broods 0.13.0 → 0.17.3

package/dist/index.d.ts

@@ -1,58 +1,98 @@
 import { SystemModelMessage, LanguageModelCallOptions, RequestOptions, streamText, JSONSchema7, ModelMessage, TextStreamPart, ToolSet } from 'ai';
 
 /**
- * Supported account model provider names.
- * Keep provider identifiers here so config validation and model resolution share one source.
+ * Every Vercel AI SDK provider that ships language models, plus `custom`
+ * (any OpenAI-compatible endpoint) and `minimax`. Image-, speech- and
+ * transcription-only providers are deliberately absent: they cannot back
+ * `config.model`.
  */
-declare const ACCOUNT_MODEL_PROVIDERS: {
-    readonly google: true;
-    readonly openai: true;
-    readonly anthropic: true;
-    readonly bedrock: true;
-    readonly vercel: true;
-    readonly minimax: true;
-    readonly custom: true;
+declare const MODEL_PROVIDERS: {
+    readonly anthropic: {
+        readonly label: "Anthropic";
+        readonly modelPlaceholder: "claude-sonnet-4-5-20250929";
+    };
+    readonly azure: {
+        readonly label: "Azure OpenAI";
+        readonly modelPlaceholder: "gpt-4.1-mini";
+    };
+    readonly baseten: {
+        readonly label: "Baseten";
+        readonly modelPlaceholder: "deepseek-ai/DeepSeek-V3";
+    };
+    readonly bedrock: {
+        readonly label: "Amazon Bedrock";
+        readonly modelPlaceholder: "anthropic.claude-sonnet-4-5-20250929-v1:0";
+    };
+    readonly cerebras: {
+        readonly label: "Cerebras";
+        readonly modelPlaceholder: "llama3.1-8b";
+    };
+    readonly cohere: {
+        readonly label: "Cohere";
+        readonly modelPlaceholder: "command-a-03-2025";
+    };
+    readonly custom: {
+        readonly label: "Custom OpenAI-compatible";
+        readonly modelPlaceholder: "gpt-oss-120b";
+    };
+    readonly deepinfra: {
+        readonly label: "DeepInfra";
+        readonly modelPlaceholder: "deepseek-ai/DeepSeek-V3";
+    };
+    readonly deepseek: {
+        readonly label: "DeepSeek";
+        readonly modelPlaceholder: "deepseek-chat";
+    };
+    readonly fireworks: {
+        readonly label: "Fireworks";
+        readonly modelPlaceholder: "accounts/fireworks/models/deepseek-v3";
+    };
+    readonly google: {
+        readonly label: "Google";
+        readonly modelPlaceholder: "gemini-2.5-flash";
+    };
+    readonly groq: {
+        readonly label: "Groq";
+        readonly modelPlaceholder: "llama-3.3-70b-versatile";
+    };
+    readonly minimax: {
+        readonly label: "MiniMax";
+        readonly modelPlaceholder: "MiniMax-M2.7";
+    };
+    readonly mistral: {
+        readonly label: "Mistral";
+        readonly modelPlaceholder: "mistral-large-latest";
+    };
+    readonly openai: {
+        readonly label: "OpenAI";
+        readonly modelPlaceholder: "gpt-4.1-mini";
+    };
+    readonly perplexity: {
+        readonly label: "Perplexity";
+        readonly modelPlaceholder: "sonar-pro";
+    };
+    readonly togetherai: {
+        readonly label: "Together.ai";
+        readonly modelPlaceholder: "deepseek-ai/DeepSeek-V3";
+    };
+    readonly v0: {
+        readonly label: "Vercel v0";
+        readonly modelPlaceholder: "v0-1.0-md";
+    };
+    readonly vercel: {
+        readonly label: "Vercel AI Gateway";
+        readonly modelPlaceholder: "openai/gpt-4.1-mini";
+    };
+    readonly vertex: {
+        readonly label: "Google Vertex AI";
+        readonly modelPlaceholder: "gemini-2.5-flash";
+    };
+    readonly xai: {
+        readonly label: "xAI Grok";
+        readonly modelPlaceholder: "grok-4";
+    };
 };
-type AccountModelProviderName = keyof typeof ACCOUNT_MODEL_PROVIDERS;
-
-/**
- * Agent policy contracts and validation.
- * Runtime decisions are made by OPA using the same document/input shape.
- */
-declare const AGENT_POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "workspace.read", "workspace.write", "workspace.exec", "subagent.run", "skill.load"];
-type AgentPolicyAction = (typeof AGENT_POLICY_ACTIONS)[number];
-type AgentPolicyEffect = "allow" | "deny";
-type AgentPolicyMode = "enforce" | "audit";
-type AgentPolicyConditionOperator = "equals" | "notEquals" | "in" | "notIn" | "prefix" | "contains";
-interface AgentPolicyCondition {
-    attribute: string;
-    operator: AgentPolicyConditionOperator;
-    value: string | number | boolean | string[] | number[] | boolean[];
-}
-interface AgentPolicyResourceSelector {
-    toolNames?: string[];
-    toolIds?: string[];
-    workspaceIds?: string[];
-    workspaceNames?: string[];
-    filePaths?: string[];
-    subagentIds?: string[];
-    skillPaths?: string[];
-}
-interface AgentPolicyRule {
-    id: string;
-    effect: AgentPolicyEffect;
-    actions: AgentPolicyAction[];
-    resources?: AgentPolicyResourceSelector;
-    conditions?: AgentPolicyCondition[];
-}
-interface AgentPolicyDocument {
-    version: 1;
-    rules: AgentPolicyRule[];
-}
-interface AgentPolicyConfig {
-    policyIds?: string[];
-    mode?: AgentPolicyMode;
-}
+type AccountModelProviderName = keyof typeof MODEL_PROVIDERS;
 
 /**
  * Agent configuration: types for the per-agent settings object, input
@@ -83,7 +123,8 @@ interface AgentConfig {
     skills?: AgentSkillsConfig;
     subagent?: AgentSubagentConfig;
     scheduler?: AgentSchedulerConfig;
-    policy?: AgentPolicyConfig;
+    /** Policies that gate this agent. Each one carries its own enforcement mode. */
+    policies?: string[];
     publicAccess?: boolean;
     [key: string]: unknown;
 }
@@ -166,14 +207,6 @@ type AgentModelOutputMetadata = {
     [key: string]: unknown;
 };
 type AgentProviderConfig = Partial<Record<AccountModelProviderName, AgentProviderSettings>>;
-/**
- * Constructor settings for a model provider. The keys are an explicit allow-list
- * (no open index signature) so a misspelled option — most commonly the camel
- * `baseUrl` instead of the canonical `base_url`/`baseURL` — is a compile-time
- * error in the SDK and is caught by `normalizeProviderSettings` at runtime.
