@opengeni/sdk 3.1.0 → 3.1.2

package/dist/types.d.ts

@@ -1,4 +1,10 @@
 import type { WorkspaceTranscriptionPolicy } from "./transcription.js";
+import type { SessionUsageLimit } from "@opengeni/contracts/session-usage-limits";
+export type { SessionUsageLimit, SessionUsageLimitHistory, SessionUsageLimitReachedRefusal, SessionUsageLimitStatus, SetSessionUsageLimitRequest, } from "@opengeni/contracts/session-usage-limits";
+export type { InsightsUsageRange, InsightsUsageGroupBy, InsightsUsagePayer, InsightsUsageSource, InsightsUsageTokens, InsightsUsageClassMicros, InsightsUsageMeasures, InsightsUsageScope, InsightsUsageGroup, InsightsUsageSeriesPoint, InsightsUsageFacets, InsightsUsageResponse, InsightsCall, InsightsCallsResponse, InsightsUsageWindowOptions, WorkspaceInsightsUsageOptions, OrganizationInsightsUsageOptions, WorkspaceInsightsCallsOptions, OrganizationInsightsCallsOptions, InsightsCallsScope, } from "./insights-usage.js";
+export type { ClaudeSubscriptionOAuthStartResponse, ClaudeSubscriptionOAuthCompleteRequest, ClaudeSubscriptionOAuthCompleteResponse, } from "@opengeni/contracts";
+export type { SessionMessageSearchRequest, SessionMessageSearchMatch, SessionMessageSearchResponse, SessionMessagePreview, SessionMessagePreviewReference, } from "./session-message-search.js";
+export type BundledSkillId = "builtin:opengeni-help" | "builtin:opengeni-client" | "builtin:opengeni-visualize" | "builtin:document-parsing" | "builtin:opengeni-skills" | "builtin:opengeni-projects" | "builtin:opengeni-schedules" | "builtin:opengeni-documents" | "builtin:opengeni-spreadsheets" | "builtin:opengeni-presentations" | "builtin:opengeni-sites" | "builtin:opengeni-video-generation" | "builtin:opengeni-secrets";
 export type CodexRealtimeWebrtcVersion = "v3";
 export type CodexRealtimeVoice = "juniper" | "maple" | "spruce" | "ember" | "vale" | "breeze" | "arbor" | "sol" | "cove";
 export type CodexRealtimeWebrtcRequest = {
@@ -18,7 +24,7 @@ export type CodexRealtimeWebrtcRequest = {
 export type CodexRealtimeWebrtcResponse = {
     sdp: string;
     version: CodexRealtimeWebrtcVersion;
-    model: "gpt-live-1-boulder-alpha";
+    model: "gpt-live-1-boulder-alpha" | "opengeni-azure/gpt-live-1";
     connectionId: string;
     connectionEpoch: number;
     startupFenceSequence: number;
@@ -51,6 +57,125 @@ export type GatewayRealtimeConnectResponse = {
     instructions: string;
     replay: false;
 };
+export type ToolGatewayIdentity = {
+    serverId: string;
+    toolName: string;
+};
+export type ToolGatewayCatalogEntry = {
+    identity: ToolGatewayIdentity;
+    modelName: string;
+    codemodePath: string[];
+    title?: string | undefined;
+    description?: string | undefined;
+    inputSchema: Record<string, unknown>;
+    outputSchema?: Record<string, unknown> | undefined;
+    annotations?: Record<string, unknown> | undefined;
+    icons?: Array<Record<string, unknown>> | undefined;
+    source: "opengeni" | "files" | "docs" | "mcp" | "codex_apps" | "interaction";
+    approval: "none" | "human" | "policy";
+};
+export type ToolGatewayCatalog = {
+    version: 1;
+    accountId: string;
+    workspaceId: string;
+    generation: number;
+    digest: string;
+    createdAt: string;
+    entries: ToolGatewayCatalogEntry[];
+};
+export type ToolGatewayResult = {
+    content: Array<{
+        type: string;
+        [key: string]: unknown;
+    }>;
+    structuredContent?: Record<string, unknown> | undefined;
+    isError?: boolean | undefined;
+    _meta?: Record<string, unknown> | undefined;
+    [key: string]: unknown;
+};
+export type ToolGatewayCallRequest = {
+    operationId?: string | undefined;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    arguments: Record<string, unknown>;
+    siteArtifactId?: string | undefined;
+    siteVersionId?: string | undefined;
+    approvalToken?: string | undefined;
+};
+export type ToolGatewayApprovalRequest = {
+    operationId: string;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    arguments: Record<string, unknown>;
+};
+export type ToolGatewayApprovalResponse = {
+    operationId: string;
+    catalogDigest: string;
+    identity: ToolGatewayIdentity;
+    approvalToken: string;
+    expiresAt: string;
+};
+export type ToolGatewayCallResponse = {
+    operationId: string;
+    catalogDigest: string;
+    result: ToolGatewayResult;
+};
+export type ToolGatewayTarget = {
+    identity: ToolGatewayIdentity;
+} | {
+    path: string[];
+};
+export type ToolGatewayResolvedTool = {
+    version: 1;
+    definitionDigest: string;
+    entry: ToolGatewayCatalogEntry;
+};
+export type ToolGatewayResolveRequest = {
+    target: ToolGatewayTarget;
+    siteArtifactId?: string;
+    siteVersionId?: string;
+};
+export type ToolGatewayInvokeRequest = ToolGatewayResolveRequest & {
+    operationId: string;
+    arguments: Record<string, unknown>;
+    expectedDefinitionDigest?: string;
+    approvalToken?: string;
+};
+export type ToolGatewayInvokeResponse = {
+    operationId: string;
+    tool: ToolGatewayResolvedTool;
+    result: ToolGatewayResult;
+};
+export type ToolGatewayTargetApprovalRequest = {
+    identity: ToolGatewayIdentity;
+    operationId: string;
+    arguments: Record<string, unknown>;
+    expectedDefinitionDigest: string;
+    siteArtifactId?: string;
+    siteVersionId?: string;
+};
+export type ToolGatewayTargetApprovalResponse = {
+    bindingVersion: 2;
+    operationId: string;
+    tool: ToolGatewayResolvedTool;
+    approvalToken: string;
+    expiresAt: string;
+};
+export type ToolGatewayManifestRequest = {
+    identities: ToolGatewayIdentity[];
+    siteArtifactId?: string;
+    siteVersionId?: string;
+};
+export type ToolGatewayManifestResponse = {
+    version: 1;
+    digest: string;
+    tools: ToolGatewayResolvedTool[];
+};
+export type ToolGatewayDeclarationsResponse = {
+    catalogDigest: string;
+    moduleSpecifier: string;
+    source: string;
+};
 export type ActivateCodexRealtimeConnectionRequest = {
     operationId: string;
     browserInstanceId: string;
@@ -114,7 +239,7 @@ export type SyncSessionRealtimeLedgerResponse = {
     }>;
     outbound: SessionRealtimeLedgerEntry[];
 };
-export type SessionRealtimeModel = "gpt-live-1-boulder-alpha" | "supergrok/grok-voice-think-fast-2.0" | "opengeni-gateway/openai/gpt-realtime-2.1" | "opengeni-gateway/openai/gpt-realtime-mini" | "opengeni-gateway/xai/grok-voice-think-fast-2.0" | "workspace-gateway/openai/gpt-realtime-2.1" | "workspace-gateway/openai/gpt-realtime-mini" | "workspace-gateway/xai/grok-voice-think-fast-2.0";
+export type SessionRealtimeModel = "opengeni-azure/gpt-live-1" | "gpt-live-1-boulder-alpha" | "supergrok/grok-voice-think-fast-2.0" | "opengeni-gateway/openai/gpt-realtime-2.1" | "opengeni-gateway/openai/gpt-realtime-mini" | "opengeni-gateway/xai/grok-voice-think-fast-2.0" | "workspace-gateway/openai/gpt-realtime-2.1" | "workspace-gateway/openai/gpt-realtime-mini" | "workspace-gateway/xai/grok-voice-think-fast-2.0";
 export type WorkspaceRealtimeModelCatalogItem = {
     id: SessionRealtimeModel;
     label: string;
@@ -122,6 +247,8 @@ export type WorkspaceRealtimeModelCatalogItem = {
     description: string;
     available: boolean;
     unavailableReason: string | null;
+    /** Machine-readable reason when unavailable, e.g. `insufficient_credits`. */
+    unavailableCode?: string | null | undefined;
     recommended: boolean;
 };
 export type WorkspaceRealtimeModelCatalogResponse = {
@@ -158,9 +285,16 @@ export type RenewSessionRealtimeRequest = {
 export type EndSessionRealtimeRequest = RenewSessionRealtimeRequest & {
     reason: Extract<SessionRealtimeEndReason, "user_stop" | "browser_unload">;
 };
+/** Server instruction to end a live call now (for example, out of credits). */
+export type SessionRealtimeStopInstruction = {
+    code: string;
+    message: string;
+};
 export type SessionRealtimeMutationResponse = {
     mode: SessionRealtimeMode;
     replay: boolean;
+    /** Present on a heartbeat when the server stopped extending the lease. */
+    stop?: SessionRealtimeStopInstruction | undefined;
 };
 export type SessionStatus = "queued" | "running" | "idle" | "requires_action" | "recovering" | "waiting_capacity" | "failed" | "cancelled";
 export type SandboxBackend = "docker" | "modal" | "local" | "none" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted" | "opensandbox";
@@ -220,6 +354,7 @@ export type SessionCapabilities = {
         codecs: ("h264-mp4" | "vp9-webm")[];
         reason: CapabilityUnavailableReason | null;
     };
+    /** @deprecated Use the managed ComputerSession interaction tools. */
     ComputerUse: {
         available: boolean;
         readOnly: boolean;
@@ -232,6 +367,7 @@ export type TerminalCapability = SessionCapabilities["Terminal"];
 export type GitCapability = SessionCapabilities["Git"];
 export type DesktopStreamCapability = SessionCapabilities["DesktopStream"];
 export type RecordingCapability = SessionCapabilities["Recording"];
+/** @deprecated Use the managed ComputerSession interaction tools. */
 export type ComputerUseCapability = SessionCapabilities["ComputerUse"];
 export type StreamUrlRotatedPayload = {
     url: string;
@@ -309,7 +445,7 @@ export type RepositoryResourceRef = {
     /** Exact immutable commit that repository materialization must produce. */
     expectedCommitSha?: string | undefined;
     /**
-     * Optional workspace-relative override. When omitted, OpenGeni persists
+     * Optional workspace-relative override. When omitted, Opengeni persists
      * `repos/<encoded-host>/<owner>/<repo>` so equal names on different Git
      * providers do not collide. Explicit paths are portable, traversal-free, and
      * collision-checked case-insensitively before sandbox execution.
@@ -326,6 +462,12 @@ export type RepositoryResourceRef = {
     connectionId?: string | undefined;
     githubInstallationId?: number | undefined;
     githubRepositoryId?: number | undefined;
+    /**
+     * Best-effort materialization: a failed clone logs a warning and the
+     * session continues without this repository instead of failing sandbox
+     * setup. Omit it to keep a failed clone fatal.
+     */
+    optional?: boolean | undefined;
 };
 /** Value mirror of `@opengeni/contracts`; parity-tested without importing it from ordinary SDK entries. */
 export declare const DEFAULT_FILE_RESOURCE_MOUNT_ROOT: ".opengeni/files";
@@ -339,15 +481,24 @@ export type ResourceRef = RepositoryResourceRef | FileResourceRef;
 export type ToolRef = {
     kind: "mcp";
     id: string;
+    /** Narrow this connection's authorized tool names; an empty list allows none. */
+    allowedTools?: string[] | undefined;
+    /** Skip this server when its connect/tools-list fails instead of failing the turn. */
     optional?: boolean | undefined;
+    /**
+     * Put this server's tool schemas on the first model request instead of behind
+     * `tool_search` progressive discovery. A startup choice only; grants nothing.
+     */
     eager?: boolean | undefined;
 };
 export type SessionToolPolicy = {
     mode: "workspace_default" | "explicit" | "inherited";
     inheritedFromSessionId: string | null;
+    excludedMcpServerIds?: string[] | undefined;
 };
 export type UpdateSessionToolPolicyRequest = {
     mode: "workspace_default";
+    excludedMcpServerIds?: string[] | undefined;
     expectedVersion: number;
 } | {
     mode: "explicit";
@@ -377,10 +528,20 @@ export type SessionEffectiveToolPolicy = {
     };
     idsTruncated: boolean;
 };
+export type SessionGoalReportRequirement = {
+    id: string;
+    title: string;
+};
+export type SessionGoalReportDelivery = {
+    requirementId: string;
+    artifactId: string;
+    inspectionReceiptId: string;
+};
 export type GoalSpec = {
     text: string;
     successCriteria?: string | undefined;
     rootConstraints?: string[] | undefined;
+    reportRequirements?: SessionGoalReportRequirement[] | undefined;
     maxAutoContinuations?: number | undefined;
     mutationPolicy?: SessionGoalMutationPolicy | undefined;
 };
@@ -400,6 +561,28 @@ export type SessionMcpCredentialUpdateInput = {
     id: string;
     headers: Record<string, string>;
 };
+export type RotateSessionMcpCredentialsRequest = {
+    operationKey: string;
+    updates: Array<{
+        id: string;
+        expectedCredentialVersion: number;
+        expectedServerUrl: string;
+    } & ({
+        headers: Record<string, string>;
+    } | {
+        nativeConnectionId: string;
+        replacementServerUrl?: string | undefined;
+    })>;
+};
+export type RotateSessionMcpCredentialsReceipt = {
+    operationKey: string;
+    sessionId: string;
+    servers: Array<{
+        id: string;
+        credentialVersion: number;
+    }>;
+    appliedAt: string;
+};
 export type SessionMcpApprovalPolicy = boolean | string[];
 export type SessionMcpServerMetadata = {
     id: string;
@@ -414,9 +597,14 @@ export type UpdateSessionMcpApprovalPolicyRequest = {
     requireApproval: SessionMcpApprovalPolicy;
 };
 export type UpdateSessionMcpApprovalPolicyResponse = {
-    server: SessionMcpServerMetadata;
+    server: SessionMcpApprovalPolicyTarget;
     effectiveFrom: "next_attempt";
 };
+export type SessionMcpApprovalPolicyTarget = SessionMcpServerMetadata | {
+    id: string;
+    source: "workspace";
+    requireApproval: SessionMcpApprovalPolicy;
+};
 export type ConnectionKind = "oauth2" | "api_key" | "app_install" | "delegated";
 export type ConnectionStatus = "active" | "needs_reauth" | "revoked" | "error";
 export type UserResourceDelegation = {
@@ -433,13 +621,21 @@ export type UserResourceDelegation = {
     grantGeneration: number;
     resourceVersionId?: string | null | undefined;
 };
-export type McpConnectionAuthoritySelection = {
+export type McpConnectionAccountSelection = {
     serverId: string;
     connectionId: string;
-    userDelegation: UserResourceDelegation;
 };
 export type McpServerConnectionRef = {
     connectionId?: string | undefined;
+    accountSelection?: "all_eligible" | undefined;
+    authoritySource?: "host" | undefined;
+    /** accepted_turn is configuration-only; each accepted owner must select a grant. */
+    hostBinding?: {
+        bindingId: string;
+        generation: number;
+    } | {
+        selection: "accepted_turn";
+    } | undefined;
     provider?: string | undefined;
     providerDomain: string;
     kind?: ConnectionKind | undefined;
@@ -461,6 +657,7 @@ export type McpPersonalConnectionDelegation = {
 export type McpPersonalConnectionSummary = Pick<McpPersonalConnectionDelegation, "serverId" | "providerDomain">;
 export type ConnectionMetadata = {
     id: string;
+    authorityId?: string | undefined;
     accountId: string;
     workspaceId: string;
     subjectId: string | null;
@@ -481,17 +678,63 @@ export type ConnectionMetadata = {
     createdAt: string;
     updatedAt: string;
 };
-export type CreateConnectionRequest = {
+/** Where a brokered credential is written on each outbound provider request. */
+export type ConnectionCredentialPlacement = {
+    carrier: "header" | "query" | "cookie";
+    name: string;
+    value: string;
+    /** Prepended to `value`, for example `"Bearer "` or `"Token "`. */
+    prefix?: string | undefined;
+};
+/**
+ * Write-only secret for a brokered `api_key` Connection (API Integrations and
+ * MCP servers). The broker never infers a location: use exact `headers`, or
+ * `placements` when the provider expects a query parameter or cookie (API
+ * Integrations only) or a prefixed value. Match the carrier/name reported by
+ * `previewApiIntegration().auth`. A bare `{ apiKey }` is rejected with 422.
+ *
+ * @example { headers: { Authorization: "Token abc123" } }
+ * @example { placements: [{ carrier: "header", name: "X-Api-Key", value: "abc123" }] }
+ */
+export type ApiKeyConnectionCredential = {
+    headers: Record<string, string>;
+    placements?: never;
+} | {
+    placements: ConnectionCredentialPlacement[];
+    headers?: never;
+};
+type CreateConnectionRequestBase = {
     providerDomain: string;
-    kind: ConnectionKind;
     ownership?: ConnectionOwnership | undefined;
     /** @deprecated use ownership */
     subjectId?: string | null | undefined;
-    credential: Record<string, unknown>;
     grantedScopes?: string[] | undefined;
     expiresAt?: string | null | undefined;
-    metadata?: Record<string, unknown> | undefined;
+    operationId?: string | undefined;
+    /** Direct OpenAI/Azure keys only: verify the provider/model before saving. */
+    verifyModelAccess?: boolean | undefined;
 };
+export type CreateConnectionRequest = CreateConnectionRequestBase & ({
+    kind: "api_key";
+    credential: ApiKeyConnectionCredential;
+    metadata?: Record<string, unknown> | undefined;
+} | {
+    /**
+     * Workspace model-provider key lane (Vercel AI Gateway / OpenRouter),
+     * selected by `metadata.credentialRole`; not usable by integrations.
+     */
+    kind: "api_key";
+    credential: {
+        apiKey: string;
+    };
+    metadata: {
+        credentialRole: string;
+    } & Record<string, unknown>;
+} | {
+    kind: Exclude<ConnectionKind, "api_key">;
+    credential: Record<string, unknown>;
+    metadata?: Record<string, unknown> | undefined;
+});
 export type PersonalGitHubConnectionMetadata = {
     credentialRole: "opengeni_github_personal";
     providerFamily: "github";
@@ -585,9 +828,20 @@ export type VerifyPersonalGitHubRepositorySelectionsRequest = {
     idempotencyKey: string;
 };
 export type OpenGeniSlackBotInstallRequest = {
-    /** Existing OpenGeni Slack bot connection to reinstall in place. */
+    /** Existing Opengeni Slack bot connection to reinstall in place. */
     connectionId?: string | undefined;
 };
+export type AvailableOpenGeniSlackBots = {
+    connections: ConnectionMetadata[];
+    organizationSharedConnectionIds: string[];
+};
+export type UpdateOpenGeniSlackBotOrganizationAccess = {
+    enabled: boolean;
+};
+export type OpenGeniSlackBotOrganizationAccess = {
+    enabled: boolean;
+    generation: number;
+};
 export type FikenInstallRequest = {
     apiToken: string;
     defaultCompanySlug?: string | undefined;
@@ -595,6 +849,7 @@ export type FikenInstallRequest = {
     connectionId?: string | undefined;
 };
 export type FikenOAuthStartRequest = {
+    returnPath?: string | undefined;
     /** Existing Fiken connection to re-authorize in place (reconnect). */
     connectionId?: string | undefined;
 };
@@ -620,7 +875,7 @@ export type SlackInstallationBinding = {
     slackTeamName: string;
     botId: string;
     botUserId: string;
-    botDisplayName: "OpenGeni" | "OpenGeni Staging";
+    botDisplayName: "Opengeni" | "Opengeni Staging" | "OpenGeni" | "OpenGeni Staging";
     state: SlackInstallationBindingState;
     quarantineReason: string | null;
     version: number;
@@ -838,6 +1093,8 @@ export type UpdateConnectionRequest = {
     grantedScopes?: string[] | undefined;
     expiresAt?: string | null | undefined;
     metadata?: Record<string, unknown> | undefined;
+    expectedVersion?: number | undefined;
+    operationId?: string | undefined;
 };
 export type ConnectionResponse = {
     connection: ConnectionMetadata;
@@ -852,7 +1109,12 @@ export type OAuthStartRequest = {
     resource?: string | undefined;
     requestedScopes?: string[] | undefined;
     returnPath?: string | undefined;
+    /** Exact trusted-host destination; requires verified external-user mode. */
+    returnUrl?: string | undefined;
     connectionId?: string | undefined;
+    /** Sign in a further account instead of refreshing your existing active one.
+     * Never combined with connectionId. */
+    newAccount?: true | undefined;
     ownership?: ConnectionOwnership | undefined;
     oauthClient?: {
         clientId: string;
@@ -902,11 +1164,11 @@ export type ServiceTurnInitiator = TurnInitiator & {
     kind: "service";
 };
 export type TurnInitiatorContext = Record<string, unknown>;
-/** Bounded host provenance; OpenGeni-owned lineage keys are reserved. */
+/** Bounded host provenance; Opengeni-owned lineage keys are reserved. */
 export type ServiceTurnInitiatorContext = TurnInitiatorContext;
 export type IntegrationClientMetadata = {
     client_id: string;
-    client_name: "OpenGeni";
+    client_name: "Opengeni" | "OpenGeni";
     redirect_uris: string[];
     token_endpoint_auth_method: "none";
     grant_types: Array<"authorization_code" | "refresh_token">;
@@ -917,6 +1179,11 @@ export type SessionTenancyCreateCapabilities = {
     activated: boolean;
     canCreatePrivate: boolean;
     reason: "available" | "not_activated" | "managed_session_required" | "unavailable";
+    /**
+     * Who sees a new chat or schedule unless the person picks otherwise. Absent
+     * from older servers, which means "workspace".
+     */
+    defaultVisibility?: SessionVisibility;
 };
 export type SessionTenancyPublicProjection = {
     visibility: SessionVisibility;
@@ -932,6 +1199,38 @@ export type UpdateSessionVisibilityRequest = {
     visibility: SessionVisibility;
     expectedAuthorityEpoch: number;
     idempotencyKey: string;
+    /**
+     * "Make private anyway": stop the chat's work in progress (the running or
+     * parked response, queued messages, an active goal) as part of the change.
+     * Without it such work refuses the change with reason `active_work`.
+     */
+    stopActiveWork?: boolean;
+};
+/** What still refuses a visibility change after the chat's own work stops. */
+export type SessionTenancyBlocker = "nonterminal_turn" | "nonterminal_attempt" | "unsettled_interruption" | "pending_system_update" | "pending_human_input" | "pending_tool_receipt" | "run_state" | "active_goal" | "capacity_waiter" | "active_realtime" | "active_scheduled_task" | "workspace_mutation_admission" | "retained_process" | "active_sandbox_access" | "shared_sandbox_group";
+/**
+ * What a change to Only me stops or removes when `stopActiveWork` is sent:
+ * the chat's visible work and anything that carries another person's access.
+ */
+export type SessionVisibilityWork = {
+    runningTurnCount: number;
+    queuedTurnCount: number;
+    activeGoal: boolean;
+    /** A voice session is live in the chat. */
+    liveVoice: boolean;
+    /** Pending updates that carry another person's access. */
+    otherPeoplePendingUpdateCount: number;
+    /** Account choices for the chat that only another person may use. */
+    otherPeopleAccountChoiceCount: number;
+};
+export type SessionVisibilityChangePreview = {
+    visibility: SessionVisibility;
+    targetVisibility: SessionVisibility;
+    authorityEpoch: number;
+    /** Nothing else refuses the change; an empty value means it just happens. */
+    work: SessionVisibilityWork;
+    /** @deprecated Always `null`: nothing refuses a change to Only me any more. */
+    blocker: SessionTenancyBlocker | null;
 };
 export type UpdateSessionVisibilityResponse = {
     operationId: string;
@@ -948,7 +1247,6 @@ export type ForkSessionRequest = {
     visibility: SessionVisibility;
     workspaceSharedAcknowledged: boolean;
     rigId?: string | null | undefined;
-    variableSetIds?: string[] | undefined;
 };
 export type ForkSessionResponse = {
     operationId: string;
@@ -962,16 +1260,36 @@ export type ForkSessionResponse = {
     replay: boolean;
 };
 export type SessionBackgroundCommandActivity = {
+    unavailableCount?: number | undefined;
     state: "running" | "stopping";
     count: number;
 };
+/** Stored reconciliation checkpoints, not a live provider probe or native ACK. */
+export type SessionBackgroundCommandReconciliation = {
+    lastOutcome: string | null;
+    attempts: number;
+    dueAt: string;
+    claimedAt: string | null;
+    terminalProof: {
+        outcome: "exited";
+        exitCode: number;
+        observedAt: string;
+    } | {
+        outcome: "lost";
+        exitCode: null;
+        observedAt: string;
+    } | null;
+};
 export type SessionBackgroundCommand = {
+    observationStatus?: "unavailable" | undefined;
+    reconciliation?: SessionBackgroundCommandReconciliation | undefined;
     id: string;
     workspaceId: string;
     sessionId: string;
     provider: "managed" | "connected_machine";
     state: "running" | "stopping" | "exited" | "lost";
     commandPreview: string;
+    commandText?: string | undefined;
     cancelRequestedAt: string | null;
     exitCode: number | null;
     settlementReason: string | null;
@@ -986,12 +1304,36 @@ export type CancelSessionBackgroundCommandResult = {
     command: SessionBackgroundCommand;
     accepted: boolean;
 };
+/** Why the runtime refused to start a session's next turn. */
+export type SessionAdmissionBlock = {
+    reason: "database_claim_rejected" | "initiator_membership_required" | "personal_resource_grant_required";
+    sqlState: string | null;
+    retryPolicy: "explicit_recheck";
+    blockedAt: string;
+};
 export type Session = {
+    /** Detail-only dispatch evidence; delivery does not prove turn execution. */
+    dispatchWait?: {
+        state: "pending" | "acknowledged" | "unavailable";
+        attempts: number;
+        nextAttemptAt: string | null;
+        lastError: string | null;
+    } | null | undefined;
+    /** Detail-only failure evidence through lastSequence; independent of timeline paging. */
+    failureDiagnostics?: {
+        eventId: string;
+        sequence: number;
+        turnId: string | null;
+        occurredAt: string;
+        payload: unknown;
+    } | null | undefined;
+    bundledSkillIds?: BundledSkillId[] | undefined;
     id: string;
     workspaceId: string;
     accountId: string;
     status: SessionStatus;
     backgroundCommandActivity?: SessionBackgroundCommandActivity | undefined;
+    hasSchedules?: boolean | undefined;
     initialMessage: string;
     title: string | null;
     titleSource: "user" | "agent" | null;
@@ -1020,10 +1362,11 @@ export type Session = {
     activeEpoch: number;
     /** Explicit connected-machine project root; null uses the agent launch root. */
     workingDir: string | null;
-    /** Ordered low-to-high precedence; the final entry is the legacy singular alias. */
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy selection. Use `vaultPolicy`. */
     variableSetIds?: string[] | undefined;
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy selection. */
     variableSetId: string | null;
-    /** @deprecated use variableSetId */
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy selection. */
     environmentId: string | null;
     rigId: string | null;
     rigVersionId: string | null;
@@ -1031,10 +1374,24 @@ export type Session = {
     channelId: string | null;
     firstPartyMcpPermissions: string[] | null;
     firstPartyMcpTools: FirstPartyMcpToolName[];
+    /**
+     * Frozen agent configuration; null for sessions created without one (legacy
+     * behavior). Omitted by older servers.
