@opengeni/contracts 0.19.0 → 0.20.0

package/dist/index.d.ts

@@ -494,6 +494,469 @@ declare function readCodexFleetReplayRecordV1(value: unknown): CodexFleetReplayR
 declare function evaluateCodexFleetDecisionV1(input: CodexFleetDecisionInputV1, policy?: CodexFleetPolicyConfigV1): CodexFleetDecisionV1;
 declare function effectiveCodexFleetCacheStateV1(cache: CodexFleetCandidateV1["cache"], policy: CodexFleetPolicyConfigV1): CodexFleetCacheState;
 
+type SecretForRedaction = {
+    name: string;
+    value: string;
+};
+/**
+ * Returns true only for fields whose value is itself credential material.
+ * Container fields such as `headers` and URL fields are intentionally not
+ * included: their nested/value sanitizers retain useful names, hosts, paths,
+ * and non-sensitive query parameters.
+ */
+declare function isSensitiveFieldName(name: string): boolean;
+/**
+ * Return true only for header names whose values are credential material.
+ * Ordinary protocol metadata (`content-type`, `accept`, `user-agent`, and
+ * pagination/signature headers outside this allowlist) must remain intact.
+ */
+declare function isCredentialHeaderName(name: string): boolean;
+/**
+ * Redact only exact known-secret provenance from a structured object key.
+ * Generic field/header heuristics intentionally do not run here: a key is
+ * metadata unless the caller has proved that its bytes are secret material.
+ */
+declare function redactSensitiveKey(key: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/**
+ * Redact known secret provenance and common credential-bearing text shapes.
+ * This is deliberately a conservative safety boundary, not a promise of
+ * general-purpose DLP. It never includes a matched value in a marker or error.
+ */
+declare function redactSensitiveText(text: string, knownSecrets?: readonly SecretForRedaction[]): string;
+/** Deeply redact plain structured data while retaining its diagnostic shape. */
+declare function redactSensitiveData<T>(value: T, knownSecrets?: readonly SecretForRedaction[]): T;
+/** Build the worker-friendly single-argument redactor used at turn boundaries. */
+declare function createSecretRedactor(knownSecrets: readonly SecretForRedaction[]): (value: unknown) => unknown;
+/**
+ * Redact a serialized JSON checkpoint without requiring it to be valid JSON.
+ * Valid JSON retains structure; malformed/opaque text still receives text
+ * classification and exact-known-value replacement.
+ */
+declare function redactSerializedJson(serialized: string, knownSecrets?: readonly SecretForRedaction[]): string;
+declare function identityRedactor<T>(value: T): T;
+
+declare const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
+declare const WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS = 4096;
+declare const WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS = 64;
+declare const WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS = 512;
+declare const WorkspaceInstructionPolicyKind: z.ZodEnum<{
+    policy: "policy";
+    charter: "charter";
+}>;
+type WorkspaceInstructionPolicyKind = z.infer<typeof WorkspaceInstructionPolicyKind>;
+declare const WorkspaceInstructionPolicyScope: z.ZodEnum<{
+    role: "role";
+    global: "global";
+}>;
+type WorkspaceInstructionPolicyScope = z.infer<typeof WorkspaceInstructionPolicyScope>;
+declare const WorkspaceInstructionPolicyProvenanceSource: z.ZodEnum<{
+    human: "human";
+    onboarding: "onboarding";
+    knowledge_proposal: "knowledge_proposal";
+    legacy_import: "legacy_import";
+}>;
+type WorkspaceInstructionPolicyProvenanceSource = z.infer<typeof WorkspaceInstructionPolicyProvenanceSource>;
+declare const WorkspaceInstructionPolicyDraftProvenanceSource: z.ZodEnum<{
+    human: "human";
+    onboarding: "onboarding";
+    knowledge_proposal: "knowledge_proposal";
+}>;
+type WorkspaceInstructionPolicyDraftProvenanceSource = z.infer<typeof WorkspaceInstructionPolicyDraftProvenanceSource>;
+declare const WorkspaceInstructionPolicyActivationType: z.ZodEnum<{
+    activate: "activate";
+    rollback: "rollback";
+}>;
+type WorkspaceInstructionPolicyActivationType = z.infer<typeof WorkspaceInstructionPolicyActivationType>;
+declare const WorkspaceInstructionPolicyRoleKey: z.ZodString;
+type WorkspaceInstructionPolicyRoleKey = z.infer<typeof WorkspaceInstructionPolicyRoleKey>;
+/**
+ * Role-policy keys are identifiers rather than display names. Normalize once
+ * at ingress so activation uniqueness and every client use the same key.
