@opengeni/contracts 0.19.0 → 0.19.4

package/dist/index.d.ts

@@ -494,6 +494,47 @@ declare function readCodexFleetReplayRecordV1(value: unknown): CodexFleetReplayR
 declare function evaluateCodexFleetDecisionV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetDecisionV1;
 declare function effectiveCodexFleetCacheStateV1(cache: CodexFleetCandidateV1["cache"], policy: CodexFleetPolicyConfigV1): CodexFleetCacheState;
 
+type SecretForRedaction = {
+    name: string;
+    value: string;
+};
+/**
+ * Returns true only for fields whose value is itself credential material.
+ * Container fields such as `headers` and URL fields are intentionally not
+ * included: their nested/value sanitizers retain useful names, hosts, paths,
+ * and non-sensitive query parameters.
+ */
+declare function isSensitiveFieldName(name: string): boolean;
+/**
+ * Return true only for header names whose values are credential material.
+ * Ordinary protocol metadata (`content-type`, `accept`, `user-agent`, and
+ * pagination/signature headers outside this allowlist) must remain intact.
+ */
+declare function isCredentialHeaderName(name: string): boolean;
+/**
+ * Redact only exact known-secret provenance from a structured object key.
+ * Generic field/header heuristics intentionally do not run here: a key is
+ * metadata unless the caller has proved that its bytes are secret material.
+ */
+declare function redactSensitiveKey(key: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/**
+ * Redact known secret provenance and common credential-bearing text shapes.
+ * This is deliberately a conservative safety boundary, not a promise of
+ * general-purpose DLP. It never includes a matched value in a marker or error.
+ */
+declare function redactSensitiveText(text: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/** Deeply redact plain structured data while retaining its diagnostic shape. */
+declare function redactSensitiveData<T>(value: T, knownSecrets?: readonly SecretForRedaction[]): T;
+/** Build the worker-friendly single-argument redactor used at turn boundaries. */
+declare function createSecretRedactor(knownSecrets: readonly SecretForRedaction[]): (value: unknown) => unknown;
+/**
+ * Redact a serialized JSON checkpoint without requiring it to be valid JSON.
+ * Valid JSON retains structure; malformed/opaque text still receives text
+ * classification and exact-known-value replacement.
+ */
+declare function redactSerializedJson(serialized: string, knownSecrets?: readonly SecretForRedaction[]): string;
+declare function identityRedactor<T>(value: T): T;
+
 declare const SessionStatus: z.ZodEnum<{
     queued: "queued";
     running: "running";
@@ -613,6 +654,7 @@ declare const ErrorCode: z.ZodEnum<{
 type ErrorCode = z.infer<typeof ErrorCode>;
 declare const ErrorEnvelope: z.ZodObject<{
     error: z.ZodObject<{
+        status: z.ZodNumber;
         code: z.ZodEnum<{
             unauthenticated: "unauthenticated";
             forbidden: "forbidden";
@@ -628,6 +670,7 @@ declare const ErrorEnvelope: z.ZodObject<{
             internal_error: "internal_error";
         }>;
         message: z.ZodString;
+        retryable: z.ZodBoolean;
         requestId: z.ZodOptional<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
@@ -2269,10 +2312,19 @@ type ConnectionCredentialsPort = {
 };
 type GitHubInstallationSummary = {
     installationId: number;
+    accountId: number;
     accountLogin: string | null;
     accountType: string | null;
     suspended: boolean;
 };
+type GitHubInstallationAuthorityKind = "personal_owner" | "organization_owner";
+interface GitHubInstallationBindingProof {
+    actorId: number;
+    actorLogin: string;
+    authorityKind: GitHubInstallationAuthorityKind;
+    installation: GitHubInstallationSummary;
+    repositories: GitHubRepository[];
+}
 type GitHubRepositoryPermissions = {
     admin: boolean;
     maintain: boolean;
@@ -2287,6 +2339,18 @@ type GitHubUserInstallationAccess = GitHubInstallationSummary & {
     repositories: GitHubUserRepositoryAccess[];
 };
 type GitHubAppApiPort = {
+    /**
+     * Exchange one fresh GitHub user-authorization code and prove current
+     * installation authority. Implementations must accept only exact personal
+     * ownership or active organization ownership; installation visibility,
+     * repository permission bits, and App Manager metadata are not authority.
+     * Organization ownership must be revalidated after repository discovery,
+     * immediately before returning the proof used by the durable bind.
+     */
+    authorizeInstallationBinding?: (input: {
+        code: string;
+        installationId: number;
+    }) => Promise<GitHubInstallationBindingProof>;
     authorizeUser?: (input: {
         code: string;
     }) => Promise<GitHubUserInstallationAccess[]>;
@@ -2522,6 +2586,28 @@ declare const DocumentSearchMode: z.ZodEnum<{
     keyword: "keyword";
 }>;
 type DocumentSearchMode = z.infer<typeof DocumentSearchMode>;
+declare const DocumentVisibility: z.ZodEnum<{
+    workspace: "workspace";
+    private: "private";
+}>;
+type DocumentVisibility = z.infer<typeof DocumentVisibility>;
+declare const DocumentCurationStatus: z.ZodEnum<{
+    failed: "failed";
+    none: "none";
+    pending: "pending";
+    suggested: "suggested";
+    auto_filed: "auto_filed";
+}>;
+type DocumentCurationStatus = z.infer<typeof DocumentCurationStatus>;
+declare const DocumentCuration: z.ZodObject<{
+    suggestedBaseId: z.ZodNullable<z.ZodString>;
+    suggestedBaseName: z.ZodNullable<z.ZodString>;
+    confidence: z.ZodNumber;
+    reason: z.ZodNullable<z.ZodString>;
+    originalTitle: z.ZodNullable<z.ZodString>;
+    model: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type DocumentCuration = z.infer<typeof DocumentCuration>;
 declare const DocumentBase: z.ZodObject<{
     id: z.ZodString;
     workspaceId: z.ZodString;
@@ -2564,6 +2650,29 @@ declare const Document: z.ZodObject<{
     sourceUpdatedAt: z.ZodNullable<z.ZodString>;
     sourceVersion: z.ZodNullable<z.ZodString>;
     aclTags: z.ZodArray<z.ZodString>;
+    visibility: z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>;
+    createdBy: z.ZodNullable<z.ZodString>;
+    agentAccess: z.ZodBoolean;
+    summary: z.ZodNullable<z.ZodString>;
+    topics: z.ZodArray<z.ZodString>;
+    curationStatus: z.ZodEnum<{
+        failed: "failed";
+        none: "none";
+        pending: "pending";
+        suggested: "suggested";
+        auto_filed: "auto_filed";
+    }>;
+    curation: z.ZodNullable<z.ZodObject<{
+        suggestedBaseId: z.ZodNullable<z.ZodString>;
+        suggestedBaseName: z.ZodNullable<z.ZodString>;
+        confidence: z.ZodNumber;
+        reason: z.ZodNullable<z.ZodString>;
+        originalTitle: z.ZodNullable<z.ZodString>;
+        model: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, z.core.$strip>;
@@ -2632,8 +2741,29 @@ declare const AddDocumentRequest: z.ZodObject<{
     sourceUpdatedAt: z.ZodOptional<z.ZodString>;
     sourceVersion: z.ZodOptional<z.ZodString>;
     aclTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type AddDocumentRequest = z.infer<typeof AddDocumentRequest>;
+declare const CreateKnowledgeDropRequest: z.ZodObject<{
+    text: z.ZodOptional<z.ZodString>;
+    fileId: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type CreateKnowledgeDropRequest = z.infer<typeof CreateKnowledgeDropRequest>;
+declare const MoveDocumentRequest: z.ZodObject<{
+    targetBaseId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type MoveDocumentRequest = z.infer<typeof MoveDocumentRequest>;
 declare const DocumentSearchRequest: z.ZodObject<{
     query: z.ZodString;
     baseIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3328,6 +3458,25 @@ declare const UpdateSessionRequest: z.ZodObject<{
     title: z.ZodString;
 }, z.core.$strip>;
 type UpdateSessionRequest = z.infer<typeof UpdateSessionRequest>;
+/**
+ * Replace an existing session's durable tool policy, or explicitly opt back in
+ * to the current workspace defaults. The mode-less explicit shape is retained
+ * for compatibility with clients released before workspace-default adoption
+ * was supported.
+ */
+declare const UpdateSessionToolPolicyRequest: z.ZodUnion<readonly [z.ZodObject<{
+    mode: z.ZodLiteral<"workspace_default">;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodOptional<z.ZodLiteral<"explicit">>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>]>;
+type UpdateSessionToolPolicyRequest = z.infer<typeof UpdateSessionToolPolicyRequest>;
 /**
  * A member's personal pin preference for a session. `expectedVersion` is
  * optional: ordinary pin/unpin actions are idempotent last-write-wins, while a
@@ -3436,6 +3585,7 @@ declare const SessionAuthorizationOperation: z.ZodEnum<{
     "session.human_input.write": "session.human_input.write";
     "session.title.write": "session.title.write";
     "session.mcp.approval_policy.write": "session.mcp.approval_policy.write";
+    "session.tool_policy.write": "session.tool_policy.write";
     "session.goal.read": "session.goal.read";
     "session.goal.write": "session.goal.write";
     "session.child.create": "session.child.create";
@@ -4032,6 +4182,11 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         high: "high";
         xhigh: "xhigh";
     }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
         uri: z.ZodString;
@@ -4059,11 +4214,6 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         fileId: z.ZodString;
         mountPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>], "kind">>;
-    tools: z.ZodArray<z.ZodObject<{
-        kind: z.ZodLiteral<"mcp">;
-        id: z.ZodString;
-        optional: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
     toolsProvided: z.ZodDefault<z.ZodBoolean>;
     expectedRevision: z.ZodNumber;
 }, z.core.$strip>;
@@ -4174,6 +4324,7 @@ declare const NewSessionDraft: z.ZodObject<{
         id: z.ZodString;
         optional: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
     model: z.ZodString;
     reasoningEffort: z.ZodEnum<{
         none: "none";
@@ -4261,6 +4412,11 @@ declare const SaveNewSessionDraftRequest: z.ZodObject<{
         high: "high";
         xhigh: "xhigh";
     }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
         uri: z.ZodString;
@@ -4288,11 +4444,7 @@ declare const SaveNewSessionDraftRequest: z.ZodObject<{
         fileId: z.ZodString;
         mountPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>], "kind">>;
-    tools: z.ZodArray<z.ZodObject<{
-        kind: z.ZodLiteral<"mcp">;
-        id: z.ZodString;
-        optional: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
     options: z.ZodObject<{
         sandboxBackend: z.ZodOptional<z.ZodEnum<{
             docker: "docker";
@@ -6613,6 +6765,7 @@ declare const Session: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -6926,6 +7079,7 @@ declare const CreateSessionResponse: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -7245,6 +7399,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7553,6 +7708,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7869,6 +8025,7 @@ declare const SessionLineageResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -8193,6 +8350,7 @@ declare const SessionEventType: z.ZodEnum<{
     "terminal.pty.exited": "terminal.pty.exited";
     "session.title_set": "session.title_set";
     "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+    "session.tool_policy.updated": "session.tool_policy.updated";
     "codex.account.switched": "codex.account.switched";
     "codex.credential.selected": "codex.credential.selected";
     "codex.fleet.decision": "codex.fleet.decision";
@@ -8268,7 +8426,7 @@ declare const SessionEventReadDirection: z.ZodEnum<{
 type SessionEventReadDirection = z.infer<typeof SessionEventReadDirection>;
 declare const SESSION_EVENT_RAW_DELTA_TYPES: readonly ["agent.message.delta", "agent.reasoning.delta", "sandbox.command.output.delta", "terminal.pty.output.delta"];
 declare const SESSION_EVENT_SEMANTIC_CLASS_TYPES: {
-    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated"];
+    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated", "session.tool_policy.updated"];
     readonly terminal: readonly ["turn.completed", "agent.message.completed", "turn.failed", "turn.cancelled", "turn.superseded", "goal.completed", "goal.paused", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.completed", "sandbox.operation.failed", "recording.available", "recording.failed", "terminal.pty.exited"];
     readonly failure: readonly ["session.event.envelope_omitted", "turn.failed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "sandbox.operation.failed", "recording.failed", "sandbox.box.lost", "workspace.revision.degraded", "machine.op.failed", "machine.link.lost"];
     readonly checkpoint: readonly ["session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "turn.recovery.requested", "session.queue.history", "sandbox.box.snapshot", "workspace.revision.captured"];
@@ -9567,6 +9725,7 @@ declare const SessionEvent: z.ZodObject<{
         "terminal.pty.exited": "terminal.pty.exited";
         "session.title_set": "session.title_set";
         "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+        "session.tool_policy.updated": "session.tool_policy.updated";
         "codex.account.switched": "codex.account.switched";
         "codex.credential.selected": "codex.credential.selected";
         "codex.fleet.decision": "codex.fleet.decision";
@@ -10820,6 +10979,7 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
             "codex.fleet.decision": "codex.fleet.decision";
@@ -11048,6 +11208,7 @@ declare const SessionBusMessage: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
             "codex.fleet.decision": "codex.fleet.decision";
@@ -11109,10 +11270,30 @@ declare const GitHubRepositoryScope: z.ZodEnum<{
     all: "all";
 }>;
 type GitHubRepositoryScope = z.infer<typeof GitHubRepositoryScope>;
+declare const GitHubBindingStatus: z.ZodEnum<{
+    disabled: "disabled";
+    unbound: "unbound";
+    bound: "bound";
+}>;
+type GitHubBindingStatus = z.infer<typeof GitHubBindingStatus>;
+declare const GitHubInstallationLifecycle: z.ZodEnum<{
+    active: "active";
+    deleted: "deleted";
+    unverified: "unverified";
+    suspended: "suspended";
+}>;
+type GitHubInstallationLifecycle = z.infer<typeof GitHubInstallationLifecycle>;
 declare const GitHubInstallationBinding: z.ZodObject<{
     installationId: z.ZodNumber;
+    githubAccountId: z.ZodNullable<z.ZodNumber>;
     accountLogin: z.ZodNullable<z.ZodString>;
     accountType: z.ZodNullable<z.ZodString>;
+    lifecycle: z.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        unverified: "unverified";
+        suspended: "suspended";
+    }>;
     repositoryScope: z.ZodEnum<{
         selected: "selected";
         all: "all";
@@ -11124,6 +11305,11 @@ declare const GitHubInstallationBinding: z.ZodObject<{
 type GitHubInstallationBinding = z.infer<typeof GitHubInstallationBinding>;
 declare const GitHubAppInfo: z.ZodObject<{
     configured: z.ZodBoolean;
+    status: z.ZodEnum<{
+        disabled: "disabled";
+        unbound: "unbound";
+        bound: "bound";
+    }>;
     appId: z.ZodNullable<z.ZodString>;
     clientId: z.ZodNullable<z.ZodString>;
     appSlug: z.ZodNullable<z.ZodString>;
@@ -11131,8 +11317,15 @@ declare const GitHubAppInfo: z.ZodObject<{
     linkUrl: z.ZodNullable<z.ZodString>;
     installations: z.ZodArray<z.ZodObject<{
         installationId: z.ZodNumber;
+        githubAccountId: z.ZodNullable<z.ZodNumber>;
         accountLogin: z.ZodNullable<z.ZodString>;
         accountType: z.ZodNullable<z.ZodString>;
+        lifecycle: z.ZodEnum<{
+            active: "active";
+            deleted: "deleted";
+            unverified: "unverified";
+            suspended: "suspended";
+        }>;
         repositoryScope: z.ZodEnum<{
             selected: "selected";
             all: "all";
@@ -12824,6 +13017,8 @@ type WorkspaceModelCatalogResponse = z.infer<typeof WorkspaceModelCatalogRespons
  */
 declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-turn-instructions-v1";
 declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
+/** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
+declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
 declare const ClientConfig: z.ZodObject<{
     deploymentRevision: z.ZodString;
     apiContractRevision: z.ZodLiteral<"2026-07-turn-instructions-v1">;
@@ -13097,4 +13292,4 @@ declare function evaluateWorkspaceModelPolicy(policy: WorkspaceModelPolicyContra
     modelId: string;
 }): WorkspaceModelPolicyVerdict;
 
-export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubInstallationBinding, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, isClearedRunStateBlob, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };
+export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeDropRequest, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentCuration, DocumentCurationStatus, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, DocumentVisibility, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubBindingStatus, type GitHubInstallationAuthorityKind, GitHubInstallationBinding, type GitHubInstallationBindingProof, GitHubInstallationLifecycle, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveDocumentRequest, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_CORRELATION_HEADER, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, type SecretForRedaction, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, createSecretRedactor, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, identityRedactor, isClearedRunStateBlob, isCredentialHeaderName, isSensitiveFieldName, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, redactSensitiveData, redactSensitiveKey, redactSensitiveText, redactSerializedJson, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };