@opengeni/contracts 0.15.0 → 0.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1,5 +1,210 @@
1
1
  import { z } from 'zod';
2
2
 
3
+ /** Hard server-side ceiling for one retained-output response body. */
4
+ declare const RETAINED_OUTPUT_MAX_PAGE_BYTES: number;
5
+ /** Default first page when the client does not send a Range header. */
6
+ declare const RETAINED_OUTPUT_DEFAULT_PAGE_BYTES: number;
7
+ /** Receipts are timeline references, never an extensible metadata bag. */
8
+ declare const RETAINED_OUTPUT_RECEIPT_MAX_BYTES: number;
9
+ declare const RetainedOutputKind: z.ZodEnum<{
10
+ file: "file";
11
+ tool_result: "tool_result";
12
+ assistant_completion: "assistant_completion";
13
+ internal_update: "internal_update";
14
+ event_media: "event_media";
15
+ }>;
16
+ type RetainedOutputKind = z.infer<typeof RetainedOutputKind>;
17
+ declare const RetainedOutputUnavailableReason: z.ZodEnum<{
18
+ failed: "failed";
19
+ expired: "expired";
20
+ deleted: "deleted";
21
+ pending: "pending";
22
+ not_retained: "not_retained";
23
+ unsupported: "unsupported";
24
+ missing_storage: "missing_storage";
25
+ storage_write_failed: "storage_write_failed";
26
+ }>;
27
+ type RetainedOutputUnavailableReason = z.infer<typeof RetainedOutputUnavailableReason>;
28
+ declare const RetainedArtifactReferenceSchema: z.ZodObject<{
29
+ available: z.ZodLiteral<true>;
30
+ artifactId: z.ZodString;
31
+ kind: z.ZodEnum<{
32
+ file: "file";
33
+ tool_result: "tool_result";
34
+ assistant_completion: "assistant_completion";
35
+ internal_update: "internal_update";
36
+ event_media: "event_media";
37
+ }>;
38
+ contentType: z.ZodString;
39
+ originalBytes: z.ZodNumber;
40
+ sha256: z.ZodString;
41
+ retainedAt: z.ZodString;
42
+ retention: z.ZodObject<{
43
+ policy: z.ZodLiteral<"workspace_file">;
44
+ expiresAt: z.ZodNull;
45
+ }, z.core.$strict>;
46
+ retrieval: z.ZodObject<{
47
+ method: z.ZodLiteral<"GET">;
48
+ path: z.ZodString;
49
+ acceptRanges: z.ZodLiteral<"bytes">;
50
+ maxRangeBytes: z.ZodNumber;
51
+ }, z.core.$strict>;
52
+ }, z.core.$strict>;
53
+ /**
54
+ * Canonical evidence fact carried by bounded audit/NATS/SSE/UI previews.
55
+ *
56
+ * The available variant is intentionally provider-neutral and closed: no bucket,
57
+ * object key, signed URL, arbitrary metadata, or producer-controlled labels can
58
+ * cross this boundary.
59
+ */
60
+ declare const RetainedOutputEvidenceSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
61
+ available: z.ZodLiteral<false>;
62
+ reason: z.ZodEnum<{
63
+ failed: "failed";
64
+ expired: "expired";
65
+ deleted: "deleted";
66
+ pending: "pending";
67
+ not_retained: "not_retained";
68
+ unsupported: "unsupported";
69
+ missing_storage: "missing_storage";
70
+ storage_write_failed: "storage_write_failed";
71
+ }>;
72
+ }, z.core.$strict>, z.ZodObject<{
73
+ available: z.ZodLiteral<true>;
74
+ artifactId: z.ZodString;
75
+ kind: z.ZodEnum<{
76
+ file: "file";
77
+ tool_result: "tool_result";
78
+ assistant_completion: "assistant_completion";
79
+ internal_update: "internal_update";
80
+ event_media: "event_media";
81
+ }>;
82
+ contentType: z.ZodString;
83
+ originalBytes: z.ZodNumber;
84
+ sha256: z.ZodString;
85
+ retainedAt: z.ZodString;
86
+ retention: z.ZodObject<{
87
+ policy: z.ZodLiteral<"workspace_file">;
88
+ expiresAt: z.ZodNull;
89
+ }, z.core.$strict>;
90
+ retrieval: z.ZodObject<{
91
+ method: z.ZodLiteral<"GET">;
92
+ path: z.ZodString;
93
+ acceptRanges: z.ZodLiteral<"bytes">;
94
+ maxRangeBytes: z.ZodNumber;
95
+ }, z.core.$strict>;
96
+ }, z.core.$strict>], "available">;
97
+ type RetainedOutputEvidence = z.infer<typeof RetainedOutputEvidenceSchema>;
98
+ type RetainedArtifactReference = z.infer<typeof RetainedArtifactReferenceSchema>;
99
+ /** @deprecated use RetainedArtifactReference. */
100
+ type RetainedOutputAvailableEvidence = RetainedArtifactReference;
101
+ declare const RetainedArtifactUnavailableSchema: z.ZodObject<{
102
+ available: z.ZodLiteral<false>;
103
+ artifactId: z.ZodString;
104
+ reason: z.ZodEnum<{
105
+ failed: "failed";
106
+ expired: "expired";
107
+ deleted: "deleted";
108
+ pending: "pending";
109
+ not_retained: "not_retained";
110
+ unsupported: "unsupported";
111
+ missing_storage: "missing_storage";
112
+ storage_write_failed: "storage_write_failed";
113
+ }>;
114
+ }, z.core.$strict>;
115
+ type RetainedArtifactUnavailable = z.infer<typeof RetainedArtifactUnavailableSchema>;
116
+ /** Authenticated metadata result for one opaque workspace file identity. */
117
+ declare const RetainedArtifactMetadataSchema: z.ZodUnion<readonly [z.ZodObject<{
118
+ available: z.ZodLiteral<true>;
119
+ artifactId: z.ZodString;
120
+ kind: z.ZodEnum<{
121
+ file: "file";
122
+ tool_result: "tool_result";
123
+ assistant_completion: "assistant_completion";
124
+ internal_update: "internal_update";
125
+ event_media: "event_media";
126
+ }>;
127
+ contentType: z.ZodString;
128
+ originalBytes: z.ZodNumber;
129
+ sha256: z.ZodString;
130
+ retainedAt: z.ZodString;
131
+ retention: z.ZodObject<{
132
+ policy: z.ZodLiteral<"workspace_file">;
133
+ expiresAt: z.ZodNull;
134
+ }, z.core.$strict>;
135
+ retrieval: z.ZodObject<{
136
+ method: z.ZodLiteral<"GET">;
137
+ path: z.ZodString;
138
+ acceptRanges: z.ZodLiteral<"bytes">;
139
+ maxRangeBytes: z.ZodNumber;
140
+ }, z.core.$strict>;
141
+ }, z.core.$strict>, z.ZodObject<{
142
+ available: z.ZodLiteral<false>;
143
+ artifactId: z.ZodString;
144
+ reason: z.ZodEnum<{
145
+ failed: "failed";
146
+ expired: "expired";
147
+ deleted: "deleted";
148
+ pending: "pending";
149
+ not_retained: "not_retained";
150
+ unsupported: "unsupported";
151
+ missing_storage: "missing_storage";
152
+ storage_write_failed: "storage_write_failed";
153
+ }>;
154
+ }, z.core.$strict>]>;
155
+ type RetainedArtifactMetadata = z.infer<typeof RetainedArtifactMetadataSchema>;
156
+ type RetainedArtifactFileInput = {
157
+ id: string;
158
+ workspaceId: string;
159
+ status: string;
160
+ contentType: string;
161
+ sizeBytes: number;
162
+ sha256: string | null;
163
+ updatedAt: string;
164
+ };
165
+ /**
166
+ * Convert a ready, integrity-addressed workspace file into the only available
167
+ * retained-output receipt shape. Invalid, pending, or checksum-less files fail
168
+ * closed instead of implying that full evidence is retrievable.
169
+ */
170
+ declare function retainedArtifactReferenceFromFile(file: RetainedArtifactFileInput, kind?: RetainedOutputKind): RetainedArtifactReference | null;
171
+ /** Parse and clone a trusted server receipt; invalid/untrusted data fails closed. */
172
+ declare function validateRetainedOutputEvidence(value: unknown): RetainedOutputEvidence | null;
173
+ declare function retainedOutputUnavailable(reason?: RetainedOutputUnavailableReason): RetainedOutputEvidence;
174
+ type RetainedOutputResolvedRange = {
175
+ kind: "range";
176
+ start: number;
177
+ end: number;
178
+ length: number;
179
+ totalBytes: number;
180
+ status: 200 | 206;
181
+ contentRange: string | null;
182
+ acceptRanges: "bytes";
183
+ };
184
+ type RetainedOutputRangeResolution = RetainedOutputResolvedRange | {
185
+ kind: "empty";
186
+ length: 0;
187
+ totalBytes: 0;
188
+ status: 200;
189
+ contentRange: null;
190
+ acceptRanges: "bytes";
191
+ } | {
192
+ kind: "invalid";
193
+ reason: "malformed" | "multipart_not_supported" | "numeric_overflow" | "range_too_large";
194
+ maxPageBytes: number;
195
+ } | {
196
+ kind: "unsatisfiable";
197
+ reason: "empty_artifact" | "start_out_of_bounds" | "end_before_start" | "zero_suffix";
198
+ totalBytes: number;
199
+ contentRange: string;
200
+ };
201
+ /**
202
+ * Resolve one RFC-style bytes range without ever licensing a response larger
203
+ * than `maxPageBytes`. Multipart ranges and oversized explicit/suffix requests
204
+ * fail closed. An omitted or open-ended range becomes one resumable bounded page.
205
+ */
206
+ declare function resolveRetainedOutputRange(rangeHeader: string | null | undefined, totalBytes: number, maxPageBytes?: number): RetainedOutputRangeResolution;
207
+
3
208
  /**
4
209
  * Canonical bounded representation for `session_events.payload`.
5
210
  *
@@ -8,6 +213,7 @@ import { z } from 'zod';
8
213
  * the loss explicit. It deliberately has no server-only dependency so the DB,
9
214
  * realtime transports, SDK/React, and tests can share one wire contract.
10
215
  */
216
+
11
217
  declare const SESSION_EVENT_PAYLOAD_MAX_BYTES: number;
12
218
  type SessionEventBoundarySurface = "durable_audit" | "database_guard" | "database_read_projection" | "http_projection" | "nats_legacy_guard" | "sse_legacy_guard" | "browser_legacy_guard";
13
219
  type SessionEventPayloadTruncation = {
@@ -19,10 +225,7 @@ type SessionEventPayloadTruncation = {
19
225
  omittedBytes: number | null;
20
226
  estimatedOriginalTokens: number | null;
21
227
  estimatedDeliveredTokens: number;
22
- fullEvidence: {
23
- available: false;
24
- reason: "not_retained";
25
- };
228
+ fullEvidence: RetainedOutputEvidence;
26
229
  details: Array<{
27
230
  path: string;
28
231
  kind: "string" | "array" | "object" | "depth" | "budget" | "media" | "binary" | "unserializable";
@@ -35,6 +238,11 @@ type SessionEventPayloadTruncation = {
35
238
  type BoundSessionEventPayloadOptions = {
36
239
  surface?: SessionEventBoundarySurface;
37
240
  maxBytes?: number;
241
+ /**
242
+ * Separately trusted durable receipt. Producer payload fields never populate
243
+ * this slot; invalid values fail closed to not_retained.
244
+ */
245
+ fullEvidence?: unknown;
38
246
  };
39
247
  type SessionEventJsonMeasurement = {
40
248
  bytes: number;
@@ -75,6 +283,217 @@ declare function sessionEventPayloadTruncation(payload: unknown): SessionEventPa
75
283
  */
76
284
  declare function boundSessionEventPayload<T>(payload: T, options?: BoundSessionEventPayloadOptions): T;
77
285
 
286
+ /**
287
+ * Adaptive Codex fleet policy, replay contract, and shadow evaluator.
288
+ *
289
+ * This module is deliberately pure and browser-safe. It accepts only bounded,
290
+ * metadata-only snapshots whose candidate keys are opaque aliases assigned by
291
+ * the caller. It never accepts credential ids, account emails, labels, token
292
+ * material, prompts, or tenant activity. The same normalized snapshot can be
293
+ * persisted in a session event, replayed offline, and compared byte-for-byte.
294
+ *
295
+ * V1 is shadow-only at the runtime integration boundary. The evaluator models
296
+ * later placement, admission, manager priority, borrowing, emergency-fuse, and
297
+ * named-overlay semantics so they can be proven with deterministic simulations
298
+ * before any independent kill switch is allowed to affect a live allocation.
299
+ */
300
+ declare const CODEX_FLEET_POLICY_SCHEMA_VERSION: 1;
301
+ declare const CODEX_FLEET_POLICY_VERSION: "adaptive-shadow-v1";
302
+ declare const CODEX_FLEET_POLICY_MAX_CANDIDATES = 32;
303
+ declare const CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE = 4;
304
+ /**
305
+ * Replay-integrity ordering for bounded ASCII-safe fleet keys and aliases.
306
+ *
307
+ * Locale-aware collation is intentionally forbidden here because its result
308
+ * can depend on locale and ICU data. Relational string comparison uses
309
+ * ECMAScript UTF-16 code-unit ordering and is therefore identical in Bun,
310
+ * Node, and browsers.
311
+ */
312
+ declare function compareCodexFleetCanonicalStringsV1(left: string, right: string): number;
313
+ type CodexFleetConfidence = "unknown" | "low" | "medium" | "high";
314
+ type CodexFleetCandidateStatus = "active" | "needs_relogin" | "error" | "unknown";
315
+ type CodexFleetCacheState = "unknown" | "healthy" | "collapsed";
316
+ type CodexFleetPriority = "standard" | "manager";
317
+ type CodexFleetPlacementKind = "new" | "fenced_in_flight";
318
+ type CodexFleetOverlayMode = "none" | "prefer" | "isolate";
319
+ type CodexFleetQuotaWindowV1 = {
320
+ /** Provider-reported percentage from a workspace-local cache, never inferred tenant truth. */
321
+ usedPercent: number | null;
322
+ /** Relative to input.observedAtMs. Zero means the reported window has reset. */
323
+ resetRemainingMs: number | null;
324
+ };
325
+ type CodexFleetCandidateV1 = {
326
+ /** Opaque, event-local alias such as c00. Never a credential/account id. */
327
+ key: string;
328
+ status: CodexFleetCandidateStatus;
329
+ allocatorEnabled: boolean;
330
+ /** Relative cooldown. A positive value excludes only NEW placements. */
331
+ cooldownRemainingMs: number | null;
332
+ activeLeaseCount: number;
333
+ quota: {
334
+ primary: CodexFleetQuotaWindowV1;
335
+ secondary: CodexFleetQuotaWindowV1;
336
+ checkedAgeMs: number | null;
337
+ confidence: CodexFleetConfidence;
338
+ };
339
+ /**
340
+ * Runtime-observed cache evidence. It may be absent because the production
341
+ * baseline currently exists as aggregate metrics/logs rather than allocator
342
+ * state. Absence is explicit uncertainty, not a zero cache hit.
343
+ */
344
+ cache: {
345
+ hitRatio: number | null;
346
+ sampledTokens: number | null;
347
+ checkedAgeMs: number | null;
348
+ confidence: CodexFleetConfidence;
349
+ /** Previously latched state; the evaluator applies dwell and recovery thresholds. */
350
+ state: CodexFleetCacheState;
351
+ /** Duration of the current continuous below/above-threshold observation. */
352
+ thresholdObservedForMs: number | null;
353
+ };
354
+ /** Workspace-local observed burn, separate from unexplained/external inference. */
355
+ observedBurn: {
356
+ primaryPercentPerHour: number | null;
357
+ secondaryPercentPerHour: number | null;
358
+ confidence: CodexFleetConfidence;
359
+ };
360
+ /**
361
+ * Unexplained/external burn is an inference only. The name and confidence are
362
+ * load-bearing: consumers must never relabel it as provider or tenant truth.
363
+ */
364
+ inferredUnexplainedBurn: {
365
+ primaryPercentPerHour: number | null;
366
+ secondaryPercentPerHour: number | null;
367
+ confidence: CodexFleetConfidence;
368
+ };
369
+ /** Opaque named-policy keys. Ignored unless overlaysEnabled is independently true. */
370
+ overlayKeys: string[];
371
+ };
372
+ type CodexFleetAdmissionSnapshotV1 = {
373
+ /** Dynamically observed capacity, not a static per-account slot allocation. */
374
+ dynamicCapacityUnits: number | null;
375
+ inUseUnits: number;
376
+ queuedManagerCount: number;
377
+ emergencyFuseActive: boolean;
378
+ };
379
+ type CodexFleetDecisionInputV1 = {
380
+ observedAtMs: number;
381
+ request: {
382
+ placement: CodexFleetPlacementKind;
383
+ priority: CodexFleetPriority;
384
+ currentCandidateKey: string | null;
385
+ waitAgeMs: number;
386
+ overlayKey: string | null;
387
+ overlayMode: CodexFleetOverlayMode;
388
+ };
389
+ admission: CodexFleetAdmissionSnapshotV1;
390
+ candidates: CodexFleetCandidateV1[];
391
+ };
392
+ type CodexFleetPolicyConfigV1 = {
393
+ maxCandidates: number;
394
+ quotaFreshForMs: number;
395
+ quotaStaleAfterMs: number;
396
+ placementUsageCeilingPercent: number;
397
+ cacheFreshForMs: number;
398
+ cacheCollapseThreshold: number;
399
+ cacheCollapseRecoveryThreshold: number;
400
+ cacheMinimumSampledTokens: number;
401
+ cacheCollapseDwellMs: number;
402
+ cacheRecoveryDwellMs: number;
403
+ activeLeaseScore: number;
404
+ unknownQuotaScore: number;
405
+ lowQuotaConfidenceScore: number;
406
+ mediumQuotaConfidenceScore: number;
407
+ inferredBurnScorePerPercentHour: number;
408
+ observedBurnScorePerPercentHour: number;
409
+ /** Maximum exhaustion-before-reset gap that contributes placement pressure. */
410
+ runwayRiskCapHours: number;
411
+ runwayScorePerAtRiskHour: number;
412
+ healthyCacheAffinityBenefit: number;
413
+ unknownCacheAffinityBenefit: number;
414
+ collapsedCacheAffinityBenefit: number;
415
+ switchHysteresisScore: number;
416
+ admissionPacingEnabled: boolean;
417
+ managerPriorityEnabled: boolean;
418
+ managerStandardStarvationMs: number;
419
+ emergencyFuseEnabled: boolean;
420
+ overlaysEnabled: boolean;
421
+ overlayPreferenceScore: number;
422
+ };
423
+ /**
424
+ * Experimental shadow defaults. None of the boolean control fields is enabled;
425
+ * production behavior therefore remains sticky-sharded until operators enable
426
+ * each independently after shadow acceptance.
427
+ */
428
+ declare const DEFAULT_CODEX_FLEET_POLICY_V1: CodexFleetPolicyConfigV1;
429
+ type CodexFleetScoreV1 = {
430
+ candidateKey: string;
431
+ eligible: boolean;
432
+ rejectionReason: "allocator_disabled" | "unavailable" | "cooling" | "quota_ceiling" | "overlay_isolation" | null;
433
+ quotaPressure: number;
434
+ leasePressure: number;
435
+ observedBurnPressure: number;
436
+ inferredBurnPressure: number;
437
+ runwayPressure: number;
438
+ uncertaintyPressure: number;
439
+ cacheAffinityBenefit: number;
440
+ cacheState: CodexFleetCacheState;
441
+ overlayPreferenceBenefit: number;
442
+ total: number;
443
+ confidence: CodexFleetConfidence;
444
+ };
445
+ type CodexFleetAdmissionDecisionV1 = {
446
+ outcome: "admit" | "pace";
447
+ reason: "fenced_in_flight" | "pacing_disabled" | "capacity_unknown" | "capacity_available" | "work_conserving_borrow" | "manager_priority" | "standard_starvation_bound" | "capacity_saturated" | "emergency_fuse";
448
+ /** True only when standard work uses otherwise-idle capacity with no manager backlog. */
449
+ borrowedIdleCapacity: boolean;
450
+ };
451
+ type CodexFleetDecisionV1 = {
452
+ outcome: "selected" | "paced" | "none";
453
+ selectedCandidateKey: string | null;
454
+ reason: "fenced_in_flight" | "fenced_candidate_missing" | "admission_paced" | "no_eligible_candidate" | "overlay_isolated_empty" | "best_score" | "affinity_best" | "hysteresis_hold";
455
+ admission: CodexFleetAdmissionDecisionV1;
456
+ borrowedOverlayCapacity: boolean;
457
+ strandedEligibleCount: number;
458
+ confidence: CodexFleetConfidence;
459
+ scores: CodexFleetScoreV1[];
460
+ };
461
+ type CodexFleetReplayRecordV1 = {
462
+ schemaVersion: typeof CODEX_FLEET_POLICY_SCHEMA_VERSION;
463
+ policyVersion: typeof CODEX_FLEET_POLICY_VERSION;
464
+ mode: "shadow";
465
+ policy: CodexFleetPolicyConfigV1;
466
+ input: CodexFleetDecisionInputV1;
467
+ truncatedCandidateCount: number;
468
+ policyFingerprint: string;
469
+ inputFingerprint: string;
470
+ decision: CodexFleetDecisionV1;
471
+ decisionFingerprint: string;
472
+ };
473
+ type CodexFleetReplayVerdictV1 = {
474
+ matches: boolean;
475
+ policyFingerprintMatches: boolean;
476
+ inputFingerprintMatches: boolean;
477
+ decisionFingerprintMatches: boolean;
478
+ recordedDecisionFingerprintMatches: boolean;
479
+ decision: CodexFleetDecisionV1;
480
+ };
481
+ declare function createCodexFleetReplayRecordV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetReplayRecordV1;
482
+ declare function replayCodexFleetDecisionV1(value: unknown): CodexFleetReplayVerdictV1;
483
+ /**
484
+ * Canonical replay bytes for already-bounded, identity-free fleet values.
485
+ * This is exported so offline tools can prove the exact bytes across runtimes;
486
+ * it performs no redaction and must not be used with raw account metadata.
487
+ */
488
+ declare function canonicalCodexFleetReplayJsonV1(value: CodexFleetReplayRecordV1): string;
489
+ /**
490
+ * Strict reader for durable/offline replay. Unknown fields, lossy normalization,
491
+ * malformed decisions, and non-SHA-256 digests are rejected before comparison.
492
+ */
493
+ declare function readCodexFleetReplayRecordV1(value: unknown): CodexFleetReplayRecordV1;
494
+ declare function evaluateCodexFleetDecisionV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetDecisionV1;
495
+ declare function effectiveCodexFleetCacheStateV1(cache: CodexFleetCandidateV1["cache"], policy: CodexFleetPolicyConfigV1): CodexFleetCacheState;
496
+
78
497
  declare const SessionStatus: z.ZodEnum<{
79
498
  queued: "queued";
80
499
  running: "running";
@@ -185,6 +604,8 @@ declare const ErrorCode: z.ZodEnum<{
185
604
  conflict: "conflict";
186
605
  idempotency_conflict: "idempotency_conflict";
187
606
  limit_exceeded: "limit_exceeded";
607
+ nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
608
+ nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
188
609
  provider_verification_failed: "provider_verification_failed";
189
610
  upstream_unavailable: "upstream_unavailable";
190
611
  internal_error: "internal_error";
@@ -200,6 +621,8 @@ declare const ErrorEnvelope: z.ZodObject<{
200
621
  conflict: "conflict";
201
622
  idempotency_conflict: "idempotency_conflict";
202
623
  limit_exceeded: "limit_exceeded";
624
+ nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
625
+ nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
203
626
  provider_verification_failed: "provider_verification_failed";
204
627
  upstream_unavailable: "upstream_unavailable";
205
628
  internal_error: "internal_error";
@@ -210,6 +633,46 @@ declare const ErrorEnvelope: z.ZodObject<{
210
633
  }, z.core.$strip>;
211
634
  }, z.core.$strip>;
212
635
  type ErrorEnvelope = z.infer<typeof ErrorEnvelope>;
636
+ /** Physical ceiling of the PostgreSQL integer columns that persist depth policy. */
637
+ declare const MAX_NESTED_AGENT_DEPTH = 2147483647;
638
+ declare const NestedAgentDepthValue: z.ZodNumber;
639
+ type NestedAgentDepthValue = z.infer<typeof NestedAgentDepthValue>;
640
+ /** A denied child can be one greater than the persisted PostgreSQL int ceiling. */
641
+ declare const NestedAgentDepthAttemptValue: z.ZodNumber;
642
+ declare const NestedAgentDepthPolicySource: z.ZodEnum<{
643
+ default: "default";
644
+ session: "session";
645
+ workspace: "workspace";
646
+ deployment: "deployment";
647
+ }>;
648
+ type NestedAgentDepthPolicySource = z.infer<typeof NestedAgentDepthPolicySource>;
649
+ /** Durable evidence for a session-create denial at the database admission boundary. */
650
+ declare const SessionSpawnDenial: z.ZodObject<{
651
+ id: z.ZodString;
652
+ accountId: z.ZodString;
653
+ workspaceId: z.ZodString;
654
+ parentSessionId: z.ZodNullable<z.ZodString>;
655
+ rootSessionId: z.ZodNullable<z.ZodString>;
656
+ currentDepth: z.ZodNumber;
657
+ attemptedDepth: z.ZodNumber;
658
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
659
+ requestedMaxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
660
+ policySource: z.ZodEnum<{
661
+ default: "default";
662
+ session: "session";
663
+ workspace: "workspace";
664
+ deployment: "deployment";
665
+ }>;
666
+ policySessionId: z.ZodNullable<z.ZodString>;
667
+ subjectId: z.ZodNullable<z.ZodString>;
668
+ code: z.ZodEnum<{
669
+ nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
670
+ nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
671
+ }>;
672
+ idempotencyKey: z.ZodNullable<z.ZodString>;
673
+ createdAt: z.ZodString;
674
+ }, z.core.$strip>;
675
+ type SessionSpawnDenial = z.infer<typeof SessionSpawnDenial>;
213
676
  declare const Permission: z.ZodEnum<{
214
677
  "account:read": "account:read";
215
678
  "account:admin": "account:admin";
@@ -251,6 +714,15 @@ declare const Permission: z.ZodEnum<{
251
714
  "rigs:manage": "rigs:manage";
252
715
  }>;
253
716
  type Permission = z.infer<typeof Permission>;
717
+ /**
718
+ * Capability-first permissions signed into a session's first-party OpenGeni
719
+ * MCP token when a top-level creator does not explicitly narrow them.
720
+ *
721
+ * Keep this contract shared by admission and runtime signing: a worker-signed
722
+ * child whose parent was narrowed must inherit the parent's effective subset,
723
+ * never fall back to a different runtime-local default.
724
+ */
725
+ declare const DEFAULT_FIRST_PARTY_MCP_PERMISSIONS: readonly ["workspace:read", "files:read", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "goals:manage", "sessions:read", "sessions:create", "sessions:control", "variable-sets:use", "variable-sets:manage", "rigs:use", "github:use"];
254
726
  declare function prefixedMcpToolName(registryId: string, toolName: string): string;
255
727
  declare const ProductAccessMode: z.ZodEnum<{
256
728
  local: "local";
@@ -615,6 +1087,7 @@ declare const WorkspaceSettingsSchema: z.ZodObject<{
615
1087
  maxPerMonth: z.ZodNullable<z.ZodNumber>;
616
1088
  }, z.core.$strict>;
617
1089
  }, z.core.$strict>>;
1090
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
618
1091
  }, z.core.$loose>;
619
1092
  type WorkspaceSettings = z.infer<typeof WorkspaceSettingsSchema>;
620
1093
  declare function resolveWorkspaceMemoryEnabled(settings: unknown): boolean;
@@ -672,6 +1145,7 @@ declare const UpdateWorkspaceSettingsRequest: z.ZodObject<{
672
1145
  maxPerMonth: z.ZodNullable<z.ZodNumber>;
673
1146
  }, z.core.$strict>;
674
1147
  }, z.core.$strict>>;
1148
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
675
1149
  }, z.core.$loose>;
676
1150
  type UpdateWorkspaceSettingsRequest = z.infer<typeof UpdateWorkspaceSettingsRequest>;
677
1151
  declare const SetWorkspaceDefaultRigRequest: z.ZodObject<{
@@ -1561,8 +2035,29 @@ type GitCredentialsRequest = {
1561
2035
  installationId: number;
1562
2036
  repositoryIds: number[];
1563
2037
  };
2038
+ /**
2039
+ * One exact repository route exposed by a host-owned HTTPS smart-Git broker.
2040
+ *
2041
+ * `repositoryUri` must echo one URI from the request's `repositoryRefs`.
2042
+ * `brokerUri` is a stable, credential-free HTTPS remote. The rotating bearer
2043
+ * remains separate in `GitCredentials.token`, so it cannot leak through Git
2044
+ * configuration, provider-CLI arguments, manifests, or repository metadata.
2045
+ */
2046
+ type GitHttpBrokerRepositoryRoute = {
2047
+ repositoryUri: string;
2048
+ brokerUri: string;
2049
+ };
2050
+ /**
2051
+ * Optional transport override for credentials that cannot be safely narrowed
2052
+ * into a provider token. Omission retains the provider-token behavior.
2053
+ */
2054
+ type GitCredentialTransport = {
2055
+ kind: "http_broker";
2056
+ repositories: GitHttpBrokerRepositoryRoute[];
2057
+ };
1564
2058
  type GitCredentials = {
1565
2059
  token?: string;
2060
+ transport?: GitCredentialTransport;
1566
2061
  workspaceId: string;
1567
2062
  credentialBindingId?: GitCredentialBindingId;
1568
2063
  provider?: GitCredentialProvider;
@@ -1696,8 +2191,8 @@ declare const McpServerConnectionRef: z.ZodObject<{
1696
2191
  kind: z.ZodLiteral<"repository">;
1697
2192
  }, z.core.$strict>>>;
1698
2193
  subjectScope: z.ZodOptional<z.ZodEnum<{
1699
- subject: "subject";
1700
2194
  workspace: "workspace";
2195
+ subject: "subject";
1701
2196
  }>>;
1702
2197
  }, z.core.$strict>;
1703
2198
  type McpServerConnectionRef = z.infer<typeof McpServerConnectionRef>;
@@ -1718,6 +2213,8 @@ type McpCredentialsRequest = {
1718
2213
  /** Immediate technical caller, retained only as non-authoritative audit context. */
1719
2214
  callerSubjectId?: string;
1720
2215
  surface: "model" | "toolspace";
2216
+ /** Canonical MCP destination that will receive the resolved headers. */
2217
+ destinationUrl: string;
1721
2218
  serverId: string;
1722
2219
  toolName?: string;
1723
2220
  connectionRef: McpServerConnectionRef;
@@ -2484,6 +2981,61 @@ declare const ToolRef: z.ZodObject<{
2484
2981
  optional: z.ZodOptional<z.ZodBoolean>;
2485
2982
  }, z.core.$strip>;
2486
2983
  type ToolRef = z.infer<typeof ToolRef>;
2984
+ declare const SessionMcpServerId: z.ZodString;
2985
+ type SessionMcpServerId = z.infer<typeof SessionMcpServerId>;
2986
+ declare const SessionToolPolicy: z.ZodObject<{
2987
+ mode: z.ZodEnum<{
2988
+ explicit: "explicit";
2989
+ workspace_default: "workspace_default";
2990
+ inherited: "inherited";
2991
+ legacy: "legacy";
2992
+ }>;
2993
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
2994
+ }, z.core.$strip>;
2995
+ type SessionToolPolicy = z.infer<typeof SessionToolPolicy>;
2996
+ declare const SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT = 64;
2997
+ declare const SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH = 200;
2998
+ declare const SessionEffectiveToolPolicy: z.ZodObject<{
2999
+ mode: z.ZodEnum<{
3000
+ explicit: "explicit";
3001
+ workspace_default: "workspace_default";
3002
+ inherited: "inherited";
3003
+ legacy: "legacy";
3004
+ }>;
3005
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
3006
+ selectedIds: z.ZodArray<z.ZodString>;
3007
+ effectiveIds: z.ZodArray<z.ZodString>;
3008
+ mandatoryIds: z.ZodArray<z.ZodString>;
3009
+ lazyRouter: z.ZodObject<{
3010
+ state: z.ZodEnum<{
3011
+ disabled: "disabled";
3012
+ required: "required";
3013
+ }>;
3014
+ deferredIds: z.ZodArray<z.ZodString>;
3015
+ }, z.core.$strict>;
3016
+ configuredIds: z.ZodArray<z.ZodString>;
3017
+ droppedIds: z.ZodArray<z.ZodString>;
3018
+ counts: z.ZodObject<{
3019
+ selected: z.ZodNumber;
3020
+ effective: z.ZodNumber;
3021
+ mandatory: z.ZodNumber;
3022
+ deferred: z.ZodNumber;
3023
+ configured: z.ZodNumber;
3024
+ dropped: z.ZodNumber;
3025
+ }, z.core.$strict>;
3026
+ idsTruncated: z.ZodBoolean;
3027
+ }, z.core.$strict>;
3028
+ type SessionEffectiveToolPolicy = z.infer<typeof SessionEffectiveToolPolicy>;
3029
+ /**
3030
+ * Human-approval policy for one MCP server. `true` gates every tool, `false`
3031
+ * gates none, and a list gates only those unprefixed names.
3032
+ */
3033
+ declare const SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES = 2048;
3034
+ declare const SESSION_MCP_APPROVAL_POLICY_MAX_BYTES: number;
3035
+ declare const SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES = 1024;
3036
+ declare const SESSION_MCP_SERVERS_MAX = 64;
3037
+ declare const SessionMcpApprovalPolicy: z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>;
3038
+ type SessionMcpApprovalPolicy = z.infer<typeof SessionMcpApprovalPolicy>;
2487
3039
  declare const SessionMcpServerInput: z.ZodObject<{
2488
3040
  id: z.ZodString;
2489
3041
  name: z.ZodOptional<z.ZodString>;
@@ -2491,7 +3043,7 @@ declare const SessionMcpServerInput: z.ZodObject<{
2491
3043
  allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
2492
3044
  timeoutMs: z.ZodOptional<z.ZodNumber>;
2493
3045
  cacheToolsList: z.ZodOptional<z.ZodBoolean>;
2494
- requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
3046
+ requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
2495
3047
  headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
2496
3048
  connectionRef: z.ZodOptional<z.ZodObject<{
2497
3049
  connectionId: z.ZodOptional<z.ZodString>;
@@ -2510,8 +3062,8 @@ declare const SessionMcpServerInput: z.ZodObject<{
2510
3062
  kind: z.ZodLiteral<"repository">;
2511
3063
  }, z.core.$strict>>>;
2512
3064
  subjectScope: z.ZodOptional<z.ZodEnum<{
2513
- subject: "subject";
2514
3065
  workspace: "workspace";
3066
+ subject: "subject";
2515
3067
  }>>;
2516
3068
  }, z.core.$strict>>;
2517
3069
  }, z.core.$strip>;
@@ -2527,6 +3079,7 @@ declare const SessionMcpServerMetadata: z.ZodObject<{
2527
3079
  url: z.ZodString;
2528
3080
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
2529
3081
  credentialVersion: z.ZodNumber;
3082
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
2530
3083
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
2531
3084
  connectionId: z.ZodOptional<z.ZodString>;
2532
3085
  provider: z.ZodOptional<z.ZodString>;
@@ -2544,12 +3097,49 @@ declare const SessionMcpServerMetadata: z.ZodObject<{
2544
3097
  kind: z.ZodLiteral<"repository">;
2545
3098
  }, z.core.$strict>>>;
2546
3099
  subjectScope: z.ZodOptional<z.ZodEnum<{
2547
- subject: "subject";
2548
3100
  workspace: "workspace";
3101
+ subject: "subject";
2549
3102
  }>>;
2550
3103
  }, z.core.$strict>>>;
2551
3104
  }, z.core.$strict>;
2552
3105
  type SessionMcpServerMetadata = z.infer<typeof SessionMcpServerMetadata>;
3106
+ declare const UpdateSessionMcpApprovalPolicyRequest: z.ZodObject<{
3107
+ requireApproval: z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>;
3108
+ }, z.core.$strict>;
3109
+ type UpdateSessionMcpApprovalPolicyRequest = z.infer<typeof UpdateSessionMcpApprovalPolicyRequest>;
3110
+ declare const UpdateSessionMcpApprovalPolicyResponse: z.ZodObject<{
3111
+ server: z.ZodObject<{
3112
+ id: z.ZodString;
3113
+ name: z.ZodNullable<z.ZodString>;
3114
+ url: z.ZodString;
3115
+ headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
3116
+ credentialVersion: z.ZodNumber;
3117
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
3118
+ connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
3119
+ connectionId: z.ZodOptional<z.ZodString>;
3120
+ provider: z.ZodOptional<z.ZodString>;
3121
+ providerDomain: z.ZodString;
3122
+ kind: z.ZodOptional<z.ZodEnum<{
3123
+ oauth2: "oauth2";
3124
+ api_key: "api_key";
3125
+ app_install: "app_install";
3126
+ delegated: "delegated";
3127
+ }>>;
3128
+ scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
3129
+ resource: z.ZodOptional<z.ZodString>;
3130
+ selectedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
3131
+ id: z.ZodString;
3132
+ kind: z.ZodLiteral<"repository">;
3133
+ }, z.core.$strict>>>;
3134
+ subjectScope: z.ZodOptional<z.ZodEnum<{
3135
+ workspace: "workspace";
3136
+ subject: "subject";
3137
+ }>>;
3138
+ }, z.core.$strict>>>;
3139
+ }, z.core.$strict>;
3140
+ effectiveFrom: z.ZodLiteral<"next_attempt">;
3141
+ }, z.core.$strict>;
3142
+ type UpdateSessionMcpApprovalPolicyResponse = z.infer<typeof UpdateSessionMcpApprovalPolicyResponse>;
2553
3143
  declare class ResourceRefConflictError extends Error {
2554
3144
  constructor(message: string);
2555
3145
  }
@@ -2613,6 +3203,57 @@ declare const SessionGoalPausedReason: z.ZodEnum<{
2613
3203
  limits: "limits";
2614
3204
  }>;
2615
3205
  type SessionGoalPausedReason = z.infer<typeof SessionGoalPausedReason>;
3206
+ declare const SessionGoalContinuationState: z.ZodEnum<{
3207
+ running: "running";
3208
+ inactive: "inactive";
3209
+ scheduled: "scheduled";
3210
+ blocked: "blocked";
3211
+ invariant_broken: "invariant_broken";
3212
+ }>;
3213
+ type SessionGoalContinuationState = z.infer<typeof SessionGoalContinuationState>;
3214
+ declare const SessionGoalContinuationReason: z.ZodEnum<{
3215
+ goal_inactive: "goal_inactive";
3216
+ wake_pending: "wake_pending";
3217
+ continuation_pending: "continuation_pending";
3218
+ human_work_pending: "human_work_pending";
3219
+ goal_turn_running: "goal_turn_running";
3220
+ human_turn_running: "human_turn_running";
3221
+ workstream_paused: "workstream_paused";
3222
+ approval_required: "approval_required";
3223
+ provider_backpressure: "provider_backpressure";
3224
+ session_cancelled: "session_cancelled";
3225
+ system_work_pending: "system_work_pending";
3226
+ missing_obligation: "missing_obligation";
3227
+ }>;
3228
+ type SessionGoalContinuationReason = z.infer<typeof SessionGoalContinuationReason>;
3229
+ declare const SessionGoalContinuation: z.ZodObject<{
3230
+ state: z.ZodEnum<{
3231
+ running: "running";
3232
+ inactive: "inactive";
3233
+ scheduled: "scheduled";
3234
+ blocked: "blocked";
3235
+ invariant_broken: "invariant_broken";
3236
+ }>;
3237
+ reason: z.ZodEnum<{
3238
+ goal_inactive: "goal_inactive";
3239
+ wake_pending: "wake_pending";
3240
+ continuation_pending: "continuation_pending";
3241
+ human_work_pending: "human_work_pending";
3242
+ goal_turn_running: "goal_turn_running";
3243
+ human_turn_running: "human_turn_running";
3244
+ workstream_paused: "workstream_paused";
3245
+ approval_required: "approval_required";
3246
+ provider_backpressure: "provider_backpressure";
3247
+ session_cancelled: "session_cancelled";
3248
+ system_work_pending: "system_work_pending";
3249
+ missing_obligation: "missing_obligation";
3250
+ }>;
3251
+ wakeRevision: z.ZodNumber;
3252
+ observedRevision: z.ZodNumber;
3253
+ nextAttemptAt: z.ZodNullable<z.ZodString>;
3254
+ lastError: z.ZodNullable<z.ZodString>;
3255
+ }, z.core.$strip>;
3256
+ type SessionGoalContinuation = z.infer<typeof SessionGoalContinuation>;
2616
3257
  declare const SessionGoal: z.ZodObject<{
2617
3258
  id: z.ZodString;
2618
3259
  accountId: z.ZodString;
@@ -2638,6 +3279,33 @@ declare const SessionGoal: z.ZodObject<{
2638
3279
  noProgressStreak: z.ZodNumber;
2639
3280
  maxAutoContinuations: z.ZodNullable<z.ZodNumber>;
2640
3281
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
3282
+ continuation: z.ZodOptional<z.ZodObject<{
3283
+ state: z.ZodEnum<{
3284
+ running: "running";
3285
+ inactive: "inactive";
3286
+ scheduled: "scheduled";
3287
+ blocked: "blocked";
3288
+ invariant_broken: "invariant_broken";
3289
+ }>;
3290
+ reason: z.ZodEnum<{
3291
+ goal_inactive: "goal_inactive";
3292
+ wake_pending: "wake_pending";
3293
+ continuation_pending: "continuation_pending";
3294
+ human_work_pending: "human_work_pending";
3295
+ goal_turn_running: "goal_turn_running";
3296
+ human_turn_running: "human_turn_running";
3297
+ workstream_paused: "workstream_paused";
3298
+ approval_required: "approval_required";
3299
+ provider_backpressure: "provider_backpressure";
3300
+ session_cancelled: "session_cancelled";
3301
+ system_work_pending: "system_work_pending";
3302
+ missing_obligation: "missing_obligation";
3303
+ }>;
3304
+ wakeRevision: z.ZodNumber;
3305
+ observedRevision: z.ZodNumber;
3306
+ nextAttemptAt: z.ZodNullable<z.ZodString>;
3307
+ lastError: z.ZodNullable<z.ZodString>;
3308
+ }, z.core.$strip>>;
2641
3309
  createdAt: z.ZodString;
2642
3310
  updatedAt: z.ZodString;
2643
3311
  }, z.core.$strip>;
@@ -2767,6 +3435,7 @@ declare const SessionAuthorizationOperation: z.ZodEnum<{
2767
3435
  "session.human_input.read": "session.human_input.read";
2768
3436
  "session.human_input.write": "session.human_input.write";
2769
3437
  "session.title.write": "session.title.write";
3438
+ "session.mcp.approval_policy.write": "session.mcp.approval_policy.write";
2770
3439
  "session.goal.read": "session.goal.read";
2771
3440
  "session.goal.write": "session.goal.write";
2772
3441
  "session.child.create": "session.child.create";
@@ -2915,6 +3584,7 @@ declare const SessionTurn: z.ZodObject<{
2915
3584
  id: z.ZodString;
2916
3585
  optional: z.ZodOptional<z.ZodBoolean>;
2917
3586
  }, z.core.$strip>>;
3587
+ toolsProvided: z.ZodOptional<z.ZodBoolean>;
2918
3588
  model: z.ZodString;
2919
3589
  reasoningEffort: z.ZodEnum<{
2920
3590
  none: "none";
@@ -2966,8 +3636,8 @@ declare const SessionTurn: z.ZodObject<{
2966
3636
  type SessionTurn = z.infer<typeof SessionTurn>;
2967
3637
  declare const EffectiveControlBlocker: z.ZodObject<{
2968
3638
  kind: z.ZodEnum<{
2969
- workspace: "workspace";
2970
3639
  session: "session";
3640
+ workspace: "workspace";
2971
3641
  }>;
2972
3642
  sessionId: z.ZodOptional<z.ZodString>;
2973
3643
  displayName: z.ZodString;
@@ -2979,8 +3649,8 @@ declare const EffectiveControlBlocker: z.ZodObject<{
2979
3649
  type EffectiveControlBlocker = z.infer<typeof EffectiveControlBlocker>;
2980
3650
  declare const EffectiveControlResumeOption: z.ZodObject<{
2981
3651
  scope: z.ZodEnum<{
2982
- workspace: "workspace";
2983
3652
  session: "session";
3653
+ workspace: "workspace";
2984
3654
  selected: "selected";
2985
3655
  }>;
2986
3656
  targetId: z.ZodOptional<z.ZodString>;
@@ -2990,8 +3660,8 @@ declare const EffectiveControlResumeOption: z.ZodObject<{
2990
3660
  }>;
2991
3661
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
2992
3662
  kind: z.ZodEnum<{
2993
- workspace: "workspace";
2994
3663
  session: "session";
3664
+ workspace: "workspace";
2995
3665
  }>;
2996
3666
  sessionId: z.ZodOptional<z.ZodString>;
2997
3667
  displayName: z.ZodString;
@@ -3016,8 +3686,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
3016
3686
  }>;
3017
3687
  primaryBlocker: z.ZodNullable<z.ZodObject<{
3018
3688
  kind: z.ZodEnum<{
3019
- workspace: "workspace";
3020
3689
  session: "session";
3690
+ workspace: "workspace";
3021
3691
  }>;
3022
3692
  sessionId: z.ZodOptional<z.ZodString>;
3023
3693
  displayName: z.ZodString;
@@ -3029,8 +3699,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
3029
3699
  additionalBlockerCount: z.ZodNumber;
3030
3700
  blockers: z.ZodArray<z.ZodObject<{
3031
3701
  kind: z.ZodEnum<{
3032
- workspace: "workspace";
3033
3702
  session: "session";
3703
+ workspace: "workspace";
3034
3704
  }>;
3035
3705
  sessionId: z.ZodOptional<z.ZodString>;
3036
3706
  displayName: z.ZodString;
@@ -3041,8 +3711,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
3041
3711
  }, z.core.$strip>>;
3042
3712
  resumeOptions: z.ZodArray<z.ZodObject<{
3043
3713
  scope: z.ZodEnum<{
3044
- workspace: "workspace";
3045
3714
  session: "session";
3715
+ workspace: "workspace";
3046
3716
  selected: "selected";
3047
3717
  }>;
3048
3718
  targetId: z.ZodOptional<z.ZodString>;
@@ -3052,8 +3722,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
3052
3722
  }>;
3053
3723
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
3054
3724
  kind: z.ZodEnum<{
3055
- workspace: "workspace";
3056
3725
  session: "session";
3726
+ workspace: "workspace";
3057
3727
  }>;
3058
3728
  sessionId: z.ZodOptional<z.ZodString>;
3059
3729
  displayName: z.ZodString;
@@ -3125,6 +3795,7 @@ declare const ComposerDraft: z.ZodObject<{
3125
3795
  id: z.ZodString;
3126
3796
  optional: z.ZodOptional<z.ZodBoolean>;
3127
3797
  }, z.core.$strip>>;
3798
+ toolsProvided: z.ZodDefault<z.ZodBoolean>;
3128
3799
  model: z.ZodString;
3129
3800
  reasoningEffort: z.ZodEnum<{
3130
3801
  none: "none";
@@ -3154,8 +3825,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
3154
3825
  }>;
3155
3826
  primaryBlocker: z.ZodNullable<z.ZodObject<{
3156
3827
  kind: z.ZodEnum<{
3157
- workspace: "workspace";
3158
3828
  session: "session";
3829
+ workspace: "workspace";
3159
3830
  }>;
3160
3831
  sessionId: z.ZodOptional<z.ZodString>;
3161
3832
  displayName: z.ZodString;
@@ -3167,8 +3838,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
3167
3838
  additionalBlockerCount: z.ZodNumber;
3168
3839
  blockers: z.ZodArray<z.ZodObject<{
3169
3840
  kind: z.ZodEnum<{
3170
- workspace: "workspace";
3171
3841
  session: "session";
3842
+ workspace: "workspace";
3172
3843
  }>;
3173
3844
  sessionId: z.ZodOptional<z.ZodString>;
3174
3845
  displayName: z.ZodString;
@@ -3179,8 +3850,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
3179
3850
  }, z.core.$strip>>;
3180
3851
  resumeOptions: z.ZodArray<z.ZodObject<{
3181
3852
  scope: z.ZodEnum<{
3182
- workspace: "workspace";
3183
3853
  session: "session";
3854
+ workspace: "workspace";
3184
3855
  selected: "selected";
3185
3856
  }>;
3186
3857
  targetId: z.ZodOptional<z.ZodString>;
@@ -3190,8 +3861,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
3190
3861
  }>;
3191
3862
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
3192
3863
  kind: z.ZodEnum<{
3193
- workspace: "workspace";
3194
3864
  session: "session";
3865
+ workspace: "workspace";
3195
3866
  }>;
3196
3867
  sessionId: z.ZodOptional<z.ZodString>;
3197
3868
  displayName: z.ZodString;
@@ -3274,6 +3945,7 @@ declare const SessionQueueSnapshot: z.ZodObject<{
3274
3945
  id: z.ZodString;
3275
3946
  optional: z.ZodOptional<z.ZodBoolean>;
3276
3947
  }, z.core.$strip>>;
3948
+ toolsProvided: z.ZodOptional<z.ZodBoolean>;
3277
3949
  model: z.ZodString;
3278
3950
  reasoningEffort: z.ZodEnum<{
3279
3951
  none: "none";
@@ -3392,46 +4064,339 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
3392
4064
  id: z.ZodString;
3393
4065
  optional: z.ZodOptional<z.ZodBoolean>;
3394
4066
  }, z.core.$strip>>;
4067
+ toolsProvided: z.ZodDefault<z.ZodBoolean>;
3395
4068
  expectedRevision: z.ZodNumber;
3396
4069
  }, z.core.$strip>;
3397
4070
  type SaveComposerDraftRequest = z.infer<typeof SaveComposerDraftRequest>;
3398
- declare const WORKSPACE_CONTROL_REASON_MAX_BYTES: number;
3399
- declare const WORKSPACE_CONTROL_ACTOR_MAX_BYTES = 1024;
3400
- declare const WORKSPACE_CONTROL_EVENT_MAX_BYTES: number;
3401
- declare const SessionControlRequest: z.ZodObject<{
3402
- action: z.ZodEnum<{
3403
- pause: "pause";
3404
- resume: "resume";
3405
- }>;
3406
- reason: z.ZodOptional<z.ZodString>;
3407
- clientEventId: z.ZodString;
3408
- expectedControlEtag: z.ZodOptional<z.ZodString>;
3409
- }, z.core.$strip>;
3410
- type SessionControlRequest = z.infer<typeof SessionControlRequest>;
3411
- declare const WorkspaceInferenceControlRequest: z.ZodObject<{
3412
- action: z.ZodEnum<{
3413
- pause: "pause";
3414
- resume: "resume";
3415
- }>;
3416
- reason: z.ZodOptional<z.ZodString>;
3417
- clientEventId: z.ZodString;
3418
- expectedRevision: z.ZodOptional<z.ZodNumber>;
3419
- }, z.core.$strip>;
3420
- type WorkspaceInferenceControlRequest = z.infer<typeof WorkspaceInferenceControlRequest>;
3421
- declare const WorkspaceInferenceControlResponse: z.ZodObject<{
3422
- receipt: z.ZodObject<{
3423
- id: z.ZodString;
3424
- action: z.ZodString;
3425
- operationKey: z.ZodString;
3426
- targetSessionId: z.ZodNullable<z.ZodString>;
3427
- targetTurnId: z.ZodNullable<z.ZodString>;
3428
- appliedControlRevision: z.ZodNullable<z.ZodNumber>;
3429
- appliedQueueVersion: z.ZodNullable<z.ZodNumber>;
3430
- appliedTurnVersion: z.ZodNullable<z.ZodNumber>;
3431
- appliedDraftRevision: z.ZodNullable<z.ZodNumber>;
3432
- createdAt: z.ZodString;
3433
- }, z.core.$strip>;
3434
- state: z.ZodEnum<{
4071
+ /**
4072
+ * Create-only options saved with an actor's private pre-session draft. This is
4073
+ * deliberately narrower than CreateSessionRequest: idempotency/event keys and
4074
+ * credential-bearing MCP server inputs are per-attempt data, never draft state.
4075
+ */
4076
+ declare const NewSessionDraftOptions: z.ZodObject<{
4077
+ sandboxBackend: z.ZodOptional<z.ZodEnum<{
4078
+ docker: "docker";
4079
+ modal: "modal";
4080
+ local: "local";
4081
+ none: "none";
4082
+ daytona: "daytona";
4083
+ runloop: "runloop";
4084
+ e2b: "e2b";
4085
+ blaxel: "blaxel";
4086
+ cloudflare: "cloudflare";
4087
+ vercel: "vercel";
4088
+ selfhosted: "selfhosted";
4089
+ }>>;
4090
+ targetSandboxId: z.ZodOptional<z.ZodString>;
4091
+ workingDir: z.ZodOptional<z.ZodString>;
4092
+ variableSetId: z.ZodOptional<z.ZodString>;
4093
+ rigId: z.ZodOptional<z.ZodString>;
4094
+ goal: z.ZodOptional<z.ZodObject<{
4095
+ text: z.ZodString;
4096
+ successCriteria: z.ZodOptional<z.ZodString>;
4097
+ maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4098
+ }, z.core.$strip>>;
4099
+ firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
4100
+ "account:read": "account:read";
4101
+ "account:admin": "account:admin";
4102
+ "members:manage": "members:manage";
4103
+ "workspace:create": "workspace:create";
4104
+ "billing:read": "billing:read";
4105
+ "billing:manage": "billing:manage";
4106
+ "workspace:read": "workspace:read";
4107
+ "workspace:admin": "workspace:admin";
4108
+ "sessions:create": "sessions:create";
4109
+ "sessions:read": "sessions:read";
4110
+ "sessions:control": "sessions:control";
4111
+ "stream:view": "stream:view";
4112
+ "stream:control": "stream:control";
4113
+ "stream:acknowledge": "stream:acknowledge";
4114
+ "files:upload": "files:upload";
4115
+ "files:read": "files:read";
4116
+ "files:write": "files:write";
4117
+ "terminal:attach": "terminal:attach";
4118
+ "documents:manage": "documents:manage";
4119
+ "documents:search": "documents:search";
4120
+ "scheduled_tasks:manage": "scheduled_tasks:manage";
4121
+ "scheduled_tasks:run": "scheduled_tasks:run";
4122
+ "github:manage": "github:manage";
4123
+ "github:use": "github:use";
4124
+ "api_keys:manage": "api_keys:manage";
4125
+ "connections:read": "connections:read";
4126
+ "connections:write": "connections:write";
4127
+ "environments:manage": "environments:manage";
4128
+ "environments:use": "environments:use";
4129
+ "variable-sets:manage": "variable-sets:manage";
4130
+ "variable-sets:use": "variable-sets:use";
4131
+ "mcp_servers:attach": "mcp_servers:attach";
4132
+ "toolspace:call": "toolspace:call";
4133
+ "goals:manage": "goals:manage";
4134
+ "enrollments:read": "enrollments:read";
4135
+ "enrollments:manage": "enrollments:manage";
4136
+ "rigs:use": "rigs:use";
4137
+ "rigs:manage": "rigs:manage";
4138
+ }>>>;
4139
+ }, z.core.$strip>;
4140
+ type NewSessionDraftOptions = z.infer<typeof NewSessionDraftOptions>;
4141
+ /** Actor-private, server-authoritative composer state before a session exists. */
4142
+ declare const NewSessionDraft: z.ZodObject<{
4143
+ revision: z.ZodNumber;
4144
+ text: z.ZodString;
4145
+ resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
4146
+ kind: z.ZodLiteral<"repository">;
4147
+ uri: z.ZodString;
4148
+ ref: z.ZodString;
4149
+ mountPath: z.ZodOptional<z.ZodString>;
4150
+ subpath: z.ZodOptional<z.ZodString>;
4151
+ provider: z.ZodOptional<z.ZodEnum<{
4152
+ github: "github";
4153
+ gitlab: "gitlab";
4154
+ azure_devops: "azure_devops";
4155
+ }>>;
4156
+ credentialBindingId: z.ZodOptional<z.ZodString>;
4157
+ access: z.ZodOptional<z.ZodEnum<{
4158
+ read: "read";
4159
+ write: "write";
4160
+ }>>;
4161
+ repositoryId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4162
+ installationId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4163
+ projectId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4164
+ connectionId: z.ZodOptional<z.ZodString>;
4165
+ githubInstallationId: z.ZodOptional<z.ZodNumber>;
4166
+ githubRepositoryId: z.ZodOptional<z.ZodNumber>;
4167
+ }, z.core.$strip>, z.ZodObject<{
4168
+ kind: z.ZodLiteral<"file">;
4169
+ fileId: z.ZodString;
4170
+ mountPath: z.ZodOptional<z.ZodString>;
4171
+ }, z.core.$strip>], "kind">>;
4172
+ tools: z.ZodArray<z.ZodObject<{
4173
+ kind: z.ZodLiteral<"mcp">;
4174
+ id: z.ZodString;
4175
+ optional: z.ZodOptional<z.ZodBoolean>;
4176
+ }, z.core.$strip>>;
4177
+ model: z.ZodString;
4178
+ reasoningEffort: z.ZodEnum<{
4179
+ none: "none";
4180
+ minimal: "minimal";
4181
+ low: "low";
4182
+ medium: "medium";
4183
+ high: "high";
4184
+ xhigh: "xhigh";
4185
+ }>;
4186
+ options: z.ZodObject<{
4187
+ sandboxBackend: z.ZodOptional<z.ZodEnum<{
4188
+ docker: "docker";
4189
+ modal: "modal";
4190
+ local: "local";
4191
+ none: "none";
4192
+ daytona: "daytona";
4193
+ runloop: "runloop";
4194
+ e2b: "e2b";
4195
+ blaxel: "blaxel";
4196
+ cloudflare: "cloudflare";
4197
+ vercel: "vercel";
4198
+ selfhosted: "selfhosted";
4199
+ }>>;
4200
+ targetSandboxId: z.ZodOptional<z.ZodString>;
4201
+ workingDir: z.ZodOptional<z.ZodString>;
4202
+ variableSetId: z.ZodOptional<z.ZodString>;
4203
+ rigId: z.ZodOptional<z.ZodString>;
4204
+ goal: z.ZodOptional<z.ZodObject<{
4205
+ text: z.ZodString;
4206
+ successCriteria: z.ZodOptional<z.ZodString>;
4207
+ maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4208
+ }, z.core.$strip>>;
4209
+ firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
4210
+ "account:read": "account:read";
4211
+ "account:admin": "account:admin";
4212
+ "members:manage": "members:manage";
4213
+ "workspace:create": "workspace:create";
4214
+ "billing:read": "billing:read";
4215
+ "billing:manage": "billing:manage";
4216
+ "workspace:read": "workspace:read";
4217
+ "workspace:admin": "workspace:admin";
4218
+ "sessions:create": "sessions:create";
4219
+ "sessions:read": "sessions:read";
4220
+ "sessions:control": "sessions:control";
4221
+ "stream:view": "stream:view";
4222
+ "stream:control": "stream:control";
4223
+ "stream:acknowledge": "stream:acknowledge";
4224
+ "files:upload": "files:upload";
4225
+ "files:read": "files:read";
4226
+ "files:write": "files:write";
4227
+ "terminal:attach": "terminal:attach";
4228
+ "documents:manage": "documents:manage";
4229
+ "documents:search": "documents:search";
4230
+ "scheduled_tasks:manage": "scheduled_tasks:manage";
4231
+ "scheduled_tasks:run": "scheduled_tasks:run";
4232
+ "github:manage": "github:manage";
4233
+ "github:use": "github:use";
4234
+ "api_keys:manage": "api_keys:manage";
4235
+ "connections:read": "connections:read";
4236
+ "connections:write": "connections:write";
4237
+ "environments:manage": "environments:manage";
4238
+ "environments:use": "environments:use";
4239
+ "variable-sets:manage": "variable-sets:manage";
4240
+ "variable-sets:use": "variable-sets:use";
4241
+ "mcp_servers:attach": "mcp_servers:attach";
4242
+ "toolspace:call": "toolspace:call";
4243
+ "goals:manage": "goals:manage";
4244
+ "enrollments:read": "enrollments:read";
4245
+ "enrollments:manage": "enrollments:manage";
4246
+ "rigs:use": "rigs:use";
4247
+ "rigs:manage": "rigs:manage";
4248
+ }>>>;
4249
+ }, z.core.$strip>;
4250
+ updatedAt: z.ZodNullable<z.ZodString>;
4251
+ }, z.core.$strip>;
4252
+ type NewSessionDraft = z.infer<typeof NewSessionDraft>;
4253
+ declare const SaveNewSessionDraftRequest: z.ZodObject<{
4254
+ model: z.ZodString;
4255
+ text: z.ZodString;
4256
+ reasoningEffort: z.ZodEnum<{
4257
+ none: "none";
4258
+ minimal: "minimal";
4259
+ low: "low";
4260
+ medium: "medium";
4261
+ high: "high";
4262
+ xhigh: "xhigh";
4263
+ }>;
4264
+ resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
4265
+ kind: z.ZodLiteral<"repository">;
4266
+ uri: z.ZodString;
4267
+ ref: z.ZodString;
4268
+ mountPath: z.ZodOptional<z.ZodString>;
4269
+ subpath: z.ZodOptional<z.ZodString>;
4270
+ provider: z.ZodOptional<z.ZodEnum<{
4271
+ github: "github";
4272
+ gitlab: "gitlab";
4273
+ azure_devops: "azure_devops";
4274
+ }>>;
4275
+ credentialBindingId: z.ZodOptional<z.ZodString>;
4276
+ access: z.ZodOptional<z.ZodEnum<{
4277
+ read: "read";
4278
+ write: "write";
4279
+ }>>;
4280
+ repositoryId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4281
+ installationId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4282
+ projectId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
4283
+ connectionId: z.ZodOptional<z.ZodString>;
4284
+ githubInstallationId: z.ZodOptional<z.ZodNumber>;
4285
+ githubRepositoryId: z.ZodOptional<z.ZodNumber>;
4286
+ }, z.core.$strip>, z.ZodObject<{
4287
+ kind: z.ZodLiteral<"file">;
4288
+ fileId: z.ZodString;
4289
+ mountPath: z.ZodOptional<z.ZodString>;
4290
+ }, z.core.$strip>], "kind">>;
4291
+ tools: z.ZodArray<z.ZodObject<{
4292
+ kind: z.ZodLiteral<"mcp">;
4293
+ id: z.ZodString;
4294
+ optional: z.ZodOptional<z.ZodBoolean>;
4295
+ }, z.core.$strip>>;
4296
+ options: z.ZodObject<{
4297
+ sandboxBackend: z.ZodOptional<z.ZodEnum<{
4298
+ docker: "docker";
4299
+ modal: "modal";
4300
+ local: "local";
4301
+ none: "none";
4302
+ daytona: "daytona";
4303
+ runloop: "runloop";
4304
+ e2b: "e2b";
4305
+ blaxel: "blaxel";
4306
+ cloudflare: "cloudflare";
4307
+ vercel: "vercel";
4308
+ selfhosted: "selfhosted";
4309
+ }>>;
4310
+ targetSandboxId: z.ZodOptional<z.ZodString>;
4311
+ workingDir: z.ZodOptional<z.ZodString>;
4312
+ variableSetId: z.ZodOptional<z.ZodString>;
4313
+ rigId: z.ZodOptional<z.ZodString>;
4314
+ goal: z.ZodOptional<z.ZodObject<{
4315
+ text: z.ZodString;
4316
+ successCriteria: z.ZodOptional<z.ZodString>;
4317
+ maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4318
+ }, z.core.$strip>>;
4319
+ firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
4320
+ "account:read": "account:read";
4321
+ "account:admin": "account:admin";
4322
+ "members:manage": "members:manage";
4323
+ "workspace:create": "workspace:create";
4324
+ "billing:read": "billing:read";
4325
+ "billing:manage": "billing:manage";
4326
+ "workspace:read": "workspace:read";
4327
+ "workspace:admin": "workspace:admin";
4328
+ "sessions:create": "sessions:create";
4329
+ "sessions:read": "sessions:read";
4330
+ "sessions:control": "sessions:control";
4331
+ "stream:view": "stream:view";
4332
+ "stream:control": "stream:control";
4333
+ "stream:acknowledge": "stream:acknowledge";
4334
+ "files:upload": "files:upload";
4335
+ "files:read": "files:read";
4336
+ "files:write": "files:write";
4337
+ "terminal:attach": "terminal:attach";
4338
+ "documents:manage": "documents:manage";
4339
+ "documents:search": "documents:search";
4340
+ "scheduled_tasks:manage": "scheduled_tasks:manage";
4341
+ "scheduled_tasks:run": "scheduled_tasks:run";
4342
+ "github:manage": "github:manage";
4343
+ "github:use": "github:use";
4344
+ "api_keys:manage": "api_keys:manage";
4345
+ "connections:read": "connections:read";
4346
+ "connections:write": "connections:write";
4347
+ "environments:manage": "environments:manage";
4348
+ "environments:use": "environments:use";
4349
+ "variable-sets:manage": "variable-sets:manage";
4350
+ "variable-sets:use": "variable-sets:use";
4351
+ "mcp_servers:attach": "mcp_servers:attach";
4352
+ "toolspace:call": "toolspace:call";
4353
+ "goals:manage": "goals:manage";
4354
+ "enrollments:read": "enrollments:read";
4355
+ "enrollments:manage": "enrollments:manage";
4356
+ "rigs:use": "rigs:use";
4357
+ "rigs:manage": "rigs:manage";
4358
+ }>>>;
4359
+ }, z.core.$strip>;
4360
+ expectedRevision: z.ZodNumber;
4361
+ }, z.core.$strip>;
4362
+ type SaveNewSessionDraftRequest = z.infer<typeof SaveNewSessionDraftRequest>;
4363
+ declare const WORKSPACE_CONTROL_REASON_MAX_BYTES: number;
4364
+ declare const WORKSPACE_CONTROL_ACTOR_MAX_BYTES = 1024;
4365
+ declare const WORKSPACE_CONTROL_EVENT_MAX_BYTES: number;
4366
+ declare const SessionControlRequest: z.ZodObject<{
4367
+ action: z.ZodEnum<{
4368
+ pause: "pause";
4369
+ resume: "resume";
4370
+ }>;
4371
+ reason: z.ZodOptional<z.ZodString>;
4372
+ clientEventId: z.ZodString;
4373
+ expectedControlEtag: z.ZodOptional<z.ZodString>;
4374
+ }, z.core.$strip>;
4375
+ type SessionControlRequest = z.infer<typeof SessionControlRequest>;
4376
+ declare const WorkspaceInferenceControlRequest: z.ZodObject<{
4377
+ action: z.ZodEnum<{
4378
+ pause: "pause";
4379
+ resume: "resume";
4380
+ }>;
4381
+ reason: z.ZodOptional<z.ZodString>;
4382
+ clientEventId: z.ZodString;
4383
+ expectedRevision: z.ZodOptional<z.ZodNumber>;
4384
+ }, z.core.$strip>;
4385
+ type WorkspaceInferenceControlRequest = z.infer<typeof WorkspaceInferenceControlRequest>;
4386
+ declare const WorkspaceInferenceControlResponse: z.ZodObject<{
4387
+ receipt: z.ZodObject<{
4388
+ id: z.ZodString;
4389
+ action: z.ZodString;
4390
+ operationKey: z.ZodString;
4391
+ targetSessionId: z.ZodNullable<z.ZodString>;
4392
+ targetTurnId: z.ZodNullable<z.ZodString>;
4393
+ appliedControlRevision: z.ZodNullable<z.ZodNumber>;
4394
+ appliedQueueVersion: z.ZodNullable<z.ZodNumber>;
4395
+ appliedTurnVersion: z.ZodNullable<z.ZodNumber>;
4396
+ appliedDraftRevision: z.ZodNullable<z.ZodNumber>;
4397
+ createdAt: z.ZodString;
4398
+ }, z.core.$strip>;
4399
+ state: z.ZodEnum<{
3435
4400
  active: "active";
3436
4401
  paused: "paused";
3437
4402
  }>;
@@ -3477,8 +4442,8 @@ declare const WorkspaceControlEvent: z.ZodObject<{
3477
4442
  revision: z.ZodNumber;
3478
4443
  type: z.ZodLiteral<"workspace.control.changed">;
3479
4444
  scope: z.ZodEnum<{
3480
- workspace: "workspace";
3481
4445
  session: "session";
4446
+ workspace: "workspace";
3482
4447
  }>;
3483
4448
  rootSessionId: z.ZodNullable<z.ZodString>;
3484
4449
  action: z.ZodEnum<{
@@ -4103,6 +5068,7 @@ declare const ScheduledTaskAgentConfig: z.ZodObject<{
4103
5068
  successCriteria: z.ZodOptional<z.ZodString>;
4104
5069
  maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4105
5070
  }, z.core.$strip>>;
5071
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
4106
5072
  }, z.core.$strip>;
4107
5073
  type ScheduledTaskAgentConfig = z.infer<typeof ScheduledTaskAgentConfig>;
4108
5074
  declare const ScheduledTask: z.ZodObject<{
@@ -4210,6 +5176,7 @@ declare const ScheduledTask: z.ZodObject<{
4210
5176
  successCriteria: z.ZodOptional<z.ZodString>;
4211
5177
  maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4212
5178
  }, z.core.$strip>>;
5179
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
4213
5180
  }, z.core.$strip>;
4214
5181
  reusableSessionId: z.ZodNullable<z.ZodString>;
4215
5182
  variableSetId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -4340,6 +5307,7 @@ declare const CreateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
4340
5307
  successCriteria: z.ZodOptional<z.ZodString>;
4341
5308
  maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4342
5309
  }, z.core.$strip>>;
5310
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
4343
5311
  }, z.core.$strip>;
4344
5312
  status: z.ZodDefault<z.ZodEnum<{
4345
5313
  active: "active";
@@ -4448,6 +5416,7 @@ declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
4448
5416
  successCriteria: z.ZodOptional<z.ZodString>;
4449
5417
  maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
4450
5418
  }, z.core.$strip>>;
5419
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
4451
5420
  }, z.core.$strip>>;
4452
5421
  status: z.ZodOptional<z.ZodEnum<{
4453
5422
  active: "active";
@@ -5205,6 +6174,19 @@ declare const CapabilityRuntime: z.ZodObject<{
5205
6174
  mcpServerId: z.ZodOptional<z.ZodString>;
5206
6175
  transport: z.ZodOptional<z.ZodString>;
5207
6176
  notes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
6177
+ catalogTrust: z.ZodOptional<z.ZodObject<{
6178
+ state: z.ZodEnum<{
6179
+ trusted: "trusted";
6180
+ legacy_active: "legacy_active";
6181
+ unverified: "unverified";
6182
+ }>;
6183
+ reason: z.ZodEnum<{
6184
+ trusted_source: "trusted_source";
6185
+ verified_probe: "verified_probe";
6186
+ active_installation_compatibility: "active_installation_compatibility";
6187
+ missing_verification: "missing_verification";
6188
+ }>;
6189
+ }, z.core.$strip>>;
5208
6190
  }, z.core.$strip>;
5209
6191
  type CapabilityRuntime = z.infer<typeof CapabilityRuntime>;
5210
6192
  declare const CapabilityCatalogItem: z.ZodObject<{
@@ -5264,6 +6246,19 @@ declare const CapabilityCatalogItem: z.ZodObject<{
5264
6246
  mcpServerId: z.ZodOptional<z.ZodString>;
5265
6247
  transport: z.ZodOptional<z.ZodString>;
5266
6248
  notes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
6249
+ catalogTrust: z.ZodOptional<z.ZodObject<{
6250
+ state: z.ZodEnum<{
6251
+ trusted: "trusted";
6252
+ legacy_active: "legacy_active";
6253
+ unverified: "unverified";
6254
+ }>;
6255
+ reason: z.ZodEnum<{
6256
+ trusted_source: "trusted_source";
6257
+ verified_probe: "verified_probe";
6258
+ active_installation_compatibility: "active_installation_compatibility";
6259
+ missing_verification: "missing_verification";
6260
+ }>;
6261
+ }, z.core.$strip>>;
5267
6262
  }, z.core.$strip>>;
5268
6263
  enabled: z.ZodDefault<z.ZodBoolean>;
5269
6264
  enabledReason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -5277,6 +6272,14 @@ declare const CapabilityCatalogItem: z.ZodObject<{
5277
6272
  updatedAt: z.ZodOptional<z.ZodString>;
5278
6273
  }, z.core.$strip>;
5279
6274
  type CapabilityCatalogItem = z.infer<typeof CapabilityCatalogItem>;
6275
+ /**
6276
+ * Shared trust gate for catalog visibility and runtime selection. Registry rows
6277
+ * remain durable for provenance and audit, but only a reviewed real-MCP probe
6278
+ * with known authentication is exposable. API-key rows additionally need a
6279
+ * machine-actionable header contract; prose credential instructions are not a
6280
+ * runtime contract and must fail closed.
6281
+ */
6282
+ declare function capabilityCatalogItemIsTrustedForExposure(item: Pick<CapabilityCatalogItem, "source" | "stale" | "authKind" | "metadata">): boolean;
5280
6283
  declare const CapabilityInstallation: z.ZodObject<{
5281
6284
  id: z.ZodString;
5282
6285
  accountId: z.ZodString;
@@ -5346,8 +6349,8 @@ declare const EnableCapabilityRequest: z.ZodPreprocess<z.ZodObject<{
5346
6349
  kind: z.ZodLiteral<"repository">;
5347
6350
  }, z.core.$strict>>>;
5348
6351
  subjectScope: z.ZodOptional<z.ZodEnum<{
5349
- subject: "subject";
5350
6352
  workspace: "workspace";
6353
+ subject: "subject";
5351
6354
  }>>;
5352
6355
  }, z.core.$strict>>;
5353
6356
  headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -5413,6 +6416,19 @@ declare const CapabilityCatalogResponse: z.ZodObject<{
5413
6416
  mcpServerId: z.ZodOptional<z.ZodString>;
5414
6417
  transport: z.ZodOptional<z.ZodString>;
5415
6418
  notes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
6419
+ catalogTrust: z.ZodOptional<z.ZodObject<{
6420
+ state: z.ZodEnum<{
6421
+ trusted: "trusted";
6422
+ legacy_active: "legacy_active";
6423
+ unverified: "unverified";
6424
+ }>;
6425
+ reason: z.ZodEnum<{
6426
+ trusted_source: "trusted_source";
6427
+ verified_probe: "verified_probe";
6428
+ active_installation_compatibility: "active_installation_compatibility";
6429
+ missing_verification: "missing_verification";
6430
+ }>;
6431
+ }, z.core.$strip>>;
5416
6432
  }, z.core.$strip>>;
5417
6433
  enabled: z.ZodDefault<z.ZodBoolean>;
5418
6434
  enabledReason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -5506,6 +6522,19 @@ declare const DiscoverMcpCapabilitiesResponse: z.ZodObject<{
5506
6522
  mcpServerId: z.ZodOptional<z.ZodString>;
5507
6523
  transport: z.ZodOptional<z.ZodString>;
5508
6524
  notes: z.ZodDefault<z.ZodNullable<z.ZodString>>;
6525
+ catalogTrust: z.ZodOptional<z.ZodObject<{
6526
+ state: z.ZodEnum<{
6527
+ trusted: "trusted";
6528
+ legacy_active: "legacy_active";
6529
+ unverified: "unverified";
6530
+ }>;
6531
+ reason: z.ZodEnum<{
6532
+ trusted_source: "trusted_source";
6533
+ verified_probe: "verified_probe";
6534
+ active_installation_compatibility: "active_installation_compatibility";
6535
+ missing_verification: "missing_verification";
6536
+ }>;
6537
+ }, z.core.$strip>>;
5509
6538
  }, z.core.$strip>>;
5510
6539
  enabled: z.ZodDefault<z.ZodBoolean>;
5511
6540
  enabledReason: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -5575,6 +6604,45 @@ declare const Session: z.ZodObject<{
5575
6604
  id: z.ZodString;
5576
6605
  optional: z.ZodOptional<z.ZodBoolean>;
5577
6606
  }, z.core.$strip>>;
6607
+ toolPolicy: z.ZodOptional<z.ZodObject<{
6608
+ mode: z.ZodEnum<{
6609
+ explicit: "explicit";
6610
+ workspace_default: "workspace_default";
6611
+ inherited: "inherited";
6612
+ legacy: "legacy";
6613
+ }>;
6614
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
6615
+ }, z.core.$strip>>;
6616
+ effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
6617
+ mode: z.ZodEnum<{
6618
+ explicit: "explicit";
6619
+ workspace_default: "workspace_default";
6620
+ inherited: "inherited";
6621
+ legacy: "legacy";
6622
+ }>;
6623
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
6624
+ selectedIds: z.ZodArray<z.ZodString>;
6625
+ effectiveIds: z.ZodArray<z.ZodString>;
6626
+ mandatoryIds: z.ZodArray<z.ZodString>;
6627
+ lazyRouter: z.ZodObject<{
6628
+ state: z.ZodEnum<{
6629
+ disabled: "disabled";
6630
+ required: "required";
6631
+ }>;
6632
+ deferredIds: z.ZodArray<z.ZodString>;
6633
+ }, z.core.$strict>;
6634
+ configuredIds: z.ZodArray<z.ZodString>;
6635
+ droppedIds: z.ZodArray<z.ZodString>;
6636
+ counts: z.ZodObject<{
6637
+ selected: z.ZodNumber;
6638
+ effective: z.ZodNumber;
6639
+ mandatory: z.ZodNumber;
6640
+ deferred: z.ZodNumber;
6641
+ configured: z.ZodNumber;
6642
+ dropped: z.ZodNumber;
6643
+ }, z.core.$strict>;
6644
+ idsTruncated: z.ZodBoolean;
6645
+ }, z.core.$strict>>;
5578
6646
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
5579
6647
  createdBy: z.ZodObject<{
5580
6648
  subjectId: z.ZodString;
@@ -5657,6 +6725,7 @@ declare const Session: z.ZodObject<{
5657
6725
  url: z.ZodString;
5658
6726
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
5659
6727
  credentialVersion: z.ZodNumber;
6728
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
5660
6729
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
5661
6730
  connectionId: z.ZodOptional<z.ZodString>;
5662
6731
  provider: z.ZodOptional<z.ZodString>;
@@ -5674,12 +6743,23 @@ declare const Session: z.ZodObject<{
5674
6743
  kind: z.ZodLiteral<"repository">;
5675
6744
  }, z.core.$strict>>>;
5676
6745
  subjectScope: z.ZodOptional<z.ZodEnum<{
5677
- subject: "subject";
5678
6746
  workspace: "workspace";
6747
+ subject: "subject";
5679
6748
  }>>;
5680
6749
  }, z.core.$strict>>>;
5681
6750
  }, z.core.$strict>>>;
5682
6751
  parentSessionId: z.ZodNullable<z.ZodString>;
6752
+ rootSessionId: z.ZodString;
6753
+ nestedAgentDepth: z.ZodNumber;
6754
+ maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
6755
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
6756
+ nestedAgentDepthPolicySource: z.ZodEnum<{
6757
+ default: "default";
6758
+ session: "session";
6759
+ workspace: "workspace";
6760
+ deployment: "deployment";
6761
+ }>;
6762
+ nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
5683
6763
  createIdempotencyKey: z.ZodNullable<z.ZodString>;
5684
6764
  temporalWorkflowId: z.ZodNullable<z.ZodString>;
5685
6765
  activeTurnId: z.ZodNullable<z.ZodString>;
@@ -5700,8 +6780,8 @@ declare const Session: z.ZodObject<{
5700
6780
  }>;
5701
6781
  primaryBlocker: z.ZodNullable<z.ZodObject<{
5702
6782
  kind: z.ZodEnum<{
5703
- workspace: "workspace";
5704
6783
  session: "session";
6784
+ workspace: "workspace";
5705
6785
  }>;
5706
6786
  sessionId: z.ZodOptional<z.ZodString>;
5707
6787
  displayName: z.ZodString;
@@ -5713,8 +6793,8 @@ declare const Session: z.ZodObject<{
5713
6793
  additionalBlockerCount: z.ZodNumber;
5714
6794
  blockers: z.ZodArray<z.ZodObject<{
5715
6795
  kind: z.ZodEnum<{
5716
- workspace: "workspace";
5717
6796
  session: "session";
6797
+ workspace: "workspace";
5718
6798
  }>;
5719
6799
  sessionId: z.ZodOptional<z.ZodString>;
5720
6800
  displayName: z.ZodString;
@@ -5725,8 +6805,8 @@ declare const Session: z.ZodObject<{
5725
6805
  }, z.core.$strip>>;
5726
6806
  resumeOptions: z.ZodArray<z.ZodObject<{
5727
6807
  scope: z.ZodEnum<{
5728
- workspace: "workspace";
5729
6808
  session: "session";
6809
+ workspace: "workspace";
5730
6810
  selected: "selected";
5731
6811
  }>;
5732
6812
  targetId: z.ZodOptional<z.ZodString>;
@@ -5736,8 +6816,8 @@ declare const Session: z.ZodObject<{
5736
6816
  }>;
5737
6817
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
5738
6818
  kind: z.ZodEnum<{
5739
- workspace: "workspace";
5740
6819
  session: "session";
6820
+ workspace: "workspace";
5741
6821
  }>;
5742
6822
  sessionId: z.ZodOptional<z.ZodString>;
5743
6823
  displayName: z.ZodString;
@@ -5837,6 +6917,45 @@ declare const CreateSessionResponse: z.ZodObject<{
5837
6917
  id: z.ZodString;
5838
6918
  optional: z.ZodOptional<z.ZodBoolean>;
5839
6919
  }, z.core.$strip>>;
6920
+ toolPolicy: z.ZodOptional<z.ZodObject<{
6921
+ mode: z.ZodEnum<{
6922
+ explicit: "explicit";
6923
+ workspace_default: "workspace_default";
6924
+ inherited: "inherited";
6925
+ legacy: "legacy";
6926
+ }>;
6927
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
6928
+ }, z.core.$strip>>;
6929
+ effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
6930
+ mode: z.ZodEnum<{
6931
+ explicit: "explicit";
6932
+ workspace_default: "workspace_default";
6933
+ inherited: "inherited";
6934
+ legacy: "legacy";
6935
+ }>;
6936
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
6937
+ selectedIds: z.ZodArray<z.ZodString>;
6938
+ effectiveIds: z.ZodArray<z.ZodString>;
6939
+ mandatoryIds: z.ZodArray<z.ZodString>;
6940
+ lazyRouter: z.ZodObject<{
6941
+ state: z.ZodEnum<{
6942
+ disabled: "disabled";
6943
+ required: "required";
6944
+ }>;
6945
+ deferredIds: z.ZodArray<z.ZodString>;
6946
+ }, z.core.$strict>;
6947
+ configuredIds: z.ZodArray<z.ZodString>;
6948
+ droppedIds: z.ZodArray<z.ZodString>;
6949
+ counts: z.ZodObject<{
6950
+ selected: z.ZodNumber;
6951
+ effective: z.ZodNumber;
6952
+ mandatory: z.ZodNumber;
6953
+ deferred: z.ZodNumber;
6954
+ configured: z.ZodNumber;
6955
+ dropped: z.ZodNumber;
6956
+ }, z.core.$strict>;
6957
+ idsTruncated: z.ZodBoolean;
6958
+ }, z.core.$strict>>;
5840
6959
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
5841
6960
  createdBy: z.ZodObject<{
5842
6961
  subjectId: z.ZodString;
@@ -5919,6 +7038,7 @@ declare const CreateSessionResponse: z.ZodObject<{
5919
7038
  url: z.ZodString;
5920
7039
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
5921
7040
  credentialVersion: z.ZodNumber;
7041
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
5922
7042
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
5923
7043
  connectionId: z.ZodOptional<z.ZodString>;
5924
7044
  provider: z.ZodOptional<z.ZodString>;
@@ -5936,12 +7056,23 @@ declare const CreateSessionResponse: z.ZodObject<{
5936
7056
  kind: z.ZodLiteral<"repository">;
5937
7057
  }, z.core.$strict>>>;
5938
7058
  subjectScope: z.ZodOptional<z.ZodEnum<{
5939
- subject: "subject";
5940
7059
  workspace: "workspace";
7060
+ subject: "subject";
5941
7061
  }>>;
5942
7062
  }, z.core.$strict>>>;
5943
7063
  }, z.core.$strict>>>;
5944
7064
  parentSessionId: z.ZodNullable<z.ZodString>;
7065
+ rootSessionId: z.ZodString;
7066
+ nestedAgentDepth: z.ZodNumber;
7067
+ maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
7068
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
7069
+ nestedAgentDepthPolicySource: z.ZodEnum<{
7070
+ default: "default";
7071
+ session: "session";
7072
+ workspace: "workspace";
7073
+ deployment: "deployment";
7074
+ }>;
7075
+ nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
5945
7076
  createIdempotencyKey: z.ZodNullable<z.ZodString>;
5946
7077
  temporalWorkflowId: z.ZodNullable<z.ZodString>;
5947
7078
  activeTurnId: z.ZodNullable<z.ZodString>;
@@ -5962,8 +7093,8 @@ declare const CreateSessionResponse: z.ZodObject<{
5962
7093
  }>;
5963
7094
  primaryBlocker: z.ZodNullable<z.ZodObject<{
5964
7095
  kind: z.ZodEnum<{
5965
- workspace: "workspace";
5966
7096
  session: "session";
7097
+ workspace: "workspace";
5967
7098
  }>;
5968
7099
  sessionId: z.ZodOptional<z.ZodString>;
5969
7100
  displayName: z.ZodString;
@@ -5975,8 +7106,8 @@ declare const CreateSessionResponse: z.ZodObject<{
5975
7106
  additionalBlockerCount: z.ZodNumber;
5976
7107
  blockers: z.ZodArray<z.ZodObject<{
5977
7108
  kind: z.ZodEnum<{
5978
- workspace: "workspace";
5979
7109
  session: "session";
7110
+ workspace: "workspace";
5980
7111
  }>;
5981
7112
  sessionId: z.ZodOptional<z.ZodString>;
5982
7113
  displayName: z.ZodString;
@@ -5987,8 +7118,8 @@ declare const CreateSessionResponse: z.ZodObject<{
5987
7118
  }, z.core.$strip>>;
5988
7119
  resumeOptions: z.ZodArray<z.ZodObject<{
5989
7120
  scope: z.ZodEnum<{
5990
- workspace: "workspace";
5991
7121
  session: "session";
7122
+ workspace: "workspace";
5992
7123
  selected: "selected";
5993
7124
  }>;
5994
7125
  targetId: z.ZodOptional<z.ZodString>;
@@ -5998,8 +7129,8 @@ declare const CreateSessionResponse: z.ZodObject<{
5998
7129
  }>;
5999
7130
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
6000
7131
  kind: z.ZodEnum<{
6001
- workspace: "workspace";
6002
7132
  session: "session";
7133
+ workspace: "workspace";
6003
7134
  }>;
6004
7135
  sessionId: z.ZodOptional<z.ZodString>;
6005
7136
  displayName: z.ZodString;
@@ -6105,6 +7236,45 @@ declare const SessionListResponse: z.ZodObject<{
6105
7236
  id: z.ZodString;
6106
7237
  optional: z.ZodOptional<z.ZodBoolean>;
6107
7238
  }, z.core.$strip>>;
7239
+ toolPolicy: z.ZodOptional<z.ZodObject<{
7240
+ mode: z.ZodEnum<{
7241
+ explicit: "explicit";
7242
+ workspace_default: "workspace_default";
7243
+ inherited: "inherited";
7244
+ legacy: "legacy";
7245
+ }>;
7246
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7247
+ }, z.core.$strip>>;
7248
+ effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
7249
+ mode: z.ZodEnum<{
7250
+ explicit: "explicit";
7251
+ workspace_default: "workspace_default";
7252
+ inherited: "inherited";
7253
+ legacy: "legacy";
7254
+ }>;
7255
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7256
+ selectedIds: z.ZodArray<z.ZodString>;
7257
+ effectiveIds: z.ZodArray<z.ZodString>;
7258
+ mandatoryIds: z.ZodArray<z.ZodString>;
7259
+ lazyRouter: z.ZodObject<{
7260
+ state: z.ZodEnum<{
7261
+ disabled: "disabled";
7262
+ required: "required";
7263
+ }>;
7264
+ deferredIds: z.ZodArray<z.ZodString>;
7265
+ }, z.core.$strict>;
7266
+ configuredIds: z.ZodArray<z.ZodString>;
7267
+ droppedIds: z.ZodArray<z.ZodString>;
7268
+ counts: z.ZodObject<{
7269
+ selected: z.ZodNumber;
7270
+ effective: z.ZodNumber;
7271
+ mandatory: z.ZodNumber;
7272
+ deferred: z.ZodNumber;
7273
+ configured: z.ZodNumber;
7274
+ dropped: z.ZodNumber;
7275
+ }, z.core.$strict>;
7276
+ idsTruncated: z.ZodBoolean;
7277
+ }, z.core.$strict>>;
6108
7278
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
6109
7279
  createdBy: z.ZodObject<{
6110
7280
  subjectId: z.ZodString;
@@ -6187,6 +7357,7 @@ declare const SessionListResponse: z.ZodObject<{
6187
7357
  url: z.ZodString;
6188
7358
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
6189
7359
  credentialVersion: z.ZodNumber;
7360
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
6190
7361
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
6191
7362
  connectionId: z.ZodOptional<z.ZodString>;
6192
7363
  provider: z.ZodOptional<z.ZodString>;
@@ -6204,12 +7375,23 @@ declare const SessionListResponse: z.ZodObject<{
6204
7375
  kind: z.ZodLiteral<"repository">;
6205
7376
  }, z.core.$strict>>>;
6206
7377
  subjectScope: z.ZodOptional<z.ZodEnum<{
6207
- subject: "subject";
6208
7378
  workspace: "workspace";
7379
+ subject: "subject";
6209
7380
  }>>;
6210
7381
  }, z.core.$strict>>>;
6211
7382
  }, z.core.$strict>>>;
6212
7383
  parentSessionId: z.ZodNullable<z.ZodString>;
7384
+ rootSessionId: z.ZodString;
7385
+ nestedAgentDepth: z.ZodNumber;
7386
+ maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
7387
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
7388
+ nestedAgentDepthPolicySource: z.ZodEnum<{
7389
+ default: "default";
7390
+ session: "session";
7391
+ workspace: "workspace";
7392
+ deployment: "deployment";
7393
+ }>;
7394
+ nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
6213
7395
  createIdempotencyKey: z.ZodNullable<z.ZodString>;
6214
7396
  temporalWorkflowId: z.ZodNullable<z.ZodString>;
6215
7397
  activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6230,8 +7412,8 @@ declare const SessionListResponse: z.ZodObject<{
6230
7412
  }>;
6231
7413
  primaryBlocker: z.ZodNullable<z.ZodObject<{
6232
7414
  kind: z.ZodEnum<{
6233
- workspace: "workspace";
6234
7415
  session: "session";
7416
+ workspace: "workspace";
6235
7417
  }>;
6236
7418
  sessionId: z.ZodOptional<z.ZodString>;
6237
7419
  displayName: z.ZodString;
@@ -6243,8 +7425,8 @@ declare const SessionListResponse: z.ZodObject<{
6243
7425
  additionalBlockerCount: z.ZodNumber;
6244
7426
  blockers: z.ZodArray<z.ZodObject<{
6245
7427
  kind: z.ZodEnum<{
6246
- workspace: "workspace";
6247
7428
  session: "session";
7429
+ workspace: "workspace";
6248
7430
  }>;
6249
7431
  sessionId: z.ZodOptional<z.ZodString>;
6250
7432
  displayName: z.ZodString;
@@ -6255,8 +7437,8 @@ declare const SessionListResponse: z.ZodObject<{
6255
7437
  }, z.core.$strip>>;
6256
7438
  resumeOptions: z.ZodArray<z.ZodObject<{
6257
7439
  scope: z.ZodEnum<{
6258
- workspace: "workspace";
6259
7440
  session: "session";
7441
+ workspace: "workspace";
6260
7442
  selected: "selected";
6261
7443
  }>;
6262
7444
  targetId: z.ZodOptional<z.ZodString>;
@@ -6266,8 +7448,8 @@ declare const SessionListResponse: z.ZodObject<{
6266
7448
  }>;
6267
7449
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
6268
7450
  kind: z.ZodEnum<{
6269
- workspace: "workspace";
6270
7451
  session: "session";
7452
+ workspace: "workspace";
6271
7453
  }>;
6272
7454
  sessionId: z.ZodOptional<z.ZodString>;
6273
7455
  displayName: z.ZodString;
@@ -6362,6 +7544,45 @@ declare const SessionListResponse: z.ZodObject<{
6362
7544
  id: z.ZodString;
6363
7545
  optional: z.ZodOptional<z.ZodBoolean>;
6364
7546
  }, z.core.$strip>>;
7547
+ toolPolicy: z.ZodOptional<z.ZodObject<{
7548
+ mode: z.ZodEnum<{
7549
+ explicit: "explicit";
7550
+ workspace_default: "workspace_default";
7551
+ inherited: "inherited";
7552
+ legacy: "legacy";
7553
+ }>;
7554
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7555
+ }, z.core.$strip>>;
7556
+ effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
7557
+ mode: z.ZodEnum<{
7558
+ explicit: "explicit";
7559
+ workspace_default: "workspace_default";
7560
+ inherited: "inherited";
7561
+ legacy: "legacy";
7562
+ }>;
7563
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7564
+ selectedIds: z.ZodArray<z.ZodString>;
7565
+ effectiveIds: z.ZodArray<z.ZodString>;
7566
+ mandatoryIds: z.ZodArray<z.ZodString>;
7567
+ lazyRouter: z.ZodObject<{
7568
+ state: z.ZodEnum<{
7569
+ disabled: "disabled";
7570
+ required: "required";
7571
+ }>;
7572
+ deferredIds: z.ZodArray<z.ZodString>;
7573
+ }, z.core.$strict>;
7574
+ configuredIds: z.ZodArray<z.ZodString>;
7575
+ droppedIds: z.ZodArray<z.ZodString>;
7576
+ counts: z.ZodObject<{
7577
+ selected: z.ZodNumber;
7578
+ effective: z.ZodNumber;
7579
+ mandatory: z.ZodNumber;
7580
+ deferred: z.ZodNumber;
7581
+ configured: z.ZodNumber;
7582
+ dropped: z.ZodNumber;
7583
+ }, z.core.$strict>;
7584
+ idsTruncated: z.ZodBoolean;
7585
+ }, z.core.$strict>>;
6365
7586
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
6366
7587
  createdBy: z.ZodObject<{
6367
7588
  subjectId: z.ZodString;
@@ -6444,6 +7665,7 @@ declare const SessionListResponse: z.ZodObject<{
6444
7665
  url: z.ZodString;
6445
7666
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
6446
7667
  credentialVersion: z.ZodNumber;
7668
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
6447
7669
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
6448
7670
  connectionId: z.ZodOptional<z.ZodString>;
6449
7671
  provider: z.ZodOptional<z.ZodString>;
@@ -6461,12 +7683,23 @@ declare const SessionListResponse: z.ZodObject<{
6461
7683
  kind: z.ZodLiteral<"repository">;
6462
7684
  }, z.core.$strict>>>;
6463
7685
  subjectScope: z.ZodOptional<z.ZodEnum<{
6464
- subject: "subject";
6465
7686
  workspace: "workspace";
7687
+ subject: "subject";
6466
7688
  }>>;
6467
7689
  }, z.core.$strict>>>;
6468
7690
  }, z.core.$strict>>>;
6469
7691
  parentSessionId: z.ZodNullable<z.ZodString>;
7692
+ rootSessionId: z.ZodString;
7693
+ nestedAgentDepth: z.ZodNumber;
7694
+ maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
7695
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
7696
+ nestedAgentDepthPolicySource: z.ZodEnum<{
7697
+ default: "default";
7698
+ session: "session";
7699
+ workspace: "workspace";
7700
+ deployment: "deployment";
7701
+ }>;
7702
+ nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
6470
7703
  createIdempotencyKey: z.ZodNullable<z.ZodString>;
6471
7704
  temporalWorkflowId: z.ZodNullable<z.ZodString>;
6472
7705
  activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6487,8 +7720,8 @@ declare const SessionListResponse: z.ZodObject<{
6487
7720
  }>;
6488
7721
  primaryBlocker: z.ZodNullable<z.ZodObject<{
6489
7722
  kind: z.ZodEnum<{
6490
- workspace: "workspace";
6491
7723
  session: "session";
7724
+ workspace: "workspace";
6492
7725
  }>;
6493
7726
  sessionId: z.ZodOptional<z.ZodString>;
6494
7727
  displayName: z.ZodString;
@@ -6500,8 +7733,8 @@ declare const SessionListResponse: z.ZodObject<{
6500
7733
  additionalBlockerCount: z.ZodNumber;
6501
7734
  blockers: z.ZodArray<z.ZodObject<{
6502
7735
  kind: z.ZodEnum<{
6503
- workspace: "workspace";
6504
7736
  session: "session";
7737
+ workspace: "workspace";
6505
7738
  }>;
6506
7739
  sessionId: z.ZodOptional<z.ZodString>;
6507
7740
  displayName: z.ZodString;
@@ -6512,8 +7745,8 @@ declare const SessionListResponse: z.ZodObject<{
6512
7745
  }, z.core.$strip>>;
6513
7746
  resumeOptions: z.ZodArray<z.ZodObject<{
6514
7747
  scope: z.ZodEnum<{
6515
- workspace: "workspace";
6516
7748
  session: "session";
7749
+ workspace: "workspace";
6517
7750
  selected: "selected";
6518
7751
  }>;
6519
7752
  targetId: z.ZodOptional<z.ZodString>;
@@ -6523,8 +7756,8 @@ declare const SessionListResponse: z.ZodObject<{
6523
7756
  }>;
6524
7757
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
6525
7758
  kind: z.ZodEnum<{
6526
- workspace: "workspace";
6527
7759
  session: "session";
7760
+ workspace: "workspace";
6528
7761
  }>;
6529
7762
  sessionId: z.ZodOptional<z.ZodString>;
6530
7763
  displayName: z.ZodString;
@@ -6627,6 +7860,45 @@ declare const SessionLineageResponse: z.ZodObject<{
6627
7860
  id: z.ZodString;
6628
7861
  optional: z.ZodOptional<z.ZodBoolean>;
6629
7862
  }, z.core.$strip>>;
7863
+ toolPolicy: z.ZodOptional<z.ZodObject<{
7864
+ mode: z.ZodEnum<{
7865
+ explicit: "explicit";
7866
+ workspace_default: "workspace_default";
7867
+ inherited: "inherited";
7868
+ legacy: "legacy";
7869
+ }>;
7870
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7871
+ }, z.core.$strip>>;
7872
+ effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
7873
+ mode: z.ZodEnum<{
7874
+ explicit: "explicit";
7875
+ workspace_default: "workspace_default";
7876
+ inherited: "inherited";
7877
+ legacy: "legacy";
7878
+ }>;
7879
+ inheritedFromSessionId: z.ZodNullable<z.ZodString>;
7880
+ selectedIds: z.ZodArray<z.ZodString>;
7881
+ effectiveIds: z.ZodArray<z.ZodString>;
7882
+ mandatoryIds: z.ZodArray<z.ZodString>;
7883
+ lazyRouter: z.ZodObject<{
7884
+ state: z.ZodEnum<{
7885
+ disabled: "disabled";
7886
+ required: "required";
7887
+ }>;
7888
+ deferredIds: z.ZodArray<z.ZodString>;
7889
+ }, z.core.$strict>;
7890
+ configuredIds: z.ZodArray<z.ZodString>;
7891
+ droppedIds: z.ZodArray<z.ZodString>;
7892
+ counts: z.ZodObject<{
7893
+ selected: z.ZodNumber;
7894
+ effective: z.ZodNumber;
7895
+ mandatory: z.ZodNumber;
7896
+ deferred: z.ZodNumber;
7897
+ configured: z.ZodNumber;
7898
+ dropped: z.ZodNumber;
7899
+ }, z.core.$strict>;
7900
+ idsTruncated: z.ZodBoolean;
7901
+ }, z.core.$strict>>;
6630
7902
  metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
6631
7903
  createdBy: z.ZodObject<{
6632
7904
  subjectId: z.ZodString;
@@ -6709,6 +7981,7 @@ declare const SessionLineageResponse: z.ZodObject<{
6709
7981
  url: z.ZodString;
6710
7982
  headerNames: z.ZodDefault<z.ZodArray<z.ZodString>>;
6711
7983
  credentialVersion: z.ZodNumber;
7984
+ requireApproval: z.ZodDefault<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
6712
7985
  connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
6713
7986
  connectionId: z.ZodOptional<z.ZodString>;
6714
7987
  provider: z.ZodOptional<z.ZodString>;
@@ -6726,12 +7999,23 @@ declare const SessionLineageResponse: z.ZodObject<{
6726
7999
  kind: z.ZodLiteral<"repository">;
6727
8000
  }, z.core.$strict>>>;
6728
8001
  subjectScope: z.ZodOptional<z.ZodEnum<{
6729
- subject: "subject";
6730
8002
  workspace: "workspace";
8003
+ subject: "subject";
6731
8004
  }>>;
6732
8005
  }, z.core.$strict>>>;
6733
8006
  }, z.core.$strict>>>;
6734
8007
  parentSessionId: z.ZodNullable<z.ZodString>;
8008
+ rootSessionId: z.ZodString;
8009
+ nestedAgentDepth: z.ZodNumber;
8010
+ maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
8011
+ effectiveMaxNestedAgentDepth: z.ZodNumber;
8012
+ nestedAgentDepthPolicySource: z.ZodEnum<{
8013
+ default: "default";
8014
+ session: "session";
8015
+ workspace: "workspace";
8016
+ deployment: "deployment";
8017
+ }>;
8018
+ nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
6735
8019
  createIdempotencyKey: z.ZodNullable<z.ZodString>;
6736
8020
  temporalWorkflowId: z.ZodNullable<z.ZodString>;
6737
8021
  activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6752,8 +8036,8 @@ declare const SessionLineageResponse: z.ZodObject<{
6752
8036
  }>;
6753
8037
  primaryBlocker: z.ZodNullable<z.ZodObject<{
6754
8038
  kind: z.ZodEnum<{
6755
- workspace: "workspace";
6756
8039
  session: "session";
8040
+ workspace: "workspace";
6757
8041
  }>;
6758
8042
  sessionId: z.ZodOptional<z.ZodString>;
6759
8043
  displayName: z.ZodString;
@@ -6765,8 +8049,8 @@ declare const SessionLineageResponse: z.ZodObject<{
6765
8049
  additionalBlockerCount: z.ZodNumber;
6766
8050
  blockers: z.ZodArray<z.ZodObject<{
6767
8051
  kind: z.ZodEnum<{
6768
- workspace: "workspace";
6769
8052
  session: "session";
8053
+ workspace: "workspace";
6770
8054
  }>;
6771
8055
  sessionId: z.ZodOptional<z.ZodString>;
6772
8056
  displayName: z.ZodString;
@@ -6777,8 +8061,8 @@ declare const SessionLineageResponse: z.ZodObject<{
6777
8061
  }, z.core.$strip>>;
6778
8062
  resumeOptions: z.ZodArray<z.ZodObject<{
6779
8063
  scope: z.ZodEnum<{
6780
- workspace: "workspace";
6781
8064
  session: "session";
8065
+ workspace: "workspace";
6782
8066
  selected: "selected";
6783
8067
  }>;
6784
8068
  targetId: z.ZodOptional<z.ZodString>;
@@ -6788,8 +8072,8 @@ declare const SessionLineageResponse: z.ZodObject<{
6788
8072
  }>;
6789
8073
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
6790
8074
  kind: z.ZodEnum<{
6791
- workspace: "workspace";
6792
8075
  session: "session";
8076
+ workspace: "workspace";
6793
8077
  }>;
6794
8078
  sessionId: z.ZodOptional<z.ZodString>;
6795
8079
  displayName: z.ZodString;
@@ -6861,6 +8145,7 @@ declare const SessionEventType: z.ZodEnum<{
6861
8145
  "agent.reasoning.delta": "agent.reasoning.delta";
6862
8146
  "agent.toolCall.created": "agent.toolCall.created";
6863
8147
  "agent.toolCall.output": "agent.toolCall.output";
8148
+ "agent.model.request": "agent.model.request";
6864
8149
  "agent.model.usage": "agent.model.usage";
6865
8150
  "tool.auth_needed": "tool.auth_needed";
6866
8151
  "credential.auth_needed": "credential.auth_needed";
@@ -6907,8 +8192,10 @@ declare const SessionEventType: z.ZodEnum<{
6907
8192
  "terminal.pty.output.delta": "terminal.pty.output.delta";
6908
8193
  "terminal.pty.exited": "terminal.pty.exited";
6909
8194
  "session.title_set": "session.title_set";
8195
+ "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
6910
8196
  "codex.account.switched": "codex.account.switched";
6911
8197
  "codex.credential.selected": "codex.credential.selected";
8198
+ "codex.fleet.decision": "codex.fleet.decision";
6912
8199
  "codex.capacity.waiting": "codex.capacity.waiting";
6913
8200
  "codex.capacity.resumed": "codex.capacity.resumed";
6914
8201
  "codex.capacity.superseded": "codex.capacity.superseded";
@@ -6941,12 +8228,34 @@ declare const SessionEventSemanticClass: z.ZodEnum<{
6941
8228
  provider_account: "provider_account";
6942
8229
  }>;
6943
8230
  type SessionEventSemanticClass = z.infer<typeof SessionEventSemanticClass>;
8231
+ /**
8232
+ * The semantic classes accepted by an exclusive latest lookup. `receipt` is
8233
+ * the concise public spelling for the historical `tool_receipt` class; the
8234
+ * latter remains accepted everywhere for backwards compatibility.
8235
+ */
8236
+ declare const SessionEventLatestClass: z.ZodEnum<{
8237
+ control: "control";
8238
+ receipt: "receipt";
8239
+ failure: "failure";
8240
+ terminal: "terminal";
8241
+ checkpoint: "checkpoint";
8242
+ tool_receipt: "tool_receipt";
8243
+ provider_account: "provider_account";
8244
+ }>;
8245
+ type SessionEventLatestClass = z.infer<typeof SessionEventLatestClass>;
8246
+ declare function sessionEventLatestClassToSemanticClass(value: SessionEventLatestClass): SessionEventSemanticClass;
6944
8247
  declare const SessionEventPayloadMode: z.ZodEnum<{
6945
8248
  none: "none";
6946
8249
  summary: "summary";
6947
8250
  full: "full";
6948
8251
  }>;
6949
8252
  type SessionEventPayloadMode = z.infer<typeof SessionEventPayloadMode>;
8253
+ /** Select the compact semantic-result projection instead of an event array. */
8254
+ declare const SessionEventResultMode: z.ZodEnum<{
8255
+ events: "events";
8256
+ compact: "compact";
8257
+ }>;
8258
+ type SessionEventResultMode = z.infer<typeof SessionEventResultMode>;
6950
8259
  declare const SessionEventReadMode: z.ZodEnum<{
6951
8260
  monitoring: "monitoring";
6952
8261
  forensic: "forensic";
@@ -6959,8 +8268,8 @@ declare const SessionEventReadDirection: z.ZodEnum<{
6959
8268
  type SessionEventReadDirection = z.infer<typeof SessionEventReadDirection>;
6960
8269
  declare const SESSION_EVENT_RAW_DELTA_TYPES: readonly ["agent.message.delta", "agent.reasoning.delta", "sandbox.command.output.delta", "terminal.pty.output.delta"];
6961
8270
  declare const SESSION_EVENT_SEMANTIC_CLASS_TYPES: {
6962
- readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled"];
6963
- readonly terminal: readonly ["turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "goal.completed", "goal.paused", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.completed", "sandbox.operation.failed", "recording.available", "recording.failed", "terminal.pty.exited"];
8271
+ readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated"];
8272
+ readonly terminal: readonly ["turn.completed", "agent.message.completed", "turn.failed", "turn.cancelled", "turn.superseded", "goal.completed", "goal.paused", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.completed", "sandbox.operation.failed", "recording.available", "recording.failed", "terminal.pty.exited"];
6964
8273
  readonly failure: readonly ["session.event.envelope_omitted", "turn.failed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "sandbox.operation.failed", "recording.failed", "sandbox.box.lost", "workspace.revision.degraded", "machine.op.failed", "machine.link.lost"];
6965
8274
  readonly checkpoint: readonly ["session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "turn.recovery.requested", "session.queue.history", "sandbox.box.snapshot", "workspace.revision.captured"];
6966
8275
  readonly tool_receipt: readonly ["agent.toolCall.created", "agent.toolCall.output", "tool.auth_needed", "artifact.created"];
@@ -7212,6 +8521,7 @@ declare const TerminalPtyExitedPayload: z.ZodObject<{
7212
8521
  exit: "exit";
7213
8522
  killed: "killed";
7214
8523
  owner_gone: "owner_gone";
8524
+ lost: "lost";
7215
8525
  }>;
7216
8526
  }, z.core.$strip>;
7217
8527
  type TerminalPtyExitedPayload = z.infer<typeof TerminalPtyExitedPayload>;
@@ -8125,8 +9435,8 @@ type TerminalExecRequest = z.infer<typeof TerminalExecRequest>;
8125
9435
  declare const TerminalExecResponse: z.ZodObject<{
8126
9436
  stdout: z.ZodString;
8127
9437
  stderr: z.ZodString;
8128
- exitCode: z.ZodNullable<z.ZodNumber>;
8129
- running: z.ZodBoolean;
9438
+ exitCode: z.ZodNumber;
9439
+ running: z.ZodLiteral<false>;
8130
9440
  wallTimeSeconds: z.ZodNumber;
8131
9441
  }, z.core.$strip>;
8132
9442
  type TerminalExecResponse = z.infer<typeof TerminalExecResponse>;
@@ -8209,6 +9519,7 @@ declare const SessionEvent: z.ZodObject<{
8209
9519
  "agent.reasoning.delta": "agent.reasoning.delta";
8210
9520
  "agent.toolCall.created": "agent.toolCall.created";
8211
9521
  "agent.toolCall.output": "agent.toolCall.output";
9522
+ "agent.model.request": "agent.model.request";
8212
9523
  "agent.model.usage": "agent.model.usage";
8213
9524
  "tool.auth_needed": "tool.auth_needed";
8214
9525
  "credential.auth_needed": "credential.auth_needed";
@@ -8255,8 +9566,10 @@ declare const SessionEvent: z.ZodObject<{
8255
9566
  "terminal.pty.output.delta": "terminal.pty.output.delta";
8256
9567
  "terminal.pty.exited": "terminal.pty.exited";
8257
9568
  "session.title_set": "session.title_set";
9569
+ "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
8258
9570
  "codex.account.switched": "codex.account.switched";
8259
9571
  "codex.credential.selected": "codex.credential.selected";
9572
+ "codex.fleet.decision": "codex.fleet.decision";
8260
9573
  "codex.capacity.waiting": "codex.capacity.waiting";
8261
9574
  "codex.capacity.resumed": "codex.capacity.resumed";
8262
9575
  "codex.capacity.superseded": "codex.capacity.superseded";
@@ -8289,6 +9602,62 @@ declare const SessionEvent: z.ZodObject<{
8289
9602
  duplicateReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
8290
9603
  }, z.core.$strip>;
8291
9604
  type SessionEvent = z.infer<typeof SessionEvent>;
9605
+ type SessionEventCompactResult = {
9606
+ version: 1;
9607
+ semanticClass: SessionEventSemanticClass;
9608
+ source: {
9609
+ id: string;
9610
+ type: SessionEventType;
9611
+ sequence: number;
9612
+ occurredAt: string;
9613
+ turnId: string | null;
9614
+ turnGeneration: number | null;
9615
+ turnAttemptId: string | null;
9616
+ turnAssociation: SessionEvent["turnAssociation"];
9617
+ };
9618
+ id: string;
9619
+ type: SessionEventType;
9620
+ sequence: number;
9621
+ occurredAt: string;
9622
+ turnId: string | null;
9623
+ turnGeneration: number | null;
9624
+ turnAttemptId: string | null;
9625
+ turnAssociation: SessionEvent["turnAssociation"];
9626
+ coveredSequence: {
9627
+ first: number;
9628
+ last: number;
9629
+ };
9630
+ status: "completed" | "failed" | "cancelled" | "superseded" | "checkpoint" | "receipt" | "unknown";
9631
+ text: string | null;
9632
+ output: unknown;
9633
+ result: unknown;
9634
+ failure: {
9635
+ error: string | null;
9636
+ code: string | null;
9637
+ retryable: boolean | null;
9638
+ recovery: string | null;
9639
+ } | null;
9640
+ checkpoint: unknown;
9641
+ receipt: unknown;
9642
+ truncation: {
9643
+ truncated: boolean;
9644
+ fields: string[];
9645
+ originalBytes: number | null;
9646
+ deliveredBytes: number;
9647
+ };
9648
+ };
9649
+ /**
9650
+ * Build the bounded semantic result used by `latest + result=compact`.
