@maudecode/talaria-web 1.11.0 → 1.12.1

package/dist/api/tools-router.d.ts

@@ -1,5 +1,7 @@
 import { type ApiContext } from './router.js';
 import { type Dict } from '../config/agent-config.js';
+import type { SessionInfo } from '../auth/store.js';
+export declare function updateNotificationOwner(session: SessionInfo | null): string;
 /** Rate limiter keyed by client IP over a sliding window (Python `_csp_report_rate_limited` / `_client_event_rate_limited`). */
 export declare class WindowLimiter {
     private readonly windowSeconds;
@@ -387,10 +389,12 @@ export declare const toolsRouter: {
                 no_git: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 install_kind: import("zod").ZodOptional<import("zod").ZodLiteral<"npm">>;
                 npm: import("zod").ZodOptional<import("zod").ZodString>;
+                channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 dirty: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 metadata_repair: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 release_url: import("zod").ZodOptional<import("zod").ZodString>;
                 ignored: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                stale_check: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 current_version: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$loose>>>;
             agent: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -414,10 +418,12 @@ export declare const toolsRouter: {
                 no_git: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 install_kind: import("zod").ZodOptional<import("zod").ZodLiteral<"npm">>;
                 npm: import("zod").ZodOptional<import("zod").ZodString>;
+                channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 dirty: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 metadata_repair: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 release_url: import("zod").ZodOptional<import("zod").ZodString>;
                 ignored: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                stale_check: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 current_version: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$loose>>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
@@ -459,10 +465,12 @@ export declare const toolsRouter: {
                 no_git: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 install_kind: import("zod").ZodOptional<import("zod").ZodLiteral<"npm">>;
                 npm: import("zod").ZodOptional<import("zod").ZodString>;
+                channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 dirty: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 metadata_repair: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 release_url: import("zod").ZodOptional<import("zod").ZodString>;
                 ignored: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                stale_check: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 current_version: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$loose>>>;
             agent: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
@@ -486,10 +494,12 @@ export declare const toolsRouter: {
                 no_git: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 install_kind: import("zod").ZodOptional<import("zod").ZodLiteral<"npm">>;
                 npm: import("zod").ZodOptional<import("zod").ZodString>;
+                channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 dirty: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 metadata_repair: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 release_url: import("zod").ZodOptional<import("zod").ZodString>;
                 ignored: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                stale_check: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 current_version: import("zod").ZodOptional<import("zod").ZodString>;
             }, import("zod/v4/core").$loose>>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
@@ -515,6 +525,10 @@ export declare const toolsRouter: {
                 stable: "stable";
                 experimental: "experimental";
             }>>;
+            notification_id: import("zod").ZodOptional<import("zod").ZodUUID>;
+            channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            backup_dir: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            backup_failed: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         force: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             agent_channel: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -538,6 +552,10 @@ export declare const toolsRouter: {
                 stable: "stable";
                 experimental: "experimental";
             }>>;
+            notification_id: import("zod").ZodOptional<import("zod").ZodUUID>;
+            channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            backup_dir: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            backup_failed: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         clearLock: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             agent_channel: import("zod").ZodOptional<import("zod").ZodEnum<{
@@ -561,6 +579,10 @@ export declare const toolsRouter: {
                 stable: "stable";
                 experimental: "experimental";
             }>>;
+            notification_id: import("zod").ZodOptional<import("zod").ZodUUID>;
+            channel_switch: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            backup_dir: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            backup_failed: import("zod").ZodOptional<import("zod").ZodBoolean>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         summary: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             updates: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
@@ -573,6 +595,313 @@ export declare const toolsRouter: {
             diff_links: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     };
+    updateNotifications: {
+        list: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            tab_id: import("zod").ZodOptional<import("zod").ZodString>;
+            loaded_build: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            scope_id: import("zod").ZodString;
+            frontend_build: import("zod").ZodObject<{
+                current_build: import("zod").ZodNullable<import("zod").ZodString>;
+                loaded_build: import("zod").ZodNullable<import("zod").ZodString>;
+                refresh_required: import("zod").ZodBoolean;
+                notification_id: import("zod").ZodNullable<import("zod").ZodUUID>;
+            }, import("zod/v4/core").$strip>;
+            notifications: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodUUID;
+                kind: import("zod").ZodString;
+                target: import("zod").ZodNullable<import("zod").ZodEnum<{
+                    agent: "agent";
+                    webui: "webui";
+                }>>;
+                phase: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
+                    unknown: "unknown";
+                    failed: "failed";
+                    applying: "applying";
+                    awaiting_confirmation: "awaiting_confirmation";
+                    restarting: "restarting";
+                    succeeded: "succeeded";
+                    blocked: "blocked";
+                }>, import("zod").ZodString]>;
+                severity: import("zod").ZodEnum<{
+                    warning: "warning";
+                    info: "info";
+                    critical: "critical";
+                }>;
+                persistent: import("zod").ZodBoolean;
+                requires_acknowledgement: import("zod").ZodBoolean;
+                actions: import("zod").ZodArray<import("zod").ZodObject<{
+                    id: import("zod").ZodString;
+                    label: import("zod").ZodString;
+                    style: import("zod").ZodEnum<{
+                        default: "default";
+                        primary: "primary";
+                        destructive: "destructive";
+                    }>;
+                    acknowledges: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>>;
+                destination: import("zod").ZodNullable<import("zod").ZodObject<{
+                    key: import("zod").ZodString;
+                    label: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+                title: import("zod").ZodString;
+                message: import("zod").ZodString;
+                created_at: import("zod").ZodISODateTime;
+                updated_at: import("zod").ZodISODateTime;
+                read_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                acknowledged_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                acknowledged_action_id: import("zod").ZodNullable<import("zod").ZodString>;
+                verified_revision: import("zod").ZodNullable<import("zod").ZodString>;
+                verified_version: import("zod").ZodNullable<import("zod").ZodString>;
+                unread: import("zod").ZodBoolean;
+                active: import("zod").ZodBoolean;
+                requires_interaction: import("zod").ZodBoolean;
+                can_dismiss: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            unread_count: import("zod").ZodNumber;
+            clearable_count: import("zod").ZodNumber;
+            can_clear: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        read: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            read: import("zod").ZodLiteral<true>;
+            tab_id: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            kind: import("zod").ZodString;
+            target: import("zod").ZodNullable<import("zod").ZodEnum<{
+                agent: "agent";
+                webui: "webui";
+            }>>;
+            phase: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
+                unknown: "unknown";
+                failed: "failed";
+                applying: "applying";
+                awaiting_confirmation: "awaiting_confirmation";
+                restarting: "restarting";
+                succeeded: "succeeded";
+                blocked: "blocked";
+            }>, import("zod").ZodString]>;
+            severity: import("zod").ZodEnum<{
+                warning: "warning";
+                info: "info";
+                critical: "critical";
+            }>;
+            persistent: import("zod").ZodBoolean;
+            requires_acknowledgement: import("zod").ZodBoolean;
+            actions: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                label: import("zod").ZodString;
+                style: import("zod").ZodEnum<{
+                    default: "default";
+                    primary: "primary";
+                    destructive: "destructive";
+                }>;
+                acknowledges: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            destination: import("zod").ZodNullable<import("zod").ZodObject<{
+                key: import("zod").ZodString;
+                label: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            title: import("zod").ZodString;
+            message: import("zod").ZodString;
+            created_at: import("zod").ZodISODateTime;
+            updated_at: import("zod").ZodISODateTime;
+            read_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_action_id: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_revision: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_version: import("zod").ZodNullable<import("zod").ZodString>;
+            unread: import("zod").ZodBoolean;
+            active: import("zod").ZodBoolean;
+            requires_interaction: import("zod").ZodBoolean;
+            can_dismiss: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        dismiss: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            dismiss: import("zod").ZodLiteral<true>;
+            tab_id: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            ok: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        clear: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            clear: import("zod").ZodLiteral<true>;
+            tab_id: import("zod").ZodOptional<import("zod").ZodString>;
+            loaded_build: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            scope_id: import("zod").ZodString;
+            frontend_build: import("zod").ZodObject<{
+                current_build: import("zod").ZodNullable<import("zod").ZodString>;
+                loaded_build: import("zod").ZodNullable<import("zod").ZodString>;
+                refresh_required: import("zod").ZodBoolean;
+                notification_id: import("zod").ZodNullable<import("zod").ZodUUID>;
+            }, import("zod/v4/core").$strip>;
+            notifications: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodUUID;
+                kind: import("zod").ZodString;
+                target: import("zod").ZodNullable<import("zod").ZodEnum<{
+                    agent: "agent";
+                    webui: "webui";
+                }>>;
+                phase: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
+                    unknown: "unknown";
+                    failed: "failed";
+                    applying: "applying";
+                    awaiting_confirmation: "awaiting_confirmation";
+                    restarting: "restarting";
+                    succeeded: "succeeded";
+                    blocked: "blocked";
+                }>, import("zod").ZodString]>;
+                severity: import("zod").ZodEnum<{
+                    warning: "warning";
+                    info: "info";
+                    critical: "critical";
+                }>;
+                persistent: import("zod").ZodBoolean;
+                requires_acknowledgement: import("zod").ZodBoolean;
+                actions: import("zod").ZodArray<import("zod").ZodObject<{
+                    id: import("zod").ZodString;
+                    label: import("zod").ZodString;
+                    style: import("zod").ZodEnum<{
+                        default: "default";
+                        primary: "primary";
+                        destructive: "destructive";
+                    }>;
+                    acknowledges: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$strip>>;
+                destination: import("zod").ZodNullable<import("zod").ZodObject<{
+                    key: import("zod").ZodString;
+                    label: import("zod").ZodString;
+                }, import("zod/v4/core").$strip>>;
+                title: import("zod").ZodString;
+                message: import("zod").ZodString;
+                created_at: import("zod").ZodISODateTime;
+                updated_at: import("zod").ZodISODateTime;
+                read_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                acknowledged_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+                acknowledged_action_id: import("zod").ZodNullable<import("zod").ZodString>;
+                verified_revision: import("zod").ZodNullable<import("zod").ZodString>;
+                verified_version: import("zod").ZodNullable<import("zod").ZodString>;
+                unread: import("zod").ZodBoolean;
+                active: import("zod").ZodBoolean;
+                requires_interaction: import("zod").ZodBoolean;
+                can_dismiss: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            unread_count: import("zod").ZodNumber;
+            clearable_count: import("zod").ZodNumber;
+            can_clear: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        cancel: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            cancel: import("zod").ZodLiteral<true>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            kind: import("zod").ZodString;
+            target: import("zod").ZodNullable<import("zod").ZodEnum<{
+                agent: "agent";
+                webui: "webui";
+            }>>;
+            phase: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
+                unknown: "unknown";
+                failed: "failed";
+                applying: "applying";
+                awaiting_confirmation: "awaiting_confirmation";
+                restarting: "restarting";
+                succeeded: "succeeded";
+                blocked: "blocked";
+            }>, import("zod").ZodString]>;
+            severity: import("zod").ZodEnum<{
+                warning: "warning";
+                info: "info";
+                critical: "critical";
+            }>;
+            persistent: import("zod").ZodBoolean;
+            requires_acknowledgement: import("zod").ZodBoolean;
+            actions: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                label: import("zod").ZodString;
+                style: import("zod").ZodEnum<{
+                    default: "default";
+                    primary: "primary";
+                    destructive: "destructive";
+                }>;
+                acknowledges: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            destination: import("zod").ZodNullable<import("zod").ZodObject<{
+                key: import("zod").ZodString;
+                label: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            title: import("zod").ZodString;
+            message: import("zod").ZodString;
+            created_at: import("zod").ZodISODateTime;
+            updated_at: import("zod").ZodISODateTime;
+            read_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_action_id: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_revision: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_version: import("zod").ZodNullable<import("zod").ZodString>;
+            unread: import("zod").ZodBoolean;
+            active: import("zod").ZodBoolean;
+            requires_interaction: import("zod").ZodBoolean;
+            can_dismiss: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        action: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            action_id: import("zod").ZodString;
+            perform: import("zod").ZodLiteral<true>;
+            tab_id: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            id: import("zod").ZodUUID;
+            kind: import("zod").ZodString;
+            target: import("zod").ZodNullable<import("zod").ZodEnum<{
+                agent: "agent";
+                webui: "webui";
+            }>>;
+            phase: import("zod").ZodUnion<readonly [import("zod").ZodEnum<{
+                unknown: "unknown";
+                failed: "failed";
+                applying: "applying";
+                awaiting_confirmation: "awaiting_confirmation";
+                restarting: "restarting";
+                succeeded: "succeeded";
+                blocked: "blocked";
+            }>, import("zod").ZodString]>;
+            severity: import("zod").ZodEnum<{
+                warning: "warning";
+                info: "info";
+                critical: "critical";
+            }>;
+            persistent: import("zod").ZodBoolean;
+            requires_acknowledgement: import("zod").ZodBoolean;
+            actions: import("zod").ZodArray<import("zod").ZodObject<{
+                id: import("zod").ZodString;
+                label: import("zod").ZodString;
+                style: import("zod").ZodEnum<{
+                    default: "default";
+                    primary: "primary";
+                    destructive: "destructive";
+                }>;
+                acknowledges: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$strip>>;
+            destination: import("zod").ZodNullable<import("zod").ZodObject<{
+                key: import("zod").ZodString;
+                label: import("zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            title: import("zod").ZodString;
+            message: import("zod").ZodString;
+            created_at: import("zod").ZodISODateTime;
+            updated_at: import("zod").ZodISODateTime;
+            read_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_at: import("zod").ZodNullable<import("zod").ZodISODateTime>;
+            acknowledged_action_id: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_revision: import("zod").ZodNullable<import("zod").ZodString>;
+            verified_version: import("zod").ZodNullable<import("zod").ZodString>;
+            unread: import("zod").ZodBoolean;
+            active: import("zod").ZodBoolean;
+            requires_interaction: import("zod").ZodBoolean;
+            can_dismiss: import("zod").ZodBoolean;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+    };
     transcribeCapability: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
         available: import("zod").ZodBoolean;

package/dist/api/tools-router.js

@@ -1,9 +1,10 @@
 /** Skills, memory, prompts, commands, notes, insights, logs, health, MCP, plugins, updates, diagnostics (Python `api/routes.py` handlers of the same paths). */
 import { implement } from '@orpc/server';
+import { createHash } from 'node:crypto';
 import { toolsContract } from '@maudecode/talaria-web-contracts';
 import { HttpError, requireFields } from './router.js';
 import { requestSessionIdGuard } from './session-visibility.js';
-import { activeProfileName } from '../auth/gate.js';
+import { activeProfileName, ensureTrustedAuthSession, sessionCanManageServer } from '../auth/gate.js';
 import { HttpFailure } from '../sessions/service.js';
 import { SessionNotFound } from '../sessions/store.js';
 import { ConfigUnavailable } from '../config/agent-config.js';
@@ -39,6 +40,62 @@ async function run(fn) {
     }
 }
 const home = (ctx) => ctx.deps.profileHome(activeProfileName(ctx));
+const principalHash = (...parts) => createHash('sha256').update(JSON.stringify(parts), 'utf8').digest('hex');
+export function updateNotificationOwner(session) {
+    const authType = str(session?.auth_type).trim();
+    if (authType === 'oidc') {
+        const issuer = str(session?.oidc_issuer).trim();
+        const subject = typeof session?.oidc_subject === 'string' ? session.oidc_subject : '';
+        if (issuer && subject.trim())
+            return `oidc:${principalHash(issuer, subject)}`;
+        const token = str(session?.token).trim();
+        if (token)
+            return `oidc-session:${principalHash(token)}`;
+    }
+    const username = str(session?.username).trim();
+    return username ? `${authType || 'auth'}:${username}` : 'local-owner';
+}
+async function updateNotificationScope(ctx, tab) {
+    const session = await ensureTrustedAuthSession(ctx);
+    return {
+        owner: updateNotificationOwner(session),
+        profile: activeProfileName(ctx),
+        serverOwner: await sessionCanManageServer(ctx, session),
+        tab: tab ?? null,
+    };
+}
+async function applyWithNotification(ctx, target, apply, confirmed = false) {
+    const scope = await updateNotificationScope(ctx);
+    const active = ctx.deps.updateNotifications.activeUpdate(scope, target);
+    if (active && (active.phase === 'applying' || active.phase === 'restarting')) {
+        return { ok: false, status: 'already_in_progress', message: 'Update already in progress', notification_id: active.id };
+    }
+    const notification = active ?? ctx.deps.updateNotifications.begin(scope, target);
+    if (active?.phase === 'awaiting_confirmation' && confirmed)
+        ctx.deps.updateNotifications.transition(notification.id, 'applying');
+    try {
+        const result = await apply();
+        const verifiedIdentity = typeof result.verified_revision === 'string'
+            ? { revision: result.verified_revision, version: typeof result.verified_version === 'string' ? result.verified_version : null }
+            : undefined;
+        if (result.confirmation_required === true)
+            ctx.deps.updateNotifications.transition(notification.id, 'awaiting_confirmation', null, verifiedIdentity);
+        else if (result.restart_blocked === true)
+            ctx.deps.updateNotifications.transition(notification.id, 'blocked', null, verifiedIdentity);
+        else if (result.ok !== true)
+            ctx.deps.updateNotifications.transition(notification.id, 'failed', null, verifiedIdentity);
+        else if (target === 'webui' && result.restart_scheduled === true) {
+            ctx.deps.updateNotifications.transition(notification.id, 'restarting', str(result.sourceRevision || result.candidate_revision), verifiedIdentity);
+        }
+        else
+            ctx.deps.updateNotifications.transition(notification.id, 'succeeded', null, verifiedIdentity);
+        return { ...result, notification_id: notification.id };
+    }
+    catch (error) {
+        ctx.deps.updateNotifications.transition(notification.id, 'failed');
+        throw error;
+    }
+}
 /** Rate limiter keyed by client IP over a sliding window (Python `_csp_report_rate_limited` / `_client_event_rate_limited`). */
 export class WindowLimiter {
     windowSeconds;
@@ -315,11 +372,47 @@ export const toolsRouter = os.router({
             ctx.deps.log(`[updates] checking for updates (force=${String(force)}, channel=${channel})`);
             return (await ctx.deps.updates.check(force, !pyBool(settings.ignore_agent_updates), channel, input.agent_channel));
         })),
-        apply: os.updates.apply.handler(({ input, context: { ctx } }) => run(() => ctx.deps.updates.apply(updateTarget(input.target), bodyChannel(input.channel), () => true, { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }))),
-        force: os.updates.force.handler(({ input, context: { ctx } }) => run(() => ctx.deps.updates.force(updateTarget(input.target), bodyChannel(input.channel), { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }))),
-        clearLock: os.updates.clearLock.handler(({ input, context: { ctx } }) => run(() => ctx.deps.updates.clearLock(updateTarget(input.target), { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }))),
+        apply: os.updates.apply.handler(({ input, context: { ctx } }) => run(() => { const target = updateTarget(input.target); return applyWithNotification(ctx, target, () => ctx.deps.updates.apply(target, bodyChannel(input.channel), () => true, { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }), input.confirmed_agent_revision !== undefined); })),
+        force: os.updates.force.handler(({ input, context: { ctx } }) => run(() => { const target = updateTarget(input.target); return applyWithNotification(ctx, target, () => ctx.deps.updates.force(target, bodyChannel(input.channel), { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }), input.confirmed_agent_revision !== undefined); })),
+        clearLock: os.updates.clearLock.handler(({ input, context: { ctx } }) => run(() => { const target = updateTarget(input.target); return applyWithNotification(ctx, target, () => ctx.deps.updates.clearLock(target, { agentChannel: input.agent_channel, confirmedRevision: input.confirmed_agent_revision }), input.confirmed_agent_revision !== undefined); })),
         summary: os.updates.summary.handler(({ input, context: { ctx } }) => run(() => ctx.deps.updates.summarize(input.updates ?? {}, input.target))),
     },
+    updateNotifications: {
+        list: os.updateNotifications.list.handler(({ input, context: { ctx } }) => run(async () => {
+            const scope = await updateNotificationScope(ctx, input.tab_id);
+            const frontendBuild = ctx.deps.updateNotifications.syncTabBuild(scope, input.loaded_build ?? null, ctx.deps.spa.buildId());
+            return { ...ctx.deps.updateNotifications.list(scope), frontend_build: frontendBuild };
+        })),
+        read: os.updateNotifications.read.handler(({ input, context: { ctx } }) => run(async () => {
+            const notification = ctx.deps.updateNotifications.read(await updateNotificationScope(ctx, input.tab_id), input.id);
+            if (!notification)
+                throw new HttpError(404, 'Update notification not found');
+            return notification;
+        })),
+        dismiss: os.updateNotifications.dismiss.handler(({ input, context: { ctx } }) => run(async () => {
+            const result = ctx.deps.updateNotifications.dismiss(await updateNotificationScope(ctx, input.tab_id), input.id);
+            if (result === 'acknowledgement_required')
+                throw new HttpError(409, 'This notification requires acknowledgement before it can be dismissed');
+            return { ok: true };
+        })),
+        clear: os.updateNotifications.clear.handler(({ input, context: { ctx } }) => run(async () => {
+            const scope = await updateNotificationScope(ctx, input.tab_id);
+            const frontendBuild = ctx.deps.updateNotifications.syncTabBuild(scope, input.loaded_build ?? null, ctx.deps.spa.buildId());
+            return { ...ctx.deps.updateNotifications.clear(scope), frontend_build: frontendBuild };
+        })),
+        cancel: os.updateNotifications.cancel.handler(({ input, context: { ctx } }) => run(async () => {
+            const notification = ctx.deps.updateNotifications.cancelUpdate(await updateNotificationScope(ctx), input.id);
+            if (!notification)
+                throw new HttpError(404, 'Awaiting update notification not found');
+            return notification;
+        })),
+        action: os.updateNotifications.action.handler(({ input, context: { ctx } }) => run(async () => {
+            const notification = ctx.deps.updateNotifications.action(await updateNotificationScope(ctx, input.tab_id), input.id, input.action_id);
+            if (!notification)
+                throw new HttpError(404, 'Notification action not found');
+            return notification;
+        })),
+    },
     transcribeCapability: os.transcribeCapability.handler(({ context: { ctx } }) => run(async () => {
         const sidecar = ctx.deps.sidecar();
         if (!sidecar)