@opengeni/contracts 3.1.0-canary.1 → 3.1.2

package/dist/workspace-integrations.d.ts

@@ -0,0 +1,1028 @@
+import { z } from "zod";
+import { type TurnInitiator, type TurnInitiatorContext } from "./index.js";
+export * from "./workspace-integration-wire.js";
+/**
+ * Workspace integration primitives for embedding hosts: signed outbound
+ * webhooks and one signed HTTP credential provider per workspace. Both
+ * directions share one signature scheme so a host verifies every Opengeni
+ * request with the same helper.
+ */
+export declare const WorkspaceWebhookEventType: z.ZodEnum<{
+    "session.humanInput.requested": "session.humanInput.requested";
+    "session.notification.posted": "session.notification.posted";
+    "session.notification.withdrawn": "session.notification.withdrawn";
+    "session.requiresAction": "session.requiresAction";
+    "session.status.changed": "session.status.changed";
+    "turn.cancelled": "turn.cancelled";
+    "turn.completed": "turn.completed";
+    "turn.failed": "turn.failed";
+    "usage.exhausted": "usage.exhausted";
+    "usage.period_reset": "usage.period_reset";
+    "usage.threshold_reached": "usage.threshold_reached";
+}>;
+export type WorkspaceWebhookEventType = z.infer<typeof WorkspaceWebhookEventType>;
+export declare const WORKSPACE_WEBHOOK_LIMIT_PER_WORKSPACE = 10;
+export declare const ORGANIZATION_WEBHOOK_LIMIT_PER_ORGANIZATION = 10;
+/** Scoping convenience, never authority. Null means all non-personal workspaces. */
+export declare const IntegrationWorkspaceFilter: z.ZodObject<{
+    externalSource: z.ZodString;
+}, z.core.$strict>;
+export type IntegrationWorkspaceFilter = z.infer<typeof IntegrationWorkspaceFilter>;
+/** Informational attribution only. It never supplies or changes authorization. */
+export declare const InitiatingHuman: z.ZodObject<{
+    subjectId: z.ZodString;
+    externalIdentity: z.ZodNullable<z.ZodObject<{
+        source: z.ZodString;
+        externalId: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type InitiatingHuman = z.infer<typeof InitiatingHuman>;
+export declare const WorkspaceWebhook: z.ZodObject<{
+    id: z.ZodString;
+    workspaceId: z.ZodString;
+    url: z.ZodString;
+    eventTypes: z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>;
+    enabled: z.ZodBoolean;
+    description: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceWebhook = z.infer<typeof WorkspaceWebhook>;
+export declare const CreateWorkspaceWebhookRequest: z.ZodObject<{
+    url: z.ZodString;
+    eventTypes: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>, z.ZodTransform<("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[], ("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[]>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type CreateWorkspaceWebhookRequest = z.input<typeof CreateWorkspaceWebhookRequest>;
+/** The signing secret is returned exactly once, at creation. */
+export declare const CreateWorkspaceWebhookResponse: z.ZodObject<{
+    webhook: z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type CreateWorkspaceWebhookResponse = z.infer<typeof CreateWorkspaceWebhookResponse>;
+export declare const UpdateWorkspaceWebhookRequest: z.ZodObject<{
+    url: z.ZodOptional<z.ZodString>;
+    eventTypes: z.ZodOptional<z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>, z.ZodTransform<("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[], ("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[]>>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type UpdateWorkspaceWebhookRequest = z.input<typeof UpdateWorkspaceWebhookRequest>;
+export declare const ListWorkspaceWebhooksResponse: z.ZodObject<{
+    webhooks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ListWorkspaceWebhooksResponse = z.infer<typeof ListWorkspaceWebhooksResponse>;
+/** Organization webhooks fan out session events only; usage events are per-workspace. */
+export declare const OrganizationWebhookEventType: z.ZodEnum<{
+    "session.humanInput.requested": "session.humanInput.requested";
+    "session.notification.posted": "session.notification.posted";
+    "session.notification.withdrawn": "session.notification.withdrawn";
+    "session.requiresAction": "session.requiresAction";
+    "session.status.changed": "session.status.changed";
+    "turn.cancelled": "turn.cancelled";
+    "turn.completed": "turn.completed";
+    "turn.failed": "turn.failed";
+}>;
+export type OrganizationWebhookEventType = z.infer<typeof OrganizationWebhookEventType>;
+export declare const OrganizationWebhook: z.ZodObject<{
+    id: z.ZodString;
+    url: z.ZodString;
+    enabled: z.ZodBoolean;
+    description: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    organizationId: z.ZodString;
+    eventTypes: z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>;
+    workspaceFilter: z.ZodNullable<z.ZodObject<{
+        externalSource: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type OrganizationWebhook = z.infer<typeof OrganizationWebhook>;
+export declare const CreateOrganizationWebhookRequest: z.ZodObject<{
+    url: z.ZodString;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    eventTypes: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>, z.ZodTransform<("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[], ("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[]>>;
+    workspaceFilter: z.ZodNullable<z.ZodObject<{
+        externalSource: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type CreateOrganizationWebhookRequest = z.input<typeof CreateOrganizationWebhookRequest>;
+export declare const UpdateOrganizationWebhookRequest: z.ZodObject<{
+    url: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    eventTypes: z.ZodOptional<z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        "session.humanInput.requested": "session.humanInput.requested";
+        "session.notification.posted": "session.notification.posted";
+        "session.notification.withdrawn": "session.notification.withdrawn";
+        "session.requiresAction": "session.requiresAction";
+        "session.status.changed": "session.status.changed";
+        "turn.cancelled": "turn.cancelled";
+        "turn.completed": "turn.completed";
+        "turn.failed": "turn.failed";
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>>, z.ZodTransform<("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[], ("session.humanInput.requested" | "session.notification.posted" | "session.notification.withdrawn" | "session.requiresAction" | "session.status.changed" | "turn.cancelled" | "turn.completed" | "turn.failed" | "usage.exhausted" | "usage.period_reset" | "usage.threshold_reached")[]>>>;
+    workspaceFilter: z.ZodNullable<z.ZodObject<{
+        externalSource: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type UpdateOrganizationWebhookRequest = z.input<typeof UpdateOrganizationWebhookRequest>;
+export declare const CreateOrganizationWebhookResponse: z.ZodObject<{
+    webhook: z.ZodObject<{
+        id: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type CreateOrganizationWebhookResponse = z.infer<typeof CreateOrganizationWebhookResponse>;
+export declare const ListOrganizationWebhooksResponse: z.ZodObject<{
+    webhooks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ListOrganizationWebhooksResponse = z.infer<typeof ListOrganizationWebhooksResponse>;
+export declare const WorkspaceWebhookDeliveryStatus: z.ZodEnum<{
+    delivered: "delivered";
+    failed: "failed";
+    pending: "pending";
+}>;
+export type WorkspaceWebhookDeliveryStatus = z.infer<typeof WorkspaceWebhookDeliveryStatus>;
+export declare const WorkspaceWebhookDelivery: z.ZodObject<{
+    id: z.ZodString;
+    webhookId: z.ZodString;
+    eventId: z.ZodString;
+    eventType: z.ZodString;
+    status: z.ZodEnum<{
+        delivered: "delivered";
+        failed: "failed";
+        pending: "pending";
+    }>;
+    attempts: z.ZodNumber;
+    lastStatus: z.ZodNullable<z.ZodNumber>;
+    lastError: z.ZodNullable<z.ZodString>;
+    nextAttemptAt: z.ZodNullable<z.ZodString>;
+    deliveredAt: z.ZodNullable<z.ZodString>;
+    failedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceWebhookDelivery = z.infer<typeof WorkspaceWebhookDelivery>;
+export declare const ListWorkspaceWebhookDeliveriesResponse: z.ZodObject<{
+    deliveries: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        webhookId: z.ZodString;
+        eventId: z.ZodString;
+        eventType: z.ZodString;
+        status: z.ZodEnum<{
+            delivered: "delivered";
+            failed: "failed";
+            pending: "pending";
+        }>;
+        attempts: z.ZodNumber;
+        lastStatus: z.ZodNullable<z.ZodNumber>;
+        lastError: z.ZodNullable<z.ZodString>;
+        nextAttemptAt: z.ZodNullable<z.ZodString>;
+        deliveredAt: z.ZodNullable<z.ZodString>;
+        failedAt: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ListWorkspaceWebhookDeliveriesResponse = z.infer<typeof ListWorkspaceWebhookDeliveriesResponse>;
+export declare const OrganizationWebhookDelivery: z.ZodObject<{
+    id: z.ZodString;
+    webhookId: z.ZodString;
+    eventId: z.ZodString;
+    eventType: z.ZodString;
+    status: z.ZodEnum<{
+        delivered: "delivered";
+        failed: "failed";
+        pending: "pending";
+    }>;
+    attempts: z.ZodNumber;
+    lastStatus: z.ZodNullable<z.ZodNumber>;
+    lastError: z.ZodNullable<z.ZodString>;
+    nextAttemptAt: z.ZodNullable<z.ZodString>;
+    deliveredAt: z.ZodNullable<z.ZodString>;
+    failedAt: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodString;
+}, z.core.$strict>;
+export type OrganizationWebhookDelivery = z.infer<typeof OrganizationWebhookDelivery>;
+export declare const ListOrganizationWebhookDeliveriesResponse: z.ZodObject<{
+    deliveries: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        webhookId: z.ZodString;
+        eventId: z.ZodString;
+        eventType: z.ZodString;
+        status: z.ZodEnum<{
+            delivered: "delivered";
+            failed: "failed";
+            pending: "pending";
+        }>;
+        attempts: z.ZodNumber;
+        lastStatus: z.ZodNullable<z.ZodNumber>;
+        lastError: z.ZodNullable<z.ZodString>;
+        nextAttemptAt: z.ZodNullable<z.ZodString>;
+        deliveredAt: z.ZodNullable<z.ZodString>;
+        failedAt: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ListOrganizationWebhookDeliveriesResponse = z.infer<typeof ListOrganizationWebhookDeliveriesResponse>;
+/**
+ * The body POSTed to a webhook endpoint. Lifecycle events identify what
+ * changed; notification events also include their bounded display content.
+ */
+export declare const SessionWorkspaceWebhookEvent: z.ZodObject<{
+    lane: z.ZodDefault<z.ZodEnum<{
+        organization: "organization";
+        workspace: "workspace";
+    }>>;
+    id: z.ZodString;
+    type: z.ZodString;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodString;
+    turnId: z.ZodNullable<z.ZodString>;
+    sequence: z.ZodNumber;
+    occurredAt: z.ZodString;
+    initiatingHuman: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        subjectId: z.ZodString;
+        externalIdentity: z.ZodNullable<z.ZodObject<{
+            source: z.ZodString;
+            externalId: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    data: z.ZodObject<{
+        status: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+        key: z.ZodOptional<z.ZodString>;
+        title: z.ZodOptional<z.ZodString>;
+        subtitle: z.ZodOptional<z.ZodString>;
+        body: z.ZodOptional<z.ZodString>;
+        facts: z.ZodOptional<z.ZodArray<z.ZodLazy<z.ZodObject<{
+            label: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>>>>;
+        link: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+            url: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strict>>>;
+        urgency: z.ZodOptional<z.ZodLazy<z.ZodEnum<{
+            normal: "normal";
+            time_sensitive: "time_sensitive";
+        }>>>;
+        replaced: z.ZodOptional<z.ZodBoolean>;
+        recipientSubjectId: z.ZodOptional<z.ZodString>;
+        sender: z.ZodOptional<z.ZodObject<{
+            subjectId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+        undeliveredReason: z.ZodOptional<z.ZodLazy<z.ZodEnum<{
+            no_human_recipient: "no_human_recipient";
+        }>>>;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export type SessionWorkspaceWebhookEvent = z.infer<typeof SessionWorkspaceWebhookEvent>;
+/** Workspace allowance events have no synthetic session or turn identity.
+ * Optional null context fields let transport adapters share an envelope. */
+export declare const WorkspaceUsageWebhookEvent: z.ZodObject<{
+    lane: z.ZodDefault<z.ZodLiteral<"workspace">>;
+    id: z.ZodString;
+    type: z.ZodEnum<{
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodOptional<z.ZodNull>;
+    turnId: z.ZodOptional<z.ZodNull>;
+    sequence: z.ZodOptional<z.ZodNumber>;
+    occurredAt: z.ZodString;
+    data: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodEnum<{
+            member: "member";
+            workspace: "workspace";
+        }>>;
+        subjectId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        threshold: z.ZodOptional<z.ZodNumber>;
+        fraction: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        resetsAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        status: z.ZodOptional<z.ZodEnum<{
+            exhausted: "exhausted";
+            ok: "ok";
+            warning: "warning";
+        }>>;
+        period: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            start: z.ZodNullable<z.ZodString>;
+            end: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodUnion<readonly [z.ZodLiteral<"current">, z.ZodString]>, z.ZodLiteral<"*">]>>;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export type WorkspaceUsageWebhookEvent = z.infer<typeof WorkspaceUsageWebhookEvent>;
+/**
+ * "Send test event": proves the endpoint is reachable and verifies the
+ * signature. It names the workspace but no session, turn or sequence.
+ */
+export declare const WorkspaceTestWebhookEvent: z.ZodObject<{
+    lane: z.ZodDefault<z.ZodEnum<{
+        organization: "organization";
+        workspace: "workspace";
+    }>>;
+    id: z.ZodString;
+    type: z.ZodLiteral<"webhook.test">;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodOptional<z.ZodNull>;
+    turnId: z.ZodOptional<z.ZodNull>;
+    occurredAt: z.ZodString;
+    data: z.ZodObject<{
+        webhookId: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
+}, z.core.$strip>;
+export type WorkspaceTestWebhookEvent = z.infer<typeof WorkspaceTestWebhookEvent>;
+export declare const WorkspaceWebhookEvent: z.ZodUnion<readonly [z.ZodObject<{
+    lane: z.ZodDefault<z.ZodEnum<{
+        organization: "organization";
+        workspace: "workspace";
+    }>>;
+    id: z.ZodString;
+    type: z.ZodString;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodString;
+    turnId: z.ZodNullable<z.ZodString>;
+    sequence: z.ZodNumber;
+    occurredAt: z.ZodString;
+    initiatingHuman: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        subjectId: z.ZodString;
+        externalIdentity: z.ZodNullable<z.ZodObject<{
+            source: z.ZodString;
+            externalId: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    data: z.ZodObject<{
+        status: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+        key: z.ZodOptional<z.ZodString>;
+        title: z.ZodOptional<z.ZodString>;
+        subtitle: z.ZodOptional<z.ZodString>;
+        body: z.ZodOptional<z.ZodString>;
+        facts: z.ZodOptional<z.ZodArray<z.ZodLazy<z.ZodObject<{
+            label: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>>>>;
+        link: z.ZodOptional<z.ZodLazy<z.ZodObject<{
+            url: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strict>>>;
+        urgency: z.ZodOptional<z.ZodLazy<z.ZodEnum<{
+            normal: "normal";
+            time_sensitive: "time_sensitive";
+        }>>>;
+        replaced: z.ZodOptional<z.ZodBoolean>;
+        recipientSubjectId: z.ZodOptional<z.ZodString>;
+        sender: z.ZodOptional<z.ZodObject<{
+            subjectId: z.ZodString;
+            label: z.ZodString;
+        }, z.core.$strip>>;
+        undeliveredReason: z.ZodOptional<z.ZodLazy<z.ZodEnum<{
+            no_human_recipient: "no_human_recipient";
+        }>>>;
+    }, z.core.$loose>;
+}, z.core.$strip>, z.ZodObject<{
+    lane: z.ZodDefault<z.ZodLiteral<"workspace">>;
+    id: z.ZodString;
+    type: z.ZodEnum<{
+        "usage.exhausted": "usage.exhausted";
+        "usage.period_reset": "usage.period_reset";
+        "usage.threshold_reached": "usage.threshold_reached";
+    }>;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodOptional<z.ZodNull>;
+    turnId: z.ZodOptional<z.ZodNull>;
+    sequence: z.ZodOptional<z.ZodNumber>;
+    occurredAt: z.ZodString;
+    data: z.ZodObject<{
+        scope: z.ZodOptional<z.ZodEnum<{
+            member: "member";
+            workspace: "workspace";
+        }>>;
+        subjectId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        threshold: z.ZodOptional<z.ZodNumber>;
+        fraction: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        resetsAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        status: z.ZodOptional<z.ZodEnum<{
+            exhausted: "exhausted";
+            ok: "ok";
+            warning: "warning";
+        }>>;
+        period: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+            start: z.ZodNullable<z.ZodString>;
+            end: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodUnion<readonly [z.ZodLiteral<"current">, z.ZodString]>, z.ZodLiteral<"*">]>>;
+    }, z.core.$loose>;
+}, z.core.$strip>, z.ZodObject<{
+    lane: z.ZodDefault<z.ZodEnum<{
+        organization: "organization";
+        workspace: "workspace";
+    }>>;
+    id: z.ZodString;
+    type: z.ZodLiteral<"webhook.test">;
+    workspaceId: z.ZodString;
+    workspace: z.ZodOptional<z.ZodObject<{
+        id: z.ZodString;
+        externalSource: z.ZodNullable<z.ZodString>;
+        externalId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+    sessionId: z.ZodOptional<z.ZodNull>;
+    turnId: z.ZodOptional<z.ZodNull>;
+    occurredAt: z.ZodString;
+    data: z.ZodObject<{
+        webhookId: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
+}, z.core.$strip>]>;
+export type WorkspaceWebhookEvent = z.infer<typeof WorkspaceWebhookEvent>;
+export declare const WorkspaceCredentialProvider: z.ZodObject<{
+    workspaceId: z.ZodString;
+    url: z.ZodString;
+    enabled: z.ZodBoolean;
+    timeoutMs: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+export type WorkspaceCredentialProvider = z.infer<typeof WorkspaceCredentialProvider>;
+export declare const PutWorkspaceCredentialProviderRequest: z.ZodObject<{
+    url: z.ZodString;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type PutWorkspaceCredentialProviderRequest = z.input<typeof PutWorkspaceCredentialProviderRequest>;
+/** `secret` is present only when the provider was first created. */
+export declare const PutWorkspaceCredentialProviderResponse: z.ZodObject<{
+    provider: z.ZodObject<{
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+    secret: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PutWorkspaceCredentialProviderResponse = z.infer<typeof PutWorkspaceCredentialProviderResponse>;
+export declare const GetWorkspaceCredentialProviderResponse: z.ZodObject<{
+    provider: z.ZodNullable<z.ZodObject<{
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type GetWorkspaceCredentialProviderResponse = z.infer<typeof GetWorkspaceCredentialProviderResponse>;
+export declare const OrganizationCredentialProvider: z.ZodObject<{
+    url: z.ZodString;
+    enabled: z.ZodBoolean;
+    timeoutMs: z.ZodNumber;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    organizationId: z.ZodString;
+    workspaceFilter: z.ZodNullable<z.ZodObject<{
+        externalSource: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type OrganizationCredentialProvider = z.infer<typeof OrganizationCredentialProvider>;
+export declare const PutOrganizationCredentialProviderRequest: z.ZodObject<{
+    url: z.ZodString;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    workspaceFilter: z.ZodNullable<z.ZodObject<{
+        externalSource: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type PutOrganizationCredentialProviderRequest = z.input<typeof PutOrganizationCredentialProviderRequest>;
+export declare const PutOrganizationCredentialProviderResponse: z.ZodObject<{
+    provider: z.ZodObject<{
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    secret: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type PutOrganizationCredentialProviderResponse = z.infer<typeof PutOrganizationCredentialProviderResponse>;
+export declare const GetOrganizationCredentialProviderResponse: z.ZodObject<{
+    provider: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type GetOrganizationCredentialProviderResponse = z.infer<typeof GetOrganizationCredentialProviderResponse>;
+/** Exact accepted-turn provenance, never an authorization grant. */
+export type CredentialProviderInitiatorContext = {
+    /** Agent delegation is identified by the newest frozen `via` hop. */
+    kind: "human" | "service" | "agent";
+    /** Full frozen causal identity, including an accepted service's display label. */
+    initiator: TurnInitiator;
+    /** Unmodified accepted context, including bounded `via` and coalesced `updateIds`. */
+    context: TurnInitiatorContext;
+};
+/** The body Opengeni POSTs to a workspace credential provider. */
+export type CredentialProviderRequest = {
+    type: "credentials.request";
+    lane: "organization" | "workspace";
+    /** Selected session-attached remote targets; providers must authorize each exact URL. */
+    mcpServers: {
+        id: string;
+        url: string;
+    }[];
+    /**
+     * `test` comes from an administrator's "Test connection": it is not a run,
+     * so `sessionId`, `rootSessionId`, `turnId` and `attemptId` are the nil
+     * UUID. Answer it as you would a run in this workspace (Opengeni shows only
+     * the names of what you return, never the values), or `not_applicable`.
+     */
+    purpose: "provision" | "renewal" | "test";
+    forceRefresh: boolean;
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    rootSessionId: string;
+    parentSessionId: string | null;
+    turnId: string;
+    attemptId: string;
+    initiator: {
+        kind: string;
+        subjectId?: string;
+    };
+    /** Informational, signed with the body. Optional only for pre-upgrade senders. */
+    initiatorContext?: CredentialProviderInitiatorContext;
+    initiatingHumanSubjectId: string | null;
+    /** Informational, not authority. Optional only for pre-upgrade senders. */
+    initiatingHuman?: InitiatingHuman | null;
+    sandboxBackend: string;
+    sandboxOs: string;
+};
+/** Exact WHATWG normalization; IDs, URL credentials and fragments are never targets. */
+export declare function normalizeCredentialProviderMcpUrl(value: string): string;
+/** Secret, turn-local headers for one session-attached remote MCP, by normalized URL only. */
+export declare const CredentialProviderMcpHeaders: z.ZodObject<{
+    url: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
+export type CredentialProviderMcpHeaders = z.infer<typeof CredentialProviderMcpHeaders>;
+export declare const CredentialProviderMcpMaterial: z.ZodArray<z.ZodObject<{
+    url: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    headers: z.ZodRecord<z.ZodString, z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>>;
+export type CredentialProviderMcpMaterial = z.infer<typeof CredentialProviderMcpMaterial>;
+/** What a credential provider returns. Scope echoes are added by Opengeni. */
+export declare const CredentialProviderResponse: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"ok">;
+    environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        content: z.ZodString;
+        mode: z.ZodOptional<z.ZodEnum<{
+            "0400": "0400";
+            "0600": "0600";
+        }>>;
+    }, z.core.$strip>>>;
+    fileEnvironment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    git: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        host: z.ZodString;
+        username: z.ZodOptional<z.ZodString>;
+        password: z.ZodString;
+    }, z.core.$strip>>>;
+    mcp: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        url: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        headers: z.ZodRecord<z.ZodString, z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodISODateTime>;
+    }, z.core.$strict>>>;
+    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    authNeeded: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        reason: z.ZodEnum<{
+            expired: "expired";
+            insufficient_scope: "insufficient_scope";
+            missing_connection: "missing_connection";
+            refresh_failed: "refresh_failed";
+        }>;
+        providerDomain: z.ZodOptional<z.ZodString>;
+        connectionId: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        resource: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"not_applicable">;
+}, z.core.$strip>, z.ZodObject<{
+    status: z.ZodLiteral<"auth_needed">;
+    authNeeded: z.ZodArray<z.ZodObject<{
+        reason: z.ZodEnum<{
+            expired: "expired";
+            insufficient_scope: "insufficient_scope";
+            missing_connection: "missing_connection";
+            refresh_failed: "refresh_failed";
+        }>;
+        providerDomain: z.ZodOptional<z.ZodString>;
+        connectionId: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        resource: z.ZodOptional<z.ZodString>;
+        authorizationUrl: z.ZodOptional<z.ZodString>;
+        message: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>], "status">;
+export type CredentialProviderResponse = z.infer<typeof CredentialProviderResponse>;
+/** Immediate signing-secret rotation; the new secret is returned once. */
+export declare const RotateWorkspaceCredentialProviderSecretResponse: z.ZodObject<{
+    provider: z.ZodObject<{
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type RotateWorkspaceCredentialProviderSecretResponse = z.infer<typeof RotateWorkspaceCredentialProviderSecretResponse>;
+export declare const RotateOrganizationCredentialProviderSecretResponse: z.ZodObject<{
+    provider: z.ZodObject<{
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        timeoutMs: z.ZodNumber;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type RotateOrganizationCredentialProviderSecretResponse = z.infer<typeof RotateOrganizationCredentialProviderSecretResponse>;
+export declare const RotateWorkspaceWebhookSecretResponse: z.ZodObject<{
+    webhook: z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodString;
+        url: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type RotateWorkspaceWebhookSecretResponse = z.infer<typeof RotateWorkspaceWebhookSecretResponse>;
+export declare const RotateOrganizationWebhookSecretResponse: z.ZodObject<{
+    webhook: z.ZodObject<{
+        id: z.ZodString;
+        url: z.ZodString;
+        enabled: z.ZodBoolean;
+        description: z.ZodNullable<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        organizationId: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        workspaceFilter: z.ZodNullable<z.ZodObject<{
+            externalSource: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    secret: z.ZodString;
+}, z.core.$strict>;
+export type RotateOrganizationWebhookSecretResponse = z.infer<typeof RotateOrganizationWebhookSecretResponse>;
+/**
+ * The outcome of one test request to a webhook or credential-provider
+ * endpoint. Nothing is stored: the request is sent once, synchronously.
+ * Credential values never appear; `credentials` names what a run would get.
+ */
+export declare const IntegrationEndpointTestResult: z.ZodObject<{
+    ok: z.ZodBoolean;
+    status: z.ZodNullable<z.ZodNumber>;
+    durationMs: z.ZodNumber;
+    error: z.ZodNullable<z.ZodString>;
+    request: z.ZodString;
+    responseBody: z.ZodNullable<z.ZodString>;
+    credentials: z.ZodNullable<z.ZodObject<{
+        status: z.ZodEnum<{
+            auth_needed: "auth_needed";
+            not_applicable: "not_applicable";
+            ok: "ok";
+        }>;
+        environment: z.ZodArray<z.ZodString>;
+        files: z.ZodArray<z.ZodString>;
+        git: z.ZodArray<z.ZodString>;
+        mcp: z.ZodArray<z.ZodString>;
+        expiresAt: z.ZodNullable<z.ZodString>;
+        authNeeded: z.ZodArray<z.ZodObject<{
+            reason: z.ZodString;
+            providerDomain: z.ZodNullable<z.ZodString>;
+            message: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type IntegrationEndpointTestResult = z.infer<typeof IntegrationEndpointTestResult>;
+export declare const TestWorkspaceWebhookResponse: z.ZodObject<{
+    result: z.ZodObject<{
+        ok: z.ZodBoolean;
+        status: z.ZodNullable<z.ZodNumber>;
+        durationMs: z.ZodNumber;
+        error: z.ZodNullable<z.ZodString>;
+        request: z.ZodString;
+        responseBody: z.ZodNullable<z.ZodString>;
+        credentials: z.ZodNullable<z.ZodObject<{
+            status: z.ZodEnum<{
+                auth_needed: "auth_needed";
+                not_applicable: "not_applicable";
+                ok: "ok";
+            }>;
+            environment: z.ZodArray<z.ZodString>;
+            files: z.ZodArray<z.ZodString>;
+            git: z.ZodArray<z.ZodString>;
+            mcp: z.ZodArray<z.ZodString>;
+            expiresAt: z.ZodNullable<z.ZodString>;
+            authNeeded: z.ZodArray<z.ZodObject<{
+                reason: z.ZodString;
+                providerDomain: z.ZodNullable<z.ZodString>;
+                message: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TestWorkspaceWebhookResponse = z.infer<typeof TestWorkspaceWebhookResponse>;
+/** Tests the provider runs in this workspace would use: its own, else the organization's. */
+export declare const TestWorkspaceCredentialProviderResponse: z.ZodObject<{
+    lane: z.ZodEnum<{
+        organization: "organization";
+        workspace: "workspace";
+    }>;
+    url: z.ZodString;
+    result: z.ZodObject<{
+        ok: z.ZodBoolean;
+        status: z.ZodNullable<z.ZodNumber>;
+        durationMs: z.ZodNumber;
+        error: z.ZodNullable<z.ZodString>;
+        request: z.ZodString;
+        responseBody: z.ZodNullable<z.ZodString>;
+        credentials: z.ZodNullable<z.ZodObject<{
+            status: z.ZodEnum<{
+                auth_needed: "auth_needed";
+                not_applicable: "not_applicable";
+                ok: "ok";
+            }>;
+            environment: z.ZodArray<z.ZodString>;
+            files: z.ZodArray<z.ZodString>;
+            git: z.ZodArray<z.ZodString>;
+            mcp: z.ZodArray<z.ZodString>;
+            expiresAt: z.ZodNullable<z.ZodString>;
+            authNeeded: z.ZodArray<z.ZodObject<{
+                reason: z.ZodString;
+                providerDomain: z.ZodNullable<z.ZodString>;
+                message: z.ZodNullable<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type TestWorkspaceCredentialProviderResponse = z.infer<typeof TestWorkspaceCredentialProviderResponse>;
+/**
+ * Organization registrations that apply to one workspace, for workspace
+ * administrators: an enabled organization provider whose filter matches
+ * (even when this workspace overrides it) and the enabled organization
+ * webhooks that also receive this workspace's events. Never secrets.
+ */
+export declare const WorkspaceInheritedIntegrationsResponse: z.ZodObject<{
+    credentialProvider: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        timeoutMs: z.ZodNumber;
+        updatedAt: z.ZodString;
+    }, z.core.$strict>>;
+    webhooks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        url: z.ZodString;
+        eventTypes: z.ZodArray<z.ZodEnum<{
+            "session.humanInput.requested": "session.humanInput.requested";
+            "session.notification.posted": "session.notification.posted";
+            "session.notification.withdrawn": "session.notification.withdrawn";
+            "session.requiresAction": "session.requiresAction";
+            "session.status.changed": "session.status.changed";
+            "turn.cancelled": "turn.cancelled";
+            "turn.completed": "turn.completed";
+            "turn.failed": "turn.failed";
+            "usage.exhausted": "usage.exhausted";
+            "usage.period_reset": "usage.period_reset";
+            "usage.threshold_reached": "usage.threshold_reached";
+        }>>;
+        description: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type WorkspaceInheritedIntegrationsResponse = z.infer<typeof WorkspaceInheritedIntegrationsResponse>;