@standards/schema 1.0.0-alpha.403 → 1.0.0-alpha.405

package/dist/{index-Bmet9E1C.d.mts → index-CZwGuaP1.d.mts}

@@ -1,10 +1,10 @@
 
 import { SchemaError, SchemaErrorCode, ValidationError } from "./exceptions-RCZEE1uQ.mjs";
 import { TenantId, Uuid } from "./utils-C8viP5ET.mjs";
-import { DocumentLayout, ImageShape, ListViewTabVisibility, ObjectDefinition, ObjectImage, ObjectRecord, RecordAppearance, ResourceVisibility, Timestamps, ViewerAccess } from "./objects-Dmn8ZIXZ.mjs";
+import { DocumentLayout, ImageShape, ListViewTabVisibility, ObjectDefinition, ObjectImage, ObjectRecord, RecordAppearance, ResourceVisibility, Timestamps, ViewerAccess } from "./objects-Dmb_qLPW.mjs";
 import { Attribute, AttributeType, BilateralConfig, CheckboxAttribute, Currency, CurrencyAttribute, DateAttribute, DatePrecision, DateRangeValue, DocumentAttribute, FormulaAttribute, FormulaReturnType, Location, LocationAttribute, LocationGranularity, MultiRelationAttribute, MultiselectAttribute, NumberAttribute, Option, Phone, PhoneAttribute, PropertyAttribute, PropertySchema, RelationAttribute, RelationTarget, RichtextAttribute, RollupAttribute, RollupFunction, SelectAttribute, SingleRelationAttribute, StatusAttribute, TextAttribute, TimeFormat, UserAttribute, UserReferenceType } from "./attributes-CAYOHQLt.mjs";
-import { ActivityContentDefinition, BLOCK_PERIODS, BlockContext, BlockDefinition, BlockInput, BlockWidth, CollectionAction, CollectionContentDefinition, CollectionContentSource, ColumnReference, ContentConfiguration, ContentCreateMode, ContentField, ContentFieldGroup, ContentOpenMode, ContentViewContext, ContentViewDefinition, CustomContentDefinition, DocumentsContentDefinition, DynamicValue, Eager, EmailsContentDefinition, FilterOperator, FilterRule, FilterState, FilterValue, FormContentDefinition, FormDensity, FormsContentDefinition, GridPosition, GridViolation, HeightMode, InferAttributeValue, InferQualifiedProps, InputShape, LayoutTraits, ListableBlockInput, MeetingsContentDefinition, ObjectBuilderLike, ObjectViewContext, ObjectViewDefinition, PageContentDefinition, PageViewDefinition, QualifiedDocumentAttributeBuilder, QualifiedDocumentBrand, RecordMetadata, RecordQuery, RecordQueryDefinition, RelativeDateValue, RichtextContentDefinition, SortRule, ViewContentDefinition, WithCustomAttributes, WithCustomRecordAttributes, WithoutSystemFields } from "./all-Y3tO-bfa.mjs";
-import { UpdateObjectInput } from "./index-ColQV1OG.mjs";
+import { ActivityContentDefinition, BLOCK_PERIODS, BlockContext, BlockDefinition, BlockInput, BlockWidth, CollectionAction, CollectionContentDefinition, CollectionContentSource, ColumnReference, ContentConfiguration, ContentCreateMode, ContentField, ContentFieldGroup, ContentOpenMode, ContentViewContext, ContentViewDefinition, CustomContentDefinition, DocumentsContentDefinition, DynamicValue, Eager, EmailsContentDefinition, FilterOperator, FilterRule, FilterState, FilterValue, FormContentDefinition, FormDensity, FormsContentDefinition, GridPosition, GridViolation, HeightMode, InferAttributeValue, InferQualifiedProps, InputShape, LayoutTraits, ListableBlockInput, MeetingsContentDefinition, ObjectBuilderLike, ObjectViewContext, ObjectViewDefinition, PageContentDefinition, PageViewDefinition, QualifiedDocumentAttributeBuilder, QualifiedDocumentBrand, RecordMetadata, RecordQuery, RecordQueryDefinition, RelativeDateValue, RichtextContentDefinition, SortRule, ViewContentDefinition, WithCustomAttributes, WithCustomRecordAttributes, WithoutSystemFields } from "./all-Biqbc9qo.mjs";
+import { UpdateObjectInput } from "./index-DL2EgSvl.mjs";
 import * as z$2 from "zod";
 import z, { z as z$1 } from "zod";
 import { ColorId, CountryIso3, CurrencyCode, IconName, MimeType } from "@standards/constants";
@@ -327,6 +327,13 @@ export declare const PERMISSION_CATALOG: readonly [{
       readonly id: "use";
       readonly add: readonly ["create"];
     }];
+  }, {
+    readonly id: "supervision";
+    readonly resources: readonly ["supervision"];
+    readonly levels: readonly [{
+      readonly id: "use";
+      readonly add: readonly ["create"];
+    }];
   }];
 }, {
   readonly id: "files";
@@ -3901,6 +3908,14 @@ export type AgentSessionMode = "interactive" | "autonomous";
  */
 export declare const AGENT_SESSION_LIST_ORDERS: readonly ["createdAt", "lastActivity"];
 export type AgentSessionListOrder = (typeof AGENT_SESSION_LIST_ORDERS)[number];
+/**
+ * Whose conversations a session list reads (spec 2026-10-27 §4.4). `mine` is
+ * everyone's own history, the default and the access clause as ever. `shared`
+ * is the root conversations shared with the caller. `team` is every root
+ * conversation of the tenant, for a holder of `supervision` only (403 else).
+ */
+export declare const AGENT_SESSION_PROVENANCES: readonly ["mine", "shared", "team"];
+export type AgentSessionProvenance = (typeof AGENT_SESSION_PROVENANCES)[number];
 /** Whether a class of tool call is confirmed by a human or executed straight away. */
 export type ApprovalMode = "ask" | "auto";
 /**
@@ -4107,6 +4122,26 @@ export interface AgentTriggerDefinition {
   createdAt: Date;
   updatedAt: Date;
 }
+/** Who a routine in audience mode runs for (spec 2026-10-27 §4.2). */
+export interface RoutineAudience {
+  /** Every member of the workspace. */
+  workspace: boolean;
+  roleIds: string[];
+  actorIds: string[];
+}
+/** Why a person is in a routine audience; the most specific reason wins: the armer, then a named person, a role, the whole workspace. */
+export type RoutineAudienceSource = "workspace" | `role:${string}` | "direct" | "armer";
+/** One person a supervised audience resolves to, with why. */
+export interface RoutineAudienceMember {
+  actorId: string;
+  source: RoutineAudienceSource;
+}
+/** `GET /agents/definitions/:id/audience/preview`: the audience resolved now (spec 2026-10-27 §5). */
+export interface RoutineAudiencePreview {
+  people: Array<RoutineAudienceMember & {
+    missingConnections: string[];
+  }>;
+}
 export interface AgentSchedule {
   cron: string;
   timezone?: string;
@@ -4118,6 +4153,8 @@ export interface AgentSchedule {
    * routine. Writes that replace the schedule keep it when they omit it.
    */
   runFor?: "armer" | "audience";
+  /** Read only when `runFor === "audience"`: absent keeps the people the routine is shared with. */
+  audience?: RoutineAudience;
   /**
    * Whether an occurrence continues the conversation the last one opened
    * (#5719), under the guards of a threaded trigger fire (#4914): `true`
@@ -4283,6 +4320,12 @@ export interface AgentDefinition {
   scheduleNextRunAt?: Date;
   /** Read-only, computed for the reader by the query (spec 2026-10-08 §4.4). */
   viewerAccess?: ViewerAccess;
+  /**
+   * Read-only, computed for the reader by the query: one of their actors is a
+   * person the supervised audience resolves to, its armer counted (spec
+   * 2026-10-27 §4.2, the fan-out's own membership definition).
+   */
+  viewerInAudience?: boolean;
   /** Read-only: the number of manual grants on a private definition (0 on a workspace one). */
   sharedWithCount?: number;
   /** The harness that drives it; absent = the Standards engine (environments spec §1.4). */
@@ -4410,6 +4453,34 @@ export interface AgentSession {
   environmentId?: string;
   /** Server-managed resume state of the harness (its own session id and the like). */
   harnessState?: unknown;
+  /**
+   * Set only on a read that reached the conversation past its definition's
+   * visibility (supervision, spec 2026-10-27 §4.4) and on every row of a
+   * `shared` or `team` list: the definition's name and face, never its
+   * configuration. Absent when the reader may open the conversation itself
+   * (a `mine` list), or when the definition is gone.
+   */
+  definitionAppearance?: AgentSessionDefinitionAppearance;
+  /**
+   * Set when the reader reached another person's conversation through the
+   * read clause (a share of its root, or supervision; spec 2026-10-27 §4.4),
+   * on one session's read and on each such row of a `shared` or `team` list,
+   * whatever its definition. A supervised read is audited, so a client reads
+   * such a session once per open and never writes to it.
+   */
+  readThrough?: true;
+  /**
+   * Set only on the rows of a `lastActivity` list: this row's keyset position,
+   * opaque. The last row's, passed back as `cursor`, reads the next page.
+   */
+  listCursor?: string;
+}
+/** What a conversation's reader learns of a definition it cannot see. */
+export interface AgentSessionDefinitionAppearance {
+  name: string;
+  kind: AgentDefinitionKind;
+  label?: string;
+  avatar?: AgentAvatar;
 }
 /**
  * Lifecycle of a persisted tool part. The three `approval-*` values are the
@@ -4725,6 +4796,12 @@ export interface AgentSessionHistoryPage {
   nextCursor: string | null;
   hasMore: boolean;
   committedSeq: number;
+  /**
+   * The session's state as of this page. A reader of another person's
+   * conversation (spec 2026-10-27 §4.4) has no stream and reads the session
+   * row once per open: this is how its view learns a turn started or ended.
+   */
+  sessionState?: SessionState;
 }
 /** Canonical persisted-message order: creation time ASC, then id ASC. */
 export declare function compareAgentSessionMessages(left: Pick<AgentSessionMessage, "createdAt" | "id">, right: Pick<AgentSessionMessage, "createdAt" | "id">): number;
@@ -7725,12 +7802,12 @@ export interface EnvironmentList {
 /**
  * Type of resource that can be audited
  */
-export declare const AUDIT_RESOURCE_TYPES: readonly ["record", "object", "attribute", "view", "user", "role", "settings", "file", "agent", "bundle", "tenant_invitation", "api_key"];
+export declare const AUDIT_RESOURCE_TYPES: readonly ["record", "object", "attribute", "view", "user", "role", "settings", "file", "agent", "bundle", "tenant_invitation", "api_key", "agent_session"];
 export type AuditResourceType = (typeof AUDIT_RESOURCE_TYPES)[number];
 /**
  * Actions that can be audited
  */
-export declare const AUDIT_ACTIONS: readonly ["record.created", "record.updated", "record.deleted", "record.restored", "record.purged", "record.access_changed", "agent.access_changed", "object.created", "object.updated", "object.deleted", "attribute.created", "attribute.updated", "attribute.deleted", "view.created", "view.updated", "view.deleted", "bundle.synced", "bundle.removed", "bundle.added", "user.created", "user.invited", "user.updated", "user.deleted", "user.login", "user.logout", "tenant_invitation.created", "tenant_invitation.delivery_failed", "tenant_invitation.resent", "tenant_invitation.revoked", "tenant_invitation.accepted", "role.created", "role.updated", "role.deleted", "role.assigned", "role.revoked", "api_key.detached", "settings.updated", "file.uploaded", "file.updated", "file.deleted"];
+export declare const AUDIT_ACTIONS: readonly ["record.created", "record.updated", "record.deleted", "record.restored", "record.purged", "record.access_changed", "agent.access_changed", "agent_session.supervised_read", "object.created", "object.updated", "object.deleted", "attribute.created", "attribute.updated", "attribute.deleted", "view.created", "view.updated", "view.deleted", "bundle.synced", "bundle.removed", "bundle.added", "user.created", "user.invited", "user.updated", "user.deleted", "user.login", "user.logout", "tenant_invitation.created", "tenant_invitation.delivery_failed", "tenant_invitation.resent", "tenant_invitation.revoked", "tenant_invitation.accepted", "role.created", "role.updated", "role.deleted", "role.assigned", "role.revoked", "api_key.detached", "settings.updated", "file.uploaded", "file.updated", "file.deleted"];
 export type AuditAction = (typeof AUDIT_ACTIONS)[number];
 /**
  * Actor type - who performed the action
@@ -13920,6 +13997,27 @@ export type AgentSessionLink = {
   sessionId: string;
 };
 //#endregion
+//#region src/utils/agent-session-list-cursor.d.ts
+/**
+ * The keyset position of a session in a `lastActivity` list (spec 2026-10-27
+ * §4.4): its activity instant and its id, the list's two sort keys. The server
+ * issues it on every row of such a list (`AgentSession.listCursor`); a client
+ * passes the last row's back as `cursor` and never reads inside it.
+ *
+ * `at` keeps the store's own precision (Postgres stamps to the microsecond):
+ * a cursor rebuilt from a JS `Date` would round it to the millisecond and skip
+ * the rows written later in that millisecond.
+ */
+export interface AgentSessionListPosition {
+  /** ISO-8601 UTC instant, `Z`-suffixed, up to six fractional digits. */
+  at: string;
+  id: string;
+}
+/** ASCII only (an instant and a uuid), so `btoa` serves both Node and the browser. */
+export declare function encodeAgentSessionListCursor(position: AgentSessionListPosition): string;
+/** The position a cursor encodes, or `null` for anything the server never issued. */
+export declare function decodeAgentSessionListCursor(cursor: string): AgentSessionListPosition | null;
+//#endregion
 //#region src/validators/agent-message.schema.d.ts
 type AgentDataChunkOptions = {
   id?: string;
@@ -15005,6 +15103,11 @@ export declare const agentScheduleSchema: z$2.ZodObject<{
     armer: "armer";
     audience: "audience";
   }>>;
+  audience: z$2.ZodOptional<z$2.ZodObject<{
+    workspace: z$2.ZodBoolean;
+    roleIds: z$2.ZodArray<z$2.ZodUUID>;
+    actorIds: z$2.ZodArray<z$2.ZodUUID>;
+  }, z$2.core.$strip>>;
   continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
 }, z$2.core.$strip>;
 /** `event.thread_ts`: names joined by single dots, no empty segment (#4914). */

package/dist/{index-BC5mEVkb.d.mts → index-DIIGKwsP.d.mts}

@@ -1,5 +1,5 @@
 
-import { ObjectDefinition } from "./objects-Dmn8ZIXZ.mjs";
+import { ObjectDefinition } from "./objects-Dmb_qLPW.mjs";
 import { Attribute } from "./attributes-CAYOHQLt.mjs";
 import { ValidationMessages, ValidationResult } from "./index-CiKELB3w.mjs";
 import * as z$2 from "zod";

package/dist/{index-ColQV1OG.d.mts → index-DL2EgSvl.d.mts}

@@ -1,5 +1,5 @@
 
-import { ObjectImage, RecordAppearance } from "./objects-Dmn8ZIXZ.mjs";
+import { ObjectImage, RecordAppearance } from "./objects-Dmb_qLPW.mjs";
 import { Attribute, AttributeType } from "./attributes-CAYOHQLt.mjs";
 import * as z$2 from "zod";
 import { ColorId, IconName } from "@standards/constants";

package/dist/{index-C4RQ65VU.d.ts → index-DeV5_wYg.d.ts}

@@ -1,10 +1,10 @@
 
 import { SchemaError, SchemaErrorCode, ValidationError } from "./exceptions-RCZEE1uQ.js";
 import { TenantId, Uuid } from "./utils-Brab7BhE.js";
-import { DocumentLayout, ImageShape, ListViewTabVisibility, ObjectDefinition, ObjectImage, ObjectRecord, RecordAppearance, ResourceVisibility, Timestamps, ViewerAccess } from "./objects-Dc4zYk9o.js";
+import { DocumentLayout, ImageShape, ListViewTabVisibility, ObjectDefinition, ObjectImage, ObjectRecord, RecordAppearance, ResourceVisibility, Timestamps, ViewerAccess } from "./objects-B8-0pVuJ.js";
 import { Attribute, AttributeType, BilateralConfig, CheckboxAttribute, Currency, CurrencyAttribute, DateAttribute, DatePrecision, DateRangeValue, DocumentAttribute, FormulaAttribute, FormulaReturnType, Location, LocationAttribute, LocationGranularity, MultiRelationAttribute, MultiselectAttribute, NumberAttribute, Option, Phone, PhoneAttribute, PropertyAttribute, PropertySchema, RelationAttribute, RelationTarget, RichtextAttribute, RollupAttribute, RollupFunction, SelectAttribute, SingleRelationAttribute, StatusAttribute, TextAttribute, TimeFormat, UserAttribute, UserReferenceType } from "./attributes-BOIIZZpP.js";
-import { ActivityContentDefinition, BLOCK_PERIODS, BlockContext, BlockDefinition, BlockInput, BlockWidth, CollectionAction, CollectionContentDefinition, CollectionContentSource, ColumnReference, ContentConfiguration, ContentCreateMode, ContentField, ContentFieldGroup, ContentOpenMode, ContentViewContext, ContentViewDefinition, CustomContentDefinition, DocumentsContentDefinition, DynamicValue, Eager, EmailsContentDefinition, FilterOperator, FilterRule, FilterState, FilterValue, FormContentDefinition, FormDensity, FormsContentDefinition, GridPosition, GridViolation, HeightMode, InferAttributeValue, InferQualifiedProps, InputShape, LayoutTraits, ListableBlockInput, MeetingsContentDefinition, ObjectBuilderLike, ObjectViewContext, ObjectViewDefinition, PageContentDefinition, PageViewDefinition, QualifiedDocumentAttributeBuilder, QualifiedDocumentBrand, RecordMetadata, RecordQuery, RecordQueryDefinition, RelativeDateValue, RichtextContentDefinition, SortRule, ViewContentDefinition, WithCustomAttributes, WithCustomRecordAttributes, WithoutSystemFields } from "./all-o498zQ_Z.js";
-import { UpdateObjectInput } from "./index-BsOZnVmp.js";
+import { ActivityContentDefinition, BLOCK_PERIODS, BlockContext, BlockDefinition, BlockInput, BlockWidth, CollectionAction, CollectionContentDefinition, CollectionContentSource, ColumnReference, ContentConfiguration, ContentCreateMode, ContentField, ContentFieldGroup, ContentOpenMode, ContentViewContext, ContentViewDefinition, CustomContentDefinition, DocumentsContentDefinition, DynamicValue, Eager, EmailsContentDefinition, FilterOperator, FilterRule, FilterState, FilterValue, FormContentDefinition, FormDensity, FormsContentDefinition, GridPosition, GridViolation, HeightMode, InferAttributeValue, InferQualifiedProps, InputShape, LayoutTraits, ListableBlockInput, MeetingsContentDefinition, ObjectBuilderLike, ObjectViewContext, ObjectViewDefinition, PageContentDefinition, PageViewDefinition, QualifiedDocumentAttributeBuilder, QualifiedDocumentBrand, RecordMetadata, RecordQuery, RecordQueryDefinition, RelativeDateValue, RichtextContentDefinition, SortRule, ViewContentDefinition, WithCustomAttributes, WithCustomRecordAttributes, WithoutSystemFields } from "./all-BLtv6oP5.js";
+import { UpdateObjectInput } from "./index-DkKyC4KB.js";
 import * as z$2 from "zod";
 import z, { z as z$1 } from "zod";
 import { ColorId, CountryIso3, CurrencyCode, IconName, MimeType } from "@standards/constants";
@@ -327,6 +327,13 @@ export declare const PERMISSION_CATALOG: readonly [{
       readonly id: "use";
       readonly add: readonly ["create"];
     }];
+  }, {
+    readonly id: "supervision";
+    readonly resources: readonly ["supervision"];
+    readonly levels: readonly [{
+      readonly id: "use";
+      readonly add: readonly ["create"];
+    }];
   }];
 }, {
   readonly id: "files";
@@ -3901,6 +3908,14 @@ export type AgentSessionMode = "interactive" | "autonomous";
  */
 export declare const AGENT_SESSION_LIST_ORDERS: readonly ["createdAt", "lastActivity"];
 export type AgentSessionListOrder = (typeof AGENT_SESSION_LIST_ORDERS)[number];
+/**
+ * Whose conversations a session list reads (spec 2026-10-27 §4.4). `mine` is
+ * everyone's own history, the default and the access clause as ever. `shared`
+ * is the root conversations shared with the caller. `team` is every root
+ * conversation of the tenant, for a holder of `supervision` only (403 else).
+ */
+export declare const AGENT_SESSION_PROVENANCES: readonly ["mine", "shared", "team"];
+export type AgentSessionProvenance = (typeof AGENT_SESSION_PROVENANCES)[number];
 /** Whether a class of tool call is confirmed by a human or executed straight away. */
 export type ApprovalMode = "ask" | "auto";
 /**
@@ -4107,6 +4122,26 @@ export interface AgentTriggerDefinition {
   createdAt: Date;
   updatedAt: Date;
 }
+/** Who a routine in audience mode runs for (spec 2026-10-27 §4.2). */
+export interface RoutineAudience {
+  /** Every member of the workspace. */
+  workspace: boolean;
+  roleIds: string[];
+  actorIds: string[];
+}
+/** Why a person is in a routine audience; the most specific reason wins: the armer, then a named person, a role, the whole workspace. */
+export type RoutineAudienceSource = "workspace" | `role:${string}` | "direct" | "armer";
+/** One person a supervised audience resolves to, with why. */
+export interface RoutineAudienceMember {
+  actorId: string;
+  source: RoutineAudienceSource;
+}
+/** `GET /agents/definitions/:id/audience/preview`: the audience resolved now (spec 2026-10-27 §5). */
+export interface RoutineAudiencePreview {
+  people: Array<RoutineAudienceMember & {
+    missingConnections: string[];
+  }>;
+}
 export interface AgentSchedule {
   cron: string;
   timezone?: string;
@@ -4118,6 +4153,8 @@ export interface AgentSchedule {
    * routine. Writes that replace the schedule keep it when they omit it.
    */
   runFor?: "armer" | "audience";
+  /** Read only when `runFor === "audience"`: absent keeps the people the routine is shared with. */
+  audience?: RoutineAudience;
   /**
    * Whether an occurrence continues the conversation the last one opened
    * (#5719), under the guards of a threaded trigger fire (#4914): `true`
@@ -4283,6 +4320,12 @@ export interface AgentDefinition {
   scheduleNextRunAt?: Date;
   /** Read-only, computed for the reader by the query (spec 2026-10-08 §4.4). */
   viewerAccess?: ViewerAccess;
+  /**
+   * Read-only, computed for the reader by the query: one of their actors is a
+   * person the supervised audience resolves to, its armer counted (spec
+   * 2026-10-27 §4.2, the fan-out's own membership definition).
+   */
+  viewerInAudience?: boolean;
   /** Read-only: the number of manual grants on a private definition (0 on a workspace one). */
   sharedWithCount?: number;
   /** The harness that drives it; absent = the Standards engine (environments spec §1.4). */
@@ -4410,6 +4453,34 @@ export interface AgentSession {
   environmentId?: string;
   /** Server-managed resume state of the harness (its own session id and the like). */
   harnessState?: unknown;
+  /**
+   * Set only on a read that reached the conversation past its definition's
+   * visibility (supervision, spec 2026-10-27 §4.4) and on every row of a
+   * `shared` or `team` list: the definition's name and face, never its
+   * configuration. Absent when the reader may open the conversation itself
+   * (a `mine` list), or when the definition is gone.
+   */
+  definitionAppearance?: AgentSessionDefinitionAppearance;
+  /**
+   * Set when the reader reached another person's conversation through the
+   * read clause (a share of its root, or supervision; spec 2026-10-27 §4.4),
+   * on one session's read and on each such row of a `shared` or `team` list,
+   * whatever its definition. A supervised read is audited, so a client reads
+   * such a session once per open and never writes to it.
+   */
+  readThrough?: true;
+  /**
+   * Set only on the rows of a `lastActivity` list: this row's keyset position,
+   * opaque. The last row's, passed back as `cursor`, reads the next page.
+   */
+  listCursor?: string;
+}
+/** What a conversation's reader learns of a definition it cannot see. */
+export interface AgentSessionDefinitionAppearance {
+  name: string;
+  kind: AgentDefinitionKind;
+  label?: string;
+  avatar?: AgentAvatar;
 }
 /**
  * Lifecycle of a persisted tool part. The three `approval-*` values are the
@@ -4725,6 +4796,12 @@ export interface AgentSessionHistoryPage {
   nextCursor: string | null;
   hasMore: boolean;
   committedSeq: number;
+  /**
+   * The session's state as of this page. A reader of another person's
+   * conversation (spec 2026-10-27 §4.4) has no stream and reads the session
+   * row once per open: this is how its view learns a turn started or ended.
+   */
+  sessionState?: SessionState;
 }
 /** Canonical persisted-message order: creation time ASC, then id ASC. */
 export declare function compareAgentSessionMessages(left: Pick<AgentSessionMessage, "createdAt" | "id">, right: Pick<AgentSessionMessage, "createdAt" | "id">): number;
@@ -7725,12 +7802,12 @@ export interface EnvironmentList {
 /**
  * Type of resource that can be audited
  */
-export declare const AUDIT_RESOURCE_TYPES: readonly ["record", "object", "attribute", "view", "user", "role", "settings", "file", "agent", "bundle", "tenant_invitation", "api_key"];
+export declare const AUDIT_RESOURCE_TYPES: readonly ["record", "object", "attribute", "view", "user", "role", "settings", "file", "agent", "bundle", "tenant_invitation", "api_key", "agent_session"];
 export type AuditResourceType = (typeof AUDIT_RESOURCE_TYPES)[number];
 /**
  * Actions that can be audited
  */
-export declare const AUDIT_ACTIONS: readonly ["record.created", "record.updated", "record.deleted", "record.restored", "record.purged", "record.access_changed", "agent.access_changed", "object.created", "object.updated", "object.deleted", "attribute.created", "attribute.updated", "attribute.deleted", "view.created", "view.updated", "view.deleted", "bundle.synced", "bundle.removed", "bundle.added", "user.created", "user.invited", "user.updated", "user.deleted", "user.login", "user.logout", "tenant_invitation.created", "tenant_invitation.delivery_failed", "tenant_invitation.resent", "tenant_invitation.revoked", "tenant_invitation.accepted", "role.created", "role.updated", "role.deleted", "role.assigned", "role.revoked", "api_key.detached", "settings.updated", "file.uploaded", "file.updated", "file.deleted"];
+export declare const AUDIT_ACTIONS: readonly ["record.created", "record.updated", "record.deleted", "record.restored", "record.purged", "record.access_changed", "agent.access_changed", "agent_session.supervised_read", "object.created", "object.updated", "object.deleted", "attribute.created", "attribute.updated", "attribute.deleted", "view.created", "view.updated", "view.deleted", "bundle.synced", "bundle.removed", "bundle.added", "user.created", "user.invited", "user.updated", "user.deleted", "user.login", "user.logout", "tenant_invitation.created", "tenant_invitation.delivery_failed", "tenant_invitation.resent", "tenant_invitation.revoked", "tenant_invitation.accepted", "role.created", "role.updated", "role.deleted", "role.assigned", "role.revoked", "api_key.detached", "settings.updated", "file.uploaded", "file.updated", "file.deleted"];
 export type AuditAction = (typeof AUDIT_ACTIONS)[number];
 /**
  * Actor type - who performed the action
@@ -13920,6 +13997,27 @@ export type AgentSessionLink = {
   sessionId: string;
 };
 //#endregion
+//#region src/utils/agent-session-list-cursor.d.ts
+/**
+ * The keyset position of a session in a `lastActivity` list (spec 2026-10-27
+ * §4.4): its activity instant and its id, the list's two sort keys. The server
+ * issues it on every row of such a list (`AgentSession.listCursor`); a client
+ * passes the last row's back as `cursor` and never reads inside it.
+ *
+ * `at` keeps the store's own precision (Postgres stamps to the microsecond):
+ * a cursor rebuilt from a JS `Date` would round it to the millisecond and skip
+ * the rows written later in that millisecond.
+ */
+export interface AgentSessionListPosition {
+  /** ISO-8601 UTC instant, `Z`-suffixed, up to six fractional digits. */
+  at: string;
+  id: string;
+}
+/** ASCII only (an instant and a uuid), so `btoa` serves both Node and the browser. */
+export declare function encodeAgentSessionListCursor(position: AgentSessionListPosition): string;
+/** The position a cursor encodes, or `null` for anything the server never issued. */
+export declare function decodeAgentSessionListCursor(cursor: string): AgentSessionListPosition | null;
+//#endregion
 //#region src/validators/agent-message.schema.d.ts
 type AgentDataChunkOptions = {
   id?: string;
@@ -15005,6 +15103,11 @@ export declare const agentScheduleSchema: z$2.ZodObject<{
     armer: "armer";
     audience: "audience";
   }>>;
+  audience: z$2.ZodOptional<z$2.ZodObject<{
+    workspace: z$2.ZodBoolean;
+    roleIds: z$2.ZodArray<z$2.ZodUUID>;
+    actorIds: z$2.ZodArray<z$2.ZodUUID>;
+  }, z$2.core.$strip>>;
   continueConversation: z$2.ZodOptional<z$2.ZodBoolean>;
 }, z$2.core.$strip>;
 /** `event.thread_ts`: names joined by single dots, no empty segment (#4914). */

package/dist/{index-BsOZnVmp.d.ts → index-DkKyC4KB.d.ts}

@@ -1,5 +1,5 @@
 
-import { ObjectImage, RecordAppearance } from "./objects-Dc4zYk9o.js";
+import { ObjectImage, RecordAppearance } from "./objects-B8-0pVuJ.js";
 import { Attribute, AttributeType } from "./attributes-BOIIZZpP.js";
 import * as z$2 from "zod";
 import { ColorId, IconName } from "@standards/constants";

package/dist/{index-DMBl9Ahc.d.ts → index-W1VZ8fn0.d.ts}

@@ -1,5 +1,5 @@
 
-import { ObjectDefinition } from "./objects-Dc4zYk9o.js";
+import { ObjectDefinition } from "./objects-B8-0pVuJ.js";
 import { Attribute } from "./attributes-BOIIZZpP.js";
 import { ValidationMessages, ValidationResult } from "./index-CFXgKvOC.js";
 import * as z$2 from "zod";