@opengeni/sdk 0.52.1 → 1.0.0

package/dist/types.d.ts

@@ -1,4 +1,7 @@
 import type { WorkspaceTranscriptionPolicy } from "./transcription.js";
+export type { ClaudeSubscriptionOAuthStartResponse, ClaudeSubscriptionOAuthCompleteRequest, ClaudeSubscriptionOAuthCompleteResponse, } from "@opengeni/contracts";
+export type { SessionMessageSearchRequest, SessionMessageSearchMatch, SessionMessageSearchResponse, SessionMessagePreview, SessionMessagePreviewReference, } from "./session-message-search.js";
+export type BundledSkillId = "builtin:opengeni-help" | "builtin:opengeni-client" | "builtin:opengeni-visualize" | "builtin:document-parsing" | "builtin:opengeni-skills" | "builtin:opengeni-projects" | "builtin:opengeni-schedules" | "builtin:opengeni-documents" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-presentations" | "builtin:opengeni-sites" | "builtin:opengeni-video-generation";
 export type CodexRealtimeWebrtcVersion = "v3";
 export type CodexRealtimeVoice = "juniper" | "maple" | "spruce" | "ember" | "vale" | "breeze" | "arbor" | "sol" | "cove";
 export type CodexRealtimeWebrtcRequest = {
@@ -51,6 +54,74 @@ export type GatewayRealtimeConnectResponse = {
     instructions: string;
     replay: false;
 };
+export type ToolGatewayIdentity = {
+    serverId: string;
+    toolName: string;
+};
+export type ToolGatewayCatalogEntry = {
+    identity: ToolGatewayIdentity;
+    modelName: string;
+    codemodePath: string[];
+    title?: string | undefined;
+    description?: string | undefined;
+    inputSchema: Record<string, unknown>;
+    outputSchema?: Record<string, unknown> | undefined;
+    annotations?: Record<string, unknown> | undefined;
+    icons?: Array<Record<string, unknown>> | undefined;
+    source: "opengeni" | "files" | "docs" | "mcp" | "codex_apps" | "interaction";
+    approval: "none" | "human" | "policy";
+};
+export type ToolGatewayCatalog = {
+    version: 1;
+    accountId: string;
+    workspaceId: string;
+    generation: number;
+    digest: string;
+    createdAt: string;
+    entries: ToolGatewayCatalogEntry[];
+};
+export type ToolGatewayResult = {
+    content: Array<{
+        type: string;
+        [key: string]: unknown;
+    }>;
+    structuredContent?: Record<string, unknown> | undefined;
+    isError?: boolean | undefined;
+    _meta?: Record<string, unknown> | undefined;
+    [key: string]: unknown;
+};
+export type ToolGatewayCallRequest = {
+    operationId?: string | undefined;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    arguments: Record<string, unknown>;
+    siteArtifactId?: string | undefined;
+    siteVersionId?: string | undefined;
+    approvalToken?: string | undefined;
+};
+export type ToolGatewayApprovalRequest = {
+    operationId: string;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    arguments: Record<string, unknown>;
+};
+export type ToolGatewayApprovalResponse = {
+    operationId: string;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    approvalToken: string;
+    expiresAt: string;
+};
+export type ToolGatewayCallResponse = {
+    operationId: string;
+    catalogDigest: string;
+    result: ToolGatewayResult;
+};
+export type ToolGatewayDeclarationsResponse = {
+    catalogDigest: string;
+    moduleSpecifier: string;
+    source: string;
+};
 export type ActivateCodexRealtimeConnectionRequest = {
     operationId: string;
     browserInstanceId: string;
@@ -90,6 +161,8 @@ export type SessionRealtimeInboundEntry = {
     delegationItemId?: string | null | undefined;
     text?: string | null | undefined;
     payload?: Record<string, unknown> | undefined;
+    /** Model-visible application context attached to this exact realtime message. */
+    modelContext?: string | undefined;
 };
 export type SyncSessionRealtimeLedgerRequest = {
     browserInstanceId: string;
@@ -112,11 +185,11 @@ export type SyncSessionRealtimeLedgerResponse = {
     }>;
     outbound: SessionRealtimeLedgerEntry[];
 };
-export type SessionRealtimeModel = "gpt-live-1-boulder-alpha" | "opengeni-gateway/openai/gpt-realtime-2.1" | "opengeni-gateway/openai/gpt-realtime-mini" | "opengeni-gateway/xai/grok-voice-think-fast-2.0" | "workspace-gateway/openai/gpt-realtime-2.1" | "workspace-gateway/openai/gpt-realtime-mini" | "workspace-gateway/xai/grok-voice-think-fast-2.0";
+export type SessionRealtimeModel = "gpt-live-1-boulder-alpha" | "supergrok/grok-voice-think-fast-2.0" | "opengeni-gateway/openai/gpt-realtime-2.1" | "opengeni-gateway/openai/gpt-realtime-mini" | "opengeni-gateway/xai/grok-voice-think-fast-2.0" | "workspace-gateway/openai/gpt-realtime-2.1" | "workspace-gateway/openai/gpt-realtime-mini" | "workspace-gateway/xai/grok-voice-think-fast-2.0";
 export type WorkspaceRealtimeModelCatalogItem = {
     id: SessionRealtimeModel;
     label: string;
-    provider: "OpenGeni" | "Connected Codex" | "Your Gateway";
+    provider: "OpenGeni" | "Connected Codex" | "Connected SuperGrok" | "Your Gateway";
     description: string;
     available: boolean;
     unavailableReason: string | null;
@@ -126,7 +199,7 @@ export type WorkspaceRealtimeModelCatalogResponse = {
     models: WorkspaceRealtimeModelCatalogItem[];
 };
 export type SessionRealtimeState = "active" | "ended";
-export type SessionRealtimeEndReason = "user_stop" | "browser_unload" | "lease_expired";
+export type SessionRealtimeEndReason = "user_stop" | "browser_unload" | "lease_expired" | "authority_revoked";
 export type SessionRealtimeMode = {
     id: string;
     sessionId: string;
@@ -161,7 +234,7 @@ export type SessionRealtimeMutationResponse = {
     replay: boolean;
 };
 export type SessionStatus = "queued" | "running" | "idle" | "requires_action" | "recovering" | "waiting_capacity" | "failed" | "cancelled";
-export type SandboxBackend = "docker" | "modal" | "local" | "none" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted";
+export type SandboxBackend = "docker" | "modal" | "local" | "none" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted" | "opensandbox";
 export type SandboxOs = "linux" | "macos" | "windows";
 export type SandboxCapabilityName = "FileSystem" | "Terminal" | "Git" | "DesktopStream" | "Recording";
 export type CapabilityUnavailableReason = "backend_unsupported" | "os_unsupported" | "not_provisioned" | "disabled_by_policy" | "lease_cold" | "tier_headless" | "agent_offline" | "agent_reconnecting" | "consent_required" | "display_unavailable";
@@ -184,7 +257,7 @@ export type SessionCapabilities = {
         reason: CapabilityUnavailableReason | null;
     };
     Terminal: {
-        transport: "sse-events" | "pty-ws" | null;
+        transport: "sse-events" | "pty-ws" | "relay-pty" | null;
         ptyCapable: boolean;
         shell: string;
         url: string | null;
@@ -218,6 +291,7 @@ export type SessionCapabilities = {
         codecs: ("h264-mp4" | "vp9-webm")[];
         reason: CapabilityUnavailableReason | null;
     };
+    /** @deprecated Use the managed ComputerSession interaction tools. */
     ComputerUse: {
         available: boolean;
         readOnly: boolean;
@@ -230,6 +304,7 @@ export type TerminalCapability = SessionCapabilities["Terminal"];
 export type GitCapability = SessionCapabilities["Git"];
 export type DesktopStreamCapability = SessionCapabilities["DesktopStream"];
 export type RecordingCapability = SessionCapabilities["Recording"];
+/** @deprecated Use the managed ComputerSession interaction tools. */
 export type ComputerUseCapability = SessionCapabilities["ComputerUse"];
 export type StreamUrlRotatedPayload = {
     url: string;
@@ -279,7 +354,7 @@ export type AttachViewerResponse = ViewerHolder & {
     terminalUrl: string | null;
     terminalToken: string | null;
     terminalExpiresAt: string | null;
-    terminalTransport: "pty-ws" | null;
+    terminalTransport: "pty-ws" | "relay-pty" | null;
 };
 export type AcknowledgeStreamRequest = {
     acknowledgeUnredacted?: boolean | undefined;
@@ -304,6 +379,8 @@ export type RepositoryResourceRef = {
     kind: "repository";
     uri: string;
     ref: string;
+    /** Exact immutable commit that repository materialization must produce. */
+    expectedCommitSha?: string | undefined;
     /**
      * Optional workspace-relative override. When omitted, OpenGeni persists
      * `repos/<encoded-host>/<owner>/<repo>` so equal names on different Git
@@ -313,6 +390,7 @@ export type RepositoryResourceRef = {
     mountPath?: string | undefined;
     subpath?: string | undefined;
     provider?: GitCredentialProvider | undefined;
+    connectionType?: "github_personal" | undefined;
     credentialBindingId?: GitCredentialBindingId | undefined;
     access?: GitRepositoryAccess | undefined;
     repositoryId?: number | string | undefined;
@@ -321,6 +399,12 @@ export type RepositoryResourceRef = {
     connectionId?: string | undefined;
     githubInstallationId?: number | undefined;
     githubRepositoryId?: number | undefined;
+    /**
+     * Best-effort materialization: a failed clone logs a warning and the
+     * session continues without this repository instead of failing sandbox
+     * setup. Omit it to keep a failed clone fatal.
+     */
+    optional?: boolean | undefined;
 };
 /** Value mirror of `@opengeni/contracts`; parity-tested without importing it from ordinary SDK entries. */
 export declare const DEFAULT_FILE_RESOURCE_MOUNT_ROOT: ".opengeni/files";
@@ -334,14 +418,22 @@ export type ResourceRef = RepositoryResourceRef | FileResourceRef;
 export type ToolRef = {
     kind: "mcp";
     id: string;
+    /** Skip this server when its connect/tools-list fails instead of failing the turn. */
     optional?: boolean | undefined;
+    /**
+     * Put this server's tool schemas on the first model request instead of behind
+     * `tool_search` progressive discovery. A startup choice only; grants nothing.
+     */
+    eager?: boolean | undefined;
 };
 export type SessionToolPolicy = {
     mode: "workspace_default" | "explicit" | "inherited";
     inheritedFromSessionId: string | null;
+    excludedMcpServerIds?: string[] | undefined;
 };
 export type UpdateSessionToolPolicyRequest = {
     mode: "workspace_default";
+    excludedMcpServerIds?: string[] | undefined;
     expectedVersion: number;
 } | {
     mode: "explicit";
@@ -371,10 +463,22 @@ export type SessionEffectiveToolPolicy = {
     };
     idsTruncated: boolean;
 };
+export type SessionGoalReportRequirement = {
+    id: string;
+    title: string;
+};
+export type SessionGoalReportDelivery = {
+    requirementId: string;
+    artifactId: string;
+    inspectionReceiptId: string;
+};
 export type GoalSpec = {
     text: string;
     successCriteria?: string | undefined;
+    rootConstraints?: string[] | undefined;
+    reportRequirements?: SessionGoalReportRequirement[] | undefined;
     maxAutoContinuations?: number | undefined;
+    mutationPolicy?: SessionGoalMutationPolicy | undefined;
 };
 export type SessionMcpServerInput = {
     id: string;
@@ -392,6 +496,28 @@ export type SessionMcpCredentialUpdateInput = {
     id: string;
     headers: Record<string, string>;
 };
+export type RotateSessionMcpCredentialsRequest = {
+    operationKey: string;
+    updates: Array<{
+        id: string;
+        expectedCredentialVersion: number;
+        expectedServerUrl: string;
+    } & ({
+        headers: Record<string, string>;
+    } | {
+        nativeConnectionId: string;
+        replacementServerUrl?: string | undefined;
+    })>;
+};
+export type RotateSessionMcpCredentialsReceipt = {
+    operationKey: string;
+    sessionId: string;
+    servers: Array<{
+        id: string;
+        credentialVersion: number;
+    }>;
+    appliedAt: string;
+};
 export type SessionMcpApprovalPolicy = boolean | string[];
 export type SessionMcpServerMetadata = {
     id: string;
@@ -406,13 +532,45 @@ export type UpdateSessionMcpApprovalPolicyRequest = {
     requireApproval: SessionMcpApprovalPolicy;
 };
 export type UpdateSessionMcpApprovalPolicyResponse = {
-    server: SessionMcpServerMetadata;
+    server: SessionMcpApprovalPolicyTarget;
     effectiveFrom: "next_attempt";
 };
+export type SessionMcpApprovalPolicyTarget = SessionMcpServerMetadata | {
+    id: string;
+    source: "workspace";
+    requireApproval: SessionMcpApprovalPolicy;
+};
 export type ConnectionKind = "oauth2" | "api_key" | "app_install" | "delegated";
 export type ConnectionStatus = "active" | "needs_reauth" | "revoked" | "error";
+export type UserResourceDelegation = {
+    authorityId: string;
+    grantId: string;
+    organizationId: string;
+    workspaceId: string;
+    sessionId: string | null;
+    action: string;
+    mode: "once" | "session" | "always";
+    context: "user_private" | "workspace_shared";
+    authorityEpoch: number | null;
+    authorityGeneration: number;
+    grantGeneration: number;
+    resourceVersionId?: string | null | undefined;
+};
+export type McpConnectionAccountSelection = {
+    serverId: string;
+    connectionId: string;
+};
 export type McpServerConnectionRef = {
     connectionId?: string | undefined;
+    accountSelection?: "all_eligible" | undefined;
+    authoritySource?: "host" | undefined;
+    /** accepted_turn is configuration-only; each accepted owner must select a grant. */
+    hostBinding?: {
+        bindingId: string;
+        generation: number;
+    } | {
+        selection: "accepted_turn";
+    } | undefined;
     provider?: string | undefined;
     providerDomain: string;
     kind?: ConnectionKind | undefined;
@@ -434,6 +592,7 @@ export type McpPersonalConnectionDelegation = {
 export type McpPersonalConnectionSummary = Pick<McpPersonalConnectionDelegation, "serverId" | "providerDomain">;
 export type ConnectionMetadata = {
     id: string;
+    authorityId?: string | undefined;
     accountId: string;
     workspaceId: string;
     subjectId: string | null;
@@ -454,21 +613,174 @@ export type ConnectionMetadata = {
     createdAt: string;
     updatedAt: string;
 };
-export type CreateConnectionRequest = {
+/** Where a brokered credential is written on each outbound provider request. */
+export type ConnectionCredentialPlacement = {
+    carrier: "header" | "query" | "cookie";
+    name: string;
+    value: string;
+    /** Prepended to `value`, for example `"Bearer "` or `"Token "`. */
+    prefix?: string | undefined;
+};
+/**
+ * Write-only secret for a brokered `api_key` Connection (API Integrations and
+ * MCP servers). The broker never infers a location: use exact `headers`, or
+ * `placements` when the provider expects a query parameter or cookie (API
+ * Integrations only) or a prefixed value. Match the carrier/name reported by
+ * `previewApiIntegration().auth`. A bare `{ apiKey }` is rejected with 422.
+ *
+ * @example { headers: { Authorization: "Token abc123" } }
+ * @example { placements: [{ carrier: "header", name: "X-Api-Key", value: "abc123" }] }
+ */
+export type ApiKeyConnectionCredential = {
+    headers: Record<string, string>;
+    placements?: never;
+} | {
+    placements: ConnectionCredentialPlacement[];
+    headers?: never;
+};
+type CreateConnectionRequestBase = {
     providerDomain: string;
-    kind: ConnectionKind;
     ownership?: ConnectionOwnership | undefined;
     /** @deprecated use ownership */
     subjectId?: string | null | undefined;
-    credential: Record<string, unknown>;
     grantedScopes?: string[] | undefined;
     expiresAt?: string | null | undefined;
+    operationId?: string | undefined;
+    /** Direct OpenAI/Azure keys only: verify the provider/model before saving. */
+    verifyModelAccess?: boolean | undefined;
+};
+export type CreateConnectionRequest = CreateConnectionRequestBase & ({
+    kind: "api_key";
+    credential: ApiKeyConnectionCredential;
+    metadata?: Record<string, unknown> | undefined;
+} | {
+    /**
+     * Workspace model-provider key lane (Vercel AI Gateway / OpenRouter),
+     * selected by `metadata.credentialRole`; not usable by integrations.
+     */
+    kind: "api_key";
+    credential: {
+        apiKey: string;
+    };
+    metadata: {
+        credentialRole: string;
+    } & Record<string, unknown>;
+} | {
+    kind: Exclude<ConnectionKind, "api_key">;
+    credential: Record<string, unknown>;
     metadata?: Record<string, unknown> | undefined;
+});
+export type PersonalGitHubConnectionMetadata = {
+    credentialRole: "opengeni_github_personal";
+    providerFamily: "github";
+    providerPrincipalId: string;
+    githubUserId: string;
+    githubLogin: string;
+    oauthEnvironment: string;
+    oauthClientMarker: string;
+    credentialBindingId: string;
+    connectedAt: string;
+    lastVerifiedAt: string;
+    refreshTokenExpiresAt?: string | null | undefined;
+    disconnectedAt?: string | null | undefined;
+    [key: string]: unknown;
+};
+export type PersonalGitHubOAuthStartRequest = {
+    connectionId?: string | undefined;
+    returnPath?: string | undefined;
+};
+export type PersonalGitHubOAuthStartResponse = {
+    authorizationUrl: string;
+    expiresAt: string;
+};
+export type PersonalGitHubConnectionStatusResponse = {
+    enabled: boolean;
+    connection: ConnectionMetadata | null;
+    reviewUrl: string | null;
+};
+export type PersonalGitHubDisconnectRequest = {
+    expectedVersion: number;
+    idempotencyKey: string;
+};
+export type PersonalGitHubRepositoryAccess = "read" | "write";
+export type PersonalGitHubRepositoryPermissions = {
+    pull: boolean;
+    push: boolean;
+    admin: boolean;
+    maintain: boolean;
+    triage: boolean;
+};
+export type PersonalGitHubRepository = {
+    repositoryId: string;
+    fullName: string;
+    canonicalUrl: string;
+    defaultBranch: string;
+    visibility: "public" | "private" | "internal";
+    private: boolean;
+    archived: boolean;
+    disabled: boolean;
+    permissions: PersonalGitHubRepositoryPermissions;
+};
+export type PersonalGitHubSelectedRepository = PersonalGitHubRepository & {
+    selectedAccess: PersonalGitHubRepositoryAccess;
+    selectionGeneration: number;
+    selectedAt: string;
+    lastVerifiedAt: string;
+};
+export type PersonalGitHubRepositorySelectionState = {
+    connectionAuthorityGeneration: number;
+    credentialBindingId: string;
+    providerPrincipalId: string;
+    selectionGeneration: number;
+    repositories: PersonalGitHubSelectedRepository[];
+};
+export type PersonalGitHubRepositoryCatalogItem = PersonalGitHubRepository & {
+    selectedAccess: PersonalGitHubRepositoryAccess | null;
+};
+export type ListPersonalGitHubRepositoriesOptions = {
+    cursor?: number | undefined;
+    limit?: number | undefined;
+};
+export type ListPersonalGitHubRepositoriesResponse = {
+    repositories: PersonalGitHubRepositoryCatalogItem[];
+    nextCursor: number | null;
+    selection: PersonalGitHubRepositorySelectionState;
+};
+export type PersonalGitHubRepositorySelectionInput = {
+    repositoryId: string;
+    fullName: string;
+    access: PersonalGitHubRepositoryAccess;
+};
+export type ReplacePersonalGitHubRepositorySelectionsRequest = {
+    expectedConnectionAuthorityGeneration: number;
+    expectedSelectionGeneration: number;
+    idempotencyKey: string;
+    repositories: PersonalGitHubRepositorySelectionInput[];
+};
+export type VerifyPersonalGitHubRepositorySelectionsRequest = {
+    expectedConnectionAuthorityGeneration: number;
+    expectedSelectionGeneration: number;
+    idempotencyKey: string;
 };
 export type OpenGeniSlackBotInstallRequest = {
     /** Existing OpenGeni Slack bot connection to reinstall in place. */
     connectionId?: string | undefined;
 };
+export type FikenInstallRequest = {
+    apiToken: string;
+    defaultCompanySlug?: string | undefined;
+    /** Existing Fiken connection to rewrite in place (reconnect). */
+    connectionId?: string | undefined;
+};
+export type FikenOAuthStartRequest = {
+    returnPath?: string | undefined;
+    /** Existing Fiken connection to re-authorize in place (reconnect). */
+    connectionId?: string | undefined;
+};
+export type FikenOAuthStartResponse = {
+    authorizationUrl: string;
+    expiresAt: string;
+};
 export type OpenGeniSlackBotInstallStart = {
     authorizationUrl: string;
     expiresAt: string;
@@ -487,7 +799,7 @@ export type SlackInstallationBinding = {
     slackTeamName: string;
     botId: string;
     botUserId: string;
-    botDisplayName: "OpenGeni";
+    botDisplayName: "OpenGeni" | "OpenGeni Staging";
     state: SlackInstallationBindingState;
     quarantineReason: string | null;
     version: number;
@@ -541,16 +853,25 @@ export type GoogleDriveConnectionMetadata = {
     googleEmail: string;
     googleDisplayName: string | null;
     verifiedAt: string;
-    accessMode: "metadata_readonly" | "readonly";
+    accessMode: "file_only" | "metadata_readonly" | "readonly";
     lifecycle?: GoogleDriveConnectionLifecycle | undefined;
+    outputDestination?: GoogleDriveOutputDestination | undefined;
     documentDestination?: ConnectorDocumentDestination | undefined;
     selectedSources?: GoogleDriveSelectedSource[] | undefined;
     /** @deprecated Read selectedSources; retained while existing connections migrate. */
     selectedSource?: GoogleDriveSelectedSource | null | undefined;
     [key: string]: unknown;
 };
+export type GoogleDriveOutputDestination = {
+    folderId: string;
+    folderName: string;
+    driveId: string | null;
+    location: "my_drive" | "shared_drive";
+    selectedAt: string;
+};
 export type GoogleDriveOAuthStartRequest = {
     connectionId?: string | undefined;
+    capability?: "source_read" | "publish" | undefined;
 };
 export type GoogleDriveOAuthStartResponse = {
     authorizationUrl: string;
@@ -696,6 +1017,8 @@ export type UpdateConnectionRequest = {
     grantedScopes?: string[] | undefined;
     expiresAt?: string | null | undefined;
     metadata?: Record<string, unknown> | undefined;
+    expectedVersion?: number | undefined;
+    operationId?: string | undefined;
 };
 export type ConnectionResponse = {
     connection: ConnectionMetadata;
@@ -710,6 +1033,8 @@ export type OAuthStartRequest = {
     resource?: string | undefined;
     requestedScopes?: string[] | undefined;
     returnPath?: string | undefined;
+    /** Exact trusted-host destination; requires verified external-user mode. */
+    returnUrl?: string | undefined;
     connectionId?: string | undefined;
     ownership?: ConnectionOwnership | undefined;
     oauthClient?: {
@@ -770,11 +1095,123 @@ export type IntegrationClientMetadata = {
     grant_types: Array<"authorization_code" | "refresh_token">;
     response_types: ["code"];
 };
+export type SessionVisibility = "private" | "workspace";
+export type SessionTenancyCreateCapabilities = {
+    activated: boolean;
+    canCreatePrivate: boolean;
+    reason: "available" | "not_activated" | "managed_session_required" | "unavailable";
+};
+export type SessionTenancyPublicProjection = {
+    visibility: SessionVisibility;
+    authorityEpoch: number;
+    ownedByCurrentUser: boolean;
+    fork: {
+        sourceVisibility: SessionVisibility;
+        sourceAuthorityEpoch: number;
+        forkedAt: string;
+    } | null;
+};
+export type UpdateSessionVisibilityRequest = {
+    visibility: SessionVisibility;
+    expectedAuthorityEpoch: number;
+    idempotencyKey: string;
+};
+export type UpdateSessionVisibilityResponse = {
+    operationId: string;
+    eventId: string | null;
+    eventSequence: number | null;
+    visibility: SessionVisibility;
+    authorityEpoch: number;
+    changed: boolean;
+    replay: boolean;
+    revokedGrantCount: number;
+};
+export type ForkSessionRequest = {
+    idempotencyKey: string;
+    visibility: SessionVisibility;
+    workspaceSharedAcknowledged: boolean;
+    rigId?: string | null | undefined;
+    variableSetIds?: string[] | undefined;
+};
+export type ForkSessionResponse = {
+    operationId: string;
+    eventId: string;
+    eventSequence: number;
+    sessionId: string;
+    workspaceId: string;
+    visibility: SessionVisibility;
+    authorityEpoch: 1;
+    copiedHistoryItemCount: number;
+    replay: boolean;
+};
+export type SessionBackgroundCommandActivity = {
+    unavailableCount?: number | undefined;
+    state: "running" | "stopping";
+    count: number;
+};
+/** Stored reconciliation checkpoints, not a live provider probe or native ACK. */
+export type SessionBackgroundCommandReconciliation = {
+    lastOutcome: string | null;
+    attempts: number;
+    dueAt: string;
+    claimedAt: string | null;
+    terminalProof: {
+        outcome: "exited";
+        exitCode: number;
+        observedAt: string;
+    } | {
+        outcome: "lost";
+        exitCode: null;
+        observedAt: string;
+    } | null;
+};
+export type SessionBackgroundCommand = {
+    observationStatus?: "unavailable" | undefined;
+    reconciliation?: SessionBackgroundCommandReconciliation | undefined;
+    id: string;
+    workspaceId: string;
+    sessionId: string;
+    provider: "managed" | "connected_machine";
+    state: "running" | "stopping" | "exited" | "lost";
+    commandPreview: string;
+    commandText?: string | undefined;
+    cancelRequestedAt: string | null;
+    exitCode: number | null;
+    settlementReason: string | null;
+    startedAt: string;
+    settledAt: string | null;
+    updatedAt: string;
+};
+export type SessionBackgroundCommandListResponse = {
+    commands: SessionBackgroundCommand[];
+};
+export type CancelSessionBackgroundCommandResult = {
+    command: SessionBackgroundCommand;
+    accepted: boolean;
+};
 export type Session = {
+    /** Detail-only dispatch evidence; delivery does not prove turn execution. */
+    dispatchWait?: {
+        state: "pending" | "acknowledged" | "unavailable";
+        attempts: number;
+        nextAttemptAt: string | null;
+        lastError: string | null;
+    } | null | undefined;
+    /** Detail-only failure evidence through lastSequence; independent of timeline paging. */
+    failureDiagnostics?: {
+        eventId: string;
+        sequence: number;
+        turnId: string | null;
+        occurredAt: string;
+        payload: unknown;
+    } | null | undefined;
+    bundledSkillIds?: BundledSkillId[] | undefined;
     id: string;
     workspaceId: string;
     accountId: string;
     status: SessionStatus;
+    backgroundCommandActivity?: SessionBackgroundCommandActivity | undefined;
+    hasSchedules?: boolean | undefined;
     initialMessage: string;
     title: string | null;
     titleSource: "user" | "agent" | null;
@@ -788,10 +1225,14 @@ export type Session = {
     toolPolicyVersion: number;
     effectiveToolPolicy?: SessionEffectiveToolPolicy | undefined;
     metadata: Record<string, unknown>;
+    /** Present only when session-tenancy product activation is enabled for the organization. */
+    tenancy?: SessionTenancyPublicProjection | undefined;
     /** Frozen creator fact; later turns carry their own independent initiator. */
     createdBy: TurnInitiator;
     createdByContext: Record<string, unknown>;
     model: string;
+    reasoningEffort: ReasoningEffort;
+    latencyMode: LatencyMode;
     sandboxBackend: SandboxBackend;
     sandboxOs: SandboxOs;
     sandboxGroupId: string;
@@ -799,14 +1240,26 @@ export type Session = {
     activeEpoch: number;
     /** Explicit connected-machine project root; null uses the agent launch root. */
     workingDir: string | null;
+    /** Ordered low-to-high precedence; the final entry is the legacy singular alias. */
+    variableSetIds?: string[] | undefined;
     variableSetId: string | null;
     /** @deprecated use variableSetId */
     environmentId: string | null;
     rigId: string | null;
     rigVersionId: string | null;
+    /** Workspace channel the session is filed under; null = unfiled (inbox). */
+    channelId: string | null;
     firstPartyMcpPermissions: string[] | null;
     firstPartyMcpTools: FirstPartyMcpToolName[];
+    /**
+     * Frozen agent configuration; null for sessions created without one (legacy
+     * behavior). Omitted by older servers.
+     */
+    agent?: ResolvedAgentConfig | null | undefined;
+    /** Capability-level view of what a configured session can use; null for legacy. */
+    effectiveTools?: AgentEffectiveTools | null | undefined;
     mcpServers: SessionMcpServerMetadata[];
+    mcpApprovalPolicies?: Record<string, SessionMcpApprovalPolicy> | undefined;
     parentSessionId: string | null;
     /** Immutable server-authored nested-agent lineage and policy snapshot. */
     rootSessionId: string;
@@ -822,34 +1275,90 @@ export type Session = {
     queueHeadPosition: number;
     queueTailPosition: number;
     effectiveControl: EffectiveSessionControl;
+    /** Current durable input wait; an elapsed deadline does not prove a new turn started. */
+    inputWait?: {
+        deadlineAt: string;
+        reason: string;
+    } | null | undefined;
     lastSequence: number;
     /** Multi-account Codex (P1): the account this session is pinned to (null ⇒ follow workspace active). */
     codexPinnedCredentialId?: string | null;
     /** Multi-account Codex (P1): the account the most recent turn ran on (the "Running on:" indicator). */
     codexLastCredentialId?: string | null;
+    /** Accepted current-turn account, separate from future session preferences. */
+    codexCurrentSelection?: {
+        credentialId: string | null;
+        waiting: boolean;
+    } | null | undefined;
     /**
      * Frozen at create. `remote_v2` ⇒ Codex remote compaction + Codex-only model
      * admission; `portable` ⇒ plaintext compaction and free provider switching.
      */
     codexCompactionMode: "remote_v2" | "portable";
+    /**
+     * The `code_search` decision frozen at create. A turn gets the tool only when
+     * this is true, the deployment still offers it, the workspace is not Off, and
+     * the turn has POSIX compute.
+     */
+    codeSearchEnabled?: boolean;
     /** Personal (authenticated subject) workspace pin state, never workspace-global. */
     pinned?: boolean;
     /** Stable pin ordering key; null when this subject has not pinned the session. */
     pinnedAt?: string | null;
     /** Optimistic pin-state revision; zero represents an absent pin relation. */
     pinVersion?: number;
+    /** Personal explicit acknowledgment state. */
+    unread?: boolean;
+    /** Personal actively-working label. */
+    activelyWorking?: boolean;
+    /** Optimistic unread/actively-working revision. */
+    attentionVersion?: number;
+    /** Personal archive state. */
+    archived?: boolean;
+    archivedAt?: string | null;
+    /**
+     * Read-only imported timeline, independent of personal archive/restore state.
+     * Never model-facing conversation history.
+     */
+    importedArchive?: {
+        importId: string;
+        importedAt: string;
+        readOnly: true;
+    } | undefined;
+    /** Optimistic archive-state revision. */
+    archiveVersion?: number;
     /** Server-authoritative descendant counts populated by session-list reads. */
     treeStats?: {
         directChildren: number;
         totalDescendants: number;
         runningDescendants: number;
         queuedDescendants: number;
+        waitingDescendants?: number | undefined;
         attentionDescendants: number;
         pausedDescendants: number;
         failedDescendants: number;
+        unreadDescendants?: number | undefined;
+        unreadFailedDescendants?: number | undefined;
+        activelyWorkingDescendants?: number | undefined;
+        /**
+         * Earliest moment one of the counted `attentionDescendants` entered
+         * `requires_action`; null when none is waiting, absent on older servers.
+         */
+        attentionSince?: string | null | undefined;
         /** Counts are lower bounds rather than exact totals when true. */
         truncated: boolean;
     } | undefined;
+    /**
+     * When this session's own open turn entered `requires_action`. Populated by
+     * list and lineage reads for `requires_action` sessions; null otherwise.
+     */
+    requiresActionSince?: string | null | undefined;
+    /** Agent access scope; absent on servers before the agent-access release. */
+    agentAccess?: SessionAgentAccess | undefined;
+    /** Opaque end-user label; null when the session carries none. */
+    scopeSubjectId?: SessionScopeSubjectId | null | undefined;
+    /** Memory scope; absent on servers before the agent-access release. */
+    memoryScope?: SessionMemoryScope | undefined;
     createdAt: string;
     updatedAt: string;
 };
@@ -858,14 +1367,88 @@ export type CreateSessionResponse = Session & {
     initialTurnId: string | null;
 };
 export type SessionSummary = Session;
-/** Canonical session-list page; pinned rows are excluded from ordinary pages. */
+/** Compact list-only record, excluding prompts and execution configuration. */
+export type SessionListEntry = Pick<Session, "id" | "workspaceId" | "accountId" | "status" | "backgroundCommandActivity" | "hasSchedules" | "title" | "titleSource" | "createdBy" | "channelId" | "parentSessionId" | "rootSessionId" | "effectiveControl" | "inputWait" | "lastSequence" | "pinned" | "pinnedAt" | "pinVersion" | "unread" | "activelyWorking" | "attentionVersion" | "archived" | "archivedAt" | "importedArchive" | "archiveVersion" | "treeStats" | "requiresActionSince" | "createdAt" | "updatedAt"> & {
+    displayTitle: string;
+    renameSeed: string;
+    scheduledTaskId: string | null;
+    siteOrigin: {
+        siteId: string;
+        title: string;
+    } | null;
+};
+export type SessionListEntryResponse = Omit<SessionListResponse, "pinned" | "sessions"> & {
+    projection: "summary";
+    pinned: SessionListEntry[];
+    sessions: SessionListEntry[];
+};
+/** Complete metadata for authorized roots and ordinary project trees. */
+export type SessionListTotals = {
+    needsYouCount: number;
+    groups: Array<{
+        channelId: string | null;
+        total: number;
+        attention: number;
+        attentionSince: string | null;
+        failed: number;
+        active: number;
+        queued: number;
+        unread: number;
+        activeWork: number;
+    }>;
+};
 export type SessionListResponse = {
+    totals?: SessionListTotals;
+    needsYouOnly?: true;
     pinned: Session[];
     /** True when the server omitted older pins from its bounded pinned section. */
     pinnedTruncated?: boolean;
+    /** Present only when the server recognized and applied additive list filters. */
+    filtersApplied?: true;
+    /** Effective server ordering. Name: ASCII-space trim, ASCII case fold,
+     * UTF-8 byte order, id ASC. Date keys and id ties are DESC. */
+    sortBy?: "updatedAt" | "createdAt" | "name" | "archivedAt";
+    archiveStatus?: "active" | "archived" | "all";
+    /** Server-resolved Site origin filter, when requested. */
+    originSiteId?: string;
     sessions: Session[];
     nextCursor: string | null;
 };
+export type WorkClaimSubjectType = "repository" | "branch" | "pull_request" | "issue" | "artifact" | "release" | "ci_run" | "other";
+export type WorkClaimDiscoverySummary = {
+    id: string;
+    sessionId: string;
+    subject: {
+        namespace: string;
+        type: WorkClaimSubjectType;
+        canonicalKey: string;
+        displayLabel: string | null;
+    };
+    role: "working" | "reviewing" | "monitoring" | "delivering";
+    state: "active" | "released" | "superseded" | "stale";
+    revision: number;
+    provenance: "explicit_agent" | "user_api" | "trusted_integration" | "session_resource" | "system_lifecycle";
+    version: {
+        kind: "git_commit" | "branch_head" | "pull_request_head" | "artifact_version" | "release_version" | "ci_run" | "other";
+        value: string;
+    } | null;
+    observedAt: string;
+    updatedAt: string;
+    settledAt: string | null;
+};
+export type WorkDiscoveryProjection = {
+    claims: WorkClaimDiscoverySummary[];
+    claimsTruncated: boolean;
+    match: {
+        class: "exact_subject" | "title" | "goal" | "fuzzy";
+        field: "subject" | "title" | "goal" | "claim_key" | "claim_label";
+        scoreBand: "exact" | "strong" | "related";
+        claimId: string | null;
+    } | null;
+    possibleOverlap: boolean;
+    advisoryOnly: true;
+    noAdditionalAccess: true;
+};
 /** Compact, bounded session projection for workspace agent-topology browsers. */
 export type AgentTopologySession = {
     id: string;
@@ -880,6 +1463,11 @@ export type AgentTopologySession = {
         titleTruncated: boolean;
     }>;
     status: SessionStatus;
+    goal: {
+        status: SessionGoalStatus;
+        summary: string;
+        summaryTruncated: boolean;
+    } | null;
     pause: {
         state: "active" | "paused";
         additionalBlockerCount: number;
@@ -900,6 +1488,7 @@ export type AgentTopologySession = {
         failedDescendants: number;
         truncated: boolean;
     };
+    relatedWork: WorkDiscoveryProjection;
     createdAt: string;
     updatedAt: string;
 };
@@ -907,17 +1496,30 @@ export type AgentTopologyPageResponse = {
     sessions: AgentTopologySession[];
     total: number;
     hasMore: boolean;
+    /** Operator rollout decision for human advisory presentation. */
+    humanAdvisoriesEnabled?: boolean | undefined;
     nextCursor: string | null;
 };
 export type UpdateSessionPinRequest = {
     pinned: boolean;
     expectedVersion?: number;
 };
+export type UpdateSessionAttentionRequest = {
+    unread?: boolean;
+    acknowledgedThroughSequence?: number;
+    activelyWorking?: boolean;
+    expectedVersion?: number;
+};
+export type UpdateSessionArchiveRequest = {
+    archived: boolean;
+    expectedVersion?: number;
+};
 export type LineageNode = {
     session: SessionSummary;
     children: LineageNode[];
 };
 export type SessionLineageResponse = {
+    sessionHasSchedules?: boolean | undefined;
     ancestors: SessionSummary[];
     children: LineageNode[];
     truncated: boolean;
@@ -948,6 +1550,21 @@ export type SubmittedTimelineAnnotation = DraftTimelineAnnotation;
 export type TimelineAnnotation = DraftTimelineAnnotation & {
     ordinal: number;
 };
+export declare const PERSONAL_RESOURCE_SHARED_OUTPUT_WARNING_VERSION: 1;
+export declare const PERSONAL_RESOURCE_SHARED_OUTPUT_WARNING = "Personal resources used in a workspace-shared session may influence outputs visible to other workspace members. The underlying credentials and secret values are not shared by the attachment itself.";
+export type PersonalResourceAttachmentIntent = {
+    mode: "once" | "session" | "always";
+    expectedAuthorityEpoch?: number | undefined;
+    workspaceSharedAcknowledged?: boolean | undefined;
+    sharedOutputWarningVersion: 1;
+};
+export type PersonalResourceAttachmentSummary = {
+    mode: "once" | "session" | "always";
+    context: "user_private" | "workspace_shared";
+    resourceCount: number;
+    resourceKinds: Array<"variable_set" | "rig" | "connected_machine">;
+    sharedOutputWarningVersion: 1;
+};
 export type SessionTurn = {
     id: string;
     workspaceId: string;
@@ -975,6 +1592,7 @@ export type SessionTurn = {
     initiator: TurnInitiator;
     initiatorContext: Record<string, unknown>;
     personalConnections?: McpPersonalConnectionSummary[] | undefined;
+    personalResources?: PersonalResourceAttachmentSummary | null | undefined;
     cancelledBy?: string | null;
     cancelReason?: string | null;
     startedAt: string | null;
@@ -988,7 +1606,16 @@ export type HumanInputOption = {
     label: string;
     description?: string | null | undefined;
 };
+export type SkillReviewReference = {
+    removalOperationId?: string | undefined;
+    sourceOperationId: string;
+    skillId: string;
+    revisionId: string;
+    expectedRevisionId: string | null;
+    expectedScopeVersion: number;
+};
 export type HumanInputQuestion = {
+    skillReview?: SkillReviewReference | null | undefined;
     id: string;
     kind: HumanInputQuestionKind;
     prompt: string;
@@ -1037,7 +1664,7 @@ export type SessionHumanInputRequest = {
     createdAt: string;
     updatedAt: string;
 };
-export declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.event.envelope_omitted", "session.status.changed", "session.realtime.started", "session.realtime.ended", "session.requiresAction", "session.humanInput.requested", "session.context.compaction.requested", "session.context.compaction.started", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "user.humanInputResponse", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.capacity_waiting", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.request", "agent.model.usage", "tool.auth_needed", "credential.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "system.update.superseded", "system.update.cancelled", "system.update.settled", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "session.mcp.approval_policy.updated", "session.tool_policy.updated", "codex.account.switched", "codex.credential.selected", "codex.fleet.decision", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
+export declare const SESSION_EVENT_TYPES: readonly ["usage.threshold_reached", "usage.exhausted", "usage.period_reset", "session.created", "session.variable_sets.updated", "session.runtime.configured", "session.event.envelope_omitted", "session.status.changed", "session.realtime.started", "session.realtime.ended", "session.requiresAction", "session.humanInput.requested", "session.context.compaction.requested", "session.context.compaction.started", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "user.humanInputResponse", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.dispatch.expired", "turn.capacity_waiting", "turn.startup.phase.started", "turn.startup.phase.completed", "turn.startup.phase.failed", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.request", "agent.model.usage", "tool.auth_needed", "credential.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "session.command.backgrounded", "session.command.finished", "session.wait.started", "session.wait.finished", "sandbox.command.output.delta", "artifact.created", "knowledge.confirmation.recovered", "instruction.confirmation.recovered", "knowledge.source.prepared", "knowledge.source.failed", "goal.set", "goal.updated", "goal.progress", "goal.rewrite.proposed", "goal.rewrite.rejected", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.held", "goal.continuation", "system.update.pending", "system.update.delivered", "system.update.superseded", "system.update.cancelled", "system.update.settled", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "session.visibility.changed", "session.personal_resources.attached", "session.mcp.approval_policy.updated", "session.tool_policy.updated", "session.agent.updated", "session.model_settings.updated", "codex.account.switched", "codex.account.selection.changed", "codex.credential.selected", "codex.fleet.decision", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
 export type KnownSessionEventType = (typeof SESSION_EVENT_TYPES)[number];
 /**
  * Event types the SDK knows about today, kept open so a newer OpenGeni server
@@ -1050,6 +1677,8 @@ export type SessionEvent = {
     sessionId: string;
     /** Per-session sequence number: positive, contiguous, strictly increasing. */
     sequence: number;
+    /** Server-owned durable high-water mark for a synthetic compact event. */
+    coveredThrough?: number | undefined;
     type: SessionEventType;
     payload: unknown;
     occurredAt: string;
@@ -1161,11 +1790,17 @@ export type SessionEventPage = {
 };
 export type ToolAuthNeededPayload = {
     serverId: string;
+    /** Configured connector for recovery; serverId retains the execution alias. */
+    canonicalServerId?: string | undefined;
+    /** Scope of the exact failed account, not the canonical catalog default. */
+    connectionSubjectScope?: "workspace" | "subject" | undefined;
     toolName?: string | null | undefined;
     providerDomain: string;
     provider?: string | undefined;
     connectionId?: string | null | undefined;
+    authoritySource?: "host" | undefined;
     reason: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable";
+    hostReason?: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable" | undefined;
     scopes?: string[] | undefined;
     resource?: string | undefined;
     selectedResources?: Array<{
@@ -1183,6 +1818,13 @@ export type ToolAuthNeededPayload = {
         rationale: string;
         requiredVariables: string[];
     } | undefined;
+    /** Agent suggestion; never a connection or permission grant. */
+    setupRequest?: {
+        kind: "mcp";
+        name: string;
+        endpointUrl: string;
+        rationale: string;
+    } | undefined;
 };
 export type AgentTextDeltaPayload = {
     text: string;
@@ -1195,6 +1837,11 @@ export type AgentToolCallCreatedPayload = {
     name: string;
     arguments: unknown;
     raw?: unknown | undefined;
+    /**
+     * Content-free analytics family: an OpenGeni first-party tool name,
+     * `integration:<reviewed domain>`, or `custom`. Absent when unclassified.
+     */
+    toolFamily?: string | undefined;
 };
 export type AgentToolCallOutputPayload = {
     id: string | null;
@@ -1228,7 +1875,7 @@ export type CodexFleetDecisionEventPayload = {
     actual: {
         outcome: "selected" | "waiting" | "none";
         candidateKey: string | null;
-        reason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "none";
+        reason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "allocator_disabled" | "none";
     };
     comparison: CodexFleetShadowComparison;
     replay: {
@@ -1348,11 +1995,16 @@ export type FsTreeNode = {
     truncated: boolean;
 };
 export type FsEncoding = "utf8" | "base64";
+export type FileSystemRouteIdentity = {
+    epoch: number;
+    root: string;
+};
 export type FsListRequest = {
     path?: string;
     depth?: number;
     maxEntries?: number;
     includeHidden?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsListResponse = {
     root: FsTreeNode;
@@ -1367,8 +2019,11 @@ export type FsListBatchResponse = {
 };
 export type FsReadRequest = {
     path: string;
+    /** Confine this read to the session's working directory, refusing symlinks. */
+    workspaceOnly?: boolean;
     encoding?: FsEncoding;
     maxBytes?: number;
+    route?: FileSystemRouteIdentity;
 };
 export type FsReadResponse = {
     path: string;
@@ -1379,12 +2034,23 @@ export type FsReadResponse = {
     isBinary: boolean;
     revision: number;
 };
+export declare const SANDBOX_FILE_ARTIFACT_MAX_BYTES: number;
+export type PublishSandboxFileArtifactRequest = {
+    path: string;
+};
+export type SandboxFileArtifactReceipt = {
+    type: "sandbox_file";
+    sandboxPath: string;
+    filename: string;
+    artifact: RetainedArtifactReference;
+};
 export type FsWriteRequest = {
     path: string;
     encoding?: FsEncoding;
     content: string;
     overwrite?: boolean;
     createParents?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsWriteResponse = {
     path: string;
@@ -1394,6 +2060,7 @@ export type FsWriteResponse = {
 export type FsDeleteRequest = {
     path: string;
     recursive?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsDeleteResponse = {
     revision: number;
@@ -1403,6 +2070,7 @@ export type FsMoveRequest = {
     newPath: string;
     overwrite?: boolean;
     createParents?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsMoveResponse = {
     path: string;
@@ -1412,6 +2080,7 @@ export type FsMoveResponse = {
 export type FsMkdirRequest = {
     path: string;
     recursive?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsMkdirResponse = {
     path: string;
@@ -1720,17 +2389,87 @@ export type ScheduledTaskScheduleSpec = {
     minute: number;
     daysOfWeek?: ScheduledTaskDayOfWeek[] | undefined;
 };
+export type IncidentTelemetrySeriesMetadata = {
+    metric: string;
+    labels: string[];
+};
+export type IncidentTelemetryDataRoute = {
+    kind: "mcp";
+    serverId: string;
+} | {
+    kind: "first_party";
+    tool: FirstPartyMcpToolName;
+} | {
+    kind: "variable_set";
+    variableSetName: string;
+    variableNames: string[];
+} | {
+    kind: "rig_credential_hook";
+    credentialHookId: string;
+};
+export type IncidentTelemetryPreflight = {
+    requiredResources: ResourceRef[];
+    requiredMcpServerIds: string[];
+    requiredFirstPartyMcpTools: FirstPartyMcpToolName[];
+    requiredFirstPartyMcpPermissions: Permission[];
+    requiredRig: {
+        name: string;
+        credentialHookIds: string[];
+    } | null;
+    requiredVariableSetNames: string[];
+    requiredVariableNames: string[];
+    dataSource: {
+        kind: "prometheus";
+        queryPath: "/api/v1/query" | "/api/v1/query_range";
+        workspaceLabel: string;
+        alertSelectorLabels: string[];
+        route: IncidentTelemetryDataRoute;
+        requiredSeries: IncidentTelemetrySeriesMetadata[];
+        availableSeries: IncidentTelemetrySeriesMetadata[];
+    };
+};
+export type IncidentTelemetryPreflightInput = Omit<IncidentTelemetryPreflight, "requiredResources" | "requiredMcpServerIds" | "requiredFirstPartyMcpTools" | "requiredFirstPartyMcpPermissions" | "requiredRig" | "requiredVariableSetNames" | "requiredVariableNames"> & {
+    requiredResources?: ResourceRef[] | undefined;
+    requiredMcpServerIds?: string[] | undefined;
+    requiredFirstPartyMcpTools?: FirstPartyMcpToolName[] | undefined;
+    requiredFirstPartyMcpPermissions?: Permission[] | undefined;
+    requiredRig?: {
+        name: string;
+        credentialHookIds?: string[] | undefined;
+    } | null | undefined;
+    requiredVariableSetNames?: string[] | undefined;
+    requiredVariableNames?: string[] | undefined;
+};
 export type ScheduledTaskAgentConfig = {
+    /** Agent configuration for every generated session; omitted keeps legacy behavior. */
+    agent?: AgentConfigRequest | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
+    /** Read-only: the complete accepted account set, including an empty set. */
+    connectionAccountsFrozen?: true | undefined;
+    knowledgeSource?: Extract<ScheduledTaskAction, {
+        kind: "knowledge_source_sync";
+    }> | undefined;
+    bundledSkillIds?: BundledSkillId[] | undefined;
     prompt: string;
     resources: ResourceRef[];
     tools: ToolRef[];
     metadata: Record<string, unknown>;
     slackBotConnectionId?: string | undefined;
+    /** Slack channel a person chose for this task's bot posts; requires slackBotConnectionId. */
+    slackBotChannelId?: string | undefined;
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
+    executionClass?: "incident_telemetry" | undefined;
+    incidentTelemetryPreflight?: IncidentTelemetryPreflight | undefined;
     maxNestedAgentDepth?: number | undefined;
+    /** Seconds a run may wait on a person before the scheduler answers for it. */
+    approvalTimeoutSeconds?: number | undefined;
 };
 export type ScopedKnowledgeScope = {
     kind: "organization";
@@ -1781,6 +2520,8 @@ export type ScheduledTask = {
     accountId: string;
     workspaceId: string;
     name: string;
+    /** Immutable execution owner; null for workspace/service tasks. */
+    ownerSubjectId: string | null;
     status: ScheduledTaskStatus;
     schedule: ScheduledTaskScheduleSpec;
     temporalScheduleId: string;
@@ -1790,7 +2531,8 @@ export type ScheduledTask = {
     agentConfig: ScheduledTaskAgentConfig;
     createdBy?: TurnInitiator | undefined;
     createdByContext?: TurnInitiatorContext | undefined;
-    personalConnections?: McpPersonalConnectionSummary[] | undefined;
+    authorityRevision: number;
+    executionDigest: string;
     targetSessionId: string | null;
     reusableSessionId: string | null;
     variableSetId: string | null;
@@ -1800,20 +2542,66 @@ export type ScheduledTask = {
     metadata: Record<string, unknown>;
     createdAt: string;
     updatedAt: string;
+    /** Read-only: what `refreshScheduledTaskAccess` would change, for a viewer who can act on it. */
+    policyDrift?: ScheduledTaskPolicyDrift | null | undefined;
+};
+/** One connector named in a scheduled task's access report. */
+export type ScheduledTaskAccessConnector = {
+    id: string;
+    name: string;
+};
+/**
+ * What a scheduled task's frozen connectors, connector accounts and OpenGeni
+ * tools lack compared with what its owner would get by saving it again now.
+ */
+export type ScheduledTaskPolicyDrift = {
+    /** Workspace default connectors that new schedules get and this one lacks. */
+    missingConnectors: ScheduledTaskAccessConnector[];
+    /** Connectors this schedule names that this workspace no longer sets up; refresh drops them. */
+    unavailableConnectors: ScheduledTaskAccessConnector[];
+    /** Default OpenGeni tools missing from an agent-created task's frozen tools. */
+    missingOpenGeniTools: FirstPartyMcpToolName[];
+    /** Connectors whose chosen account can no longer be used by this schedule. */
+    unavailableAccounts: ScheduledTaskAccessConnector[];
+    /** Connectors this schedule has no account for, although one is now available. */
+    attachableAccounts: ScheduledTaskAccessConnector[];
+    /** Whether this viewer may run the refresh (a signed-in person, not a key or agent). */
+    canRefresh: boolean;
+};
+/** Re-freeze with the caller's current authority; `executionDigest` is the reviewed head. */
+export type RefreshScheduledTaskAccessRequest = {
+    executionDigest: string;
+    /** Default connectors and OpenGeni tools to keep off; only narrows what the refresh adds. */
+    leaveOut?: {
+        connectors?: string[] | undefined;
+        openGeniTools?: FirstPartyMcpToolName[] | undefined;
+    } | undefined;
 };
 export type CreateSessionRequest = {
+    /** Omitted: defaults/inheritance; []: no bundled guidance. Children cannot widen. */
+    bundledSkillIds?: BundledSkillId[] | undefined;
+    excludedMcpServerIds?: string[] | undefined;
     requestedSessionId?: string | undefined;
+    visibility?: SessionVisibility | undefined;
     initialMessage?: string | undefined;
     /** Create an idle session shell so realtime voice can be the first interaction. */
     startMode?: "realtime" | undefined;
-    /** System instructions scoped to the initial turn; never visible timeline text. */
-    turnInstructions?: string | undefined;
+    /** Model-visible application context attached to the initial user message; omitted by standard timeline rendering. */
+    modelContext?: string | undefined;
     instructions?: string | undefined;
     /** Immutable normalized prompt-policy role; distinct from membership roles. */
     policyRole?: string | undefined;
     resources?: ResourceRef[] | undefined;
     /** Inline skills fixed onto this session; omitted children inherit them. */
-    skills?: SessionSkill[] | undefined;
+    skills?: SessionSkillInput[] | undefined;
+    /** Installed session-selected Skill identities to freeze onto this session at creation. */
+    installedSkillIds?: string[] | undefined;
+    /**
+     * MCP servers to select. Omitted follows the workspace defaults; an explicit
+     * array (including `[]`) is an exact allow-list over workspace/deployment
+     * servers. Servers attached in this request's `mcpServers` are always
+     * selected; list one here only to set `eager`/`optional`.
+     */
     tools?: ToolRef[] | undefined;
     metadata?: Record<string, unknown> | undefined;
     model?: string | undefined;
@@ -1822,6 +2610,8 @@ export type CreateSessionRequest = {
     sandboxBackend?: SandboxBackend | undefined;
     targetSandboxId?: string | undefined;
     workingDir?: string | undefined;
+    /** Ordered low-to-high precedence; later sets win name collisions. */
+    variableSetIds?: string[] | undefined;
     variableSetId?: string | undefined;
     /** @deprecated use variableSetId */
     environmentId?: string | undefined;
@@ -1830,22 +2620,42 @@ export type CreateSessionRequest = {
     clientEventId?: string | undefined;
     idempotencyKey?: string | undefined;
     expectedNewSessionDraftRevision?: number | undefined;
+    agentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
     maxNestedAgentDepth?: number | undefined;
     firstPartyMcpPermissions?: string[] | undefined;
     firstPartyMcpTools?: FirstPartyMcpToolName[] | undefined;
+    /**
+     * One agent configuration: capabilities, identity, instructions alias and
+     * renderer. Omission keeps today's behavior (a child inherits its parent's).
+     * Children may only narrow. Requires the server's admission switch.
+     */
+    agent?: AgentConfigRequest | undefined;
     mcpServers?: SessionMcpServerInput[] | undefined;
+    mcpApprovalPolicies?: Record<string, SessionMcpApprovalPolicy> | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
+    /** Atomically attach the server-derived personal Variable Set/Rig closure to the initial turn. */
+    personalResourceAttachment?: PersonalResourceAttachmentIntent | undefined;
     sandbox?: "shared" | "new" | {
         groupId: string;
     } | undefined;
-};
-export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
+    agentAccess?: SessionAgentAccess | undefined;
+    /** Opaque end-user label inside the workspace. Not a subject, not authority. */
+    /** Select identity with server-side asUser(), not session creation data. */
+    scopeSubjectId?: never;
+    /** Which Memory the agent reads and where it saves; "user" requires `scopeSubjectId`. */
+    memoryScope?: SessionMemoryScope | undefined;
+};
+export type SessionAgentAccess = "session" | "user" | "workspace";
+export type SessionScopeSubjectId = string;
+export type SessionMemoryScope = "workspace" | "user" | "off";
+export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "usage_allowances:manage", "connections:read", "connections:write", "capabilities:manage", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:attach", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
 export type KnownPermission = (typeof KNOWN_PERMISSIONS)[number];
 /**
  * Permissions the SDK knows about today, kept open so a newer OpenGeni server
  * can introduce permissions without breaking older SDK consumers.
  */
 export type Permission = KnownPermission | (string & {});
-export type FirstPartyMcpToolName = "set_session_title" | "goal_set" | "goal_update" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "preference_registry_summary" | "preference_registry_get" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "connected_machine_remove" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "set_other_session_title" | "interaction_discover" | "browser_open" | "browser_tabs" | "browser_observe" | "browser_act" | "browser_debug" | "browser_identity" | "browser_publish" | "browser_lifecycle" | "computer_open" | "computer_targets" | "computer_observe" | "computer_act" | "computer_lifecycle" | "variable_set_list" | "environment_list" | "variable_set_get_variable" | "variable_set_set_variable" | "environment_set_variable" | "capability_catalog_search" | "capability_authorization_request" | "github_connect_link" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "social_search_live" | "social_mentions_live" | "social_thread_fetch" | "social_posts_sync" | "social_post_reply" | "x_accounts_list" | "x_search_live" | "x_mentions_live" | "x_thread_fetch" | "x_posts_sync" | "x_post_reply" | "reddit_accounts_list" | "reddit_search_live" | "reddit_mentions_live" | "reddit_thread_fetch" | "reddit_posts_sync" | "reddit_post_reply" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_channel_history" | "slack_bot_thread_replies" | "slack_bot_list_users" | "slack_bot_list_files" | "slack_bot_file_info" | "slack_bot_file_content" | "slack_bot_post_message" | "slack_bot_delete_message" | "atlassian_sources_list" | "atlassian_search" | "atlassian_get" | "artifacts_list" | "artifacts_get_source" | "artifacts_create" | "artifacts_publish" | "artifacts_rollback" | "editable_artifact_list" | "editable_artifact_create" | "editable_artifact_import" | "editable_artifact_get" | "editable_artifact_inspect" | "editable_artifact_apply" | "editable_artifact_export" | "editable_artifact_export_status";
+export type FirstPartyMcpToolName = "knowledge_search" | "knowledge_prepare_save" | "knowledge_get" | "knowledge_browse" | "knowledge_save" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_archive" | "instruction_policy_save" | "instruction_policy_get" | "set_session_title" | "goal_set" | "goal_update" | "goal_progress" | "wait_for_input" | "goal_complete" | "goal_pause" | "goal_resume" | "memory_search" | "memory_save" | "memory_correct" | "preference_registry_summary" | "preference_registry_get" | "task_notes_list" | "task_note_save" | "task_note_archive" | "task_note_replace" | "work_claim_upsert" | "work_claim_release" | "knowledge_propose" | "knowledge_correct" | "task_note_promote_knowledge" | "task_note_promote_instruction_policy" | "task_note_promote_preference" | "instruction_policy_propose" | "preference_propose" | "remember" | "remember_confirm" | "company_profile_propose" | "company_profile_confirm" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "connected_machine_remove" | "connected_machine_enroll_token" | "project_list" | "project_get" | "project_create" | "project_update" | "project_reorder" | "project_delete" | "session_set_project" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_set_model" | "session_events" | "session_wait" | "command_read" | "command_wait" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "session_human_input_respond" | "set_other_session_title" | "interaction_discover" | "browser_open" | "browser_tabs" | "browser_observe" | "browser_act" | "browser_read" | "browser_screenshot" | "browser_clipboard" | "browser_debug" | "browser_downloads" | "browser_download_save" | "browser_auth" | "interaction_request_human" | "browser_identity" | "browser_publish" | "browser_lifecycle" | "computer_open" | "computer_targets" | "computer_observe" | "computer_clipboard" | "computer_act" | "computer_lifecycle" | "variable_set_list" | "environment_list" | "variable_set_get_variable" | "variable_set_set_variable" | "environment_set_variable" | "capability_catalog_search" | "capability_authorization_request" | "custom_mcp_setup_request" | "github_connect_link" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "social_search_live" | "social_mentions_live" | "social_thread_fetch" | "social_posts_sync" | "social_post_reply" | "x_accounts_list" | "x_search_live" | "x_mentions_live" | "x_thread_fetch" | "x_posts_sync" | "x_post_reply" | "reddit_accounts_list" | "reddit_search_live" | "reddit_mentions_live" | "reddit_thread_fetch" | "reddit_posts_sync" | "reddit_post_reply" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_search" | "slack_bot_channel_history" | "slack_bot_thread_replies" | "slack_bot_list_users" | "slack_bot_list_files" | "slack_bot_file_info" | "slack_bot_file_content" | "slack_bot_upload_file" | "slack_bot_post_message" | "slack_bot_delete_message" | "slack_bot_prepare_message" | "slack_bot_send_prepared_message" | "fiken_companies_list" | "fiken_contacts_list" | "fiken_contact_create" | "fiken_products_list" | "fiken_invoices_list" | "fiken_invoice_get" | "fiken_invoice_draft_create" | "fiken_bank_accounts_list" | "fiken_purchases_list" | "fiken_sales_list" | "atlassian_sources_list" | "atlassian_search" | "atlassian_get" | "sandbox_file_publish" | "artifacts_list" | "artifacts_get_source" | "artifacts_prepare_upload" | "artifacts_create" | "artifacts_publish" | "artifacts_rollback" | "artifacts_archive" | "artifacts_restore" | "editable_artifact_list" | "editable_artifact_create" | "editable_artifact_import" | "editable_artifact_get" | "editable_artifact_inspect" | "editable_artifact_apply" | "editable_artifact_export" | "editable_artifact_export_status";
 export type ProductAccessMode = "local" | "configured" | "managed";
 export type ModelCapabilitySupportV1 = "supported" | "unsupported" | "unknown";
 export type ModelCapabilityStateV1 = {
@@ -1888,18 +2698,23 @@ export type ModelCredentialSourceV1 = {
     mechanism: "api_key" | "azure_ad_bearer";
 } | {
     kind: "connected_subscription";
-    provider: "codex";
+    provider: "codex" | "xai" | "claude";
 } | {
     kind: "workspace_connection";
     mechanism: "api_key";
+} | {
+    kind: "organization_connection";
+    mechanism: "api_key";
 };
 export type ModelBillingAttributionV1 = {
-    upstreamPayer: "deployment" | "workspace" | "connected_subscription";
+    upstreamPayer: "deployment" | "workspace" | "organization" | "connected_subscription";
     metering: "opengeni_credits" | "external";
 };
+export type ModelCostClassV1 = "free" | "credits" | "subscription" | "workspace" | "organization";
 export type ModelPricingV1 = {
     inputMicrosPerMillionTokens: number;
     cachedInputMicrosPerMillionTokens?: number | undefined;
+    cacheWriteMicrosPerMillionTokens?: number | undefined;
     outputMicrosPerMillionTokens: number;
     marginBps?: number | undefined;
 };
@@ -1924,14 +2739,14 @@ export type ClientModel = {
     /** Provider id (e.g. `openai`, `azure`, or a registry provider id). */
     provider: string;
     providerLabel: string;
-    api: "responses" | "chat";
-    source?: "opengeni" | "codex" | "workspace_gateway" | undefined;
+    api: "responses" | "chat" | "anthropic-messages";
+    source?: "opengeni" | "codex" | "supergrok" | "workspace_gateway" | "openrouter" | undefined;
     contextWindowTokens?: number | undefined;
     schemaVersion?: 1 | undefined;
     aliases?: string[] | undefined;
     deployment?: {
         upstreamModelId: string;
-        wireApi: "responses" | "chat";
+        wireApi: "responses" | "chat" | "anthropic-messages";
     } | undefined;
     executionLimits?: {
         contextWindowTokens: number | null;
@@ -1941,6 +2756,7 @@ export type ClientModel = {
     } | undefined;
     credentialSource?: ModelCredentialSourceV1 | undefined;
     billing?: ModelBillingAttributionV1 | undefined;
+    cost?: ModelCostClassV1 | undefined;
     capabilities?: ModelCapabilitiesV1 | undefined;
     pricing?: ModelPricingScheduleV1 | undefined;
     definitionVersion?: string | undefined;
@@ -1959,32 +2775,160 @@ export type ModelCredentialReadinessV1 = {
 };
 export type WorkspaceModelCatalogModel = ClientModel & {
     credentialReadiness: ModelCredentialReadinessV1;
+    /** Exact workspace-policy verdict without exposing provider identity. */
+    policyAllowed?: boolean | undefined;
     availability: ModelAvailabilityV1;
 };
+/** Why a new chat or scheduled task without an explicit model gets its default. */
+export type DefaultModelSelectionSource = "workspace" | "subscription" | "credits" | "deployment";
+export type DefaultModelSelection = {
+    model: string;
+    reasoningEffort: ReasoningEffort;
+    source: DefaultModelSelectionSource;
+};
 export type WorkspaceModelCatalogResponse = {
     models: WorkspaceModelCatalogModel[];
+    /** Default for new chats and scheduled tasks that name no model. */
+    defaultSelection?: DefaultModelSelection | undefined;
+    /**
+     * The default this workspace would use once its organization holds an
+     * OpenGeni credit balance. Null when the deployment does not bill credits.
+     */
+    creditsSelection?: DefaultModelSelection | null | undefined;
 };
-/**
- * Connection state of a workspace's Codex (ChatGPT) subscription, returned by
- * `GET /v1/workspaces/:id/codex/status`. `models` are the codex models the
- * workspace can select (projected as ClientModel under their own "no credits"
- * provider group), present only while connected.
- */
-export type CodexConnectionStatus = {
-    connected: boolean;
-    plan?: string | null;
-    valid?: boolean;
-    expiresAt?: string | null;
-    lastError?: string | null;
-    models?: ClientModel[];
-    /** The account a session runs on when unpinned (label for the in-session indicator). */
-    activeAccount?: {
-        id: string;
-        label?: string | null;
-        chatgptAccountId?: string | null;
-    } | null;
-    /** How many Codex accounts the workspace has connected. */
+export type WorkspaceGatewayCustomModel = {
+    id: string;
+    upstreamModelId: string;
+    label: string | null;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export type WorkspaceGatewayCustomModelsResponse = {
+    models: WorkspaceGatewayCustomModel[];
+};
+export type CreateWorkspaceGatewayCustomModelRequest = {
+    operationId: string;
+    upstreamModelId: string;
+    label?: string | undefined;
+};
+export type DeleteWorkspaceGatewayCustomModelRequest = {
+    expectedVersion: number;
+    operationId: string;
+};
+export type WorkspaceOpenRouterCustomModel = WorkspaceGatewayCustomModel;
+export type WorkspaceOpenRouterCustomModelsResponse = {
+    models: WorkspaceOpenRouterCustomModel[];
+};
+export type CreateWorkspaceOpenRouterCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+export type DeleteWorkspaceOpenRouterCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+export type OrganizationModelProviderKind = "vercel_gateway" | "openrouter" | "anthropic" | "claude_subscription";
+export type ClaudeUsageWindow = {
+    id: "five_hour" | "seven_day" | "seven_day_opus" | "seven_day_sonnet" | "seven_day_overage_included" | "overage";
+    usedPercent: number | null;
+    resetsAt: string | null;
+    status: "allowed" | "allowed_warning" | "rejected" | null;
+    observedAt: string;
+    source?: "response_headers" | "provider" | undefined;
+};
+export type ClaudeUsageRequestStatus = {
+    status: ClaudeUsageWindow["status"];
+    resetsAt: string | null;
+    representativeClaim: ClaudeUsageWindow["id"] | null;
+    overageStatus: ClaudeUsageWindow["status"];
+    overageResetsAt: string | null;
+    upstreamModelId: string | null;
+    observedAt: string;
+    source?: "response_headers" | "provider" | undefined;
+};
+export type ClaudeSubscriptionUsage = {
+    connected: boolean;
+    credentialVersion: number | null;
+    windows: ClaudeUsageWindow[];
+    observedAt: string | null;
+    source: "response_headers" | "provider" | null;
+    refreshStatus: "not_checked" | "available" | "scope_required" | "unavailable" | "reconnect";
+    refreshCheckedAt: string | null;
+    requestStatus?: ClaudeUsageRequestStatus | null | undefined;
+    requestRestrictions?: ClaudeUsageRequestStatus[] | undefined;
+};
+export type OrganizationModelProviderConnection = {
+    providerKind: OrganizationModelProviderKind;
+    status: "active" | "revoked";
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export type UpsertOrganizationModelProviderConnectionRequest = {
+    operationId: string;
+    expectedVersion?: number | undefined;
+    apiKey: string;
+    claudeIdentity?: {
+        accountUuid: string;
+        deviceId: string;
+    } | undefined;
+};
+export type RevokeOrganizationModelProviderConnectionRequest = {
+    operationId: string;
+    expectedVersion: number;
+};
+export type OrganizationProviderCustomModel = WorkspaceGatewayCustomModel;
+export type OrganizationProviderCustomModelsResponse = {
+    models: OrganizationProviderCustomModel[];
+};
+export type CreateOrganizationProviderCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+export type DeleteOrganizationProviderCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+/**
+ * The workspace's hard model/provider allowlist. `null` means unrestricted for
+ * that dimension; an empty array is an explicit total block.
+ */
+export type WorkspaceModelAccessPolicy = {
+    allowedProviders: string[] | null;
+    allowedModels: string[] | null;
+};
+/** Full replacement body for `PUT /v1/workspaces/:id/model-policy`. */
+export type UpdateWorkspaceModelAccessPolicyRequest = {
+    allowedProviders?: string[] | null | undefined;
+    allowedModels?: string[] | null | undefined;
+};
+/**
+ * Connection state of a workspace's Codex (ChatGPT) subscription, returned by
+ * `GET /v1/workspaces/:id/codex/status`. `models` are the codex models the
+ * workspace can select (projected as ClientModel under their own "no credits"
+ * provider group), present only while connected.
+ */
+export type CodexConnectionStatus = {
+    connected: boolean;
+    plan?: string | null;
+    valid?: boolean;
+    expiresAt?: string | null;
+    lastError?: string | null;
+    models?: ClientModel[];
+    /** The account a session runs on when unpinned (label for the in-session indicator). */
+    activeAccount?: {
+        id: string;
+        label?: string | null;
+        chatgptAccountId?: string | null;
+    } | null;
+    /** Live model-catalog probe result for the active account only. */
+    activeAccountValid?: boolean;
+    /** Cached readiness of any account in the effective worker pool. */
+    poolReady?: boolean;
+    /** Cached unpinned worker routability; rotation-off remains active-pointer-only. */
+    workerRoutable?: boolean;
+    /** How many Codex accounts the workspace has connected. */
     accountCount?: number;
+    source?: WorkspaceCodexSubscriptionSource;
+};
+export type WorkspaceCodexSubscriptionMode = "automatic" | "workspace" | "organization" | "disabled";
+export type WorkspaceCodexSubscriptionSource = {
+    accountId: string;
+    workspaceId: string;
+    workspaceKind: "personal" | "shared";
+    mode: WorkspaceCodexSubscriptionMode;
+    effectiveSource: "workspace" | "organization" | "disabled";
+    workspaceAvailable: boolean;
+    organizationAvailable: boolean;
 };
 /**
  * One normalized Codex usage window (5h or weekly), camelCase end-to-end (the
@@ -2023,6 +2967,7 @@ export type CodexUsagePayload = {
         meteredFeature: string;
         fiveHour: CodexUsageWindow | null;
         weekly: CodexUsageWindow | null;
+        unknownWindowExhausted: boolean;
     }>;
     credits?: {
         hasCredits: boolean;
@@ -2031,13 +2976,34 @@ export type CodexUsagePayload = {
         balance: string;
     };
 };
+/** One model a Codex account's current ChatGPT plan was proven not to include. */
+export type CodexPlanExcludedModel = {
+    /** Product model id, for example `codex/gpt-6-sol`. */
+    model: string;
+    /** Display name, for example "GPT-6 Sol". */
+    label: string;
+    excludedAt: string;
+    retryAfter: string;
+};
 /** One connected Codex (ChatGPT) account in a workspace (multi-account P1). Metadata only. */
 export type CodexAccount = {
     id: string;
+    source?: "workspace" | "organization";
     chatgptAccountId?: string | null;
     label?: string | null;
     email?: string | null;
     plan?: string | null;
+    /** When the provider last confirmed `plan` (connect, token refresh, or usage read). */
+    planCheckedAt?: string | null;
+    /** Plan before the most recent observed plan change, and when that change was seen. */
+    planChangedFrom?: string | null;
+    planChangedAt?: string | null;
+    /**
+     * Models the current plan was proven not to include. Each is skipped by
+     * automatic selection until `retryAfter` (one request then re-checks it), or
+     * until a different plan is observed, for example after refreshing usage.
+     */
+    planExcludedModels?: CodexPlanExcludedModel[];
     status: "active" | "needs_relogin" | "error";
     active: boolean;
     expiresAt?: string | null;
@@ -2104,6 +3070,12 @@ export type CodexAccountOverview = {
         credits: CodexResetCredit[];
     };
     canRedeem: boolean;
+    /** Secret-free reason redemption is owner-actionable or view-only. */
+    redemptionAccess: {
+        ownership: "current_human" | "unowned" | "different_human" | "managed_human_unavailable";
+        /** A direct managed-cookie admin may claim only an unowned same-provider row by reconnecting. */
+        canClaimUnownedViaReconnect: boolean;
+    };
     /** Owning managed-cookie human may replay durable completion without a healthy provider token. */
     canResumeRedemption: boolean;
     /** Durable owner-scoped ambiguity/completion discovery; never redemption authority for agents. */
@@ -2129,6 +3101,7 @@ export type CodexRotationSettings = {
 export type CodexAccountsResponse = {
     accounts: CodexAccount[];
     activeAccountId: string | null;
+    source?: WorkspaceCodexSubscriptionSource;
     /** Added by Apps-aware servers; absent on older same-major deployments. */
     apps?: {
         available: boolean;
@@ -2139,6 +3112,18 @@ export type CodexAccountsResponse = {
     };
     settings: CodexRotationSettings;
 };
+export type OrganizationCodexAccountsResponse = Omit<CodexAccountsResponse, "apps" | "source">;
+/** Session-authorized choices: the accepted pool for a capacity wait, otherwise
+ * the current pool for the next turn. Current execution may use another pool. */
+export type SessionCodexAccountsResponse = Omit<CodexAccountsResponse, "apps" | "source"> & {
+    currentSelection: {
+        credentialId: string | null;
+        waiting: boolean;
+    } | null;
+    currentAccount: CodexAccount | null;
+    pinnedAccountId: string | null;
+    lastAccountId: string | null;
+};
 export type CodexAppsUpdate = {
     credentialId: string | null;
     version: number;
@@ -2169,6 +3154,86 @@ export type CodexConnectPoll = {
     accountId?: string;
     isActive?: boolean;
 };
+/** Explicit authority of one connected SuperGrok/xAI subscription account. */
+export type SuperGrokAccountScope = "workspace" | "user" | "organization";
+/** Metadata-only connected SuperGrok account. Secret OAuth material never crosses the API. */
+export type SuperGrokAccount = {
+    id: string;
+    plan?: string | null;
+    scope: SuperGrokAccountScope;
+    subject: string;
+    email?: string | null;
+    label?: string | null;
+    status: "active" | "needs_relogin" | "error";
+    active: boolean;
+    expiresAt?: string | null;
+    lastRefreshAt?: string | null;
+    lastError?: string | null;
+    allocatorEnabled: boolean;
+    allocatorVersion: number;
+    allocatorUpdatedAt?: string | null;
+    exhaustedUntil?: string | null;
+    quota?: {
+        usedPercent: number | null;
+        periodStart: string | null;
+        periodEnd: string | null;
+        subscriptionTier: string | null;
+        checkedAt: string | null;
+    } | null;
+};
+export type SuperGrokRotationSettings = {
+    rotationEnabled: boolean;
+    rotationStrategy: "sharded";
+    activeCredentialId: string | null;
+};
+/** GET /supergrok/accounts — visible accounts plus the workspace active pointer. */
+export type SuperGrokAccountsResponse = {
+    source?: "workspace" | "user" | "organization";
+    organizationId?: string;
+    accounts: SuperGrokAccount[];
+    activeAccountId: string | null;
+    settings: SuperGrokRotationSettings;
+};
+export type SuperGrokConnectionStatus = {
+    connected: boolean;
+    valid?: boolean;
+    accountCount?: number;
+    models?: ClientModel[];
+    activeAccount?: {
+        id: string;
+        label?: string | null;
+        subject?: string | null;
+        scope: SuperGrokAccountScope;
+    } | null;
+};
+/** Workspace is the deliberately simple/default connection authority. */
+export type SuperGrokConnectStart = {
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string | null;
+    intervalSeconds: number;
+    expiresInSeconds: number;
+    scope: SuperGrokAccountScope;
+    state: string;
+};
+export type SuperGrokConnectPoll = {
+    status: "pending" | "slow_down";
+    intervalSeconds?: number;
+} | {
+    status: "expired" | "denied";
+} | {
+    status: "connected";
+    accountId: string;
+    scope: SuperGrokAccountScope;
+    isActive: boolean;
+    email?: string | null;
+};
+export type SuperGrokAllocatorUpdate = {
+    allocatorEnabled: boolean;
+    allocatorVersion: number;
+    allocatorUpdatedAt: string | null;
+    changed: boolean;
+};
 /** Remaining usage/limits for one account. `usage` is the normalized P2 payload. */
 export type CodexUsage = {
     status: "ok" | "limit_reached" | "error" | "no-data";
@@ -2193,8 +3258,17 @@ export type ClientAuthConfig = {
 } | {
     mode: "managedSession";
     session: "cookie";
+    /** Defaults to true when omitted by an older deployment. */
+    emailVerificationRequired?: boolean;
+    /** Configured managed sign-in providers; omitted by older deployments. */
+    socialProviders?: ("google" | "github")[];
+    /**
+     * False while the deployment has paused new account creation; existing
+     * accounts can still sign in. Omitted (treat as true) by older deployments.
+     */
+    newSignupsEnabled?: boolean;
 };
-export declare const OPENGENI_API_CONTRACT_REVISION: "2026-08-social-provider-tools-v1";
+export declare const OPENGENI_API_CONTRACT_REVISION: "2026-09-plugins-and-skills-v1";
 export declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
 /** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
 export declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
@@ -2207,25 +3281,83 @@ export declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
  */
 export type ClientConfig = {
     deploymentRevision: string;
-    apiContractRevision: typeof OPENGENI_API_CONTRACT_REVISION;
+    /**
+     * The API's contract revision. Equals `OPENGENI_API_CONTRACT_REVISION` for a
+     * `"strict"` client (it throws otherwise); a `"compatible"` client may
+     * receive a newer revision from an additive deployment within its major.
+     */
+    apiContractRevision: string;
     serverVersion?: string | undefined;
+    claudeSubscriptionEnabled?: boolean | undefined;
     defaultModel: string;
     allowedModels: string[];
     models: ClientModel[];
     defaultReasoningEffort: ReasoningEffort;
     allowedReasoningEfforts: ReasoningEffort[];
+    defaultSandboxBackend?: SandboxBackend | undefined;
     mcpServers: {
         id: string;
         name: string;
     }[];
+    /** Deployment defaults and hard maximum for built-in OpenGeni session tools. */
+    firstPartyMcpTools?: {
+        default: FirstPartyMcpToolName[];
+        allowed: FirstPartyMcpToolName[];
+    } | undefined;
     fileUploads: {
         enabled: boolean;
         maxSizeBytes: number;
     };
+    /**
+     * `false` when a host's session proxy fixes the model policy
+     * (`createSessionProxyHandler({ modelSelection: false })`), so UIs hide the
+     * model picker; `true` when the host explicitly offers end users model
+     * choice (embedded stock UIs then show the picker). OpenGeni itself omits it.
+     */
+    modelSelection?: boolean | undefined;
+    /** Session proxy sandbox-path download opt-in; absent on native deployments. */
+    sandboxFiles?: boolean | undefined;
+    /**
+     * Session proxy only: the workspace the proxy resolved for this user, so a
+     * browser pointed at the proxy (`<OpenGeniChat baseUrl=... />`) needs no
+     * workspace id. Absent on native deployments and older proxies.
+     */
+    workspaceId?: string | undefined;
+    /**
+     * Session proxy capability for the embedded artifact viewer; absent on
+     * native deployments. The live socket is ticket-authenticated and reached
+     * directly; the cache partition identifies the proxied user.
+     */
+    artifacts?: {
+        editableLiveUrl: string;
+        cachePartition: {
+            accountId: string;
+            principalId: string;
+            authorizationEpoch: string;
+        };
+    } | undefined;
     /** Native browser microphone capture + server-side transcription capability. */
     voiceInput?: ClientVoiceInputConfig | undefined;
+    /**
+     * Whether the deployment offers the Jev-backed code_search agent tool and
+     * what workspaces without their own setting get (`split` = half of sessions).
+     */
+    codeSearch?: {
+        available: boolean;
+        workspaceDefault: "off" | "on" | "split";
+    } | undefined;
+    /** Agent configuration rollout and per-capability availability. */
+    agentConfig?: ClientAgentConfig | undefined;
     productAccessMode: ProductAccessMode;
+    /** Client-safe hint for whether the console should offer Stripe checkout. */
+    billingMode?: BillingMode | undefined;
+    managedAuthSessionSetMode: "legacy" | "dual" | "broker";
     auth: ClientAuthConfig;
+    /**
+     * Product documentation for a console Help link. `null` means the deployment
+     * hides the link; absent means a server that predates the field.
+     */
+    documentationUrl?: string | null | undefined;
     analytics: {
         consentRequired: boolean;
         providers: {
@@ -2241,6 +3373,13 @@ export type ClientConfig = {
             } | undefined;
         };
     };
+    /** Operator-owned legal documents the signed-out console links to, when configured. */
+    legal?: {
+        privacyPolicyUrl?: string | undefined;
+        termsOfServiceUrl?: string | undefined;
+    } | undefined;
+    /** Operator support address the console offers as a mailto link, when configured. */
+    supportEmail?: string | undefined;
     structuredServices: {
         fileSystem: boolean;
         git: boolean;
@@ -2250,6 +3389,7 @@ export type ClientConfig = {
 /** Client-safe voice-input capability projection. */
 export type ClientVoiceInputConfig = {
     available: boolean;
+    providers?: VoiceInputProviderId[] | undefined;
     maxDurationSeconds: number;
     maxSizeBytes: number;
     acceptedMimeTypes: string[];
@@ -2334,11 +3474,43 @@ export type AccessGrant = {
     subjectId: string;
     subjectLabel?: string | undefined;
     permissions: Permission[];
+    /** Explicit policies never expand `workspace:admin` into unselected permissions. */
+    permissionMode?: "legacy" | "explicit" | undefined;
     principalKind?: AccessPrincipalKind | undefined;
     metadata?: Record<string, unknown> | undefined;
     serviceInitiator?: ServiceTurnInitiator | undefined;
     serviceInitiatorContext?: ServiceTurnInitiatorContext | undefined;
 };
+/**
+ * Authority of a directly used organization or workspace API key, separate
+ * from the caller's account and workspace grants. Full organization keys can
+ * provision shared workspaces, external members, and sessions through `asUser`;
+ * those user requests additionally need the user's live membership.
+ * Organization-key scope excludes Personal workspaces. Neither key kind bypasses
+ * session visibility or the explicit `secrets:read` permission requirement.
+ */
+export type AccessCredential = {
+    kind: "organization_api_key" | "workspace_api_key";
+    /** Organization keys only; omitted for workspace keys. */
+    access?: OrganizationApiKeyAccess | undefined;
+    /** The key's organization id. */
+    accountId: string;
+    /** Null for an organization key; `workspaceScope` selects shared workspaces, never Personal. */
+    workspaceId: string | null;
+    /**
+     * Effective workspace permissions, with admin expansion only for legacy keys. Excludes
+     * account-only permissions and includes `secrets:read` only when explicitly
+     * granted. Explicit policies grant exactly their selected permissions.
+     */
+    effectiveWorkspacePermissions: Permission[];
+    /** Organization keys only; the preset label never adds permissions. */
+    policy?: OrganizationAccessPolicy | undefined;
+    /** Organization keys only; omitted on older servers. */
+    workspaceScope?: OrganizationWorkspaceScope | undefined;
+    /** Plain-language explanation of the key's scope and limits. */
+    note: string;
+};
+/** Caller identity, grants, defaults, and optional direct API-key authority. */
 export type AccessContext = {
     mode: ProductAccessMode;
     subjectId: string;
@@ -2347,10 +3519,415 @@ export type AccessContext = {
     workspaceGrants: AccessGrant[];
     defaultAccountId: string | null;
     defaultWorkspaceId: string | null;
+    /**
+     * Direct API-key authority; omitted for `asUser`/external actors, humans,
+     * delegated tokens, other caller contexts, and older servers. Existing grants
+     * are unchanged. Full organization keys can provision shared workspaces,
+     * external members, and `asUser` sessions; user requests still need live
+     * membership. Organization-key scope excludes Personal workspaces. Neither key
+     * kind bypasses session visibility or the explicit `secrets:read` requirement.
+     */
+    credential?: AccessCredential | undefined;
+};
+export type ManagedOrganizationMembership = {
+    id: string;
+    organizationId: string;
+    status: "active";
+    personalWorkspaceId: string;
+};
+export type ListManagedOrganizationMembershipsResponse = {
+    memberships: ManagedOrganizationMembership[];
+};
+export type UserResourceKind = "connection" | "document" | "variable_set" | "rig" | "connected_machine";
+export type UserResourceGrantAction = "connection.use" | "document.read" | "variable_set.use" | "rig.use" | "connected_machine.use";
+export type UserResourceAuthorityGrant = {
+    grantId: string;
+    targetWorkspaceId: string;
+    targetSessionId: string | null;
+    action: UserResourceGrantAction;
+    mode: "once" | "session" | "always";
+    context: "user_private" | "workspace_shared";
+    authorityEpoch: number | null;
+    generation: number;
+    status: "active" | "consumed" | "revoked" | "expired";
+    expiresAt: string | null;
+    delegation: UserResourceDelegation;
+};
+export type UserResourceAuthoritySummary = {
+    authorityId: string;
+    resourceKind: UserResourceKind;
+    resourceId: string;
+    originWorkspaceId: string | null;
+    generation: number;
+    status: "active" | "retained" | "revoked";
+    grants: UserResourceAuthorityGrant[];
+};
+export type ListUserResourceAuthoritiesOptions = {
+    resourceKind: Exclude<UserResourceKind, "connection">;
+    cursor?: string | undefined;
+    limit?: number | undefined;
+};
+export type ListUserResourceAuthoritiesResponse = {
+    scope: "user";
+    authorities: UserResourceAuthoritySummary[];
+    nextCursor: string | null;
+};
+export type IssueUserResourceGrantRequest = {
+    scope: "user";
+    resourceKind: Exclude<UserResourceKind, "connection">;
+    mode: "session";
+    context: "user_private" | "workspace_shared";
+    sessionId: string;
+    expectedAuthorityEpoch: number;
+    workspaceSharedAcknowledged?: boolean | undefined;
+} | {
+    scope: "user";
+    resourceKind: Exclude<UserResourceKind, "connection">;
+    mode: "always";
+    context: "user_private" | "workspace_shared";
+    sessionId?: null | undefined;
+    expectedAuthorityEpoch?: null | undefined;
+    workspaceSharedAcknowledged?: boolean | undefined;
+};
+export type UserResourceGrantMutationResponse = {
+    scope: "user";
+    grant: UserResourceAuthorityGrant;
+};
+export type RevokeUserResourceGrantResponse = {
+    scope: "user";
+    grant: {
+        grantId: string;
+        generation: number;
+        status: "revoked";
+        revokedAt: string;
+    };
+};
+export type OrganizationMembershipRole = "owner" | "admin" | "member";
+export type WorkspaceMemberRole = "viewer" | "member" | "admin" | "custom";
+export type AssignableWorkspaceMemberRole = "viewer" | "member" | "admin";
+export type OrganizationUserSetupDelivery = {
+    id: string;
+    state: "pending" | "sent" | "failed" | "outcome_unknown" | "revoked";
+    attemptCount: number;
+    revision: number;
+    errorClass: string | null;
+    retryState: "available" | "reconciliation_required" | "unavailable";
+    sentAt: string | null;
+    updatedAt: string;
+};
+export type OrganizationInvitation = {
+    id: string;
+    organizationId: string;
+    organizationName: string | null;
+    targetEmail: string;
+    targetName: string | null;
+    initialWorkspaceIds: string[];
+    role: OrganizationMembershipRole;
+    status: "pending" | "accepted" | "revoked" | "expired";
+    revision: number;
+    expiresAt: string;
+    acceptedMembershipId: string | null;
+    createdAt: string;
+    updatedAt: string;
+    delivery: OrganizationUserSetupDelivery | null;
+};
+export type OrganizationMember = {
+    id: string;
+    organizationId: string;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    role: OrganizationMembershipRole;
+    status: "provisioning" | "active" | "suspended" | "revoked";
+    authorizationRevision: number;
+    personalWorkspaceId: string | null;
+    revokedAt: string | null;
+    personalRetentionUntil: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationAdministrationMemberWorkspaceAccess = {
+    workspaceId: string;
+    workspaceName: string;
+    membershipId: string;
+    role: WorkspaceMemberRole;
+    updatedAt: string;
+};
+export type OrganizationAdministrationMember = {
+    id: string;
+    organizationId: string;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    role: OrganizationMembershipRole;
+    status: "provisioning" | "active" | "suspended" | "revoked";
+    authorizationRevision: number;
+    sharedWorkspaceAccess: OrganizationAdministrationMemberWorkspaceAccess[];
+    revokedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationSummary = {
+    id: string;
+    name: string;
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationWorkspaceAccessMember = {
+    membershipId: string;
+    organizationMembershipId: string | null;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    subjectLabel: string | null;
+    principalKind: "human" | "service";
+    organizationRole: OrganizationMembershipRole | null;
+    role: WorkspaceMemberRole;
+    permissions: string[];
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationWorkspaceAccess = {
+    id: string;
+    name: string;
+    slug: string | null;
+    createdAt: string;
+    updatedAt: string;
+    members: OrganizationWorkspaceAccessMember[];
+};
+export type OrganizationAdministrationOverview = {
+    organization: OrganizationSummary;
+    roles: OrganizationWorkspaceRoleDefinition[];
+    workspaces: OrganizationWorkspaceAccess[];
+};
+export type OrganizationWorkspaceRoleDefinition = {
+    role: AssignableWorkspaceMemberRole;
+    label: string;
+    description: string;
+    permissions: Permission[];
+};
+export type OrganizationPrivateSessionSettings = {
+    organizationId: string;
+    enabled: boolean;
+    available: boolean;
+    version: number;
+    updatedAt: string;
+    changed?: boolean;
+};
+export type CreateOrganizationWorkspaceRequest = {
+    name: string;
+    operationId: string;
+};
+export type UpdateOrganizationWorkspaceRequest = {
+    name: string;
+    expectedUpdatedAt: string;
+    operationId: string;
+};
+export type PutOrganizationWorkspaceMemberRequest = {
+    role: AssignableWorkspaceMemberRole;
+    expectedUpdatedAt: string | null;
+    operationId: string;
+} | {
+    role: "custom";
+    permissions: Permission[];
+    expectedUpdatedAt: string | null;
+    operationId: string;
+};
+export type RevokeOrganizationWorkspaceMemberRequest = {
+    expectedUpdatedAt: string;
+    operationId: string;
+};
+export type RevokeOrganizationWorkspaceMemberResponse = {
+    removed: boolean;
+    replay: boolean;
+};
+export type CreateOrganizationRequest = {
+    name: string;
+    operationId: string;
+};
+export type CreateOrganizationResponse = {
+    organization: OrganizationSummary;
+    workspaceId: string;
+};
+export type CreateAdditionalOrganizationRequest = {
+    name: string;
+    workspaceName: string;
+    operationId: string;
+};
+export type CreateAdditionalOrganizationResponse = {
+    organization: OrganizationSummary;
+    workspaceId: string;
+    personalWorkspaceId: string;
+};
+export type UpdateOrganizationNameRequest = {
+    name: string;
+    expectedUpdatedAt: string;
+    operationId: string;
+};
+export type UpdateOrganizationPrivateSessionSettingsRequest = {
+    enabled: boolean;
+    expectedVersion: number;
+    operationId: string;
+};
+export type OrganizationRetentionPolicy = {
+    organizationId: string;
+    mode: "retain" | "delete_after";
+    retentionDays: number | null;
+    version: number;
+    updatedAt: string;
+};
+export type OrganizationRecoveryPolicyState = "pending_acceptance" | "active" | "degraded" | "superseded" | "disabled";
+export type OrganizationRecoveryOperationState = "collecting" | "cooling" | "executed" | "cancelled" | "expired" | "superseded";
+export type OrganizationRecoveryUnavailableReason = "no_policy" | "pending_acceptance" | "degraded" | "disabled" | "identity_unavailable";
+export type OrganizationRecoveryMemberSummary = {
+    membershipId: string;
+    name: string | null;
+    email: string | null;
+};
+export type OrganizationRecoveryCustodian = OrganizationRecoveryMemberSummary & {
+    ordinal: number;
+    enrollmentState: "pending_acceptance" | "accepted" | "ineligible";
+    acceptedAt: string | null;
+};
+export type OrganizationRecoveryPolicy = {
+    id: string;
+    organizationId: string;
+    revision: number;
+    state: OrganizationRecoveryPolicyState;
+    custodians: OrganizationRecoveryCustodian[];
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationRecoveryApproval = OrganizationRecoveryMemberSummary & {
+    approvedAt: string;
+};
+export type OrganizationRecoveryOperation = {
+    id: string;
+    organizationId: string;
+    policyId: string;
+    policyRevision: number;
+    revision: number;
+    state: OrganizationRecoveryOperationState;
+    target: OrganizationRecoveryMemberSummary;
+    approvals: OrganizationRecoveryApproval[];
+    approvalCount: number;
+    quorumAt: string | null;
+    executableAt: string | null;
+    expiresAt: string;
+    executedAt: string | null;
+    cancelledAt: string | null;
+    notificationJournaled: boolean;
+    createdAt: string;
+    updatedAt: string;
+};
+export type OrganizationRecoveryCapabilities = {
+    configure: boolean;
+    accept: boolean;
+    disable: boolean;
+    start: boolean;
+    approve: boolean;
+    cancel: boolean;
+    execute: boolean;
+};
+export type OrganizationRecoveryOverview = {
+    organizationId: string;
+    availability: "available" | "recovery_unavailable";
+    unavailableReason: OrganizationRecoveryUnavailableReason | null;
+    recentReauthenticationAt: string | null;
+    eligibleMembers: OrganizationRecoveryMemberSummary[];
+    policy: OrganizationRecoveryPolicy | null;
+    operation: OrganizationRecoveryOperation | null;
+    capabilities: OrganizationRecoveryCapabilities;
+};
+export type ConfigureOrganizationRecoveryPolicyRequest = {
+    custodianMembershipIds: [string, string, string];
+    expectedPolicyRevision: number;
+    operationId: string;
+};
+export type AcceptOrganizationRecoveryCustodyRequest = {
+    expectedPolicyRevision: number;
+    operationId: string;
+};
+export type DisableOrganizationRecoveryPolicyRequest = AcceptOrganizationRecoveryCustodyRequest;
+export type StartOrganizationRecoveryOperationRequest = {
+    targetMembershipId: string;
+    expectedPolicyRevision: number;
+    operationId: string;
+};
+export type OrganizationRecoveryOperationCommandRequest = {
+    expectedOperationRevision: number;
+    operationId: string;
+};
+export type OrganizationRecoveryMutationResponse = {
+    replay: boolean;
+    overview: OrganizationRecoveryOverview;
+};
+export type CreateOrganizationInvitationRequest = {
+    email: string;
+    name?: string;
+    initialWorkspaceIds?: string[];
+    role?: OrganizationMembershipRole;
+    expiresAt: string;
+    operationId: string;
+};
+export type AcceptOrganizationInvitationRequest = {
+    expectedRevision: number;
+    operationId: string;
+};
+export type RevokeOrganizationInvitationRequest = AcceptOrganizationInvitationRequest;
+export type PreviewOrganizationUserSetupRequest = {
+    token: string;
+};
+export type OrganizationUserSetupPreview = {
+    state: "unavailable" | "expired" | "revoked" | "completed";
+} | {
+    state: "pending";
+    organizationId: string;
+    organizationName: string;
+    targetEmail: string;
+    targetName: string | null;
+    organizationRole: OrganizationMembershipRole;
+    sharedWorkspaceAccess: Array<{
+        workspaceId: string;
+        workspaceName: string;
+        role: AssignableWorkspaceMemberRole;
+    }>;
+    expiresAt: string;
+};
+export type RetryOrganizationUserSetupDeliveryRequest = {
+    operationId: string;
+};
+export type UpdateOrganizationMemberRequest = {
+    kind: "change_role" | "suspend" | "reactivate" | "offboard";
+    role?: OrganizationMembershipRole;
+    expectedAuthorizationRevision: number;
+    operationId: string;
+    reason?: string;
+};
+export type UpdateOrganizationRetentionPolicyRequest = {
+    mode: "retain" | "delete_after";
+    retentionDays: number | null;
+    expectedVersion: number;
+    operationId: string;
+};
+export type ListOrganizationInvitationsPageResponse = {
+    invitations: OrganizationInvitation[];
+    nextCursor: string | null;
+};
+export type ListOrganizationMembersResponse = {
+    members: OrganizationAdministrationMember[];
+};
+export type ListOrganizationAdministrationMembersResponse = {
+    members: OrganizationAdministrationMember[];
+};
+export type AcceptOrganizationInvitationResponse = {
+    invitation: OrganizationInvitation;
+    membership: OrganizationMember;
 };
 export type Workspace = {
     id: string;
     accountId: string;
+    kind: "personal" | "shared";
     name: string;
     slug: string | null;
     externalSource: string | null;
@@ -2358,6 +3935,8 @@ export type Workspace = {
     agentInstructions: string | null;
     settings: Record<string, unknown>;
     inferenceControl: {
+        timer?: WorkspacePauseTimer | null | undefined;
+        serverTime?: string | undefined;
         state: "active" | "paused";
         revision: number;
         reason: string | null;
@@ -2370,6 +3949,14 @@ export type Workspace = {
 };
 export type WorkspaceSettings = {
     memoryEnabled?: boolean | undefined;
+    /** Reversible Memory V1 prompt composition rollout. */
+    memoryPromptMode?: "legacy_standing" | "retrieval_only" | undefined;
+    /** Model policy inherited by new chats and scheduled tasks. */
+    sessionDefaults?: WorkspaceSessionDefaults | undefined;
+    /** Exact capability selection inherited by new top-level sessions. */
+    sessionToolDefaults?: WorkspaceSessionToolDefaults | undefined;
+    /** Allowlisted sandbox image for new managed boxes; absent uses the deployment image. */
+    defaultSandboxImage?: string | null | undefined;
     voiceInput?: WorkspaceVoiceInputSettings | undefined;
     transcription?: WorkspaceTranscriptionPolicy | undefined;
     maxNestedAgentDepth?: number | null | undefined;
@@ -2377,9 +3964,22 @@ export type WorkspaceSettings = {
     codexCompactionDefault?: "remote_v2" | "portable" | undefined;
     /** Whether agents may invoke the built-in structured human-input tool. */
     agentHumanInputEnabled?: boolean | undefined;
+    /** Whether agents get the Jev-backed code_search tool; absent or null follows the deployment. */
+    codeSearchEnabled?: boolean | null | undefined;
     slackReactionSummon?: WorkspaceSlackReactionSummonSettings | undefined;
+    /** Slack orchestration notices; both default off when absent or invalid. */
+    slackOrchestrationNotices?: WorkspaceSlackOrchestrationNoticeSettings | undefined;
     [key: string]: unknown;
 };
+export type WorkspaceSessionDefaults = {
+    model: string;
+    reasoningEffort: ReasoningEffort;
+};
+export type WorkspaceSessionToolDefaults = {
+    inheritConnectedMcpServers?: boolean | undefined;
+    mcpServerIds?: string[];
+    firstPartyMcpTools?: FirstPartyMcpToolName[];
+};
 export type WorkspaceSlackReactionSummonSettings = {
     enabled: boolean;
     emoji: "genie";
@@ -2390,6 +3990,16 @@ export type WorkspaceSlackReactionSummonSettings = {
         channelIds: string[];
     };
 };
+/**
+ * Per-workspace switches for the two Slack orchestration notices. Both are off
+ * unless the workspace explicitly turned them on.
+ */
+export type WorkspaceSlackOrchestrationNoticeSettings = {
+    /** Post a pointer card when a child worker blocks on input or an approval. */
+    childRequiresAction?: boolean | undefined;
+    /** Post one line when a goal pauses for budget or the continuation cap. */
+    goalPaused?: boolean | undefined;
+};
 export type SlackReactionChannel = {
     id: string;
     name: string | null;
@@ -2399,17 +4009,51 @@ export type SlackReactionChannelListResponse = {
     channels: SlackReactionChannel[];
     nextCursor: string | null;
 };
+export type SlackChannelRoute = {
+    slackChannelId: string;
+    targetWorkspaceId: string;
+    targetWorkspaceName: string | null;
+    source: "picker" | "admin";
+    updatedAt: string;
+};
+export type SlackChannelRouteListResponse = {
+    routes: SlackChannelRoute[];
+    routingEnabled: boolean;
+};
+export type UpdateSlackChannelRoutesRequest = {
+    connectionId: string;
+    routes: Array<{
+        slackChannelId: string;
+        targetWorkspaceId: string | null;
+    }>;
+};
+export type VoiceInputProviderId = "supergrok-subscription" | "codex-subscription" | "openai" | "azure-openai";
 export type WorkspaceVoiceInputSettings = {
     enabled: boolean;
+    preferredProvider?: VoiceInputProviderId | null | undefined;
+    fallbackEnabled?: boolean | undefined;
 };
 export type UpdateWorkspaceSettingsRequest = {
     memoryEnabled?: boolean | undefined;
+    memoryPromptMode?: "legacy_standing" | "retrieval_only" | undefined;
+    sessionDefaults?: WorkspaceSessionDefaults | undefined;
+    sessionToolDefaults?: {
+        mcpServerIds?: string[] | null;
+        firstPartyMcpTools?: FirstPartyMcpToolName[] | null;
+        inheritConnectedMcpServers?: boolean | null;
+    } | undefined;
     voiceInput?: WorkspaceVoiceInputSettings | undefined;
     transcription?: WorkspaceTranscriptionPolicy | undefined;
     maxNestedAgentDepth?: number | null | undefined;
     codexCompactionDefault?: "remote_v2" | "portable" | undefined;
     agentHumanInputEnabled?: boolean | undefined;
+    codeSearchEnabled?: boolean | null | undefined;
     slackReactionSummon?: WorkspaceSlackReactionSummonSettings | undefined;
+    slackOrchestrationNotices?: WorkspaceSlackOrchestrationNoticeSettings | undefined;
+    /** One of `listWorkspaceSandboxImages().images`, or null for the deployment image. */
+    defaultSandboxImage?: string | null | undefined;
+    /** Agent defaults for new sessions; null clears. Requires the admission switch. */
+    sessionAgentDefaults?: WorkspaceAgentDefaults | null | undefined;
     [key: string]: unknown;
 };
 export type SetWorkspaceDefaultRigRequest = {
@@ -2423,18 +4067,76 @@ export type CreateWorkspaceRequest = {
     externalId?: string | undefined;
     agentInstructions?: string | null | undefined;
 };
+export type EnsureWorkspaceRequest = {
+    /**
+     * Owning organization id. An organization API key may omit it and the
+     * workspace is created in the key's own organization; every other caller
+     * must send it.
+     */
+    accountId?: string | undefined;
+    externalSource: string;
+    externalId: string;
+    name: string;
+    slug?: string | undefined;
+    agentInstructions?: string | null | undefined;
+};
+export type EnsureWorkspaceResponse = {
+    workspace: Workspace;
+    created: boolean;
+};
 export type UpdateWorkspaceRequest = {
     name?: string | undefined;
     slug?: string | null | undefined;
     agentInstructions?: string | null | undefined;
 };
+/**
+ * Legacy organization API key access tier, derived by the server from the key's
+ * permissions: `full` can provision shared workspaces, external members, and
+ * `asUser` sessions (user requests additionally need live membership);
+ * `read` only inventories shared workspaces and reads their sessions, events,
+ * and files. `developer_setup` configures shared workspaces and budgets without
+ * API-key management or credential delegation; its default expiry is 24 hours.
+ * Organization-key scope excludes Personal workspaces and bypasses neither
+ * session visibility nor the explicit `secrets:read` permission requirement.
+ */
+export type OrganizationApiKeyAccess = "full" | "read" | "developer_setup";
+/** Informational preset label; the server recomputes it from explicit permissions. */
+export type OrganizationAccessPreset = "read_only" | "full" | "custom";
+/** Organization-key scope always excludes Personal workspaces. */
+export type OrganizationWorkspaceScope = {
+    kind: "all";
+} | {
+    kind: "selected";
+    /** Up to 500 unique shared-workspace IDs in the same organization. Empty reaches none. */
+    workspaceIds: string[];
+};
+export type OrganizationAccessPolicy = {
+    preset: OrganizationAccessPreset;
+    /** Exact grants, including `workspace:admin` individually; no implicit wildcard. */
+    permissions: Permission[];
+    workspaceScope: OrganizationWorkspaceScope;
+};
+export type OrganizationActor = "user" | "organization";
 export type ApiKey = {
     id: string;
     accountId: string;
     workspaceId: string | null;
     name: string;
+    description: string | null;
     prefix: string;
     permissions: Permission[];
+    /** Organization keys only; omitted for workspace-scoped keys. */
+    access?: OrganizationApiKeyAccess | undefined;
+    policy?: OrganizationAccessPolicy | undefined;
+    workspaceScope?: OrganizationWorkspaceScope | undefined;
+    /** Legacy keys retain their historical workspace-admin wildcard. */
+    permissionMode?: "legacy" | "explicit" | undefined;
+    /** Organization keys: the service account that holds the key. */
+    serviceAccount?: {
+        id: string;
+        name: string;
+        role: OrganizationServiceAccountRole;
+    } | null | undefined;
     expiresAt: string | null;
     revokedAt: string | null;
     lastUsedAt: string | null;
@@ -2443,6 +4145,7 @@ export type ApiKey = {
 };
 export type CreateApiKeyRequest = {
     name: string;
+    description?: string | undefined;
     permissions: Permission[];
     expiresAt?: string | undefined;
 };
@@ -2451,8 +4154,136 @@ export type CreateApiKeyResponse = {
     /** The full secret token — shown once at creation, never returned again. */
     token: string;
 };
-export type ListApiKeysResponse = {
-    apiKeys: ApiKey[];
+export type CreateOrganizationApiKeyRequest = {
+    name: string;
+    description?: string | undefined;
+    expiresAt?: string | undefined;
+    /** With no policy, omitted means legacy `full`. */
+    access?: OrganizationApiKeyAccess | undefined;
+    /** Optional creation alias for the developer_setup access tier. */
+    preset?: "developer_setup" | undefined;
+    /** Explicit grants and shared-workspace scope; do not combine with legacy access/preset. */
+    policy?: OrganizationAccessPolicy | undefined;
+    /** The service account that holds the key; omitted creates one named after the key. */
+    serviceAccountId?: string | undefined;
+};
+/** The server requires at least one change. Omitted fields stay unchanged. */
+export type UpdateOrganizationApiKeyRequest = {
+    name?: string | undefined;
+    description?: string | null | undefined;
+    /** Replaces the policy and transitions a legacy key to explicit permission semantics. */
+    policy?: OrganizationAccessPolicy | undefined;
+};
+export type ListApiKeysResponse = {
+    apiKeys: ApiKey[];
+};
+/** Up to admin, never owner. A member's keys never hold administrator permissions. */
+export type OrganizationServiceAccountRole = "admin" | "member";
+/** An organization identity with no person behind it; it holds organization API keys. */
+export type OrganizationServiceAccount = {
+    id: string;
+    organizationId: string;
+    name: string;
+    description: string | null;
+    role: OrganizationServiceAccountRole;
+    /** Keys that are not revoked, including expired ones. */
+    activeKeyCount: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export type ListOrganizationServiceAccountsResponse = {
+    serviceAccounts: OrganizationServiceAccount[];
+};
+export type CreateOrganizationServiceAccountRequest = {
+    name: string;
+    description?: string | undefined;
+    /** Defaults to member. Only an organization administrator can choose admin. */
+    role?: OrganizationServiceAccountRole | undefined;
+};
+/** The server requires at least one change. Making it a member narrows its keys. */
+export type UpdateOrganizationServiceAccountRequest = {
+    name?: string | undefined;
+    description?: string | null | undefined;
+    role?: OrganizationServiceAccountRole | undefined;
+};
+/** An outside agent a person connected to the organization MCP server. */
+export type OrganizationMcpConnection = {
+    id: string;
+    /** The name the client registered with ("Claude Code"). */
+    clientName: string;
+    /** Where its sign-in returned to ("127.0.0.1:4567", "cursor.com"). */
+    clientHost: string | null;
+    /** Signed-in agents act as the person who connected them. */
+    actor: "user";
+    connectedBy: {
+        subjectId: string;
+        name: string;
+    };
+    /** What it can do and where. The person's own live access still caps it. */
+    policy: OrganizationAccessPolicy;
+    createdAt: string;
+    lastUsedAt: string | null;
+    expiresAt: string;
+    revokedAt: null;
+};
+export type OrganizationMcpConnectionList = {
+    connections: OrganizationMcpConnection[];
+    /** Owners and admins see and can disconnect everyone's agents. */
+    canManageAll: boolean;
+};
+export type UpdateOrganizationMcpConnectionRequest = {
+    access: OrganizationAccessPolicy;
+};
+/** A pending agent sign-in, as the web app's sign-in page shows it. */
+export type McpConnectionRequest = {
+    client: {
+        name: string;
+        host: string | null;
+    };
+    person: {
+        name: string | null;
+    };
+    organizations: Array<{
+        id: string;
+        name: string;
+        workspaces: Array<{
+            id: string;
+            name: string;
+            personal: boolean;
+        }>;
+        /** Everything the person can do there; the most an agent can get. */
+        grantable: Permission[];
+    }>;
+    defaultOrganizationId: string | null;
+};
+export type McpConnectionDecision = {
+    decision: "deny";
+} | {
+    decision: "approve";
+    organizationId: string;
+    access: OrganizationAccessPolicy;
+};
+export type ListOrganizationSessionsOptions = {
+    /** Page size, 1..200; the server default is 50. */
+    limit?: number | undefined;
+    /** `nextCursor` from the previous page. */
+    cursor?: string | undefined;
+    /** Keep only sessions labelled with this exact end user. */
+    scopeSubjectId?: string | undefined;
+    /** Keep only sessions in this exact lifecycle state. */
+    status?: SessionStatus | undefined;
+    signal?: AbortSignal | undefined;
+};
+/**
+ * One page of `GET /v1/organizations/:organizationId/sessions`. Rows come from
+ * every shared workspace the caller may read, each carrying its
+ * `workspaceId`; personal workspaces are never included and private sessions
+ * stay invisible. A page may be shorter than `limit` while `nextCursor` is
+ * still set, so follow `nextCursor` until it is null.
+ */
+export type OrganizationSessionListResponse = {
+    sessions: Session[];
+    nextCursor: string | null;
 };
 export type WorkspaceMember = {
     subjectId: string;
@@ -2464,8 +4295,18 @@ export type WorkspaceMember = {
 export type ListWorkspaceMembersResponse = {
     members: WorkspaceMember[];
 };
+export type WorkspaceMemberCandidate = {
+    organizationMembershipId: string;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    organizationRole: "owner" | "admin" | "member";
+};
+export type ListWorkspaceMemberCandidatesResponse = {
+    members: WorkspaceMemberCandidate[];
+};
 export type AddWorkspaceMemberRequest = {
-    email: string;
+    organizationMembershipId: string;
     role?: string | undefined;
     permissions: Permission[];
 };
@@ -2505,8 +4346,57 @@ export type ListSlackUserLinkAccessRequestsResponse = {
 };
 export type SessionGoalStatus = "active" | "paused" | "completed";
 export type SessionGoalCreatedBy = "api" | "agent" | "scheduled_task";
+export type SessionGoalMutationPolicy = "review_changes" | "preserve_intent" | "autonomous_adaptation";
+export type SessionGoalChangeKind = "refinement" | "adaptation" | "replacement";
+export type SessionGoalRevision = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    sessionId: string;
+    goalId: string;
+    disposition: "applied" | "proposed" | "rejected";
+    changeKind: SessionGoalChangeKind;
+    baseObjectiveRevision: number;
+    resultObjectiveRevision: number | null;
+    text: string;
+    successCriteria: string | null;
+    rootConstraints: string[];
+    mutationPolicy: SessionGoalMutationPolicy;
+    rationale: string;
+    actor: "agent" | "api" | "scheduled_task";
+    actorTurnId: string | null;
+    actorAttemptId: string | null;
+    proposalId: string | null;
+    rollbackOfRevisionId: string | null;
+    createdAt: string;
+};
+export type ApplySessionGoalRevisionRequest = {
+    expectedObjectiveRevision: number;
+    rationale?: string | undefined;
+};
+export type ListSessionGoalRevisionsOptions = {
+    limit?: number | undefined;
+    before?: string | undefined;
+};
+export type ListSessionGoalRevisionsResponse = {
+    revisions: SessionGoalRevision[];
+    hasMore: boolean;
+    nextCursor: string | null;
+};
+export type RejectSessionGoalRevisionRequest = {
+    expectedObjectiveRevision: number;
+    rationale: string;
+};
+export type RejectSessionGoalRevisionResponse = {
+    revision: SessionGoalRevision;
+    replay: boolean;
+};
+export type RollbackSessionGoalRevisionRequest = {
+    expectedObjectiveRevision: number;
+    rationale: string;
+};
 export type SessionGoalContinuationState = "inactive" | "scheduled" | "running" | "blocked" | "invariant_broken";
-export type SessionGoalContinuationReason = "goal_inactive" | "wake_pending" | "continuation_pending" | "human_work_pending" | "goal_turn_running" | "human_turn_running" | "workstream_paused" | "approval_required" | "provider_backpressure" | "session_cancelled" | "system_work_pending" | "missing_obligation";
+export type SessionGoalContinuationReason = "goal_inactive" | "wake_pending" | "continuation_pending" | "human_work_pending" | "goal_turn_running" | "human_turn_running" | "workstream_paused" | "approval_required" | "provider_backpressure" | "session_cancelled" | "system_work_pending" | "held_for_input" | "backoff_pending" | "missing_obligation";
 export type SessionGoalContinuation = {
     state: SessionGoalContinuationState;
     reason: SessionGoalContinuationReason;
@@ -2514,6 +4404,8 @@ export type SessionGoalContinuation = {
     observedRevision: number;
     nextAttemptAt: string | null;
     lastError: string | null;
+    /** Agent-stated reason for a `wait_for_input` hold; null otherwise. */
+    holdReason?: string | null | undefined;
 };
 export type SessionGoal = {
     id: string;
@@ -2523,11 +4415,16 @@ export type SessionGoal = {
     status: SessionGoalStatus;
     text: string;
     successCriteria: string | null;
+    rootConstraints: string[];
+    /** Optional for older-server/source compatibility; current servers always supply this projection. */
+    reportRequirements?: SessionGoalReportRequirement[] | undefined;
     evidence: string | null;
     rationale: string | null;
     pausedReason: string | null;
     createdBy: SessionGoalCreatedBy;
     version: number;
+    objectiveRevision: number;
+    mutationPolicy: SessionGoalMutationPolicy;
     autoContinuations: number;
     noProgressStreak: number;
     maxAutoContinuations: number | null;
@@ -2540,10 +4437,21 @@ export type SessionGoal = {
 export type UpdateSessionGoalRequest = {
     status: "paused" | "active";
     rationale?: string | undefined;
+} | {
+    text: string;
+    successCriteria?: string | null | undefined;
+    rootConstraints?: string[] | undefined;
+    mutationPolicy?: SessionGoalMutationPolicy | undefined;
+    rationale: string;
+    expectedObjectiveRevision: number;
 };
 export type UpdateSessionRequest = {
     title: string;
 };
+/** Replace the complete ordered low-to-high precedence Variable Set selection. */
+export type UpdateSessionVariableSetsRequest = {
+    variableSetIds: string[];
+};
 /** Outcome of a manual /compact trigger. */
 export type CompactSessionContextResult = {
     /** pending waits for the current safe boundary; completed ran while idle. */
@@ -2585,6 +4493,10 @@ export type EffectiveSessionControl = {
         interruptionPendingCount: number;
         quiescencePendingCount: number;
     } | null;
+    backgroundCommandSettlement?: {
+        state: "stopping";
+        commandCount: number;
+    } | null | undefined;
 };
 export type SessionCommandReceipt = {
     id: string;
@@ -2598,6 +4510,7 @@ export type SessionCommandReceipt = {
     appliedDraftRevision: number | null;
     createdAt: string;
 };
+export type SessionPromptRouting = "accepted_for_execution" | "queued_for_execution" | "accepted_for_steering";
 export type ComposerDraft = {
     revision: number;
     text: string;
@@ -2605,20 +4518,38 @@ export type ComposerDraft = {
     resources: ResourceRef[];
     model: string;
     reasoningEffort: ReasoningEffort;
-    latencyMode?: LatencyMode | undefined;
+    latencyMode: LatencyMode;
     sourceTurnId: string | null;
     sourceTurnVersion: number | null;
     updatedAt: string | null;
 };
 export type NewSessionDraftOptions = {
+    agentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
+    excludedMcpServerIds?: string[] | undefined;
+    visibility?: SessionVisibility | undefined;
     sandboxBackend?: SandboxBackend | undefined;
     targetSandboxId?: string | undefined;
     workingDir?: string | undefined;
+    variableSetIds?: string[] | undefined;
     variableSetId?: string | undefined;
     rigId?: string | undefined;
     goal?: GoalSpec | undefined;
     firstPartyMcpPermissions?: Permission[] | undefined;
     firstPartyMcpTools?: FirstPartyMcpToolName[] | undefined;
+    agent?: AgentConfigRequest | undefined;
+};
+export type NewSessionSelectionHistory = {
+    /** Most-recently used project first. Null channelId is the Default project. */
+    projects: Array<{
+        channelId: string | null;
+        /** Null means the managed sandbox was used most recently in this project. */
+        targetSandboxId: string | null;
+        /** Most-recently used machine in this project first. */
+        machines: Array<{
+            sandboxId: string;
+            workingDir: string | null;
+        }>;
+    }>;
 };
 export type NewSessionDraft = {
     revision: number;
@@ -2629,8 +4560,16 @@ export type NewSessionDraft = {
     toolsProvided: boolean;
     model: string;
     reasoningEffort: ReasoningEffort;
-    latencyMode?: LatencyMode | undefined;
+    latencyMode: LatencyMode;
+    /**
+     * True when the person chose this model policy; false follows the resolved
+     * default for new chats. Absent from older servers.
+     */
+    modelProvided?: boolean | undefined;
+    /** Absent on legacy drafts; null records an explicit Default-project selection. */
+    selectedProjectChannelId?: string | null | undefined;
     options: NewSessionDraftOptions;
+    selectionHistory: NewSessionSelectionHistory;
     updatedAt: string | null;
 };
 export type SessionQueueSnapshot = {
@@ -2651,8 +4590,28 @@ export type SessionQueueSnapshot = {
 };
 export type SessionPendingInputPreview = Pick<SessionSystemUpdate, "id" | "sessionId" | "kind" | "classification" | "sourceId" | "summary" | "createdAt">;
 export type SystemUpdateClassification = "success" | "failure" | "action_required" | "info";
-export type SessionSystemUpdateKind = "scheduled_occurrence" | "goal_continuation" | "agent_message" | "agent_steer_instruction" | "child_terminal_result" | "media_generation_result";
+export type SessionSystemUpdateKind = "scheduled_occurrence" | "goal_continuation" | "agent_message" | "agent_steer_instruction" | "session_wait_timeout" | "background_command_result" | "child_terminal_result" | "media_generation_result" | "child_requires_action" | "child_requires_action_resolved" | "child_paused" | "child_waiting_capacity" | "child_progress";
 export type SessionSystemUpdateState = "pending" | "delivered" | "cancelled" | "superseded" | "failed";
+export type SessionSystemUpdatePayload = {
+    type: "session_wait_timeout";
+    waitTurnId: string;
+    deadlineAt: string;
+    reason: string;
+    [key: string]: unknown;
+} | {
+    type: "background_command_result";
+    commandId: string;
+    state: "exited" | "lost";
+    exitCode: number | null;
+    reason: string;
+    outputLocator: {
+        eventType: "sandbox.command.output.delta";
+        commandId: string;
+    };
+    [key: string]: unknown;
+} | ({
+    type: Exclude<SessionSystemUpdateKind, "session_wait_timeout" | "background_command_result">;
+} & Record<string, unknown>);
 export type SessionSystemUpdate = {
     id: string;
     sessionId: string;
@@ -2661,7 +4620,7 @@ export type SessionSystemUpdate = {
     sourceId: string;
     dedupeKey: string;
     summary: string;
-    payload: Record<string, unknown>;
+    payload: SessionSystemUpdatePayload;
     lineage: Record<string, unknown>;
     state: SessionSystemUpdateState;
     deliveredTurnId: string | null;
@@ -2669,6 +4628,56 @@ export type SessionSystemUpdate = {
     deliveredAt: string | null;
     createdAt: string;
 };
+export type SessionRetryRequest = {
+    clientEventId: string;
+    failureEventId: string;
+    model?: string;
+    reasoningEffort?: ReasoningEffort;
+    latencyMode?: LatencyMode;
+};
+export type SandboxRecoverySelection = {
+    version: 1;
+    sessionId: string;
+    sandboxGroupId: string;
+    leaseId: string;
+    routeEpoch: number;
+    authorityEpoch: number;
+    leaseEpoch: number;
+    workspaceGeneration: number;
+    archiveGeneration: number;
+    artifactId: string;
+    revision: string;
+    capturedAt: string;
+};
+export type SandboxRecoveryProjection = {
+    version: 1;
+    status: "unsupported" | "blocked" | "eligible" | "consent_accepted" | "restoring" | "restored";
+    reason: string | null;
+    checkpoint: SandboxRecoverySelection | null;
+    operationId: string | null;
+    automaticAvailable?: boolean;
+    /** What an automatic Retry does: restore `checkpoint`, or continue on a new
+     * empty workspace because no usable checkpoint survived the sandbox loss. */
+    automaticLane?: "checkpoint" | "fresh_workspace";
+    /** For a timed recovery wait: the earliest time a Retry or a new message can
+     * let OpenGeni decide again. Nothing proceeds by itself before then. */
+    availableAt?: string;
+};
+export type SandboxRecoveryRequest = {
+    operationId: string;
+    acceptHistoricalCheckpoint: true;
+    selection: SandboxRecoverySelection;
+};
+export type SandboxRecoveryResponse = {
+    outcome: "accepted" | "replayed";
+    operationId: string;
+    recovery: SandboxRecoveryProjection;
+};
+export type SessionRetryResponse = {
+    outcome: "accepted" | "replayed";
+    turnId: string;
+    failureEventId: string;
+};
 export type SessionControlResponse = {
     receipt: SessionCommandReceipt;
     effectiveControl: EffectiveSessionControl;
@@ -2677,6 +4686,19 @@ export type SessionControlResponse = {
     cancelledSessionCount: number;
     cancelledTurnCount: number;
 };
+export type WorkspacePauseTimer = {
+    id: string;
+    action: "pause" | "resume";
+    dueAt: string;
+    pauseForSeconds: number | null;
+};
+export type WorkspacePauseTimerRequest = {
+    action: "set" | "cancel";
+    pauseInSeconds?: number | undefined;
+    pauseForSeconds?: number | null | undefined;
+    clientEventId: string;
+    expectedRevision: number;
+};
 export type WorkspaceInferenceControlResponse = {
     receipt: SessionCommandReceipt;
     state: "active" | "paused";
@@ -2693,7 +4715,7 @@ export type WorkspaceControlEvent = {
     type: "workspace.control.changed";
     scope: "workspace" | "session";
     rootSessionId: string | null;
-    action: "pause" | "resume";
+    action: "pause" | "resume" | "timer_set" | "timer_cancelled";
     automatic: boolean;
     reason: string | null;
     actor: string;
@@ -2743,23 +4765,68 @@ export type DeleteSessionQueueItemRequest = {
 export type SaveComposerDraftRequest = Omit<ComposerDraft, "revision" | "sourceTurnId" | "sourceTurnVersion" | "updatedAt"> & {
     expectedRevision: number;
 };
-export type SaveNewSessionDraftRequest = Omit<NewSessionDraft, "revision" | "updatedAt"> & {
+export type SubmitComposerDraftRequest = Omit<SaveComposerDraftRequest, "expectedRevision"> & {
+    expectedDraftRevision: number;
+    clientEventId: string;
+    delivery: "send" | "steer";
+    controlEtag?: string;
+    modelContext?: string;
+    mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[];
+    connectionAccounts?: McpConnectionAccountSelection[];
+    personalResourceAttachment?: PersonalResourceAttachmentIntent;
+};
+export type SubmitComposerDraftResponse = {
+    accepted: SessionEvent;
+    turn: SessionTurn;
+    draft: ComposerDraft;
+    receipt: SessionCommandReceipt;
+    routing: SessionPromptRouting;
+    interruptionCount: number;
+    replay: boolean;
+};
+export type SaveNewSessionDraftRequest = Omit<NewSessionDraft, "revision" | "selectionHistory" | "updatedAt"> & {
     expectedRevision: number;
 };
 /** Input shape for agent config on create/update (server applies defaults). */
 export type ScheduledTaskAgentConfigInput = {
+    /**
+     * Agent configuration frozen into the schedule and used by every run;
+     * omitted runs follow the workspace's agent defaults.
+     */
+    agent?: AgentConfigRequest | undefined;
+    knowledgeSource?: Extract<ScheduledTaskAction, {
+        kind: "knowledge_source_sync";
+    }> | undefined;
     prompt: string;
     resources?: ResourceRef[] | undefined;
     tools?: ToolRef[] | undefined;
     metadata?: Record<string, unknown> | undefined;
     slackBotConnectionId?: string | undefined;
+    /** Slack channel a person chose for this task's bot posts; requires slackBotConnectionId. */
+    slackBotChannelId?: string | undefined;
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
+    executionClass?: "incident_telemetry" | undefined;
+    incidentTelemetryPreflight?: IncidentTelemetryPreflightInput | undefined;
     maxNestedAgentDepth?: number | undefined;
+    /**
+     * Seconds a run's own turn may wait on a person (tool approval or structured
+     * question, 60 s - 30 days) before the scheduler rejects the approval / skips
+     * the question as a labelled system decision. Omitted: waits indefinitely.
+     */
+    approvalTimeoutSeconds?: number | undefined;
 };
 export type CreateAgentScheduledTaskRequest = {
+    agentLearning?: {
+        scope: "workspace" | "personal";
+        settings: import("./knowledge.js").AgentLearningOverrides;
+    };
     name: string;
     schedule: ScheduledTaskScheduleSpec;
     action?: {
@@ -2767,12 +4834,19 @@ export type CreateAgentScheduledTaskRequest = {
     } | undefined;
     runMode?: ScheduledTaskRunMode | undefined;
     targetSessionId?: string | null | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     agentConfig: ScheduledTaskAgentConfigInput;
     status?: ScheduledTaskStatus | undefined;
     variableSetId?: string | null | undefined;
     /** @deprecated use variableSetId */
     environmentId?: string | null | undefined;
+    /**
+     * Sandbox Environment each run binds to; its active version is resolved per
+     * fire. Omit to resolve it once at create: the workspace default (none for a
+     * Connected Machine task), or the target session's own environment for an
+     * existing-session task. `null` means none.
+     */
     rigId?: string | null | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
@@ -2786,15 +4860,39 @@ export type CreateKnowledgeSourceSyncScheduledTaskRequest = {
     status?: ScheduledTaskStatus | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
-export type CreateScheduledTaskRequest = CreateAgentScheduledTaskRequest | CreateKnowledgeSourceSyncScheduledTaskRequest;
+/** Send a scheduled message using the destination chat’s current execution settings. */
+export type CreateSessionScheduledTaskRequest = {
+    name: string;
+    schedule: ScheduledTaskScheduleSpec;
+    prompt: string;
+    targetSessionId: string;
+    runMode?: "existing_session" | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
+    overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
+    status?: ScheduledTaskStatus | undefined;
+    metadata?: Record<string, unknown> | undefined;
+};
+export type CreateScheduledTaskRequest = CreateSessionScheduledTaskRequest | CreateAgentScheduledTaskRequest | CreateKnowledgeSourceSyncScheduledTaskRequest;
 export type UpdateScheduledTaskRequest = {
+    expectedExecutionDigest?: string | undefined;
+    adoptSessionSettings?: true | undefined;
+    /** Lossless message edit. All omitted configuration is preserved. */
+    prompt?: string | undefined;
     name?: string | undefined;
     schedule?: ScheduledTaskScheduleSpec | undefined;
     runMode?: ScheduledTaskRunMode | undefined;
     targetSessionId?: string | null | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     action?: ScheduledTaskAction | undefined;
     agentConfig?: ScheduledTaskAgentConfigInput | undefined;
+    /** Lossless model defaults patch; cannot be combined with agentConfig replacement.
+     * Existing target/reusable sessions retain their own model and reasoning. */
+    agentConfigPatch?: {
+        prompt?: string | undefined;
+        model?: string | undefined;
+        reasoningEffort?: ReasoningEffort | undefined;
+    } | undefined;
     status?: ScheduledTaskStatus | undefined;
     variableSetId?: string | null | undefined;
     /** @deprecated use variableSetId */
@@ -2832,6 +4930,8 @@ export type ScheduledTaskRun = {
     accountId: string;
     workspaceId: string;
     taskId: string;
+    taskAuthorityRevision: number | null;
+    taskExecutionDigest: string | null;
     status: ScheduledTaskRunStatus;
     triggerType: ScheduledTaskTriggerType;
     scheduledAt: string | null;
@@ -2843,8 +4943,72 @@ export type ScheduledTaskRun = {
     knowledgeSummary: KnowledgeSourceSyncRunSummary | null;
     completedAt: string | null;
     error: string | null;
+    admissionDiagnostic?: {
+        version: 1;
+        reason: "selected_account_unavailable" | "owner_access_unavailable" | "ambiguous_account" | "parent_accounts_required" | "selection_unavailable";
+        accounts: Array<{
+            serverId: string;
+            connectionId: string | null;
+            reason: "connector_unavailable" | "account_not_visible" | "account_inactive" | "account_mismatch" | "selection_unavailable";
+        }>;
+    } | null | undefined;
+    /**
+     * Why the scheduler refused this occurrence before running it; `error`
+     * equals `reason`. `retryable: true` (status `skipped`): a later occurrence
+     * runs once the condition clears. `retryable: false` (status `failed`):
+     * every occurrence is refused until the task or a resource it names changes.
+     */
+    admissionRefusal?: ScheduledTaskAdmissionRefusal | null | undefined;
+    /**
+     * This dispatched run's own turn is waiting on a person (tool approval or
+     * structured question) since `since`; `expiresAt` is when the task's
+     * `approvalTimeoutSeconds` answers for it (null: waits indefinitely).
+     */
+    awaitingHuman?: ScheduledTaskRunAwaitingHuman | null | undefined;
     createdAt: string;
     updatedAt: string;
+    /** Connectors this run could not use; projected only for a viewer who can act on the task. */
+    accessFailures?: ScheduledTaskRunAccessFailure[] | undefined;
+};
+export type ScheduledTaskRunAwaitingHuman = {
+    since: string;
+    expiresAt: string | null;
+};
+export type ScheduledTaskAdmissionRefusal = {
+    version: 1;
+    reason: "scheduled_authority_unavailable" | "machine_target_unavailable" | "machine_enrollment_inactive" | "variable_set_unavailable" | "rig_version_unavailable" | "insufficient_credits" | "monthly_model_cost_limit" | "monthly_agent_run_limit" | (string & {});
+    retryable: boolean;
+};
+export type ScheduledTaskAccessFailureReason = "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable";
+/** A connector a scheduled run's own turn could not use (a `tool.auth_needed` fact). */
+export type ScheduledTaskRunAccessFailure = {
+    serverId: string;
+    name: string;
+    providerDomain: string;
+    reason: ScheduledTaskAccessFailureReason;
+    count: number;
+    firstOccurredAt: string;
+};
+/**
+ * A schedule that needs its owner's attention: its latest run failed closed on
+ * connector access (`runId`, `failures`), and/or a chosen connector account can
+ * no longer be used so new runs cannot start (`unavailableAccounts`; `runId`
+ * and `firedAt` are null when only this applies).
+ */
+export type ScheduledTaskAccessAttention = {
+    taskId: string;
+    taskName: string;
+    /** The task head this item was computed against; a new head is a new notice. */
+    executionDigest: string;
+    runId: string | null;
+    firedAt: string | null;
+    failures: ScheduledTaskRunAccessFailure[];
+    unavailableAccounts: ScheduledTaskAccessConnector[];
+    /** The latest run is waiting on a person (tool approval or question) right now. */
+    awaitingHuman?: ScheduledTaskRunAwaitingHuman | null | undefined;
+};
+export type ListScheduledTaskAccessAttentionResponse = {
+    tasks: ScheduledTaskAccessAttention[];
 };
 /** Generic variable-set reads expose name + version metadata only. */
 export type VariableSetVariableMetadata = {
@@ -2864,17 +5028,33 @@ export type VariableSet = {
     id: string;
     accountId: string;
     workspaceId: string;
+    scope: "organization" | "workspace" | "user";
+    generation: number;
+    status: "active" | "revoked";
     name: string;
     description: string | null;
     variables: VariableSetVariableMetadata[];
     createdAt: string;
     updatedAt: string;
 };
+/** Exact-ID attachment metadata; intentionally excludes catalog and secret metadata. */
+export type VariableSetAttachmentMetadata = {
+    id: string;
+    scope: "organization" | "workspace" | "user";
+};
+export type ResolveVariableSetAttachmentsRequest = {
+    variableSetIds: string[];
+};
+export type ResolveVariableSetAttachmentsResponse = {
+    variableSets: VariableSetAttachmentMetadata[];
+};
 /** @deprecated use VariableSetVariableMetadata */
 export type WorkspaceEnvironmentVariableMetadata = VariableSetVariableMetadata;
 /** @deprecated use VariableSet */
 export type WorkspaceEnvironment = VariableSet;
 export type CreateVariableSetRequest = {
+    /** Omitted remains the legacy workspace-owned path. */
+    scope?: "organization" | "workspace" | "user" | undefined;
     name: string;
     description?: string | undefined;
     /** Initial variables. Values are write-only: they never come back on reads. */
@@ -2949,10 +5129,46 @@ export type RigVerificationHealth = {
     checkHealth: "passing" | "failing" | "unknown";
     lastVerifiedAt: string | null;
 };
+/**
+ * Workspace-shared channel organizing root sessions ("workstreams") by work
+ * type in the rail. Pure organizational metadata.
+ */
+export type Channel = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    name: string;
+    description: string | null;
+    pinned: boolean;
+    sortOrder: number;
+    createdBy: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type CreateChannelRequest = {
+    name: string;
+    description?: string;
+};
+export type UpdateChannelRequest = {
+    name?: string;
+    description?: string | null;
+    pinned?: boolean;
+};
+/** Complete workspace project order. It is replaced atomically after a drag. */
+export type ReorderChannelsRequest = {
+    channelIds: string[];
+};
+/** Re-files one session; null moves it back to the unfiled inbox. */
+export type UpdateSessionChannelRequest = {
+    channelId: string | null;
+};
 export type Rig = {
     id: string;
     accountId: string;
     workspaceId: string;
+    scope: ResourceAuthorityScope;
+    generation: number;
+    status: "active" | "revoked";
     name: string;
     description: string | null;
     createdBy: string | null;
@@ -2974,6 +5190,7 @@ export type RigChangeVerification = {
     startedAt?: string | undefined;
     finishedAt?: string | undefined;
     log?: string | undefined;
+    platformCheckResults?: RigCheckResult[] | undefined;
     checkResults?: RigCheckResult[] | undefined;
     [key: string]: unknown;
 };
@@ -2991,9 +5208,10 @@ export type RigChange = {
     updatedAt: string;
 };
 export type CreateRigRequest = {
+    scope?: ResourceAuthorityScope;
     name: string;
     description?: string | undefined;
-    image?: string | undefined;
+    image?: never;
     setupScript?: string | undefined;
     checks?: RigCheck[] | undefined;
     credentialHooks?: string[] | undefined;
@@ -3008,7 +5226,7 @@ export type RigSetupAppendPayload = {
     note?: string | undefined;
 };
 export type RigDefinitionEditPayload = {
-    image?: string | null | undefined;
+    image?: never;
     setupScript?: string | null | undefined;
     checks?: RigCheck[] | undefined;
     credentialHooks?: string[] | undefined;
@@ -3023,7 +5241,17 @@ export type ProposeRigChangeRequest = {
     payload: RigDefinitionEditPayload;
 };
 export type FileStatus = "pending_upload" | "ready" | "failed" | "expired" | "deleted";
+export type FileListRequest = {
+    scope?: "all" | "workspace" | "personal";
+    limit?: number;
+    cursor?: string;
+};
+export type FileListResponse = {
+    files: FileAsset[];
+    nextCursor: string | null;
+};
 export type FileAsset = {
+    scope?: "workspace" | "personal" | undefined;
     id: string;
     workspaceId: string;
     status: FileStatus;
@@ -3043,7 +5271,7 @@ export declare const RETAINED_OUTPUT_MAX_PAGE_BYTES: number;
 export declare const COMPUTER_SCREENSHOT_MAX_BYTES: number;
 export declare const GENERATED_IMAGE_MAX_BYTES: number;
 export declare const GENERATED_VIDEO_MAX_BYTES: number;
-export type RetainedOutputKind = "tool_result" | "assistant_completion" | "internal_update" | "event_media" | "computer_screenshot" | "generated_image" | "generated_video" | "file";
+export type RetainedOutputKind = "tool_result" | "assistant_completion" | "internal_update" | "event_media" | "computer_screenshot" | "browser_screenshot" | "generated_image" | "generated_video" | "file";
 export type RetainedOutputUnavailableReason = "not_retained" | "pending" | "failed" | "expired" | "deleted" | "missing_storage" | "storage_write_failed" | "quota_exceeded" | "invalid_content" | "oversized" | "unsupported";
 export type RetainedArtifactReference = {
     available: true;
@@ -3118,7 +5346,7 @@ export type UpdateVideoGenerationPolicyRequest = {
     enabledModelIds: string[];
     defaultModelId: string | null;
 };
-export type VideoGenerationFundingSource = "opengeni_credits" | "workspace_gateway";
+export type VideoGenerationFundingSource = "opengeni_credits" | "workspace_gateway" | "supergrok_subscription";
 export type VideoGenerationFundingOption = {
     source: VideoGenerationFundingSource;
     label: string;
@@ -3214,6 +5442,7 @@ export type RetainedArtifactDownload = {
     bytes: Uint8Array;
 };
 export type CreateFileUploadRequest = {
+    scope?: "workspace" | "personal";
     filename: string;
     contentType: string;
     sizeBytes: number;
@@ -3239,6 +5468,7 @@ export type FileDownloadUrlResponse = {
 /** Bytes accepted by the `uploadFile` helper. */
 export type FileUploadData = Blob | ArrayBuffer | Uint8Array | string;
 export type UploadFileInput = {
+    scope?: "workspace" | "personal";
     filename: string;
     contentType: string;
     data: FileUploadData;
@@ -3290,6 +5520,7 @@ export type Document = {
     authorityKind: DocumentAuthorityKind;
     authorityWorkspaceId: string | null;
     authoritySubjectId: string | null;
+    authorityId?: string | null | undefined;
     visibility: DocumentVisibility;
     createdBy: string | null;
     agentAccess: boolean;
@@ -3359,11 +5590,98 @@ export type CreateKnowledgeDropRequest = {
 export type MoveDocumentRequest = {
     targetBaseId?: string | undefined;
 };
+export type DocumentAuthorityTuple = {
+    kind: DocumentAuthorityKind;
+    workspaceId: string | null;
+    subjectId: string | null;
+    authorityId: string | null;
+};
+export type ReclassifyDocumentAuthorityRequest = {
+    operationId: string;
+    expectedAuthority: DocumentAuthorityTuple;
+    targetAuthorityKind: DocumentAuthorityKind;
+};
+export type DocumentAuthorityReclassification = {
+    operationId: string;
+    documentId: string;
+    previousAuthority: DocumentAuthorityTuple;
+    authority: DocumentAuthorityTuple;
+    createdAt: string;
+};
+export type ListDocumentAuthorityReclassificationsOptions = {
+    limit?: number | undefined;
+    cursor?: string | undefined;
+};
+export type ListDocumentAuthorityReclassificationsResponse = {
+    receipts: DocumentAuthorityReclassification[];
+    hasMore: boolean;
+    nextCursor: string | null;
+};
+export type RunDocumentDefaultCollectionBackfillRequest = {
+    runId: string;
+    operationId: string;
+    batchSize?: number | undefined;
+};
+export type DocumentDefaultCollectionBackfill = {
+    runId: string;
+    operationId: string;
+    status: "running" | "completed";
+    lastWorkspaceId: string | null;
+    processedCount: number;
+    createdCount: number;
+    adoptedCount: number;
+    completedAt: string | null;
+};
+export type DocumentDefaultCollectionBackfillRunAudit = Omit<DocumentDefaultCollectionBackfill, "operationId"> & {
+    actorSubjectId: string;
+    startedAt: string;
+    updatedAt: string;
+};
+export type DocumentDefaultCollectionBackfillOperationAudit = {
+    operationId: string;
+    result: DocumentDefaultCollectionBackfill;
+    createdAt: string;
+};
+export type DocumentDefaultCollectionBackfillReceiptAudit = {
+    workspaceId: string;
+    baseId: string;
+    outcome: "created" | "adopted";
+    createdAt: string;
+};
+export type ListDocumentDefaultCollectionBackfillRunsResponse = {
+    runs: DocumentDefaultCollectionBackfillRunAudit[];
+    hasMore: boolean;
+    nextCursor: string | null;
+};
+export type DocumentDefaultCollectionBackfillAudit = {
+    run: DocumentDefaultCollectionBackfillRunAudit;
+    operations: DocumentDefaultCollectionBackfillOperationAudit[];
+    receipts: DocumentDefaultCollectionBackfillReceiptAudit[];
+    operationsHasMore: boolean;
+    operationsNextCursor: string | null;
+    receiptsHasMore: boolean;
+    receiptsNextCursor: string | null;
+};
+export type GetDocumentDefaultCollectionBackfillAuditOptions = {
+    limit?: number | undefined;
+    operationCursor?: string | undefined;
+    receiptCursor?: string | undefined;
+};
+export type OrganizationDocumentAuthorityReclassification = DocumentAuthorityReclassification & {
+    actorSubjectId: string;
+    requestWorkspaceId: string;
+};
+export type ListOrganizationDocumentAuthorityReclassificationsResponse = {
+    receipts: OrganizationDocumentAuthorityReclassification[];
+    hasMore: boolean;
+    nextCursor: string | null;
+};
 export type DocumentSearchRequest = {
     query: string;
     baseIds?: string[] | undefined;
     mode?: DocumentSearchMode | undefined;
     sourceKinds?: KnowledgeSourceKind[] | undefined;
+    authorityKinds?: DocumentAuthorityKind[] | undefined;
     aclTags?: string[] | undefined;
     limit?: number | undefined;
 };
@@ -3449,303 +5767,127 @@ export type WorkspaceMemorySearchResult = {
 export type WorkspaceMemorySearchResponse = {
     results: WorkspaceMemorySearchResult[];
 };
-export type CapabilityPackConnectorAuthModel = "oauth2_authorization_code_pkce" | "oauth2_authorization_code" | "api_key" | "credential_ref";
-export type CapabilityPackConnector = {
-    id: string;
-    name: string;
-    category: string;
-    authModel: CapabilityPackConnectorAuthModel;
-    providers: string[];
-    scopes: string[];
-    required: boolean;
-    metadata: Record<string, unknown>;
-};
-export type CapabilityPackKnowledge = {
-    type: "document_base";
-    id: string;
-    name: string;
-    description: string | null;
-    required: boolean;
-};
-export type CapabilityPackScheduledTaskTemplate = {
-    id: string;
-    name: string;
-    description: string;
-    defaultSchedule: ScheduledTaskScheduleSpec;
-    defaultRunMode: ScheduledTaskRunMode;
-    defaultOverlapPolicy: ScheduledTaskOverlapPolicy;
-    prompt?: string | undefined;
-};
-export type CapabilityPackSkillFile = {
-    path: string;
-    content: string;
-};
-export type CapabilityPackSkill = {
-    name: string;
-    description?: string | undefined;
-    files: CapabilityPackSkillFile[];
-};
-export type SessionSkill = CapabilityPackSkill;
-export type CapabilityPackVariableSetSpec = {
-    description: string;
-    requiredVariables: string[];
-    required: boolean;
-};
-export type CapabilityPackComponentReference = {
-    key: string;
-    kind: "plugin";
-    pluginKey: string;
-    version: string;
-    manifestDigest: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "skill";
-    capabilityId: string;
-    contentSha256: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "integration";
-    capabilityId: string;
-    instanceKey: string;
-    revisionId: string;
-    contentSha256: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "feature";
-    capabilityId: string;
-    instanceKey: string;
-    featureKey: string;
-    bindingKey: string;
-    configDigest: string;
-    required: boolean;
-};
-export type CapabilityPackRigRequirement = {
-    description?: string | undefined;
-    required: boolean;
-    rigId?: string | undefined;
-    requireVerified: boolean;
-};
-export type CapabilityPack = {
-    id: string;
-    name: string;
-    description: string;
-    role: string;
-    category: string;
-    version: string;
-    sandboxImage?: string | undefined;
-    sandboxProviderImages?: {
-        modal?: {
-            imageId: string;
-        } | undefined;
-    } | undefined;
-    skills: CapabilityPackSkill[];
-    components: CapabilityPackComponentReference[];
-    rig?: CapabilityPackRigRequirement | undefined;
-    tools: ToolRef[];
-    connectors: CapabilityPackConnector[];
-    knowledge: CapabilityPackKnowledge[];
-    scheduledTaskTemplates: CapabilityPackScheduledTaskTemplate[];
-    variableSet?: CapabilityPackVariableSetSpec | undefined;
-    metadata: Record<string, unknown>;
-};
-/** Input shape for registering a pack manifest (server applies defaults). */
-export type RegisterCapabilityPackRequest = {
-    id: string;
+export type SkillArtifactFile = {
+    path: string;
+    content: string;
+};
+export type SkillArtifactDefinition = {
     name: string;
-    description: string;
-    role: string;
-    category: string;
-    version: string;
-    sandboxImage?: string | undefined;
-    sandboxProviderImages?: {
-        modal?: {
-            imageId: string;
-        } | undefined;
-    } | undefined;
-    skills?: {
-        name: string;
-        description?: string | undefined;
-        files: CapabilityPackSkillFile[];
-    }[] | undefined;
-    components?: ({
-        key: string;
-        kind: "plugin";
-        pluginKey: string;
-        version: string;
-        manifestDigest: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "skill";
-        capabilityId: string;
-        contentSha256: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "integration";
-        capabilityId: string;
-        instanceKey: string;
-        revisionId: string;
-        contentSha256: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "feature";
-        capabilityId: string;
-        instanceKey: string;
-        featureKey: string;
-        bindingKey: string;
-        configDigest: string;
-        required?: boolean | undefined;
-    })[] | undefined;
-    rig?: {
-        description?: string | undefined;
-        required?: boolean | undefined;
-        rigId?: string | undefined;
-        requireVerified?: boolean | undefined;
-    } | undefined;
-    tools?: ToolRef[] | undefined;
-    connectors?: {
-        id: string;
-        name: string;
-        category: string;
-        authModel: CapabilityPackConnectorAuthModel;
-        providers?: string[] | undefined;
-        scopes?: string[] | undefined;
-        required?: boolean | undefined;
-        metadata?: Record<string, unknown> | undefined;
-    }[] | undefined;
-    knowledge?: {
-        type: "document_base";
-        id: string;
-        name: string;
-        description?: string | null | undefined;
-        required?: boolean | undefined;
-    }[] | undefined;
-    scheduledTaskTemplates?: {
-        id: string;
-        name: string;
-        description: string;
-        defaultSchedule: ScheduledTaskScheduleSpec;
-        defaultRunMode?: ScheduledTaskRunMode | undefined;
-        defaultOverlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
-        prompt?: string | undefined;
-    }[] | undefined;
-    variableSet?: {
-        description: string;
-        requiredVariables?: string[] | undefined;
-        required?: boolean | undefined;
-    } | undefined;
-    metadata?: Record<string, unknown> | undefined;
+    description?: string | undefined;
+    /** Omitted means workspace-wide; session_selected requires explicit session attachment. */
+    activationMode?: "workspace_managed" | "session_selected" | undefined;
+    files: SkillArtifactFile[];
+};
+export type SessionSkill = Omit<SkillArtifactDefinition, "activationMode">;
+/** SKILL.md owns metadata; supplied legacy fields must exactly match it. */
+export type SkillArtifactDefinitionInput = Omit<SkillArtifactDefinition, "name" | "description"> & {
+    name?: string | undefined;
+    description?: string | undefined;
 };
-export type WorkspaceRegisteredPack = {
+export type SessionSkillInput = Omit<SkillArtifactDefinitionInput, "activationMode">;
+export type PrReviewProvider = GitCredentialProvider;
+export type PrReviewCredentialKind = "github_app" | "managed_github_app" | "provider_token";
+export type PrReviewWebhookAuthKind = "hmac_sha256" | "shared_token" | "basic";
+export type CreatePrReviewAppRegistrationRequest = {
+    name: string;
+    provider: PrReviewProvider;
+    providerBaseUrl?: string | undefined;
+    appId?: string | undefined;
+    credentialKind: PrReviewCredentialKind;
+    privateKey?: string | undefined;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | null | undefined;
+    webhookSecret: string;
+    webhookUsername?: string | undefined;
+};
+export type UpdatePrReviewAppRegistrationRequest = {
+    name?: string | undefined;
+    privateKey?: string | undefined;
+    accessToken?: string | undefined;
+    accessTokenExpiresAt?: string | null | undefined;
+    webhookSecret?: string | undefined;
+    webhookUsername?: string | undefined;
+    status?: "active" | "disabled" | undefined;
+};
+export type PrReviewAppRegistration = {
+    id: string;
+    sourceId: string;
     accountId: string;
     workspaceId: string;
-    pack: CapabilityPack;
+    name: string;
+    provider: PrReviewProvider;
+    providerBaseUrl: string;
+    appId: string | null;
+    installationId: string | null;
+    providerAccountLogin: string | null;
+    providerAccountType: "User" | "Organization" | null;
+    credentialKind: PrReviewCredentialKind;
+    hasCredential: boolean;
+    accessTokenExpiresAt: string | null;
+    webhookAuthKind: PrReviewWebhookAuthKind;
+    hasWebhookSecret: boolean;
+    webhookUsername: string | null;
+    webhookPath: string;
+    status: "active" | "disabled";
+    createdBySubjectId: string;
     createdAt: string;
     updatedAt: string;
 };
-export type PackInstallationStatus = "installing" | "active" | "needs_attention" | "disabled";
-export type PackInstallation = {
+export type CreatePrReviewRepositoryBindingRequest = {
+    registrationId: string;
+    repositoryUri: string;
+    repositoryFullName: string;
+    providerRepositoryId: string | number;
+    installationId?: string | number | undefined;
+    projectId?: string | number | undefined;
+    model?: string | null | undefined;
+    additionalInstructions?: string | null | undefined;
+    status?: "active" | "disabled" | undefined;
+};
+export type UpdatePrReviewRepositoryBindingRequest = {
+    model?: string | null | undefined;
+    additionalInstructions?: string | null | undefined;
+    status?: "active" | "disabled" | undefined;
+};
+export type PrReviewRepositoryBinding = {
     id: string;
+    triggerId: string;
     accountId: string;
     workspaceId: string;
-    packId: string;
-    status: PackInstallationStatus;
-    version: number;
-    manifestSnapshot: CapabilityPack | null;
-    manifestDigest: string | null;
-    selectedRigId: string | null;
-    installedBySubjectId: string | null;
-    metadata: Record<string, unknown>;
-    enabledAt: string;
+    registrationId: string;
+    provider: PrReviewProvider;
+    repositoryUri: string;
+    repositoryFullName: string;
+    providerRepositoryId: string;
+    installationId: string | null;
+    projectId: string | null;
+    model: string | null;
+    additionalInstructions: string | null;
+    status: "active" | "disabled";
+    createdBySubjectId: string;
+    createdAt: string;
     updatedAt: string;
 };
-export type EnablePackRequest = {
-    variableSetId?: string | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | undefined;
-    metadata?: Record<string, unknown> | undefined;
-};
-export type PackComponentResolutionStatus = "ready" | "missing" | "mismatch";
-export type PackComponentResolution = {
-    key: string;
-    kind: "plugin" | "skill" | "integration" | "feature" | "inline_skill";
-    capabilityId: string;
-    required: boolean;
-    status: PackComponentResolutionStatus;
-    expectedDigest: string;
-    actualDigest: string | null;
-    resolvedId: string | null;
-    label: string;
-};
-export type PackRigResolution = {
-    required: boolean;
-    status: "not_required" | "ready" | "missing" | "mismatch" | "unverified";
-    requestedRigId: string | null;
-    rigId: string | null;
-    rigVersionId: string | null;
-    name: string | null;
-    image: string | null;
-};
-export type PreviewPackInstallationRequest = {
-    rigId?: string | undefined;
-    variableSetId?: string | undefined;
-};
-export type PackInstallationPreview = {
-    packId: string;
-    packVersion: string;
-    manifestDigest: string;
-    installationVersion: number | null;
-    action: "install" | "update" | "repair";
-    ready: boolean;
-    blockers: string[];
-    components: PackComponentResolution[];
-    rig: PackRigResolution;
-    variableSetId: string | null;
-    legacyInlineSkillCount: number;
-    legacySandboxImage: string | null;
-};
-export type InstallPackRequest = {
-    expectedManifestDigest: string;
-    expectedInstallationVersion?: number | undefined;
-    rigId?: string | undefined;
-    variableSetId?: string | undefined;
-    idempotencyKey: string;
-    metadata?: Record<string, unknown> | undefined;
-};
-export type PackUninstallPreview = {
-    packId: string;
-    installed: boolean;
-    installationVersion: number | null;
-    components: Array<{
-        key: string;
-        kind: "plugin" | "skill" | "integration" | "feature" | "inline_skill";
-        capabilityId: string;
-        retainedByOtherOwners: boolean;
-    }>;
-};
-export type UninstallPackRequest = {
-    expectedInstallationVersion: number;
-    idempotencyKey: string;
-};
-export type UninstallPackResult = {
-    packId: string;
-    status: "not_installed" | "uninstalled";
-    retainedComponents: string[];
+export type ListPrReviewConfigurationResponse = {
+    registrations: PrReviewAppRegistration[];
+    repositories: PrReviewRepositoryBinding[];
 };
-export type ListPacksResponse = {
-    packs: CapabilityPack[];
-    installations: PackInstallation[];
+export type PrReviewManagedGitHubInstallation = {
+    registrationId: string;
+    installationId: string;
+    accountLogin: string | null;
+    configureUrl: string | null;
+    repositoryCount: number;
 };
-export type GetPackResponse = {
-    pack: CapabilityPack;
-    installation: PackInstallation | null;
+export type PrReviewManagedGitHubSetup = {
+    configured: boolean;
+    status: "unavailable" | "not_connected" | "connected";
+    appName: "OpenGeni Lens";
+    connectUrl: string | null;
+    installations: PrReviewManagedGitHubInstallation[];
+    missing: string[];
 };
-export type CapabilityKind = "pack" | "mcp" | "api" | "skill" | "plugin";
+export type CapabilityKind = "mcp" | "api" | "skill" | "plugin";
 export type CapabilitySource = "built_in" | "library" | "configured" | "public_registry" | "registry" | "manual";
 export type CapabilityInstallationStatus = "active" | "disabled";
 export type CapabilityCatalogAuthKind = "oauth2" | "api_key" | "none" | "unknown";
@@ -3807,6 +5949,8 @@ export type CapabilityCatalogItem = {
     /** The connection backing this enabled installation, or null when none is involved. */
     connectionRef: {
         connectionId?: string | undefined;
+        accountSelection?: "all_eligible" | undefined;
+        authoritySource?: "host" | undefined;
         providerDomain: string;
         kind: string;
         subjectScope?: "subject" | "workspace" | undefined;
@@ -3833,7 +5977,7 @@ export type CapabilityCatalogResponse = {
 };
 export type CreateCapabilityCatalogItemRequest = {
     id?: string | undefined;
-    kind: Exclude<CapabilityKind, "pack">;
+    kind: "mcp";
     source?: CapabilitySource | undefined;
     name: string;
     description?: string | undefined;
@@ -3846,6 +5990,7 @@ export type CreateCapabilityCatalogItemRequest = {
     metadata?: Record<string, unknown> | undefined;
 };
 export type EnableCapabilityRequest = {
+    onlyIfUninstalled?: boolean | undefined;
     config?: Record<string, unknown> | undefined;
     metadata?: Record<string, unknown> | undefined;
     connectionRef?: McpServerConnectionRef | undefined;
@@ -3855,14 +6000,6 @@ export type EnableCapabilityRequest = {
      * API (responses expose header names only).
      */
     headers?: Record<string, string> | undefined;
-    /**
-     * Initial variableSet attachment for kind=pack capabilities — mirrors the
-     * dedicated POST /packs/:id/enable body. Required to enable an
-     * variableSet.required pack through this unified path; ignored otherwise.
-     */
-    variableSetId?: string | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | undefined;
 };
 export type DiscoverMcpCapabilitiesResponse = {
     items: CapabilityCatalogItem[];
@@ -3870,6 +6007,7 @@ export type DiscoverMcpCapabilitiesResponse = {
     sourceUrl: string;
 };
 export type SkillImportSource = "github" | "skills_sh";
+export type SkillInstallationSource = "library" | "github" | "skills_sh";
 export type PreviewSkillImportRequest = {
     url: string;
 };
@@ -3879,6 +6017,7 @@ export type SkillImportFileSummary = {
     contentSha256: string;
 };
 export type SkillImportPreview = {
+    markdown?: string;
     source: SkillImportSource;
     sourceUrl: string;
     repositoryUrl: string;
@@ -3901,7 +6040,13 @@ export type InstallSkillRequest = {
     expectedContentSha256: string;
     expectedInstallationVersion?: number | undefined;
 };
+export type InstallLibrarySkillRequest = {
+    expectedVersion: string;
+    expectedContentSha256: string;
+    expectedInstallationVersion?: number | undefined;
+};
 export type InstalledSkill = {
+    skillReceipt?: import("./skills.js").SkillWriteReceipt | undefined;
     capabilityId: string;
     pluginId: string;
     pluginVersionId: string;
@@ -3909,7 +6054,8 @@ export type InstalledSkill = {
     pluginInstallationId: string;
     facetInstallationId: string;
     installationVersion: number;
-    source: SkillImportSource;
+    source: SkillInstallationSource;
+    version: string;
     sourceUrl: string;
     sourceCommit: string;
     contentSha256: string;
@@ -3917,10 +6063,36 @@ export type InstalledSkill = {
     status: "installed";
 };
 export type CapabilityComponentOwner = {
-    kind: "direct" | "plugin" | "pack" | "migration";
+    kind: "direct" | "plugin" | "migration";
     id: string;
     removable: boolean;
 };
+export type InstalledSkillSummary = {
+    capabilityId: string;
+    pluginKey: string;
+    installationVersion: number;
+    name: string;
+    description: string;
+    category: string;
+    tags: string[];
+    provenance: string;
+    source: SkillInstallationSource;
+    version: string;
+    sourceUrl: string;
+    repositoryUrl: string;
+    sourceCommit: string;
+    sourcePath: string;
+    contentSha256: string;
+    fileCount: number;
+    totalBytes: number;
+    license: string | null;
+    installedAt: string;
+    updatedAt: string;
+    owners: CapabilityComponentOwner[];
+};
+export type ListInstalledSkillsResponse = {
+    skills: InstalledSkillSummary[];
+};
 export type SkillUninstallPreview = {
     capabilityId: string;
     installed: boolean;
@@ -3933,27 +6105,29 @@ export type UninstallSkillRequest = {
     expectedInstallationVersion: number;
 };
 export type UninstallSkillResult = {
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     capabilityId: string;
     status: "not_installed" | "uninstalled" | "retained_by_other_owners";
     remainingOwners: CapabilityComponentOwner[];
 };
 export type ApiIntegrationProtocol = "openapi" | "graphql";
-export type IntegrationFeatureKind = "tools" | "knowledge_source" | "inbound_trigger" | "delivery_destination" | "identity_link";
-export type IntegrationFeatureStatus = "active" | "paused" | "needs_attention" | "disabled";
-export type IntegrationFeatureDefinitionSummary = {
-    featureKey: string;
-    kind: Exclude<IntegrationFeatureKind, "tools">;
+export type IntegrationDefinitionProvenance = "curated" | "workspace";
+export type IntegrationFacetKind = "tools" | "knowledge_source" | "inbound_trigger" | "delivery_destination" | "identity_link";
+export type IntegrationFacetStatus = "active" | "paused" | "needs_attention" | "disabled";
+export type IntegrationFacetDefinitionSummary = {
+    facetKey: string;
+    kind: Exclude<IntegrationFacetKind, "tools">;
     configSchema: Record<string, unknown>;
     capabilities: Record<string, unknown>;
 };
-export type IntegrationFeatureBindingSummary = {
+export type IntegrationFacetBindingSummary = {
     id: string;
-    featureKey: string;
-    kind: Exclude<IntegrationFeatureKind, "tools">;
+    facetKey: string;
+    kind: Exclude<IntegrationFacetKind, "tools">;
     bindingKey: string;
     displayName: string;
     connectionId: string | null;
-    status: IntegrationFeatureStatus;
+    status: IntegrationFacetStatus;
     config: Record<string, unknown>;
     version: number;
     hasCursor: boolean;
@@ -3961,58 +6135,85 @@ export type IntegrationFeatureBindingSummary = {
     lastErrorCode: string | null;
     createdAt: string;
     updatedAt: string;
+    directlyOwned: boolean;
+    owners: CapabilityComponentOwner[];
 };
-export type IntegrationInstanceFeaturesResponse = {
+export type IntegrationInstanceFacetsResponse = {
     capabilityId: string;
     instanceKey: string;
     providerDomain: string;
     connectionId: string | null;
-    features: {
-        definition: IntegrationFeatureDefinitionSummary;
-        binding: IntegrationFeatureBindingSummary | null;
+    facets: {
+        definition: IntegrationFacetDefinitionSummary;
+        binding: IntegrationFacetBindingSummary | null;
     }[];
 };
-export type UpsertIntegrationFeatureRequest = {
+export type UpsertIntegrationFacetRequest = {
     displayName: string;
     config?: Record<string, unknown> | undefined;
     expectedVersion?: number | undefined;
     idempotencyKey: string;
 };
-export type MutateIntegrationFeatureRequest = {
+export type MutateIntegrationFacetRequest = {
     expectedVersion: number;
     idempotencyKey: string;
 };
-export type IntegrationFeatureMutationResult = {
+export type IntegrationFacetMutationResult = {
     capabilityId: string;
     instanceKey: string;
-    featureKey: string;
+    facetKey: string;
     status: "configured" | "paused" | "active";
-    binding: IntegrationFeatureBindingSummary;
+    binding: IntegrationFacetBindingSummary;
 };
-export type IntegrationFeatureRemovalResult = {
+export type IntegrationFacetRemovalResult = {
     capabilityId: string;
     instanceKey: string;
-    featureKey: string;
+    facetKey: string;
     status: "not_configured" | "removed" | "retained_by_other_owners";
-    binding: IntegrationFeatureBindingSummary | null;
+    binding: IntegrationFacetBindingSummary | null;
     remainingOwners: CapabilityComponentOwner[];
 };
-export type ApiIntegrationPresetSummary = {
+/**
+ * Presentation-only consent copy served with an integration or connector.
+ * Never grants a scope or replaces server-side authorization; the UI keeps a
+ * generic fallback for any omitted field.
+ */
+export type IntegrationPresentation = {
+    providerName?: string | undefined;
+    icon?: "calendar" | "cloud" | "contacts" | "files" | "mail" | undefined;
+    introduction?: string | undefined;
+    capabilities?: {
+        title: string;
+        description: string;
+    }[] | undefined;
+    permissionSummary?: string | undefined;
+    scopeLabels?: Record<string, {
+        label: string;
+        description: string;
+    }> | undefined;
+};
+export type IntegrationDefinitionSummary = {
     id: string;
     name: string;
     summary: string;
-    family: "google" | "microsoft";
     protocol: "openapi";
-    providerDomain: string;
-    scopes: string[];
-    features: IntegrationFeatureDefinitionSummary[];
+    provider: {
+        id: "google" | "microsoft";
+        domain: string;
+    };
+    authentication: {
+        kind: "oauth2";
+        scopes: string[];
+    };
+    presentation?: IntegrationPresentation | undefined;
+    facets: IntegrationFacetDefinitionSummary[];
 };
-export type ListApiIntegrationPresetsResponse = {
-    presets: ApiIntegrationPresetSummary[];
+export type ListIntegrationDefinitionsResponse = {
+    definitions: IntegrationDefinitionSummary[];
 };
-export type ApiIntegrationSource = {
-    kind: "preset";
-    presetId: string;
+export type IntegrationSource = {
+    kind: "definition";
+    definitionId: string;
 } | {
     kind: "openapi";
     url: string;
@@ -4026,13 +6227,36 @@ export type ApiIntegrationSource = {
     url: string;
     baseUrl?: string | undefined;
 };
+/**
+ * OpenAPI 3.x text (JSON or YAML, at most 8 MiB) sent in the request instead
+ * of a URL. `sourceKey` is your stable identity for the Integration: reuse it
+ * to update the same installation. Server URLs must be absolute or `baseUrl`
+ * given. Calls still obey the deployment network policy, so an API on
+ * localhost or a private address needs a public tunnel unless the operator
+ * enables private targets. Send the same document again on install.
+ */
+export type InlineOpenApiDocumentSource = {
+    kind: "openapi_document";
+    sourceKey: string;
+    document: string;
+    baseUrl?: string | undefined;
+};
+/** Preview/install input sources. */
+export type IntegrationSourceInput = IntegrationSource | InlineOpenApiDocumentSource;
+/** Preview echo: an inline document is reported by digest, never its text. */
+export type IntegrationSourceProjection = IntegrationSource | {
+    kind: "openapi_document";
+    sourceKey: string;
+    documentSha256: string;
+    baseUrl?: string | undefined;
+};
 export type PreviewApiIntegrationRequest = {
-    source: ApiIntegrationSource;
+    source: IntegrationSourceInput;
     connectionId?: string | undefined;
     ownership?: ConnectionOwnership | undefined;
 };
 export type ApiIntegrationOAuthStartRequest = {
-    presetId: string;
+    definitionId: string;
     ownership?: ConnectionOwnership | undefined;
     connectionId?: string | undefined;
     returnPath?: string | undefined;
@@ -4063,10 +6287,10 @@ export type ApiIntegrationToolPreview = {
     deprecated: boolean;
 };
 export type ApiIntegrationPreview = {
-    source: ApiIntegrationSource;
-    presetId: string | null;
+    source: IntegrationSourceProjection;
+    definitionId: string;
+    definitionProvenance: IntegrationDefinitionProvenance;
     protocol: ApiIntegrationProtocol;
-    integrationId: string;
     capabilityId: string;
     pluginKey: string;
     serverId: string;
@@ -4085,7 +6309,7 @@ export type ApiIntegrationPreview = {
     warnings: string[];
 };
 export type InstallApiIntegrationRequest = {
-    source: ApiIntegrationSource;
+    source: IntegrationSourceInput;
     expectedRevisionId: string;
     expectedContentSha256: string;
     connectionId?: string | undefined;
@@ -4094,6 +6318,14 @@ export type InstallApiIntegrationRequest = {
     displayName?: string | undefined;
     expectedInstanceVersion?: number | undefined;
     allowedTools?: string[] | undefined;
+    /**
+     * Selected tools whose preview `approvalMode` is `"ask"` that should run
+     * without per-call human approval (for example in scheduled or other
+     * unattended sessions). Needs `capabilities:manage`; a curated definition
+     * may forbid exempting specific operations (422). Declarative: omit it and every write tool asks
+     * again. Connector Block and session approval policies still apply.
+     */
+    autoApprovedTools?: string[] | undefined;
 };
 export type InstalledApiIntegration = {
     capabilityId: string;
@@ -4125,7 +6357,8 @@ export type ApiIntegrationInstallationSummary = {
     name: string;
     description: string | null;
     protocol: ApiIntegrationProtocol;
-    presetId: string | null;
+    definitionId: string;
+    definitionProvenance: IntegrationDefinitionProvenance;
     providerDomain: string;
     baseUrl: string;
     sourceUrl: string | null;
@@ -4172,7 +6405,7 @@ export type PluginManifestComponent = {
 } | {
     key: string;
     kind: "integration";
-    source: ApiIntegrationSource;
+    source: IntegrationSource;
 } | {
     key: string;
     kind: "mcp";
@@ -4238,6 +6471,9 @@ export type InstallPluginRequest = {
     expectedInstallationVersion?: number | undefined;
 };
 export type InstalledPlugin = {
+    skillPublications?: import("./skills.js").SkillPublicationReceipt[] | undefined;
+    skillWrites?: import("./skills.js").SkillWriteReceipt[] | undefined;
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     pluginKey: string;
     version: string;
     pluginId: string;
@@ -4254,6 +6490,7 @@ export type PluginInstallationSummary = {
     description: string;
     category: string;
     tags: string[];
+    logoUrl?: string | null | undefined;
     sourceUrl: string | null;
     manifestDigest: string;
     installationVersion: number;
@@ -4265,22 +6502,34 @@ export type PluginInstallationSummary = {
 export type ListInstalledPluginsResponse = {
     plugins: PluginInstallationSummary[];
 };
+export type PluginUninstallComponentImpact = {
+    capabilityId: string;
+    kind: "skill" | "integration" | "mcp";
+    retainedByOtherOwners: boolean;
+    name: string;
+    disposition: "removed" | "retained" | "inactive";
+    retentionReasons: Array<"other_owners" | "customized" | "re_scoped" | "registry_unavailable">;
+    remainingOwners: Array<{
+        kind: "direct" | "plugin" | "migration";
+        name: string;
+    }>;
+    skillId?: string | undefined;
+};
 export type PluginUninstallPreview = {
     pluginKey: string;
     installed: boolean;
     version: string | null;
     installationVersion: number | null;
-    components: Array<{
-        capabilityId: string;
-        kind: "skill" | "integration" | "mcp";
-        retainedByOtherOwners: boolean;
-    }>;
+    previewToken?: string | undefined;
+    components: PluginUninstallComponentImpact[];
 };
 export type UninstallPluginRequest = {
     expectedInstallationVersion: number;
+    expectedPreviewToken?: string | undefined;
     idempotencyKey: string;
 };
 export type UninstallPluginResult = {
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     pluginKey: string;
     status: "not_installed" | "uninstalled";
     retainedComponents: string[];
@@ -4296,6 +6545,10 @@ export type GitHubRepository = {
     defaultBranch: string;
     accountLogin: string;
     accountType: string | null;
+    /** GitHub's archived flag, when the provider reported it. */
+    archived?: boolean | undefined;
+    /** GitHub's reported size in kilobytes, when reported. Zero means empty. */
+    sizeKb?: number | undefined;
 };
 export type GitHubRepositoryScope = "all" | "selected";
 export type GitHubBindingStatus = "disabled" | "unbound" | "bound";
@@ -4335,6 +6588,55 @@ export type GitHubAppInfo = {
 export type GitHubRepositoriesResponse = {
     repositories: GitHubRepository[];
 };
+export type GitHubActionPolicyDecision = "allow" | "ask" | "block";
+export type GitHubActionPolicyEffectiveDecision = GitHubActionPolicyDecision | "mixed";
+export type GitHubActionPolicyGroup = "routine" | "review" | "merge";
+export type GitHubActionPolicyActor = {
+    kind: "workspace_app";
+    installationId: number;
+} | {
+    kind: "personal";
+    connectionId: string;
+};
+export type GitHubActionPolicyActorState = GitHubActionPolicyActor & {
+    label: string;
+    groups: Record<GitHubActionPolicyGroup, GitHubActionPolicyEffectiveDecision>;
+};
+export type GitHubActionPoliciesResponse = {
+    enabled: boolean;
+    actors: GitHubActionPolicyActorState[];
+};
+export type UpdateGitHubActionPolicyRequest = {
+    actor: GitHubActionPolicyActor;
+    group: GitHubActionPolicyGroup;
+    decision: GitHubActionPolicyDecision;
+};
+export type VerifyPublicGitHubRepositoryRefRequest = {
+    url: string;
+    ref: string;
+};
+export type VerifyPublicGitHubRepositoryRefResponse = {
+    owner: string;
+    name: string;
+    fullName: string;
+    canonicalUrl: string;
+    cloneUrl: string;
+    defaultBranch: string;
+    ref: string;
+    commitSha: string;
+};
+export type GitHubRepositoryBranch = {
+    name: string;
+    isDefault: boolean;
+};
+export type ListGitHubRepositoryBranchesOptions = {
+    cursor?: number | undefined;
+    limit?: number | undefined;
+};
+export type GitHubRepositoryBranchesResponse = {
+    branches: GitHubRepositoryBranch[];
+    nextCursor: number | null;
+};
 export type CreateGitHubAppManifestRequest = {
     appName?: string | undefined;
     organization?: string | undefined;
@@ -4405,12 +6707,16 @@ export type InsightsModelUsageRow = {
     creditUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
 };
 export type InsightsSeriesPoint = {
     label: string;
     modelCostUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
     warmSeconds: number;
     inputTokens: number;
     outputTokens: number;
@@ -4424,6 +6730,10 @@ export type InsightsSeriesPoint = {
     cacheHitPct: number;
     calls: number;
 };
+export type InsightsScope = {
+    rootSessionId: string | null;
+    sessionId: string | null;
+};
 export type InsightsDepthBucket = {
     depth: number;
     sessions: number;
@@ -4439,12 +6749,27 @@ export type InsightsSpendDriver = {
     creditUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
     tokens: number;
     cacheHitPct: number;
     pctOfCreditUsd: number;
     pctOfTokens: number;
     deltaUsdVsPrior: number;
 };
+export type InsightsProjectRow = {
+    id: string;
+    kind: "project" | "other" | "unfiled" | "unavailable" | "deleted";
+    label: string;
+    projects: number;
+    rootSessions: number;
+    calls: number;
+    creditUsd: number;
+    estimatedProviderUsd: number;
+    estimatedProviderCostKnownCalls: number;
+    tokens: number;
+    cacheHitPct: number | null;
+};
 export type InsightsWarmGroupRow = {
     id: string;
     groupId: string;
@@ -4480,6 +6805,8 @@ export type InsightsScheduleRow = {
     creditUsd: number | null;
     estimatedProviderUsd: number | null;
     estimatedProviderCostKnownCalls: number | null;
+    equivalentCreditUsd: number | null;
+    equivalentCreditCostKnownCalls: number | null;
     tokens: number | null;
     cacheHitPct: number | null;
     billing: InsightsBillingPath | null;
@@ -4503,8 +6830,24 @@ export type InsightsModelCallRow = {
     totalTokens: number | null;
     creditUsd: number;
     estimatedProviderUsd: number | null;
+    equivalentCreditUsd: number | null;
     pricingSource: InsightsPricingSource | null;
 };
+export type ModelContextContributionSource = "workspace_instruction_policy" | "legacy_workspace_instructions" | "preference_registry_descriptor" | "company_profile" | "legacy_memory_v1" | "runtime_skill_catalog";
+export type InsightsPromptContributionRow = {
+    source: ModelContextContributionSource;
+    items: number;
+    utf8Bytes: number;
+    estimatedTokens: number;
+    calls: number;
+};
+export type InsightsPromptContributions = {
+    estimatedTokens: number;
+    utf8Bytes: number;
+    coveredCalls: number;
+    totalCalls: number;
+    sources: InsightsPromptContributionRow[];
+};
 export type WorkspaceInsightsSnapshot = {
     range: InsightsRange;
     rangeLabel: string;
@@ -4520,8 +6863,21 @@ export type WorkspaceInsightsSnapshot = {
     series: InsightsSeriesPoint[];
     depth: InsightsDepthBucket[];
     drivers: InsightsSpendDriver[];
+    projects: InsightsProjectRow[];
+    privateChats: {
+        ownerKey: string;
+        name: string | null;
+        you: boolean;
+        calls: number;
+        tokens: number;
+        creditUsd: number;
+        estimatedProviderUsd: number;
+        estimatedProviderCostKnownCalls: number;
+    }[];
+    privateChatsTruncated: boolean;
     schedules: InsightsScheduleRow[];
     recentCalls: InsightsModelCallRow[];
+    promptContributions: InsightsPromptContributions;
     warmSeconds: number;
     priorWarmSeconds: number;
     warmGroups: InsightsWarmGroupRow[];
@@ -4537,6 +6893,10 @@ export type WorkspaceInsightsSnapshot = {
     priorEstimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
     priorEstimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    priorEquivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
+    priorEquivalentCreditCostKnownCalls: number;
     modelCalls: number;
     priorInputTokens: number;
     priorTotalTokens: number;
@@ -4555,6 +6915,13 @@ export type WorkspaceInsightsSnapshot = {
     agentRunsUsed: number;
     agentRunCap: number | null;
     modelFilterActive: boolean;
+    dataThrough: string | null;
+    cacheHitPct: number;
+    scope: InsightsScope;
+    driverGroups: number;
+    driversTruncated: boolean;
+    facetsTruncated: boolean;
+    recentCallsTruncated: boolean;
 };
 export type WorkspaceInsightsResponse = {
     snapshot: WorkspaceInsightsSnapshot;
@@ -4566,14 +6933,42 @@ export type BillingEntitlementsResponse = {
 };
 export type CreateCheckoutRequest = {
     accountId?: string | undefined;
-    /** USD amount with cent precision (server enforces min/max). */
-    amountUsd: number;
+    /**
+     * USD amount with cent precision (server enforces min/max). Required unless
+     * `promotionCode` is given; a fixed-amount USD code then sets the amount.
+     */
+    amountUsd?: number | undefined;
+    /** A Stripe promotion code to apply up front, as the customer typed it. */
+    promotionCode?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
 };
 export type CreateCheckoutResponse = {
     checkoutSessionId: string;
     url: string;
+    /** The credits this checkout grants once it completes. */
+    amountUsd?: number | undefined;
+};
+/** Where one checkout stands, and whether its credits reached the balance. */
+export type BillingCheckoutStatus = {
+    checkoutSessionId: string;
+    status: "open" | "complete" | "expired";
+    credit: {
+        state: "pending" | "granted";
+        amountMicros: number;
+        currency: "usd";
+        /** True when a coupon covered the whole checkout, so nothing was charged. */
+        free: boolean;
+    };
+    balance: BillingBalance | null;
+};
+export type CreateBillingPortalRequest = {
+    accountId?: string | undefined;
+    returnUrl?: string | undefined;
+};
+export type CreateBillingPortalResponse = {
+    portalSessionId: string;
+    url: string;
 };
 export type UserMessageEventInput = {
     type: "user.message";
@@ -4581,21 +6976,44 @@ export type UserMessageEventInput = {
     payload: {
         text: string;
         annotations?: SubmittedTimelineAnnotation[] | undefined;
-        turnInstructions?: string | undefined;
+        modelContext?: string | undefined;
         resources?: ResourceRef[] | undefined;
         model?: string | undefined;
         reasoningEffort?: ReasoningEffort | undefined;
         latencyMode?: LatencyMode | undefined;
+        controlEtag?: string | undefined;
+        expectedDraftRevision?: number | undefined;
         mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
+        connectionAccounts?: McpConnectionAccountSelection[] | undefined;
+        personalResourceAttachment?: PersonalResourceAttachmentIntent | undefined;
     };
 };
+/**
+ * Stable fields of each `session.requiresAction` `payload.approvals[]` entry.
+ * Entries also carry producer-specific compatibility fields (`rawItem` on a
+ * turn's first pause, `raw` on later ones); read only these three. Events
+ * written before these fields existed need `approvalsFromRequiresAction`
+ * from `@opengeni/react` or `approvalIdentifier` from `@opengeni/contracts`.
+ */
+export type SessionApprovalRequest = {
+    /** Pass as `sendApprovalDecision({ approvalId })`; this is the tool call id. */
+    id: string;
+    /** Model-visible tool name, for example `crm__update_record`. */
+    name: string;
+    /** Tool arguments as the model produced them (usually a JSON string). */
+    arguments: unknown;
+    [compatibilityField: string]: unknown;
+};
 export type UserApprovalDecisionEventInput = {
     type: "user.approvalDecision";
     clientEventId?: string | undefined;
     payload: {
+        /** `session.requiresAction` `approvals[].id` (the pending tool call id). */
         approvalId: string;
         decision: "approve" | "reject";
         message?: string | undefined;
+        /** Server-owned header rotation applied atomically when the response is accepted. */
+        mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
     };
 };
 export type UserHumanInputResponseEventInput = {
@@ -4604,6 +7022,8 @@ export type UserHumanInputResponseEventInput = {
     payload: {
         requestId: string;
         response: SubmitHumanInputResponseRequest;
+        /** Server-owned header rotation applied atomically when the response is accepted. */
+        mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
     };
 };
 /** Control/user events a client may POST to a session's event log. */
@@ -4628,12 +7048,77 @@ export type MetricSample = {
 /** The derived dashboard state of a machine (M3 liveness + consent/display
  *  reasons + the in-flight device-flow). */
 export type MachineState = "online" | "reconnecting" | "offline" | "consent_required" | "display_unavailable" | "enrolling";
-export type MachineKind = "modal" | "selfhosted";
+export type MachineKind = "docker" | "modal" | "local" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted" | "opensandbox";
+export type MachineConnectionAuthority = {
+    state: "not_applicable" | "unclaimed" | "active" | "expired";
+    generation: number;
+    supersededCount: number;
+    leaseExpiresAt: string | null;
+    duplicateRunnerDeniedCount: number;
+    duplicateRunnerDeniedAt: string | null;
+};
+export type MachineRuntimeCapabilities = {
+    exec: boolean;
+    filesystem: boolean;
+    git: boolean;
+    pty: boolean;
+    desktop: boolean;
+    opStream: boolean;
+    browserBridge: boolean;
+    operationResourcePolicy: boolean;
+    operationCpuQuota: boolean;
+    transactionalFsWrite: boolean;
+};
+export type MachineUpdateStatus = "requested" | "accepted" | "waiting_for_idle" | "downloading" | "verifying" | "applying" | "restarting" | "succeeded" | "failed";
+export type MachineUpdateState = {
+    operationId: string;
+    status: MachineUpdateStatus;
+    targetVersion: string;
+    expectedBinarySha256: string | null;
+    errorCode: string | null;
+    retryable: boolean;
+    rolledBack: boolean;
+    requestedAt: string;
+    updatedAt: string;
+    completedAt: string | null;
+};
+export type MachineRuntime = {
+    installedVersion: string | null;
+    binarySha256: string | null;
+    updateChannel: "stable" | "beta" | null;
+    desiredVersion: string | null;
+    versionState: "unknown" | "current" | "outdated" | "ahead" | "updating" | "update_failed";
+    /** Required installer bootstrap when a legacy updater cannot safely replace the install. */
+    updateBlockedReason?: string | null | undefined;
+    capabilities: MachineRuntimeCapabilities;
+    update: MachineUpdateState | null;
+};
+export type UpdateMachineAgentResponse = {
+    operationId: string;
+    accepted: boolean;
+    targetVersion: string;
+};
+export type MachineOperationPolicy = {
+    memoryMaxBytes: number | null;
+    memoryHighBytes: number | null;
+    cpuMaxMillicores: number | null;
+    revision: number;
+    updatedAt: string | null;
+};
+export type UpdateMachineOperationPolicyRequest = {
+    memoryMaxBytes: number | null;
+    memoryHighBytes: number | null;
+    /** Omitted preserves the current CPU limit for older/partial clients; null clears. */
+    cpuMaxMillicores?: number | null;
+    expectedRevision: number;
+};
 /** A machine as the Machines dashboard renders it (an enrolled selfhosted machine
  *  or the session's synthetic Modal group box, `isSessionGroup: true`). */
 export type MachineView = {
     sandboxId: string;
     enrollmentId: string | null;
+    scope: ResourceAuthorityScope;
+    generation: number;
     name: string;
     kind: MachineKind;
     state: MachineState;
@@ -4652,6 +7137,14 @@ export type MachineView = {
     allowScreenControl: boolean;
     sharedSessionCount: number;
     lastSeenAt: string | null;
+    /** Secret-free single-runner authority diagnostics. */
+    connectionAuthority: MachineConnectionAuthority;
+    /** Exact build/update truth. Null means the runner predates runtime Hello
+     * reporting or this is a managed-session group without a connected agent. */
+    runtime: MachineRuntime | null;
+    /** Explicit per-enrollment command memory policy. Null only for managed
+     * session boxes; null limits on a real machine mean unrestricted. */
+    operationPolicy: MachineOperationPolicy | null;
     metrics: MetricSample | null;
 };
 /** GET /v1/workspaces/:ws/machines — the dashboard list + the active-sandbox
@@ -4706,6 +7199,7 @@ export type SwapActiveSandboxResponse = {
 };
 /** Mirror of `@opengeni/contracts` EnrollmentOs. */
 export type EnrollmentOs = "linux" | "macos" | "windows";
+export type ResourceAuthorityScope = "organization" | "workspace" | "user";
 /** POST /v1/enrollments/device/lookup body. */
 export type DeviceEnrollmentLookupRequest = {
     userCode: string;
@@ -4729,6 +7223,7 @@ export type DeviceEnrollmentLookupResponse = {
 export type DeviceEnrollmentApproveRequest = {
     userCode: string;
     allowScreenControl?: boolean;
+    scope?: ResourceAuthorityScope;
 };
 /** POST /v1/workspaces/:ws/enrollments/device/approve response. */
 export type DeviceEnrollmentApproveResponse = {
@@ -4785,4 +7280,151 @@ export type EnrollTokenExchangeRequest = {
 export type EnrollTokenExchangeResponse = {
     credentials: EnrollmentCredentials;
 };
-export {};
+export type ModelConnectionAccessPolicy = {
+    allowedModels: string[] | null;
+    allowedWorkspaces: string[] | null;
+    allowPersonalWorkspaces: boolean;
+    version: number;
+};
+export type ModelConnectionAccessResponse = {
+    policy: ModelConnectionAccessPolicy;
+    models: Array<{
+        id: string;
+        label: string;
+    }>;
+    workspaces: Array<{
+        id: string;
+        name: string;
+    }>;
+    personalWorkspacesSupported: boolean;
+};
+export type ConnectorToolPermission = "allow" | "ask" | "block";
+export type ConnectorToolPermissionEntry = {
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    group: "read" | "write" | "other";
+    permission: ConnectorToolPermission;
+    inherited: boolean;
+    approvalRequired: boolean;
+};
+export type ConnectorToolPermissionsResponse = {
+    connectionId: string;
+    serverId: string;
+    defaultPermission: ConnectorToolPermission | null;
+    tools: ConnectorToolPermissionEntry[];
+    discoveryError: string | null;
+    canManage: boolean;
+};
+export type UpdateConnectorToolPermissionsRequest = {
+    connectionId: string;
+    permission: ConnectorToolPermission;
+} & ({
+    target: "default";
+} | {
+    target: "tools";
+    toolNames: string[];
+});
+/** Agent capability ids (see `@opengeni/contracts` agent-config). */
+export type AgentCapabilityId = "webSearch" | "humanInput" | "skills" | "goals" | "subagents" | "knowledge" | "schedules" | "artifacts" | "browser" | "media" | "workspaceFiles" | "workspaceConnectors" | "workspaceAdmin";
+/** `read` reads installed Skills; `manage` also changes them. */
+export type AgentSkillsCapability = "read" | "manage" | false;
+export type AgentCapabilityToggles = {
+    webSearch?: boolean | undefined;
+    humanInput?: boolean | undefined;
+    skills?: AgentSkillsCapability | undefined;
+    goals?: boolean | undefined;
+    subagents?: boolean | undefined;
+    knowledge?: boolean | undefined;
+    schedules?: boolean | undefined;
+    artifacts?: boolean | undefined;
+    browser?: boolean | undefined;
+    media?: boolean | undefined;
+    workspaceFiles?: boolean | undefined;
+    workspaceConnectors?: boolean | undefined;
+    workspaceAdmin?: boolean | undefined;
+};
+/**
+ * `"all"`: everything this workspace offers (today's behavior). `"none"`: the
+ * session's own tools plus essentials. An object starts from one and toggles.
+ */
+export type AgentCapabilities = "all" | "none" | ({
+    from: "all" | "none";
+} & AgentCapabilityToggles);
+export type AgentRenderer = "opengeni" | "markdown";
+export type AgentConfigRequest = {
+    capabilities?: AgentCapabilities | undefined;
+    /** Replaces only OpenGeni's identity lines (max 8,000 chars); null = default identity. */
+    identity?: string | null | undefined;
+    /** Alias of the session `instructions` field. */
+    instructions?: string | undefined;
+    renderer?: AgentRenderer | undefined;
+};
+export type WorkspaceAgentDefaults = {
+    capabilities?: AgentCapabilities | undefined;
+    identity?: string | null | undefined;
+    renderer?: AgentRenderer | undefined;
+};
+export type ResolvedAgentCapabilities = {
+    webSearch: boolean;
+    humanInput: boolean;
+    skills: AgentSkillsCapability;
+    goals: boolean;
+    subagents: boolean;
+    knowledge: boolean;
+    schedules: boolean;
+    artifacts: boolean;
+    browser: boolean;
+    media: boolean;
+    workspaceFiles: boolean;
+    workspaceConnectors: boolean;
+    workspaceAdmin: boolean;
+};
+export type ResolvedAgentConfig = {
+    version: 1;
+    from: "all" | "none";
+    capabilities: ResolvedAgentCapabilities;
+    /** Capabilities wanted on but not offered by this deployment. */
+    unavailable: AgentCapabilityId[];
+    identity: string | null;
+    renderer: AgentRenderer;
+    source: "request" | "workspace_default" | "deployment_default" | "inherited" | "legacy_conversion";
+};
+export type AgentEffectiveTools = {
+    capabilities: ResolvedAgentCapabilities;
+    unavailable: AgentCapabilityId[];
+    /** False until exact runtime media adapters (including credential identity) are resolved. */
+    mediaToolsKnown?: boolean | undefined;
+    tools: Array<{
+        name: string;
+        capability: AgentCapabilityId | "runtime" | "sandbox" | "product";
+        source: "first_party" | "runtime" | "hosted" | "sandbox" | "mcp";
+        visibility?: "upfront" | "search" | undefined;
+    }>;
+    mcpServers: Array<{
+        id: string;
+        capability: AgentCapabilityId | "runtime" | "product";
+        toolsKnown: boolean;
+    }>;
+};
+/** `PUT .../sessions/:id/agent`. Omitted agent fields keep their current values. */
+export type UpdateSessionAgentRequest = {
+    agent: AgentConfigRequest;
+    /** The session's current `toolPolicyVersion` (shared CAS). */
+    expectedVersion: number;
+};
+export type ClientAgentConfig = {
+    /** @deprecated Agent configuration is always on; current servers always report `true`. */
+    enabled: boolean;
+    /** @deprecated Omitted `agent` always resolves `{ capabilities: "all" }`; always `true`. */
+    defaultForNewSessions: boolean;
+    capabilities: Array<{
+        id: AgentCapabilityId;
+        available: boolean;
+        reason?: string | undefined;
+    }>;
+};
+/** `error.details.code` of a 422 agent-configuration failure. */
+export type AgentConfigErrorCode = "agent_capability_unavailable" | "agent_config_conflict" | "agent_config_widening"
+/** Returned only by older servers that predate always-on agent configuration. */
+ | "agent_config_not_enabled";