@intentic/sandbox-contract 1.316.0 → 1.317.0

package/dist/index.d.ts

@@ -33,6 +33,7 @@ export { publicContract } from "./contracts/public.contract.js";
 export { providersContract, type RunnableProviders, RunnableProvidersSchema } from "./contracts/providers.contract.js";
 export { pushContract } from "./contracts/push.contract.js";
 export { safetyContract } from "./contracts/safety.contract.js";
+export { needsContract } from "./contracts/needs.contract.js";
 export { secretsContract } from "./contracts/secrets.contract.js";
 export { sessionsContract } from "./contracts/sessions.contract.js";
 export { settingsContract } from "./contracts/settings.contract.js";
@@ -56,6 +57,7 @@ export * from "./events/land-breakage.js";
 export * from "./events/land-conflict.js";
 export * from "./events/verify-nudge.js";
 export * from "./events/errands.js";
+export * from "./events/need-wake.js";
 export * from "./events/watch-wake.js";
 export * from "./policy/request-status.js";
 export * from "./events/child-run.js";
@@ -150,6 +152,7 @@ export * from "./schemas/providers/provider-subscriptions.js";
 export * from "./schemas/public.js";
 export * from "./schemas/push.js";
 export * from "./schemas/git/remote-refs.js";
+export * from "./schemas/needs.js";
 export * from "./schemas/secrets.js";
 export * from "./schemas/netdisk.js";
 export * from "./schemas/sessions.js";
@@ -160,6 +163,7 @@ export * from "./schemas/shared.js";
 export * from "./schemas/system-prompt.js";
 export * from "./schemas/system.js";
 export * from "./schemas/state-plan.js";
+export * from "./schemas/updates.js";
 export * from "./schemas/terminal.js";
 export * from "./schemas/turn-break.js";
 export * from "./schemas/keep-warm.js";
@@ -780,6 +784,60 @@ export declare const sandboxContract: {
                     elapsed: string;
                     sent: string;
                 } | undefined;
+                need?: {
+                    id: string;
+                    conversationId: string;
+                    subject: {
+                        kind: "capability";
+                        entry: string;
+                        name: string;
+                        mode: "change" | "connect" | "reconnect";
+                        instance?: string | undefined;
+                        target?: string | undefined;
+                        prefill?: Record<string, string> | undefined;
+                        changes?: Record<string, string> | undefined;
+                        reason?: string | undefined;
+                        reported?: boolean | undefined;
+                    } | {
+                        kind: "secret";
+                        name: string;
+                        where?: string | undefined;
+                        link?: string | undefined;
+                        hint?: string | undefined;
+                        replace?: boolean | undefined;
+                    } | {
+                        kind: "grant";
+                        subject: "capability" | "folder" | "shelf" | "site";
+                        what: string;
+                        label: string;
+                        persona?: string | undefined;
+                        scope?: "conversation" | "persona" | undefined;
+                    } | {
+                        kind: "release";
+                        subject: string;
+                        approvers: string[];
+                    } | {
+                        kind: "environment";
+                        tool: string;
+                        steps: string;
+                        approvedHash?: string | undefined;
+                    };
+                    title: string;
+                    why?: string | undefined;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                    createdAt: number;
+                    updatedAt: number;
+                    answeredBy?: string | undefined;
+                    outcome?: string | undefined;
+                    told?: "call" | "queued" | "turn" | undefined;
+                    unattended?: boolean | undefined;
+                } | undefined;
+                needWake?: {
+                    outcome: "declined" | "met";
+                    title: string;
+                    id: string;
+                    sent: string;
+                } | undefined;
                 agentWords?: {
                     kind: "child" | "peer";
                     from: string;
@@ -995,6 +1053,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1208,6 +1320,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1451,6 +1617,60 @@ export declare const sandboxContract: {
                     elapsed: string;
                     sent: string;
                 } | undefined;
+                need?: {
+                    id: string;
+                    conversationId: string;
+                    subject: {
+                        kind: "capability";
+                        entry: string;
+                        name: string;
+                        mode: "change" | "connect" | "reconnect";
+                        instance?: string | undefined;
+                        target?: string | undefined;
+                        prefill?: Record<string, string> | undefined;
+                        changes?: Record<string, string> | undefined;
+                        reason?: string | undefined;
+                        reported?: boolean | undefined;
+                    } | {
+                        kind: "secret";
+                        name: string;
+                        where?: string | undefined;
+                        link?: string | undefined;
+                        hint?: string | undefined;
+                        replace?: boolean | undefined;
+                    } | {
+                        kind: "grant";
+                        subject: "capability" | "folder" | "shelf" | "site";
+                        what: string;
+                        label: string;
+                        persona?: string | undefined;
+                        scope?: "conversation" | "persona" | undefined;
+                    } | {
+                        kind: "release";
+                        subject: string;
+                        approvers: string[];
+                    } | {
+                        kind: "environment";
+                        tool: string;
+                        steps: string;
+                        approvedHash?: string | undefined;
+                    };
+                    title: string;
+                    why?: string | undefined;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                    createdAt: number;
+                    updatedAt: number;
+                    answeredBy?: string | undefined;
+                    outcome?: string | undefined;
+                    told?: "call" | "queued" | "turn" | undefined;
+                    unattended?: boolean | undefined;
+                } | undefined;
+                needWake?: {
+                    outcome: "declined" | "met";
+                    title: string;
+                    id: string;
+                    sent: string;
+                } | undefined;
                 agentWords?: {
                     kind: "child" | "peer";
                     from: string;
@@ -1666,6 +1886,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -1879,6 +2153,60 @@ export declare const sandboxContract: {
                         elapsed: string;
                         sent: string;
                     } | undefined;
+                    need?: {
+                        id: string;
+                        conversationId: string;
+                        subject: {
+                            kind: "capability";
+                            entry: string;
+                            name: string;
+                            mode: "change" | "connect" | "reconnect";
+                            instance?: string | undefined;
+                            target?: string | undefined;
+                            prefill?: Record<string, string> | undefined;
+                            changes?: Record<string, string> | undefined;
+                            reason?: string | undefined;
+                            reported?: boolean | undefined;
+                        } | {
+                            kind: "secret";
+                            name: string;
+                            where?: string | undefined;
+                            link?: string | undefined;
+                            hint?: string | undefined;
+                            replace?: boolean | undefined;
+                        } | {
+                            kind: "grant";
+                            subject: "capability" | "folder" | "shelf" | "site";
+                            what: string;
+                            label: string;
+                            persona?: string | undefined;
+                            scope?: "conversation" | "persona" | undefined;
+                        } | {
+                            kind: "release";
+                            subject: string;
+                            approvers: string[];
+                        } | {
+                            kind: "environment";
+                            tool: string;
+                            steps: string;
+                            approvedHash?: string | undefined;
+                        };
+                        title: string;
+                        why?: string | undefined;
+                        status: "cancelled" | "declined" | "met" | "open" | "working";
+                        createdAt: number;
+                        updatedAt: number;
+                        answeredBy?: string | undefined;
+                        outcome?: string | undefined;
+                        told?: "call" | "queued" | "turn" | undefined;
+                        unattended?: boolean | undefined;
+                    } | undefined;
+                    needWake?: {
+                        outcome: "declined" | "met";
+                        title: string;
+                        id: string;
+                        sent: string;
+                    } | undefined;
                     agentWords?: {
                         kind: "child" | "peer";
                         from: string;
@@ -2212,6 +2540,85 @@ export declare const sandboxContract: {
                         elapsed: z.ZodString;
                         sent: z.ZodString;
                     }, z.core.$strip>>;
+                    need: z.ZodOptional<z.ZodObject<{
+                        id: z.ZodString;
+                        conversationId: z.ZodString;
+                        subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                            kind: z.ZodLiteral<"capability">;
+                            entry: z.ZodString;
+                            name: z.ZodString;
+                            mode: z.ZodEnum<{
+                                change: "change";
+                                connect: "connect";
+                                reconnect: "reconnect";
+                            }>;
+                            instance: z.ZodOptional<z.ZodString>;
+                            target: z.ZodOptional<z.ZodString>;
+                            prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                            changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                            reason: z.ZodOptional<z.ZodString>;
+                            reported: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"secret">;
+                            name: z.ZodString;
+                            where: z.ZodOptional<z.ZodString>;
+                            link: z.ZodOptional<z.ZodString>;
+                            hint: z.ZodOptional<z.ZodString>;
+                            replace: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"grant">;
+                            subject: z.ZodEnum<{
+                                capability: "capability";
+                                folder: "folder";
+                                shelf: "shelf";
+                                site: "site";
+                            }>;
+                            what: z.ZodString;
+                            label: z.ZodString;
+                            persona: z.ZodOptional<z.ZodString>;
+                            scope: z.ZodOptional<z.ZodEnum<{
+                                conversation: "conversation";
+                                persona: "persona";
+                            }>>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"release">;
+                            subject: z.ZodString;
+                            approvers: z.ZodArray<z.ZodString>;
+                        }, z.core.$strip>, z.ZodObject<{
+                            kind: z.ZodLiteral<"environment">;
+                            tool: z.ZodString;
+                            steps: z.ZodString;
+                            approvedHash: z.ZodOptional<z.ZodString>;
+                        }, z.core.$strip>], "kind">;
+                        title: z.ZodString;
+                        why: z.ZodOptional<z.ZodString>;
+                        status: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            declined: "declined";
+                            met: "met";
+                            open: "open";
+                            working: "working";
+                        }>;
+                        createdAt: z.ZodNumber;
+                        updatedAt: z.ZodNumber;
+                        answeredBy: z.ZodOptional<z.ZodString>;
+                        outcome: z.ZodOptional<z.ZodString>;
+                        told: z.ZodOptional<z.ZodEnum<{
+                            call: "call";
+                            queued: "queued";
+                            turn: "turn";
+                        }>>;
+                        unattended: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>>;
+                    needWake: z.ZodOptional<z.ZodObject<{
+                        outcome: z.ZodEnum<{
+                            declined: "declined";
+                            met: "met";
+                        }>;
