@prismshadow/penguin-server 0.2.15 → 0.2.17

package/dist/api/types.d.ts

@@ -1,15 +1,15 @@
-import { SessionSource, OmniMessage, ToolCallPayload, CompactionMode } from '@prismshadow/penguin-core/omnimessage';
-export { SessionSource } from '@prismshadow/penguin-core/omnimessage';
+import { SessionSource, AmspRecord, ToolCallPayload, CompactionMode } from '@prismshadow/amsp';
+export { SessionSource } from '@prismshadow/amsp';
 import { ThinkingLevelName, ToolDefinitionConfig, MCPServerConfig } from '@prismshadow/penguin-core/interfaces';
 import { HarnessHistory, VersionReport } from '@prismshadow/penguin-core';
 export { HarnessHistoryEntry, IfacesSummary } from '@prismshadow/penguin-core';
 import { IfacesDiff } from '@prismshadow/penguin-hmr';
 export { IfaceChange, IfacesDiff, MemberChange, ModuleChange } from '@prismshadow/penguin-hmr';
 
-/** A request the workflow's handler receives (the HTTP shape, minus the transport). */
-interface WorkflowRequest {
+/** A request the workbench's handler receives (the HTTP shape, minus the transport). */
+interface WorkbenchRequest {
     method: string;
-    /** Path below the workflow's `api/` mount, always starting with `/`. */
+    /** Path below the workbench's `api/` mount, always starting with `/`. */
     path: string;
     query: Record<string, string>;
     /** Request headers, names lower-cased. The app's own credentials (`cookie`, `authorization`) are withheld. */
@@ -19,12 +19,12 @@ interface WorkflowRequest {
     /** The body as sent, when there is one and it is not JSON: a form, an upload, plain text. */
     bytes?: Uint8Array;
 }
-interface WorkflowResponse {
+interface WorkbenchResponse {
     /** HTTP status; 200 when absent. */
     status?: number;
     /**
      * Response headers. Naming a `content-type` is what makes the response something other than
-     * JSON; `location` with a 3xx status redirects. `set-cookie` is dropped — a workflow does not
+     * JSON; `location` with a 3xx status redirects. `set-cookie` is dropped — a workbench does not
      * write the app's cookies.
      */
     headers?: Record<string, string>;
@@ -42,8 +42,8 @@ interface WorkflowResponse {
      */
     stream?: AsyncIterable<Uint8Array | string>;
 }
-/** How the Web App draws a contributed tab: a page of the workflow, or a renderer it carries. */
-type WorkflowTabRenderer = {
+/** How the Web App draws a contributed tab: a page of the workbench, or a renderer it carries. */
+type WorkbenchTabRenderer = {
     iframe: {
         src: string;
     };
@@ -51,28 +51,28 @@ type WorkflowTabRenderer = {
     builtin: string;
 };
 /**
- * One tab beside Chat, as the workflow contributed it (`WebModule.sessionTabs`). In a
- * manifest `renderer.iframe.src` is a path inside the workflow folder, under `ui/`; in a
- * `WorkflowInfo` it is the URL that file is served from.
+ * One tab beside Chat, as the workbench contributed it (`WebModule.sessionTabs`). In a
+ * manifest `renderer.iframe.src` is a path inside the workbench folder, under `ui/`; in a
+ * `WorkbenchInfo` it is the URL that file is served from.
  */
-interface WorkflowTab {
+interface WorkbenchTab {
     id: string;
-    /** Unique within the workflow; the tab's stable name (it appears in the full-page URL). */
+    /** Unique within the workbench; the tab's stable name (it appears in the full-page URL). */
     key: string;
     title: string;
     titleZh?: string;
-    renderer: WorkflowTabRenderer;
+    renderer: WorkbenchTabRenderer;
 }
-interface WorkflowInfo {
+interface WorkbenchInfo {
     id: string;
     name: string;
     version: string | null;
     /** Content revision of the whole folder (what history records). */
     revision: string;
-    /** Content revision of `ui/`: the cache key of the workflow's pages. Null when it has no `ui/`. */
+    /** Content revision of `ui/`: the cache key of the workbench's pages. Null when it has no `ui/`. */
     uiRev: string | null;
     /** The tabs of the instance that is SERVING — the previous one's while `error` is set. */
-    tabs: WorkflowTab[];
+    tabs: WorkbenchTab[];
     loadedAt: string;
     /** The boot error when the current files do not load (the previous instance, if any, keeps serving). */
     error: string | null;
@@ -82,7 +82,7 @@ interface WorkflowInfo {
      */
     hints: string[];
 }
-interface WorkflowVersion {
+interface WorkbenchVersion {
     revision: string;
     savedAt: string;
     name: string;
@@ -97,11 +97,11 @@ interface WorkflowVersion {
  * frontend SPA (single source of truth).
  *
  * These field definitions are authoritative for the Web API contract. Conventions:
- *   - DTO fields use camelCase; OmniMessage keeps the core protocol as-is (snake_case shell),
+ *   - DTO fields use camelCase; an AMSP record keeps its own shape as-is (snake_case envelope),
  *     no conversion;
  *   - This file holds only types, no implementation; exposed to the frontend via package
  *     exports `"./api"` for type-only import;
- *   - Types are taken only from core's pure subpaths (omnimessage / interfaces), so the
+ *   - Types are taken only from `@prismshadow/amsp` and core's pure `interfaces` subpath, so the
  *     frontend can safely reference them.
  *
  * Docs: packages/docs/content/server-api.{zh,en}.md (site path /docs/server-api) is the
@@ -204,8 +204,9 @@ interface MeResponse {
      * "desktop" is the shell's own window (one-shot token); "setup" was claimed through the
      * first-login link on a server whose admin password has never been set. Both may set a
      * password without the old one (it is random and was never shown); only "desktop" opens
-     * desktop-only routes. "token" marks a request authenticated by the local API token's
-     * Bearer header (the CLI and agent-driven calls) — no stored session at all.
+     * desktop-only routes. "token" marks the local API token's authority, carried by a Bearer
+     * header or an exchanged Remote cookie; neither can perform writes requiring a person's
+     * sign-in.
      */
     sessionVia: "password" | "desktop" | "setup" | "token";
     /**
@@ -454,6 +455,13 @@ interface UiPrefs {
      * shallow, so this whole map is one field.
      */
     todoDismissed?: Record<string, Record<string, string>>;
+    /**
+     * Notices the user closed, by notice id (a machine's model keys only this server's environment
+     * holds: `machine-env-only:<machine id>`), each the SIGNATURE of what it named when closed — its
+     * items sorted, one per line — so it comes back when a new item appears (web's
+     * `lib/notice-dismissals.ts`). Replaced whole on every write, like `todoDismissed`.
+     */
+    noticesDismissed?: Record<string, string>;
     /**
      * The draft screen's user-defined shortcuts, in display order. Replaced whole on every write
      * (the merge is shallow, so the array is one field like any other) and bounded on write by
@@ -576,7 +584,11 @@ interface ModelEffectiveConnection {
     baseUrlSource: ConnectionSourceDto;
     clientType?: string;
     clientTypeSource: ConnectionSourceDto;
-    /** `env` = no row or group key, and the environment lends one on the effective endpoint (modelEnvFallback). */
+    /**
+     * `env` = no key in the file, and MMSP's routed client reads its own variable for the row's
+     * endpoint (no base URL, or the client's default endpoint) — reported when that variable
+     * holds a value here (`envKeyMasked`), `none` otherwise.
+     */
     apiKeySource: "model" | "provider" | "env" | "none";
     /** Mask of the key the row would use, whichever source; absent when none. */
     apiKeyMasked?: string;
@@ -630,21 +642,18 @@ interface ModelInfo {
     discount?: number;
     /**
      * Environment variable name the entry falls back to when api_key is empty (e.g.
-     * ANTHROPIC_API_KEY); unset when it gets no fallback — an id nothing routes, or an entry
-     * whose base URL is not the vendor's own official endpoint (a gateway preset, a custom /
-     * vLLM / user-created row with its own endpoint, a vendor row re-pointed at a proxy).
+     * ANTHROPIC_API_KEY): only for a row with no key in the file whose routed MMSP client reads
+     * that variable for its endpoint — no base URL on the row or its group, or the client's own
+     * default endpoint. Unset for a row with a key (its own or a group key that reaches it), a row
+     * sent to any other base URL (a gateway, Penguin Go, ModelScope, a vendor's second host or a
+     * proxy), or an id nothing routes.
      */
     envKey?: string;
     /**
      * Masked preview (same rule as `credential.apiKeyMasked`) of the value the server process
-     * currently holds for `envKey` — the plaintext is never serialized. Reported only where the
-     * fallback may be presented as covering the entry (core's modelEnvPreviewKey): a row whose
-     * effective base URL is a vendor endpoint (or the Penguin Go relay), or a row with no base URL
-     * in a built-in group other than custom, on the client its id's family names. Gateway rows
-     * never carry it, and neither do custom / vLLM / user-defined rows with no base URL,
-     * although those do fall back. Absent = the variable is unset or empty, or the entry is not
-     * previewable. Computed on the effective shape, and only when no row or group key reaches
-     * the row.
+     * currently holds for `envKey` — the plaintext is never serialized. Absent = the variable is
+     * unset or empty, or the entry gets no fallback. Reported only when no row or group key
+     * reaches the row.
      */
     envKeyMasked?: string;
     /** The row's OWN key (masked) and base URL — overrides of its group's; see `effective`. */
@@ -744,10 +753,11 @@ interface ModelsUpdateRequest {
  * `POST /models/sync-presets` (owner): `add` adds the catalog's presets the Project lacks
  * (retired rows never), as a new Project stores them, writes the catalog's
  * `[providers.<id>]` table for a group that has neither rows nor a table yet, and seeds the
- * added rows' promotions, touching nothing else; `restore` puts every built-in row and
- * built-in group table back to the catalog (facts reset, base URLs and protocols set on models
- * or groups return to the catalog's, keys and the user's own rows and groups kept, promotions
- * reset, deleted presets added back).
+ * added rows' promotions, touching nothing else; `restore` makes the model configuration a new
+ * Project's and keeps only the API keys: the presets in catalog order, the catalog's group
+ * tables, default model and promotions, no vision model, and every other row and every
+ * user-defined group deleted. Penguin Go included: its platform's next sync brings back the
+ * platform's own models and promotions.
  */
 type PresetSyncMode = "add" | "restore";
 interface PresetSyncRequest {
@@ -756,7 +766,7 @@ interface PresetSyncRequest {
 interface PresetSyncResponse extends ModelsResponse {
     /** Preset rows added (both modes). */
     added: number;
-    /** Built-in rows reset to the catalog (`restore`; 0 for `add`). */
+    /** Preset rows the Project already had that `restore` changed (0 for `add`). */
     restored: number;
 }
 /**
@@ -949,17 +959,17 @@ interface ModelBalanceAmount {
 /**
  * Why a group's balance could not be read:
  * - `unsupported`: the group publishes no balance endpoint (no `balance` descriptor in the catalog);
- * - `no_key`: the group has no API key to ask with — none stored, and no environment variable
- *   the credential rule lends its rows for the balance endpoint's host;
+ * - `no_key`: the group has no API key to ask with — none stored, and no vendor variable that
+ *   MMSP's vendor client reads for the group's base URL;
  * - `upstream_failed`: the vendor could not be reached in time, refused the request, or answered
  *   without a readable balance.
  */
 type ModelBalanceErrorCode = "unsupported" | "no_key" | "upstream_failed";
 /**
  * GET /api/projects/:p/models/balance?provider=<group>[&force=1] (Project member): the account
- * balance behind the group's API key — the stored one, or else the environment key its rows
- * fall back to under the credential rule (DeepSeek's DEEPSEEK_API_KEY) — read server-side from
- * the endpoint the catalog's `balance` descriptor names. The key never reaches the browser, and
+ * balance behind the group's API key — the stored one, or else the environment key MMSP's
+ * vendor client reads for the group's base URL (DeepSeek's DEEPSEEK_API_KEY) — read server-side
+ * from the endpoint the catalog's `balance` descriptor names. The key never reaches the browser, and
  * neither does the vendor's own text. Like the connectivity test, a balance that cannot be read is an answer
  * (`ok: false` with a code), not a failed request. Readings and vendor failures are cached for
  * 60 s per Project and group, for as long as the group's key is the same; `force=1` skips the
@@ -990,7 +1000,8 @@ interface ModelBalanceFailure {
 /**
  * How the authorization code travels back. `callback` sends the browser to a harness URL
  * the provider redirects to; `manual` asks the provider for a one-time code the user copies
- * back by hand, for the case where that redirect cannot reach the harness.
+ * back by hand, for the case where that redirect cannot reach the harness — or where the
+ * provider would refuse it: only an HTTPS or loopback HTTP origin can be redirected to.
  */
 type ModelOAuthMode = "callback" | "manual";
 /**
@@ -1001,13 +1012,19 @@ type ModelOAuthMode = "callback" | "manual";
 interface ModelOAuthStartRequest {
     /** Provider group id (must be a catalog group that publishes a key-minting flow). */
     provider: string;
-    /** Defaults to `callback`. */
+    /** Defaults to `callback`; the response says which mode the flow was opened in. */
     mode?: ModelOAuthMode;
 }
 /** The opaque flow handle plus the page to send the user to. No secret of the flow's is included. */
 interface ModelOAuthStartResponse {
     flowId: string;
     authorizeUrl: string;
+    /**
+     * The mode the flow was opened in: `manual` for a `callback` request when the origin the
+     * request reached this server on is neither HTTPS nor loopback HTTP, which the provider's
+     * authorization page refuses as a callback.
+     */
+    mode: ModelOAuthMode;
 }
 /** Why a flow failed, as a code the frontend phrases; never carries a code, a verifier or a key. */
 type ModelOAuthErrorCode = "invalid_request" | "code_rejected" | "upstream_failed" | "unreachable" | "apply_failed";
@@ -1176,8 +1193,10 @@ interface AgentSummary {
     kernelOutdated: boolean;
     /** Vault key count (number of keys in agent_state/.vault.toml). */
     vaultKeyCount: number;
-    /** Schedule count (number of .toml files under agent_state/schedule/, including invalid ones). */
+    /** Schedule count (number of .toml files directly under agent_state/schedule/, including invalid ones; archived files under schedule/expired/ are not counted). */
     scheduleCount: number;
+    /** Workbench folders with a manifest, including ones with a load error. */
+    workbenchCount: number;
     /** Installed Skill count (number of agent_state/skills/<name>/ directories with a SKILL.md). */
     skillCount: number;
     /** Installed hook-package count (number of agent_state/hooks/<name>/ directories with a hooks.json). */
@@ -1438,6 +1457,14 @@ interface AgentApiSettings {
      * change here applies to API Sessions created afterwards.
      */
     approvalMode: ApprovalMode;
+    /** Null follows the Project's default model. Applied only to new API Sessions. */
+    model: ModelRefDto | null;
+    /** Null follows the Agent/Project thinking configuration. */
+    thinkingLevel: ThinkingLevelName | null;
+    /** Null creates a temporary Workspace for each new API Session. */
+    workspace: string | null;
+    /** Positive integer. Checked for each API run; defaults to four concurrent Agent sessions. */
+    maxConcurrentRuns: number;
     keys: AgentApiKeyInfo[];
 }
 interface AgentApiResponse {
@@ -1453,6 +1480,10 @@ interface AgentApiUpdateRequest {
     enabled?: boolean;
     open?: boolean;
     approvalMode?: ApprovalMode;
+    model?: ModelRefDto | null;
+    thinkingLevel?: ThinkingLevelName | null;
+    workspace?: string | null;
+    maxConcurrentRuns?: number;
 }
 /** POST …/api/keys body (owner only). */
 interface AgentApiKeyCreateRequest {
@@ -1702,7 +1733,7 @@ interface SessionInfo {
      * What kind of conversation this is, read from core session_meta — the single source of
      * truth (the DB stores no source). With the user's marks it decides where the Session is
      * listed (`archived`): a `user` Session is in the sidebar until archived; an `api`,
-     * `schedule` or `cli` Session is archived until the user keeps it, and in the sidebar marked
+     * `schedule`, `cli` or `workbench` Session is archived until the user keeps it, and in the sidebar marked
      * with its source once kept; a `subagent` or `company` Session is in no list — its parent's
      * Agent panel and company mode's own views open them. A Trace head that records no source
      * (written before it was required) reads as `company` for a row the organization runtime
@@ -1737,7 +1768,7 @@ interface SessionInfo {
     hasTrace: boolean;
     /**
      * Whether the Session is archived — the listing rule's answer, never the bare mark: the user
-     * archived it, or a program opened it (source `api`, `schedule` or `cli`) and the user has
+     * archived it, or a program opened it (source `api`, `schedule`, `cli` or `workbench`) and the user has
      * not kept it. An archived Session is left out of the sidebar and listed on the archive page
      * (`/api/me/archived-sessions`). Always false for a `subagent` or `company` Session, which is
      * in no list.
@@ -1772,7 +1803,7 @@ interface SessionInfo {
      * the organization and is not read while company mode is off — this is a durable stamp on
      * the row: development mode's list hides an "org" Session either way.
      */
-    client?: "web" | "cli" | "org" | "api";
+    client?: "web" | "cli" | "org" | "api" | "workbench";
     /**
      * Background work the Session's loaded runtime still owns: command sessions running past
      * their yield window (`exec_command` promotions and `run_in_background` launches) and
@@ -1793,7 +1824,7 @@ interface SessionBackgroundTasks {
 }
 /**
  * Session list category, the listing rule applied server-side: `archived` when the user
- * archived the Session, or when a program opened it (source `api`, `schedule` or `cli`) and the
+ * archived the Session, or when a program opened it (source `api`, `schedule`, `cli` or `workbench`) and the
  * user has not kept it — unarchiving keeps it; otherwise `active`. A `subagent` or `company`
  * Session belongs to neither, whatever its marks: the list leaves it out of every category and
  * every total (a parent's Agent panel and company mode's own views open them).
@@ -1858,7 +1889,7 @@ interface SessionsResponse {
  * `user`, or a row whose Trace has not been read yet); the other three are what a program
  * opened. `subagent` and `company` Sessions are never archived, so never listed.
  */
-type ArchivedSessionSource = "user" | "api" | "schedule" | "cli";
+type ArchivedSessionSource = "user" | "api" | "schedule" | "cli" | "workbench";
 /** Query of GET /api/me/archived-sessions/groups, and the part every archive query shares. */
 interface ArchivedSessionsQuery {
     /** Case-insensitive substring of the title (the DB title, else the Trace's first-prompt title); at most 200 characters. */
@@ -1867,7 +1898,7 @@ interface ArchivedSessionsQuery {
     /** One Project the user can open (404 `project_not_found` otherwise); absent = every Project they own or are a member of. */
     projectId?: string;
 }
-/** One group of the archive page: one Workspace of one Project. */
+/** One group of the archive page: one Workspace of one Project, on this server or on one machine. */
 interface ArchivedSessionGroup {
     projectId: string;
     projectName: string;
@@ -1877,6 +1908,12 @@ interface ArchivedSessionGroup {
     count: number;
     /** The newest `lastActiveAt` in the group — the order the groups come in, newest first. */
     latest: string;
+    /** The machine the group's Sessions live on (its own id); absent on this server's groups. */
+    machineId?: string;
+    /** That machine's ssh alias, for the group's header. */
+    machineAlias?: string;
+    /** That machine's own time when it counted the group: a batch on the whole group passes it as `until`. */
+    asOf?: string;
 }
 /** GET /api/me/archived-sessions/groups. */
 interface ArchivedSessionGroupsResponse {
@@ -1888,6 +1925,11 @@ interface ArchivedSessionGroupsResponse {
      * filter's `until`, so it acts on the Sessions the count saw and on none that came after.
      */
     asOf: string;
+    /** Machines the user's Projects use whose archive could not be read (not connected, or no answer). */
+    unreachable?: Array<{
+        machineId: string;
+        alias: string;
+    }>;
 }
 /** Query of GET /api/me/archived-sessions: one group's page, newest activity first. */
 interface ArchivedSessionsRowsQuery extends ArchivedSessionsQuery {
@@ -1898,6 +1940,8 @@ interface ArchivedSessionsRowsQuery extends ArchivedSessionsQuery {
     limit: number;
     /** `<lastActiveAt>,<sessionId>` of the last row held, as the Session list's cursor. */
     before?: string;
+    /** The group's machine (`ArchivedSessionGroup.machineId`): the page is read from it. */
+    machineId?: string;
 }
 /** GET /api/me/archived-sessions. */
 interface ArchivedSessionsResponse {
@@ -1905,11 +1949,16 @@ interface ArchivedSessionsResponse {
     sessions: SessionInfo[];
     hasMore: boolean;
 }
-/** What an archive-page batch acts on: explicit ids (1–500), or every archived row a filter matches. */
-type ArchivedSessionsBatch = {
+/**
+ * What an archive-page batch acts on: explicit ids (1–500), or every archived row a filter
+ * matches — on this server, or with `machineId` on that machine (the filter then names its Project).
+ */
+type ArchivedSessionsBatch = ({
     sessionIds: string[];
 } | {
     filter: ArchivedSessionsBatchFilter;
+}) & {
+    machineId?: string;
 };
 /** A batch's filter: the archive query, one group's Workspace, and the snapshot it was counted at. */
 interface ArchivedSessionsBatchFilter extends ArchivedSessionsQuery {
@@ -2087,7 +2136,7 @@ interface TracePosition {
     ordinal: number;
 }
 /** History-only transport metadata; `tracePosition` is never persisted into Trace JSONL. */
-type HistoryMessage = OmniMessage & {
+type HistoryMessage = AmspRecord & {
     tracePosition?: TracePosition;
 };
 interface SessionForkRequest {
@@ -2133,7 +2182,7 @@ interface SessionPatchRequest {
  *   - `cursor`: the Session channel's most recently assigned SSE event id
  *     (`<epoch>-<seq>`); every event published up to and including this id is already
  *     reflected in `fragments`.
- *   - `fragments`: one synthetic `partial_* start` OmniMessage per open streaming
+ *   - `fragments`: one synthetic `partial_* start` AmspRecord per open streaming
  *     fragment, whose payload carries the full accumulated content so far (text/thinking
  *     prefix, tool-call name + accumulated arguments, tool-output prefix + images), with
  *     the original `origin` chain preserved.
@@ -2148,7 +2197,7 @@ interface SessionPatchRequest {
  */
 interface MessagesLiveTail {
     cursor: string;
-    fragments: OmniMessage[];
+    fragments: AmspRecord[];
 }
 /**
  * Pagination envelope of a windowed `GET /messages` (`tailLimit` / `before` requests
@@ -2202,6 +2251,11 @@ interface MessagesPageInfo {
      * window is told from a plain rotation. Absent when the Session has no Trace yet.
      */
     contextModel?: ModelRefDto;
+    /**
+     * Agent State directory recorded by the starting context's `session_meta`. Seeds memory
+     * change detection when that record falls before the window. Absent without a Trace.
+     */
+    agentState?: string;
 }
 /** Message history: the full messages and events from concatenating all of this Session's Trace files in order (excludes partial_*). */
 interface MessagesResponse {
@@ -2973,6 +3027,50 @@ interface WeChatScanVerifyRequest {
 interface MessagingTestMessageResponse {
     ok: true;
 }
+/**
+ * One bot account a server has enabled: the channel and its account id (Feishu `app_id`,
+ * Telegram bot id, QQ App ID, WeChat bot id), which is public by design. Never a Session,
+ * never a secret.
+ */
+interface MessagingAccount {
+    channel: MessagingChannel;
+    accountId: string;
+}
+/**
+ * GET /api/messaging/accounts (admin only) — every bot account this server has enabled,
+ * across all its Projects. A server that connects machines asks each of them this when a
+ * bot is about to be turned on, so that one account is enabled on one server at a time.
+ */
+interface MessagingAccountsResponse {
+    accounts: MessagingAccount[];
+}
+/** A server that has the asked-about bot enabled: a machine by id and alias, or this server (both null). */
+interface MessagingAccountHolder {
+    machineId: string | null;
+    alias: string | null;
+}
+/**
+ * Why a machine could not be asked: no connection to it, a build without the accounts
+ * route (it answered 404), or any other failed answer.
+ */
+type MessagingUnreachableReason = "not_connected" | "older_build" | "failed";
+/** A machine of the Project that could not be asked whether it holds the bot. */
+interface MessagingUnreachableMachine {
+    machineId: string;
+    alias: string;
+    reason: MessagingUnreachableReason;
+}
+/**
+ * GET /api/projects/:projectId/messaging/account-holders?channel=&accountId= — which servers
+ * have this bot enabled: this server, and each machine the Project uses that could be asked.
+ * Machines that could not be asked are listed apart; the caller decides what to do about
+ * them. Never names a Session. A caller who is not an admin is answered for this server
+ * only, because machines are admins' (both lists then hold no machine).
+ */
+interface MessagingAccountHoldersResponse {
+    holders: MessagingAccountHolder[];
+    unreachable: MessagingUnreachableMachine[];
+}
 /** Docs: /docs/server-api § "Streaming (SSE)". */
 type ServerEvent = 
 /**
@@ -2981,7 +3079,7 @@ type ServerEvent =
  */
 {
     type: "approval_request";
-    toolCall: OmniMessage<ToolCallPayload>;
+    toolCall: AmspRecord<ToolCallPayload>;
     origin?: string[];
 }
 /** Session run status flip (for toggling the input area and list); `queued` = queued follow-up count (see TaskCreateRequest.queueIfBusy). */
@@ -3089,6 +3187,17 @@ type ServerEvent =
  | {
     type: "hello";
 }
+/**
+ * The stream's own beat, written by the endpoint's SSE writer every 20 seconds (http/sse.ts)
+ * on `/api/events`, and by the hub on a machine's aggregate stream. The socket's ping and the
+ * `: ping` comment line are invisible to a stream's consumer, so without this a stream that
+ * stopped while its socket stayed healthy would look alive forever: the hub
+ * (machines/event-hub.ts) and the browser (web api/socket.ts) each end a stream that misses
+ * two beats and re-issue it with its last event id.
+ */
+ | {
+    type: "heartbeat";
+}
 /** The served web assets were hot-swapped by a platform upgrade: clients reload to pick them up. */
  | {
     type: "web_updated";
@@ -3129,7 +3238,7 @@ type ServerEvent =
     projectId: string;
 } | ScheduleServerEvent | GoalServerEvent | CompanyServerEvent | BuiltinBrowserServerEvent | MachineServerEvent;
 /**
- * The machines' two events on the user channel, published to admins only — the Machines page,
+ * The machines' events on the user channel, published to admins only — the Machines page,
  * and the `/server/<id>` proxy everything else about a machine goes through, are admin-only.
  */
 type MachineServerEvent = 
@@ -3144,11 +3253,13 @@ type MachineServerEvent =
     type: "machines_changed";
 }
 /**
- * One of a connected machine's own user-channel events, relayed by this server from that
- * machine's `GET /api/events` (machines/event-relay.ts). The page holds one event stream to
- * this server whatever the number of machines: a stream per machine made five connected
- * machines take the browser's whole HTTP/1.1 allowance of six connections to one origin, and
- * every other request of the page then waited behind them for good.
+ * One of a connected machine's own user-channel events, tagged with the machine it came
+ * from. They ride the machines aggregate (event-hub.ts, `GET …/machines/events`) — ONE
+ * stream for every connected machine, whose per-machine frames have this same shape; the
+ * page that re-publishes them on its own channel wraps them this way too. One stream, not
+ * a stream per machine: five of those once took the browser's whole HTTP/1.1 allowance of
+ * six connections to one origin, and every other request of the page then waited behind
+ * them for good.
  */
  | {
     type: "machine_event";
@@ -3198,19 +3309,19 @@ type ScheduleServerEvent =
     name: string;
     sessionId: string;
 }
-/** A workflow of the Agent was (re)loaded — its folder changed, a reload was requested, or a version was restored. */
+/** A workbench of the Agent was (re)loaded — its folder changed, a reload was requested, or a version was restored. */
  | {
-    type: "workflow_updated";
+    type: "workbench_updated";
     projectId: string;
     agentId: string;
-    workflow: WorkflowInfo;
+    workbench: WorkbenchInfo;
 }
-/** A workflow's folder is gone — removed from the Web App or deleted on disk. */
+/** A workbench's folder is gone — removed from the Web App or deleted on disk. */
  | {
-    type: "workflow_removed";
+    type: "workbench_removed";
     projectId: string;
     agentId: string;
-    workflowId: string;
+    workbenchId: string;
 };
 interface TraceFileInfo {
     /** Trace file index (one file corresponds to one complete model context). */
@@ -3290,7 +3401,7 @@ interface SessionContextResponse extends SessionContextParts {
     compactionThreshold: number | null;
 }
 interface TraceEventsResponse {
-    events: OmniMessage[];
+    events: AmspRecord[];
     offset: number;
     limit: number;
     /**
@@ -3319,6 +3430,11 @@ interface RequestSpan {
     approvalWaitMs?: number;
     /** LLM generation duration = durationMs − approvalWaitMs (≥ 0): only this can be used as the TPS denominator, not durationMs. */
     activeMs?: number;
+    /**
+     * The thinking level this request went out at, as its `request_begin` records it. Absent
+     * when no level was sent, and on Traces written before the field — unknown, not a level.
+     */
+    thinkingLevel?: string;
 }
 /**
  * Per-Task Token / duration figures (aggregated server-side over the **entire** Trace file,
@@ -3348,6 +3464,14 @@ interface TraceTaskStats {
      * mode; treat an absent value as `summarize`, which is what the badge said before the split.
      */
     compactionMode?: CompactionMode;
+    /**
+     * A short label for the round navigator: the first non-empty line of the user text that
+     * started this turn, with harness marker blocks and attachment lines removed, whitespace
+     * collapsed, at most 120 characters (the view truncates it further to fit). Absent when no
+     * user text started the turn — a summarize compaction turn, an image-only send — or none of
+     * its lines is left (only attachment lines).
+     */
+    prompt?: string;
     /**
      * This turn's message index range within the **entire file** (inclusive). A single
      * sequential scan on the server tells which turn each message belongs to; the frontend
@@ -3434,7 +3558,8 @@ interface ToolCallSpan {
     startTs: string;
     endTs?: string;
     durationMs?: number;
-    stopReason?: string;
+    /** The paired tool_call_output's `status` (completed / aborted / fatal); absent while the call has no output. */
+    status?: string;
 }
 /** Workspace file entry (Files tab). */
 interface WorkspaceFileEntry {
@@ -3556,7 +3681,8 @@ interface TraceToolSpan {
     approvalTs?: string;
     decision?: string;
     outputTs?: string;
-    stopReason?: string;
+    /** The tool_call_output's `status` (completed / aborted / fatal); absent while unclosed. */
+    status?: string;
     /** The Task that initiated this tool (grouped with its tool_call segment): async output belongs to this Task even if it arrives after request_end. */
     taskIndex: number;
 }
@@ -3929,7 +4055,11 @@ interface UsageResponse {
     /** List of Model paired references that have appeared in this Project (for the filter dropdown). */
     models: ModelRefDto[];
 }
-/** Display-facing schedule status: the file's `enabled` only expresses intent; the rest is derived from runtime state. */
+/**
+ * Display-facing schedule status: the file's `enabled` only expresses intent; the rest is derived from runtime state.
+ * The scheduler archives an agent's settled tasks (done / missed / expired) into `schedule/expired/`, so the agent
+ * listings show those three only while a queued fire is still to be sent or when the move failed.
+ */
 type ScheduleStatus = "active" | "disabled" | "expired" | "done" | "missed" | "invalid";
 interface ScheduleItem {
     /** Filename (without .toml) is the identifier. */
@@ -4206,10 +4336,8 @@ interface BenchmarkArchiveImportRequest {
      */
     overwrite?: boolean;
     /**
-     * The repository folder the package was fetched from, at one commit: what
-     * `penguin benchmark import --origin-url … --origin-ref … --origin-path …` sends for an Agent's
-     * import of a folder link. The copy's origin is then `git` with these fields and the time of the
-     * import, instead of `zip`.
+     * The repository folder the package was fetched from, pinned to one commit. The copy's origin
+     * is then `git` with these fields and the import time, instead of `zip`.
      */
     origin?: BenchmarkArchiveGitOrigin;
 }
@@ -4286,6 +4414,10 @@ interface PluginItem {
     repository?: string;
     /** The plugin's skills (metadata only), each with its own dated `version`. */
     skills: SkillMetadataItem[];
+    workbenches?: Array<{
+        name: string;
+        version: string;
+    }>;
     /** The hook points the plugin's hook package answers at (`[]` without one). */
     hooks: string[];
     /** The hook package's own dated version (`penguin.hooks.version`, `YYYY.MM.DD.N`); absent without a hook package. */
@@ -4359,6 +4491,11 @@ interface PluginInstallRequest {
     names: string[];
 }
 interface AgentPluginsInstallResponse {
+    workbenches?: Array<{
+        name: string;
+        plugin: string;
+        version: string;
+    }>;
     skills: SkillMetadataItem[];
     hooks: HookItem[];
     /** The Agent's MCP servers after the install (a plugin's servers join its `tools.mcpServers`). A server name the Agent already has from someone else is 409 `mcp_server_name_taken`, nothing installed. */
@@ -4428,6 +4565,9 @@ interface SkillArchiveInstallRequest {
 interface PluginIndexEntry {
     /** Package specifier — the string a Project's plugin list names. */
     name: string;
+    /** Localized display names; the UI falls back to the package name. */
+    title?: string;
+    titleZh?: string;
     /** Semantic version of this entry. */
     version: string;
     description: string;
@@ -4642,6 +4782,24 @@ interface DesktopTrayCommandMessage {
     showTrayIcon?: boolean;
     locale?: DesktopTrayLocale;
 }
+/**
+ * The API socket (PRFC-0011): one WebSocket per tab, every frame a call to an existing
+ * endpoint. It has its own upgrade route, {@link API_SOCKET_PATH}: the runtime's websocket
+ * seam authenticates the cookie and the Origin there and hands the socket to the platform,
+ * which serves the protocol as the signed-in user (server: socket/ref.ts). Shared so the Web
+ * App and anything else that speaks to another server spell the address the same way.
+ */
+declare const API_SOCKET_PATH = "/api/socket";
+/**
+ * Paths whose answer depends on the KIND of session behind the request — the desktop shell's
+ * own window (`sessionVia === "desktop"`: its update, tray and privacy relays, folder access,
+ * revealing a file) or a first-login link (a password change without the old password). The
+ * socket's handshake does not say how the cookie behind it was minted, so these are made over
+ * HTTP: the socket answers them 421 `not_on_socket` and the Web App never sends them there.
+ */
+declare function sessionKindPath(pathname: string): boolean;
+/** The API socket's address. No id is involved: the handshake's cookie names the user. */
+declare function apiSocketPath(): string;
 /** What the shell's read of one folder came to. */
 interface DesktopFolderAccessResult {
     /** The folder could be read. Always true off macOS, where the shell reads nothing. */
@@ -4732,6 +4890,34 @@ interface RestartResponse {
     restarting: boolean;
     reason?: "no_supervisor";
 }
+/**
+ * What the API socket this server holds to one machine is doing (machines/machine-sockets.ts) —
+ * the fact behind `MachineInfo.socket`. `since` is the instant the state was entered, so the
+ * Machines page can say how long a machine has been dialling, failing or connected instead of
+ * sending someone to the browser console for it.
+ */
+interface MachineSocketFact {
+    /**
+     * `connected` once the handshake completed, `dialling` while a dial is outstanding, `refused`
+     * when the machine answered the handshake with a status (a program predating the socket), and
+     * `failed` when the dial did not complete or a socket that was up closed.
+     */
+    state: "connected" | "dialling" | "refused" | "failed";
+    /** When that state was entered (ISO). */
+    since: string;
+    /** The transport's own words where there are any: a refusal's status, a dial's error. */
+    detail?: string;
+}
+/**
+ * One machine's event, as the machines aggregate stream carries it
+ * (`GET /api/projects/:projectId/machines/events`): the machine's own `ServerEvent`, with the
+ * machine it came from — one stream carries many machines, and the tag is what keeps their
+ * events apart (docs: /docs/server-api § "One event stream per machine").
+ */
+interface MachineEvent {
+    machineId: string;
+    event: ServerEvent;
+}
 /** One `Host` entry of the server's `~/.ssh/config`, as the Machines page lists it. */
 interface MachineInfo {
     /** `ssh:<alias>` — the id the install route is asked for. */
@@ -4817,6 +5003,15 @@ interface MachineInfo {
      * here, one that never got as far as a connection.
      */
     keepConnected?: true;
+    /**
+     * The API socket this server holds to that machine — connected, dialling, refused or failed,
+     * and since when (machines/machine-sockets.ts). Null for `local`, and until a stream has
+     * asked for a socket at all. A fact about one process on THIS side, like `connection` and
+     * for the same reason: it says the socket exists and what it is doing, never that the far
+     * side is answering. The Machines page reads it so a stuck stream does not have to be found
+     * in the browser console.
+     */
+    socket: MachineSocketFact | null;
     /**
      * The machine's API as last seen by this server's proxy — stamped by traffic passing
      * through, never by a probe of its own. `answeredAt` when the last forwarded request got
@@ -4886,6 +5081,12 @@ interface MachineSkippedModel {
     /** The far side's error code (`model_not_addable`, `model_not_routable`). */
     code: string;
     reason: string;
+    /**
+     * The entry is one of this server's built-in models for its group, which the machine refused
+     * as not addable: the machine's build does not list it yet, so updating the machine, then
+     * syncing again, carries it. Absent for any other refusal.
+     */
+    builtInHere?: true;
 }
 /** A model entry that takes `variable` from this server's environment. */
 interface MachineEnvOnly {
@@ -4896,17 +5097,28 @@ interface MachineEnvOnly {
 }
 /**
  * A machine this server keeps connected, while it is being brought back. Attempts back off
- * from 5 s, doubling to a 5-minute cap, so a machine that is down for a day costs a probe every
- * five minutes; after three failures in a row the connection check runs on its own, and its
- * answer is what the page shows as the explanation.
+ * from 5 s, doubling to a 5-minute cap, and stop after `maxAttempts` failures in a row (about a
+ * quarter of an hour) — or after the first, when ssh refused in a way no retry fixes — until a
+ * person asks for a Retry (`POST …/machines/:machineId/reconnect`). After three failures in a
+ * row the connection check runs on its own, and its answer is what the page shows as the
+ * explanation.
  */
 interface MachineReconnect {
-    /** When this streak began: the moment the machine was found not connected. */
+    /** When this streak began: the moment the machine was found not connected, or the Retry that began it again. */
     since: string;
     /** Attempts that failed in this streak; 0 while the first is still to run or running. */
     attempts: number;
-    /** When the next attempt runs; null while one is running. */
+    /** How many failures in a row end the streak: the page says "attempt n of this". */
+    maxAttempts: number;
+    /** When the next attempt runs; null while one is running, and once the streak stopped. */
     nextAt: string | null;
+    /**
+     * The streak stopped, and nothing runs until a person asks for a Retry, which begins a new
+     * one: `attempts` — `maxAttempts` failed in a row; `ssh` — ssh refused in a way retrying
+     * cannot fix (a host key unknown or changed, an unusable key file, a key refused, a broken
+     * ssh config), said by `sshReason`.
+     */
+    gaveUp?: "attempts" | "ssh";
     /** The last attempt's failure in the far side's words; null before the first one fails. */
     lastError: string | null;
     /** Why ssh refused, when the last failure was ssh's own — for the page to say in its language. */
@@ -5948,6 +6160,11 @@ interface OrgHandbookFile {
     updatedAt: string;
 }
 interface OrgHandbookFilesResponse {
+    /**
+     * The handbook directory's absolute path on this server: the Web App browses it with the Files
+     * panel's own directory-addressed routes, which take the same Project access these do.
+     */
+    dir: string;
     /** The index first, then the other documents by path. */
     files: OrgHandbookFile[];
 }
@@ -6380,6 +6597,10 @@ interface BrowserLinkCapabilities {
  */
 interface BuiltinBrowserTab {
     id: number;
+    /** The built-in tab belongs to this conversation; absent for pages opened outside a conversation. */
+    sessionId?: string;
+    /** Electron storage partition, shared only within this tab's Project. */
+    partition?: string;
     url: string;
     title: string;
     loading: boolean;
@@ -6618,6 +6839,8 @@ interface BuiltinBrowserImportSourcesResponse {
 }
 /** POST /api/builtin-browser/import. */
 interface BuiltinBrowserImportRequest {
+    sessionId?: string;
+    projectId?: string;
     sourceId: string;
     cookies?: boolean;
     history?: boolean;
@@ -6682,6 +6905,7 @@ type BuiltinBrowserServerEvent =
 /** Create a guest for `url`, then POST /tabs/claim with `requestId` once it has a webContents id. */
  | {
     type: "builtin_browser_open";
+    partition?: string;
     requestId: string;
     url: string;
     activate: boolean;
@@ -6690,6 +6914,12 @@ type BuiltinBrowserServerEvent =
 } | {
     type: "builtin_browser_close";
     tabId: number;
+}
+/** A draft or healed conversation acquired its permanent id. */
+ | {
+    type: "builtin_browser_session";
+    fromSessionId: string;
+    sessionId: string;
 } | {
     type: "builtin_browser_activity";
     tabId: number;
@@ -6757,11 +6987,13 @@ type DesktopBrowserCommand =
  | {
     op: "set-cookies";
     cookies: DesktopBrowserCookie[];
+    partition?: string;
 }
 /** Reply: `{}`. */
  | {
     op: "clear-data";
     storages: ("cookies" | "cache" | "storage")[];
+    partition?: string;
 }
 /**
  * Reply: `{}`. The tabs whose pages may be throttled while out of sight (Electron's background
@@ -6885,4 +7117,4 @@ interface DesktopBrowserEventMessage {
     event: DesktopBrowserEvent;
 }
 
-export { type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftShortcut, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkflowInfo, type WorkflowRequest, type WorkflowResponse, type WorkflowVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse };
+export { API_SOCKET_PATH, type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftShortcut, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineEvent, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSocketFact, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingAccount, type MessagingAccountHolder, type MessagingAccountHoldersResponse, type MessagingAccountsResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type MessagingUnreachableMachine, type MessagingUnreachableReason, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkbenchInfo, type WorkbenchRequest, type WorkbenchResponse, type WorkbenchVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse, apiSocketPath, sessionKindPath };