@north-light/api 0.3.561 → 0.3.563

package/dist/api/client.d.ts

@@ -1,4 +1,5 @@
 import { ApiError } from './errors.js';
+import type { GitCredentialDTO, GitCredentialRequest, StartBundleDTO } from './dto/execution-start.js';
 import type { ChargeListDTO, SpendLimitListDTO, SpendLimitRemovedDTO, SpendLimitSetRequest, LimitDTO } from './dto/charges.js';
 import type { AppLimitsChangeDTO, LimitsDTO, SetAppLimitsRequest } from './dto/limits.js';
 import type { DaemonAdmitDTO, DaemonRestartDTO, DueDTO, HealthDTO, ReadyDTO, MigrateStateDTO, MigrateStateRequest, StatusDTO } from './dto/health.js';
@@ -8,7 +9,7 @@ import type { NodeOutcomeResponseDTO, OutcomeDeliveryDTO, RegisterOutcomeDeliver
 import type { AnalyticsDTO, AnalyticsQuery, MemoryReadsRequestDTO } from './dto/analytics.js';
 import type { NodeEventsQuery } from './dto/node-events.js';
 import type { BrokerSignalLineDTO } from './dto/broker-signals.js';
-import type { NodeLogAppendRequest, NodeLogAppendResultDTO, NodeTelemetryRecordRequest, NodeRecapRecordRequest, NodeMessageBodyDTO, NodePushedFinalRequest, NodePushedFinalResultDTO } from './dto/node-records.js';
+import type { NodeLogAppendRequest, NodeLogAppendResultDTO, NodeTelemetryRecordRequest, NodeSummariesRecordRequest, NodeRecapRecordRequest, NodeMessageBodyDTO, NodeAttachmentsDTO, NodePushedFinalRequest, NodePushedFinalResultDTO } from './dto/node-records.js';
 import type { InterruptResultDTO, MessageResultDTO, SendMessageRequest } from './dto/messages.js';
 import type { CreateStructuredRequest, CreateStructuredRequestResponse, StructuredRequestDTO } from './dto/structured-requests.js';
 import type { PushReportRequest, PushReportResultDTO, ReportDTO, ReportsQuery, SubmitResultDTO, SubmitResultRequest } from './dto/reports.js';
@@ -24,16 +25,17 @@ import type { BashRunDTO, BashRunParams } from './dto/bash.js';
 import type { EdgesDTO, EdgesQuery, ObjectListDTO, ObjectListRequest, ObjectReadDTO, ObjectReadQuery, ObjectSearchDTO, ObjectSearchRequest, UnwatchQuery, UnwatchResultDTO, WatchRequest, WatchResultDTO } from './dto/objects.js';
 import type { DocDeletedDTO, DocEditRequest, DocEditedDTO, DocHistoryDTO, DocHistoryQuery, DocLintDTO, DocLintRequest, DocMoveRequest, DocMovedDTO, DocWriteRequest, DocWrittenDTO, ReconcilePackagesDTO, DocumentAccessDTO } from './dto/docs.js';
 import type { PluginAppTokenDTO, PluginCallHeadersDTO, PluginCallHeadersRequestDTO } from './dto/plugins.js';
-import type { BackgroundedJobDTO, BackgroundedJobRequest, DeliveryDryRunRequest, DeliveryRequest, DeliveryResponse } from './dto/delivery.js';
+import type { BackgroundedJobDTO, BackgroundedJobRequest, JobPatchRequest, JobReportRequest, DeliveryDryRunRequest, DeliveryRequest, DeliveryResponse } from './dto/delivery.js';
 import type { ChatInventoryDTO, ProspectiveChatInventoryDTO, ProspectiveChatInventoryQuery } from './dto/chat-inventory.js';
-import type { CredentialRemovalResultDTO, CredentialResultDTO, InstallCredentialRequest, CompleteModelAuthFlowRequest, ModelAuthFlowCompletedDTO, ModelAuthFlowDTO, ModelAuthFlowStartedDTO, ModelAuthListDTO, ModelAuthReadinessDTO, ModelAuthReadinessQuery, StartModelAuthFlowRequest } from './dto/modelauth.js';
+import type { PersonSettingsDTO, PutPersonSettingsRequest } from './dto/settings.js';
+import type { CredentialRemovalResultDTO, CredentialResultDTO, InstallCredentialRequest, CompleteModelAuthFlowRequest, ModelAuthFlowCompletedDTO, ModelAuthFlowDTO, ModelAuthFlowStartedDTO, ModelAuthListDTO, ModelAuthProviderStatusDTO, PatchManagedAccountRequest, ModelAuthReadinessDTO, ModelAuthReadinessQuery, StartModelAuthFlowRequest } from './dto/modelauth.js';
 import type { CancelReviewRequest, CreateReviewRequest, ListReviewsQuery, ReviewCancelResultDTO, ReviewDocumentBaseDTO, ReviewDTO, ReviewListDTO, ReviewSubmitResultDTO } from './dto/reviews.js';
 import type { CreateReviewCommentRequest, EditReviewCommentRequest, ListReviewCommentsQuery, ReadReviewCommentEventsQuery, ReviewCommentActionRequest, ReviewCommentDetailDTO, ReviewCommentEventsDTO, ReviewCommentForkDTO, ReviewCommentListDTO, ReviewCommentMutationDTO, ReviewCommentRangeBatchRequest, ReviewCommentRangeBatchResultDTO } from './dto/review-comments.js';
 import type { CancelInboxTicketRequest, CanceledTicketResultDTO, InboxListDTO, InboxPageDTO, InboxPageHistoryDTO, PageTicketSummaryDTO, InboxPageResponseDTO, InboxTicketIdDTO, PageFeedbackResolutionDTO, PageResponsesDTO, PageTicketResultDTO, RespondInboxPageRequest } from './dto/inbox.js';
 import type { CreateHumanRequestDTO, CreateHumanRequestRequest, HumanRequestDTO, HumanRequestIdDTO, ReplaceHumanRequestRequest, RespondHumanRequestRequest, SettleHumanRequestRequest, PageComponentListDTO } from './dto/human-requests.js';
 import type { AttentionCountsDTO, AttentionDTO, DashboardDTO, DashboardQuery, HistoryGrepQuery, HistoryGrepResultDTO, HistoryReadQuery, HistoryStatsQuery, HistoryStatsResultDTO, HistoryReadResultDTO, HistorySearchQuery, HistorySearchResultDTO, GraphDTO, PruneRequest, PruneResultDTO, LiveRootsDTO, RosterDTO, SnapshotDTO } from './dto/canvas.js';
 import type { AbandonWorktreeRequest, AbandonWorktreeResultDTO, CloseWorktreeResultDTO, QuarantinedWorktreeDTO, SpaceListDTO } from './dto/worktree.js';
-import type { BrokerExtensionStateDTO, BrokerExecutionRequest, BrokerGeneratedNameRequest, BrokerGeneratedNameResultDTO, BrokerModelCommitRequest, BrokerModelCommitResultDTO, BrokerParkActivityResultDTO, BrokerParkCompleteRequest, BrokerPersonaAckRequest, BrokerPersonaAckResultDTO, BrokerSessionBoundRequest, BrokerSessionBoundResultDTO, BrokerSettleDirective, BrokerSettleRequest, BrokerTelemetryRequest } from './dto/broker-ops.js';
+import type { BrokerExtensionStateDTO, BrokerExecutionRequest, BrokerGeneratedNameRequest, BrokerGoalRequest, BrokerGoalResultDTO, BrokerStructuredRequestDTO, BrokerGeneratedNameResultDTO, BrokerModelCommitRequest, BrokerModelCommitResultDTO, BrokerParkActivityResultDTO, BrokerParkCompleteRequest, BrokerPersonaAckRequest, BrokerPersonaAckResultDTO, BrokerSessionBoundRequest, BrokerSessionBoundResultDTO, BrokerSettleDirective, BrokerSettleRequest, BrokerTelemetryRequest } from './dto/broker-ops.js';
 import type { AcknowledgeMailRequest, AcknowledgeMailResultDTO, ClaimMailRequest, ClaimMailResultDTO } from './dto/mail.js';
 import type { BrokerFaultInputDTO, BrokerFaultRequest, BrokerFaultResultDTO, BrokerProviderRetryRequest, BrokerProviderRetryResultDTO, BrokerTurnRequest, BrokerTurnResultDTO, NodeFaultClearResultDTO, RecoveryStateDTO } from './dto/recovery.js';
 export interface CrtrClientOptions {
@@ -141,8 +143,12 @@ export declare class CrtrClient {
     migrateState(req: MigrateStateRequest): Promise<MigrateStateDTO>;
     appendNodeLog(id: string, req: NodeLogAppendRequest): Promise<NodeLogAppendResultDTO>;
     putNodeTelemetry(id: string, req: NodeTelemetryRecordRequest): Promise<void>;
+    putNodeSummaries(id: string, req: NodeSummariesRecordRequest): Promise<void>;
     putNodeRecap(id: string, req: NodeRecapRecordRequest): Promise<void>;
     readNodeInboxReport(id: string, ref: string, executionId: string): Promise<NodeMessageBodyDTO>;
+    listNodeAttachments(id: string): Promise<NodeAttachmentsDTO>;
+    /** The bytes of one of the run's attachments (`GET /v1/nodes/:id/attachments/:sha256`). */
+    readNodeAttachment(id: string, sha256: string): Promise<Uint8Array>;
     readNodePassiveMessage(id: string, ref: string): Promise<NodeMessageBodyDTO>;
     nodePushedFinal(id: string, req: NodePushedFinalRequest): Promise<NodePushedFinalResultDTO>;
     createNode(req: CreateNodeRequest): Promise<NodeDetailDTO>;
@@ -175,6 +181,10 @@ export declare class CrtrClient {
     disarmOutcomeDelivery(id: string): Promise<void>;
     listBashJobs(id: string): Promise<BashJobStatusDTO[]>;
