@opengeni/react 0.28.2 → 0.32.1

package/dist/index.d.ts

@@ -1,2119 +1,144 @@
-import { S as SessionClientLike, C as ClientOverride } from './session-context-CAjlaeZb.js';
-export { b as EmbeddedFileAttachmentClientLike, c as EmbeddedGoalClientLike, d as EmbeddedHumanInputSessionClientLike, e as EmbeddedSessionClientLike, f as EmbeddedSessionEventClientLike, g as EmbeddedSessionLineageClientLike, h as EmbeddedSessionMcpApprovalPolicyClientLike, i as EmbeddedSessionReadClientLike, O as OpenGeniContextValue, u as useOpenGeni, j as useOpenGeniClient } from './session-context-CAjlaeZb.js';
-import * as react_jsx_runtime from 'react/jsx-runtime';
-import { WorkspaceControlEvent, EffectiveSessionControl, ClientModel, ScheduledTask, Session, VariableSet, CreateVariableSetRequest, UpdateVariableSetRequest, VariableSetVariableMetadata, RigChange, Rig, UpdateRigRequest, RigVersion, ProposeRigChangeRequest, CreateRigRequest, CapabilityPack, PackInstallation, RegisterCapabilityPackRequest, WorkspaceRegisteredPack, EnablePackRequest, Workspace, CreateWorkspaceRequest, UpdateWorkspaceRequest, BillingBalance, UsageEvent, SessionEvent, SessionCapabilities, DesktopStreamCapability, DesktopConnectionState, DesktopRfbFactory, TerminalCapability, OpenGeniRequestOptions, FsReadResponse, FsWriteResponse, WorkspaceCaptureManifest, GitFileDiff, WorkspaceCaptureDegradedReason, MachineState, Permission, SessionStatus as SessionStatus$1, CapabilityUnavailableReason, MachineView, CodexAccountsResponse, CodexAccount, CodexRotationSettings } from '@opengeni/sdk';
-export { MachineKind, MachineMetricsSeriesResponse, MachineState, MachineView, MachinesResponse, MetricSample } from '@opengeni/sdk';
-import * as react from 'react';
-import { ReactNode, ClipboardEvent, RefObject } from 'react';
-import { P as PendingApproval } from './session-C3tIXLim.js';
-export { B as BrowserSessionEventWindow, a as PendingHumanInputRequest, S as SESSION_EVENT_BROWSER_MAX_BYTES, b as SESSION_EVENT_BROWSER_MAX_COUNT, c as SESSION_EVENT_BROWSER_PENDING_MAX_BYTES, d as SESSION_EVENT_BROWSER_PENDING_MAX_COUNT, e as SESSION_EVENT_BROWSER_SINGLE_EVENT_MAX_BYTES, f as SessionEventsConnectionState, U as UseGoalOptions, g as UseGoalResult, h as UseHumanInputRequestsOptions, i as UseHumanInputRequestsResult, j as UseSessionControlOptions, k as UseSessionControlResult, l as UseSessionEventsOptions, m as UseSessionEventsResult, n as UseSessionLineageOptions, o as UseSessionLineageResult, p as UseSessionMcpApprovalPolicyOptions, q as UseSessionMcpApprovalPolicyResult, r as UseSessionOptions, s as UseSessionResult, t as approvalsFromRequiresAction, u as boundBrowserSessionEventWindow, v as buildTimeline, w as creditExhaustedFromEvents, x as extractSessionRef, y as groupTimeline, z as humanInputRequestFromEvent, A as isGoalEvent, C as isHumanInputEvent, D as isLineageRefreshEvent, E as isSessionMcpApprovalPolicyEvent, F as isTitleEvent, G as projectPendingApprovals, H as projectPendingHumanInputRequests, I as sessionStatusFromEvents, J as toolDisplayName, K as useGoal, L as useHumanInputRequests, M as useSession, N as useSessionControl, O as useSessionEvents, Q as useSessionLineage, R as useSessionMcpApprovalPolicy } from './session-C3tIXLim.js';
-import { C as ComposerState, S as SessionEventFeedOptions } from './use-composer-ClHy1rkL.js';
-export { a as ComposerSendExtras, F as FILE_ONLY_MESSAGE_TEXT, U as UseComposerOptions, c as composeSendInput, s as shouldSteerOnKey, b as shouldSubmitOnKey, u as useComposer } from './use-composer-ClHy1rkL.js';
-import { C as ComposerControlLinks, a as ComposerTranscriptionControlProps, S as SlashCommand, b as SlashCommandContext, c as ChatComposerMessages, d as SlashArg, e as CommandContext } from './composer-BMzimGTO.js';
-export { f as CommandResult, g as ComposerTranscriptionControl, h as ComposerTranscriptionMessages, i as ConfirmState, I as INITIAL_TRANSCRIPTION_CONTROL_STATE, N as Notice, O as OPEN_WORKSTREAM_CONTROL_EVENT, j as SlashCommandHandlers, T as TranscriptionControlAction, k as TranscriptionControlState, l as TranscriptionControlTransition, U as UseSlashCommandsOptions, m as UseSlashCommandsResult, n as UseTranscriptionOptions, o as UseTranscriptionResult, p as appendFinalTranscript, q as defaultChatComposerMessages, t as transitionTranscriptionControl, u as useSlashCommands, r as useTranscription } from './composer-BMzimGTO.js';
-import { U as UseFileAttachmentsResult } from './use-file-attachments-BmT8WtqO.js';
-export { F as FileAttachment, a as UseFileAttachmentsOptions, u as useFileAttachments } from './use-file-attachments-BmT8WtqO.js';
-import { A as ActivityItem } from './use-turn-queue-Drm_ypue.js';
-export { a as AgentMessageItem, b as AuthNeededItem, G as GoalItem, N as NoticeItem, Q as QueueMutationKind, R as ReasoningItem, S as SandboxItem, c as SessionStatusItem, T as TimelineGroup, d as TimelineItem, e as ToolCallItem, f as TurnEndItem, g as TurnOutcome, U as UseTurnQueueOptions, h as UseTurnQueueResult, i as UserMessageItem, W as WorkerItem, j as isTurnQueueEvent, u as useTurnQueue } from './use-turn-queue-Drm_ypue.js';
-import { c as createToolRegistry, T as ToolRegistry } from './session-ui-B_7cfN5u.js';
-export { B as BUILT_IN_TURN_SUMMARY_FACET_IDS, a as BuiltInTurnSummaryFacetId, C as CreateToolRegistryOptions, H as HumanInputAnswerDraft, b as HumanInputForm, d as HumanInputFormMessages, e as HumanInputFormProps, M as MessageTimeline, f as MessageTimelineProps, Q as QueueSurface, g as QueueSurfaceProps, h as TimelineRow, i as ToolRegistryEntry, j as ToolRenderer, k as ToolRendererProps, l as TurnSummary, m as TurnSummaryContext, n as TurnSummaryFacet, o as TurnSummaryFacetConfiguration, p as TurnSummaryFacetResult, q as TurnSummaryOptions, r as TurnSummaryProps, s as answersFromDrafts, t as defaultHumanInputFormMessages, u as rawTypeOf } from './session-ui-B_7cfN5u.js';
-export { CONNECTION_STATUS_META, ConnectionDot, ConnectionDotProps, ConnectionStatus, ConnectionStatusMeta, ConnectionStatusPill, ConnectionStatusPillProps, DeviceFlowPhase, EnrollmentConsent, EnrollmentConsentMachine, EnrollmentConsentPhase, EnrollmentConsentProps, EnrollmentDeviceFlow, EnrollmentDeviceFlowProps, HEALTH_TOKEN, HealthLevel, HealthVerdict, MACHINE_STATE_BADGE_META, METRICS, METRIC_WINDOWS, MachineCard, MachineCardProps, MachineDetail, MachineDetailProps, MachineDockBar, MachineDockBarProps, MachineHealthPill, MachineHealthPillProps, MachineMetrics, MachineMetricsProps, MachineStateBadgeMeta, MachineStatusPill, MachineStatusPillProps, MachinesClientLike, MachinesDashboard, MachinesDashboardProps, MetricDef, MetricHistoryChart, MetricHistoryChartProps, MetricKey, MetricSparkline, MetricSparklineProps, MetricWindow, SeriesPoint, SharedMachineDisclosure, SharedMachineDisclosureProps, UseMachinesOptions, UseMachinesResult, WINDOW_LABEL, connectionStatusForState, deriveHealth, healthPulses, pointsFor, useMachines } from './machines.js';
-import { ClassValue } from 'clsx';
-
-type OpenGeniProviderProps = {
-    client: SessionClientLike;
-    workspaceId: string;
-    onWorkspaceControlEvent?: ((event: WorkspaceControlEvent) => void) | undefined;
-    children?: ReactNode;
-};
-/**
- * Supplies the OpenGeni client + workspace to all hooks below it. Hooks also
- * accept `{ client, workspaceId }` overrides per call for multi-workspace UIs.
- */
-declare function OpenGeniProvider({ client, workspaceId, onWorkspaceControlEvent, children, }: OpenGeniProviderProps): react_jsx_runtime.JSX.Element;
-
-type ChatComposerProps = {
-    composer: ComposerState;
-    /** Canonical workstream control, separate from lifecycle status. */
-    effectiveControl?: EffectiveSessionControl | null | undefined;
-    /** Waiting prompts already ahead of a normal Send. */
-    queuedAheadCount?: number | undefined;
-    /** Whether broader Workspace Resume is authorized for this viewer. */
-    canControlWorkspace?: boolean | undefined;
-    /** Optional host routes used to navigate from effective Pause blockers. */
-    controlLinks?: ComposerControlLinks | undefined;
-    placeholder?: string | undefined;
-    disabled?: boolean | undefined;
-    autoFocus?: boolean | undefined;
-    /** Replaces the default keyboard hint under the field. */
-    hint?: string | undefined;
-    /** App controls in the footer row, replacing the hint. */
-    controlsStart?: ReactNode | undefined;
-    /** Provider-neutral speech capability. Provider configuration stays in workspace settings. */
-    transcription?: ComposerTranscriptionControlProps | undefined;
-    /** Content rendered above the textarea, inside the field chrome. */
-    header?: ReactNode | undefined;
-    /** Paste hook composed with the attachment paste path. */
-    onPaste?: ((event: ClipboardEvent<HTMLTextAreaElement>) => void) | undefined;
-    /** Opt-in file attachment state, typically from `useFileAttachments`. */
-    attachments?: UseFileAttachmentsResult | undefined;
-    /** Opt-in model picker choices. */
-    models?: ClientModel[] | undefined;
-    selectedModel?: string | undefined;
-    onSelectModel?: ((modelId: string) => void) | undefined;
-    className?: string | undefined;
-    commands?: readonly SlashCommand[] | undefined;
-    commandContext?: SlashCommandContext | undefined;
-    onClearView?: (() => void) | undefined;
-    /** Partial overrides for all composer-owned visible and accessible copy. */
-    messages?: Partial<ChatComposerMessages> | undefined;
-};
-/**
- * Batteries-included chat composer. This preset is assembled exclusively from
- * the public controller and compound primitives exported by the composer
- * subpath, so custom and default layouts share one behavioral implementation.
- */
-declare function ChatComposer({ composer, effectiveControl, queuedAheadCount, canControlWorkspace, controlLinks, placeholder, disabled, autoFocus, hint, controlsStart, transcription, header, onPaste, attachments, models, selectedModel, onSelectModel, className, commands, commandContext, onClearView, messages, }: ChatComposerProps): react_jsx_runtime.JSX.Element;
-
-type UseScheduledTasksOptions = ClientOverride & {
-    limit?: number | undefined;
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseScheduledTasksResult = {
-    tasks: ScheduledTask[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/** List the workspace's scheduled tasks (drift checks, sentinels, reapers, ...). */
-declare function useScheduledTasks(options?: UseScheduledTasksOptions): UseScheduledTasksResult;
-
-type UseWorkspaceSessionsOptions = ClientOverride & {
-    limit?: number | undefined;
-    parentSessionId?: string | null | undefined;
-    cursor?: string | undefined;
-    search?: string | undefined;
-    /** Return only the complete personal pinned projection. */
-    pinsOnly?: boolean | undefined;
-    /** Refresh interval (ms) for fleet/manager views. Off by default. */
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseWorkspaceSessionsResult = {
-    /**
-     * All visible rows, with pins first. This preserves the pre-pinning hook
-     * contract for consumers that only read `sessions`.
-     */
-    sessions: Session[];
-    /** The complete personal pinned section, also present in `sessions`. */
-    pinned: Session[];
-    /** True when the server omitted older pins from its bounded pinned section. */
-    pinnedTruncated: boolean;
-    nextCursor: string | null;
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/** List the workspace's sessions — the data behind fleet and manager views. */
-declare function useWorkspaceSessions(options?: UseWorkspaceSessionsOptions): UseWorkspaceSessionsResult;
-
-type UseVariableSetsOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseVariableSetsResult = {
-    variableSets: VariableSet[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-    create: (request: CreateVariableSetRequest) => Promise<VariableSet | null>;
-    update: (variableSetId: string, request: UpdateVariableSetRequest) => Promise<VariableSet | null>;
-    remove: (variableSetId: string) => Promise<boolean>;
-    /** Set/rotate a variable. Values are write-only — reads expose metadata only. */
-    setVariable: (variableSetId: string, name: string, value: string) => Promise<VariableSetVariableMetadata | null>;
-    deleteVariable: (variableSetId: string, name: string) => Promise<boolean>;
-    mutating: boolean;
-    mutationError: Error | null;
-    clearMutationError: () => void;
-};
-/**
- * Variable sets (named, encrypted variable sets attached to sessions
- * and scheduled tasks). Variable values are write-only end to end: this hook
- * never sees a value after it is sent.
- */
-declare function useVariableSets(options?: UseVariableSetsOptions): UseVariableSetsResult;
-/** @deprecated use UseVariableSetsOptions */
-type UseEnvironmentsOptions = UseVariableSetsOptions;
-/** @deprecated use UseVariableSetsResult */
-type UseEnvironmentsResult = UseVariableSetsResult & {
-    environments: VariableSet[];
-};
-/** @deprecated use useVariableSets */
-declare function useEnvironments(options?: UseEnvironmentsOptions): UseEnvironmentsResult;
-
-type UseRigsOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseRigsResult = {
-    rigs: Rig[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-    create: (request: CreateRigRequest) => Promise<Rig | null>;
-    update: (rigId: string, request: UpdateRigRequest) => Promise<Rig | null>;
-    remove: (rigId: string) => Promise<boolean>;
-    listVersions: (rigId: string) => Promise<RigVersion[] | null>;
-    activateVersion: (rigId: string, versionId: string) => Promise<RigVersion | null>;
-    listChanges: (rigId: string) => Promise<RigChange[] | null>;
-    proposeChange: (rigId: string, request: ProposeRigChangeRequest) => Promise<RigChange | null>;
-    mutating: boolean;
-    mutationError: Error | null;
-    clearMutationError: () => void;
-};
-/**
- * Rigs (workspace-scoped, versioned sandbox machine definitions). The list
- * polls; version/change reads are on-demand (they are per-rig detail, not part
- * of the list surface).
- */
-declare function useRigs(options?: UseRigsOptions): UseRigsResult;
-type UseRigOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseRigResult = {
-    rig: Rig | null;
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-    update: (request: UpdateRigRequest) => Promise<Rig | null>;
-    remove: () => Promise<boolean>;
-    activateVersion: (versionId: string) => Promise<RigVersion | null>;
-    proposeChange: (request: ProposeRigChangeRequest) => Promise<RigChange | null>;
-    /** Re-run verification for a change (asynchronous — poll for the outcome). */
-    verifyChange: (changeId: string) => Promise<RigChange | null>;
-    /** Promote a verified definition_edit into a new active version (rigs:manage). */
-    promoteChange: (changeId: string) => Promise<RigVersion | null>;
-    /** Re-verify the active version's checks in a clean throwaway sandbox. */
-    verify: () => Promise<{
-        ok: boolean;
-        versionId: string;
-    } | null>;
-    mutating: boolean;
-    mutationError: Error | null;
-    clearMutationError: () => void;
-};
-/**
- * A single rig (its active version + counts), polled so verification and
- * promotion state stay live. Owns the rig's write actions; the versions and
- * changes lists are separate polled reads (`useRigVersions`/`useRigChanges`).
- */
-declare function useRig(rigId: string, options?: UseRigOptions): UseRigResult;
-type UseRigVersionsOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseRigVersionsResult = {
-    versions: RigVersion[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/** A rig's append-only version history, newest-first (polled). */
-declare function useRigVersions(rigId: string, options?: UseRigVersionsOptions): UseRigVersionsResult;
-type UseRigChangesOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseRigChangesResult = {
-    changes: RigChange[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/**
- * A rig's change queue (polled). The default poll cadence lets a change move
- * through verifying → merged/rejected without a manual refresh.