+ */
+declare function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string;
+declare const WorkspaceInstructionPolicyTarget: z.ZodObject<{
+    kind: z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>;
+    scope: z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyTarget = z.infer<typeof WorkspaceInstructionPolicyTarget>;
+declare const WorkspaceInstructionPolicyProvenance: z.ZodObject<{
+    source: z.ZodEnum<{
+        human: "human";
+        onboarding: "onboarding";
+        knowledge_proposal: "knowledge_proposal";
+        legacy_import: "legacy_import";
+    }>;
+    sourceId: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyProvenance = z.infer<typeof WorkspaceInstructionPolicyProvenance>;
+declare const WorkspaceInstructionPolicyRevisionIdentity: z.ZodObject<{
+    id: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyRevisionIdentity = z.infer<typeof WorkspaceInstructionPolicyRevisionIdentity>;
+declare const WorkspaceInstructionPolicyRevision: z.ZodObject<{
+    content: z.ZodString;
+    provenance: z.ZodObject<{
+        source: z.ZodEnum<{
+            human: "human";
+            onboarding: "onboarding";
+            knowledge_proposal: "knowledge_proposal";
+            legacy_import: "legacy_import";
+        }>;
+        sourceId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    supersedesRevisionId: z.ZodNullable<z.ZodString>;
+    createdBySubjectId: z.ZodString;
+    createdAt: z.ZodString;
+    kind: z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>;
+    scope: z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+    id: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyRevision = z.infer<typeof WorkspaceInstructionPolicyRevision>;
+declare const WorkspaceInstructionPolicyHead: z.ZodObject<{
+    revisionId: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+    activationVersion: z.ZodNumber;
+    activatedAt: z.ZodString;
+    kind: z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>;
+    scope: z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+    workspaceId: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyHead = z.infer<typeof WorkspaceInstructionPolicyHead>;
+declare const WorkspaceInstructionPolicyActivationEvent: z.ZodObject<{
+    type: z.ZodEnum<{
+        activate: "activate";
+        rollback: "rollback";
+    }>;
+    activationVersion: z.ZodNumber;
+    oldRevision: z.ZodNullable<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$strip>>;
+    newRevision: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$strip>;
+    actorSubjectId: z.ZodString;
+    reason: z.ZodString;
+    createdAt: z.ZodString;
+    kind: z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>;
+    scope: z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+    id: z.ZodString;
+    accountId: z.ZodString;
+    workspaceId: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyActivationEvent = z.infer<typeof WorkspaceInstructionPolicyActivationEvent>;
+declare const CreateWorkspaceInstructionPolicyDraftRequest: z.ZodObject<{
+    kind: z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>;
+    scope: z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>;
+    roleKey: z.ZodDefault<z.ZodNullable<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>;
+    content: z.ZodString;
+    provenanceSource: z.ZodDefault<z.ZodEnum<{
+        human: "human";
+        onboarding: "onboarding";
+        knowledge_proposal: "knowledge_proposal";
+    }>>;
+    provenanceSourceId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    supersedesRevisionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
+type CreateWorkspaceInstructionPolicyDraftRequest = z.infer<typeof CreateWorkspaceInstructionPolicyDraftRequest>;
+declare const ImportLegacyWorkspaceInstructionPolicyDraftRequest: z.ZodObject<{
+    supersedesRevisionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+type ImportLegacyWorkspaceInstructionPolicyDraftRequest = z.infer<typeof ImportLegacyWorkspaceInstructionPolicyDraftRequest>;
+declare const WorkspaceInstructionPolicyListQuery: z.ZodObject<{
+    kind: z.ZodOptional<z.ZodEnum<{
+        policy: "policy";
+        charter: "charter";
+    }>>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        role: "role";
+        global: "global";
+    }>>;
+    roleKey: z.ZodOptional<z.ZodNullable<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>>;
+    afterRevision: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyListQuery = z.infer<typeof WorkspaceInstructionPolicyListQuery>;
+declare const WorkspaceInstructionPolicyListResponse: z.ZodObject<{
+    revisions: z.ZodArray<z.ZodObject<{
+        content: z.ZodString;
+        provenance: z.ZodObject<{
+            source: z.ZodEnum<{
+                human: "human";
+                onboarding: "onboarding";
+                knowledge_proposal: "knowledge_proposal";
+                legacy_import: "legacy_import";
+            }>;
+            sourceId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        supersedesRevisionId: z.ZodNullable<z.ZodString>;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        id: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$strip>>;
+    activeHeads: z.ZodArray<z.ZodObject<{
+        revisionId: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        activationVersion: z.ZodNumber;
+        activatedAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>>;
+    activationEvents: z.ZodArray<z.ZodObject<{
+        type: z.ZodEnum<{
+            activate: "activate";
+            rollback: "rollback";
+        }>;
+        activationVersion: z.ZodNumber;
+        oldRevision: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodNumber;
+            contentHash: z.ZodString;
+        }, z.core.$strip>>;
+        newRevision: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodNumber;
+            contentHash: z.ZodString;
+        }, z.core.$strip>;
+        actorSubjectId: z.ZodString;
+        reason: z.ZodString;
+        createdAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>>;
+    nextAfterRevision: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyListResponse = z.infer<typeof WorkspaceInstructionPolicyListResponse>;
+declare const WorkspaceInstructionPolicyDiffRequest: z.ZodObject<{
+    fromRevisionId: z.ZodString;
+    toRevisionId: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyDiffRequest = z.infer<typeof WorkspaceInstructionPolicyDiffRequest>;
+declare const WorkspaceInstructionPolicyDiffResponse: z.ZodObject<{
+    from: z.ZodObject<{
+        content: z.ZodString;
+        provenance: z.ZodObject<{
+            source: z.ZodEnum<{
+                human: "human";
+                onboarding: "onboarding";
+                knowledge_proposal: "knowledge_proposal";
+                legacy_import: "legacy_import";
+            }>;
+            sourceId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        supersedesRevisionId: z.ZodNullable<z.ZodString>;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        id: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$strip>;
+    to: z.ZodObject<{
+        content: z.ZodString;
+        provenance: z.ZodObject<{
+            source: z.ZodEnum<{
+                human: "human";
+                onboarding: "onboarding";
+                knowledge_proposal: "knowledge_proposal";
+                legacy_import: "legacy_import";
+            }>;
+            sourceId: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        supersedesRevisionId: z.ZodNullable<z.ZodString>;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        id: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+    }, z.core.$strip>;
+    format: z.ZodLiteral<"unified">;
+    diff: z.ZodString;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyDiffResponse = z.infer<typeof WorkspaceInstructionPolicyDiffResponse>;
+declare const ActivateWorkspaceInstructionPolicyRequest: z.ZodObject<{
+    expectedCurrentRevisionId: z.ZodNullable<z.ZodString>;
+    reason: z.ZodString;
+}, z.core.$strip>;
