@inferencesh/sdk 0.6.48 → 0.6.49

package/dist/types.d.ts

@@ -9,6 +9,8 @@ export interface InternalToolsConfig {
     skills?: boolean;
     host_context?: boolean;
     meta?: boolean;
+    artifact?: boolean;
+    spawn?: boolean;
 }
 /**
  * AgentTool represents a unified tool that can be used by an agent
@@ -490,6 +492,12 @@ export interface SecretCreateRequest {
     value: string;
     description?: string;
     provider?: string;
+    /**
+     * ConnectionScope is who the credential this key activates belongs to —
+     * chosen once, here; scope is immutable after creation. Empty = the
+     * provider's default (team). Requires the matching admin role.
+     */
+    connection_scope?: CredentialScope;
 }
 export interface SecretUpdateRequest {
     value: string;
@@ -815,6 +823,22 @@ export declare const ScopeKnowledgeRead: Scope;
  * Empty scopes = full access (for backwards compatibility with existing keys).
  */
 export declare const ScopeKnowledgeWrite: Scope;
+/**
+ * Action-level scopes for Artifacts (published HTML/Markdown pages)
+ */
+export declare const ScopeArtifacts: Scope;
+/**
+ * API Key Scopes - hierarchical permission system.
+ * Resource-level scopes (e.g., "agents") imply all action-level scopes (e.g., "agents:read").
+ * Empty scopes = full access (for backwards compatibility with existing keys).
+ */
+export declare const ScopeArtifactsRead: Scope;
+/**
+ * API Key Scopes - hierarchical permission system.
+ * Resource-level scopes (e.g., "agents") imply all action-level scopes (e.g., "agents:read").
+ * Empty scopes = full access (for backwards compatibility with existing keys).
+ */
+export declare const ScopeArtifactsWrite: Scope;
 /**
  * Action-level scopes for User profile
  */
@@ -853,6 +877,7 @@ export declare const ScopeGroupIntegrations: ScopeGroup;
 export declare const ScopeGroupEngines: ScopeGroup;
 export declare const ScopeGroupApiKeys: ScopeGroup;
 export declare const ScopeGroupKnowledge: ScopeGroup;
+export declare const ScopeGroupArtifacts: ScopeGroup;
 export declare const ScopeGroupUser: ScopeGroup;
 export declare const ScopeGroupSettings: ScopeGroup;
 /**
@@ -940,6 +965,13 @@ export interface AppFunction {
     description?: string;
     input_schema: any;
     output_schema: any;
+    /**
+     * Capabilities implied by the function's declared types, derived by
+     * engine discovery at deploy (e.g. "llm" when the function takes an
+     * LLMInput and returns an LLMOutput). Promoted onto the version's
+     * metadata by AppVersion.DeriveCapabilities.
+     */
+    capabilities?: string[];
 }
 /**
  * AppImages holds developer-provided images for the app.
@@ -1104,6 +1136,313 @@ export interface PublicAppStoreDTO {
     page_id?: string;
     pricing_description?: string;
 }
+/**
+ * ResourceImages is the display-image set every listable resource carries:
+ * a card image for grids, a thumbnail for dense rows, a banner for headers.
+ * AppImages and AgentImages predate this and hold the same three fields;
+ * they should collapse onto this type, but aliasing them changes what
+ * gotypegen emits for existing consumers, so that migration is separate.
+ */
+export interface ResourceImages {
+    card: string;
+    thumbnail: string;
+    banner: string;
+}
+/**
+ * ArtifactDTO is the API shape of an artifact entry.
+ */
+export interface ArtifactDTO extends BaseModelDTO, PermissionModelDTO {
+    /**
+     * Namespace is the owning team's username, copied at creation. Immutable.
+     */
+    namespace: string;
+    /**
+     * Name is the slug within the namespace. Immutable.
+     */
+    name: string;
+    title: string;
+    description?: string;
+    favicon?: string;
+    type: ArtifactType;
+    /**
+     * Images are the cover images shown in galleries and headers, same as
+     * apps and agents. The favicon stays the rendered page's tab icon.
+     */
+    images: ResourceImages;
+    /**
+     * VersionID points at the latest published version.
+     */
+    version_id: string;
+    version?: ArtifactVersionDTO;
+    /**
+     * SharedVersionID pins the version viewers see. Empty = always latest.
+     */
+    shared_version_id?: string;
+    /**
+     * Capabilities declared by the latest version (runtime features the page
+     * may use). Reserved for the artifact runtime; opaque to the API.
+     */
+    capabilities?: {
+        [key: string]: any;
+    };
+    views: number;
+    /**
+     * URL is the canonical viewer URL for this artifact.
+     */
+    url?: string;
+}
+/**
+ * ArtifactVersionDTO is one immutable publish of an artifact.
+ */
+export interface ArtifactVersionDTO extends BaseModelDTO {
+    artifact_id: string;
+    /**
+     * Number is the 1-based publish sequence within the artifact.
+     */
+    number: number;
+    /**
+     * Content is the stored source file (uri/hash/size). The inline `content`
+     * field is only populated on write requests, never on reads — use the
+     * /content endpoint to fetch the body.
+     */
+    content: KnowledgeFile;
+    content_hash: string;
+    /**
+     * MD5 is the lowercase hex MD5 of the UTF-8 source; SizeBytes its byte
+     * length. Both let a DLP consumer dedupe without downloading.
+     */
+    md5: string;
+    size_bytes: number;
+    label?: string;
+    notes?: string;
+    /**
+     * Provenance — same conventions as knowledge versions.
+     */
+    origin?: string;
+    generated_by?: string;
+    capabilities?: {
+        [key: string]: any;
+    };
+    created_by_user_id?: string;
+}
+/**
+ * ArtifactCreateRequest is the body for POST /artifacts. Creates the entry
+ * and its first version. When an artifact with the same name already exists
+ * in the caller's namespace a new version is published instead.
+ */
+export interface ArtifactCreateRequest {
+    /**
+     * Name is optional; derived from Title when empty.
+     */
+    name?: string;
+    title: string;
+    description?: string;
+    favicon?: string;
+    type?: ArtifactType;
+    images?: ResourceImages;
+    /**
+     * Content is the page source (HTML body/document or Markdown).
+     */
+    content: string;
+    /**
+     * ContentEncoding is "base64" when Content is base64-encoded UTF-8. Use it
+     * from browsers and CLIs: edge firewalls reject raw <script> in JSON bodies.
+     */
+    content_encoding?: string;
+    label?: string;
+    notes?: string;
+    origin?: string;
+    generated_by?: string;
+    capabilities?: {
+        [key: string]: any;
+    };
+    /**
+     * BaseVersionID is the version this content was built on. When the
+     * artifact has moved past it, the publish is refused instead of
+     * discarding whatever landed in between. Leave it empty to publish
+     * unconditionally.
+     */
+    base_version_id?: string;
+    /**
+     * Force publishes over a newer version anyway, discarding it. Only ever
+     * set this because a person said to discard that specific version.
+     */
+    force?: boolean;
+}
+/**
+ * ArtifactUpdateRequest is the body for POST /artifacts/{id}. Metadata only;
+ * content changes go through ArtifactPublishRequest.
+ */
+export interface ArtifactUpdateRequest {
+    title?: string;
+    description?: string;
+    favicon?: string;
+    /**
+     * Images replaces the whole cover-image set when present.
+     */
+    images?: ResourceImages;
+    /**
+     * SharedVersionID pins the version viewers see. Pass "" to share latest.
+     */
+    shared_version_id?: string;
+}
+/**
+ * ArtifactPublishRequest is the body for POST /artifacts/{id}/versions.
+ */
+export interface ArtifactPublishRequest {
+    content: string;
+    /**
+     * ContentEncoding is "base64" when Content is base64-encoded UTF-8.
+     */
+    content_encoding?: string;
+    label?: string;
+    notes?: string;
+    origin?: string;
+    generated_by?: string;
+    capabilities?: {
+        [key: string]: any;
+    };
+    /**
+     * Title/Favicon/Description may be refreshed alongside a publish.
+     */
+    title?: string;
+    description?: string;
+    favicon?: string;
+    images?: ResourceImages;
+    /**
+     * BaseVersionID is the version this content was built on. When the
+     * artifact has moved past it, the publish is refused instead of
+     * discarding whatever landed in between. Leave it empty to publish
+     * unconditionally.
+     */
+    base_version_id?: string;
+    /**
+     * Force publishes over a newer version anyway, discarding it. Only ever
+     * set this because a person said to discard that specific version.
+     */
+    force?: boolean;
+}
+/**
+ * ArtifactContentResponse is the JSON form of an artifact version body.
+ */
+export interface ArtifactContentResponse {
+    artifact_id: string;
+    version_id: string;
+    number: number;
+    type: ArtifactType;
+    title: string;
+    content: string;
+    content_hash: string;
+    md5: string;
+    size_bytes: number;
+}
+/**
+ * ArtifactDataDTO is one document in an artifact's store.
+ */
+export interface ArtifactDataDTO {
+    collection: string;
+    doc_id: string;
+    data: {
+        [key: string]: any;
+    };
+    updated_at: string;
+    /**
+     * OwnerUserID is set for documents private to one viewer.
+     */
+    owner_user_id?: string;
+}
+/**
+ * ArtifactDataRequest addresses one document, or a collection when DocID is
+ * empty (list).
+ */
+export interface ArtifactDataRequest {
+    collection: string;
+    doc_id?: string;
+    /**
+     * Data is the document body for set and update.
+     */
+    data?: {
+        [key: string]: any;
+    };
+    /**
+     * Limit caps a list; the server clamps it.
+     */
+    limit?: number;
+}
+/**
+ * ArtifactDataListResponse is a page of documents from one collection.
+ */
+export interface ArtifactDataListResponse {
+    collection: string;
+    documents: ArtifactDataDTO[];
+    count: number;
+}
+/**
+ * ArtifactViewerDTO is what the user capability tells a page about whoever
+ * has it open. It carries no credential and no email.
+ */
+export interface ArtifactViewerDTO {
+    /**
+     * SignedIn is false for someone opening a public link without an account.
+     */
+    signed_in: boolean;
+    user_id?: string;
+    name?: string;
+    avatar_url?: string;
+    /**
+     * CanEdit reports whether this viewer may publish new versions.
+     */
+    can_edit: boolean;
+}
+/**
+ * ArtifactAssetDTO describes one file stored beside an artifact. URL is
+ * absolute and is the only way a page may reference the bytes: the page has
+ * no network of its own, and the CSP names this origin only when the
+ * artifact declared the assets capability.
+ */
+export interface ArtifactAssetDTO {
+    asset_id: string;
+    filename?: string;
+    content_type?: string;
+    size_bytes: number;
+    url: string;
+    created_at: string;
+    uploaded_by_user_id?: string;
+}
+/**
+ * ArtifactAssetListResponse is the body of the asset listing.
+ */
+export interface ArtifactAssetListResponse {
+    assets: ArtifactAssetDTO[];
+    count: number;
+    /**
+     * TotalBytes is what this artifact's assets occupy, against the budget
+     * an upload is refused for exceeding.
+     */
+    total_bytes: number;
+    /**
+     * BudgetBytes is the ceiling for one artifact.
+     */
+    budget_bytes: number;
+}
+/**
+ * ArtifactFrameDTO is what the viewer embeds. EmbedURL is for an iframe on
+ * the app; TopURL is the same page opened directly. Both point at the
+ * user-content domain, never the API.
+ * When Exchange is true the URL carries a short-lived signed token that the
+ * content origin swaps for a cookie scoped to that origin and then redirects
+ * to the document, so the token leaves the address bar. When false the page
+ * is public and no credential is needed.
+ */
+export interface ArtifactFrameDTO {
+    artifact_id: string;
+    version_id: string;
+    version_short_id: string;
+    embed_url: string;
+    top_url: string;
+    exchange: boolean;
+    expires_at?: string;
+}
 /**
  * AuthSessionDTO is a safe representation of AuthSession for API responses.
  */
@@ -1187,6 +1526,12 @@ export interface BountyProgramDTO extends BaseModelDTO, PermissionModelDTO {
     max_per_day: number;
     proof_type: string;
     proof_min_length: number;
+    /**
+     * RequiresPaymentMethod withholds the reward until the claimant's team has
+     * a saved payment method. The claim itself is refused with 402
+     * payment_method_required (survey answers are still recorded).
+     */
+    requires_payment_method: boolean;
     status: string;
     notice_text: string;
     notice_cooldown_hours: number;
@@ -1298,6 +1643,11 @@ export interface CursorListRequest {
     fields: string[];
     permissions: string[];
     include_others: boolean;
+    /**
+     * IncludePrivate: an owner or admin of the selected team asks for every
+     * row the team owns, private ones included. Audited; ignored for others.
+     */
+    include_private?: boolean;
 }
 /**
  * CursorListResponse represents a cursor-based paginated response
@@ -1448,7 +1798,10 @@ export interface WorkerRAM {
  * EntitlementDTO for API responses
  */
 export interface EntitlementDTO extends BaseModelDTO {
+    scope: EntitlementScope;
     team_id: string;
+    org_id?: string;
+    user_id?: string;
     resource: EntitlementResource;
     type: EntitlementType;
     enabled: boolean;
@@ -2092,77 +2445,6 @@ export interface SkillStoreListingDTO {
     uses: number;
     tags?: string[];
 }
-/**
- * LifecycleHookConfig registers a handler for an agent lifecycle event.
- * Stored on AgentVersion alongside Tools and Skills.
- */
-export interface LifecycleHookConfig {
-    event: HookEvent;
-    type: HookHandlerType;
-    handler?: string;
-    async?: boolean;
-    timeout?: number;
-    /**
-     * Gate-specific fields (type: "gate")
-     */
-    default_resolution?: InterruptResolution;
-}
-/**
- * LifecycleHookPayload is sent to hook handlers on lifecycle events.
- */
-export interface LifecycleHookPayload {
-    event: HookEvent;
-    timestamp: string;
-    agent_id: string;
-    chat_id: string;
-    run_id?: string;
-    turn_count: number;
-    data?: any;
-}
-/**
- * LifecycleHookResponse is returned by hook handlers.
- * All fields are optional — an empty 200 response is equivalent to {decision: "allow"}.
- */
-export interface LifecycleHookResponse {
-    inject?: ContextInjection;
-    decision?: HookDecision;
-    reason?: string;
-    override?: any;
-    system?: string;
-}
-/**
- * ContextInjection adds ephemeral content to the agent's context window.
- * Injections are stored as ChatMessages and filtered at context-build time.
- */
-export interface ContextInjection {
-    content: string;
-    role?: string;
-    ttl_turns?: number;
-    dedup_key?: string;
-}
-/**
- * ToolCallEventData is the typed payload for agent.tool_call events.
- */
-export interface ToolCallEventData {
-    tool: string;
-    arguments?: {
-        [key: string]: any;
-    };
-}
-/**
- * ToolResultEventData is the typed payload for agent.tool_result events.
- */
-export interface ToolResultEventData {
-    tool: string;
-    status: string;
-    result?: string;
-}
-/**
- * ErrorEventData is the typed payload for agent.error events.
- */
-export interface ErrorEventData {
-    error: string;
-}
 /**
  * ElicitationCapability advertises which elicitation modes the client handles.
  * An empty struct is equivalent to form-only for backward compatibility.
@@ -2329,9 +2611,9 @@ export type StringSlice = string[];
 export interface MCPServerDTO {
     id: string;
     user_id: string;
-    user: UserRelationDTO;
+    user?: UserRelationDTO;
     team_id: string;
-    team: TeamRelationDTO;
+    team?: TeamRelationDTO;
     org_id?: string;
     visibility: Visibility;
     slug: string;
@@ -2454,9 +2736,59 @@ export interface PageDTO extends BaseModelDTO, PermissionModelDTO {
     publish_at?: string;
 }
 /**
- * MenuDTO for API responses
+ * CommentDTO for API responses
  */
-export interface MenuDTO extends BaseModelDTO, PermissionModelDTO {
+export interface CommentDTO extends BaseModelDTO, PermissionModelDTO {
+    /**
+     * ResourceType and ResourceID address what is commented on ("artifacts",
+     * "pages"). PageID stays for the page comment API that predates them.
+     */
+    resource_type: string;
+    resource_id: string;
+    page_id: string;
+    content: string;
+    parent_comment_id?: string;
+    children: CommentDTO[];
+    status: CommentStatus;
+    resolved_at?: string;
+    resolved_by_user_id?: string;
+    /**
+     * AgentActivated reports whether an agent may reply to or resolve this
+     * thread. Reading is always allowed to anyone who can read the resource.
+     */
+    agent_activated: boolean;
+    agent_activated_by_user_id?: string;
+    /**
+     * AuthorAgentID attributes a reply written by an agent on a person's
+     * behalf; clients render it as "agent, via <user>".
+     */
+    author_agent_id?: string;
+}
+/**
+ * ArtifactCommentCreateRequest posts a thread or a reply on an artifact.
+ */
+export interface ArtifactCommentCreateRequest {
+    content: string;
+    /**
+     * ParentCommentID replies into an existing thread; omit to start one.
+     */
+    parent_comment_id?: string;
+    /**
+     * SendToAgent activates the thread for agents in the same call, which is
+     * what a "send to agent" affordance does.
+     */
+    send_to_agent?: boolean;
+}
+/**
+ * ArtifactCommentThreadDTO is one thread: its root plus replies in order.
+ */
+export interface ArtifactCommentThreadDTO extends CommentDTO {
+    replies: CommentDTO[];
+}
+/**
+ * MenuDTO for API responses
+ */
+export interface MenuDTO extends BaseModelDTO, PermissionModelDTO {
     name: string;
     slug: string;
     description: string;
@@ -2811,6 +3143,37 @@ export interface SubscriptionDTO extends BaseModelDTO {
     cancel_at_period_end: boolean;
     credits_per_period: number;
 }
+/**
+ * SurveyResponseDTO is the API representation of a survey response.
+ */
+export interface SurveyResponseDTO extends BaseModelDTO, PermissionModelDTO {
+    question_id: string;
+    response: string;
+    agent?: string;
+    source?: string;
+    context?: string;
+}
+/**
+ * SubmitSurveyResponse is returned when submitting a survey answer.
+ * GrantedAmount is the credit reward in microcents (0 if no reward was earned).
+ * RewardBlockedReason is set when the answer was recorded but the reward was
+ * withheld by policy (see RewardBlockedPaymentMethodRequired).
+ */
+export interface SubmitSurveyResponse {
+    response: SurveyResponseDTO;
+    granted_amount?: number;
+    reward_blocked_reason?: string;
+}
+/**
+ * SubmitSurveyRequest is used to submit a single survey answer.
+ */
+export interface SubmitSurveyRequest {
+    question_id: string;
+    response: string;
+    agent?: string;
+    source?: string;
+    context?: string;
+}
 /**
  * Hardware/System related types
  */
@@ -3169,6 +3532,11 @@ export interface UsageEventDTO extends BaseModelDTO, PermissionModelDTO {
 export interface UserDTO extends BaseModelDTO {
     default_team_id: string;
     role: Role;
+    /**
+     * ManagedByOrgID: set for enterprise-managed accounts (no personal team,
+     * cannot create teams/orgs).
+     */
+    managed_by_org_id?: string;
     email: string;
     name: string;
     full_name: string;
@@ -3230,6 +3598,11 @@ export declare const A2UIBadge: A2UIComponentType;
 export declare const A2UISpacer: A2UIComponentType;
 export declare const A2UIChart: A2UIComponentType;
 export declare const A2UIForm: A2UIComponentType;
+/**
+ * Artifact embeds a published artifact (sandboxed page) with a link to
+ * the viewer. Rendered from the artifact's /render endpoint.
+ */
+export declare const A2UIArtifact: A2UIComponentType;
 /**
  * A2UIComponent is the universal component representation.
  * Children are string IDs (flat adjacency list), not nested objects.
@@ -3248,17 +3621,17 @@ export interface A2UIComponent {
     /**
      * Text
      */
-    text?: A2UIBoundValue;
+    text?: A2UIBound;
     variant?: string;
     /**
      * Image
      */
-    url?: A2UIBoundValue;
+    url?: A2UIBound;
     fit?: string;
     /**
      * Icon
      */
-    name?: A2UIBoundValue;
+    name?: A2UIBound;
     /**
      * Divider
      */
@@ -3273,7 +3646,7 @@ export interface A2UIComponent {
      * TextField
      */
     label?: string;
-    value?: A2UIBoundValue;
+    value?: A2UIBound;
     textFieldType?: string;
     validationRegexp?: string;
     placeholder?: string;
@@ -3292,7 +3665,7 @@ export interface A2UIComponent {
      * ChoicePicker
      */
     options?: A2UIChoiceOption[];
-    selections?: A2UIBoundValue;
+    selections?: A2UIBound;
     maxAllowedSelections?: number;
     /**
      * Modal
@@ -3332,7 +3705,16 @@ export interface A2UIComponent {
      * Extension: Form
      */
     onSubmitAction?: A2UIAction;
+    /**
+     * Extension: Artifact
+     */
+    artifactId?: string;
+    artifactVersionId?: string;
+    artifactTitle?: string;
+    artifactUrl?: string;
+    artifactFavicon?: string;
 }
+export type A2UIBound = string | number | boolean | A2UIBoundValue;
 /**
  * A2UIBoundValue is either a literal or a data model path reference.
  */
@@ -3365,164 +3747,6 @@ export interface A2UISurface {
     components: A2UIComponent[];
     dataModel?: any;
 }
-/**
- * AgentEventType identifies what happened in an agent run.
- * These are the backbone protocol events — every consumer (A2A, SDK, frontend)
- * projects from this set.
- */
-export type AgentEventType = string;
-/**
- * Run lifecycle
- */
-export declare const AgentEventRunStarted: AgentEventType;
-export declare const AgentEventRunStateChanged: AgentEventType;
-/**
- * Turn lifecycle
- */
-export declare const AgentEventTurnStarted: AgentEventType;
-export declare const AgentEventTurnCompleted: AgentEventType;
-/**
- * Content streaming — structural wrapper; high-frequency token deltas
- * still flow via the existing DeltaEvent channel for efficiency.
- */
-export declare const AgentEventContentDelta: AgentEventType;
-/**
- * Tool lifecycle
- */
-export declare const AgentEventToolStarted: AgentEventType;
-export declare const AgentEventToolCompleted: AgentEventType;
-/**
- * Approval flow
- */
-export declare const AgentEventApprovalRequired: AgentEventType;
-export declare const AgentEventApprovalResolved: AgentEventType;
-/**
- * Hook lifecycle
- */
-export declare const AgentEventHookExecuted: AgentEventType;
-/**
- * Usage
- */
-export declare const AgentEventUsageUpdated: AgentEventType;
-/**
- * Context management
- */
-export declare const AgentEventContextCompacted: AgentEventType;
-/**
- * Errors
- */
-export declare const AgentEventError: AgentEventType;
-/**
- * AgentEvent is the backbone protocol event for agent runs.
- * Published to "runs:<runID>" and "chats:<chatID>" keys on the event bus.
- */
-export interface AgentEvent {
-    id: string;
-    type: AgentEventType;
-    run_id: string;
-    chat_id: string;
-    agent_id?: string;
-    timestamp: string;
-    payload?: any;
-}
-export interface RunStartedPayload {
-    agent_id: string;
-    agent_version_id?: string;
-    user_message_id?: string;
-}
-export interface RunStateChangedPayload {
-    from_state: AgentRunState;
-    to_state: AgentRunState;
-    error?: string;
-}
-export interface TurnStartedPayload {
-    turn_index: number;
-    model?: string;
-}
-export interface TurnCompletedPayload {
-    turn_index: number;
-    tool_count: number;
-    has_output: boolean;
-    stop_reason?: string;
-}
-export interface ContentDeltaPayload {
-    kind: ContentDeltaKind;
-    delta: string;
-}
-export type ContentDeltaKind = string;
-export declare const ContentDeltaText: ContentDeltaKind;
-export declare const ContentDeltaReasoning: ContentDeltaKind;
-export interface ToolStartedPayload {
-    tool_invocation_id: string;
-    tool_name: string;
-    tool_type?: ToolType;
-    display_name?: string;
-    arguments?: StringEncodedMap;
-}
-export interface ToolCompletedPayload {
-    tool_invocation_id: string;
-    tool_name: string;
-    status: ToolInvocationStatus;
-    result?: string;
-    duration_ms?: number;
-}
-export interface ApprovalRequiredPayload {
-    tool_invocation_id: string;
-    tool_name: string;
-    arguments?: StringEncodedMap;
-    reason: InterruptReason;
-}
-export interface ApprovalResolvedPayload {
-    tool_invocation_id: string;
-    tool_name: string;
-    decision: string;
-    reason?: string;
-}
-export interface HookExecutedPayload {
-    hook_event: HookEvent;
-    decision: HookDecision;
-    reason?: string;
-    duration_ms?: number;
-}
-export interface UsageUpdatedPayload {
-    prompt_tokens: number;
-    completion_tokens: number;
-    total_tokens: number;
-    reasoning_tokens?: number;
-    cost_usd?: number;
-}
-export interface ContextCompactedPayload {
-    before_tokens: number;
-    after_tokens: number;
-}
-export interface ErrorPayload {
-    message: string;
-    code?: string;
-}
-/**
- * AgentRunState tracks the lifecycle of an agent run (one user→agent turn).
- * Maps to A2A TaskState and AG-UI Run outcome for protocol compliance.
- */
-export type AgentRunState = string;
-export declare const AgentRunStateSubmitted: AgentRunState;
-export declare const AgentRunStateWorking: AgentRunState;
-export declare const AgentRunStateInputRequired: AgentRunState;
-export declare const AgentRunStateAuthRequired: AgentRunState;
-export declare const AgentRunStateCompleted: AgentRunState;
-export declare const AgentRunStateFailed: AgentRunState;
-export declare const AgentRunStateCanceled: AgentRunState;
-export declare const AgentRunStateRejected: AgentRunState;
-/**
- * InterruptReason describes why an agent run is in an interrupted state.
- * Aligns with AG-UI interrupt outcome reasons.
- */
-export type InterruptReason = string;
-export declare const InterruptReasonToolApproval: InterruptReason;
-export declare const InterruptReasonClientTool: InterruptReason;
-export declare const InterruptReasonWidget: InterruptReason;
-export declare const InterruptReasonAuth: InterruptReason;
-export declare const InterruptReasonConfirmation: InterruptReason;
-export declare const InterruptReasonHookGate: InterruptReason;
 export type AppCategory = string;
 export declare const AppCategoryImage: AppCategory;
 export declare const AppCategoryVideo: AppCategory;
@@ -3563,6 +3787,13 @@ export declare const VisibilityUnlisted: Visibility;
 export type Permission = string;
 export declare const PermRead: Permission;
 export declare const PermWrite: Permission;
+/**
+ * PermUse is execute intent: run an app, load a skill/knowledge into an
+ * agent context, invoke an MCP tool. Distinct from read — a public
+ * resource is readable by everyone, but whether this caller may USE it is
+ * governed by their team/org usage policy (reach, INF-808).
+ */
+export declare const PermUse: Permission;
 export type SubscriptionStatus = string;
 export declare const SubscriptionStatusTrialing: SubscriptionStatus;
 export declare const SubscriptionStatusActive: SubscriptionStatus;
@@ -3584,6 +3815,16 @@ export declare const EntitlementSourceAddon: EntitlementSource;
 export type EntitlementType = string;
 export declare const EntitlementTypeBoolean: EntitlementType;
 export declare const EntitlementTypeLimit: EntitlementType;
+/**
+ * EntitlementScope is who an entitlement row applies to (INF-799). The scope's
+ * owner columns (team_id / org_id / user_id) identify the owner, mirroring the
+ * ownership pattern used across the codebase; resolution matches all scopes
+ * visible from an AuthContext in one query and mergeEntitlements arbitrates.
+ */
+export type EntitlementScope = string;
+export declare const EntitlementScopeOrg: EntitlementScope;
+export declare const EntitlementScopeTeam: EntitlementScope;
+export declare const EntitlementScopeMember: EntitlementScope;
 export type EnforcementMode = string;
 export declare const EnforcementBlock: EnforcementMode;
 export declare const EnforcementWarn: EnforcementMode;
@@ -3664,9 +3905,6 @@ export interface IntegrationContext {
     integration_type?: IntegrationType;
     integration_metadata?: any;
 }
-export type StringEncodedMap = {
-    [key: string]: any;
-};
 /**
  * EngineStatus represents the status of an engine.
  */
@@ -3829,90 +4067,31 @@ export declare const GraphEdgeTypeSupersedes: GraphEdgeType;
 export declare const GraphEdgeTypeInput: GraphEdgeType;
 export declare const GraphEdgeTypeOutput: GraphEdgeType;
 /**
- * InterruptStatus tracks the lifecycle of an interrupt gate.
+ * MergeStrategy defines how a delta field should be merged by consumers.
  */
-export type InterruptStatus = string;
-export declare const InterruptStatusPending: InterruptStatus;
-export declare const InterruptStatusResolved: InterruptStatus;
-export declare const InterruptStatusExpired: InterruptStatus;
-export declare const InterruptStatusCancelled: InterruptStatus;
+export type MergeStrategy = string;
+export declare const MergeStrategyConcat: MergeStrategy;
+export declare const MergeStrategyReplace: MergeStrategy;
+export declare const MergeStrategyIndexed: MergeStrategy;
+export declare const MergeStrategyNested: MergeStrategy;
 /**
- * InterruptResolution records how a pending interrupt was resolved.
+ * StreamDelta is the marker base for all streaming delta types.
+ * Types embedding StreamDelta are routed through the delta channel.
  */
-export type InterruptResolution = string;
-export declare const InterruptResolutionAllow: InterruptResolution;
-export declare const InterruptResolutionDeny: InterruptResolution;
+export interface StreamDelta {
+}
 /**
- * InterruptResourceType identifies the kind of resource an interrupt gates.
+ * LLMOutput is the output envelope from an LLM provider task.
+ * This is the contract between chat apps (sdk-py) and the agent runtime (go/api).
  */
-export type InterruptResourceType = string;
-export declare const InterruptResourceToolInvocation: InterruptResourceType;
-export declare const InterruptResourceHookEvent: InterruptResourceType;
+export interface LLMOutput {
+    response: string;
+    reasoning?: string;
+    tool_calls?: ToolCall[];
+    usage?: LLMUsage;
+}
 /**
- * HookEvent is a lifecycle event in the agent conversation loop.
- * Events fire at well-defined points in the turn cycle, giving external
- * handlers the ability to observe, inject context, or halt execution.
- */
-export type HookEvent = string;
-export declare const HookEventAgentStart: HookEvent;
-export declare const HookEventTurnStart: HookEvent;
-export declare const HookEventToolCall: HookEvent;
-export declare const HookEventToolResult: HookEvent;
-export declare const HookEventTurnComplete: HookEvent;
-export declare const HookEventAgentError: HookEvent;
-export declare const HookEventAgentComplete: HookEvent;
-export declare const HookEventAgentIdle: HookEvent;
-export declare const HookEventPreCompact: HookEvent;
-export declare const HookEventPostCompact: HookEvent;
-/**
- * HookEventDefinition describes a lifecycle hook event and its capabilities.
- */
-export interface HookEventDefinition {
-    event: HookEvent;
-    description: string;
-    can_gate: boolean;
-}
-/**
- * HookDecision is the handler's verdict on whether execution should continue.
- */
-export type HookDecision = string;
-export declare const HookDecisionAllow: HookDecision;
-export declare const HookDecisionDeny: HookDecision;
-export declare const HookDecisionStop: HookDecision;
-export declare const HookDecisionSuspend: HookDecision;
-/**
- * HookHandlerType distinguishes how a lifecycle hook is executed.
- */
-export type HookHandlerType = string;
-export declare const HookHandlerWebhook: HookHandlerType;
-export declare const HookHandlerTask: HookHandlerType;
-export declare const HookHandlerGate: HookHandlerType;
-/**
- * MergeStrategy defines how a delta field should be merged by consumers.
- */
-export type MergeStrategy = string;
-export declare const MergeStrategyConcat: MergeStrategy;
-export declare const MergeStrategyReplace: MergeStrategy;
-export declare const MergeStrategyIndexed: MergeStrategy;
-export declare const MergeStrategyNested: MergeStrategy;
-/**
- * StreamDelta is the marker base for all streaming delta types.
- * Types embedding StreamDelta are routed through the delta channel.
- */
-export interface StreamDelta {
-}
-/**
- * LLMOutput is the output envelope from an LLM provider task.
- * This is the contract between chat apps (sdk-py) and the agent runtime (go/api).
- */
-export interface LLMOutput {
-    response: string;
-    reasoning?: string;
-    tool_calls?: ToolCall[];
-    usage?: LLMUsage;
-}
-/**
- * LLMDelta is a streaming delta for LLMOutput.
+ * LLMDelta is a streaming delta for LLMOutput.
  */
 export interface LLMDelta extends StreamDelta {
     response: string;
@@ -4020,14 +4199,15 @@ export interface ResponseFormat {
 }
 /**
  * LLMSettings is everything that configures a generation independent of the
- * conversation: model, context, sampling, system prompt, tools and output
+ * conversation: context, sampling, system prompt, tools and output
  * constraints. Embedded (tstype extends) by BaseLLMInput — an agent's stored
  * configuration — and LLMInput — a single call — so a field added here
  * reaches both, and the call is built from the configuration by one
  * assignment.
+ * Which model runs is not a setting: the app is the model. An app that
+ * fronts several models (a router) declares its own `model` input.
  */
 export interface LLMSettings {
-    model?: string;
     context_size: number;
     temperature?: number;
     top_p?: number;
@@ -4103,29 +4283,11 @@ export declare const PageTypeDoc: PageType;
 export declare const PageTypeBlog: PageType;
 export declare const PageTypePage: PageType;
 export declare const PageTypeAnnouncement: PageType;
-/**
- * ToolInvocationStatus represents the execution status of a tool invocation
- */
-export type ToolInvocationStatus = string;
-export declare const ToolInvocationStatusPending: ToolInvocationStatus;
-export declare const ToolInvocationStatusInProgress: ToolInvocationStatus;
-export declare const ToolInvocationStatusAwaitingInput: ToolInvocationStatus;
-export declare const ToolInvocationStatusAwaitingApproval: ToolInvocationStatus;
-export declare const ToolInvocationStatusCompleted: ToolInvocationStatus;
-export declare const ToolInvocationStatusFailed: ToolInvocationStatus;
-export declare const ToolInvocationStatusCancelled: ToolInvocationStatus;
-/**
- * ToolType represents the type of tool (used in both AgentTool definition and ToolInvocation)
- */
-export type ToolType = string;
-export declare const ToolTypeApp: ToolType;
-export declare const ToolTypeAgent: ToolType;
-export declare const ToolTypeHook: ToolType;
-export declare const ToolTypeHTTP: ToolType;
-export declare const ToolTypeCall: ToolType;
-export declare const ToolTypeMCP: ToolType;
-export declare const ToolTypeClient: ToolType;
-export declare const ToolTypeInternal: ToolType;
+export type CommentStatus = number;
+export declare const CommentStatusUnknown: CommentStatus;
+export declare const CommentStatusDraft: CommentStatus;
+export declare const CommentStatusPublished: CommentStatus;
+export declare const CommentStatusArchived: CommentStatus;
 export type InstanceCloudProvider = string;
 export declare const CloudAWS: InstanceCloudProvider;
 export declare const CloudAmaya: InstanceCloudProvider;
@@ -4236,6 +4398,12 @@ export declare const KnowledgeLifecyclePermanent: KnowledgeLifecycle;
 export declare const KnowledgeLifecycleDecay: KnowledgeLifecycle;
 export declare const KnowledgeLifecycleDraft: KnowledgeLifecycle;
 export declare const KnowledgeLifecycleDeprecated: KnowledgeLifecycle;
+/**
+ * ArtifactType is the source format of an artifact page.
+ */
+export type ArtifactType = string;
+export declare const ArtifactTypeHTML: ArtifactType;
+export declare const ArtifactTypeMarkdown: ArtifactType;
 export type FilterOperator = string;
 export declare const OpEqual: FilterOperator;
 export declare const OpNotEqual: FilterOperator;
@@ -4512,6 +4680,14 @@ export type TeamType = string;
 export declare const TeamTypePersonal: TeamType;
 export declare const TeamTypeTeam: TeamType;
 export declare const TeamTypeSystem: TeamType;
+/**
+ * TeamTypeOrg is an organization's own workspace. Its id is the org's
+ * id, its org_id points at itself, its members are the org's admins, and
+ * it owns what the org owns: the payer row, billing settings, org-scope
+ * credentials. Minted by org creation only; never archived while member
+ * teams exist.
+ */
+export declare const TeamTypeOrg: TeamType;
 export type TeamStatus = string;
 export declare const TeamStatusActive: TeamStatus;
 export declare const TeamStatusSuspended: TeamStatus;
@@ -4520,6 +4696,335 @@ export type TeamRole = string;
 export declare const TeamRoleOwner: TeamRole;
 export declare const TeamRoleAdmin: TeamRole;
 export declare const TeamRoleMember: TeamRole;
+export type Role = string;
+export declare const RoleGuest: Role;
+export declare const RoleUser: Role;
+export declare const RoleAdmin: Role;
+export declare const RoleSystem: Role;
+/**
+ * UtilityConfig defines a flow utility node — gate, selector, merge, or custom CEL.
+ */
+export interface UtilityConfig {
+    preset: string;
+    expression?: string;
+    gate?: GateCondition;
+    selector?: SelectorConfig;
+    constant?: any;
+}
+/**
+ * AgentEventType identifies what happened in an agent run.
+ * These are the backbone protocol events — every consumer (A2A, SDK, frontend)
+ * projects from this set.
+ */
+export type AgentEventType = string;
+/**
+ * Run lifecycle
+ */
+export declare const AgentEventRunStarted: AgentEventType;
+export declare const AgentEventRunStateChanged: AgentEventType;
+/**
+ * Turn lifecycle
+ */
+export declare const AgentEventTurnStarted: AgentEventType;
+export declare const AgentEventTurnCompleted: AgentEventType;
+/**
+ * Content streaming — structural wrapper; high-frequency token deltas
+ * still flow via the existing DeltaEvent channel for efficiency.
+ */
+export declare const AgentEventContentDelta: AgentEventType;
+/**
+ * Tool lifecycle
+ */
+export declare const AgentEventToolStarted: AgentEventType;
+export declare const AgentEventToolCompleted: AgentEventType;
+/**
+ * Approval flow
+ */
+export declare const AgentEventApprovalRequired: AgentEventType;
+export declare const AgentEventApprovalResolved: AgentEventType;
+/**
+ * Hook lifecycle
+ */
+export declare const AgentEventHookExecuted: AgentEventType;
+/**
+ * Usage
+ */
+export declare const AgentEventUsageUpdated: AgentEventType;
+/**
+ * Context management
+ */
+export declare const AgentEventContextCompacted: AgentEventType;
+/**
+ * Errors
+ */
+export declare const AgentEventError: AgentEventType;
+/**
+ * AgentEvent is the backbone protocol event for agent runs.
+ * Published to "runs:<runID>" and "chats:<chatID>" keys on the event bus.
+ */
+export interface AgentEvent {
+    id: string;
+    type: AgentEventType;
+    run_id: string;
+    chat_id: string;
+    agent_id?: string;
+    timestamp: string;
+    payload?: any;
+}
+export interface RunStartedPayload {
+    agent_id: string;
+    agent_version_id?: string;
+    user_message_id?: string;
+}
+export interface RunStateChangedPayload {
+    from_state: AgentRunState;
+    to_state: AgentRunState;
+    error?: string;
+}
+export interface TurnStartedPayload {
+    turn_index: number;
+    model?: string;
+}
+export interface TurnCompletedPayload {
+    turn_index: number;
+    tool_count: number;
+    has_output: boolean;
+    stop_reason?: string;
+}
+export interface ContentDeltaPayload {
+    kind: ContentDeltaKind;
+    delta: string;
+}
+export type ContentDeltaKind = string;
+export declare const ContentDeltaText: ContentDeltaKind;
+export declare const ContentDeltaReasoning: ContentDeltaKind;
+export interface ToolStartedPayload {
+    tool_invocation_id: string;
+    tool_name: string;
+    tool_type?: ToolType;
+    display_name?: string;
+    arguments?: StringEncodedMap;
+}
+export interface ToolCompletedPayload {
+    tool_invocation_id: string;
+    tool_name: string;
+    status: ToolInvocationStatus;
+    result?: string;
+    duration_ms?: number;
+}
+export interface ApprovalRequiredPayload {
+    tool_invocation_id: string;
+    tool_name: string;
+    arguments?: StringEncodedMap;
+    reason: InterruptReason;
+}
+export interface ApprovalResolvedPayload {
+    tool_invocation_id: string;
+    tool_name: string;
+    decision: string;
+    reason?: string;
+}
+export interface HookExecutedPayload {
+    hook_event: HookEvent;
+    decision: HookDecision;
+    reason?: string;
+    duration_ms?: number;
+}
+export interface UsageUpdatedPayload {
+    prompt_tokens: number;
+    completion_tokens: number;
+    total_tokens: number;
+    reasoning_tokens?: number;
+    cost_usd?: number;
+}
+export interface ContextCompactedPayload {
+    before_tokens: number;
+    after_tokens: number;
+}
+export interface ErrorPayload {
+    message: string;
+    code?: string;
+}
+/**
+ * AgentRunState tracks the lifecycle of an agent run (one user→agent turn).
+ * Maps to A2A TaskState and AG-UI Run outcome for protocol compliance.
+ */
+export type AgentRunState = string;
+export declare const AgentRunStateSubmitted: AgentRunState;
+export declare const AgentRunStateWorking: AgentRunState;
+export declare const AgentRunStateInputRequired: AgentRunState;
+export declare const AgentRunStateAuthRequired: AgentRunState;
+export declare const AgentRunStateCompleted: AgentRunState;
+export declare const AgentRunStateFailed: AgentRunState;
+export declare const AgentRunStateCanceled: AgentRunState;
+export declare const AgentRunStateRejected: AgentRunState;
+/**
+ * InterruptReason describes why an agent run is in an interrupted state.
+ * Aligns with AG-UI interrupt outcome reasons.
+ */
+export type InterruptReason = string;
+export declare const InterruptReasonToolApproval: InterruptReason;
+export declare const InterruptReasonClientTool: InterruptReason;
+export declare const InterruptReasonWidget: InterruptReason;
+export declare const InterruptReasonAuth: InterruptReason;
+export declare const InterruptReasonConfirmation: InterruptReason;
+export declare const InterruptReasonHookGate: InterruptReason;
+export type StringEncodedMap = {
+    [key: string]: any;
+};
+/**
+ * InterruptStatus tracks the lifecycle of an interrupt gate.
+ */
+export type InterruptStatus = string;
+export declare const InterruptStatusPending: InterruptStatus;
+export declare const InterruptStatusResolved: InterruptStatus;
+export declare const InterruptStatusExpired: InterruptStatus;
+export declare const InterruptStatusCancelled: InterruptStatus;
+/**
+ * InterruptResolution records how a pending interrupt was resolved.
+ */
+export type InterruptResolution = string;
+export declare const InterruptResolutionAllow: InterruptResolution;
+export declare const InterruptResolutionDeny: InterruptResolution;
+/**
+ * InterruptResourceType identifies the kind of resource an interrupt gates.
+ */
+export type InterruptResourceType = string;
+export declare const InterruptResourceToolInvocation: InterruptResourceType;
+export declare const InterruptResourceHookEvent: InterruptResourceType;
+/**
+ * HookEvent is a lifecycle event in the agent conversation loop.
+ * Events fire at well-defined points in the turn cycle, giving external
+ * handlers the ability to observe, inject context, or halt execution.
+ */
+export type HookEvent = string;
+export declare const HookEventAgentStart: HookEvent;
+export declare const HookEventTurnStart: HookEvent;
+export declare const HookEventToolCall: HookEvent;
+export declare const HookEventToolResult: HookEvent;
+export declare const HookEventTurnComplete: HookEvent;
+export declare const HookEventAgentError: HookEvent;
+export declare const HookEventAgentComplete: HookEvent;
+export declare const HookEventAgentIdle: HookEvent;
+export declare const HookEventPreCompact: HookEvent;
+export declare const HookEventPostCompact: HookEvent;
+/**
+ * HookEventDefinition describes a lifecycle hook event and its capabilities.
+ */
+export interface HookEventDefinition {
+    event: HookEvent;
+    description: string;
+    can_gate: boolean;
+}
+/**
+ * HookDecision is the handler's verdict on whether execution should continue.
+ */
+export type HookDecision = string;
+export declare const HookDecisionAllow: HookDecision;
+export declare const HookDecisionDeny: HookDecision;
+export declare const HookDecisionStop: HookDecision;
+export declare const HookDecisionSuspend: HookDecision;
+/**
+ * HookHandlerType distinguishes how a lifecycle hook is executed.
+ */
+export type HookHandlerType = string;
+export declare const HookHandlerWebhook: HookHandlerType;
+export declare const HookHandlerTask: HookHandlerType;
+export declare const HookHandlerGate: HookHandlerType;
+/**
+ * LifecycleHookConfig registers a handler for an agent lifecycle event.
+ * Stored on AgentVersion alongside Tools and Skills.
+ */
+export interface LifecycleHookConfig {
+    event: HookEvent;
+    type: HookHandlerType;
+    handler?: string;
+    async?: boolean;
+    timeout?: number;
+    /**
+     * Gate-specific fields (type: "gate")
+     */
+    default_resolution?: InterruptResolution;
+}
+/**
+ * LifecycleHookPayload is sent to hook handlers on lifecycle events.
+ */
+export interface LifecycleHookPayload {
+    event: HookEvent;
+    timestamp: string;
+    agent_id: string;
+    chat_id: string;
+    run_id?: string;
+    turn_count: number;
+    data?: any;
+}
+/**
+ * LifecycleHookResponse is returned by hook handlers.
+ * All fields are optional — an empty 200 response is equivalent to {decision: "allow"}.
+ */
+export interface LifecycleHookResponse {
+    inject?: ContextInjection;
+    decision?: HookDecision;
+    reason?: string;
+    override?: any;
+    system?: string;
+}
+/**
+ * ContextInjection adds ephemeral content to the agent's context window.
+ * Injections are stored as ChatMessages and filtered at context-build time.
+ */
+export interface ContextInjection {
+    content: string;
+    role?: string;
+    ttl_turns?: number;
+    dedup_key?: string;
+}
+/**
+ * ToolCallEventData is the typed payload for agent.tool_call events.
+ */
+export interface ToolCallEventData {
+    tool: string;
+    arguments?: {
+        [key: string]: any;
+    };
+}
+/**
+ * ToolResultEventData is the typed payload for agent.tool_result events.
+ */
+export interface ToolResultEventData {
+    tool: string;
+    status: string;
+    result?: string;
+}
+/**
+ * ErrorEventData is the typed payload for agent.error events.
+ */
+export interface ErrorEventData {
+    error: string;
+}
+/**
+ * ToolInvocationStatus represents the execution status of a tool invocation
+ */
+export type ToolInvocationStatus = string;
+export declare const ToolInvocationStatusPending: ToolInvocationStatus;
+export declare const ToolInvocationStatusInProgress: ToolInvocationStatus;
+export declare const ToolInvocationStatusAwaitingInput: ToolInvocationStatus;
+export declare const ToolInvocationStatusAwaitingApproval: ToolInvocationStatus;
+export declare const ToolInvocationStatusCompleted: ToolInvocationStatus;
+export declare const ToolInvocationStatusFailed: ToolInvocationStatus;
+export declare const ToolInvocationStatusCancelled: ToolInvocationStatus;
+/**
+ * ToolType represents the type of tool (used in both AgentTool definition and ToolInvocation)
+ */
+export type ToolType = string;
+export declare const ToolTypeApp: ToolType;
+export declare const ToolTypeAgent: ToolType;
+export declare const ToolTypeHook: ToolType;
+export declare const ToolTypeHTTP: ToolType;
+export declare const ToolTypeCall: ToolType;
+export declare const ToolTypeMCP: ToolType;
+export declare const ToolTypeClient: ToolType;
+export declare const ToolTypeInternal: ToolType;
 /**
  * ToolCallType represents the type field on a tool call (wire format).
  */
@@ -4630,18 +5135,3 @@ export interface ToolParameterProperty {
     items?: ToolParameterProperty;
     required?: string[];
 }
-export type Role = string;
-export declare const RoleGuest: Role;
-export declare const RoleUser: Role;
-export declare const RoleAdmin: Role;
-export declare const RoleSystem: Role;
-/**
- * UtilityConfig defines a flow utility node — gate, selector, merge, or custom CEL.
- */
-export interface UtilityConfig {
-    preset: string;
-    expression?: string;
-    gate?: GateCondition;
-    selector?: SelectorConfig;
-    constant?: any;
-}