codai-sdk 0.8.0 → 0.13.0

package/dist/index.d.ts

@@ -310,7 +310,7 @@ type paths$1 = {
          *     `voice`, `response_format` (default `mp3`) and `speed` are forwarded without validation — an unsupported value
          *     surfaces as a 502 from upstream. The response body is the raw audio stream; the gateway forwards the upstream
          *     `content-type` and falls back to `audio/mpeg`. Authenticates with a real key or an ephemeral token with
-         *     `scope: audio`. Billing is flat per 1k input characters and never starts a task.
+         *     `scope: audio` or `scope: live`. Billing is flat per 1k input characters and never starts a task.
          */
         readonly post: operations$1['createSpeech'];
         readonly delete?: never;
@@ -319,6 +319,40 @@ type paths$1 = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/audio/speech/stream': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Stream speech with visemes (Azure neural TTS)
+         * @description Neural text-to-speech on Azure AI Speech (`codai-tts-ro`), streamed as Server-Sent Events so an avatar can
+         *     lip-sync while the audio plays. Voices: `alina` → `ro-RO-AlinaNeural` (default), `emil` → `ro-RO-EmilNeural`, or
+         *     any Azure neural voice name (e.g. `en-US-AvaNeural`). The text is XML-escaped into SSML; `speed` (0.5-2.0) maps
+         *     to the prosody rate.
+         *
+         *     Events, in order: `start` `{type, model, voice, format, content_type, sample_rate}`; then, interleaved in
+         *     synthesis order, `audio` `{type, delta}` (base64 chunk — raw PCM16 mono 24 kHz for `pcm`, MP3 frames for `mp3`),
+         *     `viseme` `{type, id, offsetMs}` (Azure viseme id 0-21) and `word` `{type, text, offsetMs, durationMs}`; finally
+         *     `done` `{type, audio_ms, audioBytes, visemes, words}` or `error` `{type, error: {code, message}}`. `offsetMs` is
+         *     measured on the audio timeline from its first sample.
+         *
+         *     Authenticates with a real key or an ephemeral token with `scope: audio` or `scope: live`. Served from an EU
+         *     Azure region, so EU data-residency accounts may use it. Billing: $16 per 1M input characters, recorded on the
+         *     usage row when audio was produced; it never starts a task. 503 `tts_unavailable` when Azure Speech is not
+         *     configured on the gateway.
+         */
+        readonly post: operations$1['createSpeechStream'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
     readonly '/v1/audio/transcriptions': {
         readonly parameters: {
             readonly query?: never;
@@ -419,6 +453,7 @@ type paths$1 = {
          *     (max 120 chars, default `<platform> device`) and the platform from `x-codai-device-platform`
          *     (unknown values fall back to `agent`). An optional `x-codai-push-token` header on those requests upserts the
          *     FCM registration token. The raw push token is never echoed — `has_push_token` is all you get.
+         *     `online` is `true` when the device was seen in the last 2 minutes.
          */
         readonly get: operations$1['listDevices'];
         readonly put?: never;
@@ -474,6 +509,7 @@ type paths$1 = {
          *     can start without a second lookup. Never lease-gated — drain first, then claim.
          *     Replaces polling `GET /v1/sessions/{id}/controls?target=me` per session. Controls
          *     are capped at `limit` (default 200, max 500) and the global pending scan at 2000 rows.
+         *     A `mode:"open"` handoff control carries `mode: "open"`: open the session, run nothing.
          */
         readonly get: operations$1['getMyDispatchInbox'];
         readonly put?: never;
@@ -1150,6 +1186,106 @@ type paths$1 = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/images/edits': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Edit images
+         * @description Edit or vary one or more input images from a text instruction, on the same models, auth, allow-list,
+         *     spend caps and billing as `POST /v1/images/generations`. The input images (1–14; `codai-image-fast`
+         *     accepts 4) are sent to the model before the prompt; describe the change in `prompt` ("replace the
+         *     background with a sunset, keep the logo unchanged").
+         *
+         *     Send JSON (`image` is one object or an array of `{b64_json, mime_type}`) or `multipart/form-data`
+         *     OpenAI-style, with the file in `image` (or `image[]`, repeatable). `mask` is not supported and returns
+         *     400 — describe the region to change in the prompt instead. Input images are billed as input tokens at
+         *     the model's rate.
+         */
+        readonly post: operations$1['editImage'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
+    readonly '/v1/images/generations': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Generate images
+         * @description OpenAI-compatible image generation backed by the Google Gemini image family on Vertex AI. Public ids:
+         *     `codai-image` (default → `gemini-3.1-flash-image`, served from the Vertex `eu` multi-region, so prompts and
+         *     images are processed in the EU), `codai-image-fast` (→ `gemini-3.1-flash-lite-image`, `global`) and
+         *     `codai-image-pro` (→ `gemini-3-pro-image`, `global`); the raw registry ids are accepted too. The retired ids
+         *     `gemini-2.5-flash-image` (shut down by Google on 2026-10-02), `imagen-4` and `imagen-4-fast` are served as
+         *     `codai-image`. Authenticates with a real API key only — ephemeral tokens are rejected. The per-key model
+         *     allow-list applies; image models are implicitly granted wherever `codai` or `codai-image` is.
+         *
+         *     Brand consistency: `reference_images` (up to 14; `codai-image-fast` accepts 4) are sent to the model as
+         *     inline images before the prompt, so a logo, palette or product stays intact across generations. To edit an
+         *     existing image use `POST /v1/images/edits`.
+         *
+         *     Images are returned inline as base64 (`response_format: b64_json`); `url` is rejected with 400 because the
+         *     gateway does not host images. `aspect_ratio` sets the shape directly; otherwise `size` maps to one
+         *     (1024x1024 → 1:1, 1536x1024 → 3:2, 1024x1536 → 2:3, 1792x1024 → 16:9, 1024x1792 → 9:16). `image_size`
+         *     picks the resolution (`512`, `1K`, `2K`, `4K`; default `1K`; `codai-image` supports all four,
+         *     `codai-image-fast` only `1K`, `codai-image-pro` `1K`/`2K`/`4K`). The model returns one image per call, so
+         *     `n` > 1 is n parallel calls. When the upstream safety filter drops every image the response is 400 with
+         *     code `content_filtered` and nothing is charged.
+         *
+         *     Images from the EU endpoint carry C2PA content credentials (a `caBX` chunk) and a SynthID watermark. Store
+         *     the bytes as returned — re-encoding or resizing strips the C2PA manifest.
+         *
+         *     Billing is computed from the token usage the model reports, at the Vertex rates of the resolved model
+         *     (a default 1K image ≈ $0.074 on `codai-image`, ≈ $0.034 on `codai-image-fast`, ≈ $0.134 on
+         *     `codai-image-pro`; higher resolutions and reference images cost more). The charge is disclosed in
+         *     `x-codai-cost-micro-usd`, recorded as `usage_events.cost_micro_usd`, counted toward the daily and monthly
+         *     spend caps, and debited from the prepaid EUR wallet. Only images actually returned are charged. Image
+         *     calls never start a task. Typical latency is 5–30 s; the upstream timeout is 120 s.
+         */
+        readonly post: operations$1['createImage'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
+    readonly '/v1/keys/self/revoke': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Revoke the calling API key (sign out)
+         * @description The API key that authenticates this request revokes itself: it stops working at once on the instance that
+         *     served the call and within 60 seconds everywhere (principal cache TTL). Only the calling key is affected,
+         *     never another key of the same account. Clients call it on "Sign out" so a copied key cannot keep working.
+         *     A key that is already revoked fails authentication with 401, which a client can treat as "already signed
+         *     out". `revoked` is `false` only when a concurrent revoke won the race.
+         */
+        readonly post: operations$1['revokeSelfKey'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
     readonly '/v1/messages': {
         readonly parameters: {
             readonly query?: never;
@@ -1479,6 +1615,78 @@ type paths$1 = {
         readonly patch: operations$1['updateProject'];
         readonly trace?: never;
     };
+    readonly '/v1/prompts': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * List pending prompts
+         * @description Your prompts, soonest `not_before` first (prompts without one lead), then newest. `status=due` returns open prompts whose `not_before` is empty or already passed; `all` returns every status.
+         */
+        readonly get: operations$1['listPrompts'];
+        readonly put?: never;
+        /**
+         * Save a prompt for later
+         * @description Idempotent on the prompt text: posting the same text again returns the existing prompt with `200` and `created: false`. With `goal_key`, older open prompts carrying the same key become `superseded` (count in `superseded`). `not_before` accepts an ISO datetime or a bare `YYYY-MM-DD` (07:00 UTC that day).
+         */
+        readonly post: operations$1['createPrompt'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
+    readonly '/v1/prompts/{id}': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Get a prompt
+         * @description One of your prompts, including its full text.
+         */
+        readonly get: operations$1['getPrompt'];
+        readonly put?: never;
+        readonly post?: never;
+        /**
+         * Delete a prompt
+         * @description Deletes one of your prompts. Unknown, malformed or foreign ids are not an error: the response is `200` with `deleted: 0`.
+         */
+        readonly delete: operations$1['deletePrompt'];
+        readonly options?: never;
+        readonly head?: never;
+        /**
+         * Edit, snooze or close a prompt
+         * @description Changes any subset of the fields (at least one). Setting `not_before` re-arms the due reminder (snooze); `status` `done` or `dismissed` stamps `done_at`, any other status clears it. Editing `prompt` to a text another prompt of yours already has is `400`.
+         */
+        readonly patch: operations$1['updatePrompt'];
+        readonly trace?: never;
+    };
+    readonly '/v1/prompts/{id}/launch': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Start a chat from a prompt
+         * @description Opens a new shared session and sends the prompt text to a device as a `send` control (queued when the device is offline, woken by push when it has a token). The device is `device_id`, else the prompt `target_device_id`, else your freshest desktop/Android device; with none available the call is `400`. The prompt moves to `launched` with `run_session_id` set.
+         */
+        readonly post: operations$1['launchPrompt'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
     readonly '/v1/receipt': {
         readonly parameters: {
             readonly query?: never;
@@ -1703,7 +1911,7 @@ type paths$1 = {
          *     (`applied=false`) in insertion order, at most 500. `target=me` narrows to controls
          *     dispatched at the calling device (needs `x-codai-device`, else `400`); an explicit
          *     device UUID is accepted too. `target_device_id` is `null` for plain controls and set
-         *     only for Dispatch-originated ones.
+         *     only for Dispatch-originated ones; a `mode:"open"` handoff also carries `mode: "open"`.
          */
         readonly get: operations$1['listSessionControls'];
         readonly put?: never;
@@ -1727,7 +1935,7 @@ type paths$1 = {
         readonly get?: never;
         readonly put?: never;
         /**
-         * Queue a `send` for one device and wake it over FCM
+         * Queue a `send` (or an `open` handoff) for one device and wake it over FCM
          * @description Requires `editor` or higher. The target must be a device of the session OWNER
          *     (only owner devices can hold the lease), otherwise `404`. Persists a `send` control
          *     carrying `target_device_id` (idempotent on `control_id`; server-generated
@@ -1736,6 +1944,12 @@ type paths$1 = {
          *     open: the control is durable regardless and is drained by the target's next
          *     `GET …/controls?target=me` or `GET /v1/devices/me/dispatch`. The executor lease is
          *     not touched — the woken device claims (or force-claims) it itself.
+         *
+         *     `mode` (default `send`) picks what the target does. `send` requires `text` and runs
+         *     it as a new turn. `open` is a handoff: the target only opens the session — `text`
+         *     and `turn_id` are ignored, no user turn is created, the queued control is a text-less
+         *     `send` listed with `mode: "open"` (and the FCM data carries `mode: "open"`), and the
+         *     target may mark it applied without holding the executor lease.
          */
         readonly post: operations$1['dispatchToDevice'];
         readonly delete?: never;
@@ -1961,6 +2175,17 @@ type paths$1 = {
          *     When codai-s1 is disabled, down or over budget the gateway answers **503 `s1_unavailable`**
          *     and never substitutes a generative model: keep your own fallback. Usage is recorded as
          *     `codai-s1` and never starts a task.
+         *
+         *     **Batch.** Send `items: [{id, state}]` (1-16, unique ids) instead of `state` to ask the same
+         *     `questions` about several states in one call; items run concurrently and the response carries
+         *     `items: [{id, answers}]` in request order with summed `usage`. A batch is all-or-nothing.
+         *     `timeout_ms` (100-5000) overrides the gateway's default s1 budget for this call.
+         *
+         *     **Opt-in fallback.** With `fallback: "codai-fast"` an unavailable codai-s1 is answered by
+         *     codai-fast through structured output: same answer shapes, but probabilities come from a
+         *     generative model (less calibrated), `model` is `codai-fast`, `fallback_used` is `true` and the
+         *     `x-codai-s1-fallback: codai-fast` header is set. If the fallback also fails the answer is still
+         *     503 `s1_unavailable`. Omit `fallback` (or send `none`) to keep the strict contract.
          */
         readonly post: operations$1['createSystemOne'];
         readonly delete?: never;
@@ -2098,7 +2323,8 @@ type paths$1 = {
         /**
          * Mint an ephemeral scoped token
          * @description Mints a short-lived, stateless HMAC token (`codai_eph_v1.<payload>.<signature>`) bound to ONE surface —
-         *     `realtime`, `audio` or `embeddings` — for the key that calls this endpoint. Servers call it and hand the token
+         *     `realtime`, `audio` or `embeddings` — or to the `live` bundle (realtime + audio: one token for a live co-host's
+         *     speech-to-text and text-to-speech) for the key that calls this endpoint. Servers call it and hand the token
          *     to a browser or webview instead of the raw workspace key: a leaked token exposes at most one media surface for
          *     at most one hour. `ttl_seconds` is clamped to 60–3600 and defaults to 600.
          *
@@ -2316,6 +2542,52 @@ type paths$1 = {
         readonly patch?: never;
         readonly trace?: never;
     };
+    readonly '/v1/verify/agent-output': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly get?: never;
+        readonly put?: never;
+        /**
+         * Verify a signed agent output (experimental)
+         * @description **Experimental, unaudited (HIDE protocol).** Checks an `output_signature` against the signed payload
+         *     `{ v: 1, task_id, environment_id, user_id, status, result, finished_at }` rebuilt from the task object.
+         *     Provenance only; never authentication. A `key_id` that is not the current key answers
+         *     `{ valid: false, reason: unknown_key }`. Stateless, body capped at 256 KiB. Unauthenticated.
+         */
+        readonly post: operations$1['verifyAgentOutput'];
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
+    readonly '/v1/verify/agent-output/key': {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /**
+         * Public key for agent-output signatures (experimental)
+         * @description **Experimental, unaudited (HIDE protocol).** Returns the gateway's current public key for the
+         *     `output_signature` carried by finished agent tasks, so you can verify signatures offline. A signature proves
+         *     provenance of the output only; it is never an authentication mechanism. `{ enabled: false }` when output
+         *     signing is not configured on this deployment. Unauthenticated.
+         */
+        readonly get: operations$1['getAgentOutputKey'];
+        readonly put?: never;
+        readonly post?: never;
+        readonly delete?: never;
+        readonly options?: never;
+        readonly head?: never;
+        readonly patch?: never;
+        readonly trace?: never;
+    };
 };
 type components$1 = {
     schemas: {
@@ -2670,6 +2942,39 @@ type components$1 = {
             /** @enum {string} */
             readonly source: 'welcome_grant' | 'referral_referee_grant' | 'referral_referrer_grant' | 'promo_grant' | 'admin_grant' | 'admin_revoke' | 'purchase' | 'usage_charge' | 'expiry' | 'auto_topup' | 'task_refund' | 'task_success_charge' | 'credit_migration' | 'compute_charge';
         };
+        /** Agent output signing key (experimental) */
+        readonly AgentOutputKey: {
+            /** @example hide-hybrid-ed25519-mldsa65 */
+            readonly alg?: string;
+            /** @example codai.agent-output.v1 */
+            readonly context?: string;
+            /** @description `false` when output signing is not configured; the other key fields are then absent. */
+            readonly enabled: boolean;
+            readonly key_id?: string;
+            readonly note: string;
+            /** @description Base64 hybrid public key. */
+            readonly public_key?: string;
+        };
+        /** Verify agent output */
+        readonly AgentOutputVerifyRequest: {
+            /** @description The signed payload `{ v: 1, task_id, environment_id, user_id, status, result, finished_at }`. */
+            readonly payload: {
+                readonly [key: string]: unknown;
+            };
+            readonly signature: {
+                readonly key_id?: string;
+                readonly sig: string;
+            };
+        };
+        /** Agent output verification result */
+        readonly AgentOutputVerifyResult: {
+            /** @description Id of the gateway key the check ran against. */
+            readonly key_id: string;
+            readonly note: string;
+            /** @enum {string} */
+            readonly reason?: 'unknown_key';
+            readonly valid: boolean;
+        };
         /**
          * Agent run
          * @description Poll view of a persisted run (`GET /v1/agents/runs/{id}`).
@@ -3256,6 +3561,153 @@ type components$1 = {
                 readonly ok?: boolean;
             };
         };
+        /**
+         * Image aspect ratio
+         * @description Output aspect ratio. Overrides `size`.
+         * @enum {string}
+         */
+        readonly CoreImageAspectRatio: '1:1' | '2:3' | '3:2' | '3:4' | '4:3' | '4:5' | '5:4' | '9:16' | '16:9' | '21:9' | '9:21' | '1:4' | '4:1' | '1:8' | '8:1';
+        /** Generated image */
+        readonly CoreImageData: {
+            /** @description The image bytes, base64-encoded. Keep them as returned — re-encoding strips the C2PA manifest. */
+            readonly b64_json: string;
+            /**
+             * @description MIME type of the image bytes (usually `image/png`).
+             * @example image/png
+             */
+            readonly mime_type?: string;
+        };
+        /**
+         * Image edit form
+         * @description OpenAI-style multipart form for `POST /v1/images/edits`. `mask` is rejected with 400.
+         */
+        readonly CoreImageEditForm: {
+            readonly aspect_ratio?: components$1['schemas']['CoreImageAspectRatio'];
+            /** @description Input image file(s); the field may also be named `image[]` and repeated. */
+            readonly image: readonly string[];
+            readonly image_size?: components$1['schemas']['CoreImageSize'];
+            /**
+             * @description Image model, same ids as the JSON body.
+             * @default codai-image
+             */
+            readonly model?: string;
+            /** @default 1 */
+            readonly n?: number;
+            readonly negative_prompt?: string;
+            /** @description The edit to apply, in words. */
+            readonly prompt: string;
+            /** @enum {string} */
+            readonly response_format?: 'b64_json';
+            /** @description OpenAI-style size, mapped to an aspect ratio. */
+            readonly size?: string;
+        };
+        /**
+         * Image edit request
+         * @description JSON body for `POST /v1/images/edits`. Unknown fields are accepted and ignored.
+         */
+        readonly CoreImageEditRequest: {
+            readonly aspect_ratio?: components$1['schemas']['CoreImageAspectRatio'];
+            /** @description One input image, or up to 14 (per-model limit; `codai-image-fast` accepts 4). */
+            readonly image: components$1['schemas']['CoreImageInput'] | readonly components$1['schemas']['CoreImageInput'][];
+            readonly image_size?: components$1['schemas']['CoreImageSize'];
+            /**
+             * @description Image model, same ids as `POST /v1/images/generations`.
+             * @default codai-image
+             * @enum {string}
+             */
+            readonly model?: 'codai-image' | 'codai-image-fast' | 'codai-image-pro' | 'gemini-3.1-flash-image' | 'gemini-3.1-flash-lite-image' | 'gemini-3-pro-image' | 'gemini-2.5-flash-image' | 'imagen-4' | 'imagen-4-fast';
+            /**
+             * @description Number of edited images to return.
+             * @default 1
+             */
+            readonly n?: number;
+            /** @description What the result should not contain; appended to the prompt as an exclusion. */
+            readonly negative_prompt?: string;
+            /**
+             * @description The edit to apply, in words (what to change and what to keep).
+             * @example replace the background with a soft sunset gradient, keep the logo unchanged
+             */
+            readonly prompt: string;
+            /**
+             * @description Only `b64_json` is supported.
+             * @enum {string}
+             */
+            readonly response_format?: 'b64_json';
+            /**
+             * @description OpenAI-style size, mapped to an aspect ratio. Ignored when `aspect_ratio` is set.
+             * @enum {string}
+             */
+            readonly size?: '1024x1024' | '1536x1024' | '1024x1536' | '1792x1024' | '1024x1792';
+        } & {
+            readonly [key: string]: unknown;
+        };
+        /** Input image */
+        readonly CoreImageInput: {
+            /** @description The image bytes, base64-encoded (at most 7 MB decoded). */
+            readonly b64_json: string;
+            /**
+             * @description MIME type of the image bytes.
+             * @default image/png
+             * @enum {string}
+             */
+            readonly mime_type?: 'image/png' | 'image/jpeg' | 'image/webp' | 'image/heic' | 'image/heif';
+        };
+        /**
+         * Image resolution
+         * @description Output resolution. `codai-image` supports all four, `codai-image-fast` only `1K`, `codai-image-pro` `1K`, `2K` and `4K`; an unsupported value is 400.
+         * @default 1K
+         * @enum {string}
+         */
+        readonly CoreImageSize: '512' | '1K' | '2K' | '4K';
+        /**
+         * Image generation request
+         * @description OpenAI-compatible image generation body. Unknown fields are accepted and ignored.
+         */
+        readonly CoreImagesRequest: {
+            readonly aspect_ratio?: components$1['schemas']['CoreImageAspectRatio'];
+            readonly image_size?: components$1['schemas']['CoreImageSize'];
+            /**
+             * @description Image model. `codai-image` → `gemini-3.1-flash-image` (EU), `codai-image-fast` → `gemini-3.1-flash-lite-image`, `codai-image-pro` → `gemini-3-pro-image`. `gemini-2.5-flash-image`, `imagen-4` and `imagen-4-fast` are retired upstream and served as `codai-image`.
+             * @default codai-image
+             * @enum {string}
+             */
+            readonly model?: 'codai-image' | 'codai-image-fast' | 'codai-image-pro' | 'gemini-3.1-flash-image' | 'gemini-3.1-flash-lite-image' | 'gemini-3-pro-image' | 'gemini-2.5-flash-image' | 'imagen-4' | 'imagen-4-fast';
+            /**
+             * @description Number of images to generate.
+             * @default 1
+             */
+            readonly n?: number;
+            /** @description What the image should not contain; appended to the prompt as an exclusion. */
+            readonly negative_prompt?: string;
+            /**
+             * @description Text description of the image to generate.
+             * @example flat minimalist logo of a paper plane, two colours, white background
+             */
+            readonly prompt: string;
+            /** @description Images the model must stay consistent with (logo, palette, product, character), sent before the prompt. Per-model limit — `codai-image-fast` accepts 4, the others 14. */
+            readonly reference_images?: readonly components$1['schemas']['CoreImageInput'][];
+            /**
+             * @description Only `b64_json` is supported; `url` is rejected because the gateway does not host images.
+             * @enum {string}
+             */
+            readonly response_format?: 'b64_json';
+            /**
+             * @description OpenAI-style size, mapped to an aspect ratio (1:1, 3:2, 2:3, 16:9, 9:16). Ignored when `aspect_ratio` is set.
+             * @default 1024x1024
+             * @enum {string}
+             */
+            readonly size?: '1024x1024' | '1536x1024' | '1024x1536' | '1792x1024' | '1024x1792';
+            /** @description OpenAI tracking field; accepted and ignored. */
+            readonly user?: string;
+        } & {
+            readonly [key: string]: unknown;
+        };
+        /** Image generation response */
+        readonly CoreImagesResponse: {
+            /** @description Unix timestamp (seconds) of when the images were generated. */
+            readonly created: number;
+            readonly data: readonly components$1['schemas']['CoreImageData'][];
+        };
         /** Model */
         readonly CoreModel: {
             /** @description Non-OpenAI extension with routing and capability flags. */
@@ -3400,7 +3852,7 @@ type components$1 = {
         /** Ephemeral token request */
         readonly CoreTokenRequest: {
             /**
-             * @description Surface the token may reach. Only `realtime`, `audio` and `embeddings` are accepted; anything else is 400.
+             * @description Surface the token may reach. Only `realtime`, `audio`, `embeddings` and `live` (realtime + audio) are accepted; anything else is 400.
              * @example realtime
              */
             readonly scope: string;
@@ -3419,7 +3871,7 @@ type components$1 = {
              */
             readonly expires_at: string;
             /** @enum {string} */
-            readonly scope: 'realtime' | 'audio' | 'embeddings';
+            readonly scope: 'realtime' | 'audio' | 'embeddings' | 'live';
             /**
              * @description Bearer credential of the form `codai_eph_v1.<payload>.<signature>`. Pass it as `Authorization: Bearer` or as `?key=` on `/v1/realtime`.
              * @example codai_eph_v1.eyJraWQiOiIuLi4ifQ.c2lnbmF0dXJl
@@ -3516,6 +3968,8 @@ type components$1 = {
              * @example Pixel 9 Pro
              */
             readonly name: string;
+            /** @description `true` when `lastSeenAt` is within the last 2 minutes (any request carrying this device id bumps it). A future `lastSeenAt` (clock skew) counts as online. */
+            readonly online: boolean;
             readonly platform: components$1['schemas']['DevicePlatform'];
         };
         /**
@@ -3808,7 +4262,7 @@ type components$1 = {
             readonly visibility: components$1['schemas']['PortVisibility'];
         };
         /**
-         * @description `byo` (bring your own machine; the daemon enrols with a token) is open to every key. `openstack` / `hetzner` are managed by the worker and billed hourly; `gce` is the GPU provider (size `gpu-l4`, Spot, 30-minute cap), available only where the deployment enables it; `local` is a developer convenience. Managed providers answer 403 until enabled for your key.
+         * @description `byo` (bring your own machine; the daemon enrols with a token) is open to every key. `openstack` / `hetzner` are managed by the worker and billed hourly; `gce` (Google Cloud) offers on-demand CPU sizes `small`/`medium`/`large` (e2-standard-2/4/8) and the GPU size `gpu-l4` (Spot, 30-minute cap); it is available only where the deployment enables it AND to `super_admin` accounts (403 for everyone else); `local` is a developer convenience. Managed providers answer 403 until enabled for your key.
          * @enum {string}
          */
         readonly EnvironmentProvider: 'byo' | 'openstack' | 'hetzner' | 'local' | 'gce';
@@ -3893,6 +4347,12 @@ type components$1 = {
             readonly finished_at: string | null;
             /** Format: uuid */
             readonly id: string;
+            /**
+             * @description **Experimental, unaudited (HIDE protocol).** Gateway signature of the finished output, `null` while the
+             *     task runs or when signing is disabled. Provenance only, never authentication; verify with
+             *     `POST /v1/verify/agent-output`.
+             */
+            readonly output_signature: components$1['schemas']['EnvironmentTaskOutputSignature'] | null;
             readonly prompt: string;
             /** @description Filled when the task finishes; every field may be null. */
             readonly result: {
@@ -3927,6 +4387,19 @@ type components$1 = {
             /** @description What the agent should do (1..20000 characters). */
             readonly prompt: string;
         };
+        /** Agent output signature (experimental) */
+        readonly EnvironmentTaskOutputSignature: {
+            /** @example hide-hybrid-ed25519-mldsa65 */
+            readonly alg: string;
+            /** @example codai.agent-output.v1 */
+            readonly context: string;
+            /** @description 16 hex characters identifying the signing key. */
+            readonly key_id: string;
+            /** @description Base64 hybrid signature. */
+            readonly sig: string;
+            /** Format: date-time */
+            readonly signed_at: string;
+        };
         /** Queued task */
         readonly EnvironmentTaskQueued: {
             /**
@@ -4579,26 +5052,108 @@ type components$1 = {
             /** Format: uri */
             readonly repo_url?: string | null;
         };
-        /**
-         * Attached client (relay)
-         * @description A device or agent socket attached to the environment, on any relay instance.
-         */
-        readonly RelayAttachedClient: {
+        /** @description A pending prompt. Timestamps are ISO strings or `null`. */
+        readonly Prompt: {
+            readonly auto_run: boolean;
             /** Format: date-time */
-            readonly attached_at: string;
-            readonly client_id: string;
-            readonly device_id: string | null;
-            /** @enum {string} */
-            readonly kind: 'device' | 'agent';
-            readonly name: string | null;
-            readonly platform: string | null;
-            readonly role: components$1['schemas']['EnvironmentRole'];
-            readonly user_id: string;
-        };
-        /**
-         * Relay environment status
-         * @description What the relay knows about the daemon of an environment. Detail fields are `null`/empty unless the daemon's socket is on the answering instance.
-         */
+            readonly created_at: string;
+            /** Format: date-time */
+            readonly done_at: string | null;
+            readonly goal_key: string | null;
+            /** Format: uuid */
+            readonly id: string;
+            /** Format: date-time */
+            readonly launched_at: string | null;
+            /**
+             * Format: date-time
+             * @description The prompt is due from this moment on.
+             */
+            readonly not_before: string | null;
+            /**
+             * Format: date-time
+             * @description When the due reminder was sent.
+             */
+            readonly notified_at: string | null;
+            readonly origin: {
+                readonly [key: string]: unknown;
+            };
+            readonly prompt: string;
+            readonly repo: string | null;
+            /** Format: uuid */
+            readonly run_session_id: string | null;
+            readonly source: components$1['schemas']['PromptSource'];
+            readonly status: components$1['schemas']['PromptStatus'];
+            /** Format: uuid */
+            readonly target_device_id: string | null;
+            /** @description Defaults to the first line of the prompt (max 120 chars). */
+            readonly title: string;
+            readonly tracker: string | null;
+            /** Format: date-time */
+            readonly updated_at: string;
+        };
+        readonly PromptCreate: {
+            /**
+             * @description Launch automatically when due.
+             * @default false
+             */
+            readonly auto_run?: boolean;
+            /** @description Stable key of the goal; a new prompt supersedes older open ones with the same key. */
+            readonly goal_key?: string;
+            /** @description ISO datetime with offset, or `YYYY-MM-DD` (07:00 UTC). `null` = due immediately. */
+            readonly not_before?: string | null;
+            /** @description Free-form capture metadata (session, transcript, host). */
+            readonly origin?: {
+                readonly [key: string]: unknown;
+            };
+            readonly prompt: string;
+            readonly repo?: string;
+            readonly source?: components$1['schemas']['PromptSource'];
+            /** Format: uuid */
+            readonly target_device_id?: string | null;
+            readonly title?: string;
+            readonly tracker?: string;
+        };
+        readonly PromptCreated: components$1['schemas']['Prompt'] & {
+            /** @description `false` when the same text already existed. */
+            readonly created: boolean;
+            /** @description Older open prompts with the same `goal_key` now `superseded`. */
+            readonly superseded: number;
+        };
+        readonly PromptPatch: {
+            readonly auto_run?: boolean;
+            /** @description ISO datetime with offset, or `YYYY-MM-DD` (07:00 UTC). `null` = due immediately. */
+            readonly not_before?: string | null;
+            readonly prompt?: string;
+            readonly status?: components$1['schemas']['PromptStatus'];
+            /** Format: uuid */
+            readonly target_device_id?: string | null;
+            readonly title?: string;
+            readonly tracker?: string | null;
+        };
+        /** @enum {string} */
+        readonly PromptSource: 'vscode' | 'cli' | 'desktop' | 'phone' | 'agent' | 'hub' | 'manual';
+        /** @enum {string} */
+        readonly PromptStatus: 'open' | 'launched' | 'done' | 'dismissed' | 'superseded';
+        /**
+         * Attached client (relay)
+         * @description A device or agent socket attached to the environment, on any relay instance.
+         */
+        readonly RelayAttachedClient: {
+            /** Format: date-time */
+            readonly attached_at: string;
+            readonly client_id: string;
+            readonly device_id: string | null;
+            /** @enum {string} */
+            readonly kind: 'device' | 'agent';
+            readonly name: string | null;
+            readonly platform: string | null;
+            readonly role: components$1['schemas']['EnvironmentRole'];
+            readonly user_id: string;
+        };
+        /**
+         * Relay environment status
+         * @description What the relay knows about the daemon of an environment. Detail fields are `null`/empty unless the daemon's socket is on the answering instance.
+         */
         readonly RelayEnvironmentStatus: {
             /** @enum {string|null} */
             readonly activity: 'idle' | 'human' | 'agent' | null;
@@ -4700,6 +5255,11 @@ type components$1 = {
             readonly from_device_id: string;
             readonly id: string;
             readonly kind: components$1['schemas']['SessionControlKind'];
+            /**
+             * @description Present (`open`) only on a `mode:"open"` Dispatch handoff — open the session, run nothing. Absent on every other control.
+             * @enum {string}
+             */
+            readonly mode?: 'open';
             /** @description Seq of the echoed `control` event. */
             readonly seq: number | null;
             /**
@@ -4777,13 +5337,26 @@ type components$1 = {
              * @description Target device; must belong to the session owner.
              */
             readonly device_id: string;
-            readonly text: string;
+            /**
+             * @description `send` runs `text` as a new turn on the target; `open` only opens the session there (handoff — `text`/`turn_id` ignored, no user turn).
+             * @default send
+             * @enum {string}
+             */
+            readonly mode?: 'send' | 'open';
+            /** @description Prompt for the target. Required unless `mode` is `open` (`400` otherwise). */
+            readonly text?: string;
+            /** @description Ignored when `mode` is `open`. */
             readonly turn_id?: string;
         };
         readonly SessionDispatchResponse: {
             /** @example dispatch:8c2e5f1a-7b3d-4c9e-a0f1-2d3e4f5a6b7c */
             readonly control_id: string;
             readonly duplicate: boolean;
+            /**
+             * @description The effective dispatch mode (`send` when the request omitted it).
+             * @enum {string}
+             */
+            readonly mode: 'send' | 'open';
             /**
              * @description Why no push was delivered — `no_push_token`, `no_token`, `auth_failed`, `network_error`, `unregistered` (token cleared) or `http_<status>`. Absent on success.
              * @example no_push_token
@@ -4941,6 +5514,64 @@ type components$1 = {
          * @enum {string}
          */
         readonly SessionRole: 'viewer' | 'editor' | 'owner';
+        /**
+         * Streaming speech event
+         * @description The `data` of one SSE frame; the SSE `event` name equals `type`.
+         */
+        readonly SpeechStreamEvent: {
+            /** @description `done`: total audio duration reported by Azure. */
+            readonly audio_ms?: number | null;
+            /** @description `audio`: base64 audio chunk in the negotiated format. */
+            readonly delta?: string;
+            /** @description `word`: spoken duration in milliseconds. */
+            readonly durationMs?: number;
+            /** @description `start`: `pcm` or `mp3`. */
+            readonly format?: string;
+            /** @description `viseme`: Azure viseme id. */
+            readonly id?: number;
+            /** @description `viseme` / `word`: position on the audio timeline in milliseconds. */
+            readonly offsetMs?: number;
+            /** @description `start`: audio sample rate in Hz. */
+            readonly sample_rate?: number;
+            /** @description `word`: the word (or punctuation) being spoken. */
+            readonly text?: string;
+            /** @enum {string} */
+            readonly type: 'start' | 'audio' | 'viseme' | 'word' | 'done' | 'error';
+            /** @description `start`: resolved Azure voice name. */
+            readonly voice?: string;
+        };
+        /** Streaming speech request */
+        readonly SpeechStreamRequest: {
+            /**
+             * @description Text to speak. It is XML-escaped into SSML, so markup is read literally.
+             * @example Bună seara! Mulțumesc pentru trandafir!
+             */
+            readonly input: string;
+            /**
+             * @description Azure AI Speech neural TTS.
+             * @default codai-tts-ro
+             * @enum {string}
+             */
+            readonly model?: 'codai-tts-ro' | 'azure-speech';
+            /**
+             * @description `pcm` = raw PCM16 mono 24 kHz (lowest latency); `mp3` = 24 kHz 48 kbit/s.
+             * @default pcm
+             * @enum {string}
+             */
+            readonly response_format?: 'pcm' | 'mp3';
+            /**
+             * @description Speaking rate multiplier (SSML prosody rate).
+             * @default 1
+             */
+            readonly speed?: number;
+            /**
+             * @description `alina` (ro-RO-AlinaNeural), `emil` (ro-RO-EmilNeural) or any Azure neural voice name such as `en-US-AvaNeural`.
+             * @default alina
+             * @example alina
+             * @example ro-RO-EmilNeural
+             */
+            readonly voice?: string;
+        };
         readonly SystemOneAnswer: {
             readonly choice?: string;
             readonly confidence?: number;
@@ -4964,7 +5595,22 @@ type components$1 = {
             /** @enum {string} */
             readonly type: 'choice' | 'score' | 'noul';
         };
+        /** @description Send exactly one of `state` (single) or `items` (batch). */
         readonly SystemOneRequest: {
+            /**
+             * @description `codai-fast` lets the gateway answer with codai-fast (structured output) when codai-s1 is unavailable; the response then has `fallback_used: true`.
+             * @default none
+             * @enum {string}
+             */
+            readonly fallback?: 'none' | 'codai-fast';
+            /** @description Batch mode — the same questions asked about each item's state, concurrently. Ids must be unique. */
+            readonly items?: readonly {
+                readonly id: string;
+                /** @description Text, JSON object or array for this item (≤ 64 000 chars serialised). */
+                readonly state: string | {
+                    readonly [key: string]: unknown;
+                } | readonly unknown[];
+            }[];
             /** @description Accepted for symmetry; only codai-s1 is served. */
             readonly model?: string;
             /** @description 1-32 questions keyed by an id you choose; answers come back under the same ids. */
@@ -4972,15 +5618,28 @@ type components$1 = {
                 readonly [key: string]: components$1['schemas']['SystemOneQuestion'];
             };
             /** @description Text, JSON object or array the questions are about (≤ 64 000 chars serialised). */
-            readonly state: string | {
+            readonly state?: string | {
                 readonly [key: string]: unknown;
             } | readonly unknown[];
+            /** @description codai-s1 budget for this call in milliseconds (default set by the gateway, 1500). */
+            readonly timeout_ms?: number;
         };
+        /** @description `answers` for a single `state`, `items` for a batch. */
         readonly SystemOneResponse: {
-            readonly answers: {
+            readonly answers?: {
                 readonly [key: string]: components$1['schemas']['SystemOneAnswer'];
             };
+            /** @description Present and `true` only when codai-s1 was unavailable and the opt-in codai-fast fallback answered. */
+            readonly fallback_used?: boolean;
+            /** @description Batch results in request order. */
+            readonly items?: readonly {
+                readonly answers: {
+                    readonly [key: string]: components$1['schemas']['SystemOneAnswer'];
+                };
+                readonly id: string;
+            }[];
             readonly latency_ms: number;
+            /** @description `codai-s1`, or `codai-fast` when the opt-in fallback answered. */
             readonly model: string;
             readonly usage: {
                 readonly input_tokens?: number;
@@ -6010,6 +6669,69 @@ interface operations$1 {
             };
         };
     };
+    readonly createSpeechStream: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Groups requests of one conversation for receipts, stickiness and prompt caching. */
+                readonly 'x-codai-session-id'?: components$1['parameters']['SessionIdHeader'];
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['SpeechStreamRequest'];
+            };
+        };
+        readonly responses: {
+            /** @description SSE stream: `start`, then `audio` / `viseme` / `word` events, then `done` (or `error`). */
+            readonly 200: {
+                headers: {
+                    /** @description Media type and sample rate of the `audio` deltas, e.g. `audio/pcm;rate=24000`. */
+                    readonly 'x-codai-audio-format'?: string;
+                    /** @description `azure-speech:<voice>`. */
+                    readonly 'x-codai-routed-to'?: string;
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'text/event-stream': components$1['schemas']['SpeechStreamEvent'];
+                };
+            };
+            /** @description Invalid body, unknown `model`, or `voice` is not an Azure neural voice name. */
+            readonly 400: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            /** @description The credential is an ephemeral token minted for another scope, or an EU data-residency account while the Speech region is outside the EU. */
+            readonly 403: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 429: components$1['responses']['RateLimited'];
+            /** @description Azure Speech is not configured on this gateway (`code: tts_unavailable`). */
+            readonly 503: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+        };
+    };
     readonly createTranscription: {
         readonly parameters: {
             readonly query?: never;
@@ -7720,6 +8442,155 @@ interface operations$1 {
             readonly 403: components$1['responses']['Forbidden'];
         };
     };
+    readonly editImage: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Groups requests of one conversation for receipts, stickiness and prompt caching. */
+                readonly 'x-codai-session-id'?: components$1['parameters']['SessionIdHeader'];
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['CoreImageEditRequest'];
+                readonly 'multipart/form-data': components$1['schemas']['CoreImageEditForm'];
+            };
+        };
+        readonly responses: {
+            /** @description Edited images, base64-encoded, in OpenAI shape. */
+            readonly 200: {
+                headers: {
+                    /** @description Charge for this request in micro-USD, from the model's reported token usage (images returned only). */
+                    readonly 'x-codai-cost-micro-usd'?: number;
+                    /** @description Vertex location that processed the request — `eu` (EU multi-region) or `global`. */
+                    readonly 'x-codai-data-region'?: 'eu' | 'global';
+                    /** @description Adapter kind that served the request. */
+                    readonly 'x-codai-provider'?: 'vertex-gemini-image';
+                    /** @description Upstream model that produced the images. */
+                    readonly 'x-codai-routed-to'?: string;
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['CoreImagesResponse'];
+                };
+            };
+            /** @description Body is not valid JSON or multipart, fails validation, has no input image or more than the model accepts, sends `mask`, asks for `response_format` other than `b64_json`, names an unknown model or an unsupported `image_size`, or every image was blocked by the safety filter (code `content_filtered`, not charged). */
+            readonly 400: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 403: components$1['responses']['Forbidden'];
+            /** @description Rate limit exceeded, or the daily or monthly spend cap has been reached. */
+            readonly 429: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 502: components$1['responses']['UpstreamError'];
+        };
+    };
+    readonly createImage: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Groups requests of one conversation for receipts, stickiness and prompt caching. */
+                readonly 'x-codai-session-id'?: components$1['parameters']['SessionIdHeader'];
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['CoreImagesRequest'];
+            };
+        };
+        readonly responses: {
+            /** @description Generated images, base64-encoded, in OpenAI shape. */
+            readonly 200: {
+                headers: {
+                    /** @description Charge for this request in micro-USD, from the model's reported token usage (images returned only). */
+                    readonly 'x-codai-cost-micro-usd'?: number;
+                    /** @description Vertex location that processed the request — `eu` (EU multi-region) or `global`. */
+                    readonly 'x-codai-data-region'?: 'eu' | 'global';
+                    /** @description Adapter kind that served the request. */
+                    readonly 'x-codai-provider'?: 'vertex-gemini-image';
+                    /** @description Upstream model that produced the images. */
+                    readonly 'x-codai-routed-to'?: string;
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['CoreImagesResponse'];
+                };
+            };
+            /** @description Body is not valid JSON, fails validation, asks for `response_format` other than `b64_json`, names an unknown model, asks for an `image_size` the model does not support, sends more reference images than the model accepts, or every image was blocked by the safety filter (code `content_filtered`, not charged). */
+            readonly 400: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 403: components$1['responses']['Forbidden'];
+            /** @description Rate limit exceeded, or the daily or monthly spend cap has been reached. */
+            readonly 429: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+            readonly 502: components$1['responses']['UpstreamError'];
+        };
+    };
+    readonly revokeSelfKey: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Revoked. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        /**
+                         * Format: uuid
+                         * @description Id of the revoked key.
+                         */
+                        readonly id: string;
+                        readonly revoked: boolean;
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+        };
+    };
     readonly createMessage: {
         readonly parameters: {
             readonly query?: never;
@@ -8276,38 +9147,225 @@ interface operations$1 {
         };
         readonly requestBody: {
             readonly content: {
-                readonly 'application/json': components$1['schemas']['ProjectCreateBody'];
+                readonly 'application/json': components$1['schemas']['ProjectCreateBody'];
+            };
+        };
+        readonly responses: {
+            /** @description The new project. */
+            readonly 201: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        readonly project: components$1['schemas']['Project'];
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            readonly 403: components$1['responses']['Forbidden'];
+            readonly 404: components$1['responses']['NotFound'];
+            /** @description A project of yours already uses this slug (`code: slug_taken`). */
+            readonly 409: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+        };
+    };
+    readonly getProject: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path: {
+                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
+                readonly id: components$1['parameters']['ProjectId'];
+            };
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description The project and its environments. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        readonly environments: readonly components$1['schemas']['Environment'][];
+                        readonly project: components$1['schemas']['Project'];
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            readonly 404: components$1['responses']['NotFound'];
+        };
+    };
+    readonly deleteProject: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path: {
+                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
+                readonly id: components$1['parameters']['ProjectId'];
+            };
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Deleted. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        /** @enum {boolean} */
+                        readonly deleted: true;
+                        /** Format: uuid */
+                        readonly id: string;
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            readonly 403: components$1['responses']['Forbidden'];
+            readonly 404: components$1['responses']['NotFound'];
+            /** @description The project still has non-destroyed environments (`code: project_has_environments`). */
+            readonly 409: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+        };
+    };
+    readonly updateProject: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path: {
+                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
+                readonly id: components$1['parameters']['ProjectId'];
+            };
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['ProjectPatchBody'];
+            };
+        };
+        readonly responses: {
+            /** @description The updated project. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        readonly project: components$1['schemas']['Project'];
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            readonly 403: components$1['responses']['Forbidden'];
+            readonly 404: components$1['responses']['NotFound'];
+        };
+    };
+    readonly listPrompts: {
+        readonly parameters: {
+            readonly query?: {
+                /** @description Maximum rows (1–200). */
+                readonly limit?: number;
+                /** @description Filter: a prompt status, `due` or `all`. */
+                readonly status?: 'open' | 'due' | 'all' | 'launched' | 'done' | 'dismissed' | 'superseded';
+            };
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description Matching prompts. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': {
+                        readonly data: readonly components$1['schemas']['Prompt'][];
+                    };
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+        };
+    };
+    readonly createPrompt: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['PromptCreate'];
             };
         };
         readonly responses: {
-            /** @description The new project. */
-            readonly 201: {
+            /** @description The same text already existed; nothing was created. */
+            readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': {
-                        readonly project: components$1['schemas']['Project'];
-                    };
+                    readonly 'application/json': components$1['schemas']['PromptCreated'];
                 };
             };
-            readonly 400: components$1['responses']['BadRequest'];
-            readonly 401: components$1['responses']['Unauthorized'];
-            readonly 402: components$1['responses']['PaymentRequired'];
-            readonly 403: components$1['responses']['Forbidden'];
-            readonly 404: components$1['responses']['NotFound'];
-            /** @description A project of yours already uses this slug (`code: slug_taken`). */
-            readonly 409: {
+            /** @description Prompt created. */
+            readonly 201: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components$1['schemas']['Error'];
+                    readonly 'application/json': components$1['schemas']['PromptCreated'];
                 };
             };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
         };
     };
-    readonly getProject: {
+    readonly getPrompt: {
         readonly parameters: {
             readonly query?: never;
             readonly header?: {
@@ -8315,32 +9373,28 @@ interface operations$1 {
                 readonly 'x-request-id'?: components$1['parameters']['RequestId'];
             };
             readonly path: {
-                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
-                readonly id: components$1['parameters']['ProjectId'];
+                /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+                readonly id: string;
             };
             readonly cookie?: never;
         };
         readonly requestBody?: never;
         readonly responses: {
-            /** @description The project and its environments. */
+            /** @description The prompt. */
             readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': {
-                        readonly environments: readonly components$1['schemas']['Environment'][];
-                        readonly project: components$1['schemas']['Project'];
-                    };
+                    readonly 'application/json': components$1['schemas']['Prompt'];
                 };
             };
-            readonly 400: components$1['responses']['BadRequest'];
             readonly 401: components$1['responses']['Unauthorized'];
             readonly 402: components$1['responses']['PaymentRequired'];
             readonly 404: components$1['responses']['NotFound'];
         };
     };
-    readonly deleteProject: {
+    readonly deletePrompt: {
         readonly parameters: {
             readonly query?: never;
             readonly header?: {
@@ -8348,44 +9402,63 @@ interface operations$1 {
                 readonly 'x-request-id'?: components$1['parameters']['RequestId'];
             };
             readonly path: {
-                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
-                readonly id: components$1['parameters']['ProjectId'];
+                /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+                readonly id: string;
             };
             readonly cookie?: never;
         };
         readonly requestBody?: never;
         readonly responses: {
-            /** @description Deleted. */
+            /** @description How many prompts were deleted (0 or 1). */
             readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
                     readonly 'application/json': {
-                        /** @enum {boolean} */
-                        readonly deleted: true;
-                        /** Format: uuid */
-                        readonly id: string;
+                        readonly deleted: number;
                     };
                 };
             };
-            readonly 400: components$1['responses']['BadRequest'];
             readonly 401: components$1['responses']['Unauthorized'];
             readonly 402: components$1['responses']['PaymentRequired'];
-            readonly 403: components$1['responses']['Forbidden'];
-            readonly 404: components$1['responses']['NotFound'];
-            /** @description The project still has non-destroyed environments (`code: project_has_environments`). */
-            readonly 409: {
+        };
+    };
+    readonly updatePrompt: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: {
+                /** @description Client correlation id; echoed back as `x-codai-trace-id` and persisted on the usage row. */
+                readonly 'x-request-id'?: components$1['parameters']['RequestId'];
+            };
+            readonly path: {
+                /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+                readonly id: string;
+            };
+            readonly cookie?: never;
+        };
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['PromptPatch'];
+            };
+        };
+        readonly responses: {
+            /** @description The updated prompt. */
+            readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components$1['schemas']['Error'];
+                    readonly 'application/json': components$1['schemas']['Prompt'];
                 };
             };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 401: components$1['responses']['Unauthorized'];
+            readonly 402: components$1['responses']['PaymentRequired'];
+            readonly 404: components$1['responses']['NotFound'];
         };
     };
-    readonly updateProject: {
+    readonly launchPrompt: {
         readonly parameters: {
             readonly query?: never;
             readonly header?: {
@@ -8393,32 +9466,42 @@ interface operations$1 {
                 readonly 'x-request-id'?: components$1['parameters']['RequestId'];
             };
             readonly path: {
-                /** @description Project UUID. A malformed value is 400; an unknown or foreign project is 404. */
-                readonly id: components$1['parameters']['ProjectId'];
+                /** @description Pending prompt id (uuid). A foreign or malformed id is 404. */
+                readonly id: string;
             };
             readonly cookie?: never;
         };
-        readonly requestBody: {
+        readonly requestBody?: {
             readonly content: {
-                readonly 'application/json': components$1['schemas']['ProjectPatchBody'];
+                readonly 'application/json': {
+                    /**
+                     * Format: uuid
+                     * @description One of your devices; overrides the prompt target.
+                     */
+                    readonly device_id?: string;
+                };
             };
         };
         readonly responses: {
-            /** @description The updated project. */
+            /** @description The session that was started. */
             readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
                 };
                 content: {
                     readonly 'application/json': {
-                        readonly project: components$1['schemas']['Project'];
+                        /** Format: uuid */
+                        readonly device_id: string;
+                        /** @description Whether a push dispatch reached the device. */
+                        readonly pushed: boolean;
+                        /** Format: uuid */
+                        readonly session_id: string;
                     };
                 };
             };
             readonly 400: components$1['responses']['BadRequest'];
             readonly 401: components$1['responses']['Unauthorized'];
             readonly 402: components$1['responses']['PaymentRequired'];
-            readonly 403: components$1['responses']['Forbidden'];
             readonly 404: components$1['responses']['NotFound'];
         };
     };
@@ -9352,7 +10435,7 @@ interface operations$1 {
             };
         };
         readonly responses: {
-            /** @description One typed answer per question id. */
+            /** @description One typed answer per question id (`answers`), or per item and question id (`items`) for a batch. */
             readonly 200: {
                 headers: {
                     readonly [name: string]: unknown;
@@ -9361,7 +10444,7 @@ interface operations$1 {
                     readonly 'application/json': components$1['schemas']['SystemOneResponse'];
                 };
             };
-            /** @description Body is not valid JSON, a question is malformed (option/level counts), or `state` is too large. */
+            /** @description Body is not valid JSON, a question is malformed (option/level counts), a `state` is too large, both or neither of `state`/`items` were sent, more than 16 items, duplicate item ids, or `timeout_ms` outside 100-5000. */
             readonly 400: {
                 headers: {
                     readonly [name: string]: unknown;
@@ -9373,7 +10456,7 @@ interface operations$1 {
             readonly 401: components$1['responses']['Unauthorized'];
             readonly 413: components$1['responses']['PayloadTooLarge'];
             readonly 429: components$1['responses']['RateLimited'];
-            /** @description codai-s1 is disabled, unreachable or exceeded its budget (`code: s1_unavailable`). Use your local fallback. */
+            /** @description codai-s1 is disabled, unreachable or exceeded its budget (`code: s1_unavailable`), and no opt-in fallback answered. Use your local fallback. */
             readonly 503: {
                 headers: {
                     readonly [name: string]: unknown;
@@ -9983,6 +11066,62 @@ interface operations$1 {
             readonly 404: components$1['responses']['NotFound'];
         };
     };
+    readonly verifyAgentOutput: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        /** @description The signed payload and the signature. */
+        readonly requestBody: {
+            readonly content: {
+                readonly 'application/json': components$1['schemas']['AgentOutputVerifyRequest'];
+            };
+        };
+        readonly responses: {
+            /** @description Verification result. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['AgentOutputVerifyResult'];
+                };
+            };
+            readonly 400: components$1['responses']['BadRequest'];
+            readonly 413: components$1['responses']['PayloadTooLarge'];
+            /** @description Output signing is not enabled on this deployment (`code: signing_disabled`). */
+            readonly 503: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['Error'];
+                };
+            };
+        };
+    };
+    readonly getAgentOutputKey: {
+        readonly parameters: {
+            readonly query?: never;
+            readonly header?: never;
+            readonly path?: never;
+            readonly cookie?: never;
+        };
+        readonly requestBody?: never;
+        readonly responses: {
+            /** @description The signing key, or `enabled: false`. */
+            readonly 200: {
+                headers: {
+                    readonly [name: string]: unknown;
+                };
+                content: {
+                    readonly 'application/json': components$1['schemas']['AgentOutputKey'];
+                };
+            };
+        };
+    };
     readonly getRelayEnvironmentStatus: {
         readonly parameters: {
             readonly query?: never;
@@ -10117,7 +11256,7 @@ interface CodaiRequestExtensions {
     /** `x-codai-device-name` */
     deviceName?: string;
     /** `x-codai-device-platform` */
-    devicePlatform?: 'android' | 'ios' | 'web' | 'desktop' | 'cli' | 'agent';
+    devicePlatform?: 'android' | 'ios' | 'web' | 'desktop' | 'cli' | 'agent' | 'wear' | 'vscode';
     /** `x-codai-push-token` */
     pushToken?: string;
     /** `x-codai-share-token` */
@@ -10228,7 +11367,7 @@ type Receipt = Reply<'getReceipt'>;
 type FeedbackRequest = Mutable<Body<'submitFeedback'>>;
 type FeedbackResponse = Reply<'submitFeedback'>;
 type PhoneModel = Schema<'AccountPhoneModel'>;
-type CallOpts$b = {
+type CallOpts$d = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10236,9 +11375,9 @@ declare class Account {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/account` — the full account card. */
-    get(opts?: CallOpts$b): Promise<AccountView>;
+    get(opts?: CallOpts$d): Promise<AccountView>;
     /** `PATCH /v1/account` — consents, username, referral (at least one field). */
-    update(body: AccountPatchRequest, opts?: CallOpts$b): Promise<AccountPatchResponse>;
+    update(body: AccountPatchRequest, opts?: CallOpts$d): Promise<AccountPatchResponse>;
 }
 declare class Receipts {
     private readonly http;
@@ -10250,7 +11389,7 @@ declare class Receipts {
     get(query?: {
         sessionId?: string;
         since?: string | Date;
-    }, opts?: CallOpts$b): Promise<Receipt>;
+    }, opts?: CallOpts$d): Promise<Receipt>;
 }
 declare class Feedback {
     private readonly http;
@@ -10259,13 +11398,13 @@ declare class Feedback {
      * `POST /v1/feedback` — rate one turn. Exactly one of `event_id`,
      * `session_id`, `client_request_id` must be present.
      */
-    submit(body: FeedbackRequest, opts?: CallOpts$b): Promise<FeedbackResponse>;
+    submit(body: FeedbackRequest, opts?: CallOpts$d): Promise<FeedbackResponse>;
 }
 declare class PhoneModels {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/phone/models` — on-device model catalog with signed URLs. */
-    list(opts?: CallOpts$b): Promise<PhoneModel[]>;
+    list(opts?: CallOpts$d): Promise<PhoneModel[]>;
 }
 
 /** `/v1/agents/*` — synchronous runs and the persisted async run lifecycle. */
@@ -10278,7 +11417,7 @@ type AgentRun = Reply<'getAgentRun'>;
 type AgentRunStep = Schema<'AgentRunStep'>;
 type AgentRunStats = Reply<'getAgentRunStats'>;
 type AgentRunStatus = Schema<'AgentRunStatus'>;
-type CallOpts$a = {
+type CallOpts$c = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10315,34 +11454,75 @@ declare class AgentRuns {
     private readonly http;
     constructor(http: HttpClient);
     /** `POST /v1/agents/runs` — returns 202 with the run id. */
-    create(body: AgentRunCreateRequest, opts?: CallOpts$a): Promise<AgentRunAccepted>;
+    create(body: AgentRunCreateRequest, opts?: CallOpts$c): Promise<AgentRunAccepted>;
     /** `GET /v1/agents/runs/{id}` */
-    get(id: string, opts?: CallOpts$a): Promise<AgentRun>;
+    get(id: string, opts?: CallOpts$c): Promise<AgentRun>;
     /** `GET /v1/agents/runs/{id}/steps` — newest first. */
-    steps(id: string, opts?: CallOpts$a): Promise<AgentRunStep[]>;
+    steps(id: string, opts?: CallOpts$c): Promise<AgentRunStep[]>;
     /** `GET /v1/agents/runs/stats?days=` */
-    stats(days?: number, opts?: CallOpts$a): Promise<AgentRunStats>;
+    stats(days?: number, opts?: CallOpts$c): Promise<AgentRunStats>;
     /** `POST /v1/agents/runs/{id}/cancel` */
-    cancel(id: string, opts?: CallOpts$a): Promise<Reply<'cancelAgentRun'>>;
+    cancel(id: string, opts?: CallOpts$c): Promise<Reply<'cancelAgentRun'>>;
     /**
      * `GET /v1/agents/runs/{id}/stream` — async iterator over `step` / `done` /
      * `timeout` events. The iterator ends after `done`; on `timeout` (30 min)
      * it also ends and you may reconnect (full replay from seq 0).
      */
-    stream(id: string, opts?: CallOpts$a): AsyncGenerator<AgentRunStreamEvent, void, undefined>;
+    stream(id: string, opts?: CallOpts$c): AsyncGenerator<AgentRunStreamEvent, void, undefined>;
 }
 declare class Agents {
     private readonly http;
     readonly runs: AgentRuns;
     constructor(http: HttpClient);
     /** `POST /v1/agents/run` — blocks until the agent loop finishes. */
-    run(body: AgentRunRequest, opts?: CallOpts$a): Promise<AgentRunResult>;
+    run(body: AgentRunRequest, opts?: CallOpts$c): Promise<AgentRunResult>;
 }
 
-/** `POST /v1/audio/transcriptions` and `POST /v1/audio/speech`. */
+/** `POST /v1/audio/transcriptions`, `POST /v1/audio/speech` and `POST /v1/audio/speech/stream`. */
 
 type TranscriptionResponse = Reply<'createTranscription'>;
 type SpeechRequest = Mutable<Body<'createSpeech'>>;
+type SpeechStreamRequest = Mutable<Body<'createSpeechStream'>>;
+/** One event of `audio.speechStream()` (Azure neural TTS with lip-sync timing). */
+type SpeechStreamEvent = {
+    type: 'start';
+    model: string;
+    voice: string;
+    format: 'pcm' | 'mp3';
+    content_type: string;
+    sample_rate: number;
+}
+/** `delta` is base64; `audio` is the decoded bytes (PCM16 LE mono 24 kHz for `pcm`). */
+ | {
+    type: 'audio';
+    delta: string;
+    audio: Uint8Array;
+}
+/** Azure viseme id (0-21) at `offsetMs` on the audio timeline. */
+ | {
+    type: 'viseme';
+    id: number;
+    offsetMs: number;
+} | {
+    type: 'word';
+    text: string;
+    offsetMs: number;
+    durationMs: number;
+} | {
+    type: 'done';
+    audio_ms: number | null;
+    audioBytes: number;
+    visemes: number;
+    words: number;
+} | {
+    type: 'error';
+    error: {
+        code: string;
+        message: string;
+    };
+};
+/** Raw generated event schema (all fields optional). */
+type SpeechStreamEventSchema = Schema<'SpeechStreamEvent'>;
 interface TranscriptionOptions {
     /** Audio file contents (max 25 MB). */
     file: Blob | Uint8Array | ArrayBuffer;
@@ -10396,6 +11576,16 @@ declare class Audio {
         ext?: CodaiRequestExtensions;
         signal?: AbortSignal;
     }): Promise<SpeechResult>;
+    /**
+     * Streaming neural TTS with visemes + word boundaries (`codai-tts-ro`, Azure AI Speech).
+     * Yields `start`, then `audio` / `viseme` / `word` in synthesis order, then `done` (or `error`).
+     * Voices: `alina` (default), `emil`, or any Azure neural voice name. Default format `pcm`
+     * (PCM16 mono 24 kHz). Works with an ephemeral token of scope `audio` or `live`.
+     */
+    speechStream(body: SpeechStreamRequest, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): AsyncGenerator<SpeechStreamEvent, void, undefined>;
 }
 
 /** `POST /v1/chat/completions` — OpenAI-compatible completions (JSON + SSE). */
@@ -10513,7 +11703,7 @@ type Device = Schema<'DeviceListItem'>;
 type DevicePatch = Mutable<Body<'updateDevice'>>;
 type DevicePatched = Reply<'updateDevice'>;
 type DispatchInbox = Reply<'getMyDispatchInbox'>;
-type CallOpts$9 = {
+type CallOpts$b = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10521,18 +11711,23 @@ declare class Devices {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/devices` — most recently seen first. */
-    list(opts?: CallOpts$9): Promise<Device[]>;
+    list(opts?: CallOpts$b): Promise<Device[]>;
     /** `PATCH /v1/devices/{id}` — push token and/or capabilities. */
-    update(id: string, body: DevicePatch, opts?: CallOpts$9): Promise<DevicePatched>;
+    update(id: string, body: DevicePatch, opts?: CallOpts$b): Promise<DevicePatched>;
     /** `DELETE /v1/devices/{id}` */
-    delete(id: string, opts?: CallOpts$9): Promise<Reply<'deleteDevice'>>;
+    delete(id: string, opts?: CallOpts$b): Promise<Reply<'deleteDevice'>>;
+    /**
+     * `POST /v1/keys/self/revoke` — the API key this client uses revokes ITSELF (sign out).
+     * Every later call with it fails with 401.
+     */
+    revokeSelfKey(opts?: CallOpts$b): Promise<Reply<'revokeSelfKey'>>;
     /**
      * `GET /v1/devices/me/dispatch?limit=` — pending controls dispatched at the
      * calling device (`x-codai-device` required) across all owned sessions.
      */
     dispatchInbox(query?: {
         limit?: number;
-    }, opts?: CallOpts$9): Promise<DispatchInbox>;
+    }, opts?: CallOpts$b): Promise<DispatchInbox>;
 }
 
 /** `POST /v1/embeddings`. */
@@ -10588,7 +11783,7 @@ type EnvironmentTaskList = Reply<'listEnvironmentTasks'>;
 type EnvironmentTaskCreateBody = Mutable<Body<'createEnvironmentTask'>>;
 type EnvironmentTaskCreated = Reply<'createEnvironmentTask'>;
 type EnvironmentTaskDetail = Reply<'getEnvironmentTask'>;
-type CallOpts$8 = {
+type CallOpts$a = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10596,48 +11791,48 @@ declare class EnvironmentMembers {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/environments/{id}/members` — any role. */
-    list(envId: string, opts?: CallOpts$8): Promise<EnvironmentMember[]>;
+    list(envId: string, opts?: CallOpts$a): Promise<EnvironmentMember[]>;
     /** `POST /v1/environments/{id}/members` — exactly one of `user_id` / `email`. */
-    add(envId: string, body: EnvironmentAddMemberBody, opts?: CallOpts$8): Promise<EnvironmentMemberCreated>;
+    add(envId: string, body: EnvironmentAddMemberBody, opts?: CallOpts$a): Promise<EnvironmentMemberCreated>;
     /** `PUT /v1/environments/{id}/members/me/ssh-key` — one `authorized_keys` line. */
-    setSshKey(envId: string, publicKey: string, opts?: CallOpts$8): Promise<Reply<'setMyEnvironmentSshKey'>>;
+    setSshKey(envId: string, publicKey: string, opts?: CallOpts$a): Promise<Reply<'setMyEnvironmentSshKey'>>;
     /** `PATCH /v1/environments/{id}/members/{userId}` — 409 `last_owner` on demoting the last owner. */
-    setRole(envId: string, userId: string, role: EnvironmentRole, opts?: CallOpts$8): Promise<Reply<'setEnvironmentMemberRole'>['member']>;
+    setRole(envId: string, userId: string, role: EnvironmentRole, opts?: CallOpts$a): Promise<Reply<'setEnvironmentMemberRole'>['member']>;
     /** `DELETE /v1/environments/{id}/members/{userId}` — pass your own id to leave. */
-    remove(envId: string, userId: string, opts?: CallOpts$8): Promise<Reply<'removeEnvironmentMember'>>;
+    remove(envId: string, userId: string, opts?: CallOpts$a): Promise<Reply<'removeEnvironmentMember'>>;
     /** `POST /v1/environments/{id}/members/me/ssh-cert` — 12 h OpenSSH user certificate for your key. */
-    sshCert(envId: string, body: EnvironmentSshCertBody, opts?: CallOpts$8): Promise<EnvironmentSshCert>;
+    sshCert(envId: string, body: EnvironmentSshCertBody, opts?: CallOpts$a): Promise<EnvironmentSshCert>;
 }
 /** `/v1/environments/{id}/tasks` — fire-and-forget agent tasks run in the environment. */
 declare class EnvironmentTasks {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/environments/{id}/tasks` */
-    list(envId: string, opts?: CallOpts$8): Promise<EnvironmentTaskList>;
+    list(envId: string, opts?: CallOpts$a): Promise<EnvironmentTaskList>;
     /** `POST /v1/environments/{id}/tasks` — queued; you get a notification when it finishes. */
-    create(envId: string, body: EnvironmentTaskCreateBody, opts?: CallOpts$8): Promise<EnvironmentTaskCreated>;
+    create(envId: string, body: EnvironmentTaskCreateBody, opts?: CallOpts$a): Promise<EnvironmentTaskCreated>;
     /** `GET /v1/environments/{id}/tasks/{taskId}` */
-    get(envId: string, taskId: string, opts?: CallOpts$8): Promise<EnvironmentTaskDetail>;
+    get(envId: string, taskId: string, opts?: CallOpts$a): Promise<EnvironmentTaskDetail>;
 }
 declare class EnvironmentPorts {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/environments/{id}/ports` — published (forwarded) ports. */
-    list(envId: string, opts?: CallOpts$8): Promise<EnvironmentPort[]>;
+    list(envId: string, opts?: CallOpts$a): Promise<EnvironmentPort[]>;
     /** `PUT /v1/environments/{id}/ports/{port}` — publish or change visibility (upsert). */
-    set(envId: string, port: number, body: EnvironmentPortBody, opts?: CallOpts$8): Promise<EnvironmentPort>;
+    set(envId: string, port: number, body: EnvironmentPortBody, opts?: CallOpts$a): Promise<EnvironmentPort>;
     /** `DELETE /v1/environments/{id}/ports/{port}` — unpublish. */
-    remove(envId: string, port: number, opts?: CallOpts$8): Promise<Reply<'removeEnvironmentPort'>>;
+    remove(envId: string, port: number, opts?: CallOpts$a): Promise<Reply<'removeEnvironmentPort'>>;
 }
 declare class EnvironmentSecrets {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/environments/{id}/secrets` — names and timestamps only, never values. */
-    list(envId: string, opts?: CallOpts$8): Promise<EnvironmentSecret[]>;
+    list(envId: string, opts?: CallOpts$a): Promise<EnvironmentSecret[]>;
     /** `PUT /v1/environments/{id}/secrets/{name}` — upsert; `name` is `ENV_STYLE`. */
-    set(envId: string, name: string, value: string, opts?: CallOpts$8): Promise<EnvironmentSecretSet>;
+    set(envId: string, name: string, value: string, opts?: CallOpts$a): Promise<EnvironmentSecretSet>;
     /** `DELETE /v1/environments/{id}/secrets/{name}` */
-    remove(envId: string, name: string, opts?: CallOpts$8): Promise<Reply<'removeEnvironmentSecret'>>;
+    remove(envId: string, name: string, opts?: CallOpts$a): Promise<Reply<'removeEnvironmentSecret'>>;
 }
 declare class Environments {
     private readonly http;
@@ -10647,39 +11842,39 @@ declare class Environments {
     readonly tasks: EnvironmentTasks;
     constructor(http: HttpClient);
     /** `GET /v1/environments/{id}/ssh-ca` — CA public keys to trust (`@cert-authority` lines). */
-    sshCa(envId: string, opts?: CallOpts$8): Promise<EnvironmentSshCa>;
+    sshCa(envId: string, opts?: CallOpts$a): Promise<EnvironmentSshCa>;
     /** `GET /v1/environments?project_id=&for_user_id=me` — newest first, every state. */
-    list(query?: ListEnvironmentsQuery, opts?: CallOpts$8): Promise<Environment[]>;
+    list(query?: ListEnvironmentsQuery, opts?: CallOpts$a): Promise<Environment[]>;
     /**
      * `POST /v1/environments` — `byo` starts `pending`; managed providers start
      * `creating`. 409 `already_has_env` in a `vm_per_dev` project (the error
      * body carries the `environment_id` to reuse).
      */
-    create(body: EnvironmentCreateBody, opts?: CallOpts$8): Promise<Environment>;
+    create(body: EnvironmentCreateBody, opts?: CallOpts$a): Promise<Environment>;
     /**
      * `POST /v1/environments/enroll` — daemon side. The one-time `codai_env_…`
      * token in the body is the only credential; the client's API key header is
      * ignored by this route. Managed environments additionally receive a
      * freshly minted `api_key`, returned exactly once.
      */
-    enroll(body: EnvironmentEnrollBody, opts?: CallOpts$8): Promise<EnvironmentEnrolled>;
+    enroll(body: EnvironmentEnrollBody, opts?: CallOpts$a): Promise<EnvironmentEnrolled>;
     /** `GET /v1/environments/{id}` — environment, your role, members, ports, recent events. */
-    get(envId: string, opts?: CallOpts$8): Promise<EnvironmentDetail>;
+    get(envId: string, opts?: CallOpts$a): Promise<EnvironmentDetail>;
     /** `PATCH /v1/environments/{id}` — `name` and/or `idle_timeout_minutes` (5..1440). */
-    update(envId: string, body: EnvironmentPatchBody, opts?: CallOpts$8): Promise<Environment>;
+    update(envId: string, body: EnvironmentPatchBody, opts?: CallOpts$a): Promise<Environment>;
     /** `POST /v1/environments/{id}/start` — managed providers only (`stopped` → `starting`). */
-    start(envId: string, opts?: CallOpts$8): Promise<EnvironmentTransition>;
+    start(envId: string, opts?: CallOpts$a): Promise<EnvironmentTransition>;
     /** `POST /v1/environments/{id}/stop` — managed providers only (`running` → `stopping`). */
-    stop(envId: string, opts?: CallOpts$8): Promise<EnvironmentTransition>;
+    stop(envId: string, opts?: CallOpts$a): Promise<EnvironmentTransition>;
     /** `POST /v1/environments/{id}/archive` — keeps history, releases the machine. */
-    archive(envId: string, opts?: CallOpts$8): Promise<EnvironmentTransition>;
+    archive(envId: string, opts?: CallOpts$a): Promise<EnvironmentTransition>;
     /** `POST /v1/environments/{id}/destroy` — owner only; terminal. */
-    destroy(envId: string, opts?: CallOpts$8): Promise<EnvironmentTransition>;
+    destroy(envId: string, opts?: CallOpts$a): Promise<EnvironmentTransition>;
     /**
      * `POST /v1/environments/{id}/enroll-token` — `byo` only; a 30-minute
      * one-time token for `enroll()`. Minting again replaces the previous one.
      */
-    enrollToken(envId: string, opts?: CallOpts$8): Promise<EnvironmentEnrollToken>;
+    enrollToken(envId: string, opts?: CallOpts$a): Promise<EnvironmentEnrollToken>;
     private transition;
 }
 
@@ -10718,7 +11913,7 @@ type HostExecBody = Mutable<Body<'execOnHost'>>;
 type HostExecResponse = Reply<'execOnHost'>;
 type HostExecRequest = Schema<'HostExecRequest'>;
 type HostExecResultBody = Mutable<Body<'postHostExecResult'>>;
-type CallOpts$7 = {
+type CallOpts$9 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10745,7 +11940,7 @@ declare class Hosts {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/hosts` — your devices currently connected as hosts. */
-    list(opts?: CallOpts$7): Promise<HostPresence[]>;
+    list(opts?: CallOpts$9): Promise<HostPresence[]>;
     /**
      * `POST /v1/hosts/{deviceId}/exec` — run one op on a connected host and
      * block until it answers (or `timeout_ms`, default 60 s).
@@ -10753,9 +11948,9 @@ declare class Hosts {
     exec(deviceId: string, op: HostOp, args?: Record<string, unknown>, extra?: {
         timeoutMs?: number;
         label?: string;
-    } & CallOpts$7): Promise<HostExecResponse>;
+    } & CallOpts$9): Promise<HostExecResponse>;
     /** `POST /v1/hosts/exec/{reqId}/result` — host side: deliver an exec result. */
-    postResult(reqId: string, body: HostExecResultBody, opts?: CallOpts$7): Promise<Reply<'postHostExecResult'>>;
+    postResult(reqId: string, body: HostExecResultBody, opts?: CallOpts$9): Promise<Reply<'postHostExecResult'>>;
     /**
      * `GET /v1/hosts/stream?os=&hostname=&roots=` — host side: announce this
      * device and receive `hello` / `ping` / `exec` events. Closed by the server
@@ -10765,7 +11960,56 @@ declare class Hosts {
         os?: string;
         hostname?: string;
         roots?: string[];
-    }, opts?: CallOpts$7): AsyncGenerator<HostStreamEvent, void, undefined>;
+    }, opts?: CallOpts$9): AsyncGenerator<HostStreamEvent, void, undefined>;
+}
+
+/**
+ * `POST /v1/images/generations` and `POST /v1/images/edits` — Gemini image models on Vertex AI.
+ * `codai-image` (default, gemini-3.1-flash-image, EU), `codai-image-fast`, `codai-image-pro`.
+ * Output from the EU endpoint carries C2PA credentials + SynthID: keep the bytes as returned.
+ */
+
+type ImagesRequest = Mutable<Body<'createImage'>>;
+type ImagesResponse = Reply<'createImage'>;
+type ImageEditRequest = Mutable<Body<'editImage'>>;
+interface ImagesResult {
+    /** Decoded image bytes, one per generated image (see `mimeTypes`). */
+    images: Uint8Array[];
+    /** MIME type of each entry in `images` (usually `image/png`). */
+    mimeTypes: string[];
+    raw: ImagesResponse;
+    /** Upstream model that produced the images (`x-codai-routed-to`). */
+    routedTo: string | null;
+    /** Vertex location that processed the request, `eu` or `global` (`x-codai-data-region`). */
+    dataRegion: string | null;
+    /** Usage-based charge for this request in micro-USD (`x-codai-cost-micro-usd`). */
+    costMicroUsd: number | null;
+    headers: Headers;
+}
+declare class Images {
+    private readonly http;
+    constructor(http: HttpClient);
+    /**
+     * Generate images. Needs a real API key (ephemeral tokens are rejected).
+     * Pass `reference_images` to keep a logo/palette/product consistent.
+     */
+    generate(body: Omit<ImagesRequest, 'model'> & {
+        model?: string;
+    }, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): Promise<ImagesResult>;
+    /**
+     * Edit one or more input images (`image`: one `{ b64_json, mime_type }` or an array of up to 14)
+     * from a text instruction. JSON body; `mask` is not supported — describe the region in `prompt`.
+     */
+    edit(body: Omit<ImageEditRequest, 'model'> & {
+        model?: string;
+    }, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): Promise<ImagesResult>;
+    private post;
 }
 
 /** `POST /v1/messages` — Anthropic Messages wire (JSON + named-event SSE). */
@@ -10839,7 +12083,7 @@ type Org = Schema<'OrgWithRole'>;
 type OrgMember = Schema<'OrgMember'>;
 type OrgRole = Schema<'OrgRole'>;
 type OrgAddMemberBody = Mutable<Body<'addOrgMember'>>;
-type CallOpts$6 = {
+type CallOpts$8 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10847,20 +12091,20 @@ declare class OrgMembers {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/orgs/{id}/members` */
-    list(orgId: string, opts?: CallOpts$6): Promise<OrgMember[]>;
+    list(orgId: string, opts?: CallOpts$8): Promise<OrgMember[]>;
     /** `POST /v1/orgs/{id}/members` — add or re-role (owner/admin). */
-    add(orgId: string, body: OrgAddMemberBody, opts?: CallOpts$6): Promise<Reply<'addOrgMember', 201>>;
+    add(orgId: string, body: OrgAddMemberBody, opts?: CallOpts$8): Promise<Reply<'addOrgMember', 201>>;
     /** `DELETE /v1/orgs/{id}/members/{userId}` */
-    remove(orgId: string, userId: string, opts?: CallOpts$6): Promise<Reply<'removeOrgMember'>>;
+    remove(orgId: string, userId: string, opts?: CallOpts$8): Promise<Reply<'removeOrgMember'>>;
 }
 declare class Orgs {
     private readonly http;
     readonly members: OrgMembers;
     constructor(http: HttpClient);
     /** `POST /v1/orgs` */
-    create(name: string, opts?: CallOpts$6): Promise<Org>;
+    create(name: string, opts?: CallOpts$8): Promise<Org>;
     /** `GET /v1/orgs` */
-    list(opts?: CallOpts$6): Promise<Org[]>;
+    list(opts?: CallOpts$8): Promise<Org[]>;
 }
 
 /** `/v1/projects/*` — projects (a repo + isolation policy) that group environments. */
@@ -10870,7 +12114,7 @@ type ProjectIsolation = Schema<'ProjectIsolation'>;
 type ProjectCreateBody = Mutable<Body<'createProject'>>;
 type ProjectPatchBody = Mutable<Body<'updateProject'>>;
 type ProjectDetail = Reply<'getProject'>;
-type CallOpts$5 = {
+type CallOpts$7 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -10878,15 +12122,154 @@ declare class Projects {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/projects` — projects you own plus those of your orgs, newest first. */
-    list(opts?: CallOpts$5): Promise<Project[]>;
+    list(opts?: CallOpts$7): Promise<Project[]>;
     /** `POST /v1/projects` — 409 `slug_taken` when the slug is already yours. */
-    create(body: ProjectCreateBody, opts?: CallOpts$5): Promise<Project>;
+    create(body: ProjectCreateBody, opts?: CallOpts$7): Promise<Project>;
     /** `GET /v1/projects/{id}` — the project plus every environment in it. */
-    get(projectId: string, opts?: CallOpts$5): Promise<ProjectDetail>;
+    get(projectId: string, opts?: CallOpts$7): Promise<ProjectDetail>;
     /** `PATCH /v1/projects/{id}` — owner or org owner/admin; the slug cannot change. */
-    update(projectId: string, body: ProjectPatchBody, opts?: CallOpts$5): Promise<Project>;
+    update(projectId: string, body: ProjectPatchBody, opts?: CallOpts$7): Promise<Project>;
     /** `DELETE /v1/projects/{id}` — 409 `project_has_environments` until all are destroyed. */
-    delete(projectId: string, opts?: CallOpts$5): Promise<Reply<'deleteProject'>>;
+    delete(projectId: string, opts?: CallOpts$7): Promise<Reply<'deleteProject'>>;
+}
+
+/**
+ * `wss://…/v1/realtime` — dependency-free realtime client (live transcription and the OpenAI
+ * Realtime protocol lanes). Not an OpenAPI operation (OpenAPI cannot describe WebSockets), so it is
+ * outside the `OPERATION_METHODS` parity table.
+ *
+ *   const live = codai.realtime.connect({ model: 'codai-transcribe-live', language: 'ro', token });
+ *   live.appendAudio(pcm16At24kHz);          // Int16Array | ArrayBuffer | Uint8Array
+ *   for await (const ev of live) {
+ *     if (ev.type === 'conversation.item.input_audio_transcription.delta') draw(ev.delta);
+ *   }
+ *
+ * Uses the global `WebSocket` (browsers, Node ≥ 22, Deno, Bun) or an injected constructor.
+ *  - Browser path: pass an ephemeral `token` (scope `realtime` or `live`); it travels as `?key=`.
+ *    Raw `codai_` keys in the query string are refused by the gateway (close 4401).
+ *  - Server path: pass `apiKey` (or a token) with a WebSocket constructor that accepts headers
+ *    (e.g. `ws`); it is sent as `Authorization: Bearer` on the upgrade.
+ */
+/** Minimal WebSocket surface (browser `WebSocket`, Node 22 global, or the `ws` package). */
+interface RealtimeSocket {
+    readonly readyState: number;
+    binaryType?: string;
+    send(data: string | ArrayBuffer | ArrayBufferView): void;
+    close(code?: number, reason?: string): void;
+    onopen: ((ev: unknown) => void) | null;
+    onmessage: ((ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((ev: {
+        code: number;
+        reason: string;
+    }) => void) | null;
+    onerror: ((ev: unknown) => void) | null;
+}
+/** `new (url, protocols?, options?)` — the third argument is used for headers by `ws`. */
+type RealtimeSocketCtor = new (url: string, protocols?: string | string[], options?: {
+    headers?: Record<string, string>;
+}) => RealtimeSocket;
+type RealtimeModel = 'codai-transcribe-live' | 'codai-realtime' | 'codai-voice' | (string & Record<never, never>);
+interface RealtimeConnectOptions {
+    /** Default `codai-transcribe-live`. */
+    model?: RealtimeModel;
+    /** Language hint (`ro`, `en`, …). `ro` uses the Deepgram Nova-3 lane when the gateway has it. */
+    language?: string;
+    /** Ephemeral token (scope `realtime` or `live`) — sent as `?key=`. Required in browsers. */
+    token?: string;
+    /** Raw API key — sent as `Authorization: Bearer` (needs a ctor that supports headers). */
+    apiKey?: string;
+    /** Conversation id recorded on the usage row (`?session_id=`). */
+    sessionId?: string;
+    /**
+     * First frame sent on open. Default for `codai-transcribe-live`: a transcription
+     * `session.update` (PCM 24 kHz, `language` when set). Pass `null` to send nothing.
+     */
+    sessionUpdate?: Record<string, unknown> | null;
+    /** Injectable WebSocket constructor (tests, `ws` on older Node). Defaults to `globalThis.WebSocket`. */
+    WebSocket?: RealtimeSocketCtor;
+    /** Override the gateway base URL (default: the client's `baseUrl`). */
+    baseUrl?: string;
+}
+/** Typed subset of server events; anything else arrives as `RealtimeUnknownEvent`. */
+type RealtimeEvent = {
+    type: 'session.created' | 'session.updated';
+    session?: Record<string, unknown>;
+    event_id?: string;
+} | {
+    type: 'conversation.item.input_audio_transcription.delta';
+    item_id: string;
+    content_index?: number;
+    delta: string;
+    event_id?: string;
+} | {
+    type: 'conversation.item.input_audio_transcription.completed';
+    item_id: string;
+    content_index?: number;
+    transcript: string;
+    event_id?: string;
+} | {
+    type: 'input_audio_buffer.committed';
+    item_id?: string;
+    previous_item_id?: string | null;
+} | {
+    type: 'input_audio_buffer.cleared';
+} | {
+    type: 'error';
+    error: {
+        type?: string;
+        code?: string;
+        message?: string;
+    };
+}
+/** Emitted by the client itself when the socket closes (always the last event). */
+ | {
+    type: 'close';
+    code: number;
+    reason: string;
+};
+type RealtimeUnknownEvent = {
+    type: string;
+    [k: string]: unknown;
+};
+type RealtimeAnyEvent = RealtimeEvent | RealtimeUnknownEvent;
+type Listener = (ev: RealtimeAnyEvent) => void;
+/** A live realtime session: async-iterable of events + `on()` listeners. */
+declare class RealtimeSession implements AsyncIterable<RealtimeAnyEvent> {
+    readonly socket: RealtimeSocket;
+    private readonly listeners;
+    private readonly queue;
+    private readonly waiters;
+    private readonly outbox;
+    private closed;
+    /** Resolves when the socket is open (rejects if it closes first). */
+    readonly ready: Promise<void>;
+    constructor(socket: RealtimeSocket, firstFrame: Record<string, unknown> | null);
+    /** Listen for one event type (`'*'` = every event). Returns an unsubscribe function. */
+    on(type: string, fn: Listener): () => void;
+    /** Send any client event (JSON). Queued until the socket opens. */
+    send(event: Record<string, unknown>): void;
+    /** Append PCM16 little-endian mono audio (24 kHz for `codai-transcribe-live`). */
+    appendAudio(audio: Int16Array | ArrayBuffer | Uint8Array): void;
+    /** Close the current utterance: the server answers with one `...transcription.completed`. */
+    commit(): void;
+    /** Drop audio the server holds for the current utterance. */
+    clear(): void;
+    close(code?: number, reason?: string): void;
+    [Symbol.asyncIterator](): AsyncIterator<RealtimeAnyEvent>;
+    private emit;
+}
+/** Build the `wss://…/v1/realtime?…` URL (exported for tests and custom transports). */
+declare function realtimeUrl(baseUrl: string, opts: RealtimeConnectOptions): string;
+declare class Realtime {
+    private readonly defaults;
+    constructor(defaults: {
+        baseUrl: string;
+        apiKey?: string;
+    });
+    /** Open a realtime session. Returns immediately; `await session.ready` to wait for the socket. */
+    connect(opts?: RealtimeConnectOptions): RealtimeSession;
 }
 
 /**
@@ -10894,7 +12277,7 @@ declare class Projects {
  * Do not make direct changes to the file.
  */
 type paths = {
-    readonly '/health': {
+    readonly "/health": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -10906,7 +12289,7 @@ type paths = {
          * @description Returns `{ ok: true, service: "codai-resolve" }` when the HTTP process is up. Does not
          *     touch the database. The path is `/health` (not `/healthz`, which Google Frontend reserves).
          */
-        readonly get: operations['resolveHealth'];
+        readonly get: operations["resolveHealth"];
         readonly put?: never;
         readonly post?: never;
         readonly delete?: never;
@@ -10915,7 +12298,7 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/attestations/{id}': {
+    readonly "/v1/resolve/attestations/{id}": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -10931,7 +12314,7 @@ type paths = {
          *     the URL only with people who may see the patch. `kind` is always
          *     `codai.resolve.attestation.v0`.
          */
-        readonly get: operations['getResolveAttestation'];
+        readonly get: operations["getResolveAttestation"];
         readonly put?: never;
         readonly post?: never;
         readonly delete?: never;
@@ -10940,7 +12323,7 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/balance': {
+    readonly "/v1/resolve/balance": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -10953,7 +12336,7 @@ type paths = {
          *     jobs), whether the €1 intro price is still available (no verified paid job yet and no
          *     other intro job in flight) and the wallet balance in EUR micros.
          */
-        readonly get: operations['getResolveBalance'];
+        readonly get: operations["getResolveBalance"];
         readonly put?: never;
         readonly post?: never;
         readonly delete?: never;
@@ -10962,7 +12345,7 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/jobs': {
+    readonly "/v1/resolve/jobs": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -10988,14 +12371,14 @@ type paths = {
          *     otherwise valid payload. The free-tier claim is atomic per user, so parallel submissions
          *     across several keys cannot exceed the 3 free resolves.
          */
-        readonly post: operations['createResolveJob'];
+        readonly post: operations["createResolveJob"];
         readonly delete?: never;
         readonly options?: never;
         readonly head?: never;
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/jobs/{id}': {
+    readonly "/v1/resolve/jobs/{id}": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -11009,7 +12392,7 @@ type paths = {
          *     Before answering, the server sweeps orphaned `accepted`/`running` jobs into `error`, so
          *     you never poll a zombie. A job owned by another user is reported as `404` (not `403`).
          */
-        readonly get: operations['getResolveJob'];
+        readonly get: operations["getResolveJob"];
         readonly put?: never;
         readonly post?: never;
         readonly delete?: never;
@@ -11018,7 +12401,7 @@ type paths = {
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/jobs/{id}/accept': {
+    readonly "/v1/resolve/jobs/{id}/accept": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -11044,14 +12427,14 @@ type paths = {
          *     was used; `held_micro_eur` is the wallet amount held (`0` for a credit). For a `t7` job the
          *     `402` also carries `bundle_url` (10 fixes for €49).
          */
-        readonly post: operations['acceptResolveJob'];
+        readonly post: operations["acceptResolveJob"];
         readonly delete?: never;
         readonly options?: never;
         readonly head?: never;
         readonly patch?: never;
         readonly trace?: never;
     };
-    readonly '/v1/resolve/keys': {
+    readonly "/v1/resolve/keys": {
         readonly parameters: {
             readonly query?: never;
             readonly header?: never;
@@ -11066,7 +12449,7 @@ type paths = {
          *     1 hour. Verify with `codaid resolve verify`, `resolve.verifyAttestation` (TypeScript) or
          *     `resolve.verify_attestation` (Python). `503` when signing is not configured.
          */
-        readonly get: operations['getResolveKeys'];
+        readonly get: operations["getResolveKeys"];
         readonly put?: never;
         readonly post?: never;
         readonly delete?: never;
@@ -11087,9 +12470,9 @@ type components = {
             readonly held_micro_eur: number;
             /** Format: uuid */
             readonly id: string;
-            readonly paid_with: components['schemas']['ResolvePaidWith'];
+            readonly paid_with: components["schemas"]["ResolvePaidWith"];
             /** @constant */
-            readonly status: 'accepted';
+            readonly status: "accepted";
         };
         /**
          * Attestation
@@ -11104,7 +12487,7 @@ type components = {
             /** Format: uuid */
             readonly id: string;
             /** @constant */
-            readonly kind: 'codai.resolve.attestation.v0';
+            readonly kind: "codai.resolve.attestation.v0";
             /** @description Unified diff against `base_commit`. */
             readonly patch: string;
             /** @description PASS_TO_PASS (repo suite) command, when one was run. */
@@ -11113,7 +12496,7 @@ type components = {
             /** Format: uri */
             readonly repo_url: string;
             /** @description `null` when the customer supplied `test_command`. */
-            readonly repro_test: components['schemas']['ResolveReproTest'] | null;
+            readonly repro_test: components["schemas"]["ResolveReproTest"] | null;
             /** @description Container image digest of the verification runner (`unknown` when not recorded). */
             readonly runner_image_digest: string;
             /**
@@ -11122,7 +12505,7 @@ type components = {
              *     attestations created before signing was enabled (2026-09-27). Verify against
              *     `GET /v1/resolve/keys`.
              */
-            readonly signature: components['schemas']['ResolveAttestationEnvelope'] | null;
+            readonly signature: components["schemas"]["ResolveAttestationEnvelope"] | null;
             /** Format: date-time */
             readonly started_at: string;
             /** @description FAIL_TO_PASS command that was executed. */
@@ -11148,7 +12531,7 @@ type components = {
             /** @description Base64 of the canonical statement JSON. */
             readonly payload: string;
             /** @constant */
-            readonly payloadType: 'application/vnd.codai.resolve.attestation+json;v=1';
+            readonly payloadType: "application/vnd.codai.resolve.attestation+json;v=1";
             readonly signatures: readonly {
                 /** @description Identifier of the signing key; matches `keyid` in `GET /v1/resolve/keys`. */
                 readonly keyid?: string;
@@ -11193,20 +12576,20 @@ type components = {
             /** Format: uuid */
             readonly id: string;
             /** @constant */
-            readonly status: 'declined';
+            readonly status: "declined";
         };
         /**
          * Resolve error
          * @description Flat error envelope used by every Resolve endpoint. Not the gateway `{ error: { code, message } }` shape.
          */
         readonly ResolveError: {
-            readonly error: string | components['schemas']['ResolveValidationDetails'];
+            readonly error: string | components["schemas"]["ResolveValidationDetails"];
         };
         readonly ResolveHealth: {
             /** @constant */
             readonly ok: true;
             /** @constant */
-            readonly service: 'codai-resolve';
+            readonly service: "codai-resolve";
         };
         /**
          * Insufficient funds
@@ -11228,9 +12611,9 @@ type components = {
              * @description Unit of `balance` and `required`.
              * @constant
              */
-            readonly currency: 'micro_eur';
+            readonly currency: "micro_eur";
             /** @constant */
-            readonly error: 'insufficient_funds';
+            readonly error: "insufficient_funds";
             /**
              * @description Amount the hold needs in EUR micros — the quote converted 1:1 (`19000000` = €19).
              * @example 19000000
@@ -11305,7 +12688,7 @@ type components = {
             /** Format: uuid */
             readonly id: string;
             /** @description Present once the job was accepted (and recorded how it was paid). */
-            readonly paid_with?: components['schemas']['ResolvePaidWith'];
+            readonly paid_with?: components["schemas"]["ResolvePaidWith"];
             /** @description Quoted price in USD micros; `null` until quoted, `0` on the free tier. */
             readonly quote_micro_usd: number | null;
             /**
@@ -11313,9 +12696,9 @@ type components = {
              * @description Normalised repository URL (trailing slash removed).
              */
             readonly repo_url: string;
-            readonly status: components['schemas']['ResolveJobStatus'];
+            readonly status: components["schemas"]["ResolveJobStatus"];
             /** @description Quote tier; `null` until triage completes. */
-            readonly tier: components['schemas']['ResolveTier'] | null;
+            readonly tier: components["schemas"]["ResolveTier"] | null;
             readonly triage_reason: string | null;
         };
         /**
@@ -11324,11 +12707,11 @@ type components = {
          *     (triage refused) and `error` (infrastructure failure — retryable, never billed).
          * @enum {string}
          */
-        readonly ResolveJobStatus: 'triage' | 'quoted' | 'declined' | 'accepted' | 'running' | 'resolved' | 'failed' | 'error';
+        readonly ResolveJobStatus: "triage" | "quoted" | "declined" | "accepted" | "running" | "resolved" | "failed" | "error";
         /** Verification key */
         readonly ResolveKey: {
             /** @constant */
-            readonly algorithm: 'ECDSA_P256_SHA256';
+            readonly algorithm: "ECDSA_P256_SHA256";
             /**
              * @description Envelope and signature encoding.
              * @example DSSE v1; signature DER, base64
@@ -11337,13 +12720,13 @@ type components = {
             /** @description Key identifier (the Cloud KMS key version name). */
             readonly keyid: string;
             /** @constant */
-            readonly payload_type: 'application/vnd.codai.resolve.attestation+json;v=1';
+            readonly payload_type: "application/vnd.codai.resolve.attestation+json;v=1";
             /** @description SPKI public key, PEM. */
             readonly public_key_pem: string;
         };
         /** Verification keys */
         readonly ResolveKeys: {
-            readonly keys: readonly components['schemas']['ResolveKey'][];
+            readonly keys: readonly components["schemas"]["ResolveKey"][];
         };
         /**
          * Payment method
@@ -11352,7 +12735,7 @@ type components = {
          *     Precedence: `free` > `intro` > `credit` > `wallet`.
          * @enum {string}
          */
-        readonly ResolvePaidWith: 'intro' | 'credit' | 'wallet' | 'free';
+        readonly ResolvePaidWith: "intro" | "credit" | "wallet" | "free";
         /**
          * Quote
          * @description `201` body — the job was quoted (`quoted`) or auto-accepted on the free tier (`accepted`).
@@ -11388,8 +12771,8 @@ type components = {
              * @description `accepted` only when the free tier was used (already dispatched).
              * @enum {string}
              */
-            readonly status: 'quoted' | 'accepted';
-            readonly tier: components['schemas']['ResolveTier'];
+            readonly status: "quoted" | "accepted";
+            readonly tier: components["schemas"]["ResolveTier"];
             /** @description One-line triage rationale shown with the quote. */
             readonly triage_reason: string;
         };
@@ -11411,7 +12794,7 @@ type components = {
          * @description `free` (first 3 resolves per user), `t7` ($7), `t19` ($19), `t49` ($49). Prices are in USD micros on the wire.
          * @enum {string}
          */
-        readonly ResolveTier: 'free' | 't7' | 't19' | 't49';
+        readonly ResolveTier: "free" | "t7" | "t19" | "t49";
         /**
          * Validation details
          * @description Zod `flatten()` output returned when the intake body fails schema validation.
@@ -11429,8 +12812,8 @@ type components = {
          * @description JSON body POSTed to `callback_url`. Verify `x-codai-signature` over the raw bytes before trusting it.
          */
         readonly ResolveWebhookEvent: {
-            readonly event: components['schemas']['ResolveWebhookEventName'];
-            readonly job: components['schemas']['ResolveWebhookJob'];
+            readonly event: components["schemas"]["ResolveWebhookEventName"];
+            readonly job: components["schemas"]["ResolveWebhookJob"];
             /**
              * Format: date-time
              * @description When this delivery attempt was built (UTC).
@@ -11442,7 +12825,7 @@ type components = {
          * @description `job.quoted` (paid quote ready), `job.declined` (triage refused), `job.resolved` (verified fix + attestation), `job.failed` (no verified fix, hold refunded), `job.error` (infrastructure failure, hold refunded).
          * @enum {string}
          */
-        readonly ResolveWebhookEventName: 'job.quoted' | 'job.declined' | 'job.resolved' | 'job.failed' | 'job.error';
+        readonly ResolveWebhookEventName: "job.quoted" | "job.declined" | "job.resolved" | "job.failed" | "job.error";
         /**
          * Webhook job snapshot
          * @description Snapshot of the job at send time. Nullable fields are `null` until the corresponding stage has run.
@@ -11468,8 +12851,8 @@ type components = {
             readonly quote_micro_usd: number | null;
             /** Format: uri */
             readonly repo_url: string;
-            readonly status: components['schemas']['ResolveJobStatus'];
-            readonly tier: components['schemas']['ResolveTier'] | null;
+            readonly status: components["schemas"]["ResolveJobStatus"];
+            readonly tier: components["schemas"]["ResolveTier"] | null;
         };
     };
     responses: {
@@ -11484,7 +12867,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
         /** @description The job is not in the `quoted` state (`job is <status>, only quoted jobs can be accepted`). */
@@ -11493,7 +12876,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
         /**
@@ -11507,7 +12890,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveInsufficientFunds'];
+                readonly "application/json": components["schemas"]["ResolveInsufficientFunds"];
             };
         };
         /** @description The job row could not be inserted (`job insert failed`). */
@@ -11516,7 +12899,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
         /** @description No such job/attestation, or the job belongs to another user. */
@@ -11525,7 +12908,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
         /**
@@ -11538,7 +12921,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
         /** @description Missing, malformed or revoked API key (`invalid or missing API key`). */
@@ -11547,7 +12930,7 @@ type components = {
                 readonly [name: string]: unknown;
             };
             content: {
-                readonly 'application/json': components['schemas']['ResolveError'];
+                readonly "application/json": components["schemas"]["ResolveError"];
             };
         };
     };
@@ -11575,7 +12958,7 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveHealth'];
+                    readonly "application/json": components["schemas"]["ResolveHealth"];
                 };
             };
         };
@@ -11598,10 +12981,10 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveAttestation'];
+                    readonly "application/json": components["schemas"]["ResolveAttestation"];
                 };
             };
-            readonly 404: components['responses']['ResolveNotFound'];
+            readonly 404: components["responses"]["ResolveNotFound"];
         };
     };
     readonly getResolveBalance: {
@@ -11619,10 +13002,10 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveBalance'];
+                    readonly "application/json": components["schemas"]["ResolveBalance"];
                 };
             };
-            readonly 401: components['responses']['ResolveUnauthorized'];
+            readonly 401: components["responses"]["ResolveUnauthorized"];
         };
     };
     readonly createResolveJob: {
@@ -11634,7 +13017,7 @@ interface operations {
         };
         readonly requestBody: {
             readonly content: {
-                readonly 'application/json': components['schemas']['ResolveIntake'];
+                readonly "application/json": components["schemas"]["ResolveIntake"];
             };
         };
         readonly responses: {
@@ -11644,7 +13027,7 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveDeclined'];
+                    readonly "application/json": components["schemas"]["ResolveDeclined"];
                 };
             };
             /** @description Job created and quoted (or auto-accepted on the free tier). */
@@ -11653,13 +13036,13 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveQuote'];
+                    readonly "application/json": components["schemas"]["ResolveQuote"];
                 };
             };
-            readonly 400: components['responses']['ResolveBadRequest'];
-            readonly 401: components['responses']['ResolveUnauthorized'];
-            readonly 429: components['responses']['ResolveRateLimited'];
-            readonly 500: components['responses']['ResolveInternalError'];
+            readonly 400: components["responses"]["ResolveBadRequest"];
+            readonly 401: components["responses"]["ResolveUnauthorized"];
+            readonly 429: components["responses"]["ResolveRateLimited"];
+            readonly 500: components["responses"]["ResolveInternalError"];
         };
     };
     readonly getResolveJob: {
@@ -11668,7 +13051,7 @@ interface operations {
             readonly header?: never;
             readonly path: {
                 /** @description Job UUID returned by `POST /v1/resolve/jobs`. */
-                readonly id: components['parameters']['JobId'];
+                readonly id: components["parameters"]["JobId"];
             };
             readonly cookie?: never;
         };
@@ -11680,11 +13063,11 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveJob'];
+                    readonly "application/json": components["schemas"]["ResolveJob"];
                 };
             };
-            readonly 401: components['responses']['ResolveUnauthorized'];
-            readonly 404: components['responses']['ResolveNotFound'];
+            readonly 401: components["responses"]["ResolveUnauthorized"];
+            readonly 404: components["responses"]["ResolveNotFound"];
         };
     };
     readonly acceptResolveJob: {
@@ -11693,7 +13076,7 @@ interface operations {
             readonly header?: never;
             readonly path: {
                 /** @description Job UUID returned by `POST /v1/resolve/jobs`. */
-                readonly id: components['parameters']['JobId'];
+                readonly id: components["parameters"]["JobId"];
             };
             readonly cookie?: never;
         };
@@ -11705,13 +13088,13 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveAccepted'];
+                    readonly "application/json": components["schemas"]["ResolveAccepted"];
                 };
             };
-            readonly 401: components['responses']['ResolveUnauthorized'];
-            readonly 402: components['responses']['ResolveInsufficientFunds'];
-            readonly 404: components['responses']['ResolveNotFound'];
-            readonly 409: components['responses']['ResolveConflict'];
+            readonly 401: components["responses"]["ResolveUnauthorized"];
+            readonly 402: components["responses"]["ResolveInsufficientFunds"];
+            readonly 404: components["responses"]["ResolveNotFound"];
+            readonly 409: components["responses"]["ResolveConflict"];
         };
     };
     readonly getResolveKeys: {
@@ -11729,7 +13112,7 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveKeys'];
+                    readonly "application/json": components["schemas"]["ResolveKeys"];
                 };
             };
             /** @description Attestation signing is not configured (`attestation signing not configured`). */
@@ -11738,7 +13121,7 @@ interface operations {
                     readonly [name: string]: unknown;
                 };
                 content: {
-                    readonly 'application/json': components['schemas']['ResolveError'];
+                    readonly "application/json": components["schemas"]["ResolveError"];
                 };
             };
         };
@@ -11748,18 +13131,18 @@ interface operations {
             readonly query?: never;
             readonly header: {
                 /** @description Idempotency key `<jobId>:<event>`, identical on every retry. */
-                readonly 'x-codai-delivery': string;
+                readonly "x-codai-delivery": string;
                 /** @description Event name, same as `event` in the body. */
-                readonly 'x-codai-event': components['schemas']['ResolveWebhookEventName'];
+                readonly "x-codai-event": components["schemas"]["ResolveWebhookEventName"];
                 /** @description `t=<unix seconds>,v1=<hex HMAC-SHA256 of "<t>.<raw body>">`. */
-                readonly 'x-codai-signature': string;
+                readonly "x-codai-signature": string;
             };
             readonly path?: never;
             readonly cookie?: never;
         };
         readonly requestBody: {
             readonly content: {
-                readonly 'application/json': components['schemas']['ResolveWebhookEvent'];
+                readonly "application/json": components["schemas"]["ResolveWebhookEvent"];
             };
         };
         readonly responses: {
@@ -11883,7 +13266,7 @@ interface ResolveWaitOptions {
     /** Called with every polled job (progress UIs). */
     onPoll?: (job: ResolveJob) => void;
 }
-type CallOpts$4 = {
+type CallOpts$6 = {
     signal?: AbortSignal;
 };
 declare class Resolve {
@@ -11895,9 +13278,9 @@ declare class Resolve {
      * (`status: 'accepted'`) or a decline (`status: 'declined'`). Never retried:
      * a retry could create a second job.
      */
-    submit(body: ResolveIntake, opts?: CallOpts$4): Promise<ResolveSubmitResult>;
+    submit(body: ResolveIntake, opts?: CallOpts$6): Promise<ResolveSubmitResult>;
     /** `GET /v1/resolve/jobs/{id}` — status, quote, reasons, cost and attestation pointer. */
-    get(id: string, opts?: CallOpts$4): Promise<ResolveJob>;
+    get(id: string, opts?: CallOpts$6): Promise<ResolveJob>;
     /**
      * `POST /v1/resolve/jobs/{id}/accept` — accept a paid quote and start the job.
      * The result's `paid_with` says how it was paid (`intro` €1 hold, `credit`
@@ -11905,18 +13288,18 @@ declare class Resolve {
      * carries `topupUrl`, plus `bundleUrl` for t7) when the wallet is short,
      * `ResolveError` 409 when the job is not `quoted`.
      */
-    accept(id: string, opts?: CallOpts$4): Promise<ResolveAccepted>;
+    accept(id: string, opts?: CallOpts$6): Promise<ResolveAccepted>;
     /**
      * `GET /v1/resolve/attestations/{id}` — public execution proof (no auth needed
      * server-side). Accepts the attestation id or the job's `attestation_url`.
      */
-    attestation(idOrUrl: string, opts?: CallOpts$4): Promise<ResolveAttestation>;
+    attestation(idOrUrl: string, opts?: CallOpts$6): Promise<ResolveAttestation>;
     /** `GET /health` — liveness of the Resolve service. */
-    health(opts?: CallOpts$4): Promise<ResolveHealth>;
+    health(opts?: CallOpts$6): Promise<ResolveHealth>;
     /** `GET /v1/resolve/balance` — fix credits (t7 only), intro availability and wallet balance. */
-    balance(opts?: CallOpts$4): Promise<ResolveBalance>;
+    balance(opts?: CallOpts$6): Promise<ResolveBalance>;
     /** `GET /v1/resolve/keys` — public keys that sign attestations (no auth needed server-side). */
-    keys(opts?: CallOpts$4): Promise<ResolveKeys>;
+    keys(opts?: CallOpts$6): Promise<ResolveKeys>;
     /**
      * Verify an attestation's signature and that the signed statement matches
      * its fields. Fetches `keys()` unless `opts.keys` is given (pin them to
@@ -12003,7 +13386,21 @@ type SessionEventsPage = Reply<'listSessionEvents'>;
 type SessionControl = Schema<'SessionControl'>;
 type SessionControlRequest = Mutable<Body<'submitSessionControl'>>;
 type SessionControlAccepted = Reply<'submitSessionControl', 202>;
-type SessionDispatchRequest = Mutable<Body<'dispatchToDevice'>>;
+type SessionDispatchBase = Omit<Mutable<Body<'dispatchToDevice'>>, 'mode' | 'text' | 'turn_id'>;
+/**
+ * `POST …/dispatch` body. `send` (the default) needs `text` and runs it as a new turn on the
+ * target; `open` is a handoff — the target only opens the session, so it takes no text/turn.
+ */
+type SessionDispatchRequest = (SessionDispatchBase & {
+    mode?: 'send';
+    text: string;
+    turn_id?: string;
+}) | (SessionDispatchBase & {
+    mode: 'open';
+    text?: never;
+    turn_id?: never;
+});
+type SessionDispatchMode = NonNullable<Body<'dispatchToDevice'>['mode']>;
 type SessionDispatchResponse = Reply<'dispatchToDevice', 202>;
 type SessionLeaseClaimRequest = Mutable<Body<'claimSessionLease'>>;
 type SessionLeaseResponse = Reply<'claimSessionLease'>;
@@ -12011,7 +13408,7 @@ type SessionShare = Schema<'OrgSessionShare'>;
 type SessionShareCreateRequest = Mutable<Body<'createSessionShare'>>;
 type SessionShareCreated = Reply<'createSessionShare', 201>;
 type SharedSession = Schema<'OrgSharedSession'>;
-type CallOpts$3 = {
+type CallOpts$5 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -12058,19 +13455,19 @@ declare class SessionLease {
     private readonly http;
     constructor(http: HttpClient);
     /** `POST /v1/sessions/{id}/lease` — CAS claim; `force: true` takes over a live lease. */
-    acquire(sessionId: string, body?: SessionLeaseClaimRequest, opts?: CallOpts$3): Promise<SessionLeaseResponse>;
+    acquire(sessionId: string, body?: SessionLeaseClaimRequest, opts?: CallOpts$5): Promise<SessionLeaseResponse>;
     /** `PUT /v1/sessions/{id}/lease` — heartbeat every 10 s (TTL 30 s). */
-    renew(sessionId: string, opts?: CallOpts$3): Promise<SessionLeaseResponse>;
+    renew(sessionId: string, opts?: CallOpts$5): Promise<SessionLeaseResponse>;
     /** `DELETE /v1/sessions/{id}/lease` */
-    release(sessionId: string, opts?: CallOpts$3): Promise<Reply<'releaseSessionLease'>>;
+    release(sessionId: string, opts?: CallOpts$5): Promise<Reply<'releaseSessionLease'>>;
 }
 declare class SessionEvents {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/sessions/{id}/events?after=&limit=` */
-    list(sessionId: string, query?: Mutable<QueryOf<'listSessionEvents'>>, opts?: CallOpts$3): Promise<SessionEventsPage>;
+    list(sessionId: string, query?: Mutable<QueryOf<'listSessionEvents'>>, opts?: CallOpts$5): Promise<SessionEventsPage>;
     /** `POST /v1/sessions/{id}/events` — executor only (needs the live lease). */
-    append(sessionId: string, body: SessionEventsAppendRequest, opts?: CallOpts$3): Promise<SessionEventsAppendResponse>;
+    append(sessionId: string, body: SessionEventsAppendRequest, opts?: CallOpts$5): Promise<SessionEventsAppendResponse>;
 }
 declare class SessionControls {
     private readonly http;
@@ -12079,25 +13476,25 @@ declare class SessionControls {
     list(sessionId: string, query?: {
         applied?: boolean;
         target?: 'me' | string;
-    }, opts?: CallOpts$3): Promise<SessionControl[]>;
+    }, opts?: CallOpts$5): Promise<SessionControl[]>;
     /** `POST /v1/sessions/{id}/control` — send a control to the executor (editor+). */
-    submit(sessionId: string, body: SessionControlRequest, opts?: CallOpts$3): Promise<SessionControlAccepted>;
+    submit(sessionId: string, body: SessionControlRequest, opts?: CallOpts$5): Promise<SessionControlAccepted>;
     /** `POST /v1/sessions/{id}/control/{cid}/applied` — executor only. */
-    markApplied(sessionId: string, controlId: string, opts?: CallOpts$3): Promise<Reply<'markSessionControlApplied'>>;
+    markApplied(sessionId: string, controlId: string, opts?: CallOpts$5): Promise<Reply<'markSessionControlApplied'>>;
 }
 declare class SessionShares {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/sessions/{id}/shares` — owner only. */
-    list(sessionId: string, opts?: CallOpts$3): Promise<SessionShare[]>;
+    list(sessionId: string, opts?: CallOpts$5): Promise<SessionShare[]>;
     /** `POST /v1/sessions/{id}/shares` — `token` is returned once for link shares. */
-    create(sessionId: string, body: SessionShareCreateRequest, opts?: CallOpts$3): Promise<SessionShareCreated>;
+    create(sessionId: string, body: SessionShareCreateRequest, opts?: CallOpts$5): Promise<SessionShareCreated>;
     /** `DELETE /v1/sessions/{id}/shares/{shareId}` */
-    delete(sessionId: string, shareId: string, opts?: CallOpts$3): Promise<Reply<'deleteSessionShare'>>;
+    delete(sessionId: string, shareId: string, opts?: CallOpts$5): Promise<Reply<'deleteSessionShare'>>;
     /** `GET /v1/sessions/shared-with-me` */
     sharedWithMe(query?: {
         archived?: boolean;
-    }, opts?: CallOpts$3): Promise<SharedSession[]>;
+    }, opts?: CallOpts$5): Promise<SharedSession[]>;
 }
 declare class Sessions {
     private readonly http;
@@ -12107,24 +13504,27 @@ declare class Sessions {
     readonly shares: SessionShares;
     constructor(http: HttpClient);
     /** `POST /v1/sessions` — idempotent on `session_key` (200 existing / 201 created). */
-    create(body?: SessionCreateRequest, opts?: CallOpts$3): Promise<Session & {
+    create(body?: SessionCreateRequest, opts?: CallOpts$5): Promise<Session & {
         created: boolean;
     }>;
     /** `GET /v1/sessions?limit=&archived=` — own sessions first, then shared. */
     list(query?: {
         limit?: number;
         archived?: boolean;
-    }, opts?: CallOpts$3): Promise<SessionListItem[]>;
+    }, opts?: CallOpts$5): Promise<SessionListItem[]>;
     /** `GET /v1/sessions/{id}` — detail with members, lease and presence. */
     get(sessionId: string, query?: {
         share?: string;
-    }, opts?: CallOpts$3): Promise<SessionDetail>;
+    }, opts?: CallOpts$5): Promise<SessionDetail>;
     /** `PATCH /v1/sessions/{id}` — rename / archive (owner). */
-    update(sessionId: string, body: SessionPatchRequest, opts?: CallOpts$3): Promise<Session>;
+    update(sessionId: string, body: SessionPatchRequest, opts?: CallOpts$5): Promise<Session>;
     /** `DELETE /v1/sessions/{id}` — irreversible (owner). */
-    delete(sessionId: string, opts?: CallOpts$3): Promise<Reply<'deleteSession'>>;
-    /** `POST /v1/sessions/{id}/dispatch` — queue a `send` for one device and wake it over FCM. */
-    dispatch(sessionId: string, body: SessionDispatchRequest, opts?: CallOpts$3): Promise<SessionDispatchResponse>;
+    delete(sessionId: string, opts?: CallOpts$5): Promise<Reply<'deleteSession'>>;
+    /**
+     * `POST /v1/sessions/{id}/dispatch` — queue a `send` for one device and wake it over FCM.
+     * `{ mode: 'open' }` hands the session off instead: the target just opens it (no user turn).
+     */
+    dispatch(sessionId: string, body: SessionDispatchRequest, opts?: CallOpts$5): Promise<SessionDispatchResponse>;
     /**
      * `GET /v1/sessions/{id}/stream?after=` — live SSE of `event` / `control` /
      * `lease` / `presence` frames. `: ping` heartbeats are skipped. The server
@@ -12133,24 +13533,61 @@ declare class Sessions {
     stream(sessionId: string, query?: {
         after?: number;
         share?: string;
-    }, opts?: CallOpts$3): AsyncGenerator<SessionStreamEvent, void, undefined>;
+    }, opts?: CallOpts$5): AsyncGenerator<SessionStreamEvent, void, undefined>;
 }
 
 /** `POST /v1/systemone` — typed decisions from codai-s1 (Choice / Score / Noul). */
 
 type SystemOneRequest = Mutable<Body<'createSystemOne'>>;
 type SystemOneResponse = Reply<'createSystemOne'>;
+type SystemOneState = NonNullable<SystemOneRequest['state']>;
+type SystemOneAnswers = NonNullable<SystemOneResponse['answers']>;
+/** Single-state call: `answers` is always present. */
+type SystemOneSingleRequest = Omit<SystemOneRequest, 'items'> & {
+    state: SystemOneState;
+};
+type SystemOneSingleResponse = SystemOneResponse & {
+    answers: SystemOneAnswers;
+};
+/** Batch call (1-16 items, same questions, run concurrently). */
+type SystemOneBatchRequest = Omit<SystemOneRequest, 'state' | 'items'> & {
+    items: Array<{
+        id: string;
+        state: SystemOneState;
+    }>;
+};
+type SystemOneBatchResponse = SystemOneResponse & {
+    items: Array<{
+        id: string;
+        answers: SystemOneAnswers;
+    }>;
+};
 declare class SystemOne {
     private readonly http;
     constructor(http: HttpClient);
     /**
-     * Ask one or more typed questions about `state`. Throws on 503 `s1_unavailable` like any other
-     * error — keep a local fallback and catch it: the gateway never substitutes a generative model.
+     * Ask one or more typed questions about `state` (or about each of `items`). Throws on 503
+     * `s1_unavailable` like any other error — keep a local fallback and catch it. The gateway
+     * substitutes a generative model ONLY when you pass `fallback: 'codai-fast'`, and then the
+     * response says `fallback_used: true`. `timeout_ms` (100-5000) bounds the s1 call.
      */
+    create(body: SystemOneSingleRequest, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): Promise<SystemOneSingleResponse>;
+    create(body: SystemOneBatchRequest, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): Promise<SystemOneBatchResponse>;
     create(body: SystemOneRequest, opts?: {
         ext?: CodaiRequestExtensions;
         signal?: AbortSignal;
     }): Promise<SystemOneResponse>;
+    /** Same questions about up to 16 states in one call; results come back in `items` order. */
+    batch(body: SystemOneBatchRequest, opts?: {
+        ext?: CodaiRequestExtensions;
+        signal?: AbortSignal;
+    }): Promise<SystemOneBatchResponse>;
 }
 
 /** `/v1/tasks/*` — outcome-billing task lifecycle. */
@@ -12162,7 +13599,7 @@ type TaskListPage = Reply<'listTasks'>;
 type TaskConfirmRequest = Mutable<Body<'confirmTask'>>;
 type TaskConfirmResponse = Reply<'confirmTask'>;
 type TaskListQuery = Mutable<QueryOf<'listTasks'>>;
-type CallOpts$2 = {
+type CallOpts$4 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -12170,15 +13607,15 @@ declare class Tasks {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/tasks` — newest first; page with `cursor` = previous `next_cursor`. */
-    list(query?: TaskListQuery, opts?: CallOpts$2): Promise<TaskListPage>;
+    list(query?: TaskListQuery, opts?: CallOpts$4): Promise<TaskListPage>;
     /** `GET /v1/tasks/pending` — tasks awaiting your confirmation (max 100). */
-    pending(opts?: CallOpts$2): Promise<Task[]>;
+    pending(opts?: CallOpts$4): Promise<Task[]>;
     /** `GET /v1/tasks/stats?since=` */
-    stats(since?: string | Date, opts?: CallOpts$2): Promise<TaskStats>;
+    stats(since?: string | Date, opts?: CallOpts$4): Promise<TaskStats>;
     /** `GET /v1/tasks/{id}` */
-    get(id: string, opts?: CallOpts$2): Promise<Task>;
+    get(id: string, opts?: CallOpts$4): Promise<Task>;
     /** `POST /v1/tasks/{id}/confirm` — answer "Did codai solve it?". */
-    confirm(id: string, body: TaskConfirmRequest, opts?: CallOpts$2): Promise<TaskConfirmResponse>;
+    confirm(id: string, body: TaskConfirmRequest, opts?: CallOpts$4): Promise<TaskConfirmResponse>;
 }
 
 /** `/v1/triggers/*` + `/v1/notifications/*` — event triggers (webhooks → agent sessions) and the inbox. */
@@ -12197,7 +13634,7 @@ type NotificationsRead = Reply<'markNotificationsRead'>;
 type NotificationsDeleted = {
     readonly deleted: number;
 };
-type CallOpts$1 = {
+type CallOpts$3 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -12205,22 +13642,22 @@ declare class Triggers {
     private readonly http;
     constructor(http: HttpClient);
     /** `GET /v1/triggers` — never includes the signing secret. */
-    list(opts?: CallOpts$1): Promise<TriggerList>;
+    list(opts?: CallOpts$3): Promise<TriggerList>;
     /** `POST /v1/triggers` — the response carries the signing `secret` ONCE. */
-    create(body: TriggerCreateRequest, opts?: CallOpts$1): Promise<TriggerCreated>;
+    create(body: TriggerCreateRequest, opts?: CallOpts$3): Promise<TriggerCreated>;
     /** `PATCH /v1/triggers/{id}` — name / enabled / policy. */
-    update(id: string, body: TriggerPatch, opts?: CallOpts$1): Promise<TriggerUpdated>;
+    update(id: string, body: TriggerPatch, opts?: CallOpts$3): Promise<TriggerUpdated>;
     /** `DELETE /v1/triggers/{id}` — its hook URL stops working immediately. */
-    delete(id: string, opts?: CallOpts$1): Promise<Reply<'deleteTrigger'>>;
+    delete(id: string, opts?: CallOpts$3): Promise<Reply<'deleteTrigger'>>;
     /** `POST /v1/triggers/{id}/rotate-secret` — new secret, shown once. */
-    rotateSecret(id: string, opts?: CallOpts$1): Promise<Reply<'rotateTriggerSecret'>>;
+    rotateSecret(id: string, opts?: CallOpts$3): Promise<Reply<'rotateTriggerSecret'>>;
     /** `POST /v1/triggers/{id}/test` — manual fire through the full pipeline; returns the decision + reason. */
     /** `PUT /v1/triggers/{id}/secret` — store a secret issued by the source (e.g. a Sentry integration's client secret). */
-    setSecret(id: string, secret: string, opts?: CallOpts$1): Promise<Reply<'setTriggerSecret'>>;
+    setSecret(id: string, secret: string, opts?: CallOpts$3): Promise<Reply<'setTriggerSecret'>>;
     /** `POST /v1/triggers/{id}/test` — manual fire through the full pipeline; returns the decision + reason. */
-    test(id: string, body?: TriggerTestRequest, opts?: CallOpts$1): Promise<TriggerTestResult>;
+    test(id: string, body?: TriggerTestRequest, opts?: CallOpts$3): Promise<TriggerTestResult>;
     /** `GET /v1/triggers/{id}/events?limit=` — recent deliveries with decisions. */
-    events(id: string, limit?: number, opts?: CallOpts$1): Promise<TriggerEvents>;
+    events(id: string, limit?: number, opts?: CallOpts$3): Promise<TriggerEvents>;
     /**
      * `POST /v1/hooks/{id}` — send an event to a `generic` / `form` trigger from your own code. Signs the body
      * (`X-Codai-Signature: t=<unix>,v1=HMAC_SHA256(secret, "<t>.<body>")`, WebCrypto — Node 20+, browsers, Deno,
@@ -12235,7 +13672,7 @@ declare class Triggers {
         labels?: string[];
         dedupe_key?: string;
         resolved?: boolean;
-    }, opts?: CallOpts$1 & {
+    }, opts?: CallOpts$3 & {
         deliveryId?: string;
     }): Promise<Reply<'receiveTriggerHook'>>;
 }
@@ -12246,18 +13683,52 @@ declare class Notifications {
     list(query?: {
         unread?: boolean;
         limit?: number;
-    }, opts?: CallOpts$1): Promise<NotificationList>;
+    }, opts?: CallOpts$3): Promise<NotificationList>;
     /** `POST /v1/notifications/read` — `ids` omitted = every unread one. */
-    markRead(ids?: number[], opts?: CallOpts$1): Promise<NotificationsRead>;
+    markRead(ids?: number[], opts?: CallOpts$3): Promise<NotificationsRead>;
     /** `DELETE /v1/notifications/:id` — `{ deleted: 0 }` when the id is missing or not yours. */
-    delete(id: number, opts?: CallOpts$1): Promise<NotificationsDeleted>;
+    delete(id: number, opts?: CallOpts$3): Promise<NotificationsDeleted>;
     /** `POST /v1/notifications/delete` — 1..200 ids; ids of other users are skipped. */
-    deleteMany(ids: number[], opts?: CallOpts$1): Promise<NotificationsDeleted>;
+    deleteMany(ids: number[], opts?: CallOpts$3): Promise<NotificationsDeleted>;
+}
+
+/** `/v1/prompts/*` — pending prompts: ready-to-paste prompts left for a future chat (handoffs, follow-ups). */
+
+type Prompt = Schema<'Prompt'>;
+type PromptStatus = Schema<'PromptStatus'>;
+type PromptSource = Schema<'PromptSource'>;
+type PromptList = Reply<'listPrompts'>;
+type PromptListQuery = Mutable<QueryOf<'listPrompts'>>;
+type PromptCreateRequest = Mutable<Body<'createPrompt'>>;
+type PromptCreated = Reply<'createPrompt'>;
+type PromptPatch = Mutable<Body<'updatePrompt'>>;
+type PromptLaunched = Reply<'launchPrompt'>;
+type PromptDeleted = Reply<'deletePrompt'>;
+type CallOpts$2 = {
+    ext?: CodaiRequestExtensions;
+    signal?: AbortSignal;
+};
+declare class Prompts {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** `GET /v1/prompts?status=&limit=` — default `open`; `due` = open and `not_before` empty or passed. */
+    list(query?: PromptListQuery, opts?: CallOpts$2): Promise<PromptList>;
+    /** `POST /v1/prompts` — idempotent on the text (`created: false` for a duplicate); `goal_key` supersedes older open ones. */
+    create(body: PromptCreateRequest, opts?: CallOpts$2): Promise<PromptCreated>;
+    /** `GET /v1/prompts/{id}`. */
+    get(id: string, opts?: CallOpts$2): Promise<Prompt>;
+    /** `PATCH /v1/prompts/{id}` — edit, snooze (`not_before`), close (`status: 'done' | 'dismissed'`). */
+    update(id: string, body: PromptPatch, opts?: CallOpts$2): Promise<Prompt>;
+    /** `DELETE /v1/prompts/{id}` — `{ deleted: 0 }` when the id is missing or not yours. */
+    delete(id: string, opts?: CallOpts$2): Promise<PromptDeleted>;
+    /** `POST /v1/prompts/{id}/launch` — new shared session + `send` control on a device; the prompt becomes `launched`. */
+    launch(id: string, deviceId?: string, opts?: CallOpts$2): Promise<PromptLaunched>;
 }
 
 /** `POST /v1/tokens` — ephemeral scoped tokens for browsers / webviews. */
 
-type EphemeralScope = 'realtime' | 'audio' | 'embeddings';
+/** `live` = realtime + audio in one token (a live co-host's speech-to-text and text-to-speech). */
+type EphemeralScope = 'realtime' | 'audio' | 'embeddings' | 'live';
 type EphemeralTokenResponse = Reply<'createEphemeralToken'>;
 interface EphemeralToken {
     token: string;
@@ -12284,7 +13755,7 @@ type ToolSearchRequest = Mutable<Body<'toolsSearch'>>;
 type ToolSearchResponse = Reply<'toolsSearch'>;
 type ToolFetchRequest = Mutable<Body<'toolsFetch'>>;
 type ToolFetchResponse = Reply<'toolsFetch'>;
-type CallOpts = {
+type CallOpts$1 = {
     ext?: CodaiRequestExtensions;
     signal?: AbortSignal;
 };
@@ -12292,9 +13763,30 @@ declare class Tools {
     private readonly http;
     constructor(http: HttpClient);
     /** `POST /v1/tools/search` — verified web search (never falls back to an unverified provider). */
-    search(body: ToolSearchRequest, opts?: CallOpts): Promise<ToolSearchResponse>;
+    search(body: ToolSearchRequest, opts?: CallOpts$1): Promise<ToolSearchResponse>;
     /** `POST /v1/tools/fetch` — fetch + extract a public page (SSRF-guarded). */
-    fetch(body: ToolFetchRequest, opts?: CallOpts): Promise<ToolFetchResponse>;
+    fetch(body: ToolFetchRequest, opts?: CallOpts$1): Promise<ToolFetchResponse>;
+}
+
+/**
+ * `/v1/verify/agent-output*` — EXPERIMENTAL, unaudited (HIDE protocol) verification of
+ * signed agent outputs. Provenance only, never authentication. Unauthenticated endpoints.
+ */
+
+type EnvironmentTaskOutputSignature = Schema<'EnvironmentTaskOutputSignature'>;
+type AgentOutputKey = Reply<'getAgentOutputKey'>;
+type AgentOutputVerifyBody = Mutable<Body<'verifyAgentOutput'>>;
+type AgentOutputVerifyResult = Reply<'verifyAgentOutput'>;
+type CallOpts = {
+    signal?: AbortSignal;
+};
+declare class Verify {
+    private readonly http;
+    constructor(http: HttpClient);
+    /** `GET /v1/verify/agent-output/key` — `{ enabled: false }` when signing is off. */
+    agentOutputKey(opts?: CallOpts): Promise<AgentOutputKey>;
+    /** `POST /v1/verify/agent-output` — 503 `signing_disabled` when signing is off. */
+    agentOutput(body: AgentOutputVerifyBody, opts?: CallOpts): Promise<AgentOutputVerifyResult>;
 }
 
 /**
@@ -12321,12 +13813,14 @@ declare const RESOLVE_OPERATION_METHODS: Record<string, string>;
  * method — see `OPERATION_METHODS`). Resources hang off the `Codai` client:
  *
  *   client.chat.completions.create / .stream   client.messages / client.responses
- *   client.embeddings / client.audio / client.tokens / client.models / client.health
- *   client.systemOne.create (typed decisions, codai-s1)
+ *   client.embeddings / client.images / client.audio / client.tokens / client.models / client.health
+ *   client.systemOne.create / .batch (typed decisions, codai-s1)
+ *   client.realtime.connect (WebSocket live STT / voice; not an OpenAPI operation)
  *   client.agents.run + client.agents.runs.*    client.tools.search / .fetch
  *   client.tasks.*                              client.sessions.* (events, controls, lease, shares, stream)
  *   client.devices.* / client.hosts.*           client.orgs.* / client.account / client.receipt
  *   client.projects.*                           client.environments.* (members, ports, secrets)
+ *   client.verify.agentOutputKey / .agentOutput (EXPERIMENTAL HIDE-signed agent outputs)
  *   client.feedback / client.phoneModels
  *   client.resolve.* (verified bug fixes on https://resolve.codai.ro — resolve.yaml)
  *
@@ -12397,10 +13891,14 @@ declare class Codai {
         embeddings: number[][];
         raw: unknown;
     }>);
+    /** Image generation and editing (`images.generate({ prompt })`, `images.edit({ prompt, image })`; codai-image = gemini-3.1-flash-image, EU). */
+    readonly images: Images;
     readonly audio: Audio;
     /** Typed decisions from codai-s1 (`systemOne.create({ state, questions })`). */
     readonly systemOne: SystemOne;
     readonly tokens: Tokens;
+    /** WebSocket realtime sessions (`realtime.connect({ model, language, token })`) — live STT and voice. */
+    readonly realtime: Realtime;
     readonly models: Models & (() => Promise<Array<{
         id: string;
     }>>);
@@ -12412,12 +13910,16 @@ declare class Codai {
     readonly triggers: Triggers;
     /** Inbox of trigger / cloud-task notifications. */
     readonly notifications: Notifications;
+    /** Pending prompts — ready-to-paste prompts left for a future chat (handoffs, dated follow-ups). */
+    readonly prompts: Prompts;
     readonly sessions: Sessions;
     readonly devices: Devices;
     readonly hosts: Hosts;
     readonly orgs: Orgs;
     readonly projects: Projects;
     readonly environments: Environments;
+    /** EXPERIMENTAL (HIDE, unaudited): verify signed agent outputs. Provenance only. */
+    readonly verify: Verify;
     readonly account: Account;
     readonly receipt: Receipts;
     readonly feedback: Feedback & ((requestId: string, rating: 1 | -1, comment?: string) => Promise<void>);
@@ -12433,4 +13935,4 @@ declare class Codai {
     private legacyExt;
 }
 
-export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type ResolveAttestationEnvelope, type ResolveAttestationVerifyResult, type ResolveBalance, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type ResolveKey, type ResolveKeys, type operations as ResolveOperations, type ResolvePaidWith, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SseFrame, type StatusResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };
+export { Account, type AccountPatchRequest, type AccountPatchResponse, type AccountView, type AgentOutputKey, type AgentOutputVerifyBody, type AgentOutputVerifyResult, type AgentRun, type AgentRunAccepted, type AgentRunCreateRequest, type AgentRunRequest, type AgentRunResult, type AgentRunStats, type AgentRunStatus, type AgentRunStep, type AgentRunStreamEvent, AgentRuns, type AgentSyncResult, Agents, Audio, Chat, type ChatCallOptions, type ChatCompletionChunk, type ChatCompletionInput, type ChatCompletionRequest, type ChatCompletionResponse, ChatCompletions, type ChatMessage, type ChatOptions, type ChatResult, type ChatStream, type ChatStreamResult, type ChatTool, type ChatToolCall, type ChatUsage, Codai, type CodaiClientOptions, CodaiError, type CodaiRequestExtensions, type Device, type DevicePatch, type DevicePatched, Devices, type DispatchInbox, Embeddings, type EmbeddingsOptions, type EmbeddingsRequest, type EmbeddingsResponse, type EmbeddingsResult, type Environment, type EnvironmentAddMemberBody, type EnvironmentCreateBody, type EnvironmentDetail, type EnvironmentEnrollBody, type EnvironmentEnrollToken, type EnvironmentEnrolled, type EnvironmentMember, type EnvironmentMemberCreated, EnvironmentMembers, type EnvironmentPatchBody, type EnvironmentPort, type EnvironmentPortBody, EnvironmentPorts, type EnvironmentProvider, type EnvironmentRole, type EnvironmentSecret, type EnvironmentSecretSet, EnvironmentSecrets, type EnvironmentSshCa, type EnvironmentSshCert, type EnvironmentSshCertBody, type EnvironmentState, type EnvironmentTaskCreateBody, type EnvironmentTaskCreated, type EnvironmentTaskDetail, type EnvironmentTaskList, type EnvironmentTaskOutputSignature, EnvironmentTasks, type EnvironmentTransition, Environments, type EphemeralScope, type EphemeralToken, type EphemeralTokenResponse, type ErrorCode, Feedback, type FeedbackRequest, type FeedbackResponse, Health, type HealthReadyResponse, type HealthResponse, type HostExecBody, type HostExecRequest, type HostExecResponse, type HostExecResultBody, type HostOp, type HostPresence, type HostStreamEvent, Hosts, HttpClient, type ImageEditRequest, Images, type ImagesRequest, type ImagesResponse, type ImagesResult, type ListEnvironmentsQuery, type MessageCallOptions, type MessageInput, type MessageRequest, type MessageResponse, type MessageResult, type MessageStream, type MessageStreamEvent, type MessageStreamResult, Messages, type Model, type ModelList, Models, type NotificationList, Notifications, type NotificationsDeleted, type NotificationsRead, OPERATION_METHODS, type Org, type OrgAddMemberBody, type OrgMember, OrgMembers, type OrgRole, Orgs, type PhoneModel, PhoneModels, type Project, type ProjectCreateBody, type ProjectDetail, type ProjectIsolation, type ProjectPatchBody, Projects, type Prompt, type PromptCreateRequest, type PromptCreated, type PromptDeleted, type PromptLaunched, type PromptList, type PromptListQuery, type PromptPatch, type PromptSource, type PromptStatus, Prompts, RESOLVE_ATTESTATION_PAYLOAD_TYPE, RESOLVE_OPERATION_METHODS, RESOLVE_TERMINAL_STATUSES, Realtime, type RealtimeAnyEvent, type RealtimeConnectOptions, type RealtimeEvent, type RealtimeModel, RealtimeSession, type RealtimeSocket, type RealtimeSocketCtor, type RealtimeUnknownEvent, type Receipt, Receipts, type RequestOptions, Resolve, type ResolveAccepted, type ResolveAttestation, type ResolveAttestationEnvelope, type ResolveAttestationVerifyResult, type ResolveBalance, type components as ResolveComponents, type ResolveDeclined, ResolveError, type ResolveHealth, type ResolveInsufficientFunds, ResolveInsufficientFundsError, type ResolveIntake, type ResolveJob, type ResolveJobStatus, type ResolveKey, type ResolveKeys, type operations as ResolveOperations, type ResolvePaidWith, type paths as ResolvePaths, type ResolveQuote, type ResolveReproTest, type ResolveSubmitResult, type ResolveTier, type ResolveValidationDetails, type ResolveWaitOptions, type ResolveWebhookEvent, type ResolveWebhookEventName, type ResolveWebhookJob, Responses, type ResponsesCallOptions, type ResponsesInput, type ResponsesRequest, type ResponsesResponse, type ResponsesResult, type ResponsesStream, type ResponsesStreamEvent, type ResponsesStreamResult, STREAMING_OPERATIONS, type Session, type SessionControl, type SessionControlAccepted, type SessionControlRequest, SessionControls, type SessionCreateRequest, type SessionDetail, type SessionDispatchMode, type SessionDispatchRequest, type SessionDispatchResponse, type SessionEvent, SessionEvents, type SessionEventsAppendRequest, type SessionEventsAppendResponse, type SessionEventsPage, type SessionIncomingEvent, SessionLease, type SessionLeaseClaimRequest, type SessionLeaseResponse, type SessionListItem, type SessionPatchRequest, type SessionShare, type SessionShareCreateRequest, type SessionShareCreated, SessionShares, type SessionStreamEvent, Sessions, type SharedSession, type SpeechRequest, type SpeechResult, type SpeechStreamEvent, type SpeechStreamEventSchema, type SpeechStreamRequest, type SseFrame, type StatusResponse, SystemOne, type SystemOneAnswers, type SystemOneBatchRequest, type SystemOneBatchResponse, type SystemOneRequest, type SystemOneResponse, type SystemOneSingleRequest, type SystemOneSingleResponse, type Task, type TaskConfirmRequest, type TaskConfirmResponse, type TaskListPage, type TaskListQuery, type TaskOutcome, type TaskStats, Tasks, type TokenUsage, Tokens, type ToolFetchRequest, type ToolFetchResponse, type ToolSearchRequest, type ToolSearchResponse, Tools, type TranscriptionOptions, type TranscriptionResponse, type TranscriptionResult, type TriggerCreateRequest, type TriggerCreated, type TriggerEvents, type TriggerList, type TriggerPatch, type TriggerTestRequest, type TriggerTestResult, type TriggerUpdated, Triggers, Verify, type VerifyResolveWebhookOptions, type components$1 as components, Codai as default, extensionHeaders, frameJson, mergeToolCall, type operations$1 as operations, type paths$1 as paths, readSse, realtimeUrl, resolveAttestationStatement, verifyAttestationWithKeys, verifyResolveWebhook };