@prismer/sdk 1.9.0 → 1.9.6

package/dist/index.d.ts

@@ -864,6 +864,12 @@ interface IMCreateTaskOptions {
     retryDelayMs?: number;
     budget?: number;
     metadata?: Record<string, unknown>;
+    /** v1.9.x: workspace scope. Defaults to caller's default workspace. */
+    workspaceId?: string;
+    /** v1.9.x: link task to a conversation thread. */
+    conversationId?: string;
+    /** v1.9.x: pick the executor — `agent` (default), `sandbox`, or `shell`. */
+    runtimeRoute?: 'agent' | 'sandbox' | 'shell';
 }
 interface IMUpdateTaskOptions {
     title?: string;
@@ -877,11 +883,19 @@ interface IMUpdateTaskOptions {
 interface IMTaskListOptions {
     status?: TaskStatus;
     capability?: string;
+    /** Filter by task-store semantic kind. Defaults to board work items/goals. */
+    kind?: string;
+    /** Explicit view selection: board, runs, or all. */
+    view?: 'board' | 'runs' | 'all';
     assigneeId?: string;
     creatorId?: string;
     scheduleType?: ScheduleType;
     limit?: number;
     cursor?: string;
+    /** v1.9.x: filter by workspace. */
+    workspaceId?: string;
+    /** v1.9.x: filter by conversation. */
+    conversationId?: string;
 }
 interface IMCompleteTaskOptions {
     result?: unknown;
@@ -941,6 +955,35 @@ interface IMTaskDetail {
     task: IMTask;
     logs: IMTaskLog[];
 }
+/**
+ * Wave-9 Phase 1 (v1.9.4) — canonical task / run result.
+ *
+ * Replaces the legacy IMAsset(kind=task-result) read pattern. Returned by
+ * `tasks.getResult()` and `tasks.getRunResult()`. Shape locked by design
+ * review and intentionally minimal.
+ *
+ *   - `output`      The agent's primary text reply, normalised from the
+ *                   stored result JSON. May be null for tasks that
+ *                   completed with no textual content.
+ *   - `assetIds`    Daemon-collected outbox attachments (Wave-9). Always
+ *                   an array (possibly empty); never undefined.
+ *   - `metrics`     Adapter cost / duration / tokens. Optional — older
+ *                   tasks predate the column.
+ *   - `resultUri`   Optional prismer:// pointer for blob results. Most
+ *                   tasks use the inline `output` field; this is for
+ *                   cases that exceed the JSON column budget.
+ *   - `completedAt` ISO string. For pending/running tasks falls back to
+ *                   `updatedAt` so the field is always populated.
+ */
+interface IMTaskResult {
+    taskId: string;
+    status: string;
+    output: string | null;
+    metrics?: Record<string, unknown> | null;
+    assetIds: string[];
+    resultUri?: string | null;
+    completedAt: string;
+}
 interface IMCreateMemoryFileOptions {
     path: string;
     content: string;
@@ -1289,6 +1332,251 @@ interface EvolutionSyncDelta {
         cursor: number;
     };
 }
+/**
+ * Top-level workspace resource (v1.9.x). 1.9.x is 1:1 — most accounts have a
+ * single default workspace named "Personal". Multi-workspace promotion is a
+ * 1.10+ concern.
+ */
+interface IMWorkspace {
+    id: string;
+    ownerImUserId: string;
+    name: string;
+    /** URL-safe slug; immutable in 1.9.x. Pattern: `^[a-z0-9][a-z0-9-]{0,63}$`. */
+    slug: string;
+    isDefault: boolean;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+    updatedAt: string;
+}
+interface IMCreateWorkspaceOptions {
+    name: string;
+    slug: string;
+    isDefault?: boolean;
+    metadata?: Record<string, unknown>;
+}
+interface IMUpdateWorkspaceOptions {
+    /** Display name (immutable fields: slug, isDefault). */
+    name?: string;
+    metadata?: Record<string, unknown>;
+}
+interface IMWorkspaceSyncResult {
+    items: IMWorkspace[];
+    /** ISO timestamp cursor for next sync, or null when no rows returned. */
+    cursor: string | null;
+}
+/**
+ * Workspace file = path → assetId binding inside a workspace. Auto-versions
+ * on POST: previous binding at the same path is soft-deleted, version bumps,
+ * and `parentVersionId` chains the history.
+ */
+interface IMWorkspaceFile {
+    id: string;
+    workspaceId: string;
+    path: string;
+    assetId: string;
+    contentHash?: string;
+    version: number;
+    parentVersionId: string | null;
+    modifierImUserId: string;
+    createdAt: string;
+    updatedAt: string;
+    deletedAt: string | null;
+}
+interface IMCreateWorkspaceFileOptions {
+    /** Relative path; no `..`, no leading `/`, ≤ 700 chars. */
+    path: string;
+    /** Existing asset ID in the same workspace. */
+    assetId: string;
+}
+interface IMWorkspaceFileSyncResult {
+    items: IMWorkspaceFile[];
+    cursor: string | null;
+}
+/**
+ * Asset = content-addressed immutable blob (sha256). Same hash + same workspace
+ * dedupes to a single row.
+ */
+interface IMAsset {
+    id: string;
+    workspaceId: string;
+    ownerImUserId: string;
+    contentHash: string;
+    /** `file://...` for filesystem backend, `s3://bucket/key` for S3 backend. */
+    storageUri: string;
+    sizeBytes: number | null;
+    mime: string | null;
+    /** Caller-supplied row-level kind label. Common values: `sandbox-output`, `photo-memory-segment`, `user-upload`. */
+    kind: string;
+    sourceAgentImUserId: string | null;
+    sourceTaskId: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: string;
+}
+interface IMAssetListOptions {
+    workspaceId?: string;
+    taskId?: string;
+    kind?: string;
+    /** Page size, 1–200. Default 50. */
+    limit?: number;
+}
+interface IMAssetUploadOptions {
+    workspaceId: string;
+    /** Row-level asset kind label (e.g. `sandbox-output`, `user-upload`). */
+    kind?: string;
+    sourceAgentImUserId?: string;
+    sourceTaskId?: string;
+    /** Override the auto-detected MIME type. */
+    mimeType?: string;
+    /** Override the file name when input has none (Buffer / Uint8Array). */
+    fileName?: string;
+    metadata?: Record<string, unknown>;
+    /** Progress callback. */
+    onProgress?: (uploaded: number, total: number) => void;
+}
+interface IMAssetDetail extends IMAsset {
+    /** Freshly-signed S3 URL when storage is S3, else `null`. Expires per `expiresIn` seconds. */
+    url?: string | null;
+    s3Url?: string | null;
+    expiresIn?: number;
+    /** Reverse-lookup of `photo-memory-segment` references when applicable. */
+    photoRefs?: Array<{
+        localId: string;
+        sourceHash: string;
+        assetId: string;
+    }>;
+}
+/**
+ * Runtime installation = long-running daemon host inside a workspace
+ * (vs. short-lived per-task sandbox). Built on top of IMContainer rows
+ * with `taskId === null`.
+ */
+type RuntimePhase = 'provisioning' | 'online' | 'degraded' | 'stopped' | 'failed';
+interface IMRuntimeInstallation {
+    id: string;
+    workspaceId: string;
+    runtimeInstanceId: string;
+    daemonId: string;
+    podName: string;
+    namespace: string;
+    phase: RuntimePhase;
+    desiredState: 'running' | 'stopped' | string;
+    status: string;
+    image: string;
+    imageTag: string;
+    warmPoolHit: boolean;
+    resources: {
+        cpuRequest: string;
+        cpuLimit: string;
+        memoryRequest: string;
+        memoryLimit: string;
+    };
+    gatewayUrl: string | null;
+    startedAt: string | null;
+    stoppedAt: string | null;
+    createdAt: string;
+    updatedAt: string;
+    metrics: {
+        ageMs: number;
+        provisionLatencyMs: number;
+        heartbeatAgeMs: number | null;
+        hostedAgents: number;
+        onlineHostedAgents: number;
+    };
+    observability: {
+        statusFreshness: string;
+        logsPath: string;
+        startPath: string;
+        stopPath: string;
+        snapshotPath: string;
+    };
+    events: Array<{
+        at: string;
+        kind: string;
+        severity: string;
+        message: string;
+    }>;
+}
+interface IMCreateRuntimeInstallationOptions {
+    workspaceId: string;
+    name?: string;
+    image?: string;
+    cpuRequest?: string;
+    cpuLimit?: string;
+    memoryRequest?: string;
+    memoryLimit?: string;
+}
+interface IMInstallAgentOnRuntimeOptions {
+    agentImUserId: string;
+    /** Existing AgentProfile id; if omitted, creates one with `adapterName` + `profileName`. */
+    profileId?: string;
+    adapterName?: string;
+    profileName?: string;
+    config?: Record<string, unknown>;
+}
+interface IMInstallAgentOnRuntimeResult {
+    runtimeInstallationId: string;
+    podName: string;
+    result: unknown;
+    profile: {
+        id: string;
+        agentImUserId: string;
+        adapterName: string;
+        name: string;
+        version: number;
+    };
+}
+/** Row from `GET /api/im/me/agents` — agents owned by the current human. */
+interface IMOwnedAgent {
+    id: string;
+    username: string;
+    displayName: string;
+    agentType: string | null;
+    avatarUrl: string | null;
+    createdAt: string;
+    card: {
+        name: string;
+        description: string | null;
+        capabilities: string[];
+        endpoint: string | null;
+        status: string;
+        workspaceId: string;
+        lastHeartbeat: string | null;
+    } | null;
+}
+interface IMAccountDeleteResult {
+    message: string;
+    deletedAt: string;
+    cascade: Record<string, unknown>;
+}
+/** Memory digest (CC-style always-load summary) */
+interface IMMemoryDigest {
+    digest: string;
+    totalLines: number;
+    totalBytes: number;
+    filesSummarized: number;
+    filesTotal: number;
+    truncated: boolean;
+    generatedAt: string;
+}
+interface IMMemoryDigestOptions {
+    scope?: string;
+    /** 10–1000 (clamped server-side); default 200. */
+    maxLines?: number;
+    /** 500–30000 (clamped server-side); default 6000. */
+    maxBytes?: number;
+}
+/** Task SSE events (v1.8.2) */
+type TaskEventType = 'connected' | 'task.created' | 'task.assigned' | 'task.progress' | 'task.completed' | 'task.failed' | 'task.cancelled' | 'task.updated';
+interface TaskEventEnvelope<P = Record<string, unknown>> {
+    /** Stable event id (`Last-Event-ID` for replay). */
+    id?: string;
+    type: TaskEventType;
+    payload: P;
+}
+/** Task `kind` taxonomy (v1.9.x). Server reads `metadata.kind` to drive goal projections. */
+type TaskKind = 'work_item' | 'goal';
+/** Task `runtimeRoute` taxonomy (v1.9.x). Picks which executor handles dispatch. */
+type RuntimeRoute = 'agent' | 'sandbox' | 'shell';
 
 /**
  * Prismer Cloud Real-Time Client — WebSocket & SSE transports.
@@ -1926,498 +2214,139 @@ declare class CommunityHub {
 }
 
 /**
- * Prismer Remote Control Client — Cloud SDK bindings for Track 3 (v1.9.0)
+ * Prismer SDK — IM WS protocol payload types (v1.9.x)
  *
- * Scope:
- *   - Desktop binding management (list / revoke / republish candidates)
- *   - Pairing workflows
- *       • Daemon-side:  pair.qrInit + pair.apiKeyBind
- *       • Mobile-side:  pair.qrConfirm
- *   - Remote command dispatch (sendCommand / getCommand / approve / reject)
- *   - Push token registration + lifecycle (register / list / delete)
- *   - FS relay — mobile → daemon sandboxed filesystem ops (v1.9.0)
+ * Mirror of `src/im/types/im-events.ts` from the cloud package, kept in sync
+ * so that runtime/ws-client (Track B) and other SDK consumers compile against
+ * the same wire shapes the cloud handlers accept and emit.
  *
- * Note on signatures: the `approve` / `reject` / `sendCommand` methods take
- * a `bindingId` + opaque `envelope`, NOT a `commandId`. The server creates
- * the command and returns its id. This matches the `/api/im/remote/*`
- * HTTP contract exactly.
- */
-interface PrismerResponse<T> {
-    ok: boolean;
-    data: T | null;
-    error: {
-        code: string;
-        message: string;
-    } | null;
-}
-/**
- * Daemon connection candidate advertised in the pairing offer or via
- * PATCH /remote/bindings/:id/candidates. Client selects lowest-latency path;
- * E2EE is always applied on top regardless of transport.
+ * Source of truth: `docs/refactor/03-ws-protocol.md` (Track C). When the cloud
+ * file changes, this file MUST change in lockstep — they describe the same
+ * wire protocol. There is no automatic generation; both files are hand-maintained
+ * to avoid a build dependency between the cloud Next.js app and the SDK.
+ *
+ * AgentStatus enum is duplicated locally (not re-exported from cloud) because
+ * the SDK is shipped as an independent npm package with no dependency on the
+ * Next.js app.
+ *
+ * m1 status (all 11 types finalized; mirrors cloud file):
+ *   ✅ agent.host.declare / host.acked
+ *   ✅ agent.status.changed
+ *   ✅ task.dispatch.request / .progress / .reply
+ *   ✅ task.cancel
+ *   ✅ agent.changed
+ *   ✅ workspace.changed
+ *   ✅ agent_profile.changed
+ *   ✅ workspace_file.changed
  */
-type OfferCandidate = {
-    type: 'directTcp';
-    host: string;
-    port: number;
-} | {
-    type: 'relay';
-    endpoint: string;
-};
-interface DesktopBinding {
-    id: string;
-    daemonId: string;
-    deviceName?: string | null;
-    bindingMethod: 'apikey' | 'qr';
-    status: 'active' | 'revoked';
-    daemonPubKey: string;
-    daemonSignPub: string;
-    relayRegion?: string | null;
-    /** Serialized BigInt — use as opaque string, don't parse as number. */
-    lastSeq: string;
-    isOnline: boolean;
-    candidates: OfferCandidate[] | null;
-    createdAt: string;
-}
-interface QrInitRequest {
-    daemonId: string;
-    daemonPubKey: string;
-    daemonSignPub: string;
-    /** base64-encoded Offer v2 JSON; see docs/version190/07-remote-control.md §5.6.2 */
-    offerBlob: string;
-    deviceName?: string;
-}
-interface QrInitResponse {
-    offerId: string;
-    /** RFC 3339 / ISO 8601 */
-    expiresAt: string;
-}
-interface ApiKeyBindRequest {
-    daemonId: string;
-    daemonPubKey: string;
-    daemonSignPub: string;
-    deviceName?: string;
-    relayRegion?: string;
-    candidates?: OfferCandidate[];
-}
-interface ApiKeyBindResponse {
-    bindingId: string;
-}
-interface QrConfirmRequest {
-    /** `offerId` is encoded inside the QR payload; parse it out before calling. */
-    offerId: string;
-    /** Mobile's ephemeral X25519 public key (base64) for E2EE key exchange. */
-    clientPubKey: string;
-    consumerDevice?: string;
+/** Subset of the cloud-side AgentStatus enum used by status-change events. */
+type IMAgentStatus = 'online' | 'busy' | 'idle' | 'offline';
+interface HostedAgentDeclaration {
+    imUserId: string;
+    name: string;
+    adapterName: string;
+    capabilities: string[];
+    profiles: Array<{
+        id: string;
+        version: number;
+    }>;
 }
-interface QrConfirmResponse {
-    bindingId: string;
+interface AgentHostDeclarePayload {
     daemonId: string;
+    daemonVersion: string;
+    platform: 'darwin' | 'linux' | 'win32';
+    agents: HostedAgentDeclaration[];
 }
-type RemoteCommandStatus = 'pending' | 'delivered' | 'completed' | 'failed' | 'expired';
-interface RemoteCommand {
-    id: string;
-    bindingId: string;
-    senderId: string;
-    type: string;
-    /** Decoded envelope — object when structured, string when legacy base64. */
-    envelope: unknown;
-    status: RemoteCommandStatus;
-    result?: unknown;
-    createdAt: string;
-    deliveredAt?: string | null;
-    completedAt?: string | null;
-}
-interface SendCommandRequest {
-    bindingId: string;
-    /** e.g. `"tool_approve"`, `"tool_reject"`, `"agent_stop"`. */
-    type: string;
-    /** Forwarded verbatim to the daemon. Object is JSON-encoded; string is passed through. */
-    envelope: Record<string, unknown> | string;
-    ttlMs?: number;
-}
-interface QuickDecisionRequest {
-    bindingId: string;
-    envelope: Record<string, unknown> | string;
-    /** Optional task bridge — if set, the server also transitions the task state. */
-    taskId?: string;
-}
-interface RegisterPushTokenRequest {
-    platform: 'apns' | 'fcm';
-    token: string;
-    deviceId?: string;
-}
-interface PushToken {
-    id: string;
-    platform: 'apns' | 'fcm';
-    token: string;
-    deviceId: string | null;
-    createdAt: string;
-}
-type FsOp = 'read' | 'write' | 'delete' | 'edit' | 'list' | 'search';
-interface FsReadRequest {
-    path: string;
-    encoding?: 'utf-8' | 'base64';
+interface HostAckedPayload {
+    workspaceId: string;
+    syncCursor: {
+        workspaces: number;
+        agent_profiles: number;
+        [key: string]: number;
+    };
+    profilesToSync: string[];
 }
-interface FsReadResponse {
-    content: string;
-    encoding: 'utf-8' | 'base64';
+interface AgentStatusChangedPayload {
+    agentImUserId: string;
+    status: IMAgentStatus;
+    activeProfileId?: string;
+    runningTaskIds?: string[];
 }
-interface FsWriteRequest {
-    path: string;
+interface TaskDispatchContextEntry {
+    sender: string;
+    senderRole: 'human' | 'agent' | 'admin' | 'system';
     content: string;
-    encoding?: 'utf-8' | 'base64';
-}
-interface FsWriteResponse {
-    bytesWritten: number;
-}
-interface FsDeleteRequest {
-    path: string;
-}
-interface FsDeleteResponse {
-    deleted: boolean;
-}
-interface FsEditRequest {
-    path: string;
-    oldString: string;
-    newString: string;
-    replaceAll?: boolean;
-}
-interface FsEditResponse {
-    replaced: number;
-    path: string;
-}
-interface FsListRequest {
-    path: string;
-    recursive?: boolean;
-}
-interface FsListEntry {
-    name: string;
-    type: 'file' | 'dir' | 'symlink';
-    size?: number;
-}
-interface FsListResponse {
-    entries: FsListEntry[];
-}
-interface FsSearchRequest {
-    path: string;
-    pattern: string;
-    glob?: string;
-}
-interface FsSearchMatch {
-    path: string;
-    line: number;
-    preview: string;
-}
-interface FsSearchResponse {
-    matches: FsSearchMatch[];
-}
-declare class PairingApi {
-    private readonly client;
-    constructor(client: RemoteClient);
-    /**
-     * Daemon-side: create a QR pairing offer. `offerBlob` is the base64-encoded
-     * Offer v2 JSON — the daemon generates it locally and the cloud only stores
-     * it opaquely (5-minute TTL, single-use).
-     */
-    qrInit(req: QrInitRequest): Promise<PrismerResponse<QrInitResponse>>;
-    /**
-     * Mobile-side: confirm a scanned QR pairing. Atomically consumes the offer
-     * and pushes `pairing.confirmed` to the daemon's WS control channel.
-     */
-    qrConfirm(req: QrConfirmRequest): Promise<PrismerResponse<QrConfirmResponse>>;
-    /**
-     * Daemon-side: bind directly via API key, no QR required. The auth header
-     * identifies the owning user; the body carries daemon credentials + optional
-     * LAN/relay candidates.
-     */
-    apiKeyBind(req: ApiKeyBindRequest): Promise<PrismerResponse<ApiKeyBindResponse>>;
-}
-declare class FsApi {
-    private readonly client;
-    private readonly bindingId;
-    constructor(client: RemoteClient, bindingId: string);
-    private _path;
-    read(req: FsReadRequest): Promise<PrismerResponse<FsReadResponse>>;
-    write(req: FsWriteRequest): Promise<PrismerResponse<FsWriteResponse>>;
-    delete(req: FsDeleteRequest): Promise<PrismerResponse<FsDeleteResponse>>;
-    edit(req: FsEditRequest): Promise<PrismerResponse<FsEditResponse>>;
-    list(req: FsListRequest): Promise<PrismerResponse<FsListResponse>>;
-    search(req: FsSearchRequest): Promise<PrismerResponse<FsSearchResponse>>;
-}
-declare class RemoteClient {
-    private readonly baseUrl;
-    private readonly apiKey;
-    private readonly timeout;
-    private readonly fetchFn;
-    readonly pair: PairingApi;
-    constructor({ baseUrl, apiKey, timeout, fetchFn, }?: {
-        baseUrl?: string;
-        apiKey?: string;
-        timeout?: number;
-        fetchFn?: typeof fetch;
-    });
-    listBindings(): Promise<PrismerResponse<DesktopBinding[]>>;
-    deleteBinding(bindingId: string): Promise<PrismerResponse<void>>;
-    /**
-     * v1.9.0 — Daemon republishes its LAN/relay candidates (e.g. LAN IP
-     * changed, relay region failover). Ownership is verified against the auth.
-     */
-    patchBindingCandidates(bindingId: string, candidates: OfferCandidate[]): Promise<PrismerResponse<void>>;
-    /** Mobile-side FS relay client bound to a specific binding. */
-    fs(bindingId: string): FsApi;
-    sendCommand(req: SendCommandRequest): Promise<PrismerResponse<{
-        commandId: string;
-        status: RemoteCommandStatus;
-    }>>;
-    getCommand(commandId: string): Promise<PrismerResponse<RemoteCommand>>;
-    /**
-     * Quick-approve a pending tool call. Creates a `tool_approve` command and
-     * forwards it via WS (if daemon online). Optionally bridges to task state
-     * when `taskId` is provided.
-     */
-    approve(req: QuickDecisionRequest): Promise<PrismerResponse<{
-        commandId: string;
-    }>>;
-    reject(req: QuickDecisionRequest): Promise<PrismerResponse<{
-        commandId: string;
-    }>>;
-    registerPushToken(req: RegisterPushTokenRequest): Promise<PrismerResponse<{
-        success: boolean;
-    }>>;
-    listPushTokens(): Promise<PrismerResponse<{
-        tokens: PushToken[];
-    }>>;
-    /** Revoke a push token by its ID (not by raw token string). */
-    deletePushToken(tokenId: string): Promise<PrismerResponse<{
-        success: boolean;
-    }>>;
-    _get<T>(path: string): Promise<PrismerResponse<T>>;
-    _post<T>(path: string, body?: unknown): Promise<PrismerResponse<T>>;
-    _patch<T>(path: string, body?: unknown): Promise<PrismerResponse<T>>;
-    _delete<T>(path: string): Promise<PrismerResponse<T>>;
-    private _request;
-    private _getHeaders;
-}
-
-/**
- * Prismer Permissions Client — Cloud SDK bindings (v1.9.0)
- *
- * Risk-based approval gate for high-risk daemon/agent operations.
- *
- * Typical flow:
- *   1. Daemon calls `request({capability, operation, context?})`.
- *      • Response 200 with `{approved:true}` → proceed immediately (low risk).
- *      • Response 202 with `{requestId, expiresAt}` → wait for user decision.
- *   2. Mobile Lumin app polls `list({status:"pending"})` or reacts to push,
- *      then calls `approve(id)` or `reject(id)` with optional `reason`.
- *   3. Daemon polls `get(id)` (or subscribes to the approval WS channel) to
- *      discover the decision before the TTL expires (default 5 min).
- */
-
-type RiskLevel = {
-    /** `"read"`, `"write"`, `"network"`, `"shell"`, etc. */
-    category: string;
-    /** Numeric scale, higher = more dangerous. Service-defined; 0-10 today. */
-    score: number;
-    /** Human-readable reason. */
-    label: string;
-    /** Heuristic flags the risk classifier raised. */
-    flags?: string[];
-};
-type ApprovalStatus = 'pending' | 'approved' | 'rejected' | 'expired';
-interface ApprovalRequest {
-    id: string;
-    requesterId: string;
-    userId: string;
-    capability: string;
-    operation: string;
-    riskLevel: RiskLevel;
-    context?: Record<string, unknown> | null;
-    status: ApprovalStatus;
-    reason?: string | null;
-    expiresAt: string;
     createdAt: string;
-    decidedAt?: string | null;
 }
-interface PermissionRequestInput {
+interface TaskDispatchRequestPayload {
+    taskId: string;
+    agentImUserId: string;
+    profileId: string;
     capability: string;
-    operation: string;
-    context?: Record<string, unknown>;
-    ttlMs?: number;
-    /** Optional idempotency key — forwarded as `Idempotency-Key` header. */
-    idempotencyKey?: string;
-}
-type PermissionRequestResult = 
-/** Low-risk operation — auto-approved synchronously. */
-{
-    approved: true;
-    riskLevel: RiskLevel;
-    message?: string;
+    prompt: string;
+    metadata?: Record<string, unknown>;
+    timeoutMs?: number;
+    context?: TaskDispatchContextEntry[];
+    conversationId?: string;
 }
-/** High-risk operation — pending mobile decision; poll or subscribe. */
- | {
-    approved: false;
-    requestId: string;
-    expiresAt: string;
-    riskLevel: RiskLevel;
+interface TaskDispatchProgressPayload {
+    taskId: string;
+    progress: number;
     message?: string;
-};
-declare class PermissionsClient {
-    private readonly baseUrl;
-    private readonly apiKey;
-    private readonly timeout;
-    private readonly fetchFn;
-    constructor({ baseUrl, apiKey, timeout, fetchFn, }?: {
-        baseUrl?: string;
-        apiKey?: string;
-        timeout?: number;
-        fetchFn?: typeof fetch;
-    });
-    /**
-     * Request approval. The server may return synchronously when the
-     * capability+context is classified as low risk.
-     */
-    request(input: PermissionRequestInput): Promise<PrismerResponse<PermissionRequestResult>>;
-    /**
-     * List pending approval requests for the current user. Only
-     * `status=pending` is supported today; other values return an empty array
-     * with an info message.
-     */
-    list(opts?: {
-        status?: ApprovalStatus;
-        limit?: number;
-    }): Promise<PrismerResponse<ApprovalRequest[]>>;
-    get(requestId: string): Promise<PrismerResponse<ApprovalRequest>>;
-    approve(requestId: string, reason?: string): Promise<PrismerResponse<ApprovalRequest>>;
-    reject(requestId: string, reason?: string): Promise<PrismerResponse<ApprovalRequest>>;
-    private _request;
-    private _getHeaders;
+    detail?: Record<string, unknown>;
+}
+interface TaskDispatchReplyPayload {
+    taskId: string;
+    ok: boolean;
+    output?: string;
+    error?: {
+        code: string;
+        message: string;
+    };
+    assetIds?: string[];
+    metrics?: {
+        tokensUsed?: number;
+        durationMs?: number;
+    };
+}
+interface TaskCancelPayload {
+    taskId: string;
+    reason?: string;
 }
-
 /**
- * Prismer SDK — LAN Probe Service (v1.9.0)
- *
- * Client-side connection probing for remote control.
- * Discovers and selects best connection path to daemon.
- *
- * Features:
- *   - Concurrent connection probing (LAN + Relay)
- *   - Connection quality scoring (latency, jitter, packet loss)
- *   - Automatic path selection
- *   - Connection health monitoring
- *   - Seamless switching between paths
+ * Wire envelope for v1.9.x WS events. `timestamp` is required (mirrors the
+ * cloud-side `WSMessage<T>` definition in src/im/types/index.ts).
  */
-type ConnectionType = 'lan' | 'relay';
-interface ConnectionCandidate {
-    type: ConnectionType;
-    endpoint: string;
-    priority: number;
-}
-interface ProbeResult {
-    candidate: ConnectionCandidate;
-    latencyMs: number;
-    jitterMs: number;
-    success: boolean;
-    error?: string;
+interface IMWSMessage<T = unknown> {
+    type: string;
+    payload: T;
+    requestId?: string;
     timestamp: number;
-    qualityScore: number;
 }
-interface ConnectionSelection {
-    type: ConnectionType;
-    endpoint: string;
-    latencyMs: number;
-    qualityScore: number;
-    selectedAt: number;
+interface WorkspaceChangedPayload {
+    workspaceId: string;
+    /** ISO-8601 timestamp from im_workspaces.updatedAt. */
+    updatedAt: string;
 }
-interface LanProbeOptions {
-    daemonId: string;
-    lanIP?: string;
-    lanPort?: number;
-    /**
-     * Base WSS URL for the relay (e.g. `wss://cloud.prismer.dev`). Callers
-     * typically derive it from their cloud HTTP base URL — there is no separate
-     * relay subdomain.
-     */
-    relayUrl: string;
-    maxLatencyMs?: number;
-    probeTimeoutMs?: number;
-    maxConcurrentProbes?: number;
-    pingCount?: number;
-}
-declare class LanProbeService {
-    private daemonId;
-    private lanIP?;
-    private lanPort;
-    private relayUrl;
-    private maxLatencyMs;
-    private probeTimeoutMs;
-    private maxConcurrentProbes;
-    private pingCount;
-    constructor(opts: LanProbeOptions);
-    /**
-     * Get all connection candidates to probe
-     */
-    getCandidates(): ConnectionCandidate[];
-    /**
-     * Probe all connection candidates with concurrency limit
-     */
-    probeAll(candidates?: ConnectionCandidate[]): Promise<ProbeResult[]>;
-    /**
-     * Select best connection from probe results
-     */
-    selectBest(results: ProbeResult[], opts?: {
-        maxLatencyMs?: number;
-        minQualityScore?: number;
-    }): ConnectionSelection | null;
-    /**
-     * Probe a single connection candidate with quality scoring
-     */
-    private probeCandidate;
-    /**
-     * Probe LAN connection (TCP socket test with HTTP probe)
-     */
-    private probeLAN;
-    /**
-     * Probe Relay connection (WSS handshake test)
-     */
-    private probeRelay;
-    /**
-     * Perform a single TCP ping to verify connectivity
-     */
-    private tcpPing;
-    /**
-     * Perform a single HTTP GET request to measure latency
-     */
-    private httpPing;
-    /**
-     * Perform a single WebSocket handshake to measure latency
-     */
-    private wsPing;
-    /**
-     * Calculate connection quality score based on latency, jitter, and packet loss
-     */
-    private calculateQualityScore;
-    /**
-     * Get current connection status summary
-     */
-    getStatus(): Promise<{
-        current: ConnectionSelection | null;
-        lastProbe: ProbeResult[];
-        timestamp: number;
-    }>;
+interface AgentProfileChangedPayload {
+    profileId: string;
+    version: number;
+}
+interface AgentChangedPayload {
+    agentImUserId: string;
+    fields: {
+        displayName?: string;
+        capabilities?: string[];
+    };
+}
+interface WorkspaceFileChangedPayload {
+    workspaceId: string;
+    path: string;
+    operation: 'create' | 'update' | 'delete';
+    assetId?: string;
+    contentHash?: string;
+    version: number;
 }
-/**
- * Probe all connections and auto-select best path
- */
-declare function probeAndSelectLan(opts: LanProbeOptions): Promise<ConnectionSelection | null>;
-/**
- * Get current connection status
- */
-declare function getLanStatus(opts: LanProbeOptions): Promise<{
-    current: ConnectionSelection | null;
-    lastProbe: ProbeResult[];
-    timestamp: number;
-}>;
 
 /**
  * Prismer SDK — Multi-Tab Coordination
@@ -3001,14 +2930,12 @@ interface DaemonControlPlane {
     onCommand(handler: (cmd: ControlCommand) => Promise<CommandResult>): void;
 }
 
-/** @deprecated Use `QrInitResponse` (v1.9.0 shape: `{offerId, expiresAt}`). */
-type PairingOffer = QrInitResponse;
-/** @deprecated Use `QrConfirmResponse` (v1.9.0 shape: `{bindingId, daemonId}`). */
-type PairConfirmResult = QrConfirmResponse;
-/** @deprecated Use `SendCommandRequest` (field renamed `payload` → `envelope`). */
-type SendCommandOptions = SendCommandRequest;
-/** @deprecated Use `RegisterPushTokenRequest`. */
-type PushTokenRegisterOptions = RegisterPushTokenRequest;
+/** Entry in the OpenAI-format model list returned by /api/v1/models. */
+interface ModelEntry {
+    id: string;
+    object: 'model';
+    owned_by: string;
+}
 
 /** Account management: register, identity, token refresh */
 declare class AccountClient {
@@ -3026,6 +2953,19 @@ declare class AccountClient {
     }): Promise<IMResult<IMMeData>>;
     /** Refresh JWT token */
     refreshToken(): Promise<IMResult<IMTokenData>>;
+    /**
+     * List agents owned by the current human user (v1.9.3).
+     * Mobile clients call this on launch to populate the Profile/agent runtime card.
+     * Returns `[]` for non-human / api-key-proxy callers without a cloudUserId.
+     */
+    listAgents(): Promise<IMResult<IMOwnedAgent[]>>;
+    /**
+     * Self-service account deletion (v1.9.3).
+     * Soft-deletes the IMUser, cascades owned conversations + open tasks,
+     * revokes pc_api_keys, and blacklists the request token.
+     * The caller can only delete themselves — there is no target id parameter.
+     */
+    deleteAccount(): Promise<IMResult<IMAccountDeleteResult>>;
 }
 /** Direct messaging between two users */
 declare class DirectClient {
@@ -3209,6 +3149,26 @@ declare class TasksClient {
     list(options?: IMTaskListOptions): Promise<IMResult<IMTask[]>>;
     /** Get task details with logs */
     get(taskId: string): Promise<IMResult<IMTaskDetail>>;
+    /**
+     * Wave-9 (v1.9.4) — fetch the canonical task result.
+     *
+     * Replaces the legacy "list IMAssets where kind=task-result + sourceTaskId"
+     * pattern. Returns the locked shape defined by `IMTaskResult`; in
+     * particular `assetIds` is always an array (possibly empty) so callers
+     * can iterate without a null-check.
+     *
+     * Access: creator, assignee, or marketplace visibility on the task.
+     */
+    getResult(taskId: string): Promise<IMResult<IMTaskResult>>;
+    /**
+     * Wave-9 (v1.9.4) — fetch the canonical run result.
+     *
+     * Same shape as `getResult` but reads from IMTaskRun.output instead of
+     * IMTask.result. Use this for chat-mention dispatches whose result lives
+     * on a run row rather than a board task. The `taskId` field of the
+     * returned object is the run.id.
+     */
+    getRunResult(runId: string): Promise<IMResult<IMTaskResult>>;
     /** Update a task */
     update(taskId: string, options: IMUpdateTaskOptions): Promise<IMResult<IMTask>>;
     /** Claim a pending task */
@@ -3254,6 +3214,12 @@ declare class MemoryClient {
     load(scope?: string): Promise<IMResult<IMMemoryLoadResult>>;
     /** Get memory-gene knowledge links for the authenticated user's memory files (v1.8.0) */
     getKnowledgeLinks(): Promise<IMResult<IMMemoryKnowledgeLinks>>;
+    /**
+     * Get a CC-style always-load digest of all memory files (v1.9.3).
+     * The digest is a Markdown bundle suitable for prepending to LLM context.
+     * Server clamps `maxLines` to 10–1000 and `maxBytes` to 500–30000.
+     */
+    digest(options?: IMMemoryDigestOptions): Promise<IMResult<IMMemoryDigest>>;
 }
 /** Knowledge Links: bidirectional associations between Memory, Gene, Capsule, Signal entities (v1.8.0) */
 declare class KnowledgeLinkClient {
@@ -3550,6 +3516,143 @@ declare class EvolutionClient {
 
 /** Sanitize a slug/id to prevent path traversal (removes slashes, .., and null bytes) */
 declare function safeSlug(input: string): string;
+/**
+ * Top-level workspace resource (v1.9.x). Different from the legacy
+ * `WorkspaceClient` (which manages the 1.7-era `/workspace/init`,
+ * `/workspace/init-group` superset bridge); 1.9.x workspaces are first-class
+ * data containers backed by `IMWorkspace` rows.
+ *
+ * Most callers in 1.9.x have a single default workspace named "Personal" —
+ * use `list()` and pick the row with `isDefault === true`.
+ */
+declare class WorkspacesClient {
+    private _r;
+    constructor(_r: RequestFn);
+    /** List active workspaces owned by the caller. */
+    list(): Promise<IMResult<IMWorkspace[]>>;
+    /**
+     * Create a workspace. In 1.9.x most callers don't need this — registration
+     * auto-creates a default workspace. The first workspace per owner is
+     * always default; subsequent ones must omit `isDefault` (server returns 409).
+     */
+    create(options: IMCreateWorkspaceOptions): Promise<IMResult<IMWorkspace>>;
+    /** Daemon delta-sync workspaces since an ISO timestamp. */
+    sync(since?: string): Promise<IMResult<IMWorkspaceSyncResult>>;
+    /** Get a single workspace by id (caller must own). */
+    get(workspaceId: string): Promise<IMResult<IMWorkspace>>;
+    /** Update workspace name and/or metadata. `slug` and `isDefault` are immutable in 1.9.x. */
+    update(workspaceId: string, options: IMUpdateWorkspaceOptions): Promise<IMResult<IMWorkspace>>;
+    /**
+     * Archive (delete) a workspace. Server returns 405 in 1.9.x — workspace
+     * deletion equals account close, which goes through `account.deleteAccount()`.
+     * Provided for forward-compat; will become real in 1.10+.
+     */
+    archive(workspaceId: string): Promise<IMResult<void>>;
+}
+/**
+ * Workspace files (v1.9.3). Each file is a `path → assetId` binding inside a
+ * workspace. POST is auto-versioning: the previous binding at the same path
+ * is soft-deleted, version bumps, and `parentVersionId` chains the history.
+ */
+declare class WorkspaceFilesClient {
+    private _r;
+    constructor(_r: RequestFn);
+    /** List the active file tree for a workspace, or look up a single file by path. */
+    list(workspaceId: string, options?: {
+        path?: string;
+    }): Promise<IMResult<IMWorkspaceFile[] | IMWorkspaceFile>>;
+    /**
+     * Bind `path → assetId`. Idempotent if `(path, assetId)` matches the existing
+     * active binding. Asset must already exist in the same workspace.
+     */
+    create(workspaceId: string, options: IMCreateWorkspaceFileOptions): Promise<IMResult<IMWorkspaceFile>>;
+    /** Soft-delete the active binding at `path`. */
+    delete(workspaceId: string, path: string): Promise<IMResult<void>>;
+    /** Daemon delta-sync workspace files since an ISO timestamp. */
+    sync(workspaceId: string, since?: string): Promise<IMResult<IMWorkspaceFileSyncResult>>;
+    /** Get the version chain for a file (walks `parentVersionId`). */
+    history(workspaceId: string, fileId: string): Promise<IMResult<IMWorkspaceFile[]>>;
+}
+/**
+ * Assets (v1.9.3). Content-addressed immutable blobs (sha256). Same hash +
+ * same workspace dedupes to a single row. The `prismer://<owner>/asset/<sha>`
+ * URI is resolved by the existing Load API (`/api/context/load`) — see
+ * `client.load()` for that path.
+ */
+declare class AssetsClient {
+    private _r;
+    private _baseUrl;
+    private _fetchFn;
+    private _getAuthHeaders;
+    constructor(_r: RequestFn, _baseUrl: string, _fetchFn: typeof fetch, _getAuthHeaders: () => Record<string, string>);
+    /** List assets in a workspace (filterable by task and kind). */
+    list(options: IMAssetListOptions): Promise<IMResult<IMAsset[]>>;
+    /**
+     * Look up an asset by content hash within a workspace. Useful for dedupe
+     * checks ("do I already have this file?") before uploading.
+     */
+    byHash(hash: string, workspaceId: string): Promise<IMResult<IMAsset>>;
+    /**
+     * Get full asset metadata + a freshly-signed URL (5 min TTL, S3 backend only).
+     * For `kind === 'photo-memory-segment'` this also includes a `photoRefs`
+     * reverse-lookup of memory references.
+     */
+    detail(assetId: string): Promise<IMResult<IMAssetDetail>>;
+    /**
+     * Soft-delete an asset (the underlying S3 object is retained). Idempotent.
+     */
+    delete(assetId: string): Promise<IMResult<void>>;
+    /**
+     * Build a download URL for an asset. Filesystem backend streams bytes
+     * directly; S3 backend returns a 302 to a 5-minute presigned URL.
+     * Use `download()` for a one-shot fetch returning bytes.
+     */
+    url(assetId: string): string;
+    /**
+     * Download an asset's bytes. Authentication is forwarded; for S3 backend
+     * the server returns a 302 which `fetch` follows automatically.
+     */
+    download(assetId: string): Promise<{
+        bytes: Uint8Array;
+        mime: string | null;
+        sizeBytes: number | null;
+    }>;
+    /**
+     * Upload bytes as an asset (multipart). 100 MB hard cap; >50 MB returns
+     * 413 with `USE_PRESIGNED` — use S3 presign flow for those (not yet wrapped).
+     */
+    upload(input: FileInput, options: IMAssetUploadOptions): Promise<IMResult<IMAsset>>;
+}
+/**
+ * Runtime installations (v1.9.3). Long-running daemon hosts inside a
+ * workspace — distinct from short-lived per-task sandboxes. Built on
+ * `IMContainer` rows with `taskId === null`.
+ *
+ * Endpoints live under `/api/workspace/runtime-installations` (Next.js App
+ * Router), NOT under `/api/im/...`.
+ */
+declare class RuntimeInstallationsClient {
+    private _r;
+    constructor(_r: RequestFn);
+    /** List runtime installations in a workspace. */
+    list(workspaceId: string, options?: {
+        limit?: number;
+    }): Promise<IMResult<IMRuntimeInstallation[]>>;
+    /**
+     * Create a new runtime installation. Mints a durable runtime API key,
+     * RPCs the sandbox controller, and persists an `IMContainer` row.
+     * The daemon receives `PRISMER_API_KEY`, `PRISMER_DAEMON_ID`,
+     * `PRISMER_BASE_URL`, `PRISMER_WORKSPACE_ID`, and
+     * `PRISMER_RUNTIME_KIND=workspace-daemon` env vars.
+     */
+    create(options: IMCreateRuntimeInstallationOptions): Promise<IMResult<IMRuntimeInstallation>>;
+    /**
+     * Install an agent onto a runtime daemon. Resolves or creates the agent
+     * profile, calls the controller's `installAgent` RPC, and stamps
+     * `IMAgentCard.metadata.daemonId` + `runtimeInstallationId`.
+     */
+    installAgent(runtimeInstallationId: string, options: IMInstallAgentOnRuntimeOptions): Promise<IMResult<IMInstallAgentOnRuntimeResult>>;
+}
 /** Map file extension to MIME type (no external deps) */
 declare function guessMimeType(fileName: string): string;
 /** File upload management (presign → upload → confirm) */
@@ -3604,15 +3707,42 @@ declare class FilesClient {
 /** Real-time connection factory (WebSocket & SSE) */
 declare class IMRealtimeClient {
     private _wsBase;
-    constructor(_wsBase: string);
+    private _fetchFn;
+    constructor(_wsBase: string, _fetchFn?: typeof fetch);
     /** Get the WebSocket URL */
     wsUrl(token?: string): string;
     /** Get the SSE URL */
     sseUrl(token?: string): string;
+    /**
+     * Get the URL for the v1.8.2 task SSE stream
+     * (`GET /api/im/tasks/events?token=...`).
+     * Supports `Last-Event-ID` for replay.
+     */
+    taskEventsUrl(token: string): string;
     /** Create a WebSocket client. Call .connect() to establish connection. */
     connectWS(config: RealtimeConfig): RealtimeWSClient;
     /** Create an SSE client. Call .connect() to establish connection. */
     connectSSE(config: RealtimeConfig): RealtimeSSEClient;
+    /**
+     * Subscribe to the task events SSE stream (v1.8.2/v1.9.3).
+     *
+     * Resolves with a `disconnect()` function for cleanup. Emits envelopes of
+     * shape `{ id?, type, payload }` for each parsed `event:` block. Ignores
+     * comment lines (`:` heartbeats).
+     *
+     * @example
+     *   const sub = await client.im.realtime.subscribeTaskEvents(apiKey, (evt) => {
+     *     if (evt.type === 'task.completed') console.log('done:', evt.payload);
+     *   });
+     *   // ... later:
+     *   sub.disconnect();
+     */
+    subscribeTaskEvents(token: string, onEvent: (event: TaskEventEnvelope) => void, options?: {
+        lastEventId?: string;
+        signal?: AbortSignal;
+    }): Promise<{
+        disconnect: () => void;
+    }>;
 }
 declare class IMClient {
     readonly account: AccountClient;
@@ -3623,7 +3753,16 @@ declare class IMClient {
     readonly contacts: ContactsClient;
     readonly bindings: BindingsClient;
     readonly credits: CreditsClient;
+    /** Legacy 1.7-era workspace bridge (`/workspace/init`, `/workspace/init-group`). */
     readonly workspace: WorkspaceClient;
+    /** v1.9.3 first-class workspaces (`/api/im/workspaces`). */
+    readonly workspaces: WorkspacesClient;
+    /** v1.9.3 workspace files (`/api/im/workspaces/:id/files`). */
+    readonly workspaceFiles: WorkspaceFilesClient;
+    /** v1.9.3 content-addressed assets (`/api/im/assets`). */
+    readonly assets: AssetsClient;
+    /** v1.9.3 workspace runtime installations (`/api/workspace/runtime-installations`). */
+    readonly runtimeInstallations: RuntimeInstallationsClient;
     readonly tasks: TasksClient;
     readonly memory: MemoryClient;
     readonly knowledge: KnowledgeLinkClient;
@@ -3653,9 +3792,6 @@ declare class PrismerClient {
     private _identityReady;
     /** IM API sub-client */
     readonly im: IMClient;
-    /** Remote Control API sub-client (Track 3) */
-    readonly remote: RemoteClient;
-    readonly permissions: PermissionsClient;
     constructor(config?: PrismerConfig);
     /** Wait for identity to be ready (useful for tests or explicit await) */
     ensureIdentity(): Promise<AIPIdentity | null>;
@@ -3685,6 +3821,8 @@ declare class PrismerClient {
     parseStatus(taskId: string): Promise<ParseResult>;
     /** Get result of a completed async parse task */
     parseResult(taskId: string): Promise<ParseResult>;
+    /** List LLM models exposed by the cloud LLM proxy (OpenAI format). */
+    listModels(): Promise<ModelEntry[]>;
     /** Search for content (convenience wrapper around load with query mode) */
     search(query: string, options?: {
         topK?: number;
@@ -3696,4 +3834,4 @@ declare class PrismerClient {
 
 declare function createClient(config: PrismerConfig): PrismerClient;
 
-export { AccountClient, type ApiKeyBindRequest, type ApiKeyBindResponse, type ApprovalRequest, type ApprovalStatus, AttachmentQueue, type AuthenticatedPayload, type BatchSummary, type BatchUrlCost, BindingsClient, type CacheManager, type CommandResult, CommunityHub, type CommunityHubConfig, type ConnectionCandidate, type ConnectionSelection, type ConnectionType, ContactsClient, type ControlCommand, ConversationsClient, CreditsClient, type DaemonControlPlane, type DecryptResult, type DerivationMode, type DesktopBinding, DirectClient, type DisconnectedPayload, E2EEncryption, ENVIRONMENTS, type EncryptedContextResult, type EncryptedFileResult, type EncryptedMessage, type Environment, type ErrorPayload, EvolutionCache, EvolutionClient, EvolutionRuntime, type EvolutionRuntimeConfig, type EvolutionSession, type EvolutionSyncDelta, type EvolutionSyncSnapshot, type ExecutionContext, type ExecutionPolicy, type FileInput, FilesClient, FsApi, type FsDeleteRequest, type FsDeleteResponse, type FsEditRequest, type FsEditResponse, type FsListEntry, type FsListRequest, type FsListResponse, type FsOp, type FsReadRequest, type FsReadResponse, type FsSearchMatch, type FsSearchRequest, type FsSearchResponse, type FsWriteRequest, type FsWriteResponse, type GeneCategory, type GeneSelectionResult, type GeneVisibility, GroupsClient, type IMAgentCard, type IMAgentPersonality, type IMAgentSkillRecord, type IMAnalyzeOptions, type IMAnalyzeResult, type IMAutocompleteResult, type IMBinding, type IMBindingData, type IMBlockedUser, type IMCapsule, IMClient, type IMCompactOptions, type IMCompactionSummary, type IMCompleteTaskOptions, type IMConfirmResult, type IMContact, type IMConversation, type IMConversationsOptions, type IMCreateBindingOptions, type IMCreateGeneOptions, type IMCreateGroupOptions, type IMCreateMemoryFileOptions, type IMCreateTaskOptions, type IMCreditsData, type IMDiscoverAgent, type IMDiscoverOptions, type IMEvolutionEdge, type IMEvolutionStats, type IMFileQuota, type IMForkGeneOptions, type IMFriendRequest, type IMGene, type IMGeneListOptions, type IMGroupData, type IMGroupMember, type IMIdentityKey, type IMKeyAuditEntry, type IMKeyVerifyResult, type IMKnowledgeLink, type IMMeData, type IMMemoryFile, type IMMemoryFileDetail, type IMMemoryKnowledgeLinks, type IMMemoryLoadResult, type IMMessage, type IMMessageData, type IMMultipartInitResult, type IMPaginationOptions, type IMPresignOptions, type IMPresignResult, IMRealtimeClient, type IMRecordOutcomeOptions, type IMRegisterData, type IMRegisterKeyOptions, type IMRegisterOptions, type IMResult, type IMRouting, type IMSendOptions, type IMSkillContent, type IMSkillInfo, type IMSkillInstallResult, type IMTask, type IMTaskDetail, type IMTaskListOptions, type IMTaskLog, type IMTokenData, type IMTransaction, type IMUpdateMemoryFileOptions, type IMUpdateTaskOptions, type IMUser, type IMUserProfile, type IMWorkspaceData, type IMWorkspaceInitGroupOptions, type IMWorkspaceInitOptions, IdentityClient, IndexedDBStorage, type KeyManager, KnowledgeLinkClient, type KnowledgeLinkSource, type KnowledgeLinkType, type LLMBackend, type LLMDispatcher, type LLMResult, type LLMTask, type LanProbeOptions, LanProbeService, type LoadOptions, type LoadResult, type LoadResultItem, MemoryClient, MemoryStorage, type MessageDeletedPayload, type MessageEditPayload, type MessageNewPayload, type MessageReactionPayload, MessagesClient, type NotificationSink, type OfferCandidate, type OfflineConfig, type OfflineEventMap, type OfflineEventType, OfflineManager, type OutboxOperation, type PairConfirmResult, PairingApi, type PairingOffer, type ParseCost, type ParseCostBreakdown, type ParseDocument, type ParseDocumentImage, type ParseOptions, type ParseResult, type ParseUsage, type PermissionRequestInput, type PermissionRequestResult, PermissionsClient, type PongPayload, type PresenceChangedPayload, PrismerClient, type PrismerConfig, type PrismerEvent, type ProbeResult, type PushToken, type PushTokenRegisterOptions, type QrConfirmRequest, type QrConfirmResponse, type QrInitRequest, type QrInitResponse, type QueryCost, type QuerySummary, type QueuedAttachment, type QueuedTask, type QuickDecisionRequest, type RankingFactors, type RealtimeCommand, type RealtimeConfig, type RealtimeEventMap, type RealtimeEventType, RealtimeSSEClient, type RealtimeState, RealtimeWSClient, type ReconnectingPayload, type RegisterPushTokenRequest, RemoteClient, type RemoteCommand, type RemoteCommandStatus, type RequestFn, type RiskLevel, SQLiteStorage, type SaveBatchOptions, type SaveOptions, type SaveResult, type ScheduleType, SecurityClient, type SendCommandOptions, type SendCommandRequest, type SendFileOptions, type SendFileResult, type SessionMetrics, type SignalEnrichmentConfig, type SignalTag, type SingleUrlCost, type StorageAdapter, type StoredContact, type StoredConversation, type StoredMessage, type Suggestion, type SyncEvent, type SyncResult, TabCoordinator, type TaskExecutor, type TaskStatus, TasksClient, type TypingIndicatorPayload, type UploadOptions, type UploadResult, WorkspaceClient, createClient, createEnrichedExtractor, decryptContext, decryptFile, decryptMessages, decryptOnReceive, PrismerClient as default, encryptContext, encryptFile, encryptForSend, extractSignals, getLanStatus, guessMimeType, probeAndSelectLan, safeSlug };
+export { AccountClient, type AgentChangedPayload, type AgentHostDeclarePayload, type AgentProfileChangedPayload, type AgentStatusChangedPayload, AssetsClient, AttachmentQueue, type AuthenticatedPayload, type BatchSummary, type BatchUrlCost, BindingsClient, type CacheManager, type CommandResult, CommunityHub, type CommunityHubConfig, ContactsClient, type ControlCommand, ConversationsClient, CreditsClient, type DaemonControlPlane, type DecryptResult, type DerivationMode, DirectClient, type DisconnectedPayload, E2EEncryption, ENVIRONMENTS, type EncryptedContextResult, type EncryptedFileResult, type EncryptedMessage, type Environment, type ErrorPayload, EvolutionCache, EvolutionClient, EvolutionRuntime, type EvolutionRuntimeConfig, type EvolutionSession, type EvolutionSyncDelta, type EvolutionSyncSnapshot, type ExecutionContext, type ExecutionPolicy, type FileInput, FilesClient, type GeneCategory, type GeneSelectionResult, type GeneVisibility, GroupsClient, type HostAckedPayload, type HostedAgentDeclaration, type IMAccountDeleteResult, type IMAgentCard, type IMAgentPersonality, type IMAgentSkillRecord, type IMAgentStatus, type IMAnalyzeOptions, type IMAnalyzeResult, type IMAsset, type IMAssetDetail, type IMAssetListOptions, type IMAssetUploadOptions, type IMAutocompleteResult, type IMBinding, type IMBindingData, type IMBlockedUser, type IMCapsule, IMClient, type IMCompactOptions, type IMCompactionSummary, type IMCompleteTaskOptions, type IMConfirmResult, type IMContact, type IMConversation, type IMConversationsOptions, type IMCreateBindingOptions, type IMCreateGeneOptions, type IMCreateGroupOptions, type IMCreateMemoryFileOptions, type IMCreateRuntimeInstallationOptions, type IMCreateTaskOptions, type IMCreateWorkspaceFileOptions, type IMCreateWorkspaceOptions, type IMCreditsData, type IMDiscoverAgent, type IMDiscoverOptions, type IMEvolutionEdge, type IMEvolutionStats, type IMFileQuota, type IMForkGeneOptions, type IMFriendRequest, type IMGene, type IMGeneListOptions, type IMGroupData, type IMGroupMember, type IMIdentityKey, type IMInstallAgentOnRuntimeOptions, type IMInstallAgentOnRuntimeResult, type IMKeyAuditEntry, type IMKeyVerifyResult, type IMKnowledgeLink, type IMMeData, type IMMemoryDigest, type IMMemoryDigestOptions, type IMMemoryFile, type IMMemoryFileDetail, type IMMemoryKnowledgeLinks, type IMMemoryLoadResult, type IMMessage, type IMMessageData, type IMMultipartInitResult, type IMOwnedAgent, type IMPaginationOptions, type IMPresignOptions, type IMPresignResult, IMRealtimeClient, type IMRecordOutcomeOptions, type IMRegisterData, type IMRegisterKeyOptions, type IMRegisterOptions, type IMResult, type IMRouting, type IMRuntimeInstallation, type IMSendOptions, type IMSkillContent, type IMSkillInfo, type IMSkillInstallResult, type IMTask, type IMTaskDetail, type IMTaskListOptions, type IMTaskLog, type IMTaskResult, type IMTokenData, type IMTransaction, type IMUpdateMemoryFileOptions, type IMUpdateTaskOptions, type IMUpdateWorkspaceOptions, type IMUser, type IMUserProfile, type IMWSMessage, type IMWorkspace, type IMWorkspaceData, type IMWorkspaceFile, type IMWorkspaceFileSyncResult, type IMWorkspaceInitGroupOptions, type IMWorkspaceInitOptions, type IMWorkspaceSyncResult, IdentityClient, IndexedDBStorage, type KeyManager, KnowledgeLinkClient, type KnowledgeLinkSource, type KnowledgeLinkType, type LLMBackend, type LLMDispatcher, type LLMResult, type LLMTask, type LoadOptions, type LoadResult, type LoadResultItem, MemoryClient, MemoryStorage, type MessageDeletedPayload, type MessageEditPayload, type MessageNewPayload, type MessageReactionPayload, MessagesClient, type ModelEntry, type NotificationSink, type OfflineConfig, type OfflineEventMap, type OfflineEventType, OfflineManager, type OutboxOperation, type ParseCost, type ParseCostBreakdown, type ParseDocument, type ParseDocumentImage, type ParseOptions, type ParseResult, type ParseUsage, type PongPayload, type PresenceChangedPayload, PrismerClient, type PrismerConfig, type PrismerEvent, type QueryCost, type QuerySummary, type QueuedAttachment, type QueuedTask, type RankingFactors, type RealtimeCommand, type RealtimeConfig, type RealtimeEventMap, type RealtimeEventType, RealtimeSSEClient, type RealtimeState, RealtimeWSClient, type ReconnectingPayload, type RequestFn, RuntimeInstallationsClient, type RuntimePhase, type RuntimeRoute, SQLiteStorage, type SaveBatchOptions, type SaveOptions, type SaveResult, type ScheduleType, SecurityClient, type SendFileOptions, type SendFileResult, type SessionMetrics, type SignalEnrichmentConfig, type SignalTag, type SingleUrlCost, type StorageAdapter, type StoredContact, type StoredConversation, type StoredMessage, type Suggestion, type SyncEvent, type SyncResult, TabCoordinator, type TaskCancelPayload, type TaskDispatchContextEntry, type TaskDispatchProgressPayload, type TaskDispatchReplyPayload, type TaskDispatchRequestPayload, type TaskEventEnvelope, type TaskEventType, type TaskExecutor, type TaskKind, type TaskStatus, TasksClient, type TypingIndicatorPayload, type UploadOptions, type UploadResult, type WorkspaceChangedPayload, WorkspaceClient, type WorkspaceFileChangedPayload, WorkspaceFilesClient, WorkspacesClient, createClient, createEnrichedExtractor, decryptContext, decryptFile, decryptMessages, decryptOnReceive, PrismerClient as default, encryptContext, encryptFile, encryptForSend, extractSignals, guessMimeType, safeSlug };