@runtypelabs/sdk 9.1.0 → 9.2.0

package/dist/index.d.ts

@@ -594,7 +594,7 @@ interface paths {
         put?: never;
         /**
          * Create agent
-         * @description Create a new agent with optional capabilities and configuration. Supports runtype, external, and claude_managed agent types.
+         * @description Create a new agent with optional capabilities and configuration. Supports runtype, external, and claude_managed agent types. External-agent auth credentials are accepted on write but returned as <redacted>; a configuration copied from a management response must replace that placeholder with the real credential before create.
          */
         post: {
             parameters: {
@@ -978,6 +978,7 @@ interface paths {
                             dashboardUrl?: string;
                             description: string | null;
                             draftVersionId: string | null;
+                            /** @description External-agent configuration. Configured auth.credentials values are write-only and returned as <redacted>, never plaintext. */
                             externalConfig: {
                                 [key: string]: unknown;
                             } | null;
@@ -1597,7 +1598,7 @@ interface paths {
         };
         /**
          * Get agent details
-         * @description Get an agent by ID including its capabilities and configuration.
+         * @description Get an agent by ID including its capabilities and configuration. External-agent auth credentials are write-only: a configured externalConfig.auth.credentials value is returned as <redacted>, never plaintext.
          */
         get: {
             parameters: {
@@ -1641,6 +1642,7 @@ interface paths {
                             createdAt: string;
                             dashboardUrl?: string;
                             description: string | null;
+                            /** @description External-agent configuration. Configured auth.credentials values are write-only and returned as <redacted>, never plaintext. */
                             externalConfig: {
                                 [key: string]: unknown;
                             } | null;
@@ -1712,7 +1714,7 @@ interface paths {
         };
         /**
          * Update agent
-         * @description Update an existing agent. Supports partial updates — only provided fields are changed. Both config and externalConfig are merged onto the stored values, so a partial write preserves keys it omits (notably externalConfig.protocol and externalConfig.cachedAgentCard). To REMOVE a value, send it explicitly as null: a null field clears that field, and externalConfig: null clears the whole object. Nested values replace atomically — sending auth replaces the entire auth block, so switching auth type cannot reuse the previous credential. Repointing an external agent (endpoint, agentCardUrl or protocol) discards the cached agent card, which is re-fetched by POST /agents/{id}/refresh-agent-card. Moving externalConfig.endpoint to a different host additionally requires re-sending externalConfig.auth: a stored credential is never carried to a host it was not configured against, so a repoint that omits auth is rejected with 400.
+         * @description Update an existing agent. Supports partial updates — only provided fields are changed. Both config and externalConfig are merged onto the stored values, so a partial write preserves keys it omits (notably externalConfig.protocol and externalConfig.cachedAgentCard). To REMOVE a value, send it explicitly as null: a null field clears that field, and externalConfig: null clears the whole object. Nested values replace atomically — sending auth replaces the entire auth block, so switching auth type cannot reuse the previous credential. Agent management responses return a configured auth.credentials value as <redacted>; echoing that placeholder on an update preserves the stored credential only when auth.type is unchanged. Repointing an external agent (endpoint, agentCardUrl or protocol) discards the cached agent card, which is re-fetched by POST /agents/{id}/refresh-agent-card. Moving externalConfig.endpoint to a different host additionally requires re-sending externalConfig.auth: a stored credential is never carried to a host it was not configured against, so a repoint that omits auth is rejected with 400.
          */
         put: {
             parameters: {
@@ -2073,6 +2075,7 @@ interface paths {
                             dashboardUrl?: string;
                             description: string | null;
                             draftVersionId: string | null;
+                            /** @description External-agent configuration. Configured auth.credentials values are write-only and returned as <redacted>, never plaintext. */
                             externalConfig: {
                                 [key: string]: unknown;
                             } | null;
@@ -2649,7 +2652,7 @@ interface paths {
         put?: never;
         /**
          * Execute agent
-         * @description Execute an agent (Quick Agent mode) with a message array. Streams a Server-Sent Events response when streamResponse is true (default); otherwise returns a JSON result. Send the RFC 7240 `Prefer: respond-async` header to run a Claude Managed durable-lane turn (a saved agent invoked with a conversationId) fire-and-forget: the response is a 202 handle and the turn runs headlessly (reconnect via the executions events stream or poll the runs API).
+         * @description Execute an agent with a message array. Streams a Server-Sent Events response when streamResponse is true (default); otherwise returns a JSON result. Send the RFC 7240 `Prefer: respond-async` header to receive a durable execution handle immediately, then poll its status URL for completion.
          */
         post: {
             parameters: {
@@ -2677,7 +2680,7 @@ interface paths {
                         "text/event-stream": unknown;
                     };
                 };
-                /** @description Fire-and-forget handle for a Claude Managed durable-lane turn accepted via `Prefer: respond-async`. The turn runs headlessly; reconnect via the executions events stream or poll the runs API. Carries a `Preference-Applied: respond-async` header. */
+                /** @description Durable fire-and-forget handle accepted via `Prefer: respond-async`. Poll statusUrl for completion. Carries a `Preference-Applied: respond-async` header. */
                 202: {
                     headers: {
                         [name: string]: unknown;
@@ -2749,6 +2752,15 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description Asynchronous execution unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
             };
         };
         delete?: never;
@@ -3450,7 +3462,9 @@ interface paths {
         };
         /**
          * Export agent for runtime
-         * @description Export a fully-resolved, self-contained agent definition that the @runtypelabs/runtime package can consume directly at boot. Capabilities, flows, and nested sub-agents are inlined recursively (up to 3 levels). MCP credential values are replaced with secret-name references.
+         * @description Export a fully-resolved, self-contained agent definition that the @runtypelabs/runtime package can consume directly at boot. Capabilities, flows, and nested sub-agents are inlined recursively (up to 3 levels). MCP credential values and external-agent auth credentials are replaced with secret-name references.
+         *
+         *     The response carries `hostDependencies`: the runtime seams the exported artifact needs a host to wire before it can run everything it describes. A durable-class step (`wait-until` or `crawl`) anywhere in the agent's executable closure declares a `durable-pause-host` dependency; a detached-capable dynamic subagent pool or a detached inline subagent tool declares a `background-run-coordinator` dependency. The array is empty when nothing needs wiring.
          */
         get: {
             parameters: {
@@ -3482,6 +3496,7 @@ interface paths {
                             externalConfig?: {
                                 [key: string]: unknown;
                             };
+                            hostDependencies: components["schemas"]["RuntimeHostDependency"][];
                             id: string;
                             name: string;
                             primaryFlow?: {
@@ -3646,7 +3661,7 @@ interface paths {
         put?: never;
         /**
          * Refresh cached agent card
-         * @description Re-fetch the agent card from the configured agentCardUrl (or derived A2A well-known URL) and update the cached copy. Detects skill changes, auto-applies roles to new skills, and returns a change report.
+         * @description Re-fetch the agent card from the configured agentCardUrl (or derived A2A well-known URL) and update the cached copy. Detects skill changes, auto-applies roles to new skills, and returns a change report. External-agent auth credentials remain write-only and are returned as <redacted>.
          */
         post: {
             parameters: {
@@ -5490,6 +5505,10 @@ interface paths {
                     content: {
                         "application/json": {
                             batchExecutionId: string;
+                            /** @description Exact raw Runtype-funded provider and hosted-tool cost before account margin, in thousandths of a cent ($1 = 100,000), or null when historical/unpriced rows make the split unavailable. */
+                            billedCostThousandthsCent: number | null;
+                            /** @description Dollar projection of billedCostThousandthsCent (raw Runtype-funded cost before account margin), or null when the exact split is unavailable. */
+                            billedCostUsd: number | null;
                             recordId: string;
                             /** @description Portion of totalCostUsd asserted by an externally-run agent pushed to /v1/executions/ingest. Unverified: Runtype neither dispatched nor paid for it. 0 unless external runs were ingested. */
                             selfReportedCostUsd: number;
@@ -5705,6 +5724,10 @@ interface paths {
                     content: {
                         "application/json": {
                             batchExecutionId: string;
+                            /** @description Exact raw Runtype-funded provider and hosted-tool cost before account margin, in thousandths of a cent ($1 = 100,000), or null when historical/unpriced rows make the split unavailable. */
+                            billedCostThousandthsCent: number | null;
+                            /** @description Dollar projection of billedCostThousandthsCent (raw Runtype-funded cost before account margin), or null when the exact split is unavailable. */
+                            billedCostUsd: number | null;
                             /** @description Portion of totalCostUsd asserted by an externally-run agent pushed to /v1/executions/ingest. Unverified: Runtype neither dispatched nor paid for it. 0 unless external runs were ingested. */
                             selfReportedCostUsd: number;
                             totalCostUsd: number;
@@ -10763,7 +10786,7 @@ interface paths {
         put?: never;
         /**
          * Execute a flow or agent
-         * @description Main dispatch endpoint for flow and agent execution with record resolution. Supports streaming via SSE or synchronous JSON responses. Send the RFC 7240 `Prefer: respond-async` header to run a Claude Managed durable-lane turn (a saved agent dispatched with a conversationId) fire-and-forget: the response is a 202 handle and the turn runs headlessly (reconnect via the executions events stream or poll the runs API).
+         * @description Main dispatch endpoint for flow and agent execution with record resolution. Supports streaming via SSE or synchronous JSON responses. Send the RFC 7240 `Prefer: respond-async` header to receive a durable execution handle immediately, then poll its status URL for completion.
          */
         post: {
             parameters: {
@@ -10963,7 +10986,7 @@ interface paths {
                                 provider?: string;
                             };
                         };
-                        clientTools?: {
+                        clientTools?: ({
                             description: string;
                             name: string;
                             /** @enum {string} */
@@ -10976,7 +10999,13 @@ interface paths {
                                 [key: string]: unknown;
                             };
                             untrustedContentHint?: boolean;
-                        }[];
+                        } | {
+                            /** @enum {string} */
+                            catalog: "runtype-mcp";
+                            name: string;
+                            /** @enum {string} */
+                            origin?: "webmcp";
+                        })[];
                         clientToolsPolicy?: {
                             allowlist?: string[];
                         };
@@ -11079,6 +11108,7 @@ interface paths {
                              * @enum {string}
                              */
                             flowMode?: "existing" | "create" | "virtual" | "upsert";
+                            /** @description Continuous Flow timeout. Values above 900000 ms require a Flow request detached with Prefer: respond-async; the asynchronous maximum is 1800000 ms. */
                             flowTimeoutMs?: number;
                             flowVersionId?: string;
                             localInference?: {
@@ -11103,6 +11133,7 @@ interface paths {
                                 executionId: string;
                                 iteration?: number;
                             };
+                            /** @description Per-step timeout. Values above 600000 ms require a Flow request detached with Prefer: respond-async; the asynchronous maximum is 1800000 ms. */
                             stepTimeoutMs?: number;
                             /** @default true */
                             storeResults?: boolean;
@@ -11328,7 +11359,7 @@ interface paths {
                                 provider?: string;
                             };
                         };
-                        clientTools?: {
+                        clientTools?: ({
                             description: string;
                             name: string;
                             /** @enum {string} */
@@ -11341,7 +11372,13 @@ interface paths {
                                 [key: string]: unknown;
                             };
                             untrustedContentHint?: boolean;
-                        }[];
+                        } | {
+                            /** @enum {string} */
+                            catalog: "runtype-mcp";
+                            name: string;
+                            /** @enum {string} */
+                            origin?: "webmcp";
+                        })[];
                         clientToolsPolicy?: {
                             allowlist?: string[];
                         };
@@ -11444,6 +11481,7 @@ interface paths {
                              * @enum {string}
                              */
                             flowMode?: "existing" | "create" | "virtual" | "upsert";
+                            /** @description Continuous Flow timeout. Values above 900000 ms require a Flow request detached with Prefer: respond-async; the asynchronous maximum is 1800000 ms. */
                             flowTimeoutMs?: number;
                             flowVersionId?: string;
                             localInference?: {
@@ -11468,6 +11506,7 @@ interface paths {
                                 executionId: string;
                                 iteration?: number;
                             };
+                            /** @description Per-step timeout. Values above 600000 ms require a Flow request detached with Prefer: respond-async; the asynchronous maximum is 1800000 ms. */
                             stepTimeoutMs?: number;
                             /** @default true */
                             storeResults?: boolean;
@@ -11518,7 +11557,7 @@ interface paths {
                         "text/event-stream": unknown;
                     };
                 };
-                /** @description Fire-and-forget handle for a Claude Managed durable-lane turn accepted via `Prefer: respond-async`. The turn runs headlessly; reconnect via the executions events stream or poll the runs API. Carries a `Preference-Applied: respond-async` header. */
+                /** @description Durable fire-and-forget handle accepted via `Prefer: respond-async`. Poll statusUrl for completion. Carries a `Preference-Applied: respond-async` header. */
                 202: {
                     headers: {
                         [name: string]: unknown;
@@ -11590,6 +11629,15 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description Asynchronous execution unavailable */
+                503: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
             };
         };
         delete?: never;
@@ -13904,7 +13952,7 @@ interface paths {
         put?: never;
         /**
          * Submit eval
-         * @description Submit a flow or agent for evaluation with model/parameter overrides. Supports both single eval and multi-model eval requests.
+         * @description Submit a flow or agent eval. Hosted targets support overrides and multi-model requests; delegated external agents support one baseline config without overrides and not /eval/stream.
          */
         post: {
             parameters: {
@@ -15814,6 +15862,95 @@ interface paths {
         patch?: never;
         trace?: never;
     };
+    "/v1/executions/{executionId}/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Poll an asynchronous execution
+         * @description Returns lifecycle status and, once terminal, the result of an execution accepted via `Prefer: respond-async`.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    executionId: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Execution status returned */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            createdAt: string;
+                            error?: string;
+                            executionId: string;
+                            httpStatus?: number;
+                            result?: unknown;
+                            /** @enum {string} */
+                            status: "queued" | "running" | "paused" | "completed" | "failed" | "cancelled";
+                            targetId?: string;
+                            /** @enum {string} */
+                            targetKind: "flow" | "agent";
+                            underlyingExecutionId?: string;
+                        };
+                    };
+                };
+                /** @description Unauthorized */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Insufficient API key permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Execution not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/v1/feedback": {
         parameters: {
             query?: never;
@@ -16859,7 +16996,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "loop" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                         name: string;
@@ -16871,7 +17008,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "loop" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                     };
@@ -17271,7 +17408,7 @@ interface paths {
                             name: string;
                             order?: number;
                             /** @enum {string} */
-                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
+                            type: "prompt" | "crawl" | "fetch-url" | "retrieve-record" | "get-record" | "list-records" | "api-call" | "transform-data" | "template" | "conditional" | "loop" | "set-variable" | "upsert-record" | "send-email" | "send-event" | "send-stream" | "update-record" | "search" | "generate-embedding" | "vector-search" | "tool-call" | "wait-until" | "paginate-api" | "store-vector" | "execute-agent" | "store-asset" | "generate-pdf" | "save-memory" | "recall-memory" | "memory-summary";
                             when?: string;
                         }[];
                         name?: string;
@@ -17448,6 +17585,8 @@ interface paths {
          * @description **Limited preview — not yet generally available.** This endpoint is dark-launched and returns `404 Not Found` in production until GA; it is only reachable in non-production environments today.
          *
          *     Export a fully-resolved, self-contained flow definition that the @runtypelabs/runtime package can consume directly at boot. All step configs are inlined; no live DB queries are needed at execution time.
+         *
+         *     The response carries `hostDependencies`: the runtime seams the exported artifact needs a host to wire before it can run everything it describes. A durable-class step (`wait-until` or `crawl`) anywhere in the flow's executable closure declares a `durable-pause-host` dependency; a detached-capable dynamic subagent pool or a detached inline subagent tool declares a `background-run-coordinator` dependency. The array is empty when nothing needs wiring, and the export is never refused for a declared dependency.
          */
         get: {
             parameters: {
@@ -17476,6 +17615,7 @@ interface paths {
                                 agentIds?: string[];
                             };
                             description?: string | null;
+                            hostDependencies: components["schemas"]["RuntimeHostDependency"][];
                             id: string;
                             name: string;
                             steps: {
@@ -19208,6 +19348,15 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
+                /** @description Insufficient permissions */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["Error"];
+                    };
+                };
                 /** @description Surface not found */
                 404: {
                     headers: {
@@ -19245,7 +19394,7 @@ interface paths {
         put?: never;
         /**
          * Generate Slack app manifest
-         * @description Generate the Slack app manifest for a surface, with absolute API URLs (events webhook, interactivity webhook, and OAuth redirect), plus a link to Slack's app-creation page. Paste the manifest into Slack's From a manifest option; Slack no longer accepts a manifest embedded in the URL. The redirect URL matches the OAuth start route byte-for-byte.
+         * @description Generate the Slack app manifest for a surface, with absolute API URLs (events webhook, interactivity webhook, and OAuth redirect), plus a link to Slack's app-creation page and a hosted connect-page handoff for the human credential + OAuth step. Paste the manifest into Slack's From a manifest option; Slack no longer accepts a manifest embedded in the URL. The redirect URL matches the OAuth start route byte-for-byte. When integrationId is omitted a pending Slack integration is reserved automatically (24h TTL) and returned as integrationId. A supplied integrationId must be a live pending reservation; an already-connected, revoked, or expired one is refused with 404, so omit it to get a fresh reservation. Credentials never pass through this route.
          */
         post: {
             parameters: {
@@ -19257,7 +19406,7 @@ interface paths {
             requestBody?: {
                 content: {
                     "application/json": {
-                        appName: string;
+                        appName?: string;
                         includeAssistantFeatures?: boolean;
                         integrationId?: string;
                         surfaceId: string;
@@ -19272,9 +19421,16 @@ interface paths {
                     };
                     content: {
                         "application/json": {
+                            connectHandoff: {
+                                expiresAt?: string;
+                                /** @enum {string} */
+                                type: "url";
+                                url: string;
+                            };
                             createAppUrl: string;
                             eventsWebhookUrl: string;
-                            interactivityWebhookUrl?: string;
+                            integrationId: string;
+                            interactivityWebhookUrl: string;
                             manifestJson: string;
                             redirectUrl: string;
                         };
@@ -23600,7 +23756,7 @@ interface paths {
         put?: never;
         /**
          * Resume agent handling
-         * @description Switch a messaging conversation from human-operator mode back to automatic agent handling.
+         * @description Switch a messaging conversation from human-operator mode back to automatic agent handling. Any operator with write access to the organization may resume, including a conversation another operator took over (supervisor override); the takeover actor is audit attribution, not a lock. Returns 409 if the conversation is already in auto mode.
          */
         post: {
             parameters: {
@@ -23668,13 +23824,13 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Conversation already in auto mode */
+                /** @description Conversation is already in auto (agent) mode (ALREADY_AUTO_MODE), or its state changed concurrently and the resume did not apply (STATE_CHANGED, retryable). */
                 409: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": components["schemas"]["MessagingConversationConflictError"];
                     };
                 };
                 /** @description Internal server error */
@@ -23806,13 +23962,22 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Conversation or surface cannot be addressed */
+                /** @description Conversation mode changed concurrently: another operator resumed the conversation to automatic agent handling after this request's requireHumanMode precondition was checked but before the send committed (STATE_CHANGED). Nothing is persisted. */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["MessagingConversationConflictError"];
+                    };
+                };
+                /** @description Conversation or surface cannot be addressed before anything is sent: no external thread/participant to reply to, or the surface type has no registered outbound channel adapter (UNSUPPORTED_SURFACE_TYPE). Nothing is persisted in either case. */
                 422: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": components["schemas"]["MessagingSendUndeliverableError"];
                     };
                 };
                 /** @description Internal server error */
@@ -23852,7 +24017,7 @@ interface paths {
         put?: never;
         /**
          * Take over conversation
-         * @description Switch a messaging conversation into human-operator mode so inbound messages are persisted but agent replies are suppressed.
+         * @description Switch a messaging conversation into human-operator mode so inbound messages are persisted but agent replies are suppressed. The claim is atomic: when two operators take over at once, exactly one succeeds and the other receives 409 carrying the winner's takeoverActorId. A takeover lapses and the agent resumes after the surface's interventionMode.takeoverIdleTimeoutMinutes (default 24h) with no operator send; closing or reopening the conversation also clears it.
          */
         post: {
             parameters: {
@@ -23926,13 +24091,13 @@ interface paths {
                         "application/json": components["schemas"]["Error"];
                     };
                 };
-                /** @description Conversation already in human mode */
+                /** @description Conversation is already in human mode (ALREADY_HUMAN_MODE), or its state changed concurrently and the takeover did not apply (STATE_CHANGED, retryable). */
                 409: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Error"];
+                        "application/json": components["schemas"]["MessagingConversationConflictError"];
                     };
                 };
                 /** @description Internal server error */
@@ -39469,6 +39634,8 @@ interface paths {
                     };
                     content: {
                         "application/json": {
+                            /** @description Exact average raw Runtype-funded provider and hosted-tool cost before account margin over the same run count, or null when the split is unavailable. */
+                            avgBilledCostUsd: number | null;
                             avgCostUsd: number | null;
                             avgDurationMs: number | null;
                             /** @description Portion of avgCostUsd asserted by externally-run agents pushed to /v1/executions/ingest, over the same run count. Unverified: Runtype neither dispatched nor paid for it. 0 unless external runs were ingested. */
@@ -39822,6 +39989,7 @@ interface paths {
                         source: {
                             description?: string;
                             key?: string;
+                            keys?: string[];
                             productId?: string;
                             /** @enum {string} */
                             type: "manual" | "secret" | "product";
@@ -39866,6 +40034,7 @@ interface paths {
                             source: {
                                 description?: string;
                                 key?: string;
+                                keys?: string[];
                                 productId?: string;
                                 /** @enum {string} */
                                 type: "manual" | "secret" | "product";
@@ -39964,6 +40133,7 @@ interface paths {
                         source: {
                             description?: string;
                             key?: string;
+                            keys?: string[];
                             productId?: string;
                             /** @enum {string} */
                             type: "manual" | "secret" | "product";
@@ -40009,6 +40179,7 @@ interface paths {
                                 source: {
                                     description?: string;
                                     key?: string;
+                                    keys?: string[];
                                     productId?: string;
                                     /** @enum {string} */
                                     type: "manual" | "secret" | "product";
@@ -43878,6 +44049,7 @@ interface paths {
                             email: string | null;
                             features: {
                                 dashboardAssistantModel: string;
+                                enableAgentKeyRequests: boolean;
                                 enableAgentSkills: boolean;
                                 enableChromeSurface: boolean;
                                 enableDashboardAssistant: boolean;
@@ -44663,12 +44835,24 @@ interface components {
         AsyncDispatchHandle: {
             /** @description Present only for ephemeral inline-create dispatch. */
             claudeManagedAgentId?: string;
-            /** @description The conversation the headless turn belongs to. */
-            conversationId: string;
-            /** @description The durable execution id — reconnect/poll with this. */
+            /** @description Conversation id, when the request belongs to a conversation. */
+            conversationId?: string;
+            /** @description The durable execution handle — poll with this. */
             executionId: string;
-            /** @description Lifecycle status at acceptance (e.g. 'running'). */
-            status: string;
+            /**
+             * @description Lifecycle status at acceptance.
+             * @enum {string}
+             */
+            status: "queued" | "running";
+            /** @description Relative URL for polling this execution. */
+            statusUrl: string;
+            /** @description Saved flow or agent id, when known. */
+            targetId?: string;
+            /**
+             * @description Kind of execution target.
+             * @enum {string}
+             */
+            targetKind: "flow" | "agent";
         };
         CaptureExecutionPreview: {
             /** @description The recorded tool-call actions in invocation order — the fork-picker rows. */
@@ -45333,6 +45517,7 @@ interface components {
             /** @enum {string} */
             kind: "agent" | "flow";
             maxTurns?: number;
+            resumed?: boolean;
             seq: number;
             source?: string;
             startedAt: string;
@@ -45919,6 +46104,20 @@ interface components {
             /** @description 'completed' | 'failed' | 'interrupted'. */
             status: string;
         };
+        MessagingConversationConflictError: components["schemas"]["Error"] & {
+            /**
+             * @description Machine-readable conflict reason. STATE_CHANGED is retryable.
+             * @enum {string}
+             */
+            code: "ALREADY_HUMAN_MODE" | "ALREADY_AUTO_MODE" | "STATE_CHANGED";
+            /** @description Actor holding the conversation, when one does. */
+            takeoverActorId?: string | null;
+            takeoverAt?: string | null;
+        };
+        MessagingSendUndeliverableError: components["schemas"]["Error"] & {
+            /** @description Stable error code, when applicable (e.g. UNSUPPORTED_SURFACE_TYPE). */
+            code?: string;
+        };
         Pagination: {
             currentOffset: number;
             currentPage?: number;
@@ -46116,6 +46315,36 @@ interface components {
             error: string;
             message?: string;
         };
+        RuntimeHostDependency: {
+            interface: string;
+            /** @enum {string} */
+            kind: "durable-pause-host";
+            reason: string;
+            steps: {
+                ownerId?: string;
+                /** @enum {string} */
+                ownerKind: "flow" | "agent" | "capability" | "inline-tool";
+                ownerName?: string;
+                stepId: string;
+                stepType: string;
+            }[];
+        } | {
+            agents: {
+                ownerId?: string;
+                /** @enum {string} */
+                ownerKind: "flow" | "agent" | "capability" | "inline-tool";
+                ownerName?: string;
+                stepId?: string;
+            }[];
+            interface: string;
+            /** @enum {string} */
+            kind: "background-run-coordinator";
+            reason: string;
+        } | {
+            interface: string;
+            kind: string;
+            reason: string;
+        };
         ScheduleEntitlementError: components["schemas"]["Error"] & {
             /** @description Stable error code (e.g. ACTIVE_SCHEDULE_LIMIT, SCHEDULE_FREQUENCY_LIMIT). */
             code?: string;
@@ -46881,6 +47110,21 @@ interface TransformDataStepConfig$1 {
     inputMode?: 'code' | 'variable';
     packageJson?: string;
     persistSandbox?: boolean;
+    /**
+     * Run this step in a named sandbox instead of the per-execution default.
+     *
+     * Sandbox ids are scoped to your organization, and executions that share one
+     * share the CONTAINER: its filesystem, its installed packages, and its
+     * running processes. Left unset, each flow execution gets its own sandbox.
+     *
+     * A CONSTANT value therefore puts every concurrent run of the flow in one
+     * container. That is not isolation: concurrent steps can read each other's
+     * files and processes. They must also agree on their egress. Concurrent
+     * executions sharing a sandbox id must use the same credentials and the same
+     * `networkAccess`, and one that asks for a different posture fails rather
+     * than inheriting the other's. Use a template (for example
+     * `{{_execution.id}}`) to get a distinct sandbox per concurrent run.
+     */
     reuseSandboxId?: string;
     networkAccess?: 'off' | 'on' | {
         allowedHostnames: string[];
@@ -46915,6 +47159,21 @@ interface ConditionalStepConfig$1 {
     /** JavaScript predicate evaluated at runtime. If falsy, the step is skipped. */
     when?: string;
 }
+/**
+ * A do-while-style bounded loop. The body runs once, then `until` is evaluated;
+ * a truthy result exits and `maxIterations` is the deterministic backstop.
+ */
+interface LoopStepConfig$1 {
+    name: string;
+    steps: any[];
+    until: string;
+    maxIterations: number;
+    /** Optional variable populated with the current 1-based iteration. */
+    iterationVariable?: string;
+    enabled?: boolean;
+    /** JavaScript predicate evaluated at runtime. If falsy, the step is skipped. */
+    when?: string;
+}
 interface SearchStepConfig$1 {
     name: string;
     provider: string;
@@ -47454,6 +47713,10 @@ declare class FlowBuilder {
      * Add a conditional step
      */
     conditional(config: ConditionalStepConfig$1): this;
+    /**
+     * Add a bounded do-while loop step.
+     */
+    loop(config: LoopStepConfig$1): this;
     /**
      * Add a search step
      */
@@ -48229,6 +48492,27 @@ interface ClientToolDefinition {
      */
     untrustedContentHint?: boolean;
 }
+/**
+ * A `clientTools[]` entry that names a tool from Runtype's own MCP catalog
+ * instead of describing one. The API resolves `description` and
+ * `parametersSchema` from its own copy of the catalog and admits the result as
+ * `origin: 'webmcp'`, so the caller neither sends nor keeps those in sync. A
+ * name the catalog does not define is a 400, never a silent drop.
+ *
+ * Accepted on `POST /v1/dispatch` and `POST /v1/agents/:id/execute`. The
+ * client-token routes (`/v1/client/chat`, `/v1/client/resume`) take full
+ * manifests only.
+ */
+interface CatalogClientToolRef {
+    name: string;
+    catalog: 'runtype-mcp';
+    origin?: 'webmcp';
+    pageOrigin?: string;
+}
+/** One `clientTools[]` entry: a full manifest, or a first-party catalog ref. */
+type ClientToolEntry = ClientToolDefinition | CatalogClientToolRef;
+/** Narrow a {@link ClientToolEntry} to the name-only catalog-ref arm. */
+declare function isCatalogClientToolRef(entry: ClientToolEntry): entry is CatalogClientToolRef;
 /**
  * The canonical set of flow step types (e.g. `'prompt'`, `'transform-data'`,
  * `'conditional'`). Spec-derived from `FLOW_STEP_TYPES` in `@runtypelabs/shared`
@@ -48270,6 +48554,10 @@ type DispatchContinuationRequest = NonNullable<paths['/v1/dispatch/continue']['p
  * streaming callers receive `ExecutionStreamEvent` frames instead.
  */
 type DispatchResponse = paths['/v1/dispatch']['post']['responses'][200]['content']['application/json'];
+/** Durable handle returned by execute routes when `Prefer: respond-async` is applied. */
+type AsyncExecutionHandle = components['schemas']['AsyncDispatchHandle'];
+/** Lifecycle response returned by the generic asynchronous execution status route. */
+type AsyncExecutionStatus = paths['/v1/executions/{executionId}/status']['get']['responses'][200]['content']['application/json'];
 /** Buffered `/v1/dispatch/resume` response for a tool-output continuation. */
 type DispatchResumeResponse = components['schemas']['DispatchToolOutputContinuationJsonResponse'];
 /** Buffered ordinary-approval result (detached approvals use a separate variant). */
@@ -48327,9 +48615,11 @@ type DispatchRequestEnvelope = Omit<CanonicalDispatchRequestEnvelope, 'record' |
     /**
      * Kept on the historical SDK authoring type so schema-builder outputs typed
      * as generic records remain source-compatible. The dispatch boundary checks
-     * every schema root before emitting the canonical wire request.
+     * every schema root before emitting the canonical wire request — a
+     * {@link CatalogClientToolRef} carries no schema of its own and is passed
+     * through untouched.
      */
-    clientTools?: ClientToolDefinition[];
+    clientTools?: ClientToolEntry[];
 };
 /**
  * Canonical `/v1/dispatch` request body, generated from the API's shared
@@ -48935,6 +49225,13 @@ interface SlackOAuthStartRequest {
     clientId: string;
     clientSecret: string;
     signingSecret: string;
+    /**
+     * Slack surface (`surf_`) this install belongs to. When set, the callback
+     * writes the install onto the surface and activates it server-side, so the
+     * caller does not have to stamp it afterwards. Must be owned by the caller —
+     * a missing or foreign id fails the start call.
+     */
+    surfaceId?: string;
     includeAssistantFeatures?: boolean;
 }
 interface SlackOAuthStartResponse {
@@ -48946,28 +49243,29 @@ interface SlackOAuthStartResponse {
  * OAuth redirect) derived from its own public origin — the manifest is never
  * built client-side, so relative proxy paths can never leak into it.
  */
-interface SlackManifestRequest {
-    appName: string;
-    /** Surface the events webhook is scoped to. */
-    surfaceId: string;
-    /** Optional reserved integration id — stamps the interactivity webhook URL. */
-    integrationId?: string;
-    includeAssistantFeatures?: boolean;
-}
-interface SlackManifestResponse {
-    /** Slack app manifest as a JSON string (snake_case, per Slack's schema). */
-    manifestJson: string;
-    /**
-     * Link to Slack's app-creation page (`https://api.slack.com/apps?new_app=1`).
-     * The manifest is NOT embedded — Slack's create-app modal ignores the
-     * `manifest_json` URL parameter, so paste `manifestJson` into the
-     * "From a manifest" option instead.
-     */
-    createAppUrl: string;
-    eventsWebhookUrl: string;
-    interactivityWebhookUrl?: string;
-    redirectUrl: string;
-}
+/**
+ * Derived from the generated OpenAPI types rather than hand-written, so a route
+ * change cannot leave this interface stale. The hand-written pair previously
+ * drifted: it still required `appName` and was missing `integrationId` /
+ * `connectHandoff`, which made the `{ surfaceId }`-only call untypeable.
+ *
+ * `appName` is optional (defaults server-side to the surface's own name), and
+ * `integrationId` is optional — omit it and the route reserves a pending Slack
+ * integration for you (24h TTL) and returns it as `integrationId`.
+ */
+type SlackManifestRequest = NonNullable<paths['/v1/integrations/slack/manifest']['post']['requestBody']>['content']['application/json'];
+/**
+ * `createAppUrl` links to Slack's app-creation page
+ * (`https://api.slack.com/apps?new_app=1`). The manifest is NOT embedded —
+ * Slack's create-app modal ignores the `manifest_json` URL parameter, so paste
+ * `manifestJson` into the "From a manifest" option instead.
+ *
+ * `connectHandoff` is the hosted connect page where a human supplies the Slack
+ * Client ID / Client Secret / Signing Secret and runs "Add to Slack". It is
+ * present only for a pending reservation; an already-active integration is
+ * already connected and gets the manifest without a handoff.
+ */
+type SlackManifestResponse = paths['/v1/integrations/slack/manifest']['post']['responses'][200]['content']['application/json'];
 interface EndUserUsageQuery {
     productId: string;
     productTenantId?: string;
@@ -49842,6 +50140,7 @@ type Message = Message$1;
 type NamespaceStepConfig<T> = T;
 type FetchUrlNamespaceConfig = NamespaceStepConfig<FetchUrlStepConfig$1>;
 type ConditionalNamespaceConfig = NamespaceStepConfig<ConditionalStepConfig$1>;
+type LoopNamespaceConfig = NamespaceStepConfig<LoopStepConfig$1>;
 type SendEventNamespaceConfig = NamespaceStepConfig<SendEventStepConfig$1>;
 type PromptStepConfig = NamespaceStepConfig<PromptStepConfig$1>;
 type CrawlStepConfig = NamespaceStepConfig<CrawlStepConfig$1>;
@@ -49861,6 +50160,9 @@ type ConditionalStepConfig = Omit<ConditionalNamespaceConfig, 'trueSteps' | 'fal
     trueSteps?: unknown[];
     falseSteps?: unknown[];
 };
+type LoopStepConfig = Omit<LoopNamespaceConfig, 'steps'> & {
+    steps: unknown[];
+};
 type SearchStepConfig = NamespaceStepConfig<SearchStepConfig$1>;
 type SendEmailStepConfig = NamespaceStepConfig<SendEmailStepConfig$1>;
 type SendStreamStepConfig = NamespaceStepConfig<SendStreamStepConfig$1>;
@@ -50037,6 +50339,10 @@ declare class RuntypeFlowBuilder {
      * Add a conditional step
      */
     conditional(config: ConditionalStepConfig): this;
+    /**
+     * Add a bounded do-while loop step.
+     */
+    loop(config: LoopStepConfig): this;
     /**
      * Add a search step
      */
@@ -52020,6 +52326,13 @@ declare class AgentsNamespace {
     private request;
 }
 
+/** Read-only namespace for durable asynchronous execution handles. */
+declare class ExecutionsNamespace {
+    private readonly getClient;
+    constructor(getClient: () => RuntypeClient$1);
+    getStatus(executionId: string): Promise<AsyncExecutionStatus>;
+}
+
 /**
  * Tool config-as-code: `defineTool`, `tools.ensure`, `tools.pull`.
  *
@@ -52782,7 +53095,7 @@ declare class RuntypeClient$1 {
     /**
      * Generic POST request
      */
-    post<T>(path: string, data?: unknown): Promise<T>;
+    post<T>(path: string, data?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
     /**
      * Generic PUT request
      */
@@ -52816,6 +53129,9 @@ declare class RuntypeClient$1 {
      * and pins `streamResponse: false` so the server returns buffered JSON.
      */
     dispatchJson<T>(config: unknown): Promise<T>;
+    /** Start a normalized dispatch and return a durable handle immediately. */
+    dispatchAsync(config: unknown): Promise<AsyncExecutionHandle>;
+    getExecutionStatus(executionId: string): Promise<AsyncExecutionStatus>;
     /**
      * Build full URL with query parameters
      */
@@ -52999,6 +53315,8 @@ declare class Runtype {
      * ```
      */
     static get agents(): AgentsNamespace;
+    /** Poll durable handles returned by asynchronous execute operations. */
+    static get executions(): ExecutionsNamespace;
     /**
      * Tools namespace - Tool config-as-code (define / ensure / pull)
      *
@@ -53083,6 +53401,177 @@ declare class Runtype {
     static get surfaces(): SurfacesNamespace;
 }
 
+/**
+ * Agent API key request types.
+ *
+ * An agent (SDK, CLI, MCP client) FILES a request for a new, narrower Runtype
+ * management API key with its existing credential. Nothing is minted. A human
+ * approves it in a focused dashboard page, can only NARROW the grant, and the
+ * requester then redeems it with its PKCE verifier. The key is minted AT
+ * REDEMPTION and returned exactly once, so an approved-but-unclaimed request
+ * never leaves a live key anywhere and the browser never sees plaintext.
+ *
+ * Note: these types are inlined from the internal shared package
+ * (`packages/shared/src/api-key-requests.ts`, the canonical wire contract)
+ * because this SDK ships with `"dependencies": {}` and must not make consumers
+ * install @runtypelabs/shared — the same reason `types.ts`, `client-token-types.ts`
+ * and `evals-suites.ts` mirror rather than import.
+ *
+ * DRIFT CONTROL — this file is the WEAK form and is meant to be temporary.
+ * The package's stronger convention is to DERIVE the type from the generated
+ * OpenAPI artifact (see `types.ts`: `Flow`, `RuntypeRecord`, `CreateFlowRequest`
+ * are all `paths[...]` aliases), which cannot drift because
+ * `pnpm --filter @runtypelabs/sdk generate:types:check` is part of the repo's
+ * `check:generated` CI gate. That is not possible yet only because
+ * `/v1/api-keys/requests*` does not exist in the committed spec
+ * (`apps/api/openapi/public/v1/openapi.json`) at the time of writing.
+ *
+ * The moment those routes land and `pnpm --filter @runtypelabs/sdk generate:types`
+ * regenerates `src/generated/openapi-types.ts`, REPLACE the three wire-bearing
+ * declarations below with these aliases and delete the hand-written bodies:
+ *
+ *   import type { paths } from './generated/openapi-types'
+ *
+ *   export type ApiKeyRequest =
+ *     paths['/v1/api-keys/requests/{id}']['get']['responses'][200]['content']['application/json']
+ *   export type CreateApiKeyRequestInput =
+ *     paths['/v1/api-keys/requests']['post']['requestBody']['content']['application/json']
+ *   export type CreateApiKeyRequestResponse =
+ *     paths['/v1/api-keys/requests']['post']['responses'][201]['content']['application/json']
+ *   export type ClaimApiKeyRequestInput =
+ *     paths['/v1/api-keys/requests/{id}/claim']['post']['requestBody']['content']['application/json']
+ *   export type ClaimApiKeyRequestResponse =
+ *     paths['/v1/api-keys/requests/{id}/claim']['post']['responses'][200]['content']['application/json']
+ *
+ * (Adjust the exact status codes / `{id}` spelling to whatever the routes
+ * register.) Until then, any change to `packages/shared/src/api-key-requests.ts`
+ * must be mirrored here by hand.
+ */
+/** Lifecycle of a request. Terminal: declined, claimed, expired, cancelled. */
+type ApiKeyRequestStatus = 'pending' | 'approved' | 'declined' | 'claimed' | 'expired' | 'cancelled';
+type ApiKeyRequestEnvironment = 'live' | 'test';
+/**
+ * How the requester would like to receive the key. Recorded for the approver to
+ * see; the ACTUAL delivery is chosen at claim time.
+ *
+ * - `secret`  — stored as an org Runtype secret; only a `{{secret:KEY}}`
+ *               reference comes back. The value never enters a transcript.
+ * - `keyfile` — the CLI writes a 0600 key file and returns only its path.
+ * - `inline`  — plaintext returned once from the claim response (SDK/CI).
+ */
+type ApiKeyRequestDelivery = 'secret' | 'keyfile' | 'inline';
+/** Browser handoff envelope: where a human goes to decide. */
+interface ApiKeyRequestHandoff {
+    type: 'url';
+    url: string;
+    expiresAt: string;
+}
+/** Requester identity as shown to the approver. Display only, never authorization. */
+interface ApiKeyRequestRequester {
+    /** `key_…` when the request came from an API key; null for a Clerk session. */
+    apiKeyId: string | null;
+    apiKeyName: string | null;
+    /** From the MCP client-info stash when known. */
+    clientName: string | null;
+    clientVersion: string | null;
+    /** Effective permissions of the requesting credential, for the escalation badge. */
+    permissions: string[];
+}
+interface ApiKeyRequest {
+    id: string;
+    organizationId: string;
+    status: ApiKeyRequestStatus;
+    name: string;
+    /**
+     * The requester's own claim about why it needs the key. Attacker-writable
+     * text under prompt injection: display it, never branch on it.
+     */
+    reason: string;
+    requestedPermissions: string[];
+    /** Requested scopes the requesting credential does NOT already hold. */
+    escalatedPermissions: string[];
+    environment: ApiKeyRequestEnvironment;
+    requestedTtlSeconds: number;
+    preferredDelivery: ApiKeyRequestDelivery;
+    requester: ApiKeyRequestRequester;
+    grantedPermissions: string[] | null;
+    grantedExpiresAt: string | null;
+    decidedByUserId: string | null;
+    decidedAt: string | null;
+    declineReason: string | null;
+    claimExpiresAt: string | null;
+    claimedAt: string | null;
+    mintedApiKeyId: string | null;
+    expiresAt: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Body of `apiKeys.requests.create`. */
+interface CreateApiKeyRequestInput {
+    name: string;
+    permissions: string[];
+    /** Shown to the approver as the requester's claim. */
+    reason: string;
+    environment?: ApiKeyRequestEnvironment;
+    ttlSeconds?: number;
+    preferredDelivery?: ApiKeyRequestDelivery;
+    /**
+     * PKCE (RFC 7636) S256 challenge: `BASE64URL(SHA256(ASCII(codeVerifier)))`.
+     * Keep the verifier — it is the one-time secret that redeems the request, and
+     * a request id without it is worthless.
+     */
+    codeChallenge: string;
+    codeChallengeMethod?: 'S256';
+    /** Dashboard path to return the approver to after they decide. */
+    returnUrl?: string;
+}
+interface CreateApiKeyRequestResponse {
+    request: ApiKeyRequest;
+    handoff: ApiKeyRequestHandoff;
+    pollIntervalMs: number;
+    /** Plain-text instructions for what to do next. Safe to surface verbatim. */
+    nextSteps: string;
+}
+/** Body of `apiKeys.requests.claim`. */
+interface ClaimApiKeyRequestInput {
+    codeVerifier: string;
+    /** Defaults to `inline` server-side. */
+    delivery?: 'inline' | 'secret';
+    /** Key to store under for `secret` delivery. Defaults to `RUNTYPE_API_KEY_<NAME>`. */
+    secretKey?: string;
+}
+/** Exactly one of `apiKey` / `secretRef` is present, per `delivery`. */
+interface ClaimApiKeyRequestResponse {
+    request: ApiKeyRequest;
+    keyId: string;
+    name: string;
+    environment: ApiKeyRequestEnvironment;
+    permissions: string[];
+    expiresAt: string | null;
+    delivery: 'inline' | 'secret';
+    /** Plaintext key. Present once, only for `delivery: 'inline'`. */
+    apiKey?: string;
+    /** `{{secret:KEY}}` reference. Present only for `delivery: 'secret'`. */
+    secretRef?: string;
+    secretKey?: string;
+    nextSteps: string;
+}
+/**
+ * `GET /v1/api-keys/requests/{id}` envelope. `handoff` is present only while
+ * the request is still `pending` — once it is decided there is nothing left to
+ * approve. Mirrors `getApiKeyRequestResponseSchema` in `@runtypelabs/shared`.
+ */
+interface GetApiKeyRequestResponse {
+    request: ApiKeyRequest;
+    handoff?: ApiKeyRequestHandoff;
+}
+/** Query params for `apiKeys.requests.list` (Clerk-session surface). */
+interface ApiKeyRequestListParams {
+    status?: ApiKeyRequestStatus;
+    limit?: number;
+    cursor?: string;
+}
+
 /**
  * Client Token Types
  *
@@ -53519,7 +54008,7 @@ interface ApiClient {
     get<T>(path: string, params?: {
         [key: string]: any;
     }): Promise<T>;
-    post<T>(path: string, data?: any): Promise<T>;
+    post<T>(path: string, data?: any, headers?: Record<string, string>): Promise<T>;
     put<T>(path: string, data?: any): Promise<T>;
     patch<T>(path: string, data?: any): Promise<T>;
     delete<T>(path: string, data?: any): Promise<T>;
@@ -53808,11 +54297,86 @@ declare class CollectionsEndpoint {
      */
     typegen(): Promise<string>;
 }
+/**
+ * Agent API key REQUESTS — a device-authorization-style grant.
+ *
+ * The requester never mints a key: it files a request with a PKCE challenge, a
+ * human approves it in the dashboard (and can only narrow the grant), and the
+ * requester redeems it with the verifier. Keep the verifier — an approved
+ * request without it is unclaimable, which is what makes a request id safe to
+ * pass around in a URL.
+ *
+ * ```typescript
+ * import { createHash, randomBytes } from 'node:crypto'
+ *
+ * const codeVerifier = randomBytes(32).toString('base64url')
+ * const codeChallenge = createHash('sha256').update(codeVerifier).digest('base64url')
+ *
+ * const { request, handoff } = await client.apiKeys.requests.create({
+ *   name: 'deploy-bot',
+ *   permissions: ['FLOWS:READ'],
+ *   reason: 'Nightly deploy job needs to read flows.',
+ *   codeChallenge,
+ * })
+ * console.log(`Approve at ${handoff.url}`)
+ *
+ * // …after a human approves…
+ * const claimed = await client.apiKeys.requests.claim(request.id, { codeVerifier })
+ * ```
+ */
+declare class ApiKeyRequestsEndpoint {
+    private client;
+    constructor(client: ApiClient);
+    /**
+     * File a request. Nothing is minted; the response carries the request, the
+     * browser handoff a human must complete, and a suggested poll interval.
+     */
+    create(data: CreateApiKeyRequestInput): Promise<CreateApiKeyRequestResponse>;
+    /**
+     * Read one request — poll this for the approval decision.
+     *
+     * The route answers with the `{ request, handoff? }` envelope (the handoff is
+     * present only while a human still has to act), so unwrap it the way `list()`
+     * unwraps `{ requests }`. Returning the envelope raw types as `ApiKeyRequest`
+     * but has no `status`, which silently reads as `undefined` in every caller's
+     * state machine rather than failing anywhere near here.
+     */
+    get(requestId: string): Promise<ApiKeyRequest>;
+    /**
+     * Read one request together with its browser handoff. Same route as `get()`;
+     * use this when re-raising the approval prompt for a request this process did
+     * not file (the handoff is absent once the request leaves `pending`).
+     */
+    getWithHandoff(requestId: string): Promise<GetApiKeyRequestResponse>;
+    /**
+     * List requests for the account. Clerk-session surface (the human review
+     * queue); an API key sees only its own requests.
+     */
+    list(params?: ApiKeyRequestListParams): Promise<ApiKeyRequest[]>;
+    /**
+     * Redeem an approved request. The key is minted here and returned exactly
+     * once: `delivery: 'inline'` (the API default) puts the plaintext in
+     * `apiKey`; `delivery: 'secret'` stores it as a Runtype secret and returns
+     * only a `{{secret:KEY}}` reference in `secretRef`. Claiming twice is a 409.
+     */
+    claim(requestId: string, data: ClaimApiKeyRequestInput): Promise<ClaimApiKeyRequestResponse>;
+    /** Withdraw a pending request you filed. Cannot be undone. */
+    cancel(requestId: string): Promise<{
+        request: ApiKeyRequest;
+    }>;
+}
 /**
  * API Keys endpoint handlers
  */
 declare class ApiKeysEndpoint {
     private client;
+    /**
+     * Agent key requests (`/v1/api-keys/requests`). Use this instead of
+     * {@link ApiKeysEndpoint.create} when the caller is an agent or automation:
+     * `create` mints immediately and is Clerk-session only, while a request puts
+     * a human in the loop and mints at redemption.
+     */
+    readonly requests: ApiKeyRequestsEndpoint;
     constructor(client: ApiClient);
     /**
      * List all API keys for the authenticated user
@@ -54012,6 +54576,8 @@ declare class DispatchEndpoint {
      * Dispatch: create and/or execute flows on records atomically
      */
     execute(data: DispatchRequest): Promise<any>;
+    /** Start a dispatch and return its durable execution handle immediately. */
+    executeAsync(data: DispatchRequest): Promise<AsyncExecutionHandle>;
     /**
      * Dispatch with streaming response
      */
@@ -54064,6 +54630,12 @@ declare class DispatchEndpoint {
      */
     applyGeneratedRuntimeToolProposal(request: DispatchRequest, proposal: unknown, options?: ApplyGeneratedProposalOptions): ApplyGeneratedProposalResult;
 }
+/** Generic asynchronous execution lifecycle endpoints. */
+declare class ExecutionsEndpoint {
+    private client;
+    constructor(client: ApiClient);
+    getStatus(executionId: string): Promise<AsyncExecutionStatus>;
+}
 /**
  * Chat endpoint handler
  */
@@ -54483,6 +55055,15 @@ interface AgentStartEvent extends BaseAgentEvent {
         model?: string;
         enableReflection?: boolean;
     };
+    /**
+     * `true` when this start opens the RESUME leg of a paused run (approval or
+     * client-tool continuation) rather than a new run. The runtime opens every
+     * response with a start frame; keep run-level state (turn counts, spend
+     * totals, accumulated output) across a resumed start instead of resetting.
+     * `executeWithLocalTools` already folds resumed starts away — its
+     * `onAgentStart` fires once per session.
+     */
+    resumed?: boolean;
 }
 /**
  * Agent iteration start event
@@ -54599,6 +55180,8 @@ interface AgentToolCompleteEvent extends BaseAgentEvent {
     toolName: string;
     success: boolean;
     result?: unknown;
+    /** Failure reason when `success` is false (e.g. an MCP discovery connection failure). */
+    error?: string;
     executionTime?: number;
 }
 interface AgentMediaEvent extends BaseAgentEvent {
@@ -55557,6 +56140,8 @@ declare class AgentsEndpoint {
      * Execute an agent (non-streaming)
      */
     execute(id: string, data: AgentExecuteRequest): Promise<AgentExecuteResponse>;
+    /** Start an agent execution and return its durable handle immediately. */
+    executeAsync(id: string, data: AgentExecuteRequest): Promise<AsyncExecutionHandle>;
     /**
      * Execute an agent with streaming response
      *
@@ -56251,6 +56836,7 @@ declare class RuntypeClient implements ApiClient {
     modelConfigs: ModelConfigsEndpoint;
     providerKeys: ProviderKeysEndpoint;
     dispatch: DispatchEndpoint;
+    executions: ExecutionsEndpoint;
     chat: ChatEndpoint;
     users: UsersEndpoint;
     analytics: AnalyticsEndpoint;
@@ -56324,7 +56910,7 @@ declare class RuntypeClient implements ApiClient {
     /**
      * Generic POST request
      */
-    post<T>(path: string, data?: unknown): Promise<T>;
+    post<T>(path: string, data?: unknown, extraHeaders?: Record<string, string>): Promise<T>;
     /**
      * POST request with FormData support for file uploads
      */
@@ -57160,6 +57746,19 @@ declare const STEP_FIELD_REGISTRY: {
         readonly key: "falseSteps";
         readonly format: "value";
     }];
+    readonly loop: readonly [{
+        readonly key: "steps";
+        readonly format: "value";
+    }, {
+        readonly key: "until";
+        readonly format: "template";
+    }, {
+        readonly key: "maxIterations";
+        readonly format: "raw";
+    }, {
+        readonly key: "iterationVariable";
+        readonly format: "json";
+    }];
     readonly search: readonly [{
         readonly key: "provider";
         readonly format: "json";
@@ -57550,6 +58149,7 @@ declare const STEP_TYPE_TO_METHOD: {
     readonly 'transform-data': "transformData";
     readonly template: "template";
     readonly conditional: "conditional";
+    readonly loop: "loop";
     readonly 'set-variable': "setVariable";
     readonly 'upsert-record': "upsertRecord";
     readonly 'update-record': "updateRecord";
@@ -57918,4 +58518,4 @@ declare function getLikelySupportingCandidatePaths(bestCandidatePath: string | u
 declare function getDefaultPlanPath(taskName: string): string;
 declare function sanitizeTaskSlug(taskName: string): string;
 
-export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, type AgentElicitation, type AgentElicitationRequest, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, ApiKeysEndpoint, type ApiResponse, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, type AssetReferenceContentPart, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CanonicalDispatchMessageContent, type CanonicalDispatchRequest, type CaseExpected, ChatEndpoint, type CheckGrader, type ClaudeManagedEvalOverrideValues, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientWidgetTheme, type CollectionMeta, CollectionsEndpoint, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateCollectionRequest, type CreateConversationRequest, type CreateEvalSuiteInput, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CurrentBilledSpendResponse, type CurrentBilledSpendSource, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DecomposeCriteriaResult, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchAgentInput, type DispatchApprovalContinuationResponse, type DispatchApproveRequest, type DispatchApproveResponse, type DispatchClient, type DispatchContinuationRequest, type DispatchContinuationResponse, type DispatchDetachedApprovalResponse, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchFlowInput, type DispatchMessageContent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type DispatchResponse, type DispatchResumeRequest, type DispatchResumeResponse, type EndUserUsageQuery, type EndUserUsageResponse, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalCaseProposal, type EvalCaseProposalAccepted, type EvalCaseProposalListResult, type EvalCasesGenerated, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalOverrideValues, type EvalProposalSource, type EvalProposalStatus, type EvalProposedCase, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunCaseScores, type EvalRunConfig, type EvalRunScores, EvalRunner, type EvalStatus, type EvalSuiteCase, type EvalSuiteCaseInput, type EvalSuiteCoverage, type EvalSuiteDetail, type EvalSuiteLatestRun, type EvalSuiteListResult, type EvalSuiteRunQueued, type EvalSuiteRunResult, type EvalSuiteSummary, EvalSuitesNamespace, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GenerateEvalCasesInput, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type GetRecordStepConfig$1 as GetRecordStepConfig, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type HumanVerdict, type ImageContentPart, type InferCollectionSchemaResponse, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListCollectionsResponse, type ListConversationsResponse, type ListParams, type ListRecordsStepConfig$1 as ListRecordsStepConfig, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type PersistedGraderOutcome, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordCollection, type RecordCollectionWithHistory, type RecordCollections, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type GetRecordStepConfig as RuntypeGetRecordStepConfig, type ListRecordsStepConfig as RuntypeListRecordsStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SelectOrganizationProviderCredentialRequest, type SelectOrganizationProviderCredentialResponse, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type SlackManifestRequest, type SlackManifestResponse, type SlackOAuthStartRequest, type SlackOAuthStartResponse, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, type TypedCreateRecordRequest, type TypedRecordListItem, type TypedRecordWriteResponse, TypedRecordsScope, type TypedRuntypeRecord, UNIFIED_EVENTS_QUERY, type UpdateClientTokenRequest, type UpdateCollectionRequest, type UpdateCollectionResponse, type UpdateConversationRequest, type UpdateEvalCaseInput, type UpdateEvalSuiteInput, type UpdateFlowRequest, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type ValidateExistingRecordsResponse, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };
+export { type AIGrader, type Agent, type AgentApprovalCompleteEvent, type AgentApprovalStartEvent, type AgentCompleteEvent, type AgentDefinition, type AgentDefinitionConfig, AgentDriftError, type AgentElicitation, type AgentElicitationRequest, AgentEnsureConflictError, type AgentErrorEvent, type AgentEvent, type AgentEventType, type AgentExecuteRequest, type AgentExecuteResponse, type AgentIterationCompleteEvent, type AgentIterationStartEvent, type AgentMediaEvent, type AgentMessage, type AgentPausedEvent, type AgentPingEvent, type AgentPullResult, type AgentReflectionEvent, type AgentRuntimeToolDefinition, type AgentStartEvent, type AgentStreamCallbacks, type AgentStreamEvent, type AgentSubagentConfig, type AgentToolCompleteEvent, type AgentToolDeltaEvent, type AgentToolInputCompleteEvent, type AgentToolInputDeltaEvent, type AgentToolStartEvent, type AgentTurnCompleteEvent, type AgentTurnDeltaEvent, type AgentTurnStartEvent, type AgentVersionDetail, type AgentVersionListItem, type AgentVersionPublishResponse, AgentVersionsEndpoint, type AgentVersionsListResponse, AgentsEndpoint, AgentsNamespace, AnalyticsEndpoint, type ApiClient, type ApiKey, type ApiKeyRequest, type ApiKeyRequestDelivery, type ApiKeyRequestEnvironment, type ApiKeyRequestHandoff, type ApiKeyRequestListParams, type ApiKeyRequestRequester, type ApiKeyRequestStatus, ApiKeyRequestsEndpoint, ApiKeysEndpoint, type ApiResponse, type ApplyGeneratedProposalOptions, type ApplyGeneratedProposalResult, type AssetReferenceContentPart, type AsyncExecutionHandle, type AsyncExecutionStatus, type AttachRuntimeToolsOptions, type BaseAgentEvent, BatchBuilder, type BatchClient, type BatchListParams, type BatchOptions, type BatchRequest, type BatchResult, type BatchScheduleConfig, type BatchStatus, BatchesNamespace, BillingEndpoint, type BillingSpendAnalyticsParams, type BindSkillInput, type BuiltInGraderId, type BuiltInTool, type BulkEditCondition, type BulkEditRequest, type BulkEditResponse, type BulkEditResult, type CanonicalDispatchMessageContent, type CanonicalDispatchRequest, type CaseExpected, type CatalogClientToolRef, ChatEndpoint, type CheckGrader, type ClaimApiKeyRequestInput, type ClaimApiKeyRequestResponse, type ClaudeManagedEvalOverrideValues, ClientBatchBuilder, type ClientConfig, type ClientConversation, ClientEvalBuilder, ClientFlowBuilder, type ClientToken, type ClientTokenConfig, type ClientTokenEnvironment, type ClientTokenVersionPin, ClientTokensEndpoint, type ClientToolDefinition, type ClientToolEntry, type ClientWidgetTheme, type CollectionMeta, CollectionsEndpoint, type ConditionalGetResult, type ConditionalStepConfig$1 as ConditionalStepConfig, type ContextErrorHandling, type ContextFallback, ContextTemplatesEndpoint, type Conversation, type ConversationListItem, type ConversationListParams, type ConversationMessage, type ConversationSource, ConversationsEndpoint, type ConversationsListResponse, type CreateApiKeyRequest, type CreateApiKeyRequestInput, type CreateApiKeyRequestResponse, type CreateClientTokenRequest, type CreateClientTokenResponse, type CreateCollectionRequest, type CreateConversationRequest, type CreateEvalSuiteInput, type CreateFlowRequest, type CreateModelConfigRequest, type CreatePromptData, type CreatePromptRequest, type CreateProviderKeyRequest, type CreateRecordRequest, type CreateScheduleRequest, type CreateSecretRequest, type CreateToolRequest, type CurrentBilledSpendResponse, type CurrentBilledSpendSource, type CustomMCPServer, type CustomMCPServerAuth, type CustomToolConfig, DEFAULT_RECOVERY_AFTER_EMPTY_SESSIONS, DEFAULT_STALL_STOP_AFTER, type DecomposeCriteriaResult, type DefineAgentInput, type DefineEvalCaseInput, type DefineEvalInput, type DefineFlowInput, type DefineProductInput, type DefineSkillInput, type DefineSurfaceInput, type DefineToolInput, type DeployCfSandboxRequest, type DeployCfSandboxResponse, type DeploySandboxRequest, type DeploySandboxResponse, type DiscoveredModel, type DispatchAgentInput, type DispatchApprovalContinuationResponse, type DispatchApproveRequest, type DispatchApproveResponse, type DispatchClient, type DispatchContinuationRequest, type DispatchContinuationResponse, type DispatchDetachedApprovalResponse, DispatchEndpoint, type DispatchEnvironment, type DispatchEvent, type DispatchFlowInput, type DispatchMessageContent, type DispatchOptions$1 as DispatchOptions, type DispatchRequest, type DispatchResponse, type DispatchResumeRequest, type DispatchResumeResponse, type EndUserUsageQuery, type EndUserUsageResponse, type EnsureAgentConverged, type EnsureAgentOptions, type EnsureAgentPlan, type EnsureAgentResult, type EnsureEvalResult, type EnsureFlowConverged, type EnsureFlowOptions, type EnsureFlowPlan, type EnsureFlowResult, type EnsureFpoOptions, type EnsureFpoResult, type EnsureProductConverged, type EnsureProductOptions, type EnsureProductPlan, type EnsureProductResult, type EnsureSkillConverged, type EnsureSkillOptions, type EnsureSkillPlan, type EnsureSkillResult, type EnsureSurfaceConverged, type EnsureSurfaceOptions, type EnsureSurfacePlan, type EnsureSurfaceResult, type EnsureToolConverged, type EnsureToolOptions, type EnsureToolPlan, type EnsureToolResult, type ErrorHandlingMode, EvalBuilder, type EvalCaseDefinition, type EvalCaseInput, type EvalCaseProposal, type EvalCaseProposalAccepted, type EvalCaseProposalListResult, type EvalCasesGenerated, type EvalClient, type EvalDefinition, EvalEndpoint, type EvalListParams, type EvalMessage, type EvalOptions, type EvalOverrideValues, type EvalProposalSource, type EvalProposalStatus, type EvalProposedCase, type EvalPullResult, type EvalRecord, type EvalRequest, type EvalResult, type EvalRunCaseScores, type EvalRunConfig, type EvalRunScores, EvalRunner, type EvalStatus, type EvalSuiteCase, type EvalSuiteCaseInput, type EvalSuiteCoverage, type EvalSuiteDetail, type EvalSuiteLatestRun, type EvalSuiteListResult, type EvalSuiteRunQueued, type EvalSuiteRunResult, type EvalSuiteSummary, EvalSuitesNamespace, type EvalTarget, EvalsNamespace, type ExecuteToolRequest, type ExecuteToolResponse, type ExecutionStreamEvent, ExecutionsEndpoint, ExecutionsNamespace, type ExternalAgentContext, type ExternalToolConfig, type FallbackFailEvent, type FallbackStartEvent, type FallbackSuccessEvent, type FallbackTrigger, type FallbackTriggerType, type FallbacksExhaustedEvent, type FallbacksInitiatedEvent, type FetchUrlStepConfig$1 as FetchUrlStepConfig, type FieldFormat, type FileContentPart, type Flow, type FlowAttachment, FlowBuilder, type FlowCompleteEvent, type FlowConfig$1 as FlowConfig, type FlowDefinition, type FlowDefinitionStep, FlowDriftError, FlowEnsureConflictError, type FlowErrorEvent, type FlowFallback, type FlowInlineEvalInput, type FlowListItem, type FlowPausedEvent, type FlowPullResult, FlowResult, type FlowStartEvent, type FlowStep, type FlowStepDefinition, type FlowStepType, FlowStepsEndpoint, type FlowStreamEvent, type FlowSummary, type FlowToolConfig, type FlowValidationClient, type FlowValidationIssue, type FlowValidationResult, type FlowVersionDetail, type FlowVersionListItem, type FlowVersionPublishResponse, FlowVersionsEndpoint, type FlowVersionsListResponse, FlowsEndpoint, FlowsNamespace, type FpoEntityOutcome, type FpoInput, type GenerateEmbeddingStepConfig$1 as GenerateEmbeddingStepConfig, type GenerateEvalCasesInput, type GeneratedRuntimeToolGateDecision, type GeneratedRuntimeToolGateOptions, type GetApiKeyRequestResponse, type GetRecordStepConfig$1 as GetRecordStepConfig, type Gradeable, type GraderConfig, type GraderOutcome, type GraderSeverity, type HumanVerdict, type ImageContentPart, type InferCollectionSchemaResponse, type Integration, type IntegrationTool, IntegrationsEndpoint, type IntegrationsListResponse, type JSONSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, LEDGER_ARTIFACT_LINE_PREFIX, type ListCollectionsResponse, type ListConversationsResponse, type ListParams, type ListRecordsStepConfig$1 as ListRecordsStepConfig, type LocalToolConfig, type LocalToolDefinition, type LocalToolExecutionCompleteEvent, type LocalToolExecutionLoopSnapshotSlice, type LocalToolExecutionStartEvent, type LogEntry, type LogQueryParams, type LogQueryResponse, type LogQueryResult, type LogStatsParams, type LogStatsResponse, type LogStatsResult, LogsEndpoint, type LoopStepConfig$1 as LoopStepConfig, type Message$1 as Message, type MessageContent, type MessageFallback, type Metadata, type ModelConfig, ModelConfigsEndpoint, type ModelFallback, type ModelOverride, type ModelUsageDetail, type ModelUsageQueryParams, type ModelUsageResponse, type ModelUsageSummary, type ModelUsageTimeSeries, type PaginationResponse, type PersistedGraderOutcome, type ProductDefinition, ProductDriftError, ProductEnsureConflictError, type ProductPullResult, ProductsNamespace, type Prompt$1 as Prompt, type PromptErrorHandling, type PromptFallback, type PromptListParams, type PromptStepConfig$1 as PromptStepConfig, PromptsEndpoint, PromptsNamespace, type ProviderApiKey, type ProviderKeyModel, ProviderKeysEndpoint, type PullFpoResult, RUNTYPE_CLIENT_KIND, type ReasoningConfig, type ReasoningContentPart, type ReasoningValue, type RecordCollection, type RecordCollectionWithHistory, type RecordCollections, type RecordConfig$1 as RecordConfig, type RecordCostAggregation, type RecordCostModelBreakdown, type RecordFilter, type RecordFilterCondition, type RecordFilterGroup, type RecordFilterOperator, type RecordListItem, type RecordListParams, type RecordStepResult, type RecordStepResultsParams, type RecordStepResultsResponse, type RecordWriteResponse, RecordsEndpoint, type RetrieveRecordStepConfig$1 as RetrieveRecordStepConfig, type RetryFallback, type RunEvalCaseResult, type RunEvalInput, type RunEvalResult, type RunTaskContextBudgetBreakdown, type RunTaskContextCompactionEvent, type RunTaskContextCompactionStrategy, type RunTaskContextNoticeEvent, type RunTaskContextSummaryEntry, type RunTaskContinuation, type RunTaskOffloadRecorder, type RunTaskOnContextCompaction, type RunTaskOnContextNotice, type RunTaskOnSession, type RunTaskOptions, type RunTaskResult, type RunTaskResumeState, type RunTaskSessionSummary, type RunTaskState, type RunTaskStateSlice, type RunTaskStatus, type RunTaskToolTraceSlice, type RuntimeCustomToolConfig, type RuntimeExternalToolConfig, type RuntimeFlowToolConfig, type RuntimeLocalToolConfig, type RuntimeSubagentToolConfig, type RuntimeTool, type RuntimeToolConfig, Runtype, type AgentSkillBinding as RuntypeAgentSkillBinding, RuntypeApiError, RuntypeClient, type ConditionalStepConfig as RuntypeConditionalStepConfig, type RuntypeConfig, type FetchUrlStepConfig as RuntypeFetchUrlStepConfig, RuntypeFlowBuilder, type FlowConfig as RuntypeFlowConfig, type GenerateEmbeddingStepConfig as RuntypeGenerateEmbeddingStepConfig, type GetRecordStepConfig as RuntypeGetRecordStepConfig, type ListRecordsStepConfig as RuntypeListRecordsStepConfig, type LoopStepConfig as RuntypeLoopStepConfig, type Message as RuntypeMessage, type ModelOverride$1 as RuntypeModelOverride, type Prompt as RuntypePrompt, type PromptStepConfig as RuntypePromptStepConfig, type RuntypeRecord, type RecordConfig as RuntypeRecordConfig, type RetrieveRecordStepConfig as RuntypeRetrieveRecordStepConfig, type SearchStepConfig as RuntypeSearchStepConfig, type SendEmailStepConfig as RuntypeSendEmailStepConfig, type SendEventStepConfig as RuntypeSendEventStepConfig, type SendStreamStepConfig as RuntypeSendStreamStepConfig, type SetVariableStepConfig as RuntypeSetVariableStepConfig, type Skill as RuntypeSkill, type SkillCapabilities as RuntypeSkillCapabilities, type SkillFrontmatter as RuntypeSkillFrontmatter, type SkillManifest as RuntypeSkillManifest, type SkillProposal as RuntypeSkillProposal, type SkillRuntypeExtensions as RuntypeSkillRuntypeExtensions, type SkillVersion as RuntypeSkillVersion, type TransformDataStepConfig as RuntypeTransformDataStepConfig, type UpsertFlowConfig as RuntypeUpsertFlowConfig, type UpsertRecordStepConfig as RuntypeUpsertRecordStepConfig, type VectorSearchStepConfig as RuntypeVectorSearchStepConfig, type WaitUntilStepConfig as RuntypeWaitUntilStepConfig, SDK_USER_AGENT, SDK_VERSION, STEP_FIELD_REGISTRY, STEP_TYPE_TO_METHOD, type Schedule, type ScheduleExecutionOptions, type ScheduleListParams, type ScheduleMessage, type ScheduleMessageSet, type ScheduleMessages, type ScheduleMutationResponse, type ScheduleRun, type ScheduleRunNowResponse, type ScheduleStatusResponse, type ScheduleTarget, type ScheduleTrigger, SchedulesEndpoint, type SearchStepConfig$1 as SearchStepConfig, type Secret, type SecretCheckResponse, type SecretDeleteResponse, type SecretSetupUrlRequest, type SecretSetupUrlResponse, SecretsEndpoint, type SelectOrganizationProviderCredentialRequest, type SelectOrganizationProviderCredentialResponse, type SendEmailStepConfig$1 as SendEmailStepConfig, type SendEventStepConfig$1 as SendEventStepConfig, type SendStreamStepConfig$1 as SendStreamStepConfig, type SetVariableStepConfig$1 as SetVariableStepConfig, type SkillDefinition, SkillDriftError, SkillEnsureConflictError, type SkillListPage, type SkillListPagination, type SkillListParams, type SkillManifestInput, type SkillMarkdownInput, type SkillOrigin, type SkillProposalStatus, SkillProposalsNamespace, type SkillPullResult, type SkillStatus, type SkillTrustLevel, type SkillVersionStatus, type SkillWithVersion, type SkillWriteInput, SkillsNamespace, type SlackInstallRequest, type SlackManifestRequest, type SlackManifestResponse, type SlackOAuthStartRequest, type SlackOAuthStartResponse, type StepCompleteEvent, type StepDeltaEvent, type StepFallback, type StepFieldMeta, type StepStartEvent, type StepWaitingLocalEvent, type StreamCallbacks, type StreamConsumeOptions, type StreamEvent, type StreamEventOf, type SubagentToolConfig, type Surface, type SurfaceDefinition, type SurfaceDefinitionEnvironment, type SurfaceDefinitionStatus, type SurfaceDefinitionType, SurfaceDriftError, SurfaceEnsureConflictError, type SurfaceListParams, type SurfacePullResult, SurfacesEndpoint, SurfacesNamespace, type TextContentPart, type Tool, type ToolApprovalGrant, ToolApprovalGrantsEndpoint, type ToolConfig, type ToolDefinition, type ToolDefinitionType, ToolDriftError, ToolEnsureConflictError, type ToolPullResult, type ToolWithValidation, type ToolsConfig, ToolsEndpoint, ToolsNamespace, type TransformDataStepConfig$1 as TransformDataStepConfig, type TypedCreateRecordRequest, type TypedRecordListItem, type TypedRecordWriteResponse, TypedRecordsScope, type TypedRuntypeRecord, UNIFIED_EVENTS_QUERY, type UpdateClientTokenRequest, type UpdateCollectionRequest, type UpdateCollectionResponse, type UpdateConversationRequest, type UpdateEvalCaseInput, type UpdateEvalSuiteInput, type UpdateFlowRequest, type UpdatePromptData, type UpdateProviderKeyRequest, type UpdateScheduleRequest, type UpdateSecretRequest, type UpdateToolRequest, type UpdatedFlow, type UpsertFlowConfig$1 as UpsertFlowConfig, type UpsertOptions, type UpsertRecordStepConfig$1 as UpsertRecordStepConfig, type UserProfile, UsersEndpoint, type ValidateExistingRecordsResponse, type VectorSearchStepConfig$1 as VectorSearchStepConfig, type VersionType, type WaitUntilStepConfig$1 as WaitUntilStepConfig, type WorkflowCompileDeps, type WorkflowCompletionCriteriaConfig, type WorkflowConfig, type WorkflowConfigFactory, type WorkflowContext, type WorkflowDefinition, type WorkflowHookEntry, type WorkflowHookKind, type WorkflowHookRef, type WorkflowHookSignatures, type WorkflowMilestoneConfig, type WorkflowPhase, type WorkflowPolicyConfig, type WorkflowRecoveryConfig, type WorkflowSlot, type WorkflowStallPolicy, applyGeneratedRuntimeToolProposalToDispatchRequest, attachRuntimeToolsToDispatchRequest, buildEmptySessionNudge, buildGeneratedRuntimeToolGateOutput, buildLedgerOffloadReference, buildPolicyGuidance, buildSendViewOffloadMarker, calledTool, compileWorkflowConfig, completed, computeAgentContentHash, computeEvalContentHash, computeFlowContentHash, computeFpoContentHash, computeProductContentHash, computeSkillContentHash, computeSurfaceContentHash, computeToolContentHash, contains, cost, createAgentEventTranslator, createClient, createExternalTool, createFlowEventTranslator, defaultWorkflow, defaultWorkflowConfig, defineAgent, defineEval, defineFlow, defineFpo, definePlaybook, defineProduct, defineSkill, defineSurface, defineTool, deployWorkflow, ensureDefaultWorkflowHooks, ensureEval, ensureFpo, evaluateGeneratedRuntimeToolProposal, extractDeclaredToolResultChars, gameWorkflow, getDefaultPlanPath, getLikelySupportingCandidatePaths, interpolateWorkflowTemplate, isCatalogClientToolRef, isDiscoveryToolName, isMarathonArtifactPath, isPreservationSensitiveTask, isUnifiedEventType, isWorkflowHookRef, jsonField, judge, judges, latency, length, listWorkflowHooks, matchesExpected, maxToolCalls, noError, normalizeAgentDefinition, normalizeCandidatePath, normalizeFpoDefinition, normalizeProductDefinition, normalizeSkillDefinition, normalizeSurfaceDefinition, normalizeToolDefinition, notCalledTool, notContains, parseFinalBuffer, parseLedgerArtifactRelativePath, parseOffloadedOutputId, parseSSEChunk, processStream, pullEval, pullFpo, ranStep, regex, registerWorkflowHook, resolveStallStopAfter, resolveWorkflowHook, runEvalSuite, sanitizeTaskSlug, shouldInjectEmptySessionNudge, shouldRequestModelEscalation, stepOrder, streamEvents, toolOrder, unregisterWorkflowHook, usedNoTools, validJson, withUnifiedEvents };