@get-bb/plugin-sdk 0.4.55 → 0.4.84

package/bundled-types/bb-plugin-sdk.d.ts

@@ -6,10 +6,10 @@
 // and read the real source: https://github.com/get-bb/bb
 
 import * as react from 'react';
-import { ComponentType, ComponentPropsWithoutRef, ReactNode } from 'react';
+import { ComponentType, ComponentPropsWithoutRef, CSSProperties, ReactNode } from 'react';
 import * as z from 'zod';
 import { z as z$1 } from 'zod';
-import { StandardSchemaV1 as StandardSchemaV1$1, PluginEnvironmentProviderRequirements as PluginEnvironmentProviderRequirements$1, StandardSchemaV1InferOutput as StandardSchemaV1InferOutput$1, PluginEnvironmentValidateDecision as PluginEnvironmentValidateDecision$1, JsonValue as JsonValue$2 } from '@get-bb/plugin-sdk';
+import { StandardSchemaV1 as StandardSchemaV1$1, StandardSchemaV1InferOutput as StandardSchemaV1InferOutput$1, PluginMachineValidateDecision as PluginMachineValidateDecision$1, JsonValue as JsonValue$2, PluginEnvironmentProviderRequirements as PluginEnvironmentProviderRequirements$1, PluginEnvironmentValidateDecision as PluginEnvironmentValidateDecision$1 } from '@get-bb/plugin-sdk';
 import Database from 'better-sqlite3';
 import { Context } from 'hono';
 
@@ -44,7 +44,10 @@ interface ProviderNativeRootsInputLike {
 }
 
 declare const appSettingsSchema: z$1.ZodObject<{
+    defaultMachineAccess: z$1.ZodNullable<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
+    machineGitCredentialsEnabled: z$1.ZodBoolean;
+    machineServerUrl: z$1.ZodNullable<z$1.ZodString>;
     managedBranchPrefix: z$1.ZodString;
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     showDiagnosticEvents: z$1.ZodBoolean;
@@ -54,7 +57,10 @@ declare const appSettingsSchema: z$1.ZodObject<{
 }, z$1.core.$strict>;
 type AppSettings = z$1.infer<typeof appSettingsSchema>;
 declare const appSettingsUpdateSchema: z$1.ZodUnion<readonly [z$1.ZodObject<{
+    defaultMachineAccess: z$1.ZodNullable<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
+    machineGitCredentialsEnabled: z$1.ZodBoolean;
+    machineServerUrl: z$1.ZodNullable<z$1.ZodString>;
     managedBranchPrefix: z$1.ZodString;
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     showDiagnosticEvents: z$1.ZodBoolean;
@@ -63,7 +69,10 @@ declare const appSettingsUpdateSchema: z$1.ZodUnion<readonly [z$1.ZodObject<{
     steerActiveThreadOnEnter: z$1.ZodBoolean;
     streamerMode: z$1.ZodBoolean;
 }, z$1.core.$strict>, z$1.ZodObject<{
+    defaultMachineAccess: z$1.ZodNullable<z$1.ZodString>;
     defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
+    machineGitCredentialsEnabled: z$1.ZodBoolean;
+    machineServerUrl: z$1.ZodNullable<z$1.ZodString>;
     managedBranchPrefix: z$1.ZodString;
     providerOrder: z$1.ZodArray<z$1.ZodString>;
     showKeyboardHints: z$1.ZodBoolean;
@@ -378,10 +387,14 @@ declare const environmentSchema: z$1.ZodObject<{
     environmentProviderInstanceKey: z$1.ZodNullable<z$1.ZodString>;
     environmentProviderSelection: z$1.ZodNullable<z$1.ZodObject<{
         inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
-        machine: z$1.ZodObject<{
+        machine: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
             hostId: z$1.ZodString;
             type: z$1.ZodLiteral<"existing">;
-        }, z$1.core.$strip>;
+        }, z$1.core.$strip>, z$1.ZodObject<{
+            inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
+            machineProviderId: z$1.ZodString;
+            type: z$1.ZodLiteral<"new">;
+        }, z$1.core.$strip>], "type">;
     }, z$1.core.$strip>>;
     hostId: z$1.ZodString;
     id: z$1.ZodString;
@@ -460,6 +473,29 @@ declare const hostSchema: z$1.ZodObject<{
     id: z$1.ZodString;
     lastRejectedProtocolVersion: z$1.ZodNullable<z$1.ZodNumber>;
     lastSeenAt: z$1.ZodNullable<z$1.ZodNumber>;
+    lifecycle: z$1.ZodObject<{
+        message: z$1.ZodNullable<z$1.ZodString>;
+        pendingLog: z$1.ZodString;
+        phase: z$1.ZodEnum<{
+            active: "active";
+            creating: "creating";
+            destroyed: "destroyed";
+            removing: "removing";
+            resuming: "resuming";
+            suspended: "suspended";
+            suspending: "suspending";
+        }>;
+        suspendedAt: z$1.ZodNullable<z$1.ZodNumber>;
+        teardown: z$1.ZodNullable<z$1.ZodObject<{
+            attempt: z$1.ZodNumber;
+            status: z$1.ZodEnum<{
+                failed: "failed";
+                removed: "removed";
+                running: "running";
+            }>;
+        }, z$1.core.$strip>>;
+    }, z$1.core.$strip>;
+    machineProviderId: z$1.ZodNullable<z$1.ZodString>;
     maxPermissionMode: z$1.ZodEnum<{
         "accept-edits": "accept-edits";
         auto: "auto";
@@ -471,6 +507,7 @@ declare const hostSchema: z$1.ZodObject<{
         disconnected: "disconnected";
     }>;
     type: z$1.ZodEnum<{
+        ephemeral: "ephemeral";
         persistent: "persistent";
     }>;
     updatedAt: z$1.ZodNumber;
@@ -2628,6 +2665,11 @@ declare const threadEventSchema: z$1.ZodPipe<z$1.ZodUnknown, z$1.ZodUnion<readon
         reason: z$1.ZodOptional<z$1.ZodString>;
         source: z$1.ZodUnion<readonly [z$1.ZodLiteral<"shell">, z$1.ZodObject<{
             plugin: z$1.ZodString;
+        }, z$1.core.$strict>, z$1.ZodObject<{
+            core: z$1.ZodEnum<{
+                "machine-environment": "machine-environment";
+                "machine-git": "machine-git";
+            }>;
         }, z$1.core.$strict>]>;
         value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
             masked: z$1.ZodLiteral<true>;
@@ -4179,10 +4221,14 @@ declare const createThreadEnvironmentArgsSchema: z$1.ZodDiscriminatedUnion<[z$1.
