@intentic/sandbox-contract 1.315.0 → 1.317.0

package/dist/index.d.ts

@@ -24,7 +24,7 @@ export { intenticContract } from "./contracts/intentic.contract.js";
 export { inventoryContract } from "./contracts/inventory.contract.js";
 export { issuesContract } from "./contracts/issues.contract.js";
 export { logsContract } from "./contracts/logs.contract.js";
-export { REQUEST_ID_EVIDENCE_ROUTE, REQUEST_ID_HEADER } from "./protocol/request-id.js";
+export { REQUEST_ID_HEADER } from "./protocol/request-id.js";
 export * from "./protocol/edge-verdict.js";
 export { loopsContract } from "./contracts/loops.contract.js";
 export { panelsContract } from "./contracts/panels.contract.js";
@@ -33,6 +33,7 @@ export { publicContract } from "./contracts/public.contract.js";
 export { providersContract, type RunnableProviders, RunnableProvidersSchema } from "./contracts/providers.contract.js";
 export { pushContract } from "./contracts/push.contract.js";
 export { safetyContract } from "./contracts/safety.contract.js";
+export { needsContract } from "./contracts/needs.contract.js";
 export { secretsContract } from "./contracts/secrets.contract.js";
 export { sessionsContract } from "./contracts/sessions.contract.js";
 export { settingsContract } from "./contracts/settings.contract.js";
@@ -56,6 +57,7 @@ export * from "./events/land-breakage.js";
 export * from "./events/land-conflict.js";
 export * from "./events/verify-nudge.js";
 export * from "./events/errands.js";
+export * from "./events/need-wake.js";
 export * from "./events/watch-wake.js";
 export * from "./policy/request-status.js";
 export * from "./events/child-run.js";
@@ -150,6 +152,7 @@ export * from "./schemas/providers/provider-subscriptions.js";
 export * from "./schemas/public.js";
 export * from "./schemas/push.js";
 export * from "./schemas/git/remote-refs.js";
+export * from "./schemas/needs.js";
 export * from "./schemas/secrets.js";
 export * from "./schemas/netdisk.js";
 export * from "./schemas/sessions.js";
@@ -160,6 +163,7 @@ export * from "./schemas/shared.js";
 export * from "./schemas/system-prompt.js";
 export * from "./schemas/system.js";
 export * from "./schemas/state-plan.js";
+export * from "./schemas/updates.js";
 export * from "./schemas/terminal.js";
 export * from "./schemas/turn-break.js";
 export * from "./schemas/keep-warm.js";
@@ -170,7 +174,7 @@ export * from "./schemas/webext.js";
 export * from "./schemas/workflows.js";
 export * from "./schemas/workspace/workspace-repos.js";
 export * from "./schemas/workspace/workspace-search.js";
-export * from "./schemas/workspace/mainline.js";
+export * from "./schemas/workspace/push-checks.js";
 export * from "./schemas/workspace/workspace-setup.js";
 export * from "./schemas/workspace/workspace-tree.js";
 export * from "./state/arrival.js";
@@ -780,6 +784,60 @@ export declare const sandboxContract: {
                     elapsed: string;
                     sent: string;
                 } | undefined;
+                need?: {
+                    id: string;
+                    conversationId: string;
+                    subject: {
+                        kind: "capability";
+                        entry: string;
+                        name: string;
+                        mode: "change" | "connect" | "reconnect";
+                        instance?: string | undefined;
+                        target?: string | undefined;
+                        prefill?: Record<string, string> | undefined;
+                        changes?: Record<string, string> | undefined;
+                        reason?: string | undefined;
+                        reported?: boolean | undefined;
+                    } | {
+                        kind: "secret";
+                        name: string;
+                        where?: string | undefined;
+                        link?: string | undefined;
+                        hint?: string | undefined;
+                        replace?: boolean | undefined;
+                    } | {
+                        kind: "grant";
+                        subject: "capability" | "folder" | "shelf" | "site";
+                        what: string;
+                        label: string;
+                        persona?: string | undefined;
+                        scope?: "conversation" | "persona" | undefined;
+                    } | {
+                        kind: "release";
+                        subject: string;
+                        approvers: string[];
+                    } | {
+                        kind: "environment";
+                        tool: string;
+                        steps: string;
+                        approvedHash?: string | undefined;
+                    };
+                    title: string;
+                    why?: string | undefined;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                    createdAt: number;
+                    updatedAt: number;
+                    answeredBy?: string | undefined;
+                    outcome?: string | undefined;
+                    told?: "call" | "queued" | "turn" | undefined;
+                    unattended?: boolean | undefined;
+                } | undefined;
+                needWake?: {
+                    outcome: "declined" | "met";
+                    title: string;
+                    id: string;
+                    sent: string;
+                } | undefined;
                 agentWords?: {
                     kind: "child" | "peer";
                     from: string;
@@ -995,6 +1053,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1208,6 +1320,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1451,6 +1617,60 @@ export declare const sandboxContract: {
                     elapsed: string;
                     sent: string;
                 } | undefined;
+                need?: {
+                    id: string;
+                    conversationId: string;
+                    subject: {
+                        kind: "capability";
+                        entry: string;
+                        name: string;
+                        mode: "change" | "connect" | "reconnect";
+                        instance?: string | undefined;
+                        target?: string | undefined;
+                        prefill?: Record<string, string> | undefined;
+                        changes?: Record<string, string> | undefined;
+                        reason?: string | undefined;
+                        reported?: boolean | undefined;
+                    } | {
+                        kind: "secret";
+                        name: string;
+                        where?: string | undefined;
+                        link?: string | undefined;
+                        hint?: string | undefined;
+                        replace?: boolean | undefined;
+                    } | {
+                        kind: "grant";
+                        subject: "capability" | "folder" | "shelf" | "site";
+                        what: string;
+                        label: string;
+                        persona?: string | undefined;
+                        scope?: "conversation" | "persona" | undefined;
+                    } | {
+                        kind: "release";
+                        subject: string;
+                        approvers: string[];
+                    } | {
+                        kind: "environment";
+                        tool: string;
+                        steps: string;
+                        approvedHash?: string | undefined;
+                    };
+                    title: string;
+                    why?: string | undefined;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                    createdAt: number;
+                    updatedAt: number;
+                    answeredBy?: string | undefined;
+                    outcome?: string | undefined;
+                    told?: "call" | "queued" | "turn" | undefined;
+                    unattended?: boolean | undefined;
+                } | undefined;
+                needWake?: {
+                    outcome: "declined" | "met";
+                    title: string;
+                    id: string;
+                    sent: string;
+                } | undefined;
                 agentWords?: {
                     kind: "child" | "peer";
                     from: string;
@@ -1666,6 +1886,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1879,6 +2153,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -2212,6 +2540,85 @@ export declare const sandboxContract: {
                         elapsed: z.ZodString;
                         sent: z.ZodString;
                     }, z.core.$strip>>;
+                    need: z.ZodOptional<z.ZodObject<{
+                        id: z.ZodString;
+                        conversationId: z.ZodString;
+                        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"capability">;
+                            entry: z.ZodString;
+                            name: z.ZodString;
+                            mode: z.ZodEnum<{
+                                change: "change";
+                                connect: "connect";
+                                reconnect: "reconnect";
+                            }>;
+                            instance: z.ZodOptional<z.ZodString>;
+                            target: z.ZodOptional<z.ZodString>;
+                            prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                            changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                            reason: z.ZodOptional<z.ZodString>;
+                            reported: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"secret">;
+                            name: z.ZodString;
+                            where: z.ZodOptional<z.ZodString>;
+                            link: z.ZodOptional<z.ZodString>;
+                            hint: z.ZodOptional<z.ZodString>;
+                            replace: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"grant">;
+                            subject: z.ZodEnum<{
+                                capability: "capability";
+                                folder: "folder";
+                                shelf: "shelf";
+                                site: "site";
+                            }>;
+                            what: z.ZodString;
+                            label: z.ZodString;
+                            persona: z.ZodOptional<z.ZodString>;
+                            scope: z.ZodOptional<z.ZodEnum<{
+                                conversation: "conversation";
+                                persona: "persona";
+                            }>>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"release">;
+                            subject: z.ZodString;
+                            approvers: z.ZodArray<z.ZodString>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"environment">;
+                            tool: z.ZodString;
+                            steps: z.ZodString;
+                            approvedHash: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>], "kind">;
+                        title: z.ZodString;
+                        why: z.ZodOptional<z.ZodString>;
+                        status: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            declined: "declined";
+                            met: "met";
+                            open: "open";
+                            working: "working";
+                        }>;
+                        createdAt: z.ZodNumber;
+                        updatedAt: z.ZodNumber;
+                        answeredBy: z.ZodOptional<z.ZodString>;
+                        outcome: z.ZodOptional<z.ZodString>;
+                        told: z.ZodOptional<z.ZodEnum<{
+                            call: "call";
+                            queued: "queued";
+                            turn: "turn";
+                        }>>;
+                        unattended: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>>;
+                    needWake: z.ZodOptional<z.ZodObject<{
+                        outcome: z.ZodEnum<{
+                            declined: "declined";
+                            met: "met";
+                        }>;
+                        title: z.ZodString;
+                        id: z.ZodString;
+                        sent: z.ZodString;
+                    }, z.core.$strip>>;
                     agentWords: z.ZodOptional<z.ZodObject<{
                         kind: z.ZodEnum<{
                             child: "child";
@@ -2539,6 +2946,85 @@ export declare const sandboxContract: {
                             elapsed: z.ZodString;
                             sent: z.ZodString;
                         }, z.core.$strip>>;
+                        need: z.ZodOptional<z.ZodObject<{
+                            id: z.ZodString;
+                            conversationId: z.ZodString;
+                            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                                kind: z.ZodLiteral<"capability">;
+                                entry: z.ZodString;
+                                name: z.ZodString;
+                                mode: z.ZodEnum<{
+                                    change: "change";
+                                    connect: "connect";
+                                    reconnect: "reconnect";
+                                }>;
+                                instance: z.ZodOptional<z.ZodString>;
+                                target: z.ZodOptional<z.ZodString>;
+                                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                reason: z.ZodOptional<z.ZodString>;
+                                reported: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"secret">;
+                                name: z.ZodString;
+                                where: z.ZodOptional<z.ZodString>;
+                                link: z.ZodOptional<z.ZodString>;
+                                hint: z.ZodOptional<z.ZodString>;
+                                replace: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"grant">;
+                                subject: z.ZodEnum<{
+                                    capability: "capability";
+                                    folder: "folder";
+                                    shelf: "shelf";
+                                    site: "site";
+                                }>;
+                                what: z.ZodString;
+                                label: z.ZodString;
+                                persona: z.ZodOptional<z.ZodString>;
+                                scope: z.ZodOptional<z.ZodEnum<{
+                                    conversation: "conversation";
+                                    persona: "persona";
+                                }>>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"release">;
+                                subject: z.ZodString;
+                                approvers: z.ZodArray<z.ZodString>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"environment">;
+                                tool: z.ZodString;
+                                steps: z.ZodString;
+                                approvedHash: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>], "kind">;
+                            title: z.ZodString;
+                            why: z.ZodOptional<z.ZodString>;
+                            status: z.ZodEnum<{
+                                cancelled: "cancelled";
+                                declined: "declined";
+                                met: "met";
+                                open: "open";
+                                working: "working";
+                            }>;
+                            createdAt: z.ZodNumber;
+                            updatedAt: z.ZodNumber;
+                            answeredBy: z.ZodOptional<z.ZodString>;
+                            outcome: z.ZodOptional<z.ZodString>;
+                            told: z.ZodOptional<z.ZodEnum<{
+                                call: "call";
+                                queued: "queued";
+                                turn: "turn";
+                            }>>;
+                            unattended: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>>;
+                        needWake: z.ZodOptional<z.ZodObject<{
+                            outcome: z.ZodEnum<{
+                                declined: "declined";
+                                met: "met";
+                            }>;
+                            title: z.ZodString;
+                            id: z.ZodString;
+                            sent: z.ZodString;
+                        }, z.core.$strip>>;
                         agentWords: z.ZodOptional<z.ZodObject<{
                             kind: z.ZodEnum<{
                                 child: "child";
@@ -2864,6 +3350,85 @@ export declare const sandboxContract: {
                             elapsed: z.ZodString;
                             sent: z.ZodString;
                         }, z.core.$strip>>;
+                        need: z.ZodOptional<z.ZodObject<{
+                            id: z.ZodString;
+                            conversationId: z.ZodString;
+                            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                                kind: z.ZodLiteral<"capability">;
+                                entry: z.ZodString;
+                                name: z.ZodString;
+                                mode: z.ZodEnum<{
+                                    change: "change";
+                                    connect: "connect";
+                                    reconnect: "reconnect";
+                                }>;
+                                instance: z.ZodOptional<z.ZodString>;
+                                target: z.ZodOptional<z.ZodString>;
+                                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                reason: z.ZodOptional<z.ZodString>;
+                                reported: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"secret">;
+                                name: z.ZodString;
+                                where: z.ZodOptional<z.ZodString>;
+                                link: z.ZodOptional<z.ZodString>;
+                                hint: z.ZodOptional<z.ZodString>;
+                                replace: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"grant">;
+                                subject: z.ZodEnum<{
+                                    capability: "capability";
+                                    folder: "folder";
+                                    shelf: "shelf";
+                                    site: "site";
+                                }>;
+                                what: z.ZodString;
+                                label: z.ZodString;
+                                persona: z.ZodOptional<z.ZodString>;
+                                scope: z.ZodOptional<z.ZodEnum<{
+                                    conversation: "conversation";
+                                    persona: "persona";
+                                }>>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"release">;
+                                subject: z.ZodString;
+                                approvers: z.ZodArray<z.ZodString>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"environment">;
+                                tool: z.ZodString;
+                                steps: z.ZodString;
+                                approvedHash: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>], "kind">;
+                            title: z.ZodString;
+                            why: z.ZodOptional<z.ZodString>;
+                            status: z.ZodEnum<{
+                                cancelled: "cancelled";
+                                declined: "declined";
+                                met: "met";
+                                open: "open";
+                                working: "working";
+                            }>;
+                            createdAt: z.ZodNumber;
+                            updatedAt: z.ZodNumber;
+                            answeredBy: z.ZodOptional<z.ZodString>;
+                            outcome: z.ZodOptional<z.ZodString>;
+                            told: z.ZodOptional<z.ZodEnum<{
+                                call: "call";
+                                queued: "queued";
+                                turn: "turn";
+                            }>>;
+                            unattended: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>>;
+                        needWake: z.ZodOptional<z.ZodObject<{
+                            outcome: z.ZodEnum<{
+                                declined: "declined";
+                                met: "met";
+                            }>;
+                            title: z.ZodString;
+                            id: z.ZodString;
+                            sent: z.ZodString;
+                        }, z.core.$strip>>;
                         agentWords: z.ZodOptional<z.ZodObject<{
                             kind: z.ZodEnum<{
                                 child: "child";
@@ -3175,6 +3740,7 @@ export declare const sandboxContract: {
                 message: z.ZodString;
                 account: z.ZodOptional<z.ZodString>;
                 model: z.ZodOptional<z.ZodString>;
+                resetsAt: z.ZodOptional<z.ZodNumber>;
             }, z.core.$strip>>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
     };
@@ -3367,6 +3933,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -3436,6 +4003,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -3662,6 +4247,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -3731,6 +4317,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -3975,6 +4579,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -4044,6 +4649,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -4335,17 +4958,96 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
-                agentWords: z.ZodOptional<z.ZodObject<{
-                    kind: z.ZodEnum<{
-                        child: "child";
-                        peer: "peer";
-                    }>;
-                    from: z.ZodString;
-                    title: z.ZodOptional<z.ZodString>;
-                    failed: z.ZodOptional<z.ZodBoolean>;
-                    sent: z.ZodString;
-                }, z.core.$strip>>;
-                backgroundJob: z.ZodOptional<z.ZodObject<{
+                need: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
+                            capability: "capability";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
+                        }>;
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                agentWords: z.ZodOptional<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        child: "child";
+                        peer: "peer";
+                    }>;
+                    from: z.ZodString;
+                    title: z.ZodOptional<z.ZodString>;
+                    failed: z.ZodOptional<z.ZodBoolean>;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                backgroundJob: z.ZodOptional<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
                     command: z.ZodString;
@@ -4655,6 +5357,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -4724,6 +5427,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -4932,6 +5653,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5001,6 +5723,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5219,6 +5959,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5288,6 +6029,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5496,6 +6255,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5565,6 +6325,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5772,6 +6550,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5841,6 +6620,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6049,6 +6846,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6118,6 +6916,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6326,6 +7142,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6395,6 +7212,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6603,6 +7438,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6672,6 +7508,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6878,6 +7732,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -6947,6 +7802,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -7376,6 +8249,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -7445,6 +8319,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -7653,6 +8545,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -7722,6 +8615,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -7931,6 +8842,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -8000,6 +8912,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -8213,6 +9143,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -8282,6 +9213,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -8496,6 +9445,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -8565,6 +9515,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -9218,6 +10186,12 @@ export declare const sandboxContract: {
                 port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
                 user: z.ZodString;
                 privateKey: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                auth: z.ZodLiteral<"generated">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                privateKey: z.ZodString;
             }, z.core.$strip>, z.ZodObject<{
                 auth: z.ZodLiteral<"password">;
                 host: z.ZodString;
@@ -9551,6 +10525,12 @@ export declare const sandboxContract: {
                 port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
                 user: z.ZodString;
                 privateKey: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                auth: z.ZodLiteral<"generated">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                privateKey: z.ZodString;
             }, z.core.$strip>, z.ZodObject<{
                 auth: z.ZodLiteral<"password">;
                 host: z.ZodString;
@@ -9830,6 +10810,10 @@ export declare const sandboxContract: {
             message: z.ZodString;
             who: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        sshKey: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            publicKey: z.ZodString;
+            token: z.ZodString;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             id: z.ZodString;
         }, z.core.$strip>, z.ZodObject<{
@@ -10190,6 +11174,7 @@ export declare const sandboxContract: {
                 authorName: z.ZodOptional<z.ZodString>;
                 authorAvatarUrl: z.ZodOptional<z.ZodString>;
                 trigger: z.ZodOptional<z.ZodString>;
+                workflow: z.ZodOptional<z.ZodString>;
                 branch: z.ZodString;
                 sha: z.ZodString;
                 status: z.ZodEnum<{
@@ -10205,6 +11190,27 @@ export declare const sandboxContract: {
                 durationSeconds: z.ZodOptional<z.ZodNumber>;
                 failedJobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
             }, z.core.$strip>>;
+            reds: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                repo: z.ZodString;
+                branch: z.ZodString;
+                since: z.ZodNumber;
+                runId: z.ZodNumber;
+                jobs: z.ZodArray<z.ZodString>;
+                fixer: z.ZodOptional<z.ZodString>;
+                decision: z.ZodOptional<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        dismissed: "dismissed";
+                        "fix-up": "fix-up";
+                        reported: "reported";
+                        resolved: "resolved";
+                        spent: "spent";
+                    }>;
+                    conversationId: z.ZodOptional<z.ZodString>;
+                    at: z.ZodNumber;
+                    detail: z.ZodOptional<z.ZodString>;
+                    findings: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         rerun: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             repo: z.ZodString;
@@ -11914,34 +12920,113 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
-                agentWords: z.ZodOptional<z.ZodObject<{
-                    kind: z.ZodEnum<{
-                        child: "child";
-                        peer: "peer";
-                    }>;
-                    from: z.ZodString;
-                    title: z.ZodOptional<z.ZodString>;
-                    failed: z.ZodOptional<z.ZodBoolean>;
-                    sent: z.ZodString;
-                }, z.core.$strip>>;
-                backgroundJob: z.ZodOptional<z.ZodObject<{
+                need: z.ZodOptional<z.ZodObject<{
                     id: z.ZodString;
-                    label: z.ZodString;
-                    command: z.ZodString;
-                    startedAt: z.ZodNumber;
-                }, z.core.$strip>>;
-                credentialOffer: z.ZodOptional<z.ZodObject<{
-                    requestId: z.ZodString;
-                    offer: z.ZodObject<{
-                        subject: z.ZodString;
-                        kind: z.ZodEnum<{
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
                             capability: "capability";
-                            secret: "secret";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
                         }>;
-                        lane: z.ZodEnum<{
-                            browser: "browser";
-                            code: "code";
-                            otp: "otp";
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                agentWords: z.ZodOptional<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        child: "child";
+                        peer: "peer";
+                    }>;
+                    from: z.ZodString;
+                    title: z.ZodOptional<z.ZodString>;
+                    failed: z.ZodOptional<z.ZodBoolean>;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                backgroundJob: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    label: z.ZodString;
+                    command: z.ZodString;
+                    startedAt: z.ZodNumber;
+                }, z.core.$strip>>;
+                credentialOffer: z.ZodOptional<z.ZodObject<{
+                    requestId: z.ZodString;
+                    offer: z.ZodObject<{
+                        subject: z.ZodString;
+                        kind: z.ZodEnum<{
+                            capability: "capability";
+                            secret: "secret";
+                        }>;
+                        lane: z.ZodEnum<{
+                            browser: "browser";
+                            code: "code";
+                            otp: "otp";
                             session: "session";
                             shell: "shell";
                         }>;
@@ -12047,8 +13132,8 @@ export declare const sandboxContract: {
             autoRepair: z.ZodDefault<z.ZodBoolean>;
             offload: z.ZodDefault<z.ZodObject<{
                 commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-                landCheck: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>>;
+            continueWhenNeedMet: z.ZodDefault<z.ZodBoolean>;
             autoResumeOnRestart: z.ZodDefault<z.ZodBoolean>;
             adoptedChecks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -12217,8 +13302,8 @@ export declare const sandboxContract: {
             autoRepair: z.ZodDefault<z.ZodBoolean>;