+     */
+    agent?: ResolvedAgentConfig | null | undefined;
+    /** Capability-level view of what a configured session can use; null for legacy. */
+    effectiveTools?: AgentEffectiveTools | null | undefined;
     mcpServers: SessionMcpServerMetadata[];
+    mcpApprovalPolicies?: Record<string, SessionMcpApprovalPolicy> | undefined;
     parentSessionId: string | null;
     /** Immutable server-authored nested-agent lineage and policy snapshot. */
     rootSessionId: string;
+    /**
+     * The task root's usage limit and recorded API-equivalent model usage, on
+     * detail reads and create responses. Omitted by older servers and list
+     * reads: omission never means "no limit".
+     */
+    usageLimit?: SessionUsageLimit | undefined;
     nestedAgentDepth: number;
     maxNestedAgentDepthOverride: number | null;
     effectiveMaxNestedAgentDepth: number;
@@ -1047,16 +1404,32 @@ export type Session = {
     queueHeadPosition: number;
     queueTailPosition: number;
     effectiveControl: EffectiveSessionControl;
+    /** Current durable input wait; an elapsed deadline does not prove a new turn started. */
+    inputWait?: {
+        deadlineAt: string;
+        reason: string;
+    } | null | undefined;
     lastSequence: number;
     /** Multi-account Codex (P1): the account this session is pinned to (null ⇒ follow workspace active). */
     codexPinnedCredentialId?: string | null;
     /** Multi-account Codex (P1): the account the most recent turn ran on (the "Running on:" indicator). */
     codexLastCredentialId?: string | null;
+    /** Accepted current-turn account, separate from future session preferences. */
+    codexCurrentSelection?: {
+        credentialId: string | null;
+        waiting: boolean;
+    } | null | undefined;
     /**
      * Frozen at create. `remote_v2` ⇒ Codex remote compaction + Codex-only model
      * admission; `portable` ⇒ plaintext compaction and free provider switching.
      */
     codexCompactionMode: "remote_v2" | "portable";
+    /**
+     * The `code_search` decision frozen at create. A turn gets the tool only when
+     * this is true, the deployment still offers it, the workspace is not Off, and
+     * the turn has POSIX compute.
+     */
+    codeSearchEnabled?: boolean;
     /** Personal (authenticated subject) workspace pin state, never workspace-global. */
     pinned?: boolean;
     /** Stable pin ordering key; null when this subject has not pinned the session. */
@@ -1072,6 +1445,20 @@ export type Session = {
     /** Personal archive state. */
     archived?: boolean;
     archivedAt?: string | null;
+    /**
+     * Read-only imported timeline, independent of personal archive/restore state.
+     * Never model-facing conversation history.
+     */
+    importedArchive?: {
+        importId: string;
+        importedAt: string;
+        readOnly: true;
+    } | undefined;
+    /**
+     * Idle-session archive state and keep-live exemption, workspace-wide and
+     * independent of the personal `archived` flag. Absent on older servers.
+     */
+    retention?: SessionRetention | undefined;
     /** Optimistic archive-state revision. */
     archiveVersion?: number;
     /** Server-authoritative descendant counts populated by session-list reads. */
@@ -1080,10 +1467,12 @@ export type Session = {
         totalDescendants: number;
         runningDescendants: number;
         queuedDescendants: number;
+        waitingDescendants?: number | undefined;
         attentionDescendants: number;
         pausedDescendants: number;
         failedDescendants: number;
         unreadDescendants?: number | undefined;
+        unreadFailedDescendants?: number | undefined;
         activelyWorkingDescendants?: number | undefined;
         /**
          * Earliest moment one of the counted `attentionDescendants` entered
@@ -1098,6 +1487,18 @@ export type Session = {
      * list and lineage reads for `requires_action` sessions; null otherwise.
      */
     requiresActionSince?: string | null | undefined;
+    /**
+     * Set while the runtime refuses to start this session's next turn (status
+     * `requires_action`, but nothing is asked of a person). Accepted work is
+     * kept; Resume or a new Send/Steer rechecks admission. Absent on older servers.
+     */
+    admissionBlock?: SessionAdmissionBlock | null | undefined;
+    /** Agent access scope; absent on servers before the agent-access release. */
+    agentAccess?: SessionAgentAccess | undefined;
+    /** Opaque end-user label; null when the session carries none. */
+    scopeSubjectId?: SessionScopeSubjectId | null | undefined;
+    /** Memory scope; absent on servers before the agent-access release. */
+    memoryScope?: SessionMemoryScope | undefined;
     createdAt: string;
     updatedAt: string;
 };
@@ -1106,11 +1507,64 @@ export type CreateSessionResponse = Session & {
     initialTurnId: string | null;
 };
 export type SessionSummary = Session;
-/** Canonical session-list page; pinned rows are excluded from ordinary pages. */
+/**
+ * Compact list-only record, excluding prompts and execution configuration
+ * other than the model and reasoning effort shown with a row.
+ */
+export type SessionListEntry = Pick<Session, "id" | "workspaceId" | "accountId" | "status" | "backgroundCommandActivity" | "hasSchedules" | "title" | "titleSource" | "createdBy" | "channelId" | "parentSessionId" | "rootSessionId" | "effectiveControl" | "inputWait" | "lastSequence" | "pinned" | "pinnedAt" | "pinVersion" | "unread" | "activelyWorking" | "attentionVersion" | "archived" | "archivedAt" | "importedArchive" | "retention" | "archiveVersion" | "treeStats" | "requiresActionSince" | "admissionBlock" | "createdAt" | "updatedAt"> & {
+    displayTitle: string;
+    renameSeed: string;
+    scheduledTaskId: string | null;
+    siteOrigin: {
+        siteId: string;
+        title: string;
+    } | null;
+    /**
+     * Display-only: the latest started turn's model, or the session's stored
+     * default when an explicit settings change is newer or no turn has started.
+     * Rows the SDK projects from an older server's full pages carry the
+     * session's effective model instead. `getSession` remains authoritative for
+     * the composer default.
+     */
+    model?: string | undefined;
+    reasoningEffort?: ReasoningEffort | undefined;
+};
+export type SessionListEntryResponse = Omit<SessionListResponse, "pinned" | "sessions"> & {
+    projection: "summary";
+    pinned: SessionListEntry[];
+    sessions: SessionListEntry[];
+};
+/** Complete metadata for authorized roots and ordinary project trees. */
+export type SessionListTotals = {
+    needsYouCount: number;
+    groups: Array<{
+        channelId: string | null;
+        total: number;
+        attention: number;
+        attentionSince: string | null;
+        failed: number;
+        active: number;
+        queued: number;
+        unread: number;
+        activeWork: number;
+    }>;
+};
 export type SessionListResponse = {
+    totals?: SessionListTotals;
+    needsYouOnly?: true;
+    /** Receipt for the read-only (archived idle session) filter. */
+    contentArchivedOnly?: true;
     pinned: Session[];
     /** True when the server omitted older pins from its bounded pinned section. */
     pinnedTruncated?: boolean;
+    /** Present only when the server recognized and applied additive list filters. */
+    filtersApplied?: true;
+    /** Effective server ordering. Name: ASCII-space trim, ASCII case fold,
+     * UTF-8 byte order, id ASC. Date keys and id ties are DESC. */
+    sortBy?: "updatedAt" | "createdAt" | "name" | "archivedAt";
+    archiveStatus?: "active" | "archived" | "all";
+    /** Server-resolved Site origin filter, when requested. */
+    originSiteId?: string;
     sessions: Session[];
     nextCursor: string | null;
 };
@@ -1210,6 +1664,21 @@ export type UpdateSessionAttentionRequest = {
     activelyWorking?: boolean;
     expectedVersion?: number;
 };
+/**
+ * Idle-session archive state. `archive` is null while the session is live; an
+ * archived session keeps its readable timeline but is read-only.
+ */
+export type SessionRetention = {
+    /** Never archive this session, however long it stays idle. */
+    keepLive: boolean;
+    archive: {
+        state: "archiving" | "archived";
+        archivedAt: string | null;
+    } | null;
+};
+export type UpdateSessionRetentionRequest = {
+    keepLive: boolean;
+};
 export type UpdateSessionArchiveRequest = {
     archived: boolean;
     expectedVersion?: number;
@@ -1219,6 +1688,7 @@ export type LineageNode = {
     children: LineageNode[];
 };
 export type SessionLineageResponse = {
+    sessionHasSchedules?: boolean | undefined;
     ancestors: SessionSummary[];
     children: LineageNode[];
     truncated: boolean;
@@ -1299,19 +1769,78 @@ export type SessionTurn = {
     createdAt: string;
     updatedAt: string;
 };
-export type HumanInputQuestionKind = "text" | "single_select" | "multi_select";
+export type HumanInputQuestionKind = "text" | "single_select" | "multi_select" | "secret";
+/** Options for a generated password (see `@opengeni/contracts` GeneratePasswordSpec). */
+export type GeneratePasswordSpec = {
+    length?: number | undefined;
+    lowercase?: boolean | undefined;
+    uppercase?: boolean | undefined;
+    digits?: boolean | undefined;
+    symbols?: boolean | undefined;
+    symbolSet?: string | undefined;
+    excludeAmbiguous?: boolean | undefined;
+    requireEachClass?: boolean | undefined;
+};
+export type HumanInputSecretSaveTo = "user" | "task" | "workspace";
+/** A secret question's spec; the value is saved to a vault, never to the response. */
+export type HumanInputSecretSpec = {
+    item: string;
+    field?: string | undefined;
+    fieldKind?: "concealed" | "totp" | "text" | undefined;
+    itemType?: "login" | "api_key" | "note" | undefined;
+    username?: {
+        prompt: string;
+        value?: string | null | undefined;
+    } | null | undefined;
+    website?: string | null | undefined;
+    looksLike?: string | null | undefined;
+    pattern?: string | null | undefined;
+    saveTo?: HumanInputSecretSaveTo | undefined;
+    vault?: string | null | undefined;
+    allowGenerate?: boolean | undefined;
+    generate?: GeneratePasswordSpec | null | undefined;
+    autocomplete?: "current-password" | "new-password" | "one-time-code" | "off" | undefined;
+};
+/** Write-only secret value for one secret question: exactly one of `value` or `generate`. */
+export type HumanInputSecretAnswer = {
+    questionId: string;
+    value?: string | undefined;
+    generate?: GeneratePasswordSpec | undefined;
+    username?: string | undefined;
+    saveTo: HumanInputSecretSaveTo;
+    vaultId?: string | undefined;
+};
+/** What the agent and timeline see for an answered secret question. */
+export type HumanInputSecretAnswerResult = {
+    reference: string;
+    username: string | null;
+    vaultName: string;
+    itemName: string;
+    saveTo: HumanInputSecretSaveTo;
+};
 export type HumanInputOption = {
     id: string;
     label: string;
     description?: string | null | undefined;
 };
+export type SkillReviewReference = {
+    removalOperationId?: string | undefined;
+    sourceOperationId: string;
+    skillId: string;
+    revisionId: string;
+    expectedRevisionId: string | null;
+    expectedScopeVersion: number;
+};
 export type HumanInputQuestion = {
+    skillReview?: SkillReviewReference | null | undefined;
     id: string;
     kind: HumanInputQuestionKind;
     prompt: string;
     label?: string | null | undefined;
     helpText?: string | null | undefined;
     options: HumanInputOption[];
+    /** Required exactly when `kind` is "secret"; null otherwise. */
+    secret?: HumanInputSecretSpec | null | undefined;
     required: boolean;
     allowOther: boolean;
     validation?: {
@@ -1323,6 +1852,8 @@ export type HumanInputAnswer = {
     questionId: string;
     values: string[];
     other?: string | null | undefined;
+    /** Secret questions: the saved reference, never the value. */
+    secret?: HumanInputSecretAnswerResult | undefined;
 };
 export type HumanInputResponse = {
     outcome: "answered";
@@ -1333,6 +1864,8 @@ export type HumanInputResponse = {
 export type SubmitHumanInputResponseRequest = {
     outcome: "answered";
     answers: HumanInputAnswer[];
+    /** Write-only secret values; never echoed in events or responses. */
+    secretAnswers?: HumanInputSecretAnswer[] | undefined;
 } | {
     outcome: "skipped";
 };
@@ -1354,10 +1887,10 @@ export type SessionHumanInputRequest = {
     createdAt: string;
     updatedAt: string;
 };
-export declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.variable_sets.updated", "session.runtime.configured", "session.event.envelope_omitted", "session.status.changed", "session.realtime.started", "session.realtime.ended", "session.requiresAction", "session.humanInput.requested", "session.context.compaction.requested", "session.context.compaction.started", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "user.humanInputResponse", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.capacity_waiting", "turn.startup.phase.started", "turn.startup.phase.completed", "turn.startup.phase.failed", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.request", "agent.model.usage", "tool.auth_needed", "credential.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "session.command.backgrounded", "session.command.finished", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.progress", "goal.rewrite.proposed", "goal.rewrite.rejected", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.held", "goal.continuation", "system.update.pending", "system.update.delivered", "system.update.superseded", "system.update.cancelled", "system.update.settled", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "session.visibility.changed", "session.personal_resources.attached", "session.mcp.approval_policy.updated", "session.tool_policy.updated", "codex.account.switched", "codex.credential.selected", "codex.fleet.decision", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
+export declare const SESSION_EVENT_TYPES: readonly ["usage.threshold_reached", "usage.exhausted", "usage.period_reset", "session.created", "session.variable_sets.updated", "session.runtime.configured", "session.event.envelope_omitted", "session.status.changed", "session.realtime.started", "session.realtime.ended", "session.requiresAction", "session.humanInput.requested", "session.notification.posted", "session.notification.withdrawn", "session.context.compaction.requested", "session.context.compaction.started", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "user.humanInputResponse", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.dispatch.expired", "turn.capacity_waiting", "turn.startup.phase.started", "turn.startup.phase.completed", "turn.startup.phase.failed", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.request", "agent.model.usage", "tool.auth_needed", "credential.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "session.command.backgrounded", "session.command.finished", "session.wait.started", "session.wait.finished", "sandbox.command.output.delta", "artifact.created", "knowledge.confirmation.recovered", "instruction.confirmation.recovered", "knowledge.source.prepared", "knowledge.source.failed", "goal.set", "goal.updated", "goal.progress", "goal.rewrite.proposed", "goal.rewrite.rejected", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.held", "goal.continuation", "system.update.pending", "system.update.delivered", "system.update.superseded", "system.update.cancelled", "system.update.settled", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "session.visibility.changed", "session.personal_resources.attached", "session.mcp.approval_policy.updated", "session.tool_policy.updated", "session.agent.updated", "session.skills.updated", "session.model_settings.updated", "session.usage_limit.updated", "codex.account.switched", "subscription.account.selected", "subscription.account.switched", "codex.account.selection.changed", "model_account.selection.changed", "codex.credential.selected", "codex.fleet.decision", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
 export type KnownSessionEventType = (typeof SESSION_EVENT_TYPES)[number];
 /**
- * Event types the SDK knows about today, kept open so a newer OpenGeni server
+ * Event types the SDK knows about today, kept open so a newer Opengeni server
  * can introduce event types without breaking older SDK consumers.
  */
 export type SessionEventType = KnownSessionEventType | (string & {});
@@ -1367,6 +1900,8 @@ export type SessionEvent = {
     sessionId: string;
     /** Per-session sequence number: positive, contiguous, strictly increasing. */
     sequence: number;
+    /** Server-owned durable high-water mark for a synthetic compact event. */
+    coveredThrough?: number | undefined;
     type: SessionEventType;
     payload: unknown;
     occurredAt: string;
@@ -1478,11 +2013,17 @@ export type SessionEventPage = {
 };
 export type ToolAuthNeededPayload = {
     serverId: string;
+    /** Configured connector for recovery; serverId retains the execution alias. */
+    canonicalServerId?: string | undefined;
+    /** Scope of the exact failed account, not the canonical catalog default. */
+    connectionSubjectScope?: "workspace" | "subject" | undefined;
     toolName?: string | null | undefined;
     providerDomain: string;
     provider?: string | undefined;
     connectionId?: string | null | undefined;
-    reason: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable";
+    authoritySource?: "host" | undefined;
+    reason: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable" | "designated_credential_unavailable";
+    hostReason?: "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable" | "designated_credential_unavailable" | undefined;
     scopes?: string[] | undefined;
     resource?: string | undefined;
     selectedResources?: Array<{
@@ -1500,6 +2041,15 @@ export type ToolAuthNeededPayload = {
         rationale: string;
         requiredVariables: string[];
     } | undefined;
+    /** Agent suggestion; never a connection or permission grant. */
+    setupRequest?: {
+        kind: "mcp";
+        ownership?: "personal" | "workspace" | undefined;
+        mcpSetup?: import("@opengeni/contracts/prepared-mcp-setup").PreparedMcpSetup | undefined;
+        name: string;
+        endpointUrl: string;
+        rationale: string;
+    } | undefined;
 };
 export type AgentTextDeltaPayload = {
     text: string;
@@ -1512,6 +2062,11 @@ export type AgentToolCallCreatedPayload = {
     name: string;
     arguments: unknown;
     raw?: unknown | undefined;
+    /**
+     * Content-free analytics family: an Opengeni first-party tool name,
+     * `integration:<reviewed domain>`, or `custom`. Absent when unclassified.
+     */
+    toolFamily?: string | undefined;
 };
 export type AgentToolCallOutputPayload = {
     id: string | null;
@@ -1545,7 +2100,7 @@ export type CodexFleetDecisionEventPayload = {
     actual: {
         outcome: "selected" | "waiting" | "none";
         candidateKey: string | null;
-        reason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "none";
+        reason: "lease_reused" | "pin" | "rotation" | "active" | "all_capped" | "allocator_disabled" | "none";
     };
     comparison: CodexFleetShadowComparison;
     replay: {
@@ -1665,11 +2220,16 @@ export type FsTreeNode = {
     truncated: boolean;
 };
 export type FsEncoding = "utf8" | "base64";
+export type FileSystemRouteIdentity = {
+    epoch: number;
+    root: string;
+};
 export type FsListRequest = {
     path?: string;
     depth?: number;
     maxEntries?: number;
     includeHidden?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsListResponse = {
     root: FsTreeNode;
@@ -1684,8 +2244,11 @@ export type FsListBatchResponse = {
 };
 export type FsReadRequest = {
     path: string;
+    /** Confine this read to the session's working directory, refusing symlinks. */
+    workspaceOnly?: boolean;
     encoding?: FsEncoding;
     maxBytes?: number;
+    route?: FileSystemRouteIdentity;
 };
 export type FsReadResponse = {
     path: string;
@@ -1712,6 +2275,7 @@ export type FsWriteRequest = {
     content: string;
     overwrite?: boolean;
     createParents?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsWriteResponse = {
     path: string;
@@ -1721,6 +2285,7 @@ export type FsWriteResponse = {
 export type FsDeleteRequest = {
     path: string;
     recursive?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsDeleteResponse = {
     revision: number;
@@ -1730,6 +2295,7 @@ export type FsMoveRequest = {
     newPath: string;
     overwrite?: boolean;
     createParents?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsMoveResponse = {
     path: string;
@@ -1739,6 +2305,7 @@ export type FsMoveResponse = {
 export type FsMkdirRequest = {
     path: string;
     recursive?: boolean;
+    route?: FileSystemRouteIdentity;
 };
 export type FsMkdirResponse = {
     path: string;
@@ -2099,18 +2666,45 @@ export type IncidentTelemetryPreflightInput = Omit<IncidentTelemetryPreflight, "
     requiredVariableNames?: string[] | undefined;
 };
 export type ScheduledTaskAgentConfig = {
+    /** Agent configuration for every generated session; omitted keeps legacy behavior. */
+    agent?: AgentConfigRequest | undefined;
+    /**
+     * Connector accounts a person pinned for a schedule that starts its own
+     * session. Each pinned pair narrows its connector; every other connector
+     * uses the owner's current accounts at each run.
+     */
+    pinnedAccounts?: McpConnectionAccountSelection[] | undefined;
+    /** Skip an occurrence instead of running without an unusable pinned account. */
+    pinnedAccountsRequired?: true | undefined;
+    knowledgeSource?: Extract<ScheduledTaskAction, {
+        kind: "knowledge_source_sync";
+    }> | undefined;
+    bundledSkillIds?: BundledSkillId[] | undefined;
     prompt: string;
     resources: ResourceRef[];
     tools: ToolRef[];
+    /**
+     * Present when runs follow the workspace's default connectors (minus the
+     * excluded ones) plus `tools`; absent when runs get exactly `tools`.
+     */
+    toolPolicy?: ScheduledTaskToolPolicy | undefined;
     metadata: Record<string, unknown>;
     slackBotConnectionId?: string | undefined;
+    /** Slack channel a person chose for this task's bot posts; requires slackBotConnectionId. */
+    slackBotChannelId?: string | undefined;
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
     executionClass?: "incident_telemetry" | undefined;
     incidentTelemetryPreflight?: IncidentTelemetryPreflight | undefined;
     maxNestedAgentDepth?: number | undefined;
+    /** Seconds a run may wait on a person before the scheduler answers for it. */
+    approvalTimeoutSeconds?: number | undefined;
 };
 export type ScopedKnowledgeScope = {
     kind: "organization";
@@ -2161,6 +2755,13 @@ export type ScheduledTask = {
     accountId: string;
     workspaceId: string;
     name: string;
+    /** Immutable execution owner; null for workspace/service tasks. */
+    ownerSubjectId: string | null;
+    /**
+     * Who can see this schedule. `workspace`: everyone in the workspace.
+     * `private`: only its owner; its runs create Only me chats owned by them.
+     */
+    visibility: SessionVisibility;
     status: ScheduledTaskStatus;
     schedule: ScheduledTaskScheduleSpec;
     temporalScheduleId: string;
@@ -2170,25 +2771,155 @@ export type ScheduledTask = {
     agentConfig: ScheduledTaskAgentConfig;
     createdBy?: TurnInitiator | undefined;
     createdByContext?: TurnInitiatorContext | undefined;
-    personalConnections?: McpPersonalConnectionSummary[] | undefined;
     authorityRevision: number;
     executionDigest: string;
     targetSessionId: string | null;
     reusableSessionId: string | null;
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy selection. Use `vaultPolicy`. */
     variableSetId: string | null;
-    /** @deprecated use variableSetId */
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy selection. */
     environmentId: string | null;
     rigId: string | null;
+    /** Vaults every run may resolve secret references from (the task vault is always included). */
+    vaultPolicy?: VaultPolicy | undefined;
     metadata: Record<string, unknown>;
     createdAt: string;
     updatedAt: string;
+    /** Read-only: what `refreshScheduledTaskAccess` would change, for a viewer who can act on it. */
+    policyDrift?: ScheduledTaskPolicyDrift | null | undefined;
+    /** Read-only: which accounts a run would use if it started now, for a viewer who can act on it. */
+    accountPlan?: ScheduledTaskAccountPlan | undefined;
+    /** Read-only: why it paused itself, or why its owner was told its runs keep failing. */
+    blocker?: ScheduledTaskBlocker | undefined;
+};
+/**
+ * What blocks a schedule. `paused`: no later run could start until a person
+ * acts, so it paused itself; resume it once the cause is fixed. `notified`:
+ * its scheduled runs kept failing or being skipped and its owner was told
+ * once; it keeps running. `message` says what would unblock it.
+ */
+export type ScheduledTaskBlocker = {
+    state: "paused" | "notified";
+    /** Stable machine reason, such as `scheduled_session_paused`; tolerate new ones. */
+    reason: string;
+    message: string;
+    /** The run that showed the blocker (the first of a failing streak). */
+    runId: string;
+    since: string;
+};
+/**
+ * What an admin sees of someone else's Only me schedule: that it exists, whose
+ * it is, how often it runs and what it costs. Never its name, prompt, settings
+ * or runs.
+ */
+export type PrivateScheduledTaskSummary = {
+    id: string;
+    ownerSubjectId: string;
+    /** The owner's display name or email, when known. */
+    ownerName: string | null;
+    status: ScheduledTaskStatus;
+    schedule: ScheduledTaskScheduleSpec;
+    lastRunAt: string | null;
+    /** Usage of this schedule's runs over the last 30 days. */
+    last30Days: {
+        runs: number;
+        creditUsd: number;
+        estimatedProviderUsd: number;
+    };
+    createdAt: string;
+};
+/** One connector named in a scheduled task's access report. */
+export type ScheduledTaskAccessConnector = {
+    id: string;
+    name: string;
+};
+/**
+ * A schedule that follows the workspace's default connectors at each run,
+ * the way a new chat does. Connectors a person turned off stay off.
+ */
+export type ScheduledTaskToolPolicy = {
+    mode: "workspace_default";
+    excludedMcpServerIds: string[];
+};
+/**
+ * What a scheduled task's saved connectors and Opengeni tools lack compared
+ * with what its owner would get by saving it again now, plus pinned accounts
+ * that can no longer be used.
+ */
+export type ScheduledTaskPolicyDrift = {
+    /** Workspace default connectors that new schedules get and this one lacks. */
+    missingConnectors: ScheduledTaskAccessConnector[];
+    /** Connectors this schedule names that this workspace no longer sets up; refresh drops them. */
+    unavailableConnectors: ScheduledTaskAccessConnector[];
+    /** Default Opengeni tools missing from an agent-created task's frozen tools. */
+    missingOpenGeniTools: FirstPartyMcpToolName[];
+    /** Connectors whose pinned account can no longer be used; runs continue without them. */
+    unavailableAccounts: ScheduledTaskAccessConnector[];
+    /** Whether this viewer may run the refresh (a signed-in person, not a key or agent). */
+    canRefresh: boolean;
+};
+/** One connector account a scheduled run would act as. */
+export type ScheduledTaskAccountPlanAccount = {
+    connectionId: string;
+    label: string;
+    /** `personal`: the schedule owner's own account. `shared`: a workspace account. */
+    scope: "personal" | "shared";
+};
+export type ScheduledTaskAccountPlanConnector = {
+    id: string;
+    name: string;
+    /** `default`: the owner's current accounts at each run. `pinned`: only the accounts a person chose. */
+    mode: "default" | "pinned";
+    /** Accounts a run would use if it started now; empty when none can be used. */
+    accounts: ScheduledTaskAccountPlanAccount[];
+    /** Pinned accounts that can no longer be used; always empty in `default` mode. */
+    unavailablePins: Array<{
+        connectionId: string;
+    }>;
+};
+/**
+ * Which connector accounts a run of this schedule would use if it started
+ * now, resolved at read time from the owner's live connections. Nothing here
+ * is stored.
+ */
+export type ScheduledTaskAccountPlan = {
+    connectors: ScheduledTaskAccountPlanConnector[];
+};
+/** Re-freeze with the caller's current authority; `executionDigest` is the reviewed head. */
+export type RefreshScheduledTaskAccessRequest = {
+    executionDigest: string;
+    /** Default connectors and Opengeni tools to keep off; only narrows what the refresh adds. */
+    leaveOut?: {
+        connectors?: string[] | undefined;
+        openGeniTools?: FirstPartyMcpToolName[] | undefined;
+    } | undefined;
 };
 export type CreateSessionRequest = {
+    /** Omitted: defaults/inheritance; []: no bundled guidance. Children cannot widen. */
+    bundledSkillIds?: BundledSkillId[] | undefined;
+    excludedMcpServerIds?: string[] | undefined;
     requestedSessionId?: string | undefined;
+    /**
+     * Optional usage limit for a new root task in USD micros of API-equivalent
+     * model usage (null/omitted: no limit; 0: stop before the first model
+     * request). Person or trusted host only. `OpenGeniClient.createSession`
+     * sends a limited create with `startMode: "standard"`, which servers that
+     * predate usage limits reject before creating or starting anything; it then
+     * throws `OpenGeniSessionUsageLimitUnsupportedError`, as it does for a
+     * response that does not echo the requested limit.
+     */
+    usageLimitMicros?: number | null | undefined;
     visibility?: SessionVisibility | undefined;
     initialMessage?: string | undefined;
-    /** Create an idle session shell so realtime voice can be the first interaction. */
-    startMode?: "realtime" | undefined;
+    /** Exempt the new session from the idle-session archive, e.g. for a persistent agent. */
+    keepLive?: boolean | undefined;
+    /**
+     * `realtime` creates an idle session shell so realtime voice can be the
+     * first interaction. `standard` is the explicit default; `createSession`
+     * sends it with a usage limit so servers that predate limits reject the
+     * create instead of starting uncapped work.
+     */
+    startMode?: "realtime" | "standard" | undefined;
     /** Model-visible application context attached to the initial user message; omitted by standard timeline rendering. */
     modelContext?: string | undefined;
     instructions?: string | undefined;
@@ -2196,7 +2927,15 @@ export type CreateSessionRequest = {
     policyRole?: string | undefined;
     resources?: ResourceRef[] | undefined;
     /** Inline skills fixed onto this session; omitted children inherit them. */
-    skills?: SessionSkill[] | undefined;
+    skills?: SessionSkillInput[] | undefined;
+    /** Installed session-selected Skill identities to freeze onto this session at creation. */
+    installedSkillIds?: string[] | undefined;
+    /**
+     * MCP servers to select. Omitted follows the workspace defaults; an explicit
+     * array (including `[]`) is an exact allow-list over workspace/deployment
+     * servers. Servers attached in this request's `mcpServers` are always
+     * selected; list one here only to set `eager`/`optional`.
+     */
     tools?: ToolRef[] | undefined;
     metadata?: Record<string, unknown> | undefined;
     model?: string | undefined;
@@ -2205,34 +2944,47 @@ export type CreateSessionRequest = {
     sandboxBackend?: SandboxBackend | undefined;
     targetSandboxId?: string | undefined;
     workingDir?: string | undefined;
-    /** Ordered low-to-high precedence; later sets win name collisions. */
-    variableSetIds?: string[] | undefined;
-    variableSetId?: string | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | undefined;
     rigId?: string | undefined;
     goal?: GoalSpec | undefined;
     clientEventId?: string | undefined;
     idempotencyKey?: string | undefined;
     expectedNewSessionDraftRevision?: number | undefined;
+    agentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
     maxNestedAgentDepth?: number | undefined;
     firstPartyMcpPermissions?: string[] | undefined;
     firstPartyMcpTools?: FirstPartyMcpToolName[] | undefined;
+    /**
+     * One agent configuration: capabilities, identity, instructions alias and
+     * renderer. Omission keeps today's behavior (a child inherits its parent's).
+     * Children may only narrow. Requires the server's admission switch.
+     */
+    agent?: AgentConfigRequest | undefined;
     mcpServers?: SessionMcpServerInput[] | undefined;
+    mcpApprovalPolicies?: Record<string, SessionMcpApprovalPolicy> | undefined;
+    connectionAccounts?: McpConnectionAccountSelection[] | undefined;
     /** Atomically attach the server-derived personal Variable Set/Rig closure to the initial turn. */
     personalResourceAttachment?: PersonalResourceAttachmentIntent | undefined;
     sandbox?: "shared" | "new" | {
         groupId: string;
     } | undefined;
-};
-export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:attach", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
+    agentAccess?: SessionAgentAccess | undefined;
+    /** Opaque end-user label inside the workspace. Not a subject, not authority. */
+    /** Select identity with server-side asUser(), not session creation data. */
+    scopeSubjectId?: never;
+    /** Which Memory the agent reads and where it saves; "user" requires `scopeSubjectId`. */
+    memoryScope?: SessionMemoryScope | undefined;
+};
+export type SessionAgentAccess = "session" | "user" | "workspace";
+export type SessionScopeSubjectId = string;
+export type SessionMemoryScope = "workspace" | "user" | "off";
+export declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "usage_allowances:manage", "connections:read", "connections:write", "capabilities:manage", "environments:manage", "environments:use", "variable-sets:list", "variable-sets:read", "variable-sets:write", "variable-sets:manage", "variable-sets:attach", "variable-sets:use", "secrets:list", "secrets:read", "secrets:write", "secrets:use", "mcp_servers:attach", "codemode:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage", "artifacts:read", "artifacts:publish"];
 export type KnownPermission = (typeof KNOWN_PERMISSIONS)[number];
 /**
- * Permissions the SDK knows about today, kept open so a newer OpenGeni server
+ * Permissions the SDK knows about today, kept open so a newer Opengeni server
  * can introduce permissions without breaking older SDK consumers.
  */
 export type Permission = KnownPermission | (string & {});
-export type FirstPartyMcpToolName = "set_session_title" | "goal_set" | "goal_update" | "goal_progress" | "goal_wait" | "goal_complete" | "goal_pause" | "memory_search" | "memory_save" | "memory_correct" | "preference_registry_summary" | "preference_registry_get" | "task_notes_list" | "task_note_save" | "task_note_archive" | "task_note_replace" | "work_claim_upsert" | "work_claim_release" | "knowledge_propose" | "knowledge_correct" | "task_note_promote_knowledge" | "task_note_promote_instruction_policy" | "task_note_promote_preference" | "instruction_policy_propose" | "preference_propose" | "remember" | "remember_confirm" | "company_profile_propose" | "company_profile_confirm" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "connected_machine_remove" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_events" | "session_wait" | "session_create" | "session_send_message" | "session_pause" | "session_resume" | "session_steer" | "session_human_input_respond" | "set_other_session_title" | "interaction_discover" | "browser_open" | "browser_tabs" | "browser_observe" | "browser_act" | "browser_clipboard" | "browser_debug" | "browser_auth" | "interaction_request_human" | "browser_identity" | "browser_publish" | "browser_lifecycle" | "computer_open" | "computer_targets" | "computer_observe" | "computer_clipboard" | "computer_act" | "computer_lifecycle" | "variable_set_list" | "environment_list" | "variable_set_get_variable" | "variable_set_set_variable" | "environment_set_variable" | "capability_catalog_search" | "capability_authorization_request" | "github_connect_link" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "social_search_live" | "social_mentions_live" | "social_thread_fetch" | "social_posts_sync" | "social_post_reply" | "x_accounts_list" | "x_search_live" | "x_mentions_live" | "x_thread_fetch" | "x_posts_sync" | "x_post_reply" | "reddit_accounts_list" | "reddit_search_live" | "reddit_mentions_live" | "reddit_thread_fetch" | "reddit_posts_sync" | "reddit_post_reply" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_search" | "slack_bot_channel_history" | "slack_bot_thread_replies" | "slack_bot_list_users" | "slack_bot_list_files" | "slack_bot_file_info" | "slack_bot_file_content" | "slack_bot_post_message" | "slack_bot_delete_message" | "fiken_companies_list" | "fiken_contacts_list" | "fiken_contact_create" | "fiken_products_list" | "fiken_invoices_list" | "fiken_invoice_get" | "fiken_invoice_draft_create" | "fiken_bank_accounts_list" | "fiken_purchases_list" | "fiken_sales_list" | "atlassian_sources_list" | "atlassian_search" | "atlassian_get" | "sandbox_file_publish" | "artifacts_list" | "artifacts_get_source" | "artifacts_create" | "artifacts_publish" | "artifacts_rollback" | "editable_artifact_list" | "editable_artifact_create" | "editable_artifact_import" | "editable_artifact_get" | "editable_artifact_inspect" | "editable_artifact_apply" | "editable_artifact_export" | "editable_artifact_export_status";
+export type FirstPartyMcpToolName = "knowledge_search" | "knowledge_prepare_save" | "knowledge_get" | "knowledge_browse" | "knowledge_save" | "knowledge_retain_file" | "knowledge_retain_message" | "knowledge_archive" | "instruction_policy_save" | "instruction_policy_get" | "set_session_title" | "notify_user" | "notification_withdraw" | "inbox_tidy" | "goal_set" | "goal_update" | "goal_progress" | "wait_for_input" | "goal_complete" | "goal_pause" | "goal_resume" | "memory_search" | "memory_save" | "memory_correct" | "preference_registry_summary" | "preference_registry_get" | "task_notes_list" | "task_note_save" | "task_note_archive" | "task_note_replace" | "work_claim_upsert" | "work_claim_release" | "knowledge_propose" | "knowledge_correct" | "task_note_promote_knowledge" | "task_note_promote_instruction_policy" | "task_note_promote_preference" | "instruction_policy_propose" | "preference_propose" | "remember" | "remember_confirm" | "company_profile_propose" | "company_profile_confirm" | "sandboxes_list" | "sandbox_attach" | "sandbox_swap" | "run_on" | "sandbox_provision" | "connected_machine_remove" | "connected_machine_enroll_token" | "connected_machine_enable_screen_control" | "project_list" | "project_get" | "project_create" | "project_update" | "project_reorder" | "project_delete" | "session_set_project" | "admin_actions_search" | "admin_action_describe" | "admin_action_call" | "rig_list" | "rig_get" | "rig_propose_change" | "rig_verify" | "rig_promote" | "sessions_list" | "session_get" | "session_set_model" | "session_events" | "session_wait" | "command_read" | "command_wait" | "session_create" | "session_send_message" | "session_message_status" | "session_target_get" | "session_target_set" | "session_pause" | "session_resume" | "session_steer" | "session_human_input_respond" | "set_other_session_title" | "interaction_discover" | "browser_open" | "browser_tabs" | "browser_observe" | "browser_act" | "browser_read" | "browser_screenshot" | "browser_clipboard" | "browser_debug" | "browser_downloads" | "browser_download_save" | "browser_auth" | "interaction_request_human" | "browser_identity" | "browser_publish" | "browser_lifecycle" | "computer_open" | "computer_targets" | "computer_observe" | "computer_clipboard" | "computer_act" | "computer_lifecycle" | "secret_search" | "secret_save" | "secret_get" | "secret_move" | "secret_delete" | "variable_set_list" | "environment_list" | "variable_set_get_variable" | "variable_set_set_variable" | "environment_set_variable" | "capability_catalog_search" | "capability_authorization_request" | "custom_mcp_setup_request" | "github_connect_link" | "github_repositories_list" | "social_connections_list" | "social_posts_recent" | "social_daily_analysis_context" | "social_search_live" | "social_mentions_live" | "social_thread_fetch" | "social_posts_sync" | "social_post_reply" | "x_accounts_list" | "x_search_live" | "x_mentions_live" | "x_thread_fetch" | "x_posts_sync" | "x_post_reply" | "reddit_accounts_list" | "reddit_search_live" | "reddit_mentions_live" | "reddit_thread_fetch" | "reddit_posts_sync" | "reddit_post_reply" | "scheduled_tasks_list" | "scheduled_tasks_get" | "scheduled_tasks_create" | "scheduled_tasks_update" | "scheduled_tasks_pause" | "scheduled_tasks_resume" | "scheduled_tasks_trigger" | "scheduled_tasks_delete" | "scheduled_task_runs_list" | "slack_bot_list_channels" | "slack_bot_search" | "slack_bot_channel_history" | "slack_bot_thread_replies" | "slack_bot_list_users" | "slack_bot_list_files" | "slack_bot_file_info" | "slack_bot_file_content" | "slack_bot_upload_file" | "slack_bot_post_message" | "slack_bot_delete_message" | "slack_bot_prepare_message" | "slack_bot_send_prepared_message" | "fiken_companies_list" | "fiken_contacts_list" | "fiken_contact_create" | "fiken_products_list" | "fiken_invoices_list" | "fiken_invoice_get" | "fiken_invoice_draft_create" | "fiken_bank_accounts_list" | "fiken_purchases_list" | "fiken_sales_list" | "atlassian_sources_list" | "atlassian_search" | "atlassian_get" | "sandbox_file_publish" | "artifacts_list" | "artifacts_get_source" | "artifacts_prepare_upload" | "artifacts_create" | "artifacts_publish" | "artifacts_rollback" | "artifacts_archive" | "artifacts_restore" | "site_data_describe" | "site_data_define_collection" | "site_data_query" | "site_data_write" | "site_data_import" | "site_data_export" | "site_data_reset" | "site_files_list" | "site_files_upload" | "site_files_delete" | "site_publication_get" | "site_publication_update" | "site_publication_apply_fix" | "site_hostname_check" | "site_sql_inspect" | "site_sql_enable" | "site_sql_migrate" | "site_sql_define_query" | "site_sql_query" | "site_sql_run" | "site_sql_execute" | "site_sql_export" | "site_sql_import" | "site_sql_reset" | "editable_artifact_list" | "editable_artifact_create" | "editable_artifact_import" | "editable_artifact_get" | "editable_artifact_inspect" | "editable_artifact_apply" | "editable_artifact_export" | "editable_artifact_export_status";
 export type ProductAccessMode = "local" | "configured" | "managed";
 export type ModelCapabilitySupportV1 = "supported" | "unsupported" | "unknown";
 export type ModelCapabilityStateV1 = {
@@ -2275,18 +3027,23 @@ export type ModelCredentialSourceV1 = {
     mechanism: "api_key" | "azure_ad_bearer";
 } | {
     kind: "connected_subscription";
-    provider: "codex" | "xai";
+    provider: "codex" | "xai" | "claude";
 } | {
     kind: "workspace_connection";
     mechanism: "api_key";
+} | {
+    kind: "organization_connection";
+    mechanism: "api_key";
 };
 export type ModelBillingAttributionV1 = {
-    upstreamPayer: "deployment" | "workspace" | "connected_subscription";
+    upstreamPayer: "deployment" | "workspace" | "organization" | "connected_subscription";
     metering: "opengeni_credits" | "external";
 };
+export type ModelCostClassV1 = "free" | "credits" | "subscription" | "workspace" | "organization";
 export type ModelPricingV1 = {
     inputMicrosPerMillionTokens: number;
     cachedInputMicrosPerMillionTokens?: number | undefined;
+    cacheWriteMicrosPerMillionTokens?: number | undefined;
     outputMicrosPerMillionTokens: number;
     marginBps?: number | undefined;
 };
@@ -2308,17 +3065,19 @@ export type ClientModel = {
     label: string;
     /** Optional curated compact label for dense UI (e.g. mobile composer). */
     shortLabel?: string | undefined;
+    /** Optional HTTPS maker logo supplied by the model catalog. */
+    logoUrl?: string | undefined;
     /** Provider id (e.g. `openai`, `azure`, or a registry provider id). */
     provider: string;
     providerLabel: string;
-    api: "responses" | "chat";
-    source?: "opengeni" | "codex" | "supergrok" | "workspace_gateway" | undefined;
+    api: "responses" | "chat" | "anthropic-messages";
+    source?: "opengeni" | "codex" | "supergrok" | "workspace_gateway" | "openrouter" | undefined;
     contextWindowTokens?: number | undefined;
     schemaVersion?: 1 | undefined;
     aliases?: string[] | undefined;
     deployment?: {
         upstreamModelId: string;
-        wireApi: "responses" | "chat";
+        wireApi: "responses" | "chat" | "anthropic-messages";
     } | undefined;
     executionLimits?: {
         contextWindowTokens: number | null;
@@ -2328,6 +3087,7 @@ export type ClientModel = {
     } | undefined;
     credentialSource?: ModelCredentialSourceV1 | undefined;
     billing?: ModelBillingAttributionV1 | undefined;
+    cost?: ModelCostClassV1 | undefined;
     capabilities?: ModelCapabilitiesV1 | undefined;
     pricing?: ModelPricingScheduleV1 | undefined;
     definitionVersion?: string | undefined;
@@ -2335,7 +3095,7 @@ export type ClientModel = {
 export type ModelAvailabilityV1 = {
     status: "available" | "unavailable" | "degraded" | "unknown";
     selectable: boolean;
-    reason: "missing_credential" | "needs_reauth" | "credential_not_ready" | "not_entitled" | "provider_unhealthy" | "policy_blocked" | "unsupported" | null;
+    reason: "missing_credential" | "needs_reauth" | "credential_not_ready" | "not_entitled" | "provider_unhealthy" | "policy_blocked" | "unsupported" | "credits_disabled" | null;
     checkedAt: string | null;
 };
 export type ModelCredentialReadinessV1 = {
@@ -2345,32 +3105,449 @@ export type ModelCredentialReadinessV1 = {
     checkedAt: string | null;
 };
 export type WorkspaceModelCatalogModel = ClientModel & {
+    /** Workspace preference, separate from immutable model execution limits. */
+    compactionPolicy?: {
+        defaultTokens: number;
+        /** This workspace's own limit; null follows the organization's or the model's default. */
+        overrideTokens: number | null;
+        /** The organization's limit this workspace follows while it sets none. */
+        organizationTokens?: number | null | undefined;
+        effectiveTokens: number;
+        minimumTokens: number;
+        maximumTokens: number;
+    } | undefined;
     credentialReadiness: ModelCredentialReadinessV1;
+    creditFunding?: "promotional" | "general" | "unavailable" | undefined;
     /** Exact workspace-policy verdict without exposing provider identity. */
     policyAllowed?: boolean | undefined;
     availability: ModelAvailabilityV1;
 };
+/** Why a new chat or scheduled task without an explicit model gets its default. */
+export type DefaultModelSelectionSource = "workspace" | "organization" | "subscription" | "credits" | "deployment";
+export type DefaultModelSelection = {
+    model: string;
+    reasoningEffort: ReasoningEffort;
+    source: DefaultModelSelectionSource;
+};
 export type WorkspaceModelCatalogResponse = {
     models: WorkspaceModelCatalogModel[];
+    /** Default for new chats and scheduled tasks that name no model. */
+    defaultSelection?: DefaultModelSelection | undefined;
+    /**
+     * The default this workspace would use once its organization holds an
+     * Opengeni credit balance. Null when the deployment does not bill credits.
+     */
+    creditsSelection?: DefaultModelSelection | null | undefined;
 };
-/**
- * The workspace's hard model/provider allowlist. `null` means unrestricted for
- * that dimension; an empty array is an explicit total block.
- */
-export type WorkspaceModelAccessPolicy = {
-    allowedProviders: string[] | null;
-    allowedModels: string[] | null;
+export type WorkspaceGatewayCustomModel = {
+    id: string;
+    upstreamModelId: string;
+    label: string | null;
+    version: number;
+    createdAt: string;
+    updatedAt: string;
 };
-/** Full replacement body for `PUT /v1/workspaces/:id/model-policy`. */
-export type UpdateWorkspaceModelAccessPolicyRequest = {
-    allowedProviders?: string[] | null | undefined;
-    allowedModels?: string[] | null | undefined;
+export type WorkspaceGatewayCustomModelsResponse = {
+    models: WorkspaceGatewayCustomModel[];
 };
-/**
- * Connection state of a workspace's Codex (ChatGPT) subscription, returned by
- * `GET /v1/workspaces/:id/codex/status`. `models` are the codex models the
- * workspace can select (projected as ClientModel under their own "no credits"
- * provider group), present only while connected.
+export type CreateWorkspaceGatewayCustomModelRequest = {
+    operationId: string;
+    upstreamModelId: string;
+    label?: string | undefined;
+};
+export type DeleteWorkspaceGatewayCustomModelRequest = {
+    expectedVersion: number;
+    operationId: string;
+};
+export type WorkspaceOpenRouterCustomModel = WorkspaceGatewayCustomModel;
+export type WorkspaceOpenRouterCustomModelsResponse = {
+    models: WorkspaceOpenRouterCustomModel[];
+};
+export type CreateWorkspaceOpenRouterCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+export type DeleteWorkspaceOpenRouterCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+export type WorkspaceOpperCustomModel = WorkspaceGatewayCustomModel;
+export type WorkspaceOpperCustomModelsResponse = {
+    models: WorkspaceOpperCustomModel[];
+};
+export type CreateWorkspaceOpperCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+export type DeleteWorkspaceOpperCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+/** Model connection kinds that carry a per-connection access policy. */
+export type ModelConnectionAccessKind = "codex" | "supergrok" | "vercel_gateway" | "openrouter" | "anthropic" | "claude_subscription" | "opper";
+export type OrganizationModelProviderKind = "vercel_gateway" | "openrouter" | "anthropic" | "claude_subscription" | "opper";
+export type ClaudeUsageWindow = {
+    id: "five_hour" | "seven_day" | "seven_day_opus" | "seven_day_sonnet" | "seven_day_overage_included" | "overage";
+    usedPercent: number | null;
+    resetsAt: string | null;
+    status: "allowed" | "allowed_warning" | "rejected" | null;
+    observedAt: string;
+    source?: "response_headers" | "provider" | undefined;
+};
+export type ClaudeUsageRequestStatus = {
+    status: ClaudeUsageWindow["status"];
+    resetsAt: string | null;
+    representativeClaim: ClaudeUsageWindow["id"] | null;
+    overageStatus: ClaudeUsageWindow["status"];
+    overageResetsAt: string | null;
+    upstreamModelId: string | null;
+    observedAt: string;
+    source?: "response_headers" | "provider" | undefined;
+};
+export type ClaudeSubscriptionUsage = {
+    connected: boolean;
+    credentialVersion: number | null;
+    windows: ClaudeUsageWindow[];
+    observedAt: string | null;
+    source: "response_headers" | "provider" | null;
+    refreshStatus: "not_checked" | "available" | "scope_required" | "unavailable" | "reconnect";
+    refreshCheckedAt: string | null;
+    requestStatus?: ClaudeUsageRequestStatus | null | undefined;
+    requestRestrictions?: ClaudeUsageRequestStatus[] | undefined;
+};
+export type OrganizationModelProviderConnection = {
+    providerKind: OrganizationModelProviderKind;
+    status: "active" | "revoked";
+    version: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export type UpsertOrganizationModelProviderConnectionRequest = {
+    operationId: string;
+    expectedVersion?: number | undefined;
+    apiKey: string;
+    claudeIdentity?: {
+        accountUuid: string;
+        deviceId: string;
+    } | undefined;
+};
+export type RevokeOrganizationModelProviderConnectionRequest = {
+    operationId: string;
+    expectedVersion: number;
+};
+export type OrganizationProviderCustomModel = WorkspaceGatewayCustomModel;
+export type OrganizationProviderCustomModelsResponse = {
+    models: OrganizationProviderCustomModel[];
+};
+export type CreateOrganizationProviderCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+export type DeleteOrganizationProviderCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+/**
+ * The workspace's hard model/provider allowlist. `null` means unrestricted for
+ * that dimension; an empty array is an explicit total block.
+ */
+export type WorkspaceModelAccessPolicy = {
+    allowedProviders: string[] | null;
+    allowedModels: string[] | null;
+    /**
+     * Where the policy comes from: the workspace's own, the organization's
+     * default it follows, or no restriction. Absent from older servers.
+     */
+    source?: "workspace" | "organization" | "none" | undefined;
+    /** The organization default the workspace follows without its own policy. */
+    organization?: {
+        allowedProviders: string[] | null;
+        allowedModels: string[] | null;
+    } | null;
+    /**
+     * The workspace's credit switch (its `allowCreditModels` setting). False
+     * blocks every model billed in Opengeni credits, including ones added later,
+     * whichever allowlist applies. Absent from older servers; treat as true.
+     */
+    allowCreditModels?: boolean | undefined;
+};
+/**
+ * Model defaults every workspace in an organization follows until it sets its
+ * own (`GET/PATCH /v1/organizations/:id/model-defaults`, owners and admins).
+ */
+export type OrganizationModelDefaults = {
+    sessionDefaults: {
+        model: string;
+        reasoningEffort: ReasoningEffort;
+    } | null;
+    allowedProviders: string[] | null;
+    allowedModels: string[] | null;
+    modelCompactionThresholds: Record<string, number>;
+    updatedAt: string | null;
+};
+/** Field-by-field update; compaction merges by model id and null resets one model. */
+export type UpdateOrganizationModelDefaultsRequest = {
+    sessionDefaults?: {
+        model: string;
+        reasoningEffort: ReasoningEffort;
+    } | null | undefined;
+    modelPolicy?: {
+        allowedProviders?: string[] | null | undefined;
+        allowedModels?: string[] | null;
+    } | null | undefined;
+    modelCompactionThresholds?: Record<string, number | null> | undefined;
+};
+/** A model-account setting an organization sets, and may lock for every workspace. */
+export type ModelAccountSettingKey = "rotation" | "providers" | "crossProviderFailover" | "fallbackOrder" | "personalConnectionsAllowed" | "personalFallbackAllowed";
+/**
+ * Where an effective value comes from: the organization, this workspace's
+ * override, or the organization with a lock workspaces cannot override.
+ */
+export type ModelAccountSettingSource = "organization" | "workspace" | "locked";
+export type ModelAccountRotationMode = "spread" | "primary_first";
+/** Effective model-account settings. */
+export type ModelAccountSettingValues = {
+    /** How the shared core spreads load across eligible accounts, per provider. */
+    rotation: Record<string, {
+        mode: ModelAccountRotationMode;
+        primaryConnectionId?: string | null | undefined;
+    }>;
+    providers: Record<string, {
+        inferenceSource?: "automatic" | "workspace" | "organization" | undefined;
+        useOrganizationAccounts: boolean;
+        enabled: boolean;
+    }>;
+    crossProviderFailover: boolean;
+    /** Ordered fallback models for a preferred model. */
+    fallbackOrder: Record<string, string[]>;
+    personalConnectionsAllowed: boolean;
+    /** Permit a person's opt-in fallback; accepted background work retains its captured authority. */
+    personalFallbackAllowed: boolean;
+};
+/** One source per setting and, for map-valued settings, per entry. */
+export type ModelAccountSettingsView = {
+    values: ModelAccountSettingValues;
+    sources: Record<ModelAccountSettingKey, ModelAccountSettingSource>;
+    entrySources: {
+        rotation: Record<string, "organization" | "workspace">;
+        providers: Record<string, "organization" | "workspace">;
+        fallbackOrder: Record<string, "organization" | "workspace">;
+    };
+};
+/** `GET/PATCH /v1/organizations/:id/model-account-settings` (owners and admins). */
+export type OrganizationModelAccountSettings = {
+    organizationId: string;
+    values: ModelAccountSettingValues;
+    locked: ModelAccountSettingKey[];
+    version: number;
+    updatedAt: string | null;
+};
+/**
+ * Organization change: omitted fields are kept; `fallbackOrder` and `locked`
+ * replace the stored value. Locking a setting clears every workspace override of it.
+ */
+export type UpdateOrganizationModelAccountSettingsRequest = {
+    crossProviderFailover?: boolean | undefined;
+    fallbackOrder?: Record<string, string[]> | undefined;
+    personalConnectionsAllowed?: boolean | undefined;
+    personalFallbackAllowed?: boolean | undefined;
+    rotation?: Record<string, {
+        mode: ModelAccountRotationMode;
+    }> | undefined;
+    locked?: ModelAccountSettingKey[] | undefined;
+    /** Refuse the write (409) if the settings changed since this version was read. */
+    expectedVersion?: number | undefined;
+};
+/** `GET/PATCH /v1/workspaces/:id/model-account-settings`. */
+export type WorkspaceModelAccountSettings = ModelAccountSettingsView & {
+    workspaceId: string;
+    locked: ModelAccountSettingKey[];
+    /** The workspace's stored overrides; null follows the organization. */
+    overrides: {
+        rotation: Record<string, unknown> | null;
+        providers: Record<string, unknown> | null;
+        crossProviderFailover: boolean | null;
+        fallbackOrder: Record<string, string[]> | null;
+        personalConnectionsAllowed: boolean | null;
+        personalFallbackAllowed: boolean | null;
+    };
+    version: number;
+    updatedAt: string | null;
+    canEdit: boolean;
+};
+/**
+ * Workspace change: `null` follows the organization again; `fallbackOrder`
+ * and `rotation` change entry by entry. A locked setting answers 409.
+ */
+export type UpdateWorkspaceModelAccountSettingsRequest = {
+    crossProviderFailover?: boolean | null | undefined;
+    personalConnectionsAllowed?: boolean | null | undefined;
+    personalFallbackAllowed?: boolean | null | undefined;
+    fallbackOrder?: Record<string, string[] | null> | null | undefined;
+    rotation?: Record<string, {
+        mode: ModelAccountRotationMode;
+    } | null> | null | undefined;
+    expectedVersion?: number | undefined;
+};
+/** Every shared workspace's effective settings and sources, one page. */
+export type ModelAccountSettingsOverview = {
+    organization: OrganizationModelAccountSettings;
+    workspaces: (ModelAccountSettingsView & {
+        workspaceId: string;
+        name: string;
+    })[];
+    nextCursor: string | null;
+};
+/** Why a listed model account cannot be chosen for this session. */
+export type ModelAccountChoiceRefusal = "inactive" | "personal_not_allowed" | "personal_not_owner_work" | "session_has_no_owner";
+/**
+ * Cached usage, not a live check or a promise of available capacity. Source/time
+ * describe the snapshot, not each retained window. A past reset does not prove replenishment.
+ */
+export type ModelAccountUsageSnapshot = {
+    /** Snapshot-level time, not the observation time of every retained window. */
+    observedAt: string | null;
+    source: "usage_endpoint" | "response_headers" | "refusal" | null;
+    windows: Array<{
+        id: string;
+        /** Null means unknown; values over 100 can represent overage. */
+        usedPercent: number | null;
+        resetsAt: string | null;
+        status: "ok" | "warning" | "exhausted" | "unknown";
+    }>;
+    exhaustedUntil: string | null;
+    exhaustedKind: "quota" | "rate_limit" | null;
+};
+/** An already-visible account, with optional cached usage (never an eligibility decision). */
+export type ModelAccountChoiceOption = {
+    provider: string;
+    connectionId: string;
+    label: string | null;
+    accountEmail: string | null;
+    planType: string | null;
+    status: string;
+    personal: boolean;
+    source: "workspace" | "organization" | "personal";
+    allowedModelIds: string[] | null;
+    choosable: boolean;
+    refusal: ModelAccountChoiceRefusal | null;
+    /** Omitted on older servers; null means no decodable stored snapshot. Readings may be partial or stale. */
+    usage?: ModelAccountUsageSnapshot | null | undefined;
+};
+/** A session's current account, what it may switch to, and the effective personal settings. */
+export type SessionModelAccountChoiceResponse = {
+    /** Last committed placement; neither queued account choices nor unplaced proposals are serving truth. */
+    serving?: {
+        turnId: string;
+        provider: string;
+        connectionId: string | null;
+        modelId: string;
+        preferredModelId: string;
+        reasoningEffort: ReasoningEffort;
+        latencyMode: LatencyMode;
+    } | null | undefined;
+    /** The session's account when it has bindings for one provider only; else null (see `bindings`). */
+    binding: {
+        provider: string;
+        connectionId: string | null;
+        choice: "explicit" | "automatic";
+    } | null;
+    /** One binding per provider. */
+    bindings: {
+        provider: string;
+        connectionId: string | null;
+        choice: "explicit" | "automatic";
+    }[];
+    accounts: ModelAccountChoiceOption[];
+    personal: {
+        connectionsAllowed: boolean;
+        fallbackAllowed: boolean;
+        fallbackOptIn: boolean;
+    };
+};
+/**
+ * A connection becomes the choice for its provider; other providers' choices
+ * stay. `connectionId: null` returns `provider`'s choice to automatic, or
+ * every provider's when `provider` is omitted.
+ */
+export type SetSessionModelAccountChoiceRequest = {
+    connectionId: string | null;
+    provider?: string;
+};
+export type SetSessionModelAccountChoiceResponse = {
+    changed: boolean;
+    appliedTo: "waiting_turn" | "next_turn";
+    provider: string | null;
+    connectionId: string | null;
+    choice: "explicit" | "automatic";
+};
+/** The caller's own model-account preferences in an organization. */
+export type ModelAccountPreferences = {
+    personalFallbackOptIn: boolean;
+    version: number;
+};
+export type UpdateModelAccountPreferencesRequest = {
+    personalFallbackOptIn: boolean;
+    expectedVersion?: number;
+};
+/**
+ * Whether owners and admins may give agent sessions admin access. Off by
+ * default; turning it off ends every session's admin access.
+ */
+export type OrganizationAgentAdminAccess = {
+    sessionAdminAccessAllowed: boolean;
+    updatedAt: string | null;
+};
+export type UpdateOrganizationAgentAdminAccessRequest = {
+    sessionAdminAccessAllowed: boolean;
+};
+/**
+ * An organization's privacy choices, after the deployment's limits. A product
+ * that embeds Opengeni can only narrow these; `limits` says which are fixed.
+ */
+export type OrganizationPrivacySettings = {
+    organizationId: string;
+    /** Who sees new chats and schedules unless the person picks otherwise. */
+    defaultVisibility: "private" | "workspace";
+    /** Whether admins see that other people's Only me schedules exist, and can pause them. */
+    adminsSeePrivateSchedules: boolean;
+    limits: {
+        /** False when this deployment turns Only me off in shared workspaces. */
+        onlyMeAllowed: boolean;
+        /** True when new chats and schedules always start as Workspace. */
+        defaultVisibilityLocked: boolean;
+        /** True when admins always see that other people's Only me schedules exist. */
+        adminsSeePrivateSchedulesLocked: boolean;
+    };
+    updatedAt: string | null;
+};
+export type UpdateOrganizationPrivacySettingsRequest = {
+    defaultVisibility?: "private" | "workspace";
+    adminsSeePrivateSchedules?: boolean;
+};
+/**
+ * A session's admin access as the viewer sees it. While `active`, the agent
+ * in this session can do what `grantedBy` can manage across the
+ * organization, checked live on every action.
+ */
+export type SessionAdminAccess = {
+    active: boolean;
+    grantedBy: {
+        subjectId: string;
+        name: string | null;
+    } | null;
+    grantedAt: string | null;
+    /** While active: when it ends by itself, or null for no time limit. */
+    expiresAt: string | null;
+    /** The organization allows admin access for sessions. */
+    allowed: boolean;
+    /**
+     * The viewer may turn it on, or choose a new time limit while it is on: an
+     * owner or admin, in person, on their own session.
+     */
+    canGrant: boolean;
+    /** The viewer may turn it off. */
+    canRevoke: boolean;
+};
+/**
+ * How long a session's admin access lasts from now: whole hours from 1 to
+ * 720, or null for no time limit. Omitted means one hour.
+ */
+export type GrantSessionAdminAccessRequest = {
+    durationHours?: number | null;
+};
+/** Full replacement body for `PUT /v1/workspaces/:id/model-policy`. */
+export type UpdateWorkspaceModelAccessPolicyRequest = {
+    allowedProviders?: string[] | null | undefined;
+    allowedModels?: string[] | null | undefined;
+};
+/**
+ * Connection state of a workspace's Codex (ChatGPT) subscription, returned by
+ * `GET /v1/workspaces/:id/codex/status`. `models` are the codex models the
+ * workspace can select (projected as ClientModel under their own "no credits"
+ * provider group), present only while connected.
  */
 export type CodexConnectionStatus = {
     connected: boolean;
@@ -2385,8 +3562,32 @@ export type CodexConnectionStatus = {
         label?: string | null;
         chatgptAccountId?: string | null;
     } | null;
+    /** Live model-catalog probe result for the active account only. */
+    activeAccountValid?: boolean;
+    /** Cached readiness of any account in the effective worker pool. */
+    poolReady?: boolean;
+    /** Cached unpinned worker routability; rotation-off remains active-pointer-only. */
+    workerRoutable?: boolean;
     /** How many Codex accounts the workspace has connected. */
     accountCount?: number;
+    source?: WorkspaceCodexSubscriptionSource;
+};
+export type WorkspaceCodexSubscriptionMode = "automatic" | "workspace" | "organization" | "disabled";
+export type WorkspaceCodexSubscriptionSource = {
+    accountId: string;
+    workspaceId: string;
+    workspaceKind: "personal" | "shared";
+    mode: WorkspaceCodexSubscriptionMode;
+    effectiveSource: "workspace" | "organization" | "disabled";
+    workspaceAvailable: boolean;
+    organizationAvailable: boolean;
+    /** Some of the workspace's own accounts are not in use here. Absent from older servers. */
+    workspaceSetAside?: boolean;
+    /**
+     * How many organization accounts other than the workspace's own reach this
+     * workspace (accounts limited to chosen people aside). Absent from older servers.
+     */
+    organizationCount?: number;
 };
 /**
  * One normalized Codex usage window (5h or weekly), camelCase end-to-end (the
@@ -2425,21 +3626,48 @@ export type CodexUsagePayload = {
         meteredFeature: string;
         fiveHour: CodexUsageWindow | null;
         weekly: CodexUsageWindow | null;
+        unknownWindowExhausted: boolean;
     }>;
     credits?: {
         hasCredits: boolean;
         unlimited: boolean;
         overageLimitReached: boolean;
-        balance: string;
+        balance: string | null;
     };
 };
+/** One model a Codex account's current ChatGPT plan was proven not to include. */
+export type CodexPlanExcludedModel = {
+    /** Product model id, for example `codex/gpt-6-sol`. */
+    model: string;
+    /** Display name, for example "GPT-6 Sol". */
+    label: string;
+    excludedAt: string;
+    retryAfter: string;
+};
 /** One connected Codex (ChatGPT) account in a workspace (multi-account P1). Metadata only. */
 export type CodexAccount = {
     id: string;
+    source?: "workspace" | "organization";
+    /**
+     * Organization list only: shared workspaces that list the account among
+     * their own (it was connected there).
+     */
+    ownInWorkspaceIds?: string[];
     chatgptAccountId?: string | null;
     label?: string | null;
     email?: string | null;
     plan?: string | null;
+    /** When the provider last confirmed `plan` (connect, token refresh, or usage read). */
+    planCheckedAt?: string | null;
+    /** Plan before the most recent observed plan change, and when that change was seen. */
+    planChangedFrom?: string | null;
+    planChangedAt?: string | null;
+    /**
+     * Models the current plan was proven not to include. Each is skipped by
+     * automatic selection until `retryAfter` (one request then re-checks it), or
+     * until a different plan is observed, for example after refreshing usage.
+     */
+    planExcludedModels?: CodexPlanExcludedModel[];
     status: "active" | "needs_relogin" | "error";
     active: boolean;
     expiresAt?: string | null;
@@ -2450,6 +3678,9 @@ export type CodexAccount = {
     usageCheckedAt?: string | null;
     exhaustedUntil?: string | null;
     /** Controls only NEW automatic allocations. */
+    extraCreditsEnabled?: boolean;
+    extraCreditsVersion?: number;
+    extraCreditsUpdatedAt?: string | null;
     allocatorEnabled: boolean;
     /** Independent OCC sequence; credential/token `version` is never exposed. */
     allocatorVersion: number;
@@ -2537,6 +3768,7 @@ export type CodexRotationSettings = {
 export type CodexAccountsResponse = {
     accounts: CodexAccount[];
     activeAccountId: string | null;
+    source?: WorkspaceCodexSubscriptionSource;
     /** Added by Apps-aware servers; absent on older same-major deployments. */
     apps?: {
         available: boolean;
@@ -2547,6 +3779,18 @@ export type CodexAccountsResponse = {
     };
     settings: CodexRotationSettings;
 };
+export type OrganizationCodexAccountsResponse = Omit<CodexAccountsResponse, "apps" | "source">;
+/** Session-authorized choices: the accepted pool for a capacity wait, otherwise
+ * the current pool for the next turn. Current execution may use another pool. */
+export type SessionCodexAccountsResponse = Omit<CodexAccountsResponse, "apps" | "source"> & {
+    currentSelection: {
+        credentialId: string | null;
+        waiting: boolean;
+    } | null;
+    currentAccount: CodexAccount | null;
+    pinnedAccountId: string | null;
+    lastAccountId: string | null;
+};
 export type CodexAppsUpdate = {
     credentialId: string | null;
     version: number;
@@ -2578,10 +3822,11 @@ export type CodexConnectPoll = {
     isActive?: boolean;
 };
 /** Explicit authority of one connected SuperGrok/xAI subscription account. */
-export type SuperGrokAccountScope = "workspace" | "user";
+export type SuperGrokAccountScope = "workspace" | "user" | "organization";
 /** Metadata-only connected SuperGrok account. Secret OAuth material never crosses the API. */
 export type SuperGrokAccount = {
     id: string;
+    plan?: string | null;
     scope: SuperGrokAccountScope;
     subject: string;
     email?: string | null;
@@ -2610,6 +3855,8 @@ export type SuperGrokRotationSettings = {
 };
 /** GET /supergrok/accounts — visible accounts plus the workspace active pointer. */
 export type SuperGrokAccountsResponse = {
+    source?: "workspace" | "user" | "organization";
+    organizationId?: string;
     accounts: SuperGrokAccount[];
     activeAccountId: string | null;
     settings: SuperGrokRotationSettings;
@@ -2680,8 +3927,15 @@ export type ClientAuthConfig = {
     session: "cookie";
     /** Defaults to true when omitted by an older deployment. */
     emailVerificationRequired?: boolean;
+    /** Configured managed sign-in providers; omitted by older deployments. */
+    socialProviders?: ("google" | "github")[];
+    /**
+     * False while the deployment has paused new account creation; existing
+     * accounts can still sign in. Omitted (treat as true) by older deployments.
+     */
+    newSignupsEnabled?: boolean;
 };
-export declare const OPENGENI_API_CONTRACT_REVISION: "2026-08-organization-recovery-custody-v1";
+export declare const OPENGENI_API_CONTRACT_REVISION: "2026-09-plugins-and-skills-v1";
 export declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
 /** Bounded request/response identifier shared by browser, ingress, and API diagnostics. */
 export declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
@@ -2694,18 +3948,27 @@ export declare const OPENGENI_CORRELATION_HEADER: "x-opengeni-correlation-id";
  */
 export type ClientConfig = {
     deploymentRevision: string;
-    apiContractRevision: typeof OPENGENI_API_CONTRACT_REVISION;
+    /**
+     * The API's contract revision. Equals `OPENGENI_API_CONTRACT_REVISION` for a
+     * `"strict"` client (it throws otherwise); a `"compatible"` client may
+     * receive a newer revision from an additive deployment within its major.
+     */
+    apiContractRevision: string;
     serverVersion?: string | undefined;
+    claudeSubscriptionEnabled?: boolean | undefined;
+    /** Whether people can connect their own computers; absent on older servers. */
+    connectedMachines?: boolean | undefined;
     defaultModel: string;
     allowedModels: string[];
     models: ClientModel[];
     defaultReasoningEffort: ReasoningEffort;
     allowedReasoningEfforts: ReasoningEffort[];
+    defaultSandboxBackend?: SandboxBackend | undefined;
     mcpServers: {
         id: string;
         name: string;
     }[];
-    /** Deployment defaults and hard maximum for built-in OpenGeni session tools. */
+    /** Deployment defaults and hard maximum for built-in Opengeni session tools. */
     firstPartyMcpTools?: {
         default: FirstPartyMcpToolName[];
         allowed: FirstPartyMcpToolName[];
@@ -2714,11 +3977,93 @@ export type ClientConfig = {
         enabled: boolean;
         maxSizeBytes: number;
     };
+    /**
+     * `false` when a host's session proxy fixes the model policy
+     * (`createSessionProxyHandler({ modelSelection: false })`), so UIs hide the
+     * model picker; `true` when the host explicitly offers end users model
+     * choice (embedded stock UIs then show the picker). Opengeni itself omits it.
+     */
+    modelSelection?: boolean | undefined;
+    /** Session proxy sandbox-path download opt-in; absent on native deployments. */
+    sandboxFiles?: boolean | undefined;
+    /**
+     * `false` when a host's session proxy turns live voice off
+     * (`createSessionProxyHandler({ realtimeVoice: false })`), so UIs hide the
+     * voice button; `true` when the host explicitly offers it to end users
+     * (embedded stock UIs then show the button). Otherwise absent: availability
+     * comes from the workspace's realtime model catalog.
+     */
+    realtimeVoice?: boolean | undefined;
+    /**
+     * Session proxy only: the workspace the proxy resolved for this user, so a
+     * browser pointed at the proxy (`<OpenGeniChat baseUrl=... />`) needs no
+     * workspace id. Absent on native deployments and older proxies.
+     */
+    workspaceId?: string | undefined;
+    /**
+     * Session proxy capability for the embedded artifact viewer and inline Site
+     * previews; absent on native deployments. The live socket is
+     * ticket-authenticated and reached directly; the cache partition identifies
+     * the proxied user. `false` when the proxy does not serve artifacts, so
+     * stock UIs show Site previews as unavailable instead of failing on click.
+     */
+    artifacts?: {
+        editableLiveUrl: string;
+        cachePartition: {
+            accountId: string;
+            principalId: string;
+            authorizationEpoch: string;
+        };
+    } | false | undefined;
+    /**
+     * Session proxy only: whether the browser may start a chat (the proxy has a
+     * `createSession` hook). Stock UIs hide "New chat" when `false`; absent on
+     * native deployments and older proxies.
+     */
+    sessionCreation?: boolean | undefined;
+    /**
+     * Session proxy only: whether users may archive or restore their chats.
+     * Stock UIs hide "Archive" when `false`; absent on native deployments.
+     */
+    archive?: boolean | undefined;
     /** Native browser microphone capture + server-side transcription capability. */
     voiceInput?: ClientVoiceInputConfig | undefined;
+    /**
+     * Whether the deployment offers the Jev-backed code_search agent tool and
+     * what workspaces without their own setting get (`split` = half of sessions).
+     */
+    codeSearch?: {
+        available: boolean;
+        workspaceDefault: "off" | "on" | "split";
+    } | undefined;
+    /**
+     * Present only when this deployment archives idle sessions: after `idleDays`
+     * without activity a session (unless kept live) becomes read-only.
+     */
+    sessionArchive?: {
+        enabled: true;
+        idleDays: number;
+    } | undefined;
+    /**
+     * Present when the server records and enforces per-task usage limits.
+     * `enabled: false` refuses new limits but still enforces and clears existing
+     * ones. Omitted by older servers, which ignore `usageLimitMicros`.
+     */
+    sessionUsageLimits?: {
+        enabled: boolean;
+    } | undefined;
+    /** Agent configuration rollout and per-capability availability. */
+    agentConfig?: ClientAgentConfig | undefined;
     productAccessMode: ProductAccessMode;
+    /** Client-safe hint for whether the console should offer Stripe checkout. */
+    billingMode?: BillingMode | undefined;
     managedAuthSessionSetMode: "legacy" | "dual" | "broker";
     auth: ClientAuthConfig;
+    /**
+     * Product documentation for a console Help link. `null` means the deployment
+     * hides the link; absent means a server that predates the field.
+     */
+    documentationUrl?: string | null | undefined;
     analytics: {
         consentRequired: boolean;
         providers: {
@@ -2734,6 +4079,13 @@ export type ClientConfig = {
             } | undefined;
         };
     };
+    /** Operator-owned legal documents the signed-out console links to, when configured. */
+    legal?: {
+        privacyPolicyUrl?: string | undefined;
+        termsOfServiceUrl?: string | undefined;
+    } | undefined;
+    /** Operator support address the console offers as a mailto link, when configured. */
+    supportEmail?: string | undefined;
     structuredServices: {
         fileSystem: boolean;
         git: boolean;
@@ -2743,6 +4095,7 @@ export type ClientConfig = {
 /** Client-safe voice-input capability projection. */
 export type ClientVoiceInputConfig = {
     available: boolean;
+    providers?: VoiceInputProviderId[] | undefined;
     maxDurationSeconds: number;
     maxSizeBytes: number;
     acceptedMimeTypes: string[];
@@ -2754,7 +4107,7 @@ export type ClientResumableVoiceInputConfig = {
     maxChunkSizeBytes: number;
     providerSegmentSeconds: number;
 };
-export type TranscriptionRecordingErrorCode = "permission_denied" | "not_supported" | "network" | "provider" | "policy_blocked" | "timeout" | "cancelled" | "unavailable" | "too_large" | "invalid_audio" | "unknown";
+export type TranscriptionRecordingErrorCode = "permission_denied" | "not_supported" | "network" | "provider" | "policy_blocked" | "timeout" | "cancelled" | "unavailable" | "too_large" | "invalid_audio" | "unknown" | "insufficient_credits" | "allowance_exhausted" | "monthly_model_cost_limit";
 export type TranscriptionRecordingState = "uploading" | "segmenting" | "ready" | "transcribing" | "complete" | "failed" | "discarded";
 export type TranscriptionRecordingSegmentState = "preparing" | "pending" | "transcribing" | "complete" | "failed";
 export type TranscriptionRecordingSegment = {
@@ -2827,11 +4180,43 @@ export type AccessGrant = {
     subjectId: string;
     subjectLabel?: string | undefined;
     permissions: Permission[];
+    /** Explicit policies never expand `workspace:admin` into unselected permissions. */
+    permissionMode?: "legacy" | "explicit" | undefined;
     principalKind?: AccessPrincipalKind | undefined;
     metadata?: Record<string, unknown> | undefined;
     serviceInitiator?: ServiceTurnInitiator | undefined;
     serviceInitiatorContext?: ServiceTurnInitiatorContext | undefined;
 };
+/**
+ * Authority of a directly used organization or workspace API key, separate
+ * from the caller's account and workspace grants. Full organization keys can
+ * provision shared workspaces, external members, and sessions through `asUser`;
+ * those user requests additionally need the user's live membership.
+ * Organization-key scope excludes Personal workspaces. Neither key kind bypasses
+ * session visibility or the explicit `secrets:read` permission requirement.
+ */
+export type AccessCredential = {
+    kind: "organization_api_key" | "workspace_api_key";
+    /** Organization keys only; omitted for workspace keys. */
+    access?: OrganizationApiKeyAccess | undefined;
+    /** The key's organization id. */
+    accountId: string;
+    /** Null for an organization key; `workspaceScope` selects shared workspaces, never Personal. */
+    workspaceId: string | null;
+    /**
+     * Effective workspace permissions, with admin expansion only for legacy keys. Excludes
+     * account-only permissions and includes `secrets:read` only when explicitly
+     * granted. Explicit policies grant exactly their selected permissions.
+     */
+    effectiveWorkspacePermissions: Permission[];
+    /** Organization keys only; the preset label never adds permissions. */
+    policy?: OrganizationAccessPolicy | undefined;
+    /** Organization keys only; omitted on older servers. */
+    workspaceScope?: OrganizationWorkspaceScope | undefined;
+    /** Plain-language explanation of the key's scope and limits. */
+    note: string;
+};
+/** Caller identity, grants, defaults, and optional direct API-key authority. */
 export type AccessContext = {
     mode: ProductAccessMode;
     subjectId: string;
@@ -2840,6 +4225,15 @@ export type AccessContext = {
     workspaceGrants: AccessGrant[];
     defaultAccountId: string | null;
     defaultWorkspaceId: string | null;
+    /**
+     * Direct API-key authority; omitted for `asUser`/external actors, humans,
+     * delegated tokens, other caller contexts, and older servers. Existing grants
+     * are unchanged. Full organization keys can provision shared workspaces,
+     * external members, and `asUser` sessions; user requests still need live
+     * membership. Organization-key scope excludes Personal workspaces. Neither key
+     * kind bypasses session visibility or the explicit `secrets:read` requirement.
+     */
+    credential?: AccessCredential | undefined;
 };
 export type ManagedOrganizationMembership = {
     id: string;
@@ -2875,7 +4269,7 @@ export type UserResourceAuthoritySummary = {
     grants: UserResourceAuthorityGrant[];
 };
 export type ListUserResourceAuthoritiesOptions = {
-    resourceKind: UserResourceKind;
+    resourceKind: Exclude<UserResourceKind, "connection">;
     cursor?: string | undefined;
     limit?: number | undefined;
 };
@@ -2886,7 +4280,7 @@ export type ListUserResourceAuthoritiesResponse = {
 };
 export type IssueUserResourceGrantRequest = {
     scope: "user";
-    resourceKind: UserResourceKind;
+    resourceKind: Exclude<UserResourceKind, "connection">;
     mode: "session";
     context: "user_private" | "workspace_shared";
     sessionId: string;
@@ -2894,7 +4288,7 @@ export type IssueUserResourceGrantRequest = {
     workspaceSharedAcknowledged?: boolean | undefined;
 } | {
     scope: "user";
-    resourceKind: UserResourceKind;
+    resourceKind: Exclude<UserResourceKind, "connection">;
     mode: "always";
     context: "user_private" | "workspace_shared";
     sessionId?: null | undefined;
@@ -3061,6 +4455,16 @@ export type CreateOrganizationResponse = {
     organization: OrganizationSummary;
     workspaceId: string;
 };
+export type CreateAdditionalOrganizationRequest = {
+    name: string;
+    workspaceName: string;
+    operationId: string;
+};
+export type CreateAdditionalOrganizationResponse = {
+    organization: OrganizationSummary;
+    workspaceId: string;
+    personalWorkspaceId: string;
+};
 export type UpdateOrganizationNameRequest = {
     name: string;
     expectedUpdatedAt: string;
@@ -3237,6 +4641,8 @@ export type Workspace = {
     agentInstructions: string | null;
     settings: Record<string, unknown>;
     inferenceControl: {
+        timer?: WorkspacePauseTimer | null | undefined;
+        serverTime?: string | undefined;
         state: "active" | "paused";
         revision: number;
         reason: string | null;
@@ -3248,6 +4654,8 @@ export type Workspace = {
     updatedAt: string;
 };
 export type WorkspaceSettings = {
+    /** Exact product-model preferences. Invalid/newer values are ignored per model. */
+    modelCompactionThresholds?: unknown;
     memoryEnabled?: boolean | undefined;
     /** Reversible Memory V1 prompt composition rollout. */
     memoryPromptMode?: "legacy_standing" | "retrieval_only" | undefined;
@@ -3255,6 +4663,8 @@ export type WorkspaceSettings = {
     sessionDefaults?: WorkspaceSessionDefaults | undefined;
     /** Exact capability selection inherited by new top-level sessions. */
     sessionToolDefaults?: WorkspaceSessionToolDefaults | undefined;
+    /** Allowlisted sandbox image for new managed boxes; absent uses the deployment image. */
+    defaultSandboxImage?: string | null | undefined;
     voiceInput?: WorkspaceVoiceInputSettings | undefined;
     transcription?: WorkspaceTranscriptionPolicy | undefined;
     maxNestedAgentDepth?: number | null | undefined;
@@ -3262,9 +4672,13 @@ export type WorkspaceSettings = {
     codexCompactionDefault?: "remote_v2" | "portable" | undefined;
     /** Whether agents may invoke the built-in structured human-input tool. */
     agentHumanInputEnabled?: boolean | undefined;
+    /** Whether agents get the Jev-backed code_search tool; absent or null follows the deployment. */
+    codeSearchEnabled?: boolean | null | undefined;
     slackReactionSummon?: WorkspaceSlackReactionSummonSettings | undefined;
     /** Slack orchestration notices; both default off when absent or invalid. */
     slackOrchestrationNotices?: WorkspaceSlackOrchestrationNoticeSettings | undefined;
+    /** False blocks every model billed in Opengeni credits; absent allows them. */
+    allowCreditModels?: boolean | undefined;
     [key: string]: unknown;
 };
 export type WorkspaceSessionDefaults = {
@@ -3272,8 +4686,9 @@ export type WorkspaceSessionDefaults = {
     reasoningEffort: ReasoningEffort;
 };
 export type WorkspaceSessionToolDefaults = {
-    mcpServerIds: string[];
-    firstPartyMcpTools: FirstPartyMcpToolName[];
+    inheritConnectedMcpServers?: boolean | undefined;
+    mcpServerIds?: string[];
+    firstPartyMcpTools?: FirstPartyMcpToolName[];
 };
 export type WorkspaceSlackReactionSummonSettings = {
     enabled: boolean;
@@ -3322,21 +4737,41 @@ export type UpdateSlackChannelRoutesRequest = {
         targetWorkspaceId: string | null;
     }>;
 };
+export type VoiceInputProviderId = "azure-mai" | "supergrok-subscription" | "codex-subscription" | "openai" | "azure-openai";
 export type WorkspaceVoiceInputSettings = {
     enabled: boolean;
+    preferredProvider?: VoiceInputProviderId | null | undefined;
+    fallbackEnabled?: boolean | undefined;
 };
 export type UpdateWorkspaceSettingsRequest = {
+    /** Independent model patches; null restores that model's default. */
+    modelCompactionThresholds?: Record<string, number | null>;
     memoryEnabled?: boolean | undefined;
     memoryPromptMode?: "legacy_standing" | "retrieval_only" | undefined;
-    sessionDefaults?: WorkspaceSessionDefaults | undefined;
-    sessionToolDefaults?: WorkspaceSessionToolDefaults | undefined;
+    /** null removes the workspace's own default so it follows its organization's. */
+    sessionDefaults?: WorkspaceSessionDefaults | null | undefined;
+    sessionToolDefaults?: {
+        mcpServerIds?: string[] | null;
+        firstPartyMcpTools?: FirstPartyMcpToolName[] | null;
+        inheritConnectedMcpServers?: boolean | null;
+    } | undefined;
     voiceInput?: WorkspaceVoiceInputSettings | undefined;
     transcription?: WorkspaceTranscriptionPolicy | undefined;
     maxNestedAgentDepth?: number | null | undefined;
     codexCompactionDefault?: "remote_v2" | "portable" | undefined;
     agentHumanInputEnabled?: boolean | undefined;
+    codeSearchEnabled?: boolean | null | undefined;
     slackReactionSummon?: WorkspaceSlackReactionSummonSettings | undefined;
     slackOrchestrationNotices?: WorkspaceSlackOrchestrationNoticeSettings | undefined;
+    /** One of `listWorkspaceSandboxImages().images`, or null for the deployment image. */
+    defaultSandboxImage?: string | null | undefined;
+    /** Agent defaults for new sessions; null clears. Requires the admission switch. */
+    sessionAgentDefaults?: WorkspaceAgentDefaults | null | undefined;
+    /**
+     * False blocks every model billed in Opengeni credits in this workspace,
+     * including ones added later; true allows them again.
+     */
+    allowCreditModels?: boolean | undefined;
     [key: string]: unknown;
 };
 export type SetWorkspaceDefaultRigRequest = {
@@ -3350,11 +4785,56 @@ export type CreateWorkspaceRequest = {
     externalId?: string | undefined;
     agentInstructions?: string | null | undefined;
 };
+export type EnsureWorkspaceRequest = {
+    /**
+     * Owning organization id. An organization API key may omit it and the
+     * workspace is created in the key's own organization; every other caller
+     * must send it.
+     */
+    accountId?: string | undefined;
+    externalSource: string;
+    externalId: string;
+    name: string;
+    slug?: string | undefined;
+    agentInstructions?: string | null | undefined;
+};
+export type EnsureWorkspaceResponse = {
+    workspace: Workspace;
+    created: boolean;
+};
 export type UpdateWorkspaceRequest = {
     name?: string | undefined;
     slug?: string | null | undefined;
     agentInstructions?: string | null | undefined;
 };
+/**
+ * Legacy organization API key access tier, derived by the server from the key's
+ * permissions: `full` can provision shared workspaces, external members, and
+ * `asUser` sessions (user requests additionally need live membership);
+ * `read` only inventories shared workspaces and reads their sessions, events,
+ * and files. `developer_setup` configures shared workspaces and budgets without
+ * API-key management or credential delegation; its default expiry is 24 hours.
+ * Organization-key scope excludes Personal workspaces and bypasses neither
+ * session visibility nor the explicit `secrets:read` permission requirement.
+ */
+export type OrganizationApiKeyAccess = "full" | "read" | "developer_setup";
+/** Informational preset label; the server recomputes it from explicit permissions. */
+export type OrganizationAccessPreset = "read_only" | "full" | "custom";
+/** Organization-key scope always excludes Personal workspaces. */
+export type OrganizationWorkspaceScope = {
+    kind: "all";
+} | {
+    kind: "selected";
+    /** Up to 500 unique shared-workspace IDs in the same organization. Empty reaches none. */
+    workspaceIds: string[];
+};
+export type OrganizationAccessPolicy = {
+    preset: OrganizationAccessPreset;
+    /** Exact grants, including `workspace:admin` individually; no implicit wildcard. */
+    permissions: Permission[];
+    workspaceScope: OrganizationWorkspaceScope;
+};
+export type OrganizationActor = "user" | "organization";
 export type ApiKey = {
     id: string;
     accountId: string;
@@ -3363,6 +4843,18 @@ export type ApiKey = {
     description: string | null;
     prefix: string;
     permissions: Permission[];
+    /** Organization keys only; omitted for workspace-scoped keys. */
+    access?: OrganizationApiKeyAccess | undefined;
+    policy?: OrganizationAccessPolicy | undefined;
+    workspaceScope?: OrganizationWorkspaceScope | undefined;
+    /** Legacy keys retain their historical workspace-admin wildcard. */
+    permissionMode?: "legacy" | "explicit" | undefined;
+    /** Organization keys: the service account that holds the key. */
+    serviceAccount?: {
+        id: string;
+        name: string;
+        role: OrganizationServiceAccountRole;
+    } | null | undefined;
     expiresAt: string | null;
     revokedAt: string | null;
     lastUsedAt: string | null;
@@ -3380,27 +4872,370 @@ export type CreateApiKeyResponse = {
     /** The full secret token — shown once at creation, never returned again. */
     token: string;
 };
+export type CreateOrganizationApiKeyRequest = {
+    name: string;
+    description?: string | undefined;
+    expiresAt?: string | undefined;
+    /** With no policy, omitted means legacy `full`. */
+    access?: OrganizationApiKeyAccess | undefined;
+    /** Optional creation alias for the developer_setup access tier. */
+    preset?: "developer_setup" | undefined;
+    /** Explicit grants and shared-workspace scope; do not combine with legacy access/preset. */
+    policy?: OrganizationAccessPolicy | undefined;
+    /** The service account that holds the key; omitted creates one named after the key. */
+    serviceAccountId?: string | undefined;
+};
+/** The server requires at least one change. Omitted fields stay unchanged. */
+export type UpdateOrganizationApiKeyRequest = {
+    name?: string | undefined;
+    description?: string | null | undefined;
+    /** Replaces the policy and transitions a legacy key to explicit permission semantics. */
+    policy?: OrganizationAccessPolicy | undefined;
+};
 export type ListApiKeysResponse = {
     apiKeys: ApiKey[];
 };
-export type WorkspaceMember = {
-    subjectId: string;
-    subjectLabel: string | null;
-    role: string;
-    permissions: Permission[];
+/** Up to admin, never owner. A member's keys never hold administrator permissions. */
+export type OrganizationServiceAccountRole = "admin" | "member";
+/** An organization identity with no person behind it; it holds organization API keys. */
+export type OrganizationServiceAccount = {
+    id: string;
+    organizationId: string;
+    name: string;
+    description: string | null;
+    role: OrganizationServiceAccountRole;
+    /** Keys that are not revoked, including expired ones. */
+    activeKeyCount: number;
     createdAt: string;
+    updatedAt: string;
 };
-export type ListWorkspaceMembersResponse = {
-    members: WorkspaceMember[];
-};
-export type AddWorkspaceMemberRequest = {
-    email: string;
-    role?: string | undefined;
-    permissions: Permission[];
+export type ListOrganizationServiceAccountsResponse = {
+    serviceAccounts: OrganizationServiceAccount[];
 };
-export type UpdateWorkspaceMemberRequest = {
-    role?: string | undefined;
-    permissions: Permission[];
+export type CreateOrganizationServiceAccountRequest = {
+    name: string;
+    description?: string | undefined;
+    /** Defaults to member. Only an organization administrator can choose admin. */
+    role?: OrganizationServiceAccountRole | undefined;
+};
+/** The server requires at least one change. Making it a member narrows its keys. */
+export type UpdateOrganizationServiceAccountRequest = {
+    name?: string | undefined;
+    description?: string | null | undefined;
+    role?: OrganizationServiceAccountRole | undefined;
+};
+/** An outside agent a person connected to the organization MCP server. */
+export type OrganizationMcpConnection = {
+    id: string;
+    /** The name the client registered with ("Claude Code"). */
+    clientName: string;
+    /** Where its sign-in returned to ("127.0.0.1:4567", "cursor.com"). */
+    clientHost: string | null;
+    /** Signed-in agents act as the person who connected them. */
+    actor: "user";
+    connectedBy: {
+        subjectId: string;
+        name: string;
+    };
+    /** What it can do and where. The person's own live access still caps it. */
+    policy: OrganizationAccessPolicy;
+    createdAt: string;
+    lastUsedAt: string | null;
+    expiresAt: string;
+    revokedAt: null;
+};
+export type OrganizationMcpConnectionList = {
+    connections: OrganizationMcpConnection[];
+    /** Owners and admins see and can disconnect everyone's agents. */
+    canManageAll: boolean;
+};
+export type UpdateOrganizationMcpConnectionRequest = {
+    access: OrganizationAccessPolicy;
+};
+/**
+ * A key that acts as the person who created it: their live access in this
+ * organization, capped by `access`. It stops working when they leave.
+ */
+export type PersonalApiKey = {
+    id: string;
+    organizationId: string;
+    name: string;
+    description: string | null;
+    /** The first characters of the key, to recognize it. */
+    prefix: string;
+    access: OrganizationAccessPolicy;
+    owner: {
+        subjectId: string;
+        name: string;
+    };
+    expiresAt: string | null;
+    lastUsedAt: string | null;
+    createdAt: string;
+};
+export type ListPersonalApiKeysResponse = {
+    apiKeys: PersonalApiKey[];
+    /** Owners and admins see everyone's keys and can revoke them. */
+    canManageAll: boolean;
+};
+export type CreatePersonalApiKeyRequest = {
+    name: string;
+    description?: string | undefined;
+    access: OrganizationAccessPolicy;
+    /** Omitted means the key never expires. */
+    expiresAt?: string | undefined;
+};
+export type CreatePersonalApiKeyResponse = {
+    apiKey: PersonalApiKey;
+    /** The full secret token, shown once at creation. */
+    token: string;
+};
+/** A pending agent sign-in, as the web app's sign-in page shows it. */
+export type McpConnectionRequest = {
+    client: {
+        name: string;
+        host: string | null;
+    };
+    person: {
+        name: string | null;
+    };
+    organizations: Array<{
+        id: string;
+        name: string;
+        workspaces: Array<{
+            id: string;
+            name: string;
+            personal: boolean;
+        }>;
+        /** Everything the person can do there; the most an agent can get. */
+        grantable: Permission[];
+    }>;
+    defaultOrganizationId: string | null;
+};
+export type McpConnectionDecision = {
+    decision: "deny";
+} | {
+    decision: "approve";
+    organizationId: string;
+    access: OrganizationAccessPolicy;
+};
+/** Why an inbox item waits on the person. */
+export type InboxItemKind = "question" | "approval" | "goal_paused" | "notification" | "reply";
+/**
+ * One thing that waits on the person: a question, an approval, a goal the agent
+ * paused on them, or an agent's notification. It leaves the inbox when it is
+ * answered, resolved, withdrawn or dismissed; it stays in the session's timeline.
+ */
+export type InboxItem = {
+    id: string;
+    workspaceId: string;
+    sessionId: string;
+    sessionTitle: string | null;
+    kind: InboxItemKind;
+    /** The question or approval id, or the notification key. */
+    sourceKey: string;
+    title: string;
+    /** A notification's subtitle; empty otherwise. */
+    subtitle: string;
+    /** Plain text, or for a notification its message (paragraphs, "- " bullets, **bold**, `code`, links). */
+    body: string;
+    /** A notification's label/value facts (at most four); empty otherwise. */
+    facts: InboxItemFact[];
+    /** A notification's link outside the session, or null. */
+    link: InboxItemLink | null;
+    /**
+     * The session event that opened or last updated the item: open the session
+     * at this point. Null for items from before this was recorded.
+     */
+    eventSequence: number | null;
+    /** One-tap answers for a single short choice question; empty otherwise. */
+    choices: InboxItemChoice[];
+    urgency: "normal" | "time_sensitive";
+    status: "open" | "resolved" | "withdrawn" | "dismissed";
+    /** True while the person has not seen the item's current content. */
+    unread: boolean;
+    snoozedUntil: string | null;
+    createdAt: string;
+    updatedAt: string;
+    resolvedAt: string | null;
+    /** Another workspace member whose agent sent this notification; null for the person's own. */
+    sender?: InboxItemSender | null;
+    /**
+     * Whether the person can open the session the item came from. False for
+     * another member's private session: show no session link then.
+     */
+    sessionAvailable?: boolean;
+};
+/** The member an agent notified the person for. */
+export type InboxItemSender = {
+    subjectId: string;
+    label: string;
+};
+/** A short label and value an agent attached to a notification. */
+export type InboxItemFact = {
+    label: string;
+    value: string;
+};
+/** A place outside the session an agent's notification points to. */
+export type InboxItemLink = {
+    url: string;
+    label: string;
+};
+/** An option of the question behind an inbox item, answerable in one tap. */
+export type InboxItemChoice = {
+    id: string;
+    label: string;
+};
+export type ListInboxResponse = {
+    items: InboxItem[];
+    /** Open, unsnoozed items that need the person (questions, approvals, paused goals). */
+    needsYouCount: number;
+    /** Open, unsnoozed, unread items of any kind. */
+    unreadCount: number;
+};
+/** The person's own attention on an item; answering happens in the session. */
+export type UpdateInboxItemInput = {
+    seen?: true;
+    /** ISO time to hide the item until, or null to unsnooze. */
+    snoozedUntil?: string | null;
+    dismissed?: true;
+};
+/**
+ * What agents may do in the person's inbox: tidy notifications (from their own
+ * sessions, or any agent's), or `full_access` to see every open item and
+ * snooze or dismiss it. Agents never answer or approve for the person.
+ */
+export type InboxTidyPolicy = "own_sessions" | "any_agent" | "full_access";
+export type InboxSettings = {
+    tidyPolicy: InboxTidyPolicy;
+    /**
+     * Goals an agent paused in the person's own sessions reach the inbox. Off by
+     * default. Always present in responses; leave it out of an update to keep it.
+     */
+    pausedGoals?: boolean;
+    /**
+     * Keep each session's latest reply in the inbox until the person clears it.
+     * Off by default. Always present in responses; leave it out to keep it.
+     */
+    replies?: boolean;
+    /**
+     * Alert the phone for the agent's questions and approvals as time-sensitive,
+     * so they break through Focus on iPhone. Off by default. Always present in
+     * responses; leave it out to keep it.
+     */
+    timeSensitiveNeedsYou?: boolean;
+};
+/**
+ * The signed-in person's mute on one session. Muted replies neither reach the
+ * inbox nor alert the phone; the agent's notifications, questions and
+ * approvals still do.
+ */
+export type SessionInboxMute = {
+    repliesMuted: boolean;
+};
+/**
+ * Whether other members' agents may notify the signed-in person in one
+ * workspace. Each person decides for themselves; off by default.
+ */
+export type MemberNotificationsSetting = {
+    allowOthers: boolean;
+};
+export type NativeAppPlatform = "ios" | "android" | "macos" | "windows" | "linux";
+export type NativeAppAuthorizeInput = {
+    /** Exactly `<registered scheme>://auth/callback`. */
+    redirectUri: string;
+    /** Base64url SHA-256 of the app's code verifier. */
+    codeChallenge: string;
+    codeChallengeMethod: "S256";
+    state?: string;
+    platform: NativeAppPlatform;
+    deviceName?: string;
+};
+export type NativeAppTokenInput = {
+    code: string;
+    codeVerifier: string;
+    redirectUri: string;
+};
+export type NativeAppToken = {
+    /** Sent as `Authorization: Bearer <accessToken>` (the client's `apiKey`). */
+    accessToken: string;
+    tokenType: "Bearer";
+    expiresAt: string;
+};
+/**
+ * What a signed-in app is pushed about, for sessions its person started:
+ * `needs_input` (a question or an approval), `reply_ready` (a turn finished),
+ * `failed` (a turn failed) and `agent` (the agent chose to notify).
+ */
+export type NativePushRule = "needs_input" | "reply_ready" | "failed" | "agent";
+export type RegisterNativePushDeviceInput = {
+    platform: NativeAppPlatform;
+    /** The app's bundle identifier (iOS) or package name (Android). */
+    appId: string;
+    /** APNs environment of the build; FCM ignores it. */
+    environment: "development" | "production";
+    /** The APNs device token (hex) or FCM registration token. */
+    token: string;
+    rules: NativePushRule[];
+};
+/** This app credential's push registration. */
+export type NativePushDevice = {
+    platform: NativeAppPlatform;
+    appId: string;
+    environment: "development" | "production";
+    token: string;
+    rules: NativePushRule[];
+    updatedAt: string;
+};
+export type ListOrganizationSessionsOptions = {
+    /** Page size, 1..200; the server default is 50. */
+    limit?: number | undefined;
+    /** `nextCursor` from the previous page. */
+    cursor?: string | undefined;
+    /** Keep only sessions labelled with this exact end user. */
+    scopeSubjectId?: string | undefined;
+    /** Keep only sessions in this exact lifecycle state. */
+    status?: SessionStatus | undefined;
+    signal?: AbortSignal | undefined;
+};
+/**
+ * One page of `GET /v1/organizations/:organizationId/sessions`. Rows come from
+ * every shared workspace the caller may read, each carrying its
+ * `workspaceId`; personal workspaces are never included and private sessions
+ * stay invisible. A page may be shorter than `limit` while `nextCursor` is
+ * still set, so follow `nextCursor` until it is null.
+ */
+export type OrganizationSessionListResponse = {
+    sessions: Session[];
+    nextCursor: string | null;
+};
+export type WorkspaceMember = {
+    subjectId: string;
+    subjectLabel: string | null;
+    role: string;
+    permissions: Permission[];
+    createdAt: string;
+};
+export type ListWorkspaceMembersResponse = {
+    members: WorkspaceMember[];
+};
+export type WorkspaceMemberCandidate = {
+    organizationMembershipId: string;
+    subjectId: string;
+    name: string | null;
+    email: string | null;
+    organizationRole: "owner" | "admin" | "member";
+};
+export type ListWorkspaceMemberCandidatesResponse = {
+    members: WorkspaceMemberCandidate[];
+};
+export type AddWorkspaceMemberRequest = {
+    organizationMembershipId: string;
+    role?: string | undefined;
+    permissions: Permission[];
+};
+export type UpdateWorkspaceMemberRequest = {
+    role?: string | undefined;
+    permissions: Permission[];
 };
 export type SlackUserLinkAccessRequestStatus = "prepared" | "pending" | "completed" | "denied" | "cancelled" | "expired";
 /** Token-free durable projection of one signed Slack identity-link intent. */
@@ -3492,7 +5327,7 @@ export type SessionGoalContinuation = {
     observedRevision: number;
     nextAttemptAt: string | null;
     lastError: string | null;
-    /** Agent-stated reason for a `held_for_input` hold; null otherwise. */
+    /** Agent-stated reason for a `wait_for_input` hold; null otherwise. */
     holdReason?: string | null | undefined;
 };
 export type SessionGoal = {
@@ -3504,6 +5339,8 @@ export type SessionGoal = {
     text: string;
     successCriteria: string | null;
     rootConstraints: string[];
+    /** Optional for older-server/source compatibility; current servers always supply this projection. */
+    reportRequirements?: SessionGoalReportRequirement[] | undefined;
     evidence: string | null;
     rationale: string | null;
     pausedReason: string | null;
@@ -3534,10 +5371,6 @@ export type UpdateSessionGoalRequest = {
 export type UpdateSessionRequest = {
     title: string;
 };
-/** Replace the complete ordered low-to-high precedence Variable Set selection. */
-export type UpdateSessionVariableSetsRequest = {
-    variableSetIds: string[];
-};
 /** Outcome of a manual /compact trigger. */
 export type CompactSessionContextResult = {
     /** pending waits for the current safe boundary; completed ran while idle. */
@@ -3610,16 +5443,17 @@ export type ComposerDraft = {
     updatedAt: string | null;
 };
 export type NewSessionDraftOptions = {
+    agentLearning?: import("@opengeni/contracts").AgentLearningOverrides | undefined;
+    excludedMcpServerIds?: string[] | undefined;
     visibility?: SessionVisibility | undefined;
     sandboxBackend?: SandboxBackend | undefined;
     targetSandboxId?: string | undefined;
     workingDir?: string | undefined;
-    variableSetIds?: string[] | undefined;
-    variableSetId?: string | undefined;
     rigId?: string | undefined;
     goal?: GoalSpec | undefined;
     firstPartyMcpPermissions?: Permission[] | undefined;
     firstPartyMcpTools?: FirstPartyMcpToolName[] | undefined;
+    agent?: AgentConfigRequest | undefined;
 };
 export type NewSessionSelectionHistory = {
     /** Most-recently used project first. Null channelId is the Default project. */
@@ -3644,6 +5478,13 @@ export type NewSessionDraft = {
     model: string;
     reasoningEffort: ReasoningEffort;
     latencyMode: LatencyMode;
+    /**
+     * True when the person chose this model policy; false follows the resolved
+     * default for new chats. Absent from older servers.
+     */
+    modelProvided?: boolean | undefined;
+    /** Absent on legacy drafts; null records an explicit Default-project selection. */
+    selectedProjectChannelId?: string | null | undefined;
     options: NewSessionDraftOptions;
     selectionHistory: NewSessionSelectionHistory;
     updatedAt: string | null;
@@ -3666,8 +5507,28 @@ export type SessionQueueSnapshot = {
 };
 export type SessionPendingInputPreview = Pick<SessionSystemUpdate, "id" | "sessionId" | "kind" | "classification" | "sourceId" | "summary" | "createdAt">;
 export type SystemUpdateClassification = "success" | "failure" | "action_required" | "info";
-export type SessionSystemUpdateKind = "scheduled_occurrence" | "goal_continuation" | "agent_message" | "agent_steer_instruction" | "child_terminal_result" | "media_generation_result" | "child_requires_action" | "child_requires_action_resolved" | "child_paused" | "child_waiting_capacity" | "child_progress";
+export type SessionSystemUpdateKind = "scheduled_occurrence" | "goal_continuation" | "agent_message" | "agent_steer_instruction" | "session_wait_timeout" | "background_command_result" | "child_terminal_result" | "media_generation_result" | "child_requires_action" | "child_requires_action_resolved" | "child_paused" | "child_waiting_capacity" | "child_progress";
 export type SessionSystemUpdateState = "pending" | "delivered" | "cancelled" | "superseded" | "failed";
+export type SessionSystemUpdatePayload = {
+    type: "session_wait_timeout";
+    waitTurnId: string;
+    deadlineAt: string;
+    reason: string;
+    [key: string]: unknown;
+} | {
+    type: "background_command_result";
+    commandId: string;
+    state: "exited" | "lost";
+    exitCode: number | null;
+    reason: string;
+    outputLocator: {
+        eventType: "sandbox.command.output.delta";
+        commandId: string;
+    };
+    [key: string]: unknown;
+} | ({
+    type: Exclude<SessionSystemUpdateKind, "session_wait_timeout" | "background_command_result">;
+} & Record<string, unknown>);
 export type SessionSystemUpdate = {
     id: string;
     sessionId: string;
@@ -3676,7 +5537,7 @@ export type SessionSystemUpdate = {
     sourceId: string;
     dedupeKey: string;
     summary: string;
-    payload: Record<string, unknown>;
+    payload: SessionSystemUpdatePayload;
     lineage: Record<string, unknown>;
     state: SessionSystemUpdateState;
     deliveredTurnId: string | null;
@@ -3684,6 +5545,56 @@ export type SessionSystemUpdate = {
     deliveredAt: string | null;
     createdAt: string;
 };
+export type SessionRetryRequest = {
+    clientEventId: string;
+    failureEventId: string;
+    model?: string;
+    reasoningEffort?: ReasoningEffort;
+    latencyMode?: LatencyMode;
+};
+export type SandboxRecoverySelection = {
+    version: 1;
+    sessionId: string;
+    sandboxGroupId: string;
+    leaseId: string;
+    routeEpoch: number;
+    authorityEpoch: number;
+    leaseEpoch: number;
+    workspaceGeneration: number;
+    archiveGeneration: number;
+    artifactId: string;
+    revision: string;
+    capturedAt: string;
+};
+export type SandboxRecoveryProjection = {
+    version: 1;
+    status: "unsupported" | "blocked" | "eligible" | "consent_accepted" | "restoring" | "restored";
+    reason: string | null;
+    checkpoint: SandboxRecoverySelection | null;
+    operationId: string | null;
+    automaticAvailable?: boolean;
+    /** What an automatic Retry does: restore `checkpoint`, or continue on a new
+     * empty workspace because no usable checkpoint survived the sandbox loss. */
+    automaticLane?: "checkpoint" | "fresh_workspace";
+    /** For a timed recovery wait: the earliest time a Retry or a new message can
+     * let Opengeni decide again. Nothing proceeds by itself before then. */
+    availableAt?: string;
+};
+export type SandboxRecoveryRequest = {
+    operationId: string;
+    acceptHistoricalCheckpoint: true;
+    selection: SandboxRecoverySelection;
+};
+export type SandboxRecoveryResponse = {
+    outcome: "accepted" | "replayed";
+    operationId: string;
+    recovery: SandboxRecoveryProjection;
+};
+export type SessionRetryResponse = {
+    outcome: "accepted" | "replayed";
+    turnId: string;
+    failureEventId: string;
+};
 export type SessionControlResponse = {
     receipt: SessionCommandReceipt;
     effectiveControl: EffectiveSessionControl;
@@ -3692,6 +5603,19 @@ export type SessionControlResponse = {
     cancelledSessionCount: number;
     cancelledTurnCount: number;
 };
+export type WorkspacePauseTimer = {
+    id: string;
+    action: "pause" | "resume";
+    dueAt: string;
+    pauseForSeconds: number | null;
+};
+export type WorkspacePauseTimerRequest = {
+    action: "set" | "cancel";
+    pauseInSeconds?: number | undefined;
+    pauseForSeconds?: number | null | undefined;
+    clientEventId: string;
+    expectedRevision: number;
+};
 export type WorkspaceInferenceControlResponse = {
     receipt: SessionCommandReceipt;
     state: "active" | "paused";
@@ -3708,7 +5632,7 @@ export type WorkspaceControlEvent = {
     type: "workspace.control.changed";
     scope: "workspace" | "session";
     rootSessionId: string | null;
-    action: "pause" | "resume";
+    action: "pause" | "resume" | "timer_set" | "timer_cancelled";
     automatic: boolean;
     reason: string | null;
     actor: string;
@@ -3765,7 +5689,7 @@ export type SubmitComposerDraftRequest = Omit<SaveComposerDraftRequest, "expecte
     controlEtag?: string;
     modelContext?: string;
     mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[];
-    connectionAuthorities?: McpConnectionAuthoritySelection[];
+    connectionAccounts?: McpConnectionAccountSelection[];
     personalResourceAttachment?: PersonalResourceAttachmentIntent;
 };
 export type SubmitComposerDraftResponse = {
@@ -3782,35 +5706,79 @@ export type SaveNewSessionDraftRequest = Omit<NewSessionDraft, "revision" | "sel
 };
 /** Input shape for agent config on create/update (server applies defaults). */
 export type ScheduledTaskAgentConfigInput = {
+    /**
+     * Agent configuration frozen into the schedule and used by every run;
+     * omitted runs follow the workspace's agent defaults.
+     */
+    agent?: AgentConfigRequest | undefined;
+    knowledgeSource?: Extract<ScheduledTaskAction, {
+        kind: "knowledge_source_sync";
+    }> | undefined;
     prompt: string;
     resources?: ResourceRef[] | undefined;
+    /**
+     * Connectors added on top of the workspace defaults when `toolPolicy` is
+     * set; otherwise the exact list. Omit both on a schedule that starts its
+     * own session to follow the workspace defaults at each run.
+     */
     tools?: ToolRef[] | undefined;
+    /** Follow the workspace's default connectors at each run, except the excluded ones. */
+    toolPolicy?: ScheduledTaskToolPolicy | undefined;
     metadata?: Record<string, unknown> | undefined;
     slackBotConnectionId?: string | undefined;
+    /** Slack channel a person chose for this task's bot posts; requires slackBotConnectionId. */
+    slackBotChannelId?: string | undefined;
     model?: string | undefined;
     reasoningEffort?: ReasoningEffort | undefined;
     sandboxBackend?: SandboxBackend | undefined;
+    machineTarget?: {
+        targetSandboxId: string;
+        workingDir?: string | undefined;
+    } | undefined;
     goal?: GoalSpec | undefined;
     executionClass?: "incident_telemetry" | undefined;
     incidentTelemetryPreflight?: IncidentTelemetryPreflightInput | undefined;
     maxNestedAgentDepth?: number | undefined;
+    /**
+     * Seconds a run's own turn may wait on a person (tool approval or structured
+     * question, 60 s - 30 days) before the scheduler rejects the approval / skips
+     * the question as a labelled system decision. Omitted: waits indefinitely.
+     */
+    approvalTimeoutSeconds?: number | undefined;
 };
 export type CreateAgentScheduledTaskRequest = {
+    agentLearning?: {
+        scope: "workspace" | "personal";
+        settings: import("./knowledge.js").AgentLearningOverrides;
+    };
     name: string;
     schedule: ScheduledTaskScheduleSpec;
+    /** Who can see it. Omitted: everyone in the workspace. */
+    visibility?: SessionVisibility | undefined;
     action?: {
         kind: "agent_turn";
     } | undefined;
     runMode?: ScheduledTaskRunMode | undefined;
     targetSessionId?: string | null | undefined;
-    connectionAuthorities?: McpConnectionAuthoritySelection[] | undefined;
+    /**
+     * Connector accounts a person pins for a schedule that starts its own
+     * session (never an existing-chat schedule, never an agent).
+     */
+    pinnedAccounts?: McpConnectionAccountSelection[] | undefined;
+    /** Skip an occurrence instead of running without an unusable pinned account. */
+    pinnedAccountsRequired?: boolean | undefined;
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     agentConfig: ScheduledTaskAgentConfigInput;
     status?: ScheduledTaskStatus | undefined;
-    variableSetId?: string | null | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | null | undefined;
+    /**
+     * Sandbox Environment each run binds to; its active version is resolved per
+     * fire. Omit to resolve it once at create: the workspace default (none for a
+     * Connected Machine task), or the target session's own environment for an
+     * existing-session task. `null` means none.
+     */
     rigId?: string | null | undefined;
+    /** Vault narrowing for every run; omission adds none. */
+    vaultPolicy?: VaultPolicy | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
 export type CreateKnowledgeSourceSyncScheduledTaskRequest = {
@@ -3823,21 +5791,49 @@ export type CreateKnowledgeSourceSyncScheduledTaskRequest = {
     status?: ScheduledTaskStatus | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
-export type CreateScheduledTaskRequest = CreateAgentScheduledTaskRequest | CreateKnowledgeSourceSyncScheduledTaskRequest;
+/** Send a scheduled message using the destination chat’s current execution settings. */
+export type CreateSessionScheduledTaskRequest = {
+    name: string;
+    schedule: ScheduledTaskScheduleSpec;
+    prompt: string;
+    targetSessionId: string;
+    /** A schedule posting into an Only me chat is always Only me. */
+    visibility?: SessionVisibility | undefined;
+    runMode?: "existing_session" | undefined;
+    overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
+    status?: ScheduledTaskStatus | undefined;
+    metadata?: Record<string, unknown> | undefined;
+};
+export type CreateScheduledTaskRequest = CreateSessionScheduledTaskRequest | CreateAgentScheduledTaskRequest | CreateKnowledgeSourceSyncScheduledTaskRequest;
 export type UpdateScheduledTaskRequest = {
+    expectedExecutionDigest?: string | undefined;
+    adoptSessionSettings?: true | undefined;
+    /** Lossless message edit. All omitted configuration is preserved. */
+    prompt?: string | undefined;
     name?: string | undefined;
     schedule?: ScheduledTaskScheduleSpec | undefined;
     runMode?: ScheduledTaskRunMode | undefined;
     targetSessionId?: string | null | undefined;
-    connectionAuthorities?: McpConnectionAuthoritySelection[] | undefined;
+    /** Change who can see it. Only the owner can; a schedule posting into an Only me chat stays Only me. */
+    visibility?: SessionVisibility | undefined;
+    /** Replace the person-pinned accounts; `[]` unpins every connector. Omitted keeps the pins. */
+    pinnedAccounts?: McpConnectionAccountSelection[] | undefined;
+    /** Skip occurrences instead of running without an unusable pinned account. */
+    pinnedAccountsRequired?: boolean | undefined;
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     action?: ScheduledTaskAction | undefined;
     agentConfig?: ScheduledTaskAgentConfigInput | undefined;
+    /** Lossless model defaults patch; cannot be combined with agentConfig replacement.
+     * Existing target/reusable sessions retain their own model and reasoning. */
+    agentConfigPatch?: {
+        prompt?: string | undefined;
+        model?: string | undefined;
+        reasoningEffort?: ReasoningEffort | undefined;
+    } | undefined;
     status?: ScheduledTaskStatus | undefined;
-    variableSetId?: string | null | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | null | undefined;
     rigId?: string | null | undefined;
+    /** Vault narrowing for every run. */
+    vaultPolicy?: VaultPolicy | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
 export type ScheduledTaskRunStatus = "queued" | "dispatched" | "succeeded" | "skipped" | "failed";
@@ -3883,75 +5879,83 @@ export type ScheduledTaskRun = {
     knowledgeSummary: KnowledgeSourceSyncRunSummary | null;
     completedAt: string | null;
     error: string | null;
+    admissionDiagnostic?: {
+        version: 1;
+        reason: "selected_account_unavailable" | "owner_access_unavailable" | "ambiguous_account" | "parent_accounts_required" | "selection_unavailable";
+        accounts: Array<{
+            serverId: string;
+            connectionId: string | null;
+            reason: "connector_unavailable" | "account_not_visible" | "account_inactive" | "account_mismatch" | "selection_unavailable";
+        }>;
+    } | null | undefined;
+    /**
+     * Pinned connector accounts this run could not use. The run went ahead
+     * without those connectors; no other account was used in their place.
+     */
+    degradedAccounts?: Array<{
+        serverId: string;
+        connectionId: string | null;
+        reason: "connector_unavailable" | "account_not_visible" | "account_inactive" | "account_mismatch" | "selection_unavailable" | "owner_access_unavailable";
+    }> | undefined;
+    /**
+     * Why the scheduler refused this occurrence before running it; `error`
+     * equals `reason`. `retryable: true` (status `skipped`): a later occurrence
+     * runs once the condition clears. `retryable: false` (status `failed`):
+     * every occurrence is refused until the task or a resource it names changes.
+     */
+    admissionRefusal?: ScheduledTaskAdmissionRefusal | null | undefined;
+    /**
+     * This dispatched run's own turn is waiting on a person (tool approval or
+     * structured question) since `since`; `expiresAt` is when the task's
+     * `approvalTimeoutSeconds` answers for it (null: waits indefinitely).
+     */
+    awaitingHuman?: ScheduledTaskRunAwaitingHuman | null | undefined;
     createdAt: string;
     updatedAt: string;
+    /** Connectors this run could not use; projected only for a viewer who can act on the task. */
+    accessFailures?: ScheduledTaskRunAccessFailure[] | undefined;
 };
-/** Generic variable-set reads expose name + version metadata only. */
-export type VariableSetVariableMetadata = {
-    name: string;
-    version: number;
-    createdAt: string;
-    updatedAt: string;
-};
-/** Dedicated permissioned plaintext response; never embedded in metadata reads. */
-export type VariableSetSecret = {
-    variableSetId: string;
-    name: string;
-    version: number;
-    value: string;
-};
-export type VariableSet = {
-    id: string;
-    accountId: string;
-    workspaceId: string;
-    scope: "organization" | "workspace" | "user";
-    generation: number;
-    status: "active" | "revoked";
-    name: string;
-    description: string | null;
-    variables: VariableSetVariableMetadata[];
-    createdAt: string;
-    updatedAt: string;
-};
-/** Exact-ID attachment metadata; intentionally excludes catalog and secret metadata. */
-export type VariableSetAttachmentMetadata = {
-    id: string;
-    scope: "organization" | "workspace" | "user";
-};
-export type ResolveVariableSetAttachmentsRequest = {
-    variableSetIds: string[];
+export type ScheduledTaskRunAwaitingHuman = {
+    since: string;
+    expiresAt: string | null;
 };
-export type ResolveVariableSetAttachmentsResponse = {
-    variableSets: VariableSetAttachmentMetadata[];
+export type ScheduledTaskAdmissionRefusal = {
+    version: 1;
+    reason: "scheduled_authority_unavailable" | "machine_target_unavailable" | "machine_enrollment_inactive" | "variable_set_unavailable" | "rig_version_unavailable" | "scheduled_model_unavailable" | "insufficient_credits" | "monthly_model_cost_limit" | "monthly_agent_run_limit" | (string & {});
+    retryable: boolean;
 };
-/** @deprecated use VariableSetVariableMetadata */
-export type WorkspaceEnvironmentVariableMetadata = VariableSetVariableMetadata;
-/** @deprecated use VariableSet */
-export type WorkspaceEnvironment = VariableSet;
-export type CreateVariableSetRequest = {
-    /** Omitted remains the legacy workspace-owned path. */
-    scope?: "organization" | "workspace" | "user" | undefined;
+export type ScheduledTaskAccessFailureReason = "missing_connection" | "expired" | "insufficient_scope" | "refresh_failed" | "personal_authority_unavailable" | "unsupported_auth" | "resource_scope_unavailable" | "designated_credential_unavailable";
+/** A connector a scheduled run's own turn could not use (a `tool.auth_needed` fact). */
+export type ScheduledTaskRunAccessFailure = {
+    serverId: string;
     name: string;
-    description?: string | undefined;
-    /** Initial variables. Values are write-only: they never come back on reads. */
-    variables?: {
-        name: string;
-        value: string;
-    }[] | undefined;
+    providerDomain: string;
+    reason: ScheduledTaskAccessFailureReason;
+    count: number;
+    firstOccurredAt: string;
 };
-/** @deprecated use CreateVariableSetRequest */
-export type CreateWorkspaceEnvironmentRequest = CreateVariableSetRequest;
-export type UpdateVariableSetRequest = {
-    name?: string | undefined;
-    description?: string | null | undefined;
+/**
+ * A schedule that needs its owner's attention: its latest run failed closed on
+ * connector access (`runId`, `failures`), and/or a pinned connector account can
+ * no longer be used (`unavailableAccounts`; runs continue without that
+ * connector unless the schedule requires its pins; `runId` and `firedAt` are
+ * null when only this applies).
