@ref0/sdk 0.7.0 → 0.9.0

package/dist/{index-Vb8-1Zk-.d.mts → index-Db86z11q.d.mts}

@@ -1355,13 +1355,10 @@ declare const NoFork_base: Schema.Class<NoFork, Schema.TaggedStruct<"NoFork", {
 /** No fork of this repo for that session: it hasn't asked for one. */
 declare class NoFork extends NoFork_base {}
 declare const NoBase_base: Schema.Class<NoBase, Schema.TaggedStruct<"NoBase", {
-  readonly why: Schema.Literals<readonly ["main empty", "held by a run"]>;
+  readonly why: Schema.Literal<"main empty">;
   readonly nextStep: Schema.String;
 }>, import("effect/Cause").YieldableError>;
-/**
- * No base to fetch: `main` has no commit yet, or the pin of the thread below is in a workflow
- * run's fork, which has no session's path to fetch from.
- */
+/** No base to fetch: `main` has no commit yet. */
 declare class NoBase extends NoBase_base {}
 declare const PullRequestNotFound_base: Schema.Class<PullRequestNotFound, Schema.TaggedStruct<"PullRequestNotFound", {
   readonly nextStep: Schema.String;
@@ -2068,6 +2065,19 @@ declare const ApprovalSecret_base: HttpApiMiddleware.ServiceClass<ApprovalSecret
  * secret is all it has. Not required of every client: only the one that made it supplies it.
  */
 declare class ApprovalSecret extends ApprovalSecret_base {}
+declare const MachineNameRefusal_base: HttpApiMiddleware.ServiceClass<MachineNameRefusal, "ref0/contracts/MachineNameRefusal", {
+  requires: never;
+  provides: never;
+  error: typeof CommandRefused;
+  clientError: never;
+  requiredForClient: false;
+  security: never;
+}, HttpApiMiddleware.HttpApiMiddleware<never, typeof CommandRefused, never>>;
+/**
+ * A machine's request whose name its contract refuses, answered as `CommandRefused`, which says
+ * what to change. Any other part that fails its contract is answered with Effect's empty 400.
+ */
+declare class MachineNameRefusal extends MachineNameRefusal_base {}
 declare const WelcomeGroup_base: HttpApiGroup.HttpApiGroup<"welcome", HttpApiEndpoint.HttpApiEndpoint<"get", "GET", "/v1/welcome", never, never, never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
   readonly state: Schema.Literals<readonly ["ready", "setting up"]>;
   readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
@@ -2197,7 +2207,19 @@ declare const TerminalApprovalsGroup_base: HttpApiGroup.HttpApiGroup<"terminalAp
  * what it came to with the approval's secret. Its person answers on their own page, by its code.
  */
 declare class TerminalApprovalsGroup extends TerminalApprovalsGroup_base {}
-declare const AttachmentsGroup_base: HttpApiGroup.HttpApiGroup<"attachments", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/agents/:agent/attachments", Schema.toCodecStringTree<Schema.Struct<{
+declare const AttachmentsGroup_base: HttpApiGroup.HttpApiGroup<"attachments", HttpApiEndpoint.HttpApiEndpoint<"revoke", "DELETE", "/v1/owners/:owner/agents/:agent/attachments/:attachment", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
+  attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly credential: Schema.Struct<{
+    readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+  }>;
+  readonly childrenRevoked: Schema.Int;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof AttachmentNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/agents/:agent/attachments", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
@@ -2214,19 +2236,7 @@ declare const AttachmentsGroup_base: HttpApiGroup.HttpApiGroup<"attachments", Ht
     readonly person: Schema.brand<Schema.String, "OwnerName">;
   }>>;
   readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"revoke", "DELETE", "/v1/owners/:owner/agents/:agent/attachments/:attachment", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
-  attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly credential: Schema.Struct<{
-    readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-  }>;
-  readonly childrenRevoked: Schema.Int;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof AttachmentNotFound>, Authorization, never>, false>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof OrganizationNotFound>, Authorization, never>, false>;
 /**
  * An agent's live attachments, by approval: listed, every one to an admin and their own to anyone
  * else; and one of the caller's own disconnected, revoking its credential, which the Worker checks
@@ -2353,14 +2363,31 @@ declare const MachineAttachmentsGroup_base: HttpApiGroup.HttpApiGroup<"machineAt
   readonly approval: Schema.brand<Schema.TemplateLiteral<readonly ["approval_", Schema.String]>, "ApprovalId">;
   readonly code: Schema.String;
   readonly expiresAt: Schema.DateTimeUtcFromString;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof CommandRefused | typeof SlowDown>, never, never>, false>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof CommandRefused | typeof SlowDown>, MachineNameRefusal, never>, false>;
 /**
  * Connecting a machine, the machine's side: asking, with no credential, to connect to one owner's
  * agent, whose terminal shows the code their person types; then collecting what came of it,
  * confirming it saved the grant, or aborting, with its collecting secret.
  */
 declare class MachineAttachmentsGroup extends MachineAttachmentsGroup_base {}
-declare const ApprovalsGroup_base: HttpApiGroup.HttpApiGroup<"approvals", HttpApiEndpoint.HttpApiEndpoint<"waiting", "GET", "/v1/approvals", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
+declare const ApprovalsGroup_base: HttpApiGroup.HttpApiGroup<"approvals", HttpApiEndpoint.HttpApiEndpoint<"get", "GET", "/v1/approvals/:approval", Schema.toCodecStringTree<Schema.Struct<{
+  approval: Schema.brand<Schema.TemplateLiteral<readonly ["approval_", Schema.String]>, "ApprovalId">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+  readonly state: Schema.Literal<"waiting">;
+  readonly expiresAt: Schema.DateTimeUtcFromString;
+}>, Schema.Struct<{
+  readonly state: Schema.Literal<"approved">;
+  readonly collected: Schema.optionalKey<Schema.Literal<true>>;
+}>, Schema.Struct<{
+  readonly state: Schema.Literal<"refused">;
+}>, Schema.Struct<{
+  readonly state: Schema.Literal<"expired">;
+}>, Schema.Struct<{
+  readonly status: Schema.Int;
+  readonly result: Schema.Codec<Schema.Json, Schema.Json, never, never>;
+  readonly state: Schema.Literal<"ran">;
+  readonly endpoint: Schema.String;
+}>]>>, Schema.toCodecJson<typeof AuthorityUnavailable | typeof ApprovalNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"waiting", "GET", "/v1/approvals", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
   readonly approvals: Schema.$Array<Schema.Struct<{
     readonly approval: Schema.brand<Schema.TemplateLiteral<readonly ["approval_", Schema.String]>, "ApprovalId">;
     readonly says: Schema.String;
@@ -2613,24 +2640,7 @@ declare const ApprovalsGroup_base: HttpApiGroup.HttpApiGroup<"approvals", HttpAp
       readonly state: Schema.String;
     }>>;
   }>>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"get", "GET", "/v1/approvals/:approval", Schema.toCodecStringTree<Schema.Struct<{
-  approval: Schema.brand<Schema.TemplateLiteral<readonly ["approval_", Schema.String]>, "ApprovalId">;
-}>>, never, never, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
-  readonly state: Schema.Literal<"waiting">;
-  readonly expiresAt: Schema.DateTimeUtcFromString;
-}>, Schema.Struct<{
-  readonly state: Schema.Literal<"approved">;
-  readonly collected: Schema.optionalKey<Schema.Literal<true>>;
-}>, Schema.Struct<{
-  readonly state: Schema.Literal<"refused">;
-}>, Schema.Struct<{
-  readonly state: Schema.Literal<"expired">;
-}>, Schema.Struct<{
-  readonly status: Schema.Int;
-  readonly result: Schema.Codec<Schema.Json, Schema.Json, never, never>;
-  readonly state: Schema.Literal<"ran">;
-  readonly endpoint: Schema.String;
-}>]>>, Schema.toCodecJson<typeof AuthorityUnavailable | typeof ApprovalNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"options", "POST", "/v1/approvals/:approval/options", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"options", "POST", "/v1/approvals/:approval/options", Schema.toCodecStringTree<Schema.Struct<{
   approval: Schema.brand<Schema.TemplateLiteral<readonly ["approval_", Schema.String]>, "ApprovalId">;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
   readonly code: Schema.optionalKey<Schema.String>;
@@ -3066,39 +3076,7 @@ declare const MeGroup_base: HttpApiGroup.HttpApiGroup<"me", HttpApiEndpoint.Http
     readonly action: Schema.Literals<readonly ["project:read", "project:write", "thread:start", "thread:write", "session:start", "session:change", "agent:attach", "approval:start", "git:read", "git:push", "approval:ask", "repo:add", "project:create", "thread:watch", "check:run"]>;
   }>>;
   readonly expiresAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-}>>, never, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"usage", "GET", "/v1/me/usage", never, Schema.toCodecStringTree<Schema.Struct<{
-  from: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
-  to: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly turns: Schema.Int;
-  readonly unknownTurns: Schema.Int;
-  readonly models: Schema.$Array<Schema.Struct<{
-    readonly model: Schema.String;
-    readonly input: Schema.Int;
-    readonly output: Schema.Int;
-    readonly cacheWrite: Schema.Int;
-    readonly cacheRead: Schema.Int;
-    readonly cost: Schema.optionalKey<Schema.Finite>;
-  }>>;
-  readonly cost: Schema.Finite;
-  readonly from: Schema.brand<Schema.String, "UtcDay">;
-  readonly to: Schema.brand<Schema.String, "UtcDay">;
-  readonly harnesses: Schema.$Array<Schema.Struct<{
-    readonly turns: Schema.Int;
-    readonly unknownTurns: Schema.Int;
-    readonly models: Schema.$Array<Schema.Struct<{
-      readonly model: Schema.String;
-      readonly input: Schema.Int;
-      readonly output: Schema.Int;
-      readonly cacheWrite: Schema.Int;
-      readonly cacheRead: Schema.Int;
-      readonly cost: Schema.optionalKey<Schema.Finite>;
-    }>>;
-    readonly cost: Schema.Finite;
-    readonly harness: Schema.String;
-  }>>;
-  readonly pricesAsOf: Schema.String;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof UsageRangeRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"meters", "GET", "/v1/me/meters", never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, never, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"meters", "GET", "/v1/me/meters", never, Schema.toCodecStringTree<Schema.Struct<{
   from: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
   to: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
 }>>, never, never, Schema.toCodecJson<Schema.Struct<{
@@ -3170,7 +3148,39 @@ declare const MeGroup_base: HttpApiGroup.HttpApiGroup<"me", HttpApiEndpoint.Http
       readonly nextStep: Schema.optionalKey<Schema.String>;
     }>]>;
   }>>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"renew", "POST", "/v1/me/renew", never, never, never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"usage", "GET", "/v1/me/usage", never, Schema.toCodecStringTree<Schema.Struct<{
+  from: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
+  to: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly turns: Schema.Int;
+  readonly unknownTurns: Schema.Int;
+  readonly models: Schema.$Array<Schema.Struct<{
+    readonly model: Schema.String;
+    readonly input: Schema.Int;
+    readonly output: Schema.Int;
+    readonly cacheWrite: Schema.Int;
+    readonly cacheRead: Schema.Int;
+    readonly cost: Schema.optionalKey<Schema.Finite>;
+  }>>;
+  readonly cost: Schema.Finite;
+  readonly from: Schema.brand<Schema.String, "UtcDay">;
+  readonly to: Schema.brand<Schema.String, "UtcDay">;
+  readonly harnesses: Schema.$Array<Schema.Struct<{
+    readonly turns: Schema.Int;
+    readonly unknownTurns: Schema.Int;
+    readonly models: Schema.$Array<Schema.Struct<{
+      readonly model: Schema.String;
+      readonly input: Schema.Int;
+      readonly output: Schema.Int;
+      readonly cacheWrite: Schema.Int;
+      readonly cacheRead: Schema.Int;
+      readonly cost: Schema.optionalKey<Schema.Finite>;
+    }>>;
+    readonly cost: Schema.Finite;
+    readonly harness: Schema.String;
+  }>>;
+  readonly pricesAsOf: Schema.String;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof UsageRangeRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"renew", "POST", "/v1/me/renew", never, never, never, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly expiresAt: Schema.DateTimeUtcFromMillis;
@@ -12670,216 +12680,18 @@ declare const OwnerThreadsGroup_base: HttpApiGroup.HttpApiGroup<"ownerThreads",
  * the stage as filters. A project the reader can't see answers as one that isn't there.
  */
 declare class OwnerThreadsGroup extends OwnerThreadsGroup_base {}
-declare const ReposGroup_base: HttpApiGroup.HttpApiGroup<"repos", HttpApiEndpoint.HttpApiEndpoint<"pack", "GET", "/v1/repos/:owner/:repo/history/packs", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  key: Schema.String;
-}>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof RepoNotFound | typeof HistoryPackNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"line", "GET", "/v1/repos/:owner/:repo/commits/:commit/lines", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-  commit: Schema.brand<Schema.String, "CommitOid">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  path: Schema.brand<Schema.String, "RepoPath">;
-  line: Schema.Int;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly commit: Schema.brand<Schema.String, "CommitOid">;
-  readonly path: Schema.brand<Schema.String, "RepoPath">;
-  readonly line: Schema.Int;
-  readonly from: Schema.Literals<readonly ["session", "workflow", "main", "unknown"]>;
-  readonly authorship: Schema.Literals<readonly ["ai", "human", "mixed", "unknown"]>;
-  readonly turns: Schema.$Array<Schema.Struct<{
-    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
-    readonly threadNumber: Schema.Int;
-    readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
-    readonly turn: Schema.Int;
-    readonly authorship: Schema.Literals<readonly ["ai", "human", "mixed", "unknown"]>;
-    readonly model: Schema.optionalKey<Schema.String>;
-  }>>;
-  readonly workflow: Schema.optionalKey<Schema.Struct<{
-    readonly name: Schema.brand<Schema.String, "WorkflowName">;
-    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
-    readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
-    readonly step: Schema.Struct<{
-      readonly name: Schema.String;
-      readonly count: Schema.Int;
-      readonly attempt: Schema.Int;
-    }>;
-  }>>;
-}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"projectGate", "GET", "/v1/repos/:owner/:repo/project-gate", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly active: Schema.Struct<{
-    readonly revision: Schema.Int;
-    readonly commit: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
-    readonly repo: Schema.NullOr<Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">>;
-  }>;
-  readonly pending: Schema.optionalKey<Schema.Struct<{
-    readonly revision: Schema.Int;
-    readonly commit: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
-    readonly repo: Schema.NullOr<Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">>;
-  }>>;
-  readonly holding: Schema.$Array<Schema.Struct<{
-    readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
-    readonly latch: Schema.brand<Schema.TemplateLiteral<readonly ["latch_", Schema.String]>, "LatchId">;
-    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
-    readonly version: Schema.brand<Schema.TemplateLiteral<readonly ["version_", Schema.String]>, "VersionId">;
-    readonly gate: Schema.Int;
-    readonly since: Schema.Int;
-  }>>;
-}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"pull", "GET", "/v1/repos/:owner/:repo/pulls/:pullRequest", Schema.toCodecStringTree<Schema.Struct<{
+declare const ReposGroup_base: HttpApiGroup.HttpApiGroup<"repos", HttpApiEndpoint.HttpApiEndpoint<"gate", "GET", "/v1/repos/:owner/:repo/pulls/:pullRequest/gate", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
   pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
 }>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
   readonly pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
-  readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
-  readonly state: Schema.Literals<readonly ["open", "merged", "closed"]>;
-  readonly head: Schema.Struct<{
-    readonly gitRepository: Schema.brand<Schema.TemplateLiteral<readonly ["gitrepo_", Schema.String]>, "GitRepositoryId">;
-    readonly fork: Schema.brand<Schema.TemplateLiteral<readonly ["fork_", Schema.String]>, "ForkId">;
-    readonly branch: Schema.String;
-    readonly commit: Schema.brand<Schema.String, "CommitOid">;
-    readonly generation: Schema.Int;
-  }>;
-  readonly openedBy: Schema.Union<readonly [Schema.Struct<{
-    readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
-    readonly agent: Schema.Struct<{
-      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-    }>;
-  }>, Schema.Struct<{
-    readonly workflow: Schema.Struct<{
-      readonly name: Schema.brand<Schema.String, "WorkflowName">;
-      readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
-      readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
-      readonly step: Schema.Struct<{
-        readonly name: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-      }>;
-    }>;
-  }>]>;
-  readonly openedAt: Schema.DateTimeUtcFromMillis;
-  readonly closedAt: Schema.NullOr<Schema.DateTimeUtcFromMillis>;
-  readonly closedWhy: Schema.NullOr<Schema.Literals<readonly ["closed", "thread closed", "fork deleted"]>>;
-  readonly repair: Schema.Boolean;
-  readonly current: Schema.Struct<{
-    readonly version: Schema.brand<Schema.Int, "VersionNumber">;
-    readonly head: Schema.brand<Schema.String, "CommitOid">;
-    readonly base: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
-    readonly planVersion: Schema.NullOr<Schema.Int>;
-    readonly intentRevision: Schema.Int;
-    readonly generation: Schema.Int;
-    readonly state: Schema.Literals<readonly ["preparing", "evaluating", "gating", "waiting", "queued", "publishing", "merged", "superseded", "stale", "conflicted"]>;
-    readonly why: Schema.Literals<readonly ["opened", "push", "head set", "main moved", ".ref0/ changed", "outcomes changed", "intent changed", "needs changed", "project gate changed"]>;
-    readonly createdAt: Schema.DateTimeUtcFromMillis;
-  }>;
-  readonly threadNumber: Schema.Int;
-}>>, Schema.toCodecJson<typeof PullRequestNotFound | typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"pulls", "GET", "/v1/repos/:owner/:repo/pulls", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  readonly state: Schema.optionalKey<Schema.Literals<readonly ["open", "merged", "closed"]>>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly pullRequests: Schema.$Array<Schema.Struct<{
-    readonly pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
-    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
-    readonly state: Schema.Literals<readonly ["open", "merged", "closed"]>;
-    readonly head: Schema.Struct<{
-      readonly gitRepository: Schema.brand<Schema.TemplateLiteral<readonly ["gitrepo_", Schema.String]>, "GitRepositoryId">;
-      readonly fork: Schema.brand<Schema.TemplateLiteral<readonly ["fork_", Schema.String]>, "ForkId">;
-      readonly branch: Schema.String;
-      readonly commit: Schema.brand<Schema.String, "CommitOid">;
-      readonly generation: Schema.Int;
-    }>;
-    readonly openedBy: Schema.Union<readonly [Schema.Struct<{
-      readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
-      readonly agent: Schema.Struct<{
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      }>;
-    }>, Schema.Struct<{
-      readonly workflow: Schema.Struct<{
-        readonly name: Schema.brand<Schema.String, "WorkflowName">;
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
-        readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
-        readonly step: Schema.Struct<{
-          readonly name: Schema.String;
-          readonly count: Schema.Int;
-          readonly attempt: Schema.Int;
-        }>;
-      }>;
-    }>]>;
-    readonly openedAt: Schema.DateTimeUtcFromMillis;
-    readonly closedAt: Schema.NullOr<Schema.DateTimeUtcFromMillis>;
-    readonly closedWhy: Schema.NullOr<Schema.Literals<readonly ["closed", "thread closed", "fork deleted"]>>;
-    readonly repair: Schema.Boolean;
-    readonly current: Schema.Struct<{
-      readonly version: Schema.brand<Schema.Int, "VersionNumber">;
-      readonly head: Schema.brand<Schema.String, "CommitOid">;
-      readonly base: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
-      readonly planVersion: Schema.NullOr<Schema.Int>;
-      readonly intentRevision: Schema.Int;
-      readonly generation: Schema.Int;
-      readonly state: Schema.Literals<readonly ["preparing", "evaluating", "gating", "waiting", "queued", "publishing", "merged", "superseded", "stale", "conflicted"]>;
-      readonly why: Schema.Literals<readonly ["opened", "push", "head set", "main moved", ".ref0/ changed", "outcomes changed", "intent changed", "needs changed", "project gate changed"]>;
-      readonly createdAt: Schema.DateTimeUtcFromMillis;
-    }>;
-    readonly threadNumber: Schema.Int;
-  }>>;
-}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"get", "GET", "/v1/repos/:owner/:repo", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
-  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
-  readonly scope: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"project">;
-    readonly name: Schema.brand<Schema.String, "ProjectName">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"owner">;
-  }>]>;
-  readonly name: Schema.brand<Schema.String, "RepoName">;
-  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
-  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
-  readonly createdAt: Schema.DateTimeUtcFromMillis;
-}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/repos", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  after: Schema.optionalKey<Schema.brand<Schema.String, "RepoName">>;
-  limit: Schema.optionalKey<Schema.Int>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly repos: Schema.$Array<Schema.Struct<{
-    readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
-    readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-    readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
-    readonly scope: Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"project">;
-      readonly name: Schema.brand<Schema.String, "ProjectName">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"owner">;
-    }>]>;
-    readonly name: Schema.brand<Schema.String, "RepoName">;
-    readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
-    readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
-    readonly createdAt: Schema.DateTimeUtcFromMillis;
-  }>>;
-  readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.String, "RepoName">>;
-}>>, never, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"gate", "GET", "/v1/repos/:owner/:repo/pulls/:pullRequest/gate", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-  pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
-}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
-  readonly version: Schema.brand<Schema.Int, "VersionNumber">;
-  readonly state: Schema.Literals<readonly ["pending", "answered", "failed"]>;
-  readonly why: Schema.NullOr<Schema.String>;
-  readonly needs: Schema.$Array<Schema.Struct<{
-    readonly need: Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"checks">;
+  readonly version: Schema.brand<Schema.Int, "VersionNumber">;
+  readonly state: Schema.Literals<readonly ["pending", "answered", "failed"]>;
+  readonly why: Schema.NullOr<Schema.String>;
+  readonly needs: Schema.$Array<Schema.Struct<{
+    readonly need: Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"checks">;
     }>, Schema.Struct<{
       readonly kind: Schema.Literal<"check">;
       readonly name: Schema.brand<Schema.String, "CheckName">;
@@ -13480,7 +13292,77 @@ declare const ReposGroup_base: HttpApiGroup.HttpApiGroup<"repos", HttpApiEndpoin
     readonly failed: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
     readonly at: Schema.DateTimeUtcFromMillis;
   }>]>>>;
-}>>, Schema.toCodecJson<typeof PullRequestNotFound | typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"manifest", "GET", "/v1/repos/:owner/:repo/history/manifest", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof PullRequestNotFound | typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"get", "GET", "/v1/repos/:owner/:repo", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
+  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
+  readonly scope: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"project">;
+    readonly name: Schema.brand<Schema.String, "ProjectName">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"owner">;
+  }>]>;
+  readonly name: Schema.brand<Schema.String, "RepoName">;
+  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
+  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
+  readonly createdAt: Schema.DateTimeUtcFromMillis;
+}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"line", "GET", "/v1/repos/:owner/:repo/commits/:commit/lines", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+  commit: Schema.brand<Schema.String, "CommitOid">;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  path: Schema.brand<Schema.String, "RepoPath">;
+  line: Schema.Int;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly commit: Schema.brand<Schema.String, "CommitOid">;
+  readonly path: Schema.brand<Schema.String, "RepoPath">;
+  readonly line: Schema.Int;
+  readonly from: Schema.Literals<readonly ["session", "workflow", "main", "unknown"]>;
+  readonly authorship: Schema.Literals<readonly ["ai", "human", "mixed", "unknown"]>;
+  readonly turns: Schema.$Array<Schema.Struct<{
+    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
+    readonly threadNumber: Schema.Int;
+    readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
+    readonly turn: Schema.Int;
+    readonly authorship: Schema.Literals<readonly ["ai", "human", "mixed", "unknown"]>;
+    readonly model: Schema.optionalKey<Schema.String>;
+  }>>;
+  readonly workflow: Schema.optionalKey<Schema.Struct<{
+    readonly name: Schema.brand<Schema.String, "WorkflowName">;
+    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
+    readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
+    readonly step: Schema.Struct<{
+      readonly name: Schema.String;
+      readonly count: Schema.Int;
+      readonly attempt: Schema.Int;
+    }>;
+  }>>;
+}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/repos", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  after: Schema.optionalKey<Schema.brand<Schema.String, "RepoName">>;
+  limit: Schema.optionalKey<Schema.Int>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly repos: Schema.$Array<Schema.Struct<{
+    readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
+    readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+    readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
+    readonly scope: Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"project">;
+      readonly name: Schema.brand<Schema.String, "ProjectName">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"owner">;
+    }>]>;
+    readonly name: Schema.brand<Schema.String, "RepoName">;
+    readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
+    readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
+    readonly createdAt: Schema.DateTimeUtcFromMillis;
+  }>>;
+  readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.String, "RepoName">>;
+}>>, never, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"manifest", "GET", "/v1/repos/:owner/:repo/history/manifest", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
 }>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
@@ -13539,80 +13421,208 @@ declare const ReposGroup_base: HttpApiGroup.HttpApiGroup<"repos", HttpApiEndpoin
   }>]>;
   readonly lastMirrored: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
   readonly nextStep: Schema.optionalKey<Schema.String>;
-}>]>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"create", "POST", "/v1/owners/:owner/repos", Schema.toCodecStringTree<Schema.Struct<{
+}>]>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"pack", "GET", "/v1/repos/:owner/:repo/history/packs", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly name: Schema.brand<Schema.String, "RepoName">;
-  readonly project: Schema.optionalKey<Schema.brand<Schema.String, "ProjectName">>;
+  repo: Schema.brand<Schema.String, "RepoName">;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
-  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
-  readonly scope: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"project">;
-    readonly name: Schema.brand<Schema.String, "ProjectName">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"owner">;
-  }>]>;
-  readonly name: Schema.brand<Schema.String, "RepoName">;
-  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
-  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
-  readonly createdAt: Schema.DateTimeUtcFromMillis;
-}>>, Schema.toCodecJson<typeof NameTaken | typeof NameReserved | typeof ProjectNotFound | typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof CommandRefused | typeof ApprovalNeeded | typeof SlowDown>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"import", "POST", "/v1/owners/:owner/repos/import", Schema.toCodecStringTree<Schema.Struct<{
+  key: Schema.String;
+}>>, never, never, HttpApiSchema.StreamUint8Array, Schema.toCodecJson<typeof RepoNotFound | typeof HistoryPackNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"projectGate", "GET", "/v1/repos/:owner/:repo/project-gate", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly name: Schema.brand<Schema.String, "RepoName">;
-  readonly project: Schema.optionalKey<Schema.brand<Schema.String, "ProjectName">>;
-  readonly url: Schema.brand<Schema.String, "RepoUrl">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
-  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
-  readonly scope: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"project">;
-    readonly name: Schema.brand<Schema.String, "ProjectName">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"owner">;
-  }>]>;
-  readonly name: Schema.brand<Schema.String, "RepoName">;
-  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
-  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
-  readonly createdAt: Schema.DateTimeUtcFromMillis;
-}>>, Schema.toCodecJson<typeof NameTaken | typeof NameReserved | typeof ProjectNotFound | typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof CommandRefused | typeof ApprovalNeeded | typeof SlowDown>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"addNeed", "POST", "/v1/repos/:owner/:repo/pulls/:pullRequest/needs", Schema.toCodecStringTree<Schema.Struct<{
+  repo: Schema.brand<Schema.String, "RepoName">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly active: Schema.Struct<{
+    readonly revision: Schema.Int;
+    readonly commit: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
+    readonly repo: Schema.NullOr<Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">>;
+  }>;
+  readonly pending: Schema.optionalKey<Schema.Struct<{
+    readonly revision: Schema.Int;
+    readonly commit: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
+    readonly repo: Schema.NullOr<Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">>;
+  }>>;
+  readonly holding: Schema.$Array<Schema.Struct<{
+    readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
+    readonly latch: Schema.brand<Schema.TemplateLiteral<readonly ["latch_", Schema.String]>, "LatchId">;
+    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
+    readonly version: Schema.brand<Schema.TemplateLiteral<readonly ["version_", Schema.String]>, "VersionId">;
+    readonly gate: Schema.Int;
+    readonly since: Schema.Int;
+  }>>;
+}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"pull", "GET", "/v1/repos/:owner/:repo/pulls/:pullRequest", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
   pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly need: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"checks">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"check">;
-    readonly name: Schema.brand<Schema.String, "CheckName">;
-    readonly params: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
-    readonly source: Schema.optionalKey<Schema.Literal<"project">>;
-    readonly local: Schema.optionalKey<Schema.Literal<true>>;
-    readonly passkey: Schema.optionalKey<Schema.Struct<{
-      readonly from: Schema.Union<readonly [Schema.Literal<"accountable">, Schema.Struct<{
-        readonly person: Schema.brand<Schema.String, "OwnerName">;
-      }>, Schema.Struct<{
-        readonly permission: Schema.brand<Schema.String, "RepoPermissionName">;
-      }>]>;
-    }>>;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"review">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"accountable">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"admin">;
+}>>, never, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
+  readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
+  readonly state: Schema.Literals<readonly ["open", "merged", "closed"]>;
+  readonly head: Schema.Struct<{
+    readonly gitRepository: Schema.brand<Schema.TemplateLiteral<readonly ["gitrepo_", Schema.String]>, "GitRepositoryId">;
+    readonly fork: Schema.brand<Schema.TemplateLiteral<readonly ["fork_", Schema.String]>, "ForkId">;
+    readonly branch: Schema.String;
+    readonly commit: Schema.brand<Schema.String, "CommitOid">;
+    readonly generation: Schema.Int;
+  }>;
+  readonly openedBy: Schema.Union<readonly [Schema.Struct<{
+    readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
+    readonly agent: Schema.Struct<{
+      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+    }>;
   }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"permission">;
-    readonly name: Schema.brand<Schema.String, "RepoPermissionName">;
+    readonly workflow: Schema.Struct<{
+      readonly name: Schema.brand<Schema.String, "WorkflowName">;
+      readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
+      readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
+      readonly step: Schema.Struct<{
+        readonly name: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+      }>;
+    }>;
   }>]>;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
+  readonly openedAt: Schema.DateTimeUtcFromMillis;
+  readonly closedAt: Schema.NullOr<Schema.DateTimeUtcFromMillis>;
+  readonly closedWhy: Schema.NullOr<Schema.Literals<readonly ["closed", "thread closed", "fork deleted"]>>;
+  readonly repair: Schema.Boolean;
+  readonly current: Schema.Struct<{
+    readonly version: Schema.brand<Schema.Int, "VersionNumber">;
+    readonly head: Schema.brand<Schema.String, "CommitOid">;
+    readonly base: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
+    readonly planVersion: Schema.NullOr<Schema.Int>;
+    readonly intentRevision: Schema.Int;
+    readonly generation: Schema.Int;
+    readonly state: Schema.Literals<readonly ["preparing", "evaluating", "gating", "waiting", "queued", "publishing", "merged", "superseded", "stale", "conflicted"]>;
+    readonly why: Schema.Literals<readonly ["opened", "push", "head set", "main moved", ".ref0/ changed", "outcomes changed", "intent changed", "needs changed", "project gate changed"]>;
+    readonly createdAt: Schema.DateTimeUtcFromMillis;
+  }>;
+  readonly threadNumber: Schema.Int;
+}>>, Schema.toCodecJson<typeof PullRequestNotFound | typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"pulls", "GET", "/v1/repos/:owner/:repo/pulls", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  readonly state: Schema.optionalKey<Schema.Literals<readonly ["open", "merged", "closed"]>>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly pullRequests: Schema.$Array<Schema.Struct<{
+    readonly pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
+    readonly thread: Schema.brand<Schema.TemplateLiteral<readonly ["thread_", Schema.String]>, "ThreadId">;
+    readonly state: Schema.Literals<readonly ["open", "merged", "closed"]>;
+    readonly head: Schema.Struct<{
+      readonly gitRepository: Schema.brand<Schema.TemplateLiteral<readonly ["gitrepo_", Schema.String]>, "GitRepositoryId">;
+      readonly fork: Schema.brand<Schema.TemplateLiteral<readonly ["fork_", Schema.String]>, "ForkId">;
+      readonly branch: Schema.String;
+      readonly commit: Schema.brand<Schema.String, "CommitOid">;
+      readonly generation: Schema.Int;
+    }>;
+    readonly openedBy: Schema.Union<readonly [Schema.Struct<{
+      readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["session_", Schema.String]>, "SessionId">;
+      readonly agent: Schema.Struct<{
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      }>;
+    }>, Schema.Struct<{
+      readonly workflow: Schema.Struct<{
+        readonly name: Schema.brand<Schema.String, "WorkflowName">;
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">;
+        readonly version: Schema.brand<Schema.String, "WorkflowVersion">;
+        readonly step: Schema.Struct<{
+          readonly name: Schema.String;
+          readonly count: Schema.Int;
+          readonly attempt: Schema.Int;
+        }>;
+      }>;
+    }>]>;
+    readonly openedAt: Schema.DateTimeUtcFromMillis;
+    readonly closedAt: Schema.NullOr<Schema.DateTimeUtcFromMillis>;
+    readonly closedWhy: Schema.NullOr<Schema.Literals<readonly ["closed", "thread closed", "fork deleted"]>>;
+    readonly repair: Schema.Boolean;
+    readonly current: Schema.Struct<{
+      readonly version: Schema.brand<Schema.Int, "VersionNumber">;
+      readonly head: Schema.brand<Schema.String, "CommitOid">;
+      readonly base: Schema.NullOr<Schema.brand<Schema.String, "CommitOid">>;
+      readonly planVersion: Schema.NullOr<Schema.Int>;
+      readonly intentRevision: Schema.Int;
+      readonly generation: Schema.Int;
+      readonly state: Schema.Literals<readonly ["preparing", "evaluating", "gating", "waiting", "queued", "publishing", "merged", "superseded", "stale", "conflicted"]>;
+      readonly why: Schema.Literals<readonly ["opened", "push", "head set", "main moved", ".ref0/ changed", "outcomes changed", "intent changed", "needs changed", "project gate changed"]>;
+      readonly createdAt: Schema.DateTimeUtcFromMillis;
+    }>;
+    readonly threadNumber: Schema.Int;
+  }>>;
+}>>, Schema.toCodecJson<typeof RepoNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"create", "POST", "/v1/owners/:owner/repos", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly name: Schema.brand<Schema.String, "RepoName">;
+  readonly project: Schema.optionalKey<Schema.brand<Schema.String, "ProjectName">>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
+  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
+  readonly scope: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"project">;
+    readonly name: Schema.brand<Schema.String, "ProjectName">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"owner">;
+  }>]>;
+  readonly name: Schema.brand<Schema.String, "RepoName">;
+  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
+  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
+  readonly createdAt: Schema.DateTimeUtcFromMillis;
+}>>, Schema.toCodecJson<typeof NameTaken | typeof NameReserved | typeof ProjectNotFound | typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof CommandRefused | typeof ApprovalNeeded | typeof SlowDown>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"import", "POST", "/v1/owners/:owner/repos/import", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly name: Schema.brand<Schema.String, "RepoName">;
+  readonly project: Schema.optionalKey<Schema.brand<Schema.String, "ProjectName">>;
+  readonly url: Schema.brand<Schema.String, "RepoUrl">;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly repo: Schema.brand<Schema.TemplateLiteral<readonly ["repo_", Schema.String]>, "RepoId">;
+  readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+  readonly project: Schema.brand<Schema.TemplateLiteral<readonly ["project_", Schema.String]>, "ProjectId">;
+  readonly scope: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"project">;
+    readonly name: Schema.brand<Schema.String, "ProjectName">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"owner">;
+  }>]>;
+  readonly name: Schema.brand<Schema.String, "RepoName">;
+  readonly visibility: Schema.Literals<readonly ["private", "internal", "public"]>;
+  readonly state: Schema.Literals<readonly ["creating", "importing", "ready", "failed"]>;
+  readonly createdAt: Schema.DateTimeUtcFromMillis;
+}>>, Schema.toCodecJson<typeof NameTaken | typeof NameReserved | typeof ProjectNotFound | typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof CommandRefused | typeof ApprovalNeeded | typeof SlowDown>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"addNeed", "POST", "/v1/repos/:owner/:repo/pulls/:pullRequest/needs", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+  pullRequest: Schema.brand<Schema.Int, "PullRequestNumber">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly need: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"checks">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"check">;
+    readonly name: Schema.brand<Schema.String, "CheckName">;
+    readonly params: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+    readonly source: Schema.optionalKey<Schema.Literal<"project">>;
+    readonly local: Schema.optionalKey<Schema.Literal<true>>;
+    readonly passkey: Schema.optionalKey<Schema.Struct<{
+      readonly from: Schema.Union<readonly [Schema.Literal<"accountable">, Schema.Struct<{
+        readonly person: Schema.brand<Schema.String, "OwnerName">;
+      }>, Schema.Struct<{
+        readonly permission: Schema.brand<Schema.String, "RepoPermissionName">;
+      }>]>;
+    }>>;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"review">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"accountable">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"admin">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"permission">;
+    readonly name: Schema.brand<Schema.String, "RepoPermissionName">;
+  }>]>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly pullRequest: Schema.optionalKey<Schema.brand<Schema.Int, "PullRequestNumber">>;
@@ -17291,15 +17301,7 @@ declare const WorkflowsGroup_base: HttpApiGroup.HttpApiGroup<"workflows", HttpAp
  * person.
  */
 declare class WorkflowsGroup extends WorkflowsGroup_base {}
-declare const RunsGroup_base: HttpApiGroup.HttpApiGroup<"runs", HttpApiEndpoint.HttpApiEndpoint<"cancel", "POST", "/v1/repos/:owner/:repo/runs/waiting/:start/cancel", Schema.toCodecStringTree<Schema.Struct<{
-  start: Schema.brand<Schema.TemplateLiteral<readonly ["startwait_", Schema.String]>, "StartWaitId">;
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  readonly thread: Schema.optionalKey<Schema.brand<Schema.String, "WrittenThread">>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly cancelled: Schema.Literals<readonly ["start", "yours"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof StartNotFound | typeof StartPast | typeof RunUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/repos/:owner/:repo/runs", Schema.toCodecStringTree<Schema.Struct<{
+declare const RunsGroup_base: HttpApiGroup.HttpApiGroup<"runs", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/repos/:owner/:repo/runs", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
@@ -17578,342 +17580,78 @@ declare const RunsGroup_base: HttpApiGroup.HttpApiGroup<"runs", HttpApiEndpoint.
     }>;
     readonly modules: Schema.$Record<Schema.String, Schema.String>;
   }>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RunUnavailable | typeof LocalRunRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"report", "POST", "/v1/repos/:owner/:repo/runs/local", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RunUnavailable | typeof LocalRunRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"trace", "GET", "/v1/repos/:owner/:repo/runs/:run/trace", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-  readonly thread: Schema.brand<Schema.String, "WrittenThread">;
-  readonly check: Schema.brand<Schema.String, "CheckName">;
-  readonly code: Schema.Struct<{
-    readonly version: Schema.brand<Schema.String, "CheckCodeVersion">;
-    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
-  }>;
-  readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-  readonly tree: Schema.brand<Schema.String, "TreeOid">;
-  readonly result: Schema.Union<readonly [Schema.Struct<{
-    readonly conclusion: Schema.Literals<readonly ["success", "failure", "neutral"]>;
-    readonly output: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-    readonly needs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"review">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"accountable">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"admin">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"permission">;
-      readonly name: Schema.brand<Schema.String, "RepoPermissionName">;
-    }>]>>>;
+  run: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">, Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">]>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  readonly thread: Schema.optionalKey<Schema.brand<Schema.String, "WrittenThread">>;
+  readonly cursor: Schema.optionalKey<Schema.brand<Schema.String, "TraceCursor">>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly run: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">, Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">]>;
+  readonly eventsKept: Schema.Literals<readonly ["collecting", "complete", "incomplete"]>;
+  readonly events: Schema.$Array<Schema.Struct<{
+    readonly eventId: Schema.Int;
+    readonly timestamp: Schema.Finite;
+    readonly type: Schema.String;
+    readonly stepName: Schema.optionalKey<Schema.String>;
+    readonly attempt: Schema.optionalKey<Schema.Int>;
+    readonly durationMs: Schema.optionalKey<Schema.Finite>;
+    readonly retryDelayMs: Schema.optionalKey<Schema.Finite>;
+    readonly eventType: Schema.optionalKey<Schema.String>;
+    readonly error: Schema.optionalKey<Schema.Struct<{
+      readonly name: Schema.String;
+      readonly message: Schema.String;
+    }>>;
+  }>>;
+  readonly spans: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"session">;
+    readonly id: Schema.String;
+    readonly at: Schema.Finite;
+    readonly sandbox: Schema.String;
+    readonly step: Schema.String;
+    readonly attempt: Schema.Int;
+    readonly from: Schema.Literals<readonly ["snapshot", "image"]>;
+    readonly key: Schema.optionalKey<Schema.String>;
+    readonly restoreMs: Schema.Finite;
   }>, Schema.Struct<{
-    readonly error: Schema.Literals<readonly ["threw", "invalid output", "timeout"]>;
-    readonly why: Schema.optionalKey<Schema.String>;
-  }>]>;
-  readonly outputsHash: Schema.String;
-  readonly attachment: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly run: Schema.Union<readonly [Schema.Struct<{
-    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-    readonly check: Schema.brand<Schema.String, "CheckName">;
-    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-    readonly rerun: Schema.Int;
-    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
-    readonly tree: Schema.brand<Schema.String, "TreeOid">;
-    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
-    readonly createdAt: Schema.DateTimeUtcFromMillis;
-    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly starters: Schema.$Array<Schema.Struct<{
-      readonly actor: Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"person">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"agent">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"ref0">;
-        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
-      }>]>;
-      readonly request: Schema.String;
-      readonly at: Schema.DateTimeUtcFromMillis;
-    }>>;
-    readonly local: Schema.optionalKey<Schema.Struct<{
-      readonly attachment: Schema.Struct<{
-        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-      }>;
-      readonly agent: Schema.optionalKey<Schema.Struct<{
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      }>>;
-    }>>;
-    readonly routes: Schema.optionalKey<Schema.Struct<{
-      readonly requests: Schema.Int;
-      readonly omitted: Schema.Int;
-      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
-      readonly refusals: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly refusalsOmitted: Schema.Int;
-      readonly reported: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly reportedOmitted: Schema.Int;
-    }>>;
-    readonly browsers: Schema.optionalKey<Schema.Struct<{
-      readonly browses: Schema.Int;
-      readonly closing: Schema.Int;
-      readonly unconfirmed: Schema.Int;
-      readonly lastError: Schema.optionalKey<Schema.String>;
-      readonly unresolved: Schema.Int;
-      readonly presumedExpired: Schema.Int;
-      readonly browserMs: Schema.Int;
-      readonly estimated: Schema.Boolean;
-    }>>;
-    readonly state: Schema.Literals<readonly ["waiting", "pending", "starting", "created", "running"]>;
-  }>, Schema.Struct<{
-    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-    readonly check: Schema.brand<Schema.String, "CheckName">;
-    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-    readonly rerun: Schema.Int;
-    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
-    readonly tree: Schema.brand<Schema.String, "TreeOid">;
-    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
-    readonly createdAt: Schema.DateTimeUtcFromMillis;
-    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly starters: Schema.$Array<Schema.Struct<{
-      readonly actor: Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"person">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"agent">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"ref0">;
-        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
-      }>]>;
-      readonly request: Schema.String;
-      readonly at: Schema.DateTimeUtcFromMillis;
-    }>>;
-    readonly local: Schema.optionalKey<Schema.Struct<{
-      readonly attachment: Schema.Struct<{
-        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-      }>;
-      readonly agent: Schema.optionalKey<Schema.Struct<{
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      }>>;
-    }>>;
-    readonly routes: Schema.optionalKey<Schema.Struct<{
-      readonly requests: Schema.Int;
-      readonly omitted: Schema.Int;
-      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
-      readonly refusals: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly refusalsOmitted: Schema.Int;
-      readonly reported: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly reportedOmitted: Schema.Int;
-    }>>;
-    readonly browsers: Schema.optionalKey<Schema.Struct<{
-      readonly browses: Schema.Int;
-      readonly closing: Schema.Int;
-      readonly unconfirmed: Schema.Int;
-      readonly lastError: Schema.optionalKey<Schema.String>;
-      readonly unresolved: Schema.Int;
-      readonly presumedExpired: Schema.Int;
-      readonly browserMs: Schema.Int;
-      readonly estimated: Schema.Boolean;
-    }>>;
-    readonly state: Schema.Literal<"ended">;
-    readonly conclusion: Schema.Literals<readonly ["success", "failure", "neutral"]>;
-  }>, Schema.Struct<{
-    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-    readonly check: Schema.brand<Schema.String, "CheckName">;
-    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-    readonly rerun: Schema.Int;
-    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
-    readonly tree: Schema.brand<Schema.String, "TreeOid">;
-    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
-    readonly createdAt: Schema.DateTimeUtcFromMillis;
-    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
-    readonly starters: Schema.$Array<Schema.Struct<{
-      readonly actor: Schema.Union<readonly [Schema.Struct<{
-        readonly kind: Schema.Literal<"person">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"agent">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      }>, Schema.Struct<{
-        readonly kind: Schema.Literal<"ref0">;
-        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
-      }>]>;
-      readonly request: Schema.String;
-      readonly at: Schema.DateTimeUtcFromMillis;
-    }>>;
-    readonly local: Schema.optionalKey<Schema.Struct<{
-      readonly attachment: Schema.Struct<{
-        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-      }>;
-      readonly agent: Schema.optionalKey<Schema.Struct<{
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      }>>;
-    }>>;
-    readonly routes: Schema.optionalKey<Schema.Struct<{
-      readonly requests: Schema.Int;
-      readonly omitted: Schema.Int;
-      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
-      readonly refusals: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly refusalsOmitted: Schema.Int;
-      readonly reported: Schema.$Array<Schema.Struct<{
-        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
-        readonly step: Schema.String;
-        readonly count: Schema.Int;
-        readonly attempt: Schema.Int;
-        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
-        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
-        readonly recovery: Schema.String;
-        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
-        readonly url: Schema.String;
-      }>>;
-      readonly reportedOmitted: Schema.Int;
-    }>>;
-    readonly browsers: Schema.optionalKey<Schema.Struct<{
-      readonly browses: Schema.Int;
-      readonly closing: Schema.Int;
-      readonly unconfirmed: Schema.Int;
-      readonly lastError: Schema.optionalKey<Schema.String>;
-      readonly unresolved: Schema.Int;
-      readonly presumedExpired: Schema.Int;
-      readonly browserMs: Schema.Int;
-      readonly estimated: Schema.Boolean;
-    }>>;
-    readonly state: Schema.Literal<"ended">;
-    readonly error: Schema.Literals<readonly ["timeout", "threw", "invalid output", "unavailable", "expired", "cancelled"]>;
-  }>]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunUnavailable | typeof LocalRunRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"trace", "GET", "/v1/repos/:owner/:repo/runs/:run/trace", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  repo: Schema.brand<Schema.String, "RepoName">;
-  run: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">, Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">]>;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  readonly thread: Schema.optionalKey<Schema.brand<Schema.String, "WrittenThread">>;
-  readonly cursor: Schema.optionalKey<Schema.brand<Schema.String, "TraceCursor">>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly run: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">, Schema.brand<Schema.TemplateLiteral<readonly ["workflowrun_", Schema.String]>, "WorkflowRunId">]>;
-  readonly eventsKept: Schema.Literals<readonly ["collecting", "complete", "incomplete"]>;
-  readonly events: Schema.$Array<Schema.Struct<{
-    readonly eventId: Schema.Int;
-    readonly timestamp: Schema.Finite;
-    readonly type: Schema.String;
-    readonly stepName: Schema.optionalKey<Schema.String>;
-    readonly attempt: Schema.optionalKey<Schema.Int>;
-    readonly durationMs: Schema.optionalKey<Schema.Finite>;
-    readonly retryDelayMs: Schema.optionalKey<Schema.Finite>;
-    readonly eventType: Schema.optionalKey<Schema.String>;
-    readonly error: Schema.optionalKey<Schema.Struct<{
-      readonly name: Schema.String;
-      readonly message: Schema.String;
-    }>>;
-  }>>;
-  readonly spans: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"session">;
-    readonly id: Schema.String;
-    readonly at: Schema.Finite;
-    readonly sandbox: Schema.String;
-    readonly step: Schema.String;
-    readonly attempt: Schema.Int;
-    readonly from: Schema.Literals<readonly ["snapshot", "image"]>;
-    readonly key: Schema.optionalKey<Schema.String>;
-    readonly restoreMs: Schema.Finite;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"command">;
-    readonly id: Schema.String;
-    readonly parent: Schema.String;
-    readonly at: Schema.Finite;
-    readonly argv: Schema.$Array<Schema.String>;
-    readonly outcome: Schema.Literals<readonly ["exited", "timeout", "stopped", "lost"]>;
-    readonly exitCode: Schema.optionalKey<Schema.Int>;
-    readonly durationMs: Schema.Finite;
-    readonly stdoutCut: Schema.Boolean;
-    readonly stderrCut: Schema.Boolean;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"untraced">;
-    readonly id: Schema.String;
-    readonly parent: Schema.String;
-    readonly at: Schema.Finite;
-    readonly commands: Schema.Int;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"serve">;
-    readonly id: Schema.String;
-    readonly parent: Schema.String;
-    readonly at: Schema.Finite;
-    readonly argv: Schema.$Array<Schema.String>;
-    readonly port: Schema.Int;
-    readonly host: Schema.String;
-    readonly outcome: Schema.Literals<readonly ["ready", "occupied", "exited", "not ready", "stopped", "unavailable"]>;
-    readonly readyMs: Schema.optionalKey<Schema.Finite>;
-    readonly exitCode: Schema.optionalKey<Schema.Int>;
-    readonly log: Schema.Literals<readonly ["captured", "unavailable"]>;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"route">;
-    readonly id: Schema.String;
-    readonly parent: Schema.String;
-    readonly at: Schema.Finite;
-    readonly method: Schema.String;
-    readonly path: Schema.String;
-    readonly outcome: Schema.Literals<readonly ["complete", "refused", "failed", "cancelled", "interrupted"]>;
-    readonly status: Schema.optionalKey<Schema.Int>;
+    readonly kind: Schema.Literal<"command">;
+    readonly id: Schema.String;
+    readonly parent: Schema.String;
+    readonly at: Schema.Finite;
+    readonly argv: Schema.$Array<Schema.String>;
+    readonly outcome: Schema.Literals<readonly ["exited", "timeout", "stopped", "lost"]>;
+    readonly exitCode: Schema.optionalKey<Schema.Int>;
+    readonly durationMs: Schema.Finite;
+    readonly stdoutCut: Schema.Boolean;
+    readonly stderrCut: Schema.Boolean;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"untraced">;
+    readonly id: Schema.String;
+    readonly parent: Schema.String;
+    readonly at: Schema.Finite;
+    readonly commands: Schema.Int;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"serve">;
+    readonly id: Schema.String;
+    readonly parent: Schema.String;
+    readonly at: Schema.Finite;
+    readonly argv: Schema.$Array<Schema.String>;
+    readonly port: Schema.Int;
+    readonly host: Schema.String;
+    readonly outcome: Schema.Literals<readonly ["ready", "occupied", "exited", "not ready", "stopped", "unavailable"]>;
+    readonly readyMs: Schema.optionalKey<Schema.Finite>;
+    readonly exitCode: Schema.optionalKey<Schema.Int>;
+    readonly log: Schema.Literals<readonly ["captured", "unavailable"]>;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"route">;
+    readonly id: Schema.String;
+    readonly parent: Schema.String;
+    readonly at: Schema.Finite;
+    readonly method: Schema.String;
+    readonly path: Schema.String;
+    readonly outcome: Schema.Literals<readonly ["complete", "refused", "failed", "cancelled", "interrupted"]>;
+    readonly status: Schema.optionalKey<Schema.Int>;
     readonly why: Schema.optionalKey<Schema.String>;
     readonly durationMs: Schema.Finite;
     readonly bytes: Schema.Int;
@@ -18042,22 +17780,15 @@ declare const RunsGroup_base: HttpApiGroup.HttpApiGroup<"runs", HttpApiEndpoint.
       }>>;
     }>>;
   }>;
-}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunRefused | typeof StartNotFound | typeof RunUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"restoreSigner", "POST", "/v1/repos/:owner/:repo/checks/signers/restore", Schema.toCodecStringTree<Schema.Struct<{
+}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunRefused | typeof StartNotFound | typeof RunUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"cancel", "POST", "/v1/repos/:owner/:repo/runs/waiting/:start/cancel", Schema.toCodecStringTree<Schema.Struct<{
+  start: Schema.brand<Schema.TemplateLiteral<readonly ["startwait_", Schema.String]>, "StartWaitId">;
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
-}>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
-  readonly check: Schema.brand<Schema.String, "CheckKey">;
-  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-}>, Schema.Struct<{
-  readonly check: Schema.brand<Schema.String, "CheckKey">;
-  readonly person: Schema.brand<Schema.String, "OwnerName">;
-}>]>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
-  readonly check: Schema.brand<Schema.String, "CheckKey">;
-  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-}>, Schema.Struct<{
-  readonly check: Schema.brand<Schema.String, "CheckKey">;
-  readonly person: Schema.brand<Schema.String, "OwnerName">;
-}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof RepoNotFound | typeof SignerNotRevoked>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"start", "POST", "/v1/repos/:owner/:repo/runs", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  readonly thread: Schema.optionalKey<Schema.brand<Schema.String, "WrittenThread">>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly cancelled: Schema.Literals<readonly ["start", "yours"]>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof StartNotFound | typeof StartPast | typeof RunUnavailable>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"start", "POST", "/v1/repos/:owner/:repo/runs", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   repo: Schema.brand<Schema.String, "RepoName">;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
@@ -18140,8 +17871,287 @@ declare const RunsGroup_base: HttpApiGroup.HttpApiGroup<"runs", HttpApiEndpoint.
         readonly answer: Schema.optionalKey<Schema.String>;
       }>>;
     }>>;
-  }>;
-}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunRefused | typeof RunUnavailable | typeof CheckNotFound | typeof NoThreadHead>, Authorization, never>, false>;
+  }>;
+}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunRefused | typeof RunUnavailable | typeof CheckNotFound | typeof NoThreadHead>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"report", "POST", "/v1/repos/:owner/:repo/runs/local", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+  readonly thread: Schema.brand<Schema.String, "WrittenThread">;
+  readonly check: Schema.brand<Schema.String, "CheckName">;
+  readonly code: Schema.Struct<{
+    readonly version: Schema.brand<Schema.String, "CheckCodeVersion">;
+    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
+  }>;
+  readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+  readonly tree: Schema.brand<Schema.String, "TreeOid">;
+  readonly result: Schema.Union<readonly [Schema.Struct<{
+    readonly conclusion: Schema.Literals<readonly ["success", "failure", "neutral"]>;
+    readonly output: Schema.optionalKey<Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly needs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"review">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"accountable">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"admin">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"permission">;
+      readonly name: Schema.brand<Schema.String, "RepoPermissionName">;
+    }>]>>>;
+  }>, Schema.Struct<{
+    readonly error: Schema.Literals<readonly ["threw", "invalid output", "timeout"]>;
+    readonly why: Schema.optionalKey<Schema.String>;
+  }>]>;
+  readonly outputsHash: Schema.String;
+  readonly attachment: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly run: Schema.Union<readonly [Schema.Struct<{
+    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+    readonly check: Schema.brand<Schema.String, "CheckName">;
+    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly rerun: Schema.Int;
+    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
+    readonly tree: Schema.brand<Schema.String, "TreeOid">;
+    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
+    readonly createdAt: Schema.DateTimeUtcFromMillis;
+    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly starters: Schema.$Array<Schema.Struct<{
+      readonly actor: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"person">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"agent">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"ref0">;
+        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
+      }>]>;
+      readonly request: Schema.String;
+      readonly at: Schema.DateTimeUtcFromMillis;
+    }>>;
+    readonly local: Schema.optionalKey<Schema.Struct<{
+      readonly attachment: Schema.Struct<{
+        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+      }>;
+      readonly agent: Schema.optionalKey<Schema.Struct<{
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      }>>;
+    }>>;
+    readonly routes: Schema.optionalKey<Schema.Struct<{
+      readonly requests: Schema.Int;
+      readonly omitted: Schema.Int;
+      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
+      readonly refusals: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly refusalsOmitted: Schema.Int;
+      readonly reported: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly reportedOmitted: Schema.Int;
+    }>>;
+    readonly browsers: Schema.optionalKey<Schema.Struct<{
+      readonly browses: Schema.Int;
+      readonly closing: Schema.Int;
+      readonly unconfirmed: Schema.Int;
+      readonly lastError: Schema.optionalKey<Schema.String>;
+      readonly unresolved: Schema.Int;
+      readonly presumedExpired: Schema.Int;
+      readonly browserMs: Schema.Int;
+      readonly estimated: Schema.Boolean;
+    }>>;
+    readonly state: Schema.Literals<readonly ["waiting", "pending", "starting", "created", "running"]>;
+  }>, Schema.Struct<{
+    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+    readonly check: Schema.brand<Schema.String, "CheckName">;
+    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly rerun: Schema.Int;
+    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
+    readonly tree: Schema.brand<Schema.String, "TreeOid">;
+    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
+    readonly createdAt: Schema.DateTimeUtcFromMillis;
+    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly starters: Schema.$Array<Schema.Struct<{
+      readonly actor: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"person">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"agent">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"ref0">;
+        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
+      }>]>;
+      readonly request: Schema.String;
+      readonly at: Schema.DateTimeUtcFromMillis;
+    }>>;
+    readonly local: Schema.optionalKey<Schema.Struct<{
+      readonly attachment: Schema.Struct<{
+        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+      }>;
+      readonly agent: Schema.optionalKey<Schema.Struct<{
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      }>>;
+    }>>;
+    readonly routes: Schema.optionalKey<Schema.Struct<{
+      readonly requests: Schema.Int;
+      readonly omitted: Schema.Int;
+      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
+      readonly refusals: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly refusalsOmitted: Schema.Int;
+      readonly reported: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly reportedOmitted: Schema.Int;
+    }>>;
+    readonly browsers: Schema.optionalKey<Schema.Struct<{
+      readonly browses: Schema.Int;
+      readonly closing: Schema.Int;
+      readonly unconfirmed: Schema.Int;
+      readonly lastError: Schema.optionalKey<Schema.String>;
+      readonly unresolved: Schema.Int;
+      readonly presumedExpired: Schema.Int;
+      readonly browserMs: Schema.Int;
+      readonly estimated: Schema.Boolean;
+    }>>;
+    readonly state: Schema.Literal<"ended">;
+    readonly conclusion: Schema.Literals<readonly ["success", "failure", "neutral"]>;
+  }>, Schema.Struct<{
+    readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+    readonly check: Schema.brand<Schema.String, "CheckName">;
+    readonly params: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+    readonly rerun: Schema.Int;
+    readonly rerunOf: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">>;
+    readonly tree: Schema.brand<Schema.String, "TreeOid">;
+    readonly origin: Schema.Literals<readonly ["main", "thread", "project"]>;
+    readonly createdAt: Schema.DateTimeUtcFromMillis;
+    readonly startedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly endedAt: Schema.optionalKey<Schema.DateTimeUtcFromMillis>;
+    readonly starters: Schema.$Array<Schema.Struct<{
+      readonly actor: Schema.Union<readonly [Schema.Struct<{
+        readonly kind: Schema.Literal<"person">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"agent">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      }>, Schema.Struct<{
+        readonly kind: Schema.Literal<"ref0">;
+        readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
+      }>]>;
+      readonly request: Schema.String;
+      readonly at: Schema.DateTimeUtcFromMillis;
+    }>>;
+    readonly local: Schema.optionalKey<Schema.Struct<{
+      readonly attachment: Schema.Struct<{
+        readonly person: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+      }>;
+      readonly agent: Schema.optionalKey<Schema.Struct<{
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      }>>;
+    }>>;
+    readonly routes: Schema.optionalKey<Schema.Struct<{
+      readonly requests: Schema.Int;
+      readonly omitted: Schema.Int;
+      readonly trace: Schema.Literals<readonly ["pending", "kept", "failed"]>;
+      readonly refusals: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly refusalsOmitted: Schema.Int;
+      readonly reported: Schema.$Array<Schema.Struct<{
+        readonly run: Schema.brand<Schema.TemplateLiteral<readonly ["checkrun_", Schema.String]>, "CheckRunId">;
+        readonly step: Schema.String;
+        readonly count: Schema.Int;
+        readonly attempt: Schema.Int;
+        readonly provenance: Schema.Literals<readonly ["observed", "reported"]>;
+        readonly why: Schema.Literals<readonly ["scheme", "https", "host", "port", "websocket", "webrtc", "deadline", "ended", "not yours", "closed", "browse closed", "fenced", "not open", "not served", "stopped", "unreachable", "too many", "unavailable"]>;
+        readonly recovery: Schema.String;
+        readonly session: Schema.brand<Schema.TemplateLiteral<readonly ["sbxsession_", Schema.String]>, "SandboxSessionId">;
+        readonly url: Schema.String;
+      }>>;
+      readonly reportedOmitted: Schema.Int;
+    }>>;
+    readonly browsers: Schema.optionalKey<Schema.Struct<{
+      readonly browses: Schema.Int;
+      readonly closing: Schema.Int;
+      readonly unconfirmed: Schema.Int;
+      readonly lastError: Schema.optionalKey<Schema.String>;
+      readonly unresolved: Schema.Int;
+      readonly presumedExpired: Schema.Int;
+      readonly browserMs: Schema.Int;
+      readonly estimated: Schema.Boolean;
+    }>>;
+    readonly state: Schema.Literal<"ended">;
+    readonly error: Schema.Literals<readonly ["timeout", "threw", "invalid output", "unavailable", "expired", "cancelled"]>;
+  }>]>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof ThreadNotFound | typeof RepoNotFound | typeof RequestChanged | typeof RunsBusy | typeof RunUnavailable | typeof LocalRunRefused>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"restoreSigner", "POST", "/v1/repos/:owner/:repo/checks/signers/restore", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  repo: Schema.brand<Schema.String, "RepoName">;
+}>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+  readonly check: Schema.brand<Schema.String, "CheckKey">;
+  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+}>, Schema.Struct<{
+  readonly check: Schema.brand<Schema.String, "CheckKey">;
+  readonly person: Schema.brand<Schema.String, "OwnerName">;
+}>]>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+  readonly check: Schema.brand<Schema.String, "CheckKey">;
+  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+}>, Schema.Struct<{
+  readonly check: Schema.brand<Schema.String, "CheckKey">;
+  readonly person: Schema.brand<Schema.String, "OwnerName">;
+}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof RepoNotFound | typeof SignerNotRevoked>, Authorization, never>, false>;
 /**
  * A repo's check runs: starting them, on `main` or a thread's head, for whoever's token reaches
  * `check:run` there, and listing them, one scope at a time, for whoever sees it. A person's start
@@ -18201,7 +18211,23 @@ declare const ClientGrantsGroup_base: HttpApiGroup.HttpApiGroup<"clientGrants",
  * consented, hands the client its code.
  */
 declare class ClientGrantsGroup extends ClientGrantsGroup_base {}
-declare const OrganizationsGroup_base: HttpApiGroup.HttpApiGroup<"organizations", HttpApiEndpoint.HttpApiEndpoint<"meters", "GET", "/v1/owners/:owner/meters", Schema.toCodecStringTree<Schema.Struct<{
+declare const OrganizationsGroup_base: HttpApiGroup.HttpApiGroup<"organizations", HttpApiEndpoint.HttpApiEndpoint<"leave", "DELETE", "/v1/me/organizations/:owner", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly member: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"person">;
+    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"agent">;
+    readonly agent: Schema.Struct<{
+      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+    }>;
+  }>]>;
+  readonly why: Schema.Literals<readonly ["removed", "left"]>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"meters", "GET", "/v1/owners/:owner/meters", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
   from: Schema.optionalKey<Schema.brand<Schema.String, "UtcDay">>;
@@ -18428,23 +18454,7 @@ declare const OrganizationsGroup_base: HttpApiGroup.HttpApiGroup<"organizations"
     }>>;
   }>;
   readonly pricesAsOf: Schema.String;
-}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof UsageRangeRefused | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"leave", "DELETE", "/v1/me/organizations/:owner", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly member: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"person">;
-    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"agent">;
-    readonly agent: Schema.Struct<{
-      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-    }>;
-  }>]>;
-  readonly why: Schema.Literals<readonly ["removed", "left"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"create", "POST", "/v1/organizations", never, never, Schema.toCodecJson<Schema.Struct<{
+}>]>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof UsageRangeRefused | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"create", "POST", "/v1/organizations", never, never, Schema.toCodecJson<Schema.Struct<{
   readonly name: Schema.brand<Schema.String, "OwnerName">;
   readonly displayName: Schema.optionalKey<Schema.String>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
@@ -18460,7 +18470,24 @@ declare const OrganizationsGroup_base: HttpApiGroup.HttpApiGroup<"organizations"
  * usage. Every change is a person's, by approval; agents never change members.
  */
 declare class OrganizationsGroup extends OrganizationsGroup_base {}
-declare const MembersGroup_base: HttpApiGroup.HttpApiGroup<"members", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/members", Schema.toCodecStringTree<Schema.Struct<{
+declare const MembersGroup_base: HttpApiGroup.HttpApiGroup<"members", HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/members/:member", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  member: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly member: Schema.Union<readonly [Schema.Struct<{
+    readonly kind: Schema.Literal<"person">;
+    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+  }>, Schema.Struct<{
+    readonly kind: Schema.Literal<"agent">;
+    readonly agent: Schema.Struct<{
+      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+    }>;
+  }>]>;
+  readonly why: Schema.Literals<readonly ["removed", "left"]>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/members", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
   cursor: Schema.optionalKey<Schema.brand<Schema.String, "MemberCursor">>;
@@ -18500,27 +18527,17 @@ declare const MembersGroup_base: HttpApiGroup.HttpApiGroup<"members", HttpApiEnd
     }>;
   }>]>;
   readonly role: Schema.Literals<readonly ["admin", "member"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/members/:member", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never>, false>;
+/** An organization's members: any member lists them; an admin changes a role or removes one. */
+declare class MembersGroup extends MembersGroup_base {}
+declare const InvitationsGroup_base: HttpApiGroup.HttpApiGroup<"invitations", HttpApiEndpoint.HttpApiEndpoint<"withdraw", "DELETE", "/v1/owners/:owner/invitations/:invitation", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  member: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+  invitation: Schema.brand<Schema.TemplateLiteral<readonly ["invitation_", Schema.String]>, "InvitationId">;
 }>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
-  readonly member: Schema.Union<readonly [Schema.Struct<{
-    readonly kind: Schema.Literal<"person">;
-    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-  }>, Schema.Struct<{
-    readonly kind: Schema.Literal<"agent">;
-    readonly agent: Schema.Struct<{
-      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-    }>;
-  }>]>;
-  readonly why: Schema.Literals<readonly ["removed", "left"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof LastAdmin | typeof OrganizationNotFound>, Authorization, never>, false>;
-/** An organization's members: any member lists them; an admin changes a role or removes one. */
-declare class MembersGroup extends MembersGroup_base {}
-declare const InvitationsGroup_base: HttpApiGroup.HttpApiGroup<"invitations", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/invitations", Schema.toCodecStringTree<Schema.Struct<{
+  readonly invitation: Schema.brand<Schema.TemplateLiteral<readonly ["invitation_", Schema.String]>, "InvitationId">;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof InvitationNotFound | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/invitations", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
   cursor: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["invitation_", Schema.String]>, "InvitationId">>;
@@ -18570,14 +18587,7 @@ declare const InvitationsGroup_base: HttpApiGroup.HttpApiGroup<"invitations", Ht
   readonly organization: Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">;
   readonly answer: Schema.Literals<readonly ["accept", "decline"]>;
   readonly role: Schema.Literals<readonly ["admin", "member"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof InvitationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"withdraw", "DELETE", "/v1/owners/:owner/invitations/:invitation", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  invitation: Schema.brand<Schema.TemplateLiteral<readonly ["invitation_", Schema.String]>, "InvitationId">;
-}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly invitation: Schema.brand<Schema.TemplateLiteral<readonly ["invitation_", Schema.String]>, "InvitationId">;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof InvitationNotFound | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"send", "POST", "/v1/owners/:owner/invitations", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof InvitationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"send", "POST", "/v1/owners/:owner/invitations", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
   readonly invitee: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
@@ -18598,56 +18608,7 @@ declare const InvitationsGroup_base: HttpApiGroup.HttpApiGroup<"invitations", Ht
  * theirs and accepts or declines one, which is found from their own list, never the client.
  */
 declare class InvitationsGroup extends InvitationsGroup_base {}
-declare const GrantsGroup_base: HttpApiGroup.HttpApiGroup<"grants", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  after: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">>;
-  limit: Schema.optionalKey<Schema.Int>;
-}>>, never, never, Schema.toCodecJson<Schema.Struct<{
-  readonly grants: Schema.$Array<Schema.Struct<{
-    readonly grant: Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">;
-    readonly subject: Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"owner">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"project">;
-      readonly project: Schema.brand<Schema.String, "ProjectName">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"thread">;
-      readonly thread: Schema.brand<Schema.String, "WrittenThread">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"agent">;
-      readonly handle: Schema.brand<Schema.String, "AgentHandle">;
-    }>]>;
-    readonly principal: Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"person">;
-      readonly name: Schema.brand<Schema.String, "OwnerName">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"agent">;
-      readonly owner: Schema.brand<Schema.String, "OwnerName">;
-      readonly handle: Schema.brand<Schema.String, "AgentHandle">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"agent">;
-      readonly agent: Schema.Struct<{
-        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      }>;
-    }>]>;
-    readonly role: Schema.Literals<readonly ["read", "write", "attach", "manage"]>;
-    readonly grantedBy: Schema.Union<readonly [Schema.Struct<{
-      readonly kind: Schema.Literal<"person">;
-      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"agent">;
-      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-    }>, Schema.Struct<{
-      readonly kind: Schema.Literal<"ref0">;
-      readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
-    }>]>;
-    readonly grantedAt: Schema.DateTimeUtcFromMillis;
-  }>>;
-  readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"revoke", "DELETE", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
+declare const GrantsGroup_base: HttpApiGroup.HttpApiGroup<"grants", HttpApiEndpoint.HttpApiEndpoint<"revoke", "DELETE", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
   readonly subject: Schema.Union<readonly [Schema.Struct<{
@@ -18703,7 +18664,56 @@ declare const GrantsGroup_base: HttpApiGroup.HttpApiGroup<"grants", HttpApiEndpo
     }>;
   }>]>;
   readonly role: Schema.Literals<readonly ["read", "write", "attach", "manage"]>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof OrganizationNotFound | typeof SubjectNotFound | typeof RoleNotFitting>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"set", "PUT", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof MemberNotFound | typeof OrganizationNotFound | typeof SubjectNotFound | typeof RoleNotFitting>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  after: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">>;
+  limit: Schema.optionalKey<Schema.Int>;
+}>>, never, never, Schema.toCodecJson<Schema.Struct<{
+  readonly grants: Schema.$Array<Schema.Struct<{
+    readonly grant: Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">;
+    readonly subject: Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"owner">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"project">;
+      readonly project: Schema.brand<Schema.String, "ProjectName">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"thread">;
+      readonly thread: Schema.brand<Schema.String, "WrittenThread">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"agent">;
+      readonly handle: Schema.brand<Schema.String, "AgentHandle">;
+    }>]>;
+    readonly principal: Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"person">;
+      readonly name: Schema.brand<Schema.String, "OwnerName">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"agent">;
+      readonly owner: Schema.brand<Schema.String, "OwnerName">;
+      readonly handle: Schema.brand<Schema.String, "AgentHandle">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"agent">;
+      readonly agent: Schema.Struct<{
+        readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+        readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      }>;
+    }>]>;
+    readonly role: Schema.Literals<readonly ["read", "write", "attach", "manage"]>;
+    readonly grantedBy: Schema.Union<readonly [Schema.Struct<{
+      readonly kind: Schema.Literal<"person">;
+      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"agent">;
+      readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+      readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+    }>, Schema.Struct<{
+      readonly kind: Schema.Literal<"ref0">;
+      readonly id: Schema.Literals<("ref0:attachments" | "ref0:barrier" | "ref0:blockers" | "ref0:checks" | "ref0:gate" | "ref0:hooks" | "ref0:importer" | "ref0:invitations" | "ref0:listings" | "ref0:mirror" | "ref0:needs" | "ref0:oauth" | "ref0:owners" | "ref0:plans" | "ref0:prepare" | "ref0:project-gate" | "ref0:pushes" | "ref0:queue" | "ref0:rebuilder" | "ref0:sessions" | "ref0:sign-in" | "ref0:stages" | "ref0:sweeper" | "ref0:usage" | "ref0:warm-up" | "ref0:workflows")[]>;
+    }>]>;
+    readonly grantedAt: Schema.DateTimeUtcFromMillis;
+  }>>;
+  readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["event_", Schema.String]>, "EventId">>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"set", "PUT", "/v1/owners/:owner/grants", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, never, Schema.toCodecJson<Schema.Struct<{
   readonly subject: Schema.Union<readonly [Schema.Struct<{
@@ -18796,11 +18806,10 @@ declare const AgentsGroup_base: HttpApiGroup.HttpApiGroup<"agents", HttpApiEndpo
     readonly addedAt: Schema.DateTimeUtcFromMillis;
   }>>;
   readonly nextAfter: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">>;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"add", "POST", "/v1/owners/:owner/agents", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"disable", "POST", "/v1/owners/:owner/agents/:agent/disable", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly handle: Schema.brand<Schema.String, "AgentHandle">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
+  agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
+}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly agent: Schema.Struct<{
@@ -18810,7 +18819,7 @@ declare const AgentsGroup_base: HttpApiGroup.HttpApiGroup<"agents", HttpApiEndpo
   readonly handle: Schema.brand<Schema.String, "AgentHandle">;
   readonly generation: Schema.Int;
   readonly turnedOff: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof HandleTaken | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"disable", "POST", "/v1/owners/:owner/agents/:agent/disable", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"enable", "POST", "/v1/owners/:owner/agents/:agent/enable", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
   agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
 }>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
@@ -18823,10 +18832,11 @@ declare const AgentsGroup_base: HttpApiGroup.HttpApiGroup<"agents", HttpApiEndpo
   readonly handle: Schema.brand<Schema.String, "AgentHandle">;
   readonly generation: Schema.Int;
   readonly turnedOff: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"enable", "POST", "/v1/owners/:owner/agents/:agent/enable", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"add", "POST", "/v1/owners/:owner/agents", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
-}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly handle: Schema.brand<Schema.String, "AgentHandle">;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly agent: Schema.Struct<{
@@ -18836,7 +18846,7 @@ declare const AgentsGroup_base: HttpApiGroup.HttpApiGroup<"agents", HttpApiEndpo
   readonly handle: Schema.brand<Schema.String, "AgentHandle">;
   readonly generation: Schema.Int;
   readonly turnedOff: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never>, false>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof HandleTaken | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never>, false>;
 /**
  * An owner's agents (layer 1): an organization's members, or a person themselves, read them and
  * turn one off everywhere, or on again; an organization's admin adds one, and only an admin turns
@@ -18844,15 +18854,10 @@ declare const AgentsGroup_base: HttpApiGroup.HttpApiGroup<"agents", HttpApiEndpo
  * its machines' host grants by the agent's ID.
  */
 declare class AgentsGroup extends AgentsGroup_base {}
-declare const AuthorizationsGroup_base: HttpApiGroup.HttpApiGroup<"authorizations", HttpApiEndpoint.HttpApiEndpoint<"add", "POST", "/v1/owners/:owner/authorizations", Schema.toCodecStringTree<Schema.Struct<{
+declare const AuthorizationsGroup_base: HttpApiGroup.HttpApiGroup<"authorizations", HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/authorizations/:attachment", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly agent: Schema.Struct<{
-    readonly owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-    readonly agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
-  }>;
-  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
+  attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly agent: Schema.Struct<{
@@ -18865,10 +18870,15 @@ declare const AuthorizationsGroup_base: HttpApiGroup.HttpApiGroup<"authorization
   }>;
   readonly generation: Schema.Int;
   readonly authorized: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof AgentTurnedOff | typeof DeliveryOutsideWindow | typeof AttachmentNotFound | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/authorizations/:attachment", Schema.toCodecStringTree<Schema.Struct<{
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof AttachmentNotFound | typeof OrganizationNotFound | typeof AuthorizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"add", "POST", "/v1/owners/:owner/authorizations", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-  attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
-}>>, never, never, Schema.toCodecStringTree<Schema.Struct<{
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly agent: Schema.Struct<{
+    readonly owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+    readonly agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
+  }>;
+  readonly attachment: Schema.brand<Schema.TemplateLiteral<readonly ["token_", Schema.String]>, "TokenId">;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
   'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
 }>>, Schema.toCodecJson<Schema.Struct<{
   readonly agent: Schema.Struct<{
@@ -18881,7 +18891,7 @@ declare const AuthorizationsGroup_base: HttpApiGroup.HttpApiGroup<"authorization
   }>;
   readonly generation: Schema.Int;
   readonly authorized: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof DeliveryOutsideWindow | typeof AttachmentNotFound | typeof OrganizationNotFound | typeof AuthorizationNotFound>, Authorization, never>, false>;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof AgentTurnedOff | typeof DeliveryOutsideWindow | typeof AttachmentNotFound | typeof OrganizationNotFound>, Authorization, never>, false>;
 /**
  * A member's own agent working in an organization (layer 1): its person authorizes an attachment
  * of it there, by its credential's ID, or takes that back. The Worker checks the attachment is
@@ -18889,7 +18899,23 @@ declare const AuthorizationsGroup_base: HttpApiGroup.HttpApiGroup<"authorization
  * decides. People only, by approval.
  */
 declare class AuthorizationsGroup extends AuthorizationsGroup_base {}
-declare const AgentDisablesGroup_base: HttpApiGroup.HttpApiGroup<"agentDisables", HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/agent-disables", Schema.toCodecStringTree<Schema.Struct<{
+declare const AgentDisablesGroup_base: HttpApiGroup.HttpApiGroup<"agentDisables", HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/agent-disables", Schema.toCodecStringTree<Schema.Struct<{
+  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+  readonly agent: Schema.Struct<{
+    readonly owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
+    readonly agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
+  }>;
+}>>, Schema.toCodecStringTree<Schema.Struct<{
+  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
+}>>, Schema.toCodecJson<Schema.Struct<{
+  readonly agent: Schema.Struct<{
+    readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
+    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
+  }>;
+  readonly targetGeneration: Schema.Int;
+  readonly turnedOff: Schema.Boolean;
+}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"list", "GET", "/v1/owners/:owner/agent-disables", Schema.toCodecStringTree<Schema.Struct<{
   owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
 }>>, Schema.toCodecStringTree<Schema.Struct<{
   after: Schema.optionalKey<Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">>;
@@ -18932,22 +18958,6 @@ declare const AgentDisablesGroup_base: HttpApiGroup.HttpApiGroup<"agentDisables"
   }>;
   readonly targetGeneration: Schema.Int;
   readonly turnedOff: Schema.Boolean;
-}>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never> | HttpApiEndpoint.HttpApiEndpoint<"remove", "DELETE", "/v1/owners/:owner/agent-disables", Schema.toCodecStringTree<Schema.Struct<{
-  owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-}>>, never, Schema.toCodecJson<Schema.Struct<{
-  readonly agent: Schema.Struct<{
-    readonly owner: Schema.Union<readonly [Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>, Schema.brand<Schema.String, "OwnerName">]>;
-    readonly agent: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">, Schema.brand<Schema.String, "AgentHandle">]>;
-  }>;
-}>>, Schema.toCodecStringTree<Schema.Struct<{
-  'idempotency-key': Schema.brand<Schema.TemplateLiteral<readonly ["request_", Schema.String]>, "RequestId">;
-}>>, Schema.toCodecJson<Schema.Struct<{
-  readonly agent: Schema.Struct<{
-    readonly owner: Schema.Union<readonly [Schema.brand<Schema.TemplateLiteral<readonly ["person_", Schema.String]>, "PersonId">, Schema.brand<Schema.TemplateLiteral<readonly ["org_", Schema.String]>, "OrgId">]>;
-    readonly id: Schema.brand<Schema.TemplateLiteral<readonly ["agent_", Schema.String]>, "AgentId">;
-  }>;
-  readonly targetGeneration: Schema.Int;
-  readonly turnedOff: Schema.Boolean;
 }>>, Schema.toCodecJson<typeof NotPermitted | typeof AuthorityUnavailable | typeof AgentNotFound | typeof DeliveryOutsideWindow | typeof OrganizationNotFound>, Authorization, never>, false>;
 /**
  * Agents of other owners an organization's admin turns off there (layer 1), such as a member's
@@ -29197,4 +29207,4 @@ declare const SandboxExecAnswer: Schema.Union<readonly [Schema.Struct<{
 type SandboxExecAnswer = typeof SandboxExecAnswer.Type;
 //#endregion
 export { MirrorEntry as $, WorkflowAskClosed as $t, ConnectionCallAnswer as A, WorkflowPreview as An, ScopeAction as At, EventRunInput as B, commandLine as Bn, StatementView as Bt, ConnectAgent as C, WorkflowOwn as Cn, SandboxExec as Ct, ConnectOptions as D, WorkflowPasskeyRead as Dn, SandboxPush as Dt, ConnectFolderOption as E, WorkflowPasskeyEnded as En, SandboxOpenAnswer as Et, ConsentAsked as F, WorkflowStartState as Fn, SignInDestination as Ft, GetIssueInput as G, isRef0Path as Gn, TrackThread as Gt, ForkAnswer as H, encodeSecret as Hn, ThreadStage as Ht, ConsentClient as I, WorkflowText as In, SignedIn as It, LiveTicket as J, repoNameKey as Jn, Welcome as Jt, Harness as K, liveSocketUrl as Kn, TypedApprovalCode as Kt, ConsentProject as L, WorkflowThreadStart as Ln, SocketUrl as Lt, ConnectionKind as M, WorkflowPullRequestOpen as Mn, SentryOrg as Mt, ConnectionName as N, WorkflowRequestRefusal as Nn, SentryRegion as Nt, ConnectableAgent as O, WorkflowPasskeyState as On, SandboxPushAnswer as Ot, ConnectionView as P, WorkflowStartEnded as Pn, SentryToken as Pt, MirrorChoice as Q, WorkflowAsk as Qt, CredentialView as R, WorkflowTrigger as Rn, StartActor as Rt, ClientGranted as S, WorkflowFilters as Sn, RequestFolder as St, ConnectFolderChoices as T, WorkflowPasskeyAsked as Tn, SandboxOpen as Tt, ForkCreate as U, hookTokenPrefix as Un, TrackClosed as Ut, FoldersConnected as V, connectEndpoint as Vn, ThreadId as Vt, GateOwn as W, hookUrl as Wn, TrackSession as Wt, LiveTrackName as X, WorkflowActionAnswer as Xt, LiveTicketRequest as Y, surfaceOf as Yn, WorkflowAction as Yt, MachineConnected as Z, WorkflowAnswerer as Zt, CheckOwn as _, WorkflowCheckStatesAnswer as _n, ReadEvent as _t, Api as a, WorkflowCallRefused as an, OwnerTrackMessage as at, CheckTreeEntry as b, WorkflowConnections as bn, RepoUrl as bt, ApprovalId as c, WorkflowCheckRefusal as cn, PasskeyCreationOptions as ct, ApprovalView as d, WorkflowCheckResultsAnswer as dn, PasskeyRequestOptions as dt, WorkflowCall as en, MirrorView as et, AttachmentFailed as f, WorkflowCheckRun as fn, PreviewEcho as ft, CheckOn as g, WorkflowCheckStates as gn, RanOf as gt, ChangeAuthor as h, WorkflowCheckStartAnswer as hn, ProjectTrackMessage as ht, AgentView as i, WorkflowCallRefusal as in, OwnerThreadView as it, ConnectionChanged as j, WorkflowPullRequestAnswer as jn, SecretHash as jt, ConnectionCall as k, WorkflowPermissions as kn, SandboxSize as kt, ApprovalPreview as l, WorkflowCheckRefused as ln, PasskeyFrom as lt, Authorization as m, WorkflowCheckStart as mn, ProjectName as mt, AgentPermissionChoice as n, WorkflowCallEnded as nn, OwnerName as nt, ApiOrigin as o, WorkflowCalledState as on, PasskeyAsserted as ot, AttachmentRequestView as p, WorkflowCheckRunEnded as pn, PreviewUnavailable as pt, ImportFailure as q, projectParts as qn, VersionFile as qt, AgentPermissionSetting as r, WorkflowCallInput as rn, OwnerThreadPage as rt, ApprovalAnswer as s, WorkflowCalledStateAnswer as sn, PasskeyCreated as st, AgentHandle as t, WorkflowCallAnswer as tn, OwnerId as tt, ApprovalState as u, WorkflowCheckResults as un, PasskeyRefusal as ut, CheckRunError as v, WorkflowCheckWhere as vn, Ref0Owned as vt, ConnectChosen as w, WorkflowPasskeyAsk as wn, SandboxExecAnswer as wt, ClientAccess as x, WorkflowEvent as xn, RepoView as xt, CheckRunParams as y, WorkflowComment as yn, RepoName as yt, EndpointName as z, WrittenProject as zn, StartRun as zt };
-//# sourceMappingURL=index-Vb8-1Zk-.d.mts.map
+//# sourceMappingURL=index-Db86z11q.d.mts.map