novoagents 0.3.0-alpha.21 → 0.3.0-alpha.23

package/CHANGELOG.md

@@ -5,6 +5,26 @@ Internal engine, routing, and infrastructure changes are intentionally omitted.
 
 ## Unreleased
 
+## 0.3.0-alpha.23 - 2026-06-18
+
+- Planning is now always on for every agent. Remove
+  `capabilities.planning` from agent configs; `update_plan` tool calls still
+  stream with `category: 'planning'`.
+
+## 0.3.0-alpha.22 - 2026-06-18
+
+- Added HTTP connections for registering OpenAPI-backed tools through
+  `novo.httpConnections` and attaching them with
+  `capabilities.http.connectionIds`.
+- Runs can now declare `outputSchema`; structured final values surface on
+  `data-novo-terminal.output` and `RunFinalResult.output`.
+- Disabled, missing, or policy-denied HTTP connections now emit
+  `data-novo-http-connection-unavailable` and use stable
+  `http_connection_not_found` / `policy_denied` errors.
+- Public shell tool names are now canonicalized to `bash` across stream chunks,
+  approval hooks, event sinks, and run resources. The capability key remains
+  `terminal.run`; customer policy should branch on public `toolName: 'bash'`.
+
 ## 0.3.0-alpha.21 - 2026-06-18
 
 - Subagent task display text is now consistently framed as a `label` rather

package/README.md

@@ -78,7 +78,7 @@ Type guards are exported for every Novo-specific chunk
 `isNovoToolApprovalRequested`, `isNovoUserInteractionRequested`,
 `isNovoToolCall`, `isNovoToolResultOverflow`, `isNovoWorkspace`,
 `isNovoBrowserSession`, and the rest of the `data-novo-*` stream taxonomy).
-Public `toolName` fields are Novo canonical names such as `terminal_run`; branch
+Public `toolName` fields are Novo canonical names such as `bash`; branch
 on those stable values in your UI and approval policy.
 `readNovoToolError(event)` recognizes both AI SDK `tool-output-error` chunks and
 returned `{ type: 'tool-output-error', ... }` payloads inside

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { AgentsNamespace, ArtifactsNamespace, BrowserSessionsNamespace, EnvironmentsNamespace, EventSinksNamespace, FilesNamespace, GithubConnectionsNamespace, ResultHandlersNamespace, RunsNamespace, InteractionsNamespace, SecretContextsNamespace, SecretsNamespace, ThreadsNamespace, ToolApprovalHooksNamespace, ToolServersNamespace, UsageNamespace, BandsNamespace } from './types.js';
+import type { AgentsNamespace, ArtifactsNamespace, BrowserSessionsNamespace, EnvironmentsNamespace, EventSinksNamespace, FilesNamespace, GithubConnectionsNamespace, ResultHandlersNamespace, RunsNamespace, InteractionsNamespace, SecretContextsNamespace, SecretsNamespace, ThreadsNamespace, ToolApprovalHooksNamespace, ToolServersNamespace, HttpConnectionsNamespace, UsageNamespace, BandsNamespace } from './types.js';
 export type RequestOptions = {
     method?: string;
     path: string;
@@ -38,5 +38,6 @@ export declare function createSecretsNamespace(client: NovoHttpClient): SecretsN
 export declare function createSecretContextsNamespace(client: NovoHttpClient): SecretContextsNamespace;
 export declare function createGithubConnectionsNamespace(client: NovoHttpClient): GithubConnectionsNamespace;
 export declare function createToolServersNamespace(client: NovoHttpClient): ToolServersNamespace;
+export declare function createHttpConnectionsNamespace(client: NovoHttpClient): HttpConnectionsNamespace;
 export declare function createUsageNamespace(client: NovoHttpClient): UsageNamespace;
 export declare function createBandsNamespace(client: NovoHttpClient): BandsNamespace;

package/dist/client.js

@@ -687,6 +687,46 @@ export function createToolServersNamespace(client) {
         },
     };
 }
+export function createHttpConnectionsNamespace(client) {
+    return {
+        register(input) {
+            return client.json({
+                method: 'POST',
+                path: '/v1/http-connections',
+                body: input,
+            });
+        },
+        list() {
+            return client.json({
+                path: '/v1/http-connections',
+            });
+        },
+        get(httpConnectionId) {
+            return client.json({
+                path: `/v1/http-connections/${encodeURIComponent(httpConnectionId)}`,
+            });
+        },
+        update(httpConnectionId, input) {
+            return client.json({
+                method: 'PATCH',
+                path: `/v1/http-connections/${encodeURIComponent(httpConnectionId)}`,
+                body: input,
+            });
+        },
+        delete(httpConnectionId) {
+            return client.json({
+                method: 'DELETE',
+                path: `/v1/http-connections/${encodeURIComponent(httpConnectionId)}`,
+            });
+        },
+        test(httpConnectionId) {
+            return client.json({
+                method: 'POST',
+                path: `/v1/http-connections/${encodeURIComponent(httpConnectionId)}/test`,
+            });
+        },
+    };
+}
 function credentialListPath(path, input) {
     const params = new URLSearchParams();
     if (input.limit !== undefined)

package/dist/errors.d.ts

@@ -9,7 +9,7 @@ export type NovoErrorType = 'invalid_request_error' | 'authentication_error' | '
  * `apps/cloud/lib/http/errors.ts` — extend in lockstep when the cloud adds
  * new error codes.
  */
-export type NovoErrorCode = 'invalid_api_key' | 'permission_denied' | 'agent_not_found' | 'artifact_not_found' | 'browser_session_not_found' | 'file_not_found' | 'file_not_ready' | 'file_too_large' | 'environment_not_found' | 'event_sink_not_found' | 'github_connection_not_found' | 'result_handler_not_found' | 'result_handler_invalid_kind' | 'result_handler_secret_missing' | 'secret_not_found' | 'secret_context_not_found' | 'thread_not_found' | 'tool_server_not_found' | 'tool_approval_hook_not_found' | 'interaction_not_found' | 'run_not_found' | 'worker_not_found' | 'invalid_request_error' | 'invalid_status' | 'invalid_createdSince' | 'invalid_limit' | 'invalid_email' | 'invalid_workspace_config' | 'strict_data_handling_unavailable' | 'thread_busy' | 'run_not_active' | 'idempotency_key_conflict' | 'name_conflict' | 'resource_in_use' | 'quota_exceeded' | 'rate_limited' | 'insufficient_quota' | 'per_run_cap_exceeded' | 'budget_exceeded' | 'max_steps_exceeded' | 'max_duration_exceeded' | 'step_duration_exceeded' | 'workspace_unavailable' | 'data_handling_unavailable' | 'attachment_unsupported_for_agent_configuration' | 'pricing_unavailable' | 'service_unavailable' | 'invalid_response' | 'internal_error' | 'upstream_provider_error' | 'upstream_unavailable' | 'web_runtime_unconfigured' | 'artifact_storage_unconfigured' | 'tools_changed' | 'audio_generation_unconfigured' | 'video_generation_unconfigured' | 'media_analysis_unconfigured' | 'managed_browser_unconfigured' | 'managed_document_processing_unconfigured' | 'managed_media_editing_unconfigured' | 'managed_github_unconfigured' | 'github_connection_test_failed' | 'cannot_modify_self' | 'last_admin_protected' | 'member_not_found' | 'invitation_not_found' | 'already_member' | 'already_invited';
+export type NovoErrorCode = 'invalid_api_key' | 'permission_denied' | 'agent_not_found' | 'artifact_not_found' | 'browser_session_not_found' | 'file_not_found' | 'file_not_ready' | 'file_too_large' | 'environment_not_found' | 'event_sink_not_found' | 'github_connection_not_found' | 'http_connection_not_found' | 'result_handler_not_found' | 'result_handler_invalid_kind' | 'result_handler_secret_missing' | 'secret_not_found' | 'secret_context_not_found' | 'thread_not_found' | 'tool_server_not_found' | 'tool_approval_hook_not_found' | 'interaction_not_found' | 'run_not_found' | 'worker_not_found' | 'invalid_request_error' | 'invalid_status' | 'invalid_createdSince' | 'invalid_limit' | 'invalid_email' | 'invalid_workspace_config' | 'strict_data_handling_unavailable' | 'thread_busy' | 'run_not_active' | 'idempotency_key_conflict' | 'name_conflict' | 'resource_in_use' | 'quota_exceeded' | 'rate_limited' | 'insufficient_quota' | 'per_run_cap_exceeded' | 'budget_exceeded' | 'max_steps_exceeded' | 'max_duration_exceeded' | 'step_duration_exceeded' | 'workspace_unavailable' | 'data_handling_unavailable' | 'attachment_unsupported_for_agent_configuration' | 'pricing_unavailable' | 'service_unavailable' | 'invalid_response' | 'internal_error' | 'upstream_provider_error' | 'upstream_unavailable' | 'web_runtime_unconfigured' | 'artifact_storage_unconfigured' | 'tools_changed' | 'audio_generation_unconfigured' | 'video_generation_unconfigured' | 'media_analysis_unconfigured' | 'managed_browser_unconfigured' | 'managed_document_processing_unconfigured' | 'managed_media_editing_unconfigured' | 'managed_github_unconfigured' | 'github_connection_test_failed' | 'cannot_modify_self' | 'last_admin_protected' | 'member_not_found' | 'invitation_not_found' | 'already_member' | 'already_invited';
 type ErrorPayload = {
     type: NovoErrorType | (string & {});
     code: NovoErrorCode | (string & {});

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import type { AgentsNamespace, ArtifactsNamespace, BandsNamespace, BrowserSessionsNamespace, EnvironmentsNamespace, EventSinksNamespace, FilesNamespace, GithubConnectionsNamespace, InteractionsNamespace, NovoAgentsOptions, ResultHandlersNamespace, RunsNamespace, SecretContextsNamespace, SecretsNamespace, ThreadsNamespace, ToolApprovalHooksNamespace, ToolServersNamespace, UsageNamespace } from './types.js';
+import type { AgentsNamespace, ArtifactsNamespace, BandsNamespace, BrowserSessionsNamespace, EnvironmentsNamespace, EventSinksNamespace, FilesNamespace, GithubConnectionsNamespace, InteractionsNamespace, NovoAgentsOptions, ResultHandlersNamespace, RunsNamespace, SecretContextsNamespace, SecretsNamespace, ThreadsNamespace, ToolApprovalHooksNamespace, ToolServersNamespace, HttpConnectionsNamespace, UsageNamespace } from './types.js';
 export declare class NovoAgents {
     readonly apiKey: string;
     readonly baseUrl: string;
@@ -19,13 +19,14 @@ export declare class NovoAgents {
     readonly secrets: SecretsNamespace;
     readonly secretContexts: SecretContextsNamespace;
     readonly toolServers: ToolServersNamespace;
+    readonly httpConnections: HttpConnectionsNamespace;
     readonly usage: UsageNamespace;
     readonly bands: BandsNamespace;
     private readonly client;
     constructor(options?: NovoAgentsOptions);
 }
-export type { Agent, AgentApprovals, AgentArtifacts, AgentCapabilities, AgentCreatePolicies, AgentFile, AgentFileUpload, Artifact, ArtifactKind, AgentEventsInput, AgentInput, AgentInputAttachment, AgentPolicies, AgentPatchPolicies, AgentSkill, AgentWorkspace, MediaGenerationConfig, AgentWorkspaceNetwork, AgentWorkspaceResourcePreset, AgentWorkspaceSeed, AgentWorkspaceService, AgentsNamespace, ArtifactsNamespace, Band, BrowserCapabilityConfig, BrowserSessionLiveView, BrowserSessionsNamespace, CancelThreadResponse, CapabilityResolutionEntry, ResolvableCapability, ContextBlock, ContextInput, CredentialListInput, DataHandling, DeleteAgentResponse, DeleteThreadResponse, Environment, EnvironmentsNamespace, EventSink, EventSinksNamespace, FileCreateInput, FilesNamespace, GithubConnection, GithubConnectionOperation, GithubConnectionsNamespace, GithubConnectionTestResult, GithubMergeMethod, GithubMergePolicy, GithubRepositoryPolicy, Interaction, InteractionsNamespace, Metadata, MetadataPatch, ModelFinishReason, NovoAgentEvent, NovoAgentsOptions, NovoBrowserSessionChunk, NovoCompactionChunk, NovoDataChunk, NovoMessage, NovoMessagePart, NovoMessageRole, NovoRunMetaChunk, NovoStepTerminalChunk, NovoStreamChunk, NovoTaskChunk, NovoTerminalChunk, NovoTerminalReason, NovoToolCallChunk, NovoToolCallStatus, NovoToolCategory, NovoToolExecution, NovoToolApprovalRequestedChunk, NovoToolApprovalResolvedChunk, NovoToolResultOverflowChunk, NovoToolServerUnavailableChunk, NovoUsageChunk, NovoUserInteractionRequestedChunk, NovoUserInteractionResolvedChunk, NovoWorkerMetaChunk, NovoWorkerTerminalChunk, NovoWorkspaceChunk, Page, ProductEvent, ProductEventBatch, ProductEventType, ReconnectOptions, ResolveInteractionBody, ResultHandler, ResultHandlersNamespace, Run, RunError, RunFinalResult, RunReceipt, RunStartInput, RunStatus, RunStream, RunsListParams, RunsNamespace, StreamToCompletionOptions, BandInfo, BandsNamespace, Secret, SecretContext, SecretContextBinding, SecretContextTestResult, SecretContextsNamespace, SecretProjection, SecretSource, SecretsNamespace, StepStatus, StepTerminalOutput, Thread, ThreadWorkspaceStatus, ThreadWorkspaceSummary, ThreadsNamespace, ToolApprovalHook, ToolApprovalHookErrorPolicy, ToolApprovalHookRequest, ToolApprovalHookResponse, ToolApprovalHooksNamespace, ToolServer, ToolServerAuth, ToolServerTestResult, ToolServersNamespace, NovoToolErrorInfo, UsageAggregateRow, UsageEvent, UsageEventMeterKind, UsageEventResourceKind, UsageEventScope, UsageGroupBy, UsageNamespace, UsageTotal, UserInteractionAction, UserInteractionAnswer, UserInteractionOption, UserInteractionQuestion, UserInteractionRequestShape, UserInteractionResolution, WorkerStatus, WorkerStream, } from './types.js';
-export { isNovoBrowserSession, isNovoCompaction, isNovoRunMeta, isNovoStepTerminal, isNovoTask, isNovoTerminal, isNovoToolApprovalResolved, isNovoTextDelta, isNovoToolApprovalRequested, isNovoToolCall, isNovoToolError, isNovoToolOutput, isNovoToolResultOverflow, isNovoToolServerUnavailable, isNovoUsage, isNovoUserInteractionRequested, isNovoUserInteractionResolved, isNovoWorkerMeta, isNovoWorkerTerminal, isNovoWorkspace, readNovoToolError, } from './types.js';
+export type { Agent, AgentApprovals, AgentArtifacts, AgentCapabilities, AgentCreatePolicies, AgentFile, AgentFileUpload, Artifact, ArtifactKind, AgentEventsInput, AgentInput, AgentInputAttachment, AgentPolicies, AgentPatchPolicies, AgentSkill, AgentWorkspace, MediaGenerationConfig, AgentWorkspaceNetwork, AgentWorkspaceResourcePreset, AgentWorkspaceSeed, AgentWorkspaceService, AgentsNamespace, ArtifactsNamespace, Band, BrowserCapabilityConfig, BrowserSessionLiveView, BrowserSessionsNamespace, CancelThreadResponse, CapabilityResolutionEntry, ResolvableCapability, ContextBlock, ContextInput, CredentialListInput, DataHandling, DeleteAgentResponse, DeleteThreadResponse, Environment, EnvironmentsNamespace, EventSink, EventSinksNamespace, FileCreateInput, FilesNamespace, GithubConnection, GithubConnectionOperation, GithubConnectionsNamespace, GithubConnectionTestResult, GithubMergeMethod, GithubMergePolicy, GithubRepositoryPolicy, Interaction, InteractionsNamespace, Metadata, MetadataPatch, ModelFinishReason, NovoAgentEvent, NovoAgentsOptions, NovoBrowserSessionChunk, NovoCompactionChunk, NovoDataChunk, NovoMessage, NovoMessagePart, NovoMessageRole, NovoRunMetaChunk, NovoStepTerminalChunk, NovoStreamChunk, NovoTaskChunk, NovoTerminalChunk, NovoTerminalReason, NovoToolCallChunk, NovoToolCallStatus, NovoToolCategory, NovoToolExecution, NovoToolApprovalRequestedChunk, NovoToolApprovalResolvedChunk, NovoToolResultOverflowChunk, NovoToolServerUnavailableChunk, NovoUsageChunk, NovoUserInteractionRequestedChunk, NovoUserInteractionResolvedChunk, NovoWorkerMetaChunk, NovoWorkerTerminalChunk, NovoWorkspaceChunk, Page, ProductEvent, ProductEventBatch, ProductEventType, ReconnectOptions, ResolveInteractionBody, ResultHandler, ResultHandlersNamespace, Run, RunError, RunFinalResult, RunReceipt, RunStartInput, RunStatus, RunStream, RunsListParams, RunsNamespace, StreamToCompletionOptions, BandInfo, BandsNamespace, Secret, SecretContext, SecretContextBinding, SecretContextTestResult, SecretContextsNamespace, SecretProjection, SecretSource, SecretsNamespace, StepStatus, StepTerminalOutput, Thread, ThreadWorkspaceStatus, ThreadWorkspaceSummary, ThreadsNamespace, ToolApprovalHook, ToolApprovalHookErrorPolicy, ToolApprovalHookRequest, ToolApprovalHookResponse, ToolApprovalHooksNamespace, ToolServer, ToolServerAuth, ToolServerTestResult, ToolServersNamespace, HttpConnection, HttpConnectionAuth, HttpConnectionTestResult, HttpConnectionsNamespace, NovoHttpConnectionUnavailableChunk, NovoToolErrorInfo, UsageAggregateRow, UsageEvent, UsageEventMeterKind, UsageEventResourceKind, UsageEventScope, UsageGroupBy, UsageNamespace, UsageTotal, UserInteractionAction, UserInteractionAnswer, UserInteractionOption, UserInteractionQuestion, UserInteractionRequestShape, UserInteractionResolution, WorkerStatus, WorkerStream, } from './types.js';
+export { isNovoBrowserSession, isNovoCompaction, isNovoRunMeta, isNovoStepTerminal, isNovoTask, isNovoTerminal, isNovoToolApprovalResolved, isNovoTextDelta, isNovoToolApprovalRequested, isNovoToolCall, isNovoToolError, isNovoToolOutput, isNovoToolResultOverflow, isNovoToolServerUnavailable, isNovoHttpConnectionUnavailable, isNovoUsage, isNovoUserInteractionRequested, isNovoUserInteractionResolved, isNovoWorkerMeta, isNovoWorkerTerminal, isNovoWorkspace, readNovoToolError, } from './types.js';
 export { NovoAPIError, NovoAuthenticationError, NovoConfigurationError, NovoConflictError, NovoInsufficientQuotaError, NovoInvalidRequestError, NovoNotFoundError, NovoPermissionError, NovoRateLimitError, NovoServerError, NovoTimeoutError, } from './errors.js';
 export type { NovoErrorCode, NovoErrorType } from './errors.js';
 export { verifyNovoSignature } from './signature.js';

package/dist/index.js

@@ -4,7 +4,7 @@
 // private regardless of where it lives in the source tree. The
 // `packageSurface.test.ts` checks keep the published tarball honest.
 import { NovoConfigurationError } from './errors.js';
-import { NovoHttpClient, createAgentsNamespace, createArtifactsNamespace, createBrowserSessionsNamespace, createEnvironmentsNamespace, createEventSinksNamespace, createFilesNamespace, createGithubConnectionsNamespace, createInteractionsNamespace, createResultHandlersNamespace, createRunsNamespace, createSecretContextsNamespace, createSecretsNamespace, createThreadsNamespace, createToolApprovalHooksNamespace, createToolServersNamespace, createBandsNamespace, createUsageNamespace, } from './client.js';
+import { NovoHttpClient, createAgentsNamespace, createArtifactsNamespace, createBrowserSessionsNamespace, createEnvironmentsNamespace, createEventSinksNamespace, createFilesNamespace, createGithubConnectionsNamespace, createInteractionsNamespace, createResultHandlersNamespace, createRunsNamespace, createSecretContextsNamespace, createSecretsNamespace, createThreadsNamespace, createToolApprovalHooksNamespace, createToolServersNamespace, createHttpConnectionsNamespace, createBandsNamespace, createUsageNamespace, } from './client.js';
 // ---------------------------------------------------------------------------
 // Client
 // ---------------------------------------------------------------------------
@@ -30,6 +30,7 @@ export class NovoAgents {
     secrets;
     secretContexts;
     toolServers;
+    httpConnections;
     usage;
     bands;
     client;
@@ -72,6 +73,7 @@ export class NovoAgents {
         this.secrets = createSecretsNamespace(this.client);
         this.secretContexts = createSecretContextsNamespace(this.client);
         this.toolServers = createToolServersNamespace(this.client);
+        this.httpConnections = createHttpConnectionsNamespace(this.client);
         this.usage = createUsageNamespace(this.client);
         this.bands = createBandsNamespace(this.client);
     }
@@ -80,7 +82,7 @@ function normalizeBaseUrl(baseUrl) {
     return baseUrl.replace(/\/+$/, '');
 }
 // Type guards
-export { isNovoBrowserSession, isNovoCompaction, isNovoRunMeta, isNovoStepTerminal, isNovoTask, isNovoTerminal, isNovoToolApprovalResolved, isNovoTextDelta, isNovoToolApprovalRequested, isNovoToolCall, isNovoToolError, isNovoToolOutput, isNovoToolResultOverflow, isNovoToolServerUnavailable, isNovoUsage, isNovoUserInteractionRequested, isNovoUserInteractionResolved, isNovoWorkerMeta, isNovoWorkerTerminal, isNovoWorkspace, readNovoToolError, } from './types.js';
+export { isNovoBrowserSession, isNovoCompaction, isNovoRunMeta, isNovoStepTerminal, isNovoTask, isNovoTerminal, isNovoToolApprovalResolved, isNovoTextDelta, isNovoToolApprovalRequested, isNovoToolCall, isNovoToolError, isNovoToolOutput, isNovoToolResultOverflow, isNovoToolServerUnavailable, isNovoHttpConnectionUnavailable, isNovoUsage, isNovoUserInteractionRequested, isNovoUserInteractionResolved, isNovoWorkerMeta, isNovoWorkerTerminal, isNovoWorkspace, readNovoToolError, } from './types.js';
 // Errors
 export { NovoAPIError, NovoAuthenticationError, NovoConfigurationError, NovoConflictError, NovoInsufficientQuotaError, NovoInvalidRequestError, NovoNotFoundError, NovoPermissionError, NovoRateLimitError, NovoServerError, NovoTimeoutError, } from './errors.js';
 // Webhooks

package/dist/stream.d.ts

@@ -32,6 +32,7 @@ export declare class NovoRunStream implements RunStream {
     private observedTerminalReason;
     private observedStatus;
     private observedUsage;
+    private observedOutput;
     private terminalSeen;
     private finalResultPromise;
     private activeReader;

package/dist/stream.js

@@ -70,6 +70,10 @@ export class NovoRunStream {
     observedTerminalReason = null;
     observedStatus;
     observedUsage;
+    // Structured `output` captured from the `data-novo-terminal` chunk. Surfaced
+    // on `RunFinalResult.output`; stays `undefined` for runs without an
+    // `outputSchema`.
+    observedOutput;
     // Flips true once a `data-novo-terminal` chunk has been observed on this
     // stream. The SSE response is closed by the server at a fixed cap (~13 min
     // per connection) even when the run is still executing, so a clean EOF is
@@ -247,6 +251,7 @@ export class NovoRunStream {
         let usage;
         let status;
         let terminalReason = null;
+        let output;
         let lastId = this.lastSeenEventId;
         let reconnects = 0;
         for (;;) {
@@ -269,6 +274,8 @@ export class NovoRunStream {
             if (segment.observedStatus)
                 status = segment.observedStatus;
             terminalReason = segment.observedTerminalReason ?? terminalReason;
+            if (segment.observedOutput !== undefined)
+                output = segment.observedOutput;
             lastId = segment.lastSeenEventId ?? lastId;
             if (segment.terminalSeen)
                 break;
@@ -320,6 +327,7 @@ export class NovoRunStream {
             status: status ?? 'completed',
             terminalReason: terminalReason ?? null,
             usage: usage ?? EMPTY_USAGE,
+            ...(output !== undefined ? { output } : {}),
         };
     }
     pollRunOnce() {
@@ -433,6 +441,9 @@ export class NovoRunStream {
             if (event.data.terminalReason !== undefined) {
                 this.observedTerminalReason = event.data.terminalReason;
             }
+            if (event.data.output !== undefined) {
+                this.observedOutput = event.data.output;
+            }
             return;
         }
         if (isNovoRunMeta(event)) {
@@ -464,6 +475,9 @@ export class NovoRunStream {
             status: run.status ?? this.observedStatus ?? 'completed',
             terminalReason: run.terminalReason ?? this.observedTerminalReason ?? null,
             usage,
+            ...(this.observedOutput !== undefined
+                ? { output: this.observedOutput }
+                : {}),
         };
     }
     async pollTerminalRun(runId) {

package/dist/types.d.ts

@@ -233,6 +233,13 @@ export type NovoTerminalChunk = {
         error?: RunError;
         /** Novo-policy reason the run terminated; `null` if the run completed normally. */
         terminalReason: NovoTerminalReason | null;
+        /**
+         * Structured result for a run started with `outputSchema` — the value the
+         * model delivered via the `final_output` tool, shaped by that schema.
+         * Absent when no `outputSchema` was declared. Surfaced again on
+         * {@link RunFinalResult.output}.
+         */
+        output?: unknown;
     };
 };
 export type NovoTaskChunk = {
@@ -303,8 +310,8 @@ export type NovoWorkspaceChunk = {
  *
  *   - `recovery: 'workspace'` — bytes spilled to a Novo-managed path in
  *     the customer's attached workspace. `location.path`
- *     is workspace-relative; the agent can `read_file` / `search_files`
- *     / `find_files` against it via its existing tools.
+ *     is workspace-relative; the agent can `read_file` / `grep`
+ *     / `glob` against it via its existing tools.
  *   - `recovery: 'remote-handler'` — bytes shipped to the customer's
  *     `result_handler`. `location.url` (when present) is whatever the
  *     handler returned; opaque to Novo. The agent itself cannot reach
@@ -413,6 +420,24 @@ export type NovoToolServerUnavailableChunk = {
         message: string;
     };
 };
+export type NovoHttpConnectionUnavailableChunk = {
+    type: 'data-novo-http-connection-unavailable';
+    data: {
+        runId: string;
+        threadId: string;
+        agentId: string;
+        httpConnectionId?: string;
+        connectionName: string;
+        phase: 'connect' | 'load' | 'call';
+        toolName?: string;
+        toolCallId?: string;
+        errorCode: string;
+        status?: number;
+        attempts: number;
+        attemptsExhausted: boolean;
+        message: string;
+    };
+};
 export type NovoToolApprovalRequestedChunk = {
     type: 'data-novo-tool-approval-requested';
     data: {
@@ -472,7 +497,7 @@ export type NovoUserInteractionResolvedChunk = {
         resolvedAt: string | null;
     };
 };
-export type NovoDataChunk = NovoRunMetaChunk | NovoUsageChunk | NovoStepTerminalChunk | NovoTerminalChunk | NovoTaskChunk | NovoWorkerMetaChunk | NovoWorkerTerminalChunk | NovoWorkspaceChunk | NovoToolCallChunk | NovoToolResultOverflowChunk | NovoCompactionChunk | NovoBrowserSessionChunk | NovoToolServerUnavailableChunk | NovoToolApprovalRequestedChunk | NovoToolApprovalResolvedChunk | NovoUserInteractionRequestedChunk | NovoUserInteractionResolvedChunk;
+export type NovoDataChunk = NovoRunMetaChunk | NovoUsageChunk | NovoStepTerminalChunk | NovoTerminalChunk | NovoTaskChunk | NovoWorkerMetaChunk | NovoWorkerTerminalChunk | NovoWorkspaceChunk | NovoToolCallChunk | NovoToolResultOverflowChunk | NovoCompactionChunk | NovoBrowserSessionChunk | NovoToolServerUnavailableChunk | NovoHttpConnectionUnavailableChunk | NovoToolApprovalRequestedChunk | NovoToolApprovalResolvedChunk | NovoUserInteractionRequestedChunk | NovoUserInteractionResolvedChunk;
 export type NovoStreamChunk = {
     type: 'abort';
     reason?: string;
@@ -575,6 +600,7 @@ export declare function isNovoToolResultOverflow(event: NovoAgentEvent): event i
 export declare function isNovoToolCall(event: NovoAgentEvent): event is NovoToolCallChunk;
 export declare function isNovoBrowserSession(event: NovoAgentEvent): event is NovoBrowserSessionChunk;
 export declare function isNovoToolServerUnavailable(event: NovoAgentEvent): event is NovoToolServerUnavailableChunk;
+export declare function isNovoHttpConnectionUnavailable(event: NovoAgentEvent): event is NovoHttpConnectionUnavailableChunk;
 /**
  * Per-modality switches for managed media generation. Used as the object form
  * of {@link AgentCapabilities.media}; `media: true` is shorthand for enabling
@@ -594,7 +620,6 @@ export type MediaGenerationConfig = {
 };
 export type AgentCapabilities = {
     web?: boolean;
-    planning?: boolean;
     /** Enable the durable `request_user` tool for text, choices, forms, and review actions. */
     userInteraction?: boolean;
     /**
@@ -605,10 +630,12 @@ export type AgentCapabilities = {
      * to you under the root run via `interactions`.
      *
      * A delegated subagent is always a subset of its parent. Advisors stay
-     * read-only for critique. Novo may grant workspace, shell, browser, media, or
-     * MCP authority to workers only when needed and only if the parent already has
-     * it. GitHub workflow authority, user interaction, and further delegation are
-     * never delegated to a worker or advisor.
+     * read-only for critique. Novo may grant workspace, shell, browser, media,
+     * MCP tool-server, or OpenAPI HTTP-connection authority to workers only when
+     * needed and only if the parent already has it; each MCP server and HTTP
+     * connection is named explicitly and defaults to none. GitHub workflow
+     * authority, user interaction, and further delegation are never delegated to a
+     * worker or advisor.
      */
     subagents?: boolean;
     /**
@@ -668,6 +695,15 @@ export type AgentCapabilities = {
     mcp?: {
         toolServerIds: string[];
     };
+    /**
+     * Wire registered OpenAPI HTTP connections into this agent's toolset. Each
+     * connection's operations become callable as `api__{connection}__*`. Register
+     * connections with `novo.httpConnections.register` first, then list their ids
+     * here.
+     */
+    http?: {
+        connectionIds: string[];
+    };
     /**
      * Inline Agent Skills — on-demand instruction bundles for a workflow, tool
      * family, or domain. The agent sees a compact listing (name + short
@@ -1312,6 +1348,46 @@ export type ToolServerTestResult = {
         namespacedName: string;
     }>;
 };
+/** An OpenAPI HTTP connection — operations exposed as `api__{connection}__*`. */
+export type HttpConnection = {
+    id: string;
+    object: 'http_connection';
+    name: string;
+    /** The OpenAPI/Swagger document: a URL to fetch (JSON only in v0) or inline JSON. */
+    spec: string;
+    /** Explicit base URL; `null` falls back to the document's `servers[]` / host. */
+    baseUrl: string | null;
+    auth: HttpConnectionAuth;
+    /** Allow-list of operation names; absent = all operations exposed. */
+    allowedOperations?: string[];
+    resultCapBytes?: number;
+    trusted: boolean;
+    /**
+     * Policy gate. `false` = the cloud emits
+     * `data-novo-http-connection-unavailable` with `errorCode: 'policy_denied'`
+     * at run start and never loads the spec. Disable without deleting the row.
+     */
+    enabled: boolean;
+    /** Per-row outbound call timeout (ms). `null` = use the platform default. */
+    requestTimeoutMs: number | null;
+    metadata: Metadata;
+    configVersion: number;
+    createdAt: string;
+    updatedAt: string;
+};
+export type HttpConnectionAuth = {
+    type: 'bearer';
+    secretId: string;
+};
+export type HttpConnectionTestResult = {
+    connected: true;
+    latencyMs: number;
+    operationCount: number;
+    tools: Array<{
+        name: string;
+        namespacedName: string;
+    }>;
+};
 export type DeleteAgentResponse = {
     id: string;
     object: 'agent';
@@ -1338,6 +1414,14 @@ export type RunFinalResult = {
     /** Novo-policy reason the run terminated. Null for normal completions. */
     terminalReason: NovoTerminalReason | null;
     usage: UsageTotal;
+    /**
+     * Structured result for a run started with `outputSchema` — the value the
+     * model delivered via the `final_output` tool. Captured from the terminal
+     * stream chunk; `undefined` when no `outputSchema` was declared (or the run
+     * ended without calling `final_output`). Stream-surfaced only for now — not
+     * yet exposed on `GET /v1/runs/:id`.
+     */
+    output?: unknown;
 };
 export type RunStartInput = {
     threadId: string;
@@ -1356,6 +1440,14 @@ export type RunStartInput = {
     dataHandling?: DataHandling;
     /** IANA timezone for this run's model-visible temporal context. */
     timeZone?: string;
+    /**
+     * JSON Schema describing this run's structured result. When provided, the run
+     * delivers its answer by calling a constrained `final_output` tool, and the
+     * structured value is surfaced as `output` on the terminal stream and on
+     * {@link RunFinalResult.output} (also returned by `streamToCompletion()`).
+     * Stream-surfaced only for now — not yet a persisted `GET /v1/runs/:id` field.
+     */
+    outputSchema?: Record<string, unknown>;
     budgetCents?: number;
     maxSteps?: number;
     maxDurationMs?: number;
@@ -1742,6 +1834,48 @@ export type ToolServersNamespace = {
     }>;
     test(toolServerId: string): Promise<ToolServerTestResult>;
 };
+export type HttpConnectionsNamespace = {
+    register(input: {
+        /** Slug used in `api__{connection}__{op}` names. Use 1-56 letters, numbers, `_`, or `-`; `__` is reserved. */
+        name: string;
+        /** OpenAPI/Swagger document: a URL to fetch (JSON only in v0) or inline JSON. */
+        spec: string;
+        /** Explicit base URL; omit to use the document's `servers[]` / host. */
+        baseUrl?: string;
+        auth: HttpConnectionAuth;
+        /** Allow-list of operation names; omit to expose all operations. */
+        allowedOperations?: string[];
+        resultCapBytes?: number;
+        trusted?: boolean;
+        /** Defaults to `true` server-side. Set `false` to register a connection
+         *  that's denied at run start until flipped on. */
+        enabled?: boolean;
+        requestTimeoutMs?: number | null;
+        metadata?: Metadata;
+    }): Promise<HttpConnection>;
+    list(): Promise<Page<HttpConnection>>;
+    get(httpConnectionId: string): Promise<HttpConnection>;
+    /** Partial update. `enabled` flips the policy gate; `trusted` flips the trust
+     *  boundary; `auth` may switch to a different reusable secret. */
+    update(httpConnectionId: string, input: {
+        name?: string;
+        spec?: string;
+        baseUrl?: string;
+        auth?: HttpConnectionAuth;
+        allowedOperations?: string[];
+        resultCapBytes?: number;
+        trusted?: boolean;
+        enabled?: boolean;
+        requestTimeoutMs?: number | null;
+        metadata?: MetadataPatch;
+    }): Promise<HttpConnection>;
+    delete(httpConnectionId: string): Promise<{
+        id: string;
+        object: 'http_connection';
+        deleted: true;
+    }>;
+    test(httpConnectionId: string): Promise<HttpConnectionTestResult>;
+};
 /**
  * Aggregated customer-facing usage data, accessible via `novo.usage.aggregate()`.
  *
@@ -1908,6 +2042,12 @@ export type ThreadsNamespace = {
         dataHandling?: DataHandling;
         /** IANA timezone for this run's model-visible temporal context. */
         timeZone?: string;
+        /**
+         * JSON Schema for this run's structured result — see
+         * {@link RunStartInput.outputSchema}. Surfaced as `output` on the terminal
+         * stream and {@link RunFinalResult.output}.
+         */
+        outputSchema?: Record<string, unknown>;
         budgetCents?: number;
         maxSteps?: number;
         maxDurationMs?: number;

package/dist/types.js

@@ -132,6 +132,10 @@ export function isNovoBrowserSession(event) {
 export function isNovoToolServerUnavailable(event) {
     return (event.type === 'data-novo-tool-server-unavailable' && hasObjectData(event));
 }
+export function isNovoHttpConnectionUnavailable(event) {
+    return (event.type === 'data-novo-http-connection-unavailable' &&
+        hasObjectData(event));
+}
 function isDelegationRole(value) {
     return value === 'worker' || value === 'advisor';
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "novoagents",
-  "version": "0.3.0-alpha.21",
+  "version": "0.3.0-alpha.23",
   "description": "Thin TypeScript SDK for the Novo Agents hosted API.",
   "license": "UNLICENSED",
   "type": "module",