 }, z$1.core.$strip>, z$1.ZodObject<{
     environmentProviderId: z$1.ZodString;
     inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
-    machine: z$1.ZodObject<{
+    machine: z$1.ZodOptional<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
         hostId: z$1.ZodString;
         type: z$1.ZodLiteral<"existing">;
-    }, z$1.core.$strip>;
+    }, z$1.core.$strip>, z$1.ZodObject<{
+        inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
+        machineProviderId: z$1.ZodString;
+        type: z$1.ZodLiteral<"new">;
+    }, z$1.core.$strip>], "type">>;
     type: z$1.ZodLiteral<"provider">;
 }, z$1.core.$strip>], "type">;
 type CreateThreadEnvironmentArgs = z$1.infer<typeof createThreadEnvironmentArgsSchema>;
@@ -5750,10 +5796,14 @@ declare const hostDaemonCommandRegistry: {
         contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
             name: z$1.ZodString;
             reason: z$1.ZodString;
-            secret: z$1.ZodBoolean;
-            source: z$1.ZodObject<{
+            source: z$1.ZodUnion<readonly [z$1.ZodObject<{
                 plugin: z$1.ZodString;
-            }, z$1.core.$strict>;
+            }, z$1.core.$strict>, z$1.ZodObject<{
+                core: z$1.ZodEnum<{
+                    "machine-environment": "machine-environment";
+                    "machine-git": "machine-git";
+                }>;
+            }, z$1.core.$strict>]>;
             value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
                 serverPath: z$1.ZodString;
             }, z$1.core.$strict>]>;
@@ -5906,10 +5956,14 @@ declare const hostDaemonCommandRegistry: {
         contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
             name: z$1.ZodString;
             reason: z$1.ZodString;
-            secret: z$1.ZodBoolean;
-            source: z$1.ZodObject<{
+            source: z$1.ZodUnion<readonly [z$1.ZodObject<{
                 plugin: z$1.ZodString;
-            }, z$1.core.$strict>;
+            }, z$1.core.$strict>, z$1.ZodObject<{
+                core: z$1.ZodEnum<{
+                    "machine-environment": "machine-environment";
+                    "machine-git": "machine-git";
+                }>;
+            }, z$1.core.$strict>]>;
             value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
                 serverPath: z$1.ZodString;
             }, z$1.core.$strict>]>;
@@ -6458,10 +6512,14 @@ declare const hostDaemonCommandRegistry: {
             contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
                 name: z$1.ZodString;
                 reason: z$1.ZodString;
-                secret: z$1.ZodBoolean;
-                source: z$1.ZodObject<{
+                source: z$1.ZodUnion<readonly [z$1.ZodObject<{
                     plugin: z$1.ZodString;
-                }, z$1.core.$strict>;
+                }, z$1.core.$strict>, z$1.ZodObject<{
+                    core: z$1.ZodEnum<{
+                        "machine-environment": "machine-environment";
+                        "machine-git": "machine-git";
+                    }>;
+                }, z$1.core.$strict>]>;
                 value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
                     serverPath: z$1.ZodString;
                 }, z$1.core.$strict>]>;
@@ -6663,10 +6721,14 @@ declare const hostDaemonCommandRegistry: {
             contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
                 name: z$1.ZodString;
                 reason: z$1.ZodString;
-                secret: z$1.ZodBoolean;
-                source: z$1.ZodObject<{
+                source: z$1.ZodUnion<readonly [z$1.ZodObject<{
                     plugin: z$1.ZodString;
-                }, z$1.core.$strict>;
+                }, z$1.core.$strict>, z$1.ZodObject<{
+                    core: z$1.ZodEnum<{
+                        "machine-environment": "machine-environment";
+                        "machine-git": "machine-git";
+                    }>;
+                }, z$1.core.$strict>]>;
                 value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
                     serverPath: z$1.ZodString;
                 }, z$1.core.$strict>]>;
@@ -6892,6 +6954,22 @@ declare const hostDaemonCommandRegistry: {
         path: z$1.ZodString;
     }, z$1.core.$strip>, "settled", false>;
     "project.clone": HostDaemonCommandDescriptor<"project.clone", z$1.ZodObject<{
+        contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+            name: z$1.ZodString;
+            reason: z$1.ZodString;
+            source: z$1.ZodUnion<readonly [z$1.ZodObject<{
+                plugin: z$1.ZodString;
+            }, z$1.core.$strict>, z$1.ZodObject<{
+                core: z$1.ZodEnum<{
+                    "machine-environment": "machine-environment";
+                    "machine-git": "machine-git";
+                }>;
+            }, z$1.core.$strict>]>;
+            value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
+                serverPath: z$1.ZodString;
+            }, z$1.core.$strict>]>;
+        }, z$1.core.$strict>>>;
+        operationId: z$1.ZodString;
         projectSlug: z$1.ZodString;
         remoteUrl: z$1.ZodString;
         targetPath: z$1.ZodOptional<z$1.ZodString>;
@@ -7046,13 +7124,28 @@ declare const hostDaemonCommandRegistry: {
         path: z$1.ZodNullable<z$1.ZodString>;
     }, z$1.core.$strip>, "onlineRpc", false>;
     "environment.hook.run": HostDaemonCommandDescriptor<"environment.hook.run", z$1.ZodObject<{
+        contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+            name: z$1.ZodString;
+            reason: z$1.ZodString;
+            source: z$1.ZodUnion<readonly [z$1.ZodObject<{
+                plugin: z$1.ZodString;
+            }, z$1.core.$strict>, z$1.ZodObject<{
+                core: z$1.ZodEnum<{
+                    "machine-environment": "machine-environment";
+                    "machine-git": "machine-git";
+                }>;
+            }, z$1.core.$strict>]>;
+            value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
+                serverPath: z$1.ZodString;
+            }, z$1.core.$strict>]>;
+        }, z$1.core.$strict>>>;
         kind: z$1.ZodEnum<{
             setup: "setup";
             teardown: "teardown";
         }>;
         operationId: z$1.ZodString;
         path: z$1.ZodString;
-        resumeOnly: z$1.ZodBoolean;
+        resumeOnly: z$1.ZodDefault<z$1.ZodBoolean>;
         timeoutMs: z$1.ZodNumber;
         type: z$1.ZodLiteral<"environment.hook.run">;
     }, z$1.core.$strict>, z$1.ZodObject<{}, z$1.core.$strip>, "onlineRpc", false>;
@@ -7071,6 +7164,21 @@ declare const hostDaemonCommandRegistry: {
             digest: z$1.ZodString;
         }, z$1.core.$strict>;
         callId: z$1.ZodString;
+        contributedEnv: z$1.ZodDefault<z$1.ZodArray<z$1.ZodObject<{
+            name: z$1.ZodString;
+            reason: z$1.ZodString;
+            source: z$1.ZodUnion<readonly [z$1.ZodObject<{
+                plugin: z$1.ZodString;
+            }, z$1.core.$strict>, z$1.ZodObject<{
+                core: z$1.ZodEnum<{
+                    "machine-environment": "machine-environment";
+                    "machine-git": "machine-git";
+                }>;
+            }, z$1.core.$strict>]>;
+            value: z$1.ZodUnion<readonly [z$1.ZodString, z$1.ZodObject<{
+                serverPath: z$1.ZodString;
+            }, z$1.core.$strict>]>;
+        }, z$1.core.$strict>>>;
         generation: z$1.ZodString;
         input: z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>;
         method: z$1.ZodString;
@@ -8514,6 +8622,17 @@ declare const hostCloneDefaultPathResponseSchema: z$1.ZodObject<{
     path: z$1.ZodString;
 }, z$1.core.$strict>;
 type HostCloneDefaultPathResponse = z$1.infer<typeof hostCloneDefaultPathResponseSchema>;
+declare const createMachineRequestSchema: z$1.ZodObject<{
+    inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
+    key: z$1.ZodOptional<z$1.ZodString>;
+    machineProviderId: z$1.ZodString;
+}, z$1.core.$strict>;
+type CreateMachineRequest = z$1.infer<typeof createMachineRequestSchema>;
+declare const hostEnrollmentCommandResponseSchema: z$1.ZodNullable<z$1.ZodObject<{
+    command: z$1.ZodString;
+    expiresAt: z$1.ZodNumber;
+}, z$1.core.$strip>>;
+type HostEnrollmentCommandResponse = z$1.infer<typeof hostEnrollmentCommandResponseSchema>;
 declare const createHostJoinCodeResponseSchema: z$1.ZodObject<{
     expiresAt: z$1.ZodNumber;
     hostId: z$1.ZodString;
@@ -8524,6 +8643,10 @@ declare const updateHostRequestSchema: z$1.ZodObject<{
     name: z$1.ZodString;
 }, z$1.core.$strict>;
 type UpdateHostRequest = z$1.infer<typeof updateHostRequestSchema>;
+declare const hostActionResponseSchema: z$1.ZodObject<{
+    ok: z$1.ZodLiteral<true>;
+}, z$1.core.$strict>;
+type HostActionResponse = z$1.infer<typeof hostActionResponseSchema>;
 declare const hostRetryUpdateResponseSchema: z$1.ZodObject<{
     ok: z$1.ZodLiteral<true>;
 }, z$1.core.$strict>;
@@ -9165,6 +9288,14 @@ declare const pluginMarketplaceRefreshResultSchema: z$1.ZodObject<{
 }, z$1.core.$strip>;
 type PluginMarketplaceRefreshResult$1 = z$1.infer<typeof pluginMarketplaceRefreshResultSchema>;
 
+declare const machineEnvironmentReplaceSchema: z$1.ZodObject<{
+    variables: z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        note: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodString>>;
+        value: z$1.ZodNullable<z$1.ZodString>;
+    }, z$1.core.$strict>>;
+}, z$1.core.$strict>;
+type MachineEnvironmentReplace = z$1.infer<typeof machineEnvironmentReplaceSchema>;
 declare const systemExecutionOptionsResponseSchema: z$1.ZodObject<{
     modelLoadError: z$1.ZodNullable<z$1.ZodObject<{
         code: z$1.ZodEnum<{
@@ -9525,7 +9656,10 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
         timelineWindowEventBudget: z$1.ZodNumber;
     }, z$1.core.$strip>;
     generalSettings: z$1.ZodObject<{
+        defaultMachineAccess: z$1.ZodNullable<z$1.ZodString>;
         defaultProviderId: z$1.ZodNullable<z$1.ZodString>;
+        machineGitCredentialsEnabled: z$1.ZodBoolean;
+        machineServerUrl: z$1.ZodNullable<z$1.ZodString>;
         managedBranchPrefix: z$1.ZodString;
         providerOrder: z$1.ZodArray<z$1.ZodString>;
         showDiagnosticEvents: z$1.ZodBoolean;
@@ -9728,6 +9862,30 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
         unknown: "unknown";
         wsl: "wsl";
     }>>;
+    serverAccess: z$1.ZodObject<{
+        defaultProviderId: z$1.ZodString;
+        effectiveUrl: z$1.ZodNullable<z$1.ZodString>;
+        providers: z$1.ZodArray<z$1.ZodObject<{
+            availability: z$1.ZodNullable<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+                serverUrl: z$1.ZodOptional<z$1.ZodString>;
+                status: z$1.ZodLiteral<"available">;
+            }, z$1.core.$strip>, z$1.ZodObject<{
+                message: z$1.ZodString;
+                status: z$1.ZodLiteral<"setup-required">;
+            }, z$1.core.$strip>, z$1.ZodObject<{
+                message: z$1.ZodString;
+                status: z$1.ZodLiteral<"unavailable">;
+            }, z$1.core.$strip>], "status">>;
+            description: z$1.ZodString;
+            displayName: z$1.ZodString;
+            id: z$1.ZodString;
+            pluginId: z$1.ZodNullable<z$1.ZodString>;
+        }, z$1.core.$strip>>;
+        urlSource: z$1.ZodNullable<z$1.ZodEnum<{
+            BB_EXTERNAL_URL: "BB_EXTERNAL_URL";
+            setting: "setting";
+        }>>;
+    }, z$1.core.$strip>;
     serverUrl: z$1.ZodString;
     voiceTranscriptionEnabled: z$1.ZodBoolean;
 }, z$1.core.$strip>;
@@ -9825,11 +9983,14 @@ declare const systemEnvironmentProviderSchema: z$1.ZodObject<{
         message: z$1.ZodString;
         status: z$1.ZodLiteral<"unavailable">;
     }, z$1.core.$strip>], "status">>;
+    description: z$1.ZodNullable<z$1.ZodString>;
     displayName: z$1.ZodString;
+    environmentProviderId: z$1.ZodOptional<z$1.ZodString>;
     icon: z$1.ZodNullable<z$1.ZodString>;
     id: z$1.ZodString;
     inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
     logoUrl: z$1.ZodNullable<z$1.ZodString>;
+    machineAcceptsEmptyInputs: z$1.ZodOptional<z$1.ZodBoolean>;
     machineAvailability: z$1.ZodRecord<z$1.ZodString, z$1.ZodNullable<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
         status: z$1.ZodLiteral<"available">;
     }, z$1.core.$strip>, z$1.ZodObject<{
@@ -9839,6 +10000,9 @@ declare const systemEnvironmentProviderSchema: z$1.ZodObject<{
         message: z$1.ZodString;
         status: z$1.ZodLiteral<"unavailable">;
     }, z$1.core.$strip>], "status">>>;
+    machineInputs: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
+    machineProviderId: z$1.ZodNullable<z$1.ZodString>;
+    machineProviderPluginId: z$1.ZodOptional<z$1.ZodString>;
     pluginId: z$1.ZodString;
     requires: z$1.ZodObject<{
         gitCheckout: z$1.ZodBoolean;
@@ -9848,6 +10012,18 @@ declare const systemEnvironmentProviderSchema: z$1.ZodObject<{
     }, z$1.core.$strip>;
 }, z$1.core.$strip>;
 type SystemEnvironmentProvider = z$1.infer<typeof systemEnvironmentProviderSchema>;
+declare const systemMachineProviderSchema: z$1.ZodObject<{
+    acceptsEmptyInputs: z$1.ZodBoolean;
+    description: z$1.ZodString;
+    displayName: z$1.ZodString;
+    icon: z$1.ZodString;
+    id: z$1.ZodString;
+    inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
+    logoUrl: z$1.ZodNullable<z$1.ZodString>;
+    pluginId: z$1.ZodString;
+    supportsSuspend: z$1.ZodBoolean;
+}, z$1.core.$strip>;
+type SystemMachineProvider = z$1.infer<typeof systemMachineProviderSchema>;
 
 interface UiPreferencesResponse {
     preferences: UiPreferenceEntries;
@@ -11103,10 +11279,14 @@ declare const createThreadRequestSchema: z$1.ZodObject<{
     }, z$1.core.$strip>, z$1.ZodObject<{
         environmentProviderId: z$1.ZodString;
         inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
-        machine: z$1.ZodObject<{
+        machine: z$1.ZodOptional<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
             hostId: z$1.ZodString;
             type: z$1.ZodLiteral<"existing">;
-        }, z$1.core.$strip>;
+        }, z$1.core.$strip>, z$1.ZodObject<{
+            inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
+            machineProviderId: z$1.ZodString;
+            type: z$1.ZodLiteral<"new">;
+        }, z$1.core.$strip>], "type">>;
         type: z$1.ZodLiteral<"provider">;
     }, z$1.core.$strip>], "type">;
     executionInputSources: z$1.ZodOptional<z$1.ZodObject<{
@@ -11379,10 +11559,14 @@ declare const forkThreadRequestSchema: z$1.ZodObject<{
     }, z$1.core.$strip>, z$1.ZodObject<{
         environmentProviderId: z$1.ZodString;
         inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
-        machine: z$1.ZodObject<{
+        machine: z$1.ZodOptional<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
             hostId: z$1.ZodString;
             type: z$1.ZodLiteral<"existing">;
-        }, z$1.core.$strip>;
+        }, z$1.core.$strip>, z$1.ZodObject<{
+            inputs: z$1.ZodDefault<z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>>;
+            machineProviderId: z$1.ZodString;
+            type: z$1.ZodLiteral<"new">;
+        }, z$1.core.$strip>], "type">>;
         type: z$1.ZodLiteral<"provider">;
     }, z$1.core.$strip>], "type">>;
     input: z$1.ZodOptional<z$1.ZodArray<z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
@@ -12665,10 +12849,14 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
         environmentProviderInstanceKey: z$1.ZodNullable<z$1.ZodString>;
         environmentProviderSelection: z$1.ZodNullable<z$1.ZodObject<{
             inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
-            machine: z$1.ZodObject<{
+            machine: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
                 hostId: z$1.ZodString;
                 type: z$1.ZodLiteral<"existing">;
-            }, z$1.core.$strip>;
+            }, z$1.core.$strip>, z$1.ZodObject<{
+                inputs: z$1.ZodNullable<z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
+                machineProviderId: z$1.ZodString;
+                type: z$1.ZodLiteral<"new">;
+            }, z$1.core.$strip>], "type">;
         }, z$1.core.$strip>>;
         hostId: z$1.ZodString;
         id: z$1.ZodString;
@@ -12717,6 +12905,29 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
         id: z$1.ZodString;
         lastRejectedProtocolVersion: z$1.ZodNullable<z$1.ZodNumber>;
         lastSeenAt: z$1.ZodNullable<z$1.ZodNumber>;
+        lifecycle: z$1.ZodObject<{
+            message: z$1.ZodNullable<z$1.ZodString>;
+            pendingLog: z$1.ZodString;
+            phase: z$1.ZodEnum<{
+                active: "active";
+                creating: "creating";
+                destroyed: "destroyed";
+                removing: "removing";
+                resuming: "resuming";
+                suspended: "suspended";
+                suspending: "suspending";
+            }>;
+            suspendedAt: z$1.ZodNullable<z$1.ZodNumber>;
+            teardown: z$1.ZodNullable<z$1.ZodObject<{
+                attempt: z$1.ZodNumber;
+                status: z$1.ZodEnum<{
+                    failed: "failed";
+                    removed: "removed";
+                    running: "running";
+                }>;
+            }, z$1.core.$strip>>;
+        }, z$1.core.$strip>;
+        machineProviderId: z$1.ZodNullable<z$1.ZodString>;
         maxPermissionMode: z$1.ZodEnum<{
             "accept-edits": "accept-edits";
             auto: "auto";
@@ -12728,6 +12939,7 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
             disconnected: "disconnected";
         }>;
         type: z$1.ZodEnum<{
+            ephemeral: "ephemeral";
             persistent: "persistent";
         }>;
         updatedAt: z$1.ZodNumber;
@@ -14072,6 +14284,25 @@ declare const updateThreadTabsRequestSchema: z$1.ZodObject<{
 }, z$1.core.$strict>;
 type UpdateThreadTabsRequest = z$1.infer<typeof updateThreadTabsRequestSchema>;
 
+declare const machineEnvironmentListSchema: z$1.ZodObject<{
+    builtInGit: z$1.ZodObject<{
+        status: z$1.ZodEnum<{
+            "logged in": "logged in";
+            "not logged in": "not logged in";
+            disabled: "disabled";
+            overridden: "overridden";
+        }>;
+        statusMessage: z$1.ZodString;
+    }, z$1.core.$strip>;
+    variables: z$1.ZodArray<z$1.ZodObject<{
+        name: z$1.ZodString;
+        note: z$1.ZodNullable<z$1.ZodString>;
+        secret: z$1.ZodLiteral<true>;
+        value: z$1.ZodNull;
+    }, z$1.core.$strict>>;
+}, z$1.core.$strip>;
+type MachineEnvironmentList = z$1.infer<typeof machineEnvironmentListSchema>;
+
 /**
  * A value that survives a JSON round trip without coercion or data loss.
