@opengeni/contracts 0.38.3 → 0.40.0

package/dist/index.d.ts

@@ -3,8 +3,9 @@ import { type SessionEventBoundarySurface } from "./event-preview";
 export * from "./slack-bot-scopes";
 export * from "./connector-destinations";
 export { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifact, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactEvent, WorkspaceArtifactEventType, WorkspaceArtifactHtml, WorkspaceArtifactListQuery, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse, WorkspaceArtifactSlug, WorkspaceArtifactStatus, WorkspaceArtifactVersion, WORKSPACE_ARTIFACT_CURSOR_MAX_CHARS, WORKSPACE_ARTIFACT_DESCRIPTION_MAX_CHARS, WORKSPACE_ARTIFACT_HTML_MAX_UTF8_BYTES, WORKSPACE_ARTIFACT_LIST_DEFAULT, WORKSPACE_ARTIFACT_LIST_MAX, WORKSPACE_ARTIFACT_TITLE_MAX_CHARS, normalizeWorkspaceArtifactSlug, } from "./artifacts";
+export { MCP_MUTATION_RECEIPT_MAX_BYTES, MCP_MUTATION_RECEIPT_VERSION, McpMutationReceipt, McpMutationReceiptIdempotencyStatus, McpMutationReceiptOutcome, McpMutationResource, type McpMutationReceipt as McpMutationReceiptType, type McpMutationReceiptIdempotencyStatus as McpMutationReceiptIdempotencyStatusType, type McpMutationReceiptOutcome as McpMutationReceiptOutcomeType, type McpMutationResource as McpMutationResourceType, } from "./mcp-receipts";
 export { SESSION_EVENT_PAYLOAD_MAX_BYTES, approximateSessionEventTokens, boundSessionEventPayload, measureSessionEventJson, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, type BoundSessionEventPayloadOptions, type SessionEventBoundarySurface, type SessionEventMediaPreview, type SessionEventJsonMeasurement, type SessionEventPayloadTruncation, } from "./event-preview";
-export { RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output";
+export { COMPUTER_SCREENSHOT_MAX_BYTES, COMPUTER_SCREENSHOT_MAX_DIMENSION, COMPUTER_SCREENSHOT_MAX_PIXELS, COMPUTER_SCREENSHOT_RETENTION_MS, COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedScreenshotReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedScreenshotArtifactInput, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output";
 export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, parseWorkspaceArchiveDescriptor, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots";
 export { canonicalModalCheckpointProviderBinding, type ModalCheckpointProviderBinding, } from "./checkpoint-provider-bindings";
 export declare const SessionStatus: z.ZodEnum<{
@@ -228,6 +229,9 @@ export declare const Permission: z.ZodEnum<{
     "rigs:use": "rigs:use";
     "scheduled_tasks:manage": "scheduled_tasks:manage";
     "scheduled_tasks:run": "scheduled_tasks:run";
+    "secrets:list": "secrets:list";
+    "secrets:read": "secrets:read";
+    "secrets:write": "secrets:write";
     "sessions:control": "sessions:control";
     "sessions:create": "sessions:create";
     "sessions:read": "sessions:read";
@@ -236,8 +240,11 @@ export declare const Permission: z.ZodEnum<{
     "stream:view": "stream:view";
     "terminal:attach": "terminal:attach";
     "toolspace:call": "toolspace:call";
+    "variable-sets:list": "variable-sets:list";
     "variable-sets:manage": "variable-sets:manage";
+    "variable-sets:read": "variable-sets:read";
     "variable-sets:use": "variable-sets:use";
+    "variable-sets:write": "variable-sets:write";
     "workspace:admin": "workspace:admin";
     "workspace:create": "workspace:create";
     "workspace:read": "workspace:read";
@@ -260,13 +267,14 @@ export declare const DEFAULT_FIRST_PARTY_MCP_PERMISSIONS: readonly ["workspace:r
  * `files_get_download_url` intentionally is not in this catalog. It belongs to
  * the dedicated `files` MCP server.
  */
-export declare const FIRST_PARTY_MCP_TOOL_NAMES: readonly ["set_session_title", "goal_set", "goal_update", "goal_complete", "goal_pause", "memory_search", "memory_save", "memory_correct", "preference_registry_summary", "preference_registry_get", "sandboxes_list", "sandbox_attach", "sandbox_swap", "run_on", "sandbox_provision", "rig_list", "rig_get", "rig_propose_change", "rig_verify", "rig_promote", "sessions_list", "session_get", "session_events", "session_create", "session_send_message", "session_pause", "session_resume", "session_steer", "set_other_session_title", "variable_set_list", "environment_list", "variable_set_set_variable", "environment_set_variable", "github_connect_link", "github_repositories_list", "social_connections_list", "social_posts_recent", "social_daily_analysis_context", "social_search_live", "social_mentions_live", "social_thread_fetch", "social_posts_sync", "social_post_reply", "scheduled_tasks_list", "scheduled_tasks_get", "scheduled_tasks_create", "scheduled_tasks_update", "scheduled_tasks_pause", "scheduled_tasks_resume", "scheduled_tasks_trigger", "scheduled_tasks_delete", "scheduled_task_runs_list", "slack_bot_list_channels", "slack_bot_channel_history", "slack_bot_thread_replies", "slack_bot_list_users", "slack_bot_list_files", "slack_bot_file_info", "slack_bot_file_content", "slack_bot_post_message", "slack_bot_delete_message", "artifacts_list", "artifacts_get_source", "artifacts_create", "artifacts_publish", "artifacts_rollback"];
+export declare const FIRST_PARTY_MCP_TOOL_NAMES: readonly ["set_session_title", "goal_set", "goal_update", "goal_complete", "goal_pause", "memory_search", "memory_save", "memory_correct", "preference_registry_summary", "preference_registry_get", "sandboxes_list", "sandbox_attach", "sandbox_swap", "run_on", "sandbox_provision", "connected_machine_remove", "rig_list", "rig_get", "rig_propose_change", "rig_verify", "rig_promote", "sessions_list", "session_get", "session_events", "session_create", "session_send_message", "session_pause", "session_resume", "session_steer", "set_other_session_title", "variable_set_list", "environment_list", "variable_set_get_variable", "variable_set_set_variable", "environment_set_variable", "github_connect_link", "github_repositories_list", "social_connections_list", "social_posts_recent", "social_daily_analysis_context", "social_search_live", "social_mentions_live", "social_thread_fetch", "social_posts_sync", "social_post_reply", "scheduled_tasks_list", "scheduled_tasks_get", "scheduled_tasks_create", "scheduled_tasks_update", "scheduled_tasks_pause", "scheduled_tasks_resume", "scheduled_tasks_trigger", "scheduled_tasks_delete", "scheduled_task_runs_list", "slack_bot_list_channels", "slack_bot_channel_history", "slack_bot_thread_replies", "slack_bot_list_users", "slack_bot_list_files", "slack_bot_file_info", "slack_bot_file_content", "slack_bot_post_message", "slack_bot_delete_message", "artifacts_list", "artifacts_get_source", "artifacts_create", "artifacts_publish", "artifacts_rollback"];
 export declare const FirstPartyMcpToolName: z.ZodEnum<{
     artifacts_create: "artifacts_create";
     artifacts_get_source: "artifacts_get_source";
     artifacts_list: "artifacts_list";
     artifacts_publish: "artifacts_publish";
     artifacts_rollback: "artifacts_rollback";
+    connected_machine_remove: "connected_machine_remove";
     environment_list: "environment_list";
     environment_set_variable: "environment_set_variable";
     github_connect_link: "github_connect_link";
@@ -326,6 +334,7 @@ export declare const FirstPartyMcpToolName: z.ZodEnum<{
     social_posts_sync: "social_posts_sync";
     social_search_live: "social_search_live";
     social_thread_fetch: "social_thread_fetch";
+    variable_set_get_variable: "variable_set_get_variable";
     variable_set_list: "variable_set_list";
     variable_set_set_variable: "variable_set_set_variable";
 }>;
@@ -335,7 +344,7 @@ export type FirstPartyMcpToolName = z.infer<typeof FirstPartyMcpToolName>;
  * the non-connector catalog, while an explicit session policy may still select
  * any catalogued connector tool and remains independently permission-gated.
  */
-export declare const DEFAULT_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_list" | "variable_set_set_variable")[];
+export declare const DEFAULT_FIRST_PARTY_MCP_TOOLS: ("artifacts_create" | "artifacts_get_source" | "artifacts_list" | "artifacts_publish" | "artifacts_rollback" | "connected_machine_remove" | "environment_list" | "environment_set_variable" | "github_connect_link" | "github_repositories_list" | "goal_complete" | "goal_pause" | "goal_set" | "goal_update" | "memory_correct" | "memory_save" | "memory_search" | "preference_registry_get" | "preference_registry_summary" | "rig_get" | "rig_list" | "rig_promote" | "rig_propose_change" | "rig_verify" | "run_on" | "sandbox_attach" | "sandbox_provision" | "sandbox_swap" | "sandboxes_list" | "scheduled_task_runs_list" | "scheduled_tasks_create" | "scheduled_tasks_delete" | "scheduled_tasks_get" | "scheduled_tasks_list" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_update" | "session_create" | "session_events" | "session_get" | "session_pause" | "session_resume" | "session_send_message" | "session_steer" | "sessions_list" | "set_other_session_title" | "set_session_title" | "slack_bot_channel_history" | "slack_bot_delete_message" | "slack_bot_file_content" | "slack_bot_file_info" | "slack_bot_list_channels" | "slack_bot_list_files" | "slack_bot_list_users" | "slack_bot_post_message" | "slack_bot_thread_replies" | "social_connections_list" | "social_daily_analysis_context" | "social_mentions_live" | "social_post_reply" | "social_posts_recent" | "social_posts_sync" | "social_search_live" | "social_thread_fetch" | "variable_set_get_variable" | "variable_set_list" | "variable_set_set_variable")[];
 export declare function prefixedMcpToolName(registryId: string, toolName: string): string;
 export declare const ProductAccessMode: z.ZodEnum<{
     configured: "configured";
@@ -685,6 +694,12 @@ export declare const ClientVoiceInputConfig: z.ZodObject<{
     maxDurationSeconds: z.ZodNumber;
     maxSizeBytes: z.ZodNumber;
     acceptedMimeTypes: z.ZodArray<z.ZodString>;
+    resumable: z.ZodOptional<z.ZodObject<{
+        maxDurationSeconds: z.ZodNumber;
+        maxSizeBytes: z.ZodNumber;
+        maxChunkSizeBytes: z.ZodNumber;
+        providerSegmentSeconds: z.ZodNumber;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ClientVoiceInputConfig = z.infer<typeof ClientVoiceInputConfig>;
 /** Response from POST /v1/workspaces/:workspaceId/transcriptions. */
@@ -697,6 +712,7 @@ export type TranscribeAudioResponse = z.infer<typeof TranscribeAudioResponse>;
 export declare const VOICE_INPUT_MAX_DURATION_SECONDS: 60;
 export declare const VOICE_INPUT_MAX_SIZE_BYTES: number;
 export declare const VOICE_INPUT_ACCEPTED_MIME_TYPES: readonly ["audio/webm", "audio/webm;codecs=opus", "audio/mp4", "audio/ogg", "audio/ogg;codecs=opus", "audio/mpeg", "audio/wav", "audio/x-wav", "audio/mp3", "audio/m4a"];
+export * from "./transcription-recordings";
 /** Per-session / workspace Codex compaction strategy. */
 export declare const CodexCompactionMode: z.ZodEnum<{
     portable: "portable";
@@ -807,6 +823,7 @@ export declare const WorkspaceSettingsSchema: z.ZodObject<{
         portable: "portable";
         remote_v2: "remote_v2";
     }>>;
+    agentHumanInputEnabled: z.ZodOptional<z.ZodBoolean>;
     slackReactionSummon: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodBoolean;
         emoji: z.ZodString;
@@ -822,6 +839,8 @@ export type WorkspaceSettings = z.infer<typeof WorkspaceSettingsSchema>;
 export declare function resolveWorkspaceMemoryEnabled(settings: unknown): boolean;
 /** Default Codex compaction mode for new Codex sessions (remote_v2 when unset). */
 export declare function resolveWorkspaceCodexCompactionDefault(settings: unknown): CodexCompactionMode;
+/** Whether agents may request structured human input (enabled when unset). */
+export declare function resolveWorkspaceAgentHumanInputEnabled(settings: unknown): boolean;
 /**
  * Resolve whether voice input is enabled for a workspace.
  *
@@ -895,6 +914,7 @@ export declare const UpdateWorkspaceSettingsRequest: z.ZodObject<{
         portable: "portable";
         remote_v2: "remote_v2";
     }>>;
+    agentHumanInputEnabled: z.ZodOptional<z.ZodBoolean>;
     slackReactionSummon: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodBoolean;
         emoji: z.ZodString;
@@ -991,6 +1011,9 @@ export declare const AccountGrant: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -999,8 +1022,11 @@ export declare const AccountGrant: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1041,6 +1067,9 @@ export declare const AccessGrant: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1049,8 +1078,11 @@ export declare const AccessGrant: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1116,6 +1148,9 @@ export declare const AccessContext: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -1124,8 +1159,11 @@ export declare const AccessContext: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -1165,6 +1203,9 @@ export declare const AccessContext: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -1173,8 +1214,11 @@ export declare const AccessContext: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -1231,6 +1275,9 @@ export declare const DelegatedAccessTokenPayload: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1239,8 +1286,11 @@ export declare const DelegatedAccessTokenPayload: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1263,6 +1313,7 @@ export declare const DelegatedAccessTokenPayload: z.ZodObject<{
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -1322,6 +1373,7 @@ export declare const DelegatedAccessTokenPayload: z.ZodObject<{
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>>;
@@ -1337,6 +1389,7 @@ export declare const EnrollmentBearerPayload: z.ZodObject<{
     workspaceId: z.ZodString;
     agentId: z.ZodString;
     enrollmentId: z.ZodString;
+    credentialGeneration: z.ZodDefault<z.ZodNumber>;
     subjectPrefix: z.ZodString;
     exp: z.ZodNumber;
 }, z.core.$strip>;
@@ -1453,6 +1506,9 @@ export declare const ApiKey: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1461,8 +1517,11 @@ export declare const ApiKey: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1505,6 +1564,9 @@ export declare const CreateApiKeyRequest: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1513,8 +1575,11 @@ export declare const CreateApiKeyRequest: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1557,6 +1622,9 @@ export declare const CreateApiKeyResponse: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -1565,8 +1633,11 @@ export declare const CreateApiKeyResponse: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -1612,6 +1683,9 @@ export declare const WorkspaceMember: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1620,8 +1694,11 @@ export declare const WorkspaceMember: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1662,6 +1739,9 @@ export declare const ListWorkspaceMembersResponse: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -1670,8 +1750,11 @@ export declare const ListWorkspaceMembersResponse: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -1711,6 +1794,9 @@ export declare const AddWorkspaceMemberRequest: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1719,8 +1805,11 @@ export declare const AddWorkspaceMemberRequest: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -1757,6 +1846,9 @@ export declare const UpdateWorkspaceMemberRequest: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -1765,8 +1857,11 @@ export declare const UpdateWorkspaceMemberRequest: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -2364,12 +2459,6 @@ export type RunCredentialAuthNeeded = {
     /** Bounded non-secret guidance. Never place credential material here. */
     message?: string;
 };
-export type RunCredentialRedaction = {
-    /** Bounded diagnostic label used only in the replacement marker. */
-    name: string;
-    /** One atomic secret value that must be removed from streamed/audit output. */
-    value: string;
-};
 export type RunCredentialsRequest = {
     accountId: string;
     workspaceId: string;
@@ -2415,12 +2504,6 @@ export type RunCredentialsResolution = {
     files?: RunCredentialFile[];
     /** Environment name to one returned relative file path. */
     fileEnvironment?: Record<string, string>;
-    /**
-     * Atomic sensitive values embedded inside credential files or derived
-     * material. Environment values are registered automatically; hosts list
-     * additional file-contained values here so chunked output is redacted.
-     */
-    redactions?: RunCredentialRedaction[];
     /** Earliest material expiry. Null/omitted uses a bounded refresh cadence. */
     expiresAt?: string | null;
     /** Partial degradation: usable material may coexist with reconnect notices. */
@@ -2697,6 +2780,27 @@ export declare function gitCredentialProviderForRepository(resource: RepositoryR
  * credential-helper routing cannot diverge on legacy provider ids.
  */
 export declare function gitCredentialBindingIdForRepository(resource: RepositoryResourceRef, provider?: GitCredentialProvider | null): GitCredentialBindingId | null;
+export declare class RepositoryUriError extends Error {
+    constructor(message: string);
+}
+/**
+ * Normalize only the safe, provider-neutral parts of an HTTPS clone URI.
+ *
+ * The provider-defined path is opaque: this helper never adds or removes a
+ * `.git` suffix. Embedded user info, query parameters, and fragments are not
+ * durable resource identity and are omitted, matching the existing secret-free
+ * resource contract.
+ */
+export declare function normalizeRepositoryTransportUri(uri: string): string;
+/**
+ * Return every URI spelling that a provider explicitly declares equivalent.
+ * Exact-path and unqualified providers return only the normalized input URI.
+ */
+export declare function gitRemoteUriAliases(uri: string, provider: GitCredentialProvider | null | undefined): string[];
+/** Stable remote identity for deduplication and credential-binding ownership. */
+export declare function gitRemoteIdentity(uri: string, provider: GitCredentialProvider | null | undefined): string;
+/** Provider-aware Git credential-helper path aliases, without a leading slash. */
+export declare function gitRemotePathAliases(uri: string, provider: GitCredentialProvider | null | undefined): string[];
 export declare const FileResourceRef: z.ZodObject<{
     kind: z.ZodLiteral<"file">;
     fileId: z.ZodString;
@@ -2760,7 +2864,7 @@ export declare function resourceMountPathCollisionKey(path: string): string;
  * GitLab, Azure DevOps, or a custom host do not collide. Encoding the host keeps
  * IPv6/custom-port identities inside one portable path segment.