+                        title: z.ZodString;
+                        id: z.ZodString;
+                        sent: z.ZodString;
+                    }, z.core.$strip>>;
                     agentWords: z.ZodOptional<z.ZodObject<{
                         kind: z.ZodEnum<{
                             child: "child";
@@ -2539,6 +2946,85 @@ export declare const sandboxContract: {
                             elapsed: z.ZodString;
                             sent: z.ZodString;
                         }, z.core.$strip>>;
+                        need: z.ZodOptional<z.ZodObject<{
+                            id: z.ZodString;
+                            conversationId: z.ZodString;
+                            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                                kind: z.ZodLiteral<"capability">;
+                                entry: z.ZodString;
+                                name: z.ZodString;
+                                mode: z.ZodEnum<{
+                                    change: "change";
+                                    connect: "connect";
+                                    reconnect: "reconnect";
+                                }>;
+                                instance: z.ZodOptional<z.ZodString>;
+                                target: z.ZodOptional<z.ZodString>;
+                                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                reason: z.ZodOptional<z.ZodString>;
+                                reported: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"secret">;
+                                name: z.ZodString;
+                                where: z.ZodOptional<z.ZodString>;
+                                link: z.ZodOptional<z.ZodString>;
+                                hint: z.ZodOptional<z.ZodString>;
+                                replace: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"grant">;
+                                subject: z.ZodEnum<{
+                                    capability: "capability";
+                                    folder: "folder";
+                                    shelf: "shelf";
+                                    site: "site";
+                                }>;
+                                what: z.ZodString;
+                                label: z.ZodString;
+                                persona: z.ZodOptional<z.ZodString>;
+                                scope: z.ZodOptional<z.ZodEnum<{
+                                    conversation: "conversation";
+                                    persona: "persona";
+                                }>>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"release">;
+                                subject: z.ZodString;
+                                approvers: z.ZodArray<z.ZodString>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"environment">;
+                                tool: z.ZodString;
+                                steps: z.ZodString;
+                                approvedHash: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>], "kind">;
+                            title: z.ZodString;
+                            why: z.ZodOptional<z.ZodString>;
+                            status: z.ZodEnum<{
+                                cancelled: "cancelled";
+                                declined: "declined";
+                                met: "met";
+                                open: "open";
+                                working: "working";
+                            }>;
+                            createdAt: z.ZodNumber;
+                            updatedAt: z.ZodNumber;
+                            answeredBy: z.ZodOptional<z.ZodString>;
+                            outcome: z.ZodOptional<z.ZodString>;
+                            told: z.ZodOptional<z.ZodEnum<{
+                                call: "call";
+                                queued: "queued";
+                                turn: "turn";
+                            }>>;
+                            unattended: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>>;
+                        needWake: z.ZodOptional<z.ZodObject<{
+                            outcome: z.ZodEnum<{
+                                declined: "declined";
+                                met: "met";
+                            }>;
+                            title: z.ZodString;
+                            id: z.ZodString;
+                            sent: z.ZodString;
+                        }, z.core.$strip>>;
                         agentWords: z.ZodOptional<z.ZodObject<{
                             kind: z.ZodEnum<{
                                 child: "child";
@@ -2864,6 +3350,85 @@ export declare const sandboxContract: {
                             elapsed: z.ZodString;
                             sent: z.ZodString;
                         }, z.core.$strip>>;
+                        need: z.ZodOptional<z.ZodObject<{
+                            id: z.ZodString;
+                            conversationId: z.ZodString;
+                            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                                kind: z.ZodLiteral<"capability">;
+                                entry: z.ZodString;
+                                name: z.ZodString;
+                                mode: z.ZodEnum<{
+                                    change: "change";
+                                    connect: "connect";
+                                    reconnect: "reconnect";
+                                }>;
+                                instance: z.ZodOptional<z.ZodString>;
+                                target: z.ZodOptional<z.ZodString>;
+                                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                                reason: z.ZodOptional<z.ZodString>;
+                                reported: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"secret">;
+                                name: z.ZodString;
+                                where: z.ZodOptional<z.ZodString>;
+                                link: z.ZodOptional<z.ZodString>;
+                                hint: z.ZodOptional<z.ZodString>;
+                                replace: z.ZodOptional<z.ZodBoolean>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"grant">;
+                                subject: z.ZodEnum<{
+                                    capability: "capability";
+                                    folder: "folder";
+                                    shelf: "shelf";
+                                    site: "site";
+                                }>;
+                                what: z.ZodString;
+                                label: z.ZodString;
+                                persona: z.ZodOptional<z.ZodString>;
+                                scope: z.ZodOptional<z.ZodEnum<{
+                                    conversation: "conversation";
+                                    persona: "persona";
+                                }>>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"release">;
+                                subject: z.ZodString;
+                                approvers: z.ZodArray<z.ZodString>;
+                            }, z.core.$strip>, z.ZodObject<{
+                                kind: z.ZodLiteral<"environment">;
+                                tool: z.ZodString;
+                                steps: z.ZodString;
+                                approvedHash: z.ZodOptional<z.ZodString>;
+                            }, z.core.$strip>], "kind">;
+                            title: z.ZodString;
+                            why: z.ZodOptional<z.ZodString>;
+                            status: z.ZodEnum<{
+                                cancelled: "cancelled";
+                                declined: "declined";
+                                met: "met";
+                                open: "open";
+                                working: "working";
+                            }>;
+                            createdAt: z.ZodNumber;
+                            updatedAt: z.ZodNumber;
+                            answeredBy: z.ZodOptional<z.ZodString>;
+                            outcome: z.ZodOptional<z.ZodString>;
+                            told: z.ZodOptional<z.ZodEnum<{
+                                call: "call";
+                                queued: "queued";
+                                turn: "turn";
+                            }>>;
+                            unattended: z.ZodOptional<z.ZodBoolean>;
+                        }, z.core.$strip>>;
+                        needWake: z.ZodOptional<z.ZodObject<{
+                            outcome: z.ZodEnum<{
+                                declined: "declined";
+                                met: "met";
+                            }>;
+                            title: z.ZodString;
+                            id: z.ZodString;
+                            sent: z.ZodString;
+                        }, z.core.$strip>>;
                         agentWords: z.ZodOptional<z.ZodObject<{
                             kind: z.ZodEnum<{
                                 child: "child";
@@ -3368,6 +3933,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -3437,6 +4003,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -3663,6 +4247,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -3732,6 +4317,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -3976,6 +4579,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -4045,6 +4649,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -4336,19 +4958,98 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
-                agentWords: z.ZodOptional<z.ZodObject<{
-                    kind: z.ZodEnum<{
-                        child: "child";
-                        peer: "peer";
-                    }>;
-                    from: z.ZodString;
-                    title: z.ZodOptional<z.ZodString>;
-                    failed: z.ZodOptional<z.ZodBoolean>;
-                    sent: z.ZodString;
-                }, z.core.$strip>>;
-                backgroundJob: z.ZodOptional<z.ZodObject<{
+                need: z.ZodOptional<z.ZodObject<{
                     id: z.ZodString;
-                    label: z.ZodString;
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
+                            capability: "capability";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
+                        }>;
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                agentWords: z.ZodOptional<z.ZodObject<{
+                    kind: z.ZodEnum<{
+                        child: "child";
+                        peer: "peer";
+                    }>;
+                    from: z.ZodString;
+                    title: z.ZodOptional<z.ZodString>;
+                    failed: z.ZodOptional<z.ZodBoolean>;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
+                backgroundJob: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    label: z.ZodString;
                     command: z.ZodString;
                     startedAt: z.ZodNumber;
                 }, z.core.$strip>>;
@@ -4656,6 +5357,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -4725,6 +5427,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -4933,6 +5653,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5002,6 +5723,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5220,6 +5959,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5289,6 +6029,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5497,6 +6255,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5566,6 +6325,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -5773,6 +6550,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -5842,6 +6620,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6050,6 +6846,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6119,6 +6916,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6327,6 +7142,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6396,6 +7212,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6604,6 +7438,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -6673,6 +7508,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -6879,6 +7732,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -6948,6 +7802,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -7377,6 +8249,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -7446,6 +8319,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -7654,6 +8545,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -7723,6 +8615,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -7932,6 +8842,7 @@ export declare const sandboxContract: {
                 capability: z.ZodBoolean;
                 credential: z.ZodBoolean;
                 conflict: z.ZodBoolean;
+                need: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>;
             conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                 binary: "binary";
@@ -8001,6 +8912,24 @@ export declare const sandboxContract: {
                 intervalSeconds: z.ZodNumber;
                 deadlineAt: z.ZodNumber;
             }, z.core.$strip>>>;
+            needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                kind: z.ZodEnum<{
+                    capability: "capability";
+                    environment: "environment";
+                    grant: "grant";
+                    release: "release";
+                    secret: "secret";
+                }>;
+                title: z.ZodString;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+            }, z.core.$strip>>>;
             jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                 id: z.ZodString;
                 label: z.ZodString;
@@ -8214,6 +9143,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -8283,6 +9213,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -8497,6 +9445,7 @@ export declare const sandboxContract: {
                     capability: z.ZodBoolean;
                     credential: z.ZodBoolean;
                     conflict: z.ZodBoolean;
+                    need: z.ZodOptional<z.ZodBoolean>;
                 }, z.core.$strip>;
                 conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                     binary: "binary";
@@ -8566,6 +9515,24 @@ export declare const sandboxContract: {
                     intervalSeconds: z.ZodNumber;
                     deadlineAt: z.ZodNumber;
                 }, z.core.$strip>>>;
+                needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    kind: z.ZodEnum<{
+                        capability: "capability";
+                        environment: "environment";
+                        grant: "grant";
+                        release: "release";
+                        secret: "secret";
+                    }>;
+                    title: z.ZodString;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                }, z.core.$strip>>>;
                 jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                     id: z.ZodString;
                     label: z.ZodString;
@@ -9219,6 +10186,12 @@ export declare const sandboxContract: {
                 port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
                 user: z.ZodString;
                 privateKey: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                auth: z.ZodLiteral<"generated">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                privateKey: z.ZodString;
             }, z.core.$strip>, z.ZodObject<{
                 auth: z.ZodLiteral<"password">;
                 host: z.ZodString;
@@ -9552,6 +10525,12 @@ export declare const sandboxContract: {
                 port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
                 user: z.ZodString;
                 privateKey: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                auth: z.ZodLiteral<"generated">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                privateKey: z.ZodString;
             }, z.core.$strip>, z.ZodObject<{
                 auth: z.ZodLiteral<"password">;
                 host: z.ZodString;
@@ -9831,6 +10810,10 @@ export declare const sandboxContract: {
             message: z.ZodString;
             who: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        sshKey: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            publicKey: z.ZodString;
+            token: z.ZodString;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             id: z.ZodString;
         }, z.core.$strip>, z.ZodObject<{
@@ -11937,6 +12920,85 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
+                need: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
+                            capability: "capability";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
+                        }>;
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
                 agentWords: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
                         child: "child";
@@ -12071,6 +13133,7 @@ export declare const sandboxContract: {
             offload: z.ZodDefault<z.ZodObject<{
                 commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             }, z.core.$strip>>;
+            continueWhenNeedMet: z.ZodDefault<z.ZodBoolean>;
             autoResumeOnRestart: z.ZodDefault<z.ZodBoolean>;
             adoptedChecks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -12240,6 +13303,7 @@ export declare const sandboxContract: {
             offload: z.ZodDefault<z.ZodObject<{
                 commands: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             }, z.core.$strip>>;
+            continueWhenNeedMet: z.ZodDefault<z.ZodBoolean>;
             autoResumeOnRestart: z.ZodDefault<z.ZodBoolean>;
             adoptedChecks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
             rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -14823,19 +15887,566 @@ export declare const sandboxContract: {
             delivered: z.ZodNumber;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
     };
-    secrets: {
-        set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            key: z.ZodString;
-            value: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
-            ok: z.ZodLiteral<true>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
-            keys: z.ZodArray<z.ZodString>;
-        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
-        remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-            key: z.ZodString;
-        }, z.core.$strip>, z.ZodObject<{
+    needs: {
+        ask: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            ask: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                target: z.ZodOptional<z.ZodString>;
+                set: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reconnect: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+            }, z.core.$strip>], "kind">;
+            why: z.ZodOptional<z.ZodString>;
+            wait: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>, z.ZodObject<{
+            state: z.ZodEnum<{
+                met: "met";
+                open: "open";
+                refused: "refused";
+            }>;
+            message: z.ZodString;
+            need: z.ZodOptional<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
+                    }>;
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
+                    }>;
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            code: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        mine: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            needs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
+                    }>;
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
+                    }>;
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        withdraw: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            conversationId: z.ZodOptional<z.ZodString>;
+            open: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, z.ZodObject<{
+            needs: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                conversationId: z.ZodString;
+                subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    kind: z.ZodLiteral<"capability">;
+                    entry: z.ZodString;
+                    name: z.ZodString;
+                    mode: z.ZodEnum<{
+                        change: "change";
+                        connect: "connect";
+                        reconnect: "reconnect";
+                    }>;
+                    instance: z.ZodOptional<z.ZodString>;
+                    target: z.ZodOptional<z.ZodString>;
+                    prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    reason: z.ZodOptional<z.ZodString>;
+                    reported: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"secret">;
+                    name: z.ZodString;
+                    where: z.ZodOptional<z.ZodString>;
+                    link: z.ZodOptional<z.ZodString>;
+                    hint: z.ZodOptional<z.ZodString>;
+                    replace: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"grant">;
+                    subject: z.ZodEnum<{
+                        capability: "capability";
+                        folder: "folder";
+                        shelf: "shelf";
+                        site: "site";
+                    }>;
+                    what: z.ZodString;
+                    label: z.ZodString;
+                    persona: z.ZodOptional<z.ZodString>;
+                    scope: z.ZodOptional<z.ZodEnum<{
+                        conversation: "conversation";
+                        persona: "persona";
+                    }>>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"release">;
+                    subject: z.ZodString;
+                    approvers: z.ZodArray<z.ZodString>;
+                }, z.core.$strip>, z.ZodObject<{
+                    kind: z.ZodLiteral<"environment">;
+                    tool: z.ZodString;
+                    steps: z.ZodString;
+                    approvedHash: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>], "kind">;
+                title: z.ZodString;
+                why: z.ZodOptional<z.ZodString>;
+                status: z.ZodEnum<{
+                    cancelled: "cancelled";
+                    declined: "declined";
+                    met: "met";
+                    open: "open";
+                    working: "working";
+                }>;
+                createdAt: z.ZodNumber;
+                updatedAt: z.ZodNumber;
+                answeredBy: z.ZodOptional<z.ZodString>;
+                outcome: z.ZodOptional<z.ZodString>;
+                told: z.ZodOptional<z.ZodEnum<{
+                    call: "call";
+                    queued: "queued";
+                    turn: "turn";
+                }>>;
+                unattended: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        answer: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+            answer: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"decline">;
+                note: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"accept">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"apply">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                scope: z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"approve">;
+            }, z.core.$strip>], "kind">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        provideSecret: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            conversationId: z.ZodString;
+            subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"capability">;
+                entry: z.ZodString;
+                name: z.ZodString;
+                mode: z.ZodEnum<{
+                    change: "change";
+                    connect: "connect";
+                    reconnect: "reconnect";
+                }>;
+                instance: z.ZodOptional<z.ZodString>;
+                target: z.ZodOptional<z.ZodString>;
+                prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                reason: z.ZodOptional<z.ZodString>;
+                reported: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"secret">;
+                name: z.ZodString;
+                where: z.ZodOptional<z.ZodString>;
+                link: z.ZodOptional<z.ZodString>;
+                hint: z.ZodOptional<z.ZodString>;
+                replace: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"grant">;
+                subject: z.ZodEnum<{
+                    capability: "capability";
+                    folder: "folder";
+                    shelf: "shelf";
+                    site: "site";
+                }>;
+                what: z.ZodString;
+                label: z.ZodString;
+                persona: z.ZodOptional<z.ZodString>;
+                scope: z.ZodOptional<z.ZodEnum<{
+                    conversation: "conversation";
+                    persona: "persona";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"release">;
+                subject: z.ZodString;
+                approvers: z.ZodArray<z.ZodString>;
+            }, z.core.$strip>, z.ZodObject<{
+                kind: z.ZodLiteral<"environment">;
+                tool: z.ZodString;
+                steps: z.ZodString;
+                approvedHash: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>], "kind">;
+            title: z.ZodString;
+            why: z.ZodOptional<z.ZodString>;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                declined: "declined";
+                met: "met";
+                open: "open";
+                working: "working";
+            }>;
+            createdAt: z.ZodNumber;
+            updatedAt: z.ZodNumber;
+            answeredBy: z.ZodOptional<z.ZodString>;
+            outcome: z.ZodOptional<z.ZodString>;
+            told: z.ZodOptional<z.ZodEnum<{
+                call: "call";
+                queued: "queued";
+                turn: "turn";
+            }>>;
+            unattended: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        grants: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            conversations: z.ZodArray<z.ZodObject<{
+                conversationId: z.ZodString;
+                capabilities: z.ZodArray<z.ZodString>;
+                folders: z.ZodArray<z.ZodString>;
+                shelves: z.ZodArray<z.ZodEnum<{
+                    browser: "browser";
+                    code: "code";
+                    delegate: "delegate";
+                    files: "files";
+                    sandbox: "sandbox";
+                    shell: "shell";
+                    web: "web";
+                }>>;
+                by: z.ZodOptional<z.ZodString>;
+                updatedAt: z.ZodOptional<z.ZodNumber>;
+                releases: z.ZodArray<z.ZodObject<{
+                    subject: z.ZodString;
+                    approvedBy: z.ZodString;
+                    at: z.ZodNumber;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        revokeGrant: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            conversationId: z.ZodString;
+            kind: z.ZodEnum<{
+                capability: "capability";
+                folder: "folder";
+                release: "release";
+                shelf: "shelf";
+            }>;
+            what: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+    };
+    secrets: {
+        set: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        generate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+            bytes: z.ZodDefault<z.ZodNumber>;
+            format: z.ZodDefault<z.ZodEnum<{
+                alnum: "alnum";
+                base64url: "base64url";
+                hex: "hex";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            key: z.ZodString;
+            length: z.ZodNumber;
+            stored: z.ZodEnum<{
+                env: "env";
+                sandbox: "sandbox";
+            }>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
+            keys: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            key: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
             ok: z.ZodLiteral<true>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         inventory: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
@@ -14979,6 +16590,31 @@ export declare const sandboxContract: {
                     ok: z.ZodBoolean;
                 }, z.core.$strip>>;
             }, z.core.$strip>>;
+            lastUpdate: z.ZodOptional<z.ZodObject<{
+                result: z.ZodEnum<{
+                    kept: "kept";
+                    restored: "restored";
+                    "rolled-back": "rolled-back";
+                    updated: "updated";
+                }>;
+                verb: z.ZodOptional<z.ZodString>;
+                at: z.ZodNumber;
+                from: z.ZodOptional<z.ZodString>;
+                to: z.ZodOptional<z.ZodString>;
+                reason: z.ZodOptional<z.ZodString>;
+                log: z.ZodOptional<z.ZodString>;
+                keepUntil: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strip>>;
+            withdrawn: z.ZodOptional<z.ZodObject<{
+                version: z.ZodString;
+                reason: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            skippedVersion: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
+        skipUpdate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            version: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>, z.ZodObject<{
+            ok: z.ZodLiteral<true>;
         }, z.core.$strip>, Record<never, never>, import("./protocol/route-meta.js").RouteMeta & Record<never, never>>;
         manifestProblems: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodArray<z.ZodObject<{
             path: z.ZodString;
@@ -15014,19 +16650,6 @@ export declare const sandboxContract: {
         events: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             clientId: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>, import("@orpc/contract").Schema<AsyncIteratorObject<{
-            kind: "heartbeat";
-            rev: number;
-        } | {
-            ready: boolean;
-            startedAt: number;
-            steps: {
-                key: string;
-                label: string;
-                state: "done" | "failed" | "pending" | "running";
-                ms?: number | undefined;
-            }[];
-            kind: "boot";
-        } | {
             kind: "hello";
             workspaceId: string;
             routes?: string[] | undefined;
@@ -15043,8 +16666,18 @@ export declare const sandboxContract: {
                 }[];
             } | undefined;
         } | {
-            kind: "reposChanged";
-            repos: string[];
+            kind: "heartbeat";
+            rev: number;
+        } | {
+            ready: boolean;
+            startedAt: number;
+            steps: {
+                key: string;
+                label: string;
+                state: "done" | "failed" | "pending" | "running";
+                ms?: number | undefined;
+            }[];
+            kind: "boot";
         } | {
             kind: "workspaceChanged";
             paths: string[];
@@ -15060,6 +16693,9 @@ export declare const sandboxContract: {
                 shadows?: number | undefined;
                 sweptAt?: string | undefined;
             };
+        } | {
+            kind: "reposChanged";
+            repos: string[];
         } | {
             kind: "refsChanged";
             repos: string[];
@@ -15217,6 +16853,7 @@ export declare const sandboxContract: {
                     capability: boolean;
                     credential: boolean;
                     conflict: boolean;
+                    need?: boolean | undefined;
                 };
                 conflictCauses?: ("binary" | "diverged" | "workspace")[] | undefined;
                 unfinished?: {
@@ -15269,6 +16906,12 @@ export declare const sandboxContract: {
                     intervalSeconds: number;
                     deadlineAt: number;
                 }[] | undefined;
+                needs?: {
+                    id: string;
+                    kind: "capability" | "environment" | "grant" | "release" | "secret";
+                    title: string;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                }[] | undefined;
                 jobs?: {
                     id: string;
                     label: string;
@@ -15325,19 +16968,6 @@ export declare const sandboxContract: {
             barren?: string[] | undefined;
             kind: "treeChanged";
         }, unknown, void>, import("@orpc/contract").AsyncIteratorClass<{
-            kind: "heartbeat";
-            rev: number;
-        } | {
-            ready: boolean;
-            startedAt: number;
-            steps: {
-                key: string;
-                label: string;
-                state: "done" | "failed" | "pending" | "running";
-                ms?: number | undefined;
-            }[];
-            kind: "boot";
-        } | {
             kind: "hello";
             workspaceId: string;
             routes?: string[] | undefined;
@@ -15354,8 +16984,18 @@ export declare const sandboxContract: {
                 }[];
             } | undefined;
         } | {
-            kind: "reposChanged";
-            repos: string[];
+            kind: "heartbeat";
+            rev: number;
+        } | {
+            ready: boolean;
+            startedAt: number;
+            steps: {
+                key: string;
+                label: string;
+                state: "done" | "failed" | "pending" | "running";
+                ms?: number | undefined;
+            }[];
+            kind: "boot";
         } | {
             kind: "workspaceChanged";
             paths: string[];
@@ -15371,6 +17011,9 @@ export declare const sandboxContract: {
                 shadows?: number | undefined;
                 sweptAt?: string | undefined;
             };
+        } | {
+            kind: "reposChanged";
+            repos: string[];
         } | {
             kind: "refsChanged";
             repos: string[];
@@ -15528,6 +17171,7 @@ export declare const sandboxContract: {
                     capability: boolean;
                     credential: boolean;
                     conflict: boolean;
+                    need?: boolean | undefined;
                 };
                 conflictCauses?: ("binary" | "diverged" | "workspace")[] | undefined;
                 unfinished?: {
@@ -15580,6 +17224,12 @@ export declare const sandboxContract: {
                     intervalSeconds: number;
                     deadlineAt: number;
                 }[] | undefined;
+                needs?: {
+                    id: string;
+                    kind: "capability" | "environment" | "grant" | "release" | "secret";
+                    title: string;
+                    status: "cancelled" | "declined" | "met" | "open" | "working";
+                }[] | undefined;
                 jobs?: {
                     id: string;
                     label: string;
@@ -15917,6 +17567,7 @@ export declare const sandboxContract: {
                         capability: z.ZodBoolean;
                         credential: z.ZodBoolean;
                         conflict: z.ZodBoolean;
+                        need: z.ZodOptional<z.ZodBoolean>;
                     }, z.core.$strip>;
                     conflictCauses: z.ZodOptional<z.ZodArray<z.ZodEnum<{
                         binary: "binary";
@@ -15986,6 +17637,24 @@ export declare const sandboxContract: {
                         intervalSeconds: z.ZodNumber;
                         deadlineAt: z.ZodNumber;
                     }, z.core.$strip>>>;
+                    needs: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        id: z.ZodString;
+                        kind: z.ZodEnum<{
+                            capability: "capability";
+                            environment: "environment";
+                            grant: "grant";
+                            release: "release";
+                            secret: "secret";
+                        }>;
+                        title: z.ZodString;
+                        status: z.ZodEnum<{
+                            cancelled: "cancelled";
+                            declined: "declined";
+                            met: "met";
+                            open: "open";
+                            working: "working";
+                        }>;
+                    }, z.core.$strip>>>;
                     jobs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                         id: z.ZodString;
                         label: z.ZodString;
@@ -16674,6 +18343,85 @@ export declare const sandboxContract: {
                     elapsed: z.ZodString;
                     sent: z.ZodString;
                 }, z.core.$strip>>;
+                need: z.ZodOptional<z.ZodObject<{
+                    id: z.ZodString;
+                    conversationId: z.ZodString;
+                    subject: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                        kind: z.ZodLiteral<"capability">;
+                        entry: z.ZodString;
+                        name: z.ZodString;
+                        mode: z.ZodEnum<{
+                            change: "change";
+                            connect: "connect";
+                            reconnect: "reconnect";
+                        }>;
+                        instance: z.ZodOptional<z.ZodString>;
+                        target: z.ZodOptional<z.ZodString>;
+                        prefill: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        changes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        reported: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"secret">;
+                        name: z.ZodString;
+                        where: z.ZodOptional<z.ZodString>;
+                        link: z.ZodOptional<z.ZodString>;
+                        hint: z.ZodOptional<z.ZodString>;
+                        replace: z.ZodOptional<z.ZodBoolean>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"grant">;
+                        subject: z.ZodEnum<{
+                            capability: "capability";
+                            folder: "folder";
+                            shelf: "shelf";
+                            site: "site";
+                        }>;
+                        what: z.ZodString;
+                        label: z.ZodString;
+                        persona: z.ZodOptional<z.ZodString>;
+                        scope: z.ZodOptional<z.ZodEnum<{
+                            conversation: "conversation";
+                            persona: "persona";
+                        }>>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"release">;
+                        subject: z.ZodString;
+                        approvers: z.ZodArray<z.ZodString>;
+                    }, z.core.$strip>, z.ZodObject<{
+                        kind: z.ZodLiteral<"environment">;
+                        tool: z.ZodString;
+                        steps: z.ZodString;
+                        approvedHash: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>], "kind">;
+                    title: z.ZodString;
+                    why: z.ZodOptional<z.ZodString>;
+                    status: z.ZodEnum<{
+                        cancelled: "cancelled";
+                        declined: "declined";
+                        met: "met";
+                        open: "open";
+                        working: "working";
+                    }>;
+                    createdAt: z.ZodNumber;
+                    updatedAt: z.ZodNumber;
+                    answeredBy: z.ZodOptional<z.ZodString>;
+                    outcome: z.ZodOptional<z.ZodString>;
+                    told: z.ZodOptional<z.ZodEnum<{
+                        call: "call";
+                        queued: "queued";
+                        turn: "turn";
+                    }>>;
+                    unattended: z.ZodOptional<z.ZodBoolean>;
+                }, z.core.$strip>>;
+                needWake: z.ZodOptional<z.ZodObject<{
+                    outcome: z.ZodEnum<{
+                        declined: "declined";
+                        met: "met";
+                    }>;
+                    title: z.ZodString;
+                    id: z.ZodString;
+                    sent: z.ZodString;
+                }, z.core.$strip>>;
                 agentWords: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
                         child: "child";
@@ -16879,6 +18627,28 @@ export declare const sandboxContract: {
                         version: z.ZodOptional<z.ZodString>;
                         channel: z.ZodOptional<z.ZodString>;
                     }, z.core.$strip>>;
+                    version: z.ZodOptional<z.ZodString>;
+                    parked: z.ZodOptional<z.ZodBoolean>;
+                    probationUntil: z.ZodOptional<z.ZodNumber>;
+                    lastUpdate: z.ZodOptional<z.ZodObject<{
+                        result: z.ZodEnum<{
+                            kept: "kept";
+                            restored: "restored";
+                            "rolled-back": "rolled-back";
+                            updated: "updated";
+                        }>;
+                        verb: z.ZodOptional<z.ZodString>;
+                        at: z.ZodNumber;
+                        from: z.ZodOptional<z.ZodString>;
+                        to: z.ZodOptional<z.ZodString>;
+                        reason: z.ZodOptional<z.ZodString>;
+                        log: z.ZodOptional<z.ZodString>;
+                        keepUntil: z.ZodOptional<z.ZodNumber>;
+                    }, z.core.$strip>>;
+                    rollbackTargets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                        image: z.ZodString;
+                        version: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strip>>>;
                 }, z.core.$strip>>>;
                 gap: z.ZodOptional<z.ZodEnum<{
                     offline: "offline";
@@ -16908,6 +18678,7 @@ export declare const sandboxContract: {
             }>;
             slug: z.ZodString;
             hash: z.ZodOptional<z.ZodString>;
+            to: z.ZodOptional<z.ZodString>;
             shape: z.ZodOptional<z.ZodObject<{
                 memoryGib: z.ZodNullable<z.ZodInt>;
                 cpus: z.ZodNullable<z.ZodInt>;