9651
+ *
9652
+ * This is intentionally a pure projection over one already-authoritative
9653
+ * event. It never reads history, invokes a model, follows a URL, or stores an
9654
+ * artifact. The DB/API/MCP layers decide which event is authoritative; this
9655
+ * helper only extracts the small result facts that can cross a client boundary.
9656
+ */
9657
+ declare function compactSessionEventResult(event: SessionEvent, semanticClass: SessionEventSemanticClass, coveredSequence?: {
9658
+ first: number;
9659
+ last: number;
9660
+ }): SessionEventCompactResult;
8292
9661
  /** Wire revision for the durable host event/usage export stream. */
8293
9662
  declare const OPENGENI_HOST_EXPORT_SCHEMA_REVISION: "2026-07-host-export-v1";
8294
9663
  /**
@@ -8601,8 +9970,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8601
9970
  }>;
8602
9971
  primaryBlocker: z.ZodNullable<z.ZodObject<{
8603
9972
  kind: z.ZodEnum<{
8604
- workspace: "workspace";
8605
9973
  session: "session";
9974
+ workspace: "workspace";
8606
9975
  }>;
8607
9976
  sessionId: z.ZodOptional<z.ZodString>;
8608
9977
  displayName: z.ZodString;
@@ -8614,8 +9983,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8614
9983
  additionalBlockerCount: z.ZodNumber;
8615
9984
  blockers: z.ZodArray<z.ZodObject<{
8616
9985
  kind: z.ZodEnum<{
8617
- workspace: "workspace";
8618
9986
  session: "session";
9987
+ workspace: "workspace";
8619
9988
  }>;
8620
9989
  sessionId: z.ZodOptional<z.ZodString>;
8621
9990
  displayName: z.ZodString;
@@ -8626,8 +9995,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8626
9995
  }, z.core.$strip>>;
8627
9996
  resumeOptions: z.ZodArray<z.ZodObject<{
8628
9997
  scope: z.ZodEnum<{
8629
- workspace: "workspace";
8630
9998
  session: "session";
9999
+ workspace: "workspace";
8631
10000
  selected: "selected";
8632
10001
  }>;
8633
10002
  targetId: z.ZodOptional<z.ZodString>;
@@ -8637,8 +10006,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8637
10006
  }>;
8638
10007
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
8639
10008
  kind: z.ZodEnum<{
8640
- workspace: "workspace";
8641
10009
  session: "session";
10010
+ workspace: "workspace";
8642
10011
  }>;
8643
10012
  sessionId: z.ZodOptional<z.ZodString>;
8644
10013
  displayName: z.ZodString;
@@ -8721,6 +10090,7 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8721
10090
  id: z.ZodString;
8722
10091
  optional: z.ZodOptional<z.ZodBoolean>;
8723
10092
  }, z.core.$strip>>;
10093
+ toolsProvided: z.ZodOptional<z.ZodBoolean>;
8724
10094
  model: z.ZodString;
8725
10095
  reasoningEffort: z.ZodEnum<{
8726
10096
  none: "none";
@@ -8805,6 +10175,7 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
8805
10175
  id: z.ZodString;
8806
10176
  optional: z.ZodOptional<z.ZodBoolean>;
8807
10177
  }, z.core.$strip>>;
10178
+ toolsProvided: z.ZodDefault<z.ZodBoolean>;
8808
10179
  model: z.ZodString;
8809
10180
  reasoningEffort: z.ZodEnum<{
8810
10181
  none: "none";
@@ -8846,8 +10217,8 @@ declare const SessionControlResponse: z.ZodObject<{
8846
10217
  }>;
8847
10218
  primaryBlocker: z.ZodNullable<z.ZodObject<{
8848
10219
  kind: z.ZodEnum<{
8849
- workspace: "workspace";
8850
10220
  session: "session";
10221
+ workspace: "workspace";
8851
10222
  }>;
8852
10223
  sessionId: z.ZodOptional<z.ZodString>;
8853
10224
  displayName: z.ZodString;
@@ -8859,8 +10230,8 @@ declare const SessionControlResponse: z.ZodObject<{
8859
10230
  additionalBlockerCount: z.ZodNumber;
8860
10231
  blockers: z.ZodArray<z.ZodObject<{
8861
10232
  kind: z.ZodEnum<{
8862
- workspace: "workspace";
8863
10233
  session: "session";
10234
+ workspace: "workspace";
8864
10235
  }>;
8865
10236
  sessionId: z.ZodOptional<z.ZodString>;
8866
10237
  displayName: z.ZodString;
@@ -8871,8 +10242,8 @@ declare const SessionControlResponse: z.ZodObject<{
8871
10242
  }, z.core.$strip>>;
8872
10243
  resumeOptions: z.ZodArray<z.ZodObject<{
8873
10244
  scope: z.ZodEnum<{
8874
- workspace: "workspace";
8875
10245
  session: "session";
10246
+ workspace: "workspace";
8876
10247
  selected: "selected";
8877
10248
  }>;
8878
10249
  targetId: z.ZodOptional<z.ZodString>;
@@ -8882,8 +10253,8 @@ declare const SessionControlResponse: z.ZodObject<{
8882
10253
  }>;
8883
10254
  remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
8884
10255
  kind: z.ZodEnum<{
8885
- workspace: "workspace";
8886
10256
  session: "session";
10257
+ workspace: "workspace";
8887
10258
  }>;
8888
10259
  sessionId: z.ZodOptional<z.ZodString>;
8889
10260
  displayName: z.ZodString;
@@ -8981,6 +10352,8 @@ declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
8981
10352
  }, z.core.$strip>>;
8982
10353
  clientEventId: z.ZodOptional<z.ZodString>;
8983
10354
  idempotencyKey: z.ZodOptional<z.ZodString>;
10355
+ expectedNewSessionDraftRevision: z.ZodOptional<z.ZodNumber>;
10356
+ maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
8984
10357
  firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
8985
10358
  "account:read": "account:read";
8986
10359
  "account:admin": "account:admin";
@@ -9028,7 +10401,7 @@ declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
9028
10401
  allowedTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
9029
10402
  timeoutMs: z.ZodOptional<z.ZodNumber>;
9030
10403
  cacheToolsList: z.ZodOptional<z.ZodBoolean>;
9031
- requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodArray<z.ZodString>]>>;
10404
+ requireApproval: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodPipe<z.ZodArray<z.ZodString>, z.ZodTransform<string[], string[]>>]>>;
9032
10405
  headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
9033
10406
  connectionRef: z.ZodOptional<z.ZodObject<{
9034
10407
  connectionId: z.ZodOptional<z.ZodString>;
@@ -9047,8 +10420,8 @@ declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
9047
10420
  kind: z.ZodLiteral<"repository">;
9048
10421
  }, z.core.$strict>>>;
9049
10422
  subjectScope: z.ZodOptional<z.ZodEnum<{
9050
- subject: "subject";
9051
10423
  workspace: "workspace";
10424
+ subject: "subject";
9052
10425
  }>>;
9053
10426
  }, z.core.$strict>>;
9054
10427
  }, z.core.$strip>>>;
@@ -9399,6 +10772,7 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
9399
10772
  "agent.reasoning.delta": "agent.reasoning.delta";
9400
10773
  "agent.toolCall.created": "agent.toolCall.created";
9401
10774
  "agent.toolCall.output": "agent.toolCall.output";
10775
+ "agent.model.request": "agent.model.request";
9402
10776
  "agent.model.usage": "agent.model.usage";
9403
10777
  "tool.auth_needed": "tool.auth_needed";
9404
10778
  "credential.auth_needed": "credential.auth_needed";
@@ -9445,8 +10819,10 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
9445
10819
  "terminal.pty.output.delta": "terminal.pty.output.delta";
9446
10820
  "terminal.pty.exited": "terminal.pty.exited";
9447
10821
  "session.title_set": "session.title_set";
10822
+ "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
9448
10823
  "codex.account.switched": "codex.account.switched";
9449
10824
  "codex.credential.selected": "codex.credential.selected";
10825
+ "codex.fleet.decision": "codex.fleet.decision";
9450
10826
  "codex.capacity.waiting": "codex.capacity.waiting";
9451
10827
  "codex.capacity.resumed": "codex.capacity.resumed";
9452
10828
  "codex.capacity.superseded": "codex.capacity.superseded";
@@ -9538,6 +10914,7 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
9538
10914
  id: z.ZodString;
9539
10915
  optional: z.ZodOptional<z.ZodBoolean>;
9540
10916
  }, z.core.$strip>>;
10917
+ toolsProvided: z.ZodOptional<z.ZodBoolean>;
9541
10918
  model: z.ZodString;
9542
10919
  reasoningEffort: z.ZodEnum<{
9543
10920
  none: "none";
@@ -9623,6 +11000,7 @@ declare const SessionBusMessage: z.ZodObject<{
9623
11000
  "agent.reasoning.delta": "agent.reasoning.delta";
9624
11001
  "agent.toolCall.created": "agent.toolCall.created";
9625
11002
  "agent.toolCall.output": "agent.toolCall.output";
11003
+ "agent.model.request": "agent.model.request";
9626
11004
  "agent.model.usage": "agent.model.usage";
9627
11005
  "tool.auth_needed": "tool.auth_needed";
9628
11006
  "credential.auth_needed": "credential.auth_needed";
@@ -9669,8 +11047,10 @@ declare const SessionBusMessage: z.ZodObject<{
9669
11047
  "terminal.pty.output.delta": "terminal.pty.output.delta";
9670
11048
  "terminal.pty.exited": "terminal.pty.exited";
9671
11049
  "session.title_set": "session.title_set";
11050
+ "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
9672
11051
  "codex.account.switched": "codex.account.switched";
9673
11052
  "codex.credential.selected": "codex.credential.selected";
11053
+ "codex.fleet.decision": "codex.fleet.decision";
9674
11054
  "codex.capacity.waiting": "codex.capacity.waiting";
9675
11055
  "codex.capacity.resumed": "codex.capacity.resumed";
9676
11056
  "codex.capacity.superseded": "codex.capacity.superseded";
@@ -9725,8 +11105,8 @@ declare const GitHubRepository: z.ZodObject<{
9725
11105
  }, z.core.$strip>;
9726
11106
  type GitHubRepository = z.infer<typeof GitHubRepository>;
9727
11107
  declare const GitHubRepositoryScope: z.ZodEnum<{
9728
- all: "all";
9729
11108
  selected: "selected";
11109
+ all: "all";
9730
11110
  }>;
9731
11111
  type GitHubRepositoryScope = z.infer<typeof GitHubRepositoryScope>;
9732
11112
  declare const GitHubInstallationBinding: z.ZodObject<{
@@ -9734,8 +11114,8 @@ declare const GitHubInstallationBinding: z.ZodObject<{
9734
11114
  accountLogin: z.ZodNullable<z.ZodString>;
9735
11115
  accountType: z.ZodNullable<z.ZodString>;
9736
11116
  repositoryScope: z.ZodEnum<{
9737
- all: "all";
9738
11117
  selected: "selected";
11118
+ all: "all";
9739
11119
  }>;
9740
11120
  repositoryCount: z.ZodNumber;
9741
11121
  createdAt: z.ZodString;
@@ -9754,8 +11134,8 @@ declare const GitHubAppInfo: z.ZodObject<{
9754
11134
  accountLogin: z.ZodNullable<z.ZodString>;
9755
11135
  accountType: z.ZodNullable<z.ZodString>;
9756
11136
  repositoryScope: z.ZodEnum<{
9757
- all: "all";
9758
11137
  selected: "selected";
11138
+ all: "all";
9759
11139
  }>;
9760
11140
  repositoryCount: z.ZodNumber;
9761
11141
  createdAt: z.ZodString;
@@ -9833,6 +11213,9 @@ declare const SessionCapabilities: z.ZodObject<{
9833
11213
  draining: "draining";
9834
11214
  }>;
9835
11215
  leaseEpoch: z.ZodNumber;
11216
+ workspaceGeneration: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
11217
+ archiveGeneration: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
11218
+ archiveComplete: z.ZodDefault<z.ZodBoolean>;
9836
11219
  viewerHeartbeatIntervalMs: z.ZodDefault<z.ZodNumber>;
9837
11220
  FileSystem: z.ZodObject<{
9838
11221
  available: z.ZodBoolean;
@@ -9994,6 +11377,9 @@ declare const ViewerHolder: z.ZodObject<{
9994
11377
  draining: "draining";
9995
11378
  }>;
9996
11379
  leaseEpoch: z.ZodNumber;
11380
+ workspaceGeneration: z.ZodNullable<z.ZodNumber>;
11381
+ archiveGeneration: z.ZodNullable<z.ZodNumber>;
11382
+ archiveComplete: z.ZodBoolean;
9997
11383
  viewerHeartbeatIntervalMs: z.ZodNumber;
9998
11384
  dataPlaneUrl: z.ZodNullable<z.ZodString>;
9999
11385
  }, z.core.$strip>;
@@ -10316,6 +11702,9 @@ declare const MachineView: z.ZodObject<{
10316
11702
  }>;
10317
11703
  active: z.ZodBoolean;
10318
11704
  isSessionGroup: z.ZodBoolean;
11705
+ workspaceGeneration: z.ZodNullable<z.ZodNumber>;
11706
+ archiveGeneration: z.ZodNullable<z.ZodNumber>;
11707
+ archiveComplete: z.ZodBoolean;
10319
11708
  os: z.ZodString;
10320
11709
  arch: z.ZodString;
10321
11710
  hasDisplay: z.ZodBoolean;
@@ -10365,6 +11754,9 @@ declare const MachinesResponse: z.ZodObject<{
10365
11754
  }>;
10366
11755
  active: z.ZodBoolean;
10367
11756
  isSessionGroup: z.ZodBoolean;
11757
+ workspaceGeneration: z.ZodNullable<z.ZodNumber>;
11758
+ archiveGeneration: z.ZodNullable<z.ZodNumber>;
11759
+ archiveComplete: z.ZodBoolean;
10368
11760
  os: z.ZodString;
10369
11761
  arch: z.ZodString;
10370
11762
  hasDisplay: z.ZodBoolean;
@@ -10416,6 +11808,9 @@ declare const SwapActiveSandboxResponse: z.ZodObject<{
10416
11808
  unsupported_backend_context: "unsupported_backend_context";
10417
11809
  transient_establishment: "transient_establishment";
10418
11810
  concurrent_swap: "concurrent_swap";
11811
+ recovery_in_progress: "recovery_in_progress";
11812
+ recovery_degraded: "recovery_degraded";
11813
+ recovery_unrecoverable: "recovery_unrecoverable";
10419
11814
  }>>;
10420
11815
  }, z.core.$strip>;
10421
11816
  type SwapActiveSandboxResponse = z.infer<typeof SwapActiveSandboxResponse>;
@@ -10439,7 +11834,294 @@ declare const MachineMetricsSeriesResponse: z.ZodObject<{
10439
11834
  sampledAt: z.ZodString;
10440
11835
  }, z.core.$strip>>;
10441
11836
  }, z.core.$strip>;
10442
- type MachineMetricsSeriesResponse = z.infer<typeof MachineMetricsSeriesResponse>;
11837
+ type MachineMetricsSeriesResponse = z.infer<typeof MachineMetricsSeriesResponse>;
11838
+ declare const ModelCapabilitySupportV1: z.ZodEnum<{
11839
+ unknown: "unknown";
11840
+ supported: "supported";
11841
+ unsupported: "unsupported";
11842
+ }>;
11843
+ type ModelCapabilitySupportV1 = z.infer<typeof ModelCapabilitySupportV1>;
11844
+ declare const ModelCapabilityStateV1: z.ZodObject<{
11845
+ upstream: z.ZodEnum<{
11846
+ unknown: "unknown";
11847
+ supported: "supported";
11848
+ unsupported: "unsupported";
11849
+ }>;
11850
+ runnable: z.ZodBoolean;
11851
+ }, z.core.$strip>;
11852
+ type ModelCapabilityStateV1 = z.infer<typeof ModelCapabilityStateV1>;
11853
+ declare const ModelCapabilitiesV1: z.ZodObject<{
11854
+ reasoning: z.ZodObject<{
11855
+ upstream: z.ZodEnum<{
11856
+ unknown: "unknown";
11857
+ supported: "supported";
11858
+ unsupported: "unsupported";
11859
+ }>;
11860
+ runnable: z.ZodBoolean;
11861
+ efforts: z.ZodArray<z.ZodEnum<{
11862
+ none: "none";
11863
+ minimal: "minimal";
11864
+ low: "low";
11865
+ medium: "medium";
11866
+ high: "high";
11867
+ xhigh: "xhigh";
11868
+ }>>;
11869
+ defaultEffort: z.ZodNullable<z.ZodEnum<{
11870
+ none: "none";
11871
+ minimal: "minimal";
11872
+ low: "low";
11873
+ medium: "medium";
11874
+ high: "high";
11875
+ xhigh: "xhigh";
11876
+ }>>;
11877
+ required: z.ZodBoolean;
11878
+ }, z.core.$strip>;
11879
+ functionCalling: z.ZodObject<{
11880
+ upstream: z.ZodEnum<{
11881
+ unknown: "unknown";
11882
+ supported: "supported";
11883
+ unsupported: "unsupported";
11884
+ }>;
11885
+ runnable: z.ZodBoolean;
11886
+ }, z.core.$strip>;
11887
+ structuredOutput: z.ZodObject<{
11888
+ upstream: z.ZodEnum<{
11889
+ unknown: "unknown";
11890
+ supported: "supported";
11891
+ unsupported: "unsupported";
11892
+ }>;
11893
+ runnable: z.ZodBoolean;
11894
+ }, z.core.$strip>;
11895
+ hostedTools: z.ZodObject<{
11896
+ webSearch: z.ZodObject<{
11897
+ upstream: z.ZodEnum<{
11898
+ unknown: "unknown";
11899
+ supported: "supported";
11900
+ unsupported: "unsupported";
11901
+ }>;
11902
+ runnable: z.ZodBoolean;
11903
+ }, z.core.$strip>;
11904
+ xSearch: z.ZodObject<{
11905
+ upstream: z.ZodEnum<{
11906
+ unknown: "unknown";
11907
+ supported: "supported";
11908
+ unsupported: "unsupported";
11909
+ }>;
11910
+ runnable: z.ZodBoolean;
11911
+ }, z.core.$strip>;
11912
+ codeExecution: z.ZodObject<{
11913
+ upstream: z.ZodEnum<{
11914
+ unknown: "unknown";
11915
+ supported: "supported";
11916
+ unsupported: "unsupported";
11917
+ }>;
11918
+ runnable: z.ZodBoolean;
11919
+ }, z.core.$strip>;
11920
+ }, z.core.$strip>;
11921
+ inputModalities: z.ZodArray<z.ZodEnum<{
11922
+ text: "text";
11923
+ image: "image";
11924
+ audio: "audio";
11925
+ }>>;
11926
+ outputModalities: z.ZodArray<z.ZodEnum<{
11927
+ text: "text";
11928
+ image: "image";
11929
+ audio: "audio";
11930
+ }>>;
11931
+ transports: z.ZodObject<{
11932
+ sse: z.ZodObject<{
11933
+ upstream: z.ZodEnum<{
11934
+ unknown: "unknown";
11935
+ supported: "supported";
11936
+ unsupported: "unsupported";
11937
+ }>;
11938
+ runnable: z.ZodBoolean;
11939
+ }, z.core.$strip>;
11940
+ responsesWebSocket: z.ZodObject<{
11941
+ upstream: z.ZodEnum<{
11942
+ unknown: "unknown";
11943
+ supported: "supported";
11944
+ unsupported: "unsupported";
11945
+ }>;
11946
+ runnable: z.ZodBoolean;
11947
+ }, z.core.$strip>;
11948
+ realtimeAudio: z.ZodObject<{
11949
+ upstream: z.ZodEnum<{
11950
+ unknown: "unknown";
11951
+ supported: "supported";
11952
+ unsupported: "unsupported";
11953
+ }>;
11954
+ runnable: z.ZodBoolean;
11955
+ }, z.core.$strip>;
11956
+ }, z.core.$strip>;
11957
+ latencyModes: z.ZodArray<z.ZodObject<{
11958
+ id: z.ZodEnum<{
11959
+ standard: "standard";
11960
+ priority: "priority";
11961
+ fast: "fast";
11962
+ }>;
11963
+ upstream: z.ZodEnum<{
11964
+ unknown: "unknown";
11965
+ supported: "supported";
11966
+ unsupported: "unsupported";
11967
+ }>;
11968
+ runnable: z.ZodBoolean;
11969
+ billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
11970
+ }, z.core.$strip>>;
11971
+ }, z.core.$strip>;
11972
+ type ModelCapabilitiesV1 = z.infer<typeof ModelCapabilitiesV1>;
11973
+ declare const ModelCredentialSourceV1: z.ZodUnion<readonly [z.ZodObject<{
11974
+ kind: z.ZodLiteral<"deployment">;
11975
+ mechanism: z.ZodEnum<{
11976
+ api_key: "api_key";
11977
+ azure_ad_bearer: "azure_ad_bearer";
11978
+ }>;
11979
+ }, z.core.$strict>, z.ZodObject<{
11980
+ kind: z.ZodLiteral<"connected_subscription">;
11981
+ provider: z.ZodLiteral<"codex">;
11982
+ }, z.core.$strict>, z.ZodObject<{
11983
+ kind: z.ZodLiteral<"workspace_connection">;
11984
+ mechanism: z.ZodLiteral<"api_key">;
11985
+ }, z.core.$strict>]>;
11986
+ type ModelCredentialSourceV1 = z.infer<typeof ModelCredentialSourceV1>;
11987
+ declare const ModelBillingAttributionV1: z.ZodObject<{
11988
+ upstreamPayer: z.ZodEnum<{
11989
+ workspace: "workspace";
11990
+ deployment: "deployment";
11991
+ connected_subscription: "connected_subscription";
11992
+ }>;
11993
+ metering: z.ZodEnum<{
11994
+ external: "external";
11995
+ opengeni_credits: "opengeni_credits";
11996
+ }>;
11997
+ }, z.core.$strict>;
11998
+ type ModelBillingAttributionV1 = z.infer<typeof ModelBillingAttributionV1>;
11999
+ declare const TURN_EXECUTION_POLICY_METADATA_KEY: "turnExecutionPolicyV1";
12000
+ declare const TurnExecutionModelSourceV1: z.ZodEnum<{
12001
+ session: "session";
12002
+ deployment: "deployment";
12003
+ explicit: "explicit";
12004
+ continuation: "continuation";
12005
+ }>;
12006
+ type TurnExecutionModelSourceV1 = z.infer<typeof TurnExecutionModelSourceV1>;
12007
+ declare const TurnExecutionReasoningSourceV1: z.ZodEnum<{
12008
+ session: "session";
12009
+ deployment: "deployment";
12010
+ explicit: "explicit";
12011
+ continuation: "continuation";
12012
+ }>;
12013
+ type TurnExecutionReasoningSourceV1 = z.infer<typeof TurnExecutionReasoningSourceV1>;
12014
+ /**
12015
+ * Secret-safe execution identity frozen onto one accepted logical turn.
12016
+ *
12017
+ * This is deliberately a strict, normalized reference to the deployment
12018
+ * definition rather than a serialized provider client. It must never contain
12019
+ * a key/token, concrete connected credential id, account label, authorization
12020
+ * header, or credential-bearing URL/query value.
12021
+ */
12022
+ declare const TurnExecutionPolicyV1: z.ZodObject<{
12023
+ schemaVersion: z.ZodLiteral<1>;
12024
+ productModelId: z.ZodString;
12025
+ requestedModelId: z.ZodNullable<z.ZodString>;
12026
+ modelSource: z.ZodEnum<{
12027
+ session: "session";
12028
+ deployment: "deployment";
12029
+ explicit: "explicit";
12030
+ continuation: "continuation";
12031
+ }>;
12032
+ reasoningEffort: z.ZodEnum<{
12033
+ none: "none";
12034
+ minimal: "minimal";
12035
+ low: "low";
12036
+ medium: "medium";
12037
+ high: "high";
12038
+ xhigh: "xhigh";
12039
+ }>;
12040
+ reasoningSource: z.ZodEnum<{
12041
+ session: "session";
12042
+ deployment: "deployment";
12043
+ explicit: "explicit";
12044
+ continuation: "continuation";
12045
+ }>;
12046
+ providerId: z.ZodString;
12047
+ upstreamModelId: z.ZodString;
12048
+ wireApi: z.ZodEnum<{
12049
+ chat: "chat";
12050
+ responses: "responses";
12051
+ }>;
12052
+ credentialSource: z.ZodUnion<readonly [z.ZodObject<{
12053
+ kind: z.ZodLiteral<"deployment">;
12054
+ mechanism: z.ZodEnum<{
12055
+ api_key: "api_key";
12056
+ azure_ad_bearer: "azure_ad_bearer";
12057
+ }>;
12058
+ }, z.core.$strict>, z.ZodObject<{
12059
+ kind: z.ZodLiteral<"connected_subscription">;
12060
+ provider: z.ZodLiteral<"codex">;
12061
+ }, z.core.$strict>, z.ZodObject<{
12062
+ kind: z.ZodLiteral<"workspace_connection">;
12063
+ mechanism: z.ZodLiteral<"api_key">;
12064
+ }, z.core.$strict>]>;
12065
+ billing: z.ZodObject<{
12066
+ upstreamPayer: z.ZodEnum<{
12067
+ workspace: "workspace";
12068
+ deployment: "deployment";
12069
+ connected_subscription: "connected_subscription";
12070
+ }>;
12071
+ metering: z.ZodEnum<{
12072
+ external: "external";
12073
+ opengeni_credits: "opengeni_credits";
12074
+ }>;
12075
+ }, z.core.$strict>;
12076
+ definitionVersion: z.ZodString;
12077
+ }, z.core.$strict>;
12078
+ type TurnExecutionPolicyV1 = z.infer<typeof TurnExecutionPolicyV1>;
12079
+ type TurnExecutionPolicyReadV1 = {
12080
+ kind: "absent";
12081
+ } | {
12082
+ kind: "valid";
12083
+ policy: TurnExecutionPolicyV1;
12084
+ };
12085
+ /**
12086
+ * Read the policy from turn metadata. Only a literally absent key is legacy;
12087
+ * null, undefined, an unknown schema version, extra fields, and every other
12088
+ * malformed present value fail closed. Error text reports paths only and never
12089
+ * reflects the untrusted value into logs or events.
12090
+ */
12091
+ declare function readTurnExecutionPolicyV1(metadata: unknown): TurnExecutionPolicyReadV1;
12092
+ /** Merge a trusted policy into metadata without disturbing dispatch/recovery state. */
12093
+ declare function metadataWithTurnExecutionPolicyV1(metadata: Readonly<Record<string, unknown>> | null | undefined, policy: TurnExecutionPolicyV1): Record<string, unknown>;
12094
+ /**
12095
+ * Minimal, stable evidence projection for command receipts and audit events.
12096
+ * It intentionally excludes aliases, URLs, request metadata, and all concrete
12097
+ * credential-selection identity.
12098
+ */
12099
+ declare function turnExecutionPolicyAuditMetadata(policy: TurnExecutionPolicyV1, turnId: string): Record<string, unknown>;
12100
+ declare const ModelPricingV1: z.ZodObject<{
12101
+ inputMicrosPerMillionTokens: z.ZodNumber;
12102
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12103
+ outputMicrosPerMillionTokens: z.ZodNumber;
12104
+ marginBps: z.ZodOptional<z.ZodNumber>;
12105
+ }, z.core.$strip>;
12106
+ type ModelPricingV1 = z.infer<typeof ModelPricingV1>;
12107
+ declare const ModelPricingScheduleV1: z.ZodObject<{
12108
+ default: z.ZodObject<{
12109
+ inputMicrosPerMillionTokens: z.ZodNumber;
12110
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12111
+ outputMicrosPerMillionTokens: z.ZodNumber;
12112
+ marginBps: z.ZodOptional<z.ZodNumber>;
12113
+ }, z.core.$strip>;
12114
+ inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
12115
+ minimumInputTokens: z.ZodNumber;
12116
+ pricing: z.ZodObject<{
12117
+ inputMicrosPerMillionTokens: z.ZodNumber;
12118
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12119
+ outputMicrosPerMillionTokens: z.ZodNumber;
12120
+ marginBps: z.ZodOptional<z.ZodNumber>;
12121
+ }, z.core.$strip>;
12122
+ }, z.core.$strip>>>;
12123
+ }, z.core.$strip>;
12124
+ type ModelPricingScheduleV1 = z.infer<typeof ModelPricingScheduleV1>;
10443
12125
  /**
10444
12126
  * A single host-exposed model + the provider that serves it, as surfaced to
10445
12127
  * clients (SDK + React composer) by GET /v1/config/client. The wire `api`
@@ -10457,8 +12139,681 @@ declare const ClientModel: z.ZodObject<{
10457
12139
  responses: "responses";
10458
12140
  }>;
10459
12141
  contextWindowTokens: z.ZodOptional<z.ZodNumber>;
12142
+ schemaVersion: z.ZodOptional<z.ZodLiteral<1>>;
12143
+ aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
12144
+ deployment: z.ZodOptional<z.ZodObject<{
12145
+ upstreamModelId: z.ZodString;
12146
+ wireApi: z.ZodEnum<{
12147
+ chat: "chat";
12148
+ responses: "responses";
12149
+ }>;
12150
+ }, z.core.$strip>>;
12151
+ executionLimits: z.ZodOptional<z.ZodObject<{
12152
+ contextWindowTokens: z.ZodNullable<z.ZodNumber>;
12153
+ effectiveContextWindowTokens: z.ZodNullable<z.ZodNumber>;
12154
+ autoCompactTokenLimit: z.ZodNullable<z.ZodNumber>;
12155
+ toolOutputTruncationTokens: z.ZodNullable<z.ZodNumber>;
12156
+ }, z.core.$strip>>;
12157
+ credentialSource: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
12158
+ kind: z.ZodLiteral<"deployment">;
12159
+ mechanism: z.ZodEnum<{
12160
+ api_key: "api_key";
12161
+ azure_ad_bearer: "azure_ad_bearer";
12162
+ }>;
12163
+ }, z.core.$strict>, z.ZodObject<{
12164
+ kind: z.ZodLiteral<"connected_subscription">;
12165
+ provider: z.ZodLiteral<"codex">;
12166
+ }, z.core.$strict>, z.ZodObject<{
12167
+ kind: z.ZodLiteral<"workspace_connection">;
12168
+ mechanism: z.ZodLiteral<"api_key">;
12169
+ }, z.core.$strict>]>>;
12170
+ billing: z.ZodOptional<z.ZodObject<{
12171
+ upstreamPayer: z.ZodEnum<{
12172
+ workspace: "workspace";
12173
+ deployment: "deployment";
12174
+ connected_subscription: "connected_subscription";
12175
+ }>;
12176
+ metering: z.ZodEnum<{
12177
+ external: "external";
12178
+ opengeni_credits: "opengeni_credits";
12179
+ }>;
12180
+ }, z.core.$strict>>;
12181
+ capabilities: z.ZodOptional<z.ZodObject<{
12182
+ reasoning: z.ZodObject<{
12183
+ upstream: z.ZodEnum<{
12184
+ unknown: "unknown";
12185
+ supported: "supported";
12186
+ unsupported: "unsupported";
12187
+ }>;
12188
+ runnable: z.ZodBoolean;
12189
+ efforts: z.ZodArray<z.ZodEnum<{
12190
+ none: "none";
12191
+ minimal: "minimal";
12192
+ low: "low";
12193
+ medium: "medium";
12194
+ high: "high";
12195
+ xhigh: "xhigh";
12196
+ }>>;
12197
+ defaultEffort: z.ZodNullable<z.ZodEnum<{
12198
+ none: "none";
12199
+ minimal: "minimal";
12200
+ low: "low";
12201
+ medium: "medium";
12202
+ high: "high";
12203
+ xhigh: "xhigh";
12204
+ }>>;
12205
+ required: z.ZodBoolean;
12206
+ }, z.core.$strip>;
12207
+ functionCalling: z.ZodObject<{
12208
+ upstream: z.ZodEnum<{
12209
+ unknown: "unknown";
12210
+ supported: "supported";
12211
+ unsupported: "unsupported";
12212
+ }>;
12213
+ runnable: z.ZodBoolean;
12214
+ }, z.core.$strip>;
12215
+ structuredOutput: z.ZodObject<{
12216
+ upstream: z.ZodEnum<{
12217
+ unknown: "unknown";
12218
+ supported: "supported";
12219
+ unsupported: "unsupported";
12220
+ }>;
12221
+ runnable: z.ZodBoolean;
12222
+ }, z.core.$strip>;
12223
+ hostedTools: z.ZodObject<{
12224
+ webSearch: z.ZodObject<{
12225
+ upstream: z.ZodEnum<{
12226
+ unknown: "unknown";
12227
+ supported: "supported";
12228
+ unsupported: "unsupported";
12229
+ }>;
12230
+ runnable: z.ZodBoolean;
12231
+ }, z.core.$strip>;
12232
+ xSearch: z.ZodObject<{
12233
+ upstream: z.ZodEnum<{
12234
+ unknown: "unknown";
12235
+ supported: "supported";
12236
+ unsupported: "unsupported";
12237
+ }>;
12238
+ runnable: z.ZodBoolean;
12239
+ }, z.core.$strip>;
12240
+ codeExecution: z.ZodObject<{
12241
+ upstream: z.ZodEnum<{
12242
+ unknown: "unknown";
12243
+ supported: "supported";
12244
+ unsupported: "unsupported";
12245
+ }>;
12246
+ runnable: z.ZodBoolean;
12247
+ }, z.core.$strip>;
12248
+ }, z.core.$strip>;
12249
+ inputModalities: z.ZodArray<z.ZodEnum<{
12250
+ text: "text";
12251
+ image: "image";
12252
+ audio: "audio";
12253
+ }>>;
12254
+ outputModalities: z.ZodArray<z.ZodEnum<{
12255
+ text: "text";
12256
+ image: "image";
12257
+ audio: "audio";
12258
+ }>>;
12259
+ transports: z.ZodObject<{
12260
+ sse: z.ZodObject<{
12261
+ upstream: z.ZodEnum<{
12262
+ unknown: "unknown";
12263
+ supported: "supported";
12264
+ unsupported: "unsupported";
12265
+ }>;
12266
+ runnable: z.ZodBoolean;
12267
+ }, z.core.$strip>;
12268
+ responsesWebSocket: z.ZodObject<{
12269
+ upstream: z.ZodEnum<{
12270
+ unknown: "unknown";
12271
+ supported: "supported";
12272
+ unsupported: "unsupported";
12273
+ }>;
12274
+ runnable: z.ZodBoolean;
12275
+ }, z.core.$strip>;
12276
+ realtimeAudio: z.ZodObject<{
12277
+ upstream: z.ZodEnum<{
12278
+ unknown: "unknown";
12279
+ supported: "supported";
12280
+ unsupported: "unsupported";
12281
+ }>;
12282
+ runnable: z.ZodBoolean;
12283
+ }, z.core.$strip>;
12284
+ }, z.core.$strip>;
12285
+ latencyModes: z.ZodArray<z.ZodObject<{
12286
+ id: z.ZodEnum<{
12287
+ standard: "standard";
12288
+ priority: "priority";
12289
+ fast: "fast";
12290
+ }>;
12291
+ upstream: z.ZodEnum<{
12292
+ unknown: "unknown";
12293
+ supported: "supported";
12294
+ unsupported: "unsupported";
12295
+ }>;
12296
+ runnable: z.ZodBoolean;
12297
+ billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
12298
+ }, z.core.$strip>>;
12299
+ }, z.core.$strip>>;
12300
+ pricing: z.ZodOptional<z.ZodObject<{
12301
+ default: z.ZodObject<{
12302
+ inputMicrosPerMillionTokens: z.ZodNumber;
12303
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12304
+ outputMicrosPerMillionTokens: z.ZodNumber;
12305
+ marginBps: z.ZodOptional<z.ZodNumber>;
12306
+ }, z.core.$strip>;
12307
+ inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
12308
+ minimumInputTokens: z.ZodNumber;
12309
+ pricing: z.ZodObject<{
12310
+ inputMicrosPerMillionTokens: z.ZodNumber;
12311
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12312
+ outputMicrosPerMillionTokens: z.ZodNumber;
12313
+ marginBps: z.ZodOptional<z.ZodNumber>;
12314
+ }, z.core.$strip>;
12315
+ }, z.core.$strip>>>;
12316
+ }, z.core.$strip>>;
12317
+ definitionVersion: z.ZodOptional<z.ZodString>;
10460
12318
  }, z.core.$strip>;
10461
12319
  type ClientModel = z.infer<typeof ClientModel>;
12320
+ declare const ModelCredentialReadinessV1: z.ZodObject<{
12321
+ status: z.ZodEnum<{
12322
+ error: "error";
12323
+ ready: "ready";
12324
+ not_ready: "not_ready";
12325
+ }>;
12326
+ reason: z.ZodNullable<z.ZodEnum<{
12327
+ needs_reauth: "needs_reauth";
12328
+ missing_credential: "missing_credential";
12329
+ prerequisites_missing: "prerequisites_missing";
12330
+ resolver_error: "resolver_error";
12331
+ observation_stale: "observation_stale";
12332
+ }>>;
12333
+ basis: z.ZodEnum<{
12334
+ connection: "connection";
12335
+ configuration: "configuration";
12336
+ resolver: "resolver";
12337
+ }>;
12338
+ checkedAt: z.ZodNullable<z.ZodString>;
12339
+ }, z.core.$strict>;
12340
+ type ModelCredentialReadinessV1 = z.infer<typeof ModelCredentialReadinessV1>;
12341
+ declare const ModelAvailabilityV1: z.ZodObject<{
12342
+ status: z.ZodEnum<{
12343
+ unknown: "unknown";
12344
+ available: "available";
12345
+ unavailable: "unavailable";
12346
+ degraded: "degraded";
12347
+ }>;
12348
+ selectable: z.ZodBoolean;
12349
+ reason: z.ZodNullable<z.ZodEnum<{
12350
+ policy_blocked: "policy_blocked";
12351
+ needs_reauth: "needs_reauth";
12352
+ unsupported: "unsupported";
12353
+ missing_credential: "missing_credential";
12354
+ credential_not_ready: "credential_not_ready";
12355
+ not_entitled: "not_entitled";
12356
+ provider_unhealthy: "provider_unhealthy";
12357
+ }>>;
12358
+ checkedAt: z.ZodNullable<z.ZodString>;
12359
+ }, z.core.$strip>;
12360
+ type ModelAvailabilityV1 = z.infer<typeof ModelAvailabilityV1>;
12361
+ declare const WorkspaceModelCatalogModel: z.ZodObject<{
12362
+ id: z.ZodString;
12363
+ label: z.ZodString;
12364
+ provider: z.ZodString;
12365
+ providerLabel: z.ZodString;
12366
+ api: z.ZodEnum<{
12367
+ chat: "chat";
12368
+ responses: "responses";
12369
+ }>;
12370
+ contextWindowTokens: z.ZodOptional<z.ZodNumber>;
12371
+ schemaVersion: z.ZodOptional<z.ZodLiteral<1>>;
12372
+ aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
12373
+ deployment: z.ZodOptional<z.ZodObject<{
12374
+ upstreamModelId: z.ZodString;
12375
+ wireApi: z.ZodEnum<{
12376
+ chat: "chat";
12377
+ responses: "responses";
12378
+ }>;
12379
+ }, z.core.$strip>>;
12380
+ executionLimits: z.ZodOptional<z.ZodObject<{
12381
+ contextWindowTokens: z.ZodNullable<z.ZodNumber>;
12382
+ effectiveContextWindowTokens: z.ZodNullable<z.ZodNumber>;
12383
+ autoCompactTokenLimit: z.ZodNullable<z.ZodNumber>;
12384
+ toolOutputTruncationTokens: z.ZodNullable<z.ZodNumber>;
12385
+ }, z.core.$strip>>;
12386
+ credentialSource: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
12387
+ kind: z.ZodLiteral<"deployment">;
12388
+ mechanism: z.ZodEnum<{
12389
+ api_key: "api_key";
12390
+ azure_ad_bearer: "azure_ad_bearer";
12391
+ }>;
12392
+ }, z.core.$strict>, z.ZodObject<{
12393
+ kind: z.ZodLiteral<"connected_subscription">;
12394
+ provider: z.ZodLiteral<"codex">;
12395
+ }, z.core.$strict>, z.ZodObject<{
12396
+ kind: z.ZodLiteral<"workspace_connection">;
12397
+ mechanism: z.ZodLiteral<"api_key">;
12398
+ }, z.core.$strict>]>>;
12399
+ billing: z.ZodOptional<z.ZodObject<{
12400
+ upstreamPayer: z.ZodEnum<{
12401
+ workspace: "workspace";
12402
+ deployment: "deployment";
12403
+ connected_subscription: "connected_subscription";
12404
+ }>;
12405
+ metering: z.ZodEnum<{
12406
+ external: "external";
12407
+ opengeni_credits: "opengeni_credits";
12408
+ }>;
12409
+ }, z.core.$strict>>;
12410
+ capabilities: z.ZodOptional<z.ZodObject<{
12411
+ reasoning: z.ZodObject<{
12412
+ upstream: z.ZodEnum<{
12413
+ unknown: "unknown";
12414
+ supported: "supported";
12415
+ unsupported: "unsupported";
12416
+ }>;
12417
+ runnable: z.ZodBoolean;
12418
+ efforts: z.ZodArray<z.ZodEnum<{
12419
+ none: "none";
12420
+ minimal: "minimal";
12421
+ low: "low";
12422
+ medium: "medium";
12423
+ high: "high";
12424
+ xhigh: "xhigh";
12425
+ }>>;
12426
+ defaultEffort: z.ZodNullable<z.ZodEnum<{
12427
+ none: "none";
12428
+ minimal: "minimal";
12429
+ low: "low";
12430
+ medium: "medium";
12431
+ high: "high";
12432
+ xhigh: "xhigh";
12433
+ }>>;
12434
+ required: z.ZodBoolean;
12435
+ }, z.core.$strip>;
12436
+ functionCalling: z.ZodObject<{
12437
+ upstream: z.ZodEnum<{
12438
+ unknown: "unknown";
12439
+ supported: "supported";
12440
+ unsupported: "unsupported";
12441
+ }>;
12442
+ runnable: z.ZodBoolean;
12443
+ }, z.core.$strip>;
12444
+ structuredOutput: z.ZodObject<{
12445
+ upstream: z.ZodEnum<{
12446
+ unknown: "unknown";
12447
+ supported: "supported";
12448
+ unsupported: "unsupported";
12449
+ }>;
12450
+ runnable: z.ZodBoolean;
12451
+ }, z.core.$strip>;
12452
+ hostedTools: z.ZodObject<{
12453
+ webSearch: z.ZodObject<{
12454
+ upstream: z.ZodEnum<{
12455
+ unknown: "unknown";
12456
+ supported: "supported";
12457
+ unsupported: "unsupported";
12458
+ }>;
12459
+ runnable: z.ZodBoolean;
12460
+ }, z.core.$strip>;
12461
+ xSearch: z.ZodObject<{
12462
+ upstream: z.ZodEnum<{
12463
+ unknown: "unknown";
12464
+ supported: "supported";
12465
+ unsupported: "unsupported";
12466
+ }>;
12467
+ runnable: z.ZodBoolean;
12468
+ }, z.core.$strip>;
12469
+ codeExecution: z.ZodObject<{
12470
+ upstream: z.ZodEnum<{
12471
+ unknown: "unknown";
12472
+ supported: "supported";
12473
+ unsupported: "unsupported";
12474
+ }>;
12475
+ runnable: z.ZodBoolean;
12476
+ }, z.core.$strip>;
12477
+ }, z.core.$strip>;
12478
+ inputModalities: z.ZodArray<z.ZodEnum<{
12479
+ text: "text";
12480
+ image: "image";
12481
+ audio: "audio";
12482
+ }>>;
12483
+ outputModalities: z.ZodArray<z.ZodEnum<{
12484
+ text: "text";
12485
+ image: "image";
12486
+ audio: "audio";
12487
+ }>>;
12488
+ transports: z.ZodObject<{
12489
+ sse: z.ZodObject<{
12490
+ upstream: z.ZodEnum<{
12491
+ unknown: "unknown";
12492
+ supported: "supported";
12493
+ unsupported: "unsupported";
12494
+ }>;
12495
+ runnable: z.ZodBoolean;
12496
+ }, z.core.$strip>;
12497
+ responsesWebSocket: z.ZodObject<{
12498
+ upstream: z.ZodEnum<{
12499
+ unknown: "unknown";
12500
+ supported: "supported";
12501
+ unsupported: "unsupported";
12502
+ }>;
12503
+ runnable: z.ZodBoolean;
12504
+ }, z.core.$strip>;
12505
+ realtimeAudio: z.ZodObject<{
12506
+ upstream: z.ZodEnum<{
12507
+ unknown: "unknown";
12508
+ supported: "supported";
12509
+ unsupported: "unsupported";
12510
+ }>;
12511
+ runnable: z.ZodBoolean;
12512
+ }, z.core.$strip>;
12513
+ }, z.core.$strip>;
12514
+ latencyModes: z.ZodArray<z.ZodObject<{
12515
+ id: z.ZodEnum<{
12516
+ standard: "standard";
12517
+ priority: "priority";
12518
+ fast: "fast";
12519
+ }>;
12520
+ upstream: z.ZodEnum<{
12521
+ unknown: "unknown";
12522
+ supported: "supported";
12523
+ unsupported: "unsupported";
12524
+ }>;
12525
+ runnable: z.ZodBoolean;
12526
+ billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
12527
+ }, z.core.$strip>>;
12528
+ }, z.core.$strip>>;
12529
+ pricing: z.ZodOptional<z.ZodObject<{
12530
+ default: z.ZodObject<{
12531
+ inputMicrosPerMillionTokens: z.ZodNumber;
12532
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12533
+ outputMicrosPerMillionTokens: z.ZodNumber;
12534
+ marginBps: z.ZodOptional<z.ZodNumber>;
12535
+ }, z.core.$strip>;
12536
+ inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
12537
+ minimumInputTokens: z.ZodNumber;
12538
+ pricing: z.ZodObject<{
12539
+ inputMicrosPerMillionTokens: z.ZodNumber;
12540
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12541
+ outputMicrosPerMillionTokens: z.ZodNumber;
12542
+ marginBps: z.ZodOptional<z.ZodNumber>;
12543
+ }, z.core.$strip>;
12544
+ }, z.core.$strip>>>;
12545
+ }, z.core.$strip>>;
12546
+ definitionVersion: z.ZodOptional<z.ZodString>;
12547
+ credentialReadiness: z.ZodObject<{
12548
+ status: z.ZodEnum<{
12549
+ error: "error";
12550
+ ready: "ready";
12551
+ not_ready: "not_ready";
12552
+ }>;
12553
+ reason: z.ZodNullable<z.ZodEnum<{
12554
+ needs_reauth: "needs_reauth";
12555
+ missing_credential: "missing_credential";
12556
+ prerequisites_missing: "prerequisites_missing";
12557
+ resolver_error: "resolver_error";
12558
+ observation_stale: "observation_stale";
12559
+ }>>;
12560
+ basis: z.ZodEnum<{
12561
+ connection: "connection";
12562
+ configuration: "configuration";
12563
+ resolver: "resolver";
12564
+ }>;
12565
+ checkedAt: z.ZodNullable<z.ZodString>;
12566
+ }, z.core.$strict>;
12567
+ availability: z.ZodObject<{
12568
+ status: z.ZodEnum<{
12569
+ unknown: "unknown";
12570
+ available: "available";
12571
+ unavailable: "unavailable";
12572
+ degraded: "degraded";
12573
+ }>;
12574
+ selectable: z.ZodBoolean;
12575
+ reason: z.ZodNullable<z.ZodEnum<{
12576
+ policy_blocked: "policy_blocked";
12577
+ needs_reauth: "needs_reauth";
12578
+ unsupported: "unsupported";
12579
+ missing_credential: "missing_credential";
12580
+ credential_not_ready: "credential_not_ready";
12581
+ not_entitled: "not_entitled";
12582
+ provider_unhealthy: "provider_unhealthy";
12583
+ }>>;
12584
+ checkedAt: z.ZodNullable<z.ZodString>;
12585
+ }, z.core.$strip>;
12586
+ }, z.core.$strip>;
12587
+ type WorkspaceModelCatalogModel = z.infer<typeof WorkspaceModelCatalogModel>;
12588
+ declare const WorkspaceModelCatalogResponse: z.ZodObject<{
12589
+ models: z.ZodArray<z.ZodObject<{
12590
+ id: z.ZodString;
12591
+ label: z.ZodString;
12592
+ provider: z.ZodString;
12593
+ providerLabel: z.ZodString;
12594
+ api: z.ZodEnum<{
12595
+ chat: "chat";
12596
+ responses: "responses";
12597
+ }>;
12598
+ contextWindowTokens: z.ZodOptional<z.ZodNumber>;
12599
+ schemaVersion: z.ZodOptional<z.ZodLiteral<1>>;
12600
+ aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
12601
+ deployment: z.ZodOptional<z.ZodObject<{
12602
+ upstreamModelId: z.ZodString;
12603
+ wireApi: z.ZodEnum<{
12604
+ chat: "chat";
12605
+ responses: "responses";
12606
+ }>;
12607
+ }, z.core.$strip>>;
12608
+ executionLimits: z.ZodOptional<z.ZodObject<{
12609
+ contextWindowTokens: z.ZodNullable<z.ZodNumber>;
12610
+ effectiveContextWindowTokens: z.ZodNullable<z.ZodNumber>;
12611
+ autoCompactTokenLimit: z.ZodNullable<z.ZodNumber>;
12612
+ toolOutputTruncationTokens: z.ZodNullable<z.ZodNumber>;
12613
+ }, z.core.$strip>>;
12614
+ credentialSource: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
12615
+ kind: z.ZodLiteral<"deployment">;
12616
+ mechanism: z.ZodEnum<{
12617
+ api_key: "api_key";
12618
+ azure_ad_bearer: "azure_ad_bearer";
12619
+ }>;
12620
+ }, z.core.$strict>, z.ZodObject<{
12621
+ kind: z.ZodLiteral<"connected_subscription">;
12622
+ provider: z.ZodLiteral<"codex">;
12623
+ }, z.core.$strict>, z.ZodObject<{
12624
+ kind: z.ZodLiteral<"workspace_connection">;
12625
+ mechanism: z.ZodLiteral<"api_key">;
12626
+ }, z.core.$strict>]>>;
12627
+ billing: z.ZodOptional<z.ZodObject<{
12628
+ upstreamPayer: z.ZodEnum<{
12629
+ workspace: "workspace";
12630
+ deployment: "deployment";
12631
+ connected_subscription: "connected_subscription";
12632
+ }>;
12633
+ metering: z.ZodEnum<{
12634
+ external: "external";
12635
+ opengeni_credits: "opengeni_credits";
12636
+ }>;
12637
+ }, z.core.$strict>>;
12638
+ capabilities: z.ZodOptional<z.ZodObject<{
12639
+ reasoning: z.ZodObject<{
12640
+ upstream: z.ZodEnum<{
12641
+ unknown: "unknown";
12642
+ supported: "supported";
12643
+ unsupported: "unsupported";
12644
+ }>;
12645
+ runnable: z.ZodBoolean;
12646
+ efforts: z.ZodArray<z.ZodEnum<{
12647
+ none: "none";
12648
+ minimal: "minimal";
12649
+ low: "low";
12650
+ medium: "medium";
12651
+ high: "high";
12652
+ xhigh: "xhigh";
12653
+ }>>;
12654
+ defaultEffort: z.ZodNullable<z.ZodEnum<{
12655
+ none: "none";
12656
+ minimal: "minimal";
12657
+ low: "low";
12658
+ medium: "medium";
12659
+ high: "high";
12660
+ xhigh: "xhigh";
12661
+ }>>;
12662
+ required: z.ZodBoolean;
12663
+ }, z.core.$strip>;
12664
+ functionCalling: z.ZodObject<{
12665
+ upstream: z.ZodEnum<{
12666
+ unknown: "unknown";
12667
+ supported: "supported";
12668
+ unsupported: "unsupported";
12669
+ }>;
12670
+ runnable: z.ZodBoolean;
12671
+ }, z.core.$strip>;
12672
+ structuredOutput: z.ZodObject<{
12673
+ upstream: z.ZodEnum<{
12674
+ unknown: "unknown";
12675
+ supported: "supported";
12676
+ unsupported: "unsupported";
12677
+ }>;
12678
+ runnable: z.ZodBoolean;
12679
+ }, z.core.$strip>;
12680
+ hostedTools: z.ZodObject<{
12681
+ webSearch: z.ZodObject<{
12682
+ upstream: z.ZodEnum<{
12683
+ unknown: "unknown";
12684
+ supported: "supported";
12685
+ unsupported: "unsupported";
12686
+ }>;
12687
+ runnable: z.ZodBoolean;
12688
+ }, z.core.$strip>;
12689
+ xSearch: z.ZodObject<{
12690
+ upstream: z.ZodEnum<{
12691
+ unknown: "unknown";
12692
+ supported: "supported";
12693
+ unsupported: "unsupported";
12694
+ }>;
12695
+ runnable: z.ZodBoolean;
12696
+ }, z.core.$strip>;
12697
+ codeExecution: z.ZodObject<{
12698
+ upstream: z.ZodEnum<{
12699
+ unknown: "unknown";
12700
+ supported: "supported";
12701
+ unsupported: "unsupported";
12702
+ }>;
12703
+ runnable: z.ZodBoolean;
12704
+ }, z.core.$strip>;
12705
+ }, z.core.$strip>;
12706
+ inputModalities: z.ZodArray<z.ZodEnum<{
12707
+ text: "text";
12708
+ image: "image";
12709
+ audio: "audio";
12710
+ }>>;
12711
+ outputModalities: z.ZodArray<z.ZodEnum<{
12712
+ text: "text";
12713
+ image: "image";
12714
+ audio: "audio";
12715
+ }>>;
12716
+ transports: z.ZodObject<{
12717
+ sse: z.ZodObject<{
12718
+ upstream: z.ZodEnum<{
12719
+ unknown: "unknown";
12720
+ supported: "supported";
12721
+ unsupported: "unsupported";
12722
+ }>;
12723
+ runnable: z.ZodBoolean;
12724
+ }, z.core.$strip>;
12725
+ responsesWebSocket: z.ZodObject<{
12726
+ upstream: z.ZodEnum<{
12727
+ unknown: "unknown";
12728
+ supported: "supported";
12729
+ unsupported: "unsupported";
12730
+ }>;
12731
+ runnable: z.ZodBoolean;
12732
+ }, z.core.$strip>;
12733
+ realtimeAudio: z.ZodObject<{
12734
+ upstream: z.ZodEnum<{
12735
+ unknown: "unknown";
12736
+ supported: "supported";
12737
+ unsupported: "unsupported";
12738
+ }>;
12739
+ runnable: z.ZodBoolean;
12740
+ }, z.core.$strip>;
12741
+ }, z.core.$strip>;
12742
+ latencyModes: z.ZodArray<z.ZodObject<{
12743
+ id: z.ZodEnum<{
12744
+ standard: "standard";
12745
+ priority: "priority";
12746
+ fast: "fast";
12747
+ }>;
12748
+ upstream: z.ZodEnum<{
12749
+ unknown: "unknown";
12750
+ supported: "supported";
12751
+ unsupported: "unsupported";
12752
+ }>;
12753
+ runnable: z.ZodBoolean;
12754
+ billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
12755
+ }, z.core.$strip>>;
12756
+ }, z.core.$strip>>;
12757
+ pricing: z.ZodOptional<z.ZodObject<{
12758
+ default: z.ZodObject<{
12759
+ inputMicrosPerMillionTokens: z.ZodNumber;
12760
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12761
+ outputMicrosPerMillionTokens: z.ZodNumber;
12762
+ marginBps: z.ZodOptional<z.ZodNumber>;
12763
+ }, z.core.$strip>;
12764
+ inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
12765
+ minimumInputTokens: z.ZodNumber;
12766
+ pricing: z.ZodObject<{
12767
+ inputMicrosPerMillionTokens: z.ZodNumber;
12768
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
12769
+ outputMicrosPerMillionTokens: z.ZodNumber;
12770
+ marginBps: z.ZodOptional<z.ZodNumber>;
12771
+ }, z.core.$strip>;
12772
+ }, z.core.$strip>>>;
12773
+ }, z.core.$strip>>;
12774
+ definitionVersion: z.ZodOptional<z.ZodString>;
12775
+ credentialReadiness: z.ZodObject<{
12776
+ status: z.ZodEnum<{
12777
+ error: "error";
12778
+ ready: "ready";
12779
+ not_ready: "not_ready";
12780
+ }>;
12781
+ reason: z.ZodNullable<z.ZodEnum<{
12782
+ needs_reauth: "needs_reauth";
12783
+ missing_credential: "missing_credential";
12784
+ prerequisites_missing: "prerequisites_missing";
12785
+ resolver_error: "resolver_error";
12786
+ observation_stale: "observation_stale";
12787
+ }>>;
12788
+ basis: z.ZodEnum<{
12789
+ connection: "connection";
12790
+ configuration: "configuration";
12791
+ resolver: "resolver";
12792
+ }>;
12793
+ checkedAt: z.ZodNullable<z.ZodString>;
12794
+ }, z.core.$strict>;
12795
+ availability: z.ZodObject<{
12796
+ status: z.ZodEnum<{
12797
+ unknown: "unknown";
12798
+ available: "available";
12799
+ unavailable: "unavailable";
12800
+ degraded: "degraded";
12801
+ }>;
12802
+ selectable: z.ZodBoolean;
12803
+ reason: z.ZodNullable<z.ZodEnum<{
12804
+ policy_blocked: "policy_blocked";
12805
+ needs_reauth: "needs_reauth";
12806
+ unsupported: "unsupported";
12807
+ missing_credential: "missing_credential";
12808
+ credential_not_ready: "credential_not_ready";
12809
+ not_entitled: "not_entitled";
12810
+ provider_unhealthy: "provider_unhealthy";
12811
+ }>>;
12812
+ checkedAt: z.ZodNullable<z.ZodString>;
12813
+ }, z.core.$strip>;
12814
+ }, z.core.$strip>>;
12815
+ }, z.core.$strip>;
12816
+ type WorkspaceModelCatalogResponse = z.infer<typeof WorkspaceModelCatalogResponse>;
10462
12817
  /**
10463
12818
  * Exact public HTTP protocol revision spoken by this release train.
10464
12819
  *
@@ -10485,6 +12840,182 @@ declare const ClientConfig: z.ZodObject<{
10485
12840
  responses: "responses";
10486
12841
  }>;
10487
12842
  contextWindowTokens: z.ZodOptional<z.ZodNumber>;
12843
+ schemaVersion: z.ZodOptional<z.ZodLiteral<1>>;
12844
+ aliases: z.ZodOptional<z.ZodArray<z.ZodString>>;
12845
+ deployment: z.ZodOptional<z.ZodObject<{
12846
+ upstreamModelId: z.ZodString;
12847
+ wireApi: z.ZodEnum<{
12848
+ chat: "chat";
12849
+ responses: "responses";
12850
+ }>;
12851
+ }, z.core.$strip>>;
12852
+ executionLimits: z.ZodOptional<z.ZodObject<{
12853
+ contextWindowTokens: z.ZodNullable<z.ZodNumber>;
12854
+ effectiveContextWindowTokens: z.ZodNullable<z.ZodNumber>;
12855
+ autoCompactTokenLimit: z.ZodNullable<z.ZodNumber>;
12856
+ toolOutputTruncationTokens: z.ZodNullable<z.ZodNumber>;
12857
+ }, z.core.$strip>>;
12858
+ credentialSource: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
12859
+ kind: z.ZodLiteral<"deployment">;
12860
+ mechanism: z.ZodEnum<{
12861
+ api_key: "api_key";
12862
+ azure_ad_bearer: "azure_ad_bearer";
12863
+ }>;
12864
+ }, z.core.$strict>, z.ZodObject<{
12865
+ kind: z.ZodLiteral<"connected_subscription">;
12866
+ provider: z.ZodLiteral<"codex">;
12867
+ }, z.core.$strict>, z.ZodObject<{
12868
+ kind: z.ZodLiteral<"workspace_connection">;
12869
+ mechanism: z.ZodLiteral<"api_key">;
12870
+ }, z.core.$strict>]>>;
12871
+ billing: z.ZodOptional<z.ZodObject<{
12872
+ upstreamPayer: z.ZodEnum<{
12873
+ workspace: "workspace";
12874
+ deployment: "deployment";
12875
+ connected_subscription: "connected_subscription";
12876
+ }>;
12877
+ metering: z.ZodEnum<{
12878
+ external: "external";
12879
+ opengeni_credits: "opengeni_credits";
12880
+ }>;
12881
+ }, z.core.$strict>>;
12882
+ capabilities: z.ZodOptional<z.ZodObject<{
12883
+ reasoning: z.ZodObject<{
12884
+ upstream: z.ZodEnum<{
12885
+ unknown: "unknown";
12886
+ supported: "supported";
12887
+ unsupported: "unsupported";
12888
+ }>;
12889
+ runnable: z.ZodBoolean;
12890
+ efforts: z.ZodArray<z.ZodEnum<{
12891
+ none: "none";
12892
+ minimal: "minimal";
12893
+ low: "low";
12894
+ medium: "medium";
12895
+ high: "high";
12896
+ xhigh: "xhigh";
12897
+ }>>;
12898
+ defaultEffort: z.ZodNullable<z.ZodEnum<{
12899
+ none: "none";
12900
+ minimal: "minimal";
12901
+ low: "low";
12902
+ medium: "medium";
12903
+ high: "high";
12904
+ xhigh: "xhigh";
12905
+ }>>;
12906
+ required: z.ZodBoolean;
12907
+ }, z.core.$strip>;
12908
+ functionCalling: z.ZodObject<{
12909
+ upstream: z.ZodEnum<{
12910
+ unknown: "unknown";
12911
+ supported: "supported";
12912
+ unsupported: "unsupported";
12913
+ }>;
12914
+ runnable: z.ZodBoolean;
12915
+ }, z.core.$strip>;
12916
+ structuredOutput: z.ZodObject<{
12917
+ upstream: z.ZodEnum<{
12918
+ unknown: "unknown";
12919
+ supported: "supported";
12920
+ unsupported: "unsupported";
12921
+ }>;
12922
+ runnable: z.ZodBoolean;
12923
+ }, z.core.$strip>;
12924
+ hostedTools: z.ZodObject<{
12925
+ webSearch: z.ZodObject<{
12926
+ upstream: z.ZodEnum<{
12927
+ unknown: "unknown";
12928
+ supported: "supported";
12929
+ unsupported: "unsupported";
12930
+ }>;
12931
+ runnable: z.ZodBoolean;
12932
+ }, z.core.$strip>;
12933
+ xSearch: z.ZodObject<{
12934
+ upstream: z.ZodEnum<{
12935
+ unknown: "unknown";
12936
+ supported: "supported";
12937
+ unsupported: "unsupported";
12938
+ }>;
12939
+ runnable: z.ZodBoolean;
12940
+ }, z.core.$strip>;
12941
+ codeExecution: z.ZodObject<{
12942
+ upstream: z.ZodEnum<{
12943
+ unknown: "unknown";
12944
+ supported: "supported";
12945
+ unsupported: "unsupported";
12946
+ }>;
12947
+ runnable: z.ZodBoolean;
12948
+ }, z.core.$strip>;
12949
+ }, z.core.$strip>;
12950
+ inputModalities: z.ZodArray<z.ZodEnum<{
12951
+ text: "text";
12952
+ image: "image";
12953
+ audio: "audio";
12954
+ }>>;
12955
+ outputModalities: z.ZodArray<z.ZodEnum<{
12956
+ text: "text";
12957
+ image: "image";
12958
+ audio: "audio";
12959
+ }>>;
12960
+ transports: z.ZodObject<{
12961
+ sse: z.ZodObject<{
12962
+ upstream: z.ZodEnum<{
12963
+ unknown: "unknown";
12964
+ supported: "supported";
12965
+ unsupported: "unsupported";
12966
+ }>;
12967
+ runnable: z.ZodBoolean;
12968
+ }, z.core.$strip>;
12969
+ responsesWebSocket: z.ZodObject<{
12970
+ upstream: z.ZodEnum<{
12971
+ unknown: "unknown";
12972
+ supported: "supported";
12973
+ unsupported: "unsupported";
12974
+ }>;
12975
+ runnable: z.ZodBoolean;
12976
+ }, z.core.$strip>;
12977
+ realtimeAudio: z.ZodObject<{
12978
+ upstream: z.ZodEnum<{
12979
+ unknown: "unknown";
12980
+ supported: "supported";
12981
+ unsupported: "unsupported";
12982
+ }>;
12983
+ runnable: z.ZodBoolean;
12984
+ }, z.core.$strip>;
12985
+ }, z.core.$strip>;
12986
+ latencyModes: z.ZodArray<z.ZodObject<{
12987
+ id: z.ZodEnum<{
12988
+ standard: "standard";
12989
+ priority: "priority";
12990
+ fast: "fast";
12991
+ }>;
12992
+ upstream: z.ZodEnum<{
12993
+ unknown: "unknown";
12994
+ supported: "supported";
12995
+ unsupported: "unsupported";
12996
+ }>;
12997
+ runnable: z.ZodBoolean;
12998
+ billingMultiplierBps: z.ZodOptional<z.ZodNumber>;
12999
+ }, z.core.$strip>>;
13000
+ }, z.core.$strip>>;
13001
+ pricing: z.ZodOptional<z.ZodObject<{
13002
+ default: z.ZodObject<{
13003
+ inputMicrosPerMillionTokens: z.ZodNumber;
13004
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
13005
+ outputMicrosPerMillionTokens: z.ZodNumber;
13006
+ marginBps: z.ZodOptional<z.ZodNumber>;
13007
+ }, z.core.$strip>;
13008
+ inputTokenTiers: z.ZodOptional<z.ZodArray<z.ZodObject<{
13009
+ minimumInputTokens: z.ZodNumber;
13010
+ pricing: z.ZodObject<{
13011
+ inputMicrosPerMillionTokens: z.ZodNumber;
13012
+ cachedInputMicrosPerMillionTokens: z.ZodOptional<z.ZodNumber>;
13013
+ outputMicrosPerMillionTokens: z.ZodNumber;
13014
+ marginBps: z.ZodOptional<z.ZodNumber>;
13015
+ }, z.core.$strip>;
13016
+ }, z.core.$strip>>>;
13017
+ }, z.core.$strip>>;
13018
+ definitionVersion: z.ZodOptional<z.ZodString>;
10488
13019
  }, z.core.$strip>>>;
10489
13020
  defaultReasoningEffort: z.ZodEnum<{
10490
13021
  none: "none";
@@ -10566,4 +13097,4 @@ declare function evaluateWorkspaceModelPolicy(policy: WorkspaceModelPolicyContra
10566
13097
  modelId: string;
10567
13098
  }): WorkspaceModelPolicyVerdict;
10568
13099
 
10569
- export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubInstallationBinding, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, MoveSessionQueueItemRequest, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEvent, type SessionEventBoundarySurface, type SessionEventJsonMeasurement, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpCredentialUpdateInput, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionPinRequest, UpdateSessionRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, defaultRepositoryMountPath, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, isClearedRunStateBlob, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, reasoningEffortForMetadata, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };
13100
+ export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubInstallationBinding, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, isClearedRunStateBlob, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };