@opengeni/contracts 2.15.2 → 3.0.1-canary.0

package/dist/host-mcp-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/host-mcp-bindings.ts"],"sourcesContent":["import { z } from \"zod\";\nexport { HostMcpCreateSelections, type HostMcpCreateSelection } from \"./index\";\nimport { McpServerConnectionRef, SessionTenancyVisibility } from \"./index\";\nimport {\n  ConnectionUseAuthoritySnapshot,\n  IssueConnectionUseGrantRequest,\n} from \"./connection-authority\";\nimport { ExternalIdentity } from \"./external-identities\";\nexport const HostMcpOwnerSubject = z.union([\n  ExternalIdentity.shape.subjectId,\n  z\n    .string()\n    .max(4096)\n    .regex(/^user:[^\\r\\n\\u0000]+$/),\n]);\n\n/** Credential-free, immutable destination and host connection selection. */\nexport const HostMcpBindingDefinition = z\n  .object({\n    serverId: z.string().min(1).max(256),\n    destinationUrl: z\n      .string()\n      .url()\n      .max(4096)\n      .refine((value) => {\n        const url = new URL(value);\n        return url.protocol === \"https:\" && !url.username && !url.password && !url.hash;\n      }, \"Host binding requires an HTTPS destination without userinfo or fragment\")\n      .transform((value) => new URL(value).toString()),\n    connectionRef: McpServerConnectionRef,\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if (value.connectionRef.hostBinding)\n      context.addIssue({\n        code: \"custom\",\n        path: [\"connectionRef\", \"hostBinding\"],\n        message: \"A binding definition cannot reference another binding\",\n      });\n    if (value.connectionRef.authoritySource !== \"host\" || !value.connectionRef.connectionId)\n      context.addIssue({\n        code: \"custom\",\n        path: [\"connectionRef\"],\n        message: \"Explicit host connection authority is required\",\n      });\n    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65_536)\n      context.addIssue({ code: \"custom\", message: \"Host binding definition exceeds 64 KiB\" });\n  });\nexport type HostMcpBindingDefinition = z.infer<typeof HostMcpBindingDefinition>;\n\nexport const HostMcpBinding = z\n  .object({\n    id: z.string().uuid(),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    ownerSubjectId: HostMcpOwnerSubject,\n    authorizationRevision: z.number().int().positive().safe(),\n    generation: z.number().int().positive().safe(),\n    status: z.enum([\"active\", \"revoked\"]),\n    definition: HostMcpBindingDefinition,\n    createdAt: z.string().datetime({ offset: true }),\n    revokedAt: z.string().datetime({ offset: true }).nullable(),\n  })\n  .strict();\nexport type HostMcpBinding = z.infer<typeof HostMcpBinding>;\n\nexport const CreateHostMcpBindingRequest = z\n  .object({\n    operationId: z.string().uuid(),\n    definition: HostMcpBindingDefinition,\n  })\n  .strict();\nexport type CreateHostMcpBindingRequest = z.infer<typeof CreateHostMcpBindingRequest>;\n\n/** Internal owner-authorized issuance; never itself proves caller identity. */\nconst HostMcpDelegationGrant = IssueConnectionUseGrantRequest.superRefine((value, context) => {\n  if (\n    Boolean(value.sessionId) !== (value.expectedAuthorityEpoch != null) ||\n    (value.expectedAuthorityEpoch != null && !Number.isSafeInteger(value.expectedAuthorityEpoch))\n  ) {\n    context.addIssue({\n      code: \"custom\",\n      message: \"Host session grants require a matching safe authority epoch\",\n    });\n  }\n});\nexport const IssueHostMcpDelegationRequest = z\n  .object({\n    operationId: z.string().uuid(),\n    bindingId: z.string().uuid(),\n    expectedBindingGeneration: z.number().int().positive().safe(),\n    grant: HostMcpDelegationGrant,\n  })\n  .strict();\nexport type IssueHostMcpDelegationRequest = z.infer<typeof IssueHostMcpDelegationRequest>;\n\nexport const HostMcpDelegation = z\n  .object({\n    id: z.string().uuid(),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerAuthorizationRevision: z.number().int().positive().safe(),\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    grant: HostMcpDelegationGrant,\n    generation: z.number().int().positive().safe(),\n    status: z.enum([\"active\", \"revoked\"]),\n    createdAt: z.string().datetime({ offset: true }),\n    revokedAt: z.string().datetime({ offset: true }).nullable(),\n  })\n  .strict();\nexport type HostMcpDelegation = z.infer<typeof HostMcpDelegation>;\n\n/** Internal admission evidence, not a caller-supplied permission or credential.\n * Persistence must construct this from live authenticated authority and freeze\n * it with accepted work. Runtime use must independently revalidate that work,\n * membership, binding and delegation. No API key is retained as execution rights.\n */\nexport const HostMcpAcceptedAuthority = z\n  .object({\n    version: z.literal(1),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    targetSessionId: z.string().uuid(),\n    targetSessionVisibility: SessionTenancyVisibility,\n    targetSessionAuthorityEpoch: z.number().int().positive().safe(),\n    acceptedWork: ConnectionUseAuthoritySnapshot.shape.acceptedWork,\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    definition: HostMcpBindingDefinition,\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerOrganizationMembershipId: z.string().uuid(),\n    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),\n    delegationId: z.string().uuid(),\n    delegationGeneration: z.number().int().positive().safe(),\n    scheduledOrigin: z\n      .object({\n        taskId: z.string().uuid(),\n        taskAuthorityRevision: z.number().int().positive().safe(),\n        runId: z.string().uuid(),\n      })\n      .strict()\n      .optional(),\n    source: z.discriminatedUnion(\"kind\", [\n      z.object({ kind: z.literal(\"direct\") }).strict(),\n      z.object({ kind: z.literal(\"scheduled_task\") }).strict(),\n      z\n        .object({\n          kind: z.literal(\"child_turn\"),\n          sessionId: z.string().uuid(),\n          turnId: z.string().uuid(),\n        })\n        .strict(),\n      z\n        .object({\n          kind: z.literal(\"inherited_turn\"),\n          sessionId: z.string().uuid(),\n          turnId: z.string().uuid(),\n        })\n        .strict(),\n    ]),\n  })\n  .strict()\n  .superRefine((value, context) => {\n    if (\n      (value.source.kind === \"direct\" && value.scheduledOrigin) ||\n      (value.source.kind === \"scheduled_task\" &&\n        (!value.scheduledOrigin ||\n          value.acceptedWork.kind !== \"scheduled_task\" ||\n          value.scheduledOrigin.taskId !== value.acceptedWork.taskId ||\n          value.scheduledOrigin.runId !== value.acceptedWork.runId ||\n          value.scheduledOrigin.taskAuthorityRevision !== value.acceptedWork.taskAuthorityRevision))\n    )\n      context.addIssue({\n        code: \"custom\",\n        message: \"Scheduled host authority must retain its exact run origin\",\n      });\n    if (\n      value.acceptedWork.kind === \"turn\" &&\n      value.source.kind === \"inherited_turn\" &&\n      value.acceptedWork.turnId === value.source.turnId\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"source\"],\n        message: \"Accepted work cannot inherit from itself\",\n      });\n    }\n    if (\n      value.acceptedWork.kind === \"scheduled_task\" &&\n      !Number.isSafeInteger(value.acceptedWork.taskAuthorityRevision)\n    ) {\n      context.addIssue({\n        code: \"custom\",\n        path: [\"acceptedWork\"],\n        message: \"Task authority revision must be a safe integer\",\n      });\n    }\n    if (new TextEncoder().encode(JSON.stringify(value)).byteLength > 65_536) {\n      context.addIssue({ code: \"custom\", message: \"Host accepted authority exceeds 64 KiB\" });\n    }\n  });\nexport type HostMcpAcceptedAuthority = z.infer<typeof HostMcpAcceptedAuthority>;\n\n/** Credential-free selection frozen on one immutable scheduled-task revision. */\nexport const HostMcpTaskAuthority = z\n  .object({\n    version: z.literal(1),\n    accountId: z.string().uuid(),\n    workspaceId: z.string().uuid(),\n    taskId: z.string().uuid(),\n    taskAuthorityRevision: z.number().int().positive().safe(),\n    taskExecutionDigest: z.string().regex(/^[0-9a-f]{64}$/),\n    ownerSubjectId: HostMcpOwnerSubject,\n    ownerOrganizationMembershipId: z.string().uuid(),\n    ownerMembershipAuthorizationRevision: z.number().int().positive().safe(),\n    bindingId: z.string().uuid(),\n    bindingGeneration: z.number().int().positive().safe(),\n    delegationId: z.string().uuid(),\n    delegationGeneration: z.number().int().positive().safe(),\n    definition: HostMcpBindingDefinition,\n    context: SessionTenancyVisibility,\n  })\n  .strict();\nexport type HostMcpTaskAuthority = z.infer<typeof HostMcpTaskAuthority>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAQX,IAAM,sBAAsB,EAAE,MAAM;AAAA,EACzC,iBAAiB,MAAM;AAAA,EACvB,EACG,OAAO,EACP,IAAI,IAAI,EACR,MAAM,uBAAuB;AAClC,CAAC;AAGM,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,gBAAgB,EACb,OAAO,EACP,IAAI,EACJ,IAAI,IAAI,EACR,OAAO,CAAC,UAAU;AACjB,UAAM,MAAM,IAAI,IAAI,KAAK;AACzB,WAAO,IAAI,aAAa,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI;AAAA,EAC7E,GAAG,yEAAyE,EAC3E,UAAU,CAAC,UAAU,IAAI,IAAI,KAAK,EAAE,SAAS,CAAC;AAAA,EACjD,eAAe;AACjB,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MAAI,MAAM,cAAc;AACtB,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,iBAAiB,aAAa;AAAA,MACrC,SAAS;AAAA,IACX,CAAC;AACH,MAAI,MAAM,cAAc,oBAAoB,UAAU,CAAC,MAAM,cAAc;AACzE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,eAAe;AAAA,MACtB,SAAS;AAAA,IACX,CAAC;AACH,MAAI,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,aAAa;AAC/D,YAAQ,SAAS,EAAE,MAAM,UAAU,SAAS,yCAAyC,CAAC;AAC1F,CAAC;AAGI,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,gBAAgB;AAAA,EAChB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACxD,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAAA,EACpC,YAAY;AAAA,EACZ,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAC5D,CAAC,EACA,OAAO;AAGH,IAAM,8BAA8B,EACxC,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,YAAY;AACd,CAAC,EACA,OAAO;AAIV,IAAM,yBAAyB,+BAA+B,YAAY,CAAC,OAAO,YAAY;AAC5F,MACE,QAAQ,MAAM,SAAS,OAAO,MAAM,0BAA0B,SAC7D,MAAM,0BAA0B,QAAQ,CAAC,OAAO,cAAc,MAAM,sBAAsB,GAC3F;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;AACM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,2BAA2B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC5D,OAAO;AACT,CAAC,EACA,OAAO;AAGH,IAAM,oBAAoB,EAC9B,OAAO;AAAA,EACN,IAAI,EAAE,OAAO,EAAE,KAAK;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,gBAAgB;AAAA,EAChB,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7D,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,OAAO;AAAA,EACP,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC7C,QAAQ,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC;AAAA,EACpC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAC/C,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAC5D,CAAC,EACA,OAAO;AAQH,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,iBAAiB,EAAE,OAAO,EAAE,KAAK;AAAA,EACjC,yBAAyB;AAAA,EACzB,6BAA6B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EAC9D,cAAc,+BAA+B,MAAM;AAAA,EACnD,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,+BAA+B,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/C,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvE,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvD,iBAAiB,EACd,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,IACxD,OAAO,EAAE,OAAO,EAAE,KAAK;AAAA,EACzB,CAAC,EACA,OAAO,EACP,SAAS;AAAA,EACZ,QAAQ,EAAE,mBAAmB,QAAQ;AAAA,IACnC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,EAAE,CAAC,EAAE,OAAO;AAAA,IAC/C,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,gBAAgB,EAAE,CAAC,EAAE,OAAO;AAAA,IACvD,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,YAAY;AAAA,MAC5B,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,CAAC,EACA,OAAO;AAAA,IACV,EACG,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,gBAAgB;AAAA,MAChC,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,MAC3B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,IAC1B,CAAC,EACA,OAAO;AAAA,EACZ,CAAC;AACH,CAAC,EACA,OAAO,EACP,YAAY,CAAC,OAAO,YAAY;AAC/B,MACG,MAAM,OAAO,SAAS,YAAY,MAAM,mBACxC,MAAM,OAAO,SAAS,qBACpB,CAAC,MAAM,mBACN,MAAM,aAAa,SAAS,oBAC5B,MAAM,gBAAgB,WAAW,MAAM,aAAa,UACpD,MAAM,gBAAgB,UAAU,MAAM,aAAa,SACnD,MAAM,gBAAgB,0BAA0B,MAAM,aAAa;AAEvE,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,SAAS;AAAA,IACX,CAAC;AACH,MACE,MAAM,aAAa,SAAS,UAC5B,MAAM,OAAO,SAAS,oBACtB,MAAM,aAAa,WAAW,MAAM,OAAO,QAC3C;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,QAAQ;AAAA,MACf,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MACE,MAAM,aAAa,SAAS,oBAC5B,CAAC,OAAO,cAAc,MAAM,aAAa,qBAAqB,GAC9D;AACA,YAAQ,SAAS;AAAA,MACf,MAAM;AAAA,MACN,MAAM,CAAC,cAAc;AAAA,MACrB,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACA,MAAI,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,KAAK,CAAC,EAAE,aAAa,OAAQ;AACvE,YAAQ,SAAS,EAAE,MAAM,UAAU,SAAS,yCAAyC,CAAC;AAAA,EACxF;AACF,CAAC;AAII,IAAM,uBAAuB,EACjC,OAAO;AAAA,EACN,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,aAAa,EAAE,OAAO,EAAE,KAAK;AAAA,EAC7B,QAAQ,EAAE,OAAO,EAAE,KAAK;AAAA,EACxB,uBAAuB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACxD,qBAAqB,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAAA,EACtD,gBAAgB;AAAA,EAChB,+BAA+B,EAAE,OAAO,EAAE,KAAK;AAAA,EAC/C,sCAAsC,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvE,WAAW,EAAE,OAAO,EAAE,KAAK;AAAA,EAC3B,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,KAAK;AAAA,EAC9B,sBAAsB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK;AAAA,EACvD,YAAY;AAAA,EACZ,SAAS;AACX,CAAC,EACA,OAAO;","names":[]}

package/dist/index.d.ts

@@ -3,6 +3,12 @@ export * from "./bundled-skills.js";
 export * from "./model-connection-access.js";
 export * from "./sandbox-provider-command.js";
 import { z } from "zod";
+export declare const HostMcpCreateSelections: z.ZodArray<z.ZodObject<{
+    serverId: z.ZodString;
+    delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    generation: z.ZodNumber;
+}, z.core.$strict>>;
+export type HostMcpCreateSelection = z.input<typeof HostMcpCreateSelections>[number];
 export { siteSessionPath, SiteSessionPathError } from "./site-session-http.js";
 import { type SessionEventBoundarySurface } from "./event-preview.js";
 export * from "./slack-bot-scopes.js";
@@ -31,7 +37,7 @@ export { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest,
 export { MCP_MUTATION_RECEIPT_MAX_BYTES, MCP_MUTATION_RECEIPT_VERSION, McpMutationReceipt, McpMutationReceiptIdempotencyStatus, McpMutationReceiptOutcome, McpMutationResource, type McpMutationReceipt as McpMutationReceiptType, type McpMutationReceiptIdempotencyStatus as McpMutationReceiptIdempotencyStatusType, type McpMutationReceiptOutcome as McpMutationReceiptOutcomeType, type McpMutationResource as McpMutationResourceType, } from "./mcp-receipts.js";
 export { SESSION_EVENT_PAYLOAD_MAX_BYTES, approximateSessionEventTokens, boundSessionEventPayload, measureSessionEventJson, sessionEventJsonBytes, sessionEventMediaPreview, sessionEventMediaPreviewFromDataUrl, sessionEventPayloadTruncation, type BoundSessionEventPayloadOptions, type SessionEventBoundarySurface, type SessionEventMediaPreview, type SessionEventJsonMeasurement, type SessionEventPayloadTruncation, } from "./event-preview.js";
 export { COMPUTER_SCREENSHOT_MAX_BYTES, COMPUTER_SCREENSHOT_MAX_DIMENSION, COMPUTER_SCREENSHOT_MAX_PIXELS, COMPUTER_SCREENSHOT_RETENTION_MS, COMPUTER_SCREENSHOT_WORKSPACE_QUOTA_BYTES, GENERATED_IMAGE_MAX_BYTES, GENERATED_VIDEO_MAX_BYTES, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, RETAINED_OUTPUT_RECEIPT_MAX_BYTES, RetainedArtifactMetadataSchema, RetainedArtifactReferenceSchema, RetainedArtifactUnavailableSchema, RetainedOutputEvidenceSchema, RetainedOutputKind, RetainedOutputUnavailableReason, retainedArtifactReferenceFromFile, retainedGeneratedImageReferenceFromFile, retainedGeneratedVideoReferenceFromFile, retainedScreenshotReferenceFromFile, retainedOutputUnavailable, resolveRetainedOutputRange, validateRetainedOutputEvidence, type RetainedArtifactFileInput, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedGeneratedImageArtifactInput, type RetainedGeneratedVideoArtifactInput, type RetainedScreenshotArtifactInput, type RetainedArtifactUnavailable, type RetainedOutputAvailableEvidence, type RetainedOutputEvidence, type RetainedOutputRangeResolution, type RetainedOutputResolvedRange, } from "./retained-output.js";
-export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
+export { NATIVE_SNAPSHOT_PREFIXES, WORKSPACE_ARCHIVE_DESCRIPTOR_VERSION, WORKSPACE_ARCHIVE_OBJECT_REF_SCHEMA, backendForNativeSnapshotProvider, decodeNativeSnapshotRef, encodeNativeSnapshotRef, omitInlineWorkspaceArchiveWhenObjectRefPresent, parseWorkspaceArchiveDescriptor, parseWorkspaceArchiveObjectKey, parseWorkspaceArchiveObjectRef, validateWorkspaceArchiveObjectRef, workspaceArchiveObjectKey, workspaceArchivePayloadPresent, type NativeSnapshotDescriptor, type NativeSnapshotProvider, type NativeSnapshotRef, type TarWorkspaceArchiveDescriptor, type WorkspaceArchiveDescriptor, type WorkspaceArchiveObjectRef, type WorkspaceArchiveObjectKey, type WorkspaceTreeFingerprint, } from "./sandbox-snapshots.js";
 export { canonicalModalCheckpointProviderBinding, type ModalCheckpointProviderBinding, } from "./checkpoint-provider-bindings.js";
 export declare const SandboxBackend: z.ZodEnum<{
     blaxel: "blaxel";
@@ -5007,6 +5013,10 @@ export type McpConnectionResourceScope = z.infer<typeof McpConnectionResourceSco
 export declare const McpServerConnectionRef: z.ZodObject<{
     connectionId: z.ZodOptional<z.ZodString>;
     authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+    hostBinding: z.ZodOptional<z.ZodObject<{
+        bindingId: z.ZodString;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>;
     provider: z.ZodOptional<z.ZodString>;
     providerDomain: z.ZodString;
     kind: z.ZodOptional<z.ZodEnum<{
@@ -5303,7 +5313,30 @@ export type McpCredentialResolution = {
     selectedResources?: McpConnectionResourceScope[];
     authorizationUrl?: string;
 };
+/** Non-turn authority captured by the authenticated API gateway, never by caller JSON. */
+export type McpGatewayCredentialAuthority = {
+    kind: "external_user" | "organization_service";
+    subjectId: string;
+    permissions: AccessGrant["permissions"];
+};
+export type McpGatewayCredentialsRequest = Pick<McpCredentialsRequest, "accountId" | "workspaceId" | "destinationUrl" | "credentialTarget" | "serverId" | "toolName" | "connectionRef" | "forceRefresh"> & {
+    surface: "workspace_gateway";
+    requestId: string;
+    authority: McpGatewayCredentialAuthority;
+};
+export type McpGatewayCredentialResolution = (Omit<Extract<McpCredentialResolution, {
+    status: "ok";
+}>, "sessionId"> & {
+    requestId: string;
+}) | (Omit<Extract<McpCredentialResolution, {
+    status: "auth_needed";
+}>, "sessionId"> & {
+    requestId: string;
+});
 export type ConnectionCredentialsPort = {
+    /** Restrict an optional remote adapter to explicit host refs. Omission keeps
+     * existing in-process host override and legacy-reference behavior. */
+    mcpAuthoritySource?: "host";
     gitCredentials?(input: GitCredentialsRequest): Promise<GitCredentials>;
     sandboxSecrets?(input: SandboxSecretsRequest): Promise<SandboxSecrets>;
     /**
@@ -5319,6 +5352,9 @@ export type ConnectionCredentialsPort = {
      * used by model-visible MCP tools and the exact-attempt Codemode projection.
      */
     mcpCredentials?(input: McpCredentialsRequest): Promise<McpCredentialResolution>;
+    /** Explicit opt-in for authenticated pre-session discovery and invocation.
+     * Does not call the turn-based mcpCredentials fallback or grant durable use. */
+    mcpGatewayCredentials?(input: McpGatewayCredentialsRequest): Promise<McpGatewayCredentialResolution>;
 };
 export type GitHubInstallationSummary = {
     installationId: number;
@@ -6873,6 +6909,10 @@ export declare const SessionMcpServerInput: z.ZodObject<{
     connectionRef: z.ZodOptional<z.ZodObject<{
         connectionId: z.ZodOptional<z.ZodString>;
         authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+        hostBinding: z.ZodOptional<z.ZodObject<{
+            bindingId: z.ZodString;
+            generation: z.ZodNumber;
+        }, z.core.$strict>>;
         provider: z.ZodOptional<z.ZodString>;
         providerDomain: z.ZodString;
         kind: z.ZodOptional<z.ZodEnum<{
@@ -6909,6 +6949,10 @@ export declare const SessionMcpServerMetadata: z.ZodObject<{
     connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
         connectionId: z.ZodOptional<z.ZodString>;
         authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+        hostBinding: z.ZodOptional<z.ZodObject<{
+            bindingId: z.ZodString;
+            generation: z.ZodNumber;
+        }, z.core.$strict>>;
         provider: z.ZodOptional<z.ZodString>;
         providerDomain: z.ZodString;
         kind: z.ZodOptional<z.ZodEnum<{
@@ -6945,6 +6989,10 @@ export declare const UpdateSessionMcpApprovalPolicyResponse: z.ZodObject<{
         connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
             provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
@@ -8220,10 +8268,10 @@ export type SessionAuthorizationDecision = z.infer<typeof SessionAuthorizationDe
 export declare const SESSION_AUTHORIZATION_LIST_SCOPE_MAX_IDS = 10000;
 /**
  * How far a live agent attempt on a session may reach across the workspace,
- * and how far peer attempts may reach into it. `workspace` is the platform
- * default. `user` limits both directions to sessions carrying the same
- * {@link SessionEndUser} label; `session` limits both to the own root tree.
- * The most restrictive side of a caller/target pair wins. Humans and API keys
+ * under ordinary resource authorization. `workspace` is the platform default.
+ * `user` limits outgoing reach to the same canonical {@link SessionScopeSubjectId};
+ * `session` limits it to the own root tree. Target task scope does not restrict
+ * incoming access; private ownership remains enforced. Humans and API keys
  * are unaffected: this is an agent-to-agent fence enforced only in the core
  * session-authorization seam.
  */
@@ -8233,34 +8281,30 @@ export declare const SessionAgentAccess: z.ZodEnum<{
     workspace: "workspace";
 }>;
 export type SessionAgentAccess = z.infer<typeof SessionAgentAccess>;
-export declare const SESSION_END_USER_SOURCE_MAX_CHARS = 200;
-export declare const SESSION_END_USER_ID_MAX_CHARS = 1024;
 /**
- * Opaque end-user label attached to a session by the embedding product. It
- * shares the external-identity shape (`source` + product-owned `id`) so a
- * later join is by pair. It is NOT a subject and grants NO authority: it only
- * scopes `agentAccess: "user"` reach, `memoryScope: "user"` Memory rows, and
- * the session-list `endUserSource`/`endUserId` filter.
+ * Server-derived canonical user for the session's agent-reach boundary.
+ * This is an output/filter value, never caller-supplied creation authority.
+ * Human visibility remains an independent resource authorization check.
  */
-export declare const SessionEndUser: z.ZodObject<{
-    source: z.ZodString;
-    id: z.ZodString;
-}, z.core.$strict>;
-export type SessionEndUser = z.infer<typeof SessionEndUser>;
+export declare const SessionScopeSubjectId: z.ZodString;
+export type SessionScopeSubjectId = z.infer<typeof SessionScopeSubjectId>;
 /**
  * The typed Workspace Memory selector an agent reads and writes. `workspace`
- * is today's shared memory; `user` and `session` are ADDITIVE private layers
+ * is shared memory; `user` adds a private layer
  * (the agent still reads workspace facts and saves to its narrowest scope);
  * `off` registers no Memory tools for the session. `user` requires an
- * end-user label.
+ * authenticated canonical user on the active turn. Use task notes for task-local data.
  */
 export declare const SessionMemoryScope: z.ZodEnum<{
     off: "off";
-    session: "session";
     user: "user";
     workspace: "workspace";
 }>;
 export type SessionMemoryScope = z.infer<typeof SessionMemoryScope>;
+/** Read old persisted selectors without promoting task-local data or authority.
+ * New requests must use SessionMemoryScope directly and reject `session`.
+ * Historical Memory rows remain retained; task notes own new task-local facts. */
+export declare function storedSessionMemoryScope(value: unknown): SessionMemoryScope;
 /**
  * The calling agent attempt's own access scope, resolved by OpenGeni from the
  * caller session row (never from the request) and applied as one SQL
@@ -8273,10 +8317,7 @@ export declare const SessionAgentAccessViewer: z.ZodObject<{
         user: "user";
         workspace: "workspace";
     }>;
-    endUser: z.ZodNullable<z.ZodObject<{
-        source: z.ZodString;
-        id: z.ZodString;
-    }, z.core.$strict>>;
+    scopeSubjectId: z.ZodNullable<z.ZodString>;
 }, z.core.$strict>;
 export type SessionAgentAccessViewer = z.infer<typeof SessionAgentAccessViewer>;
 export declare const SessionAuthorizationListScope: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -8288,10 +8329,7 @@ export declare const SessionAuthorizationListScope: z.ZodDiscriminatedUnion<[z.Z
             user: "user";
             workspace: "workspace";
         }>;
-        endUser: z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>;
+        scopeSubjectId: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>;
 }, z.core.$strip>, z.ZodObject<{
     kind: z.ZodLiteral<"scoped">;
@@ -8304,10 +8342,7 @@ export declare const SessionAuthorizationListScope: z.ZodDiscriminatedUnion<[z.Z
             user: "user";
             workspace: "workspace";
         }>;
-        endUser: z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>;
+        scopeSubjectId: z.ZodNullable<z.ZodString>;
     }, z.core.$strict>>;
 }, z.core.$strip>], "kind">;
 export type SessionAuthorizationListScope = z.infer<typeof SessionAuthorizationListScope>;
@@ -16122,6 +16157,11 @@ export declare const CreateScheduledTaskRequest: z.ZodUnion<readonly [z.ZodPipe<
             resourceVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>;
     }, z.core.$strict>>>;
+    selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>>;
     agentConfig: z.ZodObject<{
         bundledSkillIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.ZodEnum<{
             "builtin:opengeni-documents": "builtin:opengeni-documents";
@@ -16769,6 +16809,11 @@ export declare const UpdateScheduledTaskRequest: z.ZodPreprocess<z.ZodObject<{
             resourceVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>;
     }, z.core.$strict>>>;
+    selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>>;
     agentConfig: z.ZodOptional<z.ZodObject<{
         bundledSkillIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.ZodEnum<{
             "builtin:opengeni-documents": "builtin:opengeni-documents";
@@ -23044,6 +23089,7 @@ export declare const ConnectionOwnership: z.ZodEnum<{
 export type ConnectionOwnership = z.infer<typeof ConnectionOwnership>;
 export declare const SocialConnection: z.ZodObject<{
     id: z.ZodString;
+    version: z.ZodOptional<z.ZodNumber>;
     accountId: z.ZodString;
     workspaceId: z.ZodString;
     provider: z.ZodEnum<{
@@ -23220,6 +23266,7 @@ export declare const FikenInstallRequest: z.ZodObject<{
 }, z.core.$strip>;
 export type FikenInstallRequest = z.infer<typeof FikenInstallRequest>;
 export declare const FikenOAuthStartRequest: z.ZodObject<{
+    returnPath: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type FikenOAuthStartRequest = z.infer<typeof FikenOAuthStartRequest>;
@@ -23478,6 +23525,7 @@ export declare const OAuthStartRequest: z.ZodObject<{
     resource: z.ZodOptional<z.ZodString>;
     requestedScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
     returnPath: z.ZodOptional<z.ZodString>;
+    returnUrl: z.ZodOptional<z.ZodString>;
     connectionId: z.ZodOptional<z.ZodString>;
     ownership: z.ZodOptional<z.ZodEnum<{
         personal: "personal";
@@ -23827,6 +23875,10 @@ export declare const EnableCapabilityRequest: z.ZodObject<{
     connectionRef: z.ZodOptional<z.ZodObject<{
         connectionId: z.ZodOptional<z.ZodString>;
         authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+        hostBinding: z.ZodOptional<z.ZodObject<{
+            bindingId: z.ZodString;
+            generation: z.ZodNumber;
+        }, z.core.$strict>>;
         provider: z.ZodOptional<z.ZodString>;
         providerDomain: z.ZodString;
         kind: z.ZodOptional<z.ZodEnum<{
@@ -25661,13 +25713,9 @@ export declare const Session: z.ZodObject<{
         user: "user";
         workspace: "workspace";
     }>>;
-    endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        source: z.ZodString;
-        id: z.ZodString;
-    }, z.core.$strict>>>;
+    scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     memoryScope: z.ZodDefault<z.ZodEnum<{
         off: "off";
-        session: "session";
         user: "user";
         workspace: "workspace";
     }>>;
@@ -26090,6 +26138,10 @@ export declare const Session: z.ZodObject<{
         connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
             provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
@@ -26299,13 +26351,9 @@ export declare const CreateSessionResponse: z.ZodObject<{
         user: "user";
         workspace: "workspace";
     }>>;
-    endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-        source: z.ZodString;
-        id: z.ZodString;
-    }, z.core.$strict>>>;
+    scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     memoryScope: z.ZodDefault<z.ZodEnum<{
         off: "off";
-        session: "session";
         user: "user";
         workspace: "workspace";
     }>>;
@@ -26728,6 +26776,10 @@ export declare const CreateSessionResponse: z.ZodObject<{
         connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
             provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
@@ -26943,13 +26995,9 @@ export declare const SessionListResponse: z.ZodObject<{
             user: "user";
             workspace: "workspace";
         }>>;
-        endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>>;
+        scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         memoryScope: z.ZodDefault<z.ZodEnum<{
             off: "off";
-            session: "session";
             user: "user";
             workspace: "workspace";
         }>>;
@@ -27372,6 +27420,10 @@ export declare const SessionListResponse: z.ZodObject<{
             connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodOptional<z.ZodString>;
                 authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+                hostBinding: z.ZodOptional<z.ZodObject<{
+                    bindingId: z.ZodString;
+                    generation: z.ZodNumber;
+                }, z.core.$strict>>;
                 provider: z.ZodOptional<z.ZodString>;
                 providerDomain: z.ZodString;
                 kind: z.ZodOptional<z.ZodEnum<{
@@ -27578,13 +27630,9 @@ export declare const SessionListResponse: z.ZodObject<{
             user: "user";
             workspace: "workspace";
         }>>;
-        endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>>;
+        scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         memoryScope: z.ZodDefault<z.ZodEnum<{
             off: "off";
-            session: "session";
             user: "user";
             workspace: "workspace";
         }>>;
@@ -28007,6 +28055,10 @@ export declare const SessionListResponse: z.ZodObject<{
             connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodOptional<z.ZodString>;
                 authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+                hostBinding: z.ZodOptional<z.ZodObject<{
+                    bindingId: z.ZodString;
+                    generation: z.ZodNumber;
+                }, z.core.$strict>>;
                 provider: z.ZodOptional<z.ZodString>;
                 providerDomain: z.ZodString;
                 kind: z.ZodOptional<z.ZodEnum<{
@@ -28169,15 +28221,15 @@ export declare const SessionListResponse: z.ZodObject<{
 }, z.core.$strip>;
 export type SessionListResponse = z.infer<typeof SessionListResponse>;
 /**
- * `GET /v1/organizations/:organizationId/sessions` query. `endUserSource` and
- * `endUserId` must be supplied together; `status` keeps only sessions in that
- * exact lifecycle state.
+ * Organization session queries may filter a canonical scope subject and lifecycle
+ * state. Legacy end-user label filters are rejected.
  */
 export declare const ListOrganizationSessionsQuery: z.ZodObject<{
     limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
     cursor: z.ZodOptional<z.ZodString>;
-    endUserSource: z.ZodOptional<z.ZodString>;
-    endUserId: z.ZodOptional<z.ZodString>;
+    scopeSubjectId: z.ZodOptional<z.ZodString>;
+    endUserSource: z.ZodOptional<z.ZodNever>;
+    endUserId: z.ZodOptional<z.ZodNever>;
     status: z.ZodOptional<z.ZodEnum<{
         cancelled: "cancelled";
         failed: "failed";
@@ -28246,13 +28298,9 @@ export declare const OrganizationSessionListResponse: z.ZodObject<{
             user: "user";
             workspace: "workspace";
         }>>;
-        endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>>;
+        scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         memoryScope: z.ZodDefault<z.ZodEnum<{
             off: "off";
-            session: "session";
             user: "user";
             workspace: "workspace";
         }>>;
@@ -28675,6 +28723,10 @@ export declare const OrganizationSessionListResponse: z.ZodObject<{
             connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodOptional<z.ZodString>;
                 authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+                hostBinding: z.ZodOptional<z.ZodObject<{
+                    bindingId: z.ZodString;
+                    generation: z.ZodNumber;
+                }, z.core.$strict>>;
                 provider: z.ZodOptional<z.ZodString>;
                 providerDomain: z.ZodString;
                 kind: z.ZodOptional<z.ZodEnum<{
@@ -28888,13 +28940,9 @@ export declare const SessionLineageResponse: z.ZodObject<{
             user: "user";
             workspace: "workspace";
         }>>;
-        endUser: z.ZodDefault<z.ZodNullable<z.ZodObject<{
-            source: z.ZodString;
-            id: z.ZodString;
-        }, z.core.$strict>>>;
+        scopeSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         memoryScope: z.ZodDefault<z.ZodEnum<{
             off: "off";
-            session: "session";
             user: "user";
             workspace: "workspace";
         }>>;
@@ -29317,6 +29365,10 @@ export declare const SessionLineageResponse: z.ZodObject<{
             connectionRef: z.ZodDefault<z.ZodNullable<z.ZodObject<{
                 connectionId: z.ZodOptional<z.ZodString>;
                 authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+                hostBinding: z.ZodOptional<z.ZodObject<{
+                    bindingId: z.ZodString;
+                    generation: z.ZodNumber;
+                }, z.core.$strict>>;
                 provider: z.ZodOptional<z.ZodString>;
                 providerDomain: z.ZodString;
                 kind: z.ZodOptional<z.ZodEnum<{
@@ -32258,6 +32310,11 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         "builtin:opengeni-video-generation": "builtin:opengeni-video-generation";
     }>>, z.ZodTransform<("builtin:opengeni-documents" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation")[], ("builtin:opengeni-documents" | "builtin:opengeni-presentations" | "builtin:opengeni-projects" | "builtin:opengeni-sites" | "builtin:opengeni-skills" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-video-generation")[]>>>;
     requestedSessionId: z.ZodOptional<z.ZodString>;
+    selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>>;
     visibility: z.ZodDefault<z.ZodEnum<{
         private: "private";
         workspace: "workspace";
@@ -32267,13 +32324,10 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         user: "user";
         workspace: "workspace";
     }>>;
-    endUser: z.ZodOptional<z.ZodObject<{
-        source: z.ZodString;
-        id: z.ZodString;
-    }, z.core.$strict>>;
+    scopeSubjectId: z.ZodOptional<z.ZodNever>;
+    endUser: z.ZodOptional<z.ZodNever>;
     memoryScope: z.ZodDefault<z.ZodEnum<{
         off: "off";
-        session: "session";
         user: "user";
         workspace: "workspace";
     }>>;
@@ -32648,6 +32702,10 @@ export declare const CreateSessionRequest: z.ZodPreprocess<z.ZodObject<{
         connectionRef: z.ZodOptional<z.ZodObject<{
             connectionId: z.ZodOptional<z.ZodString>;
             authoritySource: z.ZodOptional<z.ZodLiteral<"host">>;
+            hostBinding: z.ZodOptional<z.ZodObject<{
+                bindingId: z.ZodString;
+                generation: z.ZodNumber;
+            }, z.core.$strict>>;
             provider: z.ZodOptional<z.ZodString>;
             providerDomain: z.ZodString;
             kind: z.ZodOptional<z.ZodEnum<{
@@ -32761,6 +32819,11 @@ export declare const HumanInputQuestion: z.ZodObject<{
     }, z.core.$strip>>>;
 }, z.core.$strip>;
 export type HumanInputQuestion = z.infer<typeof HumanInputQuestion>;
+/** Only known presentation wire differences are equivalent. This is not
+ * authorization: response admission still binds the immutable source receipt.
+ * Compare original keys as well as parsed values so unknown fields cannot be
+ * hidden by Zod's ordinary object projection during a pending-card re-freeze. */
+export declare function canonicalSkillReviewQuestion(question: HumanInputQuestion): HumanInputQuestion | null;
 export declare const HumanInputRequestStatus: z.ZodEnum<{
     answered: "answered";
     cancelled: "cancelled";
@@ -33010,6 +33073,11 @@ export declare const SessionUserMessagePayload: z.ZodObject<{
             resourceVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>;
     }, z.core.$strict>>>;
+    selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>>;
     personalResourceAttachment: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             always: "always";
@@ -33128,6 +33196,11 @@ export declare const ClientSessionEvent: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 resourceVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
             }, z.core.$strip>;
         }, z.core.$strict>>>;
+        selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            serverId: z.ZodString;
+            delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+            generation: z.ZodNumber;
+        }, z.core.$strict>>>;
         personalResourceAttachment: z.ZodOptional<z.ZodObject<{
             mode: z.ZodEnum<{
                 always: "always";
@@ -33272,6 +33345,11 @@ export declare const SteerSessionMessageRequest: z.ZodObject<{
             resourceVersionId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$strip>;
     }, z.core.$strict>>>;
+    selectedHostMcpDelegations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        delegationId: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        generation: z.ZodNumber;
+    }, z.core.$strict>>>;
     personalResourceAttachment: z.ZodOptional<z.ZodObject<{
         mode: z.ZodEnum<{
             always: "always";