     stopBashJob(id: string, jobId: string): Promise<BashJobStopResultDTO>;
+    /** Claim, quiet or re-arm one running job (see `JobPatchRequest`). */
+    patchBashJob(id: string, jobId: string, request: JobPatchRequest): Promise<void>;
+    /** The broker's report on a job it runs. */
+    reportBashJob(id: string, jobId: string, request: JobReportRequest): Promise<void>;
     sendMessage(id: string, req: SendMessageRequest): Promise<MessageResultDTO>;
     /** First-class interrupt (the human Esc): cancels pending undelivered
      *  human-send inbox entries, then aborts a live in-flight turn. NEVER
@@ -187,6 +197,7 @@ export declare class CrtrClient {
     relaunchRoot(id: string): Promise<RelaunchRootResultDTO>;
     bindBrokerSession(id: string, req: BrokerSessionBoundRequest): Promise<BrokerSessionBoundResultDTO>;
     settleBroker(id: string, req: BrokerSettleRequest): Promise<BrokerSettleDirective>;
+    postBrokerIdle(id: string, req: BrokerExecutionRequest): Promise<void>;
     completeBrokerPark(id: string, req: BrokerParkCompleteRequest): Promise<BrokerSettleDirective>;
     recordBrokerParkActivity(id: string, req: BrokerExecutionRequest): Promise<BrokerParkActivityResultDTO>;
     recordBrokerTelemetry(id: string, req: BrokerTelemetryRequest): Promise<void>;
@@ -202,7 +213,13 @@ export declare class CrtrClient {
         preserve_episode?: boolean;
     }): Promise<NodeFaultClearResultDTO>;
     commitBrokerModel(id: string, req: BrokerModelCommitRequest): Promise<BrokerModelCommitResultDTO>;
+    /** The sandbox's start bundle for an execution of the calling node. */
+    executionStart(executionId: string): Promise<StartBundleDTO>;
+    /** A GitHub token limited to the environment's recipe repositories, for the calling node's environment. */
+    gitCredential(environmentId: string, req: GitCredentialRequest): Promise<GitCredentialDTO>;
     brokerExtensionState(id: string): Promise<BrokerExtensionStateDTO>;
+    brokerStructuredRequest(id: string): Promise<BrokerStructuredRequestDTO>;
+    captureBrokerGoal(id: string, req: BrokerGoalRequest): Promise<BrokerGoalResultDTO>;
     commitBrokerGeneratedName(id: string, req: BrokerGeneratedNameRequest): Promise<BrokerGeneratedNameResultDTO>;
     commitBrokerPersonaAck(id: string, req: BrokerPersonaAckRequest): Promise<BrokerPersonaAckResultDTO>;
     closeNode(id: string, req?: CloseRequest): Promise<CloseResultDTO>;
@@ -357,10 +374,16 @@ export declare class CrtrClient {
     updateProfileMetadata(name: string, req: UpdateProfileMetadataRequest): Promise<ProfileDTO>;
     /** Force-delete or detach one profile by exact id or unique name. */
     deleteProfile(name: string, req: DeleteProfileRequest): Promise<DeleteProfileResultDTO>;
+    getSettings(): Promise<PersonSettingsDTO>;
+    putSettings(req: PutPersonSettingsRequest): Promise<PersonSettingsDTO>;
     listModelAuth(): Promise<ModelAuthListDTO>;
     getModelAuthReadiness(query?: ModelAuthReadinessQuery): Promise<ModelAuthReadinessDTO>;
     installCredential(provider: string, req: InstallCredentialRequest): Promise<CredentialResultDTO>;
     removeCredential(provider: string): Promise<CredentialRemovalResultDTO>;
+    /** Rename a managed account and/or make it the preferred (first) one; answers the provider's sanitized status. */
+    patchModelAuthAccount(provider: string, label: string, req: PatchManagedAccountRequest): Promise<ModelAuthProviderStatusDTO>;
+    /** Remove one managed account; the provider's other accounts stay. */
+    removeModelAuthAccount(provider: string, label: string): Promise<ModelAuthProviderStatusDTO>;
     /** `model_auth.start` — the daemon runs the vendor OAuth; the caller only shows `url`. */
     startModelAuth(req: StartModelAuthFlowRequest): Promise<ModelAuthFlowStartedDTO>;
     /** `model_auth.complete` — hand the daemon the code the vendor showed. */

