@maudecode/talaria-web-contracts 1.20.0 → 1.22.0

package/dist/views.js

@@ -1,3 +1,6 @@
+import { DelegationSettingsSchema } from './delegation.js';
+import { PlanGaugeSchema, PlanUsageSchema, ModelAllowanceSchema, ModelSectionsSchema } from './plan-usage.js';
+import { McpCostPolicySchema } from './mcp-cost-policy.js';
 /**
  * Pinned response shapes shared by every consumer (formerly the frontend's
  * hand-written `src/contracts/*` schemas). Known fields are typed; every
@@ -5,11 +8,12 @@
  * that must survive a round trip (documented passthrough).
  */
 import { z } from 'zod';
+import { OutboundDraftRefSchema } from './outbound-drafts.js';
 import { RunStatusSchema } from './run-status.js';
-import { AgentRefreshConfirmationSchema } from './sidecar/runtime.js';
+import { AgentRefreshConfirmationSchema, AgentUpdateOperationSchema } from './sidecar/runtime.js';
 import { SpeedTierSchema } from './speed.js';
-import { ExecutionModeSchema, OwnerAttachmentSchema } from './gateway-session.js';
-import { CanonicalBotChatSchema, GatewayModeSchema, PluginOAuthClientSchema, PluginSettingFieldSchema, SkillCatalogIdentitySchema } from './sidecar/namespaces.js';
+import { ExecutionModeSchema, OwnerAttachmentSchema, MessageReactionViewSchema } from './gateway-session.js';
+import { NousAccountSchema, KanbanInspectionNodeSchema, KanbanInspectionSnapshotSchema, CanonicalBotChatSchema, GatewayModeSchema, PluginOAuthClientSchema, PluginSettingFieldSchema, SkillCatalogIdentitySchema } from './sidecar/namespaces.js';
 export { SpeedTierSchema } from './speed.js';
 const Json = z.unknown();
 export const NullableString = z.string().nullable();
@@ -19,6 +23,7 @@ export const UnixSeconds = z.number();
 // ── sessions ─────────────────────────────────────────────────────────────
 export const SessionIdSchema = z.string().regex(/^[A-Za-z0-9_.:-]{1,128}$/, 'invalid session id');
 export const AttachmentSchema = z.looseObject({
+    download_url: z.string().startsWith('/api/groups/file?').optional(),
     filename: z.string().optional(), name: z.string().optional(), path: z.string().optional(), size: z.number().optional(), mime: z.string().optional(), is_image: z.boolean().optional(), rollback_token: z.string().optional(),
 });
 /** The server's display class for a tool call: clients map it to an icon and localized verb, and never classify names themselves. */
@@ -46,14 +51,17 @@ export const ToolEditDiffSchema = z.object({ added: z.number().int(), removed: z
 /** The latest server-normalized MCP update; never stored with the transcript. */
 export const ToolProgressSchema = z.object({ percent: z.number().min(0).max(100).nullable(), message: z.string().nullable() });
 /** Shared tool display fields. Progress is ephemeral, absent on older servers and null after completion. */
-export const ToolDisplayFields = { progress: ToolProgressSchema.nullable().optional(), kind: ToolKindSchema.optional(), target: z.string().optional(), edit_diff: ToolEditDiffSchema.optional() };
+export const ToolDisplayFields = {
+    progress: ToolProgressSchema.nullable().optional(), kind: ToolKindSchema.optional(), target: z.string().optional(), edit_diff: ToolEditDiffSchema.optional(),
+    focus_path: NullableString.optional().describe('TAL-1458: a read or write call\'s file as a workspace-relative path, the file a companion page shows; absent for any other call or an absolute, home or out-of-workspace path.'),
+};
 /**
  * TAL-315: a tool result's display sections, decided by the server's one rule for live, replayed and persisted results
  * alike. Clients show `stdout`, `stderr`, a labelled `error` and a labelled `exit_code` (sent only when worth showing), or
  * `text`, in that order, and never parse result text. Each string is capped server-side; a client without the field
  * shows `preview`.
  */
-export const ToolResultViewSchema = z.object({ text: z.string().optional(), stdout: z.string().optional(), stderr: z.string().optional(), error: z.string().optional(), exit_code: z.number().int().optional() });
+export const ToolResultViewSchema = z.object({ outbound_draft: OutboundDraftRefSchema.optional(), text: z.string().optional(), stdout: z.string().optional(), stderr: z.string().optional(), error: z.string().optional(), exit_code: z.number().int().optional() });
 /**
  * Stored transcripts carry the OpenAI shape (`function.name` / `function.arguments` JSON string); live events carry `name` / `args`.
  * On an assistant row the server resolves every call (TAL-313, `session-sse-contract-v1.md`): Anthropic `tool_use` parts and
@@ -131,6 +139,7 @@ export const BackgroundLineSchema = z.object({ kind: z.enum(['agent', 'command',
 });
 export const MessageSchema = z.looseObject({
     role: z.string(), content: MessageContentSchema.optional(), id: MessageIdSchema.optional(), message_id: MessageIdSchema.optional(), timestamp: z.number().nullable().optional(),
+    reaction_view: MessageReactionViewSchema.optional(),
     attachments: z.array(AttachmentSchema).optional(), tool_calls: z.array(ToolCallSchema).optional(),
     /**
      * TAL-302: an assistant row's whole reasoning as one string (its reasoning fields, typed thinking parts and inline
@@ -189,8 +198,10 @@ export const MessageSchema = z.looseObject({
         review_state: BackgroundReviewStateSchema.optional(),
     }).optional(),
     /**
-     * TAL-305: a marker the Agent wrote around context compaction, not a message anyone typed. Clients render a collapsed
-     * card with a localized title per kind and the body on expansion: `_marker_body` when sent, else `content`.
+     * TAL-305: a marker around context compaction, not a message anyone typed. Clients render a collapsed line with a
+     * localized title per kind and the body on expansion: `_marker_body` when sent, else `content`. TAL-1566: each compaction
+     * Web runs is one row in its place, with role `marker` and a stable `message_id`, display-only and excluded from model
+     * history; it is never a turn's prompt or reply.