+type ActivateWorkspaceInstructionPolicyRequest = z.infer<typeof ActivateWorkspaceInstructionPolicyRequest>;
+declare const RollbackWorkspaceInstructionPolicyRequest: z.ZodObject<{
+    targetRevisionId: z.ZodString;
+    expectedCurrentRevisionId: z.ZodString;
+    reason: z.ZodString;
+}, z.core.$strip>;
+type RollbackWorkspaceInstructionPolicyRequest = z.infer<typeof RollbackWorkspaceInstructionPolicyRequest>;
+declare const WorkspaceInstructionPolicyActivationResponse: z.ZodObject<{
+    head: z.ZodObject<{
+        revisionId: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        activationVersion: z.ZodNumber;
+        activatedAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>;
+    event: z.ZodObject<{
+        type: z.ZodEnum<{
+            activate: "activate";
+            rollback: "rollback";
+        }>;
+        activationVersion: z.ZodNumber;
+        oldRevision: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodNumber;
+            contentHash: z.ZodString;
+        }, z.core.$strip>>;
+        newRevision: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodNumber;
+            contentHash: z.ZodString;
+        }, z.core.$strip>;
+        actorSubjectId: z.ZodString;
+        reason: z.ZodString;
+        createdAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyActivationResponse = z.infer<typeof WorkspaceInstructionPolicyActivationResponse>;
+declare const WorkspaceInstructionPolicyConflictResponse: z.ZodObject<{
+    code: z.ZodLiteral<"WORKSPACE_INSTRUCTION_POLICY_CONFLICT">;
+    message: z.ZodString;
+    currentHead: z.ZodNullable<z.ZodObject<{
+        revisionId: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        activationVersion: z.ZodNumber;
+        activatedAt: z.ZodString;
+        kind: z.ZodEnum<{
+            policy: "policy";
+            charter: "charter";
+        }>;
+        scope: z.ZodEnum<{
+            role: "role";
+            global: "global";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        workspaceId: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type WorkspaceInstructionPolicyConflictResponse = z.infer<typeof WorkspaceInstructionPolicyConflictResponse>;
+
 declare const SessionStatus: z.ZodEnum<{
     queued: "queued";
     running: "running";
@@ -613,6 +1076,7 @@ declare const ErrorCode: z.ZodEnum<{
 type ErrorCode = z.infer<typeof ErrorCode>;
 declare const ErrorEnvelope: z.ZodObject<{
     error: z.ZodObject<{
+        status: z.ZodNumber;
         code: z.ZodEnum<{
             unauthenticated: "unauthenticated";
             forbidden: "forbidden";
@@ -628,6 +1092,7 @@ declare const ErrorEnvelope: z.ZodObject<{
             internal_error: "internal_error";
         }>;
         message: z.ZodString;
+        retryable: z.ZodBoolean;
         requestId: z.ZodOptional<z.ZodString>;
         details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     }, z.core.$strip>;
@@ -2269,10 +2734,19 @@ type ConnectionCredentialsPort = {
 };
 type GitHubInstallationSummary = {
     installationId: number;
+    accountId: number;
     accountLogin: string | null;
     accountType: string | null;
     suspended: boolean;
 };
+type GitHubInstallationAuthorityKind = "personal_owner" | "organization_owner";
+interface GitHubInstallationBindingProof {
+    actorId: number;
+    actorLogin: string;
+    authorityKind: GitHubInstallationAuthorityKind;
+    installation: GitHubInstallationSummary;
+    repositories: GitHubRepository[];
+}
 type GitHubRepositoryPermissions = {
     admin: boolean;
     maintain: boolean;
@@ -2287,6 +2761,18 @@ type GitHubUserInstallationAccess = GitHubInstallationSummary & {
     repositories: GitHubUserRepositoryAccess[];
 };
 type GitHubAppApiPort = {
+    /**
+     * Exchange one fresh GitHub user-authorization code and prove current
+     * installation authority. Implementations must accept only exact personal
+     * ownership or active organization ownership; installation visibility,
+     * repository permission bits, and App Manager metadata are not authority.
+     * Organization ownership must be revalidated after repository discovery,
+     * immediately before returning the proof used by the durable bind.
+     */
+    authorizeInstallationBinding?: (input: {
+        code: string;
+        installationId: number;
+    }) => Promise<GitHubInstallationBindingProof>;
     authorizeUser?: (input: {
         code: string;
     }) => Promise<GitHubUserInstallationAccess[]>;
@@ -2522,6 +3008,28 @@ declare const DocumentSearchMode: z.ZodEnum<{
     keyword: "keyword";
 }>;
 type DocumentSearchMode = z.infer<typeof DocumentSearchMode>;
+declare const DocumentVisibility: z.ZodEnum<{
+    workspace: "workspace";
+    private: "private";
+}>;
+type DocumentVisibility = z.infer<typeof DocumentVisibility>;
+declare const DocumentCurationStatus: z.ZodEnum<{
+    failed: "failed";
+    none: "none";
+    pending: "pending";
+    suggested: "suggested";
+    auto_filed: "auto_filed";
+}>;
+type DocumentCurationStatus = z.infer<typeof DocumentCurationStatus>;
+declare const DocumentCuration: z.ZodObject<{
+    suggestedBaseId: z.ZodNullable<z.ZodString>;
+    suggestedBaseName: z.ZodNullable<z.ZodString>;
+    confidence: z.ZodNumber;
+    reason: z.ZodNullable<z.ZodString>;
+    originalTitle: z.ZodNullable<z.ZodString>;
+    model: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+type DocumentCuration = z.infer<typeof DocumentCuration>;
 declare const DocumentBase: z.ZodObject<{
     id: z.ZodString;
     workspaceId: z.ZodString;
@@ -2564,6 +3072,29 @@ declare const Document: z.ZodObject<{
     sourceUpdatedAt: z.ZodNullable<z.ZodString>;
     sourceVersion: z.ZodNullable<z.ZodString>;
     aclTags: z.ZodArray<z.ZodString>;
+    visibility: z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>;
+    createdBy: z.ZodNullable<z.ZodString>;
+    agentAccess: z.ZodBoolean;
+    summary: z.ZodNullable<z.ZodString>;
+    topics: z.ZodArray<z.ZodString>;
+    curationStatus: z.ZodEnum<{
+        failed: "failed";
+        none: "none";
+        pending: "pending";
+        suggested: "suggested";
+        auto_filed: "auto_filed";
+    }>;
+    curation: z.ZodNullable<z.ZodObject<{
+        suggestedBaseId: z.ZodNullable<z.ZodString>;
+        suggestedBaseName: z.ZodNullable<z.ZodString>;
+        confidence: z.ZodNumber;
+        reason: z.ZodNullable<z.ZodString>;
+        originalTitle: z.ZodNullable<z.ZodString>;
+        model: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
     createdAt: z.ZodString;
     updatedAt: z.ZodString;
 }, z.core.$strip>;
@@ -2632,8 +3163,29 @@ declare const AddDocumentRequest: z.ZodObject<{
     sourceUpdatedAt: z.ZodOptional<z.ZodString>;
     sourceVersion: z.ZodOptional<z.ZodString>;
     aclTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type AddDocumentRequest = z.infer<typeof AddDocumentRequest>;
+declare const CreateKnowledgeDropRequest: z.ZodObject<{
+    text: z.ZodOptional<z.ZodString>;
+    fileId: z.ZodOptional<z.ZodString>;
+    filename: z.ZodOptional<z.ZodString>;
+    title: z.ZodOptional<z.ZodString>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        workspace: "workspace";
+        private: "private";
+    }>>;
+    agentAccess: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type CreateKnowledgeDropRequest = z.infer<typeof CreateKnowledgeDropRequest>;
+declare const MoveDocumentRequest: z.ZodObject<{
+    targetBaseId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type MoveDocumentRequest = z.infer<typeof MoveDocumentRequest>;
 declare const DocumentSearchRequest: z.ZodObject<{
     query: z.ZodString;
     baseIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3328,6 +3880,25 @@ declare const UpdateSessionRequest: z.ZodObject<{
     title: z.ZodString;
 }, z.core.$strip>;
 type UpdateSessionRequest = z.infer<typeof UpdateSessionRequest>;
+/**
+ * Replace an existing session's durable tool policy, or explicitly opt back in
+ * to the current workspace defaults. The mode-less explicit shape is retained
+ * for compatibility with clients released before workspace-default adoption
+ * was supported.
+ */
+declare const UpdateSessionToolPolicyRequest: z.ZodUnion<readonly [z.ZodObject<{
+    mode: z.ZodLiteral<"workspace_default">;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodOptional<z.ZodLiteral<"explicit">>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>]>;
+type UpdateSessionToolPolicyRequest = z.infer<typeof UpdateSessionToolPolicyRequest>;
 /**
  * A member's personal pin preference for a session. `expectedVersion` is
  * optional: ordinary pin/unpin actions are idempotent last-write-wins, while a
@@ -3436,6 +4007,7 @@ declare const SessionAuthorizationOperation: z.ZodEnum<{
     "session.human_input.write": "session.human_input.write";
     "session.title.write": "session.title.write";
     "session.mcp.approval_policy.write": "session.mcp.approval_policy.write";
+    "session.tool_policy.write": "session.tool_policy.write";
     "session.goal.read": "session.goal.read";
     "session.goal.write": "session.goal.write";
     "session.child.create": "session.child.create";
@@ -4032,6 +4604,11 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         high: "high";
         xhigh: "xhigh";
     }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
         uri: z.ZodString;
@@ -4059,11 +4636,6 @@ declare const SaveComposerDraftRequest: z.ZodObject<{
         fileId: z.ZodString;
         mountPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>], "kind">>;
-    tools: z.ZodArray<z.ZodObject<{
-        kind: z.ZodLiteral<"mcp">;
-        id: z.ZodString;
-        optional: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
     toolsProvided: z.ZodDefault<z.ZodBoolean>;
     expectedRevision: z.ZodNumber;
 }, z.core.$strip>;
@@ -4174,6 +4746,7 @@ declare const NewSessionDraft: z.ZodObject<{
         id: z.ZodString;
         optional: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
     model: z.ZodString;
     reasoningEffort: z.ZodEnum<{
         none: "none";
@@ -4261,6 +4834,11 @@ declare const SaveNewSessionDraftRequest: z.ZodObject<{
         high: "high";
         xhigh: "xhigh";
     }>;
+    tools: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        id: z.ZodString;
+        optional: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
     resources: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"repository">;
         uri: z.ZodString;
@@ -4288,11 +4866,7 @@ declare const SaveNewSessionDraftRequest: z.ZodObject<{
         fileId: z.ZodString;
         mountPath: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>], "kind">>;
-    tools: z.ZodArray<z.ZodObject<{
-        kind: z.ZodLiteral<"mcp">;
-        id: z.ZodString;
-        optional: z.ZodOptional<z.ZodBoolean>;
-    }, z.core.$strip>>;
+    toolsProvided: z.ZodDefault<z.ZodBoolean>;
     options: z.ZodObject<{
         sandboxBackend: z.ZodOptional<z.ZodEnum<{
             docker: "docker";
@@ -5041,6 +5615,7 @@ declare const ScheduledTaskAgentConfig: z.ZodObject<{
         optional: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>>;
     metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    slackBotConnectionId: z.ZodOptional<z.ZodString>;
     model: z.ZodOptional<z.ZodString>;
     reasoningEffort: z.ZodOptional<z.ZodEnum<{
         none: "none";
@@ -5149,6 +5724,7 @@ declare const ScheduledTask: z.ZodObject<{
             optional: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
         metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        slackBotConnectionId: z.ZodOptional<z.ZodString>;
         model: z.ZodOptional<z.ZodString>;
         reasoningEffort: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -5280,6 +5856,7 @@ declare const CreateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
             optional: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
         metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        slackBotConnectionId: z.ZodOptional<z.ZodString>;
         model: z.ZodOptional<z.ZodString>;
         reasoningEffort: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -5389,6 +5966,7 @@ declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
             optional: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
         metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        slackBotConnectionId: z.ZodOptional<z.ZodString>;
         model: z.ZodOptional<z.ZodString>;
         reasoningEffort: z.ZodOptional<z.ZodEnum<{
             none: "none";
@@ -5941,6 +6519,22 @@ declare const ConnectionStatus: z.ZodEnum<{
     needs_reauth: "needs_reauth";
 }>;
 type ConnectionStatus = z.infer<typeof ConnectionStatus>;
+declare const OPENGENI_SLACK_BOT_CREDENTIAL_ROLE: "opengeni_slack_bot";
+declare const OPENGENI_SLACK_BOT_CREDENTIAL_LABEL: "OpenGeni Slack bot";
+declare const OPENGENI_SLACK_BOT_SESSION_METADATA_KEY: "opengeniSlackBotConnectionId";
+declare const OPENGENI_SLACK_BOT_REQUIRED_SCOPES: readonly ["chat:write", "im:write", "channels:read", "channels:history", "groups:read", "groups:history", "users:read"];
+declare const OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES: readonly ["channels:join", "chat:write.public"];
+declare const OpenGeniSlackBotConnectionMetadata: z.ZodObject<{
+    credentialRole: z.ZodLiteral<"opengeni_slack_bot">;
+    credentialLabel: z.ZodLiteral<"OpenGeni Slack bot">;
+    slackTeamId: z.ZodString;
+    slackTeamName: z.ZodString;
+    botUserId: z.ZodString;
+    botId: z.ZodString;
+    botDisplayName: z.ZodLiteral<"OpenGeni">;
+    verifiedAt: z.ZodString;
+}, z.core.$loose>;
+type OpenGeniSlackBotConnectionMetadata = z.infer<typeof OpenGeniSlackBotConnectionMetadata>;
 declare const ConnectionMetadata: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -5965,6 +6559,8 @@ declare const ConnectionMetadata: z.ZodObject<{
     lastUsedAt: z.ZodNullable<z.ZodString>;
     lastError: z.ZodNullable<z.ZodString>;
     version: z.ZodNumber;
+    verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
     createdBySubjectId: z.ZodNullable<z.ZodString>;
     updatedBySubjectId: z.ZodNullable<z.ZodString>;
@@ -5989,6 +6585,15 @@ declare const CreateConnectionRequest: z.ZodObject<{
     metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strip>;
 type CreateConnectionRequest = z.infer<typeof CreateConnectionRequest>;
+/**
+ * Write-only Slack bot installation input. `token` is accepted only by the
+ * dedicated validated endpoint and is never represented in a response schema.
+ */
+declare const ConnectOpenGeniSlackBotRequest: z.ZodObject<{
+    token: z.ZodString;
+    connectionId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ConnectOpenGeniSlackBotRequest = z.infer<typeof ConnectOpenGeniSlackBotRequest>;
 declare const UpdateConnectionRequest: z.ZodObject<{
     providerDomain: z.ZodOptional<z.ZodString>;
     subjectId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -6035,6 +6640,8 @@ declare const ConnectionResponse: z.ZodObject<{
         lastUsedAt: z.ZodNullable<z.ZodString>;
         lastError: z.ZodNullable<z.ZodString>;
         version: z.ZodNumber;
+        verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         createdBySubjectId: z.ZodNullable<z.ZodString>;
         updatedBySubjectId: z.ZodNullable<z.ZodString>;
@@ -6068,6 +6675,8 @@ declare const ListConnectionsResponse: z.ZodObject<{
         lastUsedAt: z.ZodNullable<z.ZodString>;
         lastError: z.ZodNullable<z.ZodString>;
         version: z.ZodNumber;
+        verifiedInstallAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        verifiedInstallVersion: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         createdBySubjectId: z.ZodNullable<z.ZodString>;
         updatedBySubjectId: z.ZodNullable<z.ZodString>;
@@ -6613,6 +7222,7 @@ declare const Session: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -6926,6 +7536,7 @@ declare const CreateSessionResponse: z.ZodObject<{
         }>;
         inheritedFromSessionId: z.ZodNullable<z.ZodString>;
     }, z.core.$strip>>;
+    toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
     effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             explicit: "explicit";
@@ -7245,6 +7856,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7553,6 +8165,7 @@ declare const SessionListResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -7869,6 +8482,7 @@ declare const SessionLineageResponse: z.ZodObject<{
             }>;
             inheritedFromSessionId: z.ZodNullable<z.ZodString>;
         }, z.core.$strip>>;
+        toolPolicyVersion: z.ZodOptional<z.ZodNumber>;
         effectiveToolPolicy: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 explicit: "explicit";
@@ -8193,6 +8807,7 @@ declare const SessionEventType: z.ZodEnum<{
     "terminal.pty.exited": "terminal.pty.exited";
     "session.title_set": "session.title_set";
     "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+    "session.tool_policy.updated": "session.tool_policy.updated";
     "codex.account.switched": "codex.account.switched";
     "codex.credential.selected": "codex.credential.selected";
     "codex.fleet.decision": "codex.fleet.decision";
@@ -8268,7 +8883,7 @@ declare const SessionEventReadDirection: z.ZodEnum<{
 type SessionEventReadDirection = z.infer<typeof SessionEventReadDirection>;
 declare const SESSION_EVENT_RAW_DELTA_TYPES: readonly ["agent.message.delta", "agent.reasoning.delta", "sandbox.command.output.delta", "terminal.pty.output.delta"];
 declare const SESSION_EVENT_SEMANTIC_CLASS_TYPES: {
-    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated"];
+    readonly control: readonly ["session.status.changed", "session.requiresAction", "session.humanInput.requested", "user.pause", "user.approvalDecision", "user.humanInputResponse", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.mcp.approval_policy.updated", "session.tool_policy.updated"];
     readonly terminal: readonly ["turn.completed", "agent.message.completed", "turn.failed", "turn.cancelled", "turn.superseded", "goal.completed", "goal.paused", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.completed", "sandbox.operation.failed", "recording.available", "recording.failed", "terminal.pty.exited"];
     readonly failure: readonly ["session.event.envelope_omitted", "turn.failed", "tool.auth_needed", "credential.auth_needed", "rig.setup.failed", "sandbox.operation.failed", "recording.failed", "sandbox.box.lost", "workspace.revision.degraded", "machine.op.failed", "machine.link.lost"];
     readonly checkpoint: readonly ["session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "turn.recovery.requested", "session.queue.history", "sandbox.box.snapshot", "workspace.revision.captured"];
@@ -9567,6 +10182,7 @@ declare const SessionEvent: z.ZodObject<{
         "terminal.pty.exited": "terminal.pty.exited";
         "session.title_set": "session.title_set";
         "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+        "session.tool_policy.updated": "session.tool_policy.updated";
         "codex.account.switched": "codex.account.switched";
         "codex.credential.selected": "codex.credential.selected";
         "codex.fleet.decision": "codex.fleet.decision";
@@ -10820,6 +11436,7 @@ declare const SteerSessionMessageResponse: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
             "codex.fleet.decision": "codex.fleet.decision";
@@ -11048,6 +11665,7 @@ declare const SessionBusMessage: z.ZodObject<{
             "terminal.pty.exited": "terminal.pty.exited";
             "session.title_set": "session.title_set";
             "session.mcp.approval_policy.updated": "session.mcp.approval_policy.updated";
+            "session.tool_policy.updated": "session.tool_policy.updated";
             "codex.account.switched": "codex.account.switched";
             "codex.credential.selected": "codex.credential.selected";
             "codex.fleet.decision": "codex.fleet.decision";
@@ -11109,10 +11727,30 @@ declare const GitHubRepositoryScope: z.ZodEnum<{
     all: "all";
 }>;
 type GitHubRepositoryScope = z.infer<typeof GitHubRepositoryScope>;
+declare const GitHubBindingStatus: z.ZodEnum<{
+    disabled: "disabled";
+    unbound: "unbound";
+    bound: "bound";
+}>;
+type GitHubBindingStatus = z.infer<typeof GitHubBindingStatus>;
+declare const GitHubInstallationLifecycle: z.ZodEnum<{
+    active: "active";
+    deleted: "deleted";
+    unverified: "unverified";
+    suspended: "suspended";
+}>;
+type GitHubInstallationLifecycle = z.infer<typeof GitHubInstallationLifecycle>;
 declare const GitHubInstallationBinding: z.ZodObject<{
     installationId: z.ZodNumber;
+    githubAccountId: z.ZodNullable<z.ZodNumber>;
     accountLogin: z.ZodNullable<z.ZodString>;
     accountType: z.ZodNullable<z.ZodString>;
+    lifecycle: z.ZodEnum<{
+        active: "active";
+        deleted: "deleted";
+        unverified: "unverified";
+        suspended: "suspended";
+    }>;
     repositoryScope: z.ZodEnum<{
         selected: "selected";
         all: "all";
@@ -11124,6 +11762,11 @@ declare const GitHubInstallationBinding: z.ZodObject<{
 type GitHubInstallationBinding = z.infer<typeof GitHubInstallationBinding>;
 declare const GitHubAppInfo: z.ZodObject<{
     configured: z.ZodBoolean;
+    status: z.ZodEnum<{
+        disabled: "disabled";
+        unbound: "unbound";
+        bound: "bound";
+    }>;
     appId: z.ZodNullable<z.ZodString>;
     clientId: z.ZodNullable<z.ZodString>;
     appSlug: z.ZodNullable<z.ZodString>;
@@ -11131,8 +11774,15 @@ declare const GitHubAppInfo: z.ZodObject<{
     linkUrl: z.ZodNullable<z.ZodString>;
     installations: z.ZodArray<z.ZodObject<{
         installationId: z.ZodNumber;
+        githubAccountId: z.ZodNullable<z.ZodNumber>;
         accountLogin: z.ZodNullable<z.ZodString>;
         accountType: z.ZodNullable<z.ZodString>;
+        lifecycle: z.ZodEnum<{
+            active: "active";
+            deleted: "deleted";
+            unverified: "unverified";
+            suspended: "suspended";
+        }>;
         repositoryScope: z.ZodEnum<{
             selected: "selected";
             all: "all";
@@ -12824,6 +13474,8 @@ type WorkspaceModelCatalogResponse = z.infer<typeof WorkspaceModelCatalogRespons
  */
 declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-turn-instructions-v1";
 declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
+/** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
+declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
 declare const ClientConfig: z.ZodObject<{
     deploymentRevision: z.ZodString;
     apiContractRevision: z.ZodLiteral<"2026-07-turn-instructions-v1">;
@@ -13097,4 +13749,4 @@ declare function evaluateWorkspaceModelPolicy(policy: WorkspaceModelPolicyContra
     modelId: string;
 }): WorkspaceModelPolicyVerdict;
 
-export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubInstallationBinding, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, isClearedRunStateBlob, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };
+export { AccessContext, AccessGrant, AccountGrant, AccountRole, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ActivateWorkspaceInstructionPolicyRequest, AddDocumentRequest, AddWorkspaceMemberRequest, type AdmitRunInput, ApiKey, AttachViewerRequest, type AuthorizeSessionInput, BillingBalance, BillingMode, type BoundSessionEventOptions, type BoundSessionEventPayloadOptions, type BoundWorkspaceControlEventOptions, CAPABILITY_DESCRIPTORS, CLEARED_RUN_STATE_BLOB, CLEARED_RUN_STATE_MARKER, CODEX_FLEET_POLICY_MAX_CANDIDATES, CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE, CODEX_FLEET_POLICY_SCHEMA_VERSION, CODEX_FLEET_POLICY_VERSION, CapabilityCatalogAuthKind, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityCatalogTier, type CapabilityDescriptor, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClearSessionContextRequest, ClientAuthConfig, ClientConfig, ClientModel, ClientSessionEvent, type CodexFleetAdmissionDecisionV1, type CodexFleetAdmissionSnapshotV1, type CodexFleetCacheState, type CodexFleetCandidateStatus, type CodexFleetCandidateV1, type CodexFleetConfidence, type CodexFleetDecisionInputV1, type CodexFleetDecisionV1, type CodexFleetOverlayMode, type CodexFleetPlacementKind, type CodexFleetPolicyConfigV1, type CodexFleetPriority, type CodexFleetQuotaWindowV1, type CodexFleetReplayRecordV1, type CodexFleetReplayVerdictV1, type CodexFleetScoreV1, CompactSessionContextRequest, CompactSessionContextResult, CompleteFileUploadResponse, ComposerDraft, ConnectOpenGeniSlackBotRequest, ConnectionCredentialBundle, type ConnectionCredentialsPort, ConnectionKind, ConnectionMetadata, ConnectionResponse, ConnectionStatus, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateKnowledgeDropRequest, CreateKnowledgeMemoryRequest, CreateRigRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateSocialConnectionRequest, CreateSocialPostRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceRequest, CredentialAuthNeededPayload, type CredentialAuthNeededReason, DEFAULT_CODEX_FLEET_POLICY_V1, DEFAULT_FIRST_PARTY_MCP_PERMISSIONS, DESKTOP_STREAM_PORT, DelegatedAccessTokenPayload, DeleteSessionQueueItemRequest, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentPollRequest, DeviceEnrollmentPollResponse, DeviceEnrollmentStartRequest, DeviceEnrollmentStartResponse, DeviceEnrollmentState, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentCuration, DocumentCurationStatus, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResult, DocumentStatus, DocumentVisibility, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, EnableCapabilityRequest, EnablePackRequest, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, EnrollTokenPayload, EnrollmentArch, EnrollmentBearerPayload, EnrollmentCredentialsResponse, EnrollmentOs, EnrollmentSummary, EntitlementDecision, EntitlementValue, Entitlements, EntitlementsMode, type EntitlementsPort, ErrorCode, ErrorEnvelope, FileAsset, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadStatus, FsChangeKind, FsChangedPayload, FsDeleteRequest, FsDeleteResponse, FsEncoding, FsListRequest, FsListResponse, FsMkdirRequest, FsMkdirResponse, FsMoveRequest, FsMoveResponse, FsNodeType, FsReadRequest, FsReadResponse, FsTreeNode, FsWriteRequest, FsWriteResponse, GetWorkspaceCaptureFileResponse, GetWorkspaceCaptureResponse, GitChangedPayload, GitCommit, GitCredentialBindingId, GitCredentialProvider, GitCredentialRepositoryRef, type GitCredentialTransport, type GitCredentials, type GitCredentialsRequest, GitDiffHunk, GitDiffLine, GitDiffLineType, GitDiffRequest, GitDiffResponse, GitFileDiff, GitFileStatus, GitFileStatusCode, type GitHttpBrokerRepositoryRoute, type GitHubAppApiPort, GitHubAppInfo, GitHubAppManifestCreate, GitHubBindingStatus, type GitHubInstallationAuthorityKind, GitHubInstallationBinding, type GitHubInstallationBindingProof, GitHubInstallationLifecycle, type GitHubInstallationSummary, GitHubRepositoriesResponse, GitHubRepository, type GitHubRepositoryPermissions, GitHubRepositoryScope, type GitHubUserInstallationAccess, type GitHubUserRepositoryAccess, GitLogRequest, GitLogResponse, GitRepositoryAccess, GitShowRequest, GitShowResponse, GitStatusRequest, GitStatusResponse, GoalSpec, type HealthResponse, HostEventExport, HostEventExportBatch, type HostEventSink, HostExportConsumerId, HostExportCursor, HostExportInitiator, HostExportInitiatorContext, HostSessionEvent, HostUsageEvent, HostUsageExport, HostUsageExportBatch, type HostUsageSink, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputRequestStatus, HumanInputResponse, ImportLegacyWorkspaceInstructionPolicyDraftRequest, IntegrationClientMetadata, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, LimitAction, LimitDecision, LineageNode, ListConnectionsResponse, ListEnrollmentsResponse, ListWorkspaceMembersResponse, MAX_NESTED_AGENT_DEPTH, MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, ManagedAccount, MarketingDailyAnalysisTaskRequest, McpConnectionResourceScope, type McpCredentialAuthNeededReason, type McpCredentialResolution, type McpCredentialsRequest, McpServerConnectionRef, MetricSample, MintEnrollTokenRequest, MintEnrollTokenResponse, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, MoveDocumentRequest, MoveSessionQueueItemRequest, NestedAgentDepthAttemptValue, NestedAgentDepthPolicySource, NestedAgentDepthValue, NewSessionDraft, NewSessionDraftOptions, OAuthStartRequest, OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_CORRELATION_HEADER, OPENGENI_HOST_EXPORT_SCHEMA_REVISION, OPENGENI_SLACK_BOT_CREDENTIAL_LABEL, OPENGENI_SLACK_BOT_CREDENTIAL_ROLE, OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES, OPENGENI_SLACK_BOT_REQUIRED_SCOPES, OPENGENI_SLACK_BOT_SESSION_METADATA_KEY, OpenGeniSlackBotConnectionMetadata, PackInstallation, PackInstallationStatus, Permission, type PortExposureKind, ProductAccessMode, ProposeRigChangeRequest, PtyCloseRequest, PtyOpenRequest, PtyOpenResponse, PtyResizeRequest, PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, ReasoningEffort, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RelayTokenPayload, RepositoryResourceRef, RequestHumanInputToolInput, type ResolveSessionAuthorizationListScopeInput, type ResolveSessionEventTypeFiltersInput, ResourceMountPathError, ResourceRef, ResourceRefConflictError, type RetainedArtifactFileInput, type RetainedArtifactMetadata, RetainedArtifactMetadataSchema, type RetainedArtifactReference, RetainedArtifactReferenceSchema, type RetainedArtifactUnavailable, RetainedArtifactUnavailableSchema, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, RetainedOutputEvidenceSchema, RetainedOutputKind, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, RetainedOutputUnavailableReason, RevokeEnrollmentResponse, Rig, RigChange, RigChangeKind, RigChangeStatus, RigChangeVerification, RigCheck, RigCheckResult, RigDefinitionEditPayload, RigSetupAppendPayload, RigVerificationHealth, RigVersion, RollbackWorkspaceInstructionPolicyRequest, type RunCredentialAuthNeeded, type RunCredentialFile, type RunCredentialRedaction, type RunCredentialsRequest, type RunCredentialsResolution, SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS, SESSION_EFFECTIVE_TOOL_POLICY_ID_LIMIT, SESSION_EFFECTIVE_TOOL_POLICY_ID_MAX_LENGTH, SESSION_EVENT_CLIENT_EVENT_ID_MAX_BYTES, SESSION_EVENT_DUPLICATE_REASON_MAX_BYTES, SESSION_EVENT_ENVELOPE_MAX_BYTES, SESSION_EVENT_PAYLOAD_MAX_BYTES, SESSION_EVENT_RAW_DELTA_TYPES, SESSION_EVENT_SEMANTIC_CLASS_TYPES, SESSION_EVENT_TURN_ASSOCIATION_MAX_BYTES, SESSION_EVENT_TYPE_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_BYTES, SESSION_MCP_APPROVAL_POLICY_MAX_TOOL_NAMES, SESSION_MCP_APPROVAL_TOOL_NAME_MAX_BYTES, SESSION_MCP_SERVERS_MAX, SESSION_OPERATION_KEY_MAX_CHARS, SandboxBackend, SandboxCapabilityName, SandboxCommandOutputDeltaPayload, SandboxOs, type SandboxSecrets, type SandboxSecretsRequest, SaveComposerDraftRequest, SaveNewSessionDraftRequest, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, type SecretForRedaction, ServiceTurnInitiator, ServiceTurnInitiatorContext, Session, SessionAuthorizationActor, SessionAuthorizationDecision, SessionAuthorizationListScope, SessionAuthorizationOperation, type SessionAuthorizationPort, SessionAuthorizationSurface, SessionAuthorizationTarget, SessionBusMessage, SessionCapabilities, SessionCommandReceipt, SessionControlRequest, SessionControlResponse, SessionControlState, SessionEffectiveToolPolicy, SessionEvent, type SessionEventBoundarySurface, type SessionEventCompactResult, type SessionEventJsonMeasurement, SessionEventLatestClass, type SessionEventMediaPreview, SessionEventPayloadMode, type SessionEventPayloadTruncation, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalContinuation, SessionGoalContinuationReason, SessionGoalContinuationState, SessionGoalCreatedBy, SessionGoalPausedReason, SessionGoalStatus, SessionHumanInputRequest, SessionLineageResponse, SessionListResponse, SessionMcpApprovalPolicy, SessionMcpCredentialUpdateInput, SessionMcpServerId, SessionMcpServerInput, SessionMcpServerMetadata, SessionQueueMutationResponse, SessionQueueSnapshot, SessionSpawnDenial, SessionStatus, SessionStructuredCapabilities, type SessionSummary, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdatePayload, SessionSystemUpdateState, SessionToolPolicy, SessionTurn, SessionTurnSource, SessionTurnStatus, SetVariableSetVariableRequest, SetWorkspaceDefaultRigRequest, SetWorkspaceEnvironmentVariableRequest, SocialConnection, SocialConnectionStatus, SocialPost, SocialProvider, StaticUsageLimits, SteerSessionMessageRequest, SteerSessionMessageResponse, SteerSessionQueueItemRequest, StreamClosedPayload, StreamOpenedPayload, StreamRevokedPayload, StreamTokenPayload, StreamUrlRotatedPayload, SubmitHumanInputResponseRequest, SwapActiveSandboxRequest, SwapActiveSandboxResponse, SystemUpdateClassification, TERMINAL_STREAM_PORT, TURN_EXECUTION_POLICY_METADATA_KEY, TerminalExecRequest, TerminalExecResponse, TerminalPtyExitedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyStartedPayload, ToolAuthNeededPayload, ToolRef, TranscriptionErrorCode, TranscriptionEvent, TranscriptionResultMetadata, TranscriptionSpeaker, TranscriptionTimeSpan, TranscriptionWord, TriggerScheduledTaskRequest, TurnExecutionModelSourceV1, type TurnExecutionPolicyReadV1, TurnExecutionPolicyV1, TurnExecutionReasoningSourceV1, TurnInitiator, TurnInitiatorContext, UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateRigRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceModelPolicyRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, UsageEvent, UsageEventType, UsageLimitsMode, VariableSet, VariableSetVariableMetadata, VariableSetVariableName, ViewerHeartbeatRequest, ViewerHeartbeatResponse, ViewerHolder, WORKSPACE_CONTROL_ACTOR_MAX_BYTES, WORKSPACE_CONTROL_EVENT_MAX_BYTES, WORKSPACE_CONTROL_REASON_MAX_BYTES, WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS, WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS, WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS, WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS, Workspace, WorkspaceCaptureDegradedReason, WorkspaceCaptureFile, WorkspaceCaptureManifest, WorkspaceCaptureRepo, WorkspaceCaptureSignedUrl, WorkspaceCaptureStats, type WorkspaceControlBoundarySurface, WorkspaceControlEvent, WorkspaceControlEventTruncation, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceInferenceControlRequest, WorkspaceInferenceControlResponse, WorkspaceInferenceState, WorkspaceInstructionPolicyActivationEvent, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyActivationType, WorkspaceInstructionPolicyConflictResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyKind, WorkspaceInstructionPolicyListQuery, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyProvenance, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyRevisionIdentity, WorkspaceInstructionPolicyRoleKey, WorkspaceInstructionPolicyScope, WorkspaceInstructionPolicyTarget, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceMemorySearchResult, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, type WorkspaceModelPolicyContract, type WorkspaceModelPolicyVerdict, WorkspaceRegisteredPack, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, type WorkspaceSettings, WorkspaceSettingsSchema, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, approvalIdentifier, approximateSessionEventTokens, assertUniqueResourceMountPaths, boundSessionEvent, boundSessionEventPayload, boundWorkspaceControlEvent, canonicalCodexFleetReplayJsonV1, capabilityCatalogItemIsTrustedForExposure, compactSessionEventResult, compareCodexFleetCanonicalStringsV1, createCodexFleetReplayRecordV1, createSecretRedactor, defaultRepositoryMountPath, effectiveCodexFleetCacheStateV1, evaluateCodexFleetDecisionV1, evaluateWorkspaceModelPolicy, gitCredentialBindingIdForRepository, gitCredentialProviderForRepository, identityRedactor, isClearedRunStateBlob, isCredentialHeaderName, isSensitiveFieldName, measureSessionEventJson, mergeResourceRefs, mergeToolRefs, metadataWithTurnExecutionPolicyV1, normalizeRepositorySubpath, normalizeResourceMountPath, normalizeWorkspaceInstructionPolicyRoleKey, prefixedMcpToolName, readCodexFleetReplayRecordV1, readTurnExecutionPolicyV1, reasoningEffortForMetadata, redactSensitiveData, redactSensitiveKey, redactSensitiveText, redactSerializedJson, replayCodexFleetDecisionV1, resolveRetainedOutputRange, resolveSessionEventTypeFilters, resolveWorkspaceMemoryEnabled, resourceIdentityKey, resourceMountPath, resourceMountPathCollisionKey, retainedArtifactReferenceFromFile, retainedOutputUnavailable, sessionEventJsonBytes, sessionEventLatestClassToSemanticClass, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, signDelegatedAccessToken, signEnrollToken, signEnrollmentBearer, signRelayToken, signStreamToken, stableJson, turnExecutionPolicyAuditMetadata, validateRetainedOutputEvidence, verifyDelegatedAccessToken, verifyEnrollToken, verifyEnrollmentBearer, verifyRelayToken, verifyStreamToken, workspaceControlUtf8Bytes };