@opengeni/contracts 0.38.3 → 0.40.0

package/dist/index.js

@@ -23,6 +23,11 @@ import {
   CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE,
   CODEX_FLEET_POLICY_SCHEMA_VERSION,
   CODEX_FLEET_POLICY_VERSION,
+  COMPUTER_SCREENSHOT_MAX_BYTES,
+  COMPUTER_SCREENSHOT_MAX_DIMENSION,
+  COMPUTER_SCREENSHOT_MAX_PIXELS,
+  COMPUTER_SCREENSHOT_RETENTION_MS,
+  COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES,
   CapabilityCatalogAuthKind,
   CapabilityCatalogItem,
   CapabilityCatalogResponse,
@@ -45,6 +50,7 @@ import {
   ClientAuthConfig,
   ClientConfig,
   ClientModel,
+  ClientResumableVoiceInputConfig,
   ClientSessionEvent,
   ClientVoiceInputConfig,
   CodexCompactionMode,
@@ -81,6 +87,7 @@ import {
   CreateSessionResponse,
   CreateSocialConnectionRequest,
   CreateSocialPostRequest,
+  CreateTranscriptionRecordingRequest,
   CreateVariableSetRequest,
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
@@ -149,12 +156,15 @@ import {
   FileResourceRef,
   FileStatus,
   FileUploadStatus,
+  FinalizeTranscriptionRecordingRequest,
   FirstPartyMcpToolName,
   FsChangeKind,
   FsChangedPayload,
   FsDeleteRequest,
   FsDeleteResponse,
   FsEncoding,
+  FsListBatchRequest,
+  FsListBatchResponse,
   FsListRequest,
   FsListResponse,
   FsMkdirRequest,
@@ -196,6 +206,10 @@ import {
   GitHubRepositoryScope,
   GitLogRequest,
   GitLogResponse,
+  GitReadBatchItemRequest,
+  GitReadBatchItemResponse,
+  GitReadBatchRequest,
+  GitReadBatchResponse,
   GitRepositoryAccess,
   GitShowRequest,
   GitShowResponse,
@@ -254,6 +268,8 @@ import {
   ListEnrollmentsResponse,
   ListWorkspaceMembersResponse,
   MAX_NESTED_AGENT_DEPTH,
+  MCP_MUTATION_RECEIPT_MAX_BYTES,
+  MCP_MUTATION_RECEIPT_VERSION,
   MODEL_ATTACHMENT_REFS_FIELD,
   MachineKind,
   MachineMetricsSeriesResponse,
@@ -263,6 +279,10 @@ import {
   ManagedAccount,
   MarketingDailyAnalysisTaskRequest,
   McpConnectionResourceScope,
+  McpMutationReceipt,
+  McpMutationReceiptIdempotencyStatus,
+  McpMutationReceiptOutcome,
+  McpMutationResource,
   McpPersonalConnectionDelegation,
   McpPersonalConnectionDelegations,
   McpPersonalConnectionSummary,
@@ -356,8 +376,10 @@ import {
   RegisterCapabilityPackRequest,
   RejectPreferenceRegistryProposalRequest,
   RelayTokenPayload,
+  RemoveEnrollmentRequest,
   RenewSessionRealtimeRequest,
   RepositoryResourceRef,
+  RepositoryUriError,
   RequestHumanInputToolInput,
   ResolvedWorkspaceInstructionPolicySnapshot,
   ResolvedWorkspaceInstructionPolicySnapshotEntry,
@@ -510,6 +532,12 @@ import {
   SyncSessionRealtimeLedgerResponse,
   SystemUpdateClassification,
   TERMINAL_STREAM_PORT,
+  TRANSCRIPTION_RECORDING_MAX_CHUNK_SIZE_BYTES,
+  TRANSCRIPTION_RECORDING_MAX_DURATION_SECONDS,
+  TRANSCRIPTION_RECORDING_MAX_SIZE_BYTES,
+  TRANSCRIPTION_RECORDING_PROVIDER_SEGMENT_SECONDS,
+  TRANSCRIPTION_RECORDING_RECOVERY_RETRY_AFTER_MILLISECONDS,
+  TRANSCRIPTION_RECORDING_RETENTION_SECONDS,
   TURN_EXECUTION_POLICY_METADATA_KEY,
   TerminalExecRequest,
   TerminalExecResponse,
@@ -521,6 +549,14 @@ import {
   TranscribeAudioResponse,
   TranscriptionErrorCode,
   TranscriptionEvent,
+  TranscriptionRecording,
+  TranscriptionRecordingChunk,
+  TranscriptionRecordingErrorCode,
+  TranscriptionRecordingListResponse,
+  TranscriptionRecordingResponse,
+  TranscriptionRecordingSegment,
+  TranscriptionRecordingSegmentState,
+  TranscriptionRecordingState,
   TranscriptionResultMetadata,
   TranscriptionSpeaker,
   TranscriptionTimeSpan,
@@ -549,6 +585,7 @@ import {
   UpdateWorkspaceModelPolicyRequest,
   UpdateWorkspaceRequest,
   UpdateWorkspaceSettingsRequest,
+  UploadTranscriptionRecordingChunkResponse,
   UsageEvent,
   UsageEventType,
   UsageLimitsMode,
@@ -556,6 +593,7 @@ import {
   VOICE_INPUT_MAX_DURATION_SECONDS,
   VOICE_INPUT_MAX_SIZE_BYTES,
   VariableSet,
+  VariableSetSecret,
   VariableSetVariableMetadata,
   VariableSetVariableName,
   ViewerHeartbeatRequest,
@@ -699,7 +737,6 @@ import {
   compareCodexFleetCanonicalStringsV1,
   comparePersonalSlackCanonicalConnections,
   createCodexFleetReplayRecordV1,
-  createSecretRedactor,
   decodeNativeSnapshotRef,
   defaultRepositoryMountPath,
   effectiveCodexFleetCacheStateV1,
@@ -707,10 +744,10 @@ import {
   evaluateWorkspaceModelPolicy,
   gitCredentialBindingIdForRepository,
   gitCredentialProviderForRepository,
-  identityRedactor,
+  gitRemoteIdentity,
+  gitRemotePathAliases,
+  gitRemoteUriAliases,
   isClearedRunStateBlob,
-  isCredentialHeaderName,
-  isSensitiveFieldName,
   latencyModeForMetadata,
   measureSessionEventJson,
   mergeResourceRefs,
@@ -718,6 +755,7 @@ import {
   metadataWithTurnExecutionPolicyV1,
   normalizePreferenceRegistryStableKey,
   normalizeRepositorySubpath,
+  normalizeRepositoryTransportUri,
   normalizeResourceMountPath,
   normalizeWorkspaceArtifactSlug,
   normalizeWorkspaceInstructionPolicyRoleKey,
@@ -726,14 +764,11 @@ import {
   readCodexFleetReplayRecordV1,
   readTurnExecutionPolicyV1,
   reasoningEffortForMetadata,
-  redactSensitiveData,
-  redactSensitiveKey,
-  redactSensitiveText,
-  redactSerializedJson,
   renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
+  resolveWorkspaceAgentHumanInputEnabled,
   resolveWorkspaceCodexCompactionDefault,
   resolveWorkspaceMemoryEnabled,
   resolveWorkspaceSlackReactionSummonSettings,
@@ -743,6 +778,7 @@ import {
   resourceMountPathCollisionKey,
   retainedArtifactReferenceFromFile,
   retainedOutputUnavailable,
+  retainedScreenshotReferenceFromFile,
   selectCanonicalPersonalSlackConnection,
   sessionEventJsonBytes,
   sessionEventLatestClassToSemanticClass,
@@ -765,7 +801,7 @@ import {
   verifyStreamToken,
   workspaceControlUtf8Bytes,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-ZNH72ZGW.js";
+} from "./chunk-5HR2GPSC.js";
 import {
   ConnectorDocumentDestination,
   ConnectorDocumentDestinationAuthority,
@@ -814,6 +850,11 @@ export {
   CODEX_FLEET_POLICY_MAX_OVERLAYS_PER_CANDIDATE,
   CODEX_FLEET_POLICY_SCHEMA_VERSION,
   CODEX_FLEET_POLICY_VERSION,
+  COMPUTER_SCREENSHOT_MAX_BYTES,
+  COMPUTER_SCREENSHOT_MAX_DIMENSION,
+  COMPUTER_SCREENSHOT_MAX_PIXELS,
+  COMPUTER_SCREENSHOT_RETENTION_MS,
+  COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES,
   CapabilityCatalogAuthKind,
   CapabilityCatalogItem,
   CapabilityCatalogResponse,
@@ -836,6 +877,7 @@ export {
   ClientAuthConfig,
   ClientConfig,
   ClientModel,
+  ClientResumableVoiceInputConfig,
   ClientSessionEvent,
   ClientVoiceInputConfig,
   CodexCompactionMode,
@@ -875,6 +917,7 @@ export {
   CreateSessionResponse,
   CreateSocialConnectionRequest,
   CreateSocialPostRequest,
+  CreateTranscriptionRecordingRequest,
   CreateVariableSetRequest,
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
@@ -943,12 +986,15 @@ export {
   FileResourceRef,
   FileStatus,
   FileUploadStatus,
+  FinalizeTranscriptionRecordingRequest,
   FirstPartyMcpToolName,
   FsChangeKind,
   FsChangedPayload,
   FsDeleteRequest,
   FsDeleteResponse,
   FsEncoding,
+  FsListBatchRequest,
+  FsListBatchResponse,
   FsListRequest,
   FsListResponse,
   FsMkdirRequest,
@@ -990,6 +1036,10 @@ export {
   GitHubRepositoryScope,
   GitLogRequest,
   GitLogResponse,
+  GitReadBatchItemRequest,
+  GitReadBatchItemResponse,
+  GitReadBatchRequest,
+  GitReadBatchResponse,
   GitRepositoryAccess,
   GitShowRequest,
   GitShowResponse,
@@ -1048,6 +1098,8 @@ export {
   ListEnrollmentsResponse,
   ListWorkspaceMembersResponse,
   MAX_NESTED_AGENT_DEPTH,
+  MCP_MUTATION_RECEIPT_MAX_BYTES,
+  MCP_MUTATION_RECEIPT_VERSION,
   MODEL_ATTACHMENT_REFS_FIELD,
   MachineKind,
   MachineMetricsSeriesResponse,
@@ -1057,6 +1109,10 @@ export {
   ManagedAccount,
   MarketingDailyAnalysisTaskRequest,
   McpConnectionResourceScope,
+  McpMutationReceipt,
+  McpMutationReceiptIdempotencyStatus,
+  McpMutationReceiptOutcome,
+  McpMutationResource,
   McpPersonalConnectionDelegation,
   McpPersonalConnectionDelegations,
   McpPersonalConnectionSummary,
@@ -1157,8 +1213,10 @@ export {
   RegisterCapabilityPackRequest,
   RejectPreferenceRegistryProposalRequest,
   RelayTokenPayload,
+  RemoveEnrollmentRequest,
   RenewSessionRealtimeRequest,
   RepositoryResourceRef,
+  RepositoryUriError,
   RequestHumanInputToolInput,
   ResolvedWorkspaceInstructionPolicySnapshot,
   ResolvedWorkspaceInstructionPolicySnapshotEntry,
@@ -1311,6 +1369,12 @@ export {
   SyncSessionRealtimeLedgerResponse,
   SystemUpdateClassification,
   TERMINAL_STREAM_PORT,
+  TRANSCRIPTION_RECORDING_MAX_CHUNK_SIZE_BYTES,
+  TRANSCRIPTION_RECORDING_MAX_DURATION_SECONDS,
+  TRANSCRIPTION_RECORDING_MAX_SIZE_BYTES,
+  TRANSCRIPTION_RECORDING_PROVIDER_SEGMENT_SECONDS,
+  TRANSCRIPTION_RECORDING_RECOVERY_RETRY_AFTER_MILLISECONDS,
+  TRANSCRIPTION_RECORDING_RETENTION_SECONDS,
   TURN_EXECUTION_POLICY_METADATA_KEY,
   TerminalExecRequest,
   TerminalExecResponse,
@@ -1322,6 +1386,14 @@ export {
   TranscribeAudioResponse,
   TranscriptionErrorCode,
   TranscriptionEvent,
+  TranscriptionRecording,
+  TranscriptionRecordingChunk,
+  TranscriptionRecordingErrorCode,
+  TranscriptionRecordingListResponse,
+  TranscriptionRecordingResponse,
+  TranscriptionRecordingSegment,
+  TranscriptionRecordingSegmentState,
+  TranscriptionRecordingState,
   TranscriptionResultMetadata,
   TranscriptionSpeaker,
   TranscriptionTimeSpan,
@@ -1350,6 +1422,7 @@ export {
   UpdateWorkspaceModelPolicyRequest,
   UpdateWorkspaceRequest,
   UpdateWorkspaceSettingsRequest,
+  UploadTranscriptionRecordingChunkResponse,
   UsageEvent,
   UsageEventType,
   UsageLimitsMode,
@@ -1357,6 +1430,7 @@ export {
   VOICE_INPUT_MAX_DURATION_SECONDS,
   VOICE_INPUT_MAX_SIZE_BYTES,
   VariableSet,
+  VariableSetSecret,
   VariableSetVariableMetadata,
   VariableSetVariableName,
   ViewerHeartbeatRequest,
@@ -1505,7 +1579,6 @@ export {
   connectorDestinationDocumentAuthority,
   connectorDocumentDestinationCollectionId,
   createCodexFleetReplayRecordV1,
-  createSecretRedactor,
   decodeNativeSnapshotRef,
   defaultRepositoryMountPath,
   effectiveCodexFleetCacheStateV1,
@@ -1514,11 +1587,11 @@ export {
   evaluateWorkspaceModelPolicy,
   gitCredentialBindingIdForRepository,
   gitCredentialProviderForRepository,
+  gitRemoteIdentity,
+  gitRemotePathAliases,
+  gitRemoteUriAliases,
   hasOpenGeniSlackReactionScope,
-  identityRedactor,
   isClearedRunStateBlob,
-  isCredentialHeaderName,
-  isSensitiveFieldName,
   latencyModeForMetadata,
   legacyWorkspaceConnectorDocumentDestination,
   measureSessionEventJson,
@@ -1527,6 +1600,7 @@ export {
   metadataWithTurnExecutionPolicyV1,
   normalizePreferenceRegistryStableKey,
   normalizeRepositorySubpath,
+  normalizeRepositoryTransportUri,
   normalizeResourceMountPath,
   normalizeWorkspaceArtifactSlug,
   normalizeWorkspaceInstructionPolicyRoleKey,
@@ -1535,15 +1609,12 @@ export {
   readCodexFleetReplayRecordV1,
   readTurnExecutionPolicyV1,
   reasoningEffortForMetadata,
-  redactSensitiveData,
-  redactSensitiveKey,
-  redactSensitiveText,
-  redactSerializedJson,
   renderSessionSystemUpdateBatch,
   replayCodexFleetDecisionV1,
   resolveConnectorDocumentDestination,
   resolveRetainedOutputRange,
   resolveSessionEventTypeFilters,
+  resolveWorkspaceAgentHumanInputEnabled,
   resolveWorkspaceCodexCompactionDefault,
   resolveWorkspaceMemoryEnabled,
   resolveWorkspaceSlackReactionSummonSettings,
@@ -1553,6 +1624,7 @@ export {
   resourceMountPathCollisionKey,
   retainedArtifactReferenceFromFile,
   retainedOutputUnavailable,
+  retainedScreenshotReferenceFromFile,
   selectCanonicalPersonalSlackConnection,
   sessionEventJsonBytes,
   sessionEventLatestClassToSemanticClass,

package/dist/mcp-receipts.d.ts

@@ -0,0 +1,96 @@
+import { z } from "zod";
+/**
+ * Versioned, provider-neutral receipt returned by first-party MCP mutation tools.
+ *
+ * A receipt intentionally contains only server-generated identity and outcome
+ * facts. Callers already have mutation inputs in their tool-call history, so
+ * copying names, prompts, instructions, commands, evidence, or other request
+ * fields into the result wastes context and can expose data twice.
+ */
+export declare const MCP_MUTATION_RECEIPT_VERSION: "mcp-mutation-receipt.v1";
+export declare const MCP_MUTATION_RECEIPT_MAX_BYTES: number;
+export declare const McpMutationReceiptOutcome: z.ZodEnum<{
+    accepted: "accepted";
+    created: "created";
+    deleted: "deleted";
+    partial_failure: "partial_failure";
+    repaired: "repaired";
+    replayed: "replayed";
+    triggered: "triggered";
+    unchanged: "unchanged";
+    updated: "updated";
+}>;
+export type McpMutationReceiptOutcome = z.infer<typeof McpMutationReceiptOutcome>;
+export declare const McpMutationReceiptIdempotencyStatus: z.ZodEnum<{
+    applied: "applied";
+    not_requested: "not_requested";
+    not_supported: "not_supported";
+    replayed: "replayed";
+    unknown: "unknown";
+}>;
+export type McpMutationReceiptIdempotencyStatus = z.infer<typeof McpMutationReceiptIdempotencyStatus>;
+export declare const McpMutationResource: z.ZodObject<{
+    type: z.ZodString;
+    id: z.ZodString;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+    etag: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type McpMutationResource = z.infer<typeof McpMutationResource>;
+export declare const McpMutationReceipt: z.ZodObject<{
+    receiptVersion: z.ZodLiteral<"mcp-mutation-receipt.v1">;
+    operation: z.ZodString;
+    committed: z.ZodLiteral<true>;
+    outcome: z.ZodEnum<{
+        accepted: "accepted";
+        created: "created";
+        deleted: "deleted";
+        partial_failure: "partial_failure";
+        repaired: "repaired";
+        replayed: "replayed";
+        triggered: "triggered";
+        unchanged: "unchanged";
+        updated: "updated";
+    }>;
+    changed: z.ZodBoolean;
+    resource: z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodString;
+        version: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        etag: z.ZodOptional<z.ZodString>;
+        state: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    relatedResources: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        type: z.ZodString;
+        id: z.ZodString;
+        version: z.ZodOptional<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>;
+        etag: z.ZodOptional<z.ZodString>;
+        state: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    timestamp: z.ZodString;
+    idempotency: z.ZodObject<{
+        status: z.ZodEnum<{
+            applied: "applied";
+            not_requested: "not_requested";
+            not_supported: "not_supported";
+            replayed: "replayed";
+            unknown: "unknown";
+        }>;
+    }, z.core.$strict>;
+    partialFailure: z.ZodOptional<z.ZodObject<{
+        stage: z.ZodString;
+        retryable: z.ZodBoolean;
+    }, z.core.$strict>>;
+    warnings: z.ZodArray<z.ZodString>;
+    nextAction: z.ZodOptional<z.ZodObject<{
+        tool: z.ZodString;
+        arguments: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>;
+    }, z.core.$strict>>;
+    facts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+    id: z.ZodOptional<z.ZodString>;
+    rootSessionId: z.ZodOptional<z.ZodString>;
+    nestedAgentDepth: z.ZodOptional<z.ZodNumber>;
+    effectiveMaxNestedAgentDepth: z.ZodOptional<z.ZodNumber>;
+    updateId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type McpMutationReceipt = z.infer<typeof McpMutationReceipt>;

package/dist/retained-output.d.ts

@@ -5,8 +5,17 @@ export declare const RETAINED_OUTPUT_MAX_PAGE_BYTES: number;
 export declare const RETAINED_OUTPUT_DEFAULT_PAGE_BYTES: number;
 /** Receipts are timeline references, never an extensible metadata bag. */
 export declare const RETAINED_OUTPUT_RECEIPT_MAX_BYTES: number;
+/** Screenshot bytes are accounted separately from the 10k-token text policy. */
+export declare const COMPUTER_SCREENSHOT_MAX_BYTES: number;
+export declare const COMPUTER_SCREENSHOT_MAX_DIMENSION = 16384;
+export declare const COMPUTER_SCREENSHOT_MAX_PIXELS = 67108864;
+/** Canonical ready-object retention window: 30 days from successful settlement. */
+export declare const COMPUTER_SCREENSHOT_RETENTION_MS: number;
+/** Hard workspace reservation across pending + ready screenshot artifacts. */
+export declare const COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES: number;
 export declare const RetainedOutputKind: z.ZodEnum<{
     assistant_completion: "assistant_completion";
+    computer_screenshot: "computer_screenshot";
     event_media: "event_media";
     file: "file";
     internal_update: "internal_update";
@@ -17,9 +26,12 @@ export declare const RetainedOutputUnavailableReason: z.ZodEnum<{
     deleted: "deleted";
     expired: "expired";
     failed: "failed";
+    invalid_content: "invalid_content";
     missing_storage: "missing_storage";
     not_retained: "not_retained";
+    oversized: "oversized";
     pending: "pending";
+    quota_exceeded: "quota_exceeded";
     storage_write_failed: "storage_write_failed";
     unsupported: "unsupported";
 }>;
@@ -29,6 +41,7 @@ export declare const RetainedArtifactReferenceSchema: z.ZodObject<{
     artifactId: z.ZodString;
     kind: z.ZodEnum<{
         assistant_completion: "assistant_completion";
+        computer_screenshot: "computer_screenshot";
         event_media: "event_media";
         file: "file";
         internal_update: "internal_update";
@@ -38,10 +51,17 @@ export declare const RetainedArtifactReferenceSchema: z.ZodObject<{
     originalBytes: z.ZodNumber;
     sha256: z.ZodString;
     retainedAt: z.ZodString;
-    retention: z.ZodObject<{
+    dimensions: z.ZodOptional<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, z.core.$strict>>;
+    retention: z.ZodUnion<readonly [z.ZodObject<{
         policy: z.ZodLiteral<"workspace_file">;
         expiresAt: z.ZodNull;
-    }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        policy: z.ZodLiteral<"session_screenshot">;
+        expiresAt: z.ZodString;
+    }, z.core.$strict>]>;
     retrieval: z.ZodObject<{
         method: z.ZodLiteral<"GET">;
         path: z.ZodString;
@@ -62,9 +82,12 @@ export declare const RetainedOutputEvidenceSchema: z.ZodDiscriminatedUnion<[z.Zo
         deleted: "deleted";
         expired: "expired";
         failed: "failed";
+        invalid_content: "invalid_content";
         missing_storage: "missing_storage";
         not_retained: "not_retained";
+        oversized: "oversized";
         pending: "pending";
+        quota_exceeded: "quota_exceeded";
         storage_write_failed: "storage_write_failed";
         unsupported: "unsupported";
     }>;
@@ -73,6 +96,7 @@ export declare const RetainedOutputEvidenceSchema: z.ZodDiscriminatedUnion<[z.Zo
     artifactId: z.ZodString;
     kind: z.ZodEnum<{
         assistant_completion: "assistant_completion";
+        computer_screenshot: "computer_screenshot";
         event_media: "event_media";
         file: "file";
         internal_update: "internal_update";
@@ -82,10 +106,17 @@ export declare const RetainedOutputEvidenceSchema: z.ZodDiscriminatedUnion<[z.Zo
     originalBytes: z.ZodNumber;
     sha256: z.ZodString;
     retainedAt: z.ZodString;
-    retention: z.ZodObject<{
+    dimensions: z.ZodOptional<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, z.core.$strict>>;
+    retention: z.ZodUnion<readonly [z.ZodObject<{
         policy: z.ZodLiteral<"workspace_file">;
         expiresAt: z.ZodNull;
-    }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        policy: z.ZodLiteral<"session_screenshot">;
+        expiresAt: z.ZodString;
+    }, z.core.$strict>]>;
     retrieval: z.ZodObject<{
         method: z.ZodLiteral<"GET">;
         path: z.ZodString;
@@ -104,9 +135,12 @@ export declare const RetainedArtifactUnavailableSchema: z.ZodObject<{
         deleted: "deleted";
         expired: "expired";
         failed: "failed";
+        invalid_content: "invalid_content";
         missing_storage: "missing_storage";
         not_retained: "not_retained";
+        oversized: "oversized";
         pending: "pending";
+        quota_exceeded: "quota_exceeded";
         storage_write_failed: "storage_write_failed";
         unsupported: "unsupported";
     }>;
@@ -118,6 +152,7 @@ export declare const RetainedArtifactMetadataSchema: z.ZodUnion<readonly [z.ZodO
     artifactId: z.ZodString;
     kind: z.ZodEnum<{
         assistant_completion: "assistant_completion";
+        computer_screenshot: "computer_screenshot";
         event_media: "event_media";
         file: "file";
         internal_update: "internal_update";
@@ -127,10 +162,17 @@ export declare const RetainedArtifactMetadataSchema: z.ZodUnion<readonly [z.ZodO
     originalBytes: z.ZodNumber;
     sha256: z.ZodString;
     retainedAt: z.ZodString;
-    retention: z.ZodObject<{
+    dimensions: z.ZodOptional<z.ZodObject<{
+        width: z.ZodNumber;
+        height: z.ZodNumber;
+    }, z.core.$strict>>;
+    retention: z.ZodUnion<readonly [z.ZodObject<{
         policy: z.ZodLiteral<"workspace_file">;
         expiresAt: z.ZodNull;
-    }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        policy: z.ZodLiteral<"session_screenshot">;
+        expiresAt: z.ZodString;
+    }, z.core.$strict>]>;
     retrieval: z.ZodObject<{
         method: z.ZodLiteral<"GET">;
         path: z.ZodString;
@@ -144,9 +186,12 @@ export declare const RetainedArtifactMetadataSchema: z.ZodUnion<readonly [z.ZodO
         deleted: "deleted";
         expired: "expired";
         failed: "failed";
+        invalid_content: "invalid_content";
         missing_storage: "missing_storage";
         not_retained: "not_retained";
+        oversized: "oversized";
         pending: "pending";
+        quota_exceeded: "quota_exceeded";
         storage_write_failed: "storage_write_failed";
         unsupported: "unsupported";
     }>;
@@ -161,12 +206,20 @@ export type RetainedArtifactFileInput = {
     sha256: string | null;
     updatedAt: string;
 };
+export type RetainedScreenshotArtifactInput = RetainedArtifactFileInput & {
+    sessionId: string;
+    width: number;
+    height: number;
+    expiresAt: string;
+};
 /**
  * Convert a ready, integrity-addressed workspace file into the only available
  * retained-output receipt shape. Invalid, pending, or checksum-less files fail
  * closed instead of implying that full evidence is retrievable.
  */
 export declare function retainedArtifactReferenceFromFile(file: RetainedArtifactFileInput, kind?: RetainedOutputKind): RetainedArtifactReference | null;
+/** Build the closed, session-scoped receipt for one ready screenshot file. */
+export declare function retainedScreenshotReferenceFromFile(file: RetainedScreenshotArtifactInput): RetainedArtifactReference | null;
 /** Parse and clone a trusted server receipt; invalid/untrusted data fails closed. */
 export declare function validateRetainedOutputEvidence(value: unknown): RetainedOutputEvidence | null;
 export declare function retainedOutputUnavailable(reason?: RetainedOutputUnavailableReason): RetainedOutputEvidence;