@runtypelabs/sdk 6.6.2 → 7.0.0

package/dist/index.d.ts

@@ -6717,6 +6717,8 @@ interface paths {
                                 /** @enum {string} */
                                 type: "reasoning";
                             })[];
+                            /** @description The text a human actually saw for this message, when it differs from `content`. Stored beside the model content and returned by the history routes; NEVER read by execution, and never treated as authority. Send it for a message whose visible form is not its model form (a structured payload, a hidden `llmContent` variant, a directive rendered as UI). Absent means no projection was captured; an empty string is a deliberate empty projection, and the two are distinguished on read. For a message id the conversation already stores, only this field is taken — the stored model content wins — which makes a re-sent turn an idempotent repair path for a display-projection finalization that never landed. Plain text or Markdown, never rendered HTML. */
+                            displayContent?: string;
                             id?: string;
                             /** @enum {string} */
                             role: "user" | "assistant" | "system";
@@ -6750,13 +6752,16 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Session not found or expired */
+                /** @description Session not found or expired, or an `identityProof` was supplied that failed verification (`invalid_identity_proof`, fail-closed: the turn never runs). Identity-proof rejections carry `errorDescription` naming the reason. */
                 401: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": components["schemas"]["Error"] & {
+                            /** @description Why the supplied `identityProof` was refused (for example an expired assertion, an unknown issuer, or a proof minted for another tenant). Diagnostic text for the embedding site, not a value to branch on. */
+                            errorDescription?: string;
+                        };
                     };
                 };
                 /** @description Forbidden. Either the client token is inactive or the origin is not allowed, or the tenancy lock-down refused the execution: the agent requires an end-user scope and no valid `identityProof` was supplied (`end_user_scope_required`), or this session's conversation record belongs to a different signed-in end user (`conversation_scope_mismatch`; start a new conversation). */
@@ -6777,7 +6782,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Conflict. Either the client tools registry fingerprint was not found (`client_tools_resend_required`; resend full clientTools[]. The response may include `clientToolsFingerprint` for retry correlation), or this turn was superseded by a newer interrupting turn before it could start (`turn_superseded`). */
+                /** @description Conflict. Either the client tools registry fingerprint was not found (`client_tools_resend_required`; resend the full `clientTools[]` with the fingerprint), or this turn was superseded by a newer interrupting turn before it could start (`turn_superseded`). The body carries `error` alone. */
                 409: {
                     headers: {
                         [name: string]: unknown;
@@ -6812,6 +6817,610 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/client/conversations": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List the visitor's own conversations
+         * @description List conversations belonging to the calling browser's anonymous visitor, newest first, cursor-paginated. Requires both a live `sessionId` and the `X-Visitor-Token` secret from `/client/init`; the site-wide client token alone can never reach this route. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
+         */
+        get: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                    /** @description Only return conversations for this flow or agent id. Pass the `targetId` returned by `/client/init`. */
+                    targetId?: string;
+                    /** @description Deprecated alias of `targetId`. Sending both with different values is rejected 400; sending both with the same value is accepted. */
+                    flowId?: string;
+                    /** @description Opaque cursor returned as `nextCursor` by a previous page. Omit for the first page. */
+                    cursor?: string;
+                    /** @description Page size as a decimal string. Defaults to 25, clamped to a maximum of 100. A non-numeric or non-positive value falls back to the default. */
+                    limit?: string;
+                };
+                header: {
+                    /** @description The browser's anonymous visitor secret (`cvt_…`) returned by `/client/init`. It is what scopes the request to one visitor's own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or `Referer`. */
+                    "x-visitor-token": string;
+                    /** @description Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped. */
+                    "x-identity-proof"?: string;
+                };
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Conversations page */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description Conversations owned by the calling visitor, newest first. */
+                            data: {
+                                /** @description ISO-8601 timestamp of the first turn, i.e. when the conversation was created. */
+                                createdAt: string;
+                                /** @description Deprecated alias of `targetId`, carrying the same value. Retained for clients written before the rename; read `targetId` instead. */
+                                flowId: string | null;
+                                /** @description Conversation id. */
+                                id: string;
+                                /** @description Number of stored messages. Falls back to the length of the stored transcript when the conversation predates the counter. */
+                                messageCount: number;
+                                /** @description Plain-text excerpt of the conversation's most recent visitor-visible message, bounded to 140 Unicode code points, for a scannable history list. Derived from `displayContent` when the message has one and never from opaque model-only content, so it cannot become the one place internals leak. Null when the latest visible message has no text — including when its captured projection is deliberately empty. */
+                                preview: string | null;
+                                /** @description The flow or agent this conversation ran against, and the exact value to pass as the `targetId` list/delete filter. Null for a conversation stored without one. Canonical replacement for `flowId`. */
+                                targetId: string | null;
+                                /** @description Display title. Uses a timestamp fallback unless conversation-title generation is enabled and produces a title from the opening exchange. */
+                                title: string;
+                                /** @description ISO-8601 timestamp of the most recent write. Sort key for "resume where I left off" in a widget. */
+                                updatedAt: string;
+                            }[];
+                            /** @description Opaque cursor for the next page, or null when exhausted. */
+                            nextCursor: string | null;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId`, an undecodable `cursor`, `targetId` or `flowId` supplied empty (`invalid_target_filter`), or the two supplied with different values (`conflicting_target_filter`) */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired, or missing/invalid visitor token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header with the advisory wait in seconds. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description An `X-Identity-Proof` was supplied but end-user identity admission is not enabled for this token owner, so it cannot be evaluated (`identity_proof_not_admitted`). Nothing was read, deleted, or otherwise acted on. Retry without the proof to act at plain browser scope. Distinct from 401 `invalid_identity_proof`, which means the proof WAS evaluated and rejected. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        /**
+         * Delete all of the visitor's own conversations
+         * @description Permanently delete every conversation belonging to the calling visitor, with their transcripts. Intended for a widget's "clear my history" control and for host-site privacy-erasure hooks. Pass `targetId` to delete only the conversations a target-scoped UI actually listed; OMITTING it deliberately means every conversation in the authorized visitor scope, across all targets. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
+         */
+        delete: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                    /** @description Only delete conversations for this flow or agent id, matching the list route's filter. Omit to delete the visitor's entire authorized history. A widget showing one target's history should always send this, so "clear my history" cannot remove conversations the visitor was never shown. */
+                    targetId?: string;
+                    /** @description Deprecated alias of `targetId`. Sending both with different values is rejected 400; sending both with the same value is accepted. */
+                    flowId?: string;
+                };
+                header: {
+                    /** @description The browser's anonymous visitor secret (`cvt_…`) returned by `/client/init`. It is what scopes the request to one visitor's own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or `Referer`. */
+                    "x-visitor-token": string;
+                    /** @description Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped. */
+                    "x-identity-proof"?: string;
+                };
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Deleted. `deleted` counts the rows removed and is 0 when the visitor had no history in scope. */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description Number of conversations deleted. The delete-all route returns 0 when the visitor has no history, rather than an error. */
+                            deleted: number;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId`, `targetId` or `flowId` supplied empty (`invalid_target_filter`), or the two supplied with different values (`conflicting_target_filter`) */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired, or missing/invalid visitor token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header with the advisory wait in seconds. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description An `X-Identity-Proof` was supplied but end-user identity admission is not enabled for this token owner, so it cannot be evaluated (`identity_proof_not_admitted`). Nothing was read, deleted, or otherwise acted on. Retry without the proof to act at plain browser scope. Distinct from 401 `invalid_identity_proof`, which means the proof WAS evaluated and rejected. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/client/conversations/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Read one of the visitor's own conversations
+         * @description Return a single conversation with its message transcript. Answers 404 (never 403) for a conversation the caller does not own, so the route cannot be used to probe for other visitors' conversations. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
+         */
+        get: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                    /** @description Opaque cursor returned as `nextMessageCursor` by a previous detail response. Omit for the newest message page. */
+                    messageCursor?: string;
+                    /** @description Message page size as a decimal string. Defaults to 25 and is clamped to 25 to bound media rehydration and Worker memory. */
+                    messageLimit?: string;
+                };
+                header: {
+                    /** @description The browser's anonymous visitor secret (`cvt_…`) returned by `/client/init`. It is what scopes the request to one visitor's own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or `Referer`. */
+                    "x-visitor-token": string;
+                    /** @description Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped. */
+                    "x-identity-proof"?: string;
+                };
+                path: {
+                    /** @description Conversation id from the list route. */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Conversation */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description Opaque change token for this conversation. Compare for equality only — it is unordered and unparseable. It changes on every transcript mutation, including a display-projection finalization that deliberately leaves `updatedAt` untouched, so a client can tell whether a transcript it cached is still current. The same token is returned by `/client/init` and by the display-projections route. */
+                            conversationRevision: string;
+                            /** @description ISO-8601 timestamp of the first turn, i.e. when the conversation was created. */
+                            createdAt: string;
+                            /** @description Deprecated alias of `targetId`, carrying the same value. Retained for clients written before the rename; read `targetId` instead. */
+                            flowId: string | null;
+                            /** @description Conversation id. */
+                            id: string;
+                            /** @description Number of stored messages. Falls back to the length of the stored transcript when the conversation predates the counter. */
+                            messageCount: number;
+                            /** @description The stored transcript, oldest first. Renderable fields only: tool invocations and other execution internals are not exposed here. */
+                            messages: {
+                                /** @description The MODEL channel content, exactly as stored: a plain string, or an array of multi-modal content parts. Absent on a stored message that carried no content, and deliberately WITHHELD when the message has no `displayContent` and its stored content is not plainly render-safe — opaque structure is not handed to a renderer that would show a visitor internals. Prefer `displayContent` for rendering whenever it is present. */
+                                content?: unknown;
+                                /** @description Whether this message has a visitor-renderable form at all — either a captured `displayContent`, or stored content that is plainly render-safe. False means the message exists in the transcript but its visible form cannot be reconstructed (a legacy message whose content was model-only); render a placeholder rather than anything derived from `content`. */
+                                displayAvailable: boolean;
+                                /** @description The text a human actually saw for this message, as captured by the client. Present only when a projection was recorded; an empty string is a deliberate empty projection and is NOT the same as absence. Render this in preference to `content`. Plain text or Markdown, never rendered HTML, and never model input. */
+                                displayContent?: string;
+                                /** @description Client-supplied or server-minted message id. */
+                                id: string;
+                                /** @description Message author, typically 'user' or 'assistant'. */
+                                role: string;
+                                /** @description ISO-8601 send time. Absent on messages stored without one. */
+                                timestamp?: string;
+                            }[];
+                            /** @description Opaque cursor for the next older message page, or null when the beginning is reached. */
+                            nextMessageCursor: string | null;
+                            /** @description Plain-text excerpt of the conversation's most recent visitor-visible message, bounded to 140 Unicode code points, for a scannable history list. Derived from `displayContent` when the message has one and never from opaque model-only content, so it cannot become the one place internals leak. Null when the latest visible message has no text — including when its captured projection is deliberately empty. */
+                            preview: string | null;
+                            /** @description The flow or agent this conversation ran against, and the exact value to pass as the `targetId` list/delete filter. Null for a conversation stored without one. Canonical replacement for `flowId`. */
+                            targetId: string | null;
+                            /** @description Display title. Uses a timestamp fallback unless conversation-title generation is enabled and produces a title from the opening exchange. */
+                            title: string;
+                            /** @description ISO-8601 timestamp of the most recent write. Sort key for "resume where I left off" in a widget. */
+                            updatedAt: string;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId` */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired, or missing/invalid visitor token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description No such conversation for this visitor */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header with the advisory wait in seconds. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description An `X-Identity-Proof` was supplied but end-user identity admission is not enabled for this token owner, so it cannot be evaluated (`identity_proof_not_admitted`). Nothing was read, deleted, or otherwise acted on. Retry without the proof to act at plain browser scope. Distinct from 401 `invalid_identity_proof`, which means the proof WAS evaluated and rejected. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        /**
+         * Delete one of the visitor's own conversations
+         * @description Permanently delete a conversation and its stored transcript. Answers 404 (never 403) for a conversation the caller does not own. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
+         */
+        delete: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                };
+                header: {
+                    /** @description The browser's anonymous visitor secret (`cvt_…`) returned by `/client/init`. It is what scopes the request to one visitor's own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or `Referer`. */
+                    "x-visitor-token": string;
+                    /** @description Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped. */
+                    "x-identity-proof"?: string;
+                };
+                path: {
+                    /** @description Conversation id from the list route. */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Deleted. `deleted` is always 1 on this route. */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description Number of conversations deleted. The delete-all route returns 0 when the visitor has no history, rather than an error. */
+                            deleted: number;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId` */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired, or missing/invalid visitor token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description No such conversation for this visitor */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header with the advisory wait in seconds. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description An `X-Identity-Proof` was supplied but end-user identity admission is not enabled for this token owner, so it cannot be evaluated (`identity_proof_not_admitted`). Nothing was read, deleted, or otherwise acted on. Retry without the proof to act at plain browser scope. Distinct from 401 `invalid_identity_proof`, which means the proof WAS evaluated and rejected. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/client/conversations/{id}/display-projections": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        /**
+         * Finalize the visible text of stored messages
+         * @description Record what a human actually saw for messages this conversation already stores. A chat client can only compute an assistant message's final visible text after the stream closes and its own parsers, postprocessors, and plugins have run; this is the channel for sending that back, so the transcript reopens showing what the visitor read rather than the model-channel payload. It is projection-only: it can fill or replace `displayContent` and nothing else, never creating a message or touching model content, role, ordering, timestamps, count, ownership, or title. The batch applies all-or-nothing, and the write is guarded by a compare-and-swap on `conversationRevision`, so it can never overwrite a turn the chat path persisted concurrently. Replaying an identical projection is a no-op that performs no write and returns the same `conversationRevision`. A genuinely changed projection advances the revision and refreshes the list `preview`, but deliberately does NOT change `updatedAt` — a closing tab must not reorder the visitor's history. Authorization is exact: the live session must be bound to this conversation, on top of the visitor secret. Small and bounded on purpose, so a client can send it with `keepalive: true` on page exit.
+         */
+        patch: {
+            parameters: {
+                query: {
+                    /** @description Client session id from /client/init. */
+                    sessionId: string;
+                };
+                header: {
+                    /** @description The browser's anonymous visitor secret (`cvt_…`) returned by `/client/init`. It is what scopes the request to one visitor's own conversations, so a request without it is refused. Sent as a header so it never lands in access logs or `Referer`. */
+                    "x-visitor-token": string;
+                    /** @description Optional fresh hosted end-user identity proof. When admitted and already bound to the presented visitor, expands the request from this exact browser to sibling visitors for the same verified person. Without it, even a previously bound visitor remains exact-browser scoped. */
+                    "x-identity-proof"?: string;
+                };
+                path: {
+                    /** @description Conversation id — must be this session’s own. */
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody: {
+                content: {
+                    "application/json": {
+                        /** @description Projections to finalize, applied atomically. Total `displayContent` across the batch is capped at 49152 characters so the request fits the browser keepalive budget. */
+                        messages: {
+                            /** @description The final text a human saw for that message. An empty string is a valid, deliberate empty projection. */
+                            displayContent: string;
+                            /** @description Id of a message this conversation ALREADY stores. An id it does not hold fails the whole batch. */
+                            id: string;
+                        }[];
+                    };
+                };
+            };
+            responses: {
+                /** @description Projections finalized (or already current). */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @description The conversation's change token after this call. Unchanged when the projections were already current, so a client can replay a lost finalization safely. Compare for equality only. */
+                            conversationRevision: string;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId`, or a body that exceeds the per-message / per-batch projection bounds */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired, or missing/invalid visitor token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description This session is not on that conversation, the visitor does not own it, or the batch named a message the conversation does not hold. One non-enumerating answer covers all three: the route never confirms which. */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description The conversation changed while the projections were being written and the compare-and-swap kept losing (`conversation_modified`). Nothing was written. Non-fatal: retry, or ignore it and let the next chat turn re-carry the projections through the repair path. */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header with the advisory wait in seconds. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        trace?: never;
+    };
     "/v1/client/feedback": {
         parameters: {
             query?: never;
@@ -6886,7 +7495,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Invalid client token (when a `token` is supplied) */
+                /** @description Invalid client token. The `token` field is required on every feedback call. */
                 401: {
                     headers: {
                         [name: string]: unknown;
@@ -6941,7 +7550,7 @@ interface paths {
         put?: never;
         /**
          * Initialize a client session
-         * @description Exchange a client token for a browser chat session. Validates the token + request `Origin`, resolves the target flow or agent, and returns the session id plus widget display config. Pass an existing `sessionId` to reuse a prior conversation record.
+         * @description Exchange a client token for a browser chat session. Validates the token + request `Origin`, resolves the target flow or agent, and returns the session id plus widget display config. Pass an existing `sessionId` for legacy resume, or a visitor-authorized `conversationId` returned by the history list to reopen a conversation across sessions or verified devices.
          */
         post: {
             parameters: {
@@ -6954,8 +7563,31 @@ interface paths {
                 content: {
                     "application/json": {
                         flowId?: string;
-                        sessionId?: string;
+                        identityProof?: string;
+                        token: string;
+                        visitorHistory?: boolean;
+                        visitorToken?: string;
+                    } | {
+                        flowId?: string;
+                        identityProof?: string;
+                        sessionId: string;
+                        token: string;
+                        visitorHistory?: boolean;
+                        visitorToken?: string;
+                    } | {
+                        conversationId: string;
+                        flowId?: string;
+                        identityProof?: string;
+                        token: string;
+                        visitorHistory?: boolean;
+                        visitorToken: string;
+                    } | {
+                        conversationId: string;
+                        flowId?: string;
+                        identityProof: string;
                         token: string;
+                        visitorHistory?: boolean;
+                        visitorToken?: string;
                     };
                 };
             };
@@ -6967,22 +7599,55 @@ interface paths {
                     };
                     content: {
                         "application/json": {
+                            /** @description Present instead of `flow` for a Runtype App token whose manifest declares record namespaces but no flows or agents. Exactly one of `flow` and `app` is returned. */
+                            app?: {
+                                /** @description Runtype App id backing this session. */
+                                id: string;
+                            };
+                            /** @description Widget display config, read from the client token's stored config. Always returned, with null standing in for an unset welcome message or theme. */
                             config: {
-                                placeholder?: string;
+                                /** @description Composer placeholder text. Defaults to 'Type your message...' when the client token sets none. */
+                                placeholder: string;
+                                /** @description Persona theme tokens stored on the client token, passed through verbatim. Null when unthemed. */
                                 theme?: unknown;
-                                welcomeMessage?: string | null;
+                                /** @description Opening message to render before the visitor's first turn. Null when the client token sets none. */
+                                welcomeMessage: string | null;
                             };
+                            /** @description The durable conversation record this session reads and writes. Returned by every successful branch — a fresh mint, a legacy `sessionId` replay, and a `conversationId` resume all report the record they landed on. Persist THIS rather than the session id: a session is short-lived, the conversation is what a returning browser reopens. It is not a credential; history access is still scoped by the visitor secret. */
+                            conversationId: string;
+                            /** @description Opaque change token for `conversationId` at the moment this session was created. Compare it for equality and nothing else — it is unordered and unparseable. It changes on every transcript mutation, including a display-projection finalization that deliberately leaves `updatedAt` untouched, so a second device or a reloaded tab can tell whether the transcript it holds is still current. */
+                            conversationRevision: string;
                             /** @description ISO-8601 session idle-expiry timestamp. */
                             expiresAt: string;
-                            /** @description Resolved flow/agent for this session. */
+                            /** @description Resolved flow or agent for this session. Present on every response except the data-only Runtype App branch, which returns `app` instead. Retained for compatibility: `id` always carries the same value as the canonical top-level `targetId`, which new clients should read instead. */
                             flow?: {
+                                /** @description Flow description, null when the flow has none. Flow sessions only. */
                                 description?: string | null;
                                 /** @description Resolved flow or agent ID for this session. */
                                 id: string;
-                                name?: string | null;
+                                /** @description Flow name. Present only for a flow session; the agent branch returns `id` alone because the widget does not render either field. */
+                                name?: string;
                             };
                             /** @description The created (or resumed) client session ID. */
                             sessionId: string;
+                            /** @description The flow or agent this session executes against, resolved server-side. Canonical replacement for `flow.id`, and the exact key to pass as `targetId` when listing or deleting this conversation's history. Matches the value stored on the conversation record, including the case where an agent-only token resolves its agent to a primary flow. Absent only on the data-only Runtype App branch, which is not chat-capable. */
+                            targetId?: string;
+                            /** @description The browser's anonymous visitor identity. Present when the request opts into visitor history (or supplies a visitor token, identity proof, or conversation id). Authenticates the `/client/conversations*` history routes, which the site-wide client token alone cannot reach. */
+                            visitor?: {
+                                /** @description The verified end user (`eu_…`) this browser is bound to, when an `identityProof` was admitted. Null while anonymous. Cross-device reads still require a fresh `identityProof` on that request; the stored binding alone remains exact-browser scoped. */
+                                endUserId: string | null;
+                                /** @description ISO-8601 sliding idle-expiry for this visitor. */
+                                expiresAt: string;
+                                /** @description Durable anonymous visitor id (`cvis_…`). */
+                                id: string;
+                                /**
+                                 * @description What the server did with a supplied `identityProof` on THIS request. `not_provided`: none was sent. `admitted`: it was verified and produced the end-user scope. `ignored`: one was sent but end-user admission is not enabled for this token owner, so it was never evaluated and the session is plain browser scope. Init still succeeds on `ignored` so chat degrades gracefully, but a widget must not offer verified cross-device history or a verified erase in that state (the history routes refuse such a request outright with 503 `identity_proof_not_admitted`). Reporting only: it confers no authority and carries no identity value.
+                                 * @enum {string}
+                                 */
+                                identityStatus: "not_provided" | "admitted" | "ignored";
+                                /** @description The raw visitor secret (`cvt_…`). Returned ONLY when this init newly mints a visitor. Store it and send it back as `visitorToken` on the next init; it is unrecoverable afterwards. Reset itself returns no replacement; the next history-capable init mints one. */
+                                token?: string;
+                            };
                         };
                     };
                 };
@@ -6995,13 +7660,16 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Invalid client token */
+                /** @description Invalid client token, or an `identityProof` was supplied that failed verification (`invalid_identity_proof`, fail-closed: nothing is bound). Identity-proof rejections carry `errorDescription` naming the reason. */
                 401: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": components["schemas"]["Error"] & {
+                            /** @description Why the supplied `identityProof` was refused (for example an expired assertion, an unknown issuer, or a proof minted for another tenant). Diagnostic text for the embedding site, not a value to branch on. */
+                            errorDescription?: string;
+                        };
                     };
                 };
                 /** @description Client token inactive or origin not allowed */
@@ -7013,7 +7681,7 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Referenced flow or agent not found */
+                /** @description Referenced flow, agent, or visitor-authorized conversation not found. Conversations outside the visitor scope also answer 404. */
                 404: {
                     headers: {
                         [name: string]: unknown;
@@ -7197,6 +7865,111 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/client/visitor/reset": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Reset the current browser visitor
+         * @description Explicit widget shutdown/logout lifecycle. Revokes the presented browser visitor when it still resolves, without deleting conversation records. The response is idempotent so it cannot reveal whether a visitor secret was valid. Clear the locally stored secret after success; a later history-capable init creates a clean anonymous visitor. Every response carries `X-History-Identity-Status` (`not_provided` | `admitted` | `ignored`) reporting what the server did with a supplied `X-Identity-Proof`, so a widget can tell a verified action from a browser-scoped one. It is exposed via CORS; it grants no authority.
+         */
+        post: {
+            parameters: {
+                query: {
+                    /** @description Live client session id from /client/init. */
+                    sessionId: string;
+                };
+                header?: {
+                    /** @description The visitor secret to revoke. Omit when local storage is already empty; reset remains idempotent. */
+                    "x-visitor-token"?: string;
+                };
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Visitor reset accepted. */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /**
+                             * @description Always true after the reset request is accepted, including when the supplied visitor was already expired or revoked.