             offload: z.ZodDefault<z.ZodObject<{
                 commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
-                landCheck: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>>;
+            continueWhenNeedMet: z.ZodDefault<z.ZodBoolean>;
             autoResumeOnRestart: z.ZodDefault<z.ZodBoolean>;
             adoptedChecks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -12569,7 +13654,6 @@ export declare const sandboxContract: {
                 adopted: z.ZodBoolean;
                 changed: z.ZodBoolean;
                 error: z.ZodOptional<z.ZodString>;
-                landDefault: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         fieldNotes: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
@@ -13609,6 +14693,14 @@ export declare const sandboxContract: {
             ticket: z.ZodString;
             expiresAt: z.ZodNumber;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        downloadTicket: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            agent: z.ZodOptional<z.ZodString>;
+            paths: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            ticket: z.ZodString;
+            expiresAt: z.ZodNumber;
+            filename: z.ZodString;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         resolve: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             agent: z.ZodOptional<z.ZodString>;
             path: z.ZodString;
@@ -13796,132 +14888,8 @@ export declare const sandboxContract: {
         }, z.core.$strip>, z.ZodObject<{
             queued: z.ZodArray<z.ZodString>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        mainline: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
-            projects: z.ZodArray<z.ZodObject<{
-                project: z.ZodString;
-                running: z.ZodOptional<z.ZodObject<{
-                    command: z.ZodString;
-                    startedAt: z.ZodNumber;
-                    lands: z.ZodArray<z.ZodObject<{
-                        conversationId: z.ZodString;
-                        title: z.ZodOptional<z.ZodString>;
-                        at: z.ZodNumber;
-                    }, z.core.$strip>>;
-                    on: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
-                session: z.ZodOptional<z.ZodString>;
-                queued: z.ZodArray<z.ZodObject<{
-                    conversationId: z.ZodString;
-                    title: z.ZodOptional<z.ZodString>;
-                    at: z.ZodNumber;
-                }, z.core.$strip>>;
-                last: z.ZodOptional<z.ZodObject<{
-                    project: z.ZodString;
-                    command: z.ZodString;
-                    status: z.ZodEnum<{
-                        green: "green";
-                        red: "red";
-                    }>;
-                    startedAt: z.ZodNumber;
-                    at: z.ZodNumber;
-                    lands: z.ZodArray<z.ZodObject<{
-                        conversationId: z.ZodString;
-                        title: z.ZodOptional<z.ZodString>;
-                        at: z.ZodNumber;
-                    }, z.core.$strip>>;
-                    failures: z.ZodArray<z.ZodString>;
-                    failureCount: z.ZodNumber;
-                    attempt: z.ZodNumber;
-                    suspects: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                    named: z.ZodOptional<z.ZodBoolean>;
-                    units: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                        name: z.ZodString;
-                        path: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>>>;
-                    routing: z.ZodOptional<z.ZodObject<{
-                        kind: z.ZodEnum<{
-                            dismissed: "dismissed";
-                            "fix-up": "fix-up";
-                            held: "held";
-                            original: "original";
-                            reported: "reported";
-                            resolved: "resolved";
-                            spent: "spent";
-                            waiting: "waiting";
-                        }>;
-                        conversationId: z.ZodOptional<z.ZodString>;
-                        at: z.ZodNumber;
-                        detail: z.ZodOptional<z.ZodString>;
-                        findings: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                    }, z.core.$strip>>;
-                }, z.core.$strip>>;
-                redSince: z.ZodOptional<z.ZodNumber>;
-                red: z.ZodOptional<z.ZodObject<{
-                    since: z.ZodNumber;
-                    cause: z.ZodArray<z.ZodObject<{
-                        conversationId: z.ZodString;
-                        title: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strip>>;
-                    named: z.ZodBoolean;
-                    fixer: z.ZodOptional<z.ZodObject<{
-                        kind: z.ZodEnum<{
-                            dismissed: "dismissed";
-                            "fix-up": "fix-up";
-                            held: "held";
-                            original: "original";
-                            reported: "reported";
-                            resolved: "resolved";
-                            spent: "spent";
-                            waiting: "waiting";
-                        }>;
-                        conversationId: z.ZodOptional<z.ZodString>;
-                        at: z.ZodNumber;
-                        detail: z.ZodOptional<z.ZodString>;
-                        findings: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                    }, z.core.$strip>>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-            recent: z.ZodArray<z.ZodObject<{
-                project: z.ZodString;
-                command: z.ZodString;
-                status: z.ZodEnum<{
-                    green: "green";
-                    red: "red";
-                }>;
-                startedAt: z.ZodNumber;
-                at: z.ZodNumber;
-                lands: z.ZodArray<z.ZodObject<{
-                    conversationId: z.ZodString;
-                    title: z.ZodOptional<z.ZodString>;
-                    at: z.ZodNumber;
-                }, z.core.$strip>>;
-                failures: z.ZodArray<z.ZodString>;
-                failureCount: z.ZodNumber;
-                attempt: z.ZodNumber;
-                suspects: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                named: z.ZodOptional<z.ZodBoolean>;
-                units: z.ZodOptional<z.ZodArray<z.ZodObject<{
-                    name: z.ZodString;
-                    path: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>>;
-                routing: z.ZodOptional<z.ZodObject<{
-                    kind: z.ZodEnum<{
-                        dismissed: "dismissed";
-                        "fix-up": "fix-up";
-                        held: "held";
-                        original: "original";
-                        reported: "reported";
-                        resolved: "resolved";
-                        spent: "spent";
-                        waiting: "waiting";
-                    }>;
-                    conversationId: z.ZodOptional<z.ZodString>;
-                    at: z.ZodNumber;
-                    detail: z.ZodOptional<z.ZodString>;
-                    findings: z.ZodOptional<z.ZodArray<z.ZodString>>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-            pushed: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        pushChecks: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            pushed: z.ZodArray<z.ZodObject<{
                 project: z.ZodString;
                 id: z.ZodString;
                 at: z.ZodNumber;
@@ -13947,11 +14915,10 @@ export declare const sandboxContract: {
                     }, z.core.$strip>>;
                 }, z.core.$strip>>;
                 refused: z.ZodOptional<z.ZodBoolean>;
-            }, z.core.$strip>>>;
-            reds: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            }, z.core.$strip>>;
+            reds: z.ZodArray<z.ZodObject<{
                 source: z.ZodEnum<{
                     ci: "ci";
-                    land: "land";
                     push: "push";
                 }>;
                 scope: z.ZodString;
@@ -13972,34 +14939,29 @@ export declare const sandboxContract: {
                         subject: z.ZodString;
                     }, z.core.$strip>>;
                 }, z.core.$strip>>>;
-                suspects: z.ZodDefault<z.ZodArray<z.ZodString>>;
-                named: z.ZodDefault<z.ZodBoolean>;
                 decisions: z.ZodDefault<z.ZodArray<z.ZodObject<{
                     kind: z.ZodEnum<{
                         dismissed: "dismissed";
                         "fix-up": "fix-up";
-                        held: "held";
-                        original: "original";
                         reported: "reported";
                         resolved: "resolved";
                         spent: "spent";
-                        waiting: "waiting";
                     }>;
                     conversationId: z.ZodOptional<z.ZodString>;
                     at: z.ZodNumber;
                     detail: z.ZodOptional<z.ZodString>;
                     findings: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 }, z.core.$strip>>>;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        mainlinePushDismiss: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        pushDismiss: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             project: z.ZodString;
             ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
             restore: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>, z.ZodObject<{
             changed: z.ZodNumber;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        mainlinePushRecheck: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        pushRecheck: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             project: z.ZodString;
         }, z.core.$strip>, z.ZodObject<{
             measured: z.ZodBoolean;
@@ -14925,89 +15887,636 @@ export declare const sandboxContract: {
             delivered: z.ZodNumber;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
     };
-    secrets: {
-        set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            key: z.ZodString;
-            value: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            ok: z.ZodLiteral<true>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
-            keys: z.ZodArray<z.ZodString>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            key: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            ok: z.ZodLiteral<true>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        inventory: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
-            entries: z.ZodArray<z.ZodObject<{
-                key: z.ZodString;
-                kind: z.ZodEnum<{
+    needs: {
+        ask: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            ask: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                target: z.ZodOptional<z.ZodString>;
+                set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reconnect: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
                     capability: "capability";
-                    env: "env";
-                    generated: "generated";
-                    provider: "provider";
-                }>;
-                label: z.ZodOptional<z.ZodString>;
-                status: z.ZodEnum<{
-                    connected: "connected";
-                    missing: "missing";
-                    set: "set";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
                 }>;
-                requiredBy: z.ZodArray<z.ZodObject<{
-                    resourceId: z.ZodString;
-                    type: z.ZodString;
-                }, z.core.$strip>>;
-                storedAt: z.ZodString;
-                revealable: z.ZodBoolean;
-                ci: z.ZodOptional<z.ZodObject<{
-                    synced: z.ZodBoolean;
-                    pushedAt: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
-                lastUse: z.ZodOptional<z.ZodObject<{
-                    at: z.ZodNumber;
-                    lane: z.ZodEnum<{
-                        browser: "browser";
-                        code: "code";
-                        shell: "shell";
+                what: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+            }, z.core.$strip>], "kind">;
+            why: z.ZodOptional<z.ZodString>;
+            wait: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            state: z.ZodEnum<{
+                met: "met";
+                open: "open";
+                refused: "refused";
+            }>;
+            message: z.ZodString;
+            need: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
                     }>;
-                    detail: z.ZodOptional<z.ZodString>;
-                    approvedBy: z.ZodOptional<z.ZodString>;
-                }, z.core.$strip>>;
-                gate: z.ZodOptional<z.ZodObject<{
-                    approvers: z.ZodArray<z.ZodString>;
-                    scope: z.ZodEnum<{
-                        conversation: "conversation";
-                        use: "use";
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
                     }>;
-                }, z.core.$strip>>;
-            }, z.core.$strip>>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        reveal: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            key: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            value: z.ZodString;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        gates: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
-            gates: z.ZodArray<z.ZodObject<{
-                subject: z.ZodString;
-                kind: z.ZodEnum<{
-                    capability: "capability";
-                    secret: "secret";
-                }>;
-                approvers: z.ZodArray<z.ZodString>;
-                scope: z.ZodEnum<{
-                    conversation: "conversation";
-                    use: "use";
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
                 }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>;
+            code: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        setGate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            subject: z.ZodString;
-            kind: z.ZodEnum<{
-                capability: "capability";
-                secret: "secret";
+        mine: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            needs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
+                    }>;
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
+                    }>;
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        withdraw: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            conversationId: z.ZodOptional<z.ZodString>;
+            open: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, z.ZodObject<{
+            needs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
+                    }>;
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
+                    }>;
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        answer: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+            answer: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"decline">;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"accept">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"apply">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                scope: z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"approve">;