  *
@@ -14356,6 +14587,18 @@ interface PluginFileOpenerSource {
 interface PluginFileOpenerProps {
     path: string;
     source: PluginFileOpenerSource;
+    /**
+     * One-based, inclusive lines requested by the latest file open, or null when
+     * untargeted. BB supplies a new object for each targeted open, including an
+     * identical target in the active tab. Observe object identity to navigate
+     * again; keep the editor model intact. Older hosts may omit this prop.
+     *
+     * @experimental Audit navigation, remount, and persistence semantics before stabilizing.
+     */
+    experimental_lineRange?: {
+        startLineNumber: number;
+        endLineNumber: number;
+    } | null;
     /**
      * BB's file preview, bound to this file. Render it to delegate conditionally
      * without re-entering plugin replacement resolution.
@@ -15296,20 +15539,21 @@ interface PluginCommandPaletteActionRegistration {
     run(context: PluginCommandPaletteActionContext): void | Promise<void>;
 }
 /**
- * Supply the inline React mark bb draws for one agent provider.
+ * Supply an inline React mark for a provider. Agent, machine, and environment
+ * icon renderers select the mark by provider kind and id.
+ * Only surfaces using the provider icon renderer consult this slot. Persistent
+ * machine labels use a laptop glyph directly.
  *
- * A manifest `branding.icon` (or a provider's `logoUrl`) is fetched and drawn
- * through `<img>`, a separate document where `currentColor` resolves to black
- * — invisible on dark themes and unreachable from app CSS. A component is
- * rendered inline, so it inherits the app's theme colors and the host's sizing
- * classes. Register a static color logo as a file and a theme-aware mark here.
+ * Provider logo assets use a currentColor mask. Inline components can also
+ * render multiple colors and inherit the app's theme and sizing classes.
  *
- * The host passes only `className` (sizing plus the provider's color class);
+ * The host passes `className` for sizing; color inherits from its wrapper.
  * the component must render an inline SVG (or other inline markup) and must
- * not fetch. One registration per provider id per plugin; when two plugins
- * claim the same provider id the host keeps the first by plugin id and warns.
+ * not fetch. One registration per provider kind and id per plugin; when two
+ * plugins claim the same pair the host keeps the first by plugin id and warns.
  */
 interface PluginProviderIconRegistration {
+    providerKind: "agent" | "environment" | "machine";
     /**
      * The provider this mark is for — the id bb knows the provider by (the
      * provider declaration's id, e.g. `codex` or `acp-cursor`), not the plugin
@@ -15417,10 +15661,13 @@ interface PluginTimelineRendererRegistration {
 interface PluginEnvironmentProviderInputsProps {
     /** Project selected in the composer; null in projectless compose. */
     projectId: string | null;
-    /**
-     * The enrolled machine the selection names; null before one is picked.
-     */
-    hostId: string | null;
+    /** Whether setup uses an existing host or provisions a new host before create. */
+    target: {
+        kind: "existing-host";
+        hostId: string;
+    } | {
+        kind: "new-host";
+    };
     /**
      * The `inputs` value the selection will carry: null until `onChange`
      * supplies one.
@@ -15455,6 +15702,34 @@ interface PluginEnvironmentProviderInputsRegistration {
     environmentProviderId: string;
     component: ComponentType<PluginEnvironmentProviderInputsProps>;
 }
+/**
+ * Props passed to an `experimental_machineProviderInputs` component. Machine
+ * inputs are persisted and readable by every plugin, so they must contain only
+ * non-secret configuration and references to credentials held in plugin
+ * settings.
+ */
+interface PluginMachineProviderInputsProps {
+    /** The value persisted with the machine selection. */
+    value: JsonValue | null;
+    /** Replace the submitted value or block submission with a visible reason. */
+    onChange(next: PluginMachineProviderInputsChange): void;
+}
+type PluginMachineProviderInputsChange = {
+    status: "ready";
+    value: JsonValue;
+} | {
+    status: "blocked";
+    reason: string;
+};
+/**
+ * Supply the inputs control for one machine provider registered server-side
+ * through `bb.experimental_machines.register`.
+ */
+interface PluginMachineProviderInputsRegistration {
+    /** The machine provider id this control supplies inputs for. */
+    machineProviderId: string;
+    component: ComponentType<PluginMachineProviderInputsProps>;
+}
 interface PluginAppSlots {
     homepageSection(registration: PluginHomepageSectionRegistration): void;
     settingsSection(registration: PluginSettingsSectionRegistration): void;
@@ -15513,8 +15788,8 @@ interface PluginAppSlots {
      */
     commandPaletteAction(registration: PluginCommandPaletteActionRegistration): void;
     /**
-     * Draw one agent or environment provider's icon with an inline
-     * React component instead of its `<img>`-rendered logo file (see
+     * Draw one agent, environment, or machine provider's icon with an inline
+     * React component instead of its masked logo asset (see
      * {@link PluginProviderIconRegistration}). Experimental: see
      * docs/api_to_audit.md.
      */
@@ -15533,6 +15808,12 @@ interface PluginAppSlots {
      * see docs/api_to_audit.md.
      */
     experimental_environmentProviderInputs(registration: PluginEnvironmentProviderInputsRegistration): void;
+    /**
+     * Supply the non-secret machine inputs control rendered by machine creation
+     * surfaces (see {@link PluginMachineProviderInputsRegistration}).
+     * Experimental: see docs/api_to_audit.md.
+     */
+    experimental_machineProviderInputs(registration: PluginMachineProviderInputsRegistration): void;
 }
 interface PluginAppComposer {
     customize(registration: ComposerCustomization): void;
@@ -15580,7 +15861,63 @@ interface PluginContentScriptRegistration {
 interface PluginAppContentScripts {
     register(registration: PluginContentScriptRegistration): void;
 }
+interface ExperimentalIconProps {
+    name: string;
+    /** Used when the requested name is missing; defaults to the host Zap icon. */
+    fallback?: string;
+    className?: string;
+    style?: CSSProperties;
+    "aria-hidden"?: boolean | "false" | "true";
+    "aria-label"?: string;
+}
+/** Shared agent, machine, or environment artwork without fetching metadata. */
+interface ExperimentalProviderIconProps {
+    /** Keeps same-id agent, machine, and environment providers distinct. */
+    providerKind: PluginProviderIconRegistration["providerKind"];
+    /**
+     * Existing agent, machine, or environment provider record. Reads id, logoUrl, icon and
+     * strings.iconTint; other fields are ignored. An id-only record is sufficient
+     * when only frontend registrations and fallback are needed. Does not fetch.
+     */
+    provider: {
+        id: string;
+        logoUrl?: string | null;
+        /** Agent providers use { glyph }; machine and environment providers use a string. */
+        icon?: {
+            glyph: string;
+        } | string | null;
+        strings?: {
+            iconTint?: {
+                light: string;
+                dark: string;
+            } | null;
+        } | null;
+    };
+    /** Used when no artwork is available; defaults to Code. */
+    fallback?: string;
+    className?: string;
+    "aria-hidden"?: boolean | "false" | "true";
+    "aria-label"?: string;
+}
+interface ExperimentalIconRegistration {
+    /** Shared app name. Namespacing is recommended, but not required. */
+    name: string;
+    /** Inline artwork. Honor className for sizing; use currentColor for tint. */
+    component: ComponentType<{
+        className?: string;
+    }>;
+}
+interface ExperimentalAppIcons {
+    /**
+     * Add or override an app icon during setup. Returns nothing; the host
+     * replaces registrations on reload and removes them on unload. Duplicate
+     * names within a plugin reject setup. Between plugins, the first plugin id
+     * in lexical order wins, independent of bundle load order.
+     */
+    register(registration: ExperimentalIconRegistration): void;
+}
 interface PluginAppBuilder {
+    experimental_icons: ExperimentalAppIcons;
     slots: PluginAppSlots;
     composer: PluginAppComposer;
     contentScripts: PluginAppContentScripts;
@@ -16305,6 +16642,15 @@ interface BbNavigate {
  * shims the specifier to that object on `globalThis.__bbPluginRuntime`.
  */
 interface PluginSdkApp {
+    experimental_Icon: ComponentType<ExperimentalIconProps>;
+    /**
+     * Render provider slot override, then its logo, then its glyph, then fallback.
+     * Pass a record from agent, machine, or environment provider queries;
+     * an id-only record resolves frontend registrations, without fetching metadata.
+     * Updates on plugin load, reload and unload. Throwing or recursive overrides
+     * fall back to declared artwork. Logo assets render as currentColor masks.
+     */
+    experimental_ProviderIcon: ComponentType<ExperimentalProviderIconProps>;
     definePluginApp(setup: PluginAppSetup): PluginAppDefinition;
     useRpc<Contract extends PluginRpcContract = PluginRpcContract>(): PluginRpcClient<Contract>;
     useRealtime(channel: string, handler: (payload: unknown) => void): void;
@@ -16448,6 +16794,80 @@ interface PluginSdkApp {
     useComposerView(): ComposerView;
 }
 
+type PluginMachineProviderResource = Exclude<JsonValue$2, null>;
+type PluginMachineProviderInputsSchema = StandardSchemaV1$1 | undefined;
+type InputsValue$1<S> = S extends StandardSchemaV1$1 ? StandardSchemaV1InferOutput$1<S> : null;
+interface PluginMachineProviderProgress {
+    step(text: string): void;
+    log(text: string): void;
+}
+type PluginMachineProviderAvailability = {
+    status: "available";
+} | {
+    status: "setup-required";
+    message: string;
+} | {
+    status: "unavailable";
+    message: string;
+};
+type PluginMachineProviderValidateContext<S extends PluginMachineProviderInputsSchema = PluginMachineProviderInputsSchema> = {
+    inputs: InputsValue$1<S>;
+};
+interface PluginMachineProviderLifecycleContext {
+    checkpoint(resource: PluginMachineProviderResource): Promise<void>;
+    report: PluginMachineProviderProgress;
+    signal: AbortSignal;
+}
+type PluginMachineProviderCreateContext<S extends PluginMachineProviderInputsSchema = PluginMachineProviderInputsSchema> = PluginMachineProviderValidateContext<S> & PluginMachineProviderLifecycleContext & {
+    key: string;
+    attempt: number;
+};
+type PluginMachineProviderCreateResult = {
+    status: "created";
+    name: string;
+    resource: PluginMachineProviderResource;
+} | {
+    status: "failed";
+    message: string;
+};
+type PluginMachineProviderResourceLifecycleContext = PluginMachineProviderLifecycleContext & {
+    hostId: string;
+    resource: PluginMachineProviderResource;
+};
+type PluginMachineProviderRemoveContext = Omit<PluginMachineProviderResourceLifecycleContext, "checkpoint">;
+interface PluginMachineProviderResourceResult {
+    resource: PluginMachineProviderResource;
+}
+type PluginMachineProviderRemoveResult = {
+    status: "removed";
+} | {
+    status: "failed";
+    message: string;
+};
+interface PluginMachineProviderDefinition<S extends PluginMachineProviderInputsSchema = PluginMachineProviderInputsSchema> {
+    id: string;
+    displayName: string;
+    /** One line telling a user what choosing this provider gets them, shown wherever a machine is added. */
+    description: string;
+    /** Provider glyph, declared icon, or plugin-relative icon path. */
+    icon: string;
+    ephemeral?: boolean;
+    /** Persisted and readable by every plugin. Store secret references, never secrets. */
+    inputs?: S;
+    availability?(): PluginMachineProviderAvailability | Promise<PluginMachineProviderAvailability>;
+    validate?(context: PluginMachineProviderValidateContext<S>): PluginMachineValidateDecision$1 | Promise<PluginMachineValidateDecision$1>;
+    create(context: PluginMachineProviderCreateContext<S>): Promise<PluginMachineProviderCreateResult>;
+    /** Reconcile and remove an uncertain allocation by durable key without creating or bootstrapping. Return failed while allocation intent remains unresolved. */
+    reconcileCleanup(context: {
+        key: string;
+        report: PluginMachineProviderProgress;
+        signal: AbortSignal;
+    }): Promise<PluginMachineProviderRemoveResult>;
+    suspend?(context: PluginMachineProviderResourceLifecycleContext): Promise<PluginMachineProviderResourceResult>;
+    resume?(context: PluginMachineProviderResourceLifecycleContext): Promise<PluginMachineProviderResourceResult>;
+    remove(context: PluginMachineProviderRemoveContext): Promise<PluginMachineProviderRemoveResult>;
+}
+
 type PluginEnvironmentProviderInputsSchema = StandardSchemaV1$1 | undefined;
 type Fact<R, K extends PropertyKey, T> = R extends Record<K, true> ? T : T | null;
 type Checkout<R> = R extends {
@@ -16456,8 +16876,10 @@ type Checkout<R> = R extends {
     gitCheckout: true;
 } ? {
     path: string;
+    experimental_ownsPath: boolean;
 } : {
     path: string;
+    experimental_ownsPath: boolean;
 } | null;
 type InputsValue<S> = S extends StandardSchemaV1$1 ? StandardSchemaV1InferOutput$1<S> : null;
 /** Attempt-scoped updates; core persists each update before this call returns. */
@@ -16541,8 +16963,10 @@ interface PluginEnvironmentProviderPolicy {
 interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProviderRequirements$1 = PluginEnvironmentProviderRequirements$1, S extends PluginEnvironmentProviderInputsSchema = PluginEnvironmentProviderInputsSchema> {
     id: string;
     displayName: string;
+    /** Short explanation shown in environment choices. */
+    description: string;
     /** Host glyph, plugin-relative icon path, or this plugin’s declared namespaced icon. */
-    icon?: string;
+    icon: string;
     requires?: R;
     inputs?: S;
     policy?: Partial<PluginEnvironmentProviderPolicy>;
@@ -16553,6 +16977,30 @@ interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProvide
     remove(context: PluginEnvironmentProviderRemoveContext): Promise<PluginEnvironmentProviderRemoveResult>;
 }
 
+interface MachineExecutorRequest {
+    command: string[];
+    timeoutMs: number;
+    signal: AbortSignal;
+    stdin: string;
+    onOutput: (chunk: string) => void;
+}
+interface MachineExecutor {
+    exec(request: MachineExecutorRequest): Promise<{
+        exitCode: number;
+    }>;
+}
+interface MachineBootstrapRequest {
+    key: string;
+    executor: MachineExecutor;
+    report: PluginMachineProviderProgress;
+    signal: AbortSignal;
+}
+interface MachineBootstrapApi {
+    bootstrap(request: MachineBootstrapRequest): Promise<{
+        hostId: string;
+    }>;
+}
+
 interface ExperimentalDesktopBrowsersArea {
     listInstances(input: ExperimentalDesktopBrowserHostRequest): Promise<ExperimentalDesktopBrowserInstances>;
     listTabs(input: ExperimentalDesktopBrowserScope): Promise<ExperimentalDesktopBrowserTabs>;
@@ -16786,6 +17234,9 @@ interface HostUpdateArgs extends UpdateHostRequest {
 interface HostRetryUpdateArgs {
     hostId: string;
 }
+interface HostActionArgs {
+    hostId: string;
+}
 interface HostDirectoryArgs extends HostDirectoryQuery {
     hostId: string;
     signal?: AbortSignal;
@@ -16806,6 +17257,14 @@ interface HostProviderCliInstallArgs extends HostProviderCliInstallRequest {
     hostId: string;
 }
 interface HostListArgs {
+    includeCreating?: boolean;
+    signal?: AbortSignal;
+}
+interface MachineCreateArgs extends CreateMachineRequest {
+    wait?: boolean;
+    signal?: AbortSignal;
+}
+interface MachineProviderListArgs {
     signal?: AbortSignal;
 }
 type HostCreateJoinCodeResult = CreateHostJoinCodeResponse;
@@ -16813,7 +17272,10 @@ type HostDeleteResult = {
     ok: true;
 };
 type HostDirectoryResult = HostDirectoryListing;
-type HostGetResult = Host;
+type HostGetResult = Host & {
+    connectMachineId: string | null;
+};
+type HostEnrollmentCommandResult = HostEnrollmentCommandResponse;
 type HostCloneDefaultPathResult = HostCloneDefaultPathResponse;
 type HostProviderCliInstallResult = HostProviderCliInstallEvent[];
 type HostListResult = Host[];
@@ -16821,8 +17283,12 @@ type HostPathsExistResult = HostPathsExistResponse;
 type HostPickFolderResult = HostPickFolderResponse;
 type HostProviderCliStatusResult = HostProviderCliStatusResponse;
 type HostRetryUpdateResult = HostRetryUpdateResponse;
+type HostActionResult = HostActionResponse;
 type HostUpdateResult = Host;
+type MachineProviderListResult = SystemMachineProvider[];
 interface HostsArea {
+    experimental_create(args: MachineCreateArgs): Promise<Host>;
+    experimental_getEnrollmentCommand(args: HostGetArgs): Promise<HostEnrollmentCommandResult>;
     createJoinCode(): Promise<HostCreateJoinCodeResult>;
     delete(args: HostDeleteArgs): Promise<HostDeleteResult>;
     directory(args: HostDirectoryArgs): Promise<HostDirectoryResult>;
@@ -16830,10 +17296,14 @@ interface HostsArea {
     cloneDefaultPath(args: HostCloneDefaultPathArgs): Promise<HostCloneDefaultPathResult>;
     installProviderCli(args: HostProviderCliInstallArgs): Promise<HostProviderCliInstallResult>;
     list(args?: HostListArgs): Promise<HostListResult>;
+    experimental_listProviders(args?: MachineProviderListArgs): Promise<MachineProviderListResult>;
     pathsExist(args: HostPathsExistArgs): Promise<HostPathsExistResult>;
     pickFolder(args: HostPickFolderArgs): Promise<HostPickFolderResult>;
     providerCliStatus(args: HostGetArgs): Promise<HostProviderCliStatusResult>;
+    experimental_resume(args: HostActionArgs): Promise<Host>;
+    experimental_retryCleanup(args: HostActionArgs): Promise<HostActionResult>;
     retryUpdate(args: HostRetryUpdateArgs): Promise<HostRetryUpdateResult>;
+    experimental_suspend(args: HostActionArgs): Promise<Host>;
     update(args: HostUpdateArgs): Promise<HostUpdateResult>;
 }
 
@@ -17391,6 +17861,8 @@ interface SystemUiPreferencesArea {
     reset<Key extends UiPreferenceKey>(args: SystemResetUiPreferenceArgs<Key>): Promise<SystemUiPreferenceResult<Key>>;
 }
 interface SystemArea {
+    machineEnvironment(): Promise<MachineEnvironmentList>;
+    replaceMachineEnvironment(input: MachineEnvironmentReplace): Promise<MachineEnvironmentList>;
     attention(args?: SystemAttentionArgs): Promise<SystemAttentionResult>;
     config(args?: SystemConfigArgs): Promise<SystemConfigResult>;
     executionOptions(args?: SystemExecutionOptionsArgs): Promise<SystemExecutionOptionsResult>;
@@ -18220,6 +18692,15 @@ interface PluginTurnFailedEvent {
  * queued row GET /threads/:id/queued-messages serves.
  */
 interface PluginThreadEventPayloads {
+    /** Debounced per thread (at most once per second), with the latest sequence and current thread DTO. Reading history does not emit this event. */
+    "experimental_thread.events": {
+        thread: ThreadResponse;
+        sequence: number;
+    };
+    /** Real accepted terminal input; excludes output, keepalives and input contents. */
+    "experimental_terminal.input": {
+        terminal: TerminalSession;
+    };
     /** Fired after a thread row is created. */
     "thread.created": {
         thread: ThreadResponse;
@@ -18358,7 +18839,16 @@ interface PluginEnvironments {
      * Offer a place threads can run. Registering an id this plugin already
      * registered replaces it. Experimental: see docs/api_to_audit.md.
      */
-    register<const Requires extends PluginEnvironmentProviderRequirements, const Inputs extends PluginEnvironmentProviderInputsSchema = undefined>(declaration: PluginEnvironmentProviderDeclaration<Requires, Inputs>): void;
+    register<const Requires extends PluginEnvironmentProviderRequirements, const Inputs extends PluginEnvironmentProviderInputsSchema = undefined>(declaration: PluginEnvironmentProviderDeclaration<Requires, Inputs> | {
+        id: string;
+        displayName: string;
+        description: string;
+        icon: string;
+        machineProviderId: string;
+        environmentProviderId: string;
+        create?: never;
+        remove?: never;
+    }): void;
     /**
      * Ask core to re-ask this plugin's waiting providers now instead of at their
      * `sendAt`. Resolves on scheduling, exactly like
@@ -18366,6 +18856,56 @@ interface PluginEnvironments {
      */
     recheck(): Promise<void>;
 }
+type PluginMachineValidateDecision = {
+    action: "accept";
+} | {
+    action: "refuse";
+    message: string;
+};
+type PluginMachineProviderDeclaration<Inputs extends PluginMachineProviderInputsSchema = PluginMachineProviderInputsSchema> = PluginMachineProviderDefinition<Inputs>;
+interface ServerAccessGrant {
+    id: string;
+    serverUrl: string;
+    headers?: Record<string, string>;
+}
+interface ServerAccessProviderDeclaration {
+    id: string;
+    displayName: string;
+    description: string;
+    availability(): (PluginMachineProviderAvailability & {
+        serverUrl?: string;
+    }) | Promise<PluginMachineProviderAvailability & {
+        serverUrl?: string;
+    }>;
+    acquire(context: {
+        key: string;
+        hostId: string;
+        signal: AbortSignal;
+    }): Promise<ServerAccessGrant | {
+        status: "failed";
+        message: string;
+    }>;
+    release(context: {
+        key: string;
+        hostId: string;
+        /** Null when acquisition was interrupted before a grant was returned. Reconcile using key and hostId. */
+        grantId: string | null;
+    }): Promise<void>;
+}
+interface PluginServerAccess {
+    register(declaration: ServerAccessProviderDeclaration): void;
+    /**
+     * Notify connected clients that server access configuration changed.
+     * Call when access is gained or lost. Clients reload system configuration,
+     * which re-checks availability for Machines settings and creation banners.
+     */
+    recheck(): void;
+}
+interface PluginMachines extends MachineBootstrapApi {
+    /** Read core’s current persisted provider resource, or null when the host or resource is absent. Available across plugins; resources must not contain credentials. */
+    getResource(hostId: string): Promise<JsonValue | null>;
+    register<const Inputs extends PluginMachineProviderInputsSchema = undefined>(declaration: PluginMachineProviderDeclaration<Inputs>): void;
+}
 /**
  * Where a thread is going to run, as far as core knows at the checkpoint.
  * Before provisioning attaches an environment this is the start intent the
@@ -18382,6 +18922,10 @@ type PluginDispatchEnvironmentIntent = {
     machine: {
         type: "existing";
         hostId: string;
+    } | {
+        type: "new";
+        machineProviderId: string;
+        inputs: JsonValue | null;
     };
     inputs: JsonValue | null;
 };
@@ -19353,7 +19897,6 @@ interface ExperimentalPluginProviderEnvEntry {
         serverPath: string;
     };
     reason: string;
-    secret: boolean;
 }
 interface ExperimentalPluginProviderEnvHealthContext {
     hostId: string;
@@ -19578,6 +20121,9 @@ interface BbPluginApi {
      * docs/api_to_audit.md.
      */
     readonly experimental_environments: PluginEnvironments;
+    /** Machine providers provision execution machines. Experimental: see docs/api_to_audit.md. */
+    readonly experimental_machines: PluginMachines;
+    readonly experimental_serverAccess: PluginServerAccess;
     /** Plugin-reported status (needs-configuration). */
     readonly status: PluginStatusApi;
     /** Read-only facts about the running server (loopback base URL). */
@@ -19607,4 +20153,4 @@ interface BbPluginApi {
 }
 
 export { PLUGIN_CLI_OUTPUT_MAX_BYTES, defineRpcContract, experimental_defineHostEntry };
-export type { BbContext, BbNavigate, BbPluginApi, BranchPickerProps, BranchesState, CheckoutState, CodeOverflowMode, ComposerCustomization, ComposerPlusMenuItem, ComposerRichTextSpec, ComposerStructuredDraft, ComposerView, DiffProps, DiffViewMode, ExperimentalAppOverlayProps, ExperimentalAppOverlayRegistration, ExperimentalAppPanel, ExperimentalAppPanelSurface, ExperimentalComposerSubmitOptions, ExperimentalDesktopBrowserAcquireInput, ExperimentalDesktopBrowserCreateInput, ExperimentalDesktopBrowserLease, ExperimentalDesktopBrowserScope, ExperimentalDesktopBrowsersArea, ExperimentalDiffFileContent, ExperimentalDiffFullFileContents, ExperimentalFileLinkProps, ExperimentalFileLocation, ExperimentalFileOpenOptions, ExperimentalFixedTabTargetContract, ExperimentalFixedTabTargetState, ExperimentalHostCallOptions, ExperimentalHostClient, ExperimentalHostEntry, ExperimentalHostPaths, ExperimentalHostRpcContext, ExperimentalHostRpcHandlers, ExperimentalHostSignalContract, ExperimentalHostSignalEvent, ExperimentalHostSignals, ExperimentalHostWatchChange, ExperimentalHostWatchChangeType, ExperimentalHostWatchEvent, ExperimentalHostWatchListener, ExperimentalHostWatchOptions, ExperimentalHostWatchSubscription, ExperimentalHostWorkerLease, ExperimentalLiveFileTarget, ExperimentalOpenFixedTabOptions, ExperimentalPermissionModePickerProps, ExperimentalPluginFixedTabReference, ExperimentalPluginProviderEnvContext, ExperimentalPluginProviderEnvEntry, ExperimentalPluginProviderEnvHealth, ExperimentalPluginProviderEnvHealthContext, ExperimentalPluginWebSocket, ExperimentalPluginWebSocketContext, ExperimentalPluginWebSocketHandler, ExperimentalPluginWebSocketHandlers, ExperimentalProviderModelPickerProps, ExperimentalProviderModelPickerRouting, ExperimentalProviderModelPickerValue, ExperimentalSidebarFooter, ExperimentalSidebarFooterActionContext, ExperimentalSidebarFooterActionRegistration, ExperimentalSidebarFooterDisclosureController, ExperimentalSidebarFooterDisclosureProps, ExperimentalSidebarFooterDisclosureRegistration, ExperimentalSidebarFooterItemBase, ExperimentalSidebarFooterItemRegistration, ExperimentalSidebarNavigationAction, ExperimentalSidebarNavigationActivationOptions, ExperimentalSidebarNavigationIcon, ExperimentalSidebarNavigationItem, ExperimentalSidebarNavigationProps, ExperimentalSidebarNavigationRegistration, ExperimentalSidebarNavigationShortcut, JsonValue, MarkdownProps, MessageDispatchHookContext, MessageDispatchHookDecision, NewThreadComposerProps, NewThreadRequest, PluginAgentConfiguration, PluginAgentConfigurationContext, PluginAgentToolContentPart, PluginAgentToolContext, PluginAgentToolLabels, PluginAgentToolPresentation, PluginAgentToolRegistrationBase, PluginAgentToolResult, PluginAgentToolSelection, PluginAgents, PluginAiServiceDeclaration, PluginAiServiceKind, PluginAiServices, PluginAppBuilder, PluginAppComposer, PluginAppContentScripts, PluginAppDefinition, PluginAppSetup, PluginAppSlots, PluginBackground, PluginCli, PluginCliCommandInfo, PluginCliContext, PluginCliExecutionResult, PluginCliOutputLimitError, PluginCliRegistration, PluginCliResult, PluginCodeThemeData, PluginCodeThemeState, PluginCodeThemeTokenRule, PluginCommandPaletteActionContext, PluginCommandPaletteActionRegistration, PluginComposerApi, PluginComposerMention, PluginComposerScope, PluginComposerTextEffect, PluginComposerThreadRowStatus, PluginContentScriptContext, PluginContentScriptDisposer, PluginContentScriptRegistration, PluginDiffRendererProps, PluginDiffRendererRegistration, PluginDispatchAttemptKind, PluginDispatchEnvironmentIntent, PluginDispatchExecution, PluginDispatchExecutionSources, PluginDispatchInput, PluginEnvironmentProviderDeclaration, PluginEnvironmentProviderInputsChange, PluginEnvironmentProviderInputsProps, PluginEnvironmentProviderInputsRegistration, PluginEnvironmentProviderRequirements, PluginEnvironmentValidateDecision, PluginEnvironments, PluginEvents, PluginFileOpenerProps, PluginFileOpenerRegistration, PluginFileOpenerSource, PluginFixedTabDeclaration, PluginFixedTabRegistration, PluginHomepageSectionProps, PluginHomepageSectionRegistration, PluginHookHandler, PluginHookName, PluginHookSignatures, PluginHooks, PluginHosts, PluginHttp, PluginHttpAuthMode, PluginHttpHandler, PluginInteractionCancelReason, PluginInteractionRequest, PluginInteractionResult, PluginKvStorage, PluginLogger, PluginMentionItem, PluginMentionProviderRegistration, PluginMentionSearchContext, PluginMentionTrigger, PluginMessageActionContext, PluginMessageActionRegistration, PluginMessageDirectiveMessage, PluginMessageDirectiveOpenWorkspaceFile, PluginMessageDirectiveProps, PluginMessageDirectiveRegistration, PluginNavPanelProps, PluginNavPanelRegistration, PluginNewThreadPanelActionContext, PluginNewThreadPanelActionRegistration, PluginNewThreadPanelProps, PluginPanelActionOpenOptions, PluginPendingInteractionProps, PluginPendingInteractionRegistration, PluginPendingInteractionView, PluginProviderCapabilities, PluginProviderComposerAction, PluginProviderDeclaration, PluginProviderExtensionKindDeclaration, PluginProviderFallbackModel, PluginProviderIconRegistration, PluginProviderMaintenance, PluginProviderModelCatalogScope, PluginProviderNativeRootEntry, PluginProviderNativeRoots, PluginProviderOptionDescriptor, PluginProviderOptionsContext, PluginProviderPermissionMode, PluginProviderReasoningLevel, PluginProviderStrings, PluginProviders, PluginProvidersState, PluginRealtime, PluginRealtimeConnectionState, PluginRpc, PluginRpcCallArgs, PluginRpcClient, PluginRpcContract, PluginRpcError, PluginRpcErrorCode, PluginRpcHandlers, PluginRpcIssuePathSegment, PluginRpcMethodContract, PluginRpcResult, PluginRpcValidationIssue, PluginSdkApp, PluginServerApi, PluginSettingDescriptor, PluginSettingDescriptors, PluginSettingValue, PluginSettings, PluginSettingsHandle, PluginSettingsSectionProps, PluginSettingsSectionRegistration, PluginSettingsState, PluginSettingsValues, PluginSharedPortTunnelIdentity, PluginSidebarFooterActionContext, PluginSidebarFooterActionProps, PluginSidebarFooterActionRegistration, PluginSidebarProject, PluginSidebarPullRequest, PluginSidebarSplitPane, PluginSidebarThread, PluginSidebarThreadActions, PluginSidebarThreadActivity, PluginSidebarThreadIndicator, PluginSidebarThreadPullRequestState, PluginSidebarThreadSplit, PluginSidebarThreadsState, PluginSourceCodeRendererProps, PluginSourceCodeRendererRegistration, PluginStatusApi, PluginStorage, PluginTargetedPanelActionOpenOptions, PluginThreadEventHandler, PluginThreadEventName, PluginThreadEventPayloads, PluginThreadHeaderActionProps, PluginThreadHeaderActionRegistration, PluginThreadListProps, PluginThreadListRegistration, PluginThreadPanelActionContext, PluginThreadPanelActionRegistration, PluginThreadPanelProps, PluginTimelineRendererProps, PluginTimelineRendererRegistration, PluginTimelineRendererRow, PluginTimelineRowPresentation, PluginTimelineRowStatus, PluginTurnFailedEvent, PluginUi, SourceCodeLineRange, SourceCodeProps, StandardSchemaV1, StandardSchemaV1InferInput, StandardSchemaV1InferOutput, StandardSchemaV1Issue, StandardSchemaV1Result, ThreadChatMessageAction, ThreadChatMessageReference, ThreadChatProps, UrlLinkProps, UseBranchesArgs, UseCheckoutStateArgs };
+export type { BbContext, BbNavigate, BbPluginApi, BranchPickerProps, BranchesState, CheckoutState, CodeOverflowMode, ComposerCustomization, ComposerPlusMenuItem, ComposerRichTextSpec, ComposerStructuredDraft, ComposerView, DiffProps, DiffViewMode, ExperimentalAppIcons, ExperimentalAppOverlayProps, ExperimentalAppOverlayRegistration, ExperimentalAppPanel, ExperimentalAppPanelSurface, ExperimentalComposerSubmitOptions, ExperimentalDesktopBrowserAcquireInput, ExperimentalDesktopBrowserCreateInput, ExperimentalDesktopBrowserLease, ExperimentalDesktopBrowserScope, ExperimentalDesktopBrowsersArea, ExperimentalDiffFileContent, ExperimentalDiffFullFileContents, ExperimentalFileLinkProps, ExperimentalFileLocation, ExperimentalFileOpenOptions, ExperimentalFixedTabTargetContract, ExperimentalFixedTabTargetState, ExperimentalHostCallOptions, ExperimentalHostClient, ExperimentalHostEntry, ExperimentalHostPaths, ExperimentalHostRpcContext, ExperimentalHostRpcHandlers, ExperimentalHostSignalContract, ExperimentalHostSignalEvent, ExperimentalHostSignals, ExperimentalHostWatchChange, ExperimentalHostWatchChangeType, ExperimentalHostWatchEvent, ExperimentalHostWatchListener, ExperimentalHostWatchOptions, ExperimentalHostWatchSubscription, ExperimentalHostWorkerLease, ExperimentalIconProps, ExperimentalIconRegistration, ExperimentalLiveFileTarget, ExperimentalOpenFixedTabOptions, ExperimentalPermissionModePickerProps, ExperimentalPluginFixedTabReference, ExperimentalPluginProviderEnvContext, ExperimentalPluginProviderEnvEntry, ExperimentalPluginProviderEnvHealth, ExperimentalPluginProviderEnvHealthContext, ExperimentalPluginWebSocket, ExperimentalPluginWebSocketContext, ExperimentalPluginWebSocketHandler, ExperimentalPluginWebSocketHandlers, ExperimentalProviderIconProps, ExperimentalProviderModelPickerProps, ExperimentalProviderModelPickerRouting, ExperimentalProviderModelPickerValue, ExperimentalSidebarFooter, ExperimentalSidebarFooterActionContext, ExperimentalSidebarFooterActionRegistration, ExperimentalSidebarFooterDisclosureController, ExperimentalSidebarFooterDisclosureProps, ExperimentalSidebarFooterDisclosureRegistration, ExperimentalSidebarFooterItemBase, ExperimentalSidebarFooterItemRegistration, ExperimentalSidebarNavigationAction, ExperimentalSidebarNavigationActivationOptions, ExperimentalSidebarNavigationIcon, ExperimentalSidebarNavigationItem, ExperimentalSidebarNavigationProps, ExperimentalSidebarNavigationRegistration, ExperimentalSidebarNavigationShortcut, JsonValue, MachineBootstrapApi, MachineBootstrapRequest, MachineExecutor, MachineExecutorRequest, MarkdownProps, MessageDispatchHookContext, MessageDispatchHookDecision, NewThreadComposerProps, NewThreadRequest, PluginAgentConfiguration, PluginAgentConfigurationContext, PluginAgentToolContentPart, PluginAgentToolContext, PluginAgentToolLabels, PluginAgentToolPresentation, PluginAgentToolRegistrationBase, PluginAgentToolResult, PluginAgentToolSelection, PluginAgents, PluginAiServiceDeclaration, PluginAiServiceKind, PluginAiServices, PluginAppBuilder, PluginAppComposer, PluginAppContentScripts, PluginAppDefinition, PluginAppSetup, PluginAppSlots, PluginBackground, PluginCli, PluginCliCommandInfo, PluginCliContext, PluginCliExecutionResult, PluginCliOutputLimitError, PluginCliRegistration, PluginCliResult, PluginCodeThemeData, PluginCodeThemeState, PluginCodeThemeTokenRule, PluginCommandPaletteActionContext, PluginCommandPaletteActionRegistration, PluginComposerApi, PluginComposerMention, PluginComposerScope, PluginComposerTextEffect, PluginComposerThreadRowStatus, PluginContentScriptContext, PluginContentScriptDisposer, PluginContentScriptRegistration, PluginDiffRendererProps, PluginDiffRendererRegistration, PluginDispatchAttemptKind, PluginDispatchEnvironmentIntent, PluginDispatchExecution, PluginDispatchExecutionSources, PluginDispatchInput, PluginEnvironmentProviderDeclaration, PluginEnvironmentProviderInputsChange, PluginEnvironmentProviderInputsProps, PluginEnvironmentProviderInputsRegistration, PluginEnvironmentProviderRequirements, PluginEnvironmentValidateDecision, PluginEnvironments, PluginEvents, PluginFileOpenerProps, PluginFileOpenerRegistration, PluginFileOpenerSource, PluginFixedTabDeclaration, PluginFixedTabRegistration, PluginHomepageSectionProps, PluginHomepageSectionRegistration, PluginHookHandler, PluginHookName, PluginHookSignatures, PluginHooks, PluginHosts, PluginHttp, PluginHttpAuthMode, PluginHttpHandler, PluginInteractionCancelReason, PluginInteractionRequest, PluginInteractionResult, PluginKvStorage, PluginLogger, PluginMachineProviderDeclaration, PluginMachineProviderInputsChange, PluginMachineProviderInputsProps, PluginMachineProviderInputsRegistration, PluginMachineValidateDecision, PluginMachines, PluginMentionItem, PluginMentionProviderRegistration, PluginMentionSearchContext, PluginMentionTrigger, PluginMessageActionContext, PluginMessageActionRegistration, PluginMessageDirectiveMessage, PluginMessageDirectiveOpenWorkspaceFile, PluginMessageDirectiveProps, PluginMessageDirectiveRegistration, PluginNavPanelProps, PluginNavPanelRegistration, PluginNewThreadPanelActionContext, PluginNewThreadPanelActionRegistration, PluginNewThreadPanelProps, PluginPanelActionOpenOptions, PluginPendingInteractionProps, PluginPendingInteractionRegistration, PluginPendingInteractionView, PluginProviderCapabilities, PluginProviderComposerAction, PluginProviderDeclaration, PluginProviderExtensionKindDeclaration, PluginProviderFallbackModel, PluginProviderIconRegistration, PluginProviderMaintenance, PluginProviderModelCatalogScope, PluginProviderNativeRootEntry, PluginProviderNativeRoots, PluginProviderOptionDescriptor, PluginProviderOptionsContext, PluginProviderPermissionMode, PluginProviderReasoningLevel, PluginProviderStrings, PluginProviders, PluginProvidersState, PluginRealtime, PluginRealtimeConnectionState, PluginRpc, PluginRpcCallArgs, PluginRpcClient, PluginRpcContract, PluginRpcError, PluginRpcErrorCode, PluginRpcHandlers, PluginRpcIssuePathSegment, PluginRpcMethodContract, PluginRpcResult, PluginRpcValidationIssue, PluginSdkApp, PluginServerAccess, PluginServerApi, PluginSettingDescriptor, PluginSettingDescriptors, PluginSettingValue, PluginSettings, PluginSettingsHandle, PluginSettingsSectionProps, PluginSettingsSectionRegistration, PluginSettingsState, PluginSettingsValues, PluginSharedPortTunnelIdentity, PluginSidebarFooterActionContext, PluginSidebarFooterActionProps, PluginSidebarFooterActionRegistration, PluginSidebarProject, PluginSidebarPullRequest, PluginSidebarSplitPane, PluginSidebarThread, PluginSidebarThreadActions, PluginSidebarThreadActivity, PluginSidebarThreadIndicator, PluginSidebarThreadPullRequestState, PluginSidebarThreadSplit, PluginSidebarThreadsState, PluginSourceCodeRendererProps, PluginSourceCodeRendererRegistration, PluginStatusApi, PluginStorage, PluginTargetedPanelActionOpenOptions, PluginThreadEventHandler, PluginThreadEventName, PluginThreadEventPayloads, PluginThreadHeaderActionProps, PluginThreadHeaderActionRegistration, PluginThreadListProps, PluginThreadListRegistration, PluginThreadPanelActionContext, PluginThreadPanelActionRegistration, PluginThreadPanelProps, PluginTimelineRendererProps, PluginTimelineRendererRegistration, PluginTimelineRendererRow, PluginTimelineRowPresentation, PluginTimelineRowStatus, PluginTurnFailedEvent, PluginUi, ServerAccessGrant, ServerAccessProviderDeclaration, SourceCodeLineRange, SourceCodeProps, StandardSchemaV1, StandardSchemaV1InferInput, StandardSchemaV1InferOutput, StandardSchemaV1Issue, StandardSchemaV1Result, ThreadChatMessageAction, ThreadChatMessageReference, ThreadChatProps, UrlLinkProps, UseBranchesArgs, UseCheckoutStateArgs };