@opengeni/contracts 5.5.0 → 5.5.2-canary.40597288395001

package/dist/agent-authored-durable-text.d.ts

@@ -9,12 +9,12 @@
  *   charter or global policy applies to every session in the workspace; a role
  *   policy applies to every session bound to that role. At most three entries
  *   compose at once (charter, global policy, matching role policy), so the
- *   standing ceiling this budget implies is three times the per-entry cap.
+ *   storage limit is shared with the human editor; prompt composition retains
+ *   its separate UTF-8 byte bound.
  * - A preference is cheaper and in a different way: only its short title and
  *   description descriptors are prompt-composed, while the full content is
  *   retrieved on demand behind the exact attempt's retrieval handle. Its length
- *   is therefore retrieval cost, not standing prompt cost, which is why it gets
- *   more room rather than less.
+ *   is therefore retrieval cost, not standing prompt cost.
  * - Organization identity and mission are always-on context for root sessions
  *   across the whole organization. Historical company-profile list fields stay
  *   in the storage contract for compatibility; nonempty values on an already-
@@ -22,18 +22,18 @@
  *   label until an organization owner replaces the profile.
  * - Knowledge is retrieval evidence and never joins the always-composed prefix.
  *
- * These caps deliberately bind only agent-authored writes. The human-facing
- * limits (`WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS`,
- * `PREFERENCE_REGISTRY_CONTENT_MAX_CHARS`, `COMPANY_PROFILE_SCALAR_MAX_CHARS`,
+ * Instruction writes share the human limit so localized edits can preserve
+ * existing long policies. The other caps bind only agent-authored writes.
+ * The human-facing limits (`PREFERENCE_REGISTRY_CONTENT_MAX_CHARS`, `COMPANY_PROFILE_SCALAR_MAX_CHARS`,
  * `COMPANY_PROFILE_ENTRY_MAX_CHARS`, `COMPANY_PROFILE_CONTENT_MAX_UTF8_BYTES`)
  * are unchanged: a person editing in the UI is making a deliberate, visible
  * choice, and lowering their limit would reject text they already typed.
  * Existing stored revisions are never rewritten; only new agent writes are
  * bounded.
  */
-/** One imperative rule, in 1-3 sentences, fits comfortably under this. */
-export declare const AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 600;
-/** Retrieved on demand rather than always composed, so a little more room. */
+/** Compatibility export: agents and humans use the same instruction storage limit. */
+export declare const AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
+/** Retrieved on demand rather than always composed. */
 export declare const AGENT_AUTHORED_PREFERENCE_CONTENT_MAX_CHARS = 1200;
 /** `identity` and `mission`: a couple of sentences, not a positioning document. */
 export declare const AGENT_AUTHORED_COMPANY_PROFILE_SCALAR_MAX_CHARS = 400;

package/dist/agent-config.d.ts

@@ -1,5 +1,5 @@
 /**
- * Agent configuration: one `agent` object that describes what an OpenGeni
+ * Agent configuration: one `agent` object that describes what an Opengeni
  * agent is (identity), how it answers (renderer, instructions alias) and what
  * it can do (capabilities). Capabilities are product words; this module owns
  * the single registry that maps every first-party tool to exactly one of them
@@ -20,7 +20,7 @@
  */
 import { z } from "zod";
 import type { FirstPartyMcpToolName, SessionToolPolicy, ToolRef } from "./index.js";
-export declare const AGENT_CAPABILITY_IDS: readonly ["webSearch", "humanInput", "skills", "goals", "subagents", "knowledge", "schedules", "artifacts", "browser", "media", "workspaceFiles", "workspaceConnectors", "workspaceAdmin"];
+export declare const AGENT_CAPABILITY_IDS: readonly ["webSearch", "humanInput", "skills", "goals", "subagents", "knowledge", "schedules", "artifacts", "browser", "secrets", "media", "workspaceFiles", "workspaceConnectors", "workspaceAdmin"];
 export declare const AgentCapabilityId: z.ZodEnum<{
     artifacts: "artifacts";
     browser: "browser";
@@ -29,6 +29,7 @@ export declare const AgentCapabilityId: z.ZodEnum<{
     knowledge: "knowledge";
     media: "media";
     schedules: "schedules";
+    secrets: "secrets";
     skills: "skills";
     subagents: "subagents";
     webSearch: "webSearch";
@@ -58,6 +59,7 @@ export declare const AgentCapabilityToggles: z.ZodObject<{
     schedules: z.ZodOptional<z.ZodBoolean>;
     artifacts: z.ZodOptional<z.ZodBoolean>;
     browser: z.ZodOptional<z.ZodBoolean>;
+    secrets: z.ZodOptional<z.ZodBoolean>;
     media: z.ZodOptional<z.ZodBoolean>;
     workspaceFiles: z.ZodOptional<z.ZodBoolean>;
     workspaceConnectors: z.ZodOptional<z.ZodBoolean>;
@@ -79,6 +81,7 @@ export declare const AgentCapabilities: z.ZodUnion<readonly [z.ZodLiteral<"all">
     schedules: z.ZodOptional<z.ZodBoolean>;
     artifacts: z.ZodOptional<z.ZodBoolean>;
     browser: z.ZodOptional<z.ZodBoolean>;
+    secrets: z.ZodOptional<z.ZodBoolean>;
     media: z.ZodOptional<z.ZodBoolean>;
     workspaceFiles: z.ZodOptional<z.ZodBoolean>;
     workspaceConnectors: z.ZodOptional<z.ZodBoolean>;
@@ -111,6 +114,7 @@ export declare const AgentConfigRequest: z.ZodObject<{
         schedules: z.ZodOptional<z.ZodBoolean>;
         artifacts: z.ZodOptional<z.ZodBoolean>;
         browser: z.ZodOptional<z.ZodBoolean>;
+        secrets: z.ZodOptional<z.ZodBoolean>;
         media: z.ZodOptional<z.ZodBoolean>;
         workspaceFiles: z.ZodOptional<z.ZodBoolean>;
         workspaceConnectors: z.ZodOptional<z.ZodBoolean>;
@@ -126,6 +130,12 @@ export declare const AgentConfigRequest: z.ZodObject<{
         markdown: "markdown";
         opengeni: "opengeni";
     }>>;
+    vaultPolicy: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"all">;
+    }, z.core.$strict>, z.ZodObject<{
+        mode: z.ZodLiteral<"selected">;
+        vaultIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>], "mode">>;
 }, z.core.$strict>;
 export type AgentConfigRequest = z.infer<typeof AgentConfigRequest>;
 /** Workspace "Defaults for new sessions" agent part (no instructions alias). */
@@ -140,6 +150,7 @@ export declare const WorkspaceAgentDefaults: z.ZodObject<{
         schedules: z.ZodOptional<z.ZodBoolean>;
         artifacts: z.ZodOptional<z.ZodBoolean>;
         browser: z.ZodOptional<z.ZodBoolean>;
+        secrets: z.ZodOptional<z.ZodBoolean>;
         media: z.ZodOptional<z.ZodBoolean>;
         workspaceFiles: z.ZodOptional<z.ZodBoolean>;
         workspaceConnectors: z.ZodOptional<z.ZodBoolean>;
@@ -166,6 +177,7 @@ export declare const ResolvedAgentCapabilities: z.ZodObject<{
     schedules: z.ZodBoolean;
     artifacts: z.ZodBoolean;
     browser: z.ZodBoolean;
+    secrets: z.ZodBoolean;
     media: z.ZodBoolean;
     workspaceFiles: z.ZodBoolean;
     workspaceConnectors: z.ZodBoolean;
@@ -180,13 +192,7 @@ export declare const ResolvedAgentConfigSource: z.ZodEnum<{
     workspace_default: "workspace_default";
 }>;
 export type ResolvedAgentConfigSource = z.infer<typeof ResolvedAgentConfigSource>;
-/**
- * The frozen per-session configuration (`sessions.agent_config`). `capabilities`
- * is the effective map; `unavailable` names capabilities the configuration
- * wanted on but this deployment does not offer (reported off, never widened
- * later without a new resolution).
- */
-export declare const ResolvedAgentConfig: z.ZodObject<{
+export declare const ResolvedAgentConfig: z.ZodPreprocess<z.ZodObject<{
     version: z.ZodLiteral<1>;
     from: z.ZodEnum<{
         all: "all";
@@ -202,6 +208,7 @@ export declare const ResolvedAgentConfig: z.ZodObject<{
         schedules: z.ZodBoolean;
         artifacts: z.ZodBoolean;
         browser: z.ZodBoolean;
+        secrets: z.ZodBoolean;
         media: z.ZodBoolean;
         workspaceFiles: z.ZodBoolean;
         workspaceConnectors: z.ZodBoolean;
@@ -215,6 +222,7 @@ export declare const ResolvedAgentConfig: z.ZodObject<{
         knowledge: "knowledge";
         media: "media";
         schedules: "schedules";
+        secrets: "secrets";
         skills: "skills";
         subagents: "subagents";
         webSearch: "webSearch";
@@ -222,6 +230,22 @@ export declare const ResolvedAgentConfig: z.ZodObject<{
         workspaceConnectors: "workspaceConnectors";
         workspaceFiles: "workspaceFiles";
     }>>>;
+    unavailableReasons: z.ZodOptional<z.ZodRecord<z.ZodEnum<{
+        artifacts: "artifacts";
+        browser: "browser";
+        goals: "goals";
+        humanInput: "humanInput";
+        knowledge: "knowledge";
+        media: "media";
+        schedules: "schedules";
+        secrets: "secrets";
+        skills: "skills";
+        subagents: "subagents";
+        webSearch: "webSearch";
+        workspaceAdmin: "workspaceAdmin";
+        workspaceConnectors: "workspaceConnectors";
+        workspaceFiles: "workspaceFiles";
+    }> & z.core.$partial, z.ZodString>>;
     identity: z.ZodNullable<z.ZodString>;
     renderer: z.ZodEnum<{
         markdown: "markdown";
@@ -234,7 +258,7 @@ export declare const ResolvedAgentConfig: z.ZodObject<{
         request: "request";
         workspace_default: "workspace_default";
     }>;
-}, z.core.$strict>;
+}, z.core.$strict>>;
 export type ResolvedAgentConfig = z.infer<typeof ResolvedAgentConfig>;
 /** `PUT /v1/workspaces/:workspaceId/sessions/:sessionId/agent`. Omitted fields keep current values. */
 export declare const UpdateSessionAgentRequest: z.ZodObject<{
@@ -249,6 +273,7 @@ export declare const UpdateSessionAgentRequest: z.ZodObject<{
             schedules: z.ZodOptional<z.ZodBoolean>;
             artifacts: z.ZodOptional<z.ZodBoolean>;
             browser: z.ZodOptional<z.ZodBoolean>;
+            secrets: z.ZodOptional<z.ZodBoolean>;
             media: z.ZodOptional<z.ZodBoolean>;
             workspaceFiles: z.ZodOptional<z.ZodBoolean>;
             workspaceConnectors: z.ZodOptional<z.ZodBoolean>;
@@ -264,11 +289,17 @@ export declare const UpdateSessionAgentRequest: z.ZodObject<{
             markdown: "markdown";
             opengeni: "opengeni";
         }>>;
+        vaultPolicy: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            mode: z.ZodLiteral<"all">;
+        }, z.core.$strict>, z.ZodObject<{
+            mode: z.ZodLiteral<"selected">;
+            vaultIds: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
     }, z.core.$strict>;
     expectedVersion: z.ZodNumber;
 }, z.core.$strict>;
 export type UpdateSessionAgentRequest = z.infer<typeof UpdateSessionAgentRequest>;
-/** Client-safe rollout projection. */
+/** Client-safe agent-configuration projection. */
 export declare const ClientAgentConfig: z.ZodObject<{
     enabled: z.ZodBoolean;
     defaultForNewSessions: z.ZodBoolean;
@@ -281,6 +312,7 @@ export declare const ClientAgentConfig: z.ZodObject<{
             knowledge: "knowledge";
             media: "media";
             schedules: "schedules";
+            secrets: "secrets";
             skills: "skills";
             subagents: "subagents";
             webSearch: "webSearch";
@@ -293,8 +325,15 @@ export declare const ClientAgentConfig: z.ZodObject<{
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ClientAgentConfig = z.infer<typeof ClientAgentConfig>;
-/** A first-party tool's owner: a capability, or pure runtime mechanics. */
+/** A built-in MCP server's owner: a capability, or pure runtime mechanics. */
 export type AgentToolCapability = AgentCapabilityId | "runtime";
+/**
+ * A first-party tool's owner: a capability, pure runtime mechanics, or the
+ * attached compute (a managed sandbox or Connected Machine).
+ */
+export type AgentFirstPartyToolOwner = AgentToolCapability | "sandbox";
+/** Owners no capability toggles: the runtime or the attached compute derives them. */
+export declare function isDerivedAgentToolOwner(owner: AgentFirstPartyToolOwner): owner is "runtime" | "sandbox";
 /**
  * Exhaustive map from every `FIRST_PARTY_MCP_TOOL_NAMES` entry to exactly one
  * owner. The `Record` type makes an unmapped new name a compile error, and
@@ -302,15 +341,21 @@ export type AgentToolCapability = AgentCapabilityId | "runtime";
  *
  * `runtime` tools are mechanics every agent needs regardless of what it may do:
  * - `wait_for_input`: ends the turn and waits for the next input.
- * - `command_read` / `command_wait`: read/await the session's own background
- *   sandbox commands (the shell already exists whenever a sandbox is attached).
  * - `set_session_title`: session titling.
+ *
+ * `sandbox` tools are derived from attached compute and never toggled:
+ * - `command_read` / `command_wait`: read/await the session's own background
+ *   commands. A command can only exist on a managed sandbox or Connected
+ *   Machine, so a turn with neither attached never receives them.
  */
 export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly set_session_title: "runtime";
     readonly wait_for_input: "runtime";
-    readonly command_wait: "runtime";
-    readonly command_read: "runtime";
+    readonly notify_user: "humanInput";
+    readonly notification_withdraw: "humanInput";
+    readonly inbox_tidy: "humanInput";
+    readonly command_wait: "sandbox";
+    readonly command_read: "sandbox";
     readonly goal_set: "goals";
     readonly goal_update: "goals";
     readonly goal_progress: "goals";
@@ -323,6 +368,9 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly knowledge_browse: "knowledge";
     readonly knowledge_save: "knowledge";
     readonly knowledge_retain_file: "knowledge";
+    readonly meetings_search: "knowledge";
+    readonly meeting_read: "knowledge";
+    readonly meeting_notes_save: "knowledge";
     readonly knowledge_retain_message: "knowledge";
     readonly knowledge_archive: "knowledge";
     readonly instruction_policy_save: "knowledge";
@@ -356,6 +404,7 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly sandbox_provision: "workspaceAdmin";
     readonly connected_machine_remove: "workspaceAdmin";
     readonly connected_machine_enroll_token: "workspaceAdmin";
+    readonly connected_machine_enable_screen_control: "workspaceAdmin";
     readonly project_list: "workspaceAdmin";
     readonly project_get: "workspaceAdmin";
     readonly project_create: "workspaceAdmin";
@@ -363,16 +412,24 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly project_reorder: "workspaceAdmin";
     readonly project_delete: "workspaceAdmin";
     readonly session_set_project: "workspaceAdmin";
+    readonly admin_actions_search: "workspaceAdmin";
+    readonly admin_action_describe: "workspaceAdmin";
+    readonly admin_action_call: "workspaceAdmin";
     readonly rig_list: "workspaceAdmin";
     readonly rig_get: "workspaceAdmin";
     readonly rig_propose_change: "workspaceAdmin";
     readonly rig_verify: "workspaceAdmin";
     readonly rig_promote: "workspaceAdmin";
-    readonly variable_set_list: "workspaceAdmin";
-    readonly environment_list: "workspaceAdmin";
-    readonly variable_set_get_variable: "workspaceAdmin";
-    readonly variable_set_set_variable: "workspaceAdmin";
-    readonly environment_set_variable: "workspaceAdmin";
+    readonly secret_search: "secrets";
+    readonly secret_save: "secrets";
+    readonly secret_get: "secrets";
+    readonly secret_move: "secrets";
+    readonly secret_delete: "secrets";
+    readonly variable_set_list: "secrets";
+    readonly environment_list: "secrets";
+    readonly variable_set_get_variable: "secrets";
+    readonly variable_set_set_variable: "secrets";
+    readonly environment_set_variable: "secrets";
     readonly capability_catalog_search: "workspaceAdmin";
     readonly capability_authorization_request: "workspaceAdmin";
     readonly custom_mcp_setup_request: "workspaceAdmin";
@@ -382,11 +439,15 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly session_wait: "subagents";
     readonly session_create: "subagents";
     readonly session_send_message: "subagents";
+    readonly session_message_status: "subagents";
+    readonly session_target_get: "subagents";
+    readonly session_target_set: "subagents";
     readonly session_pause: "subagents";
     readonly session_resume: "subagents";
     readonly session_steer: "subagents";
     readonly session_human_input_respond: "subagents";
     readonly set_other_session_title: "subagents";
+    readonly bot_template_save: "subagents";
     readonly session_set_model: "subagents";
     readonly interaction_discover: "browser";
     readonly browser_open: "browser";
@@ -397,6 +458,9 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly browser_act: "browser";
     readonly browser_clipboard: "browser";
     readonly browser_debug: "browser";
+    readonly browser_downloads: "browser";
+    readonly browser_download_save: "browser";
+    readonly browser_record: "browser";
     readonly browser_auth: "browser";
     readonly interaction_request_human: "browser";
     readonly browser_identity: "browser";
@@ -408,6 +472,7 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly computer_clipboard: "browser";
     readonly computer_act: "browser";
     readonly computer_lifecycle: "browser";
+    readonly excel_run: "browser";
     readonly github_connect_link: "workspaceConnectors";
     readonly github_repositories_list: "workspaceConnectors";
     readonly social_connections_list: "workspaceConnectors";
@@ -465,6 +530,8 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly scheduled_tasks_trigger: "schedules";
     readonly scheduled_tasks_delete: "schedules";
     readonly scheduled_task_runs_list: "schedules";
+    readonly event_sources_list: "schedules";
+    readonly events_get: "schedules";
     readonly artifacts_list: "artifacts";
     readonly artifacts_get_source: "artifacts";
     readonly artifacts_prepare_upload: "artifacts";
@@ -473,6 +540,30 @@ export declare const FIRST_PARTY_MCP_TOOL_CAPABILITIES: {
     readonly artifacts_rollback: "artifacts";
     readonly artifacts_archive: "artifacts";
     readonly artifacts_restore: "artifacts";
+    readonly site_data_describe: "artifacts";
+    readonly site_data_define_collection: "artifacts";
+    readonly site_data_query: "artifacts";
+    readonly site_data_write: "artifacts";
+    readonly site_data_import: "artifacts";
+    readonly site_data_export: "artifacts";
+    readonly site_data_reset: "artifacts";
+    readonly site_files_list: "artifacts";
+    readonly site_files_upload: "artifacts";
+    readonly site_files_delete: "artifacts";
+    readonly site_publication_get: "artifacts";
+    readonly site_publication_update: "artifacts";
+    readonly site_publication_apply_fix: "artifacts";
+    readonly site_hostname_check: "artifacts";
+    readonly site_sql_inspect: "artifacts";
+    readonly site_sql_enable: "artifacts";
+    readonly site_sql_migrate: "artifacts";
+    readonly site_sql_define_query: "artifacts";
+    readonly site_sql_query: "artifacts";
+    readonly site_sql_run: "artifacts";
+    readonly site_sql_execute: "artifacts";
+    readonly site_sql_export: "artifacts";
+    readonly site_sql_import: "artifacts";
+    readonly site_sql_reset: "artifacts";
     readonly sandbox_file_publish: "artifacts";
     readonly editable_artifact_list: "artifacts";
     readonly editable_artifact_create: "artifacts";
@@ -488,6 +579,7 @@ export type AgentFunctionToolClass = AgentCapabilityId | "runtime" | "sandbox";
 /** Tools served outside the first-party MCP catalog, by the name the model sees. */
 export declare const AGENT_FUNCTION_TOOL_CAPABILITIES: {
     readonly web_search: "webSearch";
+    readonly web_fetch: "webSearch";
     readonly x_search: "webSearch";
     readonly image_generation: "media";
     readonly request_human_input: "humanInput";
@@ -542,7 +634,7 @@ export declare const AGENT_BUILTIN_MCP_SERVER_CAPABILITIES: {
     readonly docs: "knowledge";
     readonly "google-drive-publishing": "workspaceConnectors";
 };
-export declare function firstPartyMcpToolCapability(tool: FirstPartyMcpToolName): AgentToolCapability;
+export declare function firstPartyMcpToolCapability(tool: FirstPartyMcpToolName): AgentFirstPartyToolOwner;
 /** Availability narrows configuration; it never grants a disabled capability. */
 export type AgentToolEnvironment = {
     /** Explicit product MCPs are independent of ambient workspace connectors. */
@@ -554,18 +646,31 @@ export type AgentToolEnvironment = {
     media?: boolean | undefined;
     hasDeferredTools?: boolean;
     routerInHistory?: boolean;
+    /**
+     * Whether the turn has a managed sandbox or Connected Machine attached.
+     * `false` withholds the `sandbox`-owned first-party tools, which could never
+     * find a command; undefined means not yet known and keeps them.
+     */
+    sandboxAttached?: boolean;
 };
-export declare const AGENT_RUNTIME_MECHANIC_TOOL_NAMES: readonly ["wait_for_input", "command_read", "command_wait"];
+/** Runtime mechanics every configured agent receives. */
+export declare const AGENT_RUNTIME_MECHANIC_TOOL_NAMES: readonly ["wait_for_input"];
+/** First-party tools a configured agent receives whenever compute is attached. */
+export declare const AGENT_SANDBOX_MECHANIC_TOOL_NAMES: readonly ["command_read", "command_wait"];
 /**
  * The one turn-time capability gate. Null means the historical attachment
  * rules, including unconditional Skill tools and router. Resource-derived
- * sandbox tools, product MCPs and runtime mechanics are never toggled.
+ * sandbox tools, product MCPs and runtime mechanics are never toggled; the
+ * `sandbox`-owned first-party tools follow `environment.sandboxAttached` for
+ * every session, configured or not.
  */
 export declare function resolveAgentToolFamilies(config: ResolvedAgentConfig | null | undefined, environment?: AgentToolEnvironment): {
     webSearch: boolean;
     humanInput: boolean;
     media: boolean;
     subagents: boolean;
+    /** Secret references resolve, the secret_* tools and the ask-card secret kind exist. */
+    secrets: boolean;
     skills: "manage" | "read" | false;
     router: boolean;
     allowsFirstPartyTool: (name: FirstPartyMcpToolName) => boolean;
@@ -585,8 +690,10 @@ export declare const AGENT_CAPABILITY_DESCRIPTIONS: Readonly<Record<AgentCapabil
  * `runtime_mechanics` are always present; every other module is included only
  * when its capability or resource is present. The model-context inspector
  * reports them as metadata on the `operational_contract` layer.
+ * `workspace_environment` and `attachments` are retired (never rendered) and
+ * stay listed only so stored model-context snapshots still parse.
  */
-export declare const AGENT_PROMPT_MODULE_IDS: readonly ["base_behavior", "runtime_mechanics", "renderer_markdown", "sandbox", "connected_machine", "repositories", "workspace_environment", "rig", "artifacts", "goals", "subagents", "knowledge", "skills", "admin", "attachments"];
+export declare const AGENT_PROMPT_MODULE_IDS: readonly ["base_behavior", "runtime_mechanics", "renderer_markdown", "sandbox", "connected_machine", "repositories", "workspace_environment", "rig", "artifacts", "media", "goals", "subagents", "knowledge", "skills", "secrets", "admin", "attachments"];
 export declare const AgentPromptModuleId: z.ZodEnum<{
     admin: "admin";
     artifacts: "artifacts";
@@ -595,11 +702,13 @@ export declare const AgentPromptModuleId: z.ZodEnum<{
     connected_machine: "connected_machine";
     goals: "goals";
     knowledge: "knowledge";
+    media: "media";
     renderer_markdown: "renderer_markdown";
     repositories: "repositories";
     rig: "rig";
     runtime_mechanics: "runtime_mechanics";
     sandbox: "sandbox";
+    secrets: "secrets";
     skills: "skills";
     subagents: "subagents";
     workspace_environment: "workspace_environment";
@@ -611,7 +720,6 @@ export declare const AGENT_CAPABILITY_PROMPT_MODULES: Readonly<Partial<Record<Ag
 export declare const AgentConfigErrorCode: z.ZodEnum<{
     agent_capability_unavailable: "agent_capability_unavailable";
     agent_config_conflict: "agent_config_conflict";
-    agent_config_not_enabled: "agent_config_not_enabled";
     agent_config_widening: "agent_config_widening";
 }>;
 export type AgentConfigErrorCode = z.infer<typeof AgentConfigErrorCode>;
@@ -658,10 +766,7 @@ export type ResolveAgentConfigInput = {
     /** The legacy session `instructions` field (alias target). */
     instructions?: string | undefined;
     workspace: AgentConfigWorkspaceContext;
-    deployment: AgentConfigDeploymentLimits & {
-        admissionEnabled: boolean;
-        defaultForNewSessions: boolean;
-    };
+    deployment: AgentConfigDeploymentLimits;
     /** Undefined for a top-level session. */
     parent?: AgentConfigParent | undefined;
     /** Whether the new session carries a goal. */
@@ -676,10 +781,10 @@ export type ResolveAgentConfigResult = {
  * Resolve the frozen agent configuration for a new session.
  *
  * Order: deployment limits, then the workspace default, then the request, then
- * the parent (children only narrow). Returns `config: null` (exact legacy)
- * when nothing asks for a configuration: no request `agent`, no configured
- * parent, no honored workspace default, and the default-for-new-sessions
- * switch off (or a legacy parent, which keeps its tree legacy).
+ * the parent (children only narrow). An omitted `agent` on a top-level
+ * session resolves the workspace default, else `{ capabilities: "all" }`.
+ * Returns `config: null` (exact legacy) only under a legacy parent, which
+ * keeps its tree legacy, and for site-auth maintenance sessions.
  */
 export declare function resolveAgentConfig(input: ResolveAgentConfigInput): ResolveAgentConfigResult;
 /**
@@ -691,9 +796,7 @@ export declare function resolveAgentConfigUpdate(input: {
     current: ResolvedAgentConfig | null;
     legacyCeiling: ResolvedAgentCapabilities;
     request: AgentConfigRequest;
-    deployment: AgentConfigDeploymentLimits & {
-        admissionEnabled: boolean;
-    };
+    deployment: AgentConfigDeploymentLimits;
     onlyNarrow: boolean;
     /** A parent's configuration or legacy ceiling; children never widen past it. */
     parentCeiling?: ResolvedAgentCapabilities | undefined;
@@ -779,6 +882,7 @@ export declare const AgentEffectiveTools: z.ZodObject<{
         schedules: z.ZodBoolean;
         artifacts: z.ZodBoolean;
         browser: z.ZodBoolean;
+        secrets: z.ZodBoolean;
         media: z.ZodBoolean;
         workspaceFiles: z.ZodBoolean;
         workspaceConnectors: z.ZodBoolean;
@@ -792,6 +896,7 @@ export declare const AgentEffectiveTools: z.ZodObject<{
         knowledge: "knowledge";
         media: "media";
         schedules: "schedules";
+        secrets: "secrets";
         skills: "skills";
         subagents: "subagents";
         webSearch: "webSearch";
@@ -810,6 +915,7 @@ export declare const AgentEffectiveTools: z.ZodObject<{
             knowledge: "knowledge";
             media: "media";
             schedules: "schedules";
+            secrets: "secrets";
             skills: "skills";
             subagents: "subagents";
             webSearch: "webSearch";
@@ -839,6 +945,7 @@ export declare const AgentEffectiveTools: z.ZodObject<{
             knowledge: "knowledge";
             media: "media";
             schedules: "schedules";
+            secrets: "secrets";
             skills: "skills";
             subagents: "subagents";
             webSearch: "webSearch";
@@ -868,5 +975,7 @@ export declare function projectAgentEffectiveTools(input: {
     /** Raw first-party names; other entries use model-facing names. */
     upfrontToolNames?: ReadonlySet<string>;
     firstPartyModelNames?: ReadonlyMap<FirstPartyMcpToolName, string>;
+    /** Native tools are attached only after selection and control-authority checks. */
+    nativeComputerTools?: boolean;
     mediaAttachment?: AgentMediaAttachment | undefined;
 }): AgentEffectiveTools;

package/dist/api-key-presets.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+/** Optional creation alias for the developer_setup organization access tier. */
+export declare const OrganizationApiKeyPreset: z.ZodEnum<{
+    developer_setup: "developer_setup";
+}>;
+export type OrganizationApiKeyPreset = z.infer<typeof OrganizationApiKeyPreset>;
+/**
+ * The current setup-route floor: workspace provisioning, configuration/cleanup,
+ * and explicit literal budget authority. workspace:admin also covers discovery and session/tool/
+ * schedule guards. It is broad authority, not setup-only, and never confers
+ * literal secrets:read. No account:admin, billing, or redundant read scopes.
+ */
+export declare const DEVELOPER_SETUP_API_KEY_PRESET: {
+    readonly id: "developer_setup";
+    readonly label: "Developer setup";
+    readonly description: "Set up shared workspaces, tools and budgets. Includes broad workspace administration and expires after 24 hours. Can't manage API keys.";
+    readonly permissions: ("usage_allowances:manage" | "workspace:admin" | "workspace:create")[];
+    readonly defaultExpiryHours: 24;
+};

package/dist/app-action-catalog-types.d.ts

@@ -0,0 +1,39 @@
+export type ActionCatalogEntry = {
+    /** Stable name an agent calls: the SDK method ("listSessions"), else "METHOD /path". */
+    id: string;
+    method: string;
+    path: string;
+    /** Contract schema names for the JSON body and response, when known. */
+    request: string[];
+    /**
+     * Query parameter names the route reads, from its handler. Set only when it
+     * reads any; describe lists them so a caller can filter and page.
+     */
+    query?: string[];
+    response: string[];
+    /**
+     * Why no MCP caller can complete this action: it needs the person's own
+     * Opengeni browser session. Set only on such actions; the server hides them.
+     */
+    browserOnly?: string;
+    /**
+     * The route that replaced this removed one ("METHOD /path"), which now only
+     * answers 410 `gone`. Set only on such actions; the server hides them from
+     * search, points describe and call at the replacement, and treats them as
+     * running nothing (no confirmation is asked for them).
+     */
+    retired?: string;
+    /**
+     * Where the action carries a key, password, token or other secret: field
+     * paths ("request.apiKey", "response.token") or a route reason, derived by
+     * the catalog generator. Without full access a chat leaves it to the app.
+     */
+    secretFields?: string[];
+    /**
+     * The workspace permission the route checks before anything else, from its
+     * handler's first access check. Set only when the handler shows one; the
+     * route's own checks still decide. Lets a caller leave out actions a person
+     * can never run.
+     */
+    permission?: string;
+};

package/dist/app-action-catalog.gen.d.ts

@@ -0,0 +1,2 @@
+import type { ActionCatalogEntry } from "./app-action-catalog-types.js";
+export declare const ACTION_CATALOG: readonly ActionCatalogEntry[];