@opengeni/contracts 0.18.0 → 0.19.4

package/dist/index.d.ts

@@ -283,6 +283,258 @@ declare function sessionEventPayloadTruncation(payload: unknown): SessionEventPa
  */
 declare function boundSessionEventPayload<T>(payload: T, options?: BoundSessionEventPayloadOptions): T;
 
+/**
+ * Adaptive Codex fleet policy, replay contract, and shadow evaluator.
+ *
+ * This module is deliberately pure and browser-safe. It accepts only bounded,
+ * metadata-only snapshots whose candidate keys are opaque aliases assigned by
+ * the caller. It never accepts credential ids, account emails, labels, token
+ * material, prompts, or tenant activity. The same normalized snapshot can be
+ * persisted in a session event, replayed offline, and compared byte-for-byte.
+ *
+ * V1 is shadow-only at the runtime integration boundary. The evaluator models
+ * later placement, admission, manager priority, borrowing, emergency-fuse, and
+ * named-overlay semantics so they can be proven with deterministic simulations
+ * before any independent kill switch is allowed to affect a live allocation.
+ */
+declare const CODEX_FLEET_POLICY_SCHEMA_VERSION: 1;
+declare const CODEX_FLEET_POLICY_VERSION: "adaptive-shadow-v1";
+declare const CODEX_FLEET_POLICY_MAX_CANDIDATES = 32;
+declare const CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE = 4;
+/**
+ * Replay-integrity ordering for bounded ASCII-safe fleet keys and aliases.
+ *
+ * Locale-aware collation is intentionally forbidden here because its result
+ * can depend on locale and ICU data. Relational string comparison uses
+ * ECMAScript UTF-16 code-unit ordering and is therefore identical in Bun,
+ * Node, and browsers.
+ */
+declare function compareCodexFleetCanonicalStringsV1(left: string, right: string): number;
+type CodexFleetConfidence = "unknown" | "low" | "medium" | "high";
+type CodexFleetCandidateStatus = "active" | "needs_relogin" | "error" | "unknown";
+type CodexFleetCacheState = "unknown" | "healthy" | "collapsed";
+type CodexFleetPriority = "standard" | "manager";
+type CodexFleetPlacementKind = "new" | "fenced_in_flight";
+type CodexFleetOverlayMode = "none" | "prefer" | "isolate";
+type CodexFleetQuotaWindowV1 = {
+    /** Provider-reported percentage from a workspace-local cache, never inferred tenant truth. */
+    usedPercent: number | null;
+    /** Relative to input.observedAtMs. Zero means the reported window has reset. */
+    resetRemainingMs: number | null;
+};
+type CodexFleetCandidateV1 = {
+    /** Opaque, event-local alias such as c00. Never a credential/account id. */
+    key: string;
+    status: CodexFleetCandidateStatus;
+    allocatorEnabled: boolean;
+    /** Relative cooldown. A positive value excludes only NEW placements. */
+    cooldownRemainingMs: number | null;
+    activeLeaseCount: number;
+    quota: {
+        primary: CodexFleetQuotaWindowV1;
+        secondary: CodexFleetQuotaWindowV1;
+        checkedAgeMs: number | null;
+        confidence: CodexFleetConfidence;
+    };
+    /**
+     * Runtime-observed cache evidence. It may be absent because the production
+     * baseline currently exists as aggregate metrics/logs rather than allocator
+     * state. Absence is explicit uncertainty, not a zero cache hit.
+     */
+    cache: {
+        hitRatio: number | null;
+        sampledTokens: number | null;
+        checkedAgeMs: number | null;
+        confidence: CodexFleetConfidence;
+        /** Previously latched state; the evaluator applies dwell and recovery thresholds. */
+        state: CodexFleetCacheState;
+        /** Duration of the current continuous below/above-threshold observation. */
+        thresholdObservedForMs: number | null;
+    };
+    /** Workspace-local observed burn, separate from unexplained/external inference. */
+    observedBurn: {
+        primaryPercentPerHour: number | null;
+        secondaryPercentPerHour: number | null;
+        confidence: CodexFleetConfidence;
+    };
+    /**
+     * Unexplained/external burn is an inference only. The name and confidence are
+     * load-bearing: consumers must never relabel it as provider or tenant truth.
+     */
+    inferredUnexplainedBurn: {
+        primaryPercentPerHour: number | null;
+        secondaryPercentPerHour: number | null;
+        confidence: CodexFleetConfidence;
+    };
+    /** Opaque named-policy keys. Ignored unless overlaysEnabled is independently true. */
+    overlayKeys: string[];
+};
+type CodexFleetAdmissionSnapshotV1 = {
+    /** Dynamically observed capacity, not a static per-account slot allocation. */
+    dynamicCapacityUnits: number | null;
+    inUseUnits: number;
+    queuedManagerCount: number;
+    emergencyFuseActive: boolean;
+};
+type CodexFleetDecisionInputV1 = {
+    observedAtMs: number;
+    request: {
+        placement: CodexFleetPlacementKind;
+        priority: CodexFleetPriority;
+        currentCandidateKey: string | null;
+        waitAgeMs: number;
+        overlayKey: string | null;
+        overlayMode: CodexFleetOverlayMode;
+    };
+    admission: CodexFleetAdmissionSnapshotV1;
+    candidates: CodexFleetCandidateV1[];
+};
+type CodexFleetPolicyConfigV1 = {
+    maxCandidates: number;
+    quotaFreshForMs: number;
+    quotaStaleAfterMs: number;
+    placementUsageCeilingPercent: number;
+    cacheFreshForMs: number;
+    cacheCollapseThreshold: number;
+    cacheCollapseRecoveryThreshold: number;
+    cacheMinimumSampledTokens: number;
+    cacheCollapseDwellMs: number;
+    cacheRecoveryDwellMs: number;
+    activeLeaseScore: number;
+    unknownQuotaScore: number;
+    lowQuotaConfidenceScore: number;
+    mediumQuotaConfidenceScore: number;
+    inferredBurnScorePerPercentHour: number;
+    observedBurnScorePerPercentHour: number;
+    /** Maximum exhaustion-before-reset gap that contributes placement pressure. */
+    runwayRiskCapHours: number;
+    runwayScorePerAtRiskHour: number;
+    healthyCacheAffinityBenefit: number;
+    unknownCacheAffinityBenefit: number;
+    collapsedCacheAffinityBenefit: number;
+    switchHysteresisScore: number;
+    admissionPacingEnabled: boolean;
+    managerPriorityEnabled: boolean;
+    managerStandardStarvationMs: number;
+    emergencyFuseEnabled: boolean;
+    overlaysEnabled: boolean;
+    overlayPreferenceScore: number;
+};
+/**
+ * Experimental shadow defaults. None of the boolean control fields is enabled;
+ * production behavior therefore remains sticky-sharded until operators enable
+ * each independently after shadow acceptance.
+ */
+declare const DEFAULT_CODEX_FLEET_POLICY_V1: CodexFleetPolicyConfigV1;
+type CodexFleetScoreV1 = {
+    candidateKey: string;
+    eligible: boolean;
+    rejectionReason: "allocator_disabled" | "unavailable" | "cooling" | "quota_ceiling" | "overlay_isolation" | null;
+    quotaPressure: number;
+    leasePressure: number;
+    observedBurnPressure: number;
+    inferredBurnPressure: number;
+    runwayPressure: number;
+    uncertaintyPressure: number;
+    cacheAffinityBenefit: number;
+    cacheState: CodexFleetCacheState;
+    overlayPreferenceBenefit: number;
+    total: number;
+    confidence: CodexFleetConfidence;
+};
+type CodexFleetAdmissionDecisionV1 = {
+    outcome: "admit" | "pace";
+    reason: "fenced_in_flight" | "pacing_disabled" | "capacity_unknown" | "capacity_available" | "work_conserving_borrow" | "manager_priority" | "standard_starvation_bound" | "capacity_saturated" | "emergency_fuse";
+    /** True only when standard work uses otherwise-idle capacity with no manager backlog. */
+    borrowedIdleCapacity: boolean;
+};
+type CodexFleetDecisionV1 = {
+    outcome: "selected" | "paced" | "none";
+    selectedCandidateKey: string | null;
+    reason: "fenced_in_flight" | "fenced_candidate_missing" | "admission_paced" | "no_eligible_candidate" | "overlay_isolated_empty" | "best_score" | "affinity_best" | "hysteresis_hold";
+    admission: CodexFleetAdmissionDecisionV1;
+    borrowedOverlayCapacity: boolean;
+    strandedEligibleCount: number;
+    confidence: CodexFleetConfidence;
+    scores: CodexFleetScoreV1[];
+};
+type CodexFleetReplayRecordV1 = {
+    schemaVersion: typeof CODEX_FLEET_POLICY_SCHEMA_VERSION;
+    policyVersion: typeof CODEX_FLEET_POLICY_VERSION;
+    mode: "shadow";
+    policy: CodexFleetPolicyConfigV1;
+    input: CodexFleetDecisionInputV1;
+    truncatedCandidateCount: number;
+    policyFingerprint: string;
+    inputFingerprint: string;
+    decision: CodexFleetDecisionV1;
+    decisionFingerprint: string;
+};
+type CodexFleetReplayVerdictV1 = {
+    matches: boolean;
+    policyFingerprintMatches: boolean;
+    inputFingerprintMatches: boolean;
+    decisionFingerprintMatches: boolean;
+    recordedDecisionFingerprintMatches: boolean;
+    decision: CodexFleetDecisionV1;
+};
+declare function createCodexFleetReplayRecordV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetReplayRecordV1;
+declare function replayCodexFleetDecisionV1(value: unknown): CodexFleetReplayVerdictV1;
+/**
+ * Canonical replay bytes for already-bounded, identity-free fleet values.
+ * This is exported so offline tools can prove the exact bytes across runtimes;
+ * it performs no redaction and must not be used with raw account metadata.
+ */
+declare function canonicalCodexFleetReplayJsonV1(value: CodexFleetReplayRecordV1): string;
+/**
+ * Strict reader for durable/offline replay. Unknown fields, lossy normalization,
+ * malformed decisions, and non-SHA-256 digests are rejected before comparison.
+ */
+declare function readCodexFleetReplayRecordV1(value: unknown): CodexFleetReplayRecordV1;
+declare function evaluateCodexFleetDecisionV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetDecisionV1;
+declare function effectiveCodexFleetCacheStateV1(cache: CodexFleetCandidateV1["cache"], policy: CodexFleetPolicyConfigV1): CodexFleetCacheState;
+
+type SecretForRedaction = {
+    name: string;
+    value: string;
+};
+/**
+ * Returns true only for fields whose value is itself credential material.
+ * Container fields such as `headers` and URL fields are intentionally not
+ * included: their nested/value sanitizers retain useful names, hosts, paths,
+ * and non-sensitive query parameters.
+ */
+declare function isSensitiveFieldName(name: string): boolean;
+/**
+ * Return true only for header names whose values are credential material.
+ * Ordinary protocol metadata (`content-type`, `accept`, `user-agent`, and
+ * pagination/signature headers outside this allowlist) must remain intact.
+ */
+declare function isCredentialHeaderName(name: string): boolean;
+/**
+ * Redact only exact known-secret provenance from a structured object key.
+ * Generic field/header heuristics intentionally do not run here: a key is
+ * metadata unless the caller has proved that its bytes are secret material.
+ */
+declare function redactSensitiveKey(key: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/**
+ * Redact known secret provenance and common credential-bearing text shapes.
+ * This is deliberately a conservative safety boundary, not a promise of
+ * general-purpose DLP. It never includes a matched value in a marker or error.
+ */
+declare function redactSensitiveText(text: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/** Deeply redact plain structured data while retaining its diagnostic shape. */
+declare function redactSensitiveData<T>(value: T, knownSecrets?: readonly SecretForRedaction[]): T;
+/** Build the worker-friendly single-argument redactor used at turn boundaries. */
+declare function createSecretRedactor(knownSecrets: readonly SecretForRedaction[]): (value: unknown) => unknown;
+/**
+ * Redact a serialized JSON checkpoint without requiring it to be valid JSON.
+ * Valid JSON retains structure; malformed/opaque text still receives text
+ * classification and exact-known-value replacement.
+ */
+declare function redactSerializedJson(serialized: string, knownSecrets?: readonly SecretForRedaction[]): string;
+declare function identityRedactor<T>(value: T): T;
+
 declare const SessionStatus: z.ZodEnum<{
     queued: "queued";
     running: "running";
@@ -393,6 +645,8 @@ declare const ErrorCode: z.ZodEnum<{
     conflict: "conflict";
     idempotency_conflict: "idempotency_conflict";
     limit_exceeded: "limit_exceeded";
+    nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
+    nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
     provider_verification_failed: "provider_verification_failed";
     upstream_unavailable: "upstream_unavailable";
     internal_error: "internal_error";
@@ -400,6 +654,7 @@ declare const ErrorCode: z.ZodEnum<{
 type ErrorCode = z.infer<typeof ErrorCode>;
 declare const ErrorEnvelope: z.ZodObject<{
     error: z.ZodObject<{
+        status: z.ZodNumber;
         code: z.ZodEnum<{
             unauthenticated: "unauthenticated";
             forbidden: "forbidden";
@@ -408,16 +663,59 @@ declare const ErrorEnvelope: z.ZodObject<{
             conflict: "conflict";
             idempotency_conflict: "idempotency_conflict";
             limit_exceeded: "limit_exceeded";
+            nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
+            nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
             provider_verification_failed: "provider_verification_failed";
             upstream_unavailable: "upstream_unavailable";
             internal_error: "internal_error";
         }>;
         message: z.ZodString;
+        retryable: z.ZodBoolean;
         requestId: z.ZodOptional<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
 type ErrorEnvelope = z.infer<typeof ErrorEnvelope>;
+/** Physical ceiling of the PostgreSQL integer columns that persist depth policy. */
+declare const MAX_NESTED_AGENT_DEPTH = 2147483647;
+declare const NestedAgentDepthValue: z.ZodNumber;
+type NestedAgentDepthValue = z.infer<typeof NestedAgentDepthValue>;
+/** A denied child can be one greater than the persisted PostgreSQL int ceiling. */
+declare const NestedAgentDepthAttemptValue: z.ZodNumber;
+declare const NestedAgentDepthPolicySource: z.ZodEnum<{
+    default: "default";
+    session: "session";
+    workspace: "workspace";
+    deployment: "deployment";
+}>;
+type NestedAgentDepthPolicySource = z.infer<typeof NestedAgentDepthPolicySource>;
+/** Durable evidence for a session-create denial at the database admission boundary. */
+declare const SessionSpawnDenial: z.ZodObject<{
+    id: z.ZodString;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    parentSessionId: z.ZodNullable<z.ZodString>;
+    rootSessionId: z.ZodNullable<z.ZodString>;
+    currentDepth: z.ZodNumber;
+    attemptedDepth: z.ZodNumber;
+    effectiveMaxNestedAgentDepth: z.ZodNumber;
+    requestedMaxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+    policySource: z.ZodEnum<{
+        default: "default";
+        session: "session";
+        workspace: "workspace";
+        deployment: "deployment";
+    }>;
+    policySessionId: z.ZodNullable<z.ZodString>;
+    subjectId: z.ZodNullable<z.ZodString>;
+    code: z.ZodEnum<{
+        nested_agent_depth_exceeded: "nested_agent_depth_exceeded";
+        nested_agent_depth_override_forbidden: "nested_agent_depth_override_forbidden";
+    }>;
+    idempotencyKey: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
+type SessionSpawnDenial = z.infer<typeof SessionSpawnDenial>;
 declare const Permission: z.ZodEnum<{
     "account:read": "account:read";
     "account:admin": "account:admin";
@@ -832,6 +1130,7 @@ declare const WorkspaceSettingsSchema: z.ZodObject<{
             maxPerMonth: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    maxNestedAgentDepth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 }, z.core.$loose>;
 type WorkspaceSettings = z.infer<typeof WorkspaceSettingsSchema>;
 declare function resolveWorkspaceMemoryEnabled(settings: unknown): boolean;
@@ -889,6 +1188,7 @@ declare const UpdateWorkspaceSettingsRequest: z.ZodObject<{
             maxPerMonth: z.ZodNullable<z.ZodNumber>;
         }, z.core.$strict>;
     }, z.core.$strict>>;
+    maxNestedAgentDepth: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
 }, z.core.$loose>;
 type UpdateWorkspaceSettingsRequest = z.infer<typeof UpdateWorkspaceSettingsRequest>;
 declare const SetWorkspaceDefaultRigRequest: z.ZodObject<{
@@ -1934,8 +2234,8 @@ declare const McpServerConnectionRef: z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
     }, z.core.$strict>>>;
     subjectScope: z.ZodOptional<z.ZodEnum<{
-        subject: "subject";
         workspace: "workspace";
+        subject: "subject";
     }>>;
 }, z.core.$strict>;
 type McpServerConnectionRef = z.infer<typeof McpServerConnectionRef>;
@@ -2012,10 +2312,19 @@ type ConnectionCredentialsPort = {
 };
 type GitHubInstallationSummary = {
     installationId: number;
+    accountId: number;
     accountLogin: string | null;
     accountType: string | null;
     suspended: boolean;
 };
+type GitHubInstallationAuthorityKind = "personal_owner" | "organization_owner";
+interface GitHubInstallationBindingProof {
+    actorId: number;
+    actorLogin: string;
+    authorityKind: GitHubInstallationAuthorityKind;
+    installation: GitHubInstallationSummary;
+    repositories: GitHubRepository[];
+}
 type GitHubRepositoryPermissions = {
     admin: boolean;
     maintain: boolean;
@@ -2030,6 +2339,18 @@ type GitHubUserInstallationAccess = GitHubInstallationSummary & {
     repositories: GitHubUserRepositoryAccess[];
 };
 type GitHubAppApiPort = {
+    /**
+     * Exchange one fresh GitHub user-authorization code and prove current
+     * installation authority. Implementations must accept only exact personal
+     * ownership or active organization ownership; installation visibility,
+     * repository permission bits, and App Manager metadata are not authority.
