@opengeni/agent-proto 0.5.0 → 0.5.1-canary.0

package/src/gen/opengeni_agent.ts

@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-ts_proto. DO NOT EDIT.
 // versions:
 //   protoc-gen-ts_proto  v2.12.0
-//   protoc               v7.35.1
+//   protoc               v5.28.3
 // source: opengeni_agent.proto
 
 /* eslint-disable */
@@ -478,6 +478,71 @@ export function goingOfflineReasonToJSON(object: GoingOfflineReason): string {
   }
 }
 
+export enum AgentUpdateStage {
+  AGENT_UPDATE_STAGE_UNSPECIFIED = 0,
+  AGENT_UPDATE_STAGE_ACCEPTED = 1,
+  AGENT_UPDATE_STAGE_WAITING_FOR_IDLE = 2,
+  AGENT_UPDATE_STAGE_DOWNLOADING = 3,
+  AGENT_UPDATE_STAGE_VERIFYING = 4,
+  AGENT_UPDATE_STAGE_APPLYING = 5,
+  AGENT_UPDATE_STAGE_RESTARTING = 6,
+  AGENT_UPDATE_STAGE_FAILED = 7,
+}
+
+export function agentUpdateStageFromJSON(object: any): AgentUpdateStage {
+  switch (object) {
+    case 0:
+    case "AGENT_UPDATE_STAGE_UNSPECIFIED":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_UNSPECIFIED;
+    case 1:
+    case "AGENT_UPDATE_STAGE_ACCEPTED":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_ACCEPTED;
+    case 2:
+    case "AGENT_UPDATE_STAGE_WAITING_FOR_IDLE":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_WAITING_FOR_IDLE;
+    case 3:
+    case "AGENT_UPDATE_STAGE_DOWNLOADING":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_DOWNLOADING;
+    case 4:
+    case "AGENT_UPDATE_STAGE_VERIFYING":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_VERIFYING;
+    case 5:
+    case "AGENT_UPDATE_STAGE_APPLYING":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_APPLYING;
+    case 6:
+    case "AGENT_UPDATE_STAGE_RESTARTING":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_RESTARTING;
+    case 7:
+    case "AGENT_UPDATE_STAGE_FAILED":
+      return AgentUpdateStage.AGENT_UPDATE_STAGE_FAILED;
+    default:
+      throw new globalThis.Error("Unrecognized enum value " + object + " for enum AgentUpdateStage");
+  }
+}
+
+export function agentUpdateStageToJSON(object: AgentUpdateStage): string {
+  switch (object) {
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_UNSPECIFIED:
+      return "AGENT_UPDATE_STAGE_UNSPECIFIED";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_ACCEPTED:
+      return "AGENT_UPDATE_STAGE_ACCEPTED";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_WAITING_FOR_IDLE:
+      return "AGENT_UPDATE_STAGE_WAITING_FOR_IDLE";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_DOWNLOADING:
+      return "AGENT_UPDATE_STAGE_DOWNLOADING";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_VERIFYING:
+      return "AGENT_UPDATE_STAGE_VERIFYING";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_APPLYING:
+      return "AGENT_UPDATE_STAGE_APPLYING";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_RESTARTING:
+      return "AGENT_UPDATE_STAGE_RESTARTING";
+    case AgentUpdateStage.AGENT_UPDATE_STAGE_FAILED:
+      return "AGENT_UPDATE_STAGE_FAILED";
+    default:
+      throw new globalThis.Error("Unrecognized enum value " + object + " for enum AgentUpdateStage");
+  }
+}
+
 /** The logical byte stream an op-frame Data chunk belongs to. */
 export enum OpChannel {
   OP_CHANNEL_UNSPECIFIED = 0,
@@ -893,6 +958,20 @@ export interface Hello {
    * first connect.
    */
   resumeToken: string;
+  /**
+   * Lowercase sha256 of the exact running executable. The control plane uses
+   * this with agent_version to verify that a self-update's successor process is
+   * the build the signed manifest selected, not merely a process that reconnected.
+   */
+  binarySha256: string;
+  /**
+   * Durable proof written only after an explicitly requested update passed the
+   * signed-manifest, artifact signature+digest, atomic apply, and startup health
+   * gates. Repeating it on successor Hellos heals lost progress events.
+   */
+  completedUpdateOperationId: string;
+  completedUpdateTargetVersion: string;
+  completedUpdateBinarySha256: string;
 }
 
 /**
@@ -940,6 +1019,18 @@ export interface Capabilities {
    * one machine may host multiple Chrome profiles.
    */
   browserBridge: boolean;
+  /**
+   * The runner enforces the optional per-connection operation memory policy on
+   * every contained exec/git child. A control plane must fail closed rather than
+   * send a configured policy to a runner that does not advertise this bit.
+   */
+  operationResourcePolicy: boolean;
+  /**
+   * The runner additionally understands and enforces cpu_max_millicores. This is
+   * separate from the memory-policy bit so a newer control plane never sends a
+   * CPU quota that an older memory-only runner would ignore as an unknown field.
+   */
+  operationCpuQuota: boolean;
 }
 
 /**
@@ -1087,6 +1178,29 @@ export interface EnrollmentCredentials {
   relayToken: string;
 }
 
+/**
+ * Optional policy selected for one Connected Machine enrollment. Absence means
+ * the control plane requests no limit; there is deliberately no runner-created
+ * default quota. cpu_max_millicores is an exact, period-independent public ratio.
+ * The Linux runner selects a cgroup-v2 period within the kernel's 1ms..1s ABI so
+ * every positive uint32 millicore value is represented without rounding or
+ * silent loosening. Local runner policy and ancestor OS/cgroup policy may tighten
+ * these values but never loosen them.
+ */
+export interface OperationResourcePolicy {
+  memoryMaxBytes?: string | undefined;
+  memoryHighBytes?:
+    | string
+    | undefined;
+  /**
+   * Exact thousandths of one CPU (1000 = one CPU). Absence is unlimited.
+   * The runner preserves the kernel cpu.max period when it can represent this
+   * ratio exactly, otherwise minimally lengthens it to satisfy cgroup v2's 1 ms
+   * minimum quota/period and 1 s maximum period without rounding the ratio.
+   */
+  cpuMaxMillicores?: number | undefined;
+}
+
 export interface ExecRequest {
   /** argv[0] is the program; the agent does NOT shell-interpret unless `shell`. */
   command: string[];
@@ -1665,6 +1779,48 @@ export interface UpdateMayProceedResponse {
   activeSessions: number;
 }
 
+/**
+ * Control-plane initiated, process-global self-update. This wraps the same
+ * signed/minisign/sha256/atomic-rollback updater used by the local CLI; it is not
+ * a second installer. The request is idempotent by operation_id and fenced by
+ * the exact process subject plus its expected running version+digest.
+ */
+export interface AgentUpdateApplyRequest {
+  operationId: string;
+  targetVersion: string;
+  channel: string;
+  expectedCurrentVersion: string;
+  expectedCurrentSha256: string;
+  /**
+   * The deployment origin serving the signed channel manifest. The pinned
+   * minisign key remains the trust root; this only chooses the fetch origin.
+   */
+  releaseBaseUrl: string;
+}
+
+export interface AgentUpdateApplyResponse {
+  accepted: boolean;
+  operationId: string;
+  currentVersion: string;
+  currentSha256: string;
+  targetVersion: string;
+}
+
+/**
+ * Durable, secret-free progress from the authoritative runner. A successful
+ * RESTARTING event is still provisional: only the successor Hello completes the
+ * update in the control plane.
+ */
+export interface AgentUpdateProgress {
+  operationId: string;
+  targetVersion: string;
+  stage: AgentUpdateStage;
+  expectedBinarySha256: string;
+  errorCode: string;
+  retryable: boolean;
+  rolledBack: boolean;
+}
+
 /**
  * The terminal outcome of an op — carried in the Exit frame body AND echoed in
  * OpStatus once complete. Digests/totals are keyed by channel name
@@ -1866,7 +2022,8 @@ export interface OpProgress {
 
 /**
  * A server→runner cumulative ack + credit replenishment, published fire-and-forget
- * on the ack subject (`agent.<ws>.<id>.ack`). Best-effort, healed by repetition.
+ * on the exact process ack subject
+ * (`agent.<ws>.<id>.connection.<instance>.ack`). Best-effort, healed by repetition.
  */
 export interface OpAck {
   opId: string;
@@ -1896,11 +2053,16 @@ export interface OpAck {
 export interface ControlRequest {
   requestId: string;
   epoch: number;
+  /**
+   * Per-connection policy snapshot attached to the operation request. It lives
+   * on the envelope so request/reply Git and replayable OpStart share one
+   * contract. Absent means unrestricted by the control plane.
+   */
+  resourcePolicy: OperationResourcePolicy | undefined;
   op:
     | { $case: "ping"; ping: PingRequest }
     | { $case: "hello"; hello: Hello }
     | { $case: "resume"; resume: ResumeRequest }
-    | { $case: "exec"; exec: ExecRequest }
     | { $case: "fsRead"; fsRead: FsReadRequest }
     | { $case: "fsWrite"; fsWrite: FsWriteRequest }
     | { $case: "fsList"; fsList: FsListRequest }
@@ -1931,6 +2093,7 @@ export interface ControlRequest {
     | { $case: "browserControlEnsure"; browserControlEnsure: BrowserControlEnsureRequest }
     | { $case: "browserFramesOpen"; browserFramesOpen: BrowserFramesOpenRequest }
     | { $case: "computerFramesOpen"; computerFramesOpen: ComputerFramesOpenRequest }
+    | { $case: "agentUpdateApply"; agentUpdateApply: AgentUpdateApplyRequest }
     | undefined;
 }
 
@@ -1943,7 +2106,6 @@ export interface ControlResponse {
     | { $case: "ping"; ping: PingResponse }
     | { $case: "hello"; hello: HelloAck }
     | { $case: "resume"; resume: ResumeResponse }
-    | { $case: "exec"; exec: ExecResponse }
     | { $case: "fsRead"; fsRead: FsReadResponse }
     | { $case: "fsWrite"; fsWrite: FsWriteResponse }
     | { $case: "fsList"; fsList: FsListResponse }
@@ -1972,6 +2134,7 @@ export interface ControlResponse {
     | { $case: "browserControlEnsure"; browserControlEnsure: BrowserControlEnsureResponse }
     | { $case: "browserFramesOpen"; browserFramesOpen: BrowserFramesOpenResponse }
     | { $case: "computerFramesOpen"; computerFramesOpen: ComputerFramesOpenResponse }
+    | { $case: "agentUpdateApply"; agentUpdateApply: AgentUpdateApplyResponse }
     | undefined;
 }
 
@@ -1993,10 +2156,10 @@ export interface HelloAck {
  */
 export interface AgentEvent {
   agentId: string;
-  event:
-    | { $case: "heartbeat"; heartbeat: Heartbeat }
-    | { $case: "goingOffline"; goingOffline: GoingOffline }
-    | undefined;
+  event: { $case: "heartbeat"; heartbeat: Heartbeat } | { $case: "goingOffline"; goingOffline: GoingOffline } | {
+    $case: "agentUpdateProgress";
+    agentUpdateProgress: AgentUpdateProgress;
+  } | undefined;
 }
 
 /** The control plane's ack of an AgentEvent (e.g. a HeartbeatAck). */
@@ -2331,6 +2494,10 @@ function createBaseHello(): Hello {
     capabilities: undefined,
     updateChannel: "",
     resumeToken: "",
+    binarySha256: "",
+    completedUpdateOperationId: "",
+    completedUpdateTargetVersion: "",
+    completedUpdateBinarySha256: "",
   };
 }
 
@@ -2366,6 +2533,18 @@ export const Hello: MessageFns<Hello> = {
     if (message.resumeToken !== "") {
       writer.uint32(82).string(message.resumeToken);
     }
+    if (message.binarySha256 !== "") {
+      writer.uint32(90).string(message.binarySha256);
+    }
+    if (message.completedUpdateOperationId !== "") {
+      writer.uint32(98).string(message.completedUpdateOperationId);
+    }
+    if (message.completedUpdateTargetVersion !== "") {
+      writer.uint32(106).string(message.completedUpdateTargetVersion);
+    }
+    if (message.completedUpdateBinarySha256 !== "") {
+      writer.uint32(114).string(message.completedUpdateBinarySha256);
+    }
     return writer;
   },
 
@@ -2456,6 +2635,38 @@ export const Hello: MessageFns<Hello> = {
           message.resumeToken = reader.string();
           continue;
         }
+        case 11: {
+          if (tag !== 90) {
+            break;
+          }
+
+          message.binarySha256 = reader.string();
+          continue;
+        }
+        case 12: {
+          if (tag !== 98) {
+            break;
+          }
+
+          message.completedUpdateOperationId = reader.string();
+          continue;
+        }
+        case 13: {
+          if (tag !== 106) {
+            break;
+          }
+
+          message.completedUpdateTargetVersion = reader.string();
+          continue;
+        }
+        case 14: {
+          if (tag !== 114) {
+            break;
+          }
+
+          message.completedUpdateBinarySha256 = reader.string();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -2505,6 +2716,26 @@ export const Hello: MessageFns<Hello> = {
         : isSet(object.resume_token)
         ? globalThis.String(object.resume_token)
         : "",
+      binarySha256: isSet(object.binarySha256)
+        ? globalThis.String(object.binarySha256)
+        : isSet(object.binary_sha256)
+        ? globalThis.String(object.binary_sha256)
+        : "",
+      completedUpdateOperationId: isSet(object.completedUpdateOperationId)
+        ? globalThis.String(object.completedUpdateOperationId)
+        : isSet(object.completed_update_operation_id)
+        ? globalThis.String(object.completed_update_operation_id)
+        : "",
+      completedUpdateTargetVersion: isSet(object.completedUpdateTargetVersion)
+        ? globalThis.String(object.completedUpdateTargetVersion)
+        : isSet(object.completed_update_target_version)
+        ? globalThis.String(object.completed_update_target_version)
+        : "",
+      completedUpdateBinarySha256: isSet(object.completedUpdateBinarySha256)
+        ? globalThis.String(object.completedUpdateBinarySha256)
+        : isSet(object.completed_update_binary_sha256)
+        ? globalThis.String(object.completed_update_binary_sha256)
+        : "",
     };
   },
 
