@prismshadow/penguin-server 0.2.9 → 0.2.10

package/dist/api/types.d.ts

@@ -370,7 +370,7 @@ interface ModelInfo {
 interface ModelsResponse {
     /** Paired reference to the default Model. */
     defaultModel?: ModelRefDto;
-    /** Vision model used as a proxy reader for read_image (describes images when the session model has vision=false). */
+    /** Vision model used as a proxy reader for read_file (describes images when the session model has vision=false). */
     visionModel?: ModelRefDto;
     /**
      * When the Project's model/credential config last changed (ISO; the config file's mtime,
@@ -416,7 +416,7 @@ interface ModelUpdateEntry {
 interface ModelsUpdateRequest {
     /** Must be included in models (matched by paired reference). */
     defaultModel?: ModelRefDto;
-    /** Vision model used as a proxy reader for read_image: must be included in models and not annotated vision=false; omitted keeps the existing value. */
+    /** Vision model used as a proxy reader for read_file: must be included in models and not annotated vision=false; omitted keeps the existing value. */
     visionModel?: ModelRefDto;
     models: ModelUpdateEntry[];
 }
@@ -708,12 +708,12 @@ interface VaultEntryUpdate {
 interface VaultUpdateRequest {
     entries: VaultEntryUpdate[];
 }
-/** One installed Skill the library carries a higher version of (see {@link AgentSummary.skillUpdates}). */
-interface SkillUpdateRef {
-    /** Skill directory name — the identity install / uninstall address it by. */
+/** One installed plugin (a skill or a hook package) the library carries a higher version of (see {@link AgentSummary.pluginUpdates}). */
+interface PluginUpdateRef {
+    /** Plugin name — what `POST …/plugins` reinstalls to bring the Agent up to date. */
     name: string;
-    /** The LIBRARY's version, i.e. what installing again would bring, not what is on disk. */
-    version: number;
+    /** The LIBRARY's version (`YYYY.MM.DD.N`), i.e. what installing again would bring, not what is on disk. */
+    version: string;
 }
 interface AgentSummary {
     agentId: string;
@@ -740,14 +740,17 @@ interface AgentSummary {
     scheduleCount: number;
     /** Installed Skill count (number of agent_state/skills/<name>/ directories with a SKILL.md). */
     skillCount: number;
-    /**
-     * Installed Skills the built-in library has moved past, each with the library version on
-     * offer — the Skill-library update gate, riding along on the Agent list so a badge over
-     * that page costs no request of its own. Empty when nothing is behind. Skills that are not
-     * in the library (installed from a zip or a picked directory) are never listed: there is no
+    /** Installed hook-package count (number of agent_state/hooks/<name>/ directories with a hooks.json). */
+    hookCount: number;
+    /**
+     * Installed plugins the built-in library has moved past — a skill or a hook package whose
+     * on-disk version is behind the library plugin that ships it — each with the library version
+     * on offer: the plugin-library update gate, riding along on the Agent list so a badge over
+     * that page costs no request of its own. Empty when nothing is behind. Skills the library
+     * does not carry (installed from a zip or a picked directory) are never listed: there is no
      * library version for them to be behind.
      */
-    skillUpdates: SkillUpdateRef[];
+    pluginUpdates: PluginUpdateRef[];
     /** Memory count (topic files summed over the scope directories under agent_state/memory/, independent of the memory switch). */
     memoryCount: number;
 }
@@ -761,11 +764,12 @@ interface AgentCreateRequest {
     name?: string;
     description?: string;
     /**
-     * Library Skill names installed into the new Agent, seeding it at creation. Every name must
-     * exist in the library (404 `unknown_skill` otherwise, before anything is created); omitted or
-     * empty leaves the Agent with no Skills, which is what a plain Agent gets by default.
+     * Library plugin names installed into the new Agent, seeding it at creation — each plugin's
+     * skills and hook package. Every name must exist in the library (404 `unknown_plugin`
+     * otherwise, before anything is created); omitted or empty leaves the Agent with nothing
+     * installed, which is what a plain Agent gets by default.
      */
-    skills?: string[];
+    plugins?: string[];
     /**
      * Skills imported from a directory on disk instead of the library. `skillsDirectory` is the
      * absolute path the user picked and `directorySkills` are the names to install from it, read
@@ -778,7 +782,7 @@ interface AgentCreateRequest {
     /**
      * Base64 of an exported Agent State snapshot package (`.tar.gz`): the new Agent is
      * initialized from the package instead of the default template. Mutually exclusive with
-     * skill seeding (`skills` / `skillsDirectory`) — the package carries its own skills.
+     * seeding (`plugins` / `skillsDirectory`) — the package carries its own skills and hooks.
      * Explicit `name` / `description` override the package's values; absent ones keep them.
      */
     dataBase64?: string;
@@ -840,6 +844,16 @@ interface AgentSchedulesConfigDto {
     /** Whether the stored template carries `{{SCHEDULES}}`; POST …/schedules/template-placeholder inserts it explicitly. */
     templateHasPlaceholder: boolean;
 }
+/**
+ * Hook config, edited on the Hooks tab. One Agent-level switch and no prompt: hook packages
+ * are scripts run at the loop's hook points, not text injected into the context. `enabled`
+ * reports the effective value (a config with no `hooks` section reads as enabled, matching
+ * core).
+ */
+interface AgentHooksConfigDto {
+    /** Whether a Session created from now on runs the installed hook packages (they stay installed either way). */
+    enabled: boolean;
+}
 /** Structured view of system_config.yaml (for the edit form). */
 interface AgentConfigDto {
     name?: string;
@@ -860,6 +874,7 @@ interface AgentConfigDto {
     vault: AgentVaultConfigDto;
     skills: AgentSkillsConfigDto;
     schedules: AgentSchedulesConfigDto;
+    hooks: AgentHooksConfigDto;
     toolsBuiltin: ToolDefinitionConfig[];
     mcpServers: MCPServerConfig[];
 }
@@ -919,6 +934,10 @@ interface AgentConfigUpdateRequest {
             enabled?: boolean;
             prompt?: string;
         };
+        /** The Agent-level hook switch; it has no prompt half. */
+        hooks?: {
+            enabled?: boolean;
+        };
         toolsBuiltin?: ToolDefinitionConfig[];
         mcpServers?: MCPServerConfig[];
     };
@@ -1044,10 +1063,12 @@ interface SessionInfo {
     approvalMode: ApprovalMode;
     /**
      * Thinking level pinned for this Session (set via PATCH; the Web App's in-chat picker).
-     * Unset = never pinned: runs that carry no level of their own fall back to the Agent
-     * config's `model.thinking_level`, so config edits keep taking effect. Once pinned it
-     * survives reloads and applies to every later run of this Session, and an Agent-config
-     * change no longer moves it.
+     * Unset = never pinned: each model context the Session opens reads the Agent config's
+     * `model.thinking_level`, so config edits keep taking effect. Once pinned it survives
+     * reloads and applies from the Session's very next LLM request — the thinking level is
+     * the soft-limited runtime parameter, changeable mid-context at the cost of the
+     * provider's cached context (the picker advises compacting first) — and every later
+     * context opens at it; an Agent-config change no longer moves it.
      */
     thinkingLevel?: ThinkingLevelName;
     /** Short title auto-generated by the model after the first turn; unset until generated (frontend shows "New Chat"). */
@@ -1090,6 +1111,23 @@ interface SessionInfo {
     tracePath?: string;
     /** Present when the Session has an ENABLED messaging binding: its channel (the sidebar row's per-channel indicator). */
     messagingChannel?: MessagingChannel;
+    /**
+     * Background work the Session's loaded runtime still owns: command sessions running past
+     * their yield window (`exec_command` promotions and `run_in_background` launches) and
+     * background subagent sessions mid-round. Read from the runtime's in-memory registries —
+     * no Trace is consulted — and present only while at least one count is non-zero, so a
+     * Session that is not loaded (a resumed entry starts with empty registries) and one with
+     * nothing running both omit it. Changes are pushed as `session_background` on the user
+     * channel; list rows and the single-session GET carry the same field.
+     */
+    backgroundTasks?: SessionBackgroundTasks;
+}
+/** The background-task counts of one Session (see SessionInfo.backgroundTasks). */
+interface SessionBackgroundTasks {
+    /** Background command sessions whose process is still running. */
+    processes: number;
+    /** Background subagent sessions (promoted to a `subagent_id`) currently mid-round. */
+    subagents: number;
 }
 /**
  * Session list category, the sidebar's four-way split applied server-side: archived wins
@@ -1110,6 +1148,13 @@ interface SessionsResponse {
      * content that lives in other Workspaces.
      */
     workspaceCounts?: Record<string, SessionCategoryCounts>;
+    /**
+     * Present with `counts`: each Workspace path's newest Session (any category), as its
+     * `createdAt`. With `workspaceCounts` this is what lets the sidebar list every Workspace
+     * that holds Sessions and place the groups by recency before — or without — loading any
+     * of their rows.
+     */
+    workspaceLatest?: Record<string, string>;
 }
 /** Server directory browsing (advanced new-Workspace picker): starts from the home directory by default, can navigate up to the root. */
 interface DirEntryInfo {
@@ -1184,9 +1229,10 @@ interface SessionPatchRequest {
     approvalMode?: ApprovalMode;
     /**
      * Pin this Session's thinking level (`none | low | medium | high | xhigh | max`, anything else
-     * is a 400). It applies to every later run of the Session that doesn't carry its own
-     * level, and replaces the Agent-config fallback for this Session. There is no unpin:
-     * the picker only offers concrete levels.
+     * is a 400). It replaces the Agent-config fallback for this Session and applies from the
+     * very next LLM request — soft-limited: a mid-context change is allowed, at the cost of
+     * the provider's cached context, which is why the picker advises compacting first. There
+     * is no unpin: the picker only offers concrete levels.
      */
     thinkingLevel?: ThinkingLevelName;
     /** Archive / unarchive (default list hides archived). */
@@ -1250,6 +1296,14 @@ interface MessagesPageInfo {
     prior: {
         subagentTokens: number;
         elapsedMs: number;
+        /**
+         * Model-API time and tool wall time accrued before this window, the breakdown of
+         * `elapsedMs` the chat header shows under it. Seeded together with their total: seeding
+         * one alone would put a full elapsed time beside components covering only the window.
+         * The two may overlap and do not partition `elapsedMs` (see `TraceTaskStats.toolMs`).
+         */
+        apiMs: number;
+        toolMs: number;
         sessionTokens: number;
         contextTokens: number;
     };
@@ -1307,14 +1361,6 @@ type TaskInputPart = {
 };
 interface TaskCreateRequest {
     input: TaskInputPart[];
-    /**
-     * Thinking level for this Task's LLM requests (a per-turn parameter; one of
-     * `none | low | medium | high | xhigh | max`, anything else is a 400). Omitted = falls back to
-     * the Session's pinned level (`SessionInfo.thinkingLevel`) and, when that is unset too,
-     * to the Agent config's `model.thinking_level`. A queued follow-up (`queueIfBusy`) keeps
-     * its level and applies it when it auto-starts.
-     */
-    thinkingLevel?: ThinkingLevelName;
     /**
      * Queue instead of 409 when a Task/compaction is already in progress: the input is held
      * server-side and auto-starts as an ordinary next task once the session returns to idle
@@ -1324,14 +1370,16 @@ interface TaskCreateRequest {
     /**
      * Present = goal mode: the input's text becomes the objective (leading `[use_skills]`
      * blocks and the like are stripped from the recorded objective; the round-1 message keeps
-     * them) and the server loops the Session until the goal reaches a terminal state.
-     * `budget` is the token budget (uncached input + output); omitted or -1 = unlimited.
+     * them) and the Session's installed `goal` hook package drives round after round until the
+     * goal reaches a terminal state. `budget` is the token budget (uncached input + output);
+     * omitted or -1 = unlimited. Requires the goal plugin installed on the Agent — 409
+     * `goal_plugin_not_installed` otherwise.
      */
     goal?: {
         budget?: number;
     };
 }
-/** Goal-mode run state (from goal_state; the chat page's banner restores from the latest row). */
+/** Goal-mode run state, read from the Session's GOAL.json — the goal plugin's file (the chat page's banner restores from it; a live status on an idle Session reads as `aborted`). */
 interface GoalStateView {
     objective: string;
     status: "active" | "complete" | "blocked" | "budget_limited" | "aborted";
@@ -1339,7 +1387,6 @@ interface GoalStateView {
     budget: number;
     used: number;
     rounds: number;
-    updatedAt: string;
 }
 interface GoalResponse {
     /** The Session's most recent goal run; null if it never ran one. */
@@ -1455,8 +1502,6 @@ interface RecalledMessageResponse {
         fileName: string;
         dataUrl: string;
     }[];
-    /** Follow-up recall only: the per-turn thinking level the entry was queued with, when one was. */
-    thinkingLevel?: ThinkingLevelName;
 }
 interface ApprovalDecisionRequest {
     decision: "allow" | "deny";
@@ -2002,6 +2047,13 @@ type ServerEvent =
     queued?: number;
     /** Steering messages queued but not yet delivered (absent = none): lets the composer's hint and its content survive reloads. */
     pendingSteering?: PendingSteeringInfo[];
+    /**
+     * Steering the run ended without delivering (absent = none) — an interrupt while a tool
+     * was running is the ordinary way to produce one. Handed back rather than discarded: the
+     * composer recalls each by the same handle and restores it into the draft, so the typed
+     * message returns to the input box instead of being lost.
+     */
+    returnedSteering?: PendingSteeringInfo[];
     /** Queued follow-up tasks awaiting auto-start (absent = none): per-entry content + recall handle, alongside the `queued` count. */
     pendingFollowUps?: PendingFollowUpInfo[];
     /**
@@ -2043,6 +2095,19 @@ type ServerEvent =
     lastActiveAt: string;
     hasTrace: boolean;
 }
+/**
+ * A Session's background-task counts changed: a command promoted to the background, a
+ * process that exited or was stopped, a background subagent starting or settling a round,
+ * a released session. The counts are the row's `backgroundTasks` as they stand after the
+ * change — zeros included, so a list can clear its mark without refetching. Published to
+ * the user channels of the Project's owner and members, like `session_state`.
+ */
+ | {
+    type: "session_background";
+    sessionId: string;
+    processes: number;
+    subagents: number;
+}
 /** Last-Event-ID has been evicted from the buffer: the frontend should re-fetch the history endpoint before continuing to consume this connection. */
  | {
     type: "resync_required";
@@ -2133,6 +2198,24 @@ interface ContextToolShare {
     name: string;
     tokens: number;
 }
+/**
+ * One file's share of the context: its `read_file` / `edit_file` / `write_file` calls plus their
+ * results, keyed by the file each call named.
+ */
+interface ContextFileShare {
+    /**
+     * Workspace-relative when the file is inside the Session's Workspace; otherwise absolute, with
+     * the home directory shortened to `~`. Spellings that resolve to the same file are one row.
+     */
+    path: string;
+    tokens: number;
+    /** How many calls of each file tool named the file in this context. */
+    ops: {
+        read: number;
+        edit: number;
+        write: number;
+    };
+}
 /**
  * What the Session's current model context is made of — the part derived from its messages.
  *
@@ -2143,7 +2226,8 @@ interface ContextToolShare {
  *
  * The six parts partition the context and sum to `total`; `topTools` is a ranking inside
  * `toolRequests + toolResults` and can sum to less than those two (a result whose call was not
- * recorded in the same Trace shard has no tool to be attributed to).
+ * recorded in the same Trace shard has no tool to be attributed to). `topFiles` is the same
+ * ranking narrowed to the three file tools and keyed by the file each call named.
  */
 interface SessionContextParts {
     systemPrompt: number;
@@ -2156,6 +2240,8 @@ interface SessionContextParts {
     total: number;
     /** Tools ranked by the context their traffic occupies, descending; at most five. */
     topTools: ContextToolShare[];
+    /** Files ranked by the context their file-tool traffic occupies, descending; at most five. */
+    topFiles: ContextFileShare[];
     /**
      * A completed compaction closed the context these figures describe, and the next one has not
      * been written yet: the composition is of what was compacted away, not of what the model now
@@ -2275,6 +2361,16 @@ interface TraceTaskStats {
         cacheWrite: number;
         output: number;
     };
+    /**
+     * This turn's cost in USD: each Request's three buckets at the Project's current rates for
+     * the file's model, at the tier that Request's own timestamp fell in — the rule and the
+     * price lookup the cost center applies to the usage row the same `token_usage` produced,
+     * so this figure, the toolbar's and the cost center's agree on what a request cost. Present
+     * on every turn of a priced file (a turn with no Request reads 0); absent when the model has
+     * no pricing or the file's head names no provider, and then absent from the response's
+     * total as well.
+     */
+    cost?: number;
     /**
      * Total LLM generation duration for this turn (the denominator for output TPS; human
      * approval wait already deducted). The numerator is simply `tokens.output`: since
@@ -2282,6 +2378,21 @@ interface TraceTaskStats {
      * output — there's no second figure to reconcile.
      */
     llmMs: number;
+    /**
+     * Wall-clock time this turn spent executing tools: the **union** of its tool spans'
+     * execution intervals (`approvalTs ?? callTs` to `outputTs`), so tools running in parallel
+     * are counted once instead of summed. Two exclusions, both deliberate: the human approval
+     * wait (`callTs` to `approvalTs`) is not tool work, and the argument-generation segment is
+     * the model streaming arguments, already counted in `llmMs`. A span with no `outputTs` —
+     * still running when the file ended, or interrupted — contributes nothing rather than being
+     * extrapolated to now.
+     *
+     * This and `llmMs` may **overlap**: a tool started in the background keeps running while the
+     * model decodes. They are two measured components of the turn's duration, not a partition of
+     * it, and they need not add up to the turn's span (approval waits and harness overhead belong
+     * to neither). Never derive one by subtracting the other from the duration.
+     */
+    toolMs: number;
 }
 /** Duration span of a single tool call (complete tool_call message → paired tool_call_output). */
 interface ToolCallSpan {
@@ -2304,6 +2415,21 @@ interface WorkspaceFilesResponse {
     path: string;
     entries: WorkspaceFileEntry[];
 }
+/** Write one Workspace file whole (the Upload button, a drop, and the Files panel's editor). */
+interface FilesWriteRequest {
+    /** The entire file, base64-encoded (≤14MB decoded). */
+    dataBase64: string;
+    /**
+     * Write precondition: the version marker the caller read off this file's `ETag` on
+     * `GET files/content`. The server compares it against the file's state immediately
+     * before writing and answers 409 `file_changed` — having written nothing — when they
+     * differ, which is what stops the editor's save from quietly dropping what the Agent
+     * wrote during the turn. Omitted by a caller that read no version (an upload creates or
+     * replaces unconditionally); that absence, not a sentinel value, is what says there was
+     * no prior version to match.
+     */
+    ifVersion?: string;
+}
 /** Batch file existence check (message file cards only list files that actually exist). */
 interface FilesStatRequest {
     /** Paths relative to the Workspace root (≤100 items, each ≤512 characters). */
@@ -2375,6 +2501,23 @@ interface TraceAnalysisResponse {
      * frontend's events are paginated, so self-aggregation would undercount.
      */
     elapsedMs: number;
+    /**
+     * The file's model-API time: the sum of the turns' `llmMs` (human approval wait deducted,
+     * compaction requests included, so the scope matches `elapsedMs`).
+     */
+    apiMs: number;
+    /**
+     * The file's tool wall time: the sum of the turns' `toolMs` (parallel tools counted once
+     * within a turn). Summed per turn rather than unioned across the file, so the global figure
+     * stays the sum of the per-turn figures, exactly as `elapsedMs` is. May overlap `apiMs` —
+     * see `TraceTaskStats.toolMs`.
+     */
+    toolMs: number;
+    /**
+     * The file's cost in USD: the sum of the turns' `cost` (compaction turns included, the
+     * scope every total here shares). Absent exactly when the turns carry no `cost`.
+     */
+    cost?: number;
     requests: RequestSpan[];
     /** Token / duration aggregated per Task (used directly by the Trace page's context ring and per-turn TPS). */
     tasks: TraceTaskStats[];
@@ -2577,16 +2720,8 @@ interface UsageErrorItem {
  * items.
  */
 interface UsageErrors {
+    /** Filtered row count — also what a clear of the same filter takes (see {@link UsageErrorsClearResponse}). */
     total: number;
-    /**
-     * How many of {@link total} a clear would actually take (see {@link UsageErrorsClearResponse}).
-     *
-     * The same as `total` for an ordinary member, and smaller for an admin, whose reads include
-     * unattributed rows that no Project-scoped clear removes. The confirmation is the only place
-     * this matters, and it is the place it matters most: an irreversible delete has to name the
-     * number that will really go, not the number on screen.
-     */
-    clearable: number;
     /** Count of unexpected ones (500 / runtime exceptions) among them — the part the frontend highlights. */
     unexpected: number;
     /** The most frequent source · code (null when there are no errors). */
@@ -2598,8 +2733,9 @@ interface UsageErrors {
  * GET /api/projects/:projectId/usage/errors — one page of the error detail table, newest
  * first. The dashboard response above already carries the first page; this exists so
  * "show me earlier ones" does not have to refetch the whole aggregate. It takes the same
- * date/agent filter as the dashboard, so a page never widens what the summary counted, plus
- * an optional `kind` ({@link UsageErrorKind}) narrowing to one of the two categories — which
+ * date/agent filter as the dashboard (`fromTs`/`toTs` narrow it to a trailing window, both
+ * or neither), so a page never widens what the summary counted, plus an optional `kind`
+ * ({@link UsageErrorKind}) narrowing to one of the two categories — which
  * is how the cost-center badge asks "are there unexpected errors, and how new is the newest"
  * with `limit=1` instead of pulling the whole dashboard aggregate.
  */
@@ -2610,11 +2746,15 @@ interface UsageErrorsPage {
 }
 /**
  * DELETE /api/projects/:projectId/usage/errors — empties the error table for the filter the
- * panel is showing (its date range and Agent), Project owner only.
+ * panel is showing (its date range, the trailing window when one is on, and Agent), Project
+ * owner only.
  *
  * Scoped to the filter rather than the Project's whole history, so a clear takes exactly the
- * rows on screen. Errors with no Project attribution are never included, whoever asks: they
- * belong to no Project and are surfaced in every Project's admin view.
+ * rows on screen — for an admin, the unattributed rows an admin's panel shows included; a
+ * member's panel never shows them and a member's clear never takes them.
+ *
+ * `from` and `to` are both required (400 otherwise), where the reads treat them as optional:
+ * an absent bound is unbounded on that side, which is the whole history rather than a filter.
  */
 interface UsageErrorsClearResponse {
     /** How many rows were deleted, so the caller can say what went instead of guessing. */
@@ -2795,31 +2935,99 @@ interface SkillMetadataItem {
     /** Short description for frontend display (frontmatter short_description, optional; falls back to description if missing). */
     shortDescription?: string;
     shortDescriptionZh?: string;
-    /** Custom icon (raw icon.svg text from the skill directory, optional; frontend falls back to a default book icon if missing). */
+    /**
+     * Raw icon.svg text from the installed skill directory: the plugin's icon for a library
+     * install (written beside SKILL.md at install time), a custom one for a user-authored skill.
+     * Only installed lists carry it — the library listing's skills share their plugin's icon,
+     * which the plugin item carries once. Absent, the frontend draws the book glyph.
+     */
     icon?: string;
-    /** Version number (natural number, frontmatter version; falls back to 1 if invalid). */
-    version: number;
-    /** Update timestamp (frontmatter updated, ISO 8601 UTC by convention; defaults to an empty string). */
-    updated: string;
+    /** Version (`YYYY.MM.DD.N`, frontmatter version; a copy installed before that spelling still carries `YYYY-MM-DD.N`); an empty string when the frontmatter carries none or a malformed one. */
+    version: string;
 }
-interface SkillGroupItem {
+/** One installed hook package (`agent_state/hooks/<name>/`): its manifest, without the scripts. */
+interface HookItem {
+    /** Hook package name — the plugin that shipped it (the identity uninstall addresses it by). */
+    name: string;
+    description: string;
+    descriptionZh?: string;
+    /** Version (`YYYY.MM.DD.N`; a copy installed before that spelling still carries `YYYY-MM-DD.N`); an empty string when the manifest carries none. */
+    version: string;
+    /** The hook points the package answers at, e.g. `["stop"]`. */
+    events: string[];
+    /** The plugin's raw icon.svg, written beside the manifest at install time; absent when the plugin ships none (the frontend draws the hook glyph). */
+    icon?: string;
+}
+/** One library plugin as the listing describes it: the manifest fields plus what it ships (skill bodies and scripts are never sent). */
+interface PluginItem {
+    name: string;
+    description: string;
+    descriptionZh?: string;
+    shortDescription?: string;
+    shortDescriptionZh?: string;
+    /** `YYYY.MM.DD.N`. */
+    version: string;
+    /** The plugin's skills (metadata only). */
+    skills: SkillMetadataItem[];
+    /** The hook points the plugin's hook package answers at (`[]` without one). */
+    hooks: string[];
+    /** The plugin's raw icon.svg (beside plugin.json — every built-in plugin ships one), the icon of everything it ships; the frontend draws the puzzle-piece plugin glyph without it. */
+    icon?: string;
+}
+interface PluginGroupItem {
     id: string;
     title: string;
-    /** Chinese group title (optional; the UI displays it per language). */
+    /** Chinese category title (optional; the UI displays it per language). */
     titleZh?: string;
-    skills: SkillMetadataItem[];
+    plugins: PluginItem[];
+}
+/** GET /api/plugins: the library by category (any logged-in user). */
+interface PluginLibraryResponse {
+    groups: PluginGroupItem[];
 }
-/** GET /api/skills: library groups and metadata (excludes body content). */
-interface SkillLibraryResponse {
-    groups: SkillGroupItem[];
+/**
+ * GET /api/plugins/:plugin/files: everything a library plugin ships, for the detail view's file
+ * browser — each skill's installable SKILL.md and auxiliary files under `skills/<name>/`, the
+ * hook package's scripts under `hooks/` — keyed by path relative to the plugin directory. The
+ * manifest and the icon are not among them: the listing already carries both.
+ */
+interface PluginFilesResponse {
+    files: Record<string, string>;
 }
-/** GET|POST /api/projects/:p/agents/:a/skills: Skills installed on this Agent. */
+/**
+ * POST /api/projects/:p/agents/:a/plugins: install library plugins by name — each one's skills
+ * and hook package; already-installed ones are overwritten with library content (i.e. updated).
+ * Every name must be in the library (404 `unknown_plugin`, nothing written). 201 returns the
+ * refreshed installed lists.
+ */
+interface PluginInstallRequest {
+    names: string[];
+}
+interface AgentPluginsInstallResponse {
+    skills: SkillMetadataItem[];
+    hooks: HookItem[];
+}
+/** GET /api/projects/:p/agents/:a/skills: Skills installed on this Agent. */
 interface AgentSkillsResponse {
     skills: SkillMetadataItem[];
 }
-/** POST install request: all names must exist in the library; already-installed ones are overwritten with library content (i.e. updated). */
-interface SkillInstallRequest {
-    names: string[];
+/** GET /api/projects/:p/agents/:a/hooks: hook packages installed on this Agent; DELETE …/hooks/:name uninstalls one (204). */
+interface AgentHooksResponse {
+    hooks: HookItem[];
+}
+/**
+ * POST /api/projects/:p/agents/:a/hooks/archive: install one hook package from an uploaded zip.
+ * Layout: hooks.json and its scripts at the zip root, or exactly one top-level directory
+ * containing them (the directory name is then the package name). 201 returns the refreshed
+ * installed list (AgentHooksResponse); an already-installed name without `overwrite` is 409
+ * `hook_exists`. GET …/hooks/:name/archive is the matching export: the installed directory as
+ * a zip attachment, which round-trips through this POST.
+ */
+interface HookArchiveInstallRequest {
+    /** Base64-encoded zip archive (decoded size capped at 14MB, like the skill archive). */
+    dataBase64: string;
+    /** Replace an installed package of the same name instead of answering 409. */
+    overwrite?: boolean;
 }
 /**
  * POST /api/projects/:p/agents/:a/skills/archive: install one Skill from an uploaded zip.
@@ -2870,7 +3078,9 @@ interface UpdateCheckResponse {
  * utilityProcess message channel and served at GET /api/desktop/update. `state` is the
  * discriminator; the optional fields belong to the states named on them.
  *
- * A `downloaded` build stays the reported state until it is installed: a later periodic
+ * The shell never downloads on its own: a check ends in `available`, and the download
+ * starts only on the page's (or the native dialog's) say-so — the `download` command. A
+ * `downloaded` build stays the reported state until it is installed: a later periodic
  * check (or its failure) must not hide the actionable "restart to install" step.
  */
 interface DesktopUpdateStatus {
@@ -2883,8 +3093,8 @@ interface DesktopUpdateStatus {
      * carry that signal (a check that ends where it started is byte-identical).
      */
     seq?: number;
-    state: "idle" | "checking" | "up-to-date" | "downloading" | "downloaded" | "error" | "unsupported";
-    /** Newer release being fetched / ready to install (`downloading`, `downloaded`). */
+    state: "idle" | "checking" | "up-to-date" | "available" | "downloading" | "downloaded" | "error" | "unsupported";
+    /** The newer release: offered (`available`), being fetched (`downloading`) or ready to install (`downloaded`). */
     version?: string;
     /** Download progress 0–100 (`downloading`). */
     percent?: number;
@@ -2905,15 +3115,19 @@ interface DesktopUpdaterStatusMessage {
     type: "desktop-updater-status";
     status: DesktopUpdateStatus;
 }
-/** Server → shell command over the utilityProcess message channel (relayed from POST /api/desktop/update/check|install). */
+/**
+ * Server → shell command over the utilityProcess message channel (relayed from
+ * POST /api/desktop/update/check|download|install): look for a release, fetch the one
+ * offered, or restart into the one downloaded.
+ */
 interface DesktopUpdaterCommandMessage {
     type: "desktop-updater-command";
-    action: "check" | "install";
+    action: "check" | "download" | "install";
 }
 /**
- * POST /api/version/update (admin only): runs the CLI self-update (`penguin update --yes`)
- * on the server host. `unsupported` covers both a server not launched via the CLI and the
- * CLI's own refusals (source checkout, unrecognized install layout, Windows).
+ * The outcome of one self-update run (`penguin update --yes` on the server host), carried
+ * by {@link UpdateJobStatus.result}. `unsupported` covers both a server not launched via
+ * the CLI and the CLI's own refusals (source checkout, unrecognized install layout, Windows).
  */
 interface UpdateRunResponse {
     status: "updated" | "failed" | "unsupported";
@@ -2924,6 +3138,44 @@ interface UpdateRunResponse {
     /** True when the install changed (or was already current): restart the service to run the new version. */
     needsRestart: boolean;
 }
+/**
+ * Where a running self-update is: resolving the release and fetching the installer,
+ * downloading the bundle (the one phase with a percentage), or verifying and installing it.
+ */
+type UpdateJobPhase = "resolving" | "downloading" | "installing";
+/**
+ * GET / POST /api/version/update (admin only): the self-update job. POST starts a run when
+ * none is in flight — a finished run may be started again, which is how a failed one is
+ * retried — and answers with the status exactly as GET does; the page polls GET while
+ * `state` is `running`. One job per process: two admins clicking at once share the one run,
+ * and the finished status stays readable until the next start.
+ */
+interface UpdateJobStatus {
+    state: "idle" | "running" | "done";
+    /** The release the run targets — the update check's newest version when the run started; null when none was known. */
+    targetVersion: string | null;
+    /** Running only. */
+    phase?: UpdateJobPhase;
+    /** Running, `downloading` only: 0–100 read off the installer's progress bar; null until its first tick. */
+    percent?: number | null;
+    /** Tail of the update command's combined stdout+stderr so far (capped; empty when nothing ran). */
+    output: string;
+    /** Done only. */
+    result?: UpdateRunResponse;
+    startedAt?: string;
+    finishedAt?: string;
+}
+/**
+ * POST /api/version/restart (admin only): asks the process to exit with the supervisor's
+ * restart code after a graceful shutdown, so `penguin server|web` relaunches it on the
+ * installed release. `restarting: false` when nothing supervises this process — it was
+ * started some other way than through the CLI, or it is a dev run — and the page shows the
+ * manual restart hint instead.
+ */
+interface RestartResponse {
+    restarting: boolean;
+    reason?: "no_supervisor";
+}
 /** One `Host` entry of the server's `~/.ssh/config`, as the Machines page lists it. */
 interface MachineInfo {
     /** `ssh:<alias>` — the id the install route is asked for. */
@@ -2935,9 +3187,9 @@ interface MachineInfo {
      */
     alias: string;
     /**
-     * The last install THIS server carried out there, remembered on disk so it survives a
-     * restart, a hot push, and installing on some other machine. Null when this server has
-     * never installed there.
+     * The last install THIS server carried out there FOR THIS PROJECT, remembered in web.db so
+     * it survives a restart, a hot push, and installing on some other machine. Null when this
+     * Project has never installed there — a host another Project did is `elsewhere` below.
      *
      * A record of what was done, not a survey of the far side: a machine wiped by hand still
      * reads as installed until the next install probes it and corrects the record. Asking the
@@ -2948,25 +3200,112 @@ interface MachineInfo {
         version: string;
         at: string;
     } | null;
+    /**
+     * Installed by this server, but not this Project's machine — another Project's, or nobody's
+     * since it was released — and so not a host nobody has touched either. Absent in every
+     * other case, including when it IS this Project's (where `installed` carries the same record).
+     *
+     * Reported rather than folded into `installed` because the two lead to different actions:
+     * one is a machine to use, the other is a machine to adopt, which costs a row and no ssh.
+     * Reported rather than hidden because a row that silently looked uninstalled would send
+     * someone to spend a 30 MB transfer re-doing what is already done.
+     */
+    elsewhere?: {
+        version: string;
+        at: string;
+    };
+    /**
+     * The machine's OWN id — 16 base64url characters minted by the server that runs there,
+     * stable across renames, re-aliasing and reinstalls. Null until a server has started on
+     * that machine, since nothing has minted one yet.
+     *
+     * This is what anything stored should point at; `id` above is an ADDRESS (`ssh:<alias>`),
+     * and `alias` is what people read. Two aliases for one host share a `machineId`, and an
+     * alias repointed at a different host answers a different one — an id never changes for a
+     * machine, so a change of id is a change of machine.
+     */
+    machineId: string | null;
+    /** The host this server itself runs on. Always present, always installed, never a target. */
+    local: boolean;
+    /**
+     * The connection this server holds to it — the one ssh session everything to the machine
+     * rides (machines/transport/ssh-session.ts): a fact about a process on THIS side, which
+     * outlives the far server. Present means `/server/<id>/api/…` has somewhere to go; whether
+     * a server ANSWERS over there is `status`'s word, from the last probe — and the two must not
+     * be read for each other: taking the connection for the machine's liveness is the mistake
+     * behind the connect loop (#561). Always null for `local`, which needs no connection.
+     */
+    connection: {
+        pid: number;
+    } | null;
+    /**
+     * The machine's API as last seen by this server's proxy — stamped by traffic passing
+     * through, never by a probe of its own. `answeredAt` when the last forwarded request got
+     * an HTTP answer (any status: a server that refuses is still answering); `failedAt` and
+     * the transport's own words when the connection had nowhere to deliver. Null until a first
+     * request flows, and only as fresh as the last one — no traffic, no measurement, which is
+     * honest: nothing burns ssh for a page nobody is looking at. Always null for `local`;
+     * this server answering the request that fetched this list is that measurement.
+     */
+    api: {
+        answeredAt: string;
+    } | {
+        failedAt: string;
+        detail: string;
+    } | null;
+    /**
+     * What the last probe found over there, or null when none has been taken. Never filled in
+     * at list time: a probe costs an ssh round trip per machine, so the list reports the last
+     * answer and the page asks for a fresh one when it wants one — on a widening schedule,
+     * since each probe is an ssh round trip while the list is only the config's text.
+     */
+    status: MachineServerStatus | null;
 }
 /**
- * The running or last install, polled by GET /api/machines while one runs. `log` carries the
- * far side's own words where there are any: ssh's diagnostics and the remote installer's
- * output say more about a refused key or an unusable Node than a paraphrase would.
+ * One machine's server state. There is deliberately no separate "ssh" status: ssh is the
+ * transport, so a machine it cannot reach reads as `unreachable` with OpenSSH's own
+ * diagnostic in `detail` rather than as two statuses a reader has to combine.
  */
-interface MachineInstallJob {
+interface MachineServerStatus {
+    state: "running" | "stopped" | "unreachable";
+    /** ISO timestamp of the probe this answer came from. */
+    checkedAt: string;
+    /** The port it is serving on (`running`). */
+    port?: number;
+    /** Why the machine could not be reached (`unreachable`) — ssh's own words. */
+    detail?: string;
+}
+/**
+ * The running or last job on a machine — an install, or a connect — polled by GET
+ * /api/machines while one runs. One at a time. `log` carries the far side's own words where
+ * there are any: ssh's diagnostics and the remote installer's output say more about a
+ * refused key or an unusable Node than a paraphrase would.
+ */
+interface MachineJob {
+    kind: "install" | "connect" | "restart";
     machineId: string;
     alias: string;
     running: boolean;
     log: string[];
     result: null | {
         ok: true;
-        kind: "installed" | "already-installed";
+        installed: "installed" | "already-installed";
         version: string | null;
+    } | {
+        ok: true;
+        connected: true;
     } | {
         ok: false;
         step: string;
         message: string;
+        /**
+         * The failure has a next step this side can take, and it needs saying yes to:
+         * installing the PROGRAM over there and restarting it. Set when a hot update could
+         * not be handed over — the machine's store holds no CLI this server can talk to, and
+         * installing is what replicates one. Offered rather than done, because it restarts a
+         * server this Project does not own alone.
+         */
+        canReplaceProgram?: true;
     };
 }
 /** GET /api/machines, and the 202 body of POST /api/machines/:machineId/install. */
@@ -2978,7 +3317,7 @@ interface MachinesResponse {
      * checkout, which stands on no release the remote could download.
      */
     imageVersion: string | null;
-    job: MachineInstallJob | null;
+    job: MachineJob | null;
 }
 
-export type { AdminPasswordResetRequest, AdminUserCreateRequest, AdminUserCreateResponse, AdminUsersResponse, AgentCompactionConfigDto, AgentConfigDto, AgentConfigResponse, AgentConfigUpdateRequest, AgentCreateRequest, AgentCreateResponse, AgentImportRequest, AgentImportResponse, AgentKernelUpdateResponse, AgentMemoryConfigDto, AgentModelConfigDto, AgentSchedulesConfigDto, AgentSkillsConfigDto, AgentSkillsResponse, AgentSummary, AgentTraceDateGroup, AgentTraceFileRef, AgentTraceSessionEntry, AgentTraceSessionFile, AgentTraceSessionGroup, AgentTracesResponse, AgentVaultConfigDto, AgentsResponse, ApprovalDecisionRequest, ApprovalMode, AuthLoginRequest, AuthResponse, BenchmarkCaseScore, BenchmarkCaseSummary, BenchmarkCasesResponse, BenchmarkEvaluation, BenchmarkRunScore, BenchmarkSummary, BenchmarksResponse, CaseMaterial, ChatDefaultsDto, CommandPolicyDto, CommandPolicyRuleDto, ContextToolShare, CredentialInfo, DefaultModelResponse, DefaultModelUpdateRequest, DesktopUpdateStatus, DesktopUpdateStatusResponse, DesktopUpdaterCommandMessage, DesktopUpdaterStatusMessage, DirEntryInfo, DirListResponse, DirectorySkillItem, DirectorySkillsResponse, DraftShortcut, EndpointModelListRequest, EndpointModelListResponse, ErrorBody, FeishuBindingInfo, FeishuBindingPutRequest, FeishuBindingResponse, FeishuTestRequest, FeishuTestResponse, FilesStatRequest, FilesStatResponse, GoalResponse, GoalServerEvent, GoalStateView, HistoryMessage, InstallResponse, MachineInfo, MachineInstallJob, MachinesResponse, McpServerTestResponse, MeResponse, MemberAddRequest, MemberAddResponse, MemberInfo, MembersResponse, MemoryFileInfo, MemoryFileResponse, MemoryFilesResponse, MemoryImportMode, MemoryImportRequest, MemoryImportResponse, MemoryOverviewResponse, MemoryScopeExport, MemoryScopeInfo, MemoryTransferFile, MessagesLiveTail, MessagesPageInfo, MessagesResponse, MessagingBindingCommon, MessagingBindingInfo, MessagingBindingStateRequest, MessagingBindingsResponse, MessagingChannel, MessagingChannelState, MessagingDeliveryError, MessagingDeliveryPatch, MessagingRuntimeState, MessagingRuntimeStatus, MessagingTestMessageResponse, ModelInfo, ModelOAuthCodeRequest, ModelOAuthCodeResponse, ModelOAuthErrorCode, ModelOAuthMode, ModelOAuthStartRequest, ModelOAuthStartResponse, ModelOAuthStatusResponse, ModelPricingDto, ModelProtocolDetectRequest, ModelProtocolDetectResponse, ModelProtocolProbeDto, ModelRefDto, ModelTestRequest, ModelTestResponse, ModelUpdateEntry, ModelVisionDetectRequest, ModelVisionDetectResponse, ModelVisionOutcome, ModelsResponse, ModelsUpdateRequest, PasswordChangeRequest, PendingFollowUpInfo, PendingSteeringInfo, PrefsResponse, ProjectCreateRequest, ProjectCreateResponse, ProjectRole, ProjectSummary, ProjectUpdateRequest, ProjectUpdateResponse, ProjectsResponse, ProtocolProbeOutcome, QQBindingInfo, QQBindingPutRequest, QQBindingResponse, QQScanPollResponse, QQScanStartResponse, QQTestRequest, QQTestResponse, RecalledMessageResponse, RequestSpan, RetryNowResponse, ScheduleItem, ScheduleServerEvent, ScheduleStatus, ScheduleUpsertRequest, SchedulesResponse, ServerEvent, ServerSettings, ServerSettingsResponse, ServerSettingsUpdateRequest, SessionCategory, SessionCategoryCounts, SessionContextParts, SessionContextResponse, SessionCreateRequest, SessionCreateResponse, SessionForkRequest, SessionForkResponse, SessionInfo, SessionPatchRequest, SessionProcessInfo, SessionProcessesResponse, SessionResponse, SessionSource, SessionStatus, SessionTracesResponse, SessionsResponse, SkillArchiveInstallRequest, SkillGroupItem, SkillInstallRequest, SkillLibraryResponse, SkillMetadataItem, SkillUpdateRef, SteerRequest, SubagentMessageResponse, SubagentRuntimeInfo, TaskCreateRequest, TaskCreateResponse, TaskInputPart, TelegramBindingInfo, TelegramBindingPutRequest, TelegramBindingResponse, TelegramTestRequest, TelegramTestResponse, ToolCallSpan, TraceAnalysisResponse, TraceEventsResponse, TraceFileInfo, TraceImportRequest, TraceImportResponse, TraceModelSegment, TraceOtherSpan, TracePosition, TraceTaskStats, TraceToolSpan, UiPrefs, UpdateCheckResponse, UpdateRunResponse, UploadLimits, UsageAgentSeries, UsageBucket, UsageEntitySeriesCounts, UsageErrorCount, UsageErrorItem, UsageErrorKind, UsageErrors, UsageErrorsClearResponse, UsageErrorsPage, UsageGranularity, UsageGroupBy, UsageGroupRow, UsageModelSeries, UsageModelTotal, UsageModelTotals, UsageResponse, UsageSeriesPoint, UsageTrendPointInTrace, UserInfo, VaultEntryInfo, VaultEntryUpdate, VaultResponse, VaultUpdateRequest, VersionResponse, WeChatBindingInfo, WeChatBindingPutRequest, WeChatBindingResponse, WeChatScanPollResponse, WeChatScanStartResponse, WeChatScanStatus, WeChatScanVerifyRequest, WeChatTestResponse, WorkspaceFileEntry, WorkspaceFilesResponse };
+export type { AdminPasswordResetRequest, AdminUserCreateRequest, AdminUserCreateResponse, AdminUsersResponse, AgentCompactionConfigDto, AgentConfigDto, AgentConfigResponse, AgentConfigUpdateRequest, AgentCreateRequest, AgentCreateResponse, AgentHooksConfigDto, AgentHooksResponse, AgentImportRequest, AgentImportResponse, AgentKernelUpdateResponse, AgentMemoryConfigDto, AgentModelConfigDto, AgentPluginsInstallResponse, AgentSchedulesConfigDto, AgentSkillsConfigDto, AgentSkillsResponse, AgentSummary, AgentTraceDateGroup, AgentTraceFileRef, AgentTraceSessionEntry, AgentTraceSessionFile, AgentTraceSessionGroup, AgentTracesResponse, AgentVaultConfigDto, AgentsResponse, ApprovalDecisionRequest, ApprovalMode, AuthLoginRequest, AuthResponse, BenchmarkCaseScore, BenchmarkCaseSummary, BenchmarkCasesResponse, BenchmarkEvaluation, BenchmarkRunScore, BenchmarkSummary, BenchmarksResponse, CaseMaterial, ChatDefaultsDto, CommandPolicyDto, CommandPolicyRuleDto, ContextFileShare, ContextToolShare, CredentialInfo, DefaultModelResponse, DefaultModelUpdateRequest, DesktopUpdateStatus, DesktopUpdateStatusResponse, DesktopUpdaterCommandMessage, DesktopUpdaterStatusMessage, DirEntryInfo, DirListResponse, DirectorySkillItem, DirectorySkillsResponse, DraftShortcut, EndpointModelListRequest, EndpointModelListResponse, ErrorBody, FeishuBindingInfo, FeishuBindingPutRequest, FeishuBindingResponse, FeishuTestRequest, FeishuTestResponse, FilesStatRequest, FilesStatResponse, FilesWriteRequest, GoalResponse, GoalServerEvent, GoalStateView, HistoryMessage, HookArchiveInstallRequest, HookItem, InstallResponse, MachineInfo, MachineJob, MachineServerStatus, MachinesResponse, McpServerTestResponse, MeResponse, MemberAddRequest, MemberAddResponse, MemberInfo, MembersResponse, MemoryFileInfo, MemoryFileResponse, MemoryFilesResponse, MemoryImportMode, MemoryImportRequest, MemoryImportResponse, MemoryOverviewResponse, MemoryScopeExport, MemoryScopeInfo, MemoryTransferFile, MessagesLiveTail, MessagesPageInfo, MessagesResponse, MessagingBindingCommon, MessagingBindingInfo, MessagingBindingStateRequest, MessagingBindingsResponse, MessagingChannel, MessagingChannelState, MessagingDeliveryError, MessagingDeliveryPatch, MessagingRuntimeState, MessagingRuntimeStatus, MessagingTestMessageResponse, ModelInfo, ModelOAuthCodeRequest, ModelOAuthCodeResponse, ModelOAuthErrorCode, ModelOAuthMode, ModelOAuthStartRequest, ModelOAuthStartResponse, ModelOAuthStatusResponse, ModelPricingDto, ModelProtocolDetectRequest, ModelProtocolDetectResponse, ModelProtocolProbeDto, ModelRefDto, ModelTestRequest, ModelTestResponse, ModelUpdateEntry, ModelVisionDetectRequest, ModelVisionDetectResponse, ModelVisionOutcome, ModelsResponse, ModelsUpdateRequest, PasswordChangeRequest, PendingFollowUpInfo, PendingSteeringInfo, PluginFilesResponse, PluginGroupItem, PluginInstallRequest, PluginItem, PluginLibraryResponse, PluginUpdateRef, PrefsResponse, ProjectCreateRequest, ProjectCreateResponse, ProjectRole, ProjectSummary, ProjectUpdateRequest, ProjectUpdateResponse, ProjectsResponse, ProtocolProbeOutcome, QQBindingInfo, QQBindingPutRequest, QQBindingResponse, QQScanPollResponse, QQScanStartResponse, QQTestRequest, QQTestResponse, RecalledMessageResponse, RequestSpan, RestartResponse, RetryNowResponse, ScheduleItem, ScheduleServerEvent, ScheduleStatus, ScheduleUpsertRequest, SchedulesResponse, ServerEvent, ServerSettings, ServerSettingsResponse, ServerSettingsUpdateRequest, SessionBackgroundTasks, SessionCategory, SessionCategoryCounts, SessionContextParts, SessionContextResponse, SessionCreateRequest, SessionCreateResponse, SessionForkRequest, SessionForkResponse, SessionInfo, SessionPatchRequest, SessionProcessInfo, SessionProcessesResponse, SessionResponse, SessionSource, SessionStatus, SessionTracesResponse, SessionsResponse, SkillArchiveInstallRequest, SkillMetadataItem, SteerRequest, SubagentMessageResponse, SubagentRuntimeInfo, TaskCreateRequest, TaskCreateResponse, TaskInputPart, TelegramBindingInfo, TelegramBindingPutRequest, TelegramBindingResponse, TelegramTestRequest, TelegramTestResponse, ToolCallSpan, TraceAnalysisResponse, TraceEventsResponse, TraceFileInfo, TraceImportRequest, TraceImportResponse, TraceModelSegment, TraceOtherSpan, TracePosition, TraceTaskStats, TraceToolSpan, UiPrefs, UpdateCheckResponse, UpdateJobPhase, UpdateJobStatus, UpdateRunResponse, UploadLimits, UsageAgentSeries, UsageBucket, UsageEntitySeriesCounts, UsageErrorCount, UsageErrorItem, UsageErrorKind, UsageErrors, UsageErrorsClearResponse, UsageErrorsPage, UsageGranularity, UsageGroupBy, UsageGroupRow, UsageModelSeries, UsageModelTotal, UsageModelTotals, UsageResponse, UsageSeriesPoint, UsageTrendPointInTrace, UserInfo, VaultEntryInfo, VaultEntryUpdate, VaultResponse, VaultUpdateRequest, VersionResponse, WeChatBindingInfo, WeChatBindingPutRequest, WeChatBindingResponse, WeChatScanPollResponse, WeChatScanStartResponse, WeChatScanStatus, WeChatScanVerifyRequest, WeChatTestResponse, WorkspaceFileEntry, WorkspaceFilesResponse };