  */
-export declare function defaultRepositoryMountPath(uri: string): string;
+export declare function defaultRepositoryMountPath(uri: string, provider?: GitCredentialProvider | null): string;
 /** Resolve the exact mount used by API normalization, manifests, and clone hooks. */
 export declare const DEFAULT_FILE_RESOURCE_MOUNT_ROOT: ".opengeni/files";
 export declare function resourceMountPath(resource: ResourceRef): string;
@@ -3840,6 +3944,7 @@ export declare const UpdateSessionToolPolicyRequest: z.ZodUnion<readonly [z.ZodO
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -3899,6 +4004,7 @@ export declare const UpdateSessionToolPolicyRequest: z.ZodUnion<readonly [z.ZodO
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>;
@@ -4452,6 +4558,7 @@ export declare const SessionAuthorizationOperation: z.ZodEnum<{
     "session.read": "session.read";
     "session.realtime.control": "session.realtime.control";
     "session.realtime.start": "session.realtime.start";
+    "session.secret.read": "session.secret.read";
     "session.steer": "session.steer";
     "session.stream.acknowledge": "session.stream.acknowledge";
     "session.stream.read": "session.stream.read";
@@ -4972,6 +5079,9 @@ export declare const NewSessionDraftOptions: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -4980,8 +5090,11 @@ export declare const NewSessionDraftOptions: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -4992,6 +5105,7 @@ export declare const NewSessionDraftOptions: z.ZodObject<{
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -5051,6 +5165,7 @@ export declare const NewSessionDraftOptions: z.ZodObject<{
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>>;
@@ -5159,6 +5274,9 @@ export declare const NewSessionDraft: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -5167,8 +5285,11 @@ export declare const NewSessionDraft: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -5179,6 +5300,7 @@ export declare const NewSessionDraft: z.ZodObject<{
             artifacts_list: "artifacts_list";
             artifacts_publish: "artifacts_publish";
             artifacts_rollback: "artifacts_rollback";
+            connected_machine_remove: "connected_machine_remove";
             environment_list: "environment_list";
             environment_set_variable: "environment_set_variable";
             github_connect_link: "github_connect_link";
@@ -5238,6 +5360,7 @@ export declare const NewSessionDraft: z.ZodObject<{
             social_posts_sync: "social_posts_sync";
             social_search_live: "social_search_live";
             social_thread_fetch: "social_thread_fetch";
+            variable_set_get_variable: "variable_set_get_variable";
             variable_set_list: "variable_set_list";
             variable_set_set_variable: "variable_set_set_variable";
         }>>>;
@@ -5346,6 +5469,9 @@ export declare const SaveNewSessionDraftRequest: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -5354,8 +5480,11 @@ export declare const SaveNewSessionDraftRequest: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -5366,6 +5495,7 @@ export declare const SaveNewSessionDraftRequest: z.ZodObject<{
             artifacts_list: "artifacts_list";
             artifacts_publish: "artifacts_publish";
             artifacts_rollback: "artifacts_rollback";
+            connected_machine_remove: "connected_machine_remove";
             environment_list: "environment_list";
             environment_set_variable: "environment_set_variable";
             github_connect_link: "github_connect_link";
@@ -5425,6 +5555,7 @@ export declare const SaveNewSessionDraftRequest: z.ZodObject<{
             social_posts_sync: "social_posts_sync";
             social_search_live: "social_search_live";
             social_thread_fetch: "social_thread_fetch";
+            variable_set_get_variable: "variable_set_get_variable";
             variable_set_list: "variable_set_list";
             variable_set_set_variable: "variable_set_set_variable";
         }>>>;
@@ -6023,6 +6154,13 @@ export declare const WorkspaceEnvironmentVariableMetadata: z.ZodObject<{
 }, z.core.$strip>;
 /** @deprecated use VariableSetVariableMetadata */
 export type WorkspaceEnvironmentVariableMetadata = VariableSetVariableMetadata;
+export declare const VariableSetSecret: z.ZodObject<{
+    variableSetId: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodNumber;
+    value: z.ZodString;
+}, z.core.$strip>;
+export type VariableSetSecret = z.infer<typeof VariableSetSecret>;
 export declare const VariableSet: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -6301,6 +6439,7 @@ export declare const ScheduledTaskRunStatus: z.ZodEnum<{
 }>;
 export type ScheduledTaskRunStatus = z.infer<typeof ScheduledTaskRunStatus>;
 export declare const ScheduledTaskRunMode: z.ZodEnum<{
+    existing_session: "existing_session";
     new_session_per_run: "new_session_per_run";
     reusable_session: "reusable_session";
 }>;
@@ -6443,6 +6582,7 @@ export declare const ScheduledTask: z.ZodObject<{
     }, z.core.$strip>], "type">;
     temporalScheduleId: z.ZodString;
     runMode: z.ZodEnum<{
+        existing_session: "existing_session";
         new_session_per_run: "new_session_per_run";
         reusable_session: "reusable_session";
     }>;
@@ -6531,6 +6671,7 @@ export declare const ScheduledTask: z.ZodObject<{
         providerDomain: z.ZodString;
     }, z.core.$strict>>>;
     reusableSessionId: z.ZodNullable<z.ZodString>;
+    targetSessionId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     variableSetId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     environmentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     rigId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -6589,6 +6730,7 @@ export declare const CreateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
         }>>>;
     }, z.core.$strip>], "type">;
     runMode: z.ZodDefault<z.ZodEnum<{
+        existing_session: "existing_session";
         new_session_per_run: "new_session_per_run";
         reusable_session: "reusable_session";
     }>>;
@@ -6597,6 +6739,7 @@ export declare const CreateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
         buffer_one: "buffer_one";
         skip: "skip";
     }>>;
+    targetSessionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     agentConfig: z.ZodObject<{
         prompt: z.ZodString;
         resources: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6700,6 +6843,7 @@ export declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
         }>>>;
     }, z.core.$strip>], "type">>;
     runMode: z.ZodOptional<z.ZodEnum<{
+        existing_session: "existing_session";
         new_session_per_run: "new_session_per_run";
         reusable_session: "reusable_session";
     }>>;
@@ -6708,6 +6852,7 @@ export declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
         buffer_one: "buffer_one";
         skip: "skip";
     }>>;
+    targetSessionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     agentConfig: z.ZodOptional<z.ZodObject<{
         prompt: z.ZodString;
         resources: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -6853,6 +6998,7 @@ export declare const CapabilityPackScheduledTaskTemplate: z.ZodObject<{
         }>>>;
     }, z.core.$strip>], "type">;
     defaultRunMode: z.ZodDefault<z.ZodEnum<{
+        existing_session: "existing_session";
         new_session_per_run: "new_session_per_run";
         reusable_session: "reusable_session";
     }>>;
@@ -6986,6 +7132,7 @@ export declare const CapabilityPack: z.ZodPreprocess<z.ZodObject<{
             }>>>;
         }, z.core.$strip>], "type">;
         defaultRunMode: z.ZodDefault<z.ZodEnum<{
+            existing_session: "existing_session";
             new_session_per_run: "new_session_per_run";
             reusable_session: "reusable_session";
         }>>;
@@ -7081,6 +7228,7 @@ export declare const RegisterCapabilityPackRequest: z.ZodPreprocess<z.ZodObject<
             }>>>;
         }, z.core.$strip>], "type">;
         defaultRunMode: z.ZodDefault<z.ZodEnum<{
+            existing_session: "existing_session";
             new_session_per_run: "new_session_per_run";
             reusable_session: "reusable_session";
         }>>;
@@ -7179,6 +7327,7 @@ export declare const WorkspaceRegisteredPack: z.ZodObject<{
                 }>>>;
             }, z.core.$strip>], "type">;
             defaultRunMode: z.ZodDefault<z.ZodEnum<{
+                existing_session: "existing_session";
                 new_session_per_run: "new_session_per_run";
                 reusable_session: "reusable_session";
             }>>;
@@ -7605,6 +7754,7 @@ export declare const MarketingDailyAnalysisTaskRequest: z.ZodObject<{
         paused: "paused";
     }>>;
     runMode: z.ZodDefault<z.ZodEnum<{
+        existing_session: "existing_session";
         new_session_per_run: "new_session_per_run";
         reusable_session: "reusable_session";
     }>>;
@@ -8222,6 +8372,9 @@ export declare const Session: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -8230,8 +8383,11 @@ export declare const Session: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -8242,6 +8398,7 @@ export declare const Session: z.ZodObject<{
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -8301,6 +8458,7 @@ export declare const Session: z.ZodObject<{
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>;
@@ -8632,6 +8790,9 @@ export declare const CreateSessionResponse: z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -8640,8 +8801,11 @@ export declare const CreateSessionResponse: z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -8652,6 +8816,7 @@ export declare const CreateSessionResponse: z.ZodObject<{
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -8711,6 +8876,7 @@ export declare const CreateSessionResponse: z.ZodObject<{
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>;
@@ -9048,6 +9214,9 @@ export declare const SessionListResponse: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -9056,8 +9225,11 @@ export declare const SessionListResponse: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -9068,6 +9240,7 @@ export declare const SessionListResponse: z.ZodObject<{
             artifacts_list: "artifacts_list";
             artifacts_publish: "artifacts_publish";
             artifacts_rollback: "artifacts_rollback";
+            connected_machine_remove: "connected_machine_remove";
             environment_list: "environment_list";
             environment_set_variable: "environment_set_variable";
             github_connect_link: "github_connect_link";
@@ -9127,6 +9300,7 @@ export declare const SessionListResponse: z.ZodObject<{
             social_posts_sync: "social_posts_sync";
             social_search_live: "social_search_live";
             social_thread_fetch: "social_thread_fetch";
+            variable_set_get_variable: "variable_set_get_variable";
             variable_set_list: "variable_set_list";
             variable_set_set_variable: "variable_set_set_variable";
         }>>;
@@ -9453,6 +9627,9 @@ export declare const SessionListResponse: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -9461,8 +9638,11 @@ export declare const SessionListResponse: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -9473,6 +9653,7 @@ export declare const SessionListResponse: z.ZodObject<{
             artifacts_list: "artifacts_list";
             artifacts_publish: "artifacts_publish";
             artifacts_rollback: "artifacts_rollback";
+            connected_machine_remove: "connected_machine_remove";
             environment_list: "environment_list";
             environment_set_variable: "environment_set_variable";
             github_connect_link: "github_connect_link";
@@ -9532,6 +9713,7 @@ export declare const SessionListResponse: z.ZodObject<{
             social_posts_sync: "social_posts_sync";
             social_search_live: "social_search_live";
             social_thread_fetch: "social_thread_fetch";
+            variable_set_get_variable: "variable_set_get_variable";
             variable_set_list: "variable_set_list";
             variable_set_set_variable: "variable_set_set_variable";
         }>>;
@@ -9866,6 +10048,9 @@ export declare const SessionLineageResponse: z.ZodObject<{
             "rigs:use": "rigs:use";
             "scheduled_tasks:manage": "scheduled_tasks:manage";
             "scheduled_tasks:run": "scheduled_tasks:run";
+            "secrets:list": "secrets:list";
+            "secrets:read": "secrets:read";
+            "secrets:write": "secrets:write";
             "sessions:control": "sessions:control";
             "sessions:create": "sessions:create";
             "sessions:read": "sessions:read";
@@ -9874,8 +10059,11 @@ export declare const SessionLineageResponse: z.ZodObject<{
             "stream:view": "stream:view";
             "terminal:attach": "terminal:attach";
             "toolspace:call": "toolspace:call";
+            "variable-sets:list": "variable-sets:list";
             "variable-sets:manage": "variable-sets:manage";
+            "variable-sets:read": "variable-sets:read";
             "variable-sets:use": "variable-sets:use";
+            "variable-sets:write": "variable-sets:write";
             "workspace:admin": "workspace:admin";
             "workspace:create": "workspace:create";
             "workspace:read": "workspace:read";
@@ -9886,6 +10074,7 @@ export declare const SessionLineageResponse: z.ZodObject<{
             artifacts_list: "artifacts_list";
             artifacts_publish: "artifacts_publish";
             artifacts_rollback: "artifacts_rollback";
+            connected_machine_remove: "connected_machine_remove";
             environment_list: "environment_list";
             environment_set_variable: "environment_set_variable";
             github_connect_link: "github_connect_link";
@@ -9945,6 +10134,7 @@ export declare const SessionLineageResponse: z.ZodObject<{
             social_posts_sync: "social_posts_sync";
             social_search_live: "social_search_live";
             social_thread_fetch: "social_thread_fetch";
+            variable_set_get_variable: "variable_set_get_variable";
             variable_set_list: "variable_set_list";
             variable_set_set_variable: "variable_set_set_variable";
         }>>;
@@ -10541,6 +10731,26 @@ export declare const FsListResponse: z.ZodObject<{
     truncated: z.ZodBoolean;
 }, z.core.$strip>;
 export type FsListResponse = z.infer<typeof FsListResponse>;
+/** Several independent directory listings served behind one Channel-A lease.
+ * The response order exactly matches `requests`; callers can paint a root and
+ * hydrate a bounded lazy-tree frontier without repeating provider attach work. */
+export declare const FsListBatchRequest: z.ZodObject<{
+    requests: z.ZodArray<z.ZodObject<{
+        path: z.ZodDefault<z.ZodString>;
+        depth: z.ZodDefault<z.ZodNumber>;
+        maxEntries: z.ZodDefault<z.ZodNumber>;
+        includeHidden: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FsListBatchRequest = z.infer<typeof FsListBatchRequest>;
+export declare const FsListBatchResponse: z.ZodObject<{
+    results: z.ZodArray<z.ZodObject<{
+        root: z.ZodType<FsTreeNode, unknown, z.core.$ZodTypeInternals<FsTreeNode, unknown>>;
+        revision: z.ZodNumber;
+        truncated: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type FsListBatchResponse = z.infer<typeof FsListBatchResponse>;
 export declare const FsEncoding: z.ZodEnum<{
     base64: "base64";
     utf8: "utf8";
@@ -10828,6 +11038,204 @@ export declare const GitDiffResponse: z.ZodObject<{
     revision: z.ZodNumber;
 }, z.core.$strip>;
 export type GitDiffResponse = z.infer<typeof GitDiffResponse>;
+/** One repository read unit: status metadata plus an optional comparison.
+ * Multiple units execute behind one Channel-A lease and preserve input order. */
+export declare const GitReadBatchItemRequest: z.ZodObject<{
+    status: z.ZodObject<{
+        path: z.ZodDefault<z.ZodString>;
+    }, z.core.$strip>;
+    diff: z.ZodOptional<z.ZodObject<{
+        path: z.ZodDefault<z.ZodString>;
+        staged: z.ZodDefault<z.ZodBoolean>;
+        includeUntracked: z.ZodDefault<z.ZodBoolean>;
+        fromRef: z.ZodOptional<z.ZodString>;
+        toRef: z.ZodOptional<z.ZodString>;
+        pathspec: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        contextLines: z.ZodDefault<z.ZodNumber>;
+        maxBytesPerFile: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GitReadBatchItemRequest = z.infer<typeof GitReadBatchItemRequest>;
+export declare const GitReadBatchRequest: z.ZodObject<{
+    requests: z.ZodArray<z.ZodObject<{
+        status: z.ZodObject<{
+            path: z.ZodDefault<z.ZodString>;
+        }, z.core.$strip>;
+        diff: z.ZodOptional<z.ZodObject<{
+            path: z.ZodDefault<z.ZodString>;
+            staged: z.ZodDefault<z.ZodBoolean>;
+            includeUntracked: z.ZodDefault<z.ZodBoolean>;
+            fromRef: z.ZodOptional<z.ZodString>;
+            toRef: z.ZodOptional<z.ZodString>;
+            pathspec: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            contextLines: z.ZodDefault<z.ZodNumber>;
+            maxBytesPerFile: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GitReadBatchRequest = z.infer<typeof GitReadBatchRequest>;
+export declare const GitReadBatchItemResponse: z.ZodObject<{
+    status: z.ZodObject<{
+        isRepo: z.ZodBoolean;
+        head: z.ZodNullable<z.ZodString>;
+        detached: z.ZodDefault<z.ZodBoolean>;
+        upstream: z.ZodNullable<z.ZodString>;
+        ahead: z.ZodDefault<z.ZodNumber>;
+        behind: z.ZodDefault<z.ZodNumber>;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            oldPath: z.ZodNullable<z.ZodString>;
+            index: z.ZodNullable<z.ZodEnum<{
+                added: "added";
+                conflicted: "conflicted";
+                copied: "copied";
+                deleted: "deleted";
+                ignored: "ignored";
+                modified: "modified";
+                renamed: "renamed";
+                typechange: "typechange";
+                untracked: "untracked";
+            }>>;
+            worktree: z.ZodNullable<z.ZodEnum<{
+                added: "added";
+                conflicted: "conflicted";
+                copied: "copied";
+                deleted: "deleted";
+                ignored: "ignored";
+                modified: "modified";
+                renamed: "renamed";
+                typechange: "typechange";
+                untracked: "untracked";
+            }>>;
+            isConflicted: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        revision: z.ZodNumber;
+    }, z.core.$strip>;
+    diff: z.ZodOptional<z.ZodObject<{
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            oldPath: z.ZodNullable<z.ZodString>;
+            status: z.ZodEnum<{
+                added: "added";
+                conflicted: "conflicted";
+                copied: "copied";
+                deleted: "deleted";
+                ignored: "ignored";
+                modified: "modified";
+                renamed: "renamed";
+                typechange: "typechange";
+                untracked: "untracked";
+            }>;
+            isBinary: z.ZodDefault<z.ZodBoolean>;
+            isImage: z.ZodDefault<z.ZodBoolean>;
+            additions: z.ZodNumber;
+            deletions: z.ZodNumber;
+            hunks: z.ZodArray<z.ZodObject<{
+                oldStart: z.ZodNumber;
+                oldLines: z.ZodNumber;
+                newStart: z.ZodNumber;
+                newLines: z.ZodNumber;
+                header: z.ZodString;
+                lines: z.ZodArray<z.ZodObject<{
+                    type: z.ZodEnum<{
+                        add: "add";
+                        context: "context";
+                        del: "del";
+                        meta: "meta";
+                    }>;
+                    oldNo: z.ZodNullable<z.ZodNumber>;
+                    newNo: z.ZodNullable<z.ZodNumber>;
+                    text: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            truncated: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        revision: z.ZodNumber;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GitReadBatchItemResponse = z.infer<typeof GitReadBatchItemResponse>;
+export declare const GitReadBatchResponse: z.ZodObject<{
+    results: z.ZodArray<z.ZodObject<{
+        status: z.ZodObject<{
+            isRepo: z.ZodBoolean;
+            head: z.ZodNullable<z.ZodString>;
+            detached: z.ZodDefault<z.ZodBoolean>;
+            upstream: z.ZodNullable<z.ZodString>;
+            ahead: z.ZodDefault<z.ZodNumber>;
+            behind: z.ZodDefault<z.ZodNumber>;
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                oldPath: z.ZodNullable<z.ZodString>;
+                index: z.ZodNullable<z.ZodEnum<{
+                    added: "added";
+                    conflicted: "conflicted";
+                    copied: "copied";
+                    deleted: "deleted";
+                    ignored: "ignored";
+                    modified: "modified";
+                    renamed: "renamed";
+                    typechange: "typechange";
+                    untracked: "untracked";
+                }>>;
+                worktree: z.ZodNullable<z.ZodEnum<{
+                    added: "added";
+                    conflicted: "conflicted";
+                    copied: "copied";
+                    deleted: "deleted";
+                    ignored: "ignored";
+                    modified: "modified";
+                    renamed: "renamed";
+                    typechange: "typechange";
+                    untracked: "untracked";
+                }>>;
+                isConflicted: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            revision: z.ZodNumber;
+        }, z.core.$strip>;
+        diff: z.ZodOptional<z.ZodObject<{
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                oldPath: z.ZodNullable<z.ZodString>;
+                status: z.ZodEnum<{
+                    added: "added";
+                    conflicted: "conflicted";
+                    copied: "copied";
+                    deleted: "deleted";
+                    ignored: "ignored";
+                    modified: "modified";
+                    renamed: "renamed";
+                    typechange: "typechange";
+                    untracked: "untracked";
+                }>;
+                isBinary: z.ZodDefault<z.ZodBoolean>;
+                isImage: z.ZodDefault<z.ZodBoolean>;
+                additions: z.ZodNumber;
+                deletions: z.ZodNumber;
+                hunks: z.ZodArray<z.ZodObject<{
+                    oldStart: z.ZodNumber;
+                    oldLines: z.ZodNumber;
+                    newStart: z.ZodNumber;
+                    newLines: z.ZodNumber;
+                    header: z.ZodString;
+                    lines: z.ZodArray<z.ZodObject<{
+                        type: z.ZodEnum<{
+                            add: "add";
+                            context: "context";
+                            del: "del";
+                            meta: "meta";
+                        }>;
+                        oldNo: z.ZodNullable<z.ZodNumber>;
+                        newNo: z.ZodNullable<z.ZodNumber>;
+                        text: z.ZodString;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>>;
+                truncated: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            revision: z.ZodNumber;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type GitReadBatchResponse = z.infer<typeof GitReadBatchResponse>;
 export declare const WorkspaceCaptureFile: z.ZodObject<{
     path: z.ZodString;
     status: z.ZodEnum<{
@@ -10922,6 +11330,44 @@ export declare const WorkspaceCaptureRepo: z.ZodObject<{
         }, z.core.$strip>>;
         truncated: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
+    branchDiff: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        oldPath: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            added: "added";
+            conflicted: "conflicted";
+            copied: "copied";
+            deleted: "deleted";
+            ignored: "ignored";
+            modified: "modified";
+            renamed: "renamed";
+            typechange: "typechange";
+            untracked: "untracked";
+        }>;
+        isBinary: z.ZodDefault<z.ZodBoolean>;
+        isImage: z.ZodDefault<z.ZodBoolean>;
+        additions: z.ZodNumber;
+        deletions: z.ZodNumber;
+        hunks: z.ZodArray<z.ZodObject<{
+            oldStart: z.ZodNumber;
+            oldLines: z.ZodNumber;
+            newStart: z.ZodNumber;
+            newLines: z.ZodNumber;
+            header: z.ZodString;
+            lines: z.ZodArray<z.ZodObject<{
+                type: z.ZodEnum<{
+                    add: "add";
+                    context: "context";
+                    del: "del";
+                    meta: "meta";
+                }>;
+                oldNo: z.ZodNullable<z.ZodNumber>;
+                newNo: z.ZodNullable<z.ZodNumber>;
+                text: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        truncated: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type WorkspaceCaptureRepo = z.infer<typeof WorkspaceCaptureRepo>;
 export declare const WorkspaceCaptureDegradedReason: z.ZodEnum<{
@@ -11025,6 +11471,44 @@ export declare const WorkspaceCaptureManifest: z.ZodObject<{
             }, z.core.$strip>>;
             truncated: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
+        branchDiff: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            oldPath: z.ZodNullable<z.ZodString>;
+            status: z.ZodEnum<{
+                added: "added";
+                conflicted: "conflicted";
+                copied: "copied";
+                deleted: "deleted";
+                ignored: "ignored";
+                modified: "modified";
+                renamed: "renamed";
+                typechange: "typechange";
+                untracked: "untracked";
+            }>;
+            isBinary: z.ZodDefault<z.ZodBoolean>;
+            isImage: z.ZodDefault<z.ZodBoolean>;
+            additions: z.ZodNumber;
+            deletions: z.ZodNumber;
+            hunks: z.ZodArray<z.ZodObject<{
+                oldStart: z.ZodNumber;
+                oldLines: z.ZodNumber;
+                newStart: z.ZodNumber;
+                newLines: z.ZodNumber;
+                header: z.ZodString;
+                lines: z.ZodArray<z.ZodObject<{
+                    type: z.ZodEnum<{
+                        add: "add";
+                        context: "context";
+                        del: "del";
+                        meta: "meta";
+                    }>;
+                    oldNo: z.ZodNullable<z.ZodNumber>;
+                    newNo: z.ZodNullable<z.ZodNumber>;
+                    text: z.ZodString;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>;
+            truncated: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>>;
     }, z.core.$strip>>;
     files: z.ZodArray<z.ZodObject<{
         path: z.ZodString;
@@ -11212,6 +11696,44 @@ export declare const GetWorkspaceCaptureResponse: z.ZodDiscriminatedUnion<[z.Zod
                 }, z.core.$strip>>;
                 truncated: z.ZodDefault<z.ZodBoolean>;
             }, z.core.$strip>>;
+            branchDiff: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                oldPath: z.ZodNullable<z.ZodString>;
+                status: z.ZodEnum<{
+                    added: "added";
+                    conflicted: "conflicted";
+                    copied: "copied";
+                    deleted: "deleted";
+                    ignored: "ignored";
+                    modified: "modified";
+                    renamed: "renamed";
+                    typechange: "typechange";
+                    untracked: "untracked";
+                }>;
+                isBinary: z.ZodDefault<z.ZodBoolean>;
+                isImage: z.ZodDefault<z.ZodBoolean>;
+                additions: z.ZodNumber;
+                deletions: z.ZodNumber;
+                hunks: z.ZodArray<z.ZodObject<{
+                    oldStart: z.ZodNumber;
+                    oldLines: z.ZodNumber;
+                    newStart: z.ZodNumber;
+                    newLines: z.ZodNumber;
+                    header: z.ZodString;
+                    lines: z.ZodArray<z.ZodObject<{
+                        type: z.ZodEnum<{
+                            add: "add";
+                            context: "context";
+                            del: "del";
+                            meta: "meta";
+                        }>;
+                        oldNo: z.ZodNullable<z.ZodNumber>;
+                        newNo: z.ZodNullable<z.ZodNumber>;
+                        text: z.ZodString;
+                    }, z.core.$strip>>;
+                }, z.core.$strip>>;
+                truncated: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>>;
         }, z.core.$strip>>;
         files: z.ZodArray<z.ZodObject<{
             path: z.ZodString;
@@ -12447,6 +12969,9 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         "rigs:use": "rigs:use";
         "scheduled_tasks:manage": "scheduled_tasks:manage";
         "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:write": "secrets:write";
         "sessions:control": "sessions:control";
         "sessions:create": "sessions:create";
         "sessions:read": "sessions:read";
@@ -12455,8 +12980,11 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         "stream:view": "stream:view";
         "terminal:attach": "terminal:attach";
         "toolspace:call": "toolspace:call";
+        "variable-sets:list": "variable-sets:list";
         "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
         "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
         "workspace:admin": "workspace:admin";
         "workspace:create": "workspace:create";
         "workspace:read": "workspace:read";
@@ -12467,6 +12995,7 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         artifacts_list: "artifacts_list";
         artifacts_publish: "artifacts_publish";
         artifacts_rollback: "artifacts_rollback";
+        connected_machine_remove: "connected_machine_remove";
         environment_list: "environment_list";
         environment_set_variable: "environment_set_variable";
         github_connect_link: "github_connect_link";
@@ -12526,6 +13055,7 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         social_posts_sync: "social_posts_sync";
         social_search_live: "social_search_live";
         social_thread_fetch: "social_thread_fetch";
+        variable_set_get_variable: "variable_set_get_variable";
         variable_set_list: "variable_set_list";
         variable_set_set_variable: "variable_set_set_variable";
     }>>>;
@@ -13747,8 +14277,32 @@ export declare const ListEnrollmentsResponse: z.ZodObject<{
 export type ListEnrollmentsResponse = z.infer<typeof ListEnrollmentsResponse>;
 export declare const RevokeEnrollmentResponse: z.ZodObject<{
     revoked: z.ZodBoolean;
+    outcome: z.ZodEnum<{
+        already_removed: "already_removed";
+        blocked: "blocked";
+        removed: "removed";
+    }>;
+    enrollmentId: z.ZodString;
+    machineName: z.ZodNullable<z.ZodString>;
+    lastSeenAt: z.ZodNullable<z.ZodString>;
+    revokedAt: z.ZodNullable<z.ZodString>;
+    code: z.ZodNullable<z.ZodEnum<{
+        active_commands: "active_commands";
+        active_lease: "active_lease";
+        active_route: "active_route";
+        not_selfhosted: "not_selfhosted";
+        recovery_pending: "recovery_pending";
+    }>>;
+    message: z.ZodString;
+    action: z.ZodString;
 }, z.core.$strip>;
 export type RevokeEnrollmentResponse = z.infer<typeof RevokeEnrollmentResponse>;
+/** POST /v1/workspaces/:workspaceId/enrollments/:id/revoke body. */
+export declare const RemoveEnrollmentRequest: z.ZodObject<{
+    expectedUpdatedAt: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RemoveEnrollmentRequest = z.infer<typeof RemoveEnrollmentRequest>;
 export declare const DeviceEnrollmentLookupRequest: z.ZodObject<{
     userCode: z.ZodString;
 }, z.core.$strip>;
@@ -15374,6 +15928,12 @@ export declare const ClientConfig: z.ZodObject<{
         maxDurationSeconds: z.ZodNumber;
         maxSizeBytes: z.ZodNumber;
         acceptedMimeTypes: z.ZodArray<z.ZodString>;
+        resumable: z.ZodOptional<z.ZodObject<{
+            maxDurationSeconds: z.ZodNumber;
+            maxSizeBytes: z.ZodNumber;
+            maxChunkSizeBytes: z.ZodNumber;
+            providerSegmentSeconds: z.ZodNumber;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     productAccessMode: z.ZodEnum<{
         configured: "configured";
@@ -15446,7 +16006,6 @@ export declare function evaluateWorkspaceModelPolicy(policy: WorkspaceModelPolic
     modelId: string;
 }): WorkspaceModelPolicyVerdict;
 export * from "./codex-fleet-policy";
-export * from "./secret-redaction";
 export * from "./workspace-instruction-policies";
 export * from "./workspace-state";
 export * from "./preference-registry";