- * Keep this list in sync with `normalizeProviderSettings` and the SDK's
- * `KNOWN_PROVIDER_SETTING_KEYS`.
- */
 interface AgentProviderSettings {
     apiKey?: string;
     /** OpenAI-compatible endpoint (`custom`). Snake form, as documented. */
@@ -181,13 +214,11 @@ interface AgentProviderSettings {
     /** OpenAI-compatible endpoint (`custom`). AI-SDK form; the dashboard writes both. */
     baseURL?: string;
     headers?: Record<string, string>;
+    /** Endpoint label; becomes the provider id and the pi harness env prefix. */
+    name?: string;
     organization?: string;
     project?: string;
-    name?: string;
-    region?: string;
-    accessKeyId?: string;
-    secretAccessKey?: string;
-    sessionToken?: string;
+    [key: string]: unknown;
 }
 interface AgentWorkspaceRef {
     name: string;
@@ -269,7 +300,8 @@ interface AgentTelegramChannelConfig {
     apiUrl?: string;
     botToken?: string;
     webhookSecret?: string;
-    allowedChatIds?: number[];
+    allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     reactionEmoji?: string;
     trace?: "enabled" | "disabled";
     workspaceScope?: AgentChannelWorkspaceScope;
@@ -281,7 +313,8 @@ interface AgentGitHubChannelConfig {
     webhookSecret?: string;
     appId?: string;
     privateKey?: string;
-    allowedRepos?: string[];
+    allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     /** Bot username for @-mention detection (e.g. "my-bot" or "my-bot[bot]"). */
     userName?: string;
     /** Bot's numeric GitHub user ID for self-message detection. */
@@ -300,6 +333,7 @@ interface AgentSlackChannelConfig {
     botToken?: string;
     signingSecret?: string;
     allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     reactionEmoji?: string;
     trace?: "enabled" | "disabled";
     workspaceScope?: AgentChannelWorkspaceScope;
@@ -310,7 +344,8 @@ interface AgentDiscordChannelConfig {
     apiUrl?: string;
     botToken?: string;
     publicKey?: string;
-    allowedGuildIds?: string[];
+    allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     /** Bot's Discord user id. Set it to answer only when the agent is mentioned. */
     botUserId?: string;
     /** Role ids that count as mentioning the agent, e.g. an on-call role. */
@@ -320,6 +355,8 @@ interface AgentDiscordChannelConfig {
     [key: string]: unknown;
 }
 interface AgentPancakeChannelConfig {
+    allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     id?: string;
     pageId?: string;
     pageAccessToken?: string;
@@ -330,11 +367,11 @@ interface AgentPancakeChannelConfig {
     [key: string]: unknown;
 }
 interface AgentZaloChannelConfig {
+    allowedChannelIds?: string[];
+    allowedUserIds?: string[];
     id?: string;
     botToken?: string;
     webhookSecret?: string;
-    allowedUserIds?: string[];
-    allowedGroupIds?: string[];
     trace?: "enabled" | "disabled";
     workspaceScope?: AgentChannelWorkspaceScope;
     [key: string]: unknown;
@@ -475,6 +512,60 @@ interface WorkspaceConfig {
     harness?: WorkspaceHarnessConfig;
 }
 
+/**
+ * Agent policy contracts and validation.
+ * Runtime decisions are made by OPA using the same document/input shape.
+ */
+declare const POLICY_ACTIONS: readonly ["agent.invoke", "tool.call", "workspace.read", "workspace.write", "workspace.exec", "subagent.run", "skill.load"];
+type PolicyAction = (typeof POLICY_ACTIONS)[number];
+type PolicyEffect = "allow" | "deny";
+type PolicyMode = "enforce" | "audit";
+type PolicyConditionOperator = "equals" | "notEquals" | "in" | "notIn" | "prefix" | "contains";
+interface PolicyCondition {
+    attribute: string;
+    operator: PolicyConditionOperator;
+    value: string | number | boolean | string[] | number[] | boolean[];
+}
+interface PolicyResourceSelector {
+    toolNames?: string[];
+    toolIds?: string[];
+    workspaceIds?: string[];
+    workspaceNames?: string[];
+    filePaths?: string[];
+    subagentIds?: string[];
+    skillPaths?: string[];
+}
+interface PolicyRule {
+    id: string;
+    effect: PolicyEffect;
+    actions: PolicyAction[];
+    resources?: PolicyResourceSelector;
+    conditions?: PolicyCondition[];
+}
+interface PolicyDocument {
+    version: 1;
+    /**
+     * How hard this policy bites. `audit` records what it would have done and
+     * blocks nothing; `enforce` lets its deny rules refuse, and switches the
+     * places it is attached to over to default-deny. Omitted reads as `audit`,
+     * so a freshly written policy can never break a running agent.
+     */
+    mode?: PolicyMode;
+    rules: PolicyRule[];
+}
+
+/**
+ * Channel records: an account-scoped row per real place a team talks — one Slack
+ * channel, one Discord channel, one repository. It binds that place to an agent
+ * and adds instructions, workspaces, policies and roles scoped to it.
+ * Distinct from `config.channels`, which holds one adapter's credentials.
+ * A record narrows and adds; it never grants capability the agent lacks.
+ */
+
+/** Where a reply lands: its own thread, or wherever the message came from. */
+declare const CHANNEL_REPLY_TARGETS: readonly ["thread", "source"];
+type ChannelReplyIn = (typeof CHANNEL_REPLY_TARGETS)[number];
+
 /**
  * Telegram channel adapter implementated as a ChannelAdapter.
  * Implements Telegram auth, message normalization, and reply actions through the Chat SDK Telegram adapter.
@@ -856,11 +947,11 @@ type WebSocketClientMessage = WebSocketClientExecuteMessage | WebSocketClientCon
  * the gateway, the SDK/CLI, and the dashboard. Pure types + tiny pure helpers,
  * zero runtime deps. Kept separate from the agent-test websocket-contracts.
  */
-type LogLevel = "INFO" | "WARN" | "ERROR";
+type LogLevel = "DEBUG" | "INFO" | "WARN" | "ERROR";
 declare const MAX_OBSERVABILITY_BACKFILL = 500;
 type ObservabilityLogEntry = {
     ts: number;
-    level: LogLevel | "DEBUG";
+    level: LogLevel;
     eventType: string;
     message: string;
     traceId?: string;
@@ -921,6 +1012,8 @@ type ObservabilityErrorMessage = {
 };
 type ObservabilityServerMessage = ObservabilityReadyMessage | ObservabilityBackfillMessage | ObservabilityLogMessage | ObservabilitySpanMessage | ObservabilityErrorMessage;
 declare function isObservabilityClientMessage(v: unknown): v is ObservabilityClientMessage;
+/** Narrow an unknown wire value to a LogLevel. */
+declare function isLogLevel(value: unknown): value is LogLevel;
 /** Whether a span is a top-level run, each of which owns its own trace. */
 declare function isRootSpanKind(kind: ObservabilitySpanRow["kind"]): boolean;
 
@@ -1188,7 +1281,7 @@ interface AccountPolicy {
     policyId: string;
     name: string;
     description?: string;
-    document: AgentPolicyDocument;
+    document: PolicyDocument;
     status: string;
     createdAt: string;
     updatedAt: string;
@@ -1223,9 +1316,8 @@ interface ChannelRecordConfig {
         name: string;
         workspaceId: string;
     }>;
-    policyIds?: string[];
-    /** Enforcement stage here. `audit` watches a rule before it refuses anyone. */
-    policyMode?: "enforce" | "audit";
+    /** Added to whatever the agent already carries. Each policy holds its own mode. */
+    policies?: string[];
     /**
      * Tool names withheld in this channel, applied after the tool set is built —
      * so it also covers sandbox tools (`bash`, `read`, …) that `config.tools`
@@ -1233,18 +1325,18 @@ interface ChannelRecordConfig {
      */
     denyTools?: string[];
     /**
-     * Where the reply lands. `inline` answers in the channel and threads only
-     * when the message already did. Slack only — no other provider gives the
-     * runtime a second place to reply.
+     * Where the reply lands. `source` answers wherever the message came from, and
+     * threads only when the message already did. Slack only — no other provider
+     * gives the runtime a second place to reply.
      */
-    threadPolicy?: "always-thread" | "inline";
+    replyIn?: ChannelReplyIn;
     workspaceScope?: AgentChannelWorkspaceScope;
     /** Images the agent may stand a sandbox up from for a thread here. */
     sandboxImages?: string[];
-    /** Named groups of people, readable from policy conditions as `actorRoles`. */
+    /** Named groups of people, readable from policy conditions as `userRoles`. */
     tagRoles?: Array<{
         roleId: string;
-        actorIds: string[];
+        userIds: string[];
     }>;
 }
 /** The stage a tool belongs to. Tools with the same name in two stages are two tools. */
@@ -1453,14 +1545,14 @@ declare class BroodsAccountClient {
     createPolicy(input: {
         name: string;
         description?: string;
-        document: AgentPolicyDocument;
+        document: PolicyDocument;
     }): Promise<AccountPolicy>;
     getPolicy(policyId: string): Promise<AccountPolicy | null>;
     /** PATCH a policy. `description: null` clears it. Returns null when the policy is gone. */
     updatePolicy(policyId: string, patch: {
         name?: string;
         description?: string | null;
-        document?: AgentPolicyDocument;
+        document?: PolicyDocument;
         status?: string;
     }): Promise<AccountPolicy | null>;
     deletePolicy(policyId: string): Promise<boolean>;
@@ -1596,7 +1688,7 @@ declare function toWebSocketBaseUrl(url: string): string;
 
 declare const RESOURCE_MARKER: unique symbol;
 declare const CONFIG_MARKER: unique symbol;
-declare const CHANNEL_MARKER: unique symbol;
+declare const CONNECTION_MARKER: unique symbol;
 interface EnvRef<Name extends string = string> {
     readonly __beeblastEnv: true;
     readonly name: Name;
@@ -1703,46 +1795,148 @@ interface ToolDefinitionConfig<Input = Record<string, unknown>> {
      */
     defaultConfig?: Record<string, unknown>;
 }
-type PolicyDefinitionConfig = Omit<AgentPolicyDocument, "version"> & {
-    version?: AgentPolicyDocument["version"];
+type PolicyDefinitionConfig = Omit<PolicyDocument, "version"> & {
+    version?: PolicyDocument["version"];
 };
 type ChannelType = "telegram" | "github" | "slack" | "discord" | "pancake" | "zalo";
-interface ChannelDefinition<Type extends ChannelType, Config> {
-    readonly [CHANNEL_MARKER]: true;
-    readonly kind: "channel";
+/**
+ * A connection is one app install: the credentials an agent needs before a
+ * provider can reach it at all. Channels point at a connection; a connection
+ * never points back, which is what keeps the reference graph acyclic.
+ */
+interface ConnectionDefinition<Type extends ChannelType, Config> {
+    readonly [CONNECTION_MARKER]: true;
+    readonly kind: "connection";
     readonly type: Type;
-    readonly workspaceScope?: AgentChannelWorkspaceScope;
-    readonly config: Config;
+    readonly partition?: ChannelPartition;
+    /** `partition` is lifted out of the authored input, so it is not in here. */
+    readonly config: Omit<Config, "partition">;
 }
+/**
+ * How an attached partitioned workspace splits its folders for runs arriving
+ * through this door. `shared` mounts the workspace root; `conversation` mounts
+ * a private child folder per thread, issue or chat under `alias`.
+ */
+type ChannelPartition = {
+    by: "shared";
+    alias?: never;
+} | {
+    by: "conversation";
+    alias: string;
+};
+/**
+ * An agent bound to a channel. Every bound agent runs when a message arrives;
+ * `reply: false` runs it with a silenced channel, so it can work without
+ * speaking in the room.
+ */
+type ChannelAgentInput = AgentResource | {
+    agent: AgentResource;
+    reply?: boolean;
+};
 type RequiredChannelKeys<Config, Keys extends keyof Config> = Required<Pick<Config, Keys>> & Omit<Config, Keys>;
 type ChannelSecret = string | EnvRef | undefined;
-type ChannelIdentityInput = {
+type ConnectionIdentityInput = {
+    /** Include the dashboard trace link in channel replies. Off by default. */
     trace?: "enabled" | "disabled";
-    workspaceScope?: AgentChannelWorkspaceScope;
+    partition?: ChannelPartition;
+    /**
+     * Rooms this connection answers in, on top of every channel declared against
+     * it. Use `["*"]` to answer everywhere instead, which is the only reason to
+     * name rooms here at all: a room with rules belongs in a channel resource.
+     */
+    allowedChannelIds?: readonly string[];
+    /** Provider user ids allowed to trigger the agent. `["*"]` or omitted is everyone. */
+    allowedUserIds?: readonly string[];
 };
-type TelegramChannelInput = EnvRefString<RequiredChannelKeys<Pick<AgentTelegramChannelConfig, "apiUrl" | "botToken" | "webhookSecret" | "allowedChatIds" | "reactionEmoji">, "botToken" | "webhookSecret" | "allowedChatIds">> & ChannelIdentityInput;
-type GitHubChannelInput = EnvRefString<RequiredChannelKeys<Pick<AgentGitHubChannelConfig, "apiUrl" | "webhookSecret" | "appId" | "privateKey" | "allowedRepos" | "userName" | "botUserId" | "triggerOnIssueOpen" | "triggerOnPROpen">, "webhookSecret" | "appId" | "privateKey">> & ChannelIdentityInput;
-type SlackChannelInput = EnvRefString<RequiredChannelKeys<Pick<AgentSlackChannelConfig, "apiUrl" | "botToken" | "signingSecret" | "allowedChannelIds" | "reactionEmoji">, "botToken" | "signingSecret">> & ChannelIdentityInput;
-type DiscordChannelInput = EnvRefString<RequiredChannelKeys<Pick<AgentDiscordChannelConfig, "apiUrl" | "botToken" | "publicKey" | "allowedGuildIds" | "botUserId" | "mentionRoleIds">, "botToken" | "publicKey">> & ChannelIdentityInput;
-interface PancakeChannelInput extends ChannelIdentityInput {
+type TelegramConnectionInput = EnvRefString<RequiredChannelKeys<Pick<AgentTelegramChannelConfig, "apiUrl" | "botToken" | "webhookSecret" | "reactionEmoji">, "botToken" | "webhookSecret">> & ConnectionIdentityInput;
+type GitHubConnectionInput = EnvRefString<RequiredChannelKeys<Pick<AgentGitHubChannelConfig, "apiUrl" | "webhookSecret" | "appId" | "privateKey" | "userName" | "botUserId" | "triggerOnIssueOpen" | "triggerOnPROpen">, "webhookSecret" | "appId" | "privateKey">> & ConnectionIdentityInput;
+type SlackConnectionInput = EnvRefString<RequiredChannelKeys<Pick<AgentSlackChannelConfig, "apiUrl" | "botToken" | "signingSecret" | "reactionEmoji">, "botToken" | "signingSecret">> & ConnectionIdentityInput;
+type DiscordConnectionInput = EnvRefString<RequiredChannelKeys<Pick<AgentDiscordChannelConfig, "apiUrl" | "botToken" | "publicKey" | "botUserId" | "mentionRoleIds">, "botToken" | "publicKey">> & ConnectionIdentityInput;
+interface PancakeConnectionInput extends ConnectionIdentityInput {
     pageId: ChannelSecret;
     pageAccessToken: ChannelSecret;
     webhookSecret: ChannelSecret;
     senderId?: string | EnvRef;
 }
-interface ZaloChannelInput extends ChannelIdentityInput {
+interface ZaloConnectionInput extends ConnectionIdentityInput {
     botToken: ChannelSecret;
     webhookSecret: ChannelSecret;
-    allowedUserIds?: readonly (string | EnvRef)[];
-    allowedGroupIds?: readonly (string | EnvRef)[];
-}
-type TelegramChannelDefinition = ChannelDefinition<"telegram", TelegramChannelInput>;
-type GitHubChannelDefinition = ChannelDefinition<"github", GitHubChannelInput>;
-type SlackChannelDefinition = ChannelDefinition<"slack", SlackChannelInput>;
-type DiscordChannelDefinition = ChannelDefinition<"discord", DiscordChannelInput>;
-type PancakeChannelDefinition = ChannelDefinition<"pancake", PancakeChannelInput>;
-type ZaloChannelDefinition = ChannelDefinition<"zalo", ZaloChannelInput>;
-type AnyChannelDefinition = TelegramChannelDefinition | GitHubChannelDefinition | SlackChannelDefinition | DiscordChannelDefinition | PancakeChannelDefinition | ZaloChannelDefinition;
+}
+type TelegramConnectionDefinition = ConnectionDefinition<"telegram", TelegramConnectionInput>;
+type GitHubConnectionDefinition = ConnectionDefinition<"github", GitHubConnectionInput>;
+type SlackConnectionDefinition = ConnectionDefinition<"slack", SlackConnectionInput>;
+type DiscordConnectionDefinition = ConnectionDefinition<"discord", DiscordConnectionInput>;
+type PancakeConnectionDefinition = ConnectionDefinition<"pancake", PancakeConnectionInput>;
+type ZaloConnectionDefinition = ConnectionDefinition<"zalo", ZaloConnectionInput>;
+type AnyConnectionDefinition = TelegramConnectionDefinition | GitHubConnectionDefinition | SlackConnectionDefinition | DiscordConnectionDefinition | PancakeConnectionDefinition | ZaloConnectionDefinition;
+/**
+ * One real place a team talks: a Slack channel, a Discord channel, a repo. It
+ * narrows and adds — instructions append, policies union, tools and workspaces
+ * only narrow — and never grants what a bound agent lacks. It names the
+ * connection it belongs to, so `platform` is never written by hand.
+ */
+type ChannelDefinitionConfig = {
+    connection: AnyConnectionDefinition;
+    /** Provider id of the place, from the per-platform field on the input. */
+    externalId: string;
+    /** Team, guild or repo owner the place sits in, when the provider has one. */
+    workspaceRef?: string;
+    /** Every one of these runs. Omit and the connection's own agent answers. */
+    agents?: readonly ChannelAgentInput[];
+    /** Appended after each agent's own system prompt, never replacing it. */
+    instructions?: string;
+    /** Selects from what the agent already attaches; anything else is dropped. */
+    workspaces?: readonly AgentWorkspaceInput[];
+    /** Added to whatever the agent already carries. Each policy holds its own mode. */
+    policies?: readonly (PolicyResource | string)[];
+    denyTools?: readonly string[];
+    /** Where the reply lands. Slack only. */
+    replyIn?: ChannelReplyIn;
+    partition?: ChannelPartition;
+    sandboxImages?: readonly string[];
+    tagRoles?: readonly {
+        roleId: string;
+        userIds: readonly string[];
+    }[];
+};
+/** Rules shared by every channel, whatever the provider calls its rooms. */
+type ChannelRulesInput = Omit<ChannelDefinitionConfig, "connection" | "externalId" | "workspaceRef" | "replyIn">;
+type SlackChannelInput = ChannelRulesInput & {
+    connection: SlackConnectionDefinition;
+    /** Slack channel id, e.g. "C0123ABCD". */
+    channelId: string;
+    /** Slack team id the channel sits in. */
+    teamId?: string;
+    /** Where the reply lands. Slack is the only provider with a choice. */
+    replyIn?: ChannelReplyIn;
+};
+type DiscordChannelInput = ChannelRulesInput & {
+    connection: DiscordConnectionDefinition;
+    /** Discord channel id (a snowflake). */
+    channelId: string;
+    /** Guild the channel sits in. */
+    guildId?: string;
+};
+type GitHubChannelInput = ChannelRulesInput & {
+    connection: GitHubConnectionDefinition;
+    /** Repository full name, e.g. "beeblast/api". */
+    repo: string;
+};
+type TelegramChannelInput = ChannelRulesInput & {
+    connection: TelegramConnectionDefinition;
+    /** Telegram chat id, e.g. "-1001234567". */
+    chatId: string;
+};
+type ZaloChannelInput = ChannelRulesInput & {
+    connection: ZaloConnectionDefinition;
+    /** Zalo user or group chat id. */
+    chatId: string;
+};
+type PancakeChannelInput = ChannelRulesInput & {
+    connection: PancakeConnectionDefinition;
+    /** Pancake conversation id. */
+    conversationId: string;
+};
 /**
  * Per-agent workspace mount with an optional sandbox override. A bare
  * `defineWorkspace(...)` inherits the agent-level sandbox; the object form lets
@@ -1890,9 +2084,6 @@ interface AgentHooks {
         text?: string;
     }>;
 }
-type AgentPolicyDefinitionConfig = Omit<AgentPolicyConfig, "policyIds"> & {
-    policies?: readonly (PolicyResource | string)[];
-};
 /**
  * Code-first agent config surface. Built from an explicit `Pick` of `AgentConfig`
  * (not `Omit`) so the SDK input type does NOT inherit `AgentConfig`'s
@@ -1902,26 +2093,18 @@ type AgentPolicyDefinitionConfig = Omit<AgentPolicyConfig, "policyIds"> & {
  * gains a new top-level field that should be code-definable.
  */
 /**
- * SDK-facing model-provider constructor settings. Written as an explicit
- * interface — NOT `EnvRefString<AgentProviderSettings>` — because TypeScript
- * suppresses excess-property checks through mapped types, which would let a
- * typo like the camel `baseUrl` (instead of `base_url`/`baseURL`) slip past
- * `tsc`. Keep the keys in lockstep with core's `AgentProviderSettings`; the
- * `_ProviderKeyParity` assertion below fails `broods check` if they drift.
- * Every string field also accepts an `env("NAME")` reference.
+ * SDK-facing model-provider constructor settings. Open by design: everything a
+ * provider's Vercel AI SDK factory accepts is forwarded verbatim, so there is no
+ * key list to keep in sync. Only the keys broods reads itself are named (and so
+ * typo-checked at run time by `validateProviderConfig`); every string field also
+ * accepts an `env("NAME")` reference.
  */
 interface ProviderSettingsInput {
     apiKey?: string | EnvRef;
     base_url?: string | EnvRef;
     baseURL?: string | EnvRef;
     headers?: Record<string, string | EnvRef>;
-    organization?: string | EnvRef;
-    project?: string | EnvRef;
-    name?: string | EnvRef;
-    region?: string | EnvRef;
-    accessKeyId?: string | EnvRef;
-    secretAccessKey?: string | EnvRef;
-    sessionToken?: string | EnvRef;
+    [key: string]: unknown;
 }
 /** Per-provider settings; provider names stay synced with core's `AgentConfig`. */
 type ProviderConfigInput = Partial<Record<keyof NonNullable<AgentConfig["provider"]>, ProviderSettingsInput>>;
@@ -1932,12 +2115,13 @@ type AgentDefinitionConfig = EnvRefString<Pick<AgentConfig, "agent" | "model" |
     hooks?: AgentHooks & {
         webhooks?: readonly EnvRefString<AgentWebhookHookConfig>[];
     };
-    channels?: readonly AnyChannelDefinition[];
+    connections?: readonly AnyConnectionDefinition[];
     sandbox?: SandboxResource | string;
     workspaces?: readonly AgentWorkspaceInput[];
     subagent?: AgentSubagentDefinitionConfig;
     skills?: AgentSkillsDefinitionConfig;
-    policy?: AgentPolicyDefinitionConfig;
+    /** Policies that gate this agent. Each one carries its own enforcement mode. */
+    policies?: readonly (PolicyResource | string)[];
     /**
      * Opt the agent into the public runtime endpoint (SSE/WebSocket via the
      * stage runtime key). Off by default — secured: when unset the public
@@ -1949,45 +2133,24 @@ type AgentDefinitionConfig = EnvRefString<Pick<AgentConfig, "agent" | "model" |
 type CronDefinitionConfig = Omit<CreateCronInput, "agentId" | "name"> & {
     agent: AgentResource | string;
 };
+type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
 /**
- * Binds one real place — a Slack channel, a Discord channel, a repo — to the
- * agent that answers there. Distinct from `channels` on an agent, which carries
- * one adapter's credentials: those say how to reach Slack, this says who replies
- * in #product-eng. A record narrows and adds, never granting what the agent lacks.
+ * Code-first workspace config. Says `partitioned` where storage says
+ * `isolation`: the flag permits a split, it does not perform one — a channel's
+ * `partition` decides which folder a run actually mounts.
  */
-type ChannelRecordDefinitionConfig = {
-    platform: ChannelType;
-    /** Provider id of the place: a Slack channel id, or an owner/repo. */
-    externalId: string;
-    /** Team or guild the place sits in, when the provider has one. */
-    workspaceRef?: string;
-    /** Who answers here. The first is the default when a turn matches no other. */
-    agents: readonly (AgentResource | string)[];
-    /** Appended after the bound agent's own system prompt. */
-    instructions?: string;
-    /** Selects from what the agent already attaches; anything else is dropped. */
-    workspaces?: readonly AgentWorkspaceInput[];
-    policies?: readonly (PolicyResource | string)[];
-    policyMode?: AgentPolicyConfig["mode"];
-    denyTools?: readonly string[];
-    /** Where the reply lands. Slack only — see the channel-records docs. */
-    threadPolicy?: "always-thread" | "inline";
-    workspaceScope?: AgentChannelWorkspaceScope;
-    sandboxImages?: readonly string[];
-    tagRoles?: readonly {
-        roleId: string;
-        actorIds: readonly string[];
-    }[];
+type WorkspaceDefinitionConfig = Omit<WorkspaceConfig, "isolation"> & {
+    /** Allow this workspace to be split into per-conversation folders. */
+    partitioned?: boolean;
 };
-type AgentResource<Name extends string = string> = ResourceDefinition<"agent", Name, AgentDefinitionConfig>;
-type WorkspaceResource<Name extends string = string> = ResourceDefinition<"workspace", Name, WorkspaceConfig>;
+type WorkspaceResource<Name extends string = string> = ResourceDefinition<"workspace", Name, WorkspaceDefinitionConfig>;
 type SandboxResource<Name extends string = string> = ResourceDefinition<"sandbox", Name, SandboxDefinitionConfig>;
 type SkillResource<Name extends string = string> = ResourceDefinition<"skill", Name, SkillDefinitionConfig>;
 type ToolResource<Name extends string = string> = ResourceDefinition<"tool", Name, ToolDefinitionConfig>;
 type PolicyResource<Name extends string = string> = ResourceDefinition<"policy", Name, PolicyDefinitionConfig>;
 type CronResource<Name extends string = string> = ResourceDefinition<"cron", Name, CronDefinitionConfig>;
-type ChannelRecordResource<Name extends string = string> = ResourceDefinition<"channelRecord", Name, ChannelRecordDefinitionConfig>;
-type AnyResource = AgentResource | WorkspaceResource | SandboxResource | CronResource | SkillResource | ToolResource | PolicyResource | ChannelRecordResource;
+type ChannelResource<Name extends string = string> = ResourceDefinition<"channelRecord", Name, ChannelDefinitionConfig>;
+type AnyResource = AgentResource | WorkspaceResource | SandboxResource | CronResource | SkillResource | ToolResource | PolicyResource | ChannelResource;
 /**
  * References an account/environment variable resolved on the SERVER at runtime —
  * set it with `broods env set <NAME>` or in the dashboard (the Convex-style
@@ -2001,27 +2164,32 @@ type AnyResource = AgentResource | WorkspaceResource | SandboxResource | CronRes
  * bake the literal local value into the deployed config instead of deferring it.
  */
 declare const env: EnvAccessor;
-declare function defineTelegramChannel(config: TelegramChannelInput): TelegramChannelDefinition;
-declare function defineGitHubChannel(config: GitHubChannelInput): GitHubChannelDefinition;
-declare function defineSlackChannel(config: SlackChannelInput): SlackChannelDefinition;
-declare function defineDiscordChannel(config: DiscordChannelInput): DiscordChannelDefinition;
-declare function definePancakeChannel(config: PancakeChannelInput): PancakeChannelDefinition;
-declare function defineZaloChannel(config: ZaloChannelInput): ZaloChannelDefinition;
+declare function defineDiscordConnection(config: DiscordConnectionInput): DiscordConnectionDefinition;
+declare function defineGitHubConnection(config: GitHubConnectionInput): GitHubConnectionDefinition;
+declare function definePancakeConnection(config: PancakeConnectionInput): PancakeConnectionDefinition;
+declare function defineSlackConnection(config: SlackConnectionInput): SlackConnectionDefinition;
+declare function defineTelegramConnection(config: TelegramConnectionInput): TelegramConnectionDefinition;
+declare function defineZaloConnection(config: ZaloConnectionInput): ZaloConnectionDefinition;
+declare function defineDiscordChannel<const Name extends string>(input: ResourceInput<Name, DiscordChannelInput>): ChannelResource<Name>;
+declare function defineGitHubChannel<const Name extends string>(input: ResourceInput<Name, GitHubChannelInput>): ChannelResource<Name>;
+declare function definePancakeChannel<const Name extends string>(input: ResourceInput<Name, PancakeChannelInput>): ChannelResource<Name>;
+declare function defineSlackChannel<const Name extends string>(input: ResourceInput<Name, SlackChannelInput>): ChannelResource<Name>;
+declare function defineTelegramChannel<const Name extends string>(input: ResourceInput<Name, TelegramChannelInput>): ChannelResource<Name>;
+declare function defineZaloChannel<const Name extends string>(input: ResourceInput<Name, ZaloChannelInput>): ChannelResource<Name>;
 declare function defineBroods(config: BroodsProjectConfig): BroodsConfigDefinition;
 declare function defineAgent<const Name extends string>(input: ResourceInput<Name, AgentDefinitionConfig>): AgentResource<Name>;
 declare function defineHarness<const Definition extends HarnessDefinition>(definition: Definition): Definition;
-declare function defineWorkspace<const Name extends string>(input: ResourceInput<Name, WorkspaceConfig>): WorkspaceResource<Name>;
+declare function defineWorkspace<const Name extends string>(input: ResourceInput<Name, WorkspaceDefinitionConfig>): WorkspaceResource<Name>;
 declare function defineSandbox<const Name extends string>(input: ResourceInput<Name, SandboxDefinitionConfig>): SandboxResource<Name>;
 declare function defineSkill<const Name extends string>(input: ResourceInput<Name, SkillDefinitionConfig>): SkillResource<Name>;
 declare function defineTool<const Name extends string, Input = Record<string, unknown>>(input: {
     name: Name;
 } & ToolDefinitionConfig<Input>): ToolResource<Name>;
 declare function definePolicy<const Name extends string>(input: ResourceInput<Name, PolicyDefinitionConfig>): PolicyResource<Name>;
-declare function defineChannelRecord<const Name extends string>(input: ResourceInput<Name, ChannelRecordDefinitionConfig>): ChannelRecordResource<Name>;
 declare function defineCron<const Name extends string>(input: ResourceInput<Name, CronDefinitionConfig>): CronResource<Name>;
 declare function isResource(value: unknown): value is AnyResource;
-declare function isChannelDefinition(value: unknown): value is AnyChannelDefinition;
+declare function isConnectionDefinition(value: unknown): value is AnyConnectionDefinition;
 declare function isBroodsConfig(value: unknown): value is BroodsConfigDefinition;
 
-export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineChannelRecord, defineCron, defineDiscordChannel, defineGitHubChannel, defineHarness, definePancakeChannel, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineTelegramChannel, defineTool, defineWorkspace, defineZaloChannel, env, envPlaceholder, isBroodsConfig, isChannelDefinition, isObservabilityClientMessage, isResource, isRootSpanKind, normalizeHttpServiceUrl, readSseStream, resolveRunEvents, toWebSocketBaseUrl };
-export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountPolicy, AccountSandbox, AccountTool, AccountWorkspace, Agent, AgentChannelWorkspaceScope, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentPolicyConfig, AgentPolicyDefinitionConfig, AgentPolicyDocument, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyChannelDefinition, AnyResource, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelDefinition, ChannelMessageReceived, ChannelRecordConfig, ChannelRecordDefinitionConfig, ChannelRecordResource, ChannelReference, ChannelType, CliManifest, CliManifestResource, CliResourceKind, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateToolInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, CustomTool, DeleteAccountResult, DiscordChannelDefinition, DiscordChannelInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelDefinition, GitHubChannelInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelDefinition, PancakeChannelInput, PancakeMessageSource, PancakeSource, PolicyDefinitionConfig, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelDefinition, SlackChannelInput, SlackMessageSource, SlackSource, StageDoc, TelegramChannelDefinition, TelegramChannelInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, ToolDefinitionConfig, ToolExecuteContext, ToolExecuteOptions, ToolResource, ToolScope, UpdateAgentInput, UpdateCronInput, UpdateToolInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceFileEntry, WorkspaceResource, ZaloChannelDefinition, ZaloChannelInput, ZaloMessageSource, ZaloSource };
+export { BroodsAccountApiError, BroodsAccountClient, BroodsClient, BroodsWebSocketClient, DEFAULT_CORE_BASE_URL, IngressAcceptedError, MAX_OBSERVABILITY_BACKFILL, BroodsWebSocketClient as WebSocketClient, BroodsWebSocketClient as WebsocketClient, defineAgent, defineBroods, defineCron, defineDiscordChannel, defineDiscordConnection, defineGitHubChannel, defineGitHubConnection, defineHarness, definePancakeChannel, definePancakeConnection, definePolicy, defineSandbox, defineSkill, defineSlackChannel, defineSlackConnection, defineTelegramChannel, defineTelegramConnection, defineTool, defineWorkspace, defineZaloChannel, defineZaloConnection, env, envPlaceholder, isBroodsConfig, isConnectionDefinition, isLogLevel, isObservabilityClientMessage, isResource, isRootSpanKind, normalizeHttpServiceUrl, readSseStream, resolveRunEvents, toWebSocketBaseUrl };
+export type { Account, AccountAgent, AccountChannel, AccountEnvVar, AccountPolicy, AccountSandbox, AccountTool, AccountWorkspace, Agent, AgentChannelWorkspaceScope, AgentChannelsConfig, AgentCodeHookConfig, AgentConfig, AgentConfigDoc, AgentDefinitionConfig, AgentDiscordChannelConfig, AgentGitHubChannelConfig, AgentHandle, AgentHookEventName, AgentHooks, AgentHooksConfig, AgentPancakeChannelConfig, AgentProviderSettings, AgentReference, AgentResource, AgentRunEventInput, AgentRunInput, AgentRunModelOverrides, AgentRunOverrides, AgentRunResult, AgentSkillsDefinitionConfig, AgentSlackChannelConfig, AgentStreamPart, AgentSubagentDefinitionConfig, AgentTelegramChannelConfig, AgentWebhookHookConfig, AgentWorkspaceInput, AgentWorkspaceRef, AgentWorkspaceRefInput, AgentZaloChannelConfig, AnyConnectionDefinition, AnyResource, AsyncAgentRun, AsyncPollOptions, AsyncRequestAccepted, AsyncStatus, BroodsAccount, BroodsAccountClientOptions, BroodsClientOptions, BroodsConfigDefinition, BroodsProjectConfig, BroodsWebSocketClientOptions, ChannelAgentInput, ChannelDefinitionConfig, ChannelMessageReceived, ChannelPartition, ChannelRecordConfig, ChannelReference, ChannelReplyIn, ChannelResource, ChannelType, CliManifest, CliManifestResource, CliResourceKind, ConnectionDefinition, CreateAgentResult, CreateClientCronInput, CreateCronInput, CreateToolInput, Cron, CronDefinitionConfig, CronDoc, CronLastStatus, CronResource, CronRun, CronStatus, CustomTool, DeleteAccountResult, DiscordChannelInput, DiscordConnectionDefinition, DiscordConnectionInput, DiscordMessageSource, DiscordSource, Doc, EnvAccessor, EnvRef, EnvRefString, GeneratedIds, GitHubChannelInput, GitHubConnectionDefinition, GitHubConnectionInput, GitHubMessageSource, GitHubSource, HarnessDefinition, HarnessType, HookContext, Id, IngressMode, IngressStatus, LogLevel, ObservabilityBackfillMessage, ObservabilityClientMessage, ObservabilityErrorMessage, ObservabilityLogEntry, ObservabilityLogMessage, ObservabilityReadyMessage, ObservabilityServerMessage, ObservabilitySpanMessage, ObservabilitySpanRow, ObservabilitySubscribeMessage, ObservabilityUnsubscribeMessage, PancakeChannelInput, PancakeConnectionDefinition, PancakeConnectionInput, PancakeMessageSource, PancakeSource, PolicyDefinitionConfig, PolicyDocument, PolicyResource, ProjectDoc, ProviderConfigInput, ProviderSettingsInput, ResourceApi, ResourceDefinition, ResourceInput, ResourceKind, RotateSecretResult, Sandbox, SandboxConfig, SandboxConfigDoc, SandboxDefinitionConfig, SandboxLifecycleResult, SandboxResource, SandboxSnapshotResult, SandboxTerminalTicket, Skill, SkillDefinitionConfig, SkillResource, SkillUploadInput, SlackChannelInput, SlackConnectionDefinition, SlackConnectionInput, SlackMessageSource, SlackSource, StageDoc, TelegramChannelInput, TelegramConnectionDefinition, TelegramConnectionInput, TelegramMessageSource, TelegramSource, ToolApprovalSummary, ToolDefinitionConfig, ToolExecuteContext, ToolExecuteOptions, ToolResource, ToolScope, UpdateAgentInput, UpdateCronInput, UpdateToolInput, WebSocketAttachInput, WebSocketClientAttachMessage, WebSocketClientCancelMessage, WebSocketClientControlMessage, WebSocketClientExecuteMessage, WebSocketClientMessage, WebSocketConstructorLike, WebSocketHandlers, WebSocketLike, WebSocketOutputMessage, WebSocketRunInput, WebSocketServerMessage, WebSocketStreamMessage, WebSocketSubscription, Workspace, WorkspaceConfig, WorkspaceConfigDoc, WorkspaceDefinitionConfig, WorkspaceFileEntry, WorkspaceResource, ZaloChannelInput, ZaloConnectionDefinition, ZaloConnectionInput, ZaloMessageSource, ZaloSource };