@get-bb/plugin-sdk 0.5.24 → 0.5.29

package/bundled-types/bb-plugin-sdk-app.d.ts

@@ -248,6 +248,8 @@ declare const appKeybindingOverridesSchema: z$1.ZodArray<z$1.ZodObject<{
         "panel.previousTab": "panel.previousTab";
         "panel.reopenClosedTab": "panel.reopenClosedTab";
         "panel.toggle": "panel.toggle";
+        "plugins.enterSafeMode": "plugins.enterSafeMode";
+        "plugins.exitSafeMode": "plugins.exitSafeMode";
         "question.select.1": "question.select.1";
         "question.select.2": "question.select.2";
         "question.select.3": "question.select.3";
@@ -476,6 +478,12 @@ declare const environmentSchema: z$1.ZodObject<{
         }, z$1.core.$strip>], "type">;
     }, z$1.core.$strip>>;
     hostId: z$1.ZodString;
+    hostLifecycle: z$1.ZodEnum<{
+        "cleanup-failed": "cleanup-failed";
+        active: "active";
+        removed: "removed";
+        removing: "removing";
+    }>;
     id: z$1.ZodString;
     isGitRepo: z$1.ZodBoolean;
     isWorktree: z$1.ZodBoolean;
@@ -520,6 +528,7 @@ type Environment = z$1.infer<typeof environmentSchema>;
 
 declare const experimentsSchema: z$1.ZodRecord<z$1.ZodEnum<{
     changelogPreview: "changelogPreview";
+    legacyJitiPluginLoader: "legacyJitiPluginLoader";
     mobileApp: "mobileApp";
     serverMove: "serverMove";
     sidebarProgressiveDisclosure: "sidebarProgressiveDisclosure";
@@ -547,6 +556,11 @@ declare const workspaceGitOperationSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObj
 }, z$1.core.$strip>], "kind">;
 type WorkspaceGitOperation = z$1.infer<typeof workspaceGitOperationSchema>;
 
+declare const hostTypeSchema: z$1.ZodEnum<{
+    ephemeral: "ephemeral";
+    persistent: "persistent";
+}>;
+type HostType = z$1.infer<typeof hostTypeSchema>;
 declare const hostSchema: z$1.ZodObject<{
     createdAt: z$1.ZodNumber;
     id: z$1.ZodString;
@@ -3092,6 +3106,7 @@ declare const threadEventSchema: z$1.ZodPipe<z$1.ZodUnknown, z$1.ZodUnion<readon
     cause: z$1.ZodOptional<z$1.ZodLiteral<"host-connection-lost">>;
     reason: z$1.ZodEnum<{
         "host-daemon-restarted": "host-daemon-restarted";
+        "host-removed": "host-removed";
         "manual-stop": "manual-stop";
         "provider-turn-idle": "provider-turn-idle";
     }>;
@@ -7799,6 +7814,22 @@ declare const hostDaemonCommandRegistry: {
         sha256: z$1.ZodString;
         sizeBytes: z$1.ZodNumber;
     }, z$1.core.$strip>]>, "onlineRpc", true>;
+    "host.read_file_chunk": HostDaemonCommandDescriptor<"host.read_file_chunk", z$1.ZodObject<{
+        length: z$1.ZodNumber;
+        offset: z$1.ZodNumber;
+        path: z$1.ZodString;
+        revision: z$1.ZodNullable<z$1.ZodString>;
+        rootPath: z$1.ZodString;
+        type: z$1.ZodLiteral<"host.read_file_chunk">;
+    }, z$1.core.$strict>, z$1.ZodObject<{
+        content: z$1.ZodString;
+        mimeType: z$1.ZodNullable<z$1.ZodString>;
+        modifiedAtMs: z$1.ZodNumber;
+        offset: z$1.ZodNumber;
+        path: z$1.ZodString;
+        revision: z$1.ZodString;
+        sizeBytes: z$1.ZodNumber;
+    }, z$1.core.$strict>, "onlineRpc", true>;
     "host.read_file_relative": HostDaemonCommandDescriptor<"host.read_file_relative", z$1.ZodObject<{
         dotfiles: z$1.ZodEnum<{
             allow: "allow";
@@ -9462,6 +9493,15 @@ declare const pluginSettingsResponseSchema: z$1.ZodObject<{
     values: z$1.ZodRecord<z$1.ZodString, z$1.ZodType<JsonValue, unknown, z$1.core.$ZodTypeInternals<JsonValue, unknown>>>;
 }, z$1.core.$strip>;
 type PluginSettingsResponse = z$1.infer<typeof pluginSettingsResponseSchema>;
+declare const pluginSafeModeResponseSchema: z$1.ZodObject<{
+    enabled: z$1.ZodBoolean;
+}, z$1.core.$strip>;
+type PluginSafeModeResponse = z$1.infer<typeof pluginSafeModeResponseSchema>;
+declare const pluginSafeModeUpdateResponseSchema: z$1.ZodObject<{
+    enabled: z$1.ZodBoolean;
+    problems: z$1.ZodArray<z$1.ZodString>;
+}, z$1.core.$strip>;
+type PluginSafeModeUpdateResponse = z$1.infer<typeof pluginSafeModeUpdateResponseSchema>;
 declare const pluginTokenResponseSchema: z$1.ZodObject<{
     ok: z$1.ZodLiteral<true>;
     token: z$1.ZodString;
@@ -10017,6 +10057,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -10089,6 +10131,7 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
     }, z$1.core.$strict>>;
     experiments: z$1.ZodRecord<z$1.ZodEnum<{
         changelogPreview: "changelogPreview";
+        legacyJitiPluginLoader: "legacyJitiPluginLoader";
         mobileApp: "mobileApp";
         serverMove: "serverMove";
         sidebarProgressiveDisclosure: "sidebarProgressiveDisclosure";
@@ -10160,6 +10203,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -10245,6 +10290,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -13440,6 +13487,7 @@ type ThreadSearchResponse = z$1.infer<typeof threadSearchResponseSchema>;
 declare const threadResponseSchema: z$1.ZodObject<{
     activeBackgroundAgentCount: z$1.ZodNumber;
     archivedAt: z$1.ZodNullable<z$1.ZodNumber>;
+    canRestoreEnvironment: z$1.ZodBoolean;
     canSpawnChild: z$1.ZodBoolean;
     createdAt: z$1.ZodNumber;
     deletedAt: z$1.ZodNullable<z$1.ZodNumber>;
@@ -13498,6 +13546,7 @@ type ThreadPluginMetadataResponse = z$1.infer<typeof pluginMetadataSchema>;
 declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
     activeBackgroundAgentCount: z$1.ZodNumber;
     archivedAt: z$1.ZodNullable<z$1.ZodNumber>;
+    canRestoreEnvironment: z$1.ZodBoolean;
     canSpawnChild: z$1.ZodBoolean;
     createdAt: z$1.ZodNumber;
     deletedAt: z$1.ZodNullable<z$1.ZodNumber>;
@@ -13520,6 +13569,12 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
             }, z$1.core.$strip>], "type">;
         }, z$1.core.$strip>>;
         hostId: z$1.ZodString;
+        hostLifecycle: z$1.ZodEnum<{
+            "cleanup-failed": "cleanup-failed";
+            active: "active";
+            removed: "removed";
+            removing: "removing";
+        }>;
         id: z$1.ZodString;
         isGitRepo: z$1.ZodBoolean;
         isWorktree: z$1.ZodBoolean;
@@ -13560,6 +13615,7 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
             unmanaged: "unmanaged";
         }>>;
     }, z$1.core.$strip>>>;
+    environmentHostName: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
     environmentId: z$1.ZodNullable<z$1.ZodString>;
     host: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodObject<{
         createdAt: z$1.ZodNumber;
@@ -14173,6 +14229,7 @@ declare const threadListQuerySchema: z$1.ZodObject<{
         false: "false";
         true: "true";
     }>>;
+    hostId: z$1.ZodOptional<z$1.ZodString>;
     includeHidden: z$1.ZodOptional<z$1.ZodEnum<{
         false: "false";
         true: "true";
@@ -15481,6 +15538,7 @@ interface HostProviderCliInstallArgs extends HostProviderCliInstallRequest {
 }
 interface HostListArgs {
     includeCreating?: boolean;
+    type?: HostType;
     signal?: AbortSignal;
 }
 interface MachineCreateArgs extends CreateMachineRequest {
@@ -15821,6 +15879,12 @@ interface PluginListArgs {
 interface PluginListUpdateResultsArgs {
     signal?: AbortSignal;
 }
+interface PluginGetSafeModeArgs {
+    signal?: AbortSignal;
+}
+interface PluginSetSafeModeArgs {
+    enabled: boolean;
+}
 type PluginDisableResult = InstalledPlugin;
 type PluginEnableResult = InstalledPlugin;
 type PluginGetSettingsResult = PluginSettingsResponse;
@@ -15828,6 +15892,8 @@ type PluginInstallResult = InstalledPlugin;
 type PluginListResult = PluginListResponse;
 type PluginReloadResult = PluginReloadResponse;
 type PluginRemoveResult = PluginRemoveResponse;
+type PluginSafeModeResult = PluginSafeModeResponse;
+type PluginSetSafeModeResult = PluginSafeModeUpdateResponse;
 type PluginTokenResult = PluginTokenResponse;
 type PluginUpdateSettingsResult = PluginSettingsResponse;
 type PluginGetSourceResult = PluginSourceDetail;
@@ -15856,6 +15922,8 @@ interface PluginMarketplacesArea {
 }
 interface PluginsArea {
     experimental_discoverRpc(args?: PluginRpcDiscoveryQuery): Promise<PublishedPluginRpcMethod[]>;
+    experimental_getSafeMode(args?: PluginGetSafeModeArgs): Promise<PluginSafeModeResult>;
+    experimental_setSafeMode(args: PluginSetSafeModeArgs): Promise<PluginSetSafeModeResult>;
     applyUpdate(args: PluginIdArgs): Promise<PluginApplyUpdateResult>;
     callRpc<TOutput>(args: PluginRpcArgs<TOutput>): Promise<TOutput>;
     checkUpdates(args?: PluginCheckUpdatesArgs): Promise<PluginCheckUpdatesResult>;
@@ -16259,6 +16327,7 @@ interface TerminalsArea {
 interface ThreadListArgs {
     archived?: boolean;
     environmentId?: string;
+    hostId?: string;
     sectionId?: string;
     hasParent?: boolean;
     includeHidden?: boolean;
@@ -16370,6 +16439,7 @@ type ThreadUnarchiveResult = {
 };
 type ThreadArchiveAllResult = ThreadArchiveAllResponse;
 type ThreadReadStateResult = ThreadResponse;
+type ThreadRestoreEnvironmentResult = ThreadResponse;
 type ThreadPinOrderResult = ThreadListResponse;
 type ThreadPromptHistoryResult = PromptHistoryResponse;
 type ThreadQueuedMessagesResult = ThreadQueuedMessageListResponse;
@@ -16662,6 +16732,14 @@ interface ThreadsArea {
      * `sendAt` in the future queues it on the clock and a `message.dispatch` hook
      * can still hold it; the response says which of the two happened.
      */
+    /**
+     * Ask the environment provider to restore the destroyed workspace of a
+     * thread and attach it; the provider decides what restoring means, such as
+     * checking the recorded branch out again. Sends fail until this runs. Starts
+     * no turn: the thread settles back to `idle` once the workspace is ready.
+     * Refused unless the thread's `canRestoreEnvironment` is true.
+     */
+    restoreEnvironment(args: ThreadActionArgs): Promise<ThreadRestoreEnvironmentResult>;
     retry(args: ThreadRetryArgs): Promise<ThreadRetryResult>;
     search(args: ThreadSearchArgs): Promise<ThreadSearchResult>;
     send(args: ThreadSendArgs): Promise<ThreadSendResult>;
@@ -17817,6 +17895,10 @@ interface PluginSidebarThreadsState {
     } | null;
     status: "error" | "loading" | "ready";
     threads: readonly PluginSidebarThread[];
+    experimental_hosts?: readonly {
+        id: string;
+        name: string;
+    }[];
     projects: readonly PluginSidebarProject[];
     /** Every section, in the server's order (creation order). */
     sections: readonly PluginSidebarSection[];
@@ -17982,11 +18064,15 @@ interface PluginSidebarThreadActions {
      * `sectionId` files the new thread under that section, and
      * `environmentId` reuses that environment (the "New thread in
      * environment" affordance), both exactly as bb's own list does.
+     * `hostId` selects a machine for a new environment when it
+     * is known and supports an environment provider. `environmentId` wins when
+     * both are supplied.
      */
     openNewThread(options?: {
         projectId?: string;
         sectionId?: string;
         environmentId?: string;
+        hostId?: string;
         focusPrompt?: boolean;
     }): void;
     setPinned(threadId: string, pinned: boolean): Promise<void>;
@@ -18104,12 +18190,13 @@ interface PluginSidebarThreadSplit {
  * Replace the sidebar's thread list with a plugin component.
  *
  * Unlike every other slot, this one is EXCLUSIVE: two lists cannot share one
- * scroll area. Registering activates the replacement while the plugin is
- * enabled. If multiple plugins register one, the first in deterministic slot
- * order is active by default; removing it reveals the next. The user can pin
- * BB's list or a specific provider under Settings → Appearance. A plugin can
- * also use its own setting and render `Original` conditionally.
- * An absent or crashing replacement falls back to BB's list rather than
+ * scroll area. bb ships its own list as the bundled Thread list plugin
+ * (`thread-list/thread-list`). Registering activates the replacement while the
+ * plugin is enabled: by default the first registered list other than the
+ * bundled one, in deterministic slot order, is active, falling back to the
+ * bundled list; removing it reveals the next. The user can pin a specific
+ * provider, including the bundled one, under Settings → Appearance → Sidebar.
+ * A missing pinned provider or a crashing list shows a placeholder rather than
  * leaving the user with no sidebar.
  *
  * The plugin gets the scrolling list and nothing else. The New-thread button,
@@ -18128,11 +18215,12 @@ interface PluginThreadListRegistration {
 }
 /**
  * Replace the navigation controls above the sidebar thread list. Exclusive:
- * the user picks one provider under Settings → Appearance → Navigation, and
  * bb ships its own rows as the bundled Navigation plugin
- * (`navigation/navigation`, the default). A picked provider that is disabled
- * or removed falls back to Navigation; a crashing provider is replaced by a
- * placeholder with a Reload button.
+ * (`navigation/navigation`). By default the first registered provider other
+ * than Navigation is active, falling back to Navigation; the user can pin one
+ * provider under Settings → Appearance → Navigation. A pinned provider that is
+ * disabled or removed falls back to Navigation; a crashing provider is
+ * replaced by a placeholder with a Reload button.
  */
 interface ExperimentalSidebarNavigationRegistration {
     /** Unique within the plugin; letters, digits, `-`, `_`. */

package/bundled-types/bb-plugin-sdk-environment-provider.d.ts

@@ -32,6 +32,12 @@ declare const environmentSchema: z.ZodObject<{
         }, z.core.$strip>], "type">;
     }, z.core.$strip>>;
     hostId: z.ZodString;
+    hostLifecycle: z.ZodEnum<{
+        "cleanup-failed": "cleanup-failed";
+        active: "active";
+        removed: "removed";
+        removing: "removing";
+    }>;
     id: z.ZodString;
     isGitRepo: z.ZodBoolean;
     isWorktree: z.ZodBoolean;
@@ -136,6 +142,7 @@ type Project = z.infer<typeof projectSchema>;
 declare const threadResponseSchema: z.ZodObject<{
     activeBackgroundAgentCount: z.ZodNumber;
     archivedAt: z.ZodNullable<z.ZodNumber>;
+    canRestoreEnvironment: z.ZodBoolean;
     canSpawnChild: z.ZodBoolean;
     createdAt: z.ZodNumber;
     deletedAt: z.ZodNullable<z.ZodNumber>;
@@ -235,13 +242,21 @@ interface PluginEnvironmentProviderCreateContext<R extends PluginEnvironmentProv
     suggestedBranchName: string;
     attempt: number;
     pathKey: string;
-    rebuild: boolean;
+    experimental_claimPath(path: string): Promise<boolean>;
+    report: PluginEnvironmentProviderProgress;
+    signal: AbortSignal;
+}
+/** Rebuilds a thread's destroyed environment; `inputs` are the ones it was created with. */
+interface PluginEnvironmentProviderRestoreContext<R extends PluginEnvironmentProviderRequirements = PluginEnvironmentProviderRequirements, S extends PluginEnvironmentProviderInputsSchema = PluginEnvironmentProviderInputsSchema> extends PluginEnvironmentProviderValidateContext<R, S> {
+    thread: ThreadResponse;
+    attempt: number;
+    pathKey: string;
     experimental_claimPath(path: string): Promise<boolean>;
     /** Resource is private to this provider; null after completed removal. */
     previous: {
         environment: Environment;
         resource: JsonValue$1 | null;
-    } | null;
+    };
     report: PluginEnvironmentProviderProgress;
     signal: AbortSignal;
 }
@@ -275,7 +290,7 @@ type PluginEnvironmentProviderRemoveResult = {
 interface PluginEnvironmentProviderPolicy {
     /** Default five minutes; null keeps the environment indefinitely. */
     retireGraceMs: number | null;
-    /** Default per-thread; rebuilds use a fresh key to avoid dead paths. */
+    /** Default per-thread; replacement environments use a fresh key to avoid dead paths. */
     pathKeys: "per-attempt" | "per-thread";
 }
 /** Resource operations only. Core owns durable launches, retries and retirement. */
@@ -295,7 +310,9 @@ interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProvide
     /** Pure path selection from parsed inputs. Core reuses a recorded environment on the selected host before calling create; null requests normal creation. */
     experimental_existingPath?(inputs: InputsValue<S>): string | null;
     create(context: PluginEnvironmentProviderCreateContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
+    /** Experimental: rebuild a destroyed environment when its thread asks for it back. Without it, core never rebuilds this provider's destroyed environments: see docs/api_to_audit.md. */
+    restore?(context: PluginEnvironmentProviderRestoreContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
     remove(context: PluginEnvironmentProviderRemoveContext): Promise<PluginEnvironmentProviderRemoveResult>;
 }
 
-export type { PluginEnvironmentProviderAvailability, PluginEnvironmentProviderAvailabilityContext, PluginEnvironmentProviderCreateContext, PluginEnvironmentProviderCreateResult, PluginEnvironmentProviderDefinition, PluginEnvironmentProviderInputsSchema, PluginEnvironmentProviderPolicy, PluginEnvironmentProviderProgress, PluginEnvironmentProviderRemoveContext, PluginEnvironmentProviderRemoveResult, PluginEnvironmentProviderValidateContext };
+export type { PluginEnvironmentProviderAvailability, PluginEnvironmentProviderAvailabilityContext, PluginEnvironmentProviderCreateContext, PluginEnvironmentProviderCreateResult, PluginEnvironmentProviderDefinition, PluginEnvironmentProviderInputsSchema, PluginEnvironmentProviderPolicy, PluginEnvironmentProviderProgress, PluginEnvironmentProviderRemoveContext, PluginEnvironmentProviderRemoveResult, PluginEnvironmentProviderRestoreContext, PluginEnvironmentProviderValidateContext };