+     * Organization ownership must be revalidated after repository discovery,
+     * immediately before returning the proof used by the durable bind.
+     */
+    authorizeInstallationBinding?: (input: {
+        code: string;
+        installationId: number;
+    }) => Promise<GitHubInstallationBindingProof>;
     authorizeUser?: (input: {
         code: string;
     }) => Promise<GitHubUserInstallationAccess[]>;
@@ -2265,6 +2586,28 @@ declare const DocumentSearchMode: z.ZodEnum<{
     keyword: "keyword";
 }>;
 type DocumentSearchMode = z.infer<typeof DocumentSearchMode>;
+declare const DocumentVisibility: z.ZodEnum<{
+    workspace: "workspace";
+    private: "private";
+}>;
+type DocumentVisibility = z.infer<typeof DocumentVisibility>;
+declare const DocumentCurationStatus: z.ZodEnum<{
+    failed: "failed";
+    none: "none";
+    pending: "pending";
+    suggested: "suggested";
+    auto_filed: "auto_filed";
+}>;
+type DocumentCurationStatus = z.infer<typeof DocumentCurationStatus>;
+declare const DocumentCuration: z.ZodObject<{
+    suggestedBaseId: z.ZodNullable<z.ZodString>;
+    suggestedBaseName: z.ZodNullable<z.ZodString>;
+    confidence: z.ZodNumber;
+    reason: z.ZodNullable<z.ZodString>;
+    originalTitle: z.ZodNullable<z.ZodString>;
+    model: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type DocumentCuration = z.infer<typeof DocumentCuration>;
 declare const DocumentBase: z.ZodObject<{
     id: z.ZodString;
     workspaceId: z.ZodString;
@@ -2307,6 +2650,29 @@ declare const Document: z.ZodObject<{
     sourceUpdatedAt: z.ZodNullable<z.ZodString>;
     sourceVersion: z.ZodNullable<z.ZodString>;
     aclTags: z.ZodArray<z.ZodString>;
+    visibility: z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>;
+    createdBy: z.ZodNullable<z.ZodString>;
+    agentAccess: z.ZodBoolean;
+    summary: z.ZodNullable<z.ZodString>;
+    topics: z.ZodArray<z.ZodString>;
+    curationStatus: z.ZodEnum<{
+        failed: "failed";
+        none: "none";
+        pending: "pending";
+        suggested: "suggested";
+        auto_filed: "auto_filed";
+    }>;
+    curation: z.ZodNullable<z.ZodObject<{
+        suggestedBaseId: z.ZodNullable<z.ZodString>;
+        suggestedBaseName: z.ZodNullable<z.ZodString>;
+        confidence: z.ZodNumber;
+        reason: z.ZodNullable<z.ZodString>;
+        originalTitle: z.ZodNullable<z.ZodString>;
+        model: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, z.core.$strip>;
@@ -2375,8 +2741,29 @@ declare const AddDocumentRequest: z.ZodObject<{
     sourceUpdatedAt: z.ZodOptional<z.ZodString>;
     sourceVersion: z.ZodOptional<z.ZodString>;
     aclTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type AddDocumentRequest = z.infer<typeof AddDocumentRequest>;
+declare const CreateKnowledgeDropRequest: z.ZodObject<{
+    text: z.ZodOptional<z.ZodString>;
+    fileId: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type CreateKnowledgeDropRequest = z.infer<typeof CreateKnowledgeDropRequest>;
+declare const MoveDocumentRequest: z.ZodObject<{
+    targetBaseId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type MoveDocumentRequest = z.infer<typeof MoveDocumentRequest>;
 declare const DocumentSearchRequest: z.ZodObject<{
     query: z.ZodString;
     baseIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -2805,8 +3192,8 @@ declare const SessionMcpServerInput: z.ZodObject<{
             kind: z.ZodLiteral<"repository">;
         }, z.core.$strict>>>;
         subjectScope: z.ZodOptional<z.ZodEnum<{
-            subject: "subject";
             workspace: "workspace";
+            subject: "subject";
         }>>;
     }, z.core.$strict>>;
 }, z.core.$strip>;
@@ -2840,8 +3227,8 @@ declare const SessionMcpServerMetadata: z.ZodObject<{
             kind: z.ZodLiteral<"repository">;
         }, z.core.$strict>>>;
         subjectScope: z.ZodOptional<z.ZodEnum<{
-            subject: "subject";
             workspace: "workspace";
+            subject: "subject";
         }>>;
     }, z.core.$strict>>>;
 }, z.core.$strict>;
@@ -2875,8 +3262,8 @@ declare const UpdateSessionMcpApprovalPolicyResponse: z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
-                subject: "subject";
                 workspace: "workspace";
+                subject: "subject";
             }>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>;
@@ -2946,6 +3333,57 @@ declare const SessionGoalPausedReason: z.ZodEnum<{
     limits: "limits";
 }>;
 type SessionGoalPausedReason = z.infer<typeof SessionGoalPausedReason>;
+declare const SessionGoalContinuationState: z.ZodEnum<{
+    running: "running";
+    inactive: "inactive";
+    scheduled: "scheduled";
+    blocked: "blocked";
+    invariant_broken: "invariant_broken";
+}>;
+type SessionGoalContinuationState = z.infer<typeof SessionGoalContinuationState>;
+declare const SessionGoalContinuationReason: z.ZodEnum<{
+    goal_inactive: "goal_inactive";
+    wake_pending: "wake_pending";
+    continuation_pending: "continuation_pending";
+    human_work_pending: "human_work_pending";
+    goal_turn_running: "goal_turn_running";
+    human_turn_running: "human_turn_running";
+    workstream_paused: "workstream_paused";
+    approval_required: "approval_required";
+    provider_backpressure: "provider_backpressure";
+    session_cancelled: "session_cancelled";
+    system_work_pending: "system_work_pending";
+    missing_obligation: "missing_obligation";
+}>;
+type SessionGoalContinuationReason = z.infer<typeof SessionGoalContinuationReason>;
+declare const SessionGoalContinuation: z.ZodObject<{
+    state: z.ZodEnum<{
+        running: "running";
+        inactive: "inactive";
+        scheduled: "scheduled";
+        blocked: "blocked";
+        invariant_broken: "invariant_broken";
+    }>;
+    reason: z.ZodEnum<{
+        goal_inactive: "goal_inactive";
+        wake_pending: "wake_pending";
+        continuation_pending: "continuation_pending";
+        human_work_pending: "human_work_pending";
+        goal_turn_running: "goal_turn_running";
+        human_turn_running: "human_turn_running";
+        workstream_paused: "workstream_paused";
+        approval_required: "approval_required";
+        provider_backpressure: "provider_backpressure";
+        session_cancelled: "session_cancelled";
+        system_work_pending: "system_work_pending";
+        missing_obligation: "missing_obligation";
+    }>;
+    wakeRevision: z.ZodNumber;
+    observedRevision: z.ZodNumber;
+    nextAttemptAt: z.ZodNullable<z.ZodString>;
+    lastError: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type SessionGoalContinuation = z.infer<typeof SessionGoalContinuation>;
 declare const SessionGoal: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -2971,6 +3409,33 @@ declare const SessionGoal: z.ZodObject<{
     noProgressStreak: z.ZodNumber;
     maxAutoContinuations: z.ZodNullable<z.ZodNumber>;
     metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    continuation: z.ZodOptional<z.ZodObject<{
+        state: z.ZodEnum<{
+            running: "running";
+            inactive: "inactive";
+            scheduled: "scheduled";
+            blocked: "blocked";
+            invariant_broken: "invariant_broken";
+        }>;
+        reason: z.ZodEnum<{
+            goal_inactive: "goal_inactive";
+            wake_pending: "wake_pending";
+            continuation_pending: "continuation_pending";
+            human_work_pending: "human_work_pending";
+            goal_turn_running: "goal_turn_running";
+            human_turn_running: "human_turn_running";
+            workstream_paused: "workstream_paused";
+            approval_required: "approval_required";
+            provider_backpressure: "provider_backpressure";
+            session_cancelled: "session_cancelled";
+            system_work_pending: "system_work_pending";
+            missing_obligation: "missing_obligation";
+        }>;
+        wakeRevision: z.ZodNumber;
+        observedRevision: z.ZodNumber;
+        nextAttemptAt: z.ZodNullable<z.ZodString>;
+        lastError: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, z.core.$strip>;
@@ -2993,6 +3458,25 @@ declare const UpdateSessionRequest: z.ZodObject<{
     title: z.ZodString;
 }, z.core.$strip>;
 type UpdateSessionRequest = z.infer<typeof UpdateSessionRequest>;
+/**
+ * Replace an existing session's durable tool policy, or explicitly opt back in
+ * to the current workspace defaults. The mode-less explicit shape is retained
+ * for compatibility with clients released before workspace-default adoption
+ * was supported.
+ */
+declare const UpdateSessionToolPolicyRequest: z.ZodUnion<readonly [z.ZodObject<{
+    mode: z.ZodLiteral<"workspace_default">;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodOptional<z.ZodLiteral<"explicit">>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>]>;
+type UpdateSessionToolPolicyRequest = z.infer<typeof UpdateSessionToolPolicyRequest>;
 /**
  * A member's personal pin preference for a session. `expectedVersion` is
  * optional: ordinary pin/unpin actions are idempotent last-write-wins, while a
@@ -3101,6 +3585,7 @@ declare const SessionAuthorizationOperation: z.ZodEnum<{
     "session.human_input.write": "session.human_input.write";
     "session.title.write": "session.title.write";
     "session.mcp.approval_policy.write": "session.mcp.approval_policy.write";
+    "session.tool_policy.write": "session.tool_policy.write";
     "session.goal.read": "session.goal.read";
     "session.goal.write": "session.goal.write";
     "session.child.create": "session.child.create";
@@ -3301,8 +3786,8 @@ declare const SessionTurn: z.ZodObject<{
 type SessionTurn = z.infer<typeof SessionTurn>;
 declare const EffectiveControlBlocker: z.ZodObject<{
     kind: z.ZodEnum<{
-        workspace: "workspace";
         session: "session";
+        workspace: "workspace";
     }>;
     sessionId: z.ZodOptional<z.ZodString>;
     displayName: z.ZodString;
@@ -3314,9 +3799,9 @@ declare const EffectiveControlBlocker: z.ZodObject<{
 type EffectiveControlBlocker = z.infer<typeof EffectiveControlBlocker>;
 declare const EffectiveControlResumeOption: z.ZodObject<{
     scope: z.ZodEnum<{
+        session: "session";
         workspace: "workspace";
         selected: "selected";
-        session: "session";
     }>;
     targetId: z.ZodOptional<z.ZodString>;
     selectedStateAfter: z.ZodEnum<{
@@ -3325,8 +3810,8 @@ declare const EffectiveControlResumeOption: z.ZodObject<{
     }>;
     remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
         kind: z.ZodEnum<{
-            workspace: "workspace";
             session: "session";
+            workspace: "workspace";
         }>;
         sessionId: z.ZodOptional<z.ZodString>;
         displayName: z.ZodString;
@@ -3351,8 +3836,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
     }>;
     primaryBlocker: z.ZodNullable<z.ZodObject<{
         kind: z.ZodEnum<{
-            workspace: "workspace";
             session: "session";
+            workspace: "workspace";
         }>;
         sessionId: z.ZodOptional<z.ZodString>;
         displayName: z.ZodString;
@@ -3364,8 +3849,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
     additionalBlockerCount: z.ZodNumber;
     blockers: z.ZodArray<z.ZodObject<{
         kind: z.ZodEnum<{
-            workspace: "workspace";
             session: "session";
+            workspace: "workspace";
         }>;
         sessionId: z.ZodOptional<z.ZodString>;
         displayName: z.ZodString;
@@ -3376,9 +3861,9 @@ declare const EffectiveSessionControl: z.ZodObject<{
     }, z.core.$strip>>;
     resumeOptions: z.ZodArray<z.ZodObject<{
         scope: z.ZodEnum<{
+            session: "session";
             workspace: "workspace";
             selected: "selected";
-            session: "session";
         }>;
         targetId: z.ZodOptional<z.ZodString>;
         selectedStateAfter: z.ZodEnum<{
@@ -3387,8 +3872,8 @@ declare const EffectiveSessionControl: z.ZodObject<{
         }>;
         remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -3490,8 +3975,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
         }>;
         primaryBlocker: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -3503,8 +3988,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
         additionalBlockerCount: z.ZodNumber;
         blockers: z.ZodArray<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -3515,9 +4000,9 @@ declare const SessionQueueSnapshot: z.ZodObject<{
         }, z.core.$strip>>;
         resumeOptions: z.ZodArray<z.ZodObject<{
             scope: z.ZodEnum<{
+                session: "session";
                 workspace: "workspace";
                 selected: "selected";
-                session: "session";
             }>;
             targetId: z.ZodOptional<z.ZodString>;
             selectedStateAfter: z.ZodEnum<{
@@ -3526,8 +4011,8 @@ declare const SessionQueueSnapshot: z.ZodObject<{
             }>;
             remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -3685,8 +4170,238 @@ declare const DeleteSessionQueueItemRequest: z.ZodObject<{
     expectedTurnVersion: z.ZodNumber;
     reason: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
-type DeleteSessionQueueItemRequest = z.infer<typeof DeleteSessionQueueItemRequest>;
-declare const SaveComposerDraftRequest: z.ZodObject<{
+type DeleteSessionQueueItemRequest = z.infer<typeof DeleteSessionQueueItemRequest>;
+declare const SaveComposerDraftRequest: z.ZodObject<{
+    model: z.ZodString;
+    text: z.ZodString;
+    reasoningEffort: z.ZodEnum<{
+        none: "none";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+    }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"repository">;
+        uri: z.ZodString;
+        ref: z.ZodString;
+        mountPath: z.ZodOptional<z.ZodString>;
+        subpath: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<{
+            github: "github";
+            gitlab: "gitlab";
+            azure_devops: "azure_devops";
+        }>>;
+        credentialBindingId: z.ZodOptional<z.ZodString>;
+        access: z.ZodOptional<z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>>;
+        repositoryId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        installationId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        projectId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        connectionId: z.ZodOptional<z.ZodString>;
+        githubInstallationId: z.ZodOptional<z.ZodNumber>;
+        githubRepositoryId: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"file">;
+        fileId: z.ZodString;
+        mountPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>], "kind">>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
+    expectedRevision: z.ZodNumber;
+}, z.core.$strip>;
+type SaveComposerDraftRequest = z.infer<typeof SaveComposerDraftRequest>;
+/**
+ * Create-only options saved with an actor's private pre-session draft. This is
+ * deliberately narrower than CreateSessionRequest: idempotency/event keys and
+ * credential-bearing MCP server inputs are per-attempt data, never draft state.