@@ -2540,6 +2771,18 @@ export const Hello: MessageFns<Hello> = {
     if (message.resumeToken !== "") {
       obj.resumeToken = message.resumeToken;
     }
+    if (message.binarySha256 !== "") {
+      obj.binarySha256 = message.binarySha256;
+    }
+    if (message.completedUpdateOperationId !== "") {
+      obj.completedUpdateOperationId = message.completedUpdateOperationId;
+    }
+    if (message.completedUpdateTargetVersion !== "") {
+      obj.completedUpdateTargetVersion = message.completedUpdateTargetVersion;
+    }
+    if (message.completedUpdateBinarySha256 !== "") {
+      obj.completedUpdateBinarySha256 = message.completedUpdateBinarySha256;
+    }
     return obj;
   },
 
@@ -2560,6 +2803,10 @@ export const Hello: MessageFns<Hello> = {
       : undefined;
     message.updateChannel = object.updateChannel ?? "";
     message.resumeToken = object.resumeToken ?? "";
+    message.binarySha256 = object.binarySha256 ?? "";
+    message.completedUpdateOperationId = object.completedUpdateOperationId ?? "";
+    message.completedUpdateTargetVersion = object.completedUpdateTargetVersion ?? "";
+    message.completedUpdateBinarySha256 = object.completedUpdateBinarySha256 ?? "";
     return message;
   },
 };
@@ -2577,6 +2824,8 @@ function createBaseCapabilities(): Capabilities {
     desktopUnavailableReason: "",
     opStream: false,
     browserBridge: false,
+    operationResourcePolicy: false,
+    operationCpuQuota: false,
   };
 }
 
@@ -2615,6 +2864,12 @@ export const Capabilities: MessageFns<Capabilities> = {
     if (message.browserBridge !== false) {
       writer.uint32(88).bool(message.browserBridge);
     }
+    if (message.operationResourcePolicy !== false) {
+      writer.uint32(96).bool(message.operationResourcePolicy);
+    }
+    if (message.operationCpuQuota !== false) {
+      writer.uint32(104).bool(message.operationCpuQuota);
+    }
     return writer;
   },
 
@@ -2713,6 +2968,22 @@ export const Capabilities: MessageFns<Capabilities> = {
           message.browserBridge = reader.bool();
           continue;
         }
+        case 12: {
+          if (tag !== 96) {
+            break;
+          }
+
+          message.operationResourcePolicy = reader.bool();
+          continue;
+        }
+        case 13: {
+          if (tag !== 104) {
+            break;
+          }
+
+          message.operationCpuQuota = reader.bool();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -2755,6 +3026,16 @@ export const Capabilities: MessageFns<Capabilities> = {
         : isSet(object.browser_bridge)
         ? globalThis.Boolean(object.browser_bridge)
         : false,
+      operationResourcePolicy: isSet(object.operationResourcePolicy)
+        ? globalThis.Boolean(object.operationResourcePolicy)
+        : isSet(object.operation_resource_policy)
+        ? globalThis.Boolean(object.operation_resource_policy)
+        : false,
+      operationCpuQuota: isSet(object.operationCpuQuota)
+        ? globalThis.Boolean(object.operationCpuQuota)
+        : isSet(object.operation_cpu_quota)
+        ? globalThis.Boolean(object.operation_cpu_quota)
+        : false,
     };
   },
 
@@ -2793,6 +3074,12 @@ export const Capabilities: MessageFns<Capabilities> = {
     if (message.browserBridge !== false) {
       obj.browserBridge = message.browserBridge;
     }
+    if (message.operationResourcePolicy !== false) {
+      obj.operationResourcePolicy = message.operationResourcePolicy;
+    }
+    if (message.operationCpuQuota !== false) {
+      obj.operationCpuQuota = message.operationCpuQuota;
+    }
     return obj;
   },
 
@@ -2814,6 +3101,8 @@ export const Capabilities: MessageFns<Capabilities> = {
     message.desktopUnavailableReason = object.desktopUnavailableReason ?? "";
     message.opStream = object.opStream ?? false;
     message.browserBridge = object.browserBridge ?? false;
+    message.operationResourcePolicy = object.operationResourcePolicy ?? false;
+    message.operationCpuQuota = object.operationCpuQuota ?? false;
     return message;
   },
 };
@@ -4226,6 +4515,110 @@ export const EnrollmentCredentials: MessageFns<EnrollmentCredentials> = {
   },
 };
 
+function createBaseOperationResourcePolicy(): OperationResourcePolicy {
+  return { memoryMaxBytes: undefined, memoryHighBytes: undefined, cpuMaxMillicores: undefined };
+}
+
+export const OperationResourcePolicy: MessageFns<OperationResourcePolicy> = {
+  encode(message: OperationResourcePolicy, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.memoryMaxBytes !== undefined) {
+      writer.uint32(8).uint64(message.memoryMaxBytes);
+    }
+    if (message.memoryHighBytes !== undefined) {
+      writer.uint32(16).uint64(message.memoryHighBytes);
+    }
+    if (message.cpuMaxMillicores !== undefined) {
+      writer.uint32(24).uint32(message.cpuMaxMillicores);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): OperationResourcePolicy {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const end = length === undefined ? reader.len : reader.pos + length;
+    const message = createBaseOperationResourcePolicy();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 8) {
+            break;
+          }
+
+          message.memoryMaxBytes = reader.uint64().toString();
+          continue;
+        }
+        case 2: {
+          if (tag !== 16) {
+            break;
+          }
+
+          message.memoryHighBytes = reader.uint64().toString();
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+
+          message.cpuMaxMillicores = reader.uint32();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+
+  fromJSON(object: any): OperationResourcePolicy {
+    return {
+      memoryMaxBytes: isSet(object.memoryMaxBytes)
+        ? globalThis.String(object.memoryMaxBytes)
+        : isSet(object.memory_max_bytes)
+        ? globalThis.String(object.memory_max_bytes)
+        : undefined,
+      memoryHighBytes: isSet(object.memoryHighBytes)
+        ? globalThis.String(object.memoryHighBytes)
+        : isSet(object.memory_high_bytes)
+        ? globalThis.String(object.memory_high_bytes)
+        : undefined,
+      cpuMaxMillicores: isSet(object.cpuMaxMillicores)
+        ? globalThis.Number(object.cpuMaxMillicores)
+        : isSet(object.cpu_max_millicores)
+        ? globalThis.Number(object.cpu_max_millicores)
+        : undefined,
+    };
+  },
+
+  toJSON(message: OperationResourcePolicy): unknown {
+    const obj: any = {};
+    if (message.memoryMaxBytes !== undefined) {
+      obj.memoryMaxBytes = message.memoryMaxBytes;
+    }
+    if (message.memoryHighBytes !== undefined) {
+      obj.memoryHighBytes = message.memoryHighBytes;
+    }
+    if (message.cpuMaxMillicores !== undefined) {
+      obj.cpuMaxMillicores = Math.round(message.cpuMaxMillicores);
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<OperationResourcePolicy>, I>>(base?: I): OperationResourcePolicy {
+    return OperationResourcePolicy.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<OperationResourcePolicy>, I>>(object: I): OperationResourcePolicy {
+    const message = createBaseOperationResourcePolicy();
+    message.memoryMaxBytes = object.memoryMaxBytes ?? undefined;
+    message.memoryHighBytes = object.memoryHighBytes ?? undefined;
+    message.cpuMaxMillicores = object.cpuMaxMillicores ?? undefined;
+    return message;
+  },
+};
+
 function createBaseExecRequest(): ExecRequest {
   return { command: [], shell: false, cwd: "", env: {}, stdin: new Uint8Array(0), timeoutMs: 0 };
 }
@@ -10524,85 +10917,77 @@ export const UpdateMayProceedResponse: MessageFns<UpdateMayProceedResponse> = {
   },
 };
 