      */
     _marker_kind: z.enum(['context_compaction', 'preserved_task_list']).optional(),
     /** TAL-305: a preserved task list's card body, without its marker line. */
@@ -277,19 +288,32 @@ const IsMessagingSessionSchema = z.boolean().describe('`source_kind` is `messagi
  * the folder name (TAL-303). Null without a workspace; absent from an older server, where clients show no label.
  */
 const WorkspaceNameSchema = NullableString.optional();
-/**
- * TAL-560: the "Context compaction · Reference only" card, on payloads that carry `messages`. Clients render `text` after
- * the row at full-transcript index `after_message_index` (row `after_message_index - _messages_offset` of `messages`), or
- * above the loaded rows when it is null or before them. Null: no card.
- */
-export const CompressionReferenceSchema = z.object({
-    text: z.string(),
-    after_message_index: z.number().int().nonnegative().nullable().describe('The full-transcript index of the row the card follows; null puts it above the transcript.'),
-});
 /** TAL-454: the chat a `/branch` copied, with its redacted title. */
 export const BranchedFromSchema = z.object({ session_id: SessionIdSchema, title: z.string() });
+export const MAX_SOURCE_REFERENCES = 5;
+export const SourceReferenceSchema = z.object({
+    session_id: z.string().regex(/^[A-Za-z0-9_-]{1,128}$/).describe('Retained logical conversation identity.'),
+    tip_session_id: z.string().regex(/^[A-Za-z0-9_-]{1,128}$/),
+    profile: z.string().min(1).max(128),
+});
+export const AcceptedSourceReferenceSchema = SourceReferenceSchema.extend({ title: z.string() });
 /** Full session record from `GET /api/session` and mutations returning `session`. */
+export const SessionActivityPhaseSchema = z.enum(['starting', 'running', 'waiting_for_approval', 'waiting_for_input', 'completed', 'failed', 'cancelled', 'stale']);
+/** Raw rows remain for older clients; current clients render only the server-normalized display items. */
+export const TodoItemSchema = z.looseObject({ id: z.union([z.string(), z.number()]).optional(), text: z.string().optional(), content: z.string().optional(), title: z.string().optional(), status: z.string().optional(), done: z.boolean().optional(), completed: z.boolean().optional() });
+export const TodoStateSchema = z.looseObject({
+    display_items: z.array(z.object({ id: z.union([z.string(), z.number()]).optional(), text: z.string(), state: z.enum(['pending', 'in_progress', 'completed', 'cancelled']) })).optional(),
+    total_count: z.number().int().nonnegative().optional(), completed_count: z.number().int().nonnegative().optional(),
+    pending_count: z.number().int().nonnegative().optional(), in_progress_count: z.number().int().nonnegative().optional(), cancelled_count: z.number().int().nonnegative().optional(),
+    session_id: z.string().optional(), todos: z.array(TodoItemSchema).optional(), summary: z.record(z.string(), z.unknown()).optional(),
+    version: z.number().optional(), ts: z.number().optional(), source: z.string().optional(), description: z.string().optional(),
+});
 export const SessionSchema = z.looseObject({
+    plan_gauge: PlanGaugeSchema.nullable().optional(),
+    show_reasoning: z.boolean().optional().describe('Server-resolved display preference. Hidden reasoning is omitted from live events, history and activity scenes; older servers omit this field.'),
+    activity_phase: SessionActivityPhaseSchema.optional(),
+    todo_state: TodoStateSchema.optional(),
+    source_references: z.array(AcceptedSourceReferenceSchema).optional(),
     context_detail_key: z.string().nullable().optional().describe('Opaque identity for open-only context details; changes with owner epoch, model and context.'),
     composer_state_key: z.string().optional().describe('Opaque profile-home and owner identity for device-local composer state; never an API session id.'),
     session_id: SessionIdSchema, title: z.string(), workspace: z.string().optional(), created_workspace: z.string().nullable().optional(), model: NullableString.optional(), model_provider: NullableString.optional(),
@@ -324,10 +348,14 @@ export const SessionSchema = z.looseObject({
     /** The agent's display name: a named profile's own name, else the `bot_name` setting (TAL-458). */
     assistant_name: z.string().optional(),
     workspace_name: WorkspaceNameSchema,
-    compression_reference: CompressionReferenceSchema.nullable().optional(),
+    focus_path: NullableString.optional().describe('TAL-1458: the last non-null `focus_path` of the session\'s persisted tool calls, so a reopened chat shows its file before any stream event; null when none.'),
     branched_from: BranchedFromSchema.nullable().optional().describe('TAL-454: the chat this one was branched from while it still loads (archived included); null for a compression continuation, a deleted or missing parent, and every other chat.'),
 });
 export const SessionEnvelopeSchema = z.looseObject({ session: SessionSchema });
+/** TAL-1534: the sidebar group a listed row belongs to; `pinned` rows come first in the canonical order. */
+export const SidebarGroupKindSchema = z.enum(['pinned', 'recent']);
+/** One group present in a session list, with its English caption; clients localize the known kinds. */
+export const SidebarGroupSchema = z.object({ kind: SidebarGroupKindSchema, title: z.string() });
 /** Sidebar row from `GET /api/sessions`. */
 export const SessionRowSchema = z.looseObject({
     session_id: SessionIdSchema, title: z.string(), workspace: z.string().optional(), model: NullableString.optional(), created_at: UnixSeconds.optional(), updated_at: UnixSeconds.optional(), last_message_at: NullableNumber.optional(),
@@ -336,6 +364,7 @@ export const SessionRowSchema = z.looseObject({
     source_tag: NullableString.optional(), source_label: NullableString.optional(), session_source: NullableString.optional(), raw_source: NullableString.optional(), parent_session_id: NullableString.optional(),
     active_stream_id: ActiveStreamIdSchema, share_token: NullableString.optional(), share_url: NullableString.optional(), worktree_branch: NullableString.optional(), match_type: z.enum(['title', 'metadata', 'content']).optional(), match_preview: NullableString.optional(),
     workspace_name: WorkspaceNameSchema,
+    sidebar_group: SidebarGroupKindSchema.nullable().optional().describe('TAL-1534: the sidebar group `GET /api/sessions` files the row under; null for an archived row. Other routes omit it.'),
     ...ContextUsageFields,
 });
 /**
@@ -351,14 +380,16 @@ export const SessionsListSchema = z.looseObject({
     // TAL-482: sidebar counts for the "Scheduled sessions" / "Webhook sessions" groups; `_truncated` means more exist than are listed.
     scheduled_session_count: z.number().int().nonnegative(), scheduled_sessions_truncated: z.boolean(),
     webhook_session_count: z.number().int().nonnegative(), webhook_sessions_truncated: z.boolean(),
+    sidebar_groups: z.array(SidebarGroupSchema).describe('TAL-1534: the groups the unarchived `sessions` rows fill, in display order; a client captions only these.'),
     agent_storage: AgentStorageSchema.describe('Agent session storage health; a degraded state explains an empty or missing Agent session list.'),
     archived_limit: z.number().int().nullable().optional(), archived_offset: z.number().int().optional(),
 });
 export const SessionStatusSchema = z.looseObject({
+    activity_phase: SessionActivityPhaseSchema.optional(),
     session_id: SessionIdSchema, title: z.string().optional(), active_stream_id: ActiveStreamIdSchema, active_turn_origin: ActiveTurnOriginSchema, agent_running: IsStreamingSchema, is_streaming: IsStreamingSchema, read_only: ReadOnlySchema, read_only_reason: ReadOnlyReasonSchema, owner_attachment: OwnerAttachmentSchema.optional(), message_count: z.number().optional(), model: NullableString.optional(),
     profile: NullableString.optional(), workspace: z.string().optional(), input_tokens: z.number().optional(), output_tokens: z.number().optional(), total_tokens: z.number().optional(), estimated_cost: NullableNumber.optional(), updated_at: UnixSeconds.optional(),
 });
-export const SessionUsageSchema = z.looseObject({ input_tokens: z.number().optional(), output_tokens: z.number().optional(), total_tokens: z.number().optional(), estimated_cost: NullableNumber.optional(), model: NullableString.optional() });
+export const SessionUsageSchema = z.looseObject({ plan_gauge: PlanGaugeSchema.nullable().optional(), input_tokens: z.number().optional(), output_tokens: z.number().optional(), total_tokens: z.number().optional(), estimated_cost: NullableNumber.optional(), model: NullableString.optional() });
 export const ProjectSchema = z.looseObject({ project_id: z.string(), name: z.string(), color: z.string().nullable().optional(), profile: NullableString.optional(), created_at: z.number().optional() });
 export const ProjectsSchema = z.looseObject({ projects: z.array(ProjectSchema), active_profile: z.string(), all_profiles: z.boolean(), other_profile_count: z.number().int() });
 export const SessionDeleteResultSchema = z.looseObject({ ok: z.literal(true), state_db_cleanup_failed: z.boolean().optional() });
@@ -385,7 +416,7 @@ export const ChatStartResponseSchema = z.looseObject({
  * stream's session: this run while it unwinds after a Stop, or a successor such as a goal continuation. A session delete
  * answers 409 while it is set, so a client draining a session before deleting it waits until it is null.
  */
-export const StreamStatusSchema = z.looseObject({ active: z.boolean(), stream_id: z.string(), replay_available: z.boolean().optional(), journal: Json.optional(), blocking_stream_id: z.string().nullable() });
+export const StreamStatusSchema = z.looseObject({ activity_phase: SessionActivityPhaseSchema.optional(), active: z.boolean(), stream_id: z.string(), replay_available: z.boolean().optional(), journal: Json.optional(), blocking_stream_id: z.string().nullable() });
 /**
  * TAL-424: a pending steer is no longer pending without the Agent taking it: Edit and Cancel by the user, `stopped` by a
  * Stop (`text` goes back to the composer), or `followup` when the server sends it as the next turn. `steer_id` is null
@@ -396,7 +427,7 @@ export const SteerWithdrawnSchema = z.object({ steer_id: z.string().nullable(),
  * `withdrawn_steers` (TAL-426): the steers this Stop withdrew, the same `steer_withdrawn` (stopped) the stream carries, so
  * a client that stops reading the stream once the Stop answers still gives its own text back.
  */
-export const CancelResponseSchema = z.looseObject({ ok: z.boolean(), cancelled: z.boolean(), stream_id: z.string().optional(), withdrawn_steers: z.array(SteerWithdrawnSchema).optional(), error: z.string().optional() });
+export const CancelResponseSchema = z.looseObject({ activity_phase: SessionActivityPhaseSchema.optional(), ok: z.boolean(), cancelled: z.boolean(), stream_id: z.string().optional(), withdrawn_steers: z.array(SteerWithdrawnSchema).optional(), error: z.string().optional() });
 export const SteerWithdrawRequestSchema = z.object({ session_id: SessionIdSchema, steer_id: z.string().min(1), reason: z.enum(['edit', 'cancel']) });
 /** `withdrawn: false` when the steer is unknown, already taken by the Agent (it then settles as consumed), or being sent. */
 export const SteerWithdrawResponseSchema = z.object({ withdrawn: z.boolean(), text: z.string().optional() });
@@ -493,7 +524,7 @@ export const BackgroundTaskSchema = z.object({
  * result. `agents_working` (TAL-373): a delegation is running or needs attention, whatever `kind` the list is narrowed to;
  * the chat's side panel opens on Agents for it. Absent from servers before TAL-373.
  */
-export const BackgroundTasksResponseSchema = z.object({ session_id: z.string(), tasks: z.array(BackgroundTaskSchema), agent_available: z.boolean(), agents_working: z.boolean().optional() });
+export const BackgroundTasksResponseSchema = z.object({ activity_phase: SessionActivityPhaseSchema.optional(), session_id: z.string(), tasks: z.array(BackgroundTaskSchema), agent_available: z.boolean(), agents_working: z.boolean().optional() });
 export const BackgroundTaskResultSchema = z.object({ task_id: z.string(), text: z.string() });
 export const BackgroundDismissRequestSchema = z.object({ session_id: SessionIdSchema, task_id: z.string().min(1) });
 export const BackgroundStopResponseSchema = z.object({ outcome: z.enum(['stopped', 'not_running', 'not_found']) });
@@ -502,11 +533,16 @@ export const ShareCreateResponseSchema = z.looseObject({ ok: z.literal(true), sh
 export const ShareMessageSchema = z.looseObject({ role: z.string(), content: z.union([z.string(), z.null(), z.array(Json)]).optional() });
 export const ShareSchema = z.looseObject({ title: z.string(), messages: z.array(ShareMessageSchema), message_count: z.number().int(), created_at: z.number().optional(), updated_at: z.number().optional(), model: NullableString.optional() });
 export const ShareReadSchema = z.looseObject({ share: ShareSchema });
+export const SourceReferenceSearchSchema = z.object({
+    sessions: z.array(SessionRowSchema.extend({ source_reference: SourceReferenceSchema })),
+    active_profile: z.string(), max_sources: z.number().int(),
+});
 export const SessionNewRequestSchema = z.looseObject({
     title: z.string().optional(), workspace: z.string().optional(), workspace_inherited_from_prev_session: z.boolean().optional(), model: z.string().nullable().optional(), model_provider: z.string().nullable().optional(),
     profile: z.string().nullable().optional(), prev_session_id: z.string().optional(), project_id: z.string().nullable().optional(), worktree: Json.optional(), enabled_toolsets: z.array(z.string()).nullable().optional(), parent_session_id: z.string().optional(),
     execution_mode: ExecutionModeSchema.optional().describe('TAL-1040: `ignore_config` and `safe` start the session through the Agent owner; omitted means normal.'),
-    request_id: z.string().regex(/^[A-Za-z0-9_-]{1,64}$/).optional().describe('TAL-1040: stable creation identity for a diagnostic chat. Reuse it only to retry the same creation.'),
+    request_id: z.string().regex(/^[A-Za-z0-9_-]{1,64}$/).optional().describe('TAL-1040: stable creation identity for a diagnostic or referenced chat. Reuse it only to retry the same creation.'),
+    source_references: z.array(SourceReferenceSchema).max(MAX_SOURCE_REFERENCES).optional().describe('Same-profile search pointers. Nonempty selections require request_id; unavailable or changed identities refuse creation.'),
 });
 /**
  * `streaming` (TAL-802): live dictation over `TRANSCRIBE_STREAM_PATH` would open for this profile (`stt.streaming` on, a live provider wire).
@@ -524,13 +560,15 @@ export const QuotaThresholdsSchema = z.object({
     pace_warning_burn_rate_percent: z.number().int().min(100).max(300), pace_critical_burn_rate_percent: z.number().int().min(100).max(400), pace_minimum_elapsed_hours: z.number().int().min(0).max(72),
 });
 export const LoginResponseSchema = z.looseObject({ ok: z.literal(true), message: z.string().optional() });
+/** TAL-1569: Talaria Web update channels, in display order. Nightly is a daily snapshot of the Experimental artifact. */
+export const WebUpdateChannelSchema = z.enum(['stable', 'nightly', 'experimental']);
 export const SettingsSchema = z.looseObject({
     bot_name: z.string().optional(), default_model: z.string().optional(), default_workspace: z.string().optional(), language: z.string().optional(), send_key: z.string().optional(), font_size: z.string().optional(),
     full_width_chat: z.boolean().optional(), chat_width: z.enum(['comfortable', 'wide', 'full']).optional(), auto_scroll_follow: z.boolean().optional(), render_user_markdown: z.boolean().optional(), chat_activity_display_mode: z.string().optional(), default_message_mode: z.string().optional(),
     fade_text_effect: z.boolean().optional(), hidden_tabs: z.array(z.string()).optional(), composer_control_order: z.array(z.string()).optional(), show_cli_sessions: z.boolean().optional(), show_claude_code_sessions: z.boolean().optional(),
     show_cron_sessions: z.boolean().optional(), show_webhook_sessions: z.boolean().optional(), show_kanban_sessions: z.boolean().optional(), check_for_updates: z.boolean().optional(), summarize_updates_automatically: z.boolean().optional(), ignore_agent_updates: z.boolean().optional(),
     auth_enabled: z.boolean().optional(), password_auth_enabled: z.boolean().optional(), password_env_var: z.boolean().optional(), passkeys_enabled: z.boolean().optional(), passwordless_enabled: z.boolean().optional(),
-    auth_disabled_acknowledged: z.boolean().optional(), webui_version: z.string().optional(), agent_version: z.string().optional(), update_channel: z.string().optional(), agent_update_channel: z.enum(['stable', 'experimental']).optional(), update_channel_version: NullableString.optional(),
+    auth_disabled_acknowledged: z.boolean().optional(), webui_version: z.string().optional(), agent_version: z.string().optional(), update_channel: z.string().optional(), update_channels: z.array(WebUpdateChannelSchema).optional().describe('TAL-1569: the Web update channels this server offers, in display order.'), agent_update_channel: z.enum(['stable', 'experimental']).optional(), update_channel_version: NullableString.optional(),
     max_tokens: NullableNumber.optional(), max_tokens_effective: NullableNumber.optional(), max_tokens_fallback: NullableNumber.optional(), tts_engine: z.string().optional(), tts_voice: z.string().optional(),
     dictation_append: z.boolean().optional(), persisted_speech_keys: z.array(z.string()).optional(),
     /** TAL-279: ask before opening external chat links; `trusted_link_hosts` are exact, server-normalized hostnames that skip the ask. */
@@ -560,6 +598,7 @@ export const QuotaLevelSchema = z.enum(['healthy', 'warning', 'critical', 'stale
  * TAL-807: `limit` is present while the provider's credential pool cannot serve this model until `resets_at` (ISO-8601 UTC).