+ */
+declare const NewSessionDraftOptions: z.ZodObject<{
+    sandboxBackend: z.ZodOptional<z.ZodEnum<{
+        docker: "docker";
+        modal: "modal";
+        local: "local";
+        none: "none";
+        daytona: "daytona";
+        runloop: "runloop";
+        e2b: "e2b";
+        blaxel: "blaxel";
+        cloudflare: "cloudflare";
+        vercel: "vercel";
+        selfhosted: "selfhosted";
+    }>>;
+    targetSandboxId: z.ZodOptional<z.ZodString>;
+    workingDir: z.ZodOptional<z.ZodString>;
+    variableSetId: z.ZodOptional<z.ZodString>;
+    rigId: z.ZodOptional<z.ZodString>;
+    goal: z.ZodOptional<z.ZodObject<{
+        text: z.ZodString;
+        successCriteria: z.ZodOptional<z.ZodString>;
+        maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "account:read": "account:read";
+        "account:admin": "account:admin";
+        "members:manage": "members:manage";
+        "workspace:create": "workspace:create";
+        "billing:read": "billing:read";
+        "billing:manage": "billing:manage";
+        "workspace:read": "workspace:read";
+        "workspace:admin": "workspace:admin";
+        "sessions:create": "sessions:create";
+        "sessions:read": "sessions:read";
+        "sessions:control": "sessions:control";
+        "stream:view": "stream:view";
+        "stream:control": "stream:control";
+        "stream:acknowledge": "stream:acknowledge";
+        "files:upload": "files:upload";
+        "files:read": "files:read";
+        "files:write": "files:write";
+        "terminal:attach": "terminal:attach";
+        "documents:manage": "documents:manage";
+        "documents:search": "documents:search";
+        "scheduled_tasks:manage": "scheduled_tasks:manage";
+        "scheduled_tasks:run": "scheduled_tasks:run";
+        "github:manage": "github:manage";
+        "github:use": "github:use";
+        "api_keys:manage": "api_keys:manage";
+        "connections:read": "connections:read";
+        "connections:write": "connections:write";
+        "environments:manage": "environments:manage";
+        "environments:use": "environments:use";
+        "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:use": "variable-sets:use";
+        "mcp_servers:attach": "mcp_servers:attach";
+        "toolspace:call": "toolspace:call";
+        "goals:manage": "goals:manage";
+        "enrollments:read": "enrollments:read";
+        "enrollments:manage": "enrollments:manage";
+        "rigs:use": "rigs:use";
+        "rigs:manage": "rigs:manage";
+    }>>>;
+}, z.core.$strip>;
+type NewSessionDraftOptions = z.infer<typeof NewSessionDraftOptions>;
+/** Actor-private, server-authoritative composer state before a session exists. */
+declare const NewSessionDraft: z.ZodObject<{
+    revision: z.ZodNumber;
+    text: z.ZodString;
+    resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"repository">;
+        uri: z.ZodString;
+        ref: z.ZodString;
+        mountPath: z.ZodOptional<z.ZodString>;
+        subpath: z.ZodOptional<z.ZodString>;
+        provider: z.ZodOptional<z.ZodEnum<{
+            github: "github";
+            gitlab: "gitlab";
+            azure_devops: "azure_devops";
+        }>>;
+        credentialBindingId: z.ZodOptional<z.ZodString>;
+        access: z.ZodOptional<z.ZodEnum<{
+            read: "read";
+            write: "write";
+        }>>;
+        repositoryId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        installationId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        projectId: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        connectionId: z.ZodOptional<z.ZodString>;
+        githubInstallationId: z.ZodOptional<z.ZodNumber>;
+        githubRepositoryId: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"file">;
+        fileId: z.ZodString;
+        mountPath: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>], "kind">>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
+    model: z.ZodString;
+    reasoningEffort: z.ZodEnum<{
+        none: "none";
+        minimal: "minimal";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        xhigh: "xhigh";
+    }>;
+    options: z.ZodObject<{
+        sandboxBackend: z.ZodOptional<z.ZodEnum<{
+            docker: "docker";
+            modal: "modal";
+            local: "local";
+            none: "none";
+            daytona: "daytona";
+            runloop: "runloop";
+            e2b: "e2b";
+            blaxel: "blaxel";
+            cloudflare: "cloudflare";
+            vercel: "vercel";
+            selfhosted: "selfhosted";
+        }>>;
+        targetSandboxId: z.ZodOptional<z.ZodString>;
+        workingDir: z.ZodOptional<z.ZodString>;
+        variableSetId: z.ZodOptional<z.ZodString>;
+        rigId: z.ZodOptional<z.ZodString>;
+        goal: z.ZodOptional<z.ZodObject<{
+            text: z.ZodString;
+            successCriteria: z.ZodOptional<z.ZodString>;
+            maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "account:read": "account:read";
+            "account:admin": "account:admin";
+            "members:manage": "members:manage";
+            "workspace:create": "workspace:create";
+            "billing:read": "billing:read";
+            "billing:manage": "billing:manage";
+            "workspace:read": "workspace:read";
+            "workspace:admin": "workspace:admin";
+            "sessions:create": "sessions:create";
+            "sessions:read": "sessions:read";
+            "sessions:control": "sessions:control";
+            "stream:view": "stream:view";
+            "stream:control": "stream:control";
+            "stream:acknowledge": "stream:acknowledge";
+            "files:upload": "files:upload";
+            "files:read": "files:read";
+            "files:write": "files:write";
+            "terminal:attach": "terminal:attach";
+            "documents:manage": "documents:manage";
+            "documents:search": "documents:search";
+            "scheduled_tasks:manage": "scheduled_tasks:manage";
+            "scheduled_tasks:run": "scheduled_tasks:run";
+            "github:manage": "github:manage";
+            "github:use": "github:use";
+            "api_keys:manage": "api_keys:manage";
+            "connections:read": "connections:read";
+            "connections:write": "connections:write";
+            "environments:manage": "environments:manage";
+            "environments:use": "environments:use";
+            "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:use": "variable-sets:use";
+            "mcp_servers:attach": "mcp_servers:attach";
+            "toolspace:call": "toolspace:call";
+            "goals:manage": "goals:manage";
+            "enrollments:read": "enrollments:read";
+            "enrollments:manage": "enrollments:manage";
+            "rigs:use": "rigs:use";
+            "rigs:manage": "rigs:manage";
+        }>>>;
+    }, z.core.$strip>;
+    updatedAt: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type NewSessionDraft = z.infer<typeof NewSessionDraft>;
+declare const SaveNewSessionDraftRequest: z.ZodObject<{
     model: z.ZodString;
     text: z.ZodString;
     reasoningEffort: z.ZodEnum<{
@@ -3697,6 +4412,11 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         high: "high";
         xhigh: "xhigh";
     }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
         uri: z.ZodString;
@@ -3724,15 +4444,74 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         fileId: z.ZodString;
         mountPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>], "kind">>;
-    tools: z.ZodArray<z.ZodObject<{
-        kind: z.ZodLiteral<"mcp">;
-        id: z.ZodString;
-        optional: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
     toolsProvided: z.ZodDefault<z.ZodBoolean>;
+    options: z.ZodObject<{
+        sandboxBackend: z.ZodOptional<z.ZodEnum<{
+            docker: "docker";
+            modal: "modal";
+            local: "local";
+            none: "none";
+            daytona: "daytona";
+            runloop: "runloop";
+            e2b: "e2b";
+            blaxel: "blaxel";
+            cloudflare: "cloudflare";
+            vercel: "vercel";
+            selfhosted: "selfhosted";
+        }>>;
+        targetSandboxId: z.ZodOptional<z.ZodString>;
+        workingDir: z.ZodOptional<z.ZodString>;
+        variableSetId: z.ZodOptional<z.ZodString>;
+        rigId: z.ZodOptional<z.ZodString>;
+        goal: z.ZodOptional<z.ZodObject<{
+            text: z.ZodString;
+            successCriteria: z.ZodOptional<z.ZodString>;
+            maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            "account:read": "account:read";
+            "account:admin": "account:admin";
+            "members:manage": "members:manage";
+            "workspace:create": "workspace:create";
+            "billing:read": "billing:read";
+            "billing:manage": "billing:manage";
+            "workspace:read": "workspace:read";
+            "workspace:admin": "workspace:admin";
+            "sessions:create": "sessions:create";
+            "sessions:read": "sessions:read";
+            "sessions:control": "sessions:control";
+            "stream:view": "stream:view";
+            "stream:control": "stream:control";
+            "stream:acknowledge": "stream:acknowledge";
+            "files:upload": "files:upload";
+            "files:read": "files:read";
+            "files:write": "files:write";
+            "terminal:attach": "terminal:attach";
+            "documents:manage": "documents:manage";
+            "documents:search": "documents:search";
+            "scheduled_tasks:manage": "scheduled_tasks:manage";
+            "scheduled_tasks:run": "scheduled_tasks:run";
+            "github:manage": "github:manage";
+            "github:use": "github:use";
+            "api_keys:manage": "api_keys:manage";
+            "connections:read": "connections:read";
+            "connections:write": "connections:write";
+            "environments:manage": "environments:manage";
+            "environments:use": "environments:use";
+            "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:use": "variable-sets:use";
+            "mcp_servers:attach": "mcp_servers:attach";
+            "toolspace:call": "toolspace:call";
+            "goals:manage": "goals:manage";
+            "enrollments:read": "enrollments:read";
+            "enrollments:manage": "enrollments:manage";
+            "rigs:use": "rigs:use";
+            "rigs:manage": "rigs:manage";
+        }>>>;
+    }, z.core.$strip>;
     expectedRevision: z.ZodNumber;
 }, z.core.$strip>;
-type SaveComposerDraftRequest = z.infer<typeof SaveComposerDraftRequest>;
+type SaveNewSessionDraftRequest = z.infer<typeof SaveNewSessionDraftRequest>;
 declare const WORKSPACE_CONTROL_REASON_MAX_BYTES: number;
 declare const WORKSPACE_CONTROL_ACTOR_MAX_BYTES = 1024;
 declare const WORKSPACE_CONTROL_EVENT_MAX_BYTES: number;
@@ -3815,8 +4594,8 @@ declare const WorkspaceControlEvent: z.ZodObject<{
     revision: z.ZodNumber;
     type: z.ZodLiteral<"workspace.control.changed">;
     scope: z.ZodEnum<{
-        workspace: "workspace";
         session: "session";
+        workspace: "workspace";
     }>;
     rootSessionId: z.ZodNullable<z.ZodString>;
     action: z.ZodEnum<{
@@ -4441,6 +5220,7 @@ declare const ScheduledTaskAgentConfig: z.ZodObject<{
         successCriteria: z.ZodOptional<z.ZodString>;
         maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
+    maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
 }, z.core.$strip>;
 type ScheduledTaskAgentConfig = z.infer<typeof ScheduledTaskAgentConfig>;
 declare const ScheduledTask: z.ZodObject<{
@@ -4548,6 +5328,7 @@ declare const ScheduledTask: z.ZodObject<{
             successCriteria: z.ZodOptional<z.ZodString>;
             maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
+        maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>;
     reusableSessionId: z.ZodNullable<z.ZodString>;
     variableSetId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -4678,6 +5459,7 @@ declare const CreateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
             successCriteria: z.ZodOptional<z.ZodString>;
             maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
+        maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>;
     status: z.ZodDefault<z.ZodEnum<{
         active: "active";
@@ -4786,6 +5568,7 @@ declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
             successCriteria: z.ZodOptional<z.ZodString>;
             maxAutoContinuations: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
+        maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
     }, z.core.$strip>>;
     status: z.ZodOptional<z.ZodEnum<{
         active: "active";
@@ -5718,8 +6501,8 @@ declare const EnableCapabilityRequest: z.ZodPreprocess<z.ZodObject<{
             kind: z.ZodLiteral<"repository">;
         }, z.core.$strict>>>;
         subjectScope: z.ZodOptional<z.ZodEnum<{
-            subject: "subject";
             workspace: "workspace";
+            subject: "subject";
         }>>;
     }, z.core.$strict>>;
     headers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
@@ -5982,6 +6765,7 @@ declare const Session: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -6112,12 +6896,23 @@ declare const Session: z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
-                subject: "subject";
                 workspace: "workspace";
+                subject: "subject";
             }>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>>;
     parentSessionId: z.ZodNullable<z.ZodString>;
+    rootSessionId: z.ZodString;
+    nestedAgentDepth: z.ZodNumber;
+    maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+    effectiveMaxNestedAgentDepth: z.ZodNumber;
+    nestedAgentDepthPolicySource: z.ZodEnum<{
+        default: "default";
+        session: "session";
+        workspace: "workspace";
+        deployment: "deployment";
+    }>;
+    nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
     createIdempotencyKey: z.ZodNullable<z.ZodString>;
     temporalWorkflowId: z.ZodNullable<z.ZodString>;
     activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6138,8 +6933,8 @@ declare const Session: z.ZodObject<{
         }>;
         primaryBlocker: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -6151,8 +6946,8 @@ declare const Session: z.ZodObject<{
         additionalBlockerCount: z.ZodNumber;
         blockers: z.ZodArray<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -6163,9 +6958,9 @@ declare const Session: z.ZodObject<{
         }, z.core.$strip>>;
         resumeOptions: z.ZodArray<z.ZodObject<{
             scope: z.ZodEnum<{
+                session: "session";
                 workspace: "workspace";
                 selected: "selected";
-                session: "session";
             }>;
             targetId: z.ZodOptional<z.ZodString>;
             selectedStateAfter: z.ZodEnum<{
@@ -6174,8 +6969,8 @@ declare const Session: z.ZodObject<{
             }>;
             remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -6284,6 +7079,7 @@ declare const CreateSessionResponse: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -6414,12 +7210,23 @@ declare const CreateSessionResponse: z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
-                subject: "subject";
                 workspace: "workspace";
+                subject: "subject";
             }>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>>;
     parentSessionId: z.ZodNullable<z.ZodString>;
+    rootSessionId: z.ZodString;
+    nestedAgentDepth: z.ZodNumber;
+    maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+    effectiveMaxNestedAgentDepth: z.ZodNumber;
+    nestedAgentDepthPolicySource: z.ZodEnum<{
+        default: "default";
+        session: "session";
+        workspace: "workspace";
+        deployment: "deployment";
+    }>;
+    nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
     createIdempotencyKey: z.ZodNullable<z.ZodString>;
     temporalWorkflowId: z.ZodNullable<z.ZodString>;
     activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6440,8 +7247,8 @@ declare const CreateSessionResponse: z.ZodObject<{
         }>;
         primaryBlocker: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -6453,8 +7260,8 @@ declare const CreateSessionResponse: z.ZodObject<{
         additionalBlockerCount: z.ZodNumber;
         blockers: z.ZodArray<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -6465,9 +7272,9 @@ declare const CreateSessionResponse: z.ZodObject<{
         }, z.core.$strip>>;
         resumeOptions: z.ZodArray<z.ZodObject<{
             scope: z.ZodEnum<{
+                session: "session";
                 workspace: "workspace";
                 selected: "selected";
-                session: "session";
             }>;
             targetId: z.ZodOptional<z.ZodString>;
             selectedStateAfter: z.ZodEnum<{
@@ -6476,8 +7283,8 @@ declare const CreateSessionResponse: z.ZodObject<{
             }>;
             remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -6592,6 +7399,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -6722,12 +7530,23 @@ declare const SessionListResponse: z.ZodObject<{
                     kind: z.ZodLiteral<"repository">;
                 }, z.core.$strict>>>;
                 subjectScope: z.ZodOptional<z.ZodEnum<{
-                    subject: "subject";
                     workspace: "workspace";
+                    subject: "subject";
                 }>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>>>;
         parentSessionId: z.ZodNullable<z.ZodString>;
+        rootSessionId: z.ZodString;
+        nestedAgentDepth: z.ZodNumber;
+        maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+        effectiveMaxNestedAgentDepth: z.ZodNumber;
+        nestedAgentDepthPolicySource: z.ZodEnum<{
+            default: "default";
+            session: "session";
+            workspace: "workspace";
+            deployment: "deployment";
+        }>;
+        nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
         createIdempotencyKey: z.ZodNullable<z.ZodString>;
         temporalWorkflowId: z.ZodNullable<z.ZodString>;
         activeTurnId: z.ZodNullable<z.ZodString>;
@@ -6748,8 +7567,8 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             primaryBlocker: z.ZodNullable<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -6761,8 +7580,8 @@ declare const SessionListResponse: z.ZodObject<{
             additionalBlockerCount: z.ZodNumber;
             blockers: z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -6773,9 +7592,9 @@ declare const SessionListResponse: z.ZodObject<{
             }, z.core.$strip>>;
             resumeOptions: z.ZodArray<z.ZodObject<{
                 scope: z.ZodEnum<{
+                    session: "session";
                     workspace: "workspace";
                     selected: "selected";
-                    session: "session";
                 }>;
                 targetId: z.ZodOptional<z.ZodString>;
                 selectedStateAfter: z.ZodEnum<{
@@ -6784,8 +7603,8 @@ declare const SessionListResponse: z.ZodObject<{
                 }>;
                 remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
-                        workspace: "workspace";
                         session: "session";
+                        workspace: "workspace";
                     }>;
                     sessionId: z.ZodOptional<z.ZodString>;
                     displayName: z.ZodString;
@@ -6889,6 +7708,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7019,12 +7839,23 @@ declare const SessionListResponse: z.ZodObject<{
                     kind: z.ZodLiteral<"repository">;
                 }, z.core.$strict>>>;
                 subjectScope: z.ZodOptional<z.ZodEnum<{
-                    subject: "subject";
                     workspace: "workspace";
+                    subject: "subject";
                 }>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>>>;
         parentSessionId: z.ZodNullable<z.ZodString>;
+        rootSessionId: z.ZodString;
+        nestedAgentDepth: z.ZodNumber;
+        maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+        effectiveMaxNestedAgentDepth: z.ZodNumber;
+        nestedAgentDepthPolicySource: z.ZodEnum<{
+            default: "default";
+            session: "session";
+            workspace: "workspace";
+            deployment: "deployment";
+        }>;
+        nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
         createIdempotencyKey: z.ZodNullable<z.ZodString>;
         temporalWorkflowId: z.ZodNullable<z.ZodString>;
         activeTurnId: z.ZodNullable<z.ZodString>;
@@ -7045,8 +7876,8 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             primaryBlocker: z.ZodNullable<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -7058,8 +7889,8 @@ declare const SessionListResponse: z.ZodObject<{
             additionalBlockerCount: z.ZodNumber;
             blockers: z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -7070,9 +7901,9 @@ declare const SessionListResponse: z.ZodObject<{
             }, z.core.$strip>>;
             resumeOptions: z.ZodArray<z.ZodObject<{
                 scope: z.ZodEnum<{
+                    session: "session";
                     workspace: "workspace";
                     selected: "selected";
-                    session: "session";
                 }>;
                 targetId: z.ZodOptional<z.ZodString>;
                 selectedStateAfter: z.ZodEnum<{
@@ -7081,8 +7912,8 @@ declare const SessionListResponse: z.ZodObject<{
                 }>;
                 remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
-                        workspace: "workspace";
                         session: "session";
+                        workspace: "workspace";
                     }>;
                     sessionId: z.ZodOptional<z.ZodString>;
                     displayName: z.ZodString;
@@ -7194,6 +8025,7 @@ declare const SessionLineageResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7324,12 +8156,23 @@ declare const SessionLineageResponse: z.ZodObject<{
                     kind: z.ZodLiteral<"repository">;
                 }, z.core.$strict>>>;
                 subjectScope: z.ZodOptional<z.ZodEnum<{
-                    subject: "subject";
                     workspace: "workspace";
+                    subject: "subject";
                 }>>;
             }, z.core.$strict>>>;
         }, z.core.$strict>>>;
         parentSessionId: z.ZodNullable<z.ZodString>;
+        rootSessionId: z.ZodString;
+        nestedAgentDepth: z.ZodNumber;
+        maxNestedAgentDepthOverride: z.ZodNullable<z.ZodNumber>;
+        effectiveMaxNestedAgentDepth: z.ZodNumber;
+        nestedAgentDepthPolicySource: z.ZodEnum<{
+            default: "default";
+            session: "session";
+            workspace: "workspace";
+            deployment: "deployment";
+        }>;
+        nestedAgentDepthPolicySessionId: z.ZodNullable<z.ZodString>;
         createIdempotencyKey: z.ZodNullable<z.ZodString>;
         temporalWorkflowId: z.ZodNullable<z.ZodString>;
         activeTurnId: z.ZodNullable<z.ZodString>;
@@ -7350,8 +8193,8 @@ declare const SessionLineageResponse: z.ZodObject<{
             }>;
             primaryBlocker: z.ZodNullable<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -7363,8 +8206,8 @@ declare const SessionLineageResponse: z.ZodObject<{
             additionalBlockerCount: z.ZodNumber;
             blockers: z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -7375,9 +8218,9 @@ declare const SessionLineageResponse: z.ZodObject<{
             }, z.core.$strip>>;
             resumeOptions: z.ZodArray<z.ZodObject<{
                 scope: z.ZodEnum<{
+                    session: "session";
                     workspace: "workspace";
                     selected: "selected";
-                    session: "session";
                 }>;
                 targetId: z.ZodOptional<z.ZodString>;
                 selectedStateAfter: z.ZodEnum<{
@@ -7386,8 +8229,8 @@ declare const SessionLineageResponse: z.ZodObject<{
                 }>;
                 remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
-                        workspace: "workspace";
                         session: "session";
+                        workspace: "workspace";
                     }>;
                     sessionId: z.ZodOptional<z.ZodString>;
                     displayName: z.ZodString;
@@ -7507,8 +8350,10 @@ declare const SessionEventType: z.ZodEnum<{
     "terminal.pty.exited": "terminal.pty.exited";
     "session.title_set": "session.title_set";
     "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+    "session.tool_policy.updated": "session.tool_policy.updated";
     "codex.account.switched": "codex.account.switched";
     "codex.credential.selected": "codex.credential.selected";
+    "codex.fleet.decision": "codex.fleet.decision";
     "codex.capacity.waiting": "codex.capacity.waiting";
     "codex.capacity.resumed": "codex.capacity.resumed";
     "codex.capacity.superseded": "codex.capacity.superseded";
@@ -7581,7 +8426,7 @@ declare const SessionEventReadDirection: z.ZodEnum<{
 type SessionEventReadDirection = z.infer<typeof SessionEventReadDirection>;
 declare const SESSION_EVENT_RAW_DELTA_TYPES: readonly ["agent.message.delta", "agent.reasoning.delta", "sandbox.command.output.delta", "terminal.pty.output.delta"];
 declare const SESSION_EVENT_SEMANTIC_CLASS_TYPES: {
-    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated"];
+    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated", "session.tool_policy.updated"];
     readonly terminal: readonly ["turn.completed", "agent.message.completed", "turn.failed", "turn.cancelled", "turn.superseded", "goal.completed", "goal.paused", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.completed", "sandbox.operation.failed", "recording.available", "recording.failed", "terminal.pty.exited"];
     readonly failure: readonly ["session.event.envelope_omitted", "turn.failed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "sandbox.operation.failed", "recording.failed", "sandbox.box.lost", "workspace.revision.degraded", "machine.op.failed", "machine.link.lost"];
     readonly checkpoint: readonly ["session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "turn.recovery.requested", "session.queue.history", "sandbox.box.snapshot", "workspace.revision.captured"];
@@ -7834,6 +8679,7 @@ declare const TerminalPtyExitedPayload: z.ZodObject<{
         exit: "exit";
         killed: "killed";
         owner_gone: "owner_gone";
+        lost: "lost";
     }>;
 }, z.core.$strip>;
 type TerminalPtyExitedPayload = z.infer<typeof TerminalPtyExitedPayload>;
@@ -8747,8 +9593,8 @@ type TerminalExecRequest = z.infer<typeof TerminalExecRequest>;
 declare const TerminalExecResponse: z.ZodObject<{
     stdout: z.ZodString;
     stderr: z.ZodString;
-    exitCode: z.ZodNullable<z.ZodNumber>;
-    running: z.ZodBoolean;
+    exitCode: z.ZodNumber;
+    running: z.ZodLiteral<false>;
     wallTimeSeconds: z.ZodNumber;
 }, z.core.$strip>;
 type TerminalExecResponse = z.infer<typeof TerminalExecResponse>;
@@ -8879,8 +9725,10 @@ declare const SessionEvent: z.ZodObject<{
         "terminal.pty.exited": "terminal.pty.exited";
         "session.title_set": "session.title_set";
         "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+        "session.tool_policy.updated": "session.tool_policy.updated";
         "codex.account.switched": "codex.account.switched";
         "codex.credential.selected": "codex.credential.selected";
+        "codex.fleet.decision": "codex.fleet.decision";
         "codex.capacity.waiting": "codex.capacity.waiting";
         "codex.capacity.resumed": "codex.capacity.resumed";
         "codex.capacity.superseded": "codex.capacity.superseded";
@@ -9281,8 +10129,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
             }>;
             primaryBlocker: z.ZodNullable<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -9294,8 +10142,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
             additionalBlockerCount: z.ZodNumber;
             blockers: z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -9306,9 +10154,9 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
             }, z.core.$strip>>;
             resumeOptions: z.ZodArray<z.ZodObject<{
                 scope: z.ZodEnum<{
+                    session: "session";
                     workspace: "workspace";
                     selected: "selected";
-                    session: "session";
                 }>;
                 targetId: z.ZodOptional<z.ZodString>;
                 selectedStateAfter: z.ZodEnum<{
@@ -9317,8 +10165,8 @@ declare const SessionQueueMutationResponse: z.ZodObject<{
                 }>;
                 remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                     kind: z.ZodEnum<{
-                        workspace: "workspace";
                         session: "session";
+                        workspace: "workspace";
                     }>;
                     sessionId: z.ZodOptional<z.ZodString>;
                     displayName: z.ZodString;
@@ -9528,8 +10376,8 @@ declare const SessionControlResponse: z.ZodObject<{
         }>;
         primaryBlocker: z.ZodNullable<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -9541,8 +10389,8 @@ declare const SessionControlResponse: z.ZodObject<{
         additionalBlockerCount: z.ZodNumber;
         blockers: z.ZodArray<z.ZodObject<{
             kind: z.ZodEnum<{
-                workspace: "workspace";
                 session: "session";
+                workspace: "workspace";
             }>;
             sessionId: z.ZodOptional<z.ZodString>;
             displayName: z.ZodString;
@@ -9553,9 +10401,9 @@ declare const SessionControlResponse: z.ZodObject<{
         }, z.core.$strip>>;
         resumeOptions: z.ZodArray<z.ZodObject<{
             scope: z.ZodEnum<{
+                session: "session";
                 workspace: "workspace";
                 selected: "selected";
-                session: "session";
             }>;
             targetId: z.ZodOptional<z.ZodString>;
             selectedStateAfter: z.ZodEnum<{
@@ -9564,8 +10412,8 @@ declare const SessionControlResponse: z.ZodObject<{
             }>;
             remainingPrimaryBlocker: z.ZodOptional<z.ZodObject<{
                 kind: z.ZodEnum<{
-                    workspace: "workspace";
                     session: "session";
+                    workspace: "workspace";
                 }>;
                 sessionId: z.ZodOptional<z.ZodString>;
                 displayName: z.ZodString;
@@ -9663,6 +10511,8 @@ declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
     }, z.core.$strip>>;
     clientEventId: z.ZodOptional<z.ZodString>;
     idempotencyKey: z.ZodOptional<z.ZodString>;
+    expectedNewSessionDraftRevision: z.ZodOptional<z.ZodNumber>;
+    maxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
     firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
         "account:read": "account:read";
         "account:admin": "account:admin";
@@ -9729,8 +10579,8 @@ declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
                 kind: z.ZodLiteral<"repository">;
             }, z.core.$strict>>>;
             subjectScope: z.ZodOptional<z.ZodEnum<{
-                subject: "subject";
                 workspace: "workspace";
+                subject: "subject";
             }>>;
         }, z.core.$strict>>;
     }, z.core.$strip>>>;
@@ -10129,8 +10979,10 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
+            "codex.fleet.decision": "codex.fleet.decision";
             "codex.capacity.waiting": "codex.capacity.waiting";
             "codex.capacity.resumed": "codex.capacity.resumed";
             "codex.capacity.superseded": "codex.capacity.superseded";
@@ -10356,8 +11208,10 @@ declare const SessionBusMessage: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
+            "codex.fleet.decision": "codex.fleet.decision";
             "codex.capacity.waiting": "codex.capacity.waiting";
             "codex.capacity.resumed": "codex.capacity.resumed";
             "codex.capacity.superseded": "codex.capacity.superseded";
@@ -10416,10 +11270,30 @@ declare const GitHubRepositoryScope: z.ZodEnum<{
     all: "all";
 }>;
 type GitHubRepositoryScope = z.infer<typeof GitHubRepositoryScope>;
+declare const GitHubBindingStatus: z.ZodEnum<{
+    disabled: "disabled";
+    unbound: "unbound";
+    bound: "bound";
+}>;
+type GitHubBindingStatus = z.infer<typeof GitHubBindingStatus>;
+declare const GitHubInstallationLifecycle: z.ZodEnum<{
+    active: "active";
+    deleted: "deleted";
+    unverified: "unverified";
+    suspended: "suspended";
+}>;
+type GitHubInstallationLifecycle = z.infer<typeof GitHubInstallationLifecycle>;
 declare const GitHubInstallationBinding: z.ZodObject<{
     installationId: z.ZodNumber;
+    githubAccountId: z.ZodNullable<z.ZodNumber>;
     accountLogin: z.ZodNullable<z.ZodString>;
     accountType: z.ZodNullable<z.ZodString>;
+    lifecycle: z.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        unverified: "unverified";
+        suspended: "suspended";
+    }>;
     repositoryScope: z.ZodEnum<{
         selected: "selected";
         all: "all";
@@ -10431,6 +11305,11 @@ declare const GitHubInstallationBinding: z.ZodObject<{
 type GitHubInstallationBinding = z.infer<typeof GitHubInstallationBinding>;
 declare const GitHubAppInfo: z.ZodObject<{
     configured: z.ZodBoolean;
+    status: z.ZodEnum<{
+        disabled: "disabled";
+        unbound: "unbound";
+        bound: "bound";
+    }>;
     appId: z.ZodNullable<z.ZodString>;
     clientId: z.ZodNullable<z.ZodString>;
     appSlug: z.ZodNullable<z.ZodString>;
@@ -10438,8 +11317,15 @@ declare const GitHubAppInfo: z.ZodObject<{
     linkUrl: z.ZodNullable<z.ZodString>;
     installations: z.ZodArray<z.ZodObject<{
         installationId: z.ZodNumber;
+        githubAccountId: z.ZodNullable<z.ZodNumber>;
         accountLogin: z.ZodNullable<z.ZodString>;
         accountType: z.ZodNullable<z.ZodString>;
+        lifecycle: z.ZodEnum<{
+            active: "active";
+            deleted: "deleted";
+            unverified: "unverified";
+            suspended: "suspended";
+        }>;
         repositoryScope: z.ZodEnum<{
             selected: "selected";
             all: "all";
@@ -10520,6 +11406,9 @@ declare const SessionCapabilities: z.ZodObject<{
         draining: "draining";
     }>;
     leaseEpoch: z.ZodNumber;
+    workspaceGeneration: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    archiveGeneration: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    archiveComplete: z.ZodDefault<z.ZodBoolean>;
     viewerHeartbeatIntervalMs: z.ZodDefault<z.ZodNumber>;
     FileSystem: z.ZodObject<{
         available: z.ZodBoolean;
@@ -10681,6 +11570,9 @@ declare const ViewerHolder: z.ZodObject<{
         draining: "draining";
     }>;
     leaseEpoch: z.ZodNumber;
+    workspaceGeneration: z.ZodNullable<z.ZodNumber>;
+    archiveGeneration: z.ZodNullable<z.ZodNumber>;
+    archiveComplete: z.ZodBoolean;
     viewerHeartbeatIntervalMs: z.ZodNumber;
     dataPlaneUrl: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
@@ -11003,6 +11895,9 @@ declare const MachineView: z.ZodObject<{
     }>;
     active: z.ZodBoolean;
     isSessionGroup: z.ZodBoolean;
+    workspaceGeneration: z.ZodNullable<z.ZodNumber>;
+    archiveGeneration: z.ZodNullable<z.ZodNumber>;
+    archiveComplete: z.ZodBoolean;
     os: z.ZodString;
     arch: z.ZodString;
     hasDisplay: z.ZodBoolean;
@@ -11052,6 +11947,9 @@ declare const MachinesResponse: z.ZodObject<{
         }>;
         active: z.ZodBoolean;
         isSessionGroup: z.ZodBoolean;
+        workspaceGeneration: z.ZodNullable<z.ZodNumber>;
+        archiveGeneration: z.ZodNullable<z.ZodNumber>;
+        archiveComplete: z.ZodBoolean;
         os: z.ZodString;
         arch: z.ZodString;
         hasDisplay: z.ZodBoolean;
@@ -11103,6 +12001,9 @@ declare const SwapActiveSandboxResponse: z.ZodObject<{
         unsupported_backend_context: "unsupported_backend_context";
         transient_establishment: "transient_establishment";
         concurrent_swap: "concurrent_swap";
+        recovery_in_progress: "recovery_in_progress";
+        recovery_degraded: "recovery_degraded";
+        recovery_unrecoverable: "recovery_unrecoverable";
     }>>;
 }, z.core.$strip>;
 type SwapActiveSandboxResponse = z.infer<typeof SwapActiveSandboxResponse>;
@@ -11290,16 +12191,16 @@ declare const ModelBillingAttributionV1: z.ZodObject<{
 type ModelBillingAttributionV1 = z.infer<typeof ModelBillingAttributionV1>;
 declare const TURN_EXECUTION_POLICY_METADATA_KEY: "turnExecutionPolicyV1";
 declare const TurnExecutionModelSourceV1: z.ZodEnum<{
-    explicit: "explicit";
     session: "session";
     deployment: "deployment";
+    explicit: "explicit";
     continuation: "continuation";
 }>;
 type TurnExecutionModelSourceV1 = z.infer<typeof TurnExecutionModelSourceV1>;
 declare const TurnExecutionReasoningSourceV1: z.ZodEnum<{
-    explicit: "explicit";
     session: "session";
     deployment: "deployment";
+    explicit: "explicit";
     continuation: "continuation";
 }>;
 type TurnExecutionReasoningSourceV1 = z.infer<typeof TurnExecutionReasoningSourceV1>;
@@ -11316,9 +12217,9 @@ declare const TurnExecutionPolicyV1: z.ZodObject<{
     productModelId: z.ZodString;
     requestedModelId: z.ZodNullable<z.ZodString>;
     modelSource: z.ZodEnum<{
-        explicit: "explicit";
         session: "session";
         deployment: "deployment";
+        explicit: "explicit";
         continuation: "continuation";
     }>;
     reasoningEffort: z.ZodEnum<{
@@ -11330,9 +12231,9 @@ declare const TurnExecutionPolicyV1: z.ZodObject<{
         xhigh: "xhigh";
     }>;
     reasoningSource: z.ZodEnum<{
-        explicit: "explicit";
         session: "session";
         deployment: "deployment";
+        explicit: "explicit";
         continuation: "continuation";
     }>;
     providerId: z.ZodString;
@@ -12116,6 +13017,8 @@ type WorkspaceModelCatalogResponse = z.infer<typeof WorkspaceModelCatalogRespons
  */
 declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-turn-instructions-v1";
 declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
+/** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
+declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
 declare const ClientConfig: z.ZodObject<{
     deploymentRevision: z.ZodString;
     apiContractRevision: z.ZodLiteral<"2026-07-turn-instructions-v1">;
@@ -12389,4 +13292,4 @@ declare function evaluateWorkspaceModelPolicy(policy: WorkspaceModelPolicyContra
     modelId: string;
 }): WorkspaceModelPolicyVerdict;
 
-export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubInstallationBinding, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveSessionQueueItemRequest, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, defaultRepositoryMountPath, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, isClearedRunStateBlob, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readTurnExecutionPolicyV1, reasoningEffortForMetadata, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };
+export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeDropRequest, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentCuration, DocumentCurationStatus, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, DocumentVisibility, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubBindingStatus, type GitHubInstallationAuthorityKind, GitHubInstallationBinding, type GitHubInstallationBindingProof, GitHubInstallationLifecycle, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveDocumentRequest, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_CORRELATION_HEADER, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, type SecretForRedaction, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, createSecretRedactor, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, identityRedactor, isClearedRunStateBlob, isCredentialHeaderName, isSensitiveFieldName, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, redactSensitiveData, redactSensitiveKey, redactSensitiveText, redactSerializedJson, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };