@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/tool-catalog.d.ts

@@ -51,8 +51,30 @@ export declare const ToolDisplayMetadata: z.ZodObject<{
     toolName: z.ZodString;
     title: z.ZodOptional<z.ZodString>;
     accountLabel: z.ZodOptional<z.ZodString>;
+    connector: z.ZodOptional<z.ZodString>;
+    providerDomain: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type ToolDisplayMetadata = z.infer<typeof ToolDisplayMetadata>;
+/**
+ * How one connector account route is named. The model always gets the full
+ * account in tool descriptions; people see the connector, and the account only
+ * when there is more than one to tell apart.
+ */
+export type McpAccountRouteLabel = {
+    /** Model-facing account description. */
+    model: string;
+    connector: string;
+    providerDomain: string;
+    /** Present only when the connector has several accounts in the turn. */
+    account?: string | undefined;
+    /**
+     * The kind of need the connector serves, its catalog category
+     * ("communication", "files"), when one is known. Never model-facing.
+     */
+    kind?: string | undefined;
+};
+/** The short account line for approvals: "Linear", or "Linear · alice@example.com". */
+export declare function mcpAccountRouteReviewLabel(label: McpAccountRouteLabel): string;
 export declare const AttemptToolCatalogEntry: z.ZodObject<{
     identity: z.ZodObject<{
         serverId: z.ZodString;
@@ -218,6 +240,59 @@ export declare const AttemptToolCatalog: z.ZodObject<{
     generation: z.ZodNumber;
     digest: z.ZodString;
     createdAt: z.ZodString;
+    firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "account:admin": "account:admin";
+        "account:read": "account:read";
+        "api_keys:manage": "api_keys:manage";
+        "artifacts:publish": "artifacts:publish";
+        "artifacts:read": "artifacts:read";
+        "billing:manage": "billing:manage";
+        "billing:read": "billing:read";
+        "capabilities:manage": "capabilities:manage";
+        "codemode:call": "codemode:call";
+        "connections:personal": "connections:personal";
+        "connections:read": "connections:read";
+        "connections:write": "connections:write";
+        "documents:manage": "documents:manage";
+        "documents:search": "documents:search";
+        "enrollments:manage": "enrollments:manage";
+        "enrollments:read": "enrollments:read";
+        "environments:manage": "environments:manage";
+        "environments:use": "environments:use";
+        "files:read": "files:read";
+        "files:upload": "files:upload";
+        "files:write": "files:write";
+        "github:manage": "github:manage";
+        "github:use": "github:use";
+        "goals:manage": "goals:manage";
+        "mcp_servers:attach": "mcp_servers:attach";
+        "members:manage": "members:manage";
+        "rigs:manage": "rigs:manage";
+        "rigs:use": "rigs:use";
+        "scheduled_tasks:manage": "scheduled_tasks:manage";
+        "scheduled_tasks:run": "scheduled_tasks:run";
+        "secrets:list": "secrets:list";
+        "secrets:read": "secrets:read";
+        "secrets:use": "secrets:use";
+        "secrets:write": "secrets:write";
+        "sessions:control": "sessions:control";
+        "sessions:create": "sessions:create";
+        "sessions:read": "sessions:read";
+        "stream:acknowledge": "stream:acknowledge";
+        "stream:control": "stream:control";
+        "stream:view": "stream:view";
+        "terminal:attach": "terminal:attach";
+        "usage_allowances:manage": "usage_allowances:manage";
+        "variable-sets:attach": "variable-sets:attach";
+        "variable-sets:list": "variable-sets:list";
+        "variable-sets:manage": "variable-sets:manage";
+        "variable-sets:read": "variable-sets:read";
+        "variable-sets:use": "variable-sets:use";
+        "variable-sets:write": "variable-sets:write";
+        "workspace:admin": "workspace:admin";
+        "workspace:create": "workspace:create";
+        "workspace:read": "workspace:read";
+    }>>>;
     entries: z.ZodArray<z.ZodObject<{
         identity: z.ZodObject<{
             serverId: z.ZodString;
@@ -608,6 +683,402 @@ export declare const ToolGatewayCallResponse: z.ZodObject<{
     }, z.core.$loose>;
 }, z.core.$strict>;
 export type ToolGatewayCallResponse = z.infer<typeof ToolGatewayCallResponse>;
+/** A selector, never an authority claim. Symbolic paths use the canonical projection. */
+export declare const ToolGatewayTarget: z.ZodUnion<readonly [z.ZodObject<{
+    identity: z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    path: z.ZodArray<z.ZodString>;
+}, z.core.$strict>]>;
+export type ToolGatewayTarget = z.infer<typeof ToolGatewayTarget>;
+export declare const ToolGatewayResolveRequest: z.ZodObject<{
+    siteArtifactId: z.ZodOptional<z.ZodString>;
+    siteVersionId: z.ZodOptional<z.ZodString>;
+    target: z.ZodUnion<readonly [z.ZodObject<{
+        identity: z.ZodObject<{
+            serverId: z.ZodString;
+            toolName: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        path: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>]>;
+}, z.core.$strict>;
+export type ToolGatewayResolveRequest = z.infer<typeof ToolGatewayResolveRequest>;
+export declare const ToolGatewayResolvedTool: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    definitionDigest: z.ZodString;
+    entry: z.ZodObject<{
+        identity: z.ZodObject<{
+            serverId: z.ZodString;
+            toolName: z.ZodString;
+        }, z.core.$strict>;
+        modelName: z.ZodString;
+        codemodePath: z.ZodArray<z.ZodString>;
+        title: z.ZodOptional<z.ZodString>;
+        description: z.ZodOptional<z.ZodString>;
+        inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+        outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        annotations: z.ZodOptional<z.ZodObject<{
+            title: z.ZodOptional<z.ZodString>;
+            readOnlyHint: z.ZodOptional<z.ZodBoolean>;
+            destructiveHint: z.ZodOptional<z.ZodBoolean>;
+            idempotentHint: z.ZodOptional<z.ZodBoolean>;
+            openWorldHint: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$loose>>;
+        icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            src: z.ZodString;
+            mimeType: z.ZodOptional<z.ZodString>;
+            sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            theme: z.ZodOptional<z.ZodEnum<{
+                dark: "dark";
+                light: "light";
+            }>>;
+        }, z.core.$strict>>>;
+        source: z.ZodEnum<{
+            codex_apps: "codex_apps";
+            docs: "docs";
+            files: "files";
+            interaction: "interaction";
+            mcp: "mcp";
+            opengeni: "opengeni";
+        }>;
+        approval: z.ZodEnum<{
+            human: "human";
+            none: "none";
+            policy: "policy";
+        }>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ToolGatewayResolvedTool = z.infer<typeof ToolGatewayResolvedTool>;
+export declare const ToolGatewayInvokeRequest: z.ZodObject<{
+    siteArtifactId: z.ZodOptional<z.ZodString>;
+    siteVersionId: z.ZodOptional<z.ZodString>;
+    target: z.ZodUnion<readonly [z.ZodObject<{
+        identity: z.ZodObject<{
+            serverId: z.ZodString;
+            toolName: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>, z.ZodObject<{
+        path: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>]>;
+    operationId: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+    expectedDefinitionDigest: z.ZodOptional<z.ZodString>;
+    approvalToken: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ToolGatewayInvokeRequest = z.infer<typeof ToolGatewayInvokeRequest>;
+export declare const ToolGatewayInvokeResponse: z.ZodObject<{
+    operationId: z.ZodString;
+    tool: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        definitionDigest: z.ZodString;
+        entry: z.ZodObject<{
+            identity: z.ZodObject<{
+                serverId: z.ZodString;
+                toolName: z.ZodString;
+            }, z.core.$strict>;
+            modelName: z.ZodString;
+            codemodePath: z.ZodArray<z.ZodString>;
+            title: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+            outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            annotations: z.ZodOptional<z.ZodObject<{
+                title: z.ZodOptional<z.ZodString>;
+                readOnlyHint: z.ZodOptional<z.ZodBoolean>;
+                destructiveHint: z.ZodOptional<z.ZodBoolean>;
+                idempotentHint: z.ZodOptional<z.ZodBoolean>;
+                openWorldHint: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$loose>>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            source: z.ZodEnum<{
+                codex_apps: "codex_apps";
+                docs: "docs";
+                files: "files";
+                interaction: "interaction";
+                mcp: "mcp";
+                opengeni: "opengeni";
+            }>;
+            approval: z.ZodEnum<{
+                human: "human";
+                none: "none";
+                policy: "policy";
+            }>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    result: z.ZodObject<{
+        content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"text">;
+            text: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"image">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"audio">;
+            data: z.ZodString;
+            mimeType: z.ZodString;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource_link">;
+            name: z.ZodString;
+            title: z.ZodOptional<z.ZodString>;
+            uri: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            mimeType: z.ZodOptional<z.ZodString>;
+            size: z.ZodOptional<z.ZodNumber>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>, z.ZodObject<{
+            type: z.ZodLiteral<"resource">;
+            resource: z.ZodUnion<readonly [z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                text: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>, z.ZodObject<{
+                uri: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                blob: z.ZodString;
+                _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            }, z.core.$loose>]>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        }, z.core.$loose>], "type">>;
+        structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+        isError: z.ZodOptional<z.ZodBoolean>;
+        _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    }, z.core.$loose>;
+}, z.core.$strict>;
+export type ToolGatewayInvokeResponse = z.infer<typeof ToolGatewayInvokeResponse>;
+export declare const ToolGatewayTargetApprovalRequest: z.ZodObject<{
+    siteArtifactId: z.ZodOptional<z.ZodString>;
+    siteVersionId: z.ZodOptional<z.ZodString>;
+    identity: z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>;
+    operationId: z.ZodString;
+    arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+    expectedDefinitionDigest: z.ZodString;
+    rememberForSite: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type ToolGatewayTargetApprovalRequest = z.infer<typeof ToolGatewayTargetApprovalRequest>;
+export declare const ToolGatewayTargetApprovalResponse: z.ZodObject<{
+    bindingVersion: z.ZodLiteral<2>;
+    operationId: z.ZodString;
+    tool: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        definitionDigest: z.ZodString;
+        entry: z.ZodObject<{
+            identity: z.ZodObject<{
+                serverId: z.ZodString;
+                toolName: z.ZodString;
+            }, z.core.$strict>;
+            modelName: z.ZodString;
+            codemodePath: z.ZodArray<z.ZodString>;
+            title: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+            outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            annotations: z.ZodOptional<z.ZodObject<{
+                title: z.ZodOptional<z.ZodString>;
+                readOnlyHint: z.ZodOptional<z.ZodBoolean>;
+                destructiveHint: z.ZodOptional<z.ZodBoolean>;
+                idempotentHint: z.ZodOptional<z.ZodBoolean>;
+                openWorldHint: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$loose>>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            source: z.ZodEnum<{
+                codex_apps: "codex_apps";
+                docs: "docs";
+                files: "files";
+                interaction: "interaction";
+                mcp: "mcp";
+                opengeni: "opengeni";
+            }>;
+            approval: z.ZodEnum<{
+                human: "human";
+                none: "none";
+                policy: "policy";
+            }>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    approvalToken: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strict>;
+export type ToolGatewayTargetApprovalResponse = z.infer<typeof ToolGatewayTargetApprovalResponse>;
+/**
+ * What the Opengeni frame needs to ask a Site's viewer before a call: the
+ * viewer's own accounts that may run the declared tool, or how to connect one.
+ * Host code only; Site code never reaches this operation.
+ */
+export declare const ToolGatewaySiteConsentRequest: z.ZodObject<{
+    identity: z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>;
+    siteArtifactId: z.ZodString;
+    siteVersionId: z.ZodString;
+    arguments: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+}, z.core.$strict>;
+export type ToolGatewaySiteConsentRequest = z.infer<typeof ToolGatewaySiteConsentRequest>;
+export declare const ToolGatewaySiteConsentAccount: z.ZodObject<{
+    identity: z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>;
+    connector: z.ZodString;
+    account: z.ZodString;
+}, z.core.$strict>;
+export type ToolGatewaySiteConsentAccount = z.infer<typeof ToolGatewaySiteConsentAccount>;
+/**
+ * The provider's own reading of the exact arguments (for Gmail, the message
+ * as it would be sent: a raw message, a draft or a reply), never the Site's
+ * description of them.
+ */
+export declare const ToolGatewaySiteConsentReview: z.ZodObject<{
+    kind: z.ZodEnum<{
+        generic: "generic";
+        gmail: "gmail";
+    }>;
+    email: z.ZodOptional<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        cc: z.ZodString;
+        bcc: z.ZodString;
+        subject: z.ZodString;
+        attachments: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolGatewaySiteConsentReview = z.infer<typeof ToolGatewaySiteConsentReview>;
+export declare const ToolGatewaySiteConsentResponse: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    accounts: z.ZodArray<z.ZodObject<{
+        identity: z.ZodObject<{
+            serverId: z.ZodString;
+            toolName: z.ZodString;
+        }, z.core.$strict>;
+        connector: z.ZodString;
+        account: z.ZodString;
+    }, z.core.$strict>>;
+    selected: z.ZodNullable<z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>>;
+    review: z.ZodNullable<z.ZodObject<{
+        kind: z.ZodEnum<{
+            generic: "generic";
+            gmail: "gmail";
+        }>;
+        email: z.ZodOptional<z.ZodObject<{
+            from: z.ZodString;
+            to: z.ZodString;
+            cc: z.ZodString;
+            bcc: z.ZodString;
+            subject: z.ZodString;
+            attachments: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    connect: z.ZodNullable<z.ZodObject<{
+        capabilityId: z.ZodNullable<z.ZodString>;
+        name: z.ZodString;
+        providerDomain: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolGatewaySiteConsentResponse = z.infer<typeof ToolGatewaySiteConsentResponse>;
+/** Bounded compatibility manifest, not workspace discovery. */
+export declare const ToolGatewayManifestRequest: z.ZodObject<{
+    siteArtifactId: z.ZodOptional<z.ZodString>;
+    siteVersionId: z.ZodOptional<z.ZodString>;
+    identities: z.ZodArray<z.ZodObject<{
+        serverId: z.ZodString;
+        toolName: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolGatewayManifestRequest = z.infer<typeof ToolGatewayManifestRequest>;
+export declare const ToolGatewayManifestResponse: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    digest: z.ZodString;
+    tools: z.ZodArray<z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        definitionDigest: z.ZodString;
+        entry: z.ZodObject<{
+            identity: z.ZodObject<{
+                serverId: z.ZodString;
+                toolName: z.ZodString;
+            }, z.core.$strict>;
+            modelName: z.ZodString;
+            codemodePath: z.ZodArray<z.ZodString>;
+            title: z.ZodOptional<z.ZodString>;
+            description: z.ZodOptional<z.ZodString>;
+            inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+            outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+            annotations: z.ZodOptional<z.ZodObject<{
+                title: z.ZodOptional<z.ZodString>;
+                readOnlyHint: z.ZodOptional<z.ZodBoolean>;
+                destructiveHint: z.ZodOptional<z.ZodBoolean>;
+                idempotentHint: z.ZodOptional<z.ZodBoolean>;
+                openWorldHint: z.ZodOptional<z.ZodBoolean>;
+            }, z.core.$loose>>;
+            icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                src: z.ZodString;
+                mimeType: z.ZodOptional<z.ZodString>;
+                sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+                theme: z.ZodOptional<z.ZodEnum<{
+                    dark: "dark";
+                    light: "light";
+                }>>;
+            }, z.core.$strict>>>;
+            source: z.ZodEnum<{
+                codex_apps: "codex_apps";
+                docs: "docs";
+                files: "files";
+                interaction: "interaction";
+                mcp: "mcp";
+                opengeni: "opengeni";
+            }>;
+            approval: z.ZodEnum<{
+                human: "human";
+                none: "none";
+                policy: "policy";
+            }>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolGatewayManifestResponse = z.infer<typeof ToolGatewayManifestResponse>;
 export declare const ToolGatewayDeclarationsResponse: z.ZodObject<{
     catalogDigest: z.ZodString;
     moduleSpecifier: z.ZodString;
@@ -621,6 +1092,7 @@ export declare const CodemodeOperationState: z.ZodEnum<{
     outcome_unknown: "outcome_unknown";
     queued: "queued";
     running: "running";
+    waiting_for_approval: "waiting_for_approval";
 }>;
 export type CodemodeOperationState = z.infer<typeof CodemodeOperationState>;
 /**
@@ -658,7 +1130,10 @@ export declare const CodemodeOperation: z.ZodObject<{
         outcome_unknown: "outcome_unknown";
         queued: "queued";
         running: "running";
+        waiting_for_approval: "waiting_for_approval";
     }>;
+    durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
+    approvalRequestId: z.ZodOptional<z.ZodString>;
     result: z.ZodNullable<z.ZodObject<{
         content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
             type: z.ZodLiteral<"text">;
@@ -726,6 +1201,7 @@ export declare const CodemodeOperation: z.ZodObject<{
 }, z.core.$strict>;
 export type CodemodeOperation = z.infer<typeof CodemodeOperation>;
 export declare const CodemodeCallRequest: z.ZodObject<{
+    durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
     operationId: z.ZodString;
     catalogDigest: z.ZodString;
     identity: z.ZodObject<{
@@ -766,7 +1242,10 @@ export declare const CodemodeCallSubmission: z.ZodObject<{
             outcome_unknown: "outcome_unknown";
             queued: "queued";
             running: "running";
+            waiting_for_approval: "waiting_for_approval";
         }>;
+        durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
+        approvalRequestId: z.ZodOptional<z.ZodString>;
         result: z.ZodNullable<z.ZodObject<{
             content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"text">;

package/dist/tool-policy.d.ts

@@ -0,0 +1,5 @@
+/** Only a declared action discriminator can select an action-specific preference.
+ * Callers still validate the complete arguments against the tool schema. */
+export declare function toolPolicyActionName(toolName: string, inputSchema: unknown, args: unknown): string;
+/** Strip only JSON Schema annotations, never object property names or literal values. */
+export declare function executableToolSchema(value: unknown): unknown;

package/dist/tool-review-presentation.d.ts

@@ -0,0 +1,29 @@
+import type { ToolActionReview, ToolReviewContext, ToolReviewDetailsPage } from "./tool-action-review.js";
+/**
+ * Whether a field with this name carries a key, password, token, code or
+ * other secret, judged by its last word: "apiKey", "clientSecret", "code",
+ * "userCode" and "masterPassword" do; "credentialVersion", "credentialId",
+ * "errorCode", "hasWebhookSecret" and "nextPageToken" don't. The app-action catalog
+ * generator marks actions by it and an app action's card hides by it.
+ */
+export declare function secretFieldName(name: string): boolean;
+export declare function toolReviewFieldLabel(key: string): string;
+export declare function decodeReviewArguments(value: unknown): Record<string, unknown> | null;
+export declare function safeReviewValue(value: unknown, key?: string, protectedFields?: readonly string[], depth?: number): unknown;
+export declare function toolReviewFields(argumentsValue: unknown, context?: ToolReviewContext, toolName?: string): {
+    fields: ToolActionReview["fields"];
+    moreFields: number;
+};
+/**
+ * One short readable line of an app action's key values, for example
+ * "Email: anna@example.com · Role: admin", taken from its body and query.
+ * Values are shown as labelled data, never as the question itself. Secrets
+ * (by field name), and the secrets text can carry (URL sign-in parts, queries
+ * and webhook paths, connection string passwords, bearer credentials), are
+ * never shown.
+ */
+export declare function appActionReviewSummary(argumentsValue: unknown): string | undefined;
+/** Deterministic consequences from the reviewed bytes. Unknown fields remain visible. */
+export declare function toolReviewAction(toolName: string, argumentsValue: unknown, context?: ToolReviewContext): Pick<ToolActionReview, "title" | "approveLabel" | "effects" | "consequence" | "selectionCount" | "selectionKind">;
+/** A bounded slice of the immutable saved arguments; never evaluates a fresh provider query. */
+export declare function toolReviewDetails(argumentsValue: unknown, context: ToolReviewContext | undefined, path: string, offset: number, limit?: number): Omit<ToolReviewDetailsPage, "id" | "actionDigest" | "version">;

package/dist/tool-review-presentation.js

@@ -0,0 +1,21 @@
+import {
+  appActionReviewSummary,
+  decodeReviewArguments,
+  safeReviewValue,
+  secretFieldName,
+  toolReviewAction,
+  toolReviewDetails,
+  toolReviewFieldLabel,
+  toolReviewFields
+} from "./chunk-UCUOTRS6.js";
+export {
+  appActionReviewSummary,
+  decodeReviewArguments,
+  safeReviewValue,
+  secretFieldName,
+  toolReviewAction,
+  toolReviewDetails,
+  toolReviewFieldLabel,
+  toolReviewFields
+};
+//# sourceMappingURL=tool-review-presentation.js.map

package/dist/tool-review-presentation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}