codeden 0.6.3 → 0.7.0

package/dist/{tree-31WAOm5k.js → tree-Bjv-rXir.js}

@@ -6686,7 +6686,14 @@ const UserInput = object({
 	* sender without reading the text, a session's opening brief included. Absent on the user's
 	* own messages and on every message stored before senders were recorded.
 	*/
-	from: MessageSender.optional()
+	from: MessageSender.optional(),
+	/**
+	* Set by CodeDen on a message the orchestrator passes on to a PM from a turn the user's own
+	* message started (§8.2): the PM's turn it starts carries the user's request, like a message
+	* the user wrote to the PM. Only such turns may start work on issues by authors who aren't
+	* trusted. Absent on every other message.
+	*/
+	relayedForUser: boolean().optional()
 });
 /**
 * The first line of a message from a PM or the orchestrator, telling the agent who wrote it.
@@ -6747,7 +6754,8 @@ const ToolOutput = object({
 	/** Artifact holding the full output when truncated. */
 	artifactId: Id.optional()
 });
-_enum([
+/** What kind of work a tool call performs; drives rendering, never provider-specific. */
+const ToolKind = _enum([
 	"command",
 	"file_edit",
 	"file_read",
@@ -6973,6 +6981,24 @@ const UserQuestionItem = object({
 	mcpServer: string().min(1).optional()
 });
 /**
+* Tokens one model used in a subagent run, in the four billed categories (§7.3, §12.6). The
+* server prices them when it reports the run's cost, like a turn's: the provider's USD figure
+* when it gave one, else the price table.
+*/
+const SubagentModelUsage = object({
+	/** Model id as the provider reports it; absent when it doesn't say (the session's model). */
+	model: string().min(1).optional(),
+	/** Uncached input tokens (excludes cache reads and writes). */
+	inputTokens: int().nonnegative(),
+	outputTokens: int().nonnegative(),
+	cacheReadTokens: int().nonnegative(),
+	cacheWriteTokens: int().nonnegative(),
+	/** Reasoning/thinking tokens where reported; already counted in `outputTokens`. */
+	reasoningTokens: int().nonnegative().optional(),
+	/** USD the provider reported for these calls, when it reports one. */
+	costUsd: number$1().nonnegative().optional()
+});
+/**
 * What a finished subagent used, as its provider reports it (§7.3). Each figure is optional:
 * a provider that reports none leaves `SubagentItem.stats` out. Display only: never added to
 * usage totals (`usage.updated`), which come from the provider's own turn figures.
@@ -6983,7 +7009,12 @@ const SubagentStats = object({
 	/** Tool calls the subagent made. */
 	toolUses: int().nonnegative().optional(),
 	/** How long the subagent ran, in milliseconds. */
-	durationMs: int().nonnegative().optional()
+	durationMs: int().nonnegative().optional(),
+	/**
+	* Tokens per model across the run's own model calls (a nested subagent's are on its own
+	* card), for the card's cost (`SessionUsage.subagents`). Display only, like the rest.
+	*/
+	usage: array(SubagentModelUsage).optional()
 });
 /** A subagent run; its transcript lives in the child thread `childThreadId` (§7.3). */
 const SubagentItem = object({
@@ -7796,6 +7827,17 @@ const McpServerConfig = discriminatedUnion("transport", [object({
 	args: array(string()).default([]),
 	env: record(string(), string()).optional()
 })]);
+/**
+* CodeDen's own credential files, relative to its data directory (§15): the install token the
+* local API accepts, the runner lock holding the runner's bearer token, and the remote access
+* store (password hash and device sessions). An agent that read the tokens could drive CodeDen
+* itself, so agents never read or write these without the user, at any level (§11.2).
+*/
+const CODEDEN_CREDENTIAL_FILES = [
+	"install-token",
+	"runner/runner.json",
+	"remote-access.json"
+];
 /** Options for `ProviderAdapter.openSession`. */
 const SessionOptions = object({
 	/** CodeDen session id. */
@@ -7835,7 +7877,13 @@ const SessionOptions = object({
 	* No writes to the workspace (orchestrator and PMs, §11.2): file edits and writing commands
 	* are denied natively (Claude permission policy, Codex read-only sandbox).
 	*/
-	readOnly: boolean().optional()
+	readOnly: boolean().optional(),
+	/**
+	* CodeDen's data directory (§6). Touching its credential files (`CODEDEN_CREDENTIAL_FILES`)
+	* asks at every level and is refused for read-only sessions (§11.2, §15); `$CODEDEN_HOME` in
+	* the agent's commands resolves to it.
+	*/
+	codedenHome: string().min(1).optional()
 });
 /** Response to an `approval_request` or `user_question` item (`ProviderSession.respond`). */
 const RuntimeResponse = discriminatedUnion("kind", [
@@ -8003,6 +8051,86 @@ const BrowserHandoffTab = object({
 	/** The tab the panel showed. */
 	active: boolean()
 });
+/** A key held down during an agent pointer action (`browser.mouse`). */
+const BrowserModifierKey = _enum([
+	"Alt",
+	"Control",
+	"Meta",
+	"Shift"
+]);
+/** What an agent does at page coordinates (`browser.mouse`, §12.2 computer use, step 1). */
+const BrowserMouseAction = _enum([
+	"click",
+	"hover",
+	"drag",
+	"scroll"
+]);
+/** Longest text `browser.type` types as key presses at the focused element (no `ref`). */
+const MAX_FOCUS_TYPE_CHARS = 2e3;
+/** Largest scroll per axis in one agent `scroll` (CSS pixels). */
+const MAX_AGENT_SCROLL = 1e4;
+/** A coordinate in the page viewport's CSS pixels; the runner checks it against the viewport. */
+const ViewportCoordinate = number$1().min(0).max(1e5);
+/**
+* The fields of an agent pointer action. Coordinates are CSS pixels of the tab's viewport,
+* origin top-left: the pixels of a viewport `browser.screenshot`, and the units of
+* `getBoundingClientRect`. Which fields an action takes is checked by `checkBrowserMouse`.
+*/
+const BrowserMouseFields = {
+	action: BrowserMouseAction,
+	/** The point to act at; the start point of a drag. */
+	x: ViewportCoordinate,
+	y: ViewportCoordinate,
+	/** Where a drag ends (`drag` only, required there). */
+	toX: ViewportCoordinate.optional(),
+	toY: ViewportCoordinate.optional(),
+	/** Scroll amount in CSS pixels (`scroll` only, at least one non-zero); positive `deltaY` scrolls down. */
+	deltaX: number$1().min(-1e4).max(MAX_AGENT_SCROLL).optional(),
+	deltaY: number$1().min(-1e4).max(MAX_AGENT_SCROLL).optional(),
+	/** `click` and `drag`; default `left`. */
+	button: _enum([
+		"left",
+		"middle",
+		"right"
+	]).optional(),
+	/** `click` only: 2 is a double click, 3 a triple click. Default 1. */
+	clickCount: int().min(1).max(3).optional(),
+	/** Keys held for the whole action (shift-click, ctrl-click, alt-drag). */
+	modifiers: array(BrowserModifierKey).max(4).optional()
+};
+/** Fields that belong to one action only. */
+const ACTION_ONLY_FIELDS = {
+	toX: ["drag"],
+	toY: ["drag"],
+	deltaX: ["scroll"],
+	deltaY: ["scroll"],
+	button: ["click", "drag"],
+	clickCount: ["click"]
+};
+/**
+* Cross-field rules of a pointer action, for `superRefine`: a drag needs `toX` and `toY`, a
+* scroll needs a non-zero delta, and fields of other actions are refused (so a mistaken call
+* fails instead of silently doing something else).
+*/
+function checkBrowserMouse(value, ctx) {
+	for (const [field, actions] of Object.entries(ACTION_ONLY_FIELDS)) if (value[field] !== void 0 && !actions.includes(value.action)) ctx.addIssue({
+		code: "custom",
+		path: [field],
+		message: `${field} is for ${actions.join(" and ")}, not ${value.action}`
+	});
+	if (value.action === "drag") {
+		for (const field of ["toX", "toY"]) if (value[field] === void 0) ctx.addIssue({
+			code: "custom",
+			path: [field],
+			message: `A drag needs ${field}`
+		});
+	}
+	if (value.action === "scroll" && !value.deltaX && !value.deltaY) ctx.addIssue({
+		code: "custom",
+		path: ["deltaY"],
+		message: "A scroll needs a non-zero deltaX or deltaY"
+	});
+}
 const TabTarget = {
 	sessionId: Id,
 	tabId: BrowserTabId.optional()
@@ -8105,15 +8233,26 @@ const BrowserCommands = [
 	object({
 		name: literal("browser.type"),
 		...TabTarget,
-		ref: BrowserElementRef,
+		ref: BrowserElementRef.optional(),
 		text: string().max(1e5),
 		submit: boolean().optional()
+	}).superRefine((v, ctx) => {
+		if (v.ref === void 0 && v.text.length > 2e3) ctx.addIssue({
+			code: "custom",
+			path: ["text"],
+			message: `Without a ref, type at most ${MAX_FOCUS_TYPE_CHARS} characters`
+		});
 	}),
 	object({
 		name: literal("browser.press"),
 		...TabTarget,
 		key: string().min(1).max(60)
 	}),
+	object({
+		name: literal("browser.mouse"),
+		...TabTarget,
+		...BrowserMouseFields
+	}).superRefine(checkBrowserMouse),
 	object({
 		name: literal("browser.screenshot"),
 		...TabTarget,
@@ -8198,6 +8337,7 @@ const BrowserCommandResults = {
 	"browser.click": Empty$1,
 	"browser.type": Empty$1,
 	"browser.press": Empty$1,
+	"browser.mouse": Empty$1,
 	"browser.screenshot": object({
 		path: string(),
 		width: int().positive(),
@@ -8263,7 +8403,12 @@ const RunnerCommand = discriminatedUnion("name", [
 		name: literal("provider.detect"),
 		providerId: ProviderId.optional(),
 		/** Answer only once the model lists are refreshed, and include them as `providers`. */
-		waitForModels: boolean().optional()
+		waitForModels: boolean().optional(),
+		/**
+		* `false`: only detect (installed, signed in), leaving the model lists alone; for periodic
+		* availability checks, which must not start provider CLIs to list models. Default true.
+		*/
+		refreshModels: boolean().optional()
 	}),
 	object({
 		name: literal("provider.oneShot"),
@@ -9418,6 +9563,71 @@ const FactorySetTypeRequest = object({
 	type: WorkType,
 	reason: string().trim().max(500).optional()
 });
+// ../../packages/contracts/src/factory-prs.ts
+/**
+* The factory's pull requests (§10.1, Merge): the loop owns every PR it opened until it merges
+* or closes, whatever its item's stage. It keeps them free of conflicts, merges them one at a
+* time (the merge queue) and rebuilds work whose PR keeps conflicting.
+*/
+/**
+* Why a work item failed:
+* - `checks`: its own work fell short (merge checks after its revise rounds, a step it never
+*   reported);
+* - `infrastructure`: something outside its code, such as the builder or reviewer session dying
+*   or CI never starting while Actions can run. The loop puts it back by itself on the next
+*   tick after the cause is gone, at most three times;
+* - `stuck`: it needs a person: it already used its rebuild (or its rebuild ended without a new
+*   PR), CI can never run on the repository (Actions off, no active workflow), or it touches a
+*   protected area (an `escalated` item, which carries this kind too).
+*
+* Null on items that never failed or were escalated, and on failures recorded before this
+* existed (the loop reads those from their reason).
+*/
+const FactoryFailureKind = _enum([
+	"checks",
+	"infrastructure",
+	"stuck"
+]);
+/**
+* A factory PR's state, as the panel shows it:
+* - `checking`: the merge checks are running (the review, tests, evidence);
+* - `waiting_ci`: CI is running, or yet to start, on the head commit;
+* - `queued`: every check passed and it waits for its turn to merge;
+* - `updating`: at the head of the queue, being brought up to date with the default branch;
+* - `rebasing`: it has merge conflicts and an agent is rebasing it;
+* - `rebuilding`: it kept conflicting, so its work is being redone from the default branch;
+*   the new PR replaces it;
+* - `superseded`: a newer PR for the same work replaced it (a rebuild's, or an integrator's);
+*   the factory closes it with a link to the new one, retrying until GitHub accepts;
+* - `merged`: merged by the factory (or on GitHub) today;
+* - `waiting_for_you`: a person merges it (auto-merge off, an untrusted author, a protected
+*   area, or checks that failed after the revise rounds); the factory still keeps it free of
+*   conflicts;
+* - `stuck`: it needs a person before anything else can happen.
+*/
+const FactoryPrState = _enum([
+	"checking",
+	"waiting_ci",
+	"queued",
+	"updating",
+	"rebasing",
+	"rebuilding",
+	"superseded",
+	"merged",
+	"waiting_for_you",
+	"stuck"
+]);
+/** One pull request the factory owns, for the panel's merge queue. */
+const FactoryPrEntry = object({
+	itemId: Id,
+	title: string(),
+	pr: GitHubPrRef,
+	state: FactoryPrState,
+	/** Place in the merge queue (1 merges next); null when it isn't queued. */
+	queuePosition: int().positive().nullable(),
+	/** The loop's last note about it (why it waits, what it is doing). */
+	note: string().nullable()
+});
 // ../../packages/contracts/src/factory-api.ts
 /**
 * The factory loop of software-factory and dark-factory projects (§10.1): work items, merge
@@ -9570,6 +9780,14 @@ const FactoryItem = object({
 	attempts: int().nonnegative(),
 	/** Why it was rejected, failed or escalated. */
 	reason: string().nullable(),
+	/** Why it failed or was escalated: its own work, the infrastructure, or stuck until a person looks (see `FactoryFailureKind`). */
+	failureKind: FactoryFailureKind.nullable().default(null),
+	/**
+	* The pull request a rebuild replaced: after three requests to rebase it still conflicted, so
+	* the work was redone from the default branch and that PR is closed once the new one opens.
+	* Set means the item's one rebuild is used.
+	*/
+	rebuiltFrom: GitHubPrRef.nullable().default(null),
 	/** Last thing the loop noted about it (waiting on a conflict, merge budget, ...). */
 	note: string().nullable(),
 	mergeSha: string().nullable(),
@@ -9605,6 +9823,19 @@ const LEGACY_SIZE_LIMITS = {
 	maxChangedLines: 800,
 	maxChangedFiles: 40
 };
+/**
+* What a review does when the provider chosen for it is unavailable (not installed, not signed
+* in, at its usage limit, or it just failed to run):
+* - `builder`: review on the builder's provider and model, in a fresh session;
+* - `any`: review on any available provider;
+* - `wait`: wait until the chosen provider is available again.
+* With no provider available at all, every choice waits.
+*/
+const ReviewerFallback = _enum([
+	"builder",
+	"any",
+	"wait"
+]);
 /** Knobs of the loop beyond the required limits; all have safe defaults. */
 const FactoryTuning = object({
 	/**
@@ -9636,8 +9867,22 @@ const FactoryTuning = object({
 	maxIssuesPerRound: int().positive().default(3),
 	/** Dark factory: the review areas the scout may use. */
 	areas: array(DiscoveryArea).default(DiscoveryArea.options),
-	/** Provider for builders (`auto`: the project/role default). */
+	/**
+	* Provider for builders (`auto`: the project/role default). One that isn't available (not
+	* installed, not signed in, at its usage limit) is skipped for another available provider.
+	*/
 	builderProvider: union([literal("auto"), ProviderId]).default("auto"),
+	/** Model for builders on `builderProvider`; `null` (the default): that provider's default. */
+	builderModel: string().min(1).nullable().default(null),
+	/**
+	* Provider for the independent reviewer. `auto` (the default): a provider other than the
+	* builder's when one is available, which gives the most independent review.
+	*/
+	reviewerProvider: union([literal("auto"), ProviderId]).default("auto"),
+	/** Model for reviewers on `reviewerProvider`; `null` (the default): that provider's default. */
+	reviewerModel: string().min(1).nullable().default(null),
+	/** What a review does when its chosen provider isn't available (see `ReviewerFallback`). */
+	reviewerFallback: ReviewerFallback.default("builder"),
 	/** Minutes to wait for main CI after a merge before calling it done. */
 	watchTimeoutMin: int().positive().default(120),
 	/**
@@ -9865,6 +10110,11 @@ object({
 	backlog: array(FactoryWorkItem),
 	inProgress: array(FactoryWorkItem),
 	mergeChecks: array(FactoryMergeChecks),
+	/**
+	* The pull requests the factory owns: the merge queue first, in the order they merge, then
+	* the rest (being checked, rebased, rebuilt, waiting for you) and today's merges.
+	*/
+	pullRequests: array(FactoryPrEntry).default([]),
 	/** Merged, reverted, failed, rejected and escalated items, newest first. */
 	recent: array(FactoryWorkItem),
 	/** Issues by untrusted authors, newest first; nothing runs on them until let in. */
@@ -10537,6 +10787,86 @@ const ConflictRecord = object({
 	createdAt: Timestamp,
 	resolvedAt: Timestamp.nullable()
 });
+// ../../packages/contracts/src/runners.ts
+/**
+* Runners the server drives (`docs/remote-runners.md` §8). The
+* home runner is the local one next to the server; later phases add one runner per sandboxed
+* session (Docker, Upstash Box). Each is a row of the `runners` table, projected from the
+* `runner.*` lifecycle events.
+*/
+/** Record id of the home runner: the local runner next to the server. */
+const HOME_RUNNER_ID = "home";
+/**
+* Where a runner runs (its execution backend):
+* - `local`: a process on this machine with worktrees in `<home>/wt` (the home runner);
+* - `docker`: inside a container on this machine (or the Docker host the CLI points at);
+* - `upstash-box`: inside an Upstash Box in the cloud.
+*/
+const RunnerBackendId = _enum([
+	"local",
+	"docker",
+	"upstash-box"
+]);
+/**
+* A runner's lifecycle as the server sees it:
+* - `provisioning`: its sandbox is being made;
+* - `starting`: the runner process is starting or the server is connecting to it;
+* - `connected`: handshake done; commands and events flow;
+* - `disconnected`: the connection dropped; the server is trying again;
+* - `paused`: the sandbox is paused (its disk is kept);
+* - `stopped`: the sandbox or process was stopped on purpose;
+* - `failed`: it could not be provisioned, started or connected (see `lastError`);
+* - `deleted`: the sandbox is gone. The record stays, so its sessions report which runner
+*   they lost instead of falling back to another one.
+*/
+const RunnerRecordState = _enum([
+	"provisioning",
+	"starting",
+	"connected",
+	"disconnected",
+	"paused",
+	"stopped",
+	"failed",
+	"deleted"
+]);
+/** One runner the server knows about (a `runners` row). */
+const RunnerRecord = object({
+	/** CodeDen's id for this runner; `HOME_RUNNER_ID` for the home runner. */
+	id: Id,
+	backend: RunnerBackendId,
+	/** The home runner: provider detection, utility jobs, the orchestrator and PMs use it. */
+	home: boolean(),
+	/**
+	* The runner's own id (its journal's, reported in `welcome`); null until it first connects.
+	* `sessions.runnerId` holds this id.
+	*/
+	runnerId: string().nullable(),
+	/** The backend's handle on the sandbox (container id, box id); null for `local`. */
+	sandboxRef: string().nullable(),
+	/** The project and session a sandbox runner serves; null for the home runner. */
+	projectId: Id.nullable(),
+	sessionId: Id.nullable(),
+	state: RunnerRecordState,
+	/** CodeDen version the runner reported at its last handshake. */
+	version: string().nullable(),
+	/** Version of the sandbox image or snapshot it was made from; null for `local`. */
+	imageVersion: string().nullable(),
+	createdAt: Timestamp,
+	/** When the server last connected to it or lost it. */
+	lastSeenAt: Timestamp.nullable(),
+	/** Why it last failed or disconnected, safe to show (never contains tokens). */
+	lastError: string().nullable()
+});
+/** Event payload: the server registered a runner, or re-registered it with new details. */
+const RunnerRegisteredPayload = object({ runner: RunnerRecord });
+/** Event payload: a runner's sandbox is gone; its record stays with state `deleted`. */
+const RunnerDeletedPayload = object({ id: Id });
+/**
+* The optional runner record id carried by `runner.connected`, `runner.disconnected` and
+* `runner.draining`. Events stored before several runners existed have none; they belong to
+* the home runner.
+*/
+const RunnerRecordRef = { id: Id.optional() };
 // ../../packages/contracts/src/updates.ts
 /**
 * `settings.updates.mode` (§16): `off` never asks the registry; `notify` checks and offers a
@@ -11139,16 +11469,21 @@ discriminatedUnion("type", [
 	})),
 	globalEvent("artifact.created", object({ artifact: Artifact })),
 	globalEvent("settings.updated", object({ settings: Settings })),
+	globalEvent("runner.registered", RunnerRegisteredPayload),
+	globalEvent("runner.deleted", RunnerDeletedPayload),
 	globalEvent("runner.connected", object({
+		...RunnerRecordRef,
 		runnerId: string(),
 		version: string(),
 		protocolVersion: int()
 	})),
 	globalEvent("runner.disconnected", object({
+		...RunnerRecordRef,
 		runnerId: string(),
 		reason: string()
 	})),
 	globalEvent("runner.draining", object({
+		...RunnerRecordRef,
 		runnerId: string(),
 		reason: string()
 	})),
@@ -11249,7 +11584,10 @@ object({
 	scheduled: array(ScheduledRun).default([]),
 	/** The orchestrator and PM sessions (§8.1), also present in `sessions`. */
 	roleSessions: RoleSessionsRef.optional(),
-	runner: RunnerConnectionStatus
+	/** The home runner's connection, the one the shell shows (§4.2). */
+	runner: RunnerConnectionStatus,
+	/** Every runner the server drives, the home runner first, with its live state. */
+	runners: array(RunnerRecord).default([])
 });
 object({
 	seq: int().nonnegative(),
@@ -11296,7 +11634,8 @@ const ServerToClientMessage = discriminatedUnion("type", [
 	}),
 	object({
 		type: literal("runner"),
-		runner: RunnerConnectionStatus
+		runner: RunnerConnectionStatus,
+		runners: array(RunnerRecord).optional()
 	}),
 	object({
 		type: literal("update"),
@@ -11432,7 +11771,13 @@ const StartSessionRequest = object({
 	/** First message; the session starts idle when omitted. */
 	input: UserInput.optional(),
 	/** The caller's decision when a previous attempt returned `conflict`. */
-	conflict: ConflictDecision.optional()
+	conflict: ConflictDecision.optional(),
+	/**
+	* The open persisted conflict this request is a new version of (the New session draft sent
+	* again while its card is up). The server closes that conflict whatever this start returns;
+	* a conflict that is closed already or belongs to another project is left alone.
+	*/
+	replacesConflict: Id.optional()
 });
 /**
 * `POST /api/sessions` response: `StartWorkResult` (`started` / `conflict`) plus the outcomes
@@ -12730,8 +13075,12 @@ const ListConflictsQuery = object({
 	status: InboxItemStatus.optional(),
 	projectId: Id.optional()
 });
-/** `POST /api/conflicts/:id/resolve`: the decision (wait, skip, join or force with a reason). */
-const ResolveConflictRequest = ConflictDecision;
+/**
+* `POST /api/conflicts/:id/resolve`: the decision (wait, skip, join or force with a reason).
+* `start` replaces the request saved with the conflict: the New session draft as it is when the
+* card is answered, so edits made after the first send are what starts. Same project only.
+*/
+const ResolveConflictRequest = ConflictDecision.and(object({ start: StartSessionRequest.optional() }));
 object({
 	conflict: ConflictRecord,
 	result: StartSessionResponse
@@ -13031,6 +13380,66 @@ const ServerLock = object({
 	version: string(),
 	startedAt: Timestamp
 });
+/** A boolean from a query string (`true`/`false`) or from code. */
+const QueryBoolean = union([boolean(), _enum(["true", "false"]).transform((v) => v === "true")]);
+/** `GET /api/search/transcripts` query. */
+const TranscriptSearchQuery = object({
+	/**
+	* What to look for. Whitespace separates terms; every term must appear (in any order),
+	* ignoring case and accents. Control characters are ignored.
+	*/
+	q: string().trim().min(1).max(200),
+	/** Only sessions of this project. */
+	projectId: Id.optional(),
+	/** Only sessions with this role (§8.1). */
+	role: Role.optional(),
+	/** Whether matches in archived sessions are included (they are by default). */
+	includeArchived: QueryBoolean.default(true),
+	/**
+	* Continue after the previous page: its `nextCursor`. Omit for the newest matches. Opaque to
+	* clients.
+	*/
+	cursor: string().regex(/^\d{1,16}$/).optional(),
+	/** Most hits to return. */
+	limit: number().int().min(1).max(100).default(20)
+});
+/** A piece of a snippet: `match` marks text that matched the query (render it highlighted). */
+const SnippetPart = object({
+	text: string(),
+	match: boolean()
+});
+/** One transcript item that matched. Session details come from the app snapshot. */
+const TranscriptSearchHit = object({
+	sessionId: Id,
+	/** The thread holding the item: the session's root thread or a subagent's. */
+	threadId: Id,
+	itemId: Id,
+	/**
+	* The root-thread item to scroll to: the item itself, or for an item in a subagent's thread
+	* the subagent card in the root thread that started it. Such a hit also opens `threadId` at
+	* `itemId`.
+	*/
+	anchorItemId: Id,
+	/** Item kind, e.g. `user_message`, `assistant_message`, `tool_call`. */
+	kind: string(),
+	/** For tool calls, what kind of work it was (`command`, `file_edit`, ...). */
+	toolKind: ToolKind.optional(),
+	/** Text around the first match, in order; never HTML. */
+	snippet: array(SnippetPart),
+	/** When the item was created. */
+	ts: Timestamp
+});
+object({
+	/** The query as searched (trimmed, without control characters). */
+	query: string(),
+	hits: array(TranscriptSearchHit),
+	/**
+	* Pass as `cursor` to get the next page; null when every match has been returned. A page can
+	* hold fewer than `limit` hits and still have a next one: each request looks at a bounded
+	* number of candidates so a search never holds up the server.
+	*/
+	nextCursor: string().nullable()
+});
 // ../../packages/contracts/src/session-files.ts
 /**
 * Read-only browsing of a session's working directory for the files panel (§12.3).
@@ -13262,16 +13671,43 @@ object({
 	/** How each provider in the range is billed, for the "API-equivalent" label. */
 	billing: record(ProviderId, BillingMode)
 });
+/** One turn's usage for the turn footer. */
+const TurnUsage = object({
+	...TokenCounts.shape,
+	turnId: Id,
+	costUsd: number$1().nonnegative(),
+	costSource: CostSource
+});
+/** One model's share of a subagent run's cost. */
+const SubagentModelCost = object({
+	...TokenCounts.shape,
+	/** The model the tokens were priced as (the session's model when the provider named none). */
+	model: string(),
+	/** The price table's name for the model, when it has one. */
+	label: string().optional(),
+	costUsd: number$1().nonnegative(),
+	costSource: CostSource
+});
+/**
+* What a finished subagent run cost, priced from `SubagentStats.usage` when read (§7.3). Display
+* only: the run's tokens are already in its session's turns, so this is never added to totals.
+* `reported` when every model's cost came from the provider, `unpriced` when no model could be
+* priced, else `estimated`.
+*/
+const SubagentCost = object({
+	/** The `subagent` item. */
+	itemId: Id,
+	costUsd: number$1().nonnegative(),
+	costSource: CostSource,
+	models: array(SubagentModelCost)
+});
 object({
 	sessionId: Id,
 	totals: UsageTotals,
 	billing: BillingMode,
-	turns: array(object({
-		...TokenCounts.shape,
-		turnId: Id,
-		costUsd: number$1().nonnegative(),
-		costSource: CostSource
-	}))
+	turns: array(TurnUsage),
+	/** The cost of each finished subagent that reported tokens per model, for its card. */
+	subagents: array(SubagentCost).default([])
 });
 object({
 	windows: array(object({
@@ -13325,7 +13761,7 @@ object({
 * rest of the bundle, so the package version is the single source of truth at runtime;
 * everywhere else (workspace, tests) it is `SOURCE_VERSION`.
 */
-const CODEDEN_VERSION = packageVersion() ?? "0.6.3";
+const CODEDEN_VERSION = packageVersion() ?? "0.7.0";
 function packageVersion() {
 	const value = globalThis.__CODEDEN_PACKAGE_VERSION__;
 	return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -13476,6 +13912,6 @@ async function listDescendants(rootPid) {
 	}
 	return out;
 }
-export { StarterSetRequest as $, InboxItemKind as $n, ZodError as $r, FactoryAllowLargeChangeRequest as $t, BrowserHostClientMessage as A, EditQueuedMessageRequest as An, ReasoningEffort as Ar, LOCAL_STT_SAMPLE_RATE as At, AUTOMATION_IMPORT_LIMITS as B, BROWSER_RELAY_SECRET_HEADER as Bn, int as Br, NOTICE_BATCH_CODE as Bt, RemoteAccessFile as C, AutomationGuards as Cn, McpServerDiffRequest as Cr, UpdateProjectRequest as Ct, SignInRequest as D, Session as Dn, providersWith as Dr, READ_ALOUD_FULL_MAX_CHARS as Dt, SetNetworkPasswordResponse as E, TriagePolicy as En, agentConfigFeatures as Er, agentEventToNewEvent as Et, BrowserNavigateRequest as F, SpeechSummaryRequest as Fn, any as Fr, UpdateInstallRequest as Ft, AutomationFileFrontmatter as G, ConflictDecision as Gn, object as Gr, GithubIssue as Gt, DuplicateAutomationRequest as H, RuntimeResponse as Hn, literal as Hr, CreateGithubIssueRequest as Ht, BrowserNewTabRequest as I, TerminalClientMessage as In, array as Ir, UpdateStatus as It, CreateAutomationRequest as J, Project as Jn, record as Jr, GithubPr as Jt, AutomationGuardsPatch as K, StartedBy as Kn, optional as Kr, GithubLabelRequest as Kt, BrowserOpenRequest as L, TerminalQuery as Ln, boolean as Lr, compareVersions as Lt, BrowserClientMessage as M, GitPushRequest as Mn, datetime as Mr, SttQuery as Mt, BrowserDevServerRequest as N, RestoreFilesRequest as Nn, _enum as Nr, TtsRequest as Nt, passwordProblem as O, SessionStatus as On, AutonomyLevel as Or, Settings as Ot, BrowserHistoryRequest as P, SessionResult as Pn, _null as Pr, AppPointer as Pt, SetAutomationEnabledRequest as Q, InboxItem as Qn, url as Qr, parseGithubPrId as Qt, BrowserViewportRequest as R, RunnerCommandResults as Rn, custom as Rr, isNewerVersion as Rt, PASSWORD_RULE_TEXT as S, AutomationAction as Sn, AgentConfigWriteRequest as Sr, UiClientMessage as St, SetNetworkPasswordRequest as T, AutomationTrigger as Tn, McpServerUpsertRequest as Tr, AGENT_EVENT_PREFIX as Tt, ExportAutomationsQuery as U, SessionOptions as Un, looseObject as Ur, GithubAuthorAssociation as Ut, AutomationImportSource as V, ProviderCapabilities