@prismshadow/penguin-server 0.2.16 → 0.2.17

package/README.md

@@ -1,6 +1,6 @@
 # @prismshadow/penguin-server
 
-The PenguinHarness Web backend — the Web implementation of the SDK's Human boundary. HTTP carries Prompt input, approvals and interrupts; Server-Sent Events stream the OmniMessage output. Adds multi-user auth, Project authorization, Session runtime, scheduling and usage accounting on top of `@prismshadow/penguin-core`.
+The PenguinHarness Web backend — the Web implementation of the SDK's Human boundary. HTTP carries Prompt input, approvals and interrupts; Server-Sent Events stream the output as AMSP records. Adds multi-user auth, Project authorization, Session runtime, scheduling and usage accounting on top of `@prismshadow/penguin-core`.
 
 ## Architecture
 

package/dist/api/types.d.ts

@@ -1,5 +1,5 @@
-import { SessionSource, OmniMessage, ToolCallPayload, CompactionMode } from '@prismshadow/penguin-core/omnimessage';
-export { SessionSource } from '@prismshadow/penguin-core/omnimessage';
+import { SessionSource, AmspRecord, ToolCallPayload, CompactionMode } from '@prismshadow/amsp';
+export { SessionSource } from '@prismshadow/amsp';
 import { ThinkingLevelName, ToolDefinitionConfig, MCPServerConfig } from '@prismshadow/penguin-core/interfaces';
 import { HarnessHistory, VersionReport } from '@prismshadow/penguin-core';
 export { HarnessHistoryEntry, IfacesSummary } from '@prismshadow/penguin-core';
@@ -97,11 +97,11 @@ interface WorkbenchVersion {
  * frontend SPA (single source of truth).
  *
  * These field definitions are authoritative for the Web API contract. Conventions:
- *   - DTO fields use camelCase; OmniMessage keeps the core protocol as-is (snake_case shell),
+ *   - DTO fields use camelCase; an AMSP record keeps its own shape as-is (snake_case envelope),
  *     no conversion;
  *   - This file holds only types, no implementation; exposed to the frontend via package
  *     exports `"./api"` for type-only import;
- *   - Types are taken only from core's pure subpaths (omnimessage / interfaces), so the
+ *   - Types are taken only from `@prismshadow/amsp` and core's pure `interfaces` subpath, so the
  *     frontend can safely reference them.
  *
  * Docs: packages/docs/content/server-api.{zh,en}.md (site path /docs/server-api) is the
@@ -455,6 +455,13 @@ interface UiPrefs {
      * shallow, so this whole map is one field.
      */
     todoDismissed?: Record<string, Record<string, string>>;
+    /**
+     * Notices the user closed, by notice id (a machine's model keys only this server's environment
+     * holds: `machine-env-only:<machine id>`), each the SIGNATURE of what it named when closed — its
+     * items sorted, one per line — so it comes back when a new item appears (web's
+     * `lib/notice-dismissals.ts`). Replaced whole on every write, like `todoDismissed`.
+     */
+    noticesDismissed?: Record<string, string>;
     /**
      * The draft screen's user-defined shortcuts, in display order. Replaced whole on every write
      * (the merge is shallow, so the array is one field like any other) and bounded on write by
@@ -577,7 +584,11 @@ interface ModelEffectiveConnection {
     baseUrlSource: ConnectionSourceDto;
     clientType?: string;
     clientTypeSource: ConnectionSourceDto;
-    /** `env` = no row or group key, and the environment lends one on the effective endpoint (modelEnvFallback). */
+    /**
+     * `env` = no key in the file, and MMSP's routed client reads its own variable for the row's
+     * endpoint (no base URL, or the client's default endpoint) — reported when that variable
+     * holds a value here (`envKeyMasked`), `none` otherwise.
+     */
     apiKeySource: "model" | "provider" | "env" | "none";
     /** Mask of the key the row would use, whichever source; absent when none. */
     apiKeyMasked?: string;
@@ -631,21 +642,18 @@ interface ModelInfo {
     discount?: number;
     /**
      * Environment variable name the entry falls back to when api_key is empty (e.g.
-     * ANTHROPIC_API_KEY); unset when it gets no fallback — an id nothing routes, or an entry
-     * whose base URL is not the vendor's own official endpoint (a gateway preset, a custom /
-     * vLLM / user-created row with its own endpoint, a vendor row re-pointed at a proxy).
+     * ANTHROPIC_API_KEY): only for a row with no key in the file whose routed MMSP client reads
+     * that variable for its endpoint — no base URL on the row or its group, or the client's own
+     * default endpoint. Unset for a row with a key (its own or a group key that reaches it), a row
+     * sent to any other base URL (a gateway, Penguin Go, ModelScope, a vendor's second host or a
+     * proxy), or an id nothing routes.
      */
     envKey?: string;
     /**
      * Masked preview (same rule as `credential.apiKeyMasked`) of the value the server process
-     * currently holds for `envKey` — the plaintext is never serialized. Reported only where the
-     * fallback may be presented as covering the entry (core's modelEnvPreviewKey): a row whose
-     * effective base URL is a vendor endpoint (or the Penguin Go relay), or a row with no base URL
-     * in a built-in group other than custom, on the client its id's family names. Gateway rows
-     * never carry it, and neither do custom / vLLM / user-defined rows with no base URL,
-     * although those do fall back. Absent = the variable is unset or empty, or the entry is not
-     * previewable. Computed on the effective shape, and only when no row or group key reaches
-     * the row.
+     * currently holds for `envKey` — the plaintext is never serialized. Absent = the variable is
+     * unset or empty, or the entry gets no fallback. Reported only when no row or group key
+     * reaches the row.
      */
     envKeyMasked?: string;
     /** The row's OWN key (masked) and base URL — overrides of its group's; see `effective`. */
@@ -951,17 +959,17 @@ interface ModelBalanceAmount {
 /**
  * Why a group's balance could not be read:
  * - `unsupported`: the group publishes no balance endpoint (no `balance` descriptor in the catalog);
- * - `no_key`: the group has no API key to ask with — none stored, and no environment variable
- *   the credential rule lends its rows for the balance endpoint's host;
+ * - `no_key`: the group has no API key to ask with — none stored, and no vendor variable that
+ *   MMSP's vendor client reads for the group's base URL;
  * - `upstream_failed`: the vendor could not be reached in time, refused the request, or answered
  *   without a readable balance.
  */
 type ModelBalanceErrorCode = "unsupported" | "no_key" | "upstream_failed";
 /**
  * GET /api/projects/:p/models/balance?provider=<group>[&force=1] (Project member): the account
- * balance behind the group's API key — the stored one, or else the environment key its rows
- * fall back to under the credential rule (DeepSeek's DEEPSEEK_API_KEY) — read server-side from
- * the endpoint the catalog's `balance` descriptor names. The key never reaches the browser, and
+ * balance behind the group's API key — the stored one, or else the environment key MMSP's
+ * vendor client reads for the group's base URL (DeepSeek's DEEPSEEK_API_KEY) — read server-side
+ * from the endpoint the catalog's `balance` descriptor names. The key never reaches the browser, and
  * neither does the vendor's own text. Like the connectivity test, a balance that cannot be read is an answer
  * (`ok: false` with a code), not a failed request. Readings and vendor failures are cached for
  * 60 s per Project and group, for as long as the group's key is the same; `force=1` skips the
@@ -992,7 +1000,8 @@ interface ModelBalanceFailure {
 /**
  * How the authorization code travels back. `callback` sends the browser to a harness URL
  * the provider redirects to; `manual` asks the provider for a one-time code the user copies
- * back by hand, for the case where that redirect cannot reach the harness.
+ * back by hand, for the case where that redirect cannot reach the harness — or where the
+ * provider would refuse it: only an HTTPS or loopback HTTP origin can be redirected to.
  */
 type ModelOAuthMode = "callback" | "manual";
 /**
@@ -1003,13 +1012,19 @@ type ModelOAuthMode = "callback" | "manual";
 interface ModelOAuthStartRequest {
     /** Provider group id (must be a catalog group that publishes a key-minting flow). */
     provider: string;
-    /** Defaults to `callback`. */
+    /** Defaults to `callback`; the response says which mode the flow was opened in. */
     mode?: ModelOAuthMode;
 }
 /** The opaque flow handle plus the page to send the user to. No secret of the flow's is included. */
 interface ModelOAuthStartResponse {
     flowId: string;
     authorizeUrl: string;
+    /**
+     * The mode the flow was opened in: `manual` for a `callback` request when the origin the
+     * request reached this server on is neither HTTPS nor loopback HTTP, which the provider's
+     * authorization page refuses as a callback.
+     */
+    mode: ModelOAuthMode;
 }
 /** Why a flow failed, as a code the frontend phrases; never carries a code, a verifier or a key. */
 type ModelOAuthErrorCode = "invalid_request" | "code_rejected" | "upstream_failed" | "unreachable" | "apply_failed";
@@ -1178,7 +1193,7 @@ interface AgentSummary {
     kernelOutdated: boolean;
     /** Vault key count (number of keys in agent_state/.vault.toml). */
     vaultKeyCount: number;
-    /** Schedule count (number of .toml files under agent_state/schedule/, including invalid ones). */
+    /** Schedule count (number of .toml files directly under agent_state/schedule/, including invalid ones; archived files under schedule/expired/ are not counted). */
     scheduleCount: number;
     /** Workbench folders with a manifest, including ones with a load error. */
     workbenchCount: number;
@@ -1883,7 +1898,7 @@ interface ArchivedSessionsQuery {
     /** One Project the user can open (404 `project_not_found` otherwise); absent = every Project they own or are a member of. */
     projectId?: string;
 }
-/** One group of the archive page: one Workspace of one Project. */
+/** One group of the archive page: one Workspace of one Project, on this server or on one machine. */
 interface ArchivedSessionGroup {
     projectId: string;
     projectName: string;
@@ -1893,6 +1908,12 @@ interface ArchivedSessionGroup {
     count: number;
     /** The newest `lastActiveAt` in the group — the order the groups come in, newest first. */
     latest: string;
+    /** The machine the group's Sessions live on (its own id); absent on this server's groups. */
+    machineId?: string;
+    /** That machine's ssh alias, for the group's header. */
+    machineAlias?: string;
+    /** That machine's own time when it counted the group: a batch on the whole group passes it as `until`. */
+    asOf?: string;
 }
 /** GET /api/me/archived-sessions/groups. */
 interface ArchivedSessionGroupsResponse {
@@ -1904,6 +1925,11 @@ interface ArchivedSessionGroupsResponse {
      * filter's `until`, so it acts on the Sessions the count saw and on none that came after.
      */
     asOf: string;
+    /** Machines the user's Projects use whose archive could not be read (not connected, or no answer). */
+    unreachable?: Array<{
+        machineId: string;
+        alias: string;
+    }>;
 }
 /** Query of GET /api/me/archived-sessions: one group's page, newest activity first. */
 interface ArchivedSessionsRowsQuery extends ArchivedSessionsQuery {
@@ -1914,6 +1940,8 @@ interface ArchivedSessionsRowsQuery extends ArchivedSessionsQuery {
     limit: number;
     /** `<lastActiveAt>,<sessionId>` of the last row held, as the Session list's cursor. */
     before?: string;
+    /** The group's machine (`ArchivedSessionGroup.machineId`): the page is read from it. */
+    machineId?: string;
 }
 /** GET /api/me/archived-sessions. */
 interface ArchivedSessionsResponse {
@@ -1921,11 +1949,16 @@ interface ArchivedSessionsResponse {
     sessions: SessionInfo[];
     hasMore: boolean;
 }
-/** What an archive-page batch acts on: explicit ids (1–500), or every archived row a filter matches. */
-type ArchivedSessionsBatch = {
+/**
+ * What an archive-page batch acts on: explicit ids (1–500), or every archived row a filter
+ * matches — on this server, or with `machineId` on that machine (the filter then names its Project).
+ */
+type ArchivedSessionsBatch = ({
     sessionIds: string[];
 } | {
     filter: ArchivedSessionsBatchFilter;
+}) & {
+    machineId?: string;
 };
 /** A batch's filter: the archive query, one group's Workspace, and the snapshot it was counted at. */
 interface ArchivedSessionsBatchFilter extends ArchivedSessionsQuery {
@@ -2103,7 +2136,7 @@ interface TracePosition {
     ordinal: number;
 }
 /** History-only transport metadata; `tracePosition` is never persisted into Trace JSONL. */
-type HistoryMessage = OmniMessage & {
+type HistoryMessage = AmspRecord & {
     tracePosition?: TracePosition;
 };
 interface SessionForkRequest {
@@ -2149,7 +2182,7 @@ interface SessionPatchRequest {
  *   - `cursor`: the Session channel's most recently assigned SSE event id
  *     (`<epoch>-<seq>`); every event published up to and including this id is already
  *     reflected in `fragments`.
- *   - `fragments`: one synthetic `partial_* start` OmniMessage per open streaming
+ *   - `fragments`: one synthetic `partial_* start` AmspRecord per open streaming
  *     fragment, whose payload carries the full accumulated content so far (text/thinking
  *     prefix, tool-call name + accumulated arguments, tool-output prefix + images), with
  *     the original `origin` chain preserved.
@@ -2164,7 +2197,7 @@ interface SessionPatchRequest {
  */
 interface MessagesLiveTail {
     cursor: string;
-    fragments: OmniMessage[];
+    fragments: AmspRecord[];
 }
 /**
  * Pagination envelope of a windowed `GET /messages` (`tailLimit` / `before` requests
@@ -2994,6 +3027,50 @@ interface WeChatScanVerifyRequest {
 interface MessagingTestMessageResponse {
     ok: true;
 }
+/**
+ * One bot account a server has enabled: the channel and its account id (Feishu `app_id`,
+ * Telegram bot id, QQ App ID, WeChat bot id), which is public by design. Never a Session,
+ * never a secret.
+ */
+interface MessagingAccount {
+    channel: MessagingChannel;
+    accountId: string;
+}
+/**
+ * GET /api/messaging/accounts (admin only) — every bot account this server has enabled,
+ * across all its Projects. A server that connects machines asks each of them this when a
+ * bot is about to be turned on, so that one account is enabled on one server at a time.
+ */
+interface MessagingAccountsResponse {
+    accounts: MessagingAccount[];
+}
+/** A server that has the asked-about bot enabled: a machine by id and alias, or this server (both null). */
+interface MessagingAccountHolder {
+    machineId: string | null;
+    alias: string | null;
+}
+/**
+ * Why a machine could not be asked: no connection to it, a build without the accounts
+ * route (it answered 404), or any other failed answer.
+ */
+type MessagingUnreachableReason = "not_connected" | "older_build" | "failed";
+/** A machine of the Project that could not be asked whether it holds the bot. */
+interface MessagingUnreachableMachine {
+    machineId: string;
+    alias: string;
+    reason: MessagingUnreachableReason;
+}
+/**
+ * GET /api/projects/:projectId/messaging/account-holders?channel=&accountId= — which servers
+ * have this bot enabled: this server, and each machine the Project uses that could be asked.
+ * Machines that could not be asked are listed apart; the caller decides what to do about
+ * them. Never names a Session. A caller who is not an admin is answered for this server
+ * only, because machines are admins' (both lists then hold no machine).
+ */
+interface MessagingAccountHoldersResponse {
+    holders: MessagingAccountHolder[];
+    unreachable: MessagingUnreachableMachine[];
+}
 /** Docs: /docs/server-api § "Streaming (SSE)". */
 type ServerEvent = 
 /**
@@ -3002,7 +3079,7 @@ type ServerEvent =
  */
 {
     type: "approval_request";
-    toolCall: OmniMessage<ToolCallPayload>;
+    toolCall: AmspRecord<ToolCallPayload>;
     origin?: string[];
 }
 /** Session run status flip (for toggling the input area and list); `queued` = queued follow-up count (see TaskCreateRequest.queueIfBusy). */
@@ -3110,6 +3187,17 @@ type ServerEvent =
  | {
     type: "hello";
 }
+/**
+ * The stream's own beat, written by the endpoint's SSE writer every 20 seconds (http/sse.ts)
+ * on `/api/events`, and by the hub on a machine's aggregate stream. The socket's ping and the
+ * `: ping` comment line are invisible to a stream's consumer, so without this a stream that
+ * stopped while its socket stayed healthy would look alive forever: the hub
+ * (machines/event-hub.ts) and the browser (web api/socket.ts) each end a stream that misses
+ * two beats and re-issue it with its last event id.
