@jrkropp/codex-js 0.1.2 → 0.1.4

package/dist/ServerRequest-B5cKVJjr.d.ts

@@ -0,0 +1,2181 @@
+import { R as RequestId, T as ToolRequestUserInputQuestion } from './ToolRequestUserInputQuestion-CeZa5X1J.js';
+
+/**
+ * A path that is guaranteed to be absolute and normalized (though it is not
+ * guaranteed to be canonicalized or exist on the filesystem).
+ *
+ * IMPORTANT: When deserializing an `AbsolutePathBuf`, a base path must be set
+ * using [AbsolutePathBufGuard::new]. If no base path is set, the
+ * deserialization will fail unless the path being deserialized is already
+ * absolute.
+ */
+type AbsolutePathBuf = string;
+
+type AgentPath = string;
+
+type FileChange = {
+    "type": "add";
+    content: string;
+} | {
+    "type": "delete";
+    content: string;
+} | {
+    "type": "update";
+    unified_diff: string;
+    move_path: string | null;
+};
+
+type ThreadId = string;
+
+type ApplyPatchApprovalParams = {
+    conversationId: ThreadId;
+    /**
+     * Use to correlate this with [codex_protocol::protocol::PatchApplyBeginEvent]
+     * and [codex_protocol::protocol::PatchApplyEndEvent].
+     */
+    callId: string;
+    fileChanges: {
+        [key in string]?: FileChange;
+    };
+    /**
+     * Optional explanatory reason (e.g. request for extra write access).
+     */
+    reason: string | null;
+    /**
+     * When set, the agent is asking the user to allow writes under this root
+     * for the remainder of the session (unclear if this is honored today).
+     */
+    grantRoot: string | null;
+};
+
+/**
+ * Authentication mode for OpenAI-backed providers.
+ */
+type AuthMode = "apikey" | "chatgpt" | "chatgptAuthTokens" | "agentIdentity";
+
+type JsonValue = number | string | boolean | Array<JsonValue> | {
+    [key in string]?: JsonValue;
+} | null;
+
+type ThreadSource = "user" | "subagent" | "memory_consolidation";
+
+/**
+ * See https://platform.openai.com/docs/guides/reasoning?api-mode=responses#get-started-with-reasoning
+ */
+type ReasoningEffort = "none" | "minimal" | "low" | "medium" | "high" | "xhigh";
+
+type ByteRange = {
+    start: number;
+    end: number;
+};
+
+type TextElement = {
+    /**
+     * Byte range in the parent `text` buffer that this element occupies.
+     */
+    byteRange: ByteRange;
+    /**
+     * Optional human-readable placeholder for the element, displayed in the UI.
+     */
+    placeholder: string | null;
+};
+
+type UserInput = {
+    "type": "text";
+    text: string;
+    /**
+     * UI-defined spans within `text` used to render or persist special elements.
+     */
+    text_elements: Array<TextElement>;
+} | {
+    "type": "image";
+    url: string;
+} | {
+    "type": "localImage";
+    path: string;
+} | {
+    "type": "skill";
+    name: string;
+    path: string;
+} | {
+    "type": "mention";
+    name: string;
+    path: string;
+};
+
+type WindowsSandboxSetupMode = "elevated" | "unelevated";
+
+type ImageDetail = "auto" | "low" | "high" | "original";
+
+type ContentItem = {
+    "type": "input_text";
+    text: string;
+} | {
+    "type": "input_image";
+    image_url: string;
+    detail?: ImageDetail;
+} | {
+    "type": "output_text";
+    text: string;
+};
+
+type SubAgentSource = "review" | "compact" | {
+    "thread_spawn": {
+        parent_thread_id: ThreadId;
+        depth: number;
+        agent_path: AgentPath | null;
+        agent_nickname: string | null;
+        agent_role: string | null;
+    };
+} | "memory_consolidation" | {
+    "other": string;
+};
+
+type ParsedCommand = {
+    "type": "read";
+    cmd: string;
+    name: string;
+    /**
+     * (Best effort) Path to the file being read by the command. When
+     * possible, this is an absolute path, though when relative, it should
+     * be resolved against the `cwd`` that will be used to run the command
+     * to derive the absolute path.
+     */
+    path: string;
+} | {
+    "type": "list_files";
+    cmd: string;
+    path: string | null;
+} | {
+    "type": "search";
+    cmd: string;
+    query: string | null;
+    path: string | null;
+} | {
+    "type": "unknown";
+    cmd: string;
+};
+
+type ExecCommandApprovalParams = {
+    conversationId: ThreadId;
+    /**
+     * Use to correlate this with [codex_protocol::protocol::ExecCommandBeginEvent]
+     * and [codex_protocol::protocol::ExecCommandEndEvent].
+     */
+    callId: string;
+    /**
+     * Identifier for this specific approval callback.
+     */
+    approvalId: string | null;
+    command: Array<string>;
+    cwd: string;
+    reason: string | null;
+    parsedCmd: Array<ParsedCommand>;
+};
+
+/**
+ * Responses API compatible content items that can be returned by a tool call.
+ * This is a subset of ContentItem with the types we support as function call outputs.
+ */
+type FunctionCallOutputContentItem = {
+    "type": "input_text";
+    text: string;
+} | {
+    "type": "input_image";
+    image_url: string;
+    detail?: ImageDetail;
+};
+
+type FunctionCallOutputBody = string | Array<FunctionCallOutputContentItem>;
+
+type FuzzyFileSearchMatchType = "file" | "directory";
+
+/**
+ * Superset of [`codex_file_search::FileMatch`]
+ */
+type FuzzyFileSearchResult = {
+    root: string;
+    path: string;
+    match_type: FuzzyFileSearchMatchType;
+    file_name: string;
+    score: number;
+    indices: Array<number> | null;
+};
+
+type FuzzyFileSearchSessionCompletedNotification = {
+    sessionId: string;
+};
+
+type FuzzyFileSearchSessionUpdatedNotification = {
+    sessionId: string;
+    query: string;
+    files: Array<FuzzyFileSearchResult>;
+};
+
+type LocalShellExecAction = {
+    command: Array<string>;
+    timeout_ms: bigint | null;
+    working_directory: string | null;
+    env: {
+        [key in string]?: string;
+    } | null;
+    user: string | null;
+};
+
+type LocalShellAction = {
+    "type": "exec";
+} & LocalShellExecAction;
+
+type LocalShellStatus = "completed" | "in_progress" | "incomplete";
+
+/**
+ * Classifies an assistant message as interim commentary or final answer text.
+ *
+ * Providers do not emit this consistently, so callers must treat `None` as
+ * "phase unknown" and keep compatibility behavior for legacy models.
+ */
+type MessagePhase = "commentary" | "final_answer";
+
+type PlanType = "free" | "go" | "plus" | "pro" | "prolite" | "team" | "self_serve_business_usage_based" | "business" | "enterprise_cbp_usage_based" | "enterprise" | "edu" | "unknown";
+
+type RealtimeConversationVersion = "v1" | "v2";
+
+type ReasoningItemContent = {
+    "type": "reasoning_text";
+    text: string;
+} | {
+    "type": "text";
+    text: string;
+};
+
+type ReasoningItemReasoningSummary = {
+    "type": "summary_text";
+    text: string;
+};
+
+type WebSearchAction$1 = {
+    "type": "search";
+    query?: string;
+    queries?: Array<string>;
+} | {
+    "type": "open_page";
+    url?: string;
+} | {
+    "type": "find_in_page";
+    url?: string;
+    pattern?: string;
+} | {
+    "type": "other";
+};
+
+type ResponseItem = {
+    "type": "message";
+    role: string;
+    content: Array<ContentItem>;
+    phase?: MessagePhase;
+} | {
+    "type": "reasoning";
+    summary: Array<ReasoningItemReasoningSummary>;
+    content?: Array<ReasoningItemContent>;
+    encrypted_content: string | null;
+} | {
+    "type": "local_shell_call";
+    /**
+     * Set when using the Responses API.
+     */
+    call_id: string | null;
+    status: LocalShellStatus;
+    action: LocalShellAction;
+} | {
+    "type": "function_call";
+    name: string;
+    namespace?: string;
+    arguments: string;
+    call_id: string;
+} | {
+    "type": "tool_search_call";
+    call_id: string | null;
+    status?: string;
+    execution: string;
+    arguments: unknown;
+} | {
+    "type": "function_call_output";
+    call_id: string;
+    output: FunctionCallOutputBody;
+} | {
+    "type": "custom_tool_call";
+    status?: string;
+    call_id: string;
+    name: string;
+    input: string;
+} | {
+    "type": "custom_tool_call_output";
+    call_id: string;
+    name?: string;
+    output: FunctionCallOutputBody;
+} | {
+    "type": "tool_search_output";
+    call_id: string | null;
+    status: string;
+    execution: string;
+    tools: unknown[];
+} | {
+    "type": "web_search_call";
+    status?: string;
+    action?: WebSearchAction$1;
+} | {
+    "type": "image_generation_call";
+    id: string;
+    status: string;
+    revised_prompt?: string;
+    result: string;
+} | {
+    "type": "compaction";
+    encrypted_content: string;
+} | {
+    "type": "context_compaction";
+    encrypted_content?: string;
+} | {
+    "type": "other";
+};
+
+type AccountLoginCompletedNotification = {
+    loginId: string | null;
+    success: boolean;
+    error: string | null;
+};
+
+type CreditsSnapshot = {
+    hasCredits: boolean;
+    unlimited: boolean;
+    balance: string | null;
+};
+
+type RateLimitReachedType = "rate_limit_reached" | "workspace_owner_credits_depleted" | "workspace_member_credits_depleted" | "workspace_owner_usage_limit_reached" | "workspace_member_usage_limit_reached";
+
+type RateLimitWindow = {
+    usedPercent: number;
+    windowDurationMins: number | null;
+    resetsAt: number | null;
+};
+
+type RateLimitSnapshot = {
+    limitId: string | null;
+    limitName: string | null;
+    primary: RateLimitWindow | null;
+    secondary: RateLimitWindow | null;
+    credits: CreditsSnapshot | null;
+    planType: PlanType | null;
+    rateLimitReachedType: RateLimitReachedType | null;
+};
+
+type AccountRateLimitsUpdatedNotification = {
+    rateLimits: RateLimitSnapshot;
+};
+
+type AccountUpdatedNotification = {
+    authMode: AuthMode | null;
+    planType: PlanType | null;
+};
+
+type AgentMessageDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+};
+
+/**
+ * EXPERIMENTAL - app metadata returned by app-list APIs.
+ */
+type AppBranding = {
+    category: string | null;
+    developer: string | null;
+    website: string | null;
+    privacyPolicy: string | null;
+    termsOfService: string | null;
+    isDiscoverableApp: boolean;
+};
+
+type AppReview = {
+    status: string;
+};
+
+type AppScreenshot = {
+    url: string | null;
+    fileId: string | null;
+    userPrompt: string;
+};
+
+type AppMetadata = {
+    review: AppReview | null;
+    categories: Array<string> | null;
+    subCategories: Array<string> | null;
+    seoDescription: string | null;
+    screenshots: Array<AppScreenshot> | null;
+    developer: string | null;
+    version: string | null;
+    versionId: string | null;
+    versionNotes: string | null;
+    firstPartyType: string | null;
+    firstPartyRequiresInstall: boolean | null;
+    showInComposerWhenUnlinked: boolean | null;
+};
+
+/**
+ * EXPERIMENTAL - app metadata returned by app-list APIs.
+ */
+type AppInfo = {
+    id: string;
+    name: string;
+    description: string | null;
+    logoUrl: string | null;
+    logoUrlDark: string | null;
+    distributionChannel: string | null;
+    branding: AppBranding | null;
+    appMetadata: AppMetadata | null;
+    labels: {
+        [key in string]?: string;
+    } | null;
+    installUrl: string | null;
+    isAccessible: boolean;
+    /**
+     * Whether this app is enabled in config.toml.
+     * Example:
+     * ```toml
+     * [apps.bad_app]
+     * enabled = false
+     * ```
+     */
+    isEnabled: boolean;
+    pluginDisplayNames: Array<string>;
+};
+
+/**
+ * EXPERIMENTAL - notification emitted when the app list changes.
+ */
+type AppListUpdatedNotification = {
+    data: Array<AppInfo>;
+};
+
+/**
+ * Stream label for `command/exec/outputDelta` notifications.
+ */
+type CommandExecOutputStream = "stdout" | "stderr";
+
+/**
+ * Base64-encoded output chunk emitted for a streaming `command/exec` request.
+ *
+ * These notifications are connection-scoped. If the originating connection
+ * closes, the server terminates the process.
+ */
+type CommandExecOutputDeltaNotification = {
+    /**
+     * Client-supplied, connection-scoped `processId` from the original
+     * `command/exec` request.
+     */
+    processId: string;
+    /**
+     * Output stream for this chunk.
+     */
+    stream: CommandExecOutputStream;
+    /**
+     * Base64-encoded output bytes.
+     */
+    deltaBase64: string;
+    /**
+     * `true` on the final streamed chunk for a stream when `outputBytesCap`
+     * truncated later output on that stream.
+     */
+    capReached: boolean;
+};
+
+type CommandExecutionOutputDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+};
+
+type TextPosition = {
+    /**
+     * 1-based line number.
+     */
+    line: number;
+    /**
+     * 1-based column number (in Unicode scalar values).
+     */
+    column: number;
+};
+
+type TextRange = {
+    start: TextPosition;
+    end: TextPosition;
+};
+
+type ConfigWarningNotification = {
+    /**
+     * Concise summary of the warning.
+     */
+    summary: string;
+    /**
+     * Optional extra guidance or error details.
+     */
+    details: string | null;
+    /**
+     * Optional path to the config file that triggered the warning.
+     */
+    path?: string;
+    /**
+     * Optional range for the error location inside the config file.
+     */
+    range?: TextRange;
+};
+
+/**
+ * Deprecated: Use `ContextCompaction` item type instead.
+ */
+type ContextCompactedNotification = {
+    threadId: string;
+    turnId: string;
+};
+
+type DeprecationNoticeNotification = {
+    /**
+     * Concise summary of what is deprecated.
+     */
+    summary: string;
+    /**
+     * Optional extra guidance, such as migration steps or rationale.
+     */
+    details: string | null;
+};
+
+type NonSteerableTurnKind = "review" | "compact";
+
+/**
+ * This translation layer make sure that we expose codex error code in camel case.
+ *
+ * When an upstream HTTP status is available (for example, from the Responses API or a provider),
+ * it is forwarded in `httpStatusCode` on the relevant `codexErrorInfo` variant.
+ */
+type CodexErrorInfo = "contextWindowExceeded" | "usageLimitExceeded" | "serverOverloaded" | "cyberPolicy" | {
+    "httpConnectionFailed": {
+        httpStatusCode: number | null;
+    };
+} | {
+    "responseStreamConnectionFailed": {
+        httpStatusCode: number | null;
+    };
+} | "internalServerError" | "unauthorized" | "badRequest" | "threadRollbackFailed" | "sandboxError" | {
+    "responseStreamDisconnected": {
+        httpStatusCode: number | null;
+    };
+} | {
+    "responseTooManyFailedAttempts": {
+        httpStatusCode: number | null;
+    };
+} | {
+    "activeTurnNotSteerable": {
+        turnKind: NonSteerableTurnKind;
+    };
+} | "other";
+
+type TurnError = {
+    message: string;
+    codexErrorInfo: CodexErrorInfo | null;
+    additionalDetails: string | null;
+};
+
+type ErrorNotification = {
+    error: TurnError;
+    willRetry: boolean;
+    threadId: string;
+    turnId: string;
+};
+
+type ExternalAgentConfigImportCompletedNotification = Record<string, never>;
+
+/**
+ * Deprecated legacy notification for `apply_patch` textual output.
+ *
+ * The server no longer emits this notification.
+ */
+type FileChangeOutputDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+};
+
+type PatchChangeKind = {
+    "type": "add";
+} | {
+    "type": "delete";
+} | {
+    "type": "update";
+    move_path: string | null;
+};
+
+type FileUpdateChange = {
+    path: string;
+    kind: PatchChangeKind;
+    diff: string;
+};
+
+type FileChangePatchUpdatedNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    changes: Array<FileUpdateChange>;
+};
+
+/**
+ * Filesystem watch notification emitted for `fs/watch` subscribers.
+ */
+type FsChangedNotification = {
+    /**
+     * Watch identifier previously provided to `fs/watch`.
+     */
+    watchId: string;
+    /**
+     * File or directory paths associated with this event.
+     */
+    changedPaths: Array<AbsolutePathBuf>;
+};
+
+type GuardianWarningNotification = {
+    /**
+     * Thread target for the guardian warning.
+     */
+    threadId: string;
+    /**
+     * Concise guardian warning message for the user.
+     */
+    message: string;
+};
+
+type HookEventName = "preToolUse" | "permissionRequest" | "postToolUse" | "preCompact" | "postCompact" | "sessionStart" | "userPromptSubmit" | "stop";
+
+type HookExecutionMode = "sync" | "async";
+
+type HookHandlerType = "command" | "prompt" | "agent";
+
+type HookOutputEntryKind = "warning" | "stop" | "feedback" | "context" | "error";
+
+type HookOutputEntry = {
+    kind: HookOutputEntryKind;
+    text: string;
+};
+
+type HookRunStatus = "running" | "completed" | "failed" | "blocked" | "stopped";
+
+type HookScope = "thread" | "turn";
+
+type HookSource = "system" | "user" | "project" | "mdm" | "sessionFlags" | "plugin" | "cloudRequirements" | "legacyManagedConfigFile" | "legacyManagedConfigMdm" | "unknown";
+
+type HookRunSummary = {
+    id: string;
+    eventName: HookEventName;
+    handlerType: HookHandlerType;
+    executionMode: HookExecutionMode;
+    scope: HookScope;
+    sourcePath: AbsolutePathBuf;
+    source: HookSource;
+    displayOrder: bigint;
+    status: HookRunStatus;
+    statusMessage: string | null;
+    startedAt: bigint;
+    completedAt: bigint | null;
+    durationMs: bigint | null;
+    entries: Array<HookOutputEntry>;
+};
+
+type HookCompletedNotification = {
+    threadId: string;
+    turnId: string | null;
+    run: HookRunSummary;
+};
+
+type HookStartedNotification = {
+    threadId: string;
+    turnId: string | null;
+    run: HookRunSummary;
+};
+
+type CollabAgentStatus = "pendingInit" | "running" | "interrupted" | "completed" | "errored" | "shutdown" | "notFound";
+
+type CollabAgentState = {
+    status: CollabAgentStatus;
+    message: string | null;
+};
+
+type CollabAgentTool = "spawnAgent" | "sendInput" | "resumeAgent" | "wait" | "closeAgent";
+
+type CollabAgentToolCallStatus = "inProgress" | "completed" | "failed";
+
+type CommandAction = {
+    "type": "read";
+    command: string;
+    name: string;
+    path: AbsolutePathBuf;
+} | {
+    "type": "listFiles";
+    command: string;
+    path: string | null;
+} | {
+    "type": "search";
+    command: string;
+    query: string | null;
+    path: string | null;
+} | {
+    "type": "unknown";
+    command: string;
+};
+
+type CommandExecutionSource = "agent" | "userShell" | "unifiedExecStartup" | "unifiedExecInteraction";
+
+type CommandExecutionStatus = "inProgress" | "completed" | "failed" | "declined";
+
+type DynamicToolCallOutputContentItem = {
+    "type": "inputText";
+    text: string;
+} | {
+    "type": "inputImage";
+    imageUrl: string;
+};
+
+type DynamicToolCallStatus = "inProgress" | "completed" | "failed";
+
+type HookPromptFragment = {
+    text: string;
+    hookRunId: string;
+};
+
+type McpToolCallError = {
+    message: string;
+};
+
+type McpToolCallResult = {
+    content: Array<JsonValue>;
+    structuredContent: JsonValue | null;
+    _meta: JsonValue | null;
+};
+
+type McpToolCallStatus = "inProgress" | "completed" | "failed";
+
+type MemoryCitationEntry = {
+    path: string;
+    lineStart: number;
+    lineEnd: number;
+    note: string;
+};
+
+type MemoryCitation = {
+    entries: Array<MemoryCitationEntry>;
+    threadIds: Array<string>;
+};
+
+type PatchApplyStatus = "inProgress" | "completed" | "failed" | "declined";
+
+type WebSearchAction = {
+    "type": "search";
+    query: string | null;
+    queries: Array<string> | null;
+} | {
+    "type": "openPage";
+    url: string | null;
+} | {
+    "type": "findInPage";
+    url: string | null;
+    pattern: string | null;
+} | {
+    "type": "other";
+};
+
+type ThreadItem = {
+    "type": "userMessage";
+    id: string;
+    content: Array<UserInput>;
+} | {
+    "type": "hookPrompt";
+    id: string;
+    fragments: Array<HookPromptFragment>;
+} | {
+    "type": "agentMessage";
+    id: string;
+    text: string;
+    phase: MessagePhase | null;
+    memoryCitation: MemoryCitation | null;
+} | {
+    "type": "plan";
+    id: string;
+    text: string;
+} | {
+    "type": "reasoning";
+    id: string;
+    summary: Array<string>;
+    content: Array<string>;
+} | {
+    "type": "commandExecution";
+    id: string;
+    /**
+     * The command to be executed.
+     */
+    command: string;
+    /**
+     * The command's working directory.
+     */
+    cwd: AbsolutePathBuf;
+    /**
+     * Identifier for the underlying PTY process (when available).
+     */
+    processId: string | null;
+    source: CommandExecutionSource;
+    status: CommandExecutionStatus;
+    /**
+     * A best-effort parsing of the command to understand the action(s) it will perform.
+     * This returns a list of CommandAction objects because a single shell command may
+     * be composed of many commands piped together.
+     */
+    commandActions: Array<CommandAction>;
+    /**
+     * The command's output, aggregated from stdout and stderr.
+     */
+    aggregatedOutput: string | null;
+    /**
+     * The command's exit code.
+     */
+    exitCode: number | null;
+    /**
+     * The duration of the command execution in milliseconds.
+     */
+    durationMs: number | null;
+} | {
+    "type": "fileChange";
+    id: string;
+    changes: Array<FileUpdateChange>;
+    status: PatchApplyStatus;
+} | {
+    "type": "mcpToolCall";
+    id: string;
+    server: string;
+    tool: string;
+    status: McpToolCallStatus;
+    arguments: JsonValue;
+    mcpAppResourceUri?: string;
+    result: McpToolCallResult | null;
+    error: McpToolCallError | null;
+    /**
+     * The duration of the MCP tool call in milliseconds.
+     */
+    durationMs: number | null;
+} | {
+    "type": "dynamicToolCall";
+    id: string;
+    namespace: string | null;
+    tool: string;
+    arguments: JsonValue;
+    status: DynamicToolCallStatus;
+    contentItems: Array<DynamicToolCallOutputContentItem> | null;
+    success: boolean | null;
+    /**
+     * The duration of the dynamic tool call in milliseconds.
+     */
+    durationMs: number | null;
+} | {
+    "type": "collabAgentToolCall";
+    /**
+     * Unique identifier for this collab tool call.
+     */
+    id: string;
+    /**
+     * Name of the collab tool that was invoked.
+     */
+    tool: CollabAgentTool;
+    /**
+     * Current status of the collab tool call.
+     */
+    status: CollabAgentToolCallStatus;
+    /**
+     * Thread ID of the agent issuing the collab request.
+     */
+    senderThreadId: string;
+    /**
+     * Thread ID of the receiving agent, when applicable. In case of spawn operation,
+     * this corresponds to the newly spawned agent.
+     */
+    receiverThreadIds: Array<string>;
+    /**
+     * Prompt text sent as part of the collab tool call, when available.
+     */
+    prompt: string | null;
+    /**
+     * Model requested for the spawned agent, when applicable.
+     */
+    model: string | null;
+    /**
+     * Reasoning effort requested for the spawned agent, when applicable.
+     */
+    reasoningEffort: ReasoningEffort | null;
+    /**
+     * Last known status of the target agents, when available.
+     */
+    agentsStates: {
+        [key in string]?: CollabAgentState;
+    };
+} | {
+    "type": "webSearch";
+    id: string;
+    query: string;
+    action: WebSearchAction | null;
+} | {
+    "type": "imageView";
+    id: string;
+    path: AbsolutePathBuf;
+} | {
+    "type": "imageGeneration";
+    id: string;
+    status: string;
+    revisedPrompt: string | null;
+    result: string;
+    savedPath?: AbsolutePathBuf;
+} | {
+    "type": "enteredReviewMode";
+    id: string;
+    review: string;
+} | {
+    "type": "exitedReviewMode";
+    id: string;
+    review: string;
+} | {
+    "type": "contextCompaction";
+    id: string;
+};
+
+type ItemCompletedNotification = {
+    item: ThreadItem;
+    threadId: string;
+    turnId: string;
+    /**
+     * Unix timestamp (in milliseconds) when this item lifecycle completed.
+     */
+    completedAtMs: number;
+};
+
+/**
+ * [UNSTABLE] Source that produced a terminal approval auto-review decision.
+ */
+type AutoReviewDecisionSource = "agent";
+
+/**
+ * [UNSTABLE] Lifecycle state for an approval auto-review.
+ */
+type GuardianApprovalReviewStatus = "inProgress" | "approved" | "denied" | "timedOut" | "aborted";
+
+/**
+ * [UNSTABLE] Risk level assigned by approval auto-review.
+ */
+type GuardianRiskLevel = "low" | "medium" | "high" | "critical";
+
+/**
+ * [UNSTABLE] Authorization level assigned by approval auto-review.
+ */
+type GuardianUserAuthorization = "unknown" | "low" | "medium" | "high";
+
+/**
+ * [UNSTABLE] Temporary approval auto-review payload used by
+ * `item/autoApprovalReview/*` notifications. This shape is expected to change
+ * soon.
+ */
+type GuardianApprovalReview = {
+    status: GuardianApprovalReviewStatus;
+    riskLevel: GuardianRiskLevel | null;
+    userAuthorization: GuardianUserAuthorization | null;
+    rationale: string | null;
+};
+
+type GuardianCommandSource = "shell" | "unifiedExec";
+
+type NetworkApprovalProtocol = "http" | "https" | "socks5Tcp" | "socks5Udp";
+
+type FileSystemAccessMode = "read" | "write" | "none";
+
+type FileSystemSpecialPath = {
+    "kind": "root";
+} | {
+    "kind": "minimal";
+} | {
+    "kind": "project_roots";
+    subpath: string | null;
+} | {
+    "kind": "tmpdir";
+} | {
+    "kind": "slash_tmp";
+} | {
+    "kind": "unknown";
+    path: string;
+    subpath: string | null;
+};
+
+type FileSystemPath = {
+    "type": "path";
+    path: AbsolutePathBuf;
+} | {
+    "type": "glob_pattern";
+    pattern: string;
+} | {
+    "type": "special";
+    value: FileSystemSpecialPath;
+};
+
+type FileSystemSandboxEntry = {
+    path: FileSystemPath;
+    access: FileSystemAccessMode;
+};
+
+type AdditionalFileSystemPermissions = {
+    /**
+     * This will be removed in favor of `entries`.
+     */
+    read: Array<AbsolutePathBuf> | null;
+    /**
+     * This will be removed in favor of `entries`.
+     */
+    write: Array<AbsolutePathBuf> | null;
+    globScanMaxDepth?: number;
+    entries?: Array<FileSystemSandboxEntry>;
+};
+
+type AdditionalNetworkPermissions = {
+    enabled: boolean | null;
+};
+
+type RequestPermissionProfile = {
+    network: AdditionalNetworkPermissions | null;
+    fileSystem: AdditionalFileSystemPermissions | null;
+};
+
+type GuardianApprovalReviewAction = {
+    "type": "command";
+    source: GuardianCommandSource;
+    command: string;
+    cwd: AbsolutePathBuf;
+} | {
+    "type": "execve";
+    source: GuardianCommandSource;
+    program: string;
+    argv: Array<string>;
+    cwd: AbsolutePathBuf;
+} | {
+    "type": "applyPatch";
+    cwd: AbsolutePathBuf;
+    files: Array<AbsolutePathBuf>;
+} | {
+    "type": "networkAccess";
+    target: string;
+    host: string;
+    protocol: NetworkApprovalProtocol;
+    port: number;
+} | {
+    "type": "mcpToolCall";
+    server: string;
+    toolName: string;
+    connectorId: string | null;
+    connectorName: string | null;
+    toolTitle: string | null;
+} | {
+    "type": "requestPermissions";
+    reason: string | null;
+    permissions: RequestPermissionProfile;
+};
+
+/**
+ * [UNSTABLE] Temporary notification payload for approval auto-review. This
+ * shape is expected to change soon.
+ */
+type ItemGuardianApprovalReviewCompletedNotification = {
+    threadId: string;
+    turnId: string;
+    /**
+     * Stable identifier for this review.
+     */
+    reviewId: string;
+    /**
+     * Identifier for the reviewed item or tool call when one exists.
+     *
+     * In most cases, one review maps to one target item. The exceptions are
+     * - execve reviews, where a single command may contain multiple execve
+     *   calls to review (only possible when using the shell_zsh_fork feature)
+     * - network policy reviews, where there is no target item
+     *
+     * A network call is triggered by a CommandExecution item, so having a
+     * target_item_id set to the CommandExecution item would be misleading
+     * because the review is about the network call, not the command execution.
+     * Therefore, target_item_id is set to None for network policy reviews.
+     */
+    targetItemId: string | null;
+    decisionSource: AutoReviewDecisionSource;
+    review: GuardianApprovalReview;
+    action: GuardianApprovalReviewAction;
+};
+
+/**
+ * [UNSTABLE] Temporary notification payload for approval auto-review. This
+ * shape is expected to change soon.
+ */
+type ItemGuardianApprovalReviewStartedNotification = {
+    threadId: string;
+    turnId: string;
+    /**
+     * Stable identifier for this review.
+     */
+    reviewId: string;
+    /**
+     * Identifier for the reviewed item or tool call when one exists.
+     *
+     * In most cases, one review maps to one target item. The exceptions are
+     * - execve reviews, where a single command may contain multiple execve
+     *   calls to review (only possible when using the shell_zsh_fork feature)
+     * - network policy reviews, where there is no target item
+     *
+     * A network call is triggered by a CommandExecution item, so having a
+     * target_item_id set to the CommandExecution item would be misleading
+     * because the review is about the network call, not the command execution.
+     * Therefore, target_item_id is set to None for network policy reviews.
+     */
+    targetItemId: string | null;
+    review: GuardianApprovalReview;
+    action: GuardianApprovalReviewAction;
+};
+
+type ItemStartedNotification = {
+    item: ThreadItem;
+    threadId: string;
+    turnId: string;
+    /**
+     * Unix timestamp (in milliseconds) when this item lifecycle started.
+     */
+    startedAtMs: number;
+};
+
+type McpServerOauthLoginCompletedNotification = {
+    name: string;
+    success: boolean;
+    error?: string;
+};
+
+type McpServerStartupState = "starting" | "ready" | "failed" | "cancelled";
+
+type McpServerStatusUpdatedNotification = {
+    name: string;
+    status: McpServerStartupState;
+    error: string | null;
+};
+
+type McpToolCallProgressNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    message: string;
+};
+
+type ModelRerouteReason = "highRiskCyberActivity";
+
+type ModelReroutedNotification = {
+    threadId: string;
+    turnId: string;
+    fromModel: string;
+    toModel: string;
+    reason: ModelRerouteReason;
+};
+
+type ModelVerification = "trustedAccessForCyber";
+
+type ModelVerificationNotification = {
+    threadId: string;
+    turnId: string;
+    verifications: Array<ModelVerification>;
+};
+
+/**
+ * EXPERIMENTAL - proposed plan streaming deltas for plan items. Clients should
+ * not assume concatenated deltas match the completed plan item content.
+ */
+type PlanDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+};
+
+/**
+ * Final process exit notification for `process/spawn`.
+ */
+type ProcessExitedNotification = {
+    /**
+     * Client-supplied, connection-scoped `processHandle` from `process/spawn`.
+     */
+    processHandle: string;
+    /**
+     * Process exit code.
+     */
+    exitCode: number;
+    /**
+     * Buffered stdout capture.
+     *
+     * Empty when stdout was streamed via `process/outputDelta`.
+     */
+    stdout: string;
+    /**
+     * Whether stdout reached `outputBytesCap`.
+     *
+     * In streaming mode, stdout is empty and cap state is also reported on the
+     * final stdout `process/outputDelta` notification.
+     */
+    stdoutCapReached: boolean;
+    /**
+     * Buffered stderr capture.
+     *
+     * Empty when stderr was streamed via `process/outputDelta`.
+     */
+    stderr: string;
+    /**
+     * Whether stderr reached `outputBytesCap`.
+     *
+     * In streaming mode, stderr is empty and cap state is also reported on the
+     * final stderr `process/outputDelta` notification.
+     */
+    stderrCapReached: boolean;
+};
+
+/**
+ * Stream label for `process/outputDelta` notifications.
+ */
+type ProcessOutputStream = "stdout" | "stderr";
+
+/**
+ * Base64-encoded output chunk emitted for a streaming `process/spawn` request.
+ */
+type ProcessOutputDeltaNotification = {
+    /**
+     * Client-supplied, connection-scoped `processHandle` from `process/spawn`.
+     */
+    processHandle: string;
+    /**
+     * Output stream this chunk belongs to.
+     */
+    stream: ProcessOutputStream;
+    /**
+     * Base64-encoded output bytes.
+     */
+    deltaBase64: string;
+    /**
+     * True on the final streamed chunk for this stream when output was
+     * truncated by `outputBytesCap`.
+     */
+    capReached: boolean;
+};
+
+type RawResponseItemCompletedNotification = {
+    threadId: string;
+    turnId: string;
+    item: ResponseItem;
+};
+
+type ReasoningSummaryPartAddedNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    summaryIndex: number;
+};
+
+type ReasoningSummaryTextDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+    summaryIndex: number;
+};
+
+type ReasoningTextDeltaNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    delta: string;
+    contentIndex: number;
+};
+
+type RemoteControlConnectionStatus = "disabled" | "connecting" | "connected" | "errored";
+
+/**
+ * Current remote-control connection status and environment id exposed to clients.
+ */
+type RemoteControlStatusChangedNotification = {
+    status: RemoteControlConnectionStatus;
+    environmentId: string | null;
+};
+
+type ServerRequestResolvedNotification = {
+    threadId: string;
+    requestId: RequestId;
+};
+
+/**
+ * Notification emitted when watched local skill files change.
+ *
+ * Treat this as an invalidation signal and re-run `skills/list` with the
+ * client's current parameters when refreshed skill metadata is needed.
+ */
+type SkillsChangedNotification = Record<string, never>;
+
+type TerminalInteractionNotification = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    processId: string;
+    stdin: string;
+};
+
+type ThreadArchivedNotification = {
+    threadId: string;
+};
+
+type ThreadClosedNotification = {
+    threadId: string;
+};
+
+type ThreadGoalClearedNotification = {
+    threadId: string;
+};
+
+type ThreadGoalStatus = "active" | "paused" | "budgetLimited" | "complete";
+
+type ThreadGoal = {
+    threadId: string;
+    objective: string;
+    status: ThreadGoalStatus;
+    tokenBudget: number | null;
+    tokensUsed: number;
+    timeUsedSeconds: number;
+    createdAt: number;
+    updatedAt: number;
+};
+
+type ThreadGoalUpdatedNotification = {
+    threadId: string;
+    turnId: string | null;
+    goal: ThreadGoal;
+};
+
+type ThreadNameUpdatedNotification = {
+    threadId: string;
+    threadName?: string;
+};
+
+/**
+ * EXPERIMENTAL - emitted when thread realtime transport closes.
+ */
+type ThreadRealtimeClosedNotification = {
+    threadId: string;
+    reason: string | null;
+};
+
+/**
+ * EXPERIMENTAL - emitted when thread realtime encounters an error.
+ */
+type ThreadRealtimeErrorNotification = {
+    threadId: string;
+    message: string;
+};
+
+/**
+ * EXPERIMENTAL - raw non-audio thread realtime item emitted by the backend.
+ */
+type ThreadRealtimeItemAddedNotification = {
+    threadId: string;
+    item: JsonValue;
+};
+
+/**
+ * EXPERIMENTAL - thread realtime audio chunk.
+ */
+type ThreadRealtimeAudioChunk = {
+    data: string;
+    sampleRate: number;
+    numChannels: number;
+    samplesPerChannel: number | null;
+    itemId: string | null;
+};
+
+/**
+ * EXPERIMENTAL - streamed output audio emitted by thread realtime.
+ */
+type ThreadRealtimeOutputAudioDeltaNotification = {
+    threadId: string;
+    audio: ThreadRealtimeAudioChunk;
+};
+
+/**
+ * EXPERIMENTAL - emitted with the remote SDP for a WebRTC realtime session.
+ */
+type ThreadRealtimeSdpNotification = {
+    threadId: string;
+    sdp: string;
+};
+
+/**
+ * EXPERIMENTAL - emitted when thread realtime startup is accepted.
+ */
+type ThreadRealtimeStartedNotification = {
+    threadId: string;
+    realtimeSessionId: string | null;
+    version: RealtimeConversationVersion;
+};
+
+/**
+ * EXPERIMENTAL - flat transcript delta emitted whenever realtime
+ * transcript text changes.
+ */
+type ThreadRealtimeTranscriptDeltaNotification = {
+    threadId: string;
+    role: string;
+    /**
+     * Live transcript delta from the realtime event.
+     */
+    delta: string;
+};
+
+/**
+ * EXPERIMENTAL - final transcript text emitted when realtime completes
+ * a transcript part.
+ */
+type ThreadRealtimeTranscriptDoneNotification = {
+    threadId: string;
+    role: string;
+    /**
+     * Final complete text for the transcript part.
+     */
+    text: string;
+};
+
+type GitInfo = {
+    sha: string | null;
+    branch: string | null;
+    originUrl: string | null;
+};
+
+type SessionSource = "cli" | "vscode" | "exec" | "appServer" | {
+    "custom": string;
+} | {
+    "subAgent": SubAgentSource;
+} | "unknown";
+
+type ThreadActiveFlag = "waitingOnApproval" | "waitingOnUserInput";
+
+type ThreadStatus = {
+    "type": "notLoaded";
+} | {
+    "type": "idle";
+} | {
+    "type": "systemError";
+} | {
+    "type": "active";
+    activeFlags: Array<ThreadActiveFlag>;
+};
+
+type TurnItemsView = "notLoaded" | "summary" | "full";
+
+type TurnStatus = "completed" | "interrupted" | "failed" | "inProgress";
+
+type Turn = {
+    id: string;
+    /**
+     * Thread items currently included in this turn payload.
+     */
+    items: Array<ThreadItem>;
+    /**
+     * Describes how much of `items` has been loaded for this turn.
+     */
+    itemsView: TurnItemsView;
+    status: TurnStatus;
+    /**
+     * Only populated when the Turn's status is failed.
+     */
+    error: TurnError | null;
+    /**
+     * Unix timestamp (in seconds) when the turn started.
+     */
+    startedAt: number | null;
+    /**
+     * Unix timestamp (in seconds) when the turn completed.
+     */
+    completedAt: number | null;
+    /**
+     * Duration between turn start and completion in milliseconds, if known.
+     */
+    durationMs: number | null;
+};
+
+type Thread = {
+    id: string;
+    /**
+     * Session id shared by threads that belong to the same session tree.
+     */
+    sessionId: string;
+    /**
+     * Source thread id when this thread was created by forking another thread.
+     */
+    forkedFromId: string | null;
+    /**
+     * Usually the first user message in the thread, if available.
+     */
+    preview: string;
+    /**
+     * Whether the thread is ephemeral and should not be materialized on disk.
+     */
+    ephemeral: boolean;
+    /**
+     * Model provider used for this thread (for example, 'openai').
+     */
+    modelProvider: string;
+    /**
+     * Unix timestamp (in seconds) when the thread was created.
+     */
+    createdAt: number;
+    /**
+     * Unix timestamp (in seconds) when the thread was last updated.
+     */
+    updatedAt: number;
+    /**
+     * Current runtime status for the thread.
+     */
+    status: ThreadStatus;
+    /**
+     * [UNSTABLE] Path to the thread on disk.
+     */
+    path: string | null;
+    /**
+     * Working directory captured for the thread.
+     */
+    cwd: AbsolutePathBuf;
+    /**
+     * Version of the CLI that created the thread.
+     */
+    cliVersion: string;
+    /**
+     * Origin of the thread (CLI, VSCode, codex exec, codex app-server, etc.).
+     */
+    source: SessionSource;
+    /**
+     * Optional analytics source classification for this thread.
+     */
+    threadSource: ThreadSource | null;
+    /**
+     * Optional random unique nickname assigned to an AgentControl-spawned sub-agent.
+     */
+    agentNickname: string | null;
+    /**
+     * Optional role (agent_role) assigned to an AgentControl-spawned sub-agent.
+     */
+    agentRole: string | null;
+    /**
+     * Optional Git metadata captured when the thread was created.
+     */
+    gitInfo: GitInfo | null;
+    /**
+     * Optional user-facing thread title.
+     */
+    name: string | null;
+    /**
+     * Only populated on `thread/resume`, `thread/rollback`, `thread/fork`, and `thread/read`
+     * (when `includeTurns` is true) responses.
+     * For all other responses and notifications returning a Thread,
+     * the turns field will be an empty list.
+     */
+    turns: Array<Turn>;
+};
+
+type ThreadStartedNotification = {
+    thread: Thread;
+};
+
+type ThreadStatusChangedNotification = {
+    threadId: string;
+    status: ThreadStatus;
+};
+
+type TokenUsageBreakdown = {
+    totalTokens: number;
+    inputTokens: number;
+    cachedInputTokens: number;
+    outputTokens: number;
+    reasoningOutputTokens: number;
+};
+
+type ThreadTokenUsage = {
+    total: TokenUsageBreakdown;
+    last: TokenUsageBreakdown;
+    modelContextWindow: number | null;
+};
+
+type ThreadTokenUsageUpdatedNotification = {
+    threadId: string;
+    turnId: string;
+    tokenUsage: ThreadTokenUsage;
+};
+
+type ThreadUnarchivedNotification = {
+    threadId: string;
+};
+
+type TurnCompletedNotification = {
+    threadId: string;
+    turn: Turn;
+};
+
+/**
+ * Notification that the turn-level unified diff has changed.
+ * Contains the latest aggregated diff across all file changes in the turn.
+ */
+type TurnDiffUpdatedNotification = {
+    threadId: string;
+    turnId: string;
+    diff: string;
+};
+
+type TurnPlanStepStatus = "pending" | "inProgress" | "completed";
+
+type TurnPlanStep = {
+    step: string;
+    status: TurnPlanStepStatus;
+};
+
+type TurnPlanUpdatedNotification = {
+    threadId: string;
+    turnId: string;
+    explanation: string | null;
+    plan: Array<TurnPlanStep>;
+};
+
+type TurnStartedNotification = {
+    threadId: string;
+    turn: Turn;
+};
+
+type WarningNotification = {
+    /**
+     * Optional thread target when the warning applies to a specific thread.
+     */
+    threadId: string | null;
+    /**
+     * Concise warning message for the user.
+     */
+    message: string;
+};
+
+type WindowsSandboxSetupCompletedNotification = {
+    mode: WindowsSandboxSetupMode;
+    success: boolean;
+    error: string | null;
+};
+
+type WindowsWorldWritableWarningNotification = {
+    samplePaths: Array<string>;
+    extraCount: number;
+    failedScan: boolean;
+};
+
+/**
+ * Notification sent from the server to the client.
+ */
+type ServerNotification = {
+    "method": "error";
+    "params": ErrorNotification;
+} | {
+    "method": "thread/started";
+    "params": ThreadStartedNotification;
+} | {
+    "method": "thread/status/changed";
+    "params": ThreadStatusChangedNotification;
+} | {
+    "method": "thread/archived";
+    "params": ThreadArchivedNotification;
+} | {
+    "method": "thread/unarchived";
+    "params": ThreadUnarchivedNotification;
+} | {
+    "method": "thread/closed";
+    "params": ThreadClosedNotification;
+} | {
+    "method": "skills/changed";
+    "params": SkillsChangedNotification;
+} | {
+    "method": "thread/name/updated";
+    "params": ThreadNameUpdatedNotification;
+} | {
+    "method": "thread/goal/updated";
+    "params": ThreadGoalUpdatedNotification;
+} | {
+    "method": "thread/goal/cleared";
+    "params": ThreadGoalClearedNotification;
+} | {
+    "method": "thread/tokenUsage/updated";
+    "params": ThreadTokenUsageUpdatedNotification;
+} | {
+    "method": "turn/started";
+    "params": TurnStartedNotification;
+} | {
+    "method": "hook/started";
+    "params": HookStartedNotification;
+} | {
+    "method": "turn/completed";
+    "params": TurnCompletedNotification;
+} | {
+    "method": "hook/completed";
+    "params": HookCompletedNotification;
+} | {
+    "method": "turn/diff/updated";
+    "params": TurnDiffUpdatedNotification;
+} | {
+    "method": "turn/plan/updated";
+    "params": TurnPlanUpdatedNotification;
+} | {
+    "method": "item/started";
+    "params": ItemStartedNotification;
+} | {
+    "method": "item/autoApprovalReview/started";
+    "params": ItemGuardianApprovalReviewStartedNotification;
+} | {
+    "method": "item/autoApprovalReview/completed";
+    "params": ItemGuardianApprovalReviewCompletedNotification;
+} | {
+    "method": "item/completed";
+    "params": ItemCompletedNotification;
+} | {
+    "method": "rawResponseItem/completed";
+    "params": RawResponseItemCompletedNotification;
+} | {
+    "method": "item/agentMessage/delta";
+    "params": AgentMessageDeltaNotification;
+} | {
+    "method": "item/plan/delta";
+    "params": PlanDeltaNotification;
+} | {
+    "method": "command/exec/outputDelta";
+    "params": CommandExecOutputDeltaNotification;
+} | {
+    "method": "process/outputDelta";
+    "params": ProcessOutputDeltaNotification;
+} | {
+    "method": "process/exited";
+    "params": ProcessExitedNotification;
+} | {
+    "method": "item/commandExecution/outputDelta";
+    "params": CommandExecutionOutputDeltaNotification;
+} | {
+    "method": "item/commandExecution/terminalInteraction";
+    "params": TerminalInteractionNotification;
+} | {
+    "method": "item/fileChange/outputDelta";
+    "params": FileChangeOutputDeltaNotification;
+} | {
+    "method": "item/fileChange/patchUpdated";
+    "params": FileChangePatchUpdatedNotification;
+} | {
+    "method": "serverRequest/resolved";
+    "params": ServerRequestResolvedNotification;
+} | {
+    "method": "item/mcpToolCall/progress";
+    "params": McpToolCallProgressNotification;
+} | {
+    "method": "mcpServer/oauthLogin/completed";
+    "params": McpServerOauthLoginCompletedNotification;
+} | {
+    "method": "mcpServer/startupStatus/updated";
+    "params": McpServerStatusUpdatedNotification;
+} | {
+    "method": "account/updated";
+    "params": AccountUpdatedNotification;
+} | {
+    "method": "account/rateLimits/updated";
+    "params": AccountRateLimitsUpdatedNotification;
+} | {
+    "method": "app/list/updated";
+    "params": AppListUpdatedNotification;
+} | {
+    "method": "remoteControl/status/changed";
+    "params": RemoteControlStatusChangedNotification;
+} | {
+    "method": "externalAgentConfig/import/completed";
+    "params": ExternalAgentConfigImportCompletedNotification;
+} | {
+    "method": "fs/changed";
+    "params": FsChangedNotification;
+} | {
+    "method": "item/reasoning/summaryTextDelta";
+    "params": ReasoningSummaryTextDeltaNotification;
+} | {
+    "method": "item/reasoning/summaryPartAdded";
+    "params": ReasoningSummaryPartAddedNotification;
+} | {
+    "method": "item/reasoning/textDelta";
+    "params": ReasoningTextDeltaNotification;
+} | {
+    "method": "thread/compacted";
+    "params": ContextCompactedNotification;
+} | {
+    "method": "model/rerouted";
+    "params": ModelReroutedNotification;
+} | {
+    "method": "model/verification";
+    "params": ModelVerificationNotification;
+} | {
+    "method": "warning";
+    "params": WarningNotification;
+} | {
+    "method": "guardianWarning";
+    "params": GuardianWarningNotification;
+} | {
+    "method": "deprecationNotice";
+    "params": DeprecationNoticeNotification;
+} | {
+    "method": "configWarning";
+    "params": ConfigWarningNotification;
+} | {
+    "method": "fuzzyFileSearch/sessionUpdated";
+    "params": FuzzyFileSearchSessionUpdatedNotification;
+} | {
+    "method": "fuzzyFileSearch/sessionCompleted";
+    "params": FuzzyFileSearchSessionCompletedNotification;
+} | {
+    "method": "thread/realtime/started";
+    "params": ThreadRealtimeStartedNotification;
+} | {
+    "method": "thread/realtime/itemAdded";
+    "params": ThreadRealtimeItemAddedNotification;
+} | {
+    "method": "thread/realtime/transcript/delta";
+    "params": ThreadRealtimeTranscriptDeltaNotification;
+} | {
+    "method": "thread/realtime/transcript/done";
+    "params": ThreadRealtimeTranscriptDoneNotification;
+} | {
+    "method": "thread/realtime/outputAudio/delta";
+    "params": ThreadRealtimeOutputAudioDeltaNotification;
+} | {
+    "method": "thread/realtime/sdp";
+    "params": ThreadRealtimeSdpNotification;
+} | {
+    "method": "thread/realtime/error";
+    "params": ThreadRealtimeErrorNotification;
+} | {
+    "method": "thread/realtime/closed";
+    "params": ThreadRealtimeClosedNotification;
+} | {
+    "method": "windows/worldWritableWarning";
+    "params": WindowsWorldWritableWarningNotification;
+} | {
+    "method": "windowsSandbox/setupCompleted";
+    "params": WindowsSandboxSetupCompletedNotification;
+} | {
+    "method": "account/login/completed";
+    "params": AccountLoginCompletedNotification;
+};
+
+type ChatgptAuthTokensRefreshReason = "unauthorized";
+
+type ChatgptAuthTokensRefreshParams = {
+    reason: ChatgptAuthTokensRefreshReason;
+    /**
+     * Workspace/account identifier that Codex was previously using.
+     *
+     * Clients that manage multiple accounts/workspaces can use this as a hint
+     * to refresh the token for the correct workspace.
+     *
+     * This may be `null` when the prior auth state did not include a workspace
+     * identifier (`chatgpt_account_id`).
+     */
+    previousAccountId?: string | null;
+};
+
+type ExecPolicyAmendment = Array<string>;
+
+type NetworkApprovalContext = {
+    host: string;
+    protocol: NetworkApprovalProtocol;
+};
+
+type NetworkPolicyRuleAction = "allow" | "deny";
+
+type NetworkPolicyAmendment = {
+    host: string;
+    action: NetworkPolicyRuleAction;
+};
+
+type CommandExecutionRequestApprovalParams = {
+    threadId: string;
+    turnId: string;
+    itemId: string; /**
+     * Unique identifier for this specific approval callback.
+     *
+     * For regular shell/unified_exec approvals, this is null.
+     *
+     * For zsh-exec-bridge subcommand approvals, multiple callbacks can belong to
+     * one parent `itemId`, so `approvalId` is a distinct opaque callback id
+     * (a UUID) used to disambiguate routing.
+     */
+    approvalId?: string | null; /**
+     * Optional explanatory reason (e.g. request for network access).
+     */
+    reason?: string | null; /**
+     * Optional context for a managed-network approval prompt.
+     */
+    networkApprovalContext?: NetworkApprovalContext | null; /**
+     * The command to be executed.
+     */
+    command?: string | null; /**
+     * The command's working directory.
+     */
+    cwd?: AbsolutePathBuf | null; /**
+     * Best-effort parsed command actions for friendly display.
+     */
+    commandActions?: Array<CommandAction> | null; /**
+     * Optional proposed execpolicy amendment to allow similar commands without prompting.
+     */
+    proposedExecpolicyAmendment?: ExecPolicyAmendment | null; /**
+     * Optional proposed network policy amendments (allow/deny host) for future requests.
+     */
+    proposedNetworkPolicyAmendments?: Array<NetworkPolicyAmendment> | null;
+};
+
+type DynamicToolCallParams = {
+    threadId: string;
+    turnId: string;
+    callId: string;
+    namespace: string | null;
+    tool: string;
+    arguments: JsonValue;
+};
+
+type FileChangeRequestApprovalParams = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    /**
+     * Optional explanatory reason (e.g. request for extra write access).
+     */
+    reason?: string | null;
+    /**
+     * [UNSTABLE] When set, the agent is asking the user to allow writes under this root
+     * for the remainder of the session (unclear if this is honored today).
+     */
+    grantRoot?: string | null;
+};
+
+type McpElicitationObjectType = "object";
+
+type McpElicitationBooleanType = "boolean";
+
+type McpElicitationBooleanSchema = {
+    type: McpElicitationBooleanType;
+    title?: string;
+    description?: string;
+    default?: boolean;
+};
+
+type McpElicitationStringType = "string";
+
+type McpElicitationLegacyTitledEnumSchema = {
+    type: McpElicitationStringType;
+    title?: string;
+    description?: string;
+    enum: Array<string>;
+    enumNames?: Array<string>;
+    default?: string;
+};
+
+type McpElicitationArrayType = "array";
+
+type McpElicitationConstOption = {
+    const: string;
+    title: string;
+};
+
+type McpElicitationTitledEnumItems = {
+    anyOf: Array<McpElicitationConstOption>;
+};
+
+type McpElicitationTitledMultiSelectEnumSchema = {
+    type: McpElicitationArrayType;
+    title?: string;
+    description?: string;
+    minItems?: bigint;
+    maxItems?: bigint;
+    items: McpElicitationTitledEnumItems;
+    default?: Array<string>;
+};
+
+type McpElicitationUntitledEnumItems = {
+    type: McpElicitationStringType;
+    enum: Array<string>;
+};
+
+type McpElicitationUntitledMultiSelectEnumSchema = {
+    type: McpElicitationArrayType;
+    title?: string;
+    description?: string;
+    minItems?: bigint;
+    maxItems?: bigint;
+    items: McpElicitationUntitledEnumItems;
+    default?: Array<string>;
+};
+
+type McpElicitationMultiSelectEnumSchema = McpElicitationUntitledMultiSelectEnumSchema | McpElicitationTitledMultiSelectEnumSchema;
+
+type McpElicitationTitledSingleSelectEnumSchema = {
+    type: McpElicitationStringType;
+    title?: string;
+    description?: string;
+    oneOf: Array<McpElicitationConstOption>;
+    default?: string;
+};
+
+type McpElicitationUntitledSingleSelectEnumSchema = {
+    type: McpElicitationStringType;
+    title?: string;
+    description?: string;
+    enum: Array<string>;
+    default?: string;
+};
+
+type McpElicitationSingleSelectEnumSchema = McpElicitationUntitledSingleSelectEnumSchema | McpElicitationTitledSingleSelectEnumSchema;
+
+type McpElicitationEnumSchema = McpElicitationSingleSelectEnumSchema | McpElicitationMultiSelectEnumSchema | McpElicitationLegacyTitledEnumSchema;
+
+type McpElicitationNumberType = "number" | "integer";
+
+type McpElicitationNumberSchema = {
+    type: McpElicitationNumberType;
+    title?: string;
+    description?: string;
+    minimum?: number;
+    maximum?: number;
+    default?: number;
+};
+
+type McpElicitationStringFormat = "email" | "uri" | "date" | "date-time";
+
+type McpElicitationStringSchema = {
+    type: McpElicitationStringType;
+    title?: string;
+    description?: string;
+    minLength?: number;
+    maxLength?: number;
+    format?: McpElicitationStringFormat;
+    default?: string;
+};
+
+type McpElicitationPrimitiveSchema = McpElicitationEnumSchema | McpElicitationStringSchema | McpElicitationNumberSchema | McpElicitationBooleanSchema;
+
+/**
+ * Typed form schema for MCP `elicitation/create` requests.
+ *
+ * This matches the `requestedSchema` shape from the MCP 2025-11-25
+ * `ElicitRequestFormParams` schema.
+ */
+type McpElicitationSchema = {
+    $schema?: string;
+    type: McpElicitationObjectType;
+    properties: {
+        [key in string]?: McpElicitationPrimitiveSchema;
+    };
+    required?: Array<string>;
+};
+
+type McpServerElicitationRequestParams = {
+    threadId: string;
+    /**
+     * Active Codex turn when this elicitation was observed, if app-server could correlate one.
+     *
+     * This is nullable because MCP models elicitation as a standalone server-to-client request
+     * identified by the MCP server request id. It may be triggered during a turn, but turn
+     * context is app-server correlation rather than part of the protocol identity of the
+     * elicitation itself.
+     */
+    turnId: string | null;
+    serverName: string;
+} & ({
+    "mode": "form";
+    _meta: JsonValue | null;
+    message: string;
+    requestedSchema: McpElicitationSchema;
+} | {
+    "mode": "url";
+    _meta: JsonValue | null;
+    message: string;
+    url: string;
+    elicitationId: string;
+});
+
+type PermissionsRequestApprovalParams = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    cwd: AbsolutePathBuf;
+    reason: string | null;
+    permissions: RequestPermissionProfile;
+};
+
+/**
+ * EXPERIMENTAL. Params sent with a request_user_input event.
+ */
+type ToolRequestUserInputParams = {
+    threadId: string;
+    turnId: string;
+    itemId: string;
+    questions: Array<ToolRequestUserInputQuestion>;
+};
+
+/**
+ * Request initiated from the server and sent to the client.
+ */
+type ServerRequest = {
+    "method": "item/commandExecution/requestApproval";
+    id: RequestId;
+    params: CommandExecutionRequestApprovalParams;
+} | {
+    "method": "item/fileChange/requestApproval";
+    id: RequestId;
+    params: FileChangeRequestApprovalParams;
+} | {
+    "method": "item/tool/requestUserInput";
+    id: RequestId;
+    params: ToolRequestUserInputParams;
+} | {
+    "method": "mcpServer/elicitation/request";
+    id: RequestId;
+    params: McpServerElicitationRequestParams;
+} | {
+    "method": "item/permissions/requestApproval";
+    id: RequestId;
+    params: PermissionsRequestApprovalParams;
+} | {
+    "method": "item/tool/call";
+    id: RequestId;
+    params: DynamicToolCallParams;
+} | {
+    "method": "account/chatgptAuthTokens/refresh";
+    id: RequestId;
+    params: ChatgptAuthTokensRefreshParams;
+} | {
+    "method": "applyPatchApproval";
+    id: RequestId;
+    params: ApplyPatchApprovalParams;
+} | {
+    "method": "execCommandApproval";
+    id: RequestId;
+    params: ExecCommandApprovalParams;
+};
+
+export type { CommandExecutionStatus as $, AdditionalNetworkPermissions as A, ByteRange as B, ChatgptAuthTokensRefreshParams as C, DynamicToolCallParams as D, ExecPolicyAmendment as E, FuzzyFileSearchResult as F, ChatgptAuthTokensRefreshReason as G, HookEventName as H, CodexErrorInfo as I, JsonValue as J, CollabAgentState as K, CollabAgentStatus as L, CollabAgentTool as M, NetworkPolicyAmendment as N, CollabAgentToolCallStatus as O, PlanType as P, CommandAction as Q, RateLimitSnapshot as R, ServerNotification as S, Thread as T, UserInput as U, CommandExecOutputDeltaNotification as V, WindowsSandboxSetupMode as W, CommandExecOutputStream as X, CommandExecutionOutputDeltaNotification as Y, CommandExecutionRequestApprovalParams as Z, CommandExecutionSource as _, ServerRequest as a, McpToolCallProgressNotification as a$, ConfigWarningNotification as a0, ContextCompactedNotification as a1, CreditsSnapshot as a2, DeprecationNoticeNotification as a3, DynamicToolCallStatus as a4, ErrorNotification as a5, ExternalAgentConfigImportCompletedNotification as a6, FileChangeOutputDeltaNotification as a7, FileChangePatchUpdatedNotification as a8, FileChangeRequestApprovalParams as a9, McpElicitationArrayType as aA, McpElicitationBooleanSchema as aB, McpElicitationBooleanType as aC, McpElicitationConstOption as aD, McpElicitationEnumSchema as aE, McpElicitationLegacyTitledEnumSchema as aF, McpElicitationMultiSelectEnumSchema as aG, McpElicitationNumberSchema as aH, McpElicitationNumberType as aI, McpElicitationObjectType as aJ, McpElicitationPrimitiveSchema as aK, McpElicitationSchema as aL, McpElicitationSingleSelectEnumSchema as aM, McpElicitationStringFormat as aN, McpElicitationStringSchema as aO, McpElicitationStringType as aP, McpElicitationTitledEnumItems as aQ, McpElicitationTitledMultiSelectEnumSchema as aR, McpElicitationTitledSingleSelectEnumSchema as aS, McpElicitationUntitledEnumItems as aT, McpElicitationUntitledMultiSelectEnumSchema as aU, McpElicitationUntitledSingleSelectEnumSchema as aV, McpServerElicitationRequestParams as aW, McpServerOauthLoginCompletedNotification as aX, McpServerStartupState as aY, McpServerStatusUpdatedNotification as aZ, McpToolCallError as a_, FileSystemAccessMode as aa, FileSystemPath as ab, FileSystemSpecialPath as ac, FileUpdateChange as ad, FsChangedNotification as ae, GitInfo as af, GuardianApprovalReview as ag, GuardianApprovalReviewAction as ah, GuardianApprovalReviewStatus as ai, GuardianCommandSource as aj, GuardianRiskLevel as ak, GuardianUserAuthorization as al, GuardianWarningNotification as am, HookCompletedNotification as an, HookExecutionMode as ao, HookOutputEntry as ap, HookOutputEntryKind as aq, HookPromptFragment as ar, HookRunStatus as as, HookRunSummary as at, HookScope as au, HookStartedNotification as av, ItemCompletedNotification as aw, ItemGuardianApprovalReviewCompletedNotification as ax, ItemGuardianApprovalReviewStartedNotification as ay, ItemStartedNotification as az, ThreadItem as b, TurnPlanStep as b$, McpToolCallResult as b0, McpToolCallStatus as b1, MemoryCitation as b2, MemoryCitationEntry as b3, ModelRerouteReason as b4, ModelReroutedNotification as b5, ModelVerification as b6, ModelVerificationNotification as b7, NetworkApprovalContext as b8, NetworkApprovalProtocol as b9, ThreadArchivedNotification as bA, ThreadClosedNotification as bB, ThreadGoal as bC, ThreadGoalClearedNotification as bD, ThreadGoalStatus as bE, ThreadGoalUpdatedNotification as bF, ThreadNameUpdatedNotification as bG, ThreadRealtimeAudioChunk as bH, ThreadRealtimeClosedNotification as bI, ThreadRealtimeErrorNotification as bJ, ThreadRealtimeItemAddedNotification as bK, ThreadRealtimeOutputAudioDeltaNotification as bL, ThreadRealtimeSdpNotification as bM, ThreadRealtimeStartedNotification as bN, ThreadRealtimeTranscriptDeltaNotification as bO, ThreadRealtimeTranscriptDoneNotification as bP, ThreadStartedNotification as bQ, ThreadStatus as bR, ThreadStatusChangedNotification as bS, ThreadTokenUsageUpdatedNotification as bT, ThreadUnarchivedNotification as bU, TokenUsageBreakdown as bV, ToolRequestUserInputParams as bW, TurnCompletedNotification as bX, TurnDiffUpdatedNotification as bY, TurnError as bZ, TurnItemsView as b_, NetworkPolicyRuleAction as ba, NonSteerableTurnKind as bb, PatchApplyStatus as bc, PatchChangeKind as bd, PermissionsRequestApprovalParams as be, PlanDeltaNotification as bf, ProcessExitedNotification as bg, ProcessOutputDeltaNotification as bh, ProcessOutputStream as bi, RateLimitReachedType as bj, RateLimitWindow as bk, RawResponseItemCompletedNotification as bl, ReasoningSummaryPartAddedNotification as bm, ReasoningSummaryTextDeltaNotification as bn, ReasoningTextDeltaNotification as bo, RemoteControlConnectionStatus as bp, RemoteControlStatusChangedNotification as bq, RequestPermissionProfile as br, ServerRequestResolvedNotification as bs, SessionSource as bt, SkillsChangedNotification as bu, TerminalInteractionNotification as bv, TextElement as bw, TextPosition as bx, TextRange as by, ThreadActiveFlag as bz, Turn as c, TurnPlanStepStatus as c0, TurnPlanUpdatedNotification as c1, TurnStartedNotification as c2, TurnStatus as c3, WarningNotification as c4, WebSearchAction as c5, WindowsSandboxSetupCompletedNotification as c6, WindowsWorldWritableWarningNotification as c7, AgentPath as c8, ApplyPatchApprovalParams as c9, ContentItem as ca, ExecCommandApprovalParams as cb, FileChange as cc, FunctionCallOutputBody as cd, FunctionCallOutputContentItem as ce, FuzzyFileSearchMatchType as cf, FuzzyFileSearchSessionCompletedNotification as cg, FuzzyFileSearchSessionUpdatedNotification as ch, ImageDetail as ci, LocalShellAction as cj, LocalShellExecAction as ck, LocalShellStatus as cl, MessagePhase as cm, ParsedCommand as cn, RealtimeConversationVersion as co, ReasoningItemContent as cp, ReasoningItemReasoningSummary as cq, ResponseItem as cr, WebSearchAction$1 as cs, ThreadTokenUsage as d, DynamicToolCallOutputContentItem as e, ReasoningEffort as f, AdditionalFileSystemPermissions as g, AbsolutePathBuf as h, ThreadId as i, ThreadSource as j, SubAgentSource as k, AuthMode as l, AppInfo as m, HookHandlerType as n, HookSource as o, FileSystemSandboxEntry as p, AccountLoginCompletedNotification as q, AccountRateLimitsUpdatedNotification as r, AccountUpdatedNotification as s, AgentMessageDeltaNotification as t, AppBranding as u, AppListUpdatedNotification as v, AppMetadata as w, AppReview as x, AppScreenshot as y, AutoReviewDecisionSource as z };