  */
 export const ModelEntrySchema = z.looseObject({
+    allowance: ModelAllowanceSchema.optional(),
     id: z.string(), label: z.string().optional(), provider: z.string().optional(), provider_id: z.string().optional(), bare_id: z.string().optional(), supports_fast_tier: z.boolean().optional(), supported_speed_tiers: z.array(SpeedTierSchema).optional(),
     limit: z.object({ scope: z.literal('model'), resets_at: z.string() }).optional(),
 });
@@ -575,6 +614,7 @@ export const ModelGroupLimitSchema = z.discriminatedUnion('scope', [
  */
 export const CatalogAvailabilitySchema = z.object({ status: z.enum(['available', 'stale', 'unavailable']), authoritative: z.boolean(), unavailable_reason: NullableString, generation: z.string().min(1).describe('Opaque source generation; cached data from another generation must never be merged.') });
 export const ModelGroupSchema = z.looseObject({
+    plan_usage: PlanUsageSchema.nullable().optional(), plan_stale: z.boolean().optional(), sections: ModelSectionsSchema.optional(),
     availability: CatalogAvailabilitySchema.optional(),
     provider: z.string(), provider_id: z.string().optional(), models: z.array(ModelEntrySchema), extra_models: z.array(ModelEntrySchema).optional(),
     limit: ModelGroupLimitSchema.optional(), quota_level: QuotaLevelSchema.optional(),
@@ -592,6 +632,7 @@ export const KeySourceKindSchema = z.enum(['env', 'oauth', 'config', 'pool', 'pl
 export const ProviderSchema = z.looseObject({
     id: z.string(), display_name: z.string().optional(), has_key: z.boolean().optional(), configured: z.boolean().optional(), configurable: z.boolean().optional(), is_oauth: z.boolean().optional(), is_plugin_provider: z.boolean().optional(), is_self_hosted: z.boolean().optional(),
     is_custom: z.boolean().optional(), key_source: z.string().optional(), base_url: NullableString.optional(), auth_error: NullableString.optional(), env_var: NullableString.optional(), models: z.array(ModelEntrySchema).optional(), models_total: z.number().optional(),
+    nous_account: NousAccountSchema.nullable().optional(), nous_account_error: NullableString.optional(),
     is_active: z.boolean().optional(), key_source_kind: KeySourceKindSchema.nullable().optional(), removable: z.boolean().optional(),
 });
 export const ProvidersSchema = z.looseObject({ availability: CatalogAvailabilitySchema.optional(), providers: z.array(ProviderSchema), active_provider: NullableString.optional() });
@@ -619,6 +660,7 @@ export const QuotaWindowSchema = z.looseObject({
 });
 const QuotaWindowIndex = z.number().int().nullable().optional();
 export const QuotaSourceSchema = z.looseObject({
+    plan_usage: PlanUsageSchema.nullable().optional(), plan_stale: z.boolean().optional(),
     computed_at: z.string().optional().describe('Original reference time of this source, retained with stale windows.'),
     source_id: z.string(), provider_id: z.string().optional(), provider_label: z.string().optional(), account_label: z.string().optional(), status: z.string().optional(), supported: z.boolean().optional(), message: z.string().nullable().optional(),
     is_active_provider: z.boolean().optional(), quota: Json.optional(), windows: z.array(QuotaWindowSchema).optional(), balances: Json.optional(), plan: Json.optional(), details: Json.optional(), unavailable_reason: Json.optional(), retry_after: Json.optional(), fetched_at: Json.optional(),
@@ -628,6 +670,7 @@ export const QuotaSourceSchema = z.looseObject({
 });
 /** An account-usage provider's normalised snapshot on `/api/provider/quota` (the same windows and indexes as a quotas source). */
 export const QuotaAccountLimitsSchema = z.looseObject({
+    plan_usage: PlanUsageSchema.nullable().optional(), plan_stale: z.boolean().optional(),
     available: z.boolean().optional(), stale: z.boolean().optional(), title: z.string().optional(), plan: Json.optional(), unavailable_reason: NullableString.optional(),
     windows: z.array(QuotaWindowSchema), details: Json.optional(), fetched_at: NullableString.describe('ISO-8601 UTC.'),
     pace_window_index: QuotaWindowIndex, session_window_index: QuotaWindowIndex, weekly_window_index: QuotaWindowIndex,
@@ -681,22 +724,24 @@ export const AuxiliaryTaskSchema = z.looseObject({
     /** TAL-800: the reasoning effort the slot runs with (the Agent's default until one is saved; `''` = provider default); null when the Agent does not report its slots. */
     reasoning_effort: z.string().nullable(),
 });
-export const AuxiliaryModelsSchema = z.looseObject({ main: z.looseObject({ model: z.string().optional(), provider: z.string().optional(), base_url: z.string().optional(), api_key_set: z.boolean().optional(), service_tier: z.enum(['', 'default', 'priority', 'ultrafast']).optional().describe('Empty string is the Standard value returned by older servers.'), supported_speed_tiers: z.array(SpeedTierSchema).optional() }), tasks: z.array(AuxiliaryTaskSchema) });
+export const AuxiliaryModelsSchema = z.looseObject({ delegation: DelegationSettingsSchema.optional(), main: z.looseObject({ model: z.string().optional(), provider: z.string().optional(), base_url: z.string().optional(), api_key_set: z.boolean().optional(), service_tier: z.enum(['', 'default', 'priority', 'ultrafast']).optional().describe('Empty string is the Standard value returned by older servers.'), supported_speed_tiers: z.array(SpeedTierSchema).optional() }), tasks: z.array(AuxiliaryTaskSchema) });
 export const MaxTokensSchema = z.looseObject({ max_tokens: NullableNumber, max_tokens_effective: NullableNumber, max_tokens_fallback: NullableNumber });
 // ── workspaces, files, git ───────────────────────────────────────────────
 /** A registry entry; `name` is never empty (the folder name when none is registered, `Home` for `default`), so pickers show it as-is (TAL-303). */
 export const WorkspaceEntrySchema = z.looseObject({ name: z.string().min(1), path: z.string() });
 export const WorkspacesSchema = z.looseObject({ workspaces: z.array(WorkspaceEntrySchema), last: NullableString.optional(), terminal_remote_backend: z.boolean().optional() });
 export const FileEntrySchema = z.looseObject({
-    name: z.string(), path: z.string().optional(), is_dir: z.boolean().optional(), type: z.string().optional(), size: z.number().nullable().optional(), mtime: z.number().nullable().optional(), mtime_ns: z.union([z.number(), z.string()]).nullable().optional(),
+    read_only: z.boolean().optional(), name: z.string(), path: z.string().optional(), is_dir: z.boolean().optional(), type: z.string().optional(), size: z.number().nullable().optional(), mtime: z.number().nullable().optional(), mtime_ns: z.union([z.number(), z.string()]).nullable().optional(),