+                             * @enum {boolean}
+                             */
+                            reset: true;
+                        };
+                    };
+                };
+                /** @description Missing or malformed `sessionId` */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Session expired */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Client token inactive or origin mismatch */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Rate limit exceeded for this client token or session. The response carries a `Retry-After` header. */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description An `X-Identity-Proof` was supplied but end-user identity admission is not enabled for this token owner, so it cannot be evaluated (`identity_proof_not_admitted`). Nothing was read, deleted, or otherwise acted on. Retry without the proof to act at plain browser scope. Distinct from 401 `invalid_identity_proof`, which means the proof WAS evaluated and rejected. */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/collections": {
         parameters: {
             query?: never;
@@ -10239,6 +11012,7 @@ interface paths {
                             localInference?: {
                                 /** @enum {string} */
                                 backend: "ollama";
+                                capabilityRevision?: string;
                                 model: string;
                                 /** Format: uuid */
                                 sessionId: string;
@@ -10603,6 +11377,7 @@ interface paths {
                             localInference?: {
                                 /** @enum {string} */
                                 backend: "ollama";
+                                capabilityRevision?: string;
                                 model: string;
                                 /** Format: uuid */
                                 sessionId: string;
@@ -12976,6 +13751,8 @@ interface paths {
             requestBody?: {
                 content: {
                     "application/json": {
+                        evalConfigs?: components["schemas"]["EvalConfigRequest"][];
+                    } & {
                         [key: string]: unknown;
                     };
                 };
@@ -13066,6 +13843,9 @@ interface paths {
             requestBody?: {
                 content: {
                     "application/json": {
+                        evalConfig?: components["schemas"]["EvalConfigRequest"];
+                        evalConfigs?: components["schemas"]["EvalConfigRequest"][];
+                    } & {
                         [key: string]: unknown;
                     };
                 };
@@ -43392,6 +44172,8 @@ interface components {
             daily?: {
                 atSpendLimit: boolean;
                 date: string;
+                /** @enum {string|null} */
+                executionCapReason: "no_card_ceiling" | null;
                 executionLimit: number;
                 executionsUsed: number;
                 inSlowMode: boolean;
@@ -43411,6 +44193,8 @@ interface components {
             monthly?: {
                 atSpendLimit: boolean;
                 date: string;
+                /** @enum {string|null} */
+                executionCapReason: "no_card_ceiling" | null;
                 executionLimit: number;
                 executionsUsed: number;
                 inSlowMode: boolean;
@@ -43686,6 +44470,13 @@ interface components {
             model: string;
             proposals: components["schemas"]["EvalCaseProposal"][];
         };
+        EvalConfigRequest: {
+            evalConfigId?: string;
+            evalName?: string;
+            overrides?: components["schemas"]["EvalOverrides"];
+        } & {
+            [key: string]: unknown;
+        };
         EvalCoverage: {
             definitionHash: string;
             instructions: {
@@ -43723,6 +44514,39 @@ interface components {
             /** @enum {string} */
             result: "definitionRequired";
         };
+        /** @description Canonical eval override field. Replaces `stepOverrides` (and its `"*"` key), `claudeManagedOverride` and `advisorOverride`; setting both spellings of one channel is a 400. */
+        EvalOverrides: {
+            /** @description Advisor override for agent capabilities. `null` disables the advisor; omitting it leaves the target’s own config alone. */
+            advisor?: ({
+                model: string;
+                systemPrompt?: string;
+            } & {
+                [key: string]: unknown;
+            }) | null;
+            agent?: components["schemas"]["EvalStepOverrideValues"];
+            /** @description Claude Managed variant override. Valid only on a claude_managed agent target; rejected on a standard agent rather than silently ignored. */
+            claudeManaged?: {
+                model?: string;
+                systemPrompt?: string;
+                toolPermissions?: {
+                    [key: string]: boolean;
+                };
+            } & {
+                [key: string]: unknown;
+            };
+            flow?: components["schemas"]["EvalStepOverrideValues"] & unknown;
+            /** @description Per-step overrides keyed by step id. Beats agent/flow field by field. A key naming no step of the target is a 400 rather than a silently-scored no-op. */
+            steps?: {
+                [key: string]: components["schemas"]["EvalStepOverrideValues"] & unknown;
+            };
+            subagentDefaults?: components["schemas"]["EvalStepOverrideValues"] & unknown;
+            /** @description Per-sub-agent overrides keyed by agentId. The key is an identity, not a position: an entry applies wherever that agent runs, at any depth. A key naming an agent this target cannot reach is a 400. */
+            subagents?: {
+                [key: string]: components["schemas"]["EvalStepOverrideValues"] & unknown;
+            };
+        } & {
+            [key: string]: unknown;
+        };
         EvalPullResponse: {
             contentHash: string;
             definition: {
@@ -43845,6 +44669,23 @@ interface components {
             humanVerdict: "agree" | "disagree" | null;
             scoreId: string;
         };
+        /** @description Applies to every prompt step of the agent under test. Valid only on an agent target; sending it on a flow target is a 400. */
+        EvalStepOverrideValues: {
+            frequencyPenalty?: number;
+            maxTokens?: number;
+            model?: string;
+            presencePenalty?: number;
+            reasoning?: unknown;
+            /** @enum {string} */
+            responseFormat?: "default" | "json" | "markdown" | "html" | "xml";
+            seed?: number;
+            temperature?: number;
+            tools?: unknown;
+            topK?: number;
+            topP?: number;
+        } & {
+            [key: string]: unknown;
+        };
         EvalSuiteDetail: {
             agentId: string | null;
             baselineBatchExecutionId: string | null;
@@ -44951,6 +45792,8 @@ interface components {
                 daily?: {
                     atSpendLimit: boolean;
                     date: string;
+                    /** @enum {string|null} */
+                    executionCapReason: "no_card_ceiling" | null;
                     executionLimit: number;
                     executionsUsed: number;
                     inSlowMode: boolean;
@@ -44974,6 +45817,8 @@ interface components {
                 monthly?: {
                     atSpendLimit: boolean;
                     date: string;
+                    /** @enum {string|null} */
+                    executionCapReason: "no_card_ceiling" | null;
                     executionLimit: number;
                     executionsUsed: number;
                     inSlowMode: boolean;
@@ -52900,6 +53745,45 @@ declare class ToolsEndpoint {
      */
     cleanupCfSandbox(sandboxId: string): Promise<void>;
 }
+/**
+ * Sampling/model/tool values applied to one eval override target.
+ *
+ * Structurally `StepOverride` from `@runtypelabs/shared`, restated here to
+ * keep the SDK dependency-free. `tools` stays `any` for the same reason: its
+ * full shape pulls in the runtime-tool types.
+ */
+interface EvalOverrideValues {
+    model?: string;
+    temperature?: number;
+    maxTokens?: number;
+    topP?: number;
+    topK?: number;
+    frequencyPenalty?: number;
+    presencePenalty?: number;
+    seed?: number;
+    responseFormat?: 'default' | 'json' | 'markdown' | 'html' | 'xml';
+    reasoning?: any;
+    tools?: any;
+}
+/**
+ * Claude Managed variant override. Mirrors `ClaudeManagedEvalOverride` from
+ * `@runtypelabs/shared`.
+ */
+interface ClaudeManagedEvalOverrideValues {
+    targetType?: 'claude_managed';
+    model?: string;
+    systemPrompt?: string;
+    toolPermissions?: {
+        bash?: boolean;
+        read?: boolean;
+        write?: boolean;
+        edit?: boolean;
+        glob?: boolean;
+        grep?: boolean;
+        webFetch?: boolean;
+        webSearch?: boolean;
+    };
+}
 /**
  * Eval endpoint handlers
  */
@@ -52912,8 +53796,13 @@ declare class EvalEndpoint {
      *
      * Targets are mutually exclusive — provide exactly one of `flowId`,
      * `flowDefinition`, or `agentId`. The `agentId` form targets a
-     * `claude_managed` agent; combine with per-config `claudeManagedOverride`
-     * to vary model / system prompt / tool permissions across configs.
+     * `claude_managed` agent; combine with per-config
+     * `overrides.claudeManaged` to vary model / system prompt / tool
+     * permissions across configs.
+     *
+     * Override intent goes in `overrides`. Set one channel per config: pairing
+     * `overrides` with a legacy field it replaces is a 400, because the losing
+     * one would still be recorded and compared.
      */
     runVirtualEval(data: {
         record?: {
@@ -52935,27 +53824,30 @@ declare class EvalEndpoint {
         evalConfigs: Array<{
             evalConfigId?: string;
             evalName?: string;
-            stepOverrides?: Record<string, any>;
             /**
-             * Per-config override applied when the eval target is a
-             * `claude_managed` agent. Mirrors `ClaudeManagedEvalOverride` from
+             * The canonical override field. Mirrors `ResolvedEvalOverrides` from
              * `@runtypelabs/shared` — defined inline here to keep the SDK
              * dependency-free.
+             *
+             * `flow` (or `agent`, on an agent target) applies to every prompt step
+             * of the unit under test; `steps` names one step and beats it field by
+             * field. `subagents` is keyed by agentId and matches wherever that agent
+             * runs, at ANY depth, with `subagentDefaults` covering the rest. A step
+             * id or agentId the target does not have is a 400 rather than a
+             * silently-compared no-op.
              */
-            claudeManagedOverride?: {
-                targetType?: 'claude_managed';
-                model?: string;
-                systemPrompt?: string;
-                toolPermissions?: {
-                    bash?: boolean;
-                    read?: boolean;
-                    write?: boolean;
-                    edit?: boolean;
-                    glob?: boolean;
-                    grep?: boolean;
-                    webFetch?: boolean;
-                    webSearch?: boolean;
-                };
+            overrides?: {
+                agent?: EvalOverrideValues;
+                flow?: EvalOverrideValues;
+                steps?: Record<string, EvalOverrideValues>;
+                subagents?: Record<string, EvalOverrideValues>;
+                subagentDefaults?: EvalOverrideValues;
+                claudeManaged?: ClaudeManagedEvalOverrideValues;
+                /** `null` disables the advisor; omitting it leaves the target's own config alone. */
+                advisor?: {
+                    model: string;
+                    systemPrompt?: string;
+                } | null;
             };
         }>;
         evalGroupId?: string;
@@ -56431,4 +57323,4 @@ declare function getLikelySupportingCandidatePaths(bestCandidatePath: string | u
 declare function getDefaultPlanPath(taskName: string): string;
 declare function sanitizeTaskSlug(taskName: string): string;
 
-export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, ApiKeysEndpoint, type ApiResponse, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, type AssetReferenceContentPart, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CanonicalDispatchMessageContent, type CanonicalDispatchRequest, type CaseExpected, ChatEndpoint, type CheckGrader, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientWidgetTheme, type CollectionMeta, CollectionsEndpoint, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateCollectionRequest, type CreateConversationRequest, type CreateEvalSuiteInput, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CurrentBilledSpendResponse, type CurrentBilledSpendSource, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DecomposeCriteriaResult, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchAgentInput, type DispatchApprovalContinuationResponse, type DispatchApproveRequest, type DispatchApproveResponse, type DispatchClient, type DispatchContinuationRequest, type DispatchContinuationResponse, type DispatchDetachedApprovalResponse, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchFlowInput, type DispatchMessageContent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type DispatchResponse, type DispatchResumeRequest, type DispatchResumeResponse, type EndUserUsageQuery, type EndUserUsageResponse, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalCaseProposal, type EvalCaseProposalAccepted, type EvalCaseProposalListResult, type EvalCasesGenerated, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalProposalSource, type EvalProposalStatus, type EvalProposedCase, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunCaseScores, type EvalRunConfig, type EvalRunScores, EvalRunner, type EvalStatus, type EvalSuiteCase, type EvalSuiteCaseInput, type EvalSuiteCoverage, type EvalSuiteDetail, type EvalSuiteLatestRun, type EvalSuiteListResult, type EvalSuiteRunQueued, type EvalSuiteRunResult, type EvalSuiteSummary, EvalSuitesNamespace, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GenerateEvalCasesInput, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type GetRecordStepConfig$1 as GetRecordStepConfig, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type HumanVerdict, type ImageContentPart, type InferCollectionSchemaResponse, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListCollectionsResponse, type ListConversationsResponse, type ListParams, type ListRecordsStepConfig$1 as ListRecordsStepConfig, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type PersistedGraderOutcome, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordCollection, type RecordCollectionWithHistory, type RecordCollections, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type GetRecordStepConfig as RuntypeGetRecordStepConfig, type ListRecordsStepConfig as RuntypeListRecordsStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillScanFinding as RuntypeSkillScanFinding, type SkillScanResult as RuntypeSkillScanResult, type SkillScanVerdict as RuntypeSkillScanVerdict, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type SlackManifestRequest, type SlackManifestResponse, type SlackOAuthStartRequest, type SlackOAuthStartResponse, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, type TypedCreateRecordRequest, type TypedRecordListItem, type TypedRecordWriteResponse, TypedRecordsScope, type TypedRuntypeRecord, UNIFIED_EVENTS_QUERY, type UpdateClientTokenRequest, type UpdateCollectionRequest, type UpdateCollectionResponse, type UpdateConversationRequest, type UpdateEvalCaseInput, type UpdateEvalSuiteInput, type UpdateFlowRequest, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type ValidateExistingRecordsResponse, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };
+export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, ApiKeysEndpoint, type ApiResponse, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, type AssetReferenceContentPart, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CanonicalDispatchMessageContent, type CanonicalDispatchRequest, type CaseExpected, ChatEndpoint, type CheckGrader, type ClaudeManagedEvalOverrideValues, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientWidgetTheme, type CollectionMeta, CollectionsEndpoint, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateCollectionRequest, type CreateConversationRequest, type CreateEvalSuiteInput, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CurrentBilledSpendResponse, type CurrentBilledSpendSource, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DecomposeCriteriaResult, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchAgentInput, type DispatchApprovalContinuationResponse, type DispatchApproveRequest, type DispatchApproveResponse, type DispatchClient, type DispatchContinuationRequest, type DispatchContinuationResponse, type DispatchDetachedApprovalResponse, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchFlowInput, type DispatchMessageContent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type DispatchResponse, type DispatchResumeRequest, type DispatchResumeResponse, type EndUserUsageQuery, type EndUserUsageResponse, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalCaseProposal, type EvalCaseProposalAccepted, type EvalCaseProposalListResult, type EvalCasesGenerated, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalOverrideValues, type EvalProposalSource, type EvalProposalStatus, type EvalProposedCase, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunCaseScores, type EvalRunConfig, type EvalRunScores, EvalRunner, type EvalStatus, type EvalSuiteCase, type EvalSuiteCaseInput, type EvalSuiteCoverage, type EvalSuiteDetail, type EvalSuiteLatestRun, type EvalSuiteListResult, type EvalSuiteRunQueued, type EvalSuiteRunResult, type EvalSuiteSummary, EvalSuitesNamespace, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GenerateEvalCasesInput, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type GetRecordStepConfig$1 as GetRecordStepConfig, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type HumanVerdict, type ImageContentPart, type InferCollectionSchemaResponse, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListCollectionsResponse, type ListConversationsResponse, type ListParams, type ListRecordsStepConfig$1 as ListRecordsStepConfig, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type PersistedGraderOutcome, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordCollection, type RecordCollectionWithHistory, type RecordCollections, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type GetRecordStepConfig as RuntypeGetRecordStepConfig, type ListRecordsStepConfig as RuntypeListRecordsStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillScanFinding as RuntypeSkillScanFinding, type SkillScanResult as RuntypeSkillScanResult, type SkillScanVerdict as RuntypeSkillScanVerdict, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type SlackManifestRequest, type SlackManifestResponse, type SlackOAuthStartRequest, type SlackOAuthStartResponse, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, type TypedCreateRecordRequest, type TypedRecordListItem, type TypedRecordWriteResponse, TypedRecordsScope, type TypedRuntypeRecord, UNIFIED_EVENTS_QUERY, type UpdateClientTokenRequest, type UpdateCollectionRequest, type UpdateCollectionResponse, type UpdateConversationRequest, type UpdateEvalCaseInput, type UpdateEvalSuiteInput, type UpdateFlowRequest, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type ValidateExistingRecordsResponse, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };