@opengeni/contracts 0.31.1 → 0.32.0

package/dist/{chunk-TQC34EGL.js → chunk-GMOYIHF3.js}

@@ -864,8 +864,205 @@ function isPlainRecord(value) {
   return Boolean(value && typeof value === "object" && !Array.isArray(value));
 }
 
-// src/artifacts.ts
+// src/workspace-instruction-policies.ts
 import { z as z2 } from "zod";
+var WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
+var WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES = 131072;
+var WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS = 4096;
+var WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS = 64;
+var WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS = 512;
+var WorkspaceInstructionPolicyKind = z2.enum(["charter", "policy"]);
+var WorkspaceInstructionPolicyScope = z2.enum(["global", "role"]);
+var WorkspaceInstructionPolicyProvenanceSource = z2.enum([
+  "human",
+  "onboarding",
+  "knowledge_proposal",
+  "legacy_import"
+]);
+var WorkspaceInstructionPolicyDraftProvenanceSource = z2.enum([
+  "human",
+  "onboarding",
+  "knowledge_proposal"
+]);
+var WorkspaceInstructionPolicyActivationType = z2.enum(["activate", "rollback"]);
+var WorkspaceInstructionPolicyRoleKey = z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS).regex(/^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/);
+function normalizeWorkspaceInstructionPolicyRoleKey(value) {
+  return value.normalize("NFKC").trim().toLowerCase().replace(/\s+/gu, "-").replace(/-+/g, "-");
+}
+var WorkspaceInstructionPolicyRoleKeyInput = z2.string().transform(normalizeWorkspaceInstructionPolicyRoleKey).pipe(WorkspaceInstructionPolicyRoleKey);
+var WorkspaceInstructionPolicyRoleSource = z2.enum([
+  "session_binding",
+  "metadata_fallback",
+  "none",
+  "invalid_metadata_fallback"
+]);
+var targetShape = {
+  kind: WorkspaceInstructionPolicyKind,
+  scope: WorkspaceInstructionPolicyScope,
+  roleKey: WorkspaceInstructionPolicyRoleKey.nullable()
+};
+function validateTarget(value, context) {
+  if (value.kind === "charter" && (value.scope !== "global" || value.roleKey !== null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["scope"],
+      message: "a charter must use global scope with no role key"
+    });
+  }
+  if (value.scope === "global" && value.roleKey !== null) {
+    context.addIssue({
+      code: "custom",
+      path: ["roleKey"],
+      message: "a global instruction policy must not have a role key"
+    });
+  }
+  if (value.scope === "role" && (value.kind !== "policy" || value.roleKey === null)) {
+    context.addIssue({
+      code: "custom",
+      path: ["roleKey"],
+      message: "role scope requires a policy and a normalized role key"
+    });
+  }
+}
+var WorkspaceInstructionPolicyTarget = z2.object(targetShape).superRefine(validateTarget);
+var WorkspaceInstructionPolicyProvenance = z2.object({
+  source: WorkspaceInstructionPolicyProvenanceSource,
+  sourceId: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS).nullable()
+});
+var revisionIdentityShape = {
+  id: z2.string().uuid(),
+  revision: z2.number().int().positive(),
+  contentHash: z2.string().regex(/^[0-9a-f]{64}$/)
+};
+var WorkspaceInstructionPolicyRevisionIdentity = z2.object(revisionIdentityShape);
+var WorkspaceInstructionPolicyRevision = z2.object({
+  ...revisionIdentityShape,
+  accountId: z2.string().uuid(),
+  workspaceId: z2.string().uuid(),
+  ...targetShape,
+  content: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS),
+  provenance: WorkspaceInstructionPolicyProvenance,
+  supersedesRevisionId: z2.string().uuid().nullable(),
+  createdBySubjectId: z2.string().min(1),
+  createdAt: z2.string().datetime()
+});
+var WorkspaceInstructionPolicyHead = z2.object({
+  workspaceId: z2.string().uuid(),
+  ...targetShape,
+  revisionId: z2.string().uuid(),
+  revision: z2.number().int().positive(),
+  contentHash: z2.string().regex(/^[0-9a-f]{64}$/),
+  activationVersion: z2.number().int().positive(),
+  activatedAt: z2.string().datetime()
+});
+var WorkspaceInstructionPolicySnapshotProvenance = z2.object({
+  source: WorkspaceInstructionPolicyProvenanceSource,
+  sourceIdHash: z2.string().regex(/^[0-9a-f]{64}$/).nullable()
+});
+var WorkspaceInstructionPolicySnapshotEntry = z2.object({
+  kind: WorkspaceInstructionPolicyKind,
+  scope: WorkspaceInstructionPolicyScope,
+  roleKey: WorkspaceInstructionPolicyRoleKey.nullable(),
+  revisionId: z2.string().uuid(),
+  revision: z2.number().int().positive(),
+  contentHash: z2.string().regex(/^[0-9a-f]{64}$/),
+  activationVersion: z2.number().int().positive(),
+  activatedAt: z2.string().datetime(),
+  provenance: WorkspaceInstructionPolicySnapshotProvenance
+});
+var WorkspaceInstructionPolicySnapshot = z2.object({
+  id: z2.string().uuid(),
+  workspaceId: z2.string().uuid(),
+  sessionId: z2.string().uuid(),
+  turnId: z2.string().uuid(),
+  attemptId: z2.string().uuid(),
+  executionGeneration: z2.number().int().positive(),
+  policyRole: WorkspaceInstructionPolicyRoleKey.nullable(),
+  roleSource: WorkspaceInstructionPolicyRoleSource,
+  entryHash: z2.string().regex(/^[0-9a-f]{64}$/),
+  entries: z2.array(WorkspaceInstructionPolicySnapshotEntry).max(3),
+  createdAt: z2.string().datetime()
+});
+var ResolvedWorkspaceInstructionPolicySnapshotEntry = WorkspaceInstructionPolicySnapshotEntry.extend({
+  content: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS)
+});
+var ResolvedWorkspaceInstructionPolicySnapshot = WorkspaceInstructionPolicySnapshot.extend(
+  {
+    entries: z2.array(ResolvedWorkspaceInstructionPolicySnapshotEntry).max(3)
+  }
+);
+var WorkspaceInstructionPolicyActivationEvent = z2.object({
+  id: z2.string().uuid(),
+  accountId: z2.string().uuid(),
+  workspaceId: z2.string().uuid(),
+  ...targetShape,
+  type: WorkspaceInstructionPolicyActivationType,
+  activationVersion: z2.number().int().positive(),
+  oldRevision: WorkspaceInstructionPolicyRevisionIdentity.nullable(),
+  newRevision: WorkspaceInstructionPolicyRevisionIdentity,
+  actorSubjectId: z2.string().min(1),
+  reason: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS),
+  createdAt: z2.string().datetime()
+});
+var CreateWorkspaceInstructionPolicyDraftRequest = z2.object({
+  kind: WorkspaceInstructionPolicyKind,
+  scope: WorkspaceInstructionPolicyScope,
+  roleKey: WorkspaceInstructionPolicyRoleKeyInput.nullable().default(null),
+  content: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS).refine((value) => value.trim().length > 0, "instruction policy content must not be blank"),
+  provenanceSource: WorkspaceInstructionPolicyDraftProvenanceSource.default("human"),
+  provenanceSourceId: z2.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS).nullable().default(null),
+  supersedesRevisionId: z2.string().uuid().nullable().default(null)
+}).superRefine(validateTarget);
+var ImportLegacyWorkspaceInstructionPolicyDraftRequest = z2.object({
+  supersedesRevisionId: z2.string().uuid().nullable().default(null)
+}).strict();
+var WorkspaceInstructionPolicyListQuery = z2.object({
+  kind: WorkspaceInstructionPolicyKind.optional(),
+  scope: WorkspaceInstructionPolicyScope.optional(),
+  roleKey: WorkspaceInstructionPolicyRoleKeyInput.nullable().optional(),
+  afterRevision: z2.coerce.number().int().positive().optional(),
+  limit: z2.coerce.number().int().min(1).max(100).default(50)
+});
+var WorkspaceInstructionPolicyListResponse = z2.object({
+  revisions: z2.array(WorkspaceInstructionPolicyRevision),
+  activeHeads: z2.array(WorkspaceInstructionPolicyHead),
+  activationEvents: z2.array(WorkspaceInstructionPolicyActivationEvent),
+  nextAfterRevision: z2.number().int().positive().nullable()
+});
+var WorkspaceInstructionPolicyDiffRequest = z2.object({
+  fromRevisionId: z2.string().uuid(),
+  toRevisionId: z2.string().uuid()
+}).refine((value) => value.fromRevisionId !== value.toRevisionId, {
+  message: "diff revisions must be different",
+  path: ["toRevisionId"]
+});
+var WorkspaceInstructionPolicyDiffResponse = z2.object({
+  from: WorkspaceInstructionPolicyRevision,
+  to: WorkspaceInstructionPolicyRevision,
+  format: z2.literal("unified"),
+  diff: z2.string()
+});
+var ActivateWorkspaceInstructionPolicyRequest = z2.object({
+  expectedCurrentRevisionId: z2.string().uuid().nullable(),
+  reason: z2.string().trim().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS)
+});
+var RollbackWorkspaceInstructionPolicyRequest = z2.object({
+  targetRevisionId: z2.string().uuid(),
+  expectedCurrentRevisionId: z2.string().uuid(),
+  reason: z2.string().trim().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS)
+});
+var WorkspaceInstructionPolicyActivationResponse = z2.object({
+  head: WorkspaceInstructionPolicyHead,
+  event: WorkspaceInstructionPolicyActivationEvent
+});
+var WorkspaceInstructionPolicyConflictResponse = z2.object({
+  code: z2.literal("WORKSPACE_INSTRUCTION_POLICY_CONFLICT"),
+  message: z2.string(),
+  currentHead: WorkspaceInstructionPolicyHead.nullable()
+});
+
+// src/artifacts.ts
+import { z as z3 } from "zod";
 var WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES = 512 * 1024;
 var WORKSPACE_ARTIFACT_TITLE_MAX_CHARS = 120;
 var WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS = 2e3;
@@ -873,72 +1070,72 @@ var WORKSPACE_ARTIFACT_LIST_MAX = 100;
 var WORKSPACE_ARTIFACT_LIST_DEFAULT = 50;
 var WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS = 512;
 var encoder3 = new TextEncoder();
-var sha256 = z2.string().regex(/^[0-9a-f]{64}$/);
-var WorkspaceArtifactSlug = z2.string().trim().min(1).max(96).regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/);
-var WorkspaceArtifactStatus = z2.enum(["active", "archived"]);
-var WorkspaceArtifactVersion = z2.object({
-  id: z2.string().uuid(),
-  accountId: z2.string().uuid(),
-  workspaceId: z2.string().uuid(),
-  artifactId: z2.string().uuid(),
-  revision: z2.number().int().positive(),
-  contentType: z2.literal("text/html"),
+var sha256 = z3.string().regex(/^[0-9a-f]{64}$/);
+var WorkspaceArtifactSlug = z3.string().trim().min(1).max(96).regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/);
+var WorkspaceArtifactStatus = z3.enum(["active", "archived"]);
+var WorkspaceArtifactVersion = z3.object({
+  id: z3.string().uuid(),
+  accountId: z3.string().uuid(),
+  workspaceId: z3.string().uuid(),
+  artifactId: z3.string().uuid(),
+  revision: z3.number().int().positive(),
+  contentType: z3.literal("text/html"),
   contentSha256: sha256,
-  sizeBytes: z2.number().int().positive().max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES),
-  sourceSessionId: z2.string().uuid().nullable(),
-  sourceTurnId: z2.string().uuid().nullable(),
-  sourceAttemptId: z2.string().uuid().nullable(),
-  sourceExecutionGeneration: z2.number().int().positive().nullable(),
-  createdBySubjectId: z2.string().min(1).max(1024),
-  createdAt: z2.string().datetime({ offset: true })
-});
-var WorkspaceArtifact = z2.object({
-  id: z2.string().uuid(),
-  accountId: z2.string().uuid(),
-  workspaceId: z2.string().uuid(),
+  sizeBytes: z3.number().int().positive().max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES),
+  sourceSessionId: z3.string().uuid().nullable(),
+  sourceTurnId: z3.string().uuid().nullable(),
+  sourceAttemptId: z3.string().uuid().nullable(),
+  sourceExecutionGeneration: z3.number().int().positive().nullable(),
+  createdBySubjectId: z3.string().min(1).max(1024),
+  createdAt: z3.string().datetime({ offset: true })
+});
+var WorkspaceArtifact = z3.object({
+  id: z3.string().uuid(),
+  accountId: z3.string().uuid(),
+  workspaceId: z3.string().uuid(),
   slug: WorkspaceArtifactSlug,
-  title: z2.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
-  description: z2.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable(),
+  title: z3.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
+  description: z3.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable(),
   status: WorkspaceArtifactStatus,
   currentVersion: WorkspaceArtifactVersion.nullable(),
-  createdBySubjectId: z2.string().min(1).max(1024),
-  createdAt: z2.string().datetime({ offset: true }),
-  updatedAt: z2.string().datetime({ offset: true })
+  createdBySubjectId: z3.string().min(1).max(1024),
+  createdAt: z3.string().datetime({ offset: true }),
+  updatedAt: z3.string().datetime({ offset: true })
 });
-var WorkspaceArtifactEventType = z2.enum(["published", "rolled_back"]);
-var WorkspaceArtifactEvent = z2.object({
-  id: z2.string().uuid(),
-  accountId: z2.string().uuid(),
-  workspaceId: z2.string().uuid(),
-  artifactId: z2.string().uuid(),
+var WorkspaceArtifactEventType = z3.enum(["published", "rolled_back"]);
+var WorkspaceArtifactEvent = z3.object({
+  id: z3.string().uuid(),
+  accountId: z3.string().uuid(),
+  workspaceId: z3.string().uuid(),
+  artifactId: z3.string().uuid(),
   type: WorkspaceArtifactEventType,
-  fromVersionId: z2.string().uuid().nullable(),
-  toVersionId: z2.string().uuid(),
-  sourceSessionId: z2.string().uuid().nullable(),
-  sourceTurnId: z2.string().uuid().nullable(),
-  sourceAttemptId: z2.string().uuid().nullable(),
-  sourceExecutionGeneration: z2.number().int().positive().nullable(),
-  actorSubjectId: z2.string().min(1).max(1024),
-  reason: z2.string().min(1).max(4096),
-  createdAt: z2.string().datetime({ offset: true })
-});
-var WorkspaceArtifactListQuery = z2.object({
-  limit: z2.coerce.number().int().positive().max(WORKSPACE_ARTIFACT_LIST_MAX).default(WORKSPACE_ARTIFACT_LIST_DEFAULT),
-  cursor: z2.string().min(1).max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).optional()
-});
-var WorkspaceArtifactListResponse = z2.object({
-  artifacts: z2.array(WorkspaceArtifact).max(WORKSPACE_ARTIFACT_LIST_MAX),