- */
-declare function useRigChanges(rigId: string, options?: UseRigChangesOptions): UseRigChangesResult;
-
-type UsePacksOptions = ClientOverride & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UsePacksResult = {
-    /** Built-in + registered packs available to the workspace. */
-    packs: CapabilityPack[];
-    /** Enable/disable state per pack. */
-    installations: PackInstallation[];
-    /** The installation for a pack id, if any. */
-    installationFor: (packId: string) => PackInstallation | null;
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-    /** Register (or replace) a workspace-scoped pack manifest. */
-    register: (manifest: RegisterCapabilityPackRequest) => Promise<WorkspaceRegisteredPack | null>;
-    enable: (packId: string, request?: EnablePackRequest) => Promise<PackInstallation | null>;
-    /** Unregister a workspace-scoped pack (built-ins cannot be removed). */
-    remove: (packId: string) => Promise<boolean>;
-    mutating: boolean;
-    mutationError: Error | null;
-    clearMutationError: () => void;
-};
-/** Capability packs: catalog + installations + register/enable/unregister. */
-declare function usePacks(options?: UsePacksOptions): UsePacksResult;
-
-type UseWorkspacesOptions = Pick<ClientOverride, "client"> & {
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseWorkspacesResult = {
-    workspaces: Workspace[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-    create: (request: CreateWorkspaceRequest) => Promise<Workspace | null>;
-    update: (workspaceId: string, request: UpdateWorkspaceRequest) => Promise<Workspace | null>;
-    mutating: boolean;
-    mutationError: Error | null;
-    clearMutationError: () => void;
-};
-/**
- * The caller's workspaces (workspace switchers, onboarding). Not scoped to
- * the provider's workspace, so it only needs the client.
- */
-declare function useWorkspaces(options?: UseWorkspacesOptions): UseWorkspacesResult;
-
-type UseBillingUsageOptions = Pick<ClientOverride, "client"> & {
-    /** Account to read. Defaults to the caller's default account server-side. */
-    accountId?: string | undefined;
-    /** Filter usage to one workspace. */
-    workspaceId?: string | undefined;
-    /** Refresh interval (ms) for live billing meters. Off by default. */
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseBillingUsageResult = {
-    /** Prepaid credit balance (micro-USD), null until loaded. */
-    balance: BillingBalance | null;
-    /** Recent usage events (runs, tokens, cost, uploads, ...). */
-    usage: UsageEvent[];
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/**
- * Account billing usage: credit balance + recent usage events — the data
- * behind per-call billing meters. Account-scoped, so it only needs the
- * client; pass `workspaceId` to narrow usage to one workspace.
- */
-declare function useBillingUsage(options?: UseBillingUsageOptions): UseBillingUsageResult;
-
-type UseAvailableModelsOptions = Pick<ClientOverride, "client"> & {
-    /** Refresh interval (ms). Off by default — the host model list rarely moves. */
-    pollIntervalMs?: number | undefined;
-    enabled?: boolean | undefined;
-};
-type UseAvailableModelsResult = {
-    /** The provider-grouped models the host exposes (empty until loaded). */
-    models: ClientModel[];
-    /** The deployment's default model id, null until loaded. */
-    defaultModel: string | null;
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-/**
- * The host-exposed model list for a <ModelPicker>: fetches the deployment's
- * public client config (`GET /v1/config/client`) and surfaces the richer
- * provider-grouped `models` plus the `defaultModel` the picker should preselect.
- * Deployment-scoped, so it only needs the client (no workspace).
- */
-declare function useAvailableModels(options?: UseAvailableModelsOptions): UseAvailableModelsResult;
-
-type SessionCapabilitiesState = "idle" | "negotiating" | "ready" | "cold" | "on-demand" | "error";
-type UseSessionCapabilitiesOptions = ClientOverride & {
-    /**
-     * Live event log to fold `stream.url.rotated` from (usually
-     * `useSessionEvents().events`). When present the desktop socket stays fresh on
-     * a box rollover without a round-trip; stale-epoch rotations are dropped.
-     */
-    events?: SessionEvent[] | undefined;
-    /**
-     * Whether to acquire a viewer holder for the desktop pixel plane. Requires the
-     * un-redacted acknowledgment to have been recorded (else the attach 409s and
-     * the hook surfaces the consent requirement). Default false: read-only
-     * negotiation (no holder, no warm) — terminal/files/git work without it.
-     */
-    attachDesktop?: boolean | undefined;
-    /**
-     * Whether to acquire a viewer holder to warm the box for the REAL interactive
-     * terminal (the ttyd pty-ws plane). Symmetric with `attachDesktop` and shares
-     * the SAME viewer attach (one warm box serves both planes), but needs NO
-     * un-redacted acknowledgment — a shell is interactive by nature, and the gate
-     * is the scoped tunnel URL + stream token. Default false: the terminal stays on
-     * the read-only Channel-A firehose until the user opens/focuses it. The attach
-     * folds the minted `pty-ws` url+token into the `Terminal` cell.
-     */
-    attachTerminal?: boolean | undefined;
-    /**
-     * Whether to acquire a viewer holder to warm the box for a FILE WRITE — the
-     * wake-on-edit INTENT (a first keystroke in the editor), NOT passive browsing.
-     * Shares the SAME viewer attach as the desktop/terminal (one warm box, one
-     * holder) and — like the terminal — needs NO un-redacted acknowledgment:
-     * reading/writing files is the ordinary Channel-A control plane, not the pixel
-     * plane. It folds NO live URL (files ride the stateless HTTP plane) — it only
-     * refcounts liveness. Unlike desktop/terminal it warms even a COLD box: an edit
-     * legitimately cold-creates (that IS the wake), so the write lands ~100ms warm
-     * instead of paying the ~5s cold resume. Default false. IMPORTANT: merely
-     * opening/reading the Files tab must NOT set this — browsing capture-served
-     * trees/diffs needs no box, and warming one on a cold glance burns box-hours to
-     * serve reads the capture already answers for free.
-     */
-    attachFiles?: boolean | undefined;
-    /** Hold off negotiating (e.g. the workbench panel is collapsed). Default true. */
-    enabled?: boolean | undefined;
-    /** Poll cadence (ms) while the lease is cold/warming. Default 1500. */
-    warmingPollMs?: number | undefined;
-    /**
-     * Give up waiting for `warm` after this long while polling (ms) and surface a
-     * stalled error with a manual `renegotiate`. Default 30000. This is a UI
-     * patience deadline, independent from the worker's sandbox warming timeout.
-     * 0 disables the deadline.
-     */
-    warmingDeadlineMs?: number | undefined;
-};
-type UseSessionCapabilitiesResult = {
-    /** The negotiated capability doc — the single source of UI truth. */
-    capabilities: SessionCapabilities | null;
-    state: SessionCapabilitiesState;
-    error: Error | null;
-    /**
-     * 409 from the desktop attach: the un-redacted (or shared) plane needs explicit
-     * acknowledgment before a viewer holder is granted. Drives the consent prompt.
-     */
-    acknowledgmentRequired: "unredacted" | "shared" | null;
-    /** 429 from the desktop attach: the per-session viewer cap is reached. */
-    viewerCapReached: boolean;
-    /** The viewer holder id minted on a desktop attach (for detach/heartbeat). */
-    viewerId: string | null;
-    /** Force a re-negotiation (after acknowledging, a resolution change, etc.). */
-    renegotiate: () => void;
-};
-/**
- * The capability-negotiation hook. Discovers what THIS session+backend+OS
- * supports (FileSystem/Terminal/Git always-ish; DesktopStream/Recording
- * sometimes), drives capability-gated rendering, and — when `attachDesktop` —
- * holds a viewer lease + heartbeats it so the box stays warm while watched.
- *
- * Degradation is a value, never a crash: an unsupported surface comes back
- * `available:false`/`transport:null` + a `reason`; the components render the
- * reason-aware empty state. 409 (consent) and 429 (viewer cap) are surfaced as
- * typed signals, not thrown.
- */
-declare function useSessionCapabilities(sessionId: string | null | undefined, options?: UseSessionCapabilitiesOptions): UseSessionCapabilitiesResult;
-
-/**
- * The minimal WebSocket surface the frame renderer drives. Lets tests (and a
- * future transport swap) inject a fake without a live socket — the exact
- * analogue of `DesktopRfbFactory` for the noVNC path. Structurally a subset of
- * the browser `WebSocket`.
- */
-interface DesktopWebSocketLike {
-    binaryType: string;
-    send(data: ArrayBuffer): void;
-    close(): void;
-    addEventListener(type: "open" | "message" | "error" | "close", listener: (ev: {
-        data?: unknown;
-    } & Record<string, unknown>) => void): void;
-    removeEventListener(type: "open" | "message" | "error" | "close", listener: (ev: {
-        data?: unknown;
-    } & Record<string, unknown>) => void): void;
-}
-type DesktopWebSocketFactory = (url: string) => DesktopWebSocketLike;
-type UseRelayFrameStreamOptions = {
-    /** The desktop cell of the negotiated capabilities (`capabilities.DesktopStream`). */
-    capability: DesktopStreamCapability | null;
-    /** The mount target. A `<canvas>` is appended here on connect. */
-    containerRef: RefObject<HTMLDivElement | null>;
-    /** Custom socket factory (tests / a transport swap). Defaults to `new WebSocket(url)`. */
-    webSocketFactory?: DesktopWebSocketFactory | undefined;
-};
-type UseRelayFrameStreamResult = {
-    state: DesktopConnectionState;
-    error: Error | null;
-    /** Tear down + reopen the socket (e.g. after a drop, once a fresh url arrives). */
-    reconnect: () => void;
-};
-/**
- * VIEW-ONLY PNG-frame renderer for a SELF-HOSTED desktop stream — the relay
- * transport (`transport: "relay-frames"`, `client: "frames"`). The self-hosted
- * agent produces one PNG per frame as a protobuf datagram over the relay; there
- * is no RFB/noVNC here. This hook opens the relay DESKTOP channel as a CLIENT
- * (mirroring the proven diagnostic wire protocol), decodes each PNG onto a
- * `<canvas>` mounted into `containerRef`, and drives the connection state
- * machine: idle → connecting (ws opening) → connected (first painted frame) →
- * error (ws error/close/ack rejection).
- *
- * It is DORMANT for any other transport (or no url): it stays idle and touches
- * nothing, so the noVNC path owns the surface. SSR-safe: the socket + DOM attach
- * live inside `useEffect`.
- *
- * Backpressure (critical — frames are ~1.8MB at ~10fps): at most one frame is
- * decoded at a time; a frame arriving mid-decode replaces the pending one
- * (latest-wins), so a slow decode can never build an unbounded queue.
- */
-declare function useRelayFrameStream(options: UseRelayFrameStreamOptions): UseRelayFrameStreamResult;
-
-type UseDesktopStreamOptions = {
-    /** The desktop cell of the negotiated capabilities (`capabilities.DesktopStream`). */
-    capability: DesktopStreamCapability | null;
-    /** The mount target. RFB (or the frame canvas) attaches here on connect. */
-    containerRef: RefObject<HTMLDivElement | null>;
-    /** Read-only by default (v1 ruling H). interactive only when cap.mode allows. */
-    interactive?: boolean | undefined;
-    scaleViewport?: boolean | undefined;
-    /** Custom RFB factory (tests / a WebRTC swap). Defaults to a lazy @novnc/novnc. */
-    rfbFactory?: DesktopRfbFactory | undefined;
-    /** Custom socket factory for the `relay-frames` transport (tests). Defaults to
-     *  `new WebSocket(url)`. Mirrors `rfbFactory` for the frame renderer. */
-    webSocketFactory?: DesktopWebSocketFactory | undefined;
-};
-type UseDesktopStreamResult = {
-    state: DesktopConnectionState;
-    error: Error | null;
-    /** Manual reconnect (e.g. after a securityfailure once a fresh URL arrives). */
-    reconnect: () => void;
-};
-/**
- * Drive the noVNC RFB lifecycle from a `DesktopStreamCapability`, using the
- * SDK's `desktop.ts` reducer + `desktopSocketUrl`. SSR-safe: the RFB import and
- * the DOM attach happen inside `useEffect`, so a server render is a no-op and
- * the component shows its placeholder until hydration.
- *
- * Read-only is enforced at three layers: `capability.mode` (server) →
- * `interactive` prop → `RFB.viewOnly`. v1 always resolves to read-only. On a
- * capability `url` change (a rotation), the old RFB disconnects and a fresh one
- * connects to the new URL — a brief "desktop blink", acceptable on rollover.
- *
- * Transport dispatch: a Modal box negotiates `transport: "vnc-ws"` and drives the
- * noVNC RFB below. A SELF-HOSTED machine negotiates `transport: "relay-frames"`
- * (PNG-per-frame over the relay, view-only) — that path is delegated to
- * `useRelayFrameStream`, which paints a `<canvas>`. Both hooks are ALWAYS called
- * (rules of hooks); each is dormant for the other's transport, and we return the
- * result of whichever owns the surface. The public interface is identical either
- * way, so `DesktopViewer` is transport-agnostic.
- */
-declare function useDesktopStream(options: UseDesktopStreamOptions): UseDesktopStreamResult;
-
-/** The ttyd connection lifecycle as surfaced to the component. */
-type TerminalStreamStatus = "connecting" | "open" | "closed" | "error";
-type UseTerminalStreamOptions = {
-    /** The Terminal cell of the negotiated capabilities (`capabilities.Terminal`).
-     *  The stream connects ONLY when `transport === "pty-ws"` and `url` is set; on a
-     *  cold box (`transport === "sse-events"` / no url) it stays idle and the caller
-     *  falls back to the Channel-A read-only firehose. */
-    capability: Pick<TerminalCapability, "transport" | "url" | "token"> | null;
-    /** Called for each OUTPUT payload from ttyd (write verbatim into xterm). */
-    onOutput?: ((data: string) => void) | undefined;
-    /** Called when ttyd sends a SET_WINDOW_TITLE frame. */
-    onTitle?: ((title: string) => void) | undefined;
-    /** Initial PTY size to seed the ttyd auth frame + first resize. */
-    initialCols?: number | undefined;
-    initialRows?: number | undefined;
-};
-type UseTerminalStreamResult = {
-    /** True once the ttyd socket is open (and the auth frame has been sent). */
-    connected: boolean;
-    status: TerminalStreamStatus;
-    /** Pipe a keystroke/paste to the PTY stdin. No-op until the socket is open. */
-    write: (data: string) => void;
-    /** Tell ttyd the PTY window changed size (on xterm fit/resize). */
-    resize: (cols: number, rows: number) => void;
-    /** Tear the socket down (the effect also tears down on unmount / url change). */
-    disconnect: () => void;
-};
-/**
- * Drive a ttyd PTY-over-websocket connection from a `pty-ws` Terminal capability,
- * symmetric with `use-desktop-stream` (the noVNC-over-tunnel hook). The scoped
- * stream token is already embedded in the minted tunnel `url`; the WebSocket is
- * opened with the REQUIRED ttyd subprotocol "tty".
- *
- * ttyd wire protocol (see `@opengeni/sdk/terminal`):
- *   - first frame: `JSON.stringify({ AuthToken: "" })` (+ optional columns/rows).
- *   - client→server: INPUT = "0"+data ; RESIZE = "1"+JSON({columns,rows}).
- *   - server→client: "0" = OUTPUT (→ xterm) ; "1" = SET_WINDOW_TITLE ;
- *     "2" = SET_PREFERENCES (ignored). Binary frames are decoded the same way.
- *
- * On a `url`/`token` rotation (a box rollover folds a fresh address into the cell)
- * the effect re-runs: the old socket closes and a fresh one connects — a brief
- * terminal blink, acceptable on rollover (mirrors the desktop's RFB hot-swap).
- * SSR-safe: the socket open lives in `useEffect`, so a server render is a no-op.
- */
-declare function useTerminalStream(options: UseTerminalStreamOptions): UseTerminalStreamResult;
-
-type TerminalChunk = {
-    /** Stable key (the source event id) so the xterm writer tracks a written-cursor. */
-    id: string;
-    /** Raw output bytes (utf-8 lossy) — written verbatim into xterm. */
-    text: string;
-    /** stdout vs stderr (drives optional tinting). */
-    stream: "stdout" | "stderr";
-    /** Global ordering: the source event sequence. */
-    seq: number;
-};
-type UseSandboxTerminalOptions = ClientOverride & {
-    /** The live session event log (usually `useSessionEvents().events`). */
-    events: SessionEvent[];
-    /** Restrict to one PTY (by ptyId). Omit to interleave the agent firehose +
-     *  every PTY. */
-    ptyId?: string | undefined;
-    /** Include the agent's command-output firehose (sandbox.command.output.delta).
-     *  Default true — the read-only "terminal-as-events" the data path settled on. */
-    includeAgentFirehose?: boolean | undefined;
-    /**
-     * OPEN an interactive PTY against the box so the user can type, not just watch.
-     * When true (and the session is live) the hook calls `terminalPtyOpen` once,
-     * tracks the returned ptyId, exposes `write` immediately (bound to that ptyId),
-     * and closes the PTY on unmount. The PTY's banner + every output delta ride the
-     * SSE spine (`terminal.pty.*`) back into `events`, so xterm fills in. Default
-     * false — a caller that only wants the read-only firehose stays projection-only.
-     */
-    interactive?: boolean | undefined;
-    /** Lease liveness ("cold" | "warm" | "draining"). The interactive PTY is only
-     *  opened once the box is warm — opening on a cold box (ptyCapable is advertised
-     *  cold too) races the box and leaves a dead read-only terminal. */
-    liveness?: string | undefined;
-};
-type UseSandboxTerminalResult = {
-    /** Ordered, deduped output chunks to write() into xterm.js. */
-    chunks: TerminalChunk[];
-    /** Whether a PTY is currently open (drives the prompt/cursor affordance). */
-    running: boolean;
-    /**
-     * Interactive write fn when a PTY is open and the backend supports stdin
-     * (`terminal.transport === "pty-ws"` / `PtyOpenResponse.supportsInput`). Null
-     * in the read-only event-projection case (v1 default).
-     */
-    write: ((data: string) => void) | null;
-    /** The active PTY id, if one is open. */
-    activePtyId: string | null;
-    /** Close the active PTY (no-op when none is open). */
-    close: () => void;
-    /** A PTY-open failure (interactive mode), if any. */
-    error: Error | null;
-};
-/**
- * Project the Channel-A event log into an xterm-writable byte stream. The
- * terminal is "terminal-as-events": there is NO new socket in v1 — the agent's
- * command output (`sandbox.command.output.delta`) and any interactive PTY
- * (`terminal.pty.output.delta`) ride the existing SSE spine. When a PTY is open
- * and the backend accepts stdin, `write` pipes keystrokes via the SDK
- * `terminalPtyWrite` (the synchronous Channel-A control path).
- */
-declare function useSandboxTerminal(sessionId: string | null | undefined, options: UseSandboxTerminalOptions): UseSandboxTerminalResult;
-
-/** The git-status overlay a file row may carry (tints modified files in the tree). */
-type FileTreeStatus = "added" | "modified" | "deleted" | "renamed" | "untracked";
-type CapturedFileUnavailableReason = "not-captured" | "too-large" | "content-missing";
-/** A cold capture can index a path without retaining its contents. Components
- *  use this typed result to offer an explicit wake action instead of silently
- *  turning passive review into a live sandbox read. */
-declare class CapturedFileUnavailableError extends Error {
-    readonly path: string;
-    readonly reason: CapturedFileUnavailableReason;
-    readonly code = "captured_file_unavailable";
-    constructor(path: string, reason: CapturedFileUnavailableReason);
-}
-declare class FileWriteConflictError extends Error {
-    readonly path: string;
-    readonly expectedContent: string;
-    readonly liveContent: string;
-    readonly code = "file_write_conflict";
-    constructor(path: string, expectedContent: string, liveContent: string);
-}
-type SandboxWriteFileOptions = {
-    /** Exact text loaded into the editor. The live file is re-read before write;
-     *  divergence fails closed with FileWriteConflictError. */
-    expectedContent?: string | undefined;
-    /** Deliberately bypass the expected-content guard after a visible conflict. */
-    force?: boolean | undefined;
-};
-/** A node in the Pierre file tree. `children === undefined` ⇒ an unexpanded dir
- *  (lazy treeMode); `children: []` ⇒ an expanded-but-empty dir. */
-type FileTreeNode = {
-    path: string;
-    name: string;
-    kind: "file" | "dir";
-    children?: FileTreeNode[] | undefined;
-    size?: number | null | undefined;
-    status?: FileTreeStatus | undefined;
-    /** A residue dir the capture COLLAPSED (node_modules, .git, dist, …): its
-     *  contents were never indexed. Cold, expanding it can't list children — the
-     *  UI shows an inline "contents on machine" row until the box is warm. */
-    truncated?: boolean | undefined;
-};
-type UseSandboxFilesOptions = ClientOverride & {
-    /** Live event log (usually `useSessionEvents().events`) — drives auto-refresh
-     *  on `fs.changed` / `git.changed`. */
-    events?: SessionEvent[] | undefined;
-    /** Initial path to list (workspace root by default). */
-    rootPath?: string | undefined;
-    /** Hold off the initial list (e.g. panel collapsed). Default true. */
-    enabled?: boolean | undefined;
-    /** The lease liveness ("cold" | "warm" | "draining"). The structured FileSystem
-     *  capability is advertised even on a COLD box, so the mount-time list can race
-     *  the box: it lists before the box is warm, gets an empty/errored result, and
-     *  (with no `fs.changed` event) never re-lists. Passing liveness re-lists when
-     *  the box first becomes warm, so the tree populates as soon as the box is up. */
-    liveness?: string | undefined;
-    /** The latest turn-end workspace capture (from `useWorkspaceCapture`). The tree
-     *  paints immediately from this durable index, then a warm box reconciles live
-     *  in place. If that live read fails, the capture remains a truthful read-only
-     *  fallback instead of turning into an empty error surface. */
-    capture?: WorkspaceCaptureManifest | null | undefined;
-    /** Called when an OPTIMISTIC mutation is reverted because its background
-     *  Channel-A op failed (e.g. a 409 rename collision). The host wires this to a
-     *  toast — the tree silently rolls the node back, the user sees why. */
-    onMutationError?: ((error: Error, op: string) => void) | undefined;
-};
-type UseSandboxFilesResult = {
-    /** The tree roots (the listed root's children). */
-    tree: FileTreeNode[];
-    /** Lazy-expand a directory node in place (lists its immediate children). */
-    expand: (path: string) => Promise<void>;
-    /** Paths whose lazy `fs.list` is currently in flight — the FileBrowser shows a
-     *  spinner on these nodes so a 2-3s Channel-A list never looks frozen. */
-    expandingPaths: Set<string>;
-    /** Read a file for the preview pane (text or base64-for-binary, size-capped). */
-    readFile: (path: string, options?: OpenGeniRequestOptions) => Promise<FsReadResponse>;
-    /** Write a file (overwrite, last-writer-wins) — the editor save path.
-     *  Optimistic: a brand-new file is spliced into the tree immediately and the
-     *  Channel-A write runs in the background; on failure the splice is reverted. */
-    writeFile: (path: string, content: string, options?: SandboxWriteFileOptions) => Promise<FsWriteResponse>;
-    /** Create a new empty file (refuses to clobber an existing path: overwrite=false). */
-    createFile: (path: string) => Promise<void>;
-    /** Create a directory (recursive by default). */
-    createDir: (path: string) => Promise<void>;
-    /** Delete a path (pass recursive=true for a non-empty directory). */
-    deleteEntry: (path: string, recursive?: boolean) => Promise<void>;
-    /** Move / rename a path (rename == move). Refuses to clobber unless overwrite=true. */
-    moveEntry: (path: string, newPath: string, opts?: {
-        overwrite?: boolean;
-    }) => Promise<void>;
-    /** Re-list the whole tree from the root. */
-    refresh: () => Promise<void>;
-    /** Which source the tree is currently served from: the live box, the turn-end
-     *  capture (cold/offline), or neither yet. M5's source badge reads this. */
-    source: "live" | "capture" | null;
-    /** When the served capture was taken (ISO), when `source === "capture"`. */
-    capturedAt: string | null;
-    loading: boolean;
-    error: Error | null;
-};
-/**
- * Project the FileSystem service into a lazy-loaded Pierre tree. The initial
- * list pulls one level (depth 1); `expand(path)` lists a directory's immediate
- * children on demand (the fast lazy-tree UX). A git-status overlay tints
- * modified files. Auto-refreshes when an `fs.changed` / `git.changed` event
- * arrives on the live log.
- */
-declare function useSandboxFiles(sessionId: string | null | undefined, options?: UseSandboxFilesOptions): UseSandboxFilesResult;
-
-type UseSandboxGitOptions = ClientOverride & {
-    /** Live event log (usually `useSessionEvents().events`) — drives auto-refresh
-     *  on `git.changed`. */
-    events?: SessionEvent[] | undefined;
-    /** Repo root within the workspace (multi-repo). Default: workspace root. */
-    repoPath?: string | undefined;
-    /** All repository roots in the workspace. When supplied, status and diff are
-     *  aggregated into one workspace-wide result and paths are workspace-relative. */
-    repoPaths?: readonly string[] | undefined;
-    /** Diff the staged index vs HEAD (`--cached`) instead of the working tree. */
-    staged?: boolean | undefined;
-    /** Hold off the initial fetch. Default true. */
-    enabled?: boolean | undefined;
-    /** Lease liveness ("warm" | "draining" | "cold"). When NOT warm, the diff is
-     *  served from the capture (cold/offline) instead of a live `gitDiff` RPC. */
-    liveness?: string | undefined;
-    /** The latest turn-end capture (from `useWorkspaceCapture`). Seeds the diff
-     *  immediately; a warm box reconciles live and leaves this durable review
-     *  surface in place if the live request is temporarily unavailable. */
-    capture?: WorkspaceCaptureManifest | null | undefined;
-};
-/** A Git diff qualified into workspace scope. `repoRoot` is present for the
- *  workspace-wide path and lets review UI group real repositories without
- *  guessing from the first path segment. */
-type SandboxGitFileDiff = GitFileDiff & {
-    repoRoot?: string | undefined;
-};
-type UseSandboxGitResult = {
-    /** Working-tree (or staged) diff vs HEAD — the structured hunks the Pierre
-     *  diff view renders. */
-    diff: SandboxGitFileDiff[];
-    branch: string | null;
-    /** Whether a repo is actually mounted (drives "no repository" vs "no changes"). */
-    isRepo: boolean;
-    ahead: number;
-    behind: number;
-    /** Number and workspace-relative roots of repositories represented here. */
-    repoCount: number;
-    repoRoots: string[];
-    refresh: () => Promise<void>;
-    /** Which source the diff is served from: the live box or the turn-end capture. */
-    source: "live" | "capture" | null;
-    /** When the served capture was taken (ISO), when `source === "capture"`. */
-    capturedAt: string | null;
-    loading: boolean;
-    error: Error | null;
-};
-/**
- * Project the Git service into the Pierre diff data contract: structured
- * `GitFileDiff[]` (per-file hunks with per-line old/new numbers, rename
- * detection, binary flag, add/del counts) plus branch + ahead/behind. When the
- * box is warm the `git diff` runs in-box (API-direct); when it is cold/offline the
- * diff is served from the turn-end capture instead. Refreshes on
- * `git.changed`; reconciles live in place on the cold→warm transition.
- */
-declare function useSandboxGit(sessionId: string | null | undefined, options?: UseSandboxGitOptions): UseSandboxGitResult;
-
-type UseWorkspaceCaptureOptions = ClientOverride & {
-    /** Live event log (usually `useSessionEvents().events`) — a
-     *  `workspace.revision.captured` for a NEWER revision refreshes the manifest. */
-    events?: SessionEvent[] | undefined;
-    /** Hold off the mount fetch (e.g. the workbench panel is collapsed). Default true. */
-    enabled?: boolean | undefined;
-};
-type UseWorkspaceCaptureResult = {
-    /** The resolved manifest (tree index + per-repo diffs + file refs), or null when
-     *  no capture exists (falls back to the live/wake path — status quo). */
-    capture: WorkspaceCaptureManifest | null;
-    /** The loaded capture's monotonic revision, or null when unavailable. */
-    revision: number | null;
-    /** When the loaded capture was taken (ISO), for the "as of <time>" source badge. */
-    capturedAt: string | null;
-    /** Whether a capture is available at all (the `{available:false}` discriminator). */
-    available: boolean;
-    /** Why the newest durable revision is unavailable. null means no capture has
-     *  been attempted yet; a value means capture explicitly failed closed and
-     *  consumers must use the live box rather than trust an incomplete snapshot. */
-    degradedReason: WorkspaceCaptureDegradedReason | null;
-    /** The changed-file count from the capture's stats, resolved on the FIRST GET
-     *  (from the response's top-level `stats`, before any manifest-URL hop). null
-     *  until that first resolve; 0 when no capture exists. This is the pre-paint
-     *  "changes exist?" signal the dock uses to pick its default tab with no
-     *  embedder events-at-mount contract. */
-    fileCount: number | null;
-    /** A newer revision has been ANNOUNCED than the one currently loaded (a refresh
-     *  is in flight or pending). M5's source badge can show a subtle "updating…". */
-    isStale: boolean;
-    loading: boolean;
-    error: Error | null;
-    /** Force a re-fetch of the latest capture. */
-    refresh: () => Promise<void>;
-};
-/**
- * The cold-paint data source: fetch the latest turn-end workspace capture with a
- * SINGLE api round-trip on mount (no machine, no Channel-A — this is the <200ms
- * first paint). The manifest is served inline in the common
- * case; a rare >2MB manifest comes back as a short-TTL signed URL we follow.
- *
- * Subscribes to the live event log: a `workspace.revision.captured` for a revision
- * newer than the one loaded triggers a background refresh (stale-while-revalidate).
- * `{available:false}` is a value, never a crash — consumers fall back to the
- * live/wake path exactly as before the capture feature existed.
- */
-declare function useWorkspaceCapture(sessionId: string | null | undefined, options?: UseWorkspaceCaptureOptions): UseWorkspaceCaptureResult;
-
-/**
- * The wake-on-edit state machine. This hook owns the logic and the UI renders
- * its result. States are explicit and exhaustive:
- *
- *   viewing-cold      — cold snapshot open, no local edits (editable, cloud).
- *   buffering         — local edits buffered; the box is not warm and no warm is
- *                       yet in flight (the host has not attached).
- *   warming           — edits buffered; the box is actively coming up (the host
- *                       attached a viewer in response to `wantsWarm`).
- *   flushing          — the box is warm; the guarded write is in flight.
- *   flushed           — the buffer was written to the live box.
- *   conflict          — the live file diverged from the captured base between
- *                       capture and flush; NO write was issued (C2).
- *   readonly-offline  — a self-hosted machine that is offline; read-only, no wake.
- */
-type WorkspaceEditState = "viewing-cold" | "buffering" | "warming" | "flushing" | "flushed" | "conflict" | "readonly-offline";
-type WorkspaceEditConflict = {
-    path: string;
-    /** The capture-served content the edit was based on. */
-    base: string;
-    /** The live content found on the box at flush time (what would be overwritten). */
-    live: string;
-};
-type UseWorkspaceEditOptions = ClientOverride & {
-    /** The file being edited (workspace-relative). null disables the machine. */
-    path?: string | null | undefined;
-    /** The capture-served content loaded into the editor — the flush base (C2). */
-    baseContent?: string | null | undefined;
-    /** `capabilities.liveness` — "warm" | "draining" | "cold". Drives the flush. */
-    liveness?: string | undefined;
-    /** True while the host is actively warming the box (attach in flight, not warm
-     *  yet) — lifts `buffering` → `warming`. The host sets this after acting on
-     *  `wantsWarm` (e.g. flipping `attachFiles` on `useSessionCapabilities`). */
-    warming?: boolean | undefined;
-    /** A self-hosted machine that is OFFLINE: read-only, no remote wake possible. */
-    offline?: boolean | undefined;
-    /** Called once when the first cold edit needs the box warmed — the host wires
-     *  this to its liveness primitive (flip `attachFiles`/`attachViewer`). */
-    onWarmRequested?: (() => void) | undefined;
-};
-type UseWorkspaceEditResult = {
-    state: WorkspaceEditState;
-    /** The editor should be read-only (self-hosted offline). */
-    readOnly: boolean;
-    /** The current buffered content (null = no local edit yet). */
-    buffer: string | null;
-    /** The host should warm the box (flip its attach primitive). Latches true from
-     *  the first cold edit until the buffer flushes or is discarded. */
-    wantsWarm: boolean;
-    /** Record an edit from the editor (idempotent per identical content). */
-    edit: (content: string) => void;
-    /** The conflict detail when `state === "conflict"`. */
-    conflict: WorkspaceEditConflict | null;
-    /** Flush the buffer regardless of the base guard (the user chose "overwrite"
-     *  from the conflict bar). Writes last-writer-wins. */
-    overwrite: () => Promise<void>;
-    /** Drop the local buffer and return to viewing the snapshot. */
-    discard: () => void;
-    error: Error | null;
-};
-/**
- * Cold-editing without a spinner: the editor opens instantly from the capture,
- * the first keystroke buffers locally AND signals the host to warm the box, and on
- * warm the buffer flushes IF the live file still matches the captured base — else a
- * non-blocking conflict is surfaced and nothing is overwritten.
- *
- * The base guard compares the live content at flush time against `baseContent`
- * (the exact bytes the editor loaded). This is equivalent to the sha256 compare
- * the design specifies — M1 leaves `baseHash` null, so the loaded content IS the
- * authoritative base — and avoids async Web Crypto in the render path.
- */
-declare function useWorkspaceEdit(sessionId: string | null | undefined, options?: UseWorkspaceEditOptions): UseWorkspaceEditResult;
-
-/** The one truthful machine indicator. Honest staleness beats
- *  fake liveness: a cold/asleep box reads "offline — as of <time>", never "live". */
-type MachineChipState = "live" | "waking" | "offline";
-type MachineChip = {
-    state: MachineChipState;
-    /** A ready-to-render label ("Live" / "Waking…" / "Offline — as of 3m ago"). */
-    label: string;
-    /** The capture time backing an offline/stale label (ISO), or null. M4 may
-     *  reformat this; `label` already embeds a relative form. */
-    asOf: string | null;
-};
-type DeriveMachineChipInput = {
-    /** `capabilities.liveness` — "warm" | "draining" | "cold" (or null pre-negotiation). */
-    liveness?: string | null | undefined;
-    /** `useSessionCapabilities().state` — drives the "waking" (negotiating) read. */
-    capabilitiesState?: SessionCapabilitiesState | null | undefined;
-    /** The ACTIVE machine's connection state (from `useMachines`), when known. A
-     *  self-hosted machine that is `offline` cannot be remotely woken. */
-    activeMachineState?: MachineState | null | undefined;
-    /** Whether the active sandbox is a user-owned self-hosted machine (no remote wake). */
-    activeIsSelfhosted?: boolean | undefined;
-    /** An interaction (wake-on-edit, terminal focus) is actively warming the box. */
-    wantsWarm?: boolean | undefined;
-    /** The latest capture's `capturedAt` (ISO) — the "as of <time>" backing. */
-    capturedAt?: string | null | undefined;
-    /** Injectable clock for deterministic relative labels (defaults to Date.now). */
-    now?: number | undefined;
-};
-/** Compact relative-time for the "as of" label. Pure, no Intl dependency. */
-declare function formatAsOf(capturedAt: string, now: number): string;
-/**
- * Derive the machine-state chip from the live capability/liveness surface, the
- * active machine's connection state, and the latest capture time. PURE (M4 renders
- * it; the whole point is a deterministic, testable projection).
- *
- * Precedence:
- *   1. warm/draining lease → **live** (a warm box always wins).
- *   2. actively warming (negotiating, wake-on-edit, or a reconnecting/enrolling
- *      machine) → **waking**.
- *   3. everything else (a cold/asleep box, a self-hosted machine that's offline,
- *      an error) → **offline**, labelled "as of <capture time>".
- */
-declare function deriveMachineChip(input: DeriveMachineChipInput): MachineChip;
-type UseMachineChipOptions = DeriveMachineChipInput;
-/**
- * Thin memoized wrapper over `deriveMachineChip` for the dock header (M4). The
- * dock already runs `useSessionCapabilities` + `useMachines` + `useWorkspace
- * capture`; it feeds their `liveness` / `state` / active-machine state /
- * `capturedAt` here. Pass a periodically-updated `now` if you want the relative
- * "as of" label to tick.
- */
-declare function useMachineChip(input: UseMachineChipOptions): MachineChip;
-
-type ApprovalSurfaceMessages = {
-    title: string;
-    description: string;
-    approve: string;
-    reject: string;
-    approving: string;
-    rejecting: string;
-    formatToolName: (name: string) => string;
-};
-declare const defaultApprovalSurfaceMessages: ApprovalSurfaceMessages;
-type ApprovalSurfaceProps = {
-    approvals: PendingApproval[];
-    onApprove: (approval: PendingApproval) => void | Promise<void>;
-    onReject: (approval: PendingApproval) => void | Promise<void>;
-    responding?: boolean | undefined;
-    error?: string | Error | null | undefined;
-    messages?: Partial<ApprovalSurfaceMessages> | undefined;
-    renderApproval?: ((approval: PendingApproval) => ReactNode) | undefined;
-    className?: string | undefined;
-};
-/**
- * Host-neutral approval presentation backed by the native pending-approval
- * projection and control callbacks. It owns only presentation and duplicate
- * click fencing; OpenGeni remains the authority for approval state.
- */
-declare function ApprovalSurface({ approvals, onApprove, onReject, responding, error, messages: overrides, renderApproval, className, }: ApprovalSurfaceProps): react_jsx_runtime.JSX.Element | null;
-
-/** The built-in tool renderer registry: every first-party tool plus a fallback. */
-declare const defaultToolRegistry: ToolRegistry;
-/** Build a registry that extends the built-ins with consumer entries/fallback. */
-declare function createDefaultToolRegistry(options?: Parameters<typeof createToolRegistry>[2]): ToolRegistry;
-
-type ActivityRailProps = {
-    items: ActivityItem[];
-    /** Renderer registry for tool calls. Defaults to {@link defaultToolRegistry}. */
-    toolRegistry?: ToolRegistry | undefined;
-    /** Drill into a spawned worker session. */
-    onOpenSession?: ((sessionId: string) => void) | undefined;
-    /**
-     * Deep-link a memory row to its record in the host's memory pane. Opt-in: the
-     * library draws no "View in memory" affordance without a handler (the memory
-     * row is then non-interactive rich content). See {@link MessageTimelineProps}.
-     */
-    onMemoryClick?: ((memoryId: string) => void) | undefined;
-    /** Drop the left rule + indent (used inside a folded turn summary). */
-    bare?: boolean | undefined;
-    className?: string | undefined;
-};
-declare function ActivityRail({ items, toolRegistry, onOpenSession, onMemoryClick, bare, className, }: ActivityRailProps): react_jsx_runtime.JSX.Element;
-
-/**
- * A subtle settle signal — see the CHIP DOCTRINE above. The closed tone set.
- * `"interrupted"` is a calm neutral tone for cancelled items — no dot, same
- * quiet weight as `"muted"`, but semantically distinct from metadata.
- */
-type DisclosureChip = {
-    tone: "ok" | "bad" | "muted" | "interrupted";
-    text: string;
-};
-type ActivityDisclosureProps = {
-    icon: ReactNode;
-    /** Icon tint. Defaults to the muted foreground; renderers pass accent/failed. */
-    iconTone?: "accent" | "failed" | "running" | "muted" | undefined;
-    title: ReactNode;
-    /** Render the title in the mono face (commands, paths). */
-    titleMono?: boolean | undefined;
-    /** Shimmer the title while the tool is in-flight. */
-    running?: boolean | undefined;
-    /**
-     * Quiet single-line secondary text (truncated). It is detail-on-demand: hidden
-     * when a media preview is set, AND hidden once the row is expanded (the body
-     * then owns the detail), so a stat/path never appears twice at once.
-     */
-    preview?: ReactNode | undefined;
-    /** A small inline media preview (a screenshot thumbnail) shown in place of `preview`. */
-    media?: ReactNode | undefined;
-    /** At most one quiet settle chip, right-aligned to the gutter. */
-    chip?: DisclosureChip | undefined;
-    /**
-     * When true the row carries the standard failure affordance: the icon is tinted
-     * red and a "failed" bad-chip appears in the right gutter (unless an explicit
-     * `chip` is already supplied — the caller's chip wins). Output is still visible
-     * on expand; this is a quiet status signal, not a blocking banner.
-     *
-     * Renderers should pass `failed={item.status === "failed"}` on their settled
-     * (non-running) paths so any tool with a failed status shows a consistent
-     * affordance without each renderer having to duplicate the logic.
-     */
-    failed?: boolean | undefined;
-    /**
-     * When true the row carries a calm "interrupted" affordance: the icon stays
-     * muted (no red) and a quiet "interrupted" chip appears in the right gutter
-     * (unless an explicit `chip` is already supplied — the caller's chip wins).
-     * This is the cancelled-status analogue of `failed`, but deliberately calm
-     * and neutral — it is NOT an error; the user chose to stop.
-     *
-     * Renderers should pass `cancelled={item.status === "cancelled"}` so any
-     * in-flight item that was interrupted on turn.cancelled reads consistently.
-     * `cancelled` is ignored when `failed` is also true (failure takes precedence).
-     */
-    cancelled?: boolean | undefined;
-    /** When false the row is a static line (no expand affordance). */
-    expandable?: boolean | undefined;
-    children?: ReactNode | undefined;
-};
-/**
- * The one disclosure row shape every activity row reuses (tool calls, reasoning,
- * sandbox ops): a chevron, a tinted icon, a title, an optional muted preview or
- * inline media, and at most one right-gutter settle chip. Compact by default;
- * the body mounts only when expanded.
- */
-declare function ActivityDisclosure({ icon, iconTone: iconToneProp, title, titleMono, running, preview, media, chip: chipProp, failed, cancelled, expandable, children, }: ActivityDisclosureProps): react_jsx_runtime.JSX.Element;
-declare function TermBlock({ command, workdir, output, live, tailLines, failed, }: {
-    /**
-     * The command shown in the prompt header. Pass `null` when the row title
-     * already carries it (e.g. an exec row titled `$ cmd`): the header then drops
-     * the command — and the whole prompt line if there is no workdir either — so
-     * the command never reads twice, stacked, above the output.
-     */
-    command: string | null;
-    workdir?: string | null | undefined;
-    /** The FULL output. TermBlock owns the tail/full slicing internally. */
-    output: string;
-    live?: boolean | undefined;
-    /** A non-zero exit / failed call — tints the left accent red (the one hue). */
-    failed?: boolean | undefined;
-    /**
-     * When the output exceeds the tail window, only the last `tailLines` are shown
-     * with a "show full output" toggle. The component holds the full text, so the
-     * toggle reveals the rest (never a dead affordance). Defaults to 12.
-     */
-    tailLines?: number | undefined;
-}): react_jsx_runtime.JSX.Element;
-declare function PayloadBlock({ label, value, failed, }: {
-    label: string;
-    value: unknown;
-    failed?: boolean | undefined;
-}): react_jsx_runtime.JSX.Element | null;
-/** A quiet inline note inside an expanded body (lost output, empty frame, …). */
-declare function BodyNote({ children, tone, }: {
-    children: ReactNode;
-    tone?: "error" | "muted" | undefined;
-}): react_jsx_runtime.JSX.Element;
-/**
- * A loading screenshot placeholder. A faint camera glyph over a shimmering box,
- * so a still frame of the running state reads unambiguously as "capturing" — not
- * a broken thumbnail.
- */
-declare function MediaSkeleton(): react_jsx_runtime.JSX.Element;
-/** A standardized "tool ran, produced no image" placeholder in the media slot. */
-declare function MediaEmpty(): react_jsx_runtime.JSX.Element;
-/**
- * A small inline screenshot thumbnail that opens the app lightbox on click.
- *
- * Requires a `LightboxProvider` ancestor for the click-to-expand affordance.
- * Outside one it degrades to a plain, non-interactive image — never a dead
- * "Expand" button that announces an action it cannot perform.
- */
-declare function Thumbnail({ src, caption, alt, }: {
-    src: string;
-    caption?: string | undefined;
-    alt?: string;
-}): react_jsx_runtime.JSX.Element;
-/**
- * The expanded screenshot inside a tool body: a contained, clickable preview
- * (opens the lightbox) with a quiet caption. Constrained height + object-contain
- * so it never breaks the row layout. Like {@link Thumbnail}, it degrades to a
- * plain image outside a `LightboxProvider`.
- */
-declare function ScreenshotFigure({ src, caption, alt, }: {
-    src: string;
-    caption?: string | undefined;
-    alt?: string;
-}): react_jsx_runtime.JSX.Element;
-
-type LightboxController = {
-    open: (src: string, caption?: string) => void;
-};
-/** Open the app-level screenshot lightbox. No-op outside a `LightboxProvider`. */
-declare function useLightbox(): LightboxController;
-/**
- * The lightbox controller when one is mounted, or `null` outside a
- * `LightboxProvider`. Lets a media primitive degrade to a non-interactive image
- * (rather than a dead "Expand" button that announces an action it cannot do).
- */
-declare function useLightboxOptional(): LightboxController | null;
-/**
- * The app-level screenshot lightbox. Render once near the timeline; renderers
- * call `useLightbox().open(src)`.
- *
- * Idempotent by design: when an ancestor `LightboxProvider` already exists (e.g.
- * a `MessageTimeline` mounted inside an app that already wraps its shell), this
- * one becomes a pass-through and does NOT mount a second focus-trapping Dialog.
- * That keeps `MessageTimeline` self-sufficient (it owns its own provider) while
- * composing cleanly when nested.
- */
-declare function LightboxProvider({ children }: {
-    children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
-
-/**
- * Seed the initial open state of every timeline collapsible below this node.
- * Intended for screenshot/test instrumentation only; absent by default.
- */
-declare function DisclosureDefaultsProvider({ defaultOpen, children, }: {
-    defaultOpen: boolean;
-    children: ReactNode;
-}): react_jsx_runtime.JSX.Element;
-
-/** Recover the exit code from a sandbox exec banner (`Process exited with code N`). */
-declare function sandboxCommandExitCode(out: unknown): number | null;
-/**
- * Recover the numeric exec-session id the sandbox embeds for a STILL-RUNNING
- * (backgrounded) process (`Process running with session ID N`). A finished
- * command emits `Process exited with code N` instead, which yields `null`.
- */
-declare function parseExecBannerSessionId(out: unknown): number | null;
-/** Strip the exec banner (`Chunk ID ...\n...\nOutput:\n`) down to the command's stdout. */
-declare function stripExecBanner(out: unknown): string;
-/** The sandbox clamped the output (token/line truncation markers in the banner). */
-declare function execTruncated(out: unknown): boolean;
-/** A `write_stdin` whose target PTY vanished (`write_stdin failed: session not found: N`). */
-declare function isExecSessionLostBanner(out: unknown): boolean;
-/** True when the exec stdout looks binary/garbled (a NUL byte or ELF magic). */
-declare function looksBinary(text: string): boolean;
-/**
- * Render unprintable control characters as caret notation (0x03 -> `^C`) so a
- * `write_stdin` keystroke payload reads cleanly in the row title.
- */
-declare function controlCaret(printable: string): string;
-/** One operation inside an `apply_patch_call` (a V4A file edit). */
-type ApplyPatchOperation = {
-    /**
-     * The V4A op kind. The three canonical values are `create_file`,
-     * `update_file`, and `delete_file`; the open `string` tail tolerates a
-     * forward-compatible/unknown op kind from the provider without a type error
-     * (it falls through to the "Edited" treatment).
-     */
-    type: "create_file" | "update_file" | "delete_file" | (string & {});
-    path: string;
-    /** Rename target -- when present the op is a move/rename. */
-    moveTo?: string | null | undefined;
-    /** The V4A hunk string (`@@ ...` lines with `+`/`-`/context prefixes). */
-    diff?: string | undefined;
-};
-/**
- * Parse a single V4A `apply_patch` operation into the SDK's `GitFileDiff` shape
- * so it can flow into the SAME `DiffView` / `PierreDiff` the Files tab uses.
- * Throws on a hunk string it cannot structure (no `@@` anchor on an update); the
- * renderer catches and falls back to a raw-patch view.
- */
-declare function v4aToGitFileDiff(op: ApplyPatchOperation): GitFileDiff;
-/**
- * Extract the `apply_patch` operations from a provider-native tool item's `raw`
- * payload, normalizing the two wire shapes (`raw.operations[]` for a multi-file
- * patch, `raw.operation` for a single op). The single owner of this shape so the
- * renderer and the turn-summary facet counter never drift.
- */
-declare function applyPatchOps(raw: unknown): ApplyPatchOperation[];
-/**
- * True when a tool item is an `apply_patch_call` — by its provider-native
- * `raw.type` (the live-wire source of truth) or by tool `name` (first-party
- * replays that omit `raw`). Centralizes the rawType-or-name check.
- */
-declare function isApplyPatch(item: {
-    name: string;
-    raw: unknown;
-}): boolean;
-/** Deep-redact secret-looking values so arguments never leak a key into the UI. */
-declare function redactSecrets(value: unknown): unknown;
-/** Parse tool arguments that may arrive as a JSON string or an object. */
-declare function parseToolArgs(args: unknown): Record<string, unknown>;
-/** The last non-empty line of a string -- the compact "what happened" peek. */
-declare function tailPeek(text: string): string;
-/**
- * Unwrap an MCP tool result (`{ content: [{ type: "text", text }], isError? }`)
- * into a flat `{ text, isError }`. Non-MCP outputs pass through as their string
- * form.
- */
-declare function unwrapMcpOutput(output: unknown): {
-    text: string;
-    isError: boolean;
-};
-
-/**
- * Parse a composer value into a command name + the rest. A command is
- * recognized ONLY when the value's first character is "/" (the start token);
- * anything else is plain chat and returns null.
- *
- * "/cl"        -> { name: "cl", rest: "", hasTrailingSpace: false }
- * "/goal "     -> { name: "goal", rest: "", hasTrailingSpace: true }
- * "/goal pause"-> { name: "goal", rest: "pause", hasTrailingSpace: false }
- */
-type ParsedCommandLine = {
-    name: string;
-    rest: string;
-    /** True when the name token is closed by a space — arg-hint mode. */
-    hasTrailingSpace: boolean;
-    args: string[];
-};
-declare function parseCommandLine(value: string): ParsedCommandLine | null;
-/** Whether the operator's permission set satisfies a command's gate. */
-declare function hasPermission(required: Permission | undefined, permissions: Permission[]): boolean;
-/** Match a command (by name or alias) against the value. */
-declare function matchCommand(commands: readonly SlashCommand[], value: string): SlashCommand | null;
-type FilterCtx = Pick<CommandContext, "sessionId" | "status" | "permissions">;
-/**
- * The commands visible for the current token + context. Permission-absent and
- * `available()===false` commands are dropped entirely (a gated command is never
- * shown, not shown-disabled). Filtering is a prefix match on name/alias.
- */
-declare function filterCommands(commands: readonly SlashCommand[], token: string, ctx: FilterCtx): SlashCommand[];
-/** Render a command's arg hint for the palette footer / help, e.g. "<pause|resume>". */
-declare function argHint(args: readonly SlashArg[] | undefined): string;
-/** The first required arg that has not yet been supplied, if any. */
-declare function firstMissingRequiredArg(command: SlashCommand, args: string[]): SlashArg | null;
-/**
- * The default command set. Adding a command is one object literal here; the
- * palette list, filter, arg-hint footer, and /help all render from this array.
- * Apps concat their own commands via the ChatComposer `commands` prop.
- */
-declare const defaultCommands: readonly SlashCommand[];
-
-type CommandPaletteProps = {
-    open: boolean;
-    items: SlashCommand[];
-    highlight: number;
-    /** Hover/click selects a row. */
-    onHighlight: (index: number) => void;
-    /** Click runs the row (same path as Enter). */
-    onRun: (index: number) => void;
-    /** Footer arg hint shown in arg-hint mode (e.g. "<pause|resume>"). */
-    argHintText: string;
-    /** id used for aria-activedescendant wiring from the textarea. */
-    listboxId: string;
-    /** Accessible list label. Defaults to "Slash commands". */
-    label?: string | undefined;
-    /** Badge shown for destructive commands. Defaults to "danger". */
-    dangerLabel?: string | undefined;
-};
-/**
- * The slash-command palette: a popover anchored above the textarea, rendered
- * entirely from the filtered registry. Dark-first, Linear/Vercel-calm, using
- * the opengeni#46 design tokens. Full keyboard nav lives in useSlashCommands;
- * this component is presentational + aria.
- */
-declare function CommandPalette({ open, items, highlight, onHighlight, onRun, argHintText, listboxId, label, dangerLabel, }: CommandPaletteProps): react_jsx_runtime.JSX.Element;
-
-type ModelPickerProps = {
-    /** The host-exposed models to choose from (typically {@link useAvailableModels}). */
-    models: ClientModel[];
-    /** Controlled selection — the model id, or undefined for "nothing chosen yet". */
-    value?: string | undefined;
-    /** Called with the chosen model id when the operator picks a row. */
-    onChange: (modelId: string) => void;
-    disabled?: boolean | undefined;
-    className?: string | undefined;
-    /** Visible-to-assistive-technology label. Defaults to "Model". */
-    label?: string | undefined;
-};
-/**
- * The model picker — a compact dropdown for the composer footer, grouping the
- * host-exposed models by `providerLabel` (so "OpenAI" and "Fireworks AI" head
- * their own sections) and showing each model's display `label`. A native
- * `<select>` keeps it keyboard- and screen-reader-accessible for free and
- * themes via the package's og-* tokens; the chevron is a decorative overlay.
- *
- * Controlled: the host owns `value`/`onChange` and threads the selection into
- * the send path. Renders nothing when no models are exposed, so a single-model
- * deployment shows no chrome.
- */
-declare function ModelPicker({ models, value, onChange, disabled, className, label, }: ModelPickerProps): react_jsx_runtime.JSX.Element | null;
-
-/**
- * The default renderer for chat message bodies in {@link MessageTimeline}.
- *
- * Agent (and user) messages arrive as GitHub-flavored markdown. This turns the
- * raw text into styled HTML using `react-markdown` + `remark-gfm`, themed to the
- * package's `og-*` design tokens so it reads as one cohesive dark surface — no
- * stock Tailwind colors leak in.
- *
- * It re-parses on every render, which is exactly right for streaming: a body
- * that is still arriving (an unterminated `**`, a half-open code fence, a table
- * mid-row) renders as best-effort markdown and resolves cleanly as the rest of
- * the tokens land. Consumers who want a different renderer can still pass
- * `renderMessageText` to `MessageTimeline` to override this entirely.
- */
-type MarkdownProps = {
-    children: string;
-    className?: string | undefined;
-};
-declare function MarkdownImpl({ children, className }: MarkdownProps): react_jsx_runtime.JSX.Element;
-/** Memoized so streaming re-renders of the parent don't re-parse settled bodies. */
-declare const Markdown: react.MemoExoticComponent<typeof MarkdownImpl>;
-
-type SessionStatusMeta = {
-    label: string;
-    /** Token-backed color classes for the dot and tinted badge. */
-    dotClassName: string;
-    badgeClassName: string;
-    /** Live states breathe; terminal states hold still. */
-    pulse: boolean;
-};
-declare const SESSION_STATUS_META: Record<SessionStatus$1, SessionStatusMeta>;
-type SessionStatusProps = {
-    status: SessionStatus$1;
-    /** Override the label ("Running" -> "Deploying", ...). */
-    label?: string | undefined;
-    size?: "sm" | "md" | undefined;
-    className?: string | undefined;
-};
-/** Status badge with a breathing dot for live states. */
-declare function SessionStatus({ status, label, size, className }: SessionStatusProps): react_jsx_runtime.JSX.Element;
-type StatusDotProps = {
-    status: SessionStatus$1;
-    className?: string | undefined;
-};
-/** Just the dot — for dense rows and tiles. */
-declare function StatusDot({ status, className }: StatusDotProps): react_jsx_runtime.JSX.Element;
-
-type FleetTileProps = {
-    session: Session;
-    /** Overrides the derived title (metadata.title/name, else the initial message). */
-    title?: string | undefined;
-    /** Extra line under the title — e.g. "drift check" or the worker's task. */
-    subtitle?: string | undefined;
-    onOpen?: ((session: Session) => void) | undefined;
-    className?: string | undefined;
-};
-/** Best-effort display title for a session. */
-declare function sessionDisplayTitle(session: Session): string;
-/**
- * One session in the fleet/manager view: title, live status, model, and
- * recency — dense but calm. Running sessions carry a breathing status dot
- * and a faint accent edge so the live ones read at a glance.
- */
-declare function FleetTile({ session, title, subtitle, onOpen, className }: FleetTileProps): react_jsx_runtime.JSX.Element;
-
-type RendererTier = "webgl" | "canvas" | "dom";
-
-/**
- * A COMPLETE xterm `ITheme` (subset by intent, but every field xterm colors a
- * cell with is present so it never falls back to its stock VGA palette). Built
- * from the og tokens via `xtermThemeFromTokens`.
- */
-type XtermTheme = {
-    background?: string;
-    foreground?: string;
-    cursor?: string;
-    cursorAccent?: string;
-    selectionBackground?: string;
-    selectionForeground?: string;
-    selectionInactiveBackground?: string;
-    black?: string;
-    red?: string;
-    green?: string;
-    yellow?: string;
-    blue?: string;
-    magenta?: string;
-    cyan?: string;
-    white?: string;
-    brightBlack?: string;
-    brightRed?: string;
-    brightGreen?: string;
-    brightYellow?: string;
-    brightBlue?: string;
-    brightMagenta?: string;
-    brightCyan?: string;
-    brightWhite?: string;
-};
-type SandboxTerminalProps = {
-    /** From `useSandboxTerminal(...)`. */
-    result: UseSandboxTerminalResult;
-    /**
-     * The negotiated Terminal capability cell. When it advertises `transport:
-     * "pty-ws"` + a live `url` (a warm box with a viewer attached), the terminal is
-     * driven by a REAL bidirectional PTY over the Modal tunnel (ttyd-over-websocket)
-     * INSTEAD of the broken ptyWrite-over-HTTP path: xterm input → the socket, the
-     * socket's output → xterm, xterm resize → the socket. On a cold box / no url
-     * (`transport: "sse-events"`) it stays on the read-only Channel-A firehose
-     * (`result.chunks`). Omit to force the legacy firehose-only behavior.
-     */
-    terminalCapability?: TerminalCapability | null | undefined;
-    /**
-     * Full xterm theme. When omitted the terminal self-derives it from the `--og-*`
-     * tokens of its own container (correct even inside a nested `data-og-theme`
-     * subtree). Passing it lets the host drive re-theme on a theme flip.
-     */
-    theme?: XtermTheme | undefined;
-    fontFamily?: string | undefined;
-    fontSize?: number | undefined;
-    /**
-     * Lease liveness (`cold` | `warming` | `warm` | `draining`). Drives the
-     * boot-in-terminal status lines: once the user has focused the terminal and
-     * the box is not yet warm, a styled "● waking machine — Ns…" line is rendered
-     * INSIDE xterm (no overlay/spinner) until the live PTY connects.
-     */
-    liveness?: string | undefined;
-    /**
-     * Force read-only even when the PTY accepts stdin. Default: interactive
-     * whenever a live pty-ws stream is connected OR `result.write !== null` (the box
-     * advertises an interactive PTY); otherwise the read-only agent firehose.
-     */
-    readOnly?: boolean | undefined;
-    /** Shown on the server / before xterm hydrates (SSR-safe placeholder). */
-    placeholder?: ReactNode | undefined;
-    /** Render the small status header (pty/shell + running dot + read-only pill). */
-    showHeader?: boolean | undefined;
-    /** Shell label for the header (e.g. `/bin/bash`). */
-    shell?: string | undefined;
-    /**
-     * Fired the first time the user engages the terminal surface (focus or click).
-     * The host wires this to warm the box for the REAL pty-ws terminal (the viewer
-     * attach), so a cold box upgrades from the read-only firehose to a live PTY ON
-     * INTERACT — never on mere mount (which would force a box spin-up and regress
-     * the firehose-only default).
-     */
-    onActivate?: (() => void) | undefined;
-    className?: string | undefined;
-};
-/** Debug seam (dev/evidence only, never a typed public API): a global hook the
- *  screenshot harness reads to probe the settled renderer tier + resolved font
- *  without mounting a real WebGL context in unit tests. */
-type TerminalDebugInfo = {
-    renderer: RendererTier | null;
-    fontFamily: string | undefined;
-    fontSize: number | undefined;
-    hasVarInFont: boolean;
-    theme: XtermTheme | undefined;
-    /** The live xterm instance (opaque) — the evidence harness reads its buffer to
-     *  prove screen preservation (E5) and drive the burst-responsiveness probe. */
-    term: unknown;
-};
-declare global {
-    var __OG_TERMINAL_DEBUG__: ((info: TerminalDebugInfo) => void) | undefined;
-    var __OG_FORCE_RENDERER_FAIL__: string | undefined;
-}
-/**
- * An xterm.js terminal fed by the Channel-A event projection
- * (`useSandboxTerminal`) or a live ttyd PTY. xterm + its addons are lazy-imported
- * inside an effect, so SSR renders the placeholder and the terminal mounts on
- * hydration.
- *
- * Renderer: WebGL (GPU-composited cells) with a canvas → DOM fallback ladder
- * (`attachRenderer`), so bursty output stays smooth but a lost/blocklisted
- * context degrades gracefully. Font + theme are resolved to CONCRETE values
- * from the og tokens BEFORE construction (xterm measures glyphs in a canvas
- * where `var()` never resolves, and colors every cell from a full ANSI palette).
- *
- * The terminal is mounted ONCE and its data source is swapped in place: the
- * read-only firehose (`result.chunks`) → the live PTY. Stdin is toggled via
- * `term.options.disableStdin` at runtime (not a remount), so scrollback and the
- * visible screen survive the projection→PTY handoff.
- *
- * Resizes are tracked with a `ResizeObserver` on the container (not just
- * `window.resize`) so dragging the dock handle refits the grid.
- */
-declare function SandboxTerminal({ result, terminalCapability, theme, fontFamily, fontSize, liveness, readOnly, placeholder, showHeader, shell, onActivate, className, }: SandboxTerminalProps): react_jsx_runtime.JSX.Element;
-
-type FileBrowserProps = {
-    /** From `useSandboxFiles(...)`. */
-    result: UseSandboxFilesResult;
-    /**
-     * Rendered instead of the built-in tree when the file surface is unavailable
-     * (e.g. a `FileSystem.available === false` capability). Default: a quiet notice.
-     */
-    fallback?: ReactNode | undefined;
-    /** Selection callback for the preview pane. */
-    onSelectFile?: ((path: string) => void) | undefined;
-    selectedPath?: string | undefined;
-    /** Render-prop to theme/replace a row entirely (the Pierre-swap escape hatch). */
-    renderNode?: ((node: FileTreeNode, depth: number, expanded: boolean) => ReactNode) | undefined;
-    /** Shown when the tree is empty (no files / not loaded yet). */
-    emptyState?: ReactNode | undefined;
-    /**
-     * Enable the file-manager affordances (toolbar, context menu, drag-drop move,
-     * inline rename, delete, new file/folder). Defaults to `true` when the hook
-     * exposes the mutation methods; pass `false` for a strictly read-only tree.
-     */
-    editable?: boolean | undefined;
-    /**
-     * Confirm a (recursive) delete before it runs. Return `false` to cancel.
-     * The default is an accessible, non-blocking confirmation dialog. Supply this
-     * callback to delegate confirmation to a host-owned dialog.
-     */
-    confirmDelete?: ((node: FileTreeNode) => boolean | Promise<boolean>) | undefined;
-    className?: string | undefined;
-};
-/**
- * The file MANAGER, fed by the FileSystem service via `useSandboxFiles`. This is
- * a first-class editable tree (not a render-only view): lazy-expand with a
- * spinner on the in-flight node, git-status tinting, full keyboard navigation,
- * selection, and the mutating affordances wired straight to the hook —
- *
- *   • drag-and-drop MOVE  → `moveEntry(from, to)`
- *   • inline RENAME       → `moveEntry(path, newPath)`  (F2 / double-click / menu)
- *   • DELETE              → `deleteEntry(path, recursive)`  (Del / menu, confirmed)
- *   • NEW FILE / FOLDER   → `createFile` / `createDir` (toolbar + menu), then open
- *   • right-click CONTEXT MENU
- *
- * `renderNode` is still honoured as the Pierre-swap escape hatch for the row
- * chrome; the manager scaffolding (toolbar, dnd, menu, inline inputs) wraps it.
- */
-declare function FileBrowser({ result, fallback, onSelectFile, selectedPath, renderNode, emptyState, editable, confirmDelete, className, }: FileBrowserProps): react_jsx_runtime.JSX.Element;
-
-/**
- * @deprecated Use {@link PierreDiff} directly. Retained only as a thin,
- * back-compat alias that renders the Pierre (Shiki) renderer with a plain-text
- * degrade. The old hand-rolled hunk renderer was removed in Workbench v2 — the
- * workbench keeps exactly ONE diff renderer. This alias is removed next major.
- */
-type DiffTheme = {
-    addBackground?: string;
-    delBackground?: string;
-    contextBackground?: string;
-    metaForeground?: string;
-};
-/**
- * @deprecated Use {@link PierreDiff}. `theme`/`onSelectFile`/`emptyState` from the
- * removed hand-rolled renderer are accepted for source compatibility and ignored;
- * `fallback` still overrides the plain-text degrade.
- */
-type DiffViewProps = {
-    diff: GitFileDiff[];
-    fallback?: ReactNode | undefined;
-    layout?: "unified" | "split" | undefined;
-    themeType?: "dark" | "light" | undefined;
-    /** @deprecated line-background theming was part of the removed renderer. */
-    theme?: DiffTheme | undefined;
-    /** @deprecated the alias no longer renders a clickable file header. */
-    onSelectFile?: ((path: string) => void) | undefined;
-    isRepo?: boolean | undefined;
-    emptyState?: ReactNode | undefined;
-    className?: string | undefined;
-};
-/**
- * @deprecated Use {@link PierreDiff} directly. Thin alias: renders `PierreDiff`
- * (Shiki-highlighted, unified/split) with a plain-text fallback for a host
- * without `@pierre/diffs`. Removed next major.
- */
-declare function DiffView({ diff, fallback, layout, themeType, isRepo, emptyState, className, }: DiffViewProps): react_jsx_runtime.JSX.Element;
-
-type PierreDiffProps = {
-    diff: GitFileDiff[];
-    layout?: "unified" | "split" | undefined;
-    themeType?: "dark" | "light" | undefined;
-    /** Shiki bundled theme names (dark/light) — derived from the host palette. */
-    theme?: {
-        dark: string;
-        light: string;
-    } | undefined;
-    /** Disable Pierre's worker pool if its worker bundling fights the host bundler. */
-    disableWorkerPool?: boolean | undefined;
-    /** Rendered while the (lazy) Pierre bundle loads. */
-    loading?: ReactNode | undefined;
-    /** Rendered if `@pierre/diffs/react` is not installed / fails to import. */
-    fallback?: ReactNode | undefined;
-    /** Skip the Shiki renderer entirely and show the plain-text degrade (the old
-     *  `usePierre={false}` path — one renderer, opted out of highlighting). */
-    plain?: boolean | undefined;
-    /** Long-line handling: `"wrap"` soft-wraps (the default — a diff in a narrow
-     *  dock pane should be readable without a horizontal-scroll tax), `"scroll"`
-     *  keeps lines on one row behind a horizontal scrollbar (better for a wide
-     *  viewport or pathological minified lines). */
-    overflow?: "wrap" | "scroll" | undefined;
-    className?: string | undefined;
-};
-/**
- * The Pierre-backed diff: Shiki-highlighted, virtualized, unified/split. Renders
- * one `PatchDiff` per changed file (a reconstructed unified patch from the
- * `GitFileDiff` hunks). The ONE workbench diff renderer; a host without
- * `@pierre/diffs` gets the built-in plain-text degrade (`PlainPatch`).
- */
-declare function PierreDiff({ diff, layout, themeType, theme, disableWorkerPool, loading, fallback, plain, overflow, className, }: PierreDiffProps): react_jsx_runtime.JSX.Element;
-
-type PierreFileProps = {
-    /** Workspace-relative path (used for the header + language inference). */
-    path: string;
-    /** The decoded text contents. */
-    contents: string;
-    themeType?: "dark" | "light" | undefined;
-    /** Shiki bundled theme names (dark/light) — derived from the host palette. */
-    theme?: {
-        dark: string;
-        light: string;
-    } | undefined;
-    /** Disable Pierre's worker pool if its worker bundling fights the host bundler. */
-    disableWorkerPool?: boolean | undefined;
-    /** Rendered while the (lazy) Pierre bundle loads. */
-    loading?: ReactNode | undefined;
-    /** Rendered if `@pierre/diffs/react` is not installed / fails to import. */
-    fallback?: ReactNode | undefined;
-    className?: string | undefined;
-};
-/**
- * The Pierre-backed single-file VIEWER: Shiki-highlighted, language inferred from
- * the filename — the read complement of `PierreDiff`. Wired to `fs.read` so
- * clicking any file in the tree shows its contents (NOT a diff; no repo needed).
- * Falls back to a plain `<pre>` when `@pierre/diffs` is absent / fails to import.
- */
-declare function PierreFile({ path, contents, themeType, theme, disableWorkerPool, loading, fallback, className, }: PierreFileProps): react_jsx_runtime.JSX.Element;
-
-/** Language grammar loaders, keyed by the extension class we infer from the path. */
-declare const LANGUAGE_LOADERS: Record<string, () => Promise<unknown>>;
-/** Map a filename to a grammar key (or null for plain text — still fully editable). */
-declare function languageForPath(path: string): keyof typeof LANGUAGE_LOADERS | null;
-type CodeEditorProps = {
-    /** Workspace-relative path — drives language inference (and the save target upstream). */
-    path: string;
-    /** The decoded text contents to seed the editor with. */
-    initialContents: string;
-    /** Persist the current buffer. Resolves when the write lands; rejects to surface an error. */
-    onSave: (contents: string) => Promise<unknown>;
-    /** Explicitly overwrite after a visible expected-content conflict. */
-    onOverwrite?: ((contents: string) => Promise<unknown>) | undefined;
-    /** Re-read the selected file after a visible save conflict. */
-    onReload?: (() => void) | undefined;
-    /** Fired once when the buffer FIRST diverges from its baseline (the first real
-     *  keystroke) — the wake-on-edit intent. The host warms the box on this so the
-     *  eventual save lands fast; merely opening the file for reading never fires it. */
-    onEditIntent?: (() => void) | undefined;
-    /** Read-only mode (e.g. a truncated/too-large file shown for reference only). */
-    readOnly?: boolean | undefined;
-    themeType?: "dark" | "light" | undefined;
-    /** Rendered while the (lazy) CodeMirror bundle loads. */
-    loading?: ReactNode | undefined;
-    /** Rendered if `@uiw/react-codemirror` is not installed / fails to import. */
-    fallback?: ReactNode | undefined;
-    className?: string | undefined;
-};
-/**
- * The EDITABLE single-file pane: CodeMirror 6 with a per-language grammar chosen
- * from the filename, og-* themed, with dirty tracking and a save path wired to
- * `Cmd/Ctrl+S` *and* an explicit Save button. The viewer (Pierre `File`) stays
- * the read-only complement — this is only mounted when the user opts to edit.
- *
- * Save semantics: the buffer is "dirty" the moment it diverges from the last
- * saved baseline; a successful `onSave` clears dirty and re-baselines. A failed
- * save keeps the buffer dirty (nothing is lost) and surfaces the error inline.
- * `readOnly` suppresses every mutation path so a truncated/binary file can never
- * be saved back (which would corrupt it by writing the truncated prefix).
- */
-declare function CodeEditor({ path, initialContents, onSave, onOverwrite, onReload, onEditIntent, readOnly, themeType, loading, fallback, className, }: CodeEditorProps): react_jsx_runtime.JSX.Element;
-
-type SandboxFilesProps = {
-    /** From `useSandboxFiles(...)`. */
-    files: UseSandboxFilesResult;
-    /** From `useSandboxGit(...)` — drives the branch/dirty header only. */
-    git: UseSandboxGitResult;
-    /** @deprecated Diffs live in the dedicated Changes tab now; accepted for
-     *  source-compat but unused (the Files surface is a browser + viewer). */
-    stagedGit?: UseSandboxGitResult | undefined;
-    /** Whether a FileSystem surface is advertised (drives the unavailable notice). */
-    fileSystemAvailable?: boolean | undefined;
-    /** Use Pierre's Shiki highlighter for the viewer (default true; plain fallback). */
-    usePierre?: boolean | undefined;
-    /** Allow in-place editing of tree files (CodeMirror). Default true. When false
-     *  the surface is review-only: every text file opens in the read-only viewer. */
-    editable?: boolean | undefined;
-    /** Fired once when the user first edits an open file (wake-on-edit intent). The
-     *  dock warms the box on this so the save lands fast; opening/reading never fires
-     *  it. Browsing the tree/diff must not warm a box. */
-    onEditIntent?: (() => void) | undefined;
-    /** A guarded diff path routed here by the parent workspace. */
-    requestedPath?: string | undefined;
-    /** Identity for one guarded-file request. Increment this when the same path is
-     *  deliberately requested again; it also lets a pending request be consumed
-     *  without overriding later manual tree navigation. Defaults to the path. */
-    requestedPathRequestId?: string | number | undefined;
-    /** False while the parent is waking a cold sandbox for `requestedPath`. */
-    requestedPathReady?: boolean | undefined;
-    /** The machine is cold and no durable capture exists yet. Render an explicit
-     *  wake gate instead of an empty-tree lie or an implicit Channel-A read. */
-    workspaceResting?: boolean | undefined;
-    /** A deliberate wake has started but the live file surface is not ready yet. */
-    workspaceWaking?: boolean | undefined;
-    /** Whether live reads are currently authoritative. */
-    liveWorkspaceReady?: boolean | undefined;
-    /** Deliberately wake the machine to read content absent from the capture. */
-    onWakeWorkspace?: (() => void) | undefined;
-    themeType?: "dark" | "light" | undefined;
-    className?: string | undefined;
-};
-/**
- * The Files surface: a branch/dirty header, the full lazy file tree, and a
- * viewer/editor pane for the selected file. This is the workspace BROWSER — pick
- * a file to read or edit it. Diff review lives in the dedicated Changes tab (this
- * surface deliberately does NOT replicate the changed-files list, and does not
- * diff here — one job per tab). The agent commits; the human reviews.
- */
-declare function SandboxFiles({ files, git, fileSystemAvailable, usePierre, editable, onEditIntent, requestedPath, requestedPathRequestId, requestedPathReady, workspaceResting, workspaceWaking, liveWorkspaceReady, onWakeWorkspace, themeType, className, }: SandboxFilesProps): react_jsx_runtime.JSX.Element;
-
-type DesktopViewerProps = {
-    /** The desktop cell of the negotiated capabilities (`capabilities.DesktopStream`). */
-    capability: DesktopStreamCapability | null;
-    /**
-     * Initial control mode. Default false (watch). When the user flips
-     * "Take control" the viewer drives input — but only if `capability.mode`
-     * permits it (server-gated; a read-only deployment disables the toggle).
-     * Pass a value to control it externally; omit to let the viewer own the state.
-     */
-    interactive?: boolean | undefined;
-    /** Render the built-in Watching ⇄ Take control toggle (default true). */
-    showControlToggle?: boolean | undefined;
-    scaleViewport?: boolean | undefined;
-    /** Custom RFB factory (tests / a WebRTC swap). Defaults to lazy @novnc/novnc. */
-    rfbFactory?: DesktopRfbFactory | undefined;
-    /** Custom socket factory for the self-hosted `relay-frames` transport (tests).
-     *  Defaults to `new WebSocket(url)`. Mirrors `rfbFactory`. */
-    webSocketFactory?: DesktopWebSocketFactory | undefined;
-    /**
-     * Consent gate for the un-redacted (and possibly shared) pixel plane. Rendered
-     * BEFORE connecting whenever the desktop requires acknowledgment that hasn't
-     * been given. Call `onAccept` to record consent (the host wires it to
-     * `client.acknowledgeStream` + a re-negotiate). When omitted, a default
-     * banner is shown.
-     */
-    renderConsentGate?: ((onAccept: () => void, shared: boolean) => ReactNode) | undefined;
-    /** Called when the default consent gate's accept button is pressed. */
-    onAcknowledge?: (() => void) | undefined;
-    /**
-     * Whether the host has the viewer attach engaged (i.e. the user has opted into
-     * watching — the parent's `watchDesktop`/`attachDesktop`). Drives the
-     * cold-state behaviour: when watching, a cold-but-warmable lease AUTO-WARMS
-     * (and re-warms when the box drains) instead of dead-ending. When omitted we
-     * infer it from a recorded consent (the default gate's accept), so the
-     * component still self-heals after the first acknowledgment.
-     */
-    watching?: boolean | undefined;
-    /**
-     * Request a (re)warm of the sandbox WITHOUT re-acknowledging (the consent has
-     * already been recorded — only the box drained). The host wires this to
-     * "engage the viewer attach + re-negotiate". Called automatically when a
-     * watched desktop is found cold-but-warmable, and behind the manual retry on
-     * the warming notice. Distinct from `onAcknowledge`, which is the FIRST,
-     * consent-bearing warm.
-     */
-    onWarm?: (() => void) | undefined;
-    /** Shown when transport is null (headless backend / degraded / disabled). */
-    renderUnavailable?: ((reason: CapabilityUnavailableReason | null) => ReactNode) | undefined;
-    /** Shown while the box is cold/warming (no live address yet). */
-    renderWarming?: (() => ReactNode) | undefined;
-    /** Shown when the per-session viewer cap (429) was hit. */
-    renderViewerCap?: (() => ReactNode) | undefined;
-    /** Surface the 429 cap state from `useSessionCapabilities().viewerCapReached`. */
-    viewerCapReached?: boolean | undefined;
-    /**
-     * Connect watchdog (ms): if a live url is present but the RFB hasn't connected
-     * within this window, surface a "Couldn't connect" + Reconnect instead of an
-     * eternal idle scrim. Default 13000. 0 disables the watchdog.
-     */
-    connectTimeoutMs?: number | undefined;
-    className?: string | undefined;
-};
-/**
- * The desktop surface: a noVNC client connecting to the Channel-B scoped tunnel
- * URL from the capability doc. Owns the mount `<div ref>`, drives
- * `useDesktopStream` (SSR-safe lazy RFB), and renders a real
- * cold → warming → connecting → connected → error state machine with live
- * feedback (spinners, transitions) — never a dead black box with stale text.
- *
- * The read-only vs interactive decision is enforced server-first
- * (`capability.mode`): when the deployment advertises mode "interactive" the
- * viewer can TAKE CONTROL and drive the mouse & keyboard into the box's :0; a
- * "read-only" deployment disables the take-control affordance (graceful, with a
- * reason).
- *
- * Warming: a cold-but-warmable lease (`reason: "lease_cold"`) is NOT a dead end.
- * When the user is watching (consented), the viewer asks the host to (re)warm
- * the box (`onWarm`) and shows a "Warming…" spinner; if the box later drains to
- * cold it re-warms. Genuinely-unavailable surfaces (headless/policy/os/backend)
- * keep a clear, static unavailable notice.
- */
-declare function DesktopViewer({ capability, interactive, showControlToggle, scaleViewport, rfbFactory, webSocketFactory, renderConsentGate, onAcknowledge, watching, onWarm, renderUnavailable, renderWarming, renderViewerCap, viewerCapReached, connectTimeoutMs, className, }: DesktopViewerProps): react_jsx_runtime.JSX.Element;
-
-type WorkspaceTab = {
-    id: string;
-    label: ReactNode;
-    /** Rendered as the active surface. */
-    content: ReactNode;
-    /** A small badge after the label (e.g. dirty count, live pill). */
-    badge?: ReactNode | undefined;
-};
-type WorkspaceDockProps = {
-    /** The chat / primary pane shown beside the dock. */
-    primary: ReactNode;
-    tabs: WorkspaceTab[];
-    /** Controlled active tab. Falls back to the first tab. */
-    activeTab?: string | undefined;
-    onActiveTabChange?: ((id: string) => void) | undefined;
-    /** Controlled collapsed state for hosts that expose their own dock toggle. */
-    collapsed?: boolean | undefined;
-    onCollapsedChange?: ((collapsed: boolean) => void) | undefined;
-    /** A status accessory pinned to the right of the tab strip, left of the
-     *  maximize/collapse controls (e.g. the machine-state chip). Renders in both
-     *  the docked header and the full-screen overlay header. */
-    headerAccessory?: ReactNode | undefined;
-    /** Optional host navigation shown at the start of the phone overlay header.
-     *  It is intentionally absent from desktop dock chrome. */
-    mobileLeadingControl?: ReactNode | undefined;
-    /** Persisted layout id (localStorage key) for react-resizable-panels. */
-    autoSaveId?: string | undefined;
-    /** Default dock width as a percent of the session area. */
-    defaultSize?: number | undefined;
-    minSize?: number | undefined;
-    maxSize?: number | undefined;
-    className?: string | undefined;
-};
-declare function WorkspaceDock({ primary, tabs, activeTab, onActiveTabChange, collapsed: collapsedProp, onCollapsedChange, headerAccessory, mobileLeadingControl, autoSaveId, defaultSize, minSize, maxSize, className, }: WorkspaceDockProps): react_jsx_runtime.JSX.Element;
-
-/** A host-routed notification (replaces the app-only `sonner` toast coupling). */
-type WorkspaceNotification = {
-    kind: "error" | "info";
-    message: string;
-};
-/** The workbench's canonical tab ids (a host injects extras around these). */
-declare const WORKBENCH_TAB_CHANGES = "changes";
-declare const WORKBENCH_TAB_FILES = "files";
-declare const WORKBENCH_TAB_TERMINAL = "terminal";
-declare const WORKBENCH_TAB_DESKTOP = "desktop";
-/**
- * The built-in workbench surfaces in their canonical display order. Hosts can
- * pass a subset through `surfaces`; omission preserves the complete standalone
- * workbench.
- */
-declare const WORKBENCH_SURFACES: readonly ["changes", "files", "terminal", "desktop"];
-type SandboxWorkspaceSurface = (typeof WORKBENCH_SURFACES)[number];
-/**
- * Decide a workspace tab from an already-local event log: the newest
- * `workspace.revision.captured` announce carries the change surface stats, so
- * "changes exist → Changes, else Files" needs zero machine round-trips. A host
- * `override` (e.g. a landing "run" tab) wins when supplied.
- *
- * `<SandboxWorkspace>` uses this only as an optional early hint after its own
- * capture GET reports no durable capture. A pure embedder needs no events-at-mount
- * contract: it falls through to authoritative live Git instead.
- */
-declare function initialWorkspaceTab(events: SessionEvent[] | undefined, override?: string | null): string;
-type WorkspaceMachine = {
-    /** Whether at least one built-in workbench surface is enabled. */
-    enabled: boolean;
-    /** The derived live/waking/offline chip model. */
-    chip: MachineChip;
-    /** The machine these surfaces are bound to (the Modal group box or a
-     *  self-hosted machine), or null while the fleet is still resolving. */
-    activeMachine: MachineView | null;
-    loading: boolean;
-    error: Error | null;
-    refresh: () => Promise<void>;
-};
-type UseSandboxWorkspaceTabsOptions = ClientOverride & {
-    sessionId: string;
-    /** Live event log (usually `useSessionEvents().events`). */
-    events: SessionEvent[];
-    /**
-     * Built-in surfaces this host wants to expose. Omit for all four. A disabled
-     * surface is behaviorally dormant: its data hooks, warm intents, stream
-     * attachment, and navigation callbacks are not activated.
-     */
-    surfaces?: readonly SandboxWorkspaceSurface[] | undefined;
-    /** Override the source-driven default tab (e.g. a host landing tab id). When
-     *  omitted the workbench picks Changes-vs-Files from capture or live Git. */
-    initialTab?: string | null | undefined;
-    /** Host-routed notifications (mutation errors, desktop-consent failures). The
-     *  package never imports a toast library — the host decides how to surface. */
-    onNotify?: ((notification: WorkspaceNotification) => void) | undefined;
-    /** File requested by a Changes guard. The Files surface defers the read until
-     *  the sandbox is live, then reveals this path. */
-    requestedFilePath?: string | null | undefined;
-    /** Unique identity for `requestedFilePath`, including repeated requests for the
-     *  same path. */
-    requestedFileRequestId?: string | number | null | undefined;
-    /** Route a guarded diff into the host's Files tab. */
-    onOpenFile?: ((path: string) => void) | undefined;
-};
-type UseSandboxWorkspaceTabsResult = {
-    /** Changes | Files | Terminal | Desktop (capability-gated where noted). */
-    tabs: WorkspaceTab[];
-    /** The source-driven default tab: Changes when the first authoritative capture
-     *  or live Git result has changes, else Files (a host `initialTab` overrides).
-     *  null while that source resolves, or permanently when neither Changes nor
-     *  Files is enabled; the choice latches once. */
-    defaultTab: string | null;
-    /** The machine-state model for the dock-header chip. */
-    machine: WorkspaceMachine;
-};
-/**
- * Build the workbench tabs + the machine-chip model for one session. This is the
- * dock "brain": capability negotiation, capture-backed cold reads, prewarm
- * flags, desktop consent, and the xterm theme observer — all package-local.
- */
-declare function useSandboxWorkspaceTabs(options: UseSandboxWorkspaceTabsOptions): UseSandboxWorkspaceTabsResult;
-type SandboxWorkspaceProps = ClientOverride & {
-    sessionId: string;
-    /** Live event log (usually `useSessionEvents().events`). */
-    events: SessionEvent[];
-    /** The chat / primary pane shown beside the dock. */
-    primary: ReactNode;
-    /**
-     * Built-in surfaces this host wants to expose. Omit for Changes, Files,
-     * Terminal, and Desktop. Disabled surfaces remain behaviorally dormant.
-     */
-    surfaces?: readonly SandboxWorkspaceSurface[] | undefined;
-    /** Host tabs injected BEFORE the workbench tabs (e.g. a "Run" landing tab). */
-    leadingTabs?: WorkspaceTab[] | undefined;
-    /** Host tabs injected AFTER the workbench tabs (e.g. a "Debug" tab). */
-    trailingTabs?: WorkspaceTab[] | undefined;
-    /** Override the pre-paint default tab (e.g. a host landing tab id). When
-     *  omitted the workbench decides from capture, then live Git when no capture exists. */
-    initialTab?: string | undefined;
-    /** Host-routed notifications (no toast dependency in the package). */
-    onNotify?: ((notification: WorkspaceNotification) => void) | undefined;
-    /** Controlled collapsed state for hosts with their own dock toggle. */
-    collapsed?: boolean | undefined;
-    onCollapsedChange?: ((collapsed: boolean) => void) | undefined;
-    /** Host navigation shown only in the phone workspace overlay header. */
-    mobileLeadingControl?: ReactNode | undefined;
-    autoSaveId?: string | undefined;
-    defaultSize?: number | undefined;
-    minSize?: number | undefined;
-    maxSize?: number | undefined;
-    className?: string | undefined;
-};
-/**
- * The whole session workspace, ready to mount: `<SandboxWorkspace>` assembles the
- * capability-gated tabs, pins the machine-state chip in the dock header, and
- * renders the resizable `<WorkspaceDock>`. Wrap the tree in `<OpenGeniProvider>`
- * (client + workspaceId) and import `@opengeni/react/styles.css`; that is the
- * entire integration (see `docs/embedding-workbench.md`).
- */
-declare function SandboxWorkspace(props: SandboxWorkspaceProps): ReactNode;
-
-/** Events that change which Codex account a session runs on (or just ran). */
-declare function isCodexAccountEvent(event: Pick<SessionEvent, "type">): boolean;
-/**
- * The structural slice of the SDK client the Codex-accounts surface needs. Method
- * NAMES + SIGNATURES match `OpenGeniClient` so the real client satisfies it
- * directly; declared structurally (not a hard Pick) so a test/Geni client can
- * stand in. `getSession` reads the session's pin/last; `pinSessionCodexAccount`
- * is the optional mutation (absent ⇒ the indicator hides the switch affordance).
- */
-type CodexAccountsClientLike = {
-    listCodexAccounts: (workspaceId: string) => Promise<CodexAccountsResponse>;
-    getSession?: (workspaceId: string, sessionId: string) => Promise<{
-        codexPinnedCredentialId?: string | null;
-        codexLastCredentialId?: string | null;
-    }>;
-    pinSessionCodexAccount?: (workspaceId: string, sessionId: string, target: string) => Promise<{
-        pinned: string;
-    }>;
-    /** Optional (absent ⇒ the card hides live refresh): batched live /wham/usage refresh. */
-    refreshCodexUsage?: (workspaceId: string) => Promise<{
-        usage: Record<string, unknown>;
-    }>;
-};
-type UseCodexAccountsOptions = ClientOverride & SessionEventFeedOptions & {
-    pollIntervalMs?: number | undefined;
-    /** Scope to a session so the hook resolves the pin + the effective account. */
-    sessionId?: string | undefined;
-    /** Override the client with one implementing `CodexAccountsClientLike`. */
-    codexClient?: CodexAccountsClientLike | undefined;
-};
-type UseCodexAccountsResult = {
-    accounts: CodexAccount[];
-    /** The workspace ACTIVE account (used when a session is unpinned). */
-    activeAccountId: string | null;
-    /** The session's PINNED account (null ⇒ following workspace active). */
-    pinnedAccountId: string | null;
-    /** The account the next turn will run on: pin > workspace active. */
-    effectiveAccountId: string | null;
-    /** The account the session's last turn ACTUALLY ran on (the "Running on:" source). */
-    lastAccountId: string | null;
-    settings: CodexRotationSettings;
-    loading: boolean;
-    refresh: () => Promise<void>;
-    /**
-     * Trigger a LIVE batched /wham/usage refresh across all accounts, then re-read
-     * the cached metadata so the new windows land on `accounts`. Modeled on `pin`.
-     * No-op (resolves false) when the client can't refresh usage.
-     */
-    refreshUsage: () => Promise<boolean>;
-    /** True while a live usage refresh is in flight (drives the bar skeleton). */
-    refreshingUsage: boolean;
-    /** Pin (or unpin via "auto") the session's account; returns true on success. */
-    pin: (target: string) => Promise<boolean>;
-    pinning: boolean;
-    /** The target of the in-flight pin (for per-row spinner gating). */
-    pinningTarget: string | null;
-    mutationError: Error | null;
-};
-/**
- * The workspace's Codex accounts + the per-workspace active pointer + (when
- * session-scoped) the session pin and last-ran-on account. Composed like
- * `useMachines`: slow polling (the realtime work is done by the
- * `codex.account.switched` / `turn.started` event trigger) + a `pin` mutation.
- * Dual-consumer safe via the structural `CodexAccountsClientLike` surface.
- */
-declare function useCodexAccounts(options?: UseCodexAccountsOptions): UseCodexAccountsResult;
-
-/**
- * Reconstruct a unified-diff patch string for a single `GitFileDiff` so it can
- * be fed to a generic patch renderer (e.g. Pierre's `PatchDiff`). The hook
- * already carries per-line old/new numbers and a hunk header, so we emit a
- * conventional `--- / +++ / @@` patch the parser understands.
- */
-declare function gitFileDiffToPatch(file: GitFileDiff): string;
-
-/**
- * Derive a COMPLETE xterm `ITheme` from the live `--og-*` token system on the
- * DOM. Reads the COMPUTED values so xterm gets concrete colors, detects the
- * active theme mode, and fills every ANSI slot. Call on mount + re-derive on a
- * `data-og-theme` flip. SSR-safe: returns undefined off the DOM.
- *
- * `root` should be an element INSIDE the themed subtree (e.g. the terminal
- * container) so nested `[data-og-theme]` themes resolve correctly; when omitted
- * it falls back to the nearest `[data-og-theme]` element, then documentElement.
- */
-declare function xtermThemeFromTokens(root?: HTMLElement | null): XtermTheme | undefined;
-
-/** Merge class names with Tailwind-aware conflict resolution. */
-declare function cn(...inputs: ClassValue[]): string;
-
-/** Compact relative time: "now", "42s", "7m", "3h", "2d", then a date. */
-declare function formatRelativeTime(iso: string, now?: Date): string;
-/** Human-readable byte size: "512 B", "8.0 KB", "1.4 MB", "3 GB". */
-declare function formatBytes(bytes: number): string;
-/** Single-line preview of arbitrary text, for tiles and collapsed rows. */
-declare function truncate(text: string, maxLength: number): string;
-/** Render an unknown payload as readable text (pretty JSON when possible). */
-declare function stringifyPayload(value: unknown): string;
-/** JSON.parse that returns `undefined` instead of throwing. */
-declare function tryParseJson(text: string): unknown;
-/**
- * The canonical credit-death sentence. Credit exhaustion is the one failure a
- * user can fix themselves — the copy must say what happened (empty balance),
- * what to do (add credits), and what is safe (nothing was lost). Crucially it
- * must NOT say "send a message to revive": a revive turn burns credits the
- * workspace no longer has.
- */
-declare const CREDIT_EXHAUSTION_MESSAGE = "Out of OpenGeni credits \u2014 this workspace's balance is empty. Add credits to continue; the conversation is preserved.";
-/**
- * Does this failure/completion payload (or raw error string) mean the
- * workspace ran out of OpenGeni credits? Matches the engine's
- * "insufficient OpenGeni credits" text (case-insensitive, substring — it
- * arrives both bare and wrapped in "Activity task failed: …") and the
- * budget-exhausted segment limit the engine stamps on a turn it ended early.
- */
-declare function isCreditExhaustion(input: {
-    error?: string | null;
-    detail?: string | null;
-    segmentLimit?: string | null;
-} | string): boolean;
-/**
- * Humanize engine/provider failure text before it reaches the timeline or a
- * failure banner. Raw provider errors leak the wrong audience's instructions —
- * "Incorrect API key … find your API key at platform.openai.com" tells a
- * managed-deployment USER to fix credentials only an OPERATOR controls (and is
- * flatly wrong for Azure or subscription-backed engines). Auth, quota, and
- * credit-exhaustion failures collapse to one neutral, honest sentence; every
- * other reason passes through untouched. Raw payloads stay available in the
- * debug surfaces.
- */
-declare function humanizeFailureReason(reason: string | null): string | null;
-
-export { ActivityDisclosure, type ActivityDisclosureProps, ActivityItem, ActivityRail, type ActivityRailProps, type ApplyPatchOperation, ApprovalSurface, type ApprovalSurfaceMessages, type ApprovalSurfaceProps, BodyNote, CREDIT_EXHAUSTION_MESSAGE, CapturedFileUnavailableError, type CapturedFileUnavailableReason, ChatComposer, ChatComposerMessages, type ChatComposerProps, ClientOverride, CodeEditor, type CodeEditorProps, type CodexAccountsClientLike, CommandContext, CommandPalette, type CommandPaletteProps, ComposerState, ComposerTranscriptionControlProps, type DeriveMachineChipInput, DesktopViewer, type DesktopViewerProps, type DesktopWebSocketFactory, type DesktopWebSocketLike, type DiffTheme, DiffView, type DiffViewProps, type DisclosureChip, DisclosureDefaultsProvider, FileBrowser, type FileBrowserProps, type FileTreeNode, type FileTreeStatus, FileWriteConflictError, FleetTile, type FleetTileProps, LightboxProvider, type MachineChip, type MachineChipState, Markdown, type MarkdownProps, MediaEmpty, MediaSkeleton, ModelPicker, type ModelPickerProps, OpenGeniProvider, type OpenGeniProviderProps, type ParsedCommandLine, PayloadBlock, PendingApproval, PierreDiff, type PierreDiffProps, PierreFile, type PierreFileProps, SESSION_STATUS_META, SandboxFiles, type SandboxFilesProps, type SandboxGitFileDiff, SandboxTerminal, type SandboxTerminalProps, SandboxWorkspace, type SandboxWorkspaceProps, type SandboxWorkspaceSurface, type SandboxWriteFileOptions, ScreenshotFigure, type SessionCapabilitiesState, SessionClientLike, SessionStatus, type SessionStatusMeta, type SessionStatusProps, SlashArg, SlashCommand, SlashCommandContext, StatusDot, type StatusDotProps, TermBlock, type TerminalChunk, type TerminalStreamStatus, Thumbnail, ToolRegistry, type UseAvailableModelsOptions, type UseAvailableModelsResult, type UseBillingUsageOptions, type UseBillingUsageResult, type UseCodexAccountsOptions, type UseCodexAccountsResult, type UseDesktopStreamOptions, type UseDesktopStreamResult, type UseEnvironmentsOptions, type UseEnvironmentsResult, UseFileAttachmentsResult, type UseMachineChipOptions, type UsePacksOptions, type UsePacksResult, type UseRelayFrameStreamOptions, type UseRelayFrameStreamResult, type UseRigChangesOptions, type UseRigChangesResult, type UseRigOptions, type UseRigResult, type UseRigVersionsOptions, type UseRigVersionsResult, type UseRigsOptions, type UseRigsResult, type UseSandboxFilesOptions, type UseSandboxFilesResult, type UseSandboxGitOptions, type UseSandboxGitResult, type UseSandboxTerminalOptions, type UseSandboxTerminalResult, type UseSandboxWorkspaceTabsOptions, type UseSandboxWorkspaceTabsResult, type UseScheduledTasksOptions, type UseScheduledTasksResult, type UseSessionCapabilitiesOptions, type UseSessionCapabilitiesResult, type UseTerminalStreamOptions, type UseTerminalStreamResult, type UseVariableSetsOptions, type UseVariableSetsResult, type UseWorkspaceCaptureOptions, type UseWorkspaceCaptureResult, type UseWorkspaceEditOptions, type UseWorkspaceEditResult, type UseWorkspaceSessionsOptions, type UseWorkspaceSessionsResult, type UseWorkspacesOptions, type UseWorkspacesResult, WORKBENCH_SURFACES, WORKBENCH_TAB_CHANGES, WORKBENCH_TAB_DESKTOP, WORKBENCH_TAB_FILES, WORKBENCH_TAB_TERMINAL, WorkspaceDock, type WorkspaceDockProps, type WorkspaceEditConflict, type WorkspaceEditState, type WorkspaceMachine, type WorkspaceNotification, type WorkspaceTab, type XtermTheme, applyPatchOps, argHint, cn, controlCaret, createDefaultToolRegistry, createToolRegistry, defaultApprovalSurfaceMessages, defaultCommands, defaultToolRegistry, deriveMachineChip, execTruncated, filterCommands, firstMissingRequiredArg, formatAsOf, formatBytes, formatRelativeTime, gitFileDiffToPatch, hasPermission, humanizeFailureReason, initialWorkspaceTab, isApplyPatch, isCodexAccountEvent, isCreditExhaustion, isExecSessionLostBanner, languageForPath, looksBinary, matchCommand, parseCommandLine, parseExecBannerSessionId, parseToolArgs, redactSecrets, sandboxCommandExitCode, sessionDisplayTitle, stringifyPayload, stripExecBanner, tailPeek, truncate, tryParseJson, unwrapMcpOutput, useAvailableModels, useBillingUsage, useCodexAccounts, useDesktopStream, useEnvironments, useLightbox, useLightboxOptional, useMachineChip, usePacks, useRelayFrameStream, useRig, useRigChanges, useRigVersions, useRigs, useSandboxFiles, useSandboxGit, useSandboxTerminal, useSandboxWorkspaceTabs, useScheduledTasks, useSessionCapabilities, useTerminalStream, useVariableSets, useWorkspaceCapture, useWorkspaceEdit, useWorkspaceSessions, useWorkspaces, v4aToGitFileDiff, xtermThemeFromTokens };
+export type { EmbeddedFileAttachmentClientLike, EmbeddedGoalClientLike, EmbeddedHumanInputSessionClientLike, EmbeddedSessionEventClientLike, EmbeddedSessionLineageClientLike, EmbeddedSessionMcpApprovalPolicyClientLike, EmbeddedSessionReadClientLike, EmbeddedSessionClientLike, SessionClientLike, } from "./client";
+export { OpenGeniProvider } from "./provider";
+export type { OpenGeniProviderProps } from "./provider";
+export { useOpenGeni, useOpenGeniClient } from "./session-context";
+export type { ClientOverride, OpenGeniContextValue } from "./session-context";
+export { useSession, isTitleEvent } from "./hooks/use-session";
+export type { UseSessionOptions, UseSessionResult } from "./hooks/use-session";
+export { SESSION_EVENT_BROWSER_MAX_BYTES, SESSION_EVENT_BROWSER_MAX_COUNT, SESSION_EVENT_BROWSER_PENDING_MAX_BYTES, SESSION_EVENT_BROWSER_PENDING_MAX_COUNT, SESSION_EVENT_BROWSER_SINGLE_EVENT_MAX_BYTES, boundBrowserSessionEventWindow, useSessionEvents, } from "./hooks/use-session-events";
+export type { BrowserSessionEventWindow, SessionEventsConnectionState, UseSessionEventsOptions, UseSessionEventsResult, } from "./hooks/use-session-events";
+export { useComposer, composeSendInput, shouldSteerOnKey, shouldSubmitOnKey, FILE_ONLY_MESSAGE_TEXT, } from "./hooks/use-composer";
+export type { ComposerSendExtras, ComposerState, UseComposerOptions } from "./hooks/use-composer";
+export { useVoiceInput } from "./hooks/use-voice-input";
+export type { UseVoiceInputOptions, UseVoiceInputResult, VoiceInputStatus, } from "./hooks/use-voice-input";
+export { COMPOSER_PAYMENT_REQUIRED_MESSAGE, composerSubmissionErrorMessage } from "./lib/format";
+export { INITIAL_TRANSCRIPTION_CONTROL_STATE, appendFinalTranscript, transitionTranscriptionControl, useTranscription, } from "./hooks/use-transcription";
+export type { TranscriptionControlAction, TranscriptionControlState, TranscriptionControlTransition, UseTranscriptionOptions, UseTranscriptionResult, } from "./hooks/use-transcription";
+export { useFileAttachments } from "./hooks/use-file-attachments";
+export type { FileAttachment, UseFileAttachmentsOptions, UseFileAttachmentsResult, } from "./hooks/use-file-attachments";
+export { useTurnQueue, isTurnQueueEvent } from "./hooks/use-turn-queue";
+export type { QueueMutationKind, UseTurnQueueOptions, UseTurnQueueResult, } from "./hooks/use-turn-queue";
+export { useLastStartedTurnPolicy, isLastStartedTurnPolicyEvent, } from "./hooks/use-last-started-turn-policy";
+export type { LastStartedTurnPolicy, UseLastStartedTurnPolicyOptions, UseLastStartedTurnPolicyResult, } from "./hooks/use-last-started-turn-policy";
+export { QueueSurface } from "./components/queue-surface";
+export type { QueueSurfaceProps } from "./components/queue-surface";
+export { SessionChrome, sessionChromeGoalPillState } from "./components/session-chrome";
+export type { SessionChromeAgentsSignal, SessionChromeProps, SessionChromeSignalId, SessionChromeSignalTone, } from "./components/session-chrome";
+export { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "./components/tooltip";
+export { OPEN_WORKSTREAM_CONTROL_EVENT } from "./components/chat-composer";
+export { useGoal, isGoalEvent } from "./hooks/use-goal";
+export type { UseGoalOptions, UseGoalResult } from "./hooks/use-goal";
+export { useSessionControl } from "./hooks/use-session-control";
+export type { UseSessionControlOptions, UseSessionControlResult, } from "./hooks/use-session-control";
+export { isSessionMcpApprovalPolicyEvent, useSessionMcpApprovalPolicy, } from "./hooks/use-session-mcp-approval-policy";
+export type { UseSessionMcpApprovalPolicyOptions, UseSessionMcpApprovalPolicyResult, } from "./hooks/use-session-mcp-approval-policy";
+export { useScheduledTasks } from "./hooks/use-scheduled-tasks";
+export type { UseScheduledTasksOptions, UseScheduledTasksResult, } from "./hooks/use-scheduled-tasks";
+export { useWorkspaceSessions } from "./hooks/use-workspace-sessions";
+export type { UseWorkspaceSessionsOptions, UseWorkspaceSessionsResult, } from "./hooks/use-workspace-sessions";
+export { useSessionLineage, isLineageRefreshEvent } from "./hooks/use-session-lineage";
+export type { UseSessionLineageOptions, UseSessionLineageResult, } from "./hooks/use-session-lineage";
+export { useVariableSets, useEnvironments } from "./hooks/use-environments";
+export type { UseVariableSetsOptions, UseVariableSetsResult, UseEnvironmentsOptions, UseEnvironmentsResult, } from "./hooks/use-environments";
+export { useRigs, useRig, useRigVersions, useRigChanges } from "./hooks/use-rigs";
+export type { UseRigsOptions, UseRigsResult, UseRigOptions, UseRigResult, UseRigVersionsOptions, UseRigVersionsResult, UseRigChangesOptions, UseRigChangesResult, } from "./hooks/use-rigs";
+export { usePacks } from "./hooks/use-packs";
+export type { UsePacksOptions, UsePacksResult } from "./hooks/use-packs";
+export { useWorkspaces } from "./hooks/use-workspaces";
+export type { UseWorkspacesOptions, UseWorkspacesResult } from "./hooks/use-workspaces";
+export { useBillingUsage } from "./hooks/use-billing-usage";
+export type { UseBillingUsageOptions, UseBillingUsageResult } from "./hooks/use-billing-usage";
+export { useAvailableModels, useWorkspaceModelCatalog } from "./hooks/use-available-models";
+export type { UseAvailableModelsOptions, UseAvailableModelsResult, UseWorkspaceModelCatalogOptions, UseWorkspaceModelCatalogResult, } from "./hooks/use-available-models";
+export { useSessionCapabilities } from "./hooks/use-session-capabilities";
+export type { SessionCapabilitiesState, UseSessionCapabilitiesOptions, UseSessionCapabilitiesResult, } from "./hooks/use-session-capabilities";
+export { useDesktopStream } from "./hooks/use-desktop-stream";
+export type { UseDesktopStreamOptions, UseDesktopStreamResult } from "./hooks/use-desktop-stream";
+export { useRelayFrameStream } from "./hooks/use-relay-frame-stream";
+export type { DesktopWebSocketFactory, DesktopWebSocketLike, UseRelayFrameStreamOptions, UseRelayFrameStreamResult, } from "./hooks/use-relay-frame-stream";
+export { useTerminalStream } from "./hooks/use-terminal-stream";
+export type { TerminalStreamStatus, UseTerminalStreamOptions, UseTerminalStreamResult, } from "./hooks/use-terminal-stream";
+export { useSandboxTerminal } from "./hooks/use-sandbox-terminal";
+export type { TerminalChunk, UseSandboxTerminalOptions, UseSandboxTerminalResult, } from "./hooks/use-sandbox-terminal";
+export { CapturedFileUnavailableError, FileWriteConflictError, useSandboxFiles, } from "./hooks/use-sandbox-files";
+export type { CapturedFileUnavailableReason, FileTreeNode, FileTreeStatus, SandboxWriteFileOptions, UseSandboxFilesOptions, UseSandboxFilesResult, } from "./hooks/use-sandbox-files";
+export { useSandboxGit } from "./hooks/use-sandbox-git";
+export type { SandboxGitFileDiff, UseSandboxGitOptions, UseSandboxGitResult, } from "./hooks/use-sandbox-git";
+export { useWorkspaceCapture } from "./hooks/use-workspace-capture";
+export type { UseWorkspaceCaptureOptions, UseWorkspaceCaptureResult, } from "./hooks/use-workspace-capture";
+export { useWorkspaceEdit } from "./hooks/use-workspace-edit";
+export type { UseWorkspaceEditOptions, UseWorkspaceEditResult, WorkspaceEditConflict, WorkspaceEditState, } from "./hooks/use-workspace-edit";
+export { deriveMachineChip, formatAsOf, useMachineChip } from "./hooks/use-machine-chip";
+export type { DeriveMachineChipInput, MachineChip, MachineChipState, UseMachineChipOptions, } from "./hooks/use-machine-chip";
+export { approvalsFromRequiresAction, projectPendingApprovals } from "./approvals";
+export type { PendingApproval } from "./approvals";
+export { ApprovalSurface, defaultApprovalSurfaceMessages } from "./components/approval-surface";
+export type { ApprovalSurfaceMessages, ApprovalSurfaceProps } from "./components/approval-surface";
+export { humanInputRequestFromEvent, projectPendingHumanInputRequests } from "./human-input";
+export type { PendingHumanInputRequest } from "./human-input";
+export { isHumanInputEvent, useHumanInputRequests } from "./hooks/use-human-input";
+export type { UseHumanInputRequestsOptions, UseHumanInputRequestsResult, } from "./hooks/use-human-input";
+export { HumanInputForm, answersFromDrafts, defaultHumanInputFormMessages, } from "./components/human-input-form";
+export type { HumanInputAnswerDraft, HumanInputFormMessages, HumanInputFormProps, } from "./components/human-input-form";
+export { buildTimeline, creditExhaustedFromEvents, extractSessionRef, groupTimeline, sessionStatusFromEvents, toolDisplayName, } from "./timeline";
+export type { ActivityItem, AgentMessageItem, AuthNeededItem, ContextCompactionItem, GoalItem, MachineInputBatchItem, MachineInputMember, NoticeItem, ReasoningItem, SandboxItem, SessionStatusItem, TimelineGroup, TimelineItem, TurnEndItem, ToolCallItem, UserMessageItem, WorkerItem, } from "./timeline";
+export { createDefaultToolRegistry, createToolRegistry, defaultToolRegistry, rawTypeOf, } from "./timeline";
+export type { CreateToolRegistryOptions, ToolRegistry, ToolRegistryEntry, ToolRenderer, ToolRendererProps, } from "./timeline";
+export { ActivityDisclosure, ActivityRail, BodyNote, DisclosureDefaultsProvider, LightboxProvider, MediaEmpty, MediaSkeleton, PayloadBlock, ScreenshotFigure, TermBlock, Thumbnail, TurnSummary, BUILT_IN_TURN_SUMMARY_FACET_IDS, useLightbox, useLightboxOptional, } from "./timeline";
+export type { ActivityDisclosureProps, ActivityRailProps, DisclosureChip, BuiltInTurnSummaryFacetId, TurnOutcome, TurnSummaryContext, TurnSummaryFacet, TurnSummaryFacetConfiguration, TurnSummaryFacetResult, TurnSummaryOptions, TurnSummaryProps, } from "./timeline";
+export { applyPatchOps, controlCaret, execTruncated, isApplyPatch, isExecSessionLostBanner, looksBinary, parseExecBannerSessionId, parseToolArgs, redactSecrets, sandboxCommandExitCode, stripExecBanner, tailPeek, unwrapMcpOutput, v4aToGitFileDiff, } from "./timeline";
+export type { ApplyPatchOperation } from "./timeline";
+export { argHint, defaultCommands, filterCommands, firstMissingRequiredArg, hasPermission, matchCommand, parseCommandLine, } from "./commands/registry";
+export type { ParsedCommandLine } from "./commands/registry";
+export type { CommandContext, CommandResult, Notice, SlashArg, SlashCommand, } from "./commands/types";
+export { useSlashCommands } from "./hooks/use-slash-commands";
+export type { ConfirmState, SlashCommandContext, SlashCommandHandlers, UseSlashCommandsOptions, UseSlashCommandsResult, } from "./hooks/use-slash-commands";
+export { CommandPalette } from "./components/command-palette";
+export type { CommandPaletteProps } from "./components/command-palette";
+export { ChatComposer } from "./components/chat-composer";
+export type { ChatComposerProps } from "./components/chat-composer";
+export { ComposerTranscriptionControl } from "./components/composer-transcription-control";
+export type { ComposerTranscriptionControlProps, ComposerTranscriptionMessages, } from "./components/composer-transcription-control";
+export { defaultChatComposerMessages } from "./components/composer";
+export type { ChatComposerMessages } from "./components/composer";
+export { ModelPicker } from "./components/model-picker";
+export type { ModelPickerProps } from "./components/model-picker";
+export { advancedSourceSummary, availabilityReasonLabel, billingClassForModel, billingClassLabel, coerceReasoningEffortForModel, defaultEffortForModel, effortOptionsForModel, findPickerRow, groupPickerRowsByBillingClass, labelLatencyMode, payerSummaryForModel, projectPickerRows, runnableLatencyModesForModel, sortPickerRows, } from "./model-policy";
+export type { LatencyModeId, PickerBillingClass, PickerModelRow } from "./model-policy";
+export { MessageTimeline, TimelineRow } from "./components/message-timeline";
+export type { MessageTimelineProps } from "./components/message-timeline";
+export { Markdown } from "./components/markdown";
+export { CopyButton, CopyHoverFrame } from "./components/copy-button";
+export { copyTextToClipboard, tableElementToTsv } from "./lib/clipboard";
+export type { MarkdownProps } from "./components/markdown";
+export { SessionStatus, StatusDot, SESSION_STATUS_META } from "./components/session-status";
+export type { SessionStatusProps, StatusDotProps, SessionStatusMeta, } from "./components/session-status";
+export { FleetTile, sessionDisplayTitle } from "./components/fleet-tile";
+export type { FleetTileProps } from "./components/fleet-tile";
+export { SandboxTerminal } from "./components/sandbox-terminal";
+export type { SandboxTerminalProps, XtermTheme } from "./components/sandbox-terminal";
+export { FileBrowser } from "./components/file-browser";
+export type { FileBrowserProps } from "./components/file-browser";
+export { DiffView } from "./components/diff-view";
+export type { DiffViewProps, DiffTheme } from "./components/diff-view";
+export { PierreDiff } from "./components/pierre-diff";
+export type { PierreDiffProps } from "./components/pierre-diff";
+export { PierreFile } from "./components/pierre-file";
+export type { PierreFileProps } from "./components/pierre-file";
+export { CodeEditor, languageForPath } from "./components/code-editor";
+export type { CodeEditorProps } from "./components/code-editor";
+export { SandboxFiles } from "./components/sandbox-files";
+export type { SandboxFilesProps } from "./components/sandbox-files";
+export { DesktopViewer } from "./components/desktop-viewer";
+export type { DesktopViewerProps } from "./components/desktop-viewer";
+export { WorkspaceDock } from "./components/workspace-dock";
+export type { WorkspaceDockProps, WorkspaceTab } from "./components/workspace-dock";
+export { SandboxWorkspace, useSandboxWorkspaceTabs, initialWorkspaceTab, WORKBENCH_TAB_CHANGES, WORKBENCH_TAB_FILES, WORKBENCH_TAB_TERMINAL, WORKBENCH_TAB_DESKTOP, WORKBENCH_SURFACES, } from "./components/sandbox-workspace";
+export type { SandboxWorkspaceSurface, SandboxWorkspaceProps, UseSandboxWorkspaceTabsOptions, UseSandboxWorkspaceTabsResult, WorkspaceMachine, WorkspaceNotification, } from "./components/sandbox-workspace";
+export * from "./machines";
+export { useCodexAccounts, isCodexAccountEvent } from "./hooks/use-codex-accounts";
+export type { CodexAccountsClientLike, UseCodexAccountsOptions, UseCodexAccountsResult, } from "./hooks/use-codex-accounts";
+export { gitFileDiffToPatch } from "./lib/git-patch";
+export { xtermThemeFromTokens } from "./lib/xterm-theme";
+export { cn } from "./lib/cn";
+export { CREDIT_EXHAUSTION_MESSAGE, formatBytes, formatRelativeTime, humanizeFailureReason, isCreditExhaustion, stringifyPayload, truncate, tryParseJson, } from "./lib/format";