package/bundled-types/bb-plugin-sdk-internal-host-policy.d.ts

@@ -85,6 +85,12 @@ declare const environmentSchema: z.ZodObject<{
         }, z.core.$strip>], "type">;
     }, z.core.$strip>>;
     hostId: z.ZodString;
+    hostLifecycle: z.ZodEnum<{
+        "cleanup-failed": "cleanup-failed";
+        active: "active";
+        removed: "removed";
+        removing: "removing";
+    }>;
     id: z.ZodString;
     isGitRepo: z.ZodBoolean;
     isWorktree: z.ZodBoolean;
@@ -474,6 +480,7 @@ type ExecutionInputFieldSource = CallerExecutionInputSource;
 declare const threadResponseSchema: z.ZodObject<{
     activeBackgroundAgentCount: z.ZodNumber;
     archivedAt: z.ZodNullable<z.ZodNumber>;
+    canRestoreEnvironment: z.ZodBoolean;
     canSpawnChild: z.ZodBoolean;
     createdAt: z.ZodNumber;
     deletedAt: z.ZodNullable<z.ZodNumber>;
@@ -573,13 +580,21 @@ interface PluginEnvironmentProviderCreateContext<R extends PluginEnvironmentProv
     suggestedBranchName: string;
     attempt: number;
     pathKey: string;
-    rebuild: boolean;
+    experimental_claimPath(path: string): Promise<boolean>;
+    report: PluginEnvironmentProviderProgress;
+    signal: AbortSignal;
+}
+/** Rebuilds a thread's destroyed environment; `inputs` are the ones it was created with. */
+interface PluginEnvironmentProviderRestoreContext<R extends PluginEnvironmentProviderRequirements$1 = PluginEnvironmentProviderRequirements$1, S extends PluginEnvironmentProviderInputsSchema = PluginEnvironmentProviderInputsSchema> extends PluginEnvironmentProviderValidateContext<R, S> {
+    thread: ThreadResponse;
+    attempt: number;
+    pathKey: string;
     experimental_claimPath(path: string): Promise<boolean>;
     /** Resource is private to this provider; null after completed removal. */
     previous: {
         environment: Environment;
         resource: JsonValue$2 | null;
-    } | null;
+    };
     report: PluginEnvironmentProviderProgress;
     signal: AbortSignal;
 }
@@ -613,7 +628,7 @@ type PluginEnvironmentProviderRemoveResult = {
 interface PluginEnvironmentProviderPolicy {
     /** Default five minutes; null keeps the environment indefinitely. */
     retireGraceMs: number | null;
-    /** Default per-thread; rebuilds use a fresh key to avoid dead paths. */
+    /** Default per-thread; replacement environments use a fresh key to avoid dead paths. */
     pathKeys: "per-attempt" | "per-thread";
 }
 /** Resource operations only. Core owns durable launches, retries and retirement. */
@@ -633,6 +648,8 @@ interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProvide
     /** Pure path selection from parsed inputs. Core reuses a recorded environment on the selected host before calling create; null requests normal creation. */
     experimental_existingPath?(inputs: InputsValue$1<S>): string | null;
     create(context: PluginEnvironmentProviderCreateContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
+    /** Experimental: rebuild a destroyed environment when its thread asks for it back. Without it, core never rebuilds this provider's destroyed environments: see docs/api_to_audit.md. */
+    restore?(context: PluginEnvironmentProviderRestoreContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
     remove(context: PluginEnvironmentProviderRemoveContext): Promise<PluginEnvironmentProviderRemoveResult>;
 }
 
@@ -1947,6 +1964,7 @@ interface NormalizedPluginEnvironmentProvider {
     validate: NonNullable<PluginEnvironmentProviderDeclaration["validate"]> | null;
     experimental_existingPath: NonNullable<PluginEnvironmentProviderDeclaration["experimental_existingPath"]> | null;
     create: PluginEnvironmentProviderDeclaration["create"];
+    restore: NonNullable<PluginEnvironmentProviderDeclaration["restore"]> | null;
     remove: PluginEnvironmentProviderDeclaration["remove"];
     policy: PluginEnvironmentProviderPolicy;
 }

package/bundled-types/bb-plugin-sdk-provider-bridge-testing.d.ts

@@ -3661,6 +3661,7 @@ declare const threadEventSchema: z.ZodPipe<z.ZodUnknown, z.ZodUnion<readonly [z.
     cause: z.ZodOptional<z.ZodLiteral<"host-connection-lost">>;
     reason: z.ZodEnum<{
         "host-daemon-restarted": "host-daemon-restarted";
+        "host-removed": "host-removed";
         "manual-stop": "manual-stop";
         "provider-turn-idle": "provider-turn-idle";
     }>;

package/bundled-types/bb-plugin-sdk-testing.d.ts

@@ -160,6 +160,12 @@ declare const environmentSchema: z.ZodObject<{
         }, z.core.$strip>], "type">;
     }, z.core.$strip>>;
     hostId: z.ZodString;
+    hostLifecycle: z.ZodEnum<{
+        "cleanup-failed": "cleanup-failed";
+        active: "active";
+        removed: "removed";
+        removing: "removing";
+    }>;
     id: z.ZodString;
     isGitRepo: z.ZodBoolean;
     isWorktree: z.ZodBoolean;
@@ -267,6 +273,7 @@ type ProviderFork = (typeof PROVIDER_FORK_VALUES)[number];
 declare const threadResponseSchema: z.ZodObject<{
     activeBackgroundAgentCount: z.ZodNumber;
     archivedAt: z.ZodNullable<z.ZodNumber>;
+    canRestoreEnvironment: z.ZodBoolean;
     canSpawnChild: z.ZodBoolean;
     createdAt: z.ZodNumber;
     deletedAt: z.ZodNullable<z.ZodNumber>;
@@ -366,13 +373,21 @@ interface PluginEnvironmentProviderCreateContext<R extends PluginEnvironmentProv
     suggestedBranchName: string;
     attempt: number;
     pathKey: string;
-    rebuild: boolean;
+    experimental_claimPath(path: string): Promise<boolean>;
+    report: PluginEnvironmentProviderProgress;
+    signal: AbortSignal;
+}
+/** Rebuilds a thread's destroyed environment; `inputs` are the ones it was created with. */
+interface PluginEnvironmentProviderRestoreContext<R extends PluginEnvironmentProviderRequirements$1 = PluginEnvironmentProviderRequirements$1, S extends PluginEnvironmentProviderInputsSchema = PluginEnvironmentProviderInputsSchema> extends PluginEnvironmentProviderValidateContext<R, S> {
+    thread: ThreadResponse$1;
+    attempt: number;
+    pathKey: string;
     experimental_claimPath(path: string): Promise<boolean>;
     /** Resource is private to this provider; null after completed removal. */
     previous: {
         environment: Environment;
         resource: JsonValue$2 | null;
-    } | null;
+    };
     report: PluginEnvironmentProviderProgress;
     signal: AbortSignal;
 }
@@ -406,7 +421,7 @@ type PluginEnvironmentProviderRemoveResult = {
 interface PluginEnvironmentProviderPolicy {
     /** Default five minutes; null keeps the environment indefinitely. */
     retireGraceMs: number | null;
-    /** Default per-thread; rebuilds use a fresh key to avoid dead paths. */
+    /** Default per-thread; replacement environments use a fresh key to avoid dead paths. */
     pathKeys: "per-attempt" | "per-thread";
 }
 /** Resource operations only. Core owns durable launches, retries and retirement. */
@@ -426,6 +441,8 @@ interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProvide
     /** Pure path selection from parsed inputs. Core reuses a recorded environment on the selected host before calling create; null requests normal creation. */
     experimental_existingPath?(inputs: InputsValue<S>): string | null;
     create(context: PluginEnvironmentProviderCreateContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
+    /** Experimental: rebuild a destroyed environment when its thread asks for it back. Without it, core never rebuilds this provider's destroyed environments: see docs/api_to_audit.md. */
+    restore?(context: PluginEnvironmentProviderRestoreContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
     remove(context: PluginEnvironmentProviderRemoveContext): Promise<PluginEnvironmentProviderRemoveResult>;
 }
 