package/dist/api/client.js

@@ -150,12 +150,25 @@ export class CrtrClient {
     async putNodeTelemetry(id, req) {
         await this.request('PUT', routes.nodeTelemetry(this.nodePath(id)), req);
     }
+    async putNodeSummaries(id, req) {
+        await this.request('PUT', routes.nodeSummaries(this.nodePath(id)), req);
+    }
     async putNodeRecap(id, req) {
         await this.request('PUT', routes.nodeRecap(this.nodePath(id)), req);
     }
     readNodeInboxReport(id, ref, executionId) {
         return this.request('GET', withQuery(routes.nodeInboxReport(this.nodePath(id)), { ref, execution_id: executionId }));
     }
+    listNodeAttachments(id) {
+        return this.request('GET', routes.nodeAttachments(this.nodePath(id)));
+    }
+    /** The bytes of one of the run's attachments (`GET /v1/nodes/:id/attachments/:sha256`). */
+    async readNodeAttachment(id, sha256) {
+        const response = await this.send('GET', routes.nodeAttachment(this.nodePath(id), sha256));
+        if (!response.ok)
+            await parse(response);
+        return new Uint8Array(await response.arrayBuffer());
+    }
     readNodePassiveMessage(id, ref) {
         return this.request('GET', withQuery(routes.nodePassiveMessage(this.nodePath(id)), { ref }));
     }
@@ -266,6 +279,14 @@ export class CrtrClient {
     stopBashJob(id, jobId) {
         return this.request('DELETE', routes.nodeJob(this.nodePath(id), this.jobPath(jobId)));
     }
+    /** Claim, quiet or re-arm one running job (see `JobPatchRequest`). */
+    async patchBashJob(id, jobId, request) {
+        await this.request('PATCH', routes.nodeJob(this.nodePath(id), this.jobPath(jobId)), request);
+    }
+    /** The broker's report on a job it runs. */
+    async reportBashJob(id, jobId, request) {
+        await this.request('POST', routes.nodeJobReport(this.nodePath(id), this.jobPath(jobId)), request);
+    }
     sendMessage(id, req) {
         return this.request('POST', routes.nodeMessages(this.nodePath(id)), req);
     }
@@ -296,6 +317,9 @@ export class CrtrClient {
     settleBroker(id, req) {
         return this.request('POST', routes.nodeBrokerSettle(this.nodePath(id)), req);
     }
+    async postBrokerIdle(id, req) {
+        await this.request('POST', routes.nodeBrokerIdle(this.nodePath(id)), req);
+    }
     completeBrokerPark(id, req) {
         return this.request('POST', routes.nodeBrokerParkComplete(this.nodePath(id)), req);
     }
@@ -338,9 +362,23 @@ export class CrtrClient {
     commitBrokerModel(id, req) {
         return this.request('POST', routes.nodeBrokerModel(this.nodePath(id)), req);
     }
+    /** The sandbox's start bundle for an execution of the calling node. */
+    executionStart(executionId) {
+        return this.request('GET', routes.executionStart(executionId));
+    }
+    /** A GitHub token limited to the environment's recipe repositories, for the calling node's environment. */
+    gitCredential(environmentId, req) {
+        return this.request('POST', routes.environmentGitCredential(environmentId), req);
+    }
     brokerExtensionState(id) {
         return this.request('GET', routes.nodeBrokerExtensionState(this.nodePath(id)));
     }
+    brokerStructuredRequest(id) {
+        return this.request('GET', routes.nodeBrokerStructuredRequest(this.nodePath(id)));
+    }
+    captureBrokerGoal(id, req) {
+        return this.request('POST', routes.nodeBrokerGoal(this.nodePath(id)), req);
+    }
     commitBrokerGeneratedName(id, req) {
         return this.request('POST', routes.nodeBrokerGeneratedName(this.nodePath(id)), req);
     }
@@ -632,6 +670,13 @@ export class CrtrClient {
     deleteProfile(name, req) {
         return this.request('DELETE', routes.profile(name), req);
     }
+    // Person settings
+    getSettings() {
+        return this.request('GET', routes.settings());
+    }
+    putSettings(req) {
+        return this.request('PUT', routes.settings(), req);
+    }
     // Model auth
     listModelAuth() {
         return this.request('GET', routes.modelAuths());
@@ -645,6 +690,14 @@ export class CrtrClient {
     removeCredential(provider) {
         return this.request('DELETE', routes.modelAuth(provider));
     }
+    /** Rename a managed account and/or make it the preferred (first) one; answers the provider's sanitized status. */
+    patchModelAuthAccount(provider, label, req) {
+        return this.request('PATCH', routes.modelAuthAccount(provider, label), req);
+    }
+    /** Remove one managed account; the provider's other accounts stay. */
+    removeModelAuthAccount(provider, label) {
+        return this.request('DELETE', routes.modelAuthAccount(provider, label));
+    }
     /** `model_auth.start` — the daemon runs the vendor OAuth; the caller only shows `url`. */
     startModelAuth(req) {
         return this.request('POST', routes.modelAuthFlows(), req, { timeout: 30_000 + this.timeoutMs });

package/dist/api/contract.d.ts

@@ -1,5 +1,5 @@
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export declare const CONTRACT_LEVEL = "1.34";
+export declare const CONTRACT_LEVEL = "1.35";
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export declare const REQUIRED_CONTRACT_HEADER = "Crouter-Required-Contract";
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/contract.js

@@ -12,7 +12,7 @@
 //
 // PURITY (spec §3.1): Node built-ins + `src/api/*` only.
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export const CONTRACT_LEVEL = '1.34';
+export const CONTRACT_LEVEL = '1.35';
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export const REQUIRED_CONTRACT_HEADER = 'Crouter-Required-Contract';
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/dto/bash-jobs.d.ts

@@ -7,7 +7,11 @@ export interface BashJobStatusDTO {
     purpose: string | null;
     started_at: IsoTime;
     elapsed_ms: number;
-    /** Persisted supervisor process group, or null for legacy jobs. */
+    /** Blob prefix of the job's output chunks. */
+    output_key: string;
+    /** ISO time the job is canceled unless claimed, or null for a job that runs to completion. */
+    deadline_at: IsoTime | null;
+    /** Reported supervisor process group, or null before the first report. */
     pgid: number | null;
     /** Whether the persisted process group currently exists. */
     pgid_alive: boolean;

package/dist/api/dto/broker-ops.d.ts

@@ -26,7 +26,6 @@ export interface BrokerExecutionRequest {
 }
 export interface BrokerSettleRequest extends BrokerExecutionRequest {
     stopReason: string;
-    backgroundJobsRunning: boolean;
     pushedFinal: boolean;
 }
 /** `POST /v1/nodes/{id}/broker/telemetry` body. Tokens are cumulative within
@@ -47,6 +46,11 @@ export type BrokerSettleDirective = {
     prompt: string;
 } | {
     action: 'stay_dormant';
+}
+/** Blaxel only: the broker stays running with nothing holding it. It posts `broker/idle` and closes its signal stream so
+ *  the sandbox freezes with it; a wake thaws it. */
+ | {
+    action: 'stay_resident';
 } | {
     action: 'shutdown';
 };
@@ -122,6 +126,8 @@ export type BrokerExtensionSubjectDTO = NodeSubjectDTO;
 export interface BrokerExtensionStateDTO {
     node: BrokerExtensionNodeDTO;
     warm_spare: boolean;
+    /** Latest already-rendered situational card, or null. */
+    situational_card: string | null;
     ancestors: BrokerExtensionNodeDTO[];
     children: BrokerExtensionNodeDTO[];
     fork_source: BrokerExtensionNodeDTO | null;
@@ -150,6 +156,24 @@ export type BrokerGeneratedNameRequest = BrokerExecutionRequest & ({
         kind: string;
     };
 });
+/** `POST /v1/nodes/{id}/broker/goal` body: a bare root's first message. The server stores it as the
+ * node's initial prompt only when that is still empty. */
+export interface BrokerGoalRequest extends BrokerExecutionRequest {
+    text: string;
+}
+/** `GET /v1/nodes/{id}/broker/structured-request`: the node's pending structured-output request, or null. */
+export interface BrokerStructuredRequestDTO {
+    request: {
+        request_id: string;
+        mode: 'terminal' | 'oneoff';
+        schema: Record<string, unknown>;
+        requestMessageId?: string;
+    } | null;
+}
+export interface BrokerGoalResultDTO {
+    /** True when this call stored the goal; false when the node already had one or the text was blank. */
+    captured: boolean;
+}
 /** A daemon-selected Pi editor-label directive. No handler calls a broker.
  * `description`/`title`/`icon` are the values as STORED (an empty title or icon
  * is left unset), so the broker announces what the node now carries rather than

package/dist/api/dto/charges.d.ts

@@ -1,6 +1,6 @@
 export type ChargeKindDTO = 'model' | 'tool' | 'sandbox' | 'job' | 'storage' | 'take';
 export type FundingDTO = 'bill' | 'subscription' | 'key' | 'endpoint' | 'take' | 'legacy';
-export type LimitSourceDTO = 'grant_sync' | 'person' | 'operator';
+export type LimitSourceDTO = 'grant_sync' | 'person' | 'operator' | 'billing' | 'card';
 /** One charge row. Every field of the ledger's `charges` table. */
 export interface ChargeDTO {
     /** `receipt:<provider>:<receipt id>` for a tool charge; `legacy:…` for a migrated aggregate; otherwise a fresh id. */
@@ -37,11 +37,18 @@ export interface ChargeDTO {
         limit: string;
         reason: string;
     } | null;
+    /** The principal Northlight invoices for this row; null when none or house-paid. */
+    account: string | null;
+    /** What Northlight bills for this row; null on a row it does not bill. */
+    billed_usd: number | null;
 }
 /** One limit row. A null filter means any. */
 export interface LimitDTO {
     id: string;
-    payer: string;
+    /** Null when `account` is set. */
+    payer: string | null;
+    /** Counts the account's own charges and those of the apps it holds. */
+    account: string | null;
     funding: FundingDTO | null;
     grantee: string | null;
     provider: string | null;

package/dist/api/dto/delivery.d.ts

@@ -61,10 +61,34 @@ export interface DeliveryResponse {
     names?: string[];
     plan?: unknown;
 }
+/** The broker backgrounded a command: the job row's start. `deadline_at_ms` arms the claim-or-cancel deadline of an automatic handoff. */
 export interface BackgroundedJobRequest {
     command: string;
-    job_dir: string;
-    log_path: string;
+    purpose?: string | null;
+    deadline_at_ms?: number | null;
+}
+/** What the broker's reporter says about a job it runs, any subset: process identity, activity sample, exit (`vanished` when the process is gone without an exit record), and one output chunk (`seq` = chunk index, 64 KiB aligned; a growing last chunk is sent again whole). */
+export interface JobReportRequest {
+    expected_execution_id: string;
+    pgid?: number;
+    pgid_identity?: string;
+    exit_code?: number;
+    vanished?: boolean;
+    activity?: {
+        last_ms: number;
+        sampled_ms: number;
+        files: string[];
+    };
+    output?: {
+        seq: number;
+        data_base64: string;
+    };
+}
+/** The node's change to a running job: declare it an expected wait, or arm (`deadline_at_ms`) or drop (`keep`) its cancel deadline. */
+export interface JobPatchRequest {
+    quiet_ok?: true;
+    deadline_at_ms?: number;
+    keep?: true;
 }
 export interface BackgroundedJobDTO {
     id: string;

package/dist/api/dto/execution-start.d.ts

@@ -0,0 +1,57 @@
+export interface StartBundleRepositoryDTO {
+    name: string;
+    github_full_name: string;
+    default_branch: string;
+}
+export interface StartBundleRecipeDTO {
+    revision: number;
+    repositories: StartBundleRepositoryDTO[];
+    setup_script: string | null;
+    pi_packages: string | null;
+}
+export interface StartBundlePluginDTO {
+    name: string;
+    source: {
+        marketplace: {
+            url: string | null;
+            ref: string | null;
+        };
+    } | {
+        path: string;
+    };
+    version: string | null;
+}
+/** `GET /v1/executions/{execution_id}/start`. Read-only; safe to repeat. */
+export interface StartBundleDTO {
+    /** The execution row's `launch_json`, parsed. */
+    launch: unknown;
+    /** `environment_id` is the environment the node runs in: the id `POST /v1/environments/{id}/git-credential` takes. */
+    node: {
+        id: string;
+        app: string;
+        cwd: string;
+        profile: string | null;
+        isolated: boolean;
+        environment_id: string;
+    };
+    /** Null when the node's environment has no recipe. */
+    recipe: StartBundleRecipeDTO | null;
+    /** The person's GitHub login and noreply address from the GitHub app; null when the environment has no recipe repositories or the person has no GitHub link. */
+    git_identity: {
+        name: string;
+        email: string;
+    } | null;
+    plugins_revision: number;
+    plugins: StartBundlePluginDTO[];
+}
+/** `POST /v1/environments/{id}/git-credential` body: what git asked for. */
+export interface GitCredentialRequest {
+    host: string;
+    path?: string;
+}
+/** The answer git's credential helper prints. */
+export interface GitCredentialDTO {
+    username: string;
+    password: string;
+    expiry: string;
+}

package/dist/api/dto/execution-start.js

@@ -0,0 +1,2 @@
+// The start bundle a sandbox fetches with its node token, and the git credential answer for one environment.
+export {};

package/dist/api/dto/modelauth.d.ts

@@ -87,6 +87,11 @@ export interface ModelAuthReadinessDTO {
     reason?: 'invalid_grant';
     rate_limited_until?: string | null;
 }
+/** `PATCH /v1/model-auth/{provider}/accounts/{label}` — `label` renames the account; `preferred` moves it to the front of the pool. */
+export interface PatchManagedAccountRequest {
+    label?: string;
+    preferred?: true;
+}
 /** `DELETE /v1/model-auth/{provider}` — all user credentials removed for one provider. */
 export interface CredentialRemovalResultDTO {
     provider: string;

package/dist/api/dto/node-records.d.ts

@@ -16,6 +16,13 @@ export interface NodeTelemetryRecordRequest {
     updated_at: string;
     expected_execution_id: string;
 }
+/** `PUT /v1/nodes/{id}/records/summaries` body: the broker's generated tool-group summaries and consolidated
+ * turn replies, each a whole-record replacement keyed as the broker keeps them. An omitted record is left as stored. */
+export interface NodeSummariesRecordRequest {
+    tool_summaries?: Record<string, unknown>;
+    turn_replies?: Record<string, unknown>;
+    expected_execution_id: string;
+}
 /** `PUT /v1/nodes/{id}/records/recap` body. */
 export interface NodeRecapRecordRequest {
     briefing: string;
@@ -33,3 +40,12 @@ export interface NodePushedFinalRequest {
 export interface NodePushedFinalResultDTO {
     pushedFinal: boolean;
 }
+/** One file of a run's attachments: where the broker puts it (the path the run's prompt names) and its content hash. */
+export interface NodeAttachmentDTO {
+    path: string;
+    sha256: string;
+}
+/** `GET /v1/nodes/{id}/attachments` result: every upload the node's run has fetched into the blob store. */
+export interface NodeAttachmentsDTO {
+    attachments: NodeAttachmentDTO[];
+}

package/dist/api/dto/objects.d.ts

@@ -80,7 +80,7 @@ export interface JobReadData {
     command: string;
     status: string;
     exit_code: number | null;
-    log_path: string;
+    output_key: string;
 }
 /** `data` of a person, app, repo or profile read. */
 export interface OwnerReadData {

package/dist/api/dto/reports.d.ts

@@ -62,9 +62,6 @@ export type SubmitResultRequest = {
 export interface SubmitResultDTO {
     /** Which request this answered: `terminal` finished the node; `oneoff` left it working. */
     mode: 'terminal' | 'oneoff';
-    /** Absolute path of the recorded artifact: context/result.json for an
-     *  answered request, context/declined.json for a declined one. */
-    result_path: string;
     /** Present only when the request was declined. */
     declined?: DeclinedResultDTO;
     /** Ref of the report document pushed alongside the result, `<node-id>/reports/<name>`. */

package/dist/api/dto/run-events.d.ts

@@ -216,6 +216,12 @@ export interface NodeStatusChangedEvent extends RunEventBaseDTO {
     status: NodeStatusDTO | 'dormant';
     reason: string | null;
 }
+/** The node waits to start in an environment whose recipe image failed to build (D95). It stays dormant with its mail pending until a build succeeds. */
+export interface EnvironmentImageFailedEvent extends RunEventBaseDTO {
+    type: 'environment.image_failed';
+    environment_id: string;
+    error: string;
+}
 /** The run settled (the root only; a child's settlement is `child.settled`). */
 export interface NodeSettledEvent extends RunEventBaseDTO {
     type: 'node.settled';
@@ -224,7 +230,7 @@ export interface NodeSettledEvent extends RunEventBaseDTO {
     result?: unknown;
 }
 /** Every run event. Its `type`s are exactly the Vocabulary table of contract 2. */
-export type RunEvent = RunStartedEvent | NodeSystemPromptSetEvent | NodeMessageAcceptedEvent | NodeTurnStartedEvent | NodeThinkingDeltaEvent | NodeThinkingDoneEvent | NodeOutputTextDeltaEvent | NodeOutputTextDoneEvent | NodeToolCallStartedEvent | NodeToolCallCompletedEvent | NodeTurnCompletedEvent | RunUsageEvent | NodeReportPushedEvent | ChildStartedEvent | ChildSettledEvent | WaitingOnUserEvent | QuestionAnsweredEvent | NodeStatusChangedEvent | NodeSettledEvent;
+export type RunEvent = RunStartedEvent | NodeSystemPromptSetEvent | NodeMessageAcceptedEvent | NodeTurnStartedEvent | NodeThinkingDeltaEvent | NodeThinkingDoneEvent | NodeOutputTextDeltaEvent | NodeOutputTextDoneEvent | NodeToolCallStartedEvent | NodeToolCallCompletedEvent | NodeTurnCompletedEvent | RunUsageEvent | NodeReportPushedEvent | ChildStartedEvent | ChildSettledEvent | WaitingOnUserEvent | QuestionAnsweredEvent | NodeStatusChangedEvent | EnvironmentImageFailedEvent | NodeSettledEvent;
 export type RunEventType = RunEvent['type'];
 /** The run event of one `type`. */
 export type RunEventOf<T extends RunEventType> = Extract<RunEvent, {

package/dist/api/dto/settings.d.ts

@@ -0,0 +1,55 @@
+/** One scope's bookkeeping: marketplace and plugin check times, the last self check and the selected remote canvas. */
+export interface SettingsScopeStateDTO {
+    marketplaces: Record<string, {
+        last_updated?: string;
+    }>;
+    plugins: Record<string, {
+        last_updated?: string;
+        etag?: string;
+        checked_at?: string;
+    }>;
+    last_self_check?: string;
+    activeCanvas?: string | null;
+}
+/** A stored profile: its id and manifest (name, projects, pause time, default kind, grantee, environment, delivery limits, metadata). */
+export interface SettingsProfileDTO {
+    profileId: string;
+    manifest: object;
+}
+export interface PersonSettingsSnapshotDTO {
+    profiles: SettingsProfileDTO[];
+    /** Project directory → profile id. */
+    defaults: Record<string, string>;
+    /** Owner key (`user`, `profile:<id>`) → raw settings, with the `plugins` and `marketplaces` blocks rebuilt from their rows. */
+    settings: Record<string, Record<string, unknown>>;
+    state: Record<string, SettingsScopeStateDTO>;
+}
+export type SettingsOpDTO = {
+    op: 'settings.replace';
+    owner: string;
+    raw: Record<string, unknown>;
+    ifRevision: string;
+} | {
+    op: 'state.write';
+    owner: string;
+    state: SettingsScopeStateDTO;
+} | {
+    op: 'profile.insert';
+    profile: SettingsProfileDTO;
+} | {
+    op: 'profile.update';
+    profile: SettingsProfileDTO;
+} | {
+    op: 'profile.delete';
+    profileId: string;
+} | {
+    op: 'defaults.replace';
+    defaults: Record<string, string>;
+};
+export interface PersonSettingsDTO {
+    person: string;
+    snapshot: PersonSettingsSnapshotDTO;
+}
+export interface PutPersonSettingsRequest {
+    ops: SettingsOpDTO[];
+}

package/dist/api/dto/settings.js

@@ -0,0 +1,4 @@
+// Person settings DTOs: `GET /v1/settings` and `PUT /v1/settings` carry the person's profiles, scope settings, scope bookkeeping
+// and plugin/marketplace install list as one snapshot. A CLI or viewer process holds no database; it reads this snapshot once and
+// writes declarative ops back. A write whose `ifRevision` no longer matches the stored settings answers 409 `conflict`.
+export {};

package/dist/api/index.d.ts

@@ -18,6 +18,7 @@ export * from './dto/limits.js';
 export * from './dto/grants.js';
 export * from './dto/usage.js';
 export * from './dto/charges.js';
+export * from './dto/execution-start.js';
 export * from './dto/nodes.js';
 export * from './dto/node-outcomes.js';
 export * from './dto/node-events.js';
@@ -35,6 +36,7 @@ export * from './dto/config.js';
 export * from './dto/attach.js';
 export * from './dto/broker.js';
 export * from './dto/profiles.js';
+export * from './dto/settings.js';
 export * from './dto/modelauth.js';
 export * from './dto/model-config.js';
 export * from './dto/canvas.js';

package/dist/api/index.js

@@ -15,6 +15,7 @@ export * from './dto/limits.js';
 export * from './dto/grants.js';
 export * from './dto/usage.js';
 export * from './dto/charges.js';
+export * from './dto/execution-start.js';
 export * from './dto/nodes.js';
 export * from './dto/node-outcomes.js';
 export * from './dto/node-events.js';
@@ -32,6 +33,7 @@ export * from './dto/config.js';
 export * from './dto/attach.js';
 export * from './dto/broker.js';
 export * from './dto/profiles.js';
+export * from './dto/settings.js';
 export * from './dto/modelauth.js';
 export * from './dto/model-config.js';
 export * from './dto/canvas.js';