@stndrds/schema 1.0.0-alpha.338 → 1.0.0-alpha.343

package/dist/index.d.mts

@@ -1,15 +1,15 @@
 
-import { $ as BilateralConfig, $t as indexBy, A as StorageError, An as ComputedDependency, At as StatusGroup, B as isObjectReferencedError, Bn as ComputedFormulaLiteralNode, Bt as OptionPropertyAttribute, C as RepositoryOperation, Cn as assertAcyclicComputedDependencies, Ct as RichTextAttribute, D as SchemaErrorCode, Dn as ComputedFunctionName, Dt as SelectAttribute, E as SchemaError, En as COMPUTED_FUNCTION_NAMES, Et as RollupFunction, F as SystemEntityImmutableError, Fn as ComputedValueType, Ft as inferInverseCardinality, G as BuiltInTransform, Gt as resolvePropertyDefinitions, H as isRecordReferencedError, Hn as ComputedFormulaPathNode, Ht as PropertySchema, I as ValidationError, In as ComputedFormulaAstNode, It as isAttributeSortable, J as ATTRIBUTE_TYPES, Jt as Uuid, K as MigrationDefinition, Kt as TenantId, L as ValidationErrorDetail, Ln as ComputedFormulaBinaryNode, Lt as isBilateralRelation, M as SyncCascadeError, Mn as ComputedOptionsSource, Mt as TimeFormat, N as SyncConflictError, Nn as ComputedPlan, Nt as UserAttribute, O as SchemaPlanNotFoundError, On as ComputedFunctionSignature, Ot as SingleRelationAttribute, P as SyncError, Pn as ComputedReturnType, Pt as UserReferenceType, Q as BaseAttribute, Qt as generateId, R as isAttributeInUseError, Rn as ComputedFormulaBinaryOperator, Rt as isUniversalRelation, S as RepositoryError, Sn as ComputedFormulaCompileError, St as RelationTarget, T as RoleNotFoundError, Tn as COMPUTED_FUNCTIONS, Tt as RollupAttribute, U as isSchemaError, Un as parseComputedFormula, Ut as PropertyType, V as isProtectedResourceError, Vn as ComputedFormulaParseError, Vt as PropertyAttribute, W as isValidationError, Wt as hasOptions, X as AttributeGroup, Xt as asUserId, Y as Attribute, Yt as asTenantId, Z as AttributeType, Zt as deepEqual, _ as ProtectedResourceError, _n as CompileComputedFormulaInput, _t as Option, a as ChangeTypeNotSupportedError, an as COMPUTED_FUNCTION_METADATA, at as DateRangeValue, b as RecordReference, bn as ComputedCompileSchema, bt as RELATION_TARGET_ANY, c as DuplicateError, cn as ComputedFormulaResult, ct as FormulaAttribute, d as MigrationTimeoutError, dn as evaluateComputedFormulaWithResult, dt as LocationAttribute, en as NonJsonValueError, et as CheckboxAttribute, f as NotFoundError, fn as formatComputedResult, ft as LocationGranularity, g as OrphanSystemAttributeError, gn as rollupToFormulaExpression, gt as NumberUnit, h as ObjectReferencedError, hn as inferRollupReturnType, ht as NumberAttribute, i as AttributeUsage, in as serializeStableJson, it as DateFormat, j as StorageOperation, jn as ComputedFieldKind, jt as TextAttribute, k as SearchBackendError, kn as isComputedFunctionName, kt as StatusAttribute, l as ForbiddenError, ln as evaluateComputedAst, lt as FormulaReturnType, m as ObjectNotFoundError, mn as compileRollupAttribute, mt as MultiselectAttribute, n as AttributeInUseError, nn as sameStableValue, nt as CurrencyAttribute, o as ConcurrentModificationError, on as ComputedFunctionCategory, ot as DateValue, p as NotImplementedError, pn as isPlainRecord, pt as MultiRelationAttribute, q as SchemaOperation, qt as UserId, r as AttributeNotFoundError, rn as serializeCanonicalJson, rt as DateAttribute, s as DestructiveSyncNotAllowedError, sn as ComputedFunctionMetadata, st as DocumentAttribute, t as AccessDeniedError, tn as canonicalStringify, tt as Currency, u as MemoryNotFoundError, un as evaluateComputedFormula, ut as Location, v as ProtectedRoleError, vn as ComputedCompileAttribute, vt as Phone, w as ReservedObjectNameError, wn as compileComputedFormula, wt as RichtextAttribute, x as RecordReferencedError, xn as ComputedDependencyGraphNode, xt as RelationAttribute, y as RecordNotFoundError, yn as ComputedCompileObject, yt as PhoneAttribute, z as isNotFoundError, zn as ComputedFormulaCallNode, zt as relationTargetsOf } from "./exceptions-CHlIXRKP.mjs";
-import { $ as QueryState, A as FormContentDefinition, B as DayMonthValue, C as ContentOpenMode, D as CustomContentDefinition, E as ContentViewDefinition, F as MeetingsContentDefinition, G as FilterOperator, H as EdgeQuantifier, I as RichtextContentDefinition, J as FilterValue, K as FilterRule, L as ViewContentDefinition, M as FormsContentDefinition, N as KanbanCollectionContentDefinition, O as DocumentsContentDefinition, P as ListViewLayout, Q as PhoneFilterValue, R as ViewRead, S as ContentFieldGroup, T as ContentViewContext, U as ExtendedFilterRule, V as DynamicValue, W as FilterCombinator, X as NoValueOperator, Y as NO_VALUE_OPERATORS, Z as OPERATORS_BY_TYPE, _ as CollectionContentDefinition, a as contentViewDefinitionSchemaFor, at as isNoValueOperator, b as ContentCreateMode, c as draftContentViewDefinitionSchemaFor, d as sortsSchema, et as RelativeDateValue, f as colorIdSchema, g as CollectionAction, h as ActivityContentDefinition, i as contentViewDefinitionSchema, it as getRollupFilterOperators, j as FormDensity, k as EmailsContentDefinition, l as filterStateSchema, m as SCHEMA_LIMITS, n as collectionContentSourceSchema, nt as SortRule, o as displayAttributesSchema, p as iconNameSchema, q as FilterState, r as columnsSchema, rt as filterOperatorsByTypeForGeneration, s as draftContentViewDefinitionSchema, t as AsideRule, tt as SortDirection, u as publishedViewContentDefinitionSchema, v as CollectionContentSource, w as ContentPlacement, x as ContentField, y as ColumnReference, z as CurrencyFilterValue } from "./all-C1AF2SKY.mjs";
-import { A as FolderPreset, C as ResourceVisibility, D as parseResourceVisibility, E as Timestamps, M as PresetNode, O as DocumentLayout, S as ReservedObjectName, T as SystemFieldName, _ as ObjectRecord, a as validateDraft, b as RESOURCE_VISIBILITIES, c as validateObjectOrThrow, f as createFormAttributeValidator, g as ObjectDefinition, h as ObjectAttribute, j as MAX_PRESET_DEPTH, k as DocumentLayoutVariant, m as ListViewTabVisibility, o as validateDraftOrThrow, p as LIST_VIEW_TAB_VISIBILITIES, r as rejectUnknownAttributesOrThrow, s as validateObject, v as RESERVED_ATTRIBUTE_NAMES, w as SYSTEM_FIELD_NAMES, x as ReservedAttributeName, y as RESERVED_OBJECT_NAMES } from "./index-DX1EILel.mjs";
-import { S as UpdateObjectInput, _ as statusOptionWriteSchema, b as RelationOption, c as parseAttributeConfigForCreate, d as propertyAttributeWireSchema, f as propertySchemaSchema, g as statusGroupSchema, h as selectOptionWriteSchema, l as parseAttributeConfigForUpdate, m as refuseForeignKeys, n as WIRE_OMITTED_CONFIG_KEYS, o as multiselectOptionWriteSchema, p as propertySchemaWireSchema, r as attributeConfigSchemas, s as parseAttributeConfig, t as SIMPLE_PROPERTY_TYPES, u as propertyAttributeSchema, v as AddAttributeInput, x as RelationOptionsResponse, y as CreateCustomObjectInput } from "./index-B-LzvZZe.mjs";
-import { n as DEFAULT_VALIDATION_MESSAGES, r as ValidationMessages, t as formatZodErrors } from "./index-BilM1Dnp.mjs";
-import { t as createTextValidator } from "./text-_dBcTPGm.mjs";
-import { t as createNumberValidator } from "./number-D6UXWPnL.mjs";
-import { t as createCheckboxValidator } from "./checkbox-C1oY-AXS.mjs";
-import { t as createDateValidator } from "./date-pUpneFTR.mjs";
-import { ColorId, CountryIso3, CurrencyCode, IconName, MimeType } from "@stndrds/constants";
+import { $ as BilateralConfig, $t as indexBy, A as StorageError, An as ComputedDependency, At as StatusGroup, B as isObjectReferencedError, Bn as ComputedFormulaLiteralNode, Bt as OptionPropertyAttribute, C as RepositoryOperation, Cn as assertAcyclicComputedDependencies, Ct as RichTextAttribute, D as SchemaErrorCode, Dn as ComputedFunctionName, Dt as SelectAttribute, E as SchemaError, En as COMPUTED_FUNCTION_NAMES, Et as RollupFunction, F as SystemEntityImmutableError, Fn as ComputedValueType, Ft as inferInverseCardinality, G as BuiltInTransform, Gt as resolvePropertyDefinitions, H as isRecordReferencedError, Hn as ComputedFormulaPathNode, Ht as PropertySchema, I as ValidationError, In as ComputedFormulaAstNode, It as isAttributeSortable, J as ATTRIBUTE_TYPES, Jt as Uuid, K as MigrationDefinition, Kt as TenantId, L as ValidationErrorDetail, Ln as ComputedFormulaBinaryNode, Lt as isBilateralRelation, M as SyncCascadeError, Mn as ComputedOptionsSource, Mt as TimeFormat, N as SyncConflictError, Nn as ComputedPlan, Nt as UserAttribute, O as SchemaPlanNotFoundError, On as ComputedFunctionSignature, Ot as SingleRelationAttribute, P as SyncError, Pn as ComputedReturnType, Pt as UserReferenceType, Q as BaseAttribute, Qt as generateId, R as isAttributeInUseError, Rn as ComputedFormulaBinaryOperator, Rt as isUniversalRelation, S as RepositoryError, Sn as ComputedFormulaCompileError, St as RelationTarget, T as RoleNotFoundError, Tn as COMPUTED_FUNCTIONS, Tt as RollupAttribute, U as isSchemaError, Un as parseComputedFormula, Ut as PropertyType, V as isProtectedResourceError, Vn as ComputedFormulaParseError, Vt as PropertyAttribute, W as isValidationError, Wt as hasOptions, X as AttributeGroup, Xt as asUserId, Y as Attribute, Yt as asTenantId, Z as AttributeType, Zt as deepEqual, _ as ProtectedResourceError, _n as CompileComputedFormulaInput, _t as Option, a as ChangeTypeNotSupportedError, an as COMPUTED_FUNCTION_METADATA, at as DateRangeValue, b as RecordReference, bn as ComputedCompileSchema, bt as RELATION_TARGET_ANY, c as DuplicateError, cn as ComputedFormulaResult, ct as FormulaAttribute, d as MigrationTimeoutError, dn as evaluateComputedFormulaWithResult, dt as LocationAttribute, en as NonJsonValueError, et as CheckboxAttribute, f as NotFoundError, fn as formatComputedResult, ft as LocationGranularity, g as OrphanSystemAttributeError, gn as rollupToFormulaExpression, gt as NumberUnit, h as ObjectReferencedError, hn as inferRollupReturnType, ht as NumberAttribute, i as AttributeUsage, in as serializeStableJson, it as DateFormat, j as StorageOperation, jn as ComputedFieldKind, jt as TextAttribute, k as SearchBackendError, kn as isComputedFunctionName, kt as StatusAttribute, l as ForbiddenError, ln as evaluateComputedAst, lt as FormulaReturnType, m as ObjectNotFoundError, mn as compileRollupAttribute, mt as MultiselectAttribute, n as AttributeInUseError, nn as sameStableValue, nt as CurrencyAttribute, o as ConcurrentModificationError, on as ComputedFunctionCategory, ot as DateValue, p as NotImplementedError, pn as isPlainRecord, pt as MultiRelationAttribute, q as SchemaOperation, qt as UserId, r as AttributeNotFoundError, rn as serializeCanonicalJson, rt as DateAttribute, s as DestructiveSyncNotAllowedError, sn as ComputedFunctionMetadata, st as DocumentAttribute, t as AccessDeniedError, tn as canonicalStringify, tt as Currency, u as MemoryNotFoundError, un as evaluateComputedFormula, ut as Location, v as ProtectedRoleError, vn as ComputedCompileAttribute, vt as Phone, w as ReservedObjectNameError, wn as compileComputedFormula, wt as RichtextAttribute, x as RecordReferencedError, xn as ComputedDependencyGraphNode, xt as RelationAttribute, y as RecordNotFoundError, yn as ComputedCompileObject, yt as PhoneAttribute, z as isNotFoundError, zn as ComputedFormulaCallNode, zt as relationTargetsOf } from "./exceptions-BCfkN2ct.mjs";
+import { $ as QueryState, A as FormContentDefinition, B as DayMonthValue, C as ContentOpenMode, D as CustomContentDefinition, E as ContentViewDefinition, F as MeetingsContentDefinition, G as FilterOperator, H as EdgeQuantifier, I as RichtextContentDefinition, J as FilterValue, K as FilterRule, L as ViewContentDefinition, M as FormsContentDefinition, N as KanbanCollectionContentDefinition, O as DocumentsContentDefinition, P as ListViewLayout, Q as PhoneFilterValue, R as ViewRead, S as ContentFieldGroup, T as ContentViewContext, U as ExtendedFilterRule, V as DynamicValue, W as FilterCombinator, X as NoValueOperator, Y as NO_VALUE_OPERATORS, Z as OPERATORS_BY_TYPE, _ as CollectionContentDefinition, a as contentViewDefinitionSchemaFor, at as isNoValueOperator, b as ContentCreateMode, c as draftContentViewDefinitionSchemaFor, d as sortsSchema, et as RelativeDateValue, f as colorIdSchema, g as CollectionAction, h as ActivityContentDefinition, i as contentViewDefinitionSchema, it as getRollupFilterOperators, j as FormDensity, k as EmailsContentDefinition, l as filterStateSchema, m as SCHEMA_LIMITS, n as collectionContentSourceSchema, nt as SortRule, o as displayAttributesSchema, p as iconNameSchema, q as FilterState, r as columnsSchema, rt as filterOperatorsByTypeForGeneration, s as draftContentViewDefinitionSchema, t as AsideRule, tt as SortDirection, u as publishedViewContentDefinitionSchema, v as CollectionContentSource, w as ContentPlacement, x as ContentField, y as ColumnReference, z as CurrencyFilterValue } from "./all-BrEKv8xR.mjs";
+import { A as FolderPreset, C as ResourceVisibility, D as parseResourceVisibility, E as Timestamps, M as PresetNode, O as DocumentLayout, S as ReservedObjectName, T as SystemFieldName, _ as ObjectRecord, a as validateDraft, b as RESOURCE_VISIBILITIES, c as validateObjectOrThrow, f as createFormAttributeValidator, g as ObjectDefinition, h as ObjectAttribute, j as MAX_PRESET_DEPTH, k as DocumentLayoutVariant, m as ListViewTabVisibility, o as validateDraftOrThrow, p as LIST_VIEW_TAB_VISIBILITIES, r as rejectUnknownAttributesOrThrow, s as validateObject, v as RESERVED_ATTRIBUTE_NAMES, w as SYSTEM_FIELD_NAMES, x as ReservedAttributeName, y as RESERVED_OBJECT_NAMES } from "./index-Ds0DxPHk.mjs";
+import { S as UpdateObjectInput, _ as statusOptionWriteSchema, b as RelationOption, c as parseAttributeConfigForCreate, d as propertyAttributeWireSchema, f as propertySchemaSchema, g as statusGroupSchema, h as selectOptionWriteSchema, l as parseAttributeConfigForUpdate, m as refuseForeignKeys, n as WIRE_OMITTED_CONFIG_KEYS, o as multiselectOptionWriteSchema, p as propertySchemaWireSchema, r as attributeConfigSchemas, s as parseAttributeConfig, t as SIMPLE_PROPERTY_TYPES, u as propertyAttributeSchema, v as AddAttributeInput, x as RelationOptionsResponse, y as CreateCustomObjectInput } from "./index-_gdqRN1W.mjs";
+import { n as DEFAULT_VALIDATION_MESSAGES, r as ValidationMessages, t as formatZodErrors } from "./index-DzEWbzP-.mjs";
+import { t as createTextValidator } from "./text-CjhjkBXJ.mjs";
+import { t as createNumberValidator } from "./number-U7UMAXKt.mjs";
+import { t as createCheckboxValidator } from "./checkbox-DSzn5epa.mjs";
+import { t as createDateValidator } from "./date-CteDw_88.mjs";
 import z, { z as z$1 } from "zod";
+import { ColorId, CountryIso3, CurrencyCode, IconName, MimeType } from "@stndrds/constants";
 import { StandardSchemaV1, StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
 //#region src/relations/attribute-lookup.d.ts
 /** A record-scoped collection addressed through its owner's ordinary attribute. */
@@ -2310,6 +2310,31 @@ export type AIChatMessagePart = {
  * notification. `completed` reads as success; everything else reads as failure.
  */
 export type AISubagentStatus = "completed" | "failed" | "cancelled" | "timeout" | "expired";
+/**
+ * `metadata.kind` of the `user` row the backend appends to a parent session when
+ * a dispatched child finishes. It is delivered by its own mechanism and is NEVER
+ * a waiting message: a person did not send it, and the agent's read watermark
+ * ignores it. Every reader that decides "is this message waiting" reaches the
+ * rule here: the SQL predicate (`waitingUserMessage` in the Postgres
+ * repository) binds {@link AGENT_NOTIFICATION_KIND} as a query parameter; the
+ * runtime mock and the client readers call {@link isAgentNotificationMetadata}.
+ * A contract test in the runtime keeps the literal out of everywhere else
+ * (#3792).
+ */
+export declare const AGENT_NOTIFICATION_KIND = "agent-notification";
+/** Whether a message's metadata marks it as a subagent notification. */
+export declare function isAgentNotificationMetadata(metadata: Readonly<Record<string, unknown>> | null | undefined): boolean;
+/**
+ * `metadata.kind` of a `user` row another agent wrote into a session through
+ * `sendInitialMessage`: a spawn mission or a `message_agent` follow-up. Like
+ * the notification, it is the turn's input but not a person's message, so
+ * anything that means "what the person just gave" — attachments above all —
+ * must not read it as one. The runtime's `messaging/message-author` composes
+ * the row-level predicates from this and {@link isAgentNotificationMetadata}.
+ */
+export declare const AGENT_MESSAGE_KIND = "agent-message";
+/** Whether a message's metadata marks it as written by another agent. */
+export declare function isAgentMessageMetadata(metadata: Readonly<Record<string, unknown>> | null | undefined): boolean;
 /**
  * Narrow, UI-ready projection of an `agent-notification` message. Derived by the
  * react mapper from the raw `AgentSessionMessage.metadata` so the UI never has to
@@ -2663,6 +2688,207 @@ export interface AIUsageMeasurementsV1 {
   source: "server" | "provider" | "mixed";
 }
 //#endregion
+//#region src/types/device-channel.d.ts
+/**
+ * The device channel wire protocol, shared by the API server, the CLI shell
+ * worker and the browser extension. Browser payloads (`command.action`,
+ * `complete.result.result`) are opaque records here: only the server refines
+ * them against the browser action vocabulary.
+ */
+/** Absolute path of the channel on the API origin (the `/v1` prefix included). */
+export declare const DEVICE_CHANNEL_PATH = "/v1/device-worker/channel";
+export declare const DEVICE_CHANNEL_MAX_FRAME_BYTES = 262144;
+/** A socket that has not sent `authenticate` within this budget is closed 1008. */
+export declare const DEVICE_CHANNEL_AUTHENTICATE_TIMEOUT_MS = 10000;
+/** The server leases the next queued command from the store on this cadence while idle. */
+export declare const DEVICE_CHANNEL_IDLE_POLL_MS = 2000;
+/** The server re-validates the credential and refreshes presence on this cadence. */
+export declare const DEVICE_CHANNEL_PRESENCE_MS = 2000;
+/**
+ * The server sends `{ type: "ping" }` plus a control ping on this cadence; a
+ * socket that has not answered the control ping by the next tick is dropped.
+ * The JSON frame is what keeps an MV3 service worker awake.
+ */
+export declare const DEVICE_CHANNEL_KEEPALIVE_MS = 20000;
+export declare const DEVICE_COMMAND_ERROR_CODES: readonly ["worker_disconnected", "cancelled", "timed_out", "execution_failed", "stale_reference", "tab_unavailable", "debugger_unavailable", "blocked_by_user"];
+export type DeviceCommandErrorCode = (typeof DEVICE_COMMAND_ERROR_CODES)[number];
+export declare class DeviceChannelProtocolError extends SchemaError {
+  readonly _tag = "DeviceChannelProtocolError";
+  constructor(message: string);
+}
+/** The two payloads the shared protocol leaves opaque; the server refines them. */
+export interface DeviceChannelPayloadSchemas<Action, Result> {
+  action: z$1.ZodType<Action>;
+  result: z$1.ZodType<Result>;
+}
+/** Builds both frame unions around the given browser payload schemas. */
+export declare function defineDeviceChannelFrames<Action, Result>(payloads: DeviceChannelPayloadSchemas<Action, Result>): {
+  worker: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+    type: z$1.ZodLiteral<"authenticate">;
+    credential: z$1.ZodString;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"running">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"heartbeat">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    stdout: z$1.ZodOptional<z$1.ZodString>;
+    stderr: z$1.ZodOptional<z$1.ZodString>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"output">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    result: z$1.ZodObject<{
+      stdout: z$1.ZodOptional<z$1.ZodString>;
+      stderr: z$1.ZodOptional<z$1.ZodString>;
+      exitCode: z$1.ZodNumber;
+      success: z$1.ZodBoolean;
+      errorCode: z$1.ZodOptional<z$1.ZodEnum<{
+        cancelled: "cancelled";
+        worker_disconnected: "worker_disconnected";
+        timed_out: "timed_out";
+        execution_failed: "execution_failed";
+        stale_reference: "stale_reference";
+        tab_unavailable: "tab_unavailable";
+        debugger_unavailable: "debugger_unavailable";
+        blocked_by_user: "blocked_by_user";
+      }>>;
+      result: z$1.ZodOptional<z$1.ZodType<Result, unknown, z$1.core.$ZodTypeInternals<Result, unknown>>>;
+    }, z$1.core.$strict>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"complete">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"pong">;
+  }, z$1.core.$strict>], "type">;
+  server: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+    type: z$1.ZodLiteral<"ready">;
+    device: z$1.ZodObject<{
+      id: z$1.ZodString;
+      name: z$1.ZodString;
+      capability: z$1.ZodEnum<{
+        shell: "shell";
+        browser: "browser";
+      }>;
+    }, z$1.core.$strict>;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    kind: z$1.ZodEnum<{
+      shell: "shell";
+      browser: "browser";
+    }>;
+    intent: z$1.ZodString;
+    timeoutMs: z$1.ZodNumber;
+    command: z$1.ZodOptional<z$1.ZodString>;
+    cwd: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+    action: z$1.ZodOptional<z$1.ZodType<Action, unknown, z$1.core.$ZodTypeInternals<Action, unknown>>>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"command">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"cancel">;
+    id: z$1.ZodUUID;
+    reason: z$1.ZodEnum<{
+      cancelled: "cancelled";
+      timed_out: "timed_out";
+      revoked: "revoked";
+    }>;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"reauthenticate">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"revoked">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"ping">;
+  }, z$1.core.$strict>], "type">;
+};
+export declare const DeviceChannelWorkerFrameSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+  type: z$1.ZodLiteral<"authenticate">;
+  credential: z$1.ZodString;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"running">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"heartbeat">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  stdout: z$1.ZodOptional<z$1.ZodString>;
+  stderr: z$1.ZodOptional<z$1.ZodString>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"output">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  result: z$1.ZodObject<{
+    stdout: z$1.ZodOptional<z$1.ZodString>;
+    stderr: z$1.ZodOptional<z$1.ZodString>;
+    exitCode: z$1.ZodNumber;
+    success: z$1.ZodBoolean;
+    errorCode: z$1.ZodOptional<z$1.ZodEnum<{
+      cancelled: "cancelled";
+      worker_disconnected: "worker_disconnected";
+      timed_out: "timed_out";
+      execution_failed: "execution_failed";
+      stale_reference: "stale_reference";
+      tab_unavailable: "tab_unavailable";
+      debugger_unavailable: "debugger_unavailable";
+      blocked_by_user: "blocked_by_user";
+    }>>;
+    result: z$1.ZodOptional<z$1.ZodType<Record<string, unknown>, unknown, z$1.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
+  }, z$1.core.$strict>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"complete">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"pong">;
+}, z$1.core.$strict>], "type">;
+export declare const DeviceChannelServerFrameSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+  type: z$1.ZodLiteral<"ready">;
+  device: z$1.ZodObject<{
+    id: z$1.ZodString;
+    name: z$1.ZodString;
+    capability: z$1.ZodEnum<{
+      shell: "shell";
+      browser: "browser";
+    }>;
+  }, z$1.core.$strict>;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  kind: z$1.ZodEnum<{
+    shell: "shell";
+    browser: "browser";
+  }>;
+  intent: z$1.ZodString;
+  timeoutMs: z$1.ZodNumber;
+  command: z$1.ZodOptional<z$1.ZodString>;
+  cwd: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+  action: z$1.ZodOptional<z$1.ZodType<Record<string, unknown>, unknown, z$1.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"command">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"cancel">;
+  id: z$1.ZodUUID;
+  reason: z$1.ZodEnum<{
+    cancelled: "cancelled";
+    timed_out: "timed_out";
+    revoked: "revoked";
+  }>;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"reauthenticate">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"revoked">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"ping">;
+}, z$1.core.$strict>], "type">;
+export type DeviceChannelWorkerFrame = z$1.infer<typeof DeviceChannelWorkerFrameSchema>;
+export type DeviceChannelServerFrame = z$1.infer<typeof DeviceChannelServerFrameSchema>;
+/** Parses one text frame; a non-JSON or off-protocol frame is a `DeviceChannelProtocolError`. */
+export declare function parseDeviceChannelFrame<T>(schema: z$1.ZodType<T>, raw: string): T;
+export declare function parseWorkerFrame(raw: string): DeviceChannelWorkerFrame;
+export declare function parseServerFrame(raw: string): DeviceChannelServerFrame;
+//#endregion
 //#region src/types/documents.d.ts
 export type DocumentKind = "file" | "folder";
 export interface Document extends Timestamps {
@@ -5093,7 +5319,7 @@ export interface AIGenerationResult {
 //#endregion
 //#region src/types/ai-usage.d.ts
 /** Client-safe AI usage and wallet vocabulary, shared by the journal, the API and the composer. */
-export type UsageModality = "text" | "image" | "audio" | "video" | "embedding";
+export type UsageModality = "text" | "image" | "audio" | "video" | "embedding" | "decision";
 /** Whose usage a report covers: the caller's own (agents folded into their principal) or the whole workspace. */
 export type UsageScope = "me" | "workspace";
 /** One aggregate of journal rows; money as decimal strings, counts as integers. */

package/dist/index.d.ts

@@ -1,13 +1,13 @@
 
-import { $ as BilateralConfig, $t as indexBy, A as StorageError, An as ComputedDependency, At as StatusGroup, B as isObjectReferencedError, Bn as ComputedFormulaLiteralNode, Bt as OptionPropertyAttribute, C as RepositoryOperation, Cn as assertAcyclicComputedDependencies, Ct as RichTextAttribute, D as SchemaErrorCode, Dn as ComputedFunctionName, Dt as SelectAttribute, E as SchemaError, En as COMPUTED_FUNCTION_NAMES, Et as RollupFunction, F as SystemEntityImmutableError, Fn as ComputedValueType, Ft as inferInverseCardinality, G as BuiltInTransform, Gt as resolvePropertyDefinitions, H as isRecordReferencedError, Hn as ComputedFormulaPathNode, Ht as PropertySchema, I as ValidationError, In as ComputedFormulaAstNode, It as isAttributeSortable, J as ATTRIBUTE_TYPES, Jt as Uuid, K as MigrationDefinition, Kt as TenantId, L as ValidationErrorDetail, Ln as ComputedFormulaBinaryNode, Lt as isBilateralRelation, M as SyncCascadeError, Mn as ComputedOptionsSource, Mt as TimeFormat, N as SyncConflictError, Nn as ComputedPlan, Nt as UserAttribute, O as SchemaPlanNotFoundError, On as ComputedFunctionSignature, Ot as SingleRelationAttribute, P as SyncError, Pn as ComputedReturnType, Pt as UserReferenceType, Q as BaseAttribute, Qt as generateId, R as isAttributeInUseError, Rn as ComputedFormulaBinaryOperator, Rt as isUniversalRelation, S as RepositoryError, Sn as ComputedFormulaCompileError, St as RelationTarget, T as RoleNotFoundError, Tn as COMPUTED_FUNCTIONS, Tt as RollupAttribute, U as isSchemaError, Un as parseComputedFormula, Ut as PropertyType, V as isProtectedResourceError, Vn as ComputedFormulaParseError, Vt as PropertyAttribute, W as isValidationError, Wt as hasOptions, X as AttributeGroup, Xt as asUserId, Y as Attribute, Yt as asTenantId, Z as AttributeType, Zt as deepEqual, _ as ProtectedResourceError, _n as CompileComputedFormulaInput, _t as Option, a as ChangeTypeNotSupportedError, an as COMPUTED_FUNCTION_METADATA, at as DateRangeValue, b as RecordReference, bn as ComputedCompileSchema, bt as RELATION_TARGET_ANY, c as DuplicateError, cn as ComputedFormulaResult, ct as FormulaAttribute, d as MigrationTimeoutError, dn as evaluateComputedFormulaWithResult, dt as LocationAttribute, en as NonJsonValueError, et as CheckboxAttribute, f as NotFoundError, fn as formatComputedResult, ft as LocationGranularity, g as OrphanSystemAttributeError, gn as rollupToFormulaExpression, gt as NumberUnit, h as ObjectReferencedError, hn as inferRollupReturnType, ht as NumberAttribute, i as AttributeUsage, in as serializeStableJson, it as DateFormat, j as StorageOperation, jn as ComputedFieldKind, jt as TextAttribute, k as SearchBackendError, kn as isComputedFunctionName, kt as StatusAttribute, l as ForbiddenError, ln as evaluateComputedAst, lt as FormulaReturnType, m as ObjectNotFoundError, mn as compileRollupAttribute, mt as MultiselectAttribute, n as AttributeInUseError, nn as sameStableValue, nt as CurrencyAttribute, o as ConcurrentModificationError, on as ComputedFunctionCategory, ot as DateValue, p as NotImplementedError, pn as isPlainRecord, pt as MultiRelationAttribute, q as SchemaOperation, qt as UserId, r as AttributeNotFoundError, rn as serializeCanonicalJson, rt as DateAttribute, s as DestructiveSyncNotAllowedError, sn as ComputedFunctionMetadata, st as DocumentAttribute, t as AccessDeniedError, tn as canonicalStringify, tt as Currency, u as MemoryNotFoundError, un as evaluateComputedFormula, ut as Location, v as ProtectedRoleError, vn as ComputedCompileAttribute, vt as Phone, w as ReservedObjectNameError, wn as compileComputedFormula, wt as RichtextAttribute, x as RecordReferencedError, xn as ComputedDependencyGraphNode, xt as RelationAttribute, y as RecordNotFoundError, yn as ComputedCompileObject, yt as PhoneAttribute, z as isNotFoundError, zn as ComputedFormulaCallNode, zt as relationTargetsOf } from "./exceptions-CHlIXRKP.js";
-import { $ as QueryState, A as FormContentDefinition, B as DayMonthValue, C as ContentOpenMode, D as CustomContentDefinition, E as ContentViewDefinition, F as MeetingsContentDefinition, G as FilterOperator, H as EdgeQuantifier, I as RichtextContentDefinition, J as FilterValue, K as FilterRule, L as ViewContentDefinition, M as FormsContentDefinition, N as KanbanCollectionContentDefinition, O as DocumentsContentDefinition, P as ListViewLayout, Q as PhoneFilterValue, R as ViewRead, S as ContentFieldGroup, T as ContentViewContext, U as ExtendedFilterRule, V as DynamicValue, W as FilterCombinator, X as NoValueOperator, Y as NO_VALUE_OPERATORS, Z as OPERATORS_BY_TYPE, _ as CollectionContentDefinition, a as contentViewDefinitionSchemaFor, at as isNoValueOperator, b as ContentCreateMode, c as draftContentViewDefinitionSchemaFor, d as sortsSchema, et as RelativeDateValue, f as colorIdSchema, g as CollectionAction, h as ActivityContentDefinition, i as contentViewDefinitionSchema, it as getRollupFilterOperators, j as FormDensity, k as EmailsContentDefinition, l as filterStateSchema, m as SCHEMA_LIMITS, n as collectionContentSourceSchema, nt as SortRule, o as displayAttributesSchema, p as iconNameSchema, q as FilterState, r as columnsSchema, rt as filterOperatorsByTypeForGeneration, s as draftContentViewDefinitionSchema, t as AsideRule, tt as SortDirection, u as publishedViewContentDefinitionSchema, v as CollectionContentSource, w as ContentPlacement, x as ContentField, y as ColumnReference, z as CurrencyFilterValue } from "./all-BWBHE8zC.js";
-import { A as FolderPreset, C as ResourceVisibility, D as parseResourceVisibility, E as Timestamps, M as PresetNode, O as DocumentLayout, S as ReservedObjectName, T as SystemFieldName, _ as ObjectRecord, a as validateDraft, b as RESOURCE_VISIBILITIES, c as validateObjectOrThrow, f as createFormAttributeValidator, g as ObjectDefinition, h as ObjectAttribute, j as MAX_PRESET_DEPTH, k as DocumentLayoutVariant, m as ListViewTabVisibility, o as validateDraftOrThrow, p as LIST_VIEW_TAB_VISIBILITIES, r as rejectUnknownAttributesOrThrow, s as validateObject, v as RESERVED_ATTRIBUTE_NAMES, w as SYSTEM_FIELD_NAMES, x as ReservedAttributeName, y as RESERVED_OBJECT_NAMES } from "./index-CUEwuqCj.js";
-import { S as UpdateObjectInput, _ as statusOptionWriteSchema, b as RelationOption, c as parseAttributeConfigForCreate, d as propertyAttributeWireSchema, f as propertySchemaSchema, g as statusGroupSchema, h as selectOptionWriteSchema, l as parseAttributeConfigForUpdate, m as refuseForeignKeys, n as WIRE_OMITTED_CONFIG_KEYS, o as multiselectOptionWriteSchema, p as propertySchemaWireSchema, r as attributeConfigSchemas, s as parseAttributeConfig, t as SIMPLE_PROPERTY_TYPES, u as propertyAttributeSchema, v as AddAttributeInput, x as RelationOptionsResponse, y as CreateCustomObjectInput } from "./index-CJYpJqEh.js";
-import { n as DEFAULT_VALIDATION_MESSAGES, r as ValidationMessages, t as formatZodErrors } from "./index-BAW8p4U_.js";
-import { t as createTextValidator } from "./text-D4mEL9hl.js";
-import { t as createNumberValidator } from "./number-BZ9pUAob.js";
-import { t as createCheckboxValidator } from "./checkbox-BJiVPQKC.js";
-import { t as createDateValidator } from "./date-DJzdIygB.js";
+import { $ as BilateralConfig, $t as indexBy, A as StorageError, An as ComputedDependency, At as StatusGroup, B as isObjectReferencedError, Bn as ComputedFormulaLiteralNode, Bt as OptionPropertyAttribute, C as RepositoryOperation, Cn as assertAcyclicComputedDependencies, Ct as RichTextAttribute, D as SchemaErrorCode, Dn as ComputedFunctionName, Dt as SelectAttribute, E as SchemaError, En as COMPUTED_FUNCTION_NAMES, Et as RollupFunction, F as SystemEntityImmutableError, Fn as ComputedValueType, Ft as inferInverseCardinality, G as BuiltInTransform, Gt as resolvePropertyDefinitions, H as isRecordReferencedError, Hn as ComputedFormulaPathNode, Ht as PropertySchema, I as ValidationError, In as ComputedFormulaAstNode, It as isAttributeSortable, J as ATTRIBUTE_TYPES, Jt as Uuid, K as MigrationDefinition, Kt as TenantId, L as ValidationErrorDetail, Ln as ComputedFormulaBinaryNode, Lt as isBilateralRelation, M as SyncCascadeError, Mn as ComputedOptionsSource, Mt as TimeFormat, N as SyncConflictError, Nn as ComputedPlan, Nt as UserAttribute, O as SchemaPlanNotFoundError, On as ComputedFunctionSignature, Ot as SingleRelationAttribute, P as SyncError, Pn as ComputedReturnType, Pt as UserReferenceType, Q as BaseAttribute, Qt as generateId, R as isAttributeInUseError, Rn as ComputedFormulaBinaryOperator, Rt as isUniversalRelation, S as RepositoryError, Sn as ComputedFormulaCompileError, St as RelationTarget, T as RoleNotFoundError, Tn as COMPUTED_FUNCTIONS, Tt as RollupAttribute, U as isSchemaError, Un as parseComputedFormula, Ut as PropertyType, V as isProtectedResourceError, Vn as ComputedFormulaParseError, Vt as PropertyAttribute, W as isValidationError, Wt as hasOptions, X as AttributeGroup, Xt as asUserId, Y as Attribute, Yt as asTenantId, Z as AttributeType, Zt as deepEqual, _ as ProtectedResourceError, _n as CompileComputedFormulaInput, _t as Option, a as ChangeTypeNotSupportedError, an as COMPUTED_FUNCTION_METADATA, at as DateRangeValue, b as RecordReference, bn as ComputedCompileSchema, bt as RELATION_TARGET_ANY, c as DuplicateError, cn as ComputedFormulaResult, ct as FormulaAttribute, d as MigrationTimeoutError, dn as evaluateComputedFormulaWithResult, dt as LocationAttribute, en as NonJsonValueError, et as CheckboxAttribute, f as NotFoundError, fn as formatComputedResult, ft as LocationGranularity, g as OrphanSystemAttributeError, gn as rollupToFormulaExpression, gt as NumberUnit, h as ObjectReferencedError, hn as inferRollupReturnType, ht as NumberAttribute, i as AttributeUsage, in as serializeStableJson, it as DateFormat, j as StorageOperation, jn as ComputedFieldKind, jt as TextAttribute, k as SearchBackendError, kn as isComputedFunctionName, kt as StatusAttribute, l as ForbiddenError, ln as evaluateComputedAst, lt as FormulaReturnType, m as ObjectNotFoundError, mn as compileRollupAttribute, mt as MultiselectAttribute, n as AttributeInUseError, nn as sameStableValue, nt as CurrencyAttribute, o as ConcurrentModificationError, on as ComputedFunctionCategory, ot as DateValue, p as NotImplementedError, pn as isPlainRecord, pt as MultiRelationAttribute, q as SchemaOperation, qt as UserId, r as AttributeNotFoundError, rn as serializeCanonicalJson, rt as DateAttribute, s as DestructiveSyncNotAllowedError, sn as ComputedFunctionMetadata, st as DocumentAttribute, t as AccessDeniedError, tn as canonicalStringify, tt as Currency, u as MemoryNotFoundError, un as evaluateComputedFormula, ut as Location, v as ProtectedRoleError, vn as ComputedCompileAttribute, vt as Phone, w as ReservedObjectNameError, wn as compileComputedFormula, wt as RichtextAttribute, x as RecordReferencedError, xn as ComputedDependencyGraphNode, xt as RelationAttribute, y as RecordNotFoundError, yn as ComputedCompileObject, yt as PhoneAttribute, z as isNotFoundError, zn as ComputedFormulaCallNode, zt as relationTargetsOf } from "./exceptions-BCfkN2ct.js";
+import { $ as QueryState, A as FormContentDefinition, B as DayMonthValue, C as ContentOpenMode, D as CustomContentDefinition, E as ContentViewDefinition, F as MeetingsContentDefinition, G as FilterOperator, H as EdgeQuantifier, I as RichtextContentDefinition, J as FilterValue, K as FilterRule, L as ViewContentDefinition, M as FormsContentDefinition, N as KanbanCollectionContentDefinition, O as DocumentsContentDefinition, P as ListViewLayout, Q as PhoneFilterValue, R as ViewRead, S as ContentFieldGroup, T as ContentViewContext, U as ExtendedFilterRule, V as DynamicValue, W as FilterCombinator, X as NoValueOperator, Y as NO_VALUE_OPERATORS, Z as OPERATORS_BY_TYPE, _ as CollectionContentDefinition, a as contentViewDefinitionSchemaFor, at as isNoValueOperator, b as ContentCreateMode, c as draftContentViewDefinitionSchemaFor, d as sortsSchema, et as RelativeDateValue, f as colorIdSchema, g as CollectionAction, h as ActivityContentDefinition, i as contentViewDefinitionSchema, it as getRollupFilterOperators, j as FormDensity, k as EmailsContentDefinition, l as filterStateSchema, m as SCHEMA_LIMITS, n as collectionContentSourceSchema, nt as SortRule, o as displayAttributesSchema, p as iconNameSchema, q as FilterState, r as columnsSchema, rt as filterOperatorsByTypeForGeneration, s as draftContentViewDefinitionSchema, t as AsideRule, tt as SortDirection, u as publishedViewContentDefinitionSchema, v as CollectionContentSource, w as ContentPlacement, x as ContentField, y as ColumnReference, z as CurrencyFilterValue } from "./all-BjBPrd9V.js";
+import { A as FolderPreset, C as ResourceVisibility, D as parseResourceVisibility, E as Timestamps, M as PresetNode, O as DocumentLayout, S as ReservedObjectName, T as SystemFieldName, _ as ObjectRecord, a as validateDraft, b as RESOURCE_VISIBILITIES, c as validateObjectOrThrow, f as createFormAttributeValidator, g as ObjectDefinition, h as ObjectAttribute, j as MAX_PRESET_DEPTH, k as DocumentLayoutVariant, m as ListViewTabVisibility, o as validateDraftOrThrow, p as LIST_VIEW_TAB_VISIBILITIES, r as rejectUnknownAttributesOrThrow, s as validateObject, v as RESERVED_ATTRIBUTE_NAMES, w as SYSTEM_FIELD_NAMES, x as ReservedAttributeName, y as RESERVED_OBJECT_NAMES } from "./index-CLEwI8GE.js";
+import { S as UpdateObjectInput, _ as statusOptionWriteSchema, b as RelationOption, c as parseAttributeConfigForCreate, d as propertyAttributeWireSchema, f as propertySchemaSchema, g as statusGroupSchema, h as selectOptionWriteSchema, l as parseAttributeConfigForUpdate, m as refuseForeignKeys, n as WIRE_OMITTED_CONFIG_KEYS, o as multiselectOptionWriteSchema, p as propertySchemaWireSchema, r as attributeConfigSchemas, s as parseAttributeConfig, t as SIMPLE_PROPERTY_TYPES, u as propertyAttributeSchema, v as AddAttributeInput, x as RelationOptionsResponse, y as CreateCustomObjectInput } from "./index-BKv7a08I.js";
+import { n as DEFAULT_VALIDATION_MESSAGES, r as ValidationMessages, t as formatZodErrors } from "./index-DyeLYnEc.js";
+import { t as createTextValidator } from "./text-C4EAE9Ap.js";
+import { t as createNumberValidator } from "./number-BcMYyg8j.js";
+import { t as createCheckboxValidator } from "./checkbox-D8nK0oIO.js";
+import { t as createDateValidator } from "./date-BGULTVlX.js";
 import z, { z as z$1 } from "zod";
 import { ColorId, CountryIso3, CurrencyCode, IconName, MimeType } from "@stndrds/constants";
 import { StandardSchemaV1, StandardSchemaV1 as StandardSchemaV1$1 } from "@standard-schema/spec";
@@ -2310,6 +2310,31 @@ export type AIChatMessagePart = {
  * notification. `completed` reads as success; everything else reads as failure.
  */
 export type AISubagentStatus = "completed" | "failed" | "cancelled" | "timeout" | "expired";
+/**
+ * `metadata.kind` of the `user` row the backend appends to a parent session when
+ * a dispatched child finishes. It is delivered by its own mechanism and is NEVER
+ * a waiting message: a person did not send it, and the agent's read watermark
+ * ignores it. Every reader that decides "is this message waiting" reaches the
+ * rule here: the SQL predicate (`waitingUserMessage` in the Postgres
+ * repository) binds {@link AGENT_NOTIFICATION_KIND} as a query parameter; the
+ * runtime mock and the client readers call {@link isAgentNotificationMetadata}.
+ * A contract test in the runtime keeps the literal out of everywhere else
+ * (#3792).
+ */
+export declare const AGENT_NOTIFICATION_KIND = "agent-notification";
+/** Whether a message's metadata marks it as a subagent notification. */
+export declare function isAgentNotificationMetadata(metadata: Readonly<Record<string, unknown>> | null | undefined): boolean;
+/**
+ * `metadata.kind` of a `user` row another agent wrote into a session through
+ * `sendInitialMessage`: a spawn mission or a `message_agent` follow-up. Like
+ * the notification, it is the turn's input but not a person's message, so
+ * anything that means "what the person just gave" — attachments above all —
+ * must not read it as one. The runtime's `messaging/message-author` composes
+ * the row-level predicates from this and {@link isAgentNotificationMetadata}.
+ */
+export declare const AGENT_MESSAGE_KIND = "agent-message";
+/** Whether a message's metadata marks it as written by another agent. */
+export declare function isAgentMessageMetadata(metadata: Readonly<Record<string, unknown>> | null | undefined): boolean;
 /**
  * Narrow, UI-ready projection of an `agent-notification` message. Derived by the
  * react mapper from the raw `AgentSessionMessage.metadata` so the UI never has to
@@ -2663,6 +2688,207 @@ export interface AIUsageMeasurementsV1 {
   source: "server" | "provider" | "mixed";
 }
 //#endregion
+//#region src/types/device-channel.d.ts
+/**
+ * The device channel wire protocol, shared by the API server, the CLI shell
+ * worker and the browser extension. Browser payloads (`command.action`,
+ * `complete.result.result`) are opaque records here: only the server refines
+ * them against the browser action vocabulary.
+ */
+/** Absolute path of the channel on the API origin (the `/v1` prefix included). */
+export declare const DEVICE_CHANNEL_PATH = "/v1/device-worker/channel";
+export declare const DEVICE_CHANNEL_MAX_FRAME_BYTES = 262144;
+/** A socket that has not sent `authenticate` within this budget is closed 1008. */
+export declare const DEVICE_CHANNEL_AUTHENTICATE_TIMEOUT_MS = 10000;
+/** The server leases the next queued command from the store on this cadence while idle. */
+export declare const DEVICE_CHANNEL_IDLE_POLL_MS = 2000;
+/** The server re-validates the credential and refreshes presence on this cadence. */
+export declare const DEVICE_CHANNEL_PRESENCE_MS = 2000;
+/**
+ * The server sends `{ type: "ping" }` plus a control ping on this cadence; a
+ * socket that has not answered the control ping by the next tick is dropped.
+ * The JSON frame is what keeps an MV3 service worker awake.
+ */
+export declare const DEVICE_CHANNEL_KEEPALIVE_MS = 20000;
+export declare const DEVICE_COMMAND_ERROR_CODES: readonly ["worker_disconnected", "cancelled", "timed_out", "execution_failed", "stale_reference", "tab_unavailable", "debugger_unavailable", "blocked_by_user"];
+export type DeviceCommandErrorCode = (typeof DEVICE_COMMAND_ERROR_CODES)[number];
+export declare class DeviceChannelProtocolError extends SchemaError {
+  readonly _tag = "DeviceChannelProtocolError";
+  constructor(message: string);
+}
+/** The two payloads the shared protocol leaves opaque; the server refines them. */
+export interface DeviceChannelPayloadSchemas<Action, Result> {
+  action: z$1.ZodType<Action>;
+  result: z$1.ZodType<Result>;
+}
+/** Builds both frame unions around the given browser payload schemas. */
+export declare function defineDeviceChannelFrames<Action, Result>(payloads: DeviceChannelPayloadSchemas<Action, Result>): {
+  worker: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+    type: z$1.ZodLiteral<"authenticate">;
+    credential: z$1.ZodString;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"running">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"heartbeat">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    stdout: z$1.ZodOptional<z$1.ZodString>;
+    stderr: z$1.ZodOptional<z$1.ZodString>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"output">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    result: z$1.ZodObject<{
+      stdout: z$1.ZodOptional<z$1.ZodString>;
+      stderr: z$1.ZodOptional<z$1.ZodString>;
+      exitCode: z$1.ZodNumber;
+      success: z$1.ZodBoolean;
+      errorCode: z$1.ZodOptional<z$1.ZodEnum<{
+        cancelled: "cancelled";
+        worker_disconnected: "worker_disconnected";
+        timed_out: "timed_out";
+        execution_failed: "execution_failed";
+        stale_reference: "stale_reference";
+        tab_unavailable: "tab_unavailable";
+        debugger_unavailable: "debugger_unavailable";
+        blocked_by_user: "blocked_by_user";
+      }>>;
+      result: z$1.ZodOptional<z$1.ZodType<Result, unknown, z$1.core.$ZodTypeInternals<Result, unknown>>>;
+    }, z$1.core.$strict>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"complete">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"pong">;
+  }, z$1.core.$strict>], "type">;
+  server: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+    type: z$1.ZodLiteral<"ready">;
+    device: z$1.ZodObject<{
+      id: z$1.ZodString;
+      name: z$1.ZodString;
+      capability: z$1.ZodEnum<{
+        shell: "shell";
+        browser: "browser";
+      }>;
+    }, z$1.core.$strict>;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    kind: z$1.ZodEnum<{
+      shell: "shell";
+      browser: "browser";
+    }>;
+    intent: z$1.ZodString;
+    timeoutMs: z$1.ZodNumber;
+    command: z$1.ZodOptional<z$1.ZodString>;
+    cwd: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+    action: z$1.ZodOptional<z$1.ZodType<Action, unknown, z$1.core.$ZodTypeInternals<Action, unknown>>>;
+    id: z$1.ZodUUID;
+    leaseToken: z$1.ZodString;
+    type: z$1.ZodLiteral<"command">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"cancel">;
+    id: z$1.ZodUUID;
+    reason: z$1.ZodEnum<{
+      cancelled: "cancelled";
+      timed_out: "timed_out";
+      revoked: "revoked";
+    }>;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"reauthenticate">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"revoked">;
+  }, z$1.core.$strict>, z$1.ZodObject<{
+    type: z$1.ZodLiteral<"ping">;
+  }, z$1.core.$strict>], "type">;
+};
+export declare const DeviceChannelWorkerFrameSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+  type: z$1.ZodLiteral<"authenticate">;
+  credential: z$1.ZodString;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"running">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"heartbeat">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  stdout: z$1.ZodOptional<z$1.ZodString>;
+  stderr: z$1.ZodOptional<z$1.ZodString>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"output">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  result: z$1.ZodObject<{
+    stdout: z$1.ZodOptional<z$1.ZodString>;
+    stderr: z$1.ZodOptional<z$1.ZodString>;
+    exitCode: z$1.ZodNumber;
+    success: z$1.ZodBoolean;
+    errorCode: z$1.ZodOptional<z$1.ZodEnum<{
+      cancelled: "cancelled";
+      worker_disconnected: "worker_disconnected";
+      timed_out: "timed_out";
+      execution_failed: "execution_failed";
+      stale_reference: "stale_reference";
+      tab_unavailable: "tab_unavailable";
+      debugger_unavailable: "debugger_unavailable";
+      blocked_by_user: "blocked_by_user";
+    }>>;
+    result: z$1.ZodOptional<z$1.ZodType<Record<string, unknown>, unknown, z$1.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
+  }, z$1.core.$strict>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"complete">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"pong">;
+}, z$1.core.$strict>], "type">;
+export declare const DeviceChannelServerFrameSchema: z$1.ZodDiscriminatedUnion<[z$1.ZodObject<{
+  type: z$1.ZodLiteral<"ready">;
+  device: z$1.ZodObject<{
+    id: z$1.ZodString;
+    name: z$1.ZodString;
+    capability: z$1.ZodEnum<{
+      shell: "shell";
+      browser: "browser";
+    }>;
+  }, z$1.core.$strict>;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  kind: z$1.ZodEnum<{
+    shell: "shell";
+    browser: "browser";
+  }>;
+  intent: z$1.ZodString;
+  timeoutMs: z$1.ZodNumber;
+  command: z$1.ZodOptional<z$1.ZodString>;
+  cwd: z$1.ZodOptional<z$1.ZodNullable<z$1.ZodString>>;
+  action: z$1.ZodOptional<z$1.ZodType<Record<string, unknown>, unknown, z$1.core.$ZodTypeInternals<Record<string, unknown>, unknown>>>;
+  id: z$1.ZodUUID;
+  leaseToken: z$1.ZodString;
+  type: z$1.ZodLiteral<"command">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"cancel">;
+  id: z$1.ZodUUID;
+  reason: z$1.ZodEnum<{
+    cancelled: "cancelled";
+    timed_out: "timed_out";
+    revoked: "revoked";
+  }>;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"reauthenticate">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"revoked">;
+}, z$1.core.$strict>, z$1.ZodObject<{
+  type: z$1.ZodLiteral<"ping">;
+}, z$1.core.$strict>], "type">;
+export type DeviceChannelWorkerFrame = z$1.infer<typeof DeviceChannelWorkerFrameSchema>;
+export type DeviceChannelServerFrame = z$1.infer<typeof DeviceChannelServerFrameSchema>;
+/** Parses one text frame; a non-JSON or off-protocol frame is a `DeviceChannelProtocolError`. */
+export declare function parseDeviceChannelFrame<T>(schema: z$1.ZodType<T>, raw: string): T;
+export declare function parseWorkerFrame(raw: string): DeviceChannelWorkerFrame;
+export declare function parseServerFrame(raw: string): DeviceChannelServerFrame;
+//#endregion
 //#region src/types/documents.d.ts
 export type DocumentKind = "file" | "folder";
 export interface Document extends Timestamps {
@@ -5093,7 +5319,7 @@ export interface AIGenerationResult {
 //#endregion
 //#region src/types/ai-usage.d.ts
 /** Client-safe AI usage and wallet vocabulary, shared by the journal, the API and the composer. */
-export type UsageModality = "text" | "image" | "audio" | "video" | "embedding";
+export type UsageModality = "text" | "image" | "audio" | "video" | "embedding" | "decision";
 /** Whose usage a report covers: the caller's own (agents folded into their principal) or the whole workspace. */
 export type UsageScope = "me" | "workspace";
 /** One aggregate of journal rows; money as decimal strings, counts as integers. */