-  nextCursor: z2.string().max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).nullable(),
-  truncated: z2.boolean()
-});
-var WorkspaceArtifactDetailResponse = z2.object({
+  fromVersionId: z3.string().uuid().nullable(),
+  toVersionId: z3.string().uuid(),
+  sourceSessionId: z3.string().uuid().nullable(),
+  sourceTurnId: z3.string().uuid().nullable(),
+  sourceAttemptId: z3.string().uuid().nullable(),
+  sourceExecutionGeneration: z3.number().int().positive().nullable(),
+  actorSubjectId: z3.string().min(1).max(1024),
+  reason: z3.string().min(1).max(4096),
+  createdAt: z3.string().datetime({ offset: true })
+});
+var WorkspaceArtifactListQuery = z3.object({
+  limit: z3.coerce.number().int().positive().max(WORKSPACE_ARTIFACT_LIST_MAX).default(WORKSPACE_ARTIFACT_LIST_DEFAULT),
+  cursor: z3.string().min(1).max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).optional()
+});
+var WorkspaceArtifactListResponse = z3.object({
+  artifacts: z3.array(WorkspaceArtifact).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  nextCursor: z3.string().max(WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS).nullable(),
+  truncated: z3.boolean()
+});
+var WorkspaceArtifactDetailResponse = z3.object({
   artifact: WorkspaceArtifact,
-  versions: z2.array(WorkspaceArtifactVersion).max(WORKSPACE_ARTIFACT_LIST_MAX),
-  events: z2.array(WorkspaceArtifactEvent).max(WORKSPACE_ARTIFACT_LIST_MAX),
-  versionsTruncated: z2.boolean(),
-  eventsTruncated: z2.boolean()
+  versions: z3.array(WorkspaceArtifactVersion).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  events: z3.array(WorkspaceArtifactEvent).max(WORKSPACE_ARTIFACT_LIST_MAX),
+  versionsTruncated: z3.boolean(),
+  eventsTruncated: z3.boolean()
 });
-var WorkspaceArtifactHtml = z2.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES).superRefine((value, ctx) => {
+var WorkspaceArtifactHtml = z3.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES).superRefine((value, ctx) => {
   if (encoder3.encode(value).byteLength > WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES) {
     ctx.addIssue({
       code: "custom",
@@ -946,36 +1143,36 @@ var WorkspaceArtifactHtml = z2.string().min(1).max(WORKSPACE_ARTIFACT_HTML_MAX_U
     });
   }
 });
-var CreateWorkspaceArtifactRequest = z2.object({
+var CreateWorkspaceArtifactRequest = z3.object({
   slug: WorkspaceArtifactSlug.optional(),
-  title: z2.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
-  description: z2.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
+  title: z3.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS),
+  description: z3.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
   html: WorkspaceArtifactHtml,
-  idempotencyKey: z2.string().trim().min(1).max(200)
+  idempotencyKey: z3.string().trim().min(1).max(200)
 });
-var PublishWorkspaceArtifactVersionRequest = z2.object({
-  title: z2.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS).optional(),
-  description: z2.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
+var PublishWorkspaceArtifactVersionRequest = z3.object({
+  title: z3.string().trim().min(1).max(WORKSPACE_ARTIFACT_TITLE_MAX_CHARS).optional(),
+  description: z3.string().max(WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS).nullable().optional(),
   html: WorkspaceArtifactHtml,
-  expectedCurrentVersionId: z2.string().uuid(),
-  idempotencyKey: z2.string().trim().min(1).max(200)
+  expectedCurrentVersionId: z3.string().uuid(),
+  idempotencyKey: z3.string().trim().min(1).max(200)
 });
-var RollbackWorkspaceArtifactRequest = z2.object({
-  versionId: z2.string().uuid(),
-  expectedCurrentVersionId: z2.string().uuid(),
-  reason: z2.string().trim().min(1).max(4096),
-  idempotencyKey: z2.string().trim().min(1).max(200)
+var RollbackWorkspaceArtifactRequest = z3.object({
+  versionId: z3.string().uuid(),
+  expectedCurrentVersionId: z3.string().uuid(),
+  reason: z3.string().trim().min(1).max(4096),
+  idempotencyKey: z3.string().trim().min(1).max(200)
 });
-var WorkspaceArtifactMutationResponse = z2.object({
+var WorkspaceArtifactMutationResponse = z3.object({
   artifact: WorkspaceArtifact,
   version: WorkspaceArtifactVersion,
   event: WorkspaceArtifactEvent,
-  replayed: z2.boolean()
+  replayed: z3.boolean()
 });
-var WorkspaceArtifactContentResponse = z2.object({
-  artifactId: z2.string().uuid(),
-  versionId: z2.string().uuid(),
-  contentType: z2.literal("text/html"),
+var WorkspaceArtifactContentResponse = z3.object({
+  artifactId: z3.string().uuid(),
+  versionId: z3.string().uuid(),
+  contentType: z3.literal("text/html"),
   contentSha256: sha256,
   html: WorkspaceArtifactHtml
 });
@@ -2215,160 +2412,6 @@ function stripMatchingQuotes(value) {
   return value;
 }
 
-// src/workspace-instruction-policies.ts
-import { z as z3 } from "zod";
-var WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
-var WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS = 4096;
-var WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS = 64;
-var WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS = 512;
-var WorkspaceInstructionPolicyKind = z3.enum(["charter", "policy"]);
-var WorkspaceInstructionPolicyScope = z3.enum(["global", "role"]);
-var WorkspaceInstructionPolicyProvenanceSource = z3.enum([
-  "human",
-  "onboarding",
-  "knowledge_proposal",
-  "legacy_import"
-]);
-var WorkspaceInstructionPolicyDraftProvenanceSource = z3.enum([
-  "human",
-  "onboarding",
-  "knowledge_proposal"
-]);
-var WorkspaceInstructionPolicyActivationType = z3.enum(["activate", "rollback"]);
-var WorkspaceInstructionPolicyRoleKey = z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS).regex(/^[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/);
-function normalizeWorkspaceInstructionPolicyRoleKey(value) {
-  return value.normalize("NFKC").trim().toLowerCase().replace(/\s+/gu, "-").replace(/-+/g, "-");
-}
-var RequestRoleKey = z3.string().transform(normalizeWorkspaceInstructionPolicyRoleKey).pipe(WorkspaceInstructionPolicyRoleKey);
-var targetShape = {
-  kind: WorkspaceInstructionPolicyKind,
-  scope: WorkspaceInstructionPolicyScope,
-  roleKey: WorkspaceInstructionPolicyRoleKey.nullable()
-};
-function validateTarget(value, context) {
-  if (value.kind === "charter" && (value.scope !== "global" || value.roleKey !== null)) {
-    context.addIssue({
-      code: "custom",
-      path: ["scope"],
-      message: "a charter must use global scope with no role key"
-    });
-  }
-  if (value.scope === "global" && value.roleKey !== null) {
-    context.addIssue({
-      code: "custom",
-      path: ["roleKey"],
-      message: "a global instruction policy must not have a role key"
-    });
-  }
-  if (value.scope === "role" && (value.kind !== "policy" || value.roleKey === null)) {
-    context.addIssue({
-      code: "custom",
-      path: ["roleKey"],
-      message: "role scope requires a policy and a normalized role key"
-    });
-  }
-}
-var WorkspaceInstructionPolicyTarget = z3.object(targetShape).superRefine(validateTarget);
-var WorkspaceInstructionPolicyProvenance = z3.object({
-  source: WorkspaceInstructionPolicyProvenanceSource,
-  sourceId: z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS).nullable()
-});
-var revisionIdentityShape = {
-  id: z3.string().uuid(),
-  revision: z3.number().int().positive(),
-  contentHash: z3.string().regex(/^[0-9a-f]{64}$/)
-};
-var WorkspaceInstructionPolicyRevisionIdentity = z3.object(revisionIdentityShape);
-var WorkspaceInstructionPolicyRevision = z3.object({
-  ...revisionIdentityShape,
-  accountId: z3.string().uuid(),
-  workspaceId: z3.string().uuid(),
-  ...targetShape,
-  content: z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS),
-  provenance: WorkspaceInstructionPolicyProvenance,
-  supersedesRevisionId: z3.string().uuid().nullable(),
-  createdBySubjectId: z3.string().min(1),
-  createdAt: z3.string().datetime()
-});
-var WorkspaceInstructionPolicyHead = z3.object({
-  workspaceId: z3.string().uuid(),
-  ...targetShape,
-  revisionId: z3.string().uuid(),
-  revision: z3.number().int().positive(),
-  contentHash: z3.string().regex(/^[0-9a-f]{64}$/),
-  activationVersion: z3.number().int().positive(),
-  activatedAt: z3.string().datetime()
-});
-var WorkspaceInstructionPolicyActivationEvent = z3.object({
-  id: z3.string().uuid(),
-  accountId: z3.string().uuid(),
-  workspaceId: z3.string().uuid(),
-  ...targetShape,
-  type: WorkspaceInstructionPolicyActivationType,
-  activationVersion: z3.number().int().positive(),
-  oldRevision: WorkspaceInstructionPolicyRevisionIdentity.nullable(),
-  newRevision: WorkspaceInstructionPolicyRevisionIdentity,
-  actorSubjectId: z3.string().min(1),
-  reason: z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS),
-  createdAt: z3.string().datetime()
-});
-var CreateWorkspaceInstructionPolicyDraftRequest = z3.object({
-  kind: WorkspaceInstructionPolicyKind,
-  scope: WorkspaceInstructionPolicyScope,
-  roleKey: RequestRoleKey.nullable().default(null),
-  content: z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS).refine((value) => value.trim().length > 0, "instruction policy content must not be blank"),
-  provenanceSource: WorkspaceInstructionPolicyDraftProvenanceSource.default("human"),
-  provenanceSourceId: z3.string().min(1).max(WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS).nullable().default(null),
-  supersedesRevisionId: z3.string().uuid().nullable().default(null)
-}).superRefine(validateTarget);
-var ImportLegacyWorkspaceInstructionPolicyDraftRequest = z3.object({
-  supersedesRevisionId: z3.string().uuid().nullable().default(null)
-}).strict();
-var WorkspaceInstructionPolicyListQuery = z3.object({
-  kind: WorkspaceInstructionPolicyKind.optional(),
-  scope: WorkspaceInstructionPolicyScope.optional(),
-  roleKey: RequestRoleKey.nullable().optional(),
-  afterRevision: z3.coerce.number().int().positive().optional(),
-  limit: z3.coerce.number().int().min(1).max(100).default(50)
-});
-var WorkspaceInstructionPolicyListResponse = z3.object({
-  revisions: z3.array(WorkspaceInstructionPolicyRevision),
-  activeHeads: z3.array(WorkspaceInstructionPolicyHead),
-  activationEvents: z3.array(WorkspaceInstructionPolicyActivationEvent),
-  nextAfterRevision: z3.number().int().positive().nullable()
-});
-var WorkspaceInstructionPolicyDiffRequest = z3.object({
-  fromRevisionId: z3.string().uuid(),
-  toRevisionId: z3.string().uuid()
-}).refine((value) => value.fromRevisionId !== value.toRevisionId, {
-  message: "diff revisions must be different",
-  path: ["toRevisionId"]
-});
-var WorkspaceInstructionPolicyDiffResponse = z3.object({
-  from: WorkspaceInstructionPolicyRevision,
-  to: WorkspaceInstructionPolicyRevision,
-  format: z3.literal("unified"),
-  diff: z3.string()
-});
-var ActivateWorkspaceInstructionPolicyRequest = z3.object({
-  expectedCurrentRevisionId: z3.string().uuid().nullable(),
-  reason: z3.string().trim().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS)
-});
-var RollbackWorkspaceInstructionPolicyRequest = z3.object({
-  targetRevisionId: z3.string().uuid(),
-  expectedCurrentRevisionId: z3.string().uuid(),
-  reason: z3.string().trim().min(1).max(WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS)
-});
-var WorkspaceInstructionPolicyActivationResponse = z3.object({
-  head: WorkspaceInstructionPolicyHead,
-  event: WorkspaceInstructionPolicyActivationEvent
-});
-var WorkspaceInstructionPolicyConflictResponse = z3.object({
-  code: z3.literal("WORKSPACE_INSTRUCTION_POLICY_CONFLICT"),
-  message: z3.string(),
-  currentHead: WorkspaceInstructionPolicyHead.nullable()
-});
-
 // src/workspace-state.ts
 import { z as z4 } from "zod";
 var WORKSPACE_STATE_MAX_ACTIVE_POLICY_HEADS = 32;
@@ -3156,7 +3199,7 @@ var CAPABILITY_DESCRIPTORS = {
     supportsRunAs: false
   }
 };
-var ReasoningEffort = z7.enum(["none", "minimal", "low", "medium", "high", "xhigh"]);
+var ReasoningEffort = z7.enum(["none", "minimal", "low", "medium", "high", "xhigh", "max"]);
 var LatencyMode = z7.enum(["standard", "priority", "fast"]);
 var ErrorCode = z7.enum([
   "unauthenticated",
@@ -3684,6 +3727,33 @@ var VOICE_INPUT_ACCEPTED_MIME_TYPES = [
   "audio/m4a"
 ];
 var CodexCompactionMode = z7.enum(["remote_v2", "portable"]);
+var SlackReactionEmojiName = z7.string().trim().min(1).max(64).regex(/^[a-z0-9_+-]+$/, "use the exact Slack emoji name without surrounding colons");
+var WorkspaceSlackReactionChannelPolicy = z7.discriminatedUnion("mode", [
+  z7.object({ mode: z7.literal("bot_member") }).strict(),
+  z7.object({
+    mode: z7.literal("allowlist"),
+    channelIds: z7.array(z7.string().trim().min(1).max(64)).max(100)
+  }).strict()
+]);
+var WorkspaceSlackReactionSummonSettings = z7.object({
+  enabled: z7.boolean(),
+  emoji: SlackReactionEmojiName,
+  channelPolicy: WorkspaceSlackReactionChannelPolicy
+}).strict();
+var SlackReactionChannel = z7.object({
+  id: z7.string().min(1).max(64),
+  name: z7.string().min(1).max(256).nullable(),
+  isPrivate: z7.boolean()
+});
+var SlackReactionChannelListResponse = z7.object({
+  channels: z7.array(SlackReactionChannel).max(200),
+  nextCursor: z7.string().max(1024).nullable()
+});
+var DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS = {
+  enabled: false,
+  emoji: "genie",
+  channelPolicy: { mode: "bot_member" }
+};
 var WorkspaceSettingsSchema = z7.object({
   memoryEnabled: z7.boolean().optional(),
   /** Preferred workspace voice-input toggle. */
@@ -3698,7 +3768,10 @@ var WorkspaceSettingsSchema = z7.object({
   maxNestedAgentDepth: NestedAgentDepthValue.nullable().optional(),
   // Default compaction strategy for NEW Codex sessions created in this
   // workspace. Absent ⇒ remote_v2. Non-Codex sessions always freeze portable.
-  codexCompactionDefault: CodexCompactionMode.optional()
+  codexCompactionDefault: CodexCompactionMode.optional(),
+  // Optional Slack reaction invocation. Absent/invalid fails closed to the
+  // disabled default via resolveWorkspaceSlackReactionSummonSettings.
+  slackReactionSummon: WorkspaceSlackReactionSummonSettings.optional()
 }).passthrough();
 function resolveWorkspaceMemoryEnabled(settings) {
   const parsed = WorkspaceSettingsSchema.safeParse(settings ?? {});
@@ -3716,13 +3789,35 @@ function resolveWorkspaceVoiceInputEnabled(settings) {
   if (parsed.data.transcription) return parsed.data.transcription.enabled;
   return null;
 }
+function resolveWorkspaceSlackReactionSummonSettings(settings) {
+  const parsed = WorkspaceSettingsSchema.safeParse(settings ?? {});
+  const configured = parsed.success ? parsed.data.slackReactionSummon : void 0;
+  if (!configured) {
+    return {
+      enabled: DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS.enabled,
+      emoji: DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS.emoji,
+      channelPolicy: { ...DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS.channelPolicy }
+    };
+  }
+  return configured.channelPolicy.mode === "allowlist" ? {
+    ...configured,
+    channelPolicy: {
+      mode: "allowlist",
+      channelIds: [...new Set(configured.channelPolicy.channelIds)]
+    }
+  } : { ...configured, channelPolicy: { mode: "bot_member" } };
+}
+function workspaceSlackReactionChannelAllowed(settings, channelId) {
+  return settings.channelPolicy.mode === "bot_member" || settings.channelPolicy.channelIds.includes(channelId);
+}
 var UpdateWorkspaceSettingsRequest = z7.object({
   memoryEnabled: z7.boolean().optional(),
   voiceInput: WorkspaceVoiceInputSettings.optional(),
   /** @deprecated Prefer `voiceInput`. Kept for one compatibility release. */
   transcription: WorkspaceTranscriptionPolicy.optional(),
   maxNestedAgentDepth: NestedAgentDepthValue.nullable().optional(),
-  codexCompactionDefault: CodexCompactionMode.optional()
+  codexCompactionDefault: CodexCompactionMode.optional(),
+  slackReactionSummon: WorkspaceSlackReactionSummonSettings.optional()
 }).passthrough();
 var SetWorkspaceDefaultRigRequest = z7.object({
   rigId: z7.string().uuid().nullable()
@@ -5042,7 +5137,7 @@ function mergeResourceRefs(existing, additions, options = {}) {
 }
 function reasoningEffortForMetadata(metadata, fallback) {
   const value = metadata.reasoningEffort;
-  return value === "none" || value === "minimal" || value === "low" || value === "medium" || value === "high" || value === "xhigh" ? value : fallback;
+  return value === "none" || value === "minimal" || value === "low" || value === "medium" || value === "high" || value === "xhigh" || value === "max" ? value : fallback;
 }
 function latencyModeForMetadata(metadata, fallback = "standard") {
   const value = metadata.latencyMode;
@@ -5217,6 +5312,191 @@ var SessionAuthorizationSurface = z7.enum([
   "first_party_mcp",
   "toolspace"
 ]);
+var CodexRealtimeWebrtcVersion = z7.literal("v3");
+var CodexRealtimeVoice = z7.enum([
+  "juniper",
+  "maple",
+  "spruce",
+  "ember",
+  "vale",
+  "breeze",
+  "arbor",
+  "sol",
+  "cove"
+]);
+var SessionRealtimeOwnerProof = z7.object({
+  browserInstanceId: z7.string().min(1).max(256),
+  ownerKey: z7.string().min(32).max(1024)
+});
+var CodexRealtimeWebrtcRequest = SessionRealtimeOwnerProof.extend({
+  realtimeId: z7.string().uuid(),
+  operationId: z7.string().uuid(),
+  expectedVersion: z7.number().int().positive(),
+  expectedConnectionEpoch: z7.number().int().positive(),
+  rotate: z7.boolean(),
+  browserActivation: z7.literal("required").optional(),
+  sdp: z7.string().min(1).max(1024 * 1024),
+  version: CodexRealtimeWebrtcVersion,
+  instructions: z7.string().max(32768).optional(),
+  voice: CodexRealtimeVoice.optional()
+}).strict();
+var CodexRealtimeWebrtcResponse = z7.object({
+  sdp: z7.string().min(1).max(1024 * 1024),
+  version: CodexRealtimeWebrtcVersion,
+  model: z7.literal("gpt-live-1-boulder-alpha"),
+  connectionId: z7.string().uuid(),
+  connectionEpoch: z7.number().int().positive(),
+  startupFenceSequence: z7.number().int().nonnegative(),
+  modeVersion: z7.number().int().positive(),
+  replay: z7.boolean()
+}).strict();
+var GatewayRealtimeConnectRequest = SessionRealtimeOwnerProof.extend({
+  realtimeId: z7.string().uuid(),
+  operationId: z7.string().uuid(),
+  expectedVersion: z7.number().int().positive(),
+  expectedConnectionEpoch: z7.number().int().positive(),
+  rotate: z7.boolean()
+}).strict();
+var GatewayRealtimeInitialItem = z7.object({
+  role: z7.enum(["user", "developer", "assistant"]),
+  text: z7.string().min(1).max(131072)
+});
+var GatewayRealtimeConnectResponse = z7.object({
+  token: z7.string().min(1).max(16384),
+  url: z7.string().url(),
+  upstreamModelId: z7.string().min(1).max(256),
+  expiresAt: z7.number().int().positive().nullable(),
+  connectionId: z7.string().uuid(),
+  connectionEpoch: z7.number().int().positive(),
+  startupFenceSequence: z7.number().int().nonnegative(),
+  modeVersion: z7.number().int().positive(),
+  initialItems: z7.array(GatewayRealtimeInitialItem).max(128),
+  instructions: z7.string().min(1).max(32768),
+  replay: z7.literal(false)
+}).strict();
+var ActivateCodexRealtimeConnectionRequest = SessionRealtimeOwnerProof.extend({
+  operationId: z7.string().uuid(),
+  connectionEpoch: z7.number().int().positive(),
+  expectedVersion: z7.number().int().positive(),
+  expectedConnectionEpoch: z7.number().int().positive()
+}).strict();
+var SessionRealtimeLedgerDirection = z7.enum(["provider_in", "provider_out"]);
+var SessionRealtimeLedgerKind = z7.enum([
+  "user_transcript",
+  "assistant_transcript",
+  "delegation_call",
+  "delegation_progress",
+  "delegation_result",
+  "interruption",
+  "session_update",
+  "error"
+]);
+var SessionRealtimeLedgerEntry = z7.object({
+  id: z7.string().uuid(),
+  realtimeId: z7.string().uuid(),
+  operationId: z7.string().uuid(),
+  connectionEpoch: z7.number().int().positive(),
+  sequence: z7.number().int().positive(),
+  direction: SessionRealtimeLedgerDirection,
+  kind: SessionRealtimeLedgerKind,
+  role: z7.enum(["user", "assistant"]).nullable(),
+  providerEventId: z7.string().nullable(),
+  delegationItemId: z7.string().nullable(),
+  sourceUpdateId: z7.string().uuid().nullable(),
+  historyItemId: z7.string().uuid().nullable(),
+  turnId: z7.string().uuid().nullable(),
+  text: z7.string().nullable(),
+  payload: z7.record(z7.string(), z7.unknown()),
+  clientAckedAt: z7.string().datetime().nullable(),
+  providerAckedAt: z7.string().datetime().nullable(),
+  createdAt: z7.string().datetime(),
+  updatedAt: z7.string().datetime()
+}).strict();
+var SessionRealtimeInboundEntry = z7.object({
+  operationId: z7.string().uuid(),
+  kind: z7.enum([
+    "user_transcript",
+    "assistant_transcript",
+    "delegation_call",
+    "interruption",
+    "error"
+  ]),
+  role: z7.enum(["user", "assistant"]).nullable().optional(),
+  providerEventId: z7.string().max(1024).nullable().optional(),
+  delegationItemId: z7.string().max(1024).nullable().optional(),
+  text: z7.string().max(131072).nullable().optional(),
+  payload: z7.record(z7.string(), z7.unknown()).optional()
+}).strict();
+var SyncSessionRealtimeLedgerRequest = SessionRealtimeOwnerProof.extend({
+  expectedVersion: z7.number().int().positive(),
+  connectionId: z7.string().uuid(),
+  connectionEpoch: z7.number().int().positive(),
+  entries: z7.array(SessionRealtimeInboundEntry).max(64).optional(),
+  clientAckThroughSequence: z7.number().int().nonnegative().nullable().optional(),
+  providerAckSequences: z7.array(z7.number().int().positive()).max(100).optional(),
+  providerStarted: z7.object({
+    providerSessionId: z7.string().min(1).max(1024),
+    providerEventId: z7.string().min(1).max(1024).nullable().optional()
+  }).strict().optional()
+}).strict();
+var SyncSessionRealtimeLedgerResponse = z7.object({
+  accepted: z7.array(
+    z7.object({ entry: SessionRealtimeLedgerEntry, replay: z7.boolean() }).strict()
+  ),
+  outbound: z7.array(SessionRealtimeLedgerEntry)
+}).strict();
+var SessionRealtimeModel = z7.enum([
+  "gpt-live-1-boulder-alpha",
+  "opengeni-gateway/openai/gpt-realtime-2.1",
+  "opengeni-gateway/openai/gpt-realtime-mini",
+  "opengeni-gateway/xai/grok-voice-think-fast-2.0",
+  "workspace-gateway/openai/gpt-realtime-2.1",
+  "workspace-gateway/openai/gpt-realtime-mini",
+  "workspace-gateway/xai/grok-voice-think-fast-2.0"
+]);
+var WorkspaceRealtimeModelCatalogItem = z7.object({
+  id: SessionRealtimeModel,
+  label: z7.string().min(1),
+  provider: z7.enum(["OpenGeni", "Connected Codex", "Your Gateway"]),
+  description: z7.string().min(1),
+  available: z7.boolean(),
+  unavailableReason: z7.string().nullable(),
+  recommended: z7.boolean()
+});
+var WorkspaceRealtimeModelCatalogResponse = z7.object({
+  models: z7.array(WorkspaceRealtimeModelCatalogItem)
+});
+var SessionRealtimeState = z7.enum(["active", "ended"]);
+var SessionRealtimeEndReason = z7.enum(["user_stop", "browser_unload", "lease_expired"]);
+var SessionRealtimeMode = z7.object({
+  id: z7.string().uuid(),
+  sessionId: z7.string().uuid(),
+  operationId: z7.string().uuid(),
+  browserInstanceId: z7.string().min(1).max(256),
+  model: SessionRealtimeModel,
+  state: SessionRealtimeState,
+  version: z7.number().int().positive(),
+  connectionEpoch: z7.number().int().positive(),
+  leaseExpiresAt: z7.string().datetime(),
+  lastHeartbeatAt: z7.string().datetime(),
+  startedAt: z7.string().datetime(),
+  endedAt: z7.string().datetime().nullable(),
+  endReason: SessionRealtimeEndReason.nullable()
+});
+var BeginSessionRealtimeRequest = SessionRealtimeOwnerProof.extend({
+  operationId: z7.string().uuid(),
+  model: SessionRealtimeModel
+});
+var RenewSessionRealtimeRequest = SessionRealtimeOwnerProof.extend({
+  expectedVersion: z7.number().int().positive()
+});
+var EndSessionRealtimeRequest = RenewSessionRealtimeRequest.extend({
+  reason: z7.enum(["user_stop", "browser_unload"])
+});
+var SessionRealtimeMutationResponse = z7.object({
+  mode: SessionRealtimeMode,
+  replay: z7.boolean()
+});
 var SessionAuthorizationOperation = z7.enum([
   "session.read",
   "session.events.read",
@@ -5243,6 +5523,8 @@ var SessionAuthorizationOperation = z7.enum([
   "session.toolspace.call",
   "session.pin.write",
   "session.codex_account.write",
+  "session.realtime.start",
+  "session.realtime.control",
   "session.context.write",
   "session.approval.write",
   "session.human_input.read",
@@ -5474,7 +5756,7 @@ var WorkspaceControlReason = z7.string().min(1).refine((value) => !value.include
   `reason must not exceed ${WORKSPACE_CONTROL_REASON_MAX_BYTES} UTF-8 bytes`
 );
 var SessionControlRequest = z7.object({
-  action: z7.enum(["pause", "resume"]),
+  action: z7.enum(["pause", "resume", "cancel"]),
   reason: WorkspaceControlReason.optional(),
   clientEventId: SessionOperationKey,
   expectedControlEtag: z7.string().min(1).optional()
@@ -5660,7 +5942,7 @@ var SessionSystemUpdatePayload = z7.discriminatedUnion("type", [
   z7.object({
     type: z7.literal("child_terminal_result"),
     childSessionId: z7.string().uuid(),
-    status: z7.enum(["idle", "failed"])
+    status: z7.enum(["idle", "failed", "cancelled"])
   }).passthrough()
 ]);
 var SessionSystemUpdateState = z7.enum([
@@ -6604,6 +6886,10 @@ var Session = z7.object({
   // metadata (exposed like title/goal), never a secret and never a timeline event.
   // null when the session carried none.
   instructions: z7.string().nullable(),
+  // Immutable prompt-policy role binding. This is separate from human
+  // workspace membership roles and from memory selectors. Null keeps the
+  // compatibility fallback to a normalized metadata.role value.
+  policyRole: WorkspaceInstructionPolicyRoleKeyInput.nullable().default(null),
   resources: z7.array(ResourceRef),
   skills: SessionSkills.default([]),
   tools: z7.array(ToolRef),
@@ -6744,6 +7030,8 @@ var SessionEventType = z7.enum([
   // crossing NATS, SSE, REST, or browser boundaries.
   "session.event.envelope_omitted",
   "session.status.changed",
+  "session.realtime.started",
+  "session.realtime.ended",
   "session.requiresAction",
   "session.humanInput.requested",
   "session.context.compaction.requested",
@@ -7830,7 +8118,12 @@ function compactFailure(payload, eventType) {
   const code = compactResultStringField(payload.code);
   const recovery = compactResultStringField(payload.recovery);
   const retryable = typeof payload.retryable === "boolean" ? payload.retryable : null;
-  const value = { error: error.value, code: code.value, retryable, recovery: recovery.value };
+  const value = {
+    error: error.value,
+    code: code.value,
+    retryable,
+    recovery: recovery.value
+  };
   const originalBytes = [error, code, recovery].map((field) => field.originalBytes ?? 0).reduce((sum, bytes) => sum + bytes, 0);
   return {
     value,
@@ -8268,7 +8561,9 @@ var SessionControlResponse = z7.object({
   receipt: SessionCommandReceipt,
   effectiveControl: EffectiveSessionControl,
   interruptionCount: z7.number().int().nonnegative(),
-  wakeCount: z7.number().int().nonnegative()
+  wakeCount: z7.number().int().nonnegative(),
+  cancelledSessionCount: z7.number().int().nonnegative(),
+  cancelledTurnCount: z7.number().int().nonnegative()
 });
 var CreateSessionRequest = withVariableSetIdAlias({
   /**
@@ -8278,7 +8573,11 @@ var CreateSessionRequest = withVariableSetIdAlias({
    * identity or authorization from the UUID.
    */
   requestedSessionId: z7.string().uuid().optional(),
-  initialMessage: z7.string().min(1),
+  initialMessage: z7.string().min(1).optional(),
+  // Creates the durable session shell without fabricating a user message or
+  // starting an underlying agent turn. Realtime can then become the first
+  // interaction and use the ordinary Send/Steer path when it delegates.
+  startMode: z7.literal("realtime").optional(),
   // System-level host context for the initial turn only. Unlike `instructions`,
   // this does not persist into later turns and is never emitted as a user event.
   turnInstructions: z7.string().trim().min(1).max(32768).optional(),
@@ -8291,6 +8590,11 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // matches the codebase's largest free-form string convention (workspace
   // variable set variable values). Absent ⇒ byte-identical to today.
   instructions: z7.string().trim().min(1).max(32768).optional(),
+  // Immutable prompt-policy role binding for matching one activated role
+  // policy. This never derives from or grants a human workspace membership
+  // role. Existing callers may continue to use normalized metadata.role as a
+  // compatibility fallback by omitting this field.
+  policyRole: WorkspaceInstructionPolicyRoleKeyInput.optional(),
   // For an agent-created child, omission inherits the trusted immediate
   // parent's repository/file context. An explicit array, including [], is
   // authoritative. Top-level omission remains []. Presence is resolved from
@@ -8324,10 +8628,10 @@ var CreateSessionRequest = withVariableSetIdAlias({
   variableSetId: z7.string().uuid().optional(),
   environmentId: z7.string().uuid().optional(),
   // The rig to bind this session to (M3). Its ACTIVE version is resolved and
-  // FROZEN onto the session at create. Omitted ⇒ the workspace's default rig
-  // (workspaces.default_rig_id) when set, else a rig-less session (today's
-  // behavior). An id that does not name a rig in the workspace is a 422.
-  rigId: z7.string().uuid().optional(),
+  // FROZEN onto the session at create. Omitted ⇒ inherit the workspace default;
+  // null ⇒ explicitly create a rig-less session; UUID ⇒ bind that exact rig.
+  // An id that does not name a rig in the workspace is a 422.
+  rigId: z7.string().uuid().nullable().optional(),
   goal: GoalSpec.optional(),
   clientEventId: SessionOperationKey.optional(),
   // Workspace-scoped CREATE idempotency key: collapses concurrent/retried
@@ -8382,6 +8686,21 @@ var CreateSessionRequest = withVariableSetIdAlias({
   // request 422s at create (instead of the first turn dying on the SDK's
   // manifest-env guard).
   sandbox: z7.union([z7.literal("shared"), z7.literal("new"), z7.object({ groupId: z7.string().uuid() })]).optional()
+}).superRefine((value, context) => {
+  if (value.startMode !== "realtime" && value.initialMessage === void 0) {
+    context.addIssue({
+      code: z7.ZodIssueCode.custom,
+      path: ["initialMessage"],
+      message: "initialMessage is required unless startMode is realtime"
+    });
+  }
+  if (value.startMode === "realtime" && value.initialMessage !== void 0) {
+    context.addIssue({
+      code: z7.ZodIssueCode.custom,
+      path: ["initialMessage"],
+      message: "initialMessage must be omitted when startMode is realtime"
+    });
+  }
 });
 var HumanInputQuestionKind = z7.enum(["text", "single_select", "multi_select"]);
 var HumanInputOption = z7.object({
@@ -9014,9 +9333,7 @@ var MachineMetricsSeriesResponse = z7.object({
 function defineModelContractSchema(factory) {
   return factory();
 }
-var ModelCapabilitySupportV1 = /* @__PURE__ */ defineModelContractSchema(
-  () => z7.enum(["supported", "unsupported", "unknown"])
-);
+var ModelCapabilitySupportV1 = /* @__PURE__ */ defineModelContractSchema(() => z7.enum(["supported", "unsupported", "unknown"]));
 var ModelCapabilityStateV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z7.object({
     upstream: ModelCapabilitySupportV1,
@@ -9059,9 +9376,18 @@ var ModelCapabilitiesV1 = /* @__PURE__ */ defineModelContractSchema(
 );
 var ModelCredentialSourceV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z7.union([
-    z7.object({ kind: z7.literal("deployment"), mechanism: z7.enum(["api_key", "azure_ad_bearer"]) }).strict(),
-    z7.object({ kind: z7.literal("connected_subscription"), provider: z7.literal("codex") }).strict(),
-    z7.object({ kind: z7.literal("workspace_connection"), mechanism: z7.literal("api_key") }).strict()
+    z7.object({
+      kind: z7.literal("deployment"),
+      mechanism: z7.enum(["api_key", "azure_ad_bearer"])
+    }).strict(),
+    z7.object({
+      kind: z7.literal("connected_subscription"),
+      provider: z7.literal("codex")
+    }).strict(),
+    z7.object({
+      kind: z7.literal("workspace_connection"),
+      mechanism: z7.literal("api_key")
+    }).strict()
   ])
 );
 var ModelBillingAttributionV1 = /* @__PURE__ */ defineModelContractSchema(
@@ -9410,6 +9736,41 @@ export {
   sessionEventMediaPreviewFromDataUrl,
   sessionEventPayloadTruncation,
   boundSessionEventPayload,
+  WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
+  WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS,
+  WorkspaceInstructionPolicyKind,
+  WorkspaceInstructionPolicyScope,
+  WorkspaceInstructionPolicyProvenanceSource,
+  WorkspaceInstructionPolicyDraftProvenanceSource,
+  WorkspaceInstructionPolicyActivationType,
+  WorkspaceInstructionPolicyRoleKey,
+  normalizeWorkspaceInstructionPolicyRoleKey,
+  WorkspaceInstructionPolicyRoleKeyInput,
+  WorkspaceInstructionPolicyRoleSource,
+  WorkspaceInstructionPolicyTarget,
+  WorkspaceInstructionPolicyProvenance,
+  WorkspaceInstructionPolicyRevisionIdentity,
+  WorkspaceInstructionPolicyRevision,
+  WorkspaceInstructionPolicyHead,
+  WorkspaceInstructionPolicySnapshotProvenance,
+  WorkspaceInstructionPolicySnapshotEntry,
+  WorkspaceInstructionPolicySnapshot,
+  ResolvedWorkspaceInstructionPolicySnapshotEntry,
+  ResolvedWorkspaceInstructionPolicySnapshot,
+  WorkspaceInstructionPolicyActivationEvent,
+  CreateWorkspaceInstructionPolicyDraftRequest,
+  ImportLegacyWorkspaceInstructionPolicyDraftRequest,
+  WorkspaceInstructionPolicyListQuery,
+  WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyDiffRequest,
+  WorkspaceInstructionPolicyDiffResponse,
+  ActivateWorkspaceInstructionPolicyRequest,
+  RollbackWorkspaceInstructionPolicyRequest,
+  WorkspaceInstructionPolicyActivationResponse,
+  WorkspaceInstructionPolicyConflictResponse,
   WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES,
   WORKSPACE_ARTIFACT_TITLE_MAX_CHARS,
   WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS,
@@ -9458,33 +9819,6 @@ export {
   createSecretRedactor,
   redactSerializedJson,
   identityRedactor,
-  WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
-  WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
-  WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
-  WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS,
-  WorkspaceInstructionPolicyKind,
-  WorkspaceInstructionPolicyScope,
-  WorkspaceInstructionPolicyProvenanceSource,
-  WorkspaceInstructionPolicyDraftProvenanceSource,
-  WorkspaceInstructionPolicyActivationType,
-  WorkspaceInstructionPolicyRoleKey,
-  normalizeWorkspaceInstructionPolicyRoleKey,
-  WorkspaceInstructionPolicyTarget,
-  WorkspaceInstructionPolicyProvenance,
-  WorkspaceInstructionPolicyRevisionIdentity,
-  WorkspaceInstructionPolicyRevision,
-  WorkspaceInstructionPolicyHead,
-  WorkspaceInstructionPolicyActivationEvent,
-  CreateWorkspaceInstructionPolicyDraftRequest,
-  ImportLegacyWorkspaceInstructionPolicyDraftRequest,
-  WorkspaceInstructionPolicyListQuery,
-  WorkspaceInstructionPolicyListResponse,
-  WorkspaceInstructionPolicyDiffRequest,
-  WorkspaceInstructionPolicyDiffResponse,
-  ActivateWorkspaceInstructionPolicyRequest,
-  RollbackWorkspaceInstructionPolicyRequest,
-  WorkspaceInstructionPolicyActivationResponse,
-  WorkspaceInstructionPolicyConflictResponse,
   WORKSPACE_STATE_MAX_ACTIVE_POLICY_HEADS,
   WORKSPACE_STATE_MAX_BASES,
   WORKSPACE_STATE_MAX_TOPICS,
@@ -9602,10 +9936,18 @@ export {
   VOICE_INPUT_MAX_SIZE_BYTES,
   VOICE_INPUT_ACCEPTED_MIME_TYPES,
   CodexCompactionMode,
+  SlackReactionEmojiName,
+  WorkspaceSlackReactionChannelPolicy,
+  WorkspaceSlackReactionSummonSettings,
+  SlackReactionChannel,
+  SlackReactionChannelListResponse,
+  DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS,
   WorkspaceSettingsSchema,
   resolveWorkspaceMemoryEnabled,
   resolveWorkspaceCodexCompactionDefault,
   resolveWorkspaceVoiceInputEnabled,
+  resolveWorkspaceSlackReactionSummonSettings,
+  workspaceSlackReactionChannelAllowed,
   UpdateWorkspaceSettingsRequest,
   SetWorkspaceDefaultRigRequest,
   UpdateWorkspaceModelPolicyRequest,
@@ -9766,6 +10108,30 @@ export {
   CompactSessionContextResult,
   TurnInitiator,
   SessionAuthorizationSurface,
+  CodexRealtimeWebrtcVersion,
+  CodexRealtimeVoice,
+  CodexRealtimeWebrtcRequest,
+  CodexRealtimeWebrtcResponse,
+  GatewayRealtimeConnectRequest,
+  GatewayRealtimeInitialItem,
+  GatewayRealtimeConnectResponse,
+  ActivateCodexRealtimeConnectionRequest,
+  SessionRealtimeLedgerDirection,
+  SessionRealtimeLedgerKind,
+  SessionRealtimeLedgerEntry,
+  SessionRealtimeInboundEntry,
+  SyncSessionRealtimeLedgerRequest,
+  SyncSessionRealtimeLedgerResponse,
+  SessionRealtimeModel,
+  WorkspaceRealtimeModelCatalogItem,
+  WorkspaceRealtimeModelCatalogResponse,
+  SessionRealtimeState,
+  SessionRealtimeEndReason,
+  SessionRealtimeMode,
+  BeginSessionRealtimeRequest,
+  RenewSessionRealtimeRequest,
+  EndSessionRealtimeRequest,
+  SessionRealtimeMutationResponse,
   SessionAuthorizationOperation,
   SessionAuthorizationActor,
   SessionAuthorizationTarget,
@@ -10094,4 +10460,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-TQC34EGL.js.map
+//# sourceMappingURL=chunk-GMOYIHF3.js.map