@standards/schema 1.0.0-alpha.408 → 1.0.0-alpha.410

package/dist/api/index.d.mts

@@ -1,10 +1,10 @@
 
-import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-BlKiQcvh.mjs";
-import { AgentDefinitionAudience, AgentSessionAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Cvc21DHf.mjs";
-import { Attribute } from "../attributes-CB6EJyu2.mjs";
-import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionWithRecipient, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-DfIVNu-r.mjs";
-import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-1spF7ByM.mjs";
-import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-CIS58KNs.mjs";
+import { SchemaErrorCode, ValidationError, ValidationErrorDetail } from "../exceptions-CmMd5DGH.mjs";
+import { AgentDefinitionAudience, AgentSessionAudience, DeviceAudience, ObjectDefinition, ObjectRecord, PageAudience, RecordAudience } from "../objects-Ddi_zEYp.mjs";
+import { Attribute } from "../attributes-BgPCTw3y.mjs";
+import { AIAvailableModel, AIGenerationResult, AIGenerationType, AccessCapabilities, AccessLevel, Actor, ActorStatus, ActorType, AgentAsideExchange, AgentConversationOverview, AgentDefinition, AgentDefinitionActivity, AgentDefinitionDailyActivity, AgentMemoryView, AgentMessageAttachment, AgentRun, AgentSession, AgentSessionHistoryPage, AgentSessionLink, AgentSessionMessage, AgentSessionMode, AgentTodoPlanView, AgentToolCatalog, AgentTriggerDefinition, AggregateGroupByInput, ApiKey, ApiKeyWithSecret, ArchitectProjection, ArtifactQuote, ArtifactRevisionView, AuditListOptions, AuditLogEntry, AuthorizedGlobalSearchResult, AuthorizedSearchPage, AvailableBundleSummary, BinaryResponse, BrowserProfileView, BundleAddPlan, BundleAddResult, ClassifyEmailResult, CloudBrowserLiveView, CollectionResponse, CollectionScreen, ConnectionView, ConnectorProvidersResult, ConnectorTriggerMatch, CreateAgentTriggerResult, CreatePermissionInput, CreateUserProfile, Decision, DecisionArchiveAllResult, DecisionAttachment, DecisionCounts, DecisionListParams, DecisionListResult, DecisionWithRecipient, DeviceDesktopStatus, DeviceShell, DictationAdmission, DictationCapabilities, DictationUsageSummary, Document, DocumentFile, DocumentRecordOwnerPage, DownloadedFile, DraftAppendCommand, DraftCommandGuard, DraftPublishCommand, EffectivePermissions, EmailCategory, EmailCategoryUsage, EmailSenderRule, EmailVerdict, EnvVarEntry, Environment, EnvironmentDetail, EnvironmentHarnessId, EnvironmentList, File, FileUrlsResponse, FilterGenerationInput, FormDefinition, FormRow, FormStatus, FormSubmission, FormulaGenerationInput, GeocodingAutocompleteParams, GeocodingSuggestion, GithubTriggerSender, GlobalSearchResultItem, HarnessModelList, HttpMethod, ImageModelCatalog, InstalledBundleSummary, LastPublication, LastPublishError, LoginSecretEntry, LogoSearchCandidate, MEETINGS_MAX_ONLY_CONNECTIONS, MailDraft, MailDraftAttachment, MailSignature, MailboxAccount, MailboxCursor, MailboxEmail, MailboxListResponse, MailboxLocation, MailboxQuery, MailboxReadState, MailboxThreadDetail, McpCatalogEntry, McpOAuthAttemptStarted, McpOAuthAttemptView, McpOAuthCompletionMode, McpServerView, Member, MentionReference, ModelDefinition, MoveImpact, MutationReceipt, MyPreferences, NativeToolGroup, NewsBody, NewsIndex, ObjectPermissions, Operation, OperationDefinition, OperationInput, OperationObjectPermission, OperationOutput, OperationParsedInput, OperationPermission, OperationResult, OperationStatus, OperationThrottle, OperationUpload, OutputType, PageData, PageRead, PageSummary, PathParams, Permission, PreferenceEntry, ProposalRevision, PublishBlocker, QuotaState, RecipientIdentity, RecipientSuggestion, RecordAggregates, RecordDocuments, RecordDriveChild, RecordDriveChildrenPage, RecordDriveSearchResult, RecordGraphNodeRef, RecordGraphRequest, RecordGraphResponse, RecordOperationResult, RecordScreen, RegexGenerationInput, RelationScope, ResolvedRecentActivity, Role, RoutineAudiencePreview, SchemaGroupList, SchemaState, SecretEntry, SessionApprovalMode, SessionImageUsage, SlackTriggerSender, SortGenerationInput, StartConnectorAuthResult, SubmitOutcome, SyncBundleInput, SyncBundleResult, SystemPermissions, TenantInvitation, TenantSettingsResponse, TriageResult, TriggerEventType, UploadedPart, UsageReport, UserProfile, UserStatus, ViewOperation, WalletState, meetingsOperations, meetingsQuery, meetingsQueryFields, operation, operationGroup, recordMeetingsBody, type } from "../index-DeUkwS45.mjs";
+import { CollectionContentSource, FilterState, RecordQueryDefinition, SortRule, ViewRead } from "../all-B802p9b-.mjs";
+import { AddAttributeInput, CreateCustomObjectInput, RelationOption, RelationOptionsResponse, UpdateObjectInput } from "../index-CpWy2-oS.mjs";
 import * as z$2 from "zod";
 //#region src/api/path.d.ts
 /**
@@ -842,6 +842,26 @@ export declare const decisionsOperations: {
     readonly output: OutputType<DecisionWithRecipient>;
     readonly status: 200;
   }>;
+  /**
+   * « Transférer » (#6451): the caller hands their own open row of a
+   * `question` to `to`, an active person, who gets a pending row of the same
+   * decision; the caller's row closes `dismissed`, its reason recorded in
+   * `payload.transfers`. Returns the caller's closed row. Another's row: 404;
+   * no longer open: `STATE_GATE`; a kind or type that cannot be handed over,
+   * a target its type refuses, a target already asked, or an attachment the
+   * caller may not share: `ValidationError`.
+   */
+  transfer: Operation<{
+    readonly name: "decisions.transfer";
+    readonly method: "POST";
+    readonly path: "/decisions/:recipientId/transfer";
+    readonly input: z$2.ZodObject<{
+      recipientId: z$2.ZodGUID;
+      to: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DecisionWithRecipient>;
+    readonly status: 200;
+  }>;
   /** « Plus tard » (§ 6): an open decision leaves « À trancher » until `until`. */
   snooze: Operation<{
     readonly name: "decisions.snooze";
@@ -1826,7 +1846,7 @@ export declare const permissionsOperations: {
     readonly method: "GET";
     readonly path: "/permissions/me/system/:resource";
     readonly input: z$2.ZodObject<{
-      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "settings" | "audit" | "billing">>;
+      resource: z$2.ZodType<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", z$2.core.$ZodTypeInternals<"documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing", "documents" | "forms" | "architect" | "pages" | "agents" | "environments" | "browser-profiles" | "private-secrets" | "routine-audiences" | "supervision" | "files" | "people" | "connectors" | "api-keys" | "env-vars" | "devices" | "settings" | "audit" | "billing">>;
     }, z$2.core.$strip>;
     readonly output: OutputType<SystemPermissions>;
   }>;
@@ -4107,14 +4127,20 @@ export declare const formsOperations: {
 //#region src/api/relations.operations.d.ts
 /** `POST /relations/resolve` — the ids of one relation attribute to label. */
 export declare const resolveRelationsBody: z$2.ZodObject<{
-  attributeId: z$2.ZodString;
+  attributeId: z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodEnum<{
+    "hierarchy:parentId": "hierarchy:parentId";
+    "hierarchy:childIds": "hierarchy:childIds";
+  }>]>;
   ids: z$2.ZodDefault<z$2.ZodArray<z$2.ZodString>>;
 }, z$2.core.$strip>;
 export type ResolveRelationsBody = z$2.infer<typeof resolveRelationsBody>;
 /** `POST /relations/resolve-batch` — several attributes' ids in one call. */