+ */
+ | {
+    type: "heartbeat";
+}
 /** The served web assets were hot-swapped by a platform upgrade: clients reload to pick them up. */
  | {
     type: "web_updated";
@@ -3150,7 +3238,7 @@ type ServerEvent =
     projectId: string;
 } | ScheduleServerEvent | GoalServerEvent | CompanyServerEvent | BuiltinBrowserServerEvent | MachineServerEvent;
 /**
- * The machines' two events on the user channel, published to admins only — the Machines page,
+ * The machines' events on the user channel, published to admins only — the Machines page,
  * and the `/server/<id>` proxy everything else about a machine goes through, are admin-only.
  */
 type MachineServerEvent = 
@@ -3165,11 +3253,13 @@ type MachineServerEvent =
     type: "machines_changed";
 }
 /**
- * One of a connected machine's own user-channel events, relayed by this server from that
- * machine's `GET /api/events` (machines/event-relay.ts). The page holds one event stream to
- * this server whatever the number of machines: a stream per machine made five connected
- * machines take the browser's whole HTTP/1.1 allowance of six connections to one origin, and
- * every other request of the page then waited behind them for good.
+ * One of a connected machine's own user-channel events, tagged with the machine it came
+ * from. They ride the machines aggregate (event-hub.ts, `GET …/machines/events`) — ONE
+ * stream for every connected machine, whose per-machine frames have this same shape; the
+ * page that re-publishes them on its own channel wraps them this way too. One stream, not
+ * a stream per machine: five of those once took the browser's whole HTTP/1.1 allowance of
+ * six connections to one origin, and every other request of the page then waited behind
+ * them for good.
  */
  | {
     type: "machine_event";
@@ -3311,7 +3401,7 @@ interface SessionContextResponse extends SessionContextParts {
     compactionThreshold: number | null;
 }
 interface TraceEventsResponse {
-    events: OmniMessage[];
+    events: AmspRecord[];
     offset: number;
     limit: number;
     /**
@@ -3340,6 +3430,11 @@ interface RequestSpan {
     approvalWaitMs?: number;
     /** LLM generation duration = durationMs − approvalWaitMs (≥ 0): only this can be used as the TPS denominator, not durationMs. */
     activeMs?: number;
+    /**
+     * The thinking level this request went out at, as its `request_begin` records it. Absent
+     * when no level was sent, and on Traces written before the field — unknown, not a level.
+     */
+    thinkingLevel?: string;
 }
 /**
  * Per-Task Token / duration figures (aggregated server-side over the **entire** Trace file,
@@ -3369,6 +3464,14 @@ interface TraceTaskStats {
      * mode; treat an absent value as `summarize`, which is what the badge said before the split.
      */
     compactionMode?: CompactionMode;
+    /**
+     * A short label for the round navigator: the first non-empty line of the user text that
+     * started this turn, with harness marker blocks and attachment lines removed, whitespace
+     * collapsed, at most 120 characters (the view truncates it further to fit). Absent when no
+     * user text started the turn — a summarize compaction turn, an image-only send — or none of
+     * its lines is left (only attachment lines).
+     */
+    prompt?: string;
     /**
      * This turn's message index range within the **entire file** (inclusive). A single
      * sequential scan on the server tells which turn each message belongs to; the frontend
@@ -3455,7 +3558,8 @@ interface ToolCallSpan {
     startTs: string;
     endTs?: string;
     durationMs?: number;
-    stopReason?: string;
+    /** The paired tool_call_output's `status` (completed / aborted / fatal); absent while the call has no output. */
+    status?: string;
 }
 /** Workspace file entry (Files tab). */
 interface WorkspaceFileEntry {
@@ -3577,7 +3681,8 @@ interface TraceToolSpan {
     approvalTs?: string;
     decision?: string;
     outputTs?: string;
-    stopReason?: string;
+    /** The tool_call_output's `status` (completed / aborted / fatal); absent while unclosed. */
+    status?: string;
     /** The Task that initiated this tool (grouped with its tool_call segment): async output belongs to this Task even if it arrives after request_end. */
     taskIndex: number;
 }
@@ -3950,7 +4055,11 @@ interface UsageResponse {
     /** List of Model paired references that have appeared in this Project (for the filter dropdown). */
     models: ModelRefDto[];
 }
-/** Display-facing schedule status: the file's `enabled` only expresses intent; the rest is derived from runtime state. */
+/**
+ * Display-facing schedule status: the file's `enabled` only expresses intent; the rest is derived from runtime state.
+ * The scheduler archives an agent's settled tasks (done / missed / expired) into `schedule/expired/`, so the agent
+ * listings show those three only while a queued fire is still to be sent or when the move failed.
+ */
 type ScheduleStatus = "active" | "disabled" | "expired" | "done" | "missed" | "invalid";
 interface ScheduleItem {
     /** Filename (without .toml) is the identifier. */
@@ -4673,6 +4782,24 @@ interface DesktopTrayCommandMessage {
     showTrayIcon?: boolean;
     locale?: DesktopTrayLocale;
 }
+/**
+ * The API socket (PRFC-0011): one WebSocket per tab, every frame a call to an existing
+ * endpoint. It has its own upgrade route, {@link API_SOCKET_PATH}: the runtime's websocket
+ * seam authenticates the cookie and the Origin there and hands the socket to the platform,
+ * which serves the protocol as the signed-in user (server: socket/ref.ts). Shared so the Web
+ * App and anything else that speaks to another server spell the address the same way.
+ */
+declare const API_SOCKET_PATH = "/api/socket";
+/**
+ * Paths whose answer depends on the KIND of session behind the request — the desktop shell's
+ * own window (`sessionVia === "desktop"`: its update, tray and privacy relays, folder access,
+ * revealing a file) or a first-login link (a password change without the old password). The
+ * socket's handshake does not say how the cookie behind it was minted, so these are made over
+ * HTTP: the socket answers them 421 `not_on_socket` and the Web App never sends them there.
+ */
+declare function sessionKindPath(pathname: string): boolean;
+/** The API socket's address. No id is involved: the handshake's cookie names the user. */
+declare function apiSocketPath(): string;
 /** What the shell's read of one folder came to. */
 interface DesktopFolderAccessResult {
     /** The folder could be read. Always true off macOS, where the shell reads nothing. */
@@ -4763,6 +4890,34 @@ interface RestartResponse {
     restarting: boolean;
     reason?: "no_supervisor";
 }
+/**
+ * What the API socket this server holds to one machine is doing (machines/machine-sockets.ts) —
+ * the fact behind `MachineInfo.socket`. `since` is the instant the state was entered, so the
+ * Machines page can say how long a machine has been dialling, failing or connected instead of
+ * sending someone to the browser console for it.
+ */
+interface MachineSocketFact {
+    /**
+     * `connected` once the handshake completed, `dialling` while a dial is outstanding, `refused`
+     * when the machine answered the handshake with a status (a program predating the socket), and
+     * `failed` when the dial did not complete or a socket that was up closed.
+     */
+    state: "connected" | "dialling" | "refused" | "failed";
+    /** When that state was entered (ISO). */
+    since: string;
+    /** The transport's own words where there are any: a refusal's status, a dial's error. */
+    detail?: string;
+}
+/**
+ * One machine's event, as the machines aggregate stream carries it
+ * (`GET /api/projects/:projectId/machines/events`): the machine's own `ServerEvent`, with the
+ * machine it came from — one stream carries many machines, and the tag is what keeps their
+ * events apart (docs: /docs/server-api § "One event stream per machine").
+ */
+interface MachineEvent {
+    machineId: string;
+    event: ServerEvent;
+}
 /** One `Host` entry of the server's `~/.ssh/config`, as the Machines page lists it. */
 interface MachineInfo {
     /** `ssh:<alias>` — the id the install route is asked for. */
@@ -4848,6 +5003,15 @@ interface MachineInfo {
      * here, one that never got as far as a connection.
      */
     keepConnected?: true;
+    /**
+     * The API socket this server holds to that machine — connected, dialling, refused or failed,
+     * and since when (machines/machine-sockets.ts). Null for `local`, and until a stream has
+     * asked for a socket at all. A fact about one process on THIS side, like `connection` and
+     * for the same reason: it says the socket exists and what it is doing, never that the far
+     * side is answering. The Machines page reads it so a stuck stream does not have to be found
+     * in the browser console.
+     */
+    socket: MachineSocketFact | null;
     /**
      * The machine's API as last seen by this server's proxy — stamped by traffic passing
      * through, never by a probe of its own. `answeredAt` when the last forwarded request got
@@ -4917,6 +5081,12 @@ interface MachineSkippedModel {
     /** The far side's error code (`model_not_addable`, `model_not_routable`). */
     code: string;
     reason: string;
+    /**
+     * The entry is one of this server's built-in models for its group, which the machine refused
+     * as not addable: the machine's build does not list it yet, so updating the machine, then
+     * syncing again, carries it. Absent for any other refusal.
+     */
+    builtInHere?: true;
 }
 /** A model entry that takes `variable` from this server's environment. */
 interface MachineEnvOnly {
@@ -4927,17 +5097,28 @@ interface MachineEnvOnly {
 }
 /**
  * A machine this server keeps connected, while it is being brought back. Attempts back off
- * from 5 s, doubling to a 5-minute cap, so a machine that is down for a day costs a probe every
- * five minutes; after three failures in a row the connection check runs on its own, and its
- * answer is what the page shows as the explanation.
+ * from 5 s, doubling to a 5-minute cap, and stop after `maxAttempts` failures in a row (about a
+ * quarter of an hour) — or after the first, when ssh refused in a way no retry fixes — until a
+ * person asks for a Retry (`POST …/machines/:machineId/reconnect`). After three failures in a
+ * row the connection check runs on its own, and its answer is what the page shows as the
+ * explanation.
  */
 interface MachineReconnect {
-    /** When this streak began: the moment the machine was found not connected. */
+    /** When this streak began: the moment the machine was found not connected, or the Retry that began it again. */
     since: string;
     /** Attempts that failed in this streak; 0 while the first is still to run or running. */
     attempts: number;
-    /** When the next attempt runs; null while one is running. */
+    /** How many failures in a row end the streak: the page says "attempt n of this". */
+    maxAttempts: number;
+    /** When the next attempt runs; null while one is running, and once the streak stopped. */
     nextAt: string | null;
+    /**
+     * The streak stopped, and nothing runs until a person asks for a Retry, which begins a new
+     * one: `attempts` — `maxAttempts` failed in a row; `ssh` — ssh refused in a way retrying
+     * cannot fix (a host key unknown or changed, an unusable key file, a key refused, a broken
+     * ssh config), said by `sshReason`.
+     */
+    gaveUp?: "attempts" | "ssh";
     /** The last attempt's failure in the far side's words; null before the first one fails. */
     lastError: string | null;
     /** Why ssh refused, when the last failure was ssh's own — for the page to say in its language. */
@@ -5979,6 +6160,11 @@ interface OrgHandbookFile {
     updatedAt: string;
 }
 interface OrgHandbookFilesResponse {
+    /**
+     * The handbook directory's absolute path on this server: the Web App browses it with the Files
+     * panel's own directory-addressed routes, which take the same Project access these do.
+     */
+    dir: string;
     /** The index first, then the other documents by path. */
     files: OrgHandbookFile[];
 }
@@ -6931,4 +7117,4 @@ interface DesktopBrowserEventMessage {
     event: DesktopBrowserEvent;
 }
 
-export { type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftShortcut, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkbenchInfo, type WorkbenchRequest, type WorkbenchResponse, type WorkbenchVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse };
+export { API_SOCKET_PATH, type AdminPasswordResetRequest, type AdminUserCreateRequest, type AdminUserCreateResponse, type AdminUsersResponse, type AgentApiKeyCreateRequest, type AgentApiKeyCreateResponse, type AgentApiKeyInfo, type AgentApiResponse, type AgentApiSettings, type AgentApiUpdateRequest, type AgentCompactionConfigDto, type AgentConfigDto, type AgentConfigResponse, type AgentConfigUpdateRequest, type AgentCreateRequest, type AgentCreateResponse, type AgentHooksConfigDto, type AgentHooksResponse, type AgentImportRequest, type AgentImportResponse, type AgentKernelUpdateResponse, type AgentMcpServerItem, type AgentMcpServersResponse, type AgentMemoryConfigDto, type AgentModelConfigDto, type AgentPluginsInstallResponse, type AgentSchedulesConfigDto, type AgentSkillsConfigDto, type AgentSkillsResponse, type AgentSummary, type AgentTraceDateGroup, type AgentTraceFileRef, type AgentTraceSessionEntry, type AgentTraceSessionFile, type AgentTraceSessionGroup, type AgentTracesResponse, type AgentVaultConfigDto, type AgentsResponse, type ApprovalDecisionRequest, type ApprovalMode, type ArchivedSessionGroup, type ArchivedSessionGroupsResponse, type ArchivedSessionSource, type ArchivedSessionsBatch, type ArchivedSessionsBatchFilter, type ArchivedSessionsBatchResponse, type ArchivedSessionsQuery, type ArchivedSessionsResponse, type ArchivedSessionsRowsQuery, type AuthLoginRequest, type AuthResponse, type BenchmarkArchiveGitOrigin, type BenchmarkArchiveImportRequest, type BenchmarkArchiveImportResponse, type BenchmarkCaseScore, type BenchmarkCaseSummary, type BenchmarkCasesResponse, type BenchmarkCreateCase, type BenchmarkCreateRequest, type BenchmarkCreateResponse, type BenchmarkEvaluation, type BenchmarkManifestProblem, type BenchmarkOrigin, type BenchmarkOriginKind, type BenchmarkRunScore, type BenchmarkStatus, type BenchmarkSummary, type BenchmarksResponse, type BrowserBackend, type BrowserBackendInfo, type BrowserBackendResponse, type BrowserExtensionCloseCode, type BrowserExtensionPairRequest, type BrowserExtensionPairResponse, type BrowserExtensionPairingResponse, type BrowserExtensionRecord, type BrowserExtensionsResponse, type BrowserHello, type BrowserLinkCapabilities, type BuiltinBrowserAction, type BuiltinBrowserDialog, type BuiltinBrowserExecResult, type BuiltinBrowserHistoryEntry, type BuiltinBrowserHistoryResponse, type BuiltinBrowserImportBrowser, type BuiltinBrowserImportRequest, type BuiltinBrowserImportResult, type BuiltinBrowserImportSource, type BuiltinBrowserImportSourcesResponse, type BuiltinBrowserLoadWarning, type BuiltinBrowserMetrics, type BuiltinBrowserScanResult, type BuiltinBrowserScreenshot, type BuiltinBrowserServerEvent, type BuiltinBrowserSettings, type BuiltinBrowserStatus, type BuiltinBrowserTab, type BuiltinBrowserTabMetrics, type BuiltinBrowserTabsResponse, type BuiltinBrowserUnavailableReason, type CaseMaterial, type ChatDefaultsDto, type CommandPolicyDto, type CommandPolicyRuleDto, type CompanyServerEvent, type ConnectionSourceDto, type ContextFileShare, type ContextToolShare, type ContributionsResponse, type CostParts, type CredentialInfo, type DefaultModelResponse, type DefaultModelUpdateRequest, type DesktopBrowserCommand, type DesktopBrowserCommandMessage, type DesktopBrowserCookie, type DesktopBrowserEvent, type DesktopBrowserEventMessage, type DesktopBrowserReplyMessage, type DesktopFolderAccessMessage, type DesktopFolderAccessResult, type DesktopFolderAccessResultMessage, type DesktopOpenPrivacySettingsMessage, type DesktopPrivacyPane, type DesktopTrayCommandMessage, type DesktopTrayLocale, type DesktopTrayPatch, type DesktopTrayStatus, type DesktopTrayStatusMessage, type DesktopTrayStatusResponse, type DesktopUpdateStatus, type DesktopUpdateStatusResponse, type DesktopUpdaterCommandMessage, type DesktopUpdaterStatusMessage, type DirAccessResponse, type DirEntryInfo, type DirListResponse, type DirLocation, type DirStandardFolders, type DirectorySkillItem, type DirectorySkillsResponse, type DraftShortcut, type Employment, type EndpointModelListRequest, type EndpointModelListResponse, type ErrorBody, type ErrorDetails, type FeishuBindingInfo, type FeishuBindingPutRequest, type FeishuBindingResponse, type FeishuTestRequest, type FeishuTestResponse, type FilesCreateRequest, type FilesMoveRequest, type FilesStatRequest, type FilesStatResponse, type FilesWriteRequest, type GoalResponse, type GoalServerEvent, type