     birthtime_ns: z.union([z.number(), z.string()]).nullable().optional(), hidden: z.boolean().optional(), workspace_sort_rank: z.number().int().optional(), target: z.string().optional(), target_outside_workspace: z.boolean().optional(),
 });
-export const DirListingSchema = z.looseObject({ path: z.string().optional(), entries: z.array(FileEntrySchema), signature: z.string().optional(), workspace: z.string().optional(), workspace_recovered: z.boolean().optional(), is_git: z.boolean().optional() });
+export const FileSourceSchema = z.enum(['workspace', 'managed']);
+const ManagedFileFields = { source: FileSourceSchema.optional(), read_only: z.boolean().optional(), write_semantics: z.literal('unconditional').optional() };
+export const DirListingSchema = z.looseObject({ ...ManagedFileFields, unavailable: z.boolean().optional(), path: z.string().optional(), entries: z.array(FileEntrySchema), signature: z.string().optional(), workspace: z.string().optional(), workspace_recovered: z.boolean().optional(), is_git: z.boolean().optional() });
 /** How a workspace file renders (TAL-566): media streams from `/api/file/raw`; text kinds carry `content`. */
 export const FilePreviewKindSchema = z.enum(['text', 'markdown', 'csv', 'html', 'image', 'pdf', 'audio', 'video', 'binary']);
 /** `table` is a `csv` preview's leading rows (header first); `table_truncated` says the file has more. `preview_url` is an
  * `html` preview's app-relative frame URL, under which the page's relative assets also resolve. */
-export const FileContentSchema = z.looseObject({
+export const FileContentSchema = z.looseObject({ ...ManagedFileFields, name: z.string().optional(),
     path: z.string().optional(), content: z.string().optional(), lines: z.number().optional(), size: z.number().optional(), truncated: z.boolean().optional(), binary: z.boolean().optional(), mime: z.string().optional(),
     preview: FilePreviewKindSchema.optional(), table: z.array(z.array(z.string())).optional(), table_truncated: z.boolean().optional(),
     preview_url: z.string().optional(),
@@ -803,7 +848,7 @@ export const UpdateVersionSchema = z.object({
 }).describe('TAL-946: one installable Stable release newer than the installed one.');
 export const UpdateTargetSchema = z.looseObject({
     failed_update: z.object({ version: z.string(), restored_version: z.string() }).optional().describe('Web only: the update that failed before HTTP readiness and the restored package version. Manual retry remains available.'),
-    name: z.string().optional(), channel: z.enum(['stable', 'experimental']).optional(),
+    name: z.string().optional(), channel: WebUpdateChannelSchema.optional(),
     unsupported: z.boolean().optional().describe('Deprecated (TAL-350): `support === \'unchecked\'`, kept for older clients.'),
     support: AgentSupportSchema.optional().describe('Agent target only (TAL-350): `supported` when the target revision is exactly a release in the verified Agent window, else `unchecked`; an `unchecked` apply requires `confirmed_agent_revision`.'),
     support_label: z.string().optional().describe('Agent target only (TAL-946): `support` worded to fit one phone line.'),
@@ -818,7 +863,7 @@ export const UpdateTargetSchema = z.looseObject({
     versions: z.array(UpdateVersionSchema).describe('TAL-946: every installable Stable release newer than the installed one, newest first; empty unless `release_ready` can apply.'),
     folded_count: z.number().int().nonnegative().describe('How many `versions` are `folded`.'),
 });
-export const AgentRecoveryStateSchema = z.object({ phase: z.enum(['idle', 'running', 'waiting', 'complete', 'blocked']), attempt: z.number().int().nonnegative(), detail: z.string(), retry_at: z.string().nullable() });
+export const AgentRecoveryStateSchema = z.object({ phase: z.enum(['idle', 'running', 'waiting', 'complete', 'blocked']), attempt: z.number().int().nonnegative(), detail: z.string(), retry_at: z.string().nullable(), operation_id: z.uuid().optional(), operation: AgentUpdateOperationSchema.optional(), verified_revision: z.string().regex(/^[a-f0-9]{40}$/).optional(), runtime_revision: z.string().regex(/^[a-f0-9]{40}$/).optional(), verified_version: z.string().nullable().optional() });
 export const UpdatesCheckSchema = z.looseObject({ agent_recovery: AgentRecoveryStateSchema.optional(), disabled: z.boolean().optional(), cached: z.boolean().optional(), channel: z.string().optional(), agent_channel: z.enum(['stable', 'experimental']).optional(), checked_at: z.number().optional(), include_agent: z.boolean().optional(), webui: UpdateTargetSchema.nullable().optional(), agent: UpdateTargetSchema.nullable().optional() });
 export const UpdatesSummarySchema = z.object({
     ok: z.boolean(), target: z.enum(['webui', 'agent']), summary: z.string(),
@@ -830,12 +875,15 @@ export const UpdatesSummarySchema = z.object({
     cached: z.boolean(),
 });
 export const UpdateApplySchema = z.looseObject({
+    recovery_only: z.boolean().optional().describe('Only a retained transaction was repaired; the selected update outcome remains unverified.'),
+    recovery_pending: z.boolean().optional().describe('The initiating operation remains active through automatic recovery; follow its notification_id without replaying the update.'),
+    verified_revision: z.string().regex(/^[a-f0-9]{40}$/).optional(), verified_version: z.string().nullable().optional(),
     recovery_compatibility: z.object({ manual_execution: z.boolean(), bot_chat_delivery: z.boolean() }).optional()
         .describe('Whether the target Agent can reconcile retained manual execution and pending Bot Chat records. A false value blocks the update before any source or repair-intent change.'),
     ok: z.boolean().optional(), status: z.string().optional(), error: z.string().optional(), message: z.string().optional(), lock: Json.optional(), confirmation_required: z.boolean().optional(), refresh_confirmation: AgentRefreshConfirmationSchema.optional(), candidate_revision: z.string().optional(), supported_revision: z.string().optional(), supported_version: z.string().optional(), agent_channel: z.enum(['stable', 'experimental']).optional(), notification_id: z.uuid().optional(), channel_switch: z.boolean().optional(), backup_dir: z.string().nullable().optional(), backup_failed: z.boolean().optional(), stash_conflict: z.boolean().optional(), gateway_restart: z.string().optional().describe('TAL-953: `waiting_for_idle` when an Agent update left the gateway restart to wait for the gateway\'s running work; the update notification reports its outcome.')
 });
 /** `verifying` (TAL-1138): the gateway restarted, and the server is checking that the new gateway process and the Agent runtime answer. */
-export const UpdateNotificationPhaseSchema = z.enum(['applying', 'awaiting_confirmation', 'waiting_for_idle', 'restarting', 'verifying', 'succeeded', 'blocked', 'failed', 'unknown']);
+export const UpdateNotificationPhaseSchema = z.enum(['applying', 'awaiting_confirmation', 'waiting_for_idle', 'restarting', 'verifying', 'recovering', 'succeeded', 'blocked', 'failed', 'unknown']);
 export const UpdateNotificationActionSchema = z.object({
     id: z.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/),
     label: z.string().min(1).max(80),
@@ -848,10 +896,15 @@ export const UpdateNotificationDestinationSchema = z.object({
 });
 /** TAL-1138: one step of an update as its Updating dialog lists it; the server derives every label and state. */
 export const UpdateStepSchema = z.object({
-    id: z.enum(['install', 'web_restart', 'ready', 'gateway_wait', 'gateway_restart', 'agent_ready']),
+    id: z.enum(['install', 'web_restart', 'ready', 'gateway_wait', 'gateway_restart', 'agent_ready', 'recovery']),
     label: z.string().min(1).max(80),
     state: z.enum(['done', 'active', 'pending', 'failed']),
 });
+export const AgentUpdateRecoverySchema = z.object({
+    operation: AgentUpdateOperationSchema, attempt_error: z.string().max(2000).nullable(), runtime_revision: z.string().regex(/^[a-f0-9]{40}$/).nullable(),
+    rollback: z.boolean().nullable().optional(),
+    outcome: z.enum(['recovering', 'target_installed', 'baseline_restored', 'other_revision', 'blocked', 'unknown']),
+});
 export const UpdateNotificationSchema = z.object({
     id: z.uuid(),
     kind: z.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/),
@@ -873,6 +926,7 @@ export const UpdateNotificationSchema = z.object({
     verified_version: z.string().min(1).max(80).nullable(),
     /** The apply's own explanation of a failed or blocked attempt, or of a success that needs attention (an Agent update that kept local edits in the git stash), line breaks kept; null otherwise. */
     detail: z.string().max(2000).nullable(),
+    recovery: AgentUpdateRecoverySchema.optional(),
     unread: z.boolean(),
     active: z.boolean(),
     requires_interaction: z.boolean(),
@@ -926,7 +980,7 @@ export const PluginSchema = z.looseObject({ key: z.string(), name: z.string().op
  * `in_process`, so Settings recommends `plugins.isolation: host`; Talaria never sets the mode.
  */
 export const PluginsSchema = z.looseObject({ plugins: z.array(PluginSchema), empty: z.boolean().optional(), read_only: z.boolean().optional(), supported_hooks: z.array(z.string()).optional(), unavailable: z.boolean().optional(), plugin_isolation_advisory: z.boolean().optional() });
-export const McpServerSchema = z.looseObject({ name: z.string(), id: z.string().optional(), transport: z.string().optional(), enabled: z.boolean().optional(), can_toggle: z.boolean().optional().describe('Whether PATCH can enable or disable this server; false for invalid config.'), active: z.boolean().optional(), status: z.string().optional(), tools: z.number().optional(), tool_count: z.number().int().nullable().optional(), health: z.string().optional(), health_detail: z.string().optional(), health_checked_at: Json.optional(), health_pending: z.boolean().optional() });
+export const McpServerSchema = z.looseObject({ cost_policy: McpCostPolicySchema.nullable().optional(), name: z.string(), id: z.string().optional(), transport: z.string().optional(), enabled: z.boolean().optional(), can_toggle: z.boolean().optional().describe('Whether PATCH can enable or disable this server; false for invalid config.'), active: z.boolean().optional(), status: z.string().optional(), tools: z.number().optional(), tool_count: z.number().int().nullable().optional(), health: z.string().optional(), health_detail: z.string().optional(), health_checked_at: Json.optional(), health_pending: z.boolean().optional() });
 export const McpServersSchema = z.looseObject({ servers: z.array(McpServerSchema), health_pending: z.boolean().optional(), reload_required: z.boolean().optional(), toggle_supported: z.boolean().optional() });
 /** TAL-818: one connected account of a Nous tool-gateway app; `name` is its alias, else the vendor label. `problem` is its gateway status while it is not active, else null. */
 export const ConnectorAccountViewSchema = z.object({ connection_id: z.string(), name: z.string(), problem: z.enum(['pending', 'failed', 'expired', 'revoked', 'inactive']).nullable(), status_reason: z.string().nullable(), active: z.boolean(), created_at: z.string() });
@@ -945,7 +999,11 @@ export const ConnectorViewSchema = z.object({
  * so no switch changes them. `sign_in_required` offers Nous sign-in without creating a guest on reads.
  * `rules_error`: why the rules could not be read; every app then reads off (fails closed).
  */
-export const ConnectorsPageSchema = z.object({ available: z.boolean(), sign_in_required: z.boolean().default(false), connectors: z.array(ConnectorViewSchema), policy_revision: z.string().nullable(), rules_error: z.string().nullable() });
+export const ConnectorSignInOfferSchema = z.object({
+    available: z.boolean(), due: z.boolean().describe('The native eligible due check at this read; an already delivered offer remains visible independently.'), visible: z.boolean(), offer_id: z.string().nullable(),
+    actions: z.array(z.enum(['sign_in', 'dismiss'])), refresh_after: z.number().int().positive().nullable(),
+});
+export const ConnectorsPageSchema = z.object({ available: z.boolean(), sign_in_required: z.boolean().default(false), sign_in_offer: ConnectorSignInOfferSchema.optional(), connectors: z.array(ConnectorViewSchema), policy_revision: z.string().nullable(), rules_error: z.string().nullable() });
 /**
  * TAL-818: one app's tools: `enabled`: Hermes may use it (the member rules leave it on and nothing locks it); `locked`: an
  * organization or role rule (by name or tag) keeps it off. `editable`: its switch may change the member rule (readable rules, the app on in them, and no lock).
@@ -982,8 +1040,6 @@ export const WikiStatusSchema = z.object({
 });
 export const WikiBrowseSchema = z.object({ pages: z.array(z.object({ name: z.string(), path: z.string(), size: z.number().int(), mtime: z.number().int() })) });
 export const WikiPageSchema = z.object({ content: z.string(), path: z.string() });
-export const TodoItemSchema = z.looseObject({ id: z.union([z.string(), z.number()]).optional(), text: z.string().optional(), content: z.string().optional(), title: z.string().optional(), status: z.string().optional(), done: z.boolean().optional(), completed: z.boolean().optional() });
-export const TodoStateSchema = z.looseObject({ session_id: z.string().optional(), todos: z.array(TodoItemSchema).optional(), summary: z.record(z.string(), z.unknown()).optional(), version: z.number().optional(), ts: z.number().optional(), source: z.string().optional(), description: z.string().optional(), pending_count: z.number().optional() });
 // ── onboarding ───────────────────────────────────────────────────────────
 /** `oauth_flow` (TAL-398): `device_code` when the provider signs in through `/api/onboarding/oauth/*` instead of taking an API key; `oauth_label` then names the account to sign in with, and `signed_in` says whether the profile already holds its credential. */
 export const OnboardingProviderSchema = z.looseObject({ id: z.string(), name: z.string().optional(), label: z.string().optional(), kind: z.string().optional(), oauth: z.boolean().optional(), needs_key: z.boolean().optional(), base_url: NullableString.optional(), models: z.array(Json).optional(), category: z.string().optional(), default_model: z.string().optional(), oauth_flow: z.literal('device_code').nullable().optional(), oauth_label: z.string().optional(), signed_in: z.boolean().optional() });
@@ -1002,6 +1058,7 @@ export const OnboardingProbeSchema = z.looseObject({ ok: z.boolean().optional(),
  * `user_code`, `verification_url`, `expires_in` and `interval` (seconds between polls) come with the start.
  */
 export const OnboardingOAuthSchema = z.looseObject({
+    nous_account: NousAccountSchema.nullable().optional(),
     ok: z.boolean().optional(), status: z.string().optional(), url: z.string().optional(), verification_url: z.string().optional(), user_code: z.string().optional(), message: z.string().optional(),
     error: z.string().nullable().optional(), flow_id: z.string().optional(), provider: z.string().optional(), expires_in: z.number().int().optional(), interval: z.number().int().optional(),
     /**
@@ -1061,6 +1118,14 @@ export const KanbanTaskPolicyShape = { available_actions: KanbanTaskActionsSchem
 export const KanbanTaskViewSchema = z.looseObject({ id: z.union([z.string(), z.number()]), title: z.string().optional(), status: z.string().optional(), assignee: NullableString.optional(), priority: z.union([z.string(), z.number()]).nullable().optional(), description: z.string().optional(), tags: z.array(z.string()).optional(), session_id: NullableString.optional(), archived: z.boolean().optional(), created_at: Json.optional(), updated_at: Json.optional(), ...KanbanTaskPolicyShape });
 /** A board column in the Agent workflow's order (TAL-796): `name` is the status key, `label` the Agent's English label. */
 export const KanbanColumnSchema = z.looseObject({ name: z.string(), label: z.string(), tasks: z.array(KanbanTaskViewSchema) });
+/** One bounded profile-scoped read shared by timeline and relationship layouts. Null timing means unknown, never planned effort. */
+export const KanbanInspectionSchema = KanbanInspectionSnapshotSchema.extend({
+    nodes: z.array(KanbanInspectionNodeSchema.extend({ task: KanbanTaskViewSchema,
+        ancestors: z.array(z.string()), descendants: z.array(z.string()), cycle: z.boolean(), running_lineage: z.boolean(),
+        timing: z.object({ start: z.number().nullable(), end: z.number().nullable(), duration_seconds: z.number().nullable(), offset: z.number().nullable(), width: z.number().nullable() }),
+    })).max(500),
+    window: z.object({ start: z.number().nullable(), end: z.number().nullable() }),
+});
 /** One profile lane (TAL-567): an assignee's tasks (`null` = unassigned) across every board column, with its task count. */
 export const KanbanLaneSchema = z.object({ assignee: z.string().nullable(), count: z.number().int(), columns: z.array(KanbanColumnSchema) });
 export const KanbanBoardViewSchema = z.looseObject({ columns: z.array(KanbanColumnSchema).optional(), assignees: z.array(Json).optional(), filters: Json.optional(), latest_event_id: z.number().optional(), read_only: z.boolean().optional(), tenants: z.array(Json).optional(), changed: z.boolean().optional(),