-function createBaseOpExit(): OpExit {
+function createBaseAgentUpdateApplyRequest(): AgentUpdateApplyRequest {
   return {
-    exitCode: 0,
-    timedOut: false,
-    cancelled: false,
-    durationMs: "0",
-    digests: {},
-    totals: {},
-    failureCode: "",
-    failureDetail: {},
+    operationId: "",
+    targetVersion: "",
+    channel: "",
+    expectedCurrentVersion: "",
+    expectedCurrentSha256: "",
+    releaseBaseUrl: "",
   };
 }
 
-export const OpExit: MessageFns<OpExit> = {
-  encode(message: OpExit, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
-    if (message.exitCode !== 0) {
-      writer.uint32(8).int32(message.exitCode);
+export const AgentUpdateApplyRequest: MessageFns<AgentUpdateApplyRequest> = {
+  encode(message: AgentUpdateApplyRequest, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.operationId !== "") {
+      writer.uint32(10).string(message.operationId);
     }
-    if (message.timedOut !== false) {
-      writer.uint32(16).bool(message.timedOut);
+    if (message.targetVersion !== "") {
+      writer.uint32(18).string(message.targetVersion);
     }
-    if (message.cancelled !== false) {
-      writer.uint32(24).bool(message.cancelled);
+    if (message.channel !== "") {
+      writer.uint32(26).string(message.channel);
     }
-    if (message.durationMs !== "0") {
-      writer.uint32(32).uint64(message.durationMs);
+    if (message.expectedCurrentVersion !== "") {
+      writer.uint32(34).string(message.expectedCurrentVersion);
     }
-    globalThis.Object.entries(message.digests).forEach(([key, value]: [string, string]) => {
-      OpExit_DigestsEntry.encode({ key: key as any, value }, writer.uint32(42).fork()).join();
-    });
-    globalThis.Object.entries(message.totals).forEach(([key, value]: [string, string]) => {
-      OpExit_TotalsEntry.encode({ key: key as any, value }, writer.uint32(50).fork()).join();
-    });
-    if (message.failureCode !== "") {
-      writer.uint32(58).string(message.failureCode);
+    if (message.expectedCurrentSha256 !== "") {
+      writer.uint32(42).string(message.expectedCurrentSha256);
+    }
+    if (message.releaseBaseUrl !== "") {
+      writer.uint32(50).string(message.releaseBaseUrl);
     }
-    globalThis.Object.entries(message.failureDetail).forEach(([key, value]: [string, string]) => {
-      OpExit_FailureDetailEntry.encode({ key: key as any, value }, writer.uint32(66).fork()).join();
-    });
     return writer;
   },
 
-  decode(input: BinaryReader | Uint8Array, length?: number): OpExit {
+  decode(input: BinaryReader | Uint8Array, length?: number): AgentUpdateApplyRequest {
     const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
     const end = length === undefined ? reader.len : reader.pos + length;
-    const message = createBaseOpExit();
+    const message = createBaseAgentUpdateApplyRequest();
     while (reader.pos < end) {
       const tag = reader.uint32();
       switch (tag >>> 3) {
         case 1: {
-          if (tag !== 8) {
+          if (tag !== 10) {
             break;
           }
 
-          message.exitCode = reader.int32();
+          message.operationId = reader.string();
           continue;
         }
         case 2: {
-          if (tag !== 16) {
+          if (tag !== 18) {
             break;
           }
 
-          message.timedOut = reader.bool();
+          message.targetVersion = reader.string();
           continue;
         }
         case 3: {
-          if (tag !== 24) {
+          if (tag !== 26) {
             break;
           }
 
-          message.cancelled = reader.bool();
+          message.channel = reader.string();
           continue;
         }
         case 4: {
-          if (tag !== 32) {
+          if (tag !== 34) {
             break;
           }
 
-          message.durationMs = reader.uint64().toString();
+          message.expectedCurrentVersion = reader.string();
           continue;
         }
         case 5: {
@@ -10610,10 +10995,7 @@ export const OpExit: MessageFns<OpExit> = {
             break;
           }
 
-          const entry5 = OpExit_DigestsEntry.decode(reader, reader.uint32());
-          if (entry5.value !== undefined) {
-            message.digests[entry5.key] = entry5.value;
-          }
+          message.expectedCurrentSha256 = reader.string();
           continue;
         }
         case 6: {
@@ -10621,22 +11003,524 @@ export const OpExit: MessageFns<OpExit> = {
             break;
           }
 
-          const entry6 = OpExit_TotalsEntry.decode(reader, reader.uint32());
-          if (entry6.value !== undefined) {
-            message.totals[entry6.key] = entry6.value;
-          }
+          message.releaseBaseUrl = reader.string();
           continue;
         }
-        case 7: {
-          if (tag !== 58) {
-            break;
-          }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
 
-          message.failureCode = reader.string();
-          continue;
-        }
-        case 8: {
-          if (tag !== 66) {
+  fromJSON(object: any): AgentUpdateApplyRequest {
+    return {
+      operationId: isSet(object.operationId)
+        ? globalThis.String(object.operationId)
+        : isSet(object.operation_id)
+        ? globalThis.String(object.operation_id)
+        : "",
+      targetVersion: isSet(object.targetVersion)
+        ? globalThis.String(object.targetVersion)
+        : isSet(object.target_version)
+        ? globalThis.String(object.target_version)
+        : "",
+      channel: isSet(object.channel) ? globalThis.String(object.channel) : "",
+      expectedCurrentVersion: isSet(object.expectedCurrentVersion)
+        ? globalThis.String(object.expectedCurrentVersion)
+        : isSet(object.expected_current_version)
+        ? globalThis.String(object.expected_current_version)
+        : "",
+      expectedCurrentSha256: isSet(object.expectedCurrentSha256)
+        ? globalThis.String(object.expectedCurrentSha256)
+        : isSet(object.expected_current_sha256)
+        ? globalThis.String(object.expected_current_sha256)
+        : "",
+      releaseBaseUrl: isSet(object.releaseBaseUrl)
+        ? globalThis.String(object.releaseBaseUrl)
+        : isSet(object.release_base_url)
+        ? globalThis.String(object.release_base_url)
+        : "",
+    };
+  },
+
+  toJSON(message: AgentUpdateApplyRequest): unknown {
+    const obj: any = {};
+    if (message.operationId !== "") {
+      obj.operationId = message.operationId;
+    }
+    if (message.targetVersion !== "") {
+      obj.targetVersion = message.targetVersion;
+    }
+    if (message.channel !== "") {
+      obj.channel = message.channel;
+    }
+    if (message.expectedCurrentVersion !== "") {
+      obj.expectedCurrentVersion = message.expectedCurrentVersion;
+    }
+    if (message.expectedCurrentSha256 !== "") {
+      obj.expectedCurrentSha256 = message.expectedCurrentSha256;
+    }
+    if (message.releaseBaseUrl !== "") {
+      obj.releaseBaseUrl = message.releaseBaseUrl;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<AgentUpdateApplyRequest>, I>>(base?: I): AgentUpdateApplyRequest {
+    return AgentUpdateApplyRequest.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<AgentUpdateApplyRequest>, I>>(object: I): AgentUpdateApplyRequest {
+    const message = createBaseAgentUpdateApplyRequest();
+    message.operationId = object.operationId ?? "";
+    message.targetVersion = object.targetVersion ?? "";
+    message.channel = object.channel ?? "";
+    message.expectedCurrentVersion = object.expectedCurrentVersion ?? "";
+    message.expectedCurrentSha256 = object.expectedCurrentSha256 ?? "";
+    message.releaseBaseUrl = object.releaseBaseUrl ?? "";
+    return message;
+  },
+};
+
+function createBaseAgentUpdateApplyResponse(): AgentUpdateApplyResponse {
+  return { accepted: false, operationId: "", currentVersion: "", currentSha256: "", targetVersion: "" };
+}
+
+export const AgentUpdateApplyResponse: MessageFns<AgentUpdateApplyResponse> = {
+  encode(message: AgentUpdateApplyResponse, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.accepted !== false) {
+      writer.uint32(8).bool(message.accepted);
+    }
+    if (message.operationId !== "") {
+      writer.uint32(18).string(message.operationId);
+    }
+    if (message.currentVersion !== "") {
+      writer.uint32(26).string(message.currentVersion);
+    }
+    if (message.currentSha256 !== "") {
+      writer.uint32(34).string(message.currentSha256);
+    }
+    if (message.targetVersion !== "") {
+      writer.uint32(42).string(message.targetVersion);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): AgentUpdateApplyResponse {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const end = length === undefined ? reader.len : reader.pos + length;
+    const message = createBaseAgentUpdateApplyResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 8) {
+            break;
+          }
+
+          message.accepted = reader.bool();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+
+          message.operationId = reader.string();
+          continue;
+        }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+
+          message.currentVersion = reader.string();
+          continue;
+        }
+        case 4: {
+          if (tag !== 34) {
+            break;
+          }
+
+          message.currentSha256 = reader.string();
+          continue;
+        }
+        case 5: {
+          if (tag !== 42) {
+            break;
+          }
+
+          message.targetVersion = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+
+  fromJSON(object: any): AgentUpdateApplyResponse {
+    return {
+      accepted: isSet(object.accepted) ? globalThis.Boolean(object.accepted) : false,
+      operationId: isSet(object.operationId)
+        ? globalThis.String(object.operationId)
+        : isSet(object.operation_id)
+        ? globalThis.String(object.operation_id)
+        : "",
+      currentVersion: isSet(object.currentVersion)
+        ? globalThis.String(object.currentVersion)
+        : isSet(object.current_version)
+        ? globalThis.String(object.current_version)
+        : "",
+      currentSha256: isSet(object.currentSha256)
+        ? globalThis.String(object.currentSha256)
+        : isSet(object.current_sha256)
+        ? globalThis.String(object.current_sha256)
+        : "",
+      targetVersion: isSet(object.targetVersion)
+        ? globalThis.String(object.targetVersion)
+        : isSet(object.target_version)
+        ? globalThis.String(object.target_version)
+        : "",
+    };
+  },
+
+  toJSON(message: AgentUpdateApplyResponse): unknown {
+    const obj: any = {};
+    if (message.accepted !== false) {
+      obj.accepted = message.accepted;
+    }
+    if (message.operationId !== "") {
+      obj.operationId = message.operationId;
+    }
+    if (message.currentVersion !== "") {
+      obj.currentVersion = message.currentVersion;
+    }
+    if (message.currentSha256 !== "") {
+      obj.currentSha256 = message.currentSha256;
+    }
+    if (message.targetVersion !== "") {
+      obj.targetVersion = message.targetVersion;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<AgentUpdateApplyResponse>, I>>(base?: I): AgentUpdateApplyResponse {
+    return AgentUpdateApplyResponse.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<AgentUpdateApplyResponse>, I>>(object: I): AgentUpdateApplyResponse {
+    const message = createBaseAgentUpdateApplyResponse();
+    message.accepted = object.accepted ?? false;
+    message.operationId = object.operationId ?? "";
+    message.currentVersion = object.currentVersion ?? "";
+    message.currentSha256 = object.currentSha256 ?? "";
+    message.targetVersion = object.targetVersion ?? "";
+    return message;
+  },
+};
+
+function createBaseAgentUpdateProgress(): AgentUpdateProgress {
+  return {
+    operationId: "",
+    targetVersion: "",
+    stage: 0,
+    expectedBinarySha256: "",
+    errorCode: "",
+    retryable: false,
+    rolledBack: false,
+  };
+}
+
+export const AgentUpdateProgress: MessageFns<AgentUpdateProgress> = {
+  encode(message: AgentUpdateProgress, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.operationId !== "") {
+      writer.uint32(10).string(message.operationId);
+    }
+    if (message.targetVersion !== "") {
+      writer.uint32(18).string(message.targetVersion);
+    }
+    if (message.stage !== 0) {
+      writer.uint32(24).int32(message.stage);
+    }
+    if (message.expectedBinarySha256 !== "") {
+      writer.uint32(34).string(message.expectedBinarySha256);
+    }
+    if (message.errorCode !== "") {
+      writer.uint32(42).string(message.errorCode);
+    }
+    if (message.retryable !== false) {
+      writer.uint32(48).bool(message.retryable);
+    }
+    if (message.rolledBack !== false) {
+      writer.uint32(56).bool(message.rolledBack);
+    }
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): AgentUpdateProgress {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const end = length === undefined ? reader.len : reader.pos + length;
+    const message = createBaseAgentUpdateProgress();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+
+          message.operationId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+
+          message.targetVersion = reader.string();
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+
+          message.stage = reader.int32() as any;
+          continue;
+        }
+        case 4: {
+          if (tag !== 34) {
+            break;
+          }
+
+          message.expectedBinarySha256 = reader.string();
+          continue;
+        }
+        case 5: {
+          if (tag !== 42) {
+            break;
+          }
+
+          message.errorCode = reader.string();
+          continue;
+        }
+        case 6: {
+          if (tag !== 48) {
+            break;
+          }
+
+          message.retryable = reader.bool();
+          continue;
+        }
+        case 7: {
+          if (tag !== 56) {
+            break;
+          }
+
+          message.rolledBack = reader.bool();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+
+  fromJSON(object: any): AgentUpdateProgress {
+    return {
+      operationId: isSet(object.operationId)
+        ? globalThis.String(object.operationId)
+        : isSet(object.operation_id)
+        ? globalThis.String(object.operation_id)
+        : "",
+      targetVersion: isSet(object.targetVersion)
+        ? globalThis.String(object.targetVersion)
+        : isSet(object.target_version)
+        ? globalThis.String(object.target_version)
+        : "",
+      stage: isSet(object.stage) ? agentUpdateStageFromJSON(object.stage) : 0,
+      expectedBinarySha256: isSet(object.expectedBinarySha256)
+        ? globalThis.String(object.expectedBinarySha256)
+        : isSet(object.expected_binary_sha256)
+        ? globalThis.String(object.expected_binary_sha256)
+        : "",
+      errorCode: isSet(object.errorCode)
+        ? globalThis.String(object.errorCode)
+        : isSet(object.error_code)
+        ? globalThis.String(object.error_code)
+        : "",
+      retryable: isSet(object.retryable) ? globalThis.Boolean(object.retryable) : false,
+      rolledBack: isSet(object.rolledBack)
+        ? globalThis.Boolean(object.rolledBack)
+        : isSet(object.rolled_back)
+        ? globalThis.Boolean(object.rolled_back)
+        : false,
+    };
+  },
+
+  toJSON(message: AgentUpdateProgress): unknown {
+    const obj: any = {};
+    if (message.operationId !== "") {
+      obj.operationId = message.operationId;
+    }
+    if (message.targetVersion !== "") {
+      obj.targetVersion = message.targetVersion;
+    }
+    if (message.stage !== 0) {
+      obj.stage = agentUpdateStageToJSON(message.stage);
+    }
+    if (message.expectedBinarySha256 !== "") {
+      obj.expectedBinarySha256 = message.expectedBinarySha256;
+    }
+    if (message.errorCode !== "") {
+      obj.errorCode = message.errorCode;
+    }
+    if (message.retryable !== false) {
+      obj.retryable = message.retryable;
+    }
+    if (message.rolledBack !== false) {
+      obj.rolledBack = message.rolledBack;
+    }
+    return obj;
+  },
+
+  create<I extends Exact<DeepPartial<AgentUpdateProgress>, I>>(base?: I): AgentUpdateProgress {
+    return AgentUpdateProgress.fromPartial(base ?? ({} as any));
+  },
+  fromPartial<I extends Exact<DeepPartial<AgentUpdateProgress>, I>>(object: I): AgentUpdateProgress {
+    const message = createBaseAgentUpdateProgress();
+    message.operationId = object.operationId ?? "";
+    message.targetVersion = object.targetVersion ?? "";
+    message.stage = object.stage ?? 0;
+    message.expectedBinarySha256 = object.expectedBinarySha256 ?? "";
+    message.errorCode = object.errorCode ?? "";
+    message.retryable = object.retryable ?? false;
+    message.rolledBack = object.rolledBack ?? false;
+    return message;
+  },
+};
+
+function createBaseOpExit(): OpExit {
+  return {
+    exitCode: 0,
+    timedOut: false,
+    cancelled: false,
+    durationMs: "0",
+    digests: {},
+    totals: {},
+    failureCode: "",
+    failureDetail: {},
+  };
+}
+
+export const OpExit: MessageFns<OpExit> = {
+  encode(message: OpExit, writer: BinaryWriter = new BinaryWriter()): BinaryWriter {
+    if (message.exitCode !== 0) {
+      writer.uint32(8).int32(message.exitCode);
+    }
+    if (message.timedOut !== false) {
+      writer.uint32(16).bool(message.timedOut);
+    }
+    if (message.cancelled !== false) {
+      writer.uint32(24).bool(message.cancelled);
+    }
+    if (message.durationMs !== "0") {
+      writer.uint32(32).uint64(message.durationMs);
+    }
+    globalThis.Object.entries(message.digests).forEach(([key, value]: [string, string]) => {
+      OpExit_DigestsEntry.encode({ key: key as any, value }, writer.uint32(42).fork()).join();
+    });
+    globalThis.Object.entries(message.totals).forEach(([key, value]: [string, string]) => {
+      OpExit_TotalsEntry.encode({ key: key as any, value }, writer.uint32(50).fork()).join();
+    });
+    if (message.failureCode !== "") {
+      writer.uint32(58).string(message.failureCode);
+    }
+    globalThis.Object.entries(message.failureDetail).forEach(([key, value]: [string, string]) => {
+      OpExit_FailureDetailEntry.encode({ key: key as any, value }, writer.uint32(66).fork()).join();
+    });
+    return writer;
+  },
+
+  decode(input: BinaryReader | Uint8Array, length?: number): OpExit {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    const end = length === undefined ? reader.len : reader.pos + length;
+    const message = createBaseOpExit();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 8) {
+            break;
+          }
+
+          message.exitCode = reader.int32();
+          continue;
+        }
+        case 2: {
+          if (tag !== 16) {
+            break;
+          }
+
+          message.timedOut = reader.bool();
+          continue;
+        }
+        case 3: {
+          if (tag !== 24) {
+            break;
+          }
+
+          message.cancelled = reader.bool();
+          continue;
+        }
+        case 4: {
+          if (tag !== 32) {
+            break;
+          }
+
+          message.durationMs = reader.uint64().toString();
+          continue;
+        }
+        case 5: {
+          if (tag !== 42) {
+            break;
+          }
+
+          const entry5 = OpExit_DigestsEntry.decode(reader, reader.uint32());
+          if (entry5.value !== undefined) {
+            message.digests[entry5.key] = entry5.value;
+          }
+          continue;
+        }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+
+          const entry6 = OpExit_TotalsEntry.decode(reader, reader.uint32());
+          if (entry6.value !== undefined) {
+            message.totals[entry6.key] = entry6.value;
+          }
+          continue;
+        }
+        case 7: {
+          if (tag !== 58) {
+            break;
+          }
+
+          message.failureCode = reader.string();
+          continue;
+        }
+        case 8: {
+          if (tag !== 66) {
             break;
           }
 
@@ -12386,7 +13270,7 @@ export const OpAck: MessageFns<OpAck> = {
 };
 
 function createBaseControlRequest(): ControlRequest {
-  return { requestId: "", epoch: 0, op: undefined };
+  return { requestId: "", epoch: 0, resourcePolicy: undefined, op: undefined };
 }
 
 export const ControlRequest: MessageFns<ControlRequest> = {
@@ -12397,6 +13281,9 @@ export const ControlRequest: MessageFns<ControlRequest> = {
     if (message.epoch !== 0) {
       writer.uint32(16).uint32(message.epoch);
     }
+    if (message.resourcePolicy !== undefined) {
+      OperationResourcePolicy.encode(message.resourcePolicy, writer.uint32(26).fork()).join();
+    }
     switch (message.op?.$case) {
       case "ping":
         PingRequest.encode(message.op.ping, writer.uint32(82).fork()).join();
@@ -12407,9 +13294,6 @@ export const ControlRequest: MessageFns<ControlRequest> = {
       case "resume":
         ResumeRequest.encode(message.op.resume, writer.uint32(98).fork()).join();
         break;
-      case "exec":
-        ExecRequest.encode(message.op.exec, writer.uint32(106).fork()).join();
-        break;
       case "fsRead":
         FsReadRequest.encode(message.op.fsRead, writer.uint32(114).fork()).join();
         break;
@@ -12485,6 +13369,9 @@ export const ControlRequest: MessageFns<ControlRequest> = {
       case "computerFramesOpen":
         ComputerFramesOpenRequest.encode(message.op.computerFramesOpen, writer.uint32(306).fork()).join();
         break;
+      case "agentUpdateApply":
+        AgentUpdateApplyRequest.encode(message.op.agentUpdateApply, writer.uint32(314).fork()).join();
+        break;
     }
     return writer;
   },
@@ -12512,6 +13399,14 @@ export const ControlRequest: MessageFns<ControlRequest> = {
           message.epoch = reader.uint32();
           continue;
         }
+        case 3: {
+          if (tag !== 26) {
+            break;
+          }
+
+          message.resourcePolicy = OperationResourcePolicy.decode(reader, reader.uint32());
+          continue;
+        }
         case 10: {
           if (tag !== 82) {
             break;
@@ -12536,14 +13431,6 @@ export const ControlRequest: MessageFns<ControlRequest> = {
           message.op = { $case: "resume", resume: ResumeRequest.decode(reader, reader.uint32()) };
           continue;
         }
-        case 13: {
-          if (tag !== 106) {
-            break;
-          }
-
-          message.op = { $case: "exec", exec: ExecRequest.decode(reader, reader.uint32()) };
-          continue;
-        }
         case 14: {
           if (tag !== 114) {
             break;
@@ -12759,6 +13646,17 @@ export const ControlRequest: MessageFns<ControlRequest> = {
           };
           continue;
         }
+        case 39: {
+          if (tag !== 314) {
+            break;
+          }
+
+          message.op = {
+            $case: "agentUpdateApply",
+            agentUpdateApply: AgentUpdateApplyRequest.decode(reader, reader.uint32()),
+          };
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -12776,14 +13674,17 @@ export const ControlRequest: MessageFns<ControlRequest> = {
         ? globalThis.String(object.request_id)
         : "",
       epoch: isSet(object.epoch) ? globalThis.Number(object.epoch) : 0,
+      resourcePolicy: isSet(object.resourcePolicy)
+        ? OperationResourcePolicy.fromJSON(object.resourcePolicy)
+        : isSet(object.resource_policy)
+        ? OperationResourcePolicy.fromJSON(object.resource_policy)
+        : undefined,
       op: isSet(object.ping)
         ? { $case: "ping", ping: PingRequest.fromJSON(object.ping) }
         : isSet(object.hello)
         ? { $case: "hello", hello: Hello.fromJSON(object.hello) }
         : isSet(object.resume)
         ? { $case: "resume", resume: ResumeRequest.fromJSON(object.resume) }
-        : isSet(object.exec)
-        ? { $case: "exec", exec: ExecRequest.fromJSON(object.exec) }
         : isSet(object.fsRead)
         ? { $case: "fsRead", fsRead: FsReadRequest.fromJSON(object.fsRead) }
         : isSet(object.fs_read)
@@ -12898,6 +13799,10 @@ export const ControlRequest: MessageFns<ControlRequest> = {
           $case: "computerFramesOpen",
           computerFramesOpen: ComputerFramesOpenRequest.fromJSON(object.computer_frames_open),
         }
+        : isSet(object.agentUpdateApply)
+        ? { $case: "agentUpdateApply", agentUpdateApply: AgentUpdateApplyRequest.fromJSON(object.agentUpdateApply) }
+        : isSet(object.agent_update_apply)
+        ? { $case: "agentUpdateApply", agentUpdateApply: AgentUpdateApplyRequest.fromJSON(object.agent_update_apply) }
         : undefined,
     };
   },
@@ -12910,14 +13815,15 @@ export const ControlRequest: MessageFns<ControlRequest> = {
     if (message.epoch !== 0) {
       obj.epoch = Math.round(message.epoch);
     }
+    if (message.resourcePolicy !== undefined) {
+      obj.resourcePolicy = OperationResourcePolicy.toJSON(message.resourcePolicy);
+    }
     if (message.op?.$case === "ping") {
       obj.ping = PingRequest.toJSON(message.op.ping);
     } else if (message.op?.$case === "hello") {
       obj.hello = Hello.toJSON(message.op.hello);
     } else if (message.op?.$case === "resume") {
       obj.resume = ResumeRequest.toJSON(message.op.resume);
-    } else if (message.op?.$case === "exec") {
-      obj.exec = ExecRequest.toJSON(message.op.exec);
     } else if (message.op?.$case === "fsRead") {
       obj.fsRead = FsReadRequest.toJSON(message.op.fsRead);
     } else if (message.op?.$case === "fsWrite") {
@@ -12968,6 +13874,8 @@ export const ControlRequest: MessageFns<ControlRequest> = {
       obj.browserFramesOpen = BrowserFramesOpenRequest.toJSON(message.op.browserFramesOpen);
     } else if (message.op?.$case === "computerFramesOpen") {
       obj.computerFramesOpen = ComputerFramesOpenRequest.toJSON(message.op.computerFramesOpen);
+    } else if (message.op?.$case === "agentUpdateApply") {
+      obj.agentUpdateApply = AgentUpdateApplyRequest.toJSON(message.op.agentUpdateApply);
     }
     return obj;
   },
@@ -12979,6 +13887,9 @@ export const ControlRequest: MessageFns<ControlRequest> = {
     const message = createBaseControlRequest();
     message.requestId = object.requestId ?? "";
     message.epoch = object.epoch ?? 0;
+    message.resourcePolicy = (object.resourcePolicy !== undefined && object.resourcePolicy !== null)
+      ? OperationResourcePolicy.fromPartial(object.resourcePolicy)
+      : undefined;
     switch (object.op?.$case) {
       case "ping": {
         if (object.op?.ping !== undefined && object.op?.ping !== null) {
@@ -12998,12 +13909,6 @@ export const ControlRequest: MessageFns<ControlRequest> = {
         }
         break;
       }
-      case "exec": {
-        if (object.op?.exec !== undefined && object.op?.exec !== null) {
-          message.op = { $case: "exec", exec: ExecRequest.fromPartial(object.op.exec) };
-        }
-        break;
-      }
       case "fsRead": {
         if (object.op?.fsRead !== undefined && object.op?.fsRead !== null) {
           message.op = { $case: "fsRead", fsRead: FsReadRequest.fromPartial(object.op.fsRead) };
@@ -13172,6 +14077,15 @@ export const ControlRequest: MessageFns<ControlRequest> = {
         }
         break;
       }
+      case "agentUpdateApply": {
+        if (object.op?.agentUpdateApply !== undefined && object.op?.agentUpdateApply !== null) {
+          message.op = {
+            $case: "agentUpdateApply",
+            agentUpdateApply: AgentUpdateApplyRequest.fromPartial(object.op.agentUpdateApply),
+          };
+        }
+        break;
+      }
     }
     return message;
   },
@@ -13199,9 +14113,6 @@ export const ControlResponse: MessageFns<ControlResponse> = {