GoalStateView, type HistoryMessage, type HookArchiveInstallRequest, type HookItem, type InstallResponse, type InstalledPlugin, type InstalledPluginsResponse, type LanguageIndexResponse, type LanguageSummary, MACHINE_PHASES, type MachineCheck, type MachineConfigSync, type MachineDiagnosis, type MachineEnvOnly, type MachineEvent, type MachineInfo, type MachineJob, type MachinePhase, type MachineReconnect, type MachineServerEvent, type MachineServerStatus, type MachineSkippedModel, type MachineSocketFact, type MachineSourceReach, type MachineSshFailure, type MachineUninstallRequest, type MachineUseRefusal, type MachinesAddRequest, type MachinesCheckoutImage, type MachinesResponse, type MachinesStopUsingRequest, type MachinesUseRequest, type MachinesUseResponse, type McpServerTestResponse, type McpTransport, type MeResponse, type MemberAddRequest, type MemberAddResponse, type MemberInfo, type MembersResponse, type MemoryFileInfo, type MemoryFileResponse, type MemoryFilesResponse, type MemoryImportMode, type MemoryImportRequest, type MemoryImportResponse, type MemoryOverviewResponse, type MemoryScopeExport, type MemoryScopeInfo, type MemoryTransferFile, type MessagesLiveTail, type MessagesPageInfo, type MessagesResponse, type MessagingAccount, type MessagingAccountHolder, type MessagingAccountHoldersResponse, type MessagingAccountsResponse, type MessagingBindingCommon, type MessagingBindingInfo, type MessagingBindingStateRequest, type MessagingBindingsResponse, type MessagingChannel, type MessagingChannelState, type MessagingDeliveryError, type MessagingDeliveryPatch, type MessagingRuntimeState, type MessagingRuntimeStatus, type MessagingTestMessageResponse, type MessagingUnreachableMachine, type MessagingUnreachableReason, type ModelBalanceAmount, type ModelBalanceErrorCode, type ModelBalanceFailure, type ModelBalanceReading, type ModelBalanceResponse, type ModelEffectiveConnection, type ModelInfo, type ModelOAuthCodeRequest, type ModelOAuthCodeResponse, type ModelOAuthErrorCode, type ModelOAuthMode, type ModelOAuthStartRequest, type ModelOAuthStartResponse, type ModelOAuthStatusResponse, type ModelPricingDto, type ModelProtocolDetectRequest, type ModelProtocolDetectResponse, type ModelProtocolProbeDto, type ModelRefDto, type ModelScopeAuthFlowErrorCode, type ModelScopeAuthFlowStatusResponse, type ModelScopeAuthStartResponse, type ModelTestRequest, type ModelTestResponse, type ModelUpdateEntry, type ModelVisionDetectRequest, type ModelVisionDetectResponse, type ModelVisionOutcome, type ModelsResponse, type ModelsUpdateRequest, type OrgApprovalMode, type OrgBudgetAlert, type OrgCalendarItem, type OrgCalendarOutcome, type OrgCalendarResponse, type OrgCalendarUpsertRequest, type OrgCalendarWriteResponse, type OrgChannelCreateRequest, type OrgChannelDetail, type OrgChannelItem, type OrgChannelMember, type OrgChannelMemberRequest, type OrgChannelMessage, type OrgChannelMessageSendRequest, type OrgChannelMessagesResponse, type OrgChannelNotice, type OrgChannelNoticeKind, type OrgChannelPatchRequest, type OrgChannelReadRequest, type OrgChannelsResponse, type OrgChartResponse, type OrgDeskItem, type OrgDeskResponse, type OrgEmployeeItem, type OrgEmployeePatchRequest, type OrgEmployeeState, type OrgFinanceEmployee, type OrgFinanceResponse, type OrgFinanceTicket, type OrgHandbookFile, type OrgHandbookFileResponse, type OrgHandbookFileWriteRequest, type OrgHandbookFilesResponse, type OrgHandbookResponse, type OrgHireRequest, type OrgInbox, type OrgLanguage, type OrgSessionsResponse, type OrgSpendSummary, type OrgStatus, type OrgTicketAttachRequest, type OrgTicketBlockRequest, type OrgTicketChange, type OrgTicketCreateRequest, type OrgTicketDetail, type OrgTicketHistoryAction, type OrgTicketHistoryEntry, type OrgTicketItem, type OrgTicketMoveRequest, type OrgTicketPriority, type OrgTicketProgressRequest, type OrgTicketSessionItem, type OrgTicketStartRequest, type OrgTicketStartResponse, type OrgTicketStatus, type OrgTicketUpdateRequest, type OrgTicketsResponse, type OrgTriggerKind, type OrganizationCreateRequest, type OrganizationDetail, type OrganizationPatchRequest, type OrganizationSettings, type OrganizationSummary, type OrganizationsResponse, type PasswordChangeRequest, type PendingFollowUpInfo, type PendingSteeringInfo, type PinnedBalance, type PlatformAuthFlowErrorCode, type PlatformAuthFlowStatusResponse, type PlatformAuthStartResponse, type PlatformModelSyncResponse, type PluginArchiveImportRequest, type PluginConfigActionDecl, type PluginConfigActionResponse, type PluginConfigBackend, type PluginConfigColumnGroup, type PluginConfigEntry, type PluginConfigField, type PluginConfigNewRow, type PluginConfigNotice, type PluginConfigOption, type PluginConfigPinColumn, type PluginConfigResponse, type PluginConfigRowChoice, type PluginConfigTableColumn, type PluginConfigTableRow, type PluginConfigUnavailableDecl, type PluginConfigUpdateRequest, type PluginConfiguration, type PluginFilesResponse, type PluginGroupItem, type PluginIndexEntry, type PluginIndexResponse, type PluginInstallOutcome, type PluginInstallRequest, type PluginItem, type PluginLibraryResponse, type PluginMcpServerItem, type PluginReadmeResponse, type PluginSetupKeyItem, type PluginUpdateRef, type PrefsResponse, type PresetSyncMode, type PresetSyncRequest, type PresetSyncResponse, type ProjectCreateRequest, type ProjectCreateResponse, type ProjectRole, type ProjectScheduleItem, type ProjectSchedulesResponse, type ProjectSummary, type ProjectUpdateRequest, type ProjectUpdateResponse, type ProjectsResponse, type ProtocolProbeOutcome, type ProviderConnectionDto, type ProviderConnectionUpdate, type ProxyProbeDto, type ProxyProbeOutcome, type ProxyProbeProvider, type ProxyProbeResponse, type ProxyProbeTargetDto, type ProxyProbeTargetsResponse, type QQBindingInfo, type QQBindingPutRequest, type QQBindingResponse, type QQScanPollResponse, type QQScanStartResponse, type QQTestRequest, type QQTestResponse, type QuickStartItem, type RecalledMessageResponse, type RendererRef, type RequestSpan, type RestartResponse, type RetryNowResponse, type ScheduleItem, type ScheduleServerEvent, type ScheduleStatus, type ScheduleUpsertRequest, type SchedulesResponse, type SemanticIdKind, type SemanticIdSuggestReason, type SemanticIdSuggestRequest, type SemanticIdSuggestResponse, type ServerEvent, type ServerSettings, type ServerSettingsResponse, type ServerSettingsUpdateRequest, type SessionBackgroundTasks, type SessionBatchPageRequest, type SessionBatchResult, type SessionCategory, type SessionCategoryCounts, type SessionContextParts, type SessionContextResponse, type SessionCreateRequest, type SessionCreateResponse, type SessionForkRequest, type SessionForkResponse, type SessionInfo, type SessionPatchRequest, type SessionProcessInfo, type SessionProcessesResponse, type SessionResponse, type SessionSandbox, type SessionSandboxMode, type SessionSandboxNetwork, type SessionSandboxPreset, type SessionStatus, type SessionSwitchModelRequest, type SessionTracesResponse, type SessionsBatchRequest, type SessionsBatchResponse, type SessionsResponse, type SkillArchiveInstallRequest, type SkillMetadataItem, type SshHostRequest, type SshHostResponse, type SshHostSummary, type SshHostsResponse, type SteerRequest, type StoredKeybindings, type SubagentMessageResponse, type SubagentRuntimeInfo, TICKET_SLUG_PATTERN, type TaskCreateRequest, type TaskCreateResponse, type TaskInputPart, type TelegramBindingInfo, type TelegramBindingPutRequest, type TelegramBindingResponse, type TelegramTestRequest, type TelegramTestResponse, type ToolCallSpan, type TraceAnalysisResponse, type TraceEventsResponse, type TraceFileInfo, type TraceImportRequest, type TraceImportResponse, type TraceModelSegment, type TraceOtherSpan, type TracePosition, type TraceTaskStats, type TraceToolSpan, type UiPrefs, type UnavailableSandboxBackend, type UnsatisfiedPlugin, type UpdateCheckResponse, type UpdateJobPhase, type UpdateJobStatus, type UpdateProfileRequest, type UpdateProfileResponse, type UpdateRunResponse, type UploadLimits, type UsageAgentSeries, type UsageBucket, type UsageEntitySeriesCounts, type UsageErrorCount, type UsageErrorItem, type UsageErrorKind, type UsageErrors, type UsageErrorsClearResponse, type UsageErrorsPage, type UsageGranularity, type UsageGroupBy, type UsageGroupRow, type UsageModelSeries, type UsageModelTotal, type UsageModelTotals, type UsageResponse, type UsageSeriesPoint, type UsageTrendPointInTrace, type UserInfo, type VaultEntryInfo, type VaultEntryUpdate, type VaultResponse, type VaultUpdateRequest, type VersionHistoryDiffResponse, type VersionHistoryResponse, type VersionResponse, type VersionRollbackResponse, type WeChatBindingInfo, type WeChatBindingPutRequest, type WeChatBindingResponse, type WeChatScanPollResponse, type WeChatScanStartResponse, type WeChatScanStatus, type WeChatScanVerifyRequest, type WeChatTestResponse, type WebContribution, type WorkbenchInfo, type WorkbenchRequest, type WorkbenchResponse, type WorkbenchVersion, type WorkspaceFileEntry, type WorkspaceFilesResponse, type WorkspaceSearchHit, type WorkspaceSearchResponse, apiSocketPath, sessionKindPath };

package/dist/api/types.js

@@ -1,10 +1,16 @@
 import {
+  API_SOCKET_PATH,
   MACHINE_PHASES,
-  TICKET_SLUG_PATTERN
-} from "../chunk-W7JNIJ25.js";
+  TICKET_SLUG_PATTERN,
+  apiSocketPath,
+  sessionKindPath
+} from "../chunk-HDBZRVA5.js";
 import "../chunk-B5IP37ZQ.js";
 export {
+  API_SOCKET_PATH,
   MACHINE_PHASES,
-  TICKET_SLUG_PATTERN
+  TICKET_SLUG_PATTERN,
+  apiSocketPath,
+  sessionKindPath
 };
 //# sourceMappingURL=types.js.map

package/dist/auth-token.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-G7GY7PJU.js";
 import {
   openExistingDatabase
-} from "./chunk-3SFJKLQU.js";
+} from "./chunk-HPOHMZCH.js";
 import "./chunk-B5IP37ZQ.js";
 
 // src/auth-token.ts