+ */
+export type ScheduledTaskAccessAttention = {
+    taskId: string;
+    taskName: string;
+    /** The task head this item was computed against; a new head is a new notice. */
+    executionDigest: string;
+    runId: string | null;
+    firedAt: string | null;
+    failures: ScheduledTaskRunAccessFailure[];
+    unavailableAccounts: ScheduledTaskAccessConnector[];
+    /** The latest run is waiting on a person (tool approval or question) right now. */
+    awaitingHuman?: ScheduledTaskRunAwaitingHuman | null | undefined;
 };
-/** @deprecated use UpdateVariableSetRequest */
-export type UpdateWorkspaceEnvironmentRequest = UpdateVariableSetRequest;
-export type SetVariableSetVariableRequest = {
-    value: string;
+export type ListScheduledTaskAccessAttentionResponse = {
+    tasks: ScheduledTaskAccessAttention[];
 };
-/** @deprecated use SetVariableSetVariableRequest */
-export type SetWorkspaceEnvironmentVariableRequest = SetVariableSetVariableRequest;
 export type RigCheck = {
     name: string;
     command: string;
@@ -3994,6 +5998,7 @@ export type RigVersion = {
     setupScript: string | null;
     checks: RigCheck[];
     credentialHooks: string[];
+    /** @deprecated Variable Sets were replaced by vaults; inert legacy data. */
     defaultVariableSetIds: string[];
     changelog: string | null;
     providerImages: Partial<Record<SandboxBackend, RigProviderImage>>;
@@ -4091,7 +6096,6 @@ export type CreateRigRequest = {
     setupScript?: string | undefined;
     checks?: RigCheck[] | undefined;
     credentialHooks?: string[] | undefined;
-    defaultVariableSetIds?: string[] | undefined;
 };
 export type UpdateRigRequest = {
     name?: string | undefined;
@@ -4106,7 +6110,6 @@ export type RigDefinitionEditPayload = {
     setupScript?: string | null | undefined;
     checks?: RigCheck[] | undefined;
     credentialHooks?: string[] | undefined;
-    defaultVariableSetIds?: string[] | undefined;
     changelog?: string | null | undefined;
 };
 export type ProposeRigChangeRequest = {
@@ -4117,7 +6120,17 @@ export type ProposeRigChangeRequest = {
     payload: RigDefinitionEditPayload;
 };
 export type FileStatus = "pending_upload" | "ready" | "failed" | "expired" | "deleted";
+export type FileListRequest = {
+    scope?: "all" | "workspace" | "personal";
+    limit?: number;
+    cursor?: string;
+};
+export type FileListResponse = {
+    files: FileAsset[];
+    nextCursor: string | null;
+};
 export type FileAsset = {
+    scope?: "workspace" | "personal" | undefined;
     id: string;
     workspaceId: string;
     status: FileStatus;
@@ -4137,7 +6150,7 @@ export declare const RETAINED_OUTPUT_MAX_PAGE_BYTES: number;
 export declare const COMPUTER_SCREENSHOT_MAX_BYTES: number;
 export declare const GENERATED_IMAGE_MAX_BYTES: number;
 export declare const GENERATED_VIDEO_MAX_BYTES: number;
-export type RetainedOutputKind = "tool_result" | "assistant_completion" | "internal_update" | "event_media" | "computer_screenshot" | "generated_image" | "generated_video" | "file";
+export type RetainedOutputKind = "tool_result" | "assistant_completion" | "internal_update" | "event_media" | "computer_screenshot" | "browser_screenshot" | "generated_image" | "generated_video" | "file";
 export type RetainedOutputUnavailableReason = "not_retained" | "pending" | "failed" | "expired" | "deleted" | "missing_storage" | "storage_write_failed" | "quota_exceeded" | "invalid_content" | "oversized" | "unsupported";
 export type RetainedArtifactReference = {
     available: true;
@@ -4308,6 +6321,7 @@ export type RetainedArtifactDownload = {
     bytes: Uint8Array;
 };
 export type CreateFileUploadRequest = {
+    scope?: "workspace" | "personal";
     filename: string;
     contentType: string;
     sizeBytes: number;
@@ -4333,6 +6347,7 @@ export type FileDownloadUrlResponse = {
 /** Bytes accepted by the `uploadFile` helper. */
 export type FileUploadData = Blob | ArrayBuffer | Uint8Array | string;
 export type UploadFileInput = {
+    scope?: "workspace" | "personal";
     filename: string;
     contentType: string;
     data: FileUploadData;
@@ -4586,313 +6601,69 @@ export type KnowledgeMemory = {
 };
 export type CreateKnowledgeMemoryRequest = {
     status?: KnowledgeMemoryStatus | undefined;
-    kind?: KnowledgeMemoryKind | undefined;
-    scope?: string | undefined;
-    text: string;
-    sourceRefs?: KnowledgeSourceRef[] | undefined;
-    confidence?: number | undefined;
-    metadata?: Record<string, unknown> | undefined;
-    createdBySessionId?: string | undefined;
-    pinned?: boolean | undefined;
-    replacesId?: string | undefined;
-};
-export type UpdateKnowledgeMemoryRequest = {
-    status?: KnowledgeMemoryStatus | undefined;
-    kind?: KnowledgeMemoryKind | undefined;
-    scope?: string | undefined;
-    text?: string | undefined;
-    sourceRefs?: KnowledgeSourceRef[] | undefined;
-    confidence?: number | undefined;
-    metadata?: Record<string, unknown> | undefined;
-    reviewedBy?: string | undefined;
-    pinned?: boolean | undefined;
-};
-export type KnowledgeMemorySearchRequest = {
-    query?: string | undefined;
-    status?: KnowledgeMemoryStatus | undefined;
-    kind?: KnowledgeMemoryKind | undefined;
-    scope?: string | undefined;
-    limit?: number | undefined;
-};
-export type WorkspaceMemorySearchMode = "hybrid" | "vector" | "keyword";
-export type WorkspaceMemorySearchRequest = {
-    query: string;
-    kind?: KnowledgeMemoryKind | undefined;
-    limit?: number | undefined;
-    mode?: WorkspaceMemorySearchMode | undefined;
-};
-export type WorkspaceMemorySearchResult = {
-    memory: KnowledgeMemory;
-    score: number;
-    matchType: WorkspaceMemorySearchMode;
-    vectorScore: number | null;
-    keywordScore: number | null;
-};
-export type WorkspaceMemorySearchResponse = {
-    results: WorkspaceMemorySearchResult[];
-};
-export type CapabilityPackConnectorAuthModel = "oauth2_authorization_code_pkce" | "oauth2_authorization_code" | "api_key" | "credential_ref";
-export type CapabilityPackConnector = {
-    id: string;
-    name: string;
-    category: string;
-    authModel: CapabilityPackConnectorAuthModel;
-    providers: string[];
-    scopes: string[];
-    required: boolean;
-    metadata: Record<string, unknown>;
-};
-export type CapabilityPackKnowledge = {
-    type: "document_base";
-    id: string;
-    name: string;
-    description: string | null;
-    required: boolean;
-};
-export type CapabilityPackScheduledTaskTemplate = {
-    id: string;
-    name: string;
-    description: string;
-    defaultSchedule: ScheduledTaskScheduleSpec;
-    defaultRunMode: ScheduledTaskRunMode;
-    defaultOverlapPolicy: ScheduledTaskOverlapPolicy;
-    prompt?: string | undefined;
-};
-export type CapabilityPackAutomationTemplate = {
-    id: string;
-    name: string;
-    description: string;
-    adapterId: string;
-    eventTypes: string[];
-    sessionTemplate: {
-        prompt: string;
-        instructions: string | null;
-        resources: ResourceRef[];
-        skills: CapabilityPackSkill[];
-        tools: ToolRef[];
-        firstPartyMcpTools: string[];
-        firstPartyMcpPermissions: Permission[];
-        model: string | null;
-        reasoningEffort: ReasoningEffort | null;
-        sandboxBackend: SandboxBackend | null;
-        policyRole: string | null;
-        metadata: Record<string, unknown>;
-    };
-    configuration: Record<string, unknown>;
-    connectionRequirement: string | null;
-};
-export type CapabilityPackSkillFile = {
-    path: string;
-    content: string;
-};
-export type CapabilityPackSkill = {
-    name: string;
-    description?: string | undefined;
-    files: CapabilityPackSkillFile[];
-};
-export type SessionSkill = CapabilityPackSkill;
-export type CapabilityPackVariableSetSpec = {
-    description: string;
-    requiredVariables: string[];
-    required: boolean;
-};
-export type CapabilityPackComponentReference = {
-    key: string;
-    kind: "plugin";
-    pluginKey: string;
-    version: string;
-    manifestDigest: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "skill";
-    capabilityId: string;
-    contentSha256: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "integration";
-    capabilityId: string;
-    instanceKey: string;
-    revisionId: string;
-    contentSha256: string;
-    required: boolean;
-} | {
-    key: string;
-    kind: "facet";
-    capabilityId: string;
-    instanceKey: string;
-    facetKey: string;
-    bindingKey: string;
-    configDigest: string;
-    required: boolean;
-};
-export type CapabilityPackRigRequirement = {
-    description?: string | undefined;
-    required: boolean;
-    rigId?: string | undefined;
-    requireVerified: boolean;
-};
-export type CapabilityPack = {
-    id: string;
-    name: string;
-    description: string;
-    role: string;
-    category: string;
-    version: string;
-    sandboxImage?: string | undefined;
-    sandboxProviderImages?: {
-        modal?: {
-            imageId: string;
-        } | undefined;
-    } | undefined;
-    skills: CapabilityPackSkill[];
-    components: CapabilityPackComponentReference[];
-    rig?: CapabilityPackRigRequirement | undefined;
-    tools: ToolRef[];
-    connectors: CapabilityPackConnector[];
-    knowledge: CapabilityPackKnowledge[];
-    scheduledTaskTemplates: CapabilityPackScheduledTaskTemplate[];
-    automationTemplates?: CapabilityPackAutomationTemplate[] | undefined;
-    variableSet?: CapabilityPackVariableSetSpec | undefined;
-    metadata: Record<string, unknown>;
-};
-/** Input shape for registering a pack manifest (server applies defaults). */
-export type RegisterCapabilityPackRequest = {
-    id: string;
-    name: string;
-    description: string;
-    role: string;
-    category: string;
-    version: string;
-    sandboxImage?: string | undefined;
-    sandboxProviderImages?: {
-        modal?: {
-            imageId: string;
-        } | undefined;
-    } | undefined;
-    skills?: {
-        name: string;
-        description?: string | undefined;
-        files: CapabilityPackSkillFile[];
-    }[] | undefined;
-    components?: ({
-        key: string;
-        kind: "plugin";
-        pluginKey: string;
-        version: string;
-        manifestDigest: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "skill";
-        capabilityId: string;
-        contentSha256: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "integration";
-        capabilityId: string;
-        instanceKey: string;
-        revisionId: string;
-        contentSha256: string;
-        required?: boolean | undefined;
-    } | {
-        key: string;
-        kind: "facet";
-        capabilityId: string;
-        instanceKey: string;
-        facetKey: string;
-        bindingKey: string;
-        configDigest: string;
-        required?: boolean | undefined;
-    })[] | undefined;
-    rig?: {
-        description?: string | undefined;
-        required?: boolean | undefined;
-        rigId?: string | undefined;
-        requireVerified?: boolean | undefined;
-    } | undefined;
-    tools?: ToolRef[] | undefined;
-    connectors?: {
-        id: string;
-        name: string;
-        category: string;
-        authModel: CapabilityPackConnectorAuthModel;
-        providers?: string[] | undefined;
-        scopes?: string[] | undefined;
-        required?: boolean | undefined;
-        metadata?: Record<string, unknown> | undefined;
-    }[] | undefined;
-    knowledge?: {
-        type: "document_base";
-        id: string;
-        name: string;
-        description?: string | null | undefined;
-        required?: boolean | undefined;
-    }[] | undefined;
-    scheduledTaskTemplates?: {
-        id: string;
-        name: string;
-        description: string;
-        defaultSchedule: ScheduledTaskScheduleSpec;
-        defaultRunMode?: ScheduledTaskRunMode | undefined;
-        defaultOverlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
-        prompt?: string | undefined;
-    }[] | undefined;
-    automationTemplates?: {
-        id: string;
-        name: string;
-        description: string;
-        adapterId: string;
-        eventTypes: string[];
-        sessionTemplate: {
-            prompt: string;
-            instructions?: string | null | undefined;
-            resources?: ResourceRef[] | undefined;
-            skills?: CapabilityPackSkill[] | undefined;
-            tools?: ToolRef[] | undefined;
-            firstPartyMcpTools?: string[] | undefined;
-            firstPartyMcpPermissions?: Permission[] | undefined;
-            model?: string | null | undefined;
-            reasoningEffort?: ReasoningEffort | null | undefined;
-            sandboxBackend?: SandboxBackend | null | undefined;
-            policyRole?: string | null | undefined;
-            metadata?: Record<string, unknown> | undefined;
-        };
-        configuration?: Record<string, unknown> | undefined;
-        connectionRequirement?: string | null | undefined;
-    }[] | undefined;
-    variableSet?: {
-        description: string;
-        requiredVariables?: string[] | undefined;
-        required?: boolean | undefined;
-    } | undefined;
+    kind?: KnowledgeMemoryKind | undefined;
+    scope?: string | undefined;
+    text: string;
+    sourceRefs?: KnowledgeSourceRef[] | undefined;
+    confidence?: number | undefined;
     metadata?: Record<string, unknown> | undefined;
+    createdBySessionId?: string | undefined;
+    pinned?: boolean | undefined;
+    replacesId?: string | undefined;
 };
-export type WorkspaceRegisteredPack = {
-    accountId: string;
-    workspaceId: string;
-    pack: CapabilityPack;
-    createdAt: string;
-    updatedAt: string;
+export type UpdateKnowledgeMemoryRequest = {
+    status?: KnowledgeMemoryStatus | undefined;
+    kind?: KnowledgeMemoryKind | undefined;
+    scope?: string | undefined;
+    text?: string | undefined;
+    sourceRefs?: KnowledgeSourceRef[] | undefined;
+    confidence?: number | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    reviewedBy?: string | undefined;
+    pinned?: boolean | undefined;
 };
-export type PackInstallationStatus = "installing" | "active" | "needs_attention" | "disabled";
-export type PackInstallation = {
-    id: string;
-    accountId: string;
-    workspaceId: string;
-    packId: string;
-    status: PackInstallationStatus;
-    version: number;
-    manifestSnapshot: CapabilityPack | null;
-    manifestDigest: string | null;
-    selectedRigId: string | null;
-    installedBySubjectId: string | null;
-    metadata: Record<string, unknown>;
-    enabledAt: string;
-    updatedAt: string;
+export type KnowledgeMemorySearchRequest = {
+    query?: string | undefined;
+    status?: KnowledgeMemoryStatus | undefined;
+    kind?: KnowledgeMemoryKind | undefined;
+    scope?: string | undefined;
+    limit?: number | undefined;
+};
+export type WorkspaceMemorySearchMode = "hybrid" | "vector" | "keyword";
+export type WorkspaceMemorySearchRequest = {
+    query: string;
+    kind?: KnowledgeMemoryKind | undefined;
+    limit?: number | undefined;
+    mode?: WorkspaceMemorySearchMode | undefined;
+};
+export type WorkspaceMemorySearchResult = {
+    memory: KnowledgeMemory;
+    score: number;
+    matchType: WorkspaceMemorySearchMode;
+    vectorScore: number | null;
+    keywordScore: number | null;
+};
+export type WorkspaceMemorySearchResponse = {
+    results: WorkspaceMemorySearchResult[];
+};
+export type SkillArtifactFile = {
+    path: string;
+    content: string;
+};
+export type SkillArtifactDefinition = {
+    name: string;
+    description?: string | undefined;
+    /** Omitted means workspace-wide; session_selected requires explicit session attachment. */
+    activationMode?: "workspace_managed" | "session_selected" | undefined;
+    files: SkillArtifactFile[];
+};
+export type SessionSkill = Omit<SkillArtifactDefinition, "activationMode">;
+/** SKILL.md owns metadata; supplied legacy fields must exactly match it. */
+export type SkillArtifactDefinitionInput = Omit<SkillArtifactDefinition, "name" | "description"> & {
+    name?: string | undefined;
+    description?: string | undefined;
 };
+export type SessionSkillInput = Omit<SkillArtifactDefinitionInput, "activationMode">;
 export type PrReviewProvider = GitCredentialProvider;
 export type PrReviewCredentialKind = "github_app" | "managed_github_app" | "provider_token";
 export type PrReviewWebhookAuthKind = "hmac_sha256" | "shared_token" | "basic";
@@ -4990,93 +6761,12 @@ export type PrReviewManagedGitHubInstallation = {
 export type PrReviewManagedGitHubSetup = {
     configured: boolean;
     status: "unavailable" | "not_connected" | "connected";
-    appName: "OpenGeni Lens";
+    appName: "Opengeni Lens" | "OpenGeni Lens";
     connectUrl: string | null;
     installations: PrReviewManagedGitHubInstallation[];
     missing: string[];
 };
-export type EnablePackRequest = {
-    variableSetId?: string | undefined;
-    /** @deprecated use variableSetId */
-    environmentId?: string | undefined;
-    metadata?: Record<string, unknown> | undefined;
-};
-export type PackComponentResolutionStatus = "ready" | "missing" | "mismatch";
-export type PackComponentResolution = {
-    key: string;
-    kind: "plugin" | "skill" | "integration" | "facet" | "inline_skill";
-    capabilityId: string;
-    required: boolean;
-    status: PackComponentResolutionStatus;
-    expectedDigest: string;
-    actualDigest: string | null;
-    resolvedId: string | null;
-    label: string;
-};
-export type PackRigResolution = {
-    required: boolean;
-    status: "not_required" | "ready" | "missing" | "mismatch" | "unverified";
-    requestedRigId: string | null;
-    rigId: string | null;
-    rigVersionId: string | null;
-    name: string | null;
-    image: string | null;
-};
-export type PreviewPackInstallationRequest = {
-    rigId?: string | undefined;
-    variableSetId?: string | undefined;
-};
-export type PackInstallationPreview = {
-    packId: string;
-    packVersion: string;
-    manifestDigest: string;
-    installationVersion: number | null;
-    action: "install" | "update" | "repair";
-    ready: boolean;
-    blockers: string[];
-    components: PackComponentResolution[];
-    rig: PackRigResolution;
-    variableSetId: string | null;
-    legacyInlineSkillCount: number;
-    legacySandboxImage: string | null;
-};
-export type InstallPackRequest = {
-    expectedManifestDigest: string;
-    expectedInstallationVersion?: number | undefined;
-    rigId?: string | undefined;
-    variableSetId?: string | undefined;
-    idempotencyKey: string;
-    metadata?: Record<string, unknown> | undefined;
-};
-export type PackUninstallPreview = {
-    packId: string;
-    installed: boolean;
-    installationVersion: number | null;
-    components: Array<{
-        key: string;
-        kind: "plugin" | "skill" | "integration" | "facet" | "inline_skill";
-        capabilityId: string;
-        retainedByOtherOwners: boolean;
-    }>;
-};
-export type UninstallPackRequest = {
-    expectedInstallationVersion: number;
-    idempotencyKey: string;
-};
-export type UninstallPackResult = {
-    packId: string;
-    status: "not_installed" | "uninstalled";
-    retainedComponents: string[];
-};
-export type ListPacksResponse = {
-    packs: CapabilityPack[];
-    installations: PackInstallation[];
-};
-export type GetPackResponse = {
-    pack: CapabilityPack;
-    installation: PackInstallation | null;
-};
-export type CapabilityKind = "pack" | "mcp" | "api" | "skill" | "plugin";
+export type CapabilityKind = "mcp" | "api" | "skill" | "plugin";
 export type CapabilitySource = "built_in" | "library" | "configured" | "public_registry" | "registry" | "manual";
 export type CapabilityInstallationStatus = "active" | "disabled";
 export type CapabilityCatalogAuthKind = "oauth2" | "api_key" | "none" | "unknown";
@@ -5100,6 +6790,14 @@ export type CapabilityRuntime = {
         state: "trusted" | "legacy_active" | "unverified";
         reason: "trusted_source" | "verified_probe" | "active_installation_compatibility" | "missing_verification";
     } | undefined;
+    /**
+     * Present when connecting needs an operator-registered OAuth client because
+     * the provider refuses self-registration; `configured` is whether this
+     * deployment has one. Connector surfaces offer the row only when true.
+     */
+    operatorOAuthClient?: {
+        configured: boolean;
+    } | undefined;
 };
 export type CapabilityCatalogItem = {
     id: string;
@@ -5138,6 +6836,8 @@ export type CapabilityCatalogItem = {
     /** The connection backing this enabled installation, or null when none is involved. */
     connectionRef: {
         connectionId?: string | undefined;
+        accountSelection?: "all_eligible" | undefined;
+        authoritySource?: "host" | undefined;
         providerDomain: string;
         kind: string;
         subjectScope?: "subject" | "workspace" | undefined;
@@ -5177,6 +6877,7 @@ export type CreateCapabilityCatalogItemRequest = {
     metadata?: Record<string, unknown> | undefined;
 };
 export type EnableCapabilityRequest = {
+    onlyIfUninstalled?: boolean | undefined;
     config?: Record<string, unknown> | undefined;
     metadata?: Record<string, unknown> | undefined;
     connectionRef?: McpServerConnectionRef | undefined;
@@ -5193,7 +6894,7 @@ export type DiscoverMcpCapabilitiesResponse = {
     sourceUrl: string;
 };
 export type SkillImportSource = "github" | "skills_sh";
-export type SkillInstallationSource = "library" | "github" | "skills_sh" | "pack";
+export type SkillInstallationSource = "library" | "github" | "skills_sh";
 export type PreviewSkillImportRequest = {
     url: string;
 };
@@ -5203,6 +6904,7 @@ export type SkillImportFileSummary = {
     contentSha256: string;
 };
 export type SkillImportPreview = {
+    markdown?: string;
     source: SkillImportSource;
     sourceUrl: string;
     repositoryUrl: string;
@@ -5231,6 +6933,7 @@ export type InstallLibrarySkillRequest = {
     expectedInstallationVersion?: number | undefined;
 };
 export type InstalledSkill = {
+    skillReceipt?: import("./skills.js").SkillWriteReceipt | undefined;
     capabilityId: string;
     pluginId: string;
     pluginVersionId: string;
@@ -5247,7 +6950,7 @@ export type InstalledSkill = {
     status: "installed";
 };
 export type CapabilityComponentOwner = {
-    kind: "direct" | "plugin" | "pack" | "migration";
+    kind: "direct" | "plugin" | "migration";
     id: string;
     removable: boolean;
 };
@@ -5289,6 +6992,7 @@ export type UninstallSkillRequest = {
     expectedInstallationVersion: number;
 };
 export type UninstallSkillResult = {
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     capabilityId: string;
     status: "not_installed" | "uninstalled" | "retained_by_other_owners";
     remainingOwners: CapabilityComponentOwner[];
@@ -5410,8 +7114,31 @@ export type IntegrationSource = {
     url: string;
     baseUrl?: string | undefined;
 };
+/**
+ * OpenAPI 3.x text (JSON or YAML, at most 8 MiB) sent in the request instead
+ * of a URL. `sourceKey` is your stable identity for the Integration: reuse it
+ * to update the same installation. Server URLs must be absolute or `baseUrl`
+ * given. Calls still obey the deployment network policy, so an API on
+ * localhost or a private address needs a public tunnel unless the operator
+ * enables private targets. Send the same document again on install.
+ */
+export type InlineOpenApiDocumentSource = {
+    kind: "openapi_document";
+    sourceKey: string;
+    document: string;
+    baseUrl?: string | undefined;
+};
+/** Preview/install input sources. */
+export type IntegrationSourceInput = IntegrationSource | InlineOpenApiDocumentSource;
+/** Preview echo: an inline document is reported by digest, never its text. */
+export type IntegrationSourceProjection = IntegrationSource | {
+    kind: "openapi_document";
+    sourceKey: string;
+    documentSha256: string;
+    baseUrl?: string | undefined;
+};
 export type PreviewApiIntegrationRequest = {
-    source: IntegrationSource;
+    source: IntegrationSourceInput;
     connectionId?: string | undefined;
     ownership?: ConnectionOwnership | undefined;
 };
@@ -5447,7 +7174,7 @@ export type ApiIntegrationToolPreview = {
     deprecated: boolean;
 };
 export type ApiIntegrationPreview = {
-    source: IntegrationSource;
+    source: IntegrationSourceProjection;
     definitionId: string;
     definitionProvenance: IntegrationDefinitionProvenance;
     protocol: ApiIntegrationProtocol;
@@ -5469,7 +7196,7 @@ export type ApiIntegrationPreview = {
     warnings: string[];
 };
 export type InstallApiIntegrationRequest = {
-    source: IntegrationSource;
+    source: IntegrationSourceInput;
     expectedRevisionId: string;
     expectedContentSha256: string;
     connectionId?: string | undefined;
@@ -5478,6 +7205,14 @@ export type InstallApiIntegrationRequest = {
     displayName?: string | undefined;
     expectedInstanceVersion?: number | undefined;
     allowedTools?: string[] | undefined;
+    /**
+     * Selected tools whose preview `approvalMode` is `"ask"` that should run
+     * without per-call human approval (for example in scheduled or other
+     * unattended sessions). Needs `capabilities:manage`; a curated definition
+     * may forbid exempting specific operations (422). Declarative: omit it and every write tool asks
+     * again. Connector Block and session approval policies still apply.
+     */
+    autoApprovedTools?: string[] | undefined;
 };
 export type InstalledApiIntegration = {
     capabilityId: string;
@@ -5623,6 +7358,9 @@ export type InstallPluginRequest = {
     expectedInstallationVersion?: number | undefined;
 };
 export type InstalledPlugin = {
+    skillPublications?: import("./skills.js").SkillPublicationReceipt[] | undefined;
+    skillWrites?: import("./skills.js").SkillWriteReceipt[] | undefined;
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     pluginKey: string;
     version: string;
     pluginId: string;
@@ -5639,6 +7377,7 @@ export type PluginInstallationSummary = {
     description: string;
     category: string;
     tags: string[];
+    logoUrl?: string | null | undefined;
     sourceUrl: string | null;
     manifestDigest: string;
     installationVersion: number;
@@ -5650,22 +7389,34 @@ export type PluginInstallationSummary = {
 export type ListInstalledPluginsResponse = {
     plugins: PluginInstallationSummary[];
 };
+export type PluginUninstallComponentImpact = {
+    capabilityId: string;
+    kind: "skill" | "integration" | "mcp";
+    retainedByOtherOwners: boolean;
+    name: string;
+    disposition: "removed" | "retained" | "inactive";
+    retentionReasons: Array<"other_owners" | "customized" | "re_scoped" | "registry_unavailable">;
+    remainingOwners: Array<{
+        kind: "direct" | "plugin" | "migration";
+        name: string;
+    }>;
+    skillId?: string | undefined;
+};
 export type PluginUninstallPreview = {
     pluginKey: string;
     installed: boolean;
     version: string | null;
     installationVersion: number | null;
-    components: Array<{
-        capabilityId: string;
-        kind: "skill" | "integration" | "mcp";
-        retainedByOtherOwners: boolean;
-    }>;
+    previewToken?: string | undefined;
+    components: PluginUninstallComponentImpact[];
 };
 export type UninstallPluginRequest = {
     expectedInstallationVersion: number;
+    expectedPreviewToken?: string | undefined;
     idempotencyKey: string;
 };
 export type UninstallPluginResult = {
+    skillReleases?: import("./skills.js").SkillSourceReleaseReceipt[] | undefined;
     pluginKey: string;
     status: "not_installed" | "uninstalled";
     retainedComponents: string[];
@@ -5681,6 +7432,10 @@ export type GitHubRepository = {
     defaultBranch: string;
     accountLogin: string;
     accountType: string | null;
+    /** GitHub's archived flag, when the provider reported it. */
+    archived?: boolean | undefined;
+    /** GitHub's reported size in kilobytes, when reported. Zero means empty. */
+    sizeKb?: number | undefined;
 };
 export type GitHubRepositoryScope = "all" | "selected";
 export type GitHubBindingStatus = "disabled" | "unbound" | "bound";
@@ -5694,7 +7449,7 @@ export type GitHubInstallationBinding = {
     lifecycle: GitHubInstallationLifecycle;
     repositoryScope: GitHubRepositoryScope;
     repositoryCount: number;
-    /** OpenGeni-owned entry point for changing the installation's repository allowlist. */
+    /** Opengeni-owned entry point for changing the installation's repository allowlist. */
     configureUrl: string | null;
     createdAt: string;
     updatedAt: string;
@@ -5720,6 +7475,55 @@ export type GitHubAppInfo = {
 export type GitHubRepositoriesResponse = {
     repositories: GitHubRepository[];
 };
+export type GitHubActionPolicyDecision = "allow" | "ask" | "block";
+export type GitHubActionPolicyEffectiveDecision = GitHubActionPolicyDecision | "mixed";
+export type GitHubActionPolicyGroup = "routine" | "review" | "merge";
+export type GitHubActionPolicyActor = {
+    kind: "workspace_app";
+    installationId: number;
+} | {
+    kind: "personal";
+    connectionId: string;
+};
+export type GitHubActionPolicyActorState = GitHubActionPolicyActor & {
+    label: string;
+    groups: Record<GitHubActionPolicyGroup, GitHubActionPolicyEffectiveDecision>;
+};
+export type GitHubActionPoliciesResponse = {
+    enabled: boolean;
+    actors: GitHubActionPolicyActorState[];
+};
+export type UpdateGitHubActionPolicyRequest = {
+    actor: GitHubActionPolicyActor;
+    group: GitHubActionPolicyGroup;
+    decision: GitHubActionPolicyDecision;
+};
+export type VerifyPublicGitHubRepositoryRefRequest = {
+    url: string;
+    ref: string;
+};
+export type VerifyPublicGitHubRepositoryRefResponse = {
+    owner: string;
+    name: string;
+    fullName: string;
+    canonicalUrl: string;
+    cloneUrl: string;
+    defaultBranch: string;
+    ref: string;
+    commitSha: string;
+};
+export type GitHubRepositoryBranch = {
+    name: string;
+    isDefault: boolean;
+};
+export type ListGitHubRepositoryBranchesOptions = {
+    cursor?: number | undefined;
+    limit?: number | undefined;
+};
+export type GitHubRepositoryBranchesResponse = {
+    branches: GitHubRepositoryBranch[];
+    nextCursor: number | null;
+};
 export type CreateGitHubAppManifestRequest = {
     appName?: string | undefined;
     organization?: string | undefined;
@@ -5734,11 +7538,23 @@ export type CreateGitHubAppManifestResponse = {
 };
 export type BillingMode = "disabled" | "stripe";
 export type EntitlementsMode = "none" | "static" | "managed";
+export type PromotionalCreditScope = {
+    label: string;
+    eligibleModelIds: string[];
+};
+export type PromotionalCreditBalance = PromotionalCreditScope & {
+    grantId: string;
+    remainingMicros: number;
+    /** Also pays for dictation and live voice, like general credits (signup credits). */
+    coversVoice?: boolean | undefined;
+};
 export type BillingBalance = {
     accountId: string;
     balanceMicros: number;
     currency: "usd";
     updatedAt: string;
+    generalBalanceMicros?: number | undefined;
+    promotionalCredits?: PromotionalCreditBalance[] | undefined;
 };
 export declare const KNOWN_USAGE_EVENT_TYPES: readonly ["agent_run.created", "agent_run.completed", "model.tokens", "model.cost", "file.uploaded", "file.deleted", "document.indexed", "scheduled_task.fired", "knowledge_source_sync.fired", "knowledge_source_sync.completed", "knowledge_source_sync.items", "knowledge_source_sync.bytes", "api_key.request", "sandbox.warm_seconds", "sandbox.warm_cost"];
 export type KnownUsageEventType = (typeof KNOWN_USAGE_EVENT_TYPES)[number];
@@ -5790,12 +7606,16 @@ export type InsightsModelUsageRow = {
     creditUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
 };
 export type InsightsSeriesPoint = {
     label: string;
     modelCostUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
     warmSeconds: number;
     inputTokens: number;
     outputTokens: number;
@@ -5809,6 +7629,10 @@ export type InsightsSeriesPoint = {
     cacheHitPct: number;
     calls: number;
 };
+export type InsightsScope = {
+    rootSessionId: string | null;
+    sessionId: string | null;
+};
 export type InsightsDepthBucket = {
     depth: number;
     sessions: number;
@@ -5824,12 +7648,27 @@ export type InsightsSpendDriver = {
     creditUsd: number;
     estimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
     tokens: number;
     cacheHitPct: number;
     pctOfCreditUsd: number;
     pctOfTokens: number;
     deltaUsdVsPrior: number;
 };
+export type InsightsProjectRow = {
+    id: string;
+    kind: "project" | "other" | "unfiled" | "unavailable" | "deleted";
+    label: string;
+    projects: number;
+    rootSessions: number;
+    calls: number;
+    creditUsd: number;
+    estimatedProviderUsd: number;
+    estimatedProviderCostKnownCalls: number;
+    tokens: number;
+    cacheHitPct: number | null;
+};
 export type InsightsWarmGroupRow = {
     id: string;
     groupId: string;
@@ -5865,6 +7704,8 @@ export type InsightsScheduleRow = {
     creditUsd: number | null;
     estimatedProviderUsd: number | null;
     estimatedProviderCostKnownCalls: number | null;
+    equivalentCreditUsd: number | null;
+    equivalentCreditCostKnownCalls: number | null;
     tokens: number | null;
     cacheHitPct: number | null;
     billing: InsightsBillingPath | null;
@@ -5888,6 +7729,7 @@ export type InsightsModelCallRow = {
     totalTokens: number | null;
     creditUsd: number;
     estimatedProviderUsd: number | null;
+    equivalentCreditUsd: number | null;
     pricingSource: InsightsPricingSource | null;
 };
 export type ModelContextContributionSource = "workspace_instruction_policy" | "legacy_workspace_instructions" | "preference_registry_descriptor" | "company_profile" | "legacy_memory_v1" | "runtime_skill_catalog";
@@ -5920,6 +7762,18 @@ export type WorkspaceInsightsSnapshot = {
     series: InsightsSeriesPoint[];
     depth: InsightsDepthBucket[];
     drivers: InsightsSpendDriver[];
+    projects: InsightsProjectRow[];
+    privateChats: {
+        ownerKey: string;
+        name: string | null;
+        you: boolean;
+        calls: number;
+        tokens: number;
+        creditUsd: number;
+        estimatedProviderUsd: number;
+        estimatedProviderCostKnownCalls: number;
+    }[];
+    privateChatsTruncated: boolean;
     schedules: InsightsScheduleRow[];
     recentCalls: InsightsModelCallRow[];
     promptContributions: InsightsPromptContributions;
@@ -5938,6 +7792,10 @@ export type WorkspaceInsightsSnapshot = {
     priorEstimatedProviderUsd: number;
     estimatedProviderCostKnownCalls: number;
     priorEstimatedProviderCostKnownCalls: number;
+    equivalentCreditUsd: number;
+    priorEquivalentCreditUsd: number;
+    equivalentCreditCostKnownCalls: number;
+    priorEquivalentCreditCostKnownCalls: number;
     modelCalls: number;
     priorInputTokens: number;
     priorTotalTokens: number;
@@ -5956,6 +7814,13 @@ export type WorkspaceInsightsSnapshot = {
     agentRunsUsed: number;
     agentRunCap: number | null;
     modelFilterActive: boolean;
+    dataThrough: string | null;
+    cacheHitPct: number;
+    scope: InsightsScope;
+    driverGroups: number;
+    driversTruncated: boolean;
+    facetsTruncated: boolean;
+    recentCallsTruncated: boolean;
 };
 export type WorkspaceInsightsResponse = {
     snapshot: WorkspaceInsightsSnapshot;
@@ -5967,14 +7832,36 @@ export type BillingEntitlementsResponse = {
 };
 export type CreateCheckoutRequest = {
     accountId?: string | undefined;
-    /** USD amount with cent precision (server enforces min/max). */
-    amountUsd: number;
+    /**
+     * USD amount with cent precision (server enforces min/max). Required unless
+     * `promotionCode` is given; a fixed-amount USD code then sets the amount.
+     */
+    amountUsd?: number | undefined;
+    /** A Stripe promotion code to apply up front, as the customer typed it. */
+    promotionCode?: string | undefined;
     successUrl?: string | undefined;
     cancelUrl?: string | undefined;
 };
 export type CreateCheckoutResponse = {
     checkoutSessionId: string;
     url: string;
+    /** The credits this checkout grants once it completes. */
+    amountUsd?: number | undefined;
+    promotionalScope?: PromotionalCreditScope | undefined;
+};
+/** Where one checkout stands, and whether its credits reached the balance. */
+export type BillingCheckoutStatus = {
+    checkoutSessionId: string;
+    status: "open" | "complete" | "expired";
+    credit: {
+        state: "pending" | "granted";
+        amountMicros: number;
+        currency: "usd";
+        /** True when a coupon covered the whole checkout, so nothing was charged. */
+        free: boolean;
+        promotionalScope?: PromotionalCreditScope | undefined;
+    };
+    balance: BillingBalance | null;
 };
 export type CreateBillingPortalRequest = {
     accountId?: string | undefined;
@@ -5998,17 +7885,36 @@ export type UserMessageEventInput = {
         controlEtag?: string | undefined;
         expectedDraftRevision?: number | undefined;
         mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
-        connectionAuthorities?: McpConnectionAuthoritySelection[] | undefined;
+        connectionAccounts?: McpConnectionAccountSelection[] | undefined;
         personalResourceAttachment?: PersonalResourceAttachmentIntent | undefined;
     };
 };
+/**
+ * Stable fields of each `session.requiresAction` `payload.approvals[]` entry.
+ * Entries also carry producer-specific compatibility fields (`rawItem` on a
+ * turn's first pause, `raw` on later ones); read only these three. Events
+ * written before these fields existed need `approvalsFromRequiresAction`
+ * from `@opengeni/react` or `approvalIdentifier` from `@opengeni/contracts`.
+ */
+export type SessionApprovalRequest = {
+    /** Pass as `sendApprovalDecision({ approvalId })`; this is the tool call id. */
+    id: string;
+    /** Model-visible tool name, for example `crm__update_record`. */
+    name: string;
+    /** Tool arguments as the model produced them (usually a JSON string). */
+    arguments: unknown;
+    [compatibilityField: string]: unknown;
+};
 export type UserApprovalDecisionEventInput = {
     type: "user.approvalDecision";
     clientEventId?: string | undefined;
     payload: {
+        /** `session.requiresAction` `approvals[].id` (the pending tool call id). */
         approvalId: string;
         decision: "approve" | "reject";
         message?: string | undefined;
+        /** Server-owned header rotation applied atomically when the response is accepted. */
+        mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
     };
 };
 export type UserHumanInputResponseEventInput = {
@@ -6017,6 +7923,8 @@ export type UserHumanInputResponseEventInput = {
     payload: {
         requestId: string;
         response: SubmitHumanInputResponseRequest;
+        /** Server-owned header rotation applied atomically when the response is accepted. */
+        mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
     };
 };
 /** Control/user events a client may POST to a session's event log. */
@@ -6041,7 +7949,7 @@ export type MetricSample = {
 /** The derived dashboard state of a machine (M3 liveness + consent/display
  *  reasons + the in-flight device-flow). */
 export type MachineState = "online" | "reconnecting" | "offline" | "consent_required" | "display_unavailable" | "enrolling";
-export type MachineKind = "modal" | "selfhosted" | "opensandbox";
+export type MachineKind = "docker" | "modal" | "local" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted" | "opensandbox";
 export type MachineConnectionAuthority = {
     state: "not_applicable" | "unclaimed" | "active" | "expired";
     generation: number;
@@ -6060,6 +7968,17 @@ export type MachineRuntimeCapabilities = {
     browserBridge: boolean;
     operationResourcePolicy: boolean;
     operationCpuQuota: boolean;
+    transactionalFsWrite: boolean;
+    /** The agent renews its credentials on request, so screen control turns on in place. */
+    credentialRenew: boolean;
+    /** The live agent's credentials carry screen-control consent; null when unknown. */
+    screenControl: boolean | null;
+};
+/** The three macOS Privacy & Security grants desktop capture and input need. */
+export type MachineMacPermissions = {
+    screenRecording: boolean;
+    accessibility: boolean;
+    inputMonitoring: boolean;
 };
 export type MachineUpdateStatus = "requested" | "accepted" | "waiting_for_idle" | "downloading" | "verifying" | "applying" | "restarting" | "succeeded" | "failed";
 export type MachineUpdateState = {
@@ -6080,14 +7999,114 @@ export type MachineRuntime = {
     updateChannel: "stable" | "beta" | null;
     desiredVersion: string | null;
     versionState: "unknown" | "current" | "outdated" | "ahead" | "updating" | "update_failed";
+    /** Required installer bootstrap when a legacy updater cannot safely replace the install. */
+    updateBlockedReason?: string | null | undefined;
     capabilities: MachineRuntimeCapabilities;
     update: MachineUpdateState | null;
+    /** Live macOS permissions; null off macOS or when the agent does not report them. */
+    macPermissions: MachineMacPermissions | null;
 };
 export type UpdateMachineAgentResponse = {
     operationId: string;
     accepted: boolean;
     targetVersion: string;
 };
+/** POST /v1/workspaces/:ws/machines/:enrollmentId/screen-control response.
+ * active: on now. pending: allowed, and turns on by itself when the machine
+ * reconnects (offline), after its agent update (agent_update_required), or on
+ * a retry (renewal_failed). reconnect_required: run the connect command on the
+ * machine again. */
+export type EnableMachineScreenControlResponse = {
+    status: "active" | "pending";
+    reason: "offline" | "agent_update_required" | "renewal_failed" | "reconnect_required" | null;
+    message: string | null;
+};
+/** macOS Privacy & Security panes the agent needs for desktop capture/input. */
+export type MachinePrivacySettingsPane = "screen_recording" | "accessibility" | "input_monitoring";
+/** POST /v1/workspaces/:ws/machines/:enrollmentId/privacy-settings body. */
+export type OpenMachinePrivacySettingsRequest = {
+    pane: MachinePrivacySettingsPane;
+};
+/** Who can use a Connected Machine: everyone in its workspace, or one person. */
+export type MachineAudience = "workspace" | "only_me";
+/** POST /v1/workspaces/:ws/machines/:enrollmentId/audience/preview body.
+ * `ownerSubjectId` names who owns the machine as Only me (defaults to the
+ * caller; naming someone else needs workspace admin). */
+export type MachineAudiencePreviewRequest = {
+    audience: MachineAudience;
+    ownerSubjectId?: string;
+};
+/** PUT /v1/workspaces/:ws/machines/:enrollmentId/audience body: apply the
+ * previewed plan at the generation it was read at. */
+export type ChangeMachineAudienceRequest = MachineAudiencePreviewRequest & {
+    expectedGeneration: number;
+};
+/** What the change does to one thing on the machine. `move_off`: the chat
+ * leaves the machine (its history and files stay). `keep`: the owner's chat
+ * stays. `make_only_me` / `pause`: a schedule that runs on the machine.
+ * `remove_first`: the same computer is connected a second time. */
+export type MachineAudienceAction = "move_off" | "keep" | "make_only_me" | "pause" | "remove_first";
+/** One thing an audience change affects. Another member's private chat or
+ * schedule is listed without its title or owner. */
+export type MachineAudienceItem = {
+    kind: "chat" | "schedule" | "duplicate_connection";
+    action: MachineAudienceAction;
+    sessionId: string | null;
+    scheduledTaskId: string | null;
+    enrollmentId: string | null;
+    workspaceId: string | null;
+    relation: "other_member" | "owner_shared" | "owner_private" | "other_workspace" | null;
+    visibility: "user_private" | "workspace_shared" | null;
+    title: string | null;
+    ownerSubjectId: string | null;
+    /** A running turn in this chat stops for good. */
+    stopsTurn: boolean;
+    /** Agent commands still running in this chat that stop. */
+    stopsCommands: number;
+};
+/** Counts of what one change does. */
+export type MachineAudienceSummary = {
+    keptChats: number;
+    keptSharedChats: number;
+    movedOffChats: number;
+    schedulesMadeOnlyMe: number;
+    schedulesPaused: number;
+    stoppedTurns: number;
+    stoppedCommands: number;
+    notifiedPeople: number;
+};
+/** POST .../audience/preview response: everything one confirmation does.
+ * `ready` is false only while the same computer is also connected as a
+ * separate machine. */
+export type MachineAudiencePreview = {
+    enrollmentId: string;
+    sandboxId: string;
+    machineName: string;
+    currentAudience: MachineAudience;
+    targetAudience: MachineAudience;
+    generation: number;
+    ownerSubjectId: string | null;
+    summary: MachineAudienceSummary;
+    items: MachineAudienceItem[];
+    ready: boolean;
+};
+/** PUT .../audience response. The machine keeps its sandbox ID and connection. */
+export type ChangeMachineAudienceResponse = {
+    enrollmentId: string;
+    sandboxId: string;
+    previousAudience: MachineAudience;
+    audience: MachineAudience;
+    ownerSubjectId: string | null;
+    generation: number;
+    summary: MachineAudienceSummary;
+    detachedSessionIds: string[];
+    keptSessionIds: string[];
+};
+/** POST /v1/workspaces/:ws/machines/:enrollmentId/privacy-settings response. */
+export type OpenMachinePrivacySettingsResponse = {
+    opened: boolean;
+    message: string | null;
+};
 export type MachineOperationPolicy = {
     memoryMaxBytes: number | null;
     memoryHighBytes: number | null;
@@ -6185,7 +8204,7 @@ export type SwapActiveSandboxResponse = {
     activeSandboxId: string | null;
     activeEpoch: number;
     reason?: string;
-    code?: "stale_pointer" | "offline_enrollment" | "unsupported_backend_context" | "transient_establishment" | "concurrent_swap" | "recovery_in_progress" | "recovery_degraded" | "recovery_unrecoverable";
+    code?: "stale_pointer" | "offline_enrollment" | "unsupported_backend_context" | "transient_establishment" | "concurrent_swap" | "personal_machine_permission_required" | "personal_machine_not_permitted" | "recovery_in_progress" | "recovery_degraded" | "recovery_unrecoverable";
 };
 /** Mirror of `@opengeni/contracts` EnrollmentOs. */
 export type EnrollmentOs = "linux" | "macos" | "windows";
@@ -6233,12 +8252,27 @@ export type DeviceEnrollmentDenyResponse = {
 /** POST /v1/workspaces/:ws/enrollments/token body. */
 export type MintEnrollTokenRequest = {
     allowScreenControl?: boolean;
+    /**
+     * Who can use the machine. `user` makes it the signed-in caller's own
+     * machine (requires a verified person: someone signed in, or a credential
+     * acting as them, such as a personal API key or an organization key acting
+     * `asUser`; a key, service or agent acting as itself gets 422); `workspace`
+     * shares it with this workspace's members. Omitted mints the original
+     * workspace-shared token.
+     */
+    scope?: EnrollTokenScope;
 };
+/** Who can use a machine connected with an enroll token. */
+export type EnrollTokenScope = "user" | "workspace";
 /** POST /v1/workspaces/:ws/enrollments/token response. The `token` is SECRET. */
 export type MintEnrollTokenResponse = {
     token: string;
     expiresAt: string;
     expiresInSeconds: number;
+    /** What the token grants. Absent from servers that predate scoped tokens,
+     *  which always mint workspace-shared tokens. */
+    scope?: EnrollTokenScope;
+    allowScreenControl?: boolean;
 };
 /** The credential payload the headless exchange returns (a subset of the agent's
  *  EnrollmentCredentials — IDENTICAL to the device-flow poll authorized branch). */
@@ -6270,4 +8304,245 @@ export type EnrollTokenExchangeRequest = {
 export type EnrollTokenExchangeResponse = {
     credentials: EnrollmentCredentials;
 };
-export {};
+export type ModelConnectionAccessPolicy = {
+    allowedModels: string[] | null;
+    /** Organization-pool grants; null for every shared workspace, including new ones. */
+    allowedWorkspaces: string[] | null;
+    allowPersonalWorkspaces: boolean;
+    /**
+     * The chosen people (organization membership ids), or null when the account
+     * is not limited to people. Requires `allowedWorkspaces: []` and
+     * `allowPersonalWorkspaces: false`.
+     */
+    allowedPeople?: string[] | null;
+    /** Explicit owner consent to share a personal subscription with the organization. */
+    sharePersonal?: true;
+    version: number;
+};
+export type ModelConnectionAccessResponse = {
+    policy: ModelConnectionAccessPolicy;
+    models: Array<{
+        id: string;
+        label: string;
+    }>;
+    workspaces: Array<{
+        id: string;
+        name: string;
+    }>;
+    personalWorkspacesSupported: boolean;
+    /** The account can be limited to chosen people. */
+    peopleSupported?: boolean;
+    /** Active members of the organization an administrator can choose. */
+    people?: Array<{
+        id: string;
+        name: string | null;
+        email: string | null;
+    }>;
+    /** Workspaces that use the account as their own; they always keep it for workspace choices. */
+    localWorkspaceIds?: string[];
+    /** The workspace whose administrators also manage the account, if any. */
+    managedByWorkspaceId?: string | null;
+    personalSharingSupported?: boolean;
+};
+export type ConnectorToolPermission = "allow" | "ask" | "block";
+export type ConnectorToolPermissionEntry = {
+    name: string;
+    title?: string | undefined;
+    description?: string | undefined;
+    group: "read" | "write" | "other";
+    permission: ConnectorToolPermission;
+    inherited: boolean;
+    approvalRequired: boolean;
+    source?: "recommended" | "connector_default" | "tool" | "action" | "conflict";
+    conditional?: boolean;
+    actionPermissions?: Array<{
+        actionName: string;
+        permission: ConnectorToolPermission;
+    }>;
+};
+export type ConnectorToolPermissionsResponse = {
+    connectionId: string;
+    serverId: string;
+    defaultPermission: ConnectorToolPermission | null;
+    tools: ConnectorToolPermissionEntry[];
+    discoveryError: string | null;
+    canManage: boolean;
+    appliesTo?: "next_attempt";
+    revision?: string;
+    accountLabel?: string;
+    instanceKey?: string;
+    accounts?: Array<{
+        connectionId: string;
+        label: string;
+        scope: "personal" | "workspace" | "none";
+        instanceKey?: string;
+    }>;
+};
+export type UpdateConnectorToolPermissionsRequest = {
+    connectionId: string;
+    permission: ConnectorToolPermission | null;
+    expectedRevision?: string;
+    instanceKey?: string;
+} & ({
+    target: "default";
+} | {
+    target: "tools";
+    toolNames: string[];
+} | {
+    target: "action";
+    toolName: string;
+    actionName: string;
+});
+/** Saved Allow/Ask/Block rules for a session MCP server the host attaches.
+ * Tools without a rule follow `defaultPermission`, then the attaching session's
+ * `requireApproval` recommendation (Ask), then Allow. */
+export type SessionMcpToolPermissionsResponse = {
+    connectionId: string;
+    serverId: string;
+    defaultPermission: ConnectorToolPermission | null;
+    tools: Array<{
+        toolName: string;
+        permission: ConnectorToolPermission;
+    }>;
+    revision: string;
+    canManage: boolean;
+    appliesTo: "next_attempt";
+};
+/** `url` is the exact URL attached to sessions; `permission: null` resets. */
+export type UpdateSessionMcpToolPermissionsRequest = {
+    serverId: string;
+    url: string;
+    permission: ConnectorToolPermission | null;
+    expectedRevision?: string;
+} & ({
+    target: "default";
+} | {
+    target: "tools";
+    toolNames: string[];
+});
+/** Agent capability ids (see `@opengeni/contracts` agent-config). */
+export type AgentCapabilityId = "webSearch" | "humanInput" | "skills" | "goals" | "subagents" | "knowledge" | "schedules" | "artifacts" | "browser" | "secrets" | "media" | "workspaceFiles" | "workspaceConnectors" | "workspaceAdmin";
+/** `read` reads installed Skills; `manage` also changes them. */
+export type AgentSkillsCapability = "read" | "manage" | false;
+export type AgentCapabilityToggles = {
+    webSearch?: boolean | undefined;
+    humanInput?: boolean | undefined;
+    skills?: AgentSkillsCapability | undefined;
+    goals?: boolean | undefined;
+    subagents?: boolean | undefined;
+    knowledge?: boolean | undefined;
+    schedules?: boolean | undefined;
+    artifacts?: boolean | undefined;
+    browser?: boolean | undefined;
+    secrets?: boolean | undefined;
+    media?: boolean | undefined;
+    workspaceFiles?: boolean | undefined;
+    workspaceConnectors?: boolean | undefined;
+    workspaceAdmin?: boolean | undefined;
+};
+/**
+ * `"all"`: everything this workspace offers (today's behavior). `"none"`: the
+ * session's own tools plus essentials. An object starts from one and toggles.
+ */
+export type AgentCapabilities = "all" | "none" | ({
+    from: "all" | "none";
+} & AgentCapabilityToggles);
+export type AgentRenderer = "opengeni" | "markdown";
+export type AgentConfigRequest = {
+    capabilities?: AgentCapabilities | undefined;
+    /** Replaces only Opengeni's identity lines (max 8,000 chars); null = default identity. */
+    identity?: string | null | undefined;
+    /** Alias of the session `instructions` field. */
+    instructions?: string | undefined;
+    renderer?: AgentRenderer | undefined;
+    /** Vaults this session may use (input only); intersected with the parent's policy. */
+    vaultPolicy?: VaultPolicy | undefined;
+};
+/** Which vaults a session or schedule may use (see `@opengeni/contracts` VaultPolicy). */
+export type VaultPolicy = {
+    mode: "all";
+} | {
+    mode: "selected";
+    vaultIds: string[];
+};
+export type WorkspaceAgentDefaults = {
+    capabilities?: AgentCapabilities | undefined;
+    identity?: string | null | undefined;
+    renderer?: AgentRenderer | undefined;
+};
+export type ResolvedAgentCapabilities = {
+    webSearch: boolean;
+    humanInput: boolean;
+    skills: AgentSkillsCapability;
+    goals: boolean;
+    subagents: boolean;
+    knowledge: boolean;
+    schedules: boolean;
+    artifacts: boolean;
+    browser: boolean;
+    secrets: boolean;
+    media: boolean;
+    workspaceFiles: boolean;
+    workspaceConnectors: boolean;
+    workspaceAdmin: boolean;
+};
+export type ResolvedAgentConfig = {
+    version: 1;
+    from: "all" | "none";
+    capabilities: ResolvedAgentCapabilities;
+    /** Capabilities wanted on but not offered by this deployment. */
+    unavailable: AgentCapabilityId[];
+    /** Why each unavailable capability is off; present whenever `unavailable` is non-empty. */
+    unavailableReasons?: Partial<Record<AgentCapabilityId, string>> | undefined;
+    identity: string | null;
+    renderer: AgentRenderer;
+    source: "request" | "workspace_default" | "deployment_default" | "inherited" | "legacy_conversion";
+};
+export type AgentEffectiveTools = {
+    capabilities: ResolvedAgentCapabilities;
+    unavailable: AgentCapabilityId[];
+    /** False until exact runtime media adapters (including credential identity) are resolved. */
+    mediaToolsKnown?: boolean | undefined;
+    tools: Array<{
+        name: string;
+        capability: AgentCapabilityId | "runtime" | "sandbox" | "product";
+        source: "first_party" | "runtime" | "hosted" | "sandbox" | "mcp";
+        visibility?: "upfront" | "search" | undefined;
+    }>;
+    mcpServers: Array<{
+        id: string;
+        capability: AgentCapabilityId | "runtime" | "product";
+        toolsKnown: boolean;
+    }>;
+};
+/**
+ * `PUT .../sessions/:id/skills`. Replaces every Skill the session carries
+ * itself; an empty list removes them all.
+ */
+export type UpdateSessionSkillsRequest = {
+    skills: SessionSkillInput[];
+    /** The session's current `toolPolicyVersion` (shared CAS). */
+    expectedVersion: number;
+};
+/** `PUT .../sessions/:id/agent`. Omitted agent fields keep their current values. */
+export type UpdateSessionAgentRequest = {
+    agent: AgentConfigRequest;
+    /** The session's current `toolPolicyVersion` (shared CAS). */
+    expectedVersion: number;
+};
+export type ClientAgentConfig = {
+    /** @deprecated Agent configuration is always on; current servers always report `true`. */
+    enabled: boolean;
+    /** @deprecated Omitted `agent` always resolves `{ capabilities: "all" }`; always `true`. */
+    defaultForNewSessions: boolean;
+    capabilities: Array<{
+        id: AgentCapabilityId;
+        available: boolean;
+        reason?: string | undefined;
+    }>;
+};
+/** `error.details.code` of a 422 agent-configuration failure. */
+export type AgentConfigErrorCode = "agent_capability_unavailable" | "agent_config_conflict" | "agent_config_widening"
+/** Returned only by older servers that predate always-on agent configuration. */
+ | "agent_config_not_enabled";
+export type { ToolActionReview, ToolReviewDetailsPage, ToolReviewStatus, } from "@opengeni/contracts";