       case "resume":
         ResumeResponse.encode(message.result.resume, writer.uint32(98).fork()).join();
         break;
-      case "exec":
-        ExecResponse.encode(message.result.exec, writer.uint32(106).fork()).join();
-        break;
       case "fsRead":
         FsReadResponse.encode(message.result.fsRead, writer.uint32(114).fork()).join();
         break;
@@ -13271,6 +14182,9 @@ export const ControlResponse: MessageFns<ControlResponse> = {
       case "computerFramesOpen":
         ComputerFramesOpenResponse.encode(message.result.computerFramesOpen, writer.uint32(306).fork()).join();
         break;
+      case "agentUpdateApply":
+        AgentUpdateApplyResponse.encode(message.result.agentUpdateApply, writer.uint32(314).fork()).join();
+        break;
     }
     return writer;
   },
@@ -13322,14 +14236,6 @@ export const ControlResponse: MessageFns<ControlResponse> = {
           message.result = { $case: "resume", resume: ResumeResponse.decode(reader, reader.uint32()) };
           continue;
         }
-        case 13: {
-          if (tag !== 106) {
-            break;
-          }
-
-          message.result = { $case: "exec", exec: ExecResponse.decode(reader, reader.uint32()) };
-          continue;
-        }
         case 14: {
           if (tag !== 114) {
             break;
@@ -13535,6 +14441,17 @@ export const ControlResponse: MessageFns<ControlResponse> = {
           };
           continue;
         }
+        case 39: {
+          if (tag !== 314) {
+            break;
+          }
+
+          message.result = {
+            $case: "agentUpdateApply",
+            agentUpdateApply: AgentUpdateApplyResponse.decode(reader, reader.uint32()),
+          };
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -13558,8 +14475,6 @@ export const ControlResponse: MessageFns<ControlResponse> = {
         ? { $case: "hello", hello: HelloAck.fromJSON(object.hello) }
         : isSet(object.resume)
         ? { $case: "resume", resume: ResumeResponse.fromJSON(object.resume) }
-        : isSet(object.exec)
-        ? { $case: "exec", exec: ExecResponse.fromJSON(object.exec) }
         : isSet(object.fsRead)
         ? { $case: "fsRead", fsRead: FsReadResponse.fromJSON(object.fsRead) }
         : isSet(object.fs_read)
@@ -13672,6 +14587,10 @@ export const ControlResponse: MessageFns<ControlResponse> = {
           $case: "computerFramesOpen",
           computerFramesOpen: ComputerFramesOpenResponse.fromJSON(object.computer_frames_open),
         }
+        : isSet(object.agentUpdateApply)
+        ? { $case: "agentUpdateApply", agentUpdateApply: AgentUpdateApplyResponse.fromJSON(object.agentUpdateApply) }
+        : isSet(object.agent_update_apply)
+        ? { $case: "agentUpdateApply", agentUpdateApply: AgentUpdateApplyResponse.fromJSON(object.agent_update_apply) }
         : undefined,
     };
   },
@@ -13690,8 +14609,6 @@ export const ControlResponse: MessageFns<ControlResponse> = {
       obj.hello = HelloAck.toJSON(message.result.hello);
     } else if (message.result?.$case === "resume") {
       obj.resume = ResumeResponse.toJSON(message.result.resume);
-    } else if (message.result?.$case === "exec") {
-      obj.exec = ExecResponse.toJSON(message.result.exec);
     } else if (message.result?.$case === "fsRead") {
       obj.fsRead = FsReadResponse.toJSON(message.result.fsRead);
     } else if (message.result?.$case === "fsWrite") {
@@ -13738,6 +14655,8 @@ export const ControlResponse: MessageFns<ControlResponse> = {
       obj.browserFramesOpen = BrowserFramesOpenResponse.toJSON(message.result.browserFramesOpen);
     } else if (message.result?.$case === "computerFramesOpen") {
       obj.computerFramesOpen = ComputerFramesOpenResponse.toJSON(message.result.computerFramesOpen);
+    } else if (message.result?.$case === "agentUpdateApply") {
+      obj.agentUpdateApply = AgentUpdateApplyResponse.toJSON(message.result.agentUpdateApply);
     }
     return obj;
   },
@@ -13770,12 +14689,6 @@ export const ControlResponse: MessageFns<ControlResponse> = {
         }
         break;
       }
-      case "exec": {
-        if (object.result?.exec !== undefined && object.result?.exec !== null) {
-          message.result = { $case: "exec", exec: ExecResponse.fromPartial(object.result.exec) };
-        }
-        break;
-      }
       case "fsRead": {
         if (object.result?.fsRead !== undefined && object.result?.fsRead !== null) {
           message.result = { $case: "fsRead", fsRead: FsReadResponse.fromPartial(object.result.fsRead) };
@@ -13935,6 +14848,15 @@ export const ControlResponse: MessageFns<ControlResponse> = {
         }
         break;
       }
+      case "agentUpdateApply": {
+        if (object.result?.agentUpdateApply !== undefined && object.result?.agentUpdateApply !== null) {
+          message.result = {
+            $case: "agentUpdateApply",
+            agentUpdateApply: AgentUpdateApplyResponse.fromPartial(object.result.agentUpdateApply),
+          };
+        }
+        break;
+      }
     }
     return message;
   },
@@ -14056,6 +14978,9 @@ export const AgentEvent: MessageFns<AgentEvent> = {
       case "goingOffline":
         GoingOffline.encode(message.event.goingOffline, writer.uint32(90).fork()).join();
         break;
+      case "agentUpdateProgress":
+        AgentUpdateProgress.encode(message.event.agentUpdateProgress, writer.uint32(98).fork()).join();
+        break;
     }
     return writer;
   },
@@ -14091,6 +15016,17 @@ export const AgentEvent: MessageFns<AgentEvent> = {
           message.event = { $case: "goingOffline", goingOffline: GoingOffline.decode(reader, reader.uint32()) };
           continue;
         }
+        case 12: {
+          if (tag !== 98) {
+            break;
+          }
+
+          message.event = {
+            $case: "agentUpdateProgress",
+            agentUpdateProgress: AgentUpdateProgress.decode(reader, reader.uint32()),
+          };
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -14113,6 +15049,16 @@ export const AgentEvent: MessageFns<AgentEvent> = {
         ? { $case: "goingOffline", goingOffline: GoingOffline.fromJSON(object.goingOffline) }
         : isSet(object.going_offline)
         ? { $case: "goingOffline", goingOffline: GoingOffline.fromJSON(object.going_offline) }
+        : isSet(object.agentUpdateProgress)
+        ? {
+          $case: "agentUpdateProgress",
+          agentUpdateProgress: AgentUpdateProgress.fromJSON(object.agentUpdateProgress),
+        }
+        : isSet(object.agent_update_progress)
+        ? {
+          $case: "agentUpdateProgress",
+          agentUpdateProgress: AgentUpdateProgress.fromJSON(object.agent_update_progress),
+        }
         : undefined,
     };
   },
@@ -14126,6 +15072,8 @@ export const AgentEvent: MessageFns<AgentEvent> = {
       obj.heartbeat = Heartbeat.toJSON(message.event.heartbeat);
     } else if (message.event?.$case === "goingOffline") {
       obj.goingOffline = GoingOffline.toJSON(message.event.goingOffline);
+    } else if (message.event?.$case === "agentUpdateProgress") {
+      obj.agentUpdateProgress = AgentUpdateProgress.toJSON(message.event.agentUpdateProgress);
     }
     return obj;
   },
@@ -14149,6 +15097,15 @@ export const AgentEvent: MessageFns<AgentEvent> = {
         }
         break;
       }
+      case "agentUpdateProgress": {
+        if (object.event?.agentUpdateProgress !== undefined && object.event?.agentUpdateProgress !== null) {
+          message.event = {
+            $case: "agentUpdateProgress",
+            agentUpdateProgress: AgentUpdateProgress.fromPartial(object.event.agentUpdateProgress),
+          };
+        }
+        break;
+      }
     }
     return message;
   },