+            }, z.core.$strip>], "kind">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        provideSecret: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        grants: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            conversations: z.ZodArray<z.ZodObject<{
+                conversationId: z.ZodString;
+                capabilities: z.ZodArray<z.ZodString>;
+                folders: z.ZodArray<z.ZodString>;
+                shelves: z.ZodArray<z.ZodEnum<{
+                    browser: "browser";
+                    code: "code";
+                    delegate: "delegate";
+                    files: "files";
+                    sandbox: "sandbox";
+                    shell: "shell";
+                    web: "web";
+                }>>;
+                by: z.ZodOptional<z.ZodString>;
+                updatedAt: z.ZodOptional<z.ZodNumber>;
+                releases: z.ZodArray<z.ZodObject<{
+                    subject: z.ZodString;
+                    approvedBy: z.ZodString;
+                    at: z.ZodNumber;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        revokeGrant: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            conversationId: z.ZodString;
+            kind: z.ZodEnum<{
+                capability: "capability";
+                folder: "folder";
+                release: "release";
+                shelf: "shelf";
+            }>;
+            what: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+    };
+    secrets: {
+        set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        generate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+            bytes: z.ZodDefault<z.ZodNumber>;
+            format: z.ZodDefault<z.ZodEnum<{
+                alnum: "alnum";
+                base64url: "base64url";
+                hex: "hex";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            key: z.ZodString;
+            length: z.ZodNumber;
+            stored: z.ZodEnum<{
+                env: "env";
+                sandbox: "sandbox";
+            }>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        inventory: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            entries: z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    env: "env";
+                    generated: "generated";
+                    provider: "provider";
+                }>;
+                label: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    connected: "connected";
+                    missing: "missing";
+                    set: "set";
+                }>;
+                requiredBy: z.ZodArray<z.ZodObject<{
+                    resourceId: z.ZodString;
+                    type: z.ZodString;
+                }, z.core.$strip>>;
+                storedAt: z.ZodString;
+                revealable: z.ZodBoolean;
+                ci: z.ZodOptional<z.ZodObject<{
+                    synced: z.ZodBoolean;
+                    pushedAt: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                lastUse: z.ZodOptional<z.ZodObject<{
+                    at: z.ZodNumber;
+                    lane: z.ZodEnum<{
+                        browser: "browser";
+                        code: "code";
+                        shell: "shell";
+                    }>;
+                    detail: z.ZodOptional<z.ZodString>;
+                    approvedBy: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+                gate: z.ZodOptional<z.ZodObject<{
+                    approvers: z.ZodArray<z.ZodString>;
+                    scope: z.ZodEnum<{
+                        conversation: "conversation";
+                        use: "use";
+                    }>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        reveal: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            value: z.ZodString;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        gates: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            gates: z.ZodArray<z.ZodObject<{
+                subject: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    secret: "secret";
+                }>;
+                approvers: z.ZodArray<z.ZodString>;
+                scope: z.ZodEnum<{
+                    conversation: "conversation";
+                    use: "use";
+                }>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        setGate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            subject: z.ZodString;
+            kind: z.ZodEnum<{
+                capability: "capability";
+                secret: "secret";
             }>;
             approvers: z.ZodArray<z.ZodString>;
             scope: z.ZodEnum<{
@@ -15081,6 +16590,31 @@ export declare const sandboxContract: {
                     ok: z.ZodBoolean;
                 }, z.core.$strip>>;
             }, z.core.$strip>>;
+            lastUpdate: z.ZodOptional<z.ZodObject<{
+                result: z.ZodEnum<{
+                    kept: "kept";
+                    restored: "restored";
+                    "rolled-back": "rolled-back";
+                    updated: "updated";
+                }>;
+                verb: z.ZodOptional<z.ZodString>;
+                at: z.ZodNumber;
+                from: z.ZodOptional<z.ZodString>;
+                to: z.ZodOptional<z.ZodString>;
+                reason: z.ZodOptional<z.ZodString>;
+                log: z.ZodOptional<z.ZodString>;
+                keepUntil: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            withdrawn: z.ZodOptional<z.ZodObject<{
+                version: z.ZodString;
+                reason: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            skippedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        skipUpdate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            version: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         manifestProblems: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodArray<z.ZodObject<{
             path: z.ZodString;
@@ -15116,19 +16650,6 @@ export declare const sandboxContract: {
         events: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             clientId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
-            kind: "heartbeat";
-            rev: number;
-        } | {
-            ready: boolean;
-            startedAt: number;
-            steps: {
-                key: string;
-                label: string;
-                state: "done" | "failed" | "pending" | "running";
-                ms?: number | undefined;
-            }[];
-            kind: "boot";
-        } | {
             kind: "hello";
             workspaceId: string;
             routes?: string[] | undefined;
@@ -15145,8 +16666,18 @@ export declare const sandboxContract: {
                 }[];
             } | undefined;
         } | {
-            kind: "reposChanged";
-            repos: string[];
+            kind: "heartbeat";
+            rev: number;
+        } | {
+            ready: boolean;
+            startedAt: number;
+            steps: {
+                key: string;
+                label: string;
+                state: "done" | "failed" | "pending" | "running";
+                ms?: number | undefined;
+            }[];
+            kind: "boot";
         } | {
             kind: "workspaceChanged";
             paths: string[];
@@ -15162,6 +16693,9 @@ export declare const sandboxContract: {
                 shadows?: number | undefined;
                 sweptAt?: string | undefined;
             };
+        } | {
+            kind: "reposChanged";
+            repos: string[];
         } | {
             kind: "refsChanged";
             repos: string[];
@@ -15319,6 +16853,7 @@ export declare const sandboxContract: {
                     capability: boolean;
                     credential: boolean;
                     conflict: boolean;
+                    need?: boolean | undefined;
                 };
                 conflictCauses?: ("binary" | "diverged" | "workspace")[] | undefined;
                 unfinished?: {
@@ -15371,6 +16906,12 @@ export declare const sandboxContract: {
                     intervalSeconds: number;
                     deadlineAt: number;
                 }[] | undefined;
+                needs?: {
+                    id: string;
+                    kind: "capability" | "environment" | "grant" | "release" | "secret";
+                    title: string;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                }[] | undefined;
                 jobs?: {
                     id: string;
                     label: string;
@@ -15415,6 +16956,7 @@ export declare const sandboxContract: {
                 message: string;
                 account?: string | undefined;
                 model?: string | undefined;
+                resetsAt?: number | undefined;
             } | undefined;
         } | {
             from: number;
@@ -15426,19 +16968,6 @@ export declare const sandboxContract: {
             barren?: string[] | undefined;
             kind: "treeChanged";
         }, unknown, void>, import("@orpc/contract").AsyncIteratorClass<{
-            kind: "heartbeat";
-            rev: number;
-        } | {
-            ready: boolean;
-            startedAt: number;
-            steps: {
-                key: string;
-                label: string;
-                state: "done" | "failed" | "pending" | "running";
-                ms?: number | undefined;
-            }[];
-            kind: "boot";
-        } | {
             kind: "hello";
             workspaceId: string;
             routes?: string[] | undefined;
@@ -15455,8 +16984,18 @@ export declare const sandboxContract: {
                 }[];
             } | undefined;
         } | {
-            kind: "reposChanged";
-            repos: string[];
+            kind: "heartbeat";
+            rev: number;
+        } | {
+            ready: boolean;
+            startedAt: number;
+            steps: {
+                key: string;
+                label: string;
+                state: "done" | "failed" | "pending" | "running";
+                ms?: number | undefined;
+            }[];
+            kind: "boot";
         } | {
             kind: "workspaceChanged";
             paths: string[];
@@ -15472,6 +17011,9 @@ export declare const sandboxContract: {
                 shadows?: number | undefined;
                 sweptAt?: string | undefined;
             };
+        } | {
+            kind: "reposChanged";
+            repos: string[];
         } | {
             kind: "refsChanged";
             repos: string[];
@@ -15629,6 +17171,7 @@ export declare const sandboxContract: {
                     capability: boolean;
                     credential: boolean;
                     conflict: boolean;
+                    need?: boolean | undefined;
                 };
                 conflictCauses?: ("binary" | "diverged" | "workspace")[] | undefined;
                 unfinished?: {
@@ -15681,6 +17224,12 @@ export declare const sandboxContract: {
                     intervalSeconds: number;
                     deadlineAt: number;
                 }[] | undefined;
+                needs?: {
+                    id: string;
+                    kind: "capability" | "environment" | "grant" | "release" | "secret";
+                    title: string;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                }[] | undefined;
                 jobs?: {
                     id: string;
                     label: string;
@@ -15725,6 +17274,7 @@ export declare const sandboxContract: {
                 message: string;
                 account?: string | undefined;
                 model?: string | undefined;
+                resetsAt?: number | undefined;
             } | undefined;
         } | {
             from: number;
@@ -16017,6 +17567,7 @@ export declare const sandboxContract: {
                         capability: z.ZodBoolean;
                         credential: z.ZodBoolean;
                         conflict: z.ZodBoolean;
+                        need: z.ZodOptional<z.ZodBoolean>;
                     }, z.core.$strip>;
                     conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                         binary: "binary";
@@ -16086,6 +17637,24 @@ export declare const sandboxContract: {
                         intervalSeconds: z.ZodNumber;
                         deadlineAt: z.ZodNumber;
                     }, z.core.$strip>>>;
+                    needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        kind: z.ZodEnum<{
+                            capability: "capability";
+                            environment: "environment";
+                            grant: "grant";
+                            release: "release";
+                            secret: "secret";
+                        }>;
+                        title: z.ZodString;
+                        status: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            declined: "declined";
+                            met: "met";
+                            open: "open";
+                            working: "working";
+                        }>;
+                    }, z.core.$strip>>>;
                     jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         id: z.ZodString;
                         label: z.ZodString;
@@ -16138,6 +17707,7 @@ export declare const sandboxContract: {
                     message: z.ZodString;
                     account: z.ZodOptional<z.ZodString>;
                     model: z.ZodOptional<z.ZodString>;
+                    resetsAt: z.ZodOptional<z.ZodNumber>;
                 }, z.core.$strip>>;
             }, z.core.$strip>], "kind">;
         }, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
@@ -16773,6 +18343,85 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
+                need: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
+                            capability: "capability";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
+                        }>;
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
                 agentWords: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
                         child: "child";
@@ -16978,6 +18627,28 @@ export declare const sandboxContract: {
                         version: z.ZodOptional<z.ZodString>;
                         channel: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>>;
+                    version: z.ZodOptional<z.ZodString>;
+                    parked: z.ZodOptional<z.ZodBoolean>;
+                    probationUntil: z.ZodOptional<z.ZodNumber>;
+                    lastUpdate: z.ZodOptional<z.ZodObject<{
+                        result: z.ZodEnum<{
+                            kept: "kept";
+                            restored: "restored";
+                            "rolled-back": "rolled-back";
+                            updated: "updated";
+                        }>;
+                        verb: z.ZodOptional<z.ZodString>;
+                        at: z.ZodNumber;
+                        from: z.ZodOptional<z.ZodString>;
+                        to: z.ZodOptional<z.ZodString>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        log: z.ZodOptional<z.ZodString>;
+                        keepUntil: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strip>>;
+                    rollbackTargets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        image: z.ZodString;
+                        version: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>>;
                 }, z.core.$strip>>>;
                 gap: z.ZodOptional<z.ZodEnum<{
                     offline: "offline";
@@ -17007,6 +18678,7 @@ export declare const sandboxContract: {
             }>;
             slug: z.ZodString;
             hash: z.ZodOptional<z.ZodString>;
+            to: z.ZodOptional<z.ZodString>;
             shape: z.ZodOptional<z.ZodObject<{
                 memoryGib: z.ZodNullable<z.ZodInt>;
                 cpus: z.ZodNullable<z.ZodInt>;