@@ -984,6 +1001,7 @@ interface NormalizedPluginEnvironmentProvider {
     validate: NonNullable<PluginEnvironmentProviderDeclaration["validate"]> | null;
     experimental_existingPath: NonNullable<PluginEnvironmentProviderDeclaration["experimental_existingPath"]> | null;
     create: PluginEnvironmentProviderDeclaration["create"];
+    restore: NonNullable<PluginEnvironmentProviderDeclaration["restore"]> | null;
     remove: PluginEnvironmentProviderDeclaration["remove"];
     policy: PluginEnvironmentProviderPolicy;
 }

package/bundled-types/bb-plugin-sdk.d.ts

@@ -197,6 +197,8 @@ declare const appKeybindingOverridesSchema: z$1.ZodArray<z$1.ZodObject<{
         "panel.previousTab": "panel.previousTab";
         "panel.reopenClosedTab": "panel.reopenClosedTab";
         "panel.toggle": "panel.toggle";
+        "plugins.enterSafeMode": "plugins.enterSafeMode";
+        "plugins.exitSafeMode": "plugins.exitSafeMode";
         "question.select.1": "question.select.1";
         "question.select.2": "question.select.2";
         "question.select.3": "question.select.3";
@@ -431,6 +433,12 @@ declare const environmentSchema: z$1.ZodObject<{
         }, z$1.core.$strip>], "type">;
     }, z$1.core.$strip>>;
     hostId: z$1.ZodString;
+    hostLifecycle: z$1.ZodEnum<{
+        "cleanup-failed": "cleanup-failed";
+        active: "active";
+        removed: "removed";
+        removing: "removing";
+    }>;
     id: z$1.ZodString;
     isGitRepo: z$1.ZodBoolean;
     isWorktree: z$1.ZodBoolean;
@@ -475,6 +483,7 @@ type Environment = z$1.infer<typeof environmentSchema>;
 
 declare const experimentsSchema: z$1.ZodRecord<z$1.ZodEnum<{
     changelogPreview: "changelogPreview";
+    legacyJitiPluginLoader: "legacyJitiPluginLoader";
     mobileApp: "mobileApp";
     serverMove: "serverMove";
     sidebarProgressiveDisclosure: "sidebarProgressiveDisclosure";
@@ -502,6 +511,11 @@ declare const workspaceGitOperationSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObj
 }, z$1.core.$strip>], "kind">;
 type WorkspaceGitOperation = z$1.infer<typeof workspaceGitOperationSchema>;
 
+declare const hostTypeSchema: z$1.ZodEnum<{
+    ephemeral: "ephemeral";
+    persistent: "persistent";
+}>;
+type HostType = z$1.infer<typeof hostTypeSchema>;
 declare const hostSchema: z$1.ZodObject<{
     createdAt: z$1.ZodNumber;
     id: z$1.ZodString;
@@ -3108,6 +3122,7 @@ declare const threadEventSchema: z$1.ZodPipe<z$1.ZodUnknown, z$1.ZodUnion<readon
     cause: z$1.ZodOptional<z$1.ZodLiteral<"host-connection-lost">>;
     reason: z$1.ZodEnum<{
         "host-daemon-restarted": "host-daemon-restarted";
+        "host-removed": "host-removed";
         "manual-stop": "manual-stop";
         "provider-turn-idle": "provider-turn-idle";
     }>;
@@ -7850,6 +7865,22 @@ declare const hostDaemonCommandRegistry: {
         sha256: z$1.ZodString;
         sizeBytes: z$1.ZodNumber;
     }, z$1.core.$strip>]>, "onlineRpc", true>;
+    "host.read_file_chunk": HostDaemonCommandDescriptor<"host.read_file_chunk", z$1.ZodObject<{
+        length: z$1.ZodNumber;
+        offset: z$1.ZodNumber;
+        path: z$1.ZodString;
+        revision: z$1.ZodNullable<z$1.ZodString>;
+        rootPath: z$1.ZodString;
+        type: z$1.ZodLiteral<"host.read_file_chunk">;
+    }, z$1.core.$strict>, z$1.ZodObject<{
+        content: z$1.ZodString;
+        mimeType: z$1.ZodNullable<z$1.ZodString>;
+        modifiedAtMs: z$1.ZodNumber;
+        offset: z$1.ZodNumber;
+        path: z$1.ZodString;
+        revision: z$1.ZodString;
+        sizeBytes: z$1.ZodNumber;
+    }, z$1.core.$strict>, "onlineRpc", true>;
     "host.read_file_relative": HostDaemonCommandDescriptor<"host.read_file_relative", z$1.ZodObject<{
         dotfiles: z$1.ZodEnum<{
             allow: "allow";
@@ -9513,6 +9544,15 @@ declare const pluginSettingsResponseSchema: z$1.ZodObject<{
     values: z$1.ZodRecord<z$1.ZodString, z$1.ZodType<JsonValue$1, unknown, z$1.core.$ZodTypeInternals<JsonValue$1, unknown>>>;
 }, z$1.core.$strip>;
 type PluginSettingsResponse = z$1.infer<typeof pluginSettingsResponseSchema>;
+declare const pluginSafeModeResponseSchema: z$1.ZodObject<{
+    enabled: z$1.ZodBoolean;
+}, z$1.core.$strip>;
+type PluginSafeModeResponse = z$1.infer<typeof pluginSafeModeResponseSchema>;
+declare const pluginSafeModeUpdateResponseSchema: z$1.ZodObject<{
+    enabled: z$1.ZodBoolean;
+    problems: z$1.ZodArray<z$1.ZodString>;
+}, z$1.core.$strip>;
+type PluginSafeModeUpdateResponse = z$1.infer<typeof pluginSafeModeUpdateResponseSchema>;
 declare const pluginTokenResponseSchema: z$1.ZodObject<{
     ok: z$1.ZodLiteral<true>;
     token: z$1.ZodString;
@@ -10068,6 +10108,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -10140,6 +10182,7 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
     }, z$1.core.$strict>>;
     experiments: z$1.ZodRecord<z$1.ZodEnum<{
         changelogPreview: "changelogPreview";
+        legacyJitiPluginLoader: "legacyJitiPluginLoader";
         mobileApp: "mobileApp";
         serverMove: "serverMove";
         sidebarProgressiveDisclosure: "sidebarProgressiveDisclosure";
@@ -10211,6 +10254,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -10296,6 +10341,8 @@ declare const systemConfigResponseSchema: z$1.ZodObject<{
             "panel.previousTab": "panel.previousTab";
             "panel.reopenClosedTab": "panel.reopenClosedTab";
             "panel.toggle": "panel.toggle";
+            "plugins.enterSafeMode": "plugins.enterSafeMode";
+            "plugins.exitSafeMode": "plugins.exitSafeMode";
             "question.select.1": "question.select.1";
             "question.select.2": "question.select.2";
             "question.select.3": "question.select.3";
@@ -13492,6 +13539,7 @@ type ThreadSearchResponse = z$1.infer<typeof threadSearchResponseSchema>;
 declare const threadResponseSchema: z$1.ZodObject<{
     activeBackgroundAgentCount: z$1.ZodNumber;
     archivedAt: z$1.ZodNullable<z$1.ZodNumber>;
+    canRestoreEnvironment: z$1.ZodBoolean;
     canSpawnChild: z$1.ZodBoolean;
     createdAt: z$1.ZodNumber;
     deletedAt: z$1.ZodNullable<z$1.ZodNumber>;
@@ -13550,6 +13598,7 @@ type ThreadPluginMetadataResponse = z$1.infer<typeof pluginMetadataSchema>;
 declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
     activeBackgroundAgentCount: z$1.ZodNumber;
     archivedAt: z$1.ZodNullable<z$1.ZodNumber>;
+    canRestoreEnvironment: z$1.ZodBoolean;
     canSpawnChild: z$1.ZodBoolean;
     createdAt: z$1.ZodNumber;
     deletedAt: z$1.ZodNullable<z$1.ZodNumber>;
@@ -13572,6 +13621,12 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
             }, z$1.core.$strip>], "type">;
         }, z$1.core.$strip>>;
         hostId: z$1.ZodString;
+        hostLifecycle: z$1.ZodEnum<{
+            "cleanup-failed": "cleanup-failed";
+            active: "active";
+            removed: "removed";
+            removing: "removing";
+        }>;
         id: z$1.ZodString;
         isGitRepo: z$1.ZodBoolean;
         isWorktree: z$1.ZodBoolean;
@@ -13612,6 +13667,7 @@ declare const threadWithIncludesResponseSchema: z$1.ZodObject<{
             unmanaged: "unmanaged";
         }>>;
     }, z$1.core.$strip>>>;
+    environmentHostName: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
     environmentId: z$1.ZodNullable<z$1.ZodString>;
     host: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodObject<{
         createdAt: z$1.ZodNumber;
@@ -14225,6 +14281,7 @@ declare const threadListQuerySchema: z$1.ZodObject<{
         false: "false";
         true: "true";
     }>>;
+    hostId: z$1.ZodOptional<z$1.ZodString>;
     includeHidden: z$1.ZodOptional<z$1.ZodEnum<{
         false: "false";
         true: "true";
@@ -15544,6 +15601,7 @@ interface HostProviderCliInstallArgs extends HostProviderCliInstallRequest {
 }
 interface HostListArgs {
     includeCreating?: boolean;
+    type?: HostType;
     signal?: AbortSignal;
 }
 interface MachineCreateArgs extends CreateMachineRequest {
@@ -15884,6 +15942,12 @@ interface PluginListArgs {
 interface PluginListUpdateResultsArgs {
     signal?: AbortSignal;
 }
+interface PluginGetSafeModeArgs {
+    signal?: AbortSignal;
+}
+interface PluginSetSafeModeArgs {
+    enabled: boolean;
+}
 type PluginDisableResult = InstalledPlugin;
 type PluginEnableResult = InstalledPlugin;
 type PluginGetSettingsResult = PluginSettingsResponse;
@@ -15891,6 +15955,8 @@ type PluginInstallResult = InstalledPlugin;
 type PluginListResult = PluginListResponse;
 type PluginReloadResult = PluginReloadResponse;
 type PluginRemoveResult = PluginRemoveResponse;
+type PluginSafeModeResult = PluginSafeModeResponse;
+type PluginSetSafeModeResult = PluginSafeModeUpdateResponse;
 type PluginTokenResult = PluginTokenResponse;
 type PluginUpdateSettingsResult = PluginSettingsResponse;
 type PluginGetSourceResult = PluginSourceDetail;
@@ -15919,6 +15985,8 @@ interface PluginMarketplacesArea {
 }
 interface PluginsArea {
     experimental_discoverRpc(args?: PluginRpcDiscoveryQuery): Promise<PublishedPluginRpcMethod[]>;
+    experimental_getSafeMode(args?: PluginGetSafeModeArgs): Promise<PluginSafeModeResult>;
+    experimental_setSafeMode(args: PluginSetSafeModeArgs): Promise<PluginSetSafeModeResult>;
     applyUpdate(args: PluginIdArgs): Promise<PluginApplyUpdateResult>;
     callRpc<TOutput>(args: PluginRpcArgs<TOutput>): Promise<TOutput>;
     checkUpdates(args?: PluginCheckUpdatesArgs): Promise<PluginCheckUpdatesResult>;
@@ -16322,6 +16390,7 @@ interface TerminalsArea {
 interface ThreadListArgs {
     archived?: boolean;
     environmentId?: string;
+    hostId?: string;
     sectionId?: string;
     hasParent?: boolean;
     includeHidden?: boolean;
@@ -16433,6 +16502,7 @@ type ThreadUnarchiveResult = {
 };
 type ThreadArchiveAllResult = ThreadArchiveAllResponse;
 type ThreadReadStateResult = ThreadResponse;
+type ThreadRestoreEnvironmentResult = ThreadResponse;
 type ThreadPinOrderResult = ThreadListResponse;
 type ThreadPromptHistoryResult = PromptHistoryResponse;
 type ThreadQueuedMessagesResult = ThreadQueuedMessageListResponse;
@@ -16725,6 +16795,14 @@ interface ThreadsArea {
      * `sendAt` in the future queues it on the clock and a `message.dispatch` hook
      * can still hold it; the response says which of the two happened.
      */
+    /**
+     * Ask the environment provider to restore the destroyed workspace of a
+     * thread and attach it; the provider decides what restoring means, such as
+     * checking the recorded branch out again. Sends fail until this runs. Starts
+     * no turn: the thread settles back to `idle` once the workspace is ready.
+     * Refused unless the thread's `canRestoreEnvironment` is true.
+     */
+    restoreEnvironment(args: ThreadActionArgs): Promise<ThreadRestoreEnvironmentResult>;
     retry(args: ThreadRetryArgs): Promise<ThreadRetryResult>;
     search(args: ThreadSearchArgs): Promise<ThreadSearchResult>;
     send(args: ThreadSendArgs): Promise<ThreadSendResult>;
@@ -17969,6 +18047,10 @@ interface PluginSidebarThreadsState {
     } | null;
     status: "error" | "loading" | "ready";
     threads: readonly PluginSidebarThread[];
+    experimental_hosts?: readonly {
+        id: string;
+        name: string;
+    }[];
     projects: readonly PluginSidebarProject[];
     /** Every section, in the server's order (creation order). */
     sections: readonly PluginSidebarSection[];
@@ -18134,11 +18216,15 @@ interface PluginSidebarThreadActions {
      * `sectionId` files the new thread under that section, and
      * `environmentId` reuses that environment (the "New thread in
      * environment" affordance), both exactly as bb's own list does.
+     * `hostId` selects a machine for a new environment when it
+     * is known and supports an environment provider. `environmentId` wins when
+     * both are supplied.
      */
     openNewThread(options?: {
         projectId?: string;
         sectionId?: string;
         environmentId?: string;
+        hostId?: string;
         focusPrompt?: boolean;
     }): void;
     setPinned(threadId: string, pinned: boolean): Promise<void>;
@@ -18256,12 +18342,13 @@ interface PluginSidebarThreadSplit {
  * Replace the sidebar's thread list with a plugin component.
  *
  * Unlike every other slot, this one is EXCLUSIVE: two lists cannot share one
- * scroll area. Registering activates the replacement while the plugin is
- * enabled. If multiple plugins register one, the first in deterministic slot
- * order is active by default; removing it reveals the next. The user can pin
- * BB's list or a specific provider under Settings → Appearance. A plugin can
- * also use its own setting and render `Original` conditionally.
- * An absent or crashing replacement falls back to BB's list rather than
+ * scroll area. bb ships its own list as the bundled Thread list plugin
+ * (`thread-list/thread-list`). Registering activates the replacement while the
+ * plugin is enabled: by default the first registered list other than the
+ * bundled one, in deterministic slot order, is active, falling back to the
+ * bundled list; removing it reveals the next. The user can pin a specific
+ * provider, including the bundled one, under Settings → Appearance → Sidebar.
+ * A missing pinned provider or a crashing list shows a placeholder rather than
  * leaving the user with no sidebar.
  *
  * The plugin gets the scrolling list and nothing else. The New-thread button,
@@ -18280,11 +18367,12 @@ interface PluginThreadListRegistration {
 }
 /**
  * Replace the navigation controls above the sidebar thread list. Exclusive:
- * the user picks one provider under Settings → Appearance → Navigation, and
  * bb ships its own rows as the bundled Navigation plugin
- * (`navigation/navigation`, the default). A picked provider that is disabled
- * or removed falls back to Navigation; a crashing provider is replaced by a
- * placeholder with a Reload button.
+ * (`navigation/navigation`). By default the first registered provider other
+ * than Navigation is active, falling back to Navigation; the user can pin one
+ * provider under Settings → Appearance → Navigation. A pinned provider that is
+ * disabled or removed falls back to Navigation; a crashing provider is
+ * replaced by a placeholder with a Reload button.
  */
 interface ExperimentalSidebarNavigationRegistration {
     /** Unique within the plugin; letters, digits, `-`, `_`. */
@@ -20097,13 +20185,21 @@ interface PluginEnvironmentProviderCreateContext<R extends PluginEnvironmentProv
     suggestedBranchName: string;
     attempt: number;
     pathKey: string;
-    rebuild: boolean;
+    experimental_claimPath(path: string): Promise<boolean>;
+    report: PluginEnvironmentProviderProgress;
+    signal: AbortSignal;
+}
+/** Rebuilds a thread's destroyed environment; `inputs` are the ones it was created with. */
+interface PluginEnvironmentProviderRestoreContext<R extends PluginEnvironmentProviderRequirements$1 = PluginEnvironmentProviderRequirements$1, S extends PluginEnvironmentProviderInputsSchema = PluginEnvironmentProviderInputsSchema> extends PluginEnvironmentProviderValidateContext<R, S> {
+    thread: ThreadResponse;
+    attempt: number;
+    pathKey: string;
     experimental_claimPath(path: string): Promise<boolean>;
     /** Resource is private to this provider; null after completed removal. */
     previous: {
         environment: Environment;
         resource: JsonValue$2 | null;
-    } | null;
+    };
     report: PluginEnvironmentProviderProgress;
     signal: AbortSignal;
 }
@@ -20137,7 +20233,7 @@ type PluginEnvironmentProviderRemoveResult = {
 interface PluginEnvironmentProviderPolicy {
     /** Default five minutes; null keeps the environment indefinitely. */
     retireGraceMs: number | null;
-    /** Default per-thread; rebuilds use a fresh key to avoid dead paths. */
+    /** Default per-thread; replacement environments use a fresh key to avoid dead paths. */
     pathKeys: "per-attempt" | "per-thread";
 }
 /** Resource operations only. Core owns durable launches, retries and retirement. */
@@ -20157,6 +20253,8 @@ interface PluginEnvironmentProviderDefinition<R extends PluginEnvironmentProvide
     /** Pure path selection from parsed inputs. Core reuses a recorded environment on the selected host before calling create; null requests normal creation. */
     experimental_existingPath?(inputs: InputsValue<S>): string | null;
     create(context: PluginEnvironmentProviderCreateContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
+    /** Experimental: rebuild a destroyed environment when its thread asks for it back. Without it, core never rebuilds this provider's destroyed environments: see docs/api_to_audit.md. */
+    restore?(context: PluginEnvironmentProviderRestoreContext<R, S>): Promise<PluginEnvironmentProviderCreateResult>;
     remove(context: PluginEnvironmentProviderRemoveContext): Promise<PluginEnvironmentProviderRemoveResult>;
 }
 
@@ -20478,6 +20576,15 @@ interface PluginThreadEventPayloads {
     "experimental_terminal.input": {
         terminal: TerminalSession;
     };
+    /**
+     * Fired once after a machine is removed, whether a user removed it or its
+     * machine provider finished tearing it down. `host` is the record as it was
+     * when it was removed; `bb.sdk.hosts.get` answers 404 for it from now on, so
+     * this is the moment to drop anything the plugin keeps per host.
+     */
+    "experimental_host.deleted": {
+        host: Host;
+    };
     /** Fired after a thread row is created. */
     "thread.created": {
         thread: ThreadResponse;

package/dist/internal/host-policy.js

@@ -1943,6 +1943,12 @@ function validatePluginEnvironmentProviderDeclaration(declaration) {
     declaration.experimental_existingPath,
     "experimental_existingPath"
   );
+  assertOptionalFunction(
+    "environment provider",
+    id,
+    declaration.restore,
+    "a restore"
+  );
   return {
     id,
     displayName,
@@ -1955,6 +1961,7 @@ function validatePluginEnvironmentProviderDeclaration(declaration) {
     validate: declaration.validate ?? null,
     experimental_existingPath: declaration.experimental_existingPath ?? null,
     create: declaration.create,
+    restore: declaration.restore ?? null,
     remove: declaration.remove,
     policy: environmentProviderPolicySchema.parse(declaration.policy ?? {})
   };

package/dist/provider-bridge-acp.js

@@ -1876,6 +1876,7 @@ var systemUserQuestionLifecycleEventDataSchema = z13.object({
 var systemThreadInterruptedReasonValues = [
   "manual-stop",
   "host-daemon-restarted",
+  "host-removed",
   "provider-turn-idle"
 ];
 var systemThreadInterruptedReasonSchema = z13.enum(

package/dist/provider-bridge-testing.js

@@ -965,6 +965,7 @@ var systemUserQuestionLifecycleEventDataSchema = z11.object({
 var systemThreadInterruptedReasonValues = [
   "manual-stop",
   "host-daemon-restarted",
+  "host-removed",
   "provider-turn-idle"
 ];
 var systemThreadInterruptedReasonSchema = z11.enum(

package/dist/provider-bridge.js

@@ -2403,6 +2403,7 @@ var systemUserQuestionLifecycleEventDataSchema = z15.object({
 var systemThreadInterruptedReasonValues = [
   "manual-stop",
   "host-daemon-restarted",
+  "host-removed",
   "provider-turn-idle"
 ];
 var systemThreadInterruptedReasonSchema = z15.enum(

package/dist/testing/app.js

@@ -2073,6 +2073,7 @@ function renderSlot(registration, props, options = {}) {
     experimental_archived: options.sidebarThreads?.experimental_archived ?? null,
     status: options.sidebarThreads?.status ?? "ready",
     threads: options.sidebarThreads?.threads ?? [],
+    experimental_hosts: options.sidebarThreads?.experimental_hosts ?? [],
     projects: options.sidebarThreads?.projects ?? [],
     sections: options.sidebarThreads?.sections ?? []
   };

package/dist/testing/index.js

@@ -1968,6 +1968,12 @@ function validatePluginEnvironmentProviderDeclaration(declaration) {
     declaration.experimental_existingPath,
     "experimental_existingPath"
   );
+  assertOptionalFunction(
+    "environment provider",
+    id,
+    declaration.restore,
+    "a restore"
+  );
   return {
     id,
     displayName,
@@ -1980,6 +1986,7 @@ function validatePluginEnvironmentProviderDeclaration(declaration) {
     validate: declaration.validate ?? null,
     experimental_existingPath: declaration.experimental_existingPath ?? null,
     create: declaration.create,
+    restore: declaration.restore ?? null,
     remove: declaration.remove,
     policy: environmentProviderPolicySchema.parse(declaration.policy ?? {})
   };
@@ -3295,6 +3302,7 @@ function createFakePluginHostInternal(options, sharedState) {
   const threadEventHandlers = {
     "experimental_thread.events": [],
     "experimental_terminal.input": [],
+    "experimental_host.deleted": [],
     "thread.created": [],
     "thread.active": [],
     "thread.idle": [],
@@ -3732,6 +3740,7 @@ function createFakePluginHostInternal(options, sharedState) {
         return {
           "experimental_thread.events": threadEventHandlers["experimental_thread.events"].length,
           "experimental_terminal.input": threadEventHandlers["experimental_terminal.input"].length,
+          "experimental_host.deleted": threadEventHandlers["experimental_host.deleted"].length,
           "thread.created": threadEventHandlers["thread.created"].length,
           "thread.active": threadEventHandlers["thread.active"].length,
           "thread.idle": threadEventHandlers["thread.idle"].length,
@@ -4251,6 +4260,7 @@ function makeThreadResponse(overrides = {}) {
     updatedAt: 0,
     runtime: { displayStatus: "idle", hostReconnectGraceExpiresAt: null },
     activeBackgroundAgentCount: 0,
+    canRestoreEnvironment: false,
     canSpawnChild: true,
     queuedMessageCount: 0,
     ...overrides
@@ -4357,6 +4367,7 @@ function makeMessageDispatchHookContext(overrides = {}) {
     environmentProviderSelection: null,
     environmentProviderInstanceKey: null,
     lifecycle: { phase: "active", retireAt: null, teardown: null },
+    hostLifecycle: "active",
     managed: false,
     workspaceProvisionType: null,
     status: "ready",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@get-bb/plugin-sdk",
-  "version": "0.5.24",
+  "version": "0.5.29",
   "homepage": "https://github.com/get-bb/bb#readme",
   "bugs": {
     "url": "https://github.com/get-bb/bb/issues"