@standards/schema 1.0.0-alpha.403 → 1.0.0-alpha.405

package/dist/{all-o498zQ_Z.d.ts → all-BLtv6oP5.d.ts}

@@ -1,10 +1,10 @@
 
 import { Uuid } from "./utils-Brab7BhE.js";
-import { ListViewTabVisibility, ObjectDefinition, ResourceVisibility, ViewerAccess } from "./objects-Dc4zYk9o.js";
+import { ListViewTabVisibility, ObjectDefinition, ResourceVisibility, ViewerAccess } from "./objects-B8-0pVuJ.js";
 import { Attribute, AttributeType, Currency, DateAttribute, DateRangeValue, DocumentAttribute, FormulaAttribute, Location, MultiselectAttribute, Phone, RollupAttribute, SelectAttribute, StatusAttribute } from "./attributes-BOIIZZpP.js";
-import "./index-BsOZnVmp.js";
+import "./index-DkKyC4KB.js";
 import "./index-CFXgKvOC.js";
-import "./index-DMBl9Ahc.js";
+import "./index-W1VZ8fn0.js";
 import "./text-BkLwT1XH.js";
 import "./number-CfG_k0mZ.js";
 import "./checkbox-UJEOyMLV.js";

package/dist/{all-Y3tO-bfa.d.mts → all-Biqbc9qo.d.mts}

@@ -1,10 +1,10 @@
 
 import { Uuid } from "./utils-C8viP5ET.mjs";
-import { ListViewTabVisibility, ObjectDefinition, ResourceVisibility, ViewerAccess } from "./objects-Dmn8ZIXZ.mjs";
+import { ListViewTabVisibility, ObjectDefinition, ResourceVisibility, ViewerAccess } from "./objects-Dmb_qLPW.mjs";
 import { Attribute, AttributeType, Currency, DateAttribute, DateRangeValue, DocumentAttribute, FormulaAttribute, Location, MultiselectAttribute, Phone, RollupAttribute, SelectAttribute, StatusAttribute } from "./attributes-CAYOHQLt.mjs";
-import "./index-ColQV1OG.mjs";
+import "./index-DL2EgSvl.mjs";
 import "./index-CiKELB3w.mjs";
-import "./index-BC5mEVkb.mjs";
+import "./index-DIIGKwsP.mjs";
 import "./text-DkZ-_8Qs.mjs";
 import "./number-DYkxcIqq.mjs";
 import "./checkbox-RJEhZTDu.mjs";

