@opengeni/sdk 0.15.0 → 0.23.0

package/dist/index.d.ts

@@ -1,3 +1,190 @@
+/**
+ * Framework- and transport-agnostic speech-to-text capability contract.
+ *
+ * Audio transport, microphone access, credentials, and provider SDKs belong to
+ * host-supplied adapters. This module deliberately contains no browser globals
+ * and no provider implementation.
+ */
+type TranscriptionCredentialMode = "managed" | "byok";
+type WorkspaceTranscriptionTarget = {
+    provider: string;
+    model: string | null;
+    credentialMode: TranscriptionCredentialMode;
+    /** Workspace-scoped connection reference. This is never a secret. */
+    credentialConnectionId: string | null;
+    region: string | null;
+};
+type WorkspaceTranscriptionPolicy = {
+    enabled: boolean;
+    /** Exact admin-accepted policy identity; required whenever enabled. */
+    acceptanceId: string | null;
+    primary: WorkspaceTranscriptionTarget | null;
+    /** Explicit language preference. Required when automatic detection is not accepted. */
+    language: string | null;
+    /** Whether the accepted adapter may automatically detect the spoken language. */
+    autoDetectLanguage: boolean;
+    /** Whether the accepted adapter may identify distinct speakers. */
+    diarization: {
+        enabled: boolean;
+        maxSpeakers: number | null;
+    };
+    retention: {
+        mode: "none" | "provider-policy";
+        maxDays: number | null;
+    };
+    privacy: {
+        allowProviderLogging: boolean;
+        allowProviderTraining: boolean;
+    };
+    fallback: {
+        mode: "disabled" | "explicit";
+        targets: WorkspaceTranscriptionTarget[];
+    };
+    cost: {
+        currency: "USD";
+        maxPerHour: number | null;
+        maxPerMonth: number | null;
+    };
+};
+declare const DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY: WorkspaceTranscriptionPolicy;
+type TranscriptionAdapterDescriptor = {
+    provider: string;
+    model: string | null;
+    credentialMode: TranscriptionCredentialMode;
+    region: string | null;
+};
+type TranscriptionTargetSelection = {
+    kind: "primary";
+} | {
+    kind: "fallback";
+    index: number;
+};
+type TranscriptionPolicyBlockReason = "disabled" | "unaccepted" | "target_missing" | "fallback_disabled" | "fallback_unaccepted" | "provider_mismatch" | "model_mismatch" | "credential_mode_mismatch" | "region_mismatch";
+type TranscriptionAuthorization = {
+    authorized: true;
+    acceptanceId: string;
+    target: WorkspaceTranscriptionTarget;
+    selection: TranscriptionTargetSelection;
+} | {
+    authorized: false;
+    reason: TranscriptionPolicyBlockReason;
+};
+type TranscriptionLifecycleStatus = "idle" | "requesting-permission" | "listening" | "reconnecting" | "cancelling" | "closed" | "error";
+type TranscriptionErrorCode = "permission_denied" | "not_supported" | "network" | "provider" | "policy_blocked" | "timeout" | "cancelled" | "unknown";
+type TranscriptionTimeSpan = {
+    startMilliseconds: number;
+    endMilliseconds: number;
+};
+type TranscriptionSpeaker = {
+    /** Provider-neutral identity stable within the local transcription session. */
+    id: string;
+    label?: string | undefined;
+};
+type TranscriptionWord = {
+    text: string;
+    span: TranscriptionTimeSpan;
+    confidence?: number | undefined;
+    speaker?: TranscriptionSpeaker | undefined;
+};
+/** Optional result detail; adapters omit fields their provider cannot supply. */
+type TranscriptionResultMetadata = {
+    detectedLanguage?: string | undefined;
+    span?: TranscriptionTimeSpan | undefined;
+    confidence?: number | undefined;
+    speaker?: TranscriptionSpeaker | undefined;
+    words?: TranscriptionWord[] | undefined;
+};
+type TranscriptionDiagnostic = {
+    operation: "start" | "session" | "cancel" | "close";
+    code: TranscriptionErrorCode;
+    /** Diagnostic-only detail. React sanitizes and bounds this before forwarding it. */
+    detail: string;
+};
+type TranscriptionEventBase = {
+    /** Stable across reconnects and explicitly accepted fallback attempts. */
+    localSessionId: string;
+    /** Adapter-monotonic across the entire local session, including replay. */
+    sequence: number;
+    occurredAt: string;
+};
+type TranscriptionEvent = (TranscriptionEventBase & {
+    type: "permission.requested";
+}) | (TranscriptionEventBase & {
+    type: "session.opened";
+    providerSessionId: string;
+}) | (TranscriptionEventBase & {
+    type: "transcript.partial";
+    segmentId: string;
+    text: string;
+    metadata?: TranscriptionResultMetadata | undefined;
+}) | (TranscriptionEventBase & {
+    type: "transcript.final";
+    segmentId: string;
+    text: string;
+    /** Stable provider/coordinator acceptance identity used for dedupe. */
+    providerAcceptanceId: string;
+    metadata?: TranscriptionResultMetadata | undefined;
+}) | (TranscriptionEventBase & {
+    type: "usage";
+    audioMilliseconds: number;
+    costUsd: number | null;
+}) | (TranscriptionEventBase & {
+    type: "session.reconnecting";
+    attempt: number;
+    reason: string;
+}) | (TranscriptionEventBase & {
+    type: "session.error";
+    code: TranscriptionErrorCode;
+    recoverable: boolean;
+}) | (TranscriptionEventBase & {
+    type: "session.closed";
+    reason: "completed" | "cancelled" | "error" | "replaced";
+});
+type TranscriptionSessionRequest = {
+    localSessionId: string;
+    policyAcceptanceId: string;
+    selection: TranscriptionTargetSelection;
+    target: WorkspaceTranscriptionTarget;
+    language: string | null;
+    autoDetectLanguage: boolean;
+    diarization: WorkspaceTranscriptionPolicy["diarization"];
+    retention: WorkspaceTranscriptionPolicy["retention"];
+    privacy: WorkspaceTranscriptionPolicy["privacy"];
+    cost: WorkspaceTranscriptionPolicy["cost"];
+    /** A replacement/reconnect adapter must emit events above this floor. */
+    sequenceFloor: number;
+};
+type TranscriptionEventListener = (event: TranscriptionEvent) => void;
+type TranscriptionAdapterStartContext = {
+    /** Aborted on local cancellation, policy replacement, timeout, or unmount. */
+    signal: AbortSignal;
+    /** Non-UI observability seam; callers receive only bounded, redacted detail. */
+    reportDiagnostic: (diagnostic: TranscriptionDiagnostic) => void;
+};
+type TranscriptionSession = {
+    readonly localSessionId: string;
+    cancel(reason?: string): Promise<void>;
+    close(): Promise<void>;
+};
+type TranscriptionAdapter = {
+    readonly descriptor: TranscriptionAdapterDescriptor;
+    start(request: TranscriptionSessionRequest, listener: TranscriptionEventListener, context: TranscriptionAdapterStartContext): Promise<TranscriptionSession>;
+};
+/** Invalid or absent settings always resolve to the fail-closed default. */
+declare function resolveWorkspaceTranscriptionPolicy(settings: unknown): WorkspaceTranscriptionPolicy;
+/**
+ * Speech authorization is intentionally independent from turn model policy.
+ * Every selected adapter must match one exact admin-accepted target.
+ */
+declare function authorizeTranscriptionAdapter(policy: WorkspaceTranscriptionPolicy, descriptor: TranscriptionAdapterDescriptor, selection?: TranscriptionTargetSelection): TranscriptionAuthorization;
+declare function createTranscriptionSessionRequest(input: {
+    policy: WorkspaceTranscriptionPolicy;
+    adapter: TranscriptionAdapter;
+    localSessionId: string;
+    selection?: TranscriptionTargetSelection | undefined;
+    sequenceFloor?: number | undefined;
+}): TranscriptionSessionRequest | null;
+
 type SessionStatus = "queued" | "running" | "idle" | "requires_action" | "recovering" | "waiting_capacity" | "failed" | "cancelled";
 type SandboxBackend = "docker" | "modal" | "local" | "none" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted";
 type SandboxOs = "linux" | "macos" | "windows";
@@ -125,13 +312,23 @@ type ViewerHeartbeatResponse = {
 };
 type ReasoningEffort = "none" | "minimal" | "low" | "medium" | "high" | "xhigh";
 type GitCredentialProvider = "github" | "gitlab" | "azure_devops";
+type GitCredentialBindingId = string;
+type GitRepositoryAccess = "read" | "write";
 type RepositoryResourceRef = {
     kind: "repository";
     uri: string;
     ref: string;
+    /**
+     * Optional workspace-relative override. When omitted, OpenGeni persists
+     * `repos/<encoded-host>/<owner>/<repo>` so equal names on different Git
+     * providers do not collide. Explicit paths are portable, traversal-free, and
+     * collision-checked case-insensitively before sandbox execution.
+     */
     mountPath?: string | undefined;
     subpath?: string | undefined;
     provider?: GitCredentialProvider | undefined;
+    credentialBindingId?: GitCredentialBindingId | undefined;
+    access?: GitRepositoryAccess | undefined;
     repositoryId?: number | string | undefined;
     installationId?: number | string | undefined;
     projectId?: number | string | undefined;
@@ -142,12 +339,40 @@ type RepositoryResourceRef = {
 type FileResourceRef = {
     kind: "file";
     fileId: string;
+    /** Optional workspace-relative override; defaults to `files/<file-id>`. */
     mountPath?: string | undefined;
 };
 type ResourceRef = RepositoryResourceRef | FileResourceRef;
 type ToolRef = {
     kind: "mcp";
     id: string;
+    optional?: boolean | undefined;
+};
+type SessionToolPolicy = {
+    mode: "workspace_default" | "explicit" | "inherited" | "legacy";
+    inheritedFromSessionId: string | null;
+};
+type SessionEffectiveToolPolicy = {
+    mode: SessionToolPolicy["mode"];
+    inheritedFromSessionId: string | null;
+    selectedIds: string[];
+    effectiveIds: string[];
+    mandatoryIds: string[];
+    lazyRouter: {
+        state: "required" | "disabled";
+        deferredIds: string[];
+    };
+    configuredIds: string[];
+    droppedIds: string[];
+    counts: {
+        selected: number;
+        effective: number;
+        mandatory: number;
+        deferred: number;
+        configured: number;
+        dropped: number;
+    };
+    idsTruncated: boolean;
 };
 type GoalSpec = {
     text: string;
@@ -161,27 +386,45 @@ type SessionMcpServerInput = {
     allowedTools?: string[] | undefined;
     timeoutMs?: number | undefined;
     cacheToolsList?: boolean | undefined;
+    /** Require human approval for every tool, or only the listed unprefixed tool names. */
+    requireApproval?: boolean | string[] | undefined;
     headers?: Record<string, string> | undefined;
+    connectionRef?: McpServerConnectionRef | undefined;
 };
 type SessionMcpCredentialUpdateInput = {
     id: string;
     headers: Record<string, string>;
 };
+type SessionMcpApprovalPolicy = boolean | string[];
 type SessionMcpServerMetadata = {
     id: string;
     name: string | null;
     url: string;
     headerNames: string[];
     credentialVersion: number;
+    requireApproval: SessionMcpApprovalPolicy;
+    connectionRef: McpServerConnectionRef | null;
+};
+type UpdateSessionMcpApprovalPolicyRequest = {
+    requireApproval: SessionMcpApprovalPolicy;
+};
+type UpdateSessionMcpApprovalPolicyResponse = {
+    server: SessionMcpServerMetadata;
+    effectiveFrom: "next_attempt";
 };
 type ConnectionKind = "oauth2" | "api_key" | "app_install" | "delegated";
 type ConnectionStatus = "active" | "needs_reauth" | "revoked" | "error";
 type McpServerConnectionRef = {
     connectionId?: string | undefined;
+    provider?: string | undefined;
     providerDomain: string;
     kind?: ConnectionKind | undefined;
     scopes?: string[] | undefined;
     resource?: string | undefined;
+    selectedResources?: Array<{
+        id: string;
+        kind: "repository";
+    }> | undefined;
     subjectScope?: "workspace" | "subject" | undefined;
 };
 type ConnectionMetadata = {
@@ -247,6 +490,19 @@ type OAuthStartResponse = {
     authorizationUrl: string | null;
     expiresAt: string;
 };
+/** The immutable principal whose authority accepted a session or turn. */
+type TurnInitiator = {
+    kind: "subject" | "service";
+    subjectId: string;
+    /** Display-only snapshot; never an authorization input. */
+    label?: string | undefined;
+};
+/** A trusted embedding host's causal machine/service principal. */
+type ServiceTurnInitiator = TurnInitiator & {
+    kind: "service";
+};
+/** Bounded host provenance; OpenGeni-owned lineage keys are reserved. */
+type ServiceTurnInitiatorContext = Record<string, unknown>;
 type IntegrationClientMetadata = {
     client_id: string;
     client_name: "OpenGeni";
@@ -266,7 +522,12 @@ type Session = {
     instructions: string | null;
     resources: ResourceRef[];
     tools: ToolRef[];
+    toolPolicy?: SessionToolPolicy | undefined;
+    effectiveToolPolicy?: SessionEffectiveToolPolicy | undefined;
     metadata: Record<string, unknown>;
+    /** Frozen creator fact; later turns carry their own independent initiator. */
+    createdBy: TurnInitiator;
+    createdByContext: Record<string, unknown>;
     model: string;
     sandboxBackend: SandboxBackend;
     sandboxOs: SandboxOs;
@@ -308,14 +569,22 @@ type Session = {
         attentionDescendants: number;
         pausedDescendants: number;
         failedDescendants: number;
+        /** Counts are lower bounds rather than exact totals when true. */
+        truncated: boolean;
     } | undefined;
     createdAt: string;
     updatedAt: string;
 };
+/** Additive receipt returned by POST /sessions. */
+type CreateSessionResponse = Session & {
+    initialTurnId: string | null;
+};
 type SessionSummary = Session;
 /** Canonical session-list page; pinned rows are excluded from ordinary pages. */
 type SessionListResponse = {
     pinned: Session[];
+    /** True when the server omitted older pins from its bounded pinned section. */
+    pinnedTruncated?: boolean;
     sessions: Session[];
     nextCursor: string | null;
 };
@@ -346,6 +615,7 @@ type SessionTurn = {
     prompt: string;
     resources: ResourceRef[];
     tools: ToolRef[];
+    toolsProvided?: boolean | undefined;
     model: string;
     reasoningEffort: ReasoningEffort;
     sandboxBackend: SandboxBackend;
@@ -355,6 +625,8 @@ type SessionTurn = {
     executionGeneration: number;
     activeAttemptId: string | null;
     lineage: Record<string, unknown>;
+    initiator: TurnInitiator;
+    initiatorContext: Record<string, unknown>;
     cancelledBy?: string | null;
     cancelReason?: string | null;
     startedAt: string | null;
@@ -362,7 +634,64 @@ type SessionTurn = {
     createdAt: string;
     updatedAt: string;
 };
-declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.status.changed", "session.requiresAction", "session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.capacity_waiting", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.usage", "tool.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "codex.account.switched", "codex.credential.selected", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
+type HumanInputQuestionKind = "text" | "single_select" | "multi_select";
+type HumanInputOption = {
+    id: string;
+    label: string;
+    description?: string | null | undefined;
+};
+type HumanInputQuestion = {
+    id: string;
+    kind: HumanInputQuestionKind;
+    prompt: string;
+    label?: string | null | undefined;
+    helpText?: string | null | undefined;
+    options: HumanInputOption[];
+    required: boolean;
+    allowOther: boolean;
+    validation?: {
+        minLength?: number | null | undefined;
+        maxLength?: number | null | undefined;
+        minSelections?: number | null | undefined;
+        maxSelections?: number | null | undefined;
+    } | null | undefined;
+};
+type HumanInputAnswer = {
+    questionId: string;
+    values: string[];
+    other?: string | null | undefined;
+};
+type HumanInputResponse = {
+    outcome: "answered";
+    answers: HumanInputAnswer[];
+} | {
+    outcome: "skipped" | "expired" | "cancelled";
+};
+type SubmitHumanInputResponseRequest = {
+    outcome: "answered";
+    answers: HumanInputAnswer[];
+} | {
+    outcome: "skipped";
+};
+type SessionHumanInputRequest = {
+    id: string;
+    workspaceId: string;
+    sessionId: string;
+    turnId: string;
+    turnGeneration: number;
+    creationAttemptId: string;
+    toolCallId: string;
+    status: "pending" | "answered" | "skipped" | "expired" | "cancelled";
+    questions: HumanInputQuestion[];
+    allowSkip: boolean;
+    response: HumanInputResponse | null;
+    respondedBy: string | null;
+    respondedAt: string | null;
+    expiresAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.event.envelope_omitted", "session.status.changed", "session.requiresAction", "session.humanInput.requested", "session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "user.humanInputResponse", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.capacity_waiting", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.request", "agent.model.usage", "tool.auth_needed", "credential.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "session.mcp.approval_policy.updated", "codex.account.switched", "codex.credential.selected", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
 type KnownSessionEventType = (typeof SESSION_EVENT_TYPES)[number];
 /**
  * Event types the SDK knows about today, kept open so a newer OpenGeni server
@@ -386,14 +715,117 @@ type SessionEvent = {
     duplicateOfEventId?: string | null | undefined;
     duplicateReason?: string | null | undefined;
 };
+type SessionEventSemanticClass = "control" | "terminal" | "failure" | "checkpoint" | "tool_receipt" | "provider_account";
+type SessionEventLatestClass = SessionEventSemanticClass | "receipt";
+type SessionEventPayloadMode = "none" | "summary" | "full";
+type SessionEventReadMode = "monitoring" | "forensic";
+type SessionEventReadDirection = "after" | "before";
+type SessionEventResultMode = "events" | "compact";
+type SessionEventListCommonOptions = {
+    after?: number;
+    before?: number;
+    limit?: number;
+    compact?: boolean;
+    mode?: SessionEventReadMode;
+    direction?: SessionEventReadDirection;
+    payloadMode?: SessionEventPayloadMode;
+    resultMode?: "events";
+};
+type SessionEventListOptions = SessionEventListCommonOptions & ({
+    latest?: never;
+    includeTypes?: SessionEventType[];
+    excludeTypes?: SessionEventType[];
+    includeClasses?: SessionEventSemanticClass[];
+    excludeClasses?: SessionEventSemanticClass[];
+} | {
+    /** Exclusive lookup for the newest event in exactly this semantic class. */
+    latest: SessionEventLatestClass;
+    includeTypes?: never;
+    excludeTypes?: never;
+    includeClasses?: never;
+    excludeClasses?: never;
+});
+type SessionEventCompactResult = {
+    version: 1;
+    semanticClass: SessionEventSemanticClass;
+    source: {
+        id: string;
+        type: SessionEventType;
+        sequence: number;
+        occurredAt: string;
+        turnId: string | null;
+        turnGeneration: number | null;
+        turnAttemptId: string | null;
+        turnAssociation: SessionEvent["turnAssociation"];
+    };
+    id: string;
+    type: SessionEventType;
+    sequence: number;
+    occurredAt: string;
+    turnId: string | null;
+    turnGeneration: number | null;
+    turnAttemptId: string | null;
+    turnAssociation: SessionEvent["turnAssociation"];
+    coveredSequence: {
+        first: number;
+        last: number;
+    };
+    status: "completed" | "failed" | "cancelled" | "superseded" | "checkpoint" | "receipt" | "unknown";
+    text: string | null;
+    output: unknown;
+    result: unknown;
+    failure: {
+        error: string | null;
+        code: string | null;
+        retryable: boolean | null;
+        recovery: string | null;
+    } | null;
+    checkpoint: unknown;
+    receipt: unknown;
+    truncation: {
+        truncated: boolean;
+        fields: string[];
+        originalBytes: number | null;
+        deliveredBytes: number;
+    };
+};
+type SessionEventCompactResultOptions = {
+    latest: SessionEventLatestClass;
+    resultMode: "compact";
+    mode?: SessionEventReadMode;
+    payloadMode?: SessionEventPayloadMode;
+};
+type SessionEventPage = {
+    events: SessionEvent[];
+    mode: SessionEventReadMode;
+    payloadMode: SessionEventPayloadMode;
+    direction: SessionEventReadDirection;
+    bytes: number;
+    maxBytes: number;
+    truncated: boolean;
+    hasMore: boolean;
+    truncatedBy: "count" | "bytes" | "http_bytes" | null;
+    coveredSequence: {
+        first: number;
+        last: number;
+    } | null;
+    nextAfter: number | null;
+    nextBefore: number | null;
+    forensicExact: boolean;
+};
 type ToolAuthNeededPayload = {
     serverId: string;
     toolName?: string | null | undefined;
     providerDomain: string;
+    provider?: string | undefined;
     connectionId?: string | null | undefined;
-    reason: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed";
+    reason: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "unsupported_auth" | "resource_scope_unavailable";
     scopes?: string[] | undefined;
     resource?: string | undefined;
+    selectedResources?: Array<{
+        id: string;
+        kind: "repository";
+    }> | undefined;
     authorizationUrl?: string | undefined;
     subjectId?: string | null | undefined;
 };
@@ -618,6 +1050,7 @@ type GitFileDiff = {
 type GitDiffRequest = {
     path?: string;
     staged?: boolean;
+    includeUntracked?: boolean;
     fromRef?: string;
     toRef?: string;
     pathspec?: string[];
@@ -876,7 +1309,10 @@ type ScheduledTask = {
     updatedAt: string;
 };
 type CreateSessionRequest = {
+    requestedSessionId?: string | undefined;
     initialMessage: string;
+    /** System instructions scoped to the initial turn; never visible timeline text. */
+    turnInstructions?: string | undefined;
     instructions?: string | undefined;
     resources?: ResourceRef[] | undefined;
     tools?: ToolRef[] | undefined;
@@ -907,6 +1343,65 @@ type KnownPermission = (typeof KNOWN_PERMISSIONS)[number];
  */
 type Permission = KnownPermission | (string & {});
 type ProductAccessMode = "local" | "configured" | "managed";
+type ModelCapabilitySupportV1 = "supported" | "unsupported" | "unknown";
+type ModelCapabilityStateV1 = {
+    upstream: ModelCapabilitySupportV1;
+    runnable: boolean;
+};
+type ModelCapabilitiesV1 = {
+    reasoning: ModelCapabilityStateV1 & {
+        efforts: ReasoningEffort[];
+        defaultEffort: ReasoningEffort | null;
+        required: boolean;
+    };
+    functionCalling: ModelCapabilityStateV1;
+    structuredOutput: ModelCapabilityStateV1;
+    hostedTools: {
+        webSearch: ModelCapabilityStateV1;
+        xSearch: ModelCapabilityStateV1;
+        codeExecution: ModelCapabilityStateV1;
+    };
+    inputModalities: Array<"text" | "image" | "audio">;
+    outputModalities: Array<"text" | "image" | "audio">;
+    transports: {
+        sse: ModelCapabilityStateV1;
+        responsesWebSocket: ModelCapabilityStateV1;
+        realtimeAudio: ModelCapabilityStateV1;
+    };
+    latencyModes: Array<{
+        id: "standard" | "priority" | "fast";
+        upstream: ModelCapabilitySupportV1;
+        runnable: boolean;
+        billingMultiplierBps?: number | undefined;
+    }>;
+};
+type ModelCredentialSourceV1 = {
+    kind: "deployment";
+    mechanism: "api_key" | "azure_ad_bearer";
+} | {
+    kind: "connected_subscription";
+    provider: "codex";
+} | {
+    kind: "workspace_connection";
+    mechanism: "api_key";
+};
+type ModelBillingAttributionV1 = {
+    upstreamPayer: "deployment" | "workspace" | "connected_subscription";
+    metering: "opengeni_credits" | "external";
+};
+type ModelPricingV1 = {
+    inputMicrosPerMillionTokens: number;
+    cachedInputMicrosPerMillionTokens?: number | undefined;
+    outputMicrosPerMillionTokens: number;
+    marginBps?: number | undefined;
+};
+type ModelPricingScheduleV1 = {
+    default: ModelPricingV1;
+    inputTokenTiers?: Array<{
+        minimumInputTokens: number;
+        pricing: ModelPricingV1;
+    }> | undefined;
+};
 /**
  * One model a client may select at send time, plus the provider that serves it.
  * The wire API (`responses` | `chat`) lets a client reason about provider
@@ -921,6 +1416,42 @@ type ClientModel = {
     providerLabel: string;
     api: "responses" | "chat";
     contextWindowTokens?: number | undefined;
+    schemaVersion?: 1 | undefined;
+    aliases?: string[] | undefined;
+    deployment?: {
+        upstreamModelId: string;
+        wireApi: "responses" | "chat";
+    } | undefined;
+    executionLimits?: {
+        contextWindowTokens: number | null;
+        effectiveContextWindowTokens: number | null;
+        autoCompactTokenLimit: number | null;
+        toolOutputTruncationTokens: number | null;
+    } | undefined;
+    credentialSource?: ModelCredentialSourceV1 | undefined;
+    billing?: ModelBillingAttributionV1 | undefined;
+    capabilities?: ModelCapabilitiesV1 | undefined;
+    pricing?: ModelPricingScheduleV1 | undefined;
+    definitionVersion?: string | undefined;
+};
+type ModelAvailabilityV1 = {
+    status: "available" | "unavailable" | "degraded" | "unknown";
+    selectable: boolean;
+    reason: "missing_credential" | "needs_reauth" | "credential_not_ready" | "not_entitled" | "provider_unhealthy" | "policy_blocked" | "unsupported" | null;
+    checkedAt: string | null;
+};
+type ModelCredentialReadinessV1 = {
+    status: "ready" | "not_ready" | "error";
+    reason: "missing_credential" | "needs_reauth" | "prerequisites_missing" | "resolver_error" | "observation_stale" | null;
+    basis: "configuration" | "connection" | "resolver";
+    checkedAt: string | null;
+};
+type WorkspaceModelCatalogModel = ClientModel & {
+    credentialReadiness: ModelCredentialReadinessV1;
+    availability: ModelAvailabilityV1;
+};
+type WorkspaceModelCatalogResponse = {
+    models: WorkspaceModelCatalogModel[];
 };
 /**
  * Connection state of a workspace's Codex (ChatGPT) subscription, returned by
@@ -969,6 +1500,11 @@ type CodexUsagePayload = {
     weekly: CodexUsageWindow | null;
     limitReached: boolean;
     fetchedAt: string;
+    /** Authoritative count-only summary from /wham/usage; never synthesized rows. */
+    rateLimitResetCredits?: {
+        availableCount: number;
+        credits: null;
+    } | null;
     /** Present only on an auth/refresh failure path. */
     reason?: "needs_relogin";
     additionalLimits?: Array<{
@@ -1000,6 +1536,73 @@ type CodexAccount = {
     weekly?: CodexUsageWindow | null;
     usageCheckedAt?: string | null;
     exhaustedUntil?: string | null;
+    /** Controls only NEW automatic allocations. */
+    allocatorEnabled: boolean;
+    /** Independent OCC sequence; credential/token `version` is never exposed. */
+    allocatorVersion: number;
+    allocatorUpdatedAt?: string | null;
+    /** Cached authoritative summary count, never detailed redemption authority. */
+    resetCreditAvailableCount?: number | null;
+    resetCreditsCheckedAt?: string | null;
+};
+type CodexResetCredit = {
+    id: string;
+    resetType: "codexRateLimits" | "unknown";
+    status: "available" | "redeeming" | "redeemed" | "unknown";
+    /** Unix seconds from the provider contract. */
+    grantedAt: number;
+    /** Unix seconds, or null when the provider reports no expiry. */
+    expiresAt: number | null;
+    title: string | null;
+    description: string | null;
+    /** True only for fresh, complete, owning-human provider detail. */
+    actionable: boolean;
+};
+/** Owning-human recovery metadata. It contains no token, browser-session hash, or provider key. */
+type CodexResetRedemptionRecovery = {
+    attemptId: string;
+    creditId: string;
+    status: "provider_started" | "completed";
+    outcome: "reset" | "nothingToReset" | "noCredit" | "alreadyRedeemed" | null;
+    providerStartedAt: string | null;
+    completedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type CodexAccountOverview = {
+    accountId: string;
+    usage: {
+        source: "provider" | "cache" | "none";
+        fetchedAt: string | null;
+        stale: boolean;
+        error: string | null;
+        value: CodexUsagePayload | null;
+    };
+    resetCredits: {
+        source: "provider" | "cache" | "none";
+        fetchedAt: string | null;
+        stale: boolean;
+        error: string | null;
+        detailState: "detailed" | "count_only" | "capped" | "unsupported" | "unknown" | "error";
+        detailsComplete: boolean;
+        availableCount: number | null;
+        credits: CodexResetCredit[];
+    };
+    canRedeem: boolean;
+    /** Owning managed-cookie human may replay durable completion without a healthy provider token. */
+    canResumeRedemption: boolean;
+    /** Durable owner-scoped ambiguity/completion discovery; never redemption authority for agents. */
+    redemptions: CodexResetRedemptionRecovery[];
+};
+/** Independently settled live overview keyed by workspace credential id. */
+type CodexOverviewResponse = {
+    accounts: Record<string, CodexAccountOverview>;
+};
+type CodexAllocatorUpdate = {
+    allocatorEnabled: boolean;
+    allocatorVersion: number;
+    allocatorUpdatedAt: string | null;
+    changed: boolean;
 };
 /** Per-workspace Codex rotation/active settings. P1: rotation inert, only activeCredentialId loads. */
 type CodexRotationSettings = {
@@ -1063,7 +1666,7 @@ type ClientAuthConfig = {
     mode: "managedSession";
     session: "cookie";
 };
-declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-session-control-v1";
+declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-turn-instructions-v1";
 declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
 /**
  * Public, unauthenticated-by-default client bootstrap config returned by
@@ -1113,6 +1716,8 @@ type AccessGrant = {
     subjectLabel?: string | undefined;
     permissions: Permission[];
     metadata?: Record<string, unknown> | undefined;
+    serviceInitiator?: ServiceTurnInitiator | undefined;
+    serviceInitiatorContext?: ServiceTurnInitiatorContext | undefined;
 };
 type AccessContext = {
     mode: ProductAccessMode;
@@ -1145,10 +1750,12 @@ type Workspace = {
 };
 type WorkspaceSettings = {
     memoryEnabled?: boolean | undefined;
+    transcription?: WorkspaceTranscriptionPolicy | undefined;
     [key: string]: unknown;
 };
 type UpdateWorkspaceSettingsRequest = {
     memoryEnabled?: boolean | undefined;
+    transcription?: WorkspaceTranscriptionPolicy | undefined;
     [key: string]: unknown;
 };
 type SetWorkspaceDefaultRigRequest = {
@@ -1279,6 +1886,8 @@ type EffectiveSessionControl = {
     settlement: {
         state: "stopping";
         attemptCount: number;
+        interruptionPendingCount: number;
+        quiescencePendingCount: number;
     } | null;
 };
 type SessionCommandReceipt = {
@@ -1298,6 +1907,8 @@ type ComposerDraft = {
     text: string;
     resources: ResourceRef[];
     tools: ToolRef[];
+    /** False inherits the session policy; true preserves an explicit array. */
+    toolsProvided: boolean;
     model: string;
     reasoningEffort: ReasoningEffort;
     sourceTurnId: string | null;
@@ -1307,6 +1918,8 @@ type ComposerDraft = {
 type SessionQueueSnapshot = {
     version: number;
     effectiveControl: EffectiveSessionControl;
+    /** The latest interrupted attempt has not yet durably proved physical quiescence. */
+    stoppingPreviousAttempt: boolean;
     items: SessionTurn[];
 };
 type SystemUpdateClassification = "success" | "failure" | "action_required" | "info";
@@ -1354,6 +1967,21 @@ type WorkspaceControlEvent = {
     reason: string | null;
     actor: string;
     occurredAt: string;
+    truncation?: {
+        truncated: true;
+        surface: "durable_control" | "database_guard" | "http_projection" | "nats_legacy_guard" | "sse_legacy_guard";
+        deliveredBytes: number;
+        fields: Array<{
+            field: "reason" | "actor";
+            originalBytes: number;
+            deliveredBytes: number;
+            omittedBytes: number;
+        }>;
+        fullEvidence: {
+            available: false;
+            reason: "not_retained";
+        };
+    } | null;
 };
 type SessionQueueMutationResponse = {
     receipt: SessionCommandReceipt;
@@ -1595,6 +2223,49 @@ type FileAsset = {
     createdAt: string;
     updatedAt: string;
 };
+/** Mirrors the closed, provider-neutral retained-output contract. */
+declare const RETAINED_OUTPUT_DEFAULT_PAGE_BYTES: number;
+declare const RETAINED_OUTPUT_MAX_PAGE_BYTES: number;
+type RetainedOutputKind = "tool_result" | "assistant_completion" | "internal_update" | "event_media" | "file";
+type RetainedOutputUnavailableReason = "not_retained" | "pending" | "failed" | "expired" | "deleted" | "missing_storage" | "storage_write_failed" | "unsupported";
+type RetainedArtifactReference = {
+    available: true;
+    artifactId: string;
+    kind: RetainedOutputKind;
+    contentType: string;
+    originalBytes: number;
+    sha256: string;
+    retainedAt: string;
+    retention: {
+        policy: "workspace_file";
+        expiresAt: null;
+    };
+    retrieval: {
+        method: "GET";
+        path: string;
+        acceptRanges: "bytes";
+        maxRangeBytes: number;
+    };
+};
+type RetainedArtifactUnavailable = {
+    available: false;
+    artifactId: string;
+    reason: RetainedOutputUnavailableReason;
+};
+type RetainedArtifactMetadata = RetainedArtifactReference | RetainedArtifactUnavailable;
+type RetainedArtifactContentOptions = {
+    /** One RFC-style bytes range, for example `bytes=1048576-2097151`. */
+    range?: string | undefined;
+    signal?: AbortSignal | undefined;
+};
+type RetainedArtifactContent = {
+    bytes: Uint8Array;
+    status: 200 | 206;
+    contentType: string;
+    contentLength: number;
+    contentRange: string | null;
+    acceptRanges: "bytes";
+};
 type CreateFileUploadRequest = {
     filename: string;
     contentType: string;
@@ -1928,7 +2599,7 @@ type GetPackResponse = {
     installation: PackInstallation | null;
 };
 type CapabilityKind = "pack" | "mcp" | "api" | "skill" | "plugin";
-type CapabilitySource = "built_in" | "configured" | "public_registry" | "registry" | "manual";
+type CapabilitySource = "built_in" | "library" | "configured" | "public_registry" | "registry" | "manual";
 type CapabilityInstallationStatus = "active" | "disabled";
 type CapabilityCatalogAuthKind = "oauth2" | "api_key" | "none" | "unknown";
 type CapabilityCatalogTier = "verified" | "community";
@@ -1937,6 +2608,11 @@ type CapabilityRuntime = {
     mcpServerId?: string | undefined;
     transport?: string | undefined;
     notes: string | null;
+    /** Secret-safe server-derived registry exposure state. */
+    catalogTrust?: {
+        state: "trusted" | "legacy_active" | "unverified";
+        reason: "trusted_source" | "verified_probe" | "active_installation_compatibility" | "missing_verification";
+    } | undefined;
 };
 type CapabilityCatalogItem = {
     id: string;
@@ -2044,13 +2720,27 @@ type GitHubRepository = {
     accountLogin: string;
     accountType: string | null;
 };
+type GitHubRepositoryScope = "all" | "selected";
+type GitHubInstallationBinding = {
+    installationId: number;
+    accountLogin: string | null;
+    accountType: string | null;
+    repositoryScope: GitHubRepositoryScope;
+    repositoryCount: number;
+    createdAt: string;
+    updatedAt: string;
+};
 type GitHubAppInfo = {
     configured: boolean;
     appId: string | null;
     clientId: string | null;
     appSlug: string | null;
-    /** Ready-to-open GitHub install URL (carries the signed state), if configured. */
+    /** Reserved compatibility field; null while new installation binding is disabled. */
     installUrl: string | null;
+    /** Reserved compatibility field; null while new installation binding is disabled. */
+    linkUrl: string | null;
+    /** Installation bindings owned independently by this workspace. */
+    installations: GitHubInstallationBinding[];
     /** Setting names still missing when `configured` is false. */
     missing: string[];
 };
@@ -2127,6 +2817,7 @@ type UserMessageEventInput = {
     clientEventId?: string | undefined;
     payload: {
         text: string;
+        turnInstructions?: string | undefined;
         resources?: ResourceRef[] | undefined;
         tools?: ToolRef[] | undefined;
         model?: string | undefined;
@@ -2143,8 +2834,16 @@ type UserApprovalDecisionEventInput = {
         message?: string | undefined;
     };
 };
+type UserHumanInputResponseEventInput = {
+    type: "user.humanInputResponse";
+    clientEventId?: string | undefined;
+    payload: {
+        requestId: string;
+        response: SubmitHumanInputResponseRequest;
+    };
+};
 /** Control/user events a client may POST to a session's event log. */
-type ClientSessionEventInput = UserMessageEventInput | UserApprovalDecisionEventInput;
+type ClientSessionEventInput = UserMessageEventInput | UserApprovalDecisionEventInput | UserHumanInputResponseEventInput;
 /** A point-in-time machine metrics sample. `gpuUtilPct`/`gpuMemBytes` are null
  *  when no GPU was present (not-reported, never a real zero); the bytes/load are
  *  numbers; `sampledAt` is an ISO-8601 instant. */
@@ -2358,6 +3057,12 @@ type WorkspaceControlStreamTransport = {
 declare function streamWorkspaceControlEvents(transport: WorkspaceControlStreamTransport, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceControlEvent, void, void>;
 
 type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+type WorkspaceControlEventPage = {
+    events: WorkspaceControlEvent[];
+    bytes: number;
+    truncated: boolean;
+    nextAfter: number | null;
+};
 type OpenGeniClientOptions = {
     /** Base URL of the OpenGeni API, e.g. `https://api.example.com`. */
     baseUrl: string;
@@ -2368,8 +3073,14 @@ type OpenGeniClientOptions = {
     /** Custom fetch implementation. Defaults to the global `fetch`. */
     fetch?: FetchLike;
 };
+/** Per-request cancellation for identity-scoped, side-effect-free reads. */
+type OpenGeniRequestOptions = {
+    signal?: AbortSignal | undefined;
+};
 type SendMessageInput = {
     text: string;
+    /** System instructions scoped to this exact turn; never visible timeline text. */
+    turnInstructions?: string;
     resources?: ResourceRef[];
     tools?: ToolRef[];
     model?: string;
@@ -2395,9 +3106,15 @@ declare class OpenGeniClient {
     private readonly options;
     private readonly fetchImpl;
     constructor(options: OpenGeniClientOptions);
-    createSession(workspaceId: string, request: CreateSessionRequest): Promise<Session>;
+    createSession(workspaceId: string, request: CreateSessionRequest): Promise<CreateSessionResponse>;
     getSession(workspaceId: string, sessionId: string): Promise<Session>;
     updateSession(workspaceId: string, sessionId: string, request: UpdateSessionRequest): Promise<Session>;
+    /**
+     * Replace one attached MCP server's approval policy. The change is captured
+     * by the next claimed attempt; already-claimed work keeps its immutable
+     * policy snapshot.
+     */
+    updateSessionMcpApprovalPolicy(workspaceId: string, sessionId: string, serverId: string, request: UpdateSessionMcpApprovalPolicyRequest): Promise<UpdateSessionMcpApprovalPolicyResponse>;
     listSessions(workspaceId: string, options?: {
         limit?: number;
         parentSessionId?: string | null;
@@ -2424,6 +3141,7 @@ declare class OpenGeniClient {
      */
     listMachines(workspaceId: string, options?: {
         sessionId?: string;
+        signal?: AbortSignal;
     }): Promise<MachinesResponse>;
     /**
      * Read the downsampled (~1/min) metrics series for ONE machine over a time
@@ -2478,17 +3196,22 @@ declare class OpenGeniClient {
     }): Promise<ScheduledTask[]>;
     getScheduledTask(workspaceId: string, taskId: string): Promise<ScheduledTask>;
     /**
-     * Replay durable events by sequence, ascending. `before` is exclusive and
-     * returns the newest matching window. With `compact`, consecutive delta runs
-     * may be coalesced; `payload.coalescedUntil` carries the run's last sequence
-     * for resume cursors.
+     * Return the events from one bounded page. With no cursor, this uses the safe
+     * semantic monitoring tail; pass explicit forensic options and a cursor for
+     * retained audit replay. Use `listEventPage` when projection, coverage, or
+     * resume-cursor facts are required.
      */
-    listEvents(workspaceId: string, sessionId: string, options?: {
-        after?: number;
-        before?: number;
-        limit?: number;
-        compact?: boolean;
-    }): Promise<SessionEvent[]>;
+    listEvents(workspaceId: string, sessionId: string, options?: SessionEventListOptions): Promise<SessionEvent[]>;
+    /** Bounded durable/monitoring page plus exact projection and cursor facts. */
+    listEventPage(workspaceId: string, sessionId: string, options: SessionEventCompactResultOptions): Promise<SessionEventCompactResult | null>;
+    listEventPage(workspaceId: string, sessionId: string, options?: SessionEventListOptions): Promise<SessionEventPage>;
+    /**
+     * Fetch the authoritative newest-sequence semantic result directly. This is
+     * the callback-loss recovery path: it reads one compact durable result and
+     * never creates a model turn. `latest: "receipt"` aliases `tool_receipt`;
+     * turn generation remains scoped retry metadata.
+     */
+    getLatestEventResult(workspaceId: string, sessionId: string, options?: Omit<SessionEventCompactResultOptions, "resultMode">): Promise<SessionEventCompactResult | null>;
     /** POST a user/control event to the session. Returns the accepted event. */
     sendEvent(workspaceId: string, sessionId: string, event: ClientSessionEventInput): Promise<SessionEvent>;
     sendMessage(workspaceId: string, sessionId: string, message: string | SendMessageInput): Promise<SessionEvent>;
@@ -2503,6 +3226,13 @@ declare class OpenGeniClient {
         message?: string;
         clientEventId?: string;
     }): Promise<SessionEvent>;
+    listHumanInputRequests(workspaceId: string, sessionId: string, options?: {
+        status?: SessionHumanInputRequest["status"];
+    }): Promise<SessionHumanInputRequest[]>;
+    getHumanInputRequest(workspaceId: string, sessionId: string, requestId: string): Promise<SessionHumanInputRequest>;
+    submitHumanInputResponse(workspaceId: string, sessionId: string, requestId: string, response: SubmitHumanInputResponseRequest, options?: {
+        clientEventId?: string;
+    }): Promise<SessionEvent>;
     /**
      * Live-stream a session's events with automatic reconnect, resume from the
      * last seen sequence, gap backfill, and duplicate suppression. See
@@ -2544,6 +3274,11 @@ declare class OpenGeniClient {
         after?: number;
         limit?: number;
     }): Promise<WorkspaceControlEvent[]>;
+    /** Count/byte-bounded page plus an explicit continuation cursor. */
+    listWorkspaceControlEventPage(workspaceId: string, options?: {
+        after?: number;
+        limit?: number;
+    }): Promise<WorkspaceControlEventPage>;
     streamWorkspaceControlEvents(workspaceId: string, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceControlEvent, void, void>;
     workspaceControlStreamTransport(workspaceId: string): WorkspaceControlStreamTransport;
     openWorkspaceControlEventStream(workspaceId: string, options?: {
@@ -2576,9 +3311,9 @@ declare class OpenGeniClient {
     /** Request one durable portable compaction at the next safe model boundary. */
     compactSessionContext(workspaceId: string, sessionId: string): Promise<CompactSessionContextResult>;
     /** FileSystem: list a directory tree (feeds the Pierre file tree). */
-    fsList(workspaceId: string, sessionId: string, request?: FsListRequest): Promise<FsListResponse>;
+    fsList(workspaceId: string, sessionId: string, request?: FsListRequest, options?: OpenGeniRequestOptions): Promise<FsListResponse>;
     /** FileSystem: read a file (text or base64; binary-safe, size-capped). */
-    fsRead(workspaceId: string, sessionId: string, request: FsReadRequest): Promise<FsReadResponse>;
+    fsRead(workspaceId: string, sessionId: string, request: FsReadRequest, options?: OpenGeniRequestOptions): Promise<FsReadResponse>;
     /** FileSystem: write a file (last-writer-wins; emits fs.changed). */
     fsWrite(workspaceId: string, sessionId: string, request: FsWriteRequest): Promise<FsWriteResponse>;
     /** FileSystem: delete a path (emits fs.changed). */
@@ -2588,9 +3323,9 @@ declare class OpenGeniClient {
     /** FileSystem: create a directory (emits fs.changed; recursive defaults to true). */
     fsMkdir(workspaceId: string, sessionId: string, request: FsMkdirRequest): Promise<FsMkdirResponse>;
     /** Git: working-tree/index status (the Pierre file-status feed). */
-    gitStatus(workspaceId: string, sessionId: string, request?: GitStatusRequest): Promise<GitStatusResponse>;
+    gitStatus(workspaceId: string, sessionId: string, request?: GitStatusRequest, options?: OpenGeniRequestOptions): Promise<GitStatusResponse>;
     /** Git: structured diff hunks (the Pierre diff feed). */
-    gitDiff(workspaceId: string, sessionId: string, request?: GitDiffRequest): Promise<GitDiffResponse>;
+    gitDiff(workspaceId: string, sessionId: string, request?: GitDiffRequest, options?: OpenGeniRequestOptions): Promise<GitDiffResponse>;
     /** Git: commit log. */
     gitLog(workspaceId: string, sessionId: string, request?: GitLogRequest): Promise<GitLogResponse>;
     /** Git: show a commit (diff vs first parent) or fetch a raw blob at a ref. */
@@ -2599,11 +3334,11 @@ declare class OpenGeniClient {
      *  (tree + per-repo diff + file after-image refs), served from durable storage
      *  WITHOUT warming a machine — the workbench cold-paint source. Returns
      *  `{available:false}` when no capture exists yet (fall back to the live path). */
-    getWorkspaceCapture(workspaceId: string, sessionId: string): Promise<GetWorkspaceCaptureResponse>;
+    getWorkspaceCapture(workspaceId: string, sessionId: string, options?: OpenGeniRequestOptions): Promise<GetWorkspaceCaptureResponse>;
     /** Workspace capture: a single file's after-image from the capture (revision
      *  pins a specific one; omitted → latest). Content is inline for small files,
      *  else a short-TTL signed URL; a tooLarge file returns metadata only. */
-    getWorkspaceCaptureFile(workspaceId: string, sessionId: string, path: string, revision?: number): Promise<GetWorkspaceCaptureFileResponse>;
+    getWorkspaceCaptureFile(workspaceId: string, sessionId: string, path: string, revision?: number, options?: OpenGeniRequestOptions): Promise<GetWorkspaceCaptureFileResponse>;
     /** Terminal: run a bounded command, returning buffered stdout/stderr inline. */
     terminalExec(workspaceId: string, sessionId: string, request: TerminalExecRequest): Promise<TerminalExecResponse>;
     /** Terminal: open an interactive PTY. Output streams on the event SSE as
@@ -2621,7 +3356,7 @@ declare class OpenGeniClient {
      *  liveness the client polls on while `cold`/`warming`. The desktop URL/token
      *  are minted in-process only when the box is warm AND the principal has
      *  acknowledged the un-redacted plane. */
-    getStreamCapabilities(workspaceId: string, sessionId: string): Promise<SessionCapabilities>;
+    getStreamCapabilities(workspaceId: string, sessionId: string, options?: OpenGeniRequestOptions): Promise<SessionCapabilities>;
     /** Record the calling principal's acknowledgment of the un-redacted desktop
      *  pixel plane (and, when the box is shared, the shared-exposure disclosure).
      *  The desktop viewer-attach path returns 409 until this is recorded. */
@@ -2649,6 +3384,8 @@ declare class OpenGeniClient {
      * knowledge of the host setup; safe to call before any auth is established.
      */
     getClientConfig(): Promise<ClientConfig>;
+    /** Authenticated model definitions plus workspace-specific selectability. */
+    getWorkspaceModelCatalog(workspaceId: string): Promise<WorkspaceModelCatalogResponse>;
     /** The caller's access context: subject, account + workspace grants, defaults. */
     getAccessContext(): Promise<AccessContext>;
     listWorkspaces(): Promise<Workspace[]>;
@@ -2755,6 +3492,13 @@ declare class OpenGeniClient {
      */
     uploadFile(workspaceId: string, input: UploadFileInput): Promise<FileAsset>;
     getFile(workspaceId: string, fileId: string): Promise<FileAsset>;
+    /** Read provider-neutral retained evidence metadata; never returns a storage location. */
+    getRetainedArtifact(workspaceId: string, artifactId: string): Promise<RetainedArtifactMetadata>;
+    /**
+     * Read at most one authenticated retained-evidence range from the API. This
+     * deliberately does not use the ordinary signed file-download URL.
+     */
+    getRetainedArtifactContent(workspaceId: string, artifactId: string, options?: RetainedArtifactContentOptions): Promise<RetainedArtifactContent>;
     /** Mint a short-lived signed download URL for a ready file. */
     createFileDownloadUrl(workspaceId: string, fileId: string): Promise<FileDownloadUrlResponse>;
     createDocumentBase(workspaceId: string, request: CreateDocumentBaseRequest): Promise<DocumentBase>;
@@ -2808,17 +3552,18 @@ declare class OpenGeniClient {
     startConnectionOAuth(workspaceId: string, request: OAuthStartRequest): Promise<OAuthStartResponse>;
     /** Public, immutably-cached URL for a catalog item's logo, or null when the item has none. */
     catalogAssetUrl(logoAssetPath: string | null): string | null;
-    /** GitHub App configuration status + a signed install URL when configured. */
+    /** GitHub App configuration status; install/link URLs are null while new binding is disabled. */
     getGitHubApp(workspaceId: string): Promise<GitHubAppInfo>;
     /**
-     * Browser entry point that plants the CSRF cookie and forwards to GitHub's
-     * install page. Open this in a browser (it redirects); `state` comes from
-     * `getGitHubApp().installUrl` or a github_connect_link tool.
+     * Compatibility URL for previously issued state. New installation binding is
+     * disabled, so the endpoint validates state and terminates with HTTP 410.
      */
     githubConnectUrl(workspaceId: string, state: string): string;
     listGitHubRepositories(workspaceId: string): Promise<GitHubRepositoriesResponse>;
     /** Re-sync the installation's repository list from GitHub. */
     syncGitHubRepositories(workspaceId: string): Promise<GitHubRepositoriesResponse>;
+    /** Remove one workspace binding without uninstalling the GitHub App itself. */
+    unlinkGitHubInstallation(workspaceId: string, installationId: number): Promise<void>;
     /** Build a GitHub App manifest + the GitHub URL to submit it to. */
     createGitHubAppManifest(workspaceId: string, request?: CreateGitHubAppManifestRequest): Promise<CreateGitHubAppManifestResponse>;
     listApiKeys(workspaceId: string): Promise<ApiKey[]>;
@@ -2854,6 +3599,8 @@ declare class OpenGeniClient {
     refreshCodexUsage(workspaceId: string): Promise<{
         usage: CodexUsageMap;
     }>;
+    /** Live independently-settled quota + reset-credit overview for every account. */
+    codexOverview(workspaceId: string): Promise<CodexOverviewResponse>;
     /** Disconnect ALL accounts (legacy workspace-wide). Prefer `disconnectCodexAccount`. */
     codexDisconnect(workspaceId: string): Promise<{
         disconnected: boolean;
@@ -2870,6 +3617,11 @@ declare class OpenGeniClient {
         rotationEnabled?: boolean;
         rotationStrategy?: CodexRotationSettings["rotationStrategy"];
     }): Promise<CodexRotationSettings>;
+    /** Toggle only NEW automatic allocations under independent allocator OCC. */
+    setCodexAccountAllocator(workspaceId: string, accountId: string, input: {
+        enabled: boolean;
+        expectedVersion: number;
+    }): Promise<CodexAllocatorUpdate>;
     /** Disconnect ONE Codex account by id (re-picks active when the removed one was active). */
     disconnectCodexAccount(workspaceId: string, accountId: string): Promise<{
         disconnected: boolean;
@@ -3107,4 +3859,4 @@ declare function ttydInputFrame(data: string): string;
 /** Build a client→server RESIZE frame: "1" + JSON.stringify({ columns, rows }). */
 declare function ttydResizeFrame(columns: number, rows: number): string;
 
-export { type AccessContext, type AccessGrant, type AccountGrant, type AccountRole, type AcknowledgeStreamRequest, type AcknowledgeStreamResponse, type AddDocumentRequest, type AddWorkspaceMemberRequest, type AgentMessageCompletedPayload, type AgentTextDeltaPayload, type AgentToolCallCreatedPayload, type AgentToolCallOutputPayload, type ApiKey, type AttachViewerRequest, type AttachViewerResponse, type BillingBalance, type BillingEntitlementsResponse, type BillingMode, type BillingSummary, type BillingUsageResponse, type CapabilityCatalogItem, type CapabilityCatalogResponse, type CapabilityInstallation, type CapabilityInstallationStatus, type CapabilityKind, type CapabilityPack, type CapabilityPackConnector, type CapabilityPackConnectorAuthModel, type CapabilityPackKnowledge, type CapabilityPackScheduledTaskTemplate, type CapabilityPackSkill, type CapabilityPackSkillFile, type CapabilityPackVariableSetSpec, type CapabilityRuntime, type CapabilitySource, type CapabilityUnavailableReason, type ClientAuthConfig, type ClientConfig, type ClientModel, type ClientSessionEventInput, type CodexAccount, type CodexAccountSwitchedPayload, type CodexAccountsResponse, type CodexConnectPoll, type CodexConnectStart, type CodexConnectionStatus, type CodexRotationSettings, type CodexUsage, type CodexUsageMap, type CodexUsagePayload, type CodexUsageWindow, type CompactSessionContextResult, type CompleteFileUploadResponse, type ComposerDraft, type ComputerUseCapability, type ConnectionKind, type ConnectionMetadata, type ConnectionResponse, type ConnectionStatus, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateCapabilityCatalogItemRequest, type CreateCheckoutRequest, type CreateCheckoutResponse, type CreateConnectionRequest, type CreateDocumentBaseRequest, type CreateFileUploadRequest, type CreateFileUploadResponse, type CreateGitHubAppManifestRequest, type CreateGitHubAppManifestResponse, type CreateKnowledgeMemoryRequest, type CreateRigRequest, type CreateScheduledTaskRequest, type CreateSessionRequest, type CreateVariableSetRequest, type CreateWorkspaceEnvironmentRequest, type CreateWorkspaceRequest, type DeleteSessionQueueItemRequest, type DesktopConnectionState, type DesktopRfbFactory, type DesktopRfbLike, type DesktopStreamCapability, type DesktopStreamEvent, type DeviceEnrollmentApproveRequest, type DeviceEnrollmentApproveResponse, type DeviceEnrollmentDenyRequest, type DeviceEnrollmentDenyResponse, type DeviceEnrollmentLookupMachine, type DeviceEnrollmentLookupRequest, type DeviceEnrollmentLookupResponse, type DiscoverMcpCapabilitiesResponse, type Document, type DocumentBase, type DocumentSearchMode, type DocumentSearchRequest, type DocumentSearchResponse, type DocumentSearchResult, type DocumentStatus, type EditSessionQueueItemRequest, type EffectiveControlBlocker, type EffectiveControlResumeOption, type EffectiveSessionControl, type EnableCapabilityRequest, type EnablePackRequest, type EnrollTokenExchangeRequest, type EnrollTokenExchangeResponse, type EnrollmentCredentials, type EnrollmentOs, type EntitlementValue, type Entitlements, type EntitlementsMode, type FetchLike, type FileAsset, type FileDownloadUrlResponse, type FileResourceRef, type FileStatus, type FileSystemCapability, type FileUploadData, type FsChangeKind, type FsChangedPayload, type FsDeleteRequest, type FsDeleteResponse, type FsEncoding, type FsListRequest, type FsListResponse, type FsMkdirRequest, type FsMkdirResponse, type FsMoveRequest, type FsMoveResponse, type FsNodeType, type FsReadRequest, type FsReadResponse, type FsTreeNode, type FsWriteRequest, type FsWriteResponse, type GetPackResponse, type GetWorkspaceCaptureFileResponse, type GetWorkspaceCaptureResponse, type GitCapability, type GitChangedPayload, type GitCommit, type GitCredentialProvider, type GitDiffHunk, type GitDiffLine, type GitDiffLineType, type GitDiffRequest, type GitDiffResponse, type GitFileDiff, type GitFileStatus, type GitFileStatusCode, type GitHubAppInfo, type GitHubRepositoriesResponse, type GitHubRepository, type GitLogRequest, type GitLogResponse, type GitShowRequest, type GitShowResponse, type GitStatusRequest, type GitStatusResponse, type GoalSpec, type IntegrationClientMetadata, KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, type KnowledgeMemory, type KnowledgeMemoryKind, type KnowledgeMemorySearchRequest, type KnowledgeMemoryStatus, type KnowledgeSourceKind, type KnowledgeSourceRef, type KnownPermission, type KnownSessionEventType, type KnownUsageEventType, type LineageNode, type ListApiKeysResponse, type ListConnectionsResponse, type ListPacksResponse, type ListWorkspaceMembersResponse, type MachineKind, type MachineMetricsSeriesResponse, type MachineState, type MachineView, type MachinesResponse, type McpServerConnectionRef, type MetricSample, type MintEnrollTokenRequest, type MintEnrollTokenResponse, type MoveSessionQueueItemRequest, type OAuthStartRequest, type OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniClient, type OpenGeniClientOptions, OpenGeniStreamError, type PackInstallation, type PackInstallationStatus, type Permission, type ProductAccessMode, type ProposeRigChangeRequest, type ProxySessionEventStreamOptions, type PtyCloseRequest, type PtyOpenRequest, type PtyOpenResponse, type PtyResizeRequest, type PtyWriteRequest, type ReasoningEffort, type RecordingAvailablePayload, type RecordingCapability, type RecordingCodec, type RecordingContentType, type RecordingFailedPayload, type RecordingFailedReason, type RecordingMode, type RecordingStartedPayload, type RegisterCapabilityPackRequest, type RepositoryResourceRef, type ResourceRef, type Rig, type RigChange, type RigChangeKind, type RigChangeStatus, type RigChangeVerification, type RigCheck, type RigCheckResult, type RigDefinitionEditPayload, type RigSetupAppendPayload, type RigVersion, SESSION_EVENT_TYPES, type SandboxBackend, type SandboxCapabilityName, type SandboxCommandOutputDeltaPayload, type SandboxOs, type SaveComposerDraftRequest, type ScheduledTask, type ScheduledTaskAgentConfig, type ScheduledTaskAgentConfigInput, type ScheduledTaskDayOfWeek, type ScheduledTaskOverlapPolicy, type ScheduledTaskRun, type ScheduledTaskRunMode, type ScheduledTaskRunStatus, type ScheduledTaskScheduleSpec, type ScheduledTaskStatus, type ScheduledTaskTriggerType, type SendMessageInput, type Session, type SessionCapabilities, type SessionCommandReceipt, type SessionControlResponse, type SessionEvent, type SessionEventStreamTransport, type SessionEventType, type SessionGoal, type SessionGoalCreatedBy, type SessionGoalStatus, type SessionLineageResponse, type SessionListResponse, type SessionMcpCredentialUpdateInput, type SessionMcpServerInput, type SessionMcpServerMetadata, type SessionQueueMutationResponse, type SessionQueueSnapshot, type SessionStatus, type SessionStatusChangedPayload, type SessionStructuredCapabilities, type SessionSummary, type SessionSystemUpdate, type SessionSystemUpdateKind, type SessionSystemUpdateState, type SessionTurn, type SessionTurnSource, type SessionTurnStatus, type SetWorkspaceEnvironmentVariableRequest, type SseMessage, type SseReStreamOptions, type SteerMessageResult, type SteerSessionQueueItemRequest, type StreamClosedPayload, type StreamConnectionState, type StreamOpenedPayload, type StreamRevokedPayload, type StreamSessionEventsOptions, type StreamUrlRotatedPayload, type SwapActiveSandboxRequest, type SwapActiveSandboxResponse, TTYD_SUBPROTOCOL, type TerminalCapability, type TerminalExecRequest, type TerminalExecResponse, type TerminalPtyExitedPayload, type TerminalPtyOutputDeltaPayload, type TerminalPtyStartedPayload, type ToolAuthNeededPayload, type ToolRef, TtydClientCommand, TtydServerCommand, type UpdateConnectionRequest, type UpdateKnowledgeMemoryRequest, type UpdateRigRequest, type UpdateScheduledTaskRequest, type UpdateSessionGoalRequest, type UpdateSessionPinRequest, type UpdateSessionRequest, type UpdateVariableSetRequest, type UpdateWorkspaceEnvironmentRequest, type UpdateWorkspaceMemberRequest, type UpdateWorkspaceRequest, type UpdateWorkspaceSettingsRequest, type UploadFileInput, type UsageEvent, type UsageEventType, type UserApprovalDecisionEventInput, type UserMessageEventInput, type VariableSet, type VariableSetVariableMetadata, type ViewerHeartbeatRequest, type ViewerHeartbeatResponse, type ViewerHolder, type Workspace, type WorkspaceCaptureDegradedReason, type WorkspaceCaptureFile, type WorkspaceCaptureManifest, type WorkspaceCaptureRepo, type WorkspaceCaptureSignedUrl, type WorkspaceCaptureStats, type WorkspaceControlEvent, type WorkspaceControlStreamTransport, type WorkspaceEnvironment, type WorkspaceEnvironmentVariableMetadata, type WorkspaceInferenceControlResponse, type WorkspaceMember, type WorkspaceMemorySearchMode, type WorkspaceMemorySearchRequest, type WorkspaceMemorySearchResponse, type WorkspaceMemorySearchResult, type WorkspaceRegisteredPack, type WorkspaceRevisionCapturedPayload, type WorkspaceRevisionDegradedPayload, type WorkspaceSettings, applyUrlRotation, desktopSocketUrl, formatSseEvent, isRetryableStreamError, nextDesktopState, parseSseStream, proxySessionEventStream, resumeSequenceFromRequest, sessionEventsToSseResponse, sessionEventsToSseStream, streamSessionEvents, streamWorkspaceControlEvents, terminalSocketUrl, ttydAuthFrame, ttydInputFrame, ttydResizeFrame };
+export { type AccessContext, type AccessGrant, type AccountGrant, type AccountRole, type AcknowledgeStreamRequest, type AcknowledgeStreamResponse, type AddDocumentRequest, type AddWorkspaceMemberRequest, type AgentMessageCompletedPayload, type AgentTextDeltaPayload, type AgentToolCallCreatedPayload, type AgentToolCallOutputPayload, type ApiKey, type AttachViewerRequest, type AttachViewerResponse, type BillingBalance, type BillingEntitlementsResponse, type BillingMode, type BillingSummary, type BillingUsageResponse, type CapabilityCatalogItem, type CapabilityCatalogResponse, type CapabilityInstallation, type CapabilityInstallationStatus, type CapabilityKind, type CapabilityPack, type CapabilityPackConnector, type CapabilityPackConnectorAuthModel, type CapabilityPackKnowledge, type CapabilityPackScheduledTaskTemplate, type CapabilityPackSkill, type CapabilityPackSkillFile, type CapabilityPackVariableSetSpec, type CapabilityRuntime, type CapabilitySource, type CapabilityUnavailableReason, type ClientAuthConfig, type ClientConfig, type ClientModel, type ClientSessionEventInput, type CodexAccount, type CodexAccountOverview, type CodexAccountSwitchedPayload, type CodexAccountsResponse, type CodexAllocatorUpdate, type CodexConnectPoll, type CodexConnectStart, type CodexConnectionStatus, type CodexOverviewResponse, type CodexResetCredit, type CodexResetRedemptionRecovery, type CodexRotationSettings, type CodexUsage, type CodexUsageMap, type CodexUsagePayload, type CodexUsageWindow, type CompactSessionContextResult, type CompleteFileUploadResponse, type ComposerDraft, type ComputerUseCapability, type ConnectionKind, type ConnectionMetadata, type ConnectionResponse, type ConnectionStatus, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateCapabilityCatalogItemRequest, type CreateCheckoutRequest, type CreateCheckoutResponse, type CreateConnectionRequest, type CreateDocumentBaseRequest, type CreateFileUploadRequest, type CreateFileUploadResponse, type CreateGitHubAppManifestRequest, type CreateGitHubAppManifestResponse, type CreateKnowledgeMemoryRequest, type CreateRigRequest, type CreateScheduledTaskRequest, type CreateSessionRequest, type CreateVariableSetRequest, type CreateWorkspaceEnvironmentRequest, type CreateWorkspaceRequest, DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY, type DeleteSessionQueueItemRequest, type DesktopConnectionState, type DesktopRfbFactory, type DesktopRfbLike, type DesktopStreamCapability, type DesktopStreamEvent, type DeviceEnrollmentApproveRequest, type DeviceEnrollmentApproveResponse, type DeviceEnrollmentDenyRequest, type DeviceEnrollmentDenyResponse, type DeviceEnrollmentLookupMachine, type DeviceEnrollmentLookupRequest, type DeviceEnrollmentLookupResponse, type DiscoverMcpCapabilitiesResponse, type Document, type DocumentBase, type DocumentSearchMode, type DocumentSearchRequest, type DocumentSearchResponse, type DocumentSearchResult, type DocumentStatus, type EditSessionQueueItemRequest, type EffectiveControlBlocker, type EffectiveControlResumeOption, type EffectiveSessionControl, type EnableCapabilityRequest, type EnablePackRequest, type EnrollTokenExchangeRequest, type EnrollTokenExchangeResponse, type EnrollmentCredentials, type EnrollmentOs, type EntitlementValue, type Entitlements, type EntitlementsMode, type FetchLike, type FileAsset, type FileDownloadUrlResponse, type FileResourceRef, type FileStatus, type FileSystemCapability, type FileUploadData, type FsChangeKind, type FsChangedPayload, type FsDeleteRequest, type FsDeleteResponse, type FsEncoding, type FsListRequest, type FsListResponse, type FsMkdirRequest, type FsMkdirResponse, type FsMoveRequest, type FsMoveResponse, type FsNodeType, type FsReadRequest, type FsReadResponse, type FsTreeNode, type FsWriteRequest, type FsWriteResponse, type GetPackResponse, type GetWorkspaceCaptureFileResponse, type GetWorkspaceCaptureResponse, type GitCapability, type GitChangedPayload, type GitCommit, type GitCredentialBindingId, type GitCredentialProvider, type GitDiffHunk, type GitDiffLine, type GitDiffLineType, type GitDiffRequest, type GitDiffResponse, type GitFileDiff, type GitFileStatus, type GitFileStatusCode, type GitHubAppInfo, type GitHubInstallationBinding, type GitHubRepositoriesResponse, type GitHubRepository, type GitHubRepositoryScope, type GitLogRequest, type GitLogResponse, type GitRepositoryAccess, type GitShowRequest, type GitShowResponse, type GitStatusRequest, type GitStatusResponse, type GoalSpec, type HumanInputAnswer, type HumanInputOption, type HumanInputQuestion, type HumanInputQuestionKind, type HumanInputResponse, type IntegrationClientMetadata, KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, type KnowledgeMemory, type KnowledgeMemoryKind, type KnowledgeMemorySearchRequest, type KnowledgeMemoryStatus, type KnowledgeSourceKind, type KnowledgeSourceRef, type KnownPermission, type KnownSessionEventType, type KnownUsageEventType, type LineageNode, type ListApiKeysResponse, type ListConnectionsResponse, type ListPacksResponse, type ListWorkspaceMembersResponse, type MachineKind, type MachineMetricsSeriesResponse, type MachineState, type MachineView, type MachinesResponse, type McpServerConnectionRef, type MetricSample, type MintEnrollTokenRequest, type MintEnrollTokenResponse, type ModelAvailabilityV1, type ModelBillingAttributionV1, type ModelCapabilitiesV1, type ModelCapabilityStateV1, type ModelCapabilitySupportV1, type ModelCredentialReadinessV1, type ModelCredentialSourceV1, type ModelPricingScheduleV1, type ModelPricingV1, type MoveSessionQueueItemRequest, type OAuthStartRequest, type OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniClient, type OpenGeniClientOptions, type OpenGeniRequestOptions, OpenGeniStreamError, type PackInstallation, type PackInstallationStatus, type Permission, type ProductAccessMode, type ProposeRigChangeRequest, type ProxySessionEventStreamOptions, type PtyCloseRequest, type PtyOpenRequest, type PtyOpenResponse, type PtyResizeRequest, type PtyWriteRequest, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, type ReasoningEffort, type RecordingAvailablePayload, type RecordingCapability, type RecordingCodec, type RecordingContentType, type RecordingFailedPayload, type RecordingFailedReason, type RecordingMode, type RecordingStartedPayload, type RegisterCapabilityPackRequest, type RepositoryResourceRef, type ResourceRef, type RetainedArtifactContent, type RetainedArtifactContentOptions, type RetainedArtifactMetadata, type RetainedArtifactReference, type RetainedArtifactUnavailable, type RetainedOutputKind, type RetainedOutputUnavailableReason, type Rig, type RigChange, type RigChangeKind, type RigChangeStatus, type RigChangeVerification, type RigCheck, type RigCheckResult, type RigDefinitionEditPayload, type RigSetupAppendPayload, type RigVersion, SESSION_EVENT_TYPES, type SandboxBackend, type SandboxCapabilityName, type SandboxCommandOutputDeltaPayload, type SandboxOs, type SaveComposerDraftRequest, type ScheduledTask, type ScheduledTaskAgentConfig, type ScheduledTaskAgentConfigInput, type ScheduledTaskDayOfWeek, type ScheduledTaskOverlapPolicy, type ScheduledTaskRun, type ScheduledTaskRunMode, type ScheduledTaskRunStatus, type ScheduledTaskScheduleSpec, type ScheduledTaskStatus, type ScheduledTaskTriggerType, type SendMessageInput, type ServiceTurnInitiator, type ServiceTurnInitiatorContext, type Session, type SessionCapabilities, type SessionCommandReceipt, type SessionControlResponse, type SessionEffectiveToolPolicy, type SessionEvent, type SessionEventCompactResult, type SessionEventCompactResultOptions, type SessionEventLatestClass, type SessionEventListOptions, type SessionEventPage, type SessionEventPayloadMode, type SessionEventReadDirection, type SessionEventReadMode, type SessionEventResultMode, type SessionEventSemanticClass, type SessionEventStreamTransport, type SessionEventType, type SessionGoal, type SessionGoalCreatedBy, type SessionGoalStatus, type SessionHumanInputRequest, type SessionLineageResponse, type SessionListResponse, type SessionMcpApprovalPolicy, type SessionMcpCredentialUpdateInput, type SessionMcpServerInput, type SessionMcpServerMetadata, type SessionQueueMutationResponse, type SessionQueueSnapshot, type SessionStatus, type SessionStatusChangedPayload, type SessionStructuredCapabilities, type SessionSummary, type SessionSystemUpdate, type SessionSystemUpdateKind, type SessionSystemUpdateState, type SessionToolPolicy, type SessionTurn, type SessionTurnSource, type SessionTurnStatus, type SetWorkspaceEnvironmentVariableRequest, type SseMessage, type SseReStreamOptions, type SteerMessageResult, type SteerSessionQueueItemRequest, type StreamClosedPayload, type StreamConnectionState, type StreamOpenedPayload, type StreamRevokedPayload, type StreamSessionEventsOptions, type StreamUrlRotatedPayload, type SubmitHumanInputResponseRequest, type SwapActiveSandboxRequest, type SwapActiveSandboxResponse, TTYD_SUBPROTOCOL, type TerminalCapability, type TerminalExecRequest, type TerminalExecResponse, type TerminalPtyExitedPayload, type TerminalPtyOutputDeltaPayload, type TerminalPtyStartedPayload, type ToolAuthNeededPayload, type ToolRef, type TranscriptionAdapter, type TranscriptionAdapterDescriptor, type TranscriptionAdapterStartContext, type TranscriptionAuthorization, type TranscriptionCredentialMode, type TranscriptionDiagnostic, type TranscriptionErrorCode, type TranscriptionEvent, type TranscriptionEventListener, type TranscriptionLifecycleStatus, type TranscriptionPolicyBlockReason, type TranscriptionResultMetadata, type TranscriptionSession, type TranscriptionSessionRequest, type TranscriptionSpeaker, type TranscriptionTargetSelection, type TranscriptionTimeSpan, type TranscriptionWord, TtydClientCommand, TtydServerCommand, type TurnInitiator, type UpdateConnectionRequest, type UpdateKnowledgeMemoryRequest, type UpdateRigRequest, type UpdateScheduledTaskRequest, type UpdateSessionGoalRequest, type UpdateSessionMcpApprovalPolicyRequest, type UpdateSessionMcpApprovalPolicyResponse, type UpdateSessionPinRequest, type UpdateSessionRequest, type UpdateVariableSetRequest, type UpdateWorkspaceEnvironmentRequest, type UpdateWorkspaceMemberRequest, type UpdateWorkspaceRequest, type UpdateWorkspaceSettingsRequest, type UploadFileInput, type UsageEvent, type UsageEventType, type UserApprovalDecisionEventInput, type UserHumanInputResponseEventInput, type UserMessageEventInput, type VariableSet, type VariableSetVariableMetadata, type ViewerHeartbeatRequest, type ViewerHeartbeatResponse, type ViewerHolder, type Workspace, type WorkspaceCaptureDegradedReason, type WorkspaceCaptureFile, type WorkspaceCaptureManifest, type WorkspaceCaptureRepo, type WorkspaceCaptureSignedUrl, type WorkspaceCaptureStats, type WorkspaceControlEvent, type WorkspaceControlEventPage, type WorkspaceControlStreamTransport, type WorkspaceEnvironment, type WorkspaceEnvironmentVariableMetadata, type WorkspaceInferenceControlResponse, type WorkspaceMember, type WorkspaceMemorySearchMode, type WorkspaceMemorySearchRequest, type WorkspaceMemorySearchResponse, type WorkspaceMemorySearchResult, type WorkspaceModelCatalogModel, type WorkspaceModelCatalogResponse, type WorkspaceRegisteredPack, type WorkspaceRevisionCapturedPayload, type WorkspaceRevisionDegradedPayload, type WorkspaceSettings, type WorkspaceTranscriptionPolicy, type WorkspaceTranscriptionTarget, applyUrlRotation, authorizeTranscriptionAdapter, createTranscriptionSessionRequest, desktopSocketUrl, formatSseEvent, isRetryableStreamError, nextDesktopState, parseSseStream, proxySessionEventStream, resolveWorkspaceTranscriptionPolicy, resumeSequenceFromRequest, sessionEventsToSseResponse, sessionEventsToSseStream, streamSessionEvents, streamWorkspaceControlEvents, terminalSocketUrl, ttydAuthFrame, ttydInputFrame, ttydResizeFrame };