declaration: 'export interface KvUnit {\n    loadAll(): Promise<{\n        tables: Record<string, Record<string, unknown>>;\n        global: unknown;\n    }>;\n    putRecord(table: string, key: string, value: unknown): Promise<void>;\n    deleteRecord(table: string, key: string): Promise<void>;\n    backupRecord?(table: string, key: string): Promise<string>;\n    setGlobal(value: unknown): Promise<void>;\n    close(): Promise<void>;\n}',
+        declaration: 'export interface KvUnit {\n    loadAll(): Promise<{\n        tables: Record<string, Record<string, unknown>>;\n        global: unknown;\n    }>;\n    putRecord(table: string, key: string, value: unknown): Promise<void>;\n    deleteRecord(table: string, key: string): Promise<void>;\n    deleteRecords(table: string, keys: readonly string[]): Promise<void>;\n    backupRecord?(table: string, key: string): Promise<string>;\n    setGlobal(value: unknown): Promise<void>;\n    close(): Promise<void>;\n}',
     },
     {
         name: 'KvUnitDescriptor',
         declaration: 'export interface KvUnitDescriptor {\n    readonly name: string;\n    readonly version: number;\n    readonly tables: readonly string[];\n    readonly hasGlobal: boolean;\n    readonly layout?: \'single\' | \'per-record\';\n    readonly compatibleVersions?: readonly number[];\n}',
     },
+    {
+        name: 'ListVersionsOptions',
+        declaration: 'export interface ListVersionsOptions {\n    readonly registry?: Registry;\n}',
+    },
     {
         name: 'LlmAdapter',
         declaration: 'export abstract class LlmAdapter {\n    providerInfo(provider: string): LlmProviderInfo;\n    providerRetryPolicy(_provider: string): ResolvedRetryPolicy | undefined;\n    imageRequestPricing(_provider: string, _model: string): LlmImageRequestPricing | undefined;\n    imageRequestTarget(_provider: string, _model: string, image: ImageAttachmentRef): ImageRequestTarget;\n    listModels(_provider: string): Promise<readonly LlmModelInfo[]>;\n    resolveModel(provider: string, model: string, _signal?: AbortSignal): Promise<LlmResolvedModelInfo>;\n    async prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;\n    abstract stream(options: GenerateOptions): AsyncIterable<StreamChunk>;\n}',
@@ -5871,6 +6861,14 @@ export const TYPE_API = [
         name: 'LlmImageRequestPricing',
         declaration: 'export interface LlmImageRequestPricing {\n    priceImages(images: readonly ImageBlock[]): readonly LlmImageRequestPrice[];\n}',
     },
+    {
+        name: 'LlmModelBadge',
+        declaration: 'export interface LlmModelBadge {\n    text: LocalizedText;\n    tone: LlmModelBadgeTone;\n}',
+    },
+    {
+        name: 'LlmModelBadgeTone',
+        declaration: 'export type LlmModelBadgeTone = \'neutral\' | \'info\' | \'success\' | \'warning\';',
+    },
     {
         name: 'LlmModelContext',
         declaration: 'export interface LlmModelContext {\n    contextWindow: number;\n}',
@@ -5881,7 +6879,7 @@ export const TYPE_API = [
     },
     {
         name: 'LlmModelInfo',
-        declaration: 'export interface LlmModelInfo {\n    provider: string;\n    id: string;\n    name: string;\n    description?: string;\n    inputModalities?: readonly ModelModality[];\n}',
+        declaration: 'export interface LlmModelInfo {\n    provider: string;\n    id: string;\n    name: string;\n    description?: string;\n    inputModalities?: readonly ModelModality[];\n    badge?: LlmModelBadge;\n}',
     },
     {
         name: 'LlmModelReasoningInfo',
@@ -5899,6 +6897,14 @@ export const TYPE_API = [
         name: 'LlmReasoningEffortInfo',
         declaration: 'export interface LlmReasoningEffortInfo {\n    id: ReasoningEffortId;\n    name: string;\n    description?: string;\n}',
     },
+    {
+        name: 'LlmRequestPurpose',
+        declaration: 'export type LlmRequestPurpose = Extract<keyof LlmRequestPurposeMap, string>;',
+    },
+    {
+        name: 'LlmRequestPurposeMap',
+        declaration: 'export interface LlmRequestPurposeMap {\n}',
+    },
     {
         name: 'LlmResolvedModelInfo',
         declaration: 'export interface LlmResolvedModelInfo extends LlmModelInfo {\n    context?: LlmModelContext;\n    defaultMaxTokens?: number;\n    reasoning?: LlmModelReasoningInfo;\n    systemPromptUpdate?: SystemPromptUpdate;\n    toolUpdate?: ToolUpdate;\n}',
@@ -5961,7 +6967,7 @@ export const TYPE_API = [
     },
     {
         name: 'ManagementError',
-        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'already-installed\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
+        declaration: 'export interface ManagementError {\n    code: ReadOnlyReason | \'unknown-plugin\' | \'invalid-spec\' | \'already-installed\' | \'ambiguous-install\' | \'not-bundle\' | \'not-removable\' | \'stop-profile\' | \'bundle-in-use\' | \'stale-approval\' | \'incompatible-version\' | \'unsupported-platform\' | \'operation-error\';\n    diagnostic?: string;\n    incompatible?: IncompatiblePlugin[];\n}',
     },
     {
         name: 'ManualCompactAgentContext',
@@ -6055,6 +7061,18 @@ export const TYPE_API = [
         name: 'McpResourceRequest',
         declaration: 'export type McpResourceRequest = {\n    method: \'resources/list\' | \'resources/templates/list\';\n    cursor?: string;\n} | {\n    method: \'resources/read\';\n    uri: string;\n};',
     },
+    {
+        name: 'Mergeability',
+        declaration: 'export type Mergeability = \'mergeable\' | \'conflicting\' | \'unknown\';',
+    },
+    {
+        name: 'MergeMethod',
+        declaration: 'export type MergeMethod = \'merge\' | \'squash\' | \'rebase\';',
+    },
+    {
+        name: 'MergeRequest',
+        declaration: 'export interface MergeRequest {\n    readonly method: MergeMethod;\n    readonly headSha: string;\n}',
+    },
     {
         name: 'Message',
         declaration: 'export type Message = MessageRoleMap[keyof MessageRoleMap];',
@@ -6161,7 +7179,7 @@ export const TYPE_API = [
     },
     {
         name: 'ModelCatalogModel',
-        declaration: 'export interface ModelCatalogModel {\n    readonly id: string;\n    readonly name: string;\n    readonly description?: string;\n    readonly reasoning?: ModelReasoning;\n}',
+        declaration: 'export interface ModelCatalogModel {\n    readonly id: string;\n    readonly name: string;\n    readonly description?: string;\n    readonly reasoning?: ModelReasoning;\n    readonly badge?: LlmModelBadge;\n}',
     },
     {
         name: 'ModelMessageSource',
@@ -6216,8 +7234,8 @@ export const TYPE_API = [
         declaration: 'export interface NativeFileApplication {\n    readonly id: string;\n    readonly name: string;\n    readonly default: boolean;\n    readonly icon: string | null;\n}',
     },
     {
-        name: 'NotFutureError',
-        declaration: 'export interface NotFutureError {\n    readonly code: \'not_future\';\n    readonly message: string;\n}',
+        name: 'NpmFileSource',
+        declaration: 'export type NpmFileSource = \'jsdelivr\' | \'unpkg\' | \'npmmirror\';',
     },
     {
         name: 'ObjectJsonSchema',
@@ -6271,6 +7289,30 @@ export const TYPE_API = [
         name: 'OTelEventScalar',
         declaration: 'export type OTelEventScalar = string | number | boolean;',
     },
+    {
+        name: 'OwnerIdentityRequest',
+        declaration: 'export interface OwnerIdentityRequest {\n    readonly relay?: string;\n}',
+    },
+    {
+        name: 'OwnerIdentityState',
+        declaration: 'export type OwnerIdentityState = \'verified\' | \'expired\' | \'unverified\' | \'relay-unsupported\';',
+    },
+    {
+        name: 'OwnerIdentityStatus',
+        declaration: 'export interface OwnerIdentityStatus {\n    readonly state: OwnerIdentityState;\n    readonly relay: string;\n    readonly displayName?: string;\n    readonly subjectId?: string;\n    readonly avatarUrl?: string;\n    readonly expiresAt?: string;\n    readonly renewed?: boolean;\n    readonly claim?: ClaimOutcome;\n}',
+    },
+    {
+        name: 'OwnerRelayState',
+        declaration: 'export interface OwnerRelayState {\n    readonly configured?: string;\n    readonly override?: string;\n    readonly effective?: string;\n}',
+    },
+    {
+        name: 'OwnerShareList',
+        declaration: 'export interface OwnerShareList {\n    readonly shares: readonly OwnerShareView[];\n}',
+    },
+    {
+        name: 'OwnerShareView',
+        declaration: 'export interface OwnerShareView {\n    readonly shareId: string;\n    readonly sessionId: string;\n    readonly sessionTitle: string;\n    readonly link: string;\n    readonly createdAt: string;\n    readonly expiresAt?: string;\n    readonly allowsFork: boolean;\n    readonly sessionMode: \'view\' | \'write\';\n    readonly viewerCapabilities: readonly ShareCapabilityGroup[];\n    readonly online: boolean;\n    readonly access?: ShareAccess;\n}',
+    },
     {
         name: 'PackageResult',
         declaration: 'export interface PackageResult {\n    exitCode: number;\n    output: string;\n    truncated: boolean;\n    logPath: string;\n    kind?: PluginInstallFailureKind;\n    timedOut?: boolean;\n    incompatible?: IncompatiblePlugin[];\n}',
@@ -6291,6 +7333,10 @@ export const TYPE_API = [
         name: 'PaneOpenResult',
         declaration: 'export interface PaneOpenResult {\n    id: string;\n    isPlaced: boolean;\n    reason?: string;\n}',
     },
+    {
+        name: 'PatchHunk',
+        declaration: 'export interface PatchHunk {\n    lineNumber: number;\n    context?: string;\n    oldLines: string[];\n    newLines: string[];\n    isEndOfFile: boolean;\n}',
+    },
     {
         name: 'PeerAdmission',
         declaration: 'export type PeerAdmission = {\n    readonly peer: PeerScope;\n} | {\n    readonly rejection: 401 | 403;\n};',
@@ -6307,10 +7353,18 @@ export const TYPE_API = [
         name: 'PendingModule',
         declaration: 'export interface PendingModule {\n    url: string;\n    reason: \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';\n}',
     },
+    {
+        name: 'PendingRemoteEventInfo',
+        declaration: 'export interface PendingRemoteEventInfo {\n    readonly event: string;\n    readonly agentId: RemoteEventAgentId;\n}',
+    },
     {
         name: 'PermissionCatalog',
         declaration: 'export interface PermissionCatalog {\n    options: PresetOption[];\n    defaultOptions: PresetOption[];\n    defaultPreset: string;\n}',
     },
+    {
+        name: 'PiAiRequestHeaderContext',
+        declaration: 'export interface PiAiRequestHeaderContext extends Readonly<Pick<GenerateOptions<string>, \'provider\' | \'model\' | \'sessionId\' | \'purpose\'>> {\n    readonly baseURL: string;\n}',
+    },
     {
         name: 'PlatformSession',
         declaration: 'export interface PlatformSession {\n    readonly origin: string;\n    readonly token: string;\n    readonly userId: AccountUserId | null;\n    readonly embeddedPageDist?: string;\n    readonly requestHeaders?: Readonly<Record<string, string>>;\n}',
@@ -6319,6 +7373,18 @@ export const TYPE_API = [
         name: 'PluginChange',
         declaration: 'export interface PluginChange {\n    readonly reason: \'plugin\' | \'bundle\' | \'install\' | \'remove\';\n}',
     },
+    {
+        name: 'PluginDetail',
+        declaration: 'export type PluginDetail = {\n    readonly status: \'found\';\n    readonly origin: PluginDetailOrigin;\n    readonly markdown: string;\n    readonly document: PluginDetailDocumentId;\n} | {\n    readonly status: \'none\';\n};',
+    },
+    {
+        name: 'PluginDetailDocumentId',
+        declaration: 'export type PluginDetailDocumentId = Branded<\'PluginDetailDocumentId\'>;',
+    },
+    {
+        name: 'PluginDetailOrigin',
+        declaration: 'export type PluginDetailOrigin = \'locale\' | \'readme\' | \'repository\';',
+    },
     {
         name: 'PluginEntryId',
         declaration: 'export type PluginEntryId = Branded<\'PluginEntryId\'>;',
@@ -6357,12 +7423,20 @@ export const TYPE_API = [
     },
     {
         name: 'PluginInventoryEntry',
-        declaration: 'export interface PluginInventoryEntry {\n    readonly entryId: PluginEntryId;\n    readonly moduleName: string;\n    readonly meta?: PluginLocalizedMeta;\n    readonly enabled: boolean;\n    readonly fiberPhase: PluginFiberPhase;\n}',
+        declaration: 'export interface PluginInventoryEntry {\n    readonly entryId: PluginEntryId;\n    readonly moduleName: string;\n    readonly meta?: PluginLocalizedMeta;\n    readonly enabled: boolean;\n    readonly fiberPhase: PluginFiberPhase;\n    readonly diagnostic?: string;\n}',
     },
     {
         name: 'PluginLocalizedMeta',
         declaration: 'export interface PluginLocalizedMeta {\n    readonly title?: LocalizedText;\n    readonly description?: LocalizedText;\n    readonly icon?: string;\n    readonly error?: string;\n}',
     },
+    {
+        name: 'PluginOperation',
+        declaration: 'export type PluginOperation = {\n    readonly id: PluginOperationId;\n    readonly time: string;\n    readonly reason: PluginChange[\'reason\'];\n    readonly target: string | null;\n    readonly stage: ChangeResult[\'stage\'];\n    readonly enabled?: boolean | undefined;\n    readonly version?: string | undefined;\n} & ({\n    readonly phase: \'started\';\n} | {\n    readonly phase: \'settled\';\n    readonly application: ChangeResult[\'application\'];\n    readonly changed: boolean;\n    readonly errorCode?: ManagementError[\'code\'] | undefined;\n    readonly restartReason?: RestartReason | undefined;\n} | {\n    readonly phase: \'unknown\';\n});',
+    },
+    {
+        name: 'PluginOperationId',
+        declaration: 'export type PluginOperationId = Branded<\'PluginOperationId\'>;',
+    },
     {
         name: 'PluginOptions',
         declaration: 'export type PluginOptions = Readonly<Record<string, PluginOptionValue>>;',
@@ -6379,6 +7453,26 @@ export const TYPE_API = [
         name: 'PluginSpecInspection',
         declaration: 'export type PluginSpecInspection = {\n    readonly status: \'accepted\';\n    readonly kind: InstallSpecKind;\n    readonly name?: string;\n    readonly version?: string;\n    readonly description?: string;\n    readonly bundle: boolean | null;\n    readonly registry: Registry;\n    readonly host?: string;\n} | {\n    readonly status: \'refused\';\n    readonly problem: PluginInspectProblem;\n    readonly reason: string;\n    readonly registries?: Registry[];\n};',
     },
+    {
+        name: 'PluginUpdateProgress',
+        declaration: 'export interface PluginUpdateProgress {\n    readonly requestId: PluginInstallRequestId;\n    readonly step: PluginUpdateStep;\n}',
+    },
+    {
+        name: 'PluginUpdateResult',
+        declaration: 'export interface PluginUpdateResult {\n    readonly from: string;\n    readonly to: string;\n    readonly step: \'check\' | \'remove\' | \'install\';\n    readonly result: ChangeResult;\n    readonly restore?: ChangeResult;\n}',
+    },
+    {
+        name: 'PluginUpdateStep',
+        declaration: 'export type PluginUpdateStep = \'checking\' | \'removing\' | \'installing\' | \'restoring\';',
+    },
+    {
+        name: 'PluginVersion',
+        declaration: 'export interface PluginVersion {\n    readonly version: string;\n    readonly publishedAt?: string;\n    readonly tags: readonly string[];\n    readonly prerelease: boolean;\n    readonly deprecated?: string;\n    readonly bundle: boolean;\n    readonly incompatible?: IncompatiblePlugin;\n}',
+    },
+    {
+        name: 'PluginVersionList',
+        declaration: 'export type PluginVersionList = {\n    readonly status: \'listed\';\n    readonly installed: string;\n    readonly registry: Registry;\n    readonly attempts: readonly RegistryAttempt[];\n    readonly versions: readonly PluginVersion[];\n    readonly omitted: number;\n} | {\n    readonly status: \'refused\';\n    readonly problem: \'not-updatable\' | \'not-found\' | \'network\' | \'unknown\';\n    readonly reason: string;\n    readonly attempts: readonly RegistryAttempt[];\n};',
+    },
     {
         name: 'PostToolDecision',
         declaration: 'export type PostToolDecision = {\n    kind: \'accept\';\n    content?: ContentBlock[];\n    value?: never;\n    additionalContexts?: UserMessage[];\n} | {\n    kind: \'accept\';\n    value: JsonValue;\n    content?: never;\n    additionalContexts?: UserMessage[];\n} | {\n    kind: \'block\';\n    feedback: ContentBlock[];\n    additionalContexts?: UserMessage[];\n};',
@@ -6469,7 +7563,19 @@ export const TYPE_API = [
     },
     {
         name: 'ProjectionDefinition',
-        declaration: 'export interface ProjectionDefinition<K extends keyof SessionProjectionStateMap, S extends SessionProjectionStateMap[K] = SessionProjectionStateMap[K]> {\n    key: K;\n    stateSchema: ZodType<S>;\n    init(header: SessionHeader, inheritedEventCount: SessionLogOffset): NoInfer<S>;\n    apply(state: NoInfer<S>, event: SessionEvent): NoInfer<S>;\n    wire?: K extends keyof SessionProjectionMap ? {\n        viewSchema: ZodType<SessionProjectionMap[K]>;\n        view(state: NoInfer<S>): SessionProjectionMap[K];\n    } : never;\n    stateVersion: number;\n}',
+        declaration: 'export interface ProjectionDefinition<K extends string, S> {\n    key: K;\n    stateSchema: ZodType<S>;\n    init(header: SessionHeader, inheritedEventCount: SessionLogOffset): NoInfer<S>;\n    apply(state: NoInfer<S>, event: SessionEvent): NoInfer<S>;\n    wire?: K extends keyof SessionProjectionMap ? {\n        viewSchema: ZodType<SessionProjectionViewValue<SessionProjectionMap[K]>>;\n        view(state: NoInfer<S>): SessionProjectionViewValue<SessionProjectionMap[K]>;\n        summary?: boolean;\n    } : never;\n    stateVersion: number;\n}',
+    },
+    {
+        name: 'ProjectionEventChangeListener',
+        declaration: 'export type ProjectionEventChangeListener = (session: Session, changes: readonly {\n    readonly key: Extract<keyof SessionProjectionMap, string>;\n    readonly val: unknown;\n}[], seq: SessionSeq) => void;',
+    },
+    {
+        name: 'ProjectionHandle',
+        declaration: 'export interface ProjectionHandle<S> {\n    stateOf(session: Session): S;\n    readerFor(session: Session): () => S;\n    dispose(): Promise<void>;\n}',
+    },
+    {
+        name: 'ProjectionKeySelection',
+        declaration: 'export type ProjectionKeySelection = readonly Extract<keyof SessionProjectionMap, string>[] | ReadonlySet<Extract<keyof SessionProjectionMap, string>>;',
     },
     {
         name: 'ProjectionSnapshot',
@@ -6477,7 +7583,7 @@ export const TYPE_API = [
     },
     {
         name: 'PromptAssembly',
-        declaration: 'export interface PromptAssembly {\n    sections: AssembledSection[];\n    contexts: AssembledContext[];\n    tools: ToolSchema[];\n    variables: Record<string, string | undefined>;\n}',
+        declaration: 'export interface PromptAssembly extends PromptPresentation {\n    tools: ToolSchema[];\n}',
     },
     {
         name: 'PromptContext',
@@ -6495,6 +7601,10 @@ export const TYPE_API = [
         name: 'PromptOrigin',
         declaration: 'export type PromptOrigin = {\n    kind: \'composer\';\n} | {\n    kind: \'plugin\';\n    name: string;\n};',
     },
+    {
+        name: 'PromptPresentation',
+        declaration: 'export interface PromptPresentation {\n    sections: AssembledSection[];\n    contexts: AssembledContext[];\n    variables: Record<string, string | undefined>;\n}',
+    },
     {
         name: 'PromptSection',
         declaration: 'export interface PromptSection {\n    readonly name: string;\n    readonly order: number;\n    readonly text: string | ((context: AssembleContext) => string);\n    readonly interpolate?: boolean;\n    readonly complete?: boolean;\n}',
@@ -6591,9 +7701,13 @@ export const TYPE_API = [
         name: 'ReasoningEffortId',
         declaration: 'export type ReasoningEffortId = Branded<\'ReasoningEffortId\'>;',
     },
+    {
+        name: 'RecommendationDetails',
+        declaration: 'export type RecommendationDetails = {\n    readonly status: \'available\';\n    readonly title: LocalizedText;\n    readonly description: LocalizedText;\n    readonly enabled: boolean;\n} | {\n    readonly status: \'refused\';\n    readonly reason: \'unknown\' | \'unavailable\' | \'not-live-root\' | \'closing\';\n};',
+    },
     {
         name: 'RecurringScheduleRecord',
-        declaration: 'export type RecurringScheduleRecord = EveryScheduleRecord | DailyScheduleRecord | WeeklyScheduleRecord | CronScheduleRecord;',
+        declaration: 'export type RecurringScheduleRecord = EveryScheduleRecord | DailyScheduleRecord | WeeklyScheduleRecord | CronScheduleRecord | RRuleScheduleRecord;',
     },
     {
         name: 'RedactedSecret',
@@ -6603,6 +7717,18 @@ export const TYPE_API = [
         name: 'Registry',
         declaration: 'export type Registry = string | null;',
     },
+    {
+        name: 'RegistryAttempt',
+        declaration: 'export interface RegistryAttempt {\n    readonly registry: Registry;\n    readonly problem?: \'not-found\' | \'network\' | \'unknown\';\n    readonly reason?: string;\n}',
+    },
+    {
+        name: 'RelayConnectivityView',
+        declaration: 'export interface RelayConnectivityView {\n    readonly ok: boolean;\n    readonly httpReachable: boolean;\n    readonly blocking: boolean;\n    readonly error?: string;\n}',
+    },
+    {
+        name: 'RelayPublishView',
+        declaration: 'export interface RelayPublishView {\n    readonly ok: boolean;\n    readonly blocking: boolean;\n    readonly error?: string;\n}',
+    },
     {
         name: 'Reload',
         declaration: 'export interface Reload {\n    filename: string;\n    modules: ReloadModules;\n    runtime?: Plugin.Runtime | undefined;\n}',
@@ -6675,6 +7801,10 @@ export const TYPE_API = [
         name: 'RemoteErrorDetailsMap',
         declaration: 'export interface RemoteErrorDetailsMap {\n    \'gateway/bad-request\': {\n        readonly issues?: readonly object[];\n    };\n    \'gateway/cancelled\': {};\n    \'gateway/internal\': {};\n}',
     },
+    {
+        name: 'RemoteEventAgentId',
+        declaration: 'export type RemoteEventAgentId = Branded<\'RemoteEventAgentId\'>;',
+    },
     {
         name: 'RemoteEventHostInfo',
         declaration: 'export interface RemoteEventHostInfo {\n    readonly home: string;\n}',
@@ -6747,6 +7877,10 @@ export const TYPE_API = [
         name: 'ResolvedSubagentStartRequest',
         declaration: 'export interface ResolvedSubagentStartRequest extends SubagentStartRequest {\n    readonly cwd: string;\n}',
     },
+    {
+        name: 'ResolvedToolSet',
+        declaration: 'export interface ResolvedToolSet {\n    dispose(): void;\n    view(scope: ScopeKey | undefined): ReadonlyMap<string, ToolDefinition>;\n}',
+    },
     {
         name: 'RestartReason',
         declaration: 'export type RestartReason = \'no-hmr\' | \'package-moved\' | \'host-module\' | \'unmanaged-plugin\' | \'module-comparison\';',
@@ -6755,14 +7889,30 @@ export const TYPE_API = [
         name: 'RestoredSessionOptions',
         declaration: 'export interface RestoredSessionOptions {\n    readonly seed: SessionEvent[];\n    readonly meta: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n    readonly eventState: SessionSeedEventState;\n}',
     },
+    {
+        name: 'RestoredWorktree',
+        declaration: 'export interface RestoredWorktree {\n    path: string;\n    branchRecreated: boolean;\n}',
+    },
+    {
+        name: 'RestoreWorktreeRequest',
+        declaration: 'export interface RestoreWorktreeRequest {\n    path: string;\n    branch: string;\n    baseCommit: string;\n    repositoryRoot: string;\n}',
+    },
     {
         name: 'ResumeAgentOptions',
         declaration: 'export interface ResumeAgentOptions {\n    readonly resumeSessionId: SessionId;\n    readonly parentAgent?: Agent;\n    readonly agentOptions?: AgentOptions;\n    readonly signal?: AbortSignal;\n    readonly setup?: AgentSetup;\n}',
     },
+    {
+        name: 'ReviewDecision',
+        declaration: 'export type ReviewDecision = \'approved\' | \'changes-requested\' | \'review-required\' | \'none\';',
+    },
     {
         name: 'RpcId',
         declaration: 'export type RpcId = Branded<\'rpc-id\'>;',
     },
+    {
+        name: 'RRuleScheduleRecord',
+        declaration: 'export interface RRuleScheduleRecord {\n    readonly kind: \'rrule\';\n    readonly id: ScheduleId;\n    readonly title: string;\n    readonly prompt: string;\n    readonly rrule: string;\n    readonly scheduledAt: string;\n}',
+    },
     {
         name: 'RunnerFailureRule',
         declaration: 'export interface RunnerFailureRule {\n    allowedExitCodes?: readonly number[];\n    fatalSignatures: readonly string[];\n    informationalLines?: readonly string[];\n}',
@@ -6773,7 +7923,7 @@ export const TYPE_API = [
     },
     {
         name: 'SandboxExecutionPolicy',
-        declaration: 'export interface SandboxExecutionPolicy {\n    mode: SandboxMode;\n    workspaceRoot: string;\n    sessionId?: SessionId;\n}',
+        declaration: 'export interface SandboxExecutionPolicy {\n    mode: SandboxMode;\n    workspaceRoot: string;\n    additionalWritableRoots?: readonly string[];\n    sessionId?: SessionId;\n}',
     },
     {
         name: 'SandboxMode',
@@ -6805,43 +7955,59 @@ export const TYPE_API = [
     },
     {
         name: 'ScheduleCatalogEntry',
-        declaration: 'export type ScheduleCatalogEntry = ScheduleRecord & {\n    readonly sessionId: SessionId;\n    readonly status: \'active\' | \'inactive\';\n    readonly lastDelivery?: ScheduleDeliveryReceipt;\n};',
+        declaration: 'export type ScheduleCatalogEntry = ScheduleRecord & {\n    readonly target: ScheduleTarget;\n    readonly involvedSessionIds: SessionId[];\n    readonly status: \'active\' | \'paused\' | \'ended\';\n    readonly createdAt?: string;\n    readonly updatedAt?: string;\n    readonly executionActive?: true;\n    readonly deliveryFloorEndsAt?: string;\n    readonly lastDelivery?: ScheduleDeliveryReceipt;\n};',
+    },
+    {
+        name: 'ScheduleConflictResult',
+        declaration: 'export interface ScheduleConflictResult {\n    readonly id: ScheduleId;\n    readonly code: \'schedule_conflict\';\n}',
     },
     {
         name: 'ScheduleCreateRequest',
-        declaration: 'export interface ScheduleCreateRequest {\n    prompt: string;\n    title: string;\n    after_seconds?: number;\n    at?: AtInput;\n    every_seconds?: number;\n    daily?: DailyInput;\n    weekly?: WeeklyInput;\n    cron?: CronInput;\n}',
+        declaration: 'export interface ScheduleCreateRequest {\n    readonly title: string;\n    readonly prompt: string;\n    readonly timing: ScheduleTiming;\n    readonly target?: ScheduleTargetRequest;\n}',
     },
     {
-        name: 'ScheduleDeleteRequest',
-        declaration: 'export interface ScheduleDeleteRequest extends ScheduleListRequest {\n    id: ScheduleId;\n}',
+        name: 'ScheduleDeleteInactiveResult',
+        declaration: 'export interface ScheduleDeleteInactiveResult {\n    readonly deleted: number;\n}',
     },
     {
         name: 'ScheduleDeleteResult',
         declaration: 'export type ScheduleDeleteResult = {\n    readonly id: ScheduleId;\n    readonly deleted: true;\n} | {\n    readonly id: ScheduleId;\n    readonly deleted: false;\n    readonly code: \'schedule_not_found\';\n};',
     },
+    {
+        name: 'ScheduleDeliveryHistoryMiss',
+        declaration: 'export interface ScheduleDeliveryHistoryMiss {\n    readonly id: ScheduleId;\n    readonly code: \'schedule_not_found\' | \'delivery_cursor_not_found\';\n}',
+    },
+    {
+        name: 'ScheduleDeliveryHistoryPage',
+        declaration: 'export interface ScheduleDeliveryHistoryPage {\n    readonly id: ScheduleId;\n    readonly records: ScheduleDeliveryRecord[];\n    readonly earlierRecordsUnavailable: boolean;\n    readonly earlierRecordsPruned: boolean;\n    readonly retention: DeliveryRetentionBounds;\n    readonly nextBefore?: MessageId;\n}',
+    },
     {
         name: 'ScheduleDeliveryHistoryRequest',
-        declaration: 'export interface ScheduleDeliveryHistoryRequest extends ScheduleDeleteRequest {\n    limit: number;\n    before?: MessageId;\n}',
+        declaration: 'export interface ScheduleDeliveryHistoryRequest {\n    readonly id: ScheduleId;\n    readonly limit: number;\n    readonly before?: MessageId;\n}',
     },
     {
         name: 'ScheduleDeliveryHistoryResult',
-        declaration: 'export type ScheduleDeliveryHistoryResult = {\n    readonly id: ScheduleId;\n    readonly records: ScheduleDeliveryRecord[];\n    readonly earlierRecordsUnavailable: boolean;\n    readonly earlierRecordsPruned: boolean;\n    readonly retention: DeliveryRetentionBounds;\n    readonly nextBefore?: MessageId;\n} | {\n    readonly id: ScheduleId;\n    readonly code: \'schedule_not_found\' | \'delivery_cursor_not_found\';\n};',
+        declaration: 'export type ScheduleDeliveryHistoryResult = ScheduleDeliveryHistoryPage | ScheduleDeliveryHistoryMiss;',
     },
     {
         name: 'ScheduleDeliveryReceipt',
-        declaration: 'export interface ScheduleDeliveryReceipt {\n    readonly scheduledAt: string;\n    readonly deliveredAt: string;\n    readonly messageId: MessageId;\n}',
+        declaration: 'export interface ScheduleDeliveryReceipt {\n    readonly scheduledAt: string;\n    readonly deliveredAt: string;\n    readonly messageId: MessageId;\n    readonly targetSessionId: SessionId;\n}',
     },
     {
         name: 'ScheduleDeliveryRecord',
         declaration: 'export interface ScheduleDeliveryRecord extends ScheduleDeliveryReceipt {\n    readonly prompt?: string;\n}',
     },
     {
-        name: 'ScheduledToolDispatch',
-        declaration: 'export type ScheduledToolDispatch = {\n    kind: \'post-result\';\n    result: ToolExecutionResult;\n} | {\n    kind: \'final-result\';\n    result: ToolExecutionResult;\n};',
+        name: 'ScheduleEditRequest',
+        declaration: 'export type ScheduleEditRequest = {\n    readonly id: ScheduleId;\n    readonly action: \'update\';\n    readonly patch: SchedulePatch;\n    readonly expectedUpdatedAt?: string | null;\n} | {\n    readonly id: ScheduleId;\n    readonly action: \'delete\';\n    readonly expectedUpdatedAt?: string | null;\n};',
+    },
+    {
+        name: 'ScheduleEditResult',
+        declaration: 'export type ScheduleEditResult = ScheduleCatalogEntry | Extract<ScheduleDeleteResult, {\n    readonly deleted: true;\n}> | ScheduleNotFoundResult | ScheduleConflictResult;',
     },
     {
-        name: 'ScheduledToolPreparation',
-        declaration: 'export type ScheduledToolPreparation = {\n    kind: \'dispatch\';\n    exec: ToolRunContext;\n} | {\n    kind: \'post-result\';\n    exec: ToolRunContext;\n    result: ToolExecutionResult;\n} | {\n    kind: \'final-result\';\n    exec: ToolRunContext;\n    result: ToolExecutionResult;\n};',
+        name: 'ScheduleExecutionPendingResult',
+        declaration: 'export interface ScheduleExecutionPendingResult {\n    readonly id: ScheduleId;\n    readonly code: \'schedule_execution_pending\';\n}',
     },
     {
         name: 'ScheduleId',
@@ -6849,35 +8015,55 @@ export const TYPE_API = [
     },
     {
         name: 'ScheduleListRequest',
-        declaration: 'export interface ScheduleListRequest {\n    sessionId: SessionId;\n}',
+        declaration: 'export interface ScheduleListRequest {\n    readonly active?: boolean;\n    readonly limit?: number;\n    readonly offset?: number;\n}',
+    },
+    {
+        name: 'ScheduleListResult',
+        declaration: 'export interface ScheduleListResult {\n    readonly items: ScheduleCatalogEntry[];\n    readonly shown: number;\n    readonly total: number;\n    readonly limit: number;\n    readonly offset: number;\n}',
+    },
+    {
+        name: 'ScheduleNotFoundResult',
+        declaration: 'export interface ScheduleNotFoundResult {\n    readonly id: ScheduleId;\n    readonly code: \'schedule_not_found\';\n}',
+    },
+    {
+        name: 'SchedulePatch',
+        declaration: 'export interface SchedulePatch {\n    readonly title?: string;\n    readonly prompt?: string;\n    readonly timing?: ScheduleTiming;\n    readonly target?: ScheduleTargetRequest;\n    readonly active?: boolean;\n}',
     },
     {
         name: 'ScheduleRecord',
         declaration: 'export type ScheduleRecord = OneShotScheduleRecord | RecurringScheduleRecord;',
     },
     {
-        name: 'ScheduleTimingChange',
-        declaration: 'export type ScheduleTimingChange = {\n    readonly kind: \'at\';\n    readonly at: AtInput;\n} | {\n    readonly kind: \'every\';\n    readonly every_seconds: number;\n} | {\n    readonly kind: \'daily\';\n    readonly daily: DailyInput;\n} | {\n    readonly kind: \'weekly\';\n    readonly weekly: WeeklyInput;\n} | {\n    readonly kind: \'cron\';\n    readonly cron: CronInput;\n};',
+        name: 'ScheduleRunRequest',
+        declaration: 'export interface ScheduleRunRequest {\n    readonly id: ScheduleId;\n}',
+    },
+    {
+        name: 'ScheduleRunResult',
+        declaration: 'export type ScheduleRunResult = ScheduleCatalogEntry | ScheduleNotFoundResult | ScheduleExecutionPendingResult;',
     },
     {
-        name: 'ScheduleToolError',
-        declaration: 'export type ScheduleToolError = InvalidPromptError | InvalidSelectorError | InvalidRuleError | InvalidTimeZoneError | NotFutureError | TimeOutOfRangeError | FrequencyTooHighError | SubagentSessionError | InternalScheduleError;',
+        name: 'ScheduleSessionCreateSpec',
+        declaration: 'export interface ScheduleSessionCreateSpec {\n    readonly cwd?: string;\n    readonly agentPreset?: string;\n}',
     },
     {
-        name: 'ScheduleUpdateContent',
-        declaration: 'export interface ScheduleUpdateContent {\n    readonly title?: string;\n    readonly prompt?: string;\n}',
+        name: 'ScheduleTarget',
+        declaration: 'export type ScheduleTarget = {\n    readonly kind: \'session\';\n    readonly sessionId: SessionId;\n} | {\n    readonly kind: \'new_once\';\n    readonly sessionId: SessionId;\n    readonly create: ScheduleSessionCreateSpec;\n} | {\n    readonly kind: \'new\';\n    readonly create: ScheduleSessionCreateSpec;\n};',
     },
     {
-        name: 'ScheduleUpdateMiss',
-        declaration: 'export interface ScheduleUpdateMiss {\n    readonly id: ScheduleId;\n    readonly updated: false;\n    readonly code: \'schedule_not_found\' | \'schedule_ended\' | \'schedule_conflict\';\n}',
+        name: 'ScheduleTargetRequest',
+        declaration: 'export type ScheduleTargetRequest = {\n    readonly kind: \'session\';\n    readonly sessionId: SessionId;\n} | {\n    readonly kind: \'new_once\';\n    readonly create?: ScheduleSessionCreateSpec;\n} | {\n    readonly kind: \'new\';\n    readonly create?: ScheduleSessionCreateSpec;\n};',
     },
     {
-        name: 'ScheduleUpdateRequest',
-        declaration: 'export interface ScheduleUpdateRequest extends ScheduleDeleteRequest, ScheduleUpdateContent {\n    readonly expected: ScheduleRecord;\n    readonly change?: ScheduleTimingChange;\n}',
+        name: 'ScheduleTiming',
+        declaration: 'export type ScheduleTiming = {\n    readonly kind: \'after\';\n    readonly after_seconds: number;\n} | {\n    readonly kind: \'at\';\n    readonly at: AtInput;\n} | {\n    readonly kind: \'every\';\n    readonly every_seconds: number;\n} | {\n    readonly kind: \'daily\';\n    readonly daily: DailyInput;\n} | {\n    readonly kind: \'weekly\';\n    readonly weekly: WeeklyInput;\n} | {\n    readonly kind: \'cron\';\n    readonly cron: CronInput;\n} | {\n    readonly kind: \'rrule\';\n    readonly rrule: string;\n};',
     },
     {
-        name: 'ScheduleUpdateResult',
-        declaration: 'export type ScheduleUpdateResult = {\n    readonly id: ScheduleId;\n    readonly updated: boolean;\n    readonly record: ScheduleRecord;\n} | ScheduleUpdateMiss | ScheduleToolError;',
+        name: 'ScheduleViewRequest',
+        declaration: 'export interface ScheduleViewRequest {\n    readonly id: ScheduleId;\n}',
+    },
+    {
+        name: 'ScheduleViewResult',
+        declaration: 'export type ScheduleViewResult = ScheduleCatalogEntry | ScheduleNotFoundResult;',
     },
     {
         name: 'Scoped',
@@ -6973,7 +8159,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionAttachmentRequest',
-        declaration: 'export interface SessionAttachmentRequest {\n    readonly sessionId: SessionId;\n    readonly attachmentId: AttachmentIdType;\n}',
+        declaration: 'export interface SessionAttachmentRequest {\n    readonly sessionId: SessionId;\n    readonly attachment: ImageAttachmentRef;\n}',
     },
     {
         name: 'SessionAttachmentValue',
@@ -6991,6 +8177,14 @@ export const TYPE_API = [
         name: 'SessionCancelValue',
         declaration: 'export interface SessionCancelValue {\n    readonly accepted: true;\n}',
     },
+    {
+        name: 'SessionChangeRequest',
+        declaration: 'export interface SessionChangeRequest {\n    readonly url: string;\n    readonly origin: BindingOrigin;\n    readonly ref: ChangeRequestRef | null;\n    readonly update: ChangeRequestUpdate | null;\n}',
+    },
+    {
+        name: 'SessionChangeRequestsListener',
+        declaration: 'export type SessionChangeRequestsListener = (changeRequests: readonly SessionChangeRequest[]) => void;',
+    },
     {
         name: 'SessionControlBaseline',
         declaration: 'export interface SessionControlBaseline {\n    readonly projections: Readonly<Record<SessionId, SessionProjectionBaseline>>;\n}',
@@ -7023,6 +8217,10 @@ export const TYPE_API = [
         name: 'SessionEventEntry',
         declaration: 'export interface SessionEventEntry {\n    readonly type: \'event\';\n    readonly event: SessionWireEvent;\n}',
     },
+    {
+        name: 'SessionEventFrame',
+        declaration: 'export type SessionEventFrame = {\n    readonly type: \'ready\';\n} | SessionEventEntry;',
+    },
     {
         name: 'SessionEventMap',
         declaration: 'export interface SessionEventMap {\n    \'turn/start\': {\n        turn: number;\n    };\n    \'turn/end\': {\n        turn: number;\n        reason: TurnEndReason;\n    };\n    \'step/start\': {\n        turn: number;\n        step: number;\n    };\n    \'step/end\': {\n        turn: number;\n        step: number;\n    };\n    \'user/message\': UserMessage;\n    \'developer/message\': {\n        turn: number;\n        step: number;\n        message: DeveloperMessage;\n        headerSeq?: SessionSeq;\n    };\n    \'system/message\': {\n        turn: number;\n        step: number;\n        message: SystemMessage;\n    };\n    \'assistant/message\': {\n        turn: number;\n        step: number;\n        message: AssistantMessage;\n        stream: AssistantStreamRecord[];\n        usage?: TokenUsage;\n        interrupted?: true;\n    };\n    \'assistant/attempt\': {\n        turn: number;\n        step: number;\n        stream: AssistantStreamRecord[];\n    };\n    \'tool/call\': {\n        turn: number;\n        step: number;\n        callId: ToolCallId;\n        name: string;\n        arguments: string;\n    };\n    \'tool/result\': {\n        turn: number;\n        step: number;\n        message: ToolResultMessage;\n        error?: {\n            name: string;\n            code: string;\n            reason?: string;\n        };\n        meta?: JsonValue;\n    };\n    \'request/header\': {\n        header: EpochHeader;\n        reason: RequestHeaderReason;\n        startsSeries?: true;\n    };\n    \'request/context\': RequestContext;\n    \'session/end-seed\': {\n   /* …truncated — full shape in source */',
@@ -7059,6 +8257,10 @@ export const TYPE_API = [
         name: 'SessionEventSearchRequest',
         declaration: 'export interface SessionEventSearchRequest {\n    sessionId: SessionId;\n    query: string;\n    filters?: readonly SessionEventMetadataFilter[];\n    limit?: number;\n    cursor?: SessionSearchCursor;\n}',
     },
+    {
+        name: 'SessionEventsPage',
+        declaration: 'export interface SessionEventsPage extends SessionPage {\n    readonly cursor: number;\n}',
+    },
     {
         name: 'SessionEventSurface',
         declaration: 'export type SessionEventSurface = \'current\' | \'shadowed\' | \'log-only\';',
@@ -7105,7 +8307,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionFollowRequest',
-        declaration: 'export interface SessionFollowRequest extends Pick<SessionPageRequest, \'maxMessages\' | \'turnWindow\'> {\n    readonly address: SessionAddress;\n    readonly assistantStream?: true;\n}',
+        declaration: 'export interface SessionFollowRequest extends Pick<SessionPageRequest, \'maxMessages\' | \'turnWindow\'> {\n    readonly address: SessionAddress;\n    readonly activate?: boolean;\n    readonly assistantStream?: true;\n}',
     },
     {
         name: 'SessionForkRequest',
@@ -7171,6 +8373,10 @@ export const TYPE_API = [
         name: 'SessionListValue',
         declaration: 'export interface SessionListValue {\n    readonly items: readonly SessionSummary[];\n}',
     },
+    {
+        name: 'SessionLocation',
+        declaration: 'export interface SessionLocation {\n    readonly kind: string;\n    readonly path: string;\n}',
+    },
     {
         name: 'SessionLogOffset',
         declaration: 'export type SessionLogOffset = BrandedNumber<\'SessionLogOffset\'>;',
@@ -7195,6 +8401,14 @@ export const TYPE_API = [
         name: 'SessionLogSnapshot',
         declaration: 'export interface SessionLogSnapshot {\n    session: SessionHeader;\n    inheritedEventCount: SessionLogOffset;\n    events: SessionEvent[];\n}',
     },
+    {
+        name: 'SessionLogUploadExclusion',
+        declaration: 'export type SessionLogUploadExclusion = (request: SessionLogUploadRequest) => boolean;',
+    },
+    {
+        name: 'SessionLogUploadRequest',
+        declaration: 'export interface SessionLogUploadRequest {\n    readonly sessionId: SessionId;\n    readonly purpose?: string;\n}',
+    },
     {
         name: 'SessionMessage',
         declaration: 'export interface SessionMessage {\n    role: \'user\' | \'assistant\';\n    text: string;\n    toolUses: ToolUseSummary[];\n}',
@@ -7215,6 +8429,10 @@ export const TYPE_API = [
         name: 'SessionObservationOptions',
         declaration: 'export interface SessionObservationOptions {\n    readonly signal?: AbortSignal;\n    readonly projectionMode?: \'all\' | \'none\';\n}',
     },
+    {
+        name: 'SessionObserveEventRequest',
+        declaration: 'export interface SessionObserveEventRequest {\n    readonly address: SessionAddress;\n}',
+    },
     {
         name: 'SessionOpenWorkspacePathRequest',
         declaration: 'export interface SessionOpenWorkspacePathRequest {\n    readonly action?: \'reveal\';\n    readonly application?: string;\n    readonly path: string;\n}',
@@ -7229,7 +8447,11 @@ export const TYPE_API = [
     },
     {
         name: 'SessionPageRequest',
-        declaration: 'export interface SessionPageRequest {\n    readonly address: SessionAddress;\n    readonly throughSeq: number;\n    readonly beforeSeq?: number;\n    readonly maxMessages?: number;\n    readonly turnWindow?: {\n        readonly minMessages: number;\n        readonly minTurns: number;\n    };\n}',
+        declaration: 'export interface SessionPageRequest {\n    readonly address: SessionAddress;\n    readonly throughSeq?: number;\n    readonly beforeSeq?: number;\n    readonly maxMessages?: number;\n    readonly turnWindow?: {\n        readonly minMessages: number;\n        readonly minTurns: number;\n    };\n}',
+    },
+    {
+        name: 'SessionPendingInput',
+        declaration: 'export type SessionPendingInput = \'approval\' | \'question\' | \'other\';',
     },
     {
         name: 'SessionPersistenceCreateOptions',
@@ -7249,7 +8471,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionPersistenceSnapshot',
-        declaration: 'export interface SessionPersistenceSnapshot {\n    readonly header: SessionHeader;\n    readonly formatStatus?: \'current\' | \'migration-required\';\n    readonly revision: SessionPersistenceRevision;\n    readonly eventCount?: number;\n    readonly sizeBytes?: number;\n}',
+        declaration: 'export interface SessionPersistenceSnapshot {\n    readonly header: SessionHeader;\n    readonly formatStatus?: \'current\' | \'migration-required\';\n    readonly revision: SessionPersistenceRevision;\n    readonly eventCount?: number;\n    readonly sizeBytes?: number;\n    readonly location?: SessionLocation;\n}',
     },
     {
         name: 'SessionPersistenceStatOptions',
@@ -7259,9 +8481,17 @@ export const TYPE_API = [
         name: 'SessionProjectionBaseline',
         declaration: 'export interface SessionProjectionBaseline {\n    readonly asOfSeq: number;\n    readonly values: SessionProjectionValues;\n}',
     },
+    {
+        name: 'SessionProjectionChange',
+        declaration: 'export type SessionProjectionChange = {\n    readonly type: \'projection\';\n} & Omit<SessionProjectionUpdate, \'sessionId\'>;',
+    },
+    {
+        name: 'SessionProjectionFrame',
+        declaration: 'export type SessionProjectionFrame = {\n    readonly type: \'ready\';\n} | SessionProjectionChange;',
+    },
     {
         name: 'SessionProjectionHints',
-        declaration: 'export interface SessionProjectionHints {\n    readonly kind: \'cached\' | \'sequenced\';\n    readonly asOfSeq: number;\n    readonly values: SessionProjectionValues;\n}',
+        declaration: 'export interface SessionProjectionHints {\n    readonly kind: \'cached\' | \'sequenced\';\n    readonly asOfSeq: number;\n    readonly values: Partial<SessionProjectionSummaryValues>;\n}',
     },
     {
         name: 'SessionProjectionMap',
@@ -7272,8 +8502,16 @@ export const TYPE_API = [
         declaration: 'export interface SessionProjectionsRequest {\n    readonly sessionId: SessionId;\n}',
     },
     {
-        name: 'SessionProjectionStateMap',
-        declaration: 'export interface SessionProjectionStateMap {\n}',
+        name: 'SessionProjectionSummaryExcluded',
+        declaration: 'export type SessionProjectionSummaryExcluded<T> = T & {\n    readonly [sessionProjectionSummaryExcluded]: true;\n};',
+    },
+    {
+        name: 'SessionProjectionSummaryExcludedKey',
+        declaration: 'export type SessionProjectionSummaryExcludedKey = {\n    [K in keyof SessionProjectionMap]: NonNullable<SessionProjectionMap[K]> extends SessionProjectionSummaryExcluded<unknown> ? K : never;\n}[keyof SessionProjectionMap];',
+    },
+    {
+        name: 'SessionProjectionSummaryValues',
+        declaration: 'export type SessionProjectionSummaryValues = Omit<SessionProjectionViewValues, SessionProjectionSummaryExcludedKey>;',
     },
     {
         name: 'SessionProjectionsValue',
@@ -7281,7 +8519,7 @@ export const TYPE_API = [
     },
     {
         name: 'SessionProjectionUpdate',
-        declaration: 'export interface SessionProjectionUpdate {\n    readonly sessionId: SessionId;\n    readonly key: string;\n    readonly value: JsonValue;\n    readonly seq: number;\n}',
+        declaration: 'export interface SessionProjectionUpdate {\n    readonly sessionId: SessionId;\n    readonly seq: number;\n    readonly changes: readonly {\n        readonly key: string;\n        readonly val: SessionProjectionValue;\n    }[];\n}',
     },
     {
         name: 'SessionProjectionValue',
@@ -7291,6 +8529,14 @@ export const TYPE_API = [
         name: 'SessionProjectionValues',
         declaration: 'export type SessionProjectionValues = Partial<SessionProjectionMap> & Readonly<Record<string, SessionProjectionValue>>;',
     },
+    {
+        name: 'SessionProjectionViewValue',
+        declaration: 'export type SessionProjectionViewValue<T> = T extends SessionProjectionSummaryExcluded<infer Value> ? Value : T;',
+    },
+    {
+        name: 'SessionProjectionViewValues',
+        declaration: 'export type SessionProjectionViewValues = {\n    [K in keyof SessionProjectionMap]: SessionProjectionViewValue<SessionProjectionMap[K]>;\n};',
+    },
     {
         name: 'SessionPromptRequest',
         declaration: 'export interface SessionPromptRequest {\n    readonly requestId: SessionRequestId;\n    readonly sessionId: SessionId;\n    readonly mode: \'queue\' | \'steer\';\n    readonly content: readonly PromptContentPart[];\n    readonly clientTimeZone?: string;\n}',
@@ -7299,6 +8545,10 @@ export const TYPE_API = [
         name: 'SessionPromptValue',
         declaration: 'export interface SessionPromptValue {\n    readonly accepted: true;\n}',
     },
+    {
+        name: 'SessionQueuedItem',
+        declaration: 'export interface SessionQueuedItem {\n    readonly id: MessageId;\n    readonly placement: \'queued\' | \'steering\' | \'context\';\n    readonly rpcId?: SessionRequestId;\n    readonly content: readonly JsonValue[];\n}',
+    },
     {
         name: 'SessionRecord',
         declaration: 'export interface SessionRecord {\n    header: SessionHeader;\n    live: boolean;\n    persisted: boolean;\n    formatStatus?: \'current\' | \'migration-required\';\n}',
@@ -7391,6 +8641,14 @@ export const TYPE_API = [
         name: 'SessionStartSource',
         declaration: 'export type SessionStartSource = \'startup\' | \'resume\' | \'clear\' | \'compact\';',
     },
+    {
+        name: 'SessionState',
+        declaration: 'export interface SessionState {\n    readonly cursor: number;\n    readonly active: boolean;\n    readonly running: boolean;\n    readonly queue: readonly SessionQueuedItem[] | null;\n    readonly pendingInput: readonly SessionPendingInput[];\n}',
+    },
+    {
+        name: 'SessionStateRequest',
+        declaration: 'export interface SessionStateRequest {\n    readonly sessionId: SessionId;\n}',
+    },
     {
         name: 'SessionStorageMetadata',
         declaration: 'export interface SessionStorageMetadata {\n    readonly meta: SessionHeader;\n    readonly inheritedEventCount: SessionLogOffset;\n}',
@@ -7471,6 +8729,18 @@ export const TYPE_API = [
         name: 'SessionUpdateQueueValue',
         declaration: 'export interface SessionUpdateQueueValue {\n    readonly accepted: true;\n}',
     },
+    {
+        name: 'SessionWaitOutput',
+        declaration: 'export interface SessionWaitOutput {\n    readonly records: readonly SessionHistoryRecord[];\n    readonly truncated: boolean;\n}',
+    },
+    {
+        name: 'SessionWaitRequest',
+        declaration: 'export interface SessionWaitRequest extends SessionStateRequest {\n    readonly timeoutMs?: number;\n    readonly afterSeq?: number;\n    readonly maxMessages?: number;\n}',
+    },
+    {
+        name: 'SessionWaitValue',
+        declaration: 'export interface SessionWaitValue {\n    readonly reason: \'idle\' | \'input-required\' | \'timeout\';\n    readonly state: SessionState;\n    readonly output: SessionWaitOutput;\n}',
+    },
     {
         name: 'SessionWireEvent',
         declaration: 'export interface SessionWireEvent {\n    readonly type: string;\n    readonly seq: number;\n    readonly time: number;\n    readonly data: JsonValue;\n    readonly ignorable?: true;\n    readonly sourceEventSeqs?: JsonValue;\n    readonly surfaceOp?: JsonValue;\n}',
@@ -7483,6 +8753,14 @@ export const TYPE_API = [
         name: 'SessionWorkspacePathApplication',
         declaration: 'export type SessionWorkspacePathApplication = NativeFileApplication;',
     },
+    {
+        name: 'SetRelayRequest',
+        declaration: 'export interface SetRelayRequest {\n    readonly relayUrl: string | null;\n}',
+    },
+    {
+        name: 'SetShareCapabilitiesRequest',
+        declaration: 'export interface SetShareCapabilitiesRequest {\n    readonly shareId: string;\n    readonly capabilities?: readonly ShareCapabilityGroup[];\n}',
+    },
     {
         name: 'SettingsDescribeOptions',
         declaration: 'export interface SettingsDescribeOptions {\n    redactSecrets?: boolean;\n}',
@@ -7519,6 +8797,38 @@ export const TYPE_API = [
         name: 'SettingsSecretView',
         declaration: 'export interface SettingsSecretView {\n    path: string[];\n    set: boolean;\n}',
     },
+    {
+        name: 'ShareAccess',
+        declaration: 'export interface ShareAccess {\n    readonly mode: \'open\' | \'selected\';\n    readonly selected: readonly ShareAccessSelection[];\n    readonly deploymentAllowedSubjectIds: readonly string[];\n    readonly shareAllowedSubjectIds: readonly string[];\n    readonly broadenedByDeploymentSubjects: boolean;\n    readonly identityKeyAcl: true;\n}',
+    },
+    {
+        name: 'ShareAccessSelection',
+        declaration: 'export interface ShareAccessSelection {\n    readonly providerId: string;\n    readonly tenantId: string;\n    readonly subjectId: string;\n    readonly identityKey: string;\n}',
+    },
+    {
+        name: 'ShareAudit',
+        declaration: 'export interface ShareAudit {\n    readonly events: readonly ShareAuditEntryView[];\n}',
+    },
+    {
+        name: 'ShareAuditEntryView',
+        declaration: 'export interface ShareAuditEntryView {\n    readonly id: string;\n    readonly action: string;\n    readonly createdAt: string;\n    readonly actor?: string;\n    readonly detail?: JsonValue;\n}',
+    },
+    {
+        name: 'ShareAuditRequest',
+        declaration: 'export interface ShareAuditRequest {\n    readonly shareId: string;\n}',
+    },
+    {
+        name: 'ShareCapabilities',
+        declaration: 'export interface ShareCapabilities {\n    readonly shareId: string;\n    readonly viewerCapabilities: readonly ShareCapabilityGroup[];\n}',
+    },
+    {
+        name: 'ShareCapabilityGroup',
+        declaration: 'export interface ShareCapabilityGroup {\n    readonly plugin: string;\n    readonly readable: readonly string[];\n    readonly writable: readonly string[];\n}',
+    },
+    {
+        name: 'ShareCapabilityOffers',
+        declaration: 'export interface ShareCapabilityOffers {\n    readonly capabilities: readonly ShareCapabilityGroup[];\n}',
+    },
     {
         name: 'ShellExecRequest',
         declaration: 'export interface ShellExecRequest {\n    command: string;\n    workdir?: string | undefined;\n    timeoutMs?: number | undefined;\n    onExpiry?: ShellExpiryPolicy | undefined;\n    stdoutMaxBytes?: number | undefined;\n    signal?: AbortSignal | undefined;\n    stdin?: string | undefined;\n    env?: Record<string, string> | undefined;\n    dshEnv?: DshEnvironment | undefined;\n    sandboxPolicy?: SandboxExecutionPolicy | undefined;\n}',
@@ -7735,6 +9045,18 @@ export const TYPE_API = [
         name: 'SshStreamEndpoint',
         declaration: 'export type SshStreamEndpoint = z.infer<typeof streamEndpointSchema>;',
     },
+    {
+        name: 'StagedAttachment',
+        declaration: 'export type StagedAttachment = {\n    readonly type: \'file\';\n    readonly attachment: FileAttachmentRef;\n} | {\n    readonly type: \'image\';\n    readonly attachment: ImageAttachmentRef;\n    readonly encodedBytes: number;\n};',
+    },
+    {
+        name: 'StopShareRequest',
+        declaration: 'export interface StopShareRequest {\n    readonly shareId: string;\n}',
+    },
+    {
+        name: 'StopShareResult',
+        declaration: 'export interface StopShareResult {\n    readonly ok: true;\n    readonly relay?: \'unreachable\';\n}',
+    },
     {
         name: 'StorageBackend',
         declaration: 'export interface StorageBackend {\n    readonly kv?: KvFacet;\n    close(): Promise<void>;\n}',
@@ -7831,10 +9153,6 @@ export const TYPE_API = [
         name: 'SubagentSendMessageOptions',
         declaration: 'export interface SubagentSendMessageOptions {\n    readonly signal: AbortSignal;\n}',
     },
-    {
-        name: 'SubagentSessionError',
-        declaration: 'export interface SubagentSessionError {\n    readonly code: \'subagent_session\';\n    readonly message: string;\n}',
-    },
     {
         name: 'SubagentStartRequest',
         declaration: 'export interface SubagentStartRequest {\n    readonly cwd?: string;\n    readonly agentPreset?: string;\n    readonly label?: string;\n    readonly prompt: ContentBlock[];\n    readonly parent: Agent;\n    readonly signal: AbortSignal;\n    readonly agentOptions?: AgentOptions;\n    readonly outputSchema?: ObjectJsonSchema;\n    readonly maxDepth?: number;\n}',
@@ -8091,6 +9409,10 @@ export const TYPE_API = [
         name: 'TerminalWaitReason',
         declaration: 'export type TerminalWaitReason = \'stdin_read\' | \'inferred_idle\' | \'timeout\' | \'session_exit\';',
     },
+    {
+        name: 'TestPublishRequest',
+        declaration: 'export interface TestPublishRequest {\n    readonly sessionId: string;\n}',
+    },
     {
         name: 'TextProps',
         declaration: 'export interface TextProps {\n    readonly color?: string | undefined;\n    readonly bold?: boolean | undefined;\n    readonly dimColor?: boolean | undefined;\n    readonly italic?: boolean | undefined;\n    readonly underline?: boolean | undefined;\n    readonly children?: UiNode | undefined;\n}',
@@ -8099,10 +9421,6 @@ export const TYPE_API = [
         name: 'TimedUserQuestionResult',
         declaration: 'export type TimedUserQuestionResult = AskUserQuestionAnswer | {\n    pending: true;\n    callId: ToolCallId;\n};',
     },
-    {
-        name: 'TimeOutOfRangeError',
-        declaration: 'export interface TimeOutOfRangeError {\n    readonly code: \'time_out_of_range\';\n    readonly message: string;\n}',
-    },
     {
         name: 'ToastOptions',
         declaration: 'export interface ToastOptions {\n    timeoutMs?: number;\n}',
@@ -8123,10 +9441,22 @@ export const TYPE_API = [
         name: 'TokenUsage',
         declaration: 'export interface TokenUsage {\n    inputTokens: number;\n    outputTokens: number;\n    totalTokens?: number;\n    cacheReadTokens?: number;\n    cacheWriteTokens?: number;\n    reasoningTokens?: number;\n}',
     },
+    {
+        name: 'ToolActivationContext',
+        declaration: 'export interface ToolActivationContext {\n    readonly agent: Agent;\n    readonly modelSelection: Readonly<ModelSelection>;\n    readonly signal: AbortSignal;\n}',
+    },
     {
         name: 'ToolAdditionBlock',
         declaration: 'export interface ToolAdditionBlock {\n    type: \'tool-addition\';\n    toolName: string;\n    tool?: never;\n}',
     },
+    {
+        name: 'ToolBatchInput',
+        declaration: 'export interface ToolBatchInput {\n    readonly calls: readonly ToolCallBlock[];\n    readonly signal: AbortSignal;\n    readonly maxParallelToolCalls?: number;\n    readonly agent?: Agent;\n    readonly toolSet?: ResolvedToolSet;\n    readonly log?: {\n        readonly turn: number;\n        readonly step: number;\n    };\n}',
+    },
+    {
+        name: 'ToolBatchResult',
+        declaration: 'export interface ToolBatchResult {\n    readonly results: readonly ToolCallResult[];\n    readonly additionalContexts: readonly UserMessage[];\n    readonly concluded: boolean;\n}',
+    },
     {
         name: 'ToolCallBlock',
         declaration: 'export interface ToolCallBlock {\n    type: \'tool-call\';\n    id: ToolCallId;\n    name: string;\n    arguments: string;\n}',
@@ -8143,10 +9473,6 @@ export const TYPE_API = [
         name: 'ToolCallKind',
         declaration: 'export type ToolCallKind = \'read\' | \'edit\' | \'delete\' | \'move\' | \'search\' | \'execute\' | \'fetch\' | \'other\';',
     },
-    {
-        name: 'ToolCallResult',
-        declaration: 'export type ToolCallResult = {\n    deny: string;\n    result?: undefined;\n    isError?: undefined;\n} | {\n    result: unknown;\n    isError?: true;\n    deny?: undefined;\n};',
-    },
     {
         name: 'ToolCallView',
         declaration: 'export type ToolCallView = GenericCallView | TerminalCallView | DiffCallView;',
@@ -8173,11 +9499,7 @@ export const TYPE_API = [
     },
     {
         name: 'ToolExecutionInput',
-        declaration: 'export interface ToolExecutionInput {\n    readonly callId: ToolCallId;\n    readonly rootCallId?: ToolCallId;\n    readonly name: string;\n    readonly schema?: ToolSchema;\n    readonly arguments: unknown;\n    readonly agent?: Agent;\n    readonly parent?: ToolExecutionToken;\n    readonly signal: AbortSignal;\n}',
-    },
-    {
-        name: 'ToolExecutionMode',
-        declaration: 'export type ToolExecutionMode = {\n    kind: \'parallel\';\n} | {\n    kind: \'exclusive\';\n};',
+        declaration: 'export interface ToolExecutionInput {\n    readonly callId: ToolCallId;\n    readonly rootCallId?: ToolCallId;\n    readonly name: string;\n    readonly schema?: ToolSchema;\n    readonly arguments: unknown;\n    readonly agent?: Agent;\n    readonly toolSet?: ResolvedToolSet;\n    readonly parent?: ToolExecutionToken;\n    readonly signal: AbortSignal;\n}',
     },
     {
         name: 'ToolExecutionResult',
@@ -8191,6 +9513,10 @@ export const TYPE_API = [
         name: 'ToolExecutionToken',
         declaration: 'export type ToolExecutionToken = symbol & {\n    readonly [toolExecutionTokenBrand]: true;\n};',
     },
+    {
+        name: 'ToolExecutor',
+        declaration: 'export interface ToolExecutor {\n    readonly sections?: readonly ToolPromptSection[];\n    describe(tools: readonly ToolDefinition[]): ToolModelInput;\n    execute(input: ToolBatchInput): Promise<ToolBatchResult>;\n}',
+    },
     {
         name: 'ToolFailure',
         declaration: 'export interface ToolFailure {\n    message: string;\n    info?: ToolErrorInfo;\n}',
@@ -8211,18 +9537,26 @@ export const TYPE_API = [
         name: 'ToolMessageSource',
         declaration: 'export interface ToolMessageSource {\n    kind: \'tool\';\n    callId: ToolCallId;\n}',
     },
+    {
+        name: 'ToolModelInput',
+        declaration: 'export type ToolModelInput = Pick<ToolProviderResult, \'schemas\' | \'knownNames\'>;',
+    },
     {
         name: 'ToolOutputDefinition',
         declaration: 'export interface ToolOutputDefinition {\n    readonly schema: JsonSchemaNode;\n    render(args: unknown, value: JsonValue): ContentBlock[];\n    presentationMeta?(args: unknown, value: JsonValue): JsonValue;\n}',
     },
     {
-        name: 'ToolPresentationMode',
-        declaration: 'export type ToolPresentationMode = \'native\' | \'ptc\';',
+        name: 'ToolPromptSection',
+        declaration: 'export interface ToolPromptSection extends Pick<PromptSection, \'name\' | \'order\' | \'interpolate\'> {\n    readonly text: string | ((tools: readonly ToolDefinition[]) => string);\n}',
     },
     {
         name: 'ToolProviderResult',
         declaration: 'export interface ToolProviderResult {\n    readonly schemas: readonly ToolSchema[];\n    readonly knownNames?: readonly string[];\n}',
     },
+    {
+        name: 'ToolRegistrationOptions',
+        declaration: 'export interface ToolRegistrationOptions {\n    readonly when?: (context: ToolActivationContext) => boolean | Promise<boolean>;\n}',
+    },
     {
         name: 'ToolRemovalBlock',
         declaration: 'export interface ToolRemovalBlock {\n    type: \'tool-removal\';\n    toolName: string;\n}',
@@ -8247,14 +9581,6 @@ export const TYPE_API = [
         name: 'ToolRunContext',
         declaration: 'export interface ToolRunContext extends ToolExecution {\n    deferContext(context: UserMessage): void;\n    concludeTurn(): void;\n}',
     },
-    {
-        name: 'ToolRuntime',
-        declaration: 'export class ToolRuntime extends Service {\n    static inject;\n    static Config: z<Config>;\n    readonly [TOOL_RUNTIME_SCHEDULER]: ToolRuntimeScheduler;\n    constructor(ctx: Context, config: Config = {});\n    presentAs(mode: ToolPresentationMode): () => void;\n    register(definition: ToolDefinition): () => void;\n    restrict(filter: ToolRestriction): () => void;\n    guard(guard: ToolGuard): () => void;\n    get(name: string, scope?: ScopeKey): ToolDefinition | undefined;\n    schemas(scope?: ScopeKey): ToolSchema[];\n    executionMode(exec: ToolExecutionInput): ToolExecutionMode;\n    async execute(exec: ToolExecutionInput): Promise<ToolExecutionResult>;\n}',
-    },
-    {
-        name: 'ToolRuntimeScheduler',
-        declaration: 'export interface ToolRuntimeScheduler {\n    prepare(exec: ToolExecutionInput): Promise<ScheduledToolPreparation>;\n    dispatch(exec: ToolRunContext): Promise<ScheduledToolDispatch>;\n    finalize(exec: ToolRunContext, result: ToolExecutionResult): Promise<ToolExecutionResult>;\n    finish(exec: ToolRunContext, result: ToolExecutionResult): ToolExecutionResult;\n}',
-    },
     {
         name: 'ToolSchema',
         declaration: 'export interface ToolSchema {\n    deferLoading?: true;\n    name: string;\n    description: string;\n    parameters: Record<string, unknown>;\n}',
@@ -8263,6 +9589,10 @@ export const TYPE_API = [
         name: 'ToolSpec',
         declaration: 'export interface ToolSpec {\n    name: string;\n    description: string;\n    inputSchema?: Record<string, unknown>;\n}',
     },
+    {
+        name: 'ToolsService',
+        declaration: 'export class ToolsService extends Service {\n    static inject;\n    static Config;\n    constructor(ctx: Context);\n    register(definition: ToolDefinition, options: ToolRegistrationOptions = {}): () => void;\n    restrict(filter: ToolRestriction): () => void;\n    get(name: string, scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolDefinition | undefined;\n    executable(name: string, scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolDefinition | undefined;\n    async resolve(context: ToolActivationContext): Promise<ResolvedToolSet>;\n    definitions(scope?: ScopeKey, toolSet?: ResolvedToolSet): readonly ToolDefinition[];\n    schemas(scope?: ScopeKey, toolSet?: ResolvedToolSet): ToolSchema[];\n    setExecutor(executor: ToolExecutor): () => void;\n    async execute(input: ToolBatchInput): Promise<ToolBatchResult>;\n    guard(guard: ToolGuard): () => void;\n    checkGuards(exec: ToolExecution): string | undefined;\n}',
+    },
     {
         name: 'ToolUpdate',
         declaration: 'export type ToolUpdate = \'in-history\' | \'addition-only\';',
@@ -8291,6 +9621,10 @@ export const TYPE_API = [
         name: 'TranslationSpec',
         declaration: 'export type TranslationSpec = AnonymousTranslationSpec | PaidTranslationSpec;',
     },
+    {
+        name: 'TurnBoundaryProjection',
+        declaration: 'export interface TurnBoundaryProjection {\n    readonly openTurnStartSeq: OptionalSessionSeq;\n    readonly lastStepStartSeq: OptionalSessionSeq;\n    readonly lastStepBoundary: {\n        readonly kind: \'start\' | \'end\';\n        readonly seq: SessionSeq;\n    } | null;\n    readonly lastTurn: number;\n}',
+    },
     {
         name: 'TurnCompleteInput',
         declaration: 'export interface TurnCompleteInput {\n    turnId: string;\n    answer: string;\n    durationMs: number;\n    isAborted: boolean;\n    reason: \'answer\' | \'aborted\' | \'error\';\n    agentId?: string;\n    usage?: TurnUsage;\n}',
@@ -8475,6 +9809,14 @@ export const TYPE_API = [
         name: 'UiRenderResult',
         declaration: 'export type UiRenderResult = UiNode;',
     },
+    {
+        name: 'UpdateBundleOptions',
+        declaration: 'export interface UpdateBundleOptions {\n    readonly registry?: Registry;\n    readonly requestId?: PluginInstallRequestId;\n}',
+    },
+    {
+        name: 'UpdateSharePermissionsRequest',
+        declaration: 'export interface UpdateSharePermissionsRequest {\n    readonly shareId: string;\n    readonly sessionMode?: \'view\' | \'write\';\n    readonly allowsFork?: boolean;\n    readonly ttlMinutes?: number | null;\n}',
+    },
     {
         name: 'UpdateTeamTaskRequest',
         declaration: 'export interface UpdateTeamTaskRequest {\n    readonly taskId: TeamTaskId;\n    readonly expectedRevision: number;\n    readonly action: TeamTaskAction;\n    readonly subject?: string;\n    readonly description?: string;\n    readonly blockedBy?: readonly TeamTaskId[];\n    readonly writeScopes?: readonly string[];\n    readonly owner?: string;\n}',
@@ -8513,7 +9855,7 @@ export const TYPE_API = [
     },
     {
         name: 'WebFetchProvider',
-        declaration: 'export interface WebFetchProvider {\n    readonly id: string;\n    available(): boolean;\n    fetch(request: WebFetchRequest, signal?: AbortSignal): Promise<WebFetchResult>;\n}',
+        declaration: 'export interface WebFetchProvider {\n    readonly id: string;\n    available(): boolean;\n    ready?(llmProvider: string | undefined): Promise<boolean>;\n    fetch(request: WebFetchRequest, signal?: AbortSignal): Promise<WebFetchResult>;\n}',
     },
     {
         name: 'WebFetchRequest',
@@ -8559,6 +9901,14 @@ export const TYPE_API = [
         name: 'WebhookSourceId',
         declaration: 'export type WebhookSourceId = Branded<\'WebhookSourceId\'>;',
     },
+    {
+        name: 'WebResource',
+        declaration: 'export type WebResource = (request: Request, peer?: PeerScope) => Promise<Response>;',
+    },
+    {
+        name: 'WebResourceRoute',
+        declaration: 'export interface WebResourceRoute {\n    kind: WebRouteKind;\n    path: string;\n    resource: WebResource;\n}',
+    },
     {
         name: 'WebResultView',
         declaration: 'export type WebResultView = WebSearchResultView | WebFetchResultView;',
@@ -8573,7 +9923,7 @@ export const TYPE_API = [
     },
     {
         name: 'WebSearchProvider',
-        declaration: 'export interface WebSearchProvider {\n    readonly id: string;\n    available(): boolean;\n    search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult>;\n}',
+        declaration: 'export interface WebSearchProvider {\n    readonly id: string;\n    available(): boolean;\n    ready?(llmProvider: string | undefined): Promise<boolean>;\n    search(request: WebSearchRequest, signal?: AbortSignal): Promise<WebSearchResult>;\n}',
     },
     {
         name: 'WebSearchRequest',
@@ -8589,7 +9939,7 @@ export const TYPE_API = [
     },
     {
         name: 'WebSearchSource',
-        declaration: 'export interface WebSearchSource {\n    readonly url: string;\n    readonly title?: string;\n    readonly snippet?: string;\n    readonly publishedAt?: string;\n}',
+        declaration: 'export interface WebSearchSource {\n    readonly url: string;\n    readonly title?: string;\n    readonly snippet?: string;\n    readonly summary?: string;\n    readonly publishedAt?: string;\n}',
     },
     {
         name: 'WebSource',