 export declare const resolveRelationsBatchBody: z$2.ZodObject<{
   requests: z$2.ZodArray<z$2.ZodObject<{
-    attributeId: z$2.ZodString;
+    attributeId: z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodEnum<{
+      "hierarchy:parentId": "hierarchy:parentId";
+      "hierarchy:childIds": "hierarchy:childIds";
+    }>]>;
     ids: z$2.ZodArray<z$2.ZodString>;
   }, z$2.core.$strip>>;
 }, z$2.core.$strip>;
@@ -4164,7 +4190,10 @@ export declare const relationsOperations: {
     readonly method: "POST";
     readonly path: "/relations/resolve";
     readonly input: z$2.ZodObject<{
-      attributeId: z$2.ZodString;
+      attributeId: z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodEnum<{
+        "hierarchy:parentId": "hierarchy:parentId";
+        "hierarchy:childIds": "hierarchy:childIds";
+      }>]>;
       ids: z$2.ZodDefault<z$2.ZodArray<z$2.ZodString>>;
     }, z$2.core.$strip>;
     readonly output: OutputType<RelationOption[]>;
@@ -4176,7 +4205,10 @@ export declare const relationsOperations: {
     readonly path: "/relations/resolve-batch";
     readonly input: z$2.ZodObject<{
       requests: z$2.ZodArray<z$2.ZodObject<{
-        attributeId: z$2.ZodString;
+        attributeId: z$2.ZodUnion<readonly [z$2.ZodString, z$2.ZodEnum<{
+          "hierarchy:parentId": "hierarchy:parentId";
+          "hierarchy:childIds": "hierarchy:childIds";
+        }>]>;
         ids: z$2.ZodArray<z$2.ZodString>;
       }, z$2.core.$strip>>;
     }, z$2.core.$strip>;
@@ -4263,6 +4295,107 @@ export declare const searchOperations: {
   }>;
 };
 //#endregion
+//#region src/api/skills.operations.d.ts
+/**
+ * One file of an exported skill folder, at its path relative to the folder:
+ * UTF-8 text as `content`, any other bytes as a signed `url`.
+ */
+export type ExportedSkillFile = {
+  path: string;
+} & ({
+  content: string;
+} | {
+  url: string;
+});
+/** A skill as an Agent Skills folder: `SKILL.md` first, then every file of its drive. */
+export interface ExportedSkillFolder {
+  name: string;
+  files: ExportedSkillFile[];
+}
+export interface ExportSkillsResult {
+  folders: ExportedSkillFolder[];
+}
+/** `POST /skills/export`: the named skills, or every skill the caller can open. */
+export declare const exportSkillsBody: z$2.ZodObject<{
+  names: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
+}, z$2.core.$strip>;
+export type ExportSkillsBody = z$2.infer<typeof exportSkillsBody>;
+/**
+ * `POST /skills/import`: every folder is checked before anything is written,
+ * and one invalid folder refuses the whole import. `onConflict: "replace"`
+ * makes the skill a name reads equal to its folder; `"fail"` refuses a name
+ * already held.
+ */
+export declare const importSkillsBody: z$2.ZodObject<{
+  folders: z$2.ZodArray<z$2.ZodObject<{
+    name: z$2.ZodString;
+    files: z$2.ZodArray<z$2.ZodObject<{
+      path: z$2.ZodString;
+      content: z$2.ZodOptional<z$2.ZodString>;
+      fileId: z$2.ZodOptional<z$2.ZodString>;
+    }, z$2.core.$strip>>;
+  }, z$2.core.$strip>>;
+  onConflict: z$2.ZodEnum<{
+    replace: "replace";
+    fail: "fail";
+  }>;
+}, z$2.core.$strip>;
+export type ImportSkillsBody = z$2.infer<typeof importSkillsBody>;
+export interface ImportSkillsResult {
+  /** Names of the skills created, in the order they were written (parents first). */
+  created: string[];
+  /** Names of the skills whose record was rewritten from its folder. */
+  replaced: string[];
+  /** Each folder's warnings, and the other skills sharing a replaced name. */
+  warnings: string[];
+}
+/**
+ * Skills as Agent Skills folders (spec 2026-11-02 § 3). Gated on the `skill`
+ * object: export reads it, import creates (a replaced skill is also judged
+ * `update` by the record write itself).
+ */
+export declare const skillsOperations: {
+  readonly export: Operation<{
+    readonly name: "skills.export";
+    readonly method: "POST";
+    readonly path: "/skills/export";
+    readonly input: z$2.ZodObject<{
+      names: z$2.ZodOptional<z$2.ZodArray<z$2.ZodString>>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<ExportSkillsResult>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly object: "skill";
+      readonly action: "read";
+    };
+  }>;
+  readonly import: Operation<{
+    readonly name: "skills.import";
+    readonly method: "POST";
+    readonly path: "/skills/import";
+    readonly input: z$2.ZodObject<{
+      folders: z$2.ZodArray<z$2.ZodObject<{
+        name: z$2.ZodString;
+        files: z$2.ZodArray<z$2.ZodObject<{
+          path: z$2.ZodString;
+          content: z$2.ZodOptional<z$2.ZodString>;
+          fileId: z$2.ZodOptional<z$2.ZodString>;
+        }, z$2.core.$strip>>;
+      }, z$2.core.$strip>>;
+      onConflict: z$2.ZodEnum<{
+        replace: "replace";
+        fail: "fail";
+      }>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<ImportSkillsResult>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly object: "skill";
+      readonly action: "create";
+    };
+  }>;
+};
+//#endregion
 //#region src/api/recent-activity.operations.d.ts
 /** `POST /recent-activity/resolve` — the ledger to resolve. */
 export declare const resolveRecentActivityBody: z$2.ZodObject<{
@@ -4362,6 +4495,7 @@ export declare const recordOperationsOperations: {
             base: import("zod").ZodUnknown;
             props: import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>;
           }, import("zod/v4/core").$strict>>;
+          parentId: import("zod").ZodOptional<import("zod").ZodUUID>;
         }, import("zod/v4/core").$strict>>;
       }, import("zod/v4/core").$strict>, import("zod").ZodObject<{
         kind: import("zod").ZodLiteral<"record.delete">;
@@ -11734,6 +11868,12 @@ export interface CreateRecordOptions {
    * `unknown`: narrowed through `parseResourceVisibility`.
    */
   visibility?: unknown;
+  /**
+   * The parent record, of the same hierarchical object. The child takes its
+   * parent's path and its root's visibility and owner. Accepted on create
+   * only; `unknown`: narrowed to a UUID by the record requests.
+   */
+  parentId?: unknown;
 }
 /**
  * `POST /records/:objectName` — `data` is an object (not null, not an array),
@@ -11799,6 +11939,14 @@ export declare const BulkDeleteRecordsDto: z$2.ZodObject<{
   ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
 }, z$2.core.$strip>;
 export type BulkDeleteRecordsBody = z$2.infer<typeof BulkDeleteRecordsDto>;
+/**
+ * `POST /records/:objectName/deletion-count`: what deleting these records
+ * would take, counted by the reads the delete runs. The record requests
+ * refuse an id that is not a UUID.
+ */
+export declare const CountRecordDeletionDto: z$2.ZodObject<{
+  ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
+}, z$2.core.$strip>;
 /**
  * `PUT /records/:objectName/:recordId/appearance`: the icon facet only. The
  * image goes through `PUT …/image` as an upload — a file id is never accepted
@@ -11819,6 +11967,31 @@ export declare const SetRecordVisibilityDto: z$2.ZodObject<{
   visibility: z$2.ZodOptional<z$2.ZodUnknown>;
 }, z$2.core.$strip>;
 export type SetRecordVisibilityBody = z$2.infer<typeof SetRecordVisibilityDto>;
+/**
+ * `POST /records/:objectName/:recordId/move-impact`: who would gain and lose
+ * access if the record moved under `parentId` (`null`: to the top level).
+ * The record requests refuse a `parentId` that is not a UUID.
+ */
+export declare const MoveRecordImpactDto: z$2.ZodObject<{
+  parentId: z$2.ZodNullable<z$2.ZodString>;
+}, z$2.core.$strip>;
+/**
+ * `POST /records/:objectName/:recordId/move`. `expected` is the impact the
+ * client showed: when the audience changed since, the move is refused with
+ * `RECORD_MOVE_IMPACT_CHANGED` carrying the new one.
+ */
+export declare const MoveRecordDto: z$2.ZodObject<{
+  parentId: z$2.ZodNullable<z$2.ZodString>;
+  expected: z$2.ZodOptional<z$2.ZodReadonly<z$2.ZodObject<{
+    added: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    removed: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    roleChanged: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+    workspaceBefore: z$2.ZodBoolean;
+    workspaceAfter: z$2.ZodBoolean;
+    subtreeSize: z$2.ZodNumber;
+  }, z$2.core.$strip>>>;
+}, z$2.core.$strip>;
+export type MoveRecordBody = z$2.infer<typeof MoveRecordDto>;
 /**
  * `GET /records/:objectName` — the page as query strings. Lenient, as it
  * always was: a `limit` that is not a positive integer reads as 20 (above 1000
@@ -11892,6 +12065,15 @@ export interface RecordsBulkDeleteResult {
     code: SchemaErrorCode;
   }[];
 }
+/**
+ * What deleting records would take (hierarchical records, spec §7): the
+ * incoming links it would break, and the descendants beyond the selection
+ * that would go to the trash with it. The confirmation names `descendants`.
+ */
+export interface RecordDeletionCount {
+  incomingReferences: number;
+  descendants: number;
+}
 /** What attaching a file to a record answers. */
 export interface AttachedRecordDocument {
   document: Document;
@@ -12106,6 +12288,22 @@ export declare const recordsOperations: {
       readonly action: "delete";
     };
   }>;
+  /** What deleting the records would take, before the confirmation is shown. */
+  deletionCount: Operation<{
+    readonly name: "records.deletionCount";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/deletion-count";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      ids: z$2.ZodArray<z$2.ZodType<string, string, z$2.core.$ZodTypeInternals<string, string>>>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<RecordDeletionCount>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "delete";
+    };
+  }>;
   /**
    * Create several records (set-based, import semantics): an invalid or
    * DB-rejected item lands in `errors` with its index while its siblings are
@@ -12158,6 +12356,55 @@ export declare const recordsOperations: {
       readonly action: "update";
     };
   }>;
+  /**
+   * Who would gain and lose access if the record moved (hierarchical
+   * records): the client shows it before confirming the move.
+   */
+  moveImpact: Operation<{
+    readonly name: "records.moveImpact";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/:recordId/move-impact";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      parentId: z$2.ZodNullable<z$2.ZodString>;
+      recordId: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<MoveImpact>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "update";
+    };
+  }>;
+  /**
+   * Move the record and its descendants under `parentId`, or to the top level
+   * with `null`; the subtree takes its new root's access. Needs `own` on the
+   * record's current root and `write` on the new parent.
+   */
+  move: Operation<{
+    readonly name: "records.move";
+    readonly method: "POST";
+    readonly path: "/records/:objectName/:recordId/move";
+    readonly input: z$2.ZodObject<{
+      objectName: z$2.ZodString;
+      parentId: z$2.ZodNullable<z$2.ZodString>;
+      expected: z$2.ZodOptional<z$2.ZodReadonly<z$2.ZodObject<{
+        added: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        removed: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        roleChanged: z$2.ZodReadonly<z$2.ZodArray<z$2.ZodString>>;
+        workspaceBefore: z$2.ZodBoolean;
+        workspaceAfter: z$2.ZodBoolean;
+        subtreeSize: z$2.ZodNumber;
+      }, z$2.core.$strip>>>;
+      recordId: z$2.ZodString;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<ObjectRecord<Record<string, unknown>>>;
+    readonly status: 200;
+    readonly objectPermission: {
+      readonly param: "objectName";
+      readonly action: "update";
+    };
+  }>;
   /**
    * Set the record's icon; its image, if any, is removed. Answers the record
    * row as written (reference attributes not hydrated).
@@ -12523,15 +12770,67 @@ export declare const recordAccessOperations: {
   }>;
 };
 //#endregion
+//#region src/api/device-access.operations.d.ts
+/** `PUT /devices/:id/access/:actorId` — the role to grant. */
+export declare const grantDeviceAccessBody: z$2.ZodObject<{
+  role: z$2.ZodEnum<{
+    runner: "runner";
+  }>;
+}, z$2.core.$strip>;
+export type GrantDeviceAccessBody = z$2.infer<typeof grantDeviceAccessBody>;
+/**
+ * Who may run commands on a device beyond its owner (spec 2026-11-02 §4.2).
+ * Operations only: every rule (who may read, grant or revoke, the anti-oracle
+ * on a device the caller cannot see) lives in the runtime's
+ * `ResourceAccessService`, and the gate is the owner or a `devices: manage`
+ * holder, judged there rather than by a catalog floor.
+ */
+export declare const deviceAccessOperations: {
+  /** The audience. */
+  list: Operation<{
+    readonly name: "deviceAccess.list";
+    readonly method: "GET";
+    readonly path: "/devices/:id/access";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+  /** `{ role }`: lend the device to an actor. */
+  grant: Operation<{
+    readonly name: "deviceAccess.grant";
+    readonly method: "PUT";
+    readonly path: "/devices/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+      role: z$2.ZodEnum<{
+        runner: "runner";
+      }>;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+  revoke: Operation<{
+    readonly name: "deviceAccess.revoke";
+    readonly method: "DELETE";
+    readonly path: "/devices/:id/access/:actorId";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+      actorId: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<DeviceAudience>;
+  }>;
+};
+//#endregion
 //#region src/api/devices.operations.d.ts
-export type RemoteDevicePlatform = "darwin" | "linux";
+export declare const REMOTE_DEVICE_PLATFORMS: readonly ["darwin", "linux", "win32"];
+export type RemoteDevicePlatform = (typeof REMOTE_DEVICE_PLATFORMS)[number];
 export type RemoteDeviceStatus = "online" | "offline" | "revoked";
-/** A computer paired to its owner; agents run shell commands on it once authorized. */
+/** A computer enrolled for its owner; agents run shell commands on it once authorized. */
 export interface RemoteDeviceView {
   id: string;
   tenantId: string;
   ownerActorId: string;
-  installationId: string;
   name: string;
   platform: RemoteDevicePlatform;
   arch: string;
@@ -12539,31 +12838,69 @@ export interface RemoteDeviceView {
   lastSeenAt: string | null;
   revokedAt: string | null;
   agentExecutionAuthorizedAt: string | null;
+  /** Enrolled through a fleet token: managers other than the owner may administer it. */
+  managed: boolean;
+  /** Last `agent-desktop status` the worker announced; null when it announced none. */
+  desktopStatus: DeviceDesktopStatus | null;
+  /** The shell sessions open in; null until the worker announces one. */
+  shell: DeviceShell | null;
   createdAt: string;
   updatedAt: string;
   status: RemoteDeviceStatus;
 }
-/** What pairing answers: the device and the token it authenticates its channel with, shown once. */
-export interface PairedRemoteDevice {
-  device: RemoteDeviceView;
-  token: string;
-}
-/** A machine pairs its platform, architecture and hostname. */
-export declare const pairDeviceBody: z$2.ZodObject<{
+/** `POST /devices/enroll`: the token names the tenant; a known installation also proves itself. */
+export declare const enrollDeviceBody: z$2.ZodObject<{
+  token: z$2.ZodString;
   installationId: z$2.ZodUUID;
-  name: z$2.ZodString;
+  hostname: z$2.ZodString;
   platform: z$2.ZodEnum<{
     darwin: "darwin";
     linux: "linux";
+    win32: "win32";
   }>;
   arch: z$2.ZodString;
-  hostname: z$2.ZodString;
+  currentCredential: z$2.ZodOptional<z$2.ZodString>;
 }, z$2.core.$strict>;
+/** A fleet token: many machines, one name prefix, optional runners and execution switch. */
+export declare const createEnrollmentTokenBody: z$2.ZodObject<{
+  namePrefix: z$2.ZodOptional<z$2.ZodString>;
+  runnerActorIds: z$2.ZodDefault<z$2.ZodArray<z$2.ZodGUID>>;
+  agentExecutionAuthorized: z$2.ZodDefault<z$2.ZodBoolean>;
+  maxUses: z$2.ZodDefault<z$2.ZodNumber>;
+  expiresInSeconds: z$2.ZodDefault<z$2.ZodNumber>;
+}, z$2.core.$strict>;
+export type EnrollDeviceBody = z$2.infer<typeof enrollDeviceBody>;
+export type CreateEnrollmentTokenBody = z$2.infer<typeof createEnrollmentTokenBody>;
+/** What enrolling answers: the credential the machine authenticates its channel with, shown once. */
+export interface EnrolledDevice {
+  deviceId: string;
+  deviceToken: string;
+  name: string;
+}
+export type EnrollmentTokenKind = "fleet" | "personal";
+/** An enrollment token as listed; the secret is never returned again. */
+export interface EnrollmentTokenView {
+  id: string;
+  kind: EnrollmentTokenKind;
+  namePrefix: string | null;
+  runnerActorIds: string[];
+  agentExecutionAuthorized: boolean;
+  maxUses: number;
+  uses: number;
+  createdBy: string;
+  expiresAt: string;
+  revokedAt: string | null;
+  createdAt: string;
+}
+/** A freshly created token: its secret (tenant-scoped enrollment token), shown once. */
+export interface CreatedEnrollmentToken {
+  token: string;
+  enrollmentToken: EnrollmentTokenView;
+}
 export declare const updateDeviceBody: z$2.ZodObject<{
   name: z$2.ZodOptional<z$2.ZodString>;
   agentExecutionAuthorized: z$2.ZodOptional<z$2.ZodBoolean>;
 }, z$2.core.$strict>;
-export type PairDeviceBody = z$2.infer<typeof pairDeviceBody>;
 export type UpdateDeviceBody = z$2.infer<typeof updateDeviceBody>;
 export type UpdateRemoteDeviceInput = z$2.input<typeof updateDeviceBody>;
 /**
@@ -12580,22 +12917,31 @@ export declare const devicesOperations: {
     readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
     readonly output: OutputType<RemoteDeviceView[]>;
   }>;
-  /** Pair this machine to the caller. */
-  pair: Operation<{
-    readonly name: "devices.pair";
+  /**
+   * A machine enrolls with a token. Unauthenticated: the token names the
+   * tenant. Ten attempts a minute per address: a token is a secret to guess.
+   */
+  enroll: Operation<{
+    readonly name: "devices.enroll";
     readonly method: "POST";
-    readonly path: "/devices/pair";
+    readonly path: "/devices/enroll";
     readonly input: z$2.ZodObject<{
+      token: z$2.ZodString;
       installationId: z$2.ZodUUID;
-      name: z$2.ZodString;
+      hostname: z$2.ZodString;
       platform: z$2.ZodEnum<{
         darwin: "darwin";
         linux: "linux";
+        win32: "win32";
       }>;
       arch: z$2.ZodString;
-      hostname: z$2.ZodString;
+      currentCredential: z$2.ZodOptional<z$2.ZodString>;
     }, z$2.core.$strict>;
-    readonly output: OutputType<PairedRemoteDevice>;
+    readonly output: OutputType<EnrolledDevice>;
+    readonly throttle: {
+      readonly limit: 10;
+      readonly ttlMs: 60000;
+    };
   }>;
   update: Operation<{
     readonly name: "devices.update";
@@ -12620,6 +12966,59 @@ export declare const devicesOperations: {
     }>;
   }>;
 };
+/**
+ * Enrollment tokens: fleet tokens for `devices: manage` holders, from the
+ * platform UI only; a personal one for the caller's own machine, from a
+ * session or the CLI's personal API key.
+ */
+export declare const deviceEnrollmentTokensOperations: {
+  /** A fleet token, for a manager enrolling many machines. */
+  create: Operation<{
+    readonly name: "deviceEnrollmentTokens.create";
+    readonly method: "POST";
+    readonly path: "/devices/enrollment-tokens";
+    readonly input: z$2.ZodObject<{
+      namePrefix: z$2.ZodOptional<z$2.ZodString>;
+      runnerActorIds: z$2.ZodDefault<z$2.ZodArray<z$2.ZodGUID>>;
+      agentExecutionAuthorized: z$2.ZodDefault<z$2.ZodBoolean>;
+      maxUses: z$2.ZodDefault<z$2.ZodNumber>;
+      expiresInSeconds: z$2.ZodDefault<z$2.ZodNumber>;
+    }, z$2.core.$strict>;
+    readonly output: OutputType<CreatedEnrollmentToken>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  list: Operation<{
+    readonly name: "deviceEnrollmentTokens.list";
+    readonly method: "GET";
+    readonly path: "/devices/enrollment-tokens";
+    readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
+    readonly output: OutputType<EnrollmentTokenView[]>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  revoke: Operation<{
+    readonly name: "deviceEnrollmentTokens.revoke";
+    readonly method: "DELETE";
+    readonly path: "/devices/enrollment-tokens/:id";
+    readonly input: z$2.ZodObject<{
+      id: z$2.ZodGUID;
+    }, z$2.core.$strip>;
+    readonly output: OutputType<{
+      success: true;
+    }>;
+    readonly permission: readonly ["devices", "manage"];
+    readonly credential: "session";
+  }>;
+  /** A single-use, 10 minute token for the caller's own machine. */
+  createPersonal: Operation<{
+    readonly name: "deviceEnrollmentTokens.createPersonal";
+    readonly method: "POST";
+    readonly path: "/devices/enrollment-tokens/personal";
+    readonly input: z$2.ZodObject<{}, z$2.core.$strip>;
+    readonly output: OutputType<CreatedEnrollmentToken>;
+  }>;
+};
 //#endregion
 //#region src/api/connected-apps.operations.d.ts
 /** One OAuth connection of the caller, on one of their workspaces. */