package/dist/api/index.d.mts

@@ -1,10 +1,10 @@
 
 import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-RCZEE1uQ.mjs";
-import { AgentDefinitionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Dmn8ZIXZ.mjs";
+import { AgentDefinitionAudience, AgentSessionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Dmb_qLPW.mjs";
 import { Attribute } from "../attributes-CAYOHQLt.mjs";
-import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, NotificationArchiveAllResult, NotificationCounts, NotificationListParams, NotificationListResult, NotificationWithRecipient, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordMemoryView, RecordOperationResult, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-Bmet9E1C.mjs";
-import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-Y3tO-bfa.mjs";
-import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-ColQV1OG.mjs";
+import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, NotificationArchiveAllResult, NotificationCounts, NotificationListParams, NotificationListResult, NotificationWithRecipient, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordMemoryView, RecordOperationResult, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-CZwGuaP1.mjs";
+import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-Biqbc9qo.mjs";
+import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-DL2EgSvl.mjs";
 import * as z$2 from "zod";
 //#region src/api/path.d.ts
 /**
@@ -1579,7 +1579,7 @@ export declare const permissionsOperations: {
     readonly method: "GET";
     readonly path: "/permissions/me/system/:resource";
     readonly input: z$2.ZodObject<{
-      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
+      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
     }, z$2.core.$strip>;
     readonly output: OutputType<SystemPermissions>;
   }>;
@@ -1729,6 +1729,77 @@ export declare const pageAccessOperations: {
   }>;
 };
 //#endregion
+//#region src/api/agent-session-access.operations.d.ts
+/** `PUT /agents/sessions/:id/access/:actorId` — the role to grant. */
+export declare const grantAgentSessionAccessBody: z$2.ZodObject<{
+  role: z$2.ZodEnum<{
+    reader: "reader";
+  }>;
+}, z$2.core.$strip>;
+export type GrantAgentSessionAccessBody = z$2.infer<typeof grantAgentSessionAccessBody>;
+/**
+ * Who reads a root conversation beyond its creator (spec 2026-10-27 §4.5).
+ * The catalog gate is the `agents:read` floor every session action takes;
+ * every rule — only the creator shares, root conversations only, a grantee
+ * may leave, the anti-oracle on a conversation the caller cannot read —
+ * lives in the runtime's `ResourceAccessService`.
+ */
+export declare const agentSessionAccessOperations: {
+  /** The audience, to any reader of the conversation. */
+  list: Operation<{
+    readonly name: "agentSessionAccess.list";
+    readonly method: "GET";
+    readonly path: "/agents/sessions/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** `{ role: "reader" }`, the creator's share. */
+  grant: Operation<{
+    readonly name: "agentSessionAccess.grant";
+    readonly method: "PUT";
+    readonly path: "/agents/sessions/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+      role: z$2.ZodEnum<{
+        reader: "reader";
+      }>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** Remove a share: the creator removes anyone, a grantee leaves. */
+  revoke: Operation<{
+    readonly name: "agentSessionAccess.revoke";
+    readonly method: "DELETE";
+    readonly path: "/agents/sessions/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** Remove every share. */
+  clear: Operation<{
+    readonly name: "agentSessionAccess.clear";
+    readonly method: "DELETE";
+    readonly path: "/agents/sessions/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+};
+//#endregion
 //#region src/api/browser-profiles.operations.d.ts
 /**
  * `POST /browser-profiles` (spec §6). `visibility: "workspace"` without
@@ -5203,6 +5274,11 @@ export declare const createDefinitionBody: z$2.ZodObject<{
       armer: "armer";
       audience: "audience";
     }>>;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
   }, z$2.core.$strip>>;
   maxDepth: z$2.ZodOptional<z$2.ZodNumber>;
@@ -5342,6 +5418,11 @@ export declare const updateDefinitionBody: z$2.ZodObject<{
       armer: "armer";
       audience: "audience";
     }>>;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
   }, z$2.core.$strip>>>;
   maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
@@ -5526,6 +5607,11 @@ export declare const applySetupBody: z$2.ZodObject<{
     input: z$2.ZodOptional<z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>>;
     timezone: z$2.ZodOptional<z$2.ZodString>;
     cron: z$2.ZodString;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     runFor: z$2.ZodOptional<z$2.ZodEnum<{
       armer: "armer";
       audience: "audience";
@@ -6318,6 +6404,11 @@ export declare const agentDefinitionsOperations: {
         input: z$2.ZodOptional<z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>>;
         timezone: z$2.ZodOptional<z$2.ZodString>;
         cron: z$2.ZodString;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         runFor: z$2.ZodOptional<z$2.ZodEnum<{
           armer: "armer";
           audience: "audience";
@@ -6897,6 +6988,21 @@ export declare const agentDefinitionsOperations: {
     readonly output: OutputType<AgentToolCatalog>;
     readonly permission: readonly ["agents", "read"];
   }>;
+  /**
+   * The audience a routine runs for now: each person, why, and the connections
+   * their run lacks. `supervision`, or whoever may edit an invited-audience
+   * routine; a plain reader is refused.
+   */
+  audiencePreview: Operation<{
+    readonly name: "agentDefinitions.audiencePreview";
+    readonly method: "GET";
+    readonly path: "/agents/definitions/:id/audience/preview";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<RoutineAudiencePreview>;
+    readonly permission: readonly ["agents", "read"];
+  }>;
   get: Operation<{
     readonly name: "agentDefinitions.get";
     readonly method: "GET";
@@ -7011,6 +7117,11 @@ export declare const agentDefinitionsOperations: {
           armer: "armer";
           audience: "audience";
         }>>;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
       }, z$2.core.$strip>>;
       maxDepth: z$2.ZodOptional<z$2.ZodNumber>;
@@ -7162,6 +7273,11 @@ export declare const agentDefinitionsOperations: {
           armer: "armer";
           audience: "audience";
         }>>;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
       }, z$2.core.$strip>>>;
       maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
@@ -9932,6 +10048,13 @@ export declare const listSessionsQuery: z$2.ZodObject<{
   }>>;
   limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
   offset: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
+  provenance: z$2.ZodOptional<z$2.ZodEnum<{
+    shared: "shared";
+    team: "team";
+    mine: "mine";
+  }>>;
+  actorId: z$2.ZodOptional<z$2.ZodGUID>;
+  cursor: z$2.ZodOptional<z$2.ZodString>;
   includeArchived: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodString, z$2.ZodTransform<boolean, string>>>;
 }, z$2.core.$strict>;
 /** One aside exchange as the client holds it (spec §5): the bounds every aside route shares. */
@@ -10258,6 +10381,13 @@ export declare const agentSessionsOperations: {
       }>>;
       limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
       offset: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
+      provenance: z$2.ZodOptional<z$2.ZodEnum<{
+        shared: "shared";
+        team: "team";
+        mine: "mine";
+      }>>;
+      actorId: z$2.ZodOptional<z$2.ZodGUID>;
+      cursor: z$2.ZodOptional<z$2.ZodString>;
       includeArchived: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodString, z$2.ZodTransform<boolean, string>>>;
     }, z$2.core.$strict>;
     readonly output: OutputType<AgentSession[]>;

package/dist/api/index.d.ts

@@ -1,10 +1,10 @@
 
 import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-RCZEE1uQ.js";
-import { AgentDefinitionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Dc4zYk9o.js";
+import { AgentDefinitionAudience, AgentSessionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-B8-0pVuJ.js";
 import { Attribute } from "../attributes-BOIIZZpP.js";
-import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, NotificationArchiveAllResult, NotificationCounts, NotificationListParams, NotificationListResult, NotificationWithRecipient, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordMemoryView, RecordOperationResult, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-C4RQ65VU.js";
-import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-o498zQ_Z.js";
-import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-BsOZnVmp.js";
+import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, NotificationArchiveAllResult, NotificationCounts, NotificationListParams, NotificationListResult, NotificationWithRecipient, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordMemoryView, RecordOperationResult, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-DeV5_wYg.js";
+import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-BLtv6oP5.js";
+import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-DkKyC4KB.js";
 import * as z$2 from "zod";
 //#region src/api/path.d.ts
 /**
@@ -1579,7 +1579,7 @@ export declare const permissionsOperations: {
     readonly method: "GET";
     readonly path: "/permissions/me/system/:resource";
     readonly input: z$2.ZodObject<{
-      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
+      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
     }, z$2.core.$strip>;
     readonly output: OutputType<SystemPermissions>;
   }>;
@@ -1729,6 +1729,77 @@ export declare const pageAccessOperations: {
   }>;
 };
 //#endregion
+//#region src/api/agent-session-access.operations.d.ts
+/** `PUT /agents/sessions/:id/access/:actorId` — the role to grant. */
+export declare const grantAgentSessionAccessBody: z$2.ZodObject<{
+  role: z$2.ZodEnum<{
+    reader: "reader";
+  }>;
+}, z$2.core.$strip>;
+export type GrantAgentSessionAccessBody = z$2.infer<typeof grantAgentSessionAccessBody>;
+/**
+ * Who reads a root conversation beyond its creator (spec 2026-10-27 §4.5).
+ * The catalog gate is the `agents:read` floor every session action takes;
+ * every rule — only the creator shares, root conversations only, a grantee
+ * may leave, the anti-oracle on a conversation the caller cannot read —
+ * lives in the runtime's `ResourceAccessService`.
+ */
+export declare const agentSessionAccessOperations: {
+  /** The audience, to any reader of the conversation. */
+  list: Operation<{
+    readonly name: "agentSessionAccess.list";
+    readonly method: "GET";
+    readonly path: "/agents/sessions/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** `{ role: "reader" }`, the creator's share. */
+  grant: Operation<{
+    readonly name: "agentSessionAccess.grant";
+    readonly method: "PUT";
+    readonly path: "/agents/sessions/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+      role: z$2.ZodEnum<{
+        reader: "reader";
+      }>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** Remove a share: the creator removes anyone, a grantee leaves. */
+  revoke: Operation<{
+    readonly name: "agentSessionAccess.revoke";
+    readonly method: "DELETE";
+    readonly path: "/agents/sessions/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+  /** Remove every share. */
+  clear: Operation<{
+    readonly name: "agentSessionAccess.clear";
+    readonly method: "DELETE";
+    readonly path: "/agents/sessions/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<AgentSessionAudience>;
+    readonly permission: readonly ["agents", "read"];
+    readonly actor: "required";
+  }>;
+};
+//#endregion
 //#region src/api/browser-profiles.operations.d.ts
 /**
  * `POST /browser-profiles` (spec §6). `visibility: "workspace"` without
@@ -5203,6 +5274,11 @@ export declare const createDefinitionBody: z$2.ZodObject<{
       armer: "armer";
       audience: "audience";
     }>>;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
   }, z$2.core.$strip>>;
   maxDepth: z$2.ZodOptional<z$2.ZodNumber>;
@@ -5342,6 +5418,11 @@ export declare const updateDefinitionBody: z$2.ZodObject<{
       armer: "armer";
       audience: "audience";
     }>>;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
   }, z$2.core.$strip>>>;
   maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
@@ -5526,6 +5607,11 @@ export declare const applySetupBody: z$2.ZodObject<{
     input: z$2.ZodOptional<z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>>;
     timezone: z$2.ZodOptional<z$2.ZodString>;
     cron: z$2.ZodString;
+    audience: z$2.ZodOptional<z$2.ZodObject<{
+      workspace: z$2.ZodBoolean;
+      roleIds: z$2.ZodArray<z$2.ZodUUID>;
+      actorIds: z$2.ZodArray<z$2.ZodUUID>;
+    }, z$2.core.$strip>>;
     runFor: z$2.ZodOptional<z$2.ZodEnum<{
       armer: "armer";
       audience: "audience";
@@ -6318,6 +6404,11 @@ export declare const agentDefinitionsOperations: {
         input: z$2.ZodOptional<z$2.ZodRecord<z$2.ZodString, z$2.ZodUnknown>>;
         timezone: z$2.ZodOptional<z$2.ZodString>;
         cron: z$2.ZodString;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         runFor: z$2.ZodOptional<z$2.ZodEnum<{
           armer: "armer";
           audience: "audience";
@@ -6897,6 +6988,21 @@ export declare const agentDefinitionsOperations: {
     readonly output: OutputType<AgentToolCatalog>;
     readonly permission: readonly ["agents", "read"];
   }>;
+  /**
+   * The audience a routine runs for now: each person, why, and the connections
+   * their run lacks. `supervision`, or whoever may edit an invited-audience
+   * routine; a plain reader is refused.
+   */
+  audiencePreview: Operation<{
+    readonly name: "agentDefinitions.audiencePreview";
+    readonly method: "GET";
+    readonly path: "/agents/definitions/:id/audience/preview";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<RoutineAudiencePreview>;
+    readonly permission: readonly ["agents", "read"];
+  }>;
   get: Operation<{
     readonly name: "agentDefinitions.get";
     readonly method: "GET";
@@ -7011,6 +7117,11 @@ export declare const agentDefinitionsOperations: {
           armer: "armer";
           audience: "audience";
         }>>;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
       }, z$2.core.$strip>>;
       maxDepth: z$2.ZodOptional<z$2.ZodNumber>;
@@ -7162,6 +7273,11 @@ export declare const agentDefinitionsOperations: {
           armer: "armer";
           audience: "audience";
         }>>;
+        audience: z$2.ZodOptional<z$2.ZodObject<{
+          workspace: z$2.ZodBoolean;
+          roleIds: z$2.ZodArray<z$2.ZodUUID>;
+          actorIds: z$2.ZodArray<z$2.ZodUUID>;
+        }, z$2.core.$strip>>;
         continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
       }, z$2.core.$strip>>>;
       maxDepth: z$2.ZodOptional<z$2.ZodNullable<z$2.ZodNumber>>;
@@ -9932,6 +10048,13 @@ export declare const listSessionsQuery: z$2.ZodObject<{
   }>>;
   limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
   offset: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
+  provenance: z$2.ZodOptional<z$2.ZodEnum<{
+    shared: "shared";
+    team: "team";
+    mine: "mine";
+  }>>;
+  actorId: z$2.ZodOptional<z$2.ZodGUID>;
+  cursor: z$2.ZodOptional<z$2.ZodString>;
   includeArchived: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodString, z$2.ZodTransform<boolean, string>>>;
 }, z$2.core.$strict>;
 /** One aside exchange as the client holds it (spec §5): the bounds every aside route shares. */
@@ -10258,6 +10381,13 @@ export declare const agentSessionsOperations: {
       }>>;
       limit: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
       offset: z$2.ZodOptional<z$2.ZodCoercedNumber<unknown>>;
+      provenance: z$2.ZodOptional<z$2.ZodEnum<{
+        shared: "shared";
+        team: "team";
+        mine: "mine";
+      }>>;
+      actorId: z$2.ZodOptional<z$2.ZodGUID>;
+      cursor: z$2.ZodOptional<z$2.ZodString>;
       includeArchived: z$2.ZodOptional<z$2.ZodPipe<z$2.ZodString, z$2.ZodTransform<boolean, string>>>;
     }, z$2.core.$strict>;
     readonly output: OutputType<AgentSession[]>;