as Vn, intersection as Vr, NoticeBatchData as Vt, ImportAutomationsRequest as W, ProjectConfigFile as Wn, number$1 as Wr, GithubCommentRequest as Wt, ListAutomationsQuery as X, DEFAULT_VISION_PATH as Xn, union as Xr, TriageIssueRequest as Xt, ListAutomationRunsQuery as Y, sortProjects as Yn, string as Yr, MergePrRequest as Yt, RunAutomationRequest as Z, FactoryLimits as Zn, unknown as Zr, githubPrId as Zt, ListNoticesQuery as _, FactorySetTypeRequest as _n, AgentConfigDeleteQuery as _r, SessionStartMeta as _t, childEnv as a, REVIEW_SUMMARY_MAX as an, winningCommands as ar, CreateProjectRequest as at, UpdateSessionRequest as b, Artifact as bn, AgentConfigLocator as br, SteerRequest as bt, UsageSettings as c, SetAutonomyModeRequest as cn, messageFrom as cr, ForkSessionRequest as ct, RunnerLock as d, FactoryAdmitRequest as dn, MCP_TEST_STDERR_LIMIT as dr, LoginToolId as dt, toJSONSchema as ei, FactoryDecisionRequest as en, AgentEvent as er, TriageDecisionRequest as et, RunnerToServerMessage as f, FactoryAnalysisReport as fn, McpServerTestRequest as fr, ReorderProjectsRequest as ft, ListConflictsQuery as g, FactoryReproductionReport as gn, ShelvedHook as gr, SendMessageRequest as gt, ArchiveSessionRequest as h, FactoryPlanRoundRequest as hn, HookHandler as hr, SecretKey as ht, listDescendants as i, PutVisionRequest as in, oneLineDescription as ir, UpdateAutomationRequest as it, summarizeActivity as j, GitCommitRequest as jn, number as jr, LocalSttModelParams as jt, ImageTestRequest as k, DiffScope as kn, ProviderId as kr, speechExcerpt as kt, SessionFileQuery as l, isFactoryMode as ln, MCP_TEST_DEFAULT_TIMEOUT_MS as lr, ListInboxQuery as lt, ServerToRunnerMessage as m, FactoryFinding as mn, HookChangeRequest as mr, RespondRequest as mt, killTree as n, prettifyError as ni, KillSwitchRequest as nn, mergeItemDeltas as nr, UpcomingRunsQuery as nt, CODEDEN_VERSION as o, ReviewVerdictSubmission as on, itemDeltaText as or, FileReadQuery as ot, ServerLock as p, FactoryFileIssueRequest as pn, SkillSwitchRequest as pr, ResolveInboxRequest as pt, AutomationProjectRequest as q, WorkKey as qn, preprocess as qr, GithubListQuery as qt, killTreeAndOrphans as r, NEVER as ri, LEGACY_SIZE_LIMITS as rn, ProjectCommandsQuery as rr, UpdateAutomationProjectSettingsRequest as rt, UsageQuery as s, SCOUT_UNAVAILABLE as sn, UserInput as sr, FileWriteRequest as st, isAlive as t, safeParse$1 as ti, FactoryTuning as tn, SessionUpdatedEvent as tr, TriageReport as tt, RunnerEventMessage as u, truncateReviewSummary as un, MCP_TEST_ERROR_LIMIT as ur, ListSessionsQuery as ut, ResolveConflictRequest as v, ScoutState as vn, AgentConfigDiffRequest as vr, SetSecretRequest as vt, SetNetworkAccessRequest as w, AutomationRun as wn, McpServerTarget as wr, HealthResponse as wt, NetworkStatus as x, Automation as xn, AgentConfigProvider as xr, ThreadItemsQuery as xt, RoleMessageRequest as y, pipelineStep as yn, AgentConfigListQuery as yr, StartSessionRequest as yt, BrowserWsQuery as z, SETUP_TAIL_LIMIT as zn, discriminatedUnion as zr, ConflictRecord as zt };
+export { SetAutomationEnabledRequest as $, ProjectConfigFile as $n, number$1 as $r, githubPrId as $t, ImageTestRequest as A, Session as An, AgentConfigProvider as Ar, speechExcerpt as At, BrowserWsQuery as B, TerminalQuery as Bn, number as Br, HOME_RUNNER_ID as Bt, PASSWORD_RULE_TEXT as C, Artifact as Cn, HookChangeRequest as Cr, UiClientMessage as Ct, SetNetworkPasswordResponse as D, AutomationRun as Dn, AgentConfigDiffRequest as Dr, agentEventToNewEvent as Dt, SetNetworkPasswordRequest as E, AutomationGuards as En, AgentConfigDeleteQuery as Er, AGENT_EVENT_PREFIX as Et, BrowserHistoryRequest as F, GitPushRequest as Fn, agentConfigFeatures as Fr, AppPointer as Ft, ImportAutomationsRequest as G, BrowserMouseAction as Gn, array as Gr, GithubAuthorAssociation as Gt, AutomationImportSource as H, SETUP_TAIL_LIMIT as Hn, _enum as Hr, NOTICE_BATCH_CODE as Ht, BrowserNavigateRequest as I, RestoreFilesRequest as In, providersWith as Ir, UpdateInstallRequest as It, AutomationProjectRequest as J, checkBrowserMouse as Jn, discriminatedUnion as Jr, GithubLabelRequest as Jt, AutomationFileFrontmatter as K, MAX_AGENT_SCROLL as Kn, boolean as Kr, GithubCommentRequest as Kt, BrowserNewTabRequest as L, SessionResult as Ln, AutonomyLevel as Lr, UpdateStatus as Lt, summarizeActivity as M, DiffScope as Mn, McpServerDiffRequest as Mr, LocalSttModelParams as Mt, BrowserClientMessage as N, EditQueuedMessageRequest as Nn, McpServerTarget as Nr, SttQuery as Nt, SignInRequest as O, AutomationTrigger as On, AgentConfigListQuery as Or, READ_ALOUD_FULL_MAX_CHARS as Ot, BrowserDevServerRequest as P, GitCommitRequest as Pn, McpServerUpsertRequest as Pr, TtsRequest as Pt, RunAutomationRequest as Q, SessionOptions as Qn, looseObject as Qr, TriageIssueRequest as Qt, BrowserOpenRequest as R, SpeechSummaryRequest as Rn, ProviderId as Rr, compareVersions as Rt, NetworkStatus as S, pipelineStep as Sn, SkillSwitchRequest as Sr, ThreadItemsQuery as St, SetNetworkAccessRequest as T, AutomationAction as Tn, ShelvedHook as Tr, HealthResponse as Tt, DuplicateAutomationRequest as U, BROWSER_RELAY_SECRET_HEADER as Un, _null as Ur, NoticeBatchData as Ut, AUTOMATION_IMPORT_LIMITS as V, RunnerCommandResults as Vn, datetime as Vr, ConflictRecord as Vt, ExportAutomationsQuery as W, BrowserModifierKey as Wn, any as Wr, CreateGithubIssueRequest as Wt, ListAutomationRunsQuery as X, ProviderCapabilities as Xn, intersection as Xr, GithubPr as Xt, CreateAutomationRequest as Y, CODEDEN_CREDENTIAL_FILES as Yn, int as Yr, GithubListQuery as Yt, ListAutomationsQuery as Z, RuntimeResponse as Zn, literal as Zr, MergePrRequest as Zt, ListConflictsQuery as _, FactoryPlanRoundRequest as _n, messageFrom as _r, SendMessageRequest as _t, childEnv as a, union as ai, LEGACY_SIZE_LIMITS as an, DEFAULT_VISION_PATH as ar, UpdateAutomationRequest as at, RoleMessageRequest as b, ScoutState as bn, MCP_TEST_STDERR_LIMIT as br, StartSessionRequest as bt, UsageSettings as c, ZodError as ci, ReviewVerdictSubmission as cn, InboxItemKind as cr, FileWriteRequest as ct, RunnerEventMessage as d, prettifyError as di, isFactoryMode as dn, mergeItemDeltas as dr, ListSessionsQuery as dt, object as ei, parseGithubPrId as en, ConflictDecision as er, StarterSetRequest as et, RunnerLock as f, NEVER as fi, truncateReviewSummary as fn, ProjectCommandsQuery as fr, LoginToolId as ft, ArchiveSessionRequest as g, FactoryFinding as gn, UserInput as gr, SecretKey as gt, ServerToRunnerMessage as h, FactoryFileIssueRequest as hn, itemDeltaText as hr, RespondRequest as ht, listDescendants as i, string as ii, KillSwitchRequest as in, sortProjects as ir, UpdateAutomationProjectSettingsRequest as it, BrowserHostClientMessage as j, SessionStatus as jn, AgentConfigWriteRequest as jr, LOCAL_STT_SAMPLE_RATE as jt, passwordProblem as k, TriagePolicy as kn, AgentConfigLocator as kr, Settings as kt, SessionFileQuery as l, toJSONSchema as li, SCOUT_UNAVAILABLE as ln, AgentEvent as lr, ForkSessionRequest as lt, ServerLock as m, FactoryAnalysisReport as mn, winningCommands as mr, ResolveInboxRequest as mt, killTree as n, preprocess as ni, FactoryDecisionRequest as nn, WorkKey as nr, TriageReport as nt, CODEDEN_VERSION as o, unknown as oi, PutVisionRequest as on, FactoryLimits as or, CreateProjectRequest as ot, RunnerToServerMessage as p, FactoryAdmitRequest as pn, oneLineDescription as pr, ReorderProjectsRequest as pt, AutomationGuardsPatch as q, MAX_FOCUS_TYPE_CHARS as qn, custom as qr, GithubIssue as qt, killTreeAndOrphans as r, record as ri, FactoryTuning as rn, Project as rr, UpcomingRunsQuery as rt, UsageQuery as s, url as si, REVIEW_SUMMARY_MAX as sn, InboxItem as sr, FileReadQuery as st, isAlive as t, optional as ti, FactoryAllowLargeChangeRequest as tn, StartedBy as tr, TriageDecisionRequest as tt, TranscriptSearchQuery as u, safeParse$1 as ui, SetAutonomyModeRequest as un, SessionUpdatedEvent as ur, ListInboxQuery as ut, ListNoticesQuery as v, FactoryReproductionReport as vn, MCP_TEST_DEFAULT_TIMEOUT_MS as vr, SessionStartMeta as vt, RemoteAccessFile as w, Automation as wn, HookHandler as wr, UpdateProjectRequest as wt, UpdateSessionRequest as x, checksPassed as xn, McpServerTestRequest as xr, SteerRequest as xt, ResolveConflictRequest as y, FactorySetTypeRequest as yn, MCP_TEST_ERROR_LIMIT as yr, SetSecretRequest as yt, BrowserViewportRequest as z, TerminalClientMessage as zn, ReasoningEffort as zr, isNewerVersion as zt };
 
-//# sourceMappingURL=tree-31WAOm5k.js.map
+//# sourceMappingURL=tree-Bjv-rXir.js.map