open-tag 0.1.0 → 0.1.1

package/dist/index.d.mts

@@ -4188,7 +4188,7 @@ declare namespace external_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, custom, date$2 as date, decode, decodeAsync, deepPartial, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, xid, xor };
 }
 //#endregion
-//#region ../../packages/shared/dist/task-DVv-Mr8g.d.mts
+//#region ../../packages/shared/dist/task-BKi0lN9_.d.mts
 declare const AccountComputerSummarySchema: ZodObject<{
   computerId: ZodString;
   kind: ZodOptional<ZodEnum<{
@@ -4332,7 +4332,7 @@ declare const AgentDetailSchema: ZodObject<{
   }>;
   createdAt: ZodString;
   updatedAt: ZodString;
-  avatarUrl: ZodOptional<ZodNullable<ZodString>>;
+  avatarPath: ZodOptional<ZodNullable<ZodString>>;
   createdBy: ZodObject<{
     userId: ZodString;
     displayName: ZodString;
@@ -4347,6 +4347,7 @@ declare const AgentDetailSchema: ZodObject<{
     }>;
   }, $strict>>;
   requiresComputerRebind: ZodOptional<ZodBoolean>;
+  slackOAuthAvailable: ZodOptional<ZodBoolean>;
   activity: ZodDiscriminatedUnion<[ZodObject<{
     state: ZodLiteral<"idle">;
   }, $strict>, ZodObject<{
@@ -4398,6 +4399,7 @@ declare const AgentAdminConfigSchema: ZodObject<{
   updatedAt: ZodString;
   createdByUserId: ZodString;
   computerId: ZodNullable<ZodString>;
+  selfConfigurationEnabled: ZodBoolean;
   revision: ZodNumber;
   runtimeConfig: ZodObject<{
     revision: ZodNumber;
@@ -4409,6 +4411,13 @@ declare const AgentAdminConfigSchema: ZodObject<{
       alias: ZodString;
       repository: ZodString;
     }, $strict>>;
+    permissions: ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>;
   }, $strict>;
 }, $strict>;
 declare const CreateAgentRequestSchema: ZodObject<{
@@ -4422,6 +4431,13 @@ declare const CreateAgentRequestSchema: ZodObject<{
   }>;
   computerId: ZodOptional<ZodString>;
   runtimeConfig: ZodOptional<ZodObject<{
+    permissions: ZodOptional<ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>>;
     model: ZodOptional<ZodNullable<ZodString>>;
     reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
     instructions: ZodOptional<ZodString>;
@@ -4435,7 +4451,15 @@ declare const UpdateAgentRequestSchema: ZodObject<{
     all_message: "all_message";
     mention_only: "mention_only";
   }>>;
+  selfConfigurationEnabled: ZodOptional<ZodBoolean>;
   runtimeConfig: ZodOptional<ZodObject<{
+    permissions: ZodOptional<ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>>;
     model: ZodOptional<ZodNullable<ZodString>>;
     reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
     instructions: ZodOptional<ZodString>;
@@ -4462,7 +4486,7 @@ declare const ListAgentsResponseSchema: ZodObject<{
     }>;
     createdAt: ZodString;
     updatedAt: ZodString;
-    avatarUrl: ZodOptional<ZodNullable<ZodString>>;
+    avatarPath: ZodOptional<ZodNullable<ZodString>>;
     createdBy: ZodObject<{
       userId: ZodString;
       displayName: ZodString;
@@ -4477,6 +4501,7 @@ declare const ListAgentsResponseSchema: ZodObject<{
       }>;
     }, $strict>>;
     requiresComputerRebind: ZodOptional<ZodBoolean>;
+    slackOAuthAvailable: ZodOptional<ZodBoolean>;
     activity: ZodDiscriminatedUnion<[ZodObject<{
       state: ZodLiteral<"idle">;
     }, $strict>, ZodObject<{
@@ -4739,6 +4764,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   AGENT_NAME_CONFLICT: "AGENT_NAME_CONFLICT";
   AGENT_REBIND_BLOCKED: "AGENT_REBIND_BLOCKED";
   AGENT_REVISION_CONFLICT: "AGENT_REVISION_CONFLICT";
+  AGENT_SELF_CONFIGURATION_DISABLED: "AGENT_SELF_CONFIGURATION_DISABLED";
   AUTH_CODE_CONSUMED: "AUTH_CODE_CONSUMED";
   AUTH_CODE_EXPIRED: "AUTH_CODE_EXPIRED";
   AUTH_DEV_USER_UNAVAILABLE: "AUTH_DEV_USER_UNAVAILABLE";
@@ -4750,7 +4776,6 @@ declare const ErrorCodeSchema: ZodEnum<{
   AUTH_PROVIDER_DISABLED: "AUTH_PROVIDER_DISABLED";
   AUTH_USER_MISMATCH: "AUTH_USER_MISMATCH";
   AUTH_USER_SUSPENDED: "AUTH_USER_SUSPENDED";
-  CLIENT_VERSION_UNSUPPORTED: "CLIENT_VERSION_UNSUPPORTED";
   CLOUD_CAPACITY_EXCEEDED: "CLOUD_CAPACITY_EXCEEDED";
   CLOUD_MODEL_NOT_ALLOWED: "CLOUD_MODEL_NOT_ALLOWED";
   CLOUD_MODEL_UNAVAILABLE: "CLOUD_MODEL_UNAVAILABLE";
@@ -4813,6 +4838,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   MCP_REFRESH_OUTCOME_UNKNOWN: "MCP_REFRESH_OUTCOME_UNKNOWN";
   MCP_REGISTRATION_FAILED: "MCP_REGISTRATION_FAILED";
   MCP_REGISTRATION_UNSUPPORTED: "MCP_REGISTRATION_UNSUPPORTED";
+  MCP_SELF_ATTACH_NONE_AUTH_FORBIDDEN: "MCP_SELF_ATTACH_NONE_AUTH_FORBIDDEN";
   MCP_SERVER_FORBIDDEN: "MCP_SERVER_FORBIDDEN";
   MCP_SERVER_IN_USE: "MCP_SERVER_IN_USE";
   MCP_SERVER_NAME_CONFLICT: "MCP_SERVER_NAME_CONFLICT";
@@ -4833,6 +4859,13 @@ declare const ErrorCodeSchema: ZodEnum<{
   RUNTIME_AUTH_TIMEOUT: "RUNTIME_AUTH_TIMEOUT";
   RUNTIME_REGISTER_TIMEOUT: "RUNTIME_REGISTER_TIMEOUT";
   SANDBOX_RUNNER_CONFLICT: "SANDBOX_RUNNER_CONFLICT";
+  SCHEDULE_INVALID_REQUEST: "SCHEDULE_INVALID_REQUEST";
+  SCHEDULE_INVALID_RULE: "SCHEDULE_INVALID_RULE";
+  SCHEDULE_INVALID_TIMEZONE: "SCHEDULE_INVALID_TIMEZONE";
+  SCHEDULE_NO_FUTURE_OCCURRENCE: "SCHEDULE_NO_FUTURE_OCCURRENCE";
+  SCHEDULE_REVISION_CONFLICT: "SCHEDULE_REVISION_CONFLICT";
+  SCHEDULE_TARGET_INVALID: "SCHEDULE_TARGET_INVALID";
+  SCHEDULE_TARGET_REQUIRED: "SCHEDULE_TARGET_REQUIRED";
   SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
   SESSION_CURSOR_INVALID: "SESSION_CURSOR_INVALID";
   SESSION_PROOF_INVALID: "SESSION_PROOF_INVALID";
@@ -4844,7 +4877,13 @@ declare const ErrorCodeSchema: ZodEnum<{
   SKILL_NAME_CONFLICT: "SKILL_NAME_CONFLICT";
   SKILL_NAME_RESERVED: "SKILL_NAME_RESERVED";
   SKILL_NOT_FOUND: "SKILL_NOT_FOUND";
+  SKILL_PRESET_NOT_FOUND: "SKILL_PRESET_NOT_FOUND";
   SKILL_REVISION_CONFLICT: "SKILL_REVISION_CONFLICT";
+  SKILL_SOURCE_BLOCKED: "SKILL_SOURCE_BLOCKED";
+  SKILL_SOURCE_INVALID: "SKILL_SOURCE_INVALID";
+  SKILL_SOURCE_NO_SKILLS: "SKILL_SOURCE_NO_SKILLS";
+  SKILL_SOURCE_TOO_LARGE: "SKILL_SOURCE_TOO_LARGE";
+  SKILL_SOURCE_UNREACHABLE: "SKILL_SOURCE_UNREACHABLE";
   SKILL_STORAGE_UNAVAILABLE: "SKILL_STORAGE_UNAVAILABLE";
   SLACK_APP_TEAM_ALREADY_BOUND: "SLACK_APP_TEAM_ALREADY_BOUND";
   SLACK_AUTH_IDENTITY_INCOMPLETE: "SLACK_AUTH_IDENTITY_INCOMPLETE";
@@ -5461,6 +5500,11 @@ declare const MCPProbeResponseSchema: ZodObject<{
   protocolVersion: ZodNullable<ZodString>;
 }, $strict>;
 type MCPProbeResponse = output$1<typeof MCPProbeResponseSchema>;
+declare const AgentRuntimeOptionsSchema: ZodObject<{
+  modelSuggestions: ZodArray<ZodString>;
+  reasoningEffortAllowedValues: ZodNullable<ZodArray<ZodString>>;
+}, $strict>;
+type AgentRuntimeOptions = output$1<typeof AgentRuntimeOptionsSchema>;
 declare const RuntimeDurableWorkKindSchema: ZodEnum<{
   "session-message": "session-message";
   "turn-report": "turn-report";
@@ -5517,6 +5561,7 @@ declare const EffectiveRuntimeSnapshotSchema: ZodObject<{
     }, $strict>;
   }, $strict>;
   agentId: ZodString;
+  selfConfigurationEnabled: ZodOptional<ZodBoolean>;
   provider: ZodEnum<{
     "claude-code": "claude-code";
     codex: "codex";
@@ -5530,8 +5575,12 @@ declare const EffectiveRuntimeSnapshotSchema: ZodObject<{
     session: ZodOptional<ZodString>;
   }, $strict>;
   execution: ZodObject<{
-    approvalPolicy: ZodLiteral<"never">;
+    approvalPolicy: ZodEnum<{
+      never: "never";
+      "on-request": "on-request";
+    }>;
     networkAccess: ZodBoolean;
+    allowCommands: ZodOptional<ZodArray<ZodString>>;
   }, $strict>;
   workspace: ZodObject<{
     workspaceId: ZodString;
@@ -5608,6 +5657,7 @@ declare const SessionReconcileRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -5621,8 +5671,12 @@ declare const SessionReconcileRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -5772,6 +5826,7 @@ declare const DirectImMessageDeliveryRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -5785,8 +5840,12 @@ declare const DirectImMessageDeliveryRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -6051,11 +6110,47 @@ declare const RuntimeImSteerResultSchema: ZodDiscriminatedUnion<[ZodObject<{
     target_mismatch: "target_mismatch";
   }>;
 }, $strict>], "status">;
-declare const SessionMessageDeliveryRequestSchema: ZodObject<{
+declare const SessionMessageDeliveryResultSchema: ZodObject<{
+  type: ZodLiteral<"session:message:deliver:result">;
+  requestId: ZodString;
+  messageId: ZodString;
+  targetSessionId: ZodString;
+  placementGeneration: ZodNumber;
+  status: ZodEnum<{
+    accepted: "accepted";
+    rejected: "rejected";
+  }>;
+  reason: ZodOptional<ZodEnum<{
+    agent_busy: "agent_busy";
+    agent_configuration_busy: "agent_configuration_busy";
+    client_busy: "client_busy";
+    configuration_unsupported: "configuration_unsupported";
+    input_conflict: "input_conflict";
+    invalid_input: "invalid_input";
+    provider_unavailable: "provider_unavailable";
+    session_binding_conflict: "session_binding_conflict";
+    session_busy: "session_busy";
+    session_not_ready: "session_not_ready";
+    session_recovery_required: "session_recovery_required";
+    stale_configuration: "stale_configuration";
+    stale_generation: "stale_generation";
+    target_mismatch: "target_mismatch";
+    turn_expired: "turn_expired";
+  }>>;
+}, $strict>;
+declare const SessionMessageDeliveryRequestV3Schema: ZodObject<{
   type: ZodLiteral<"session:message:deliver">;
   requestId: ZodString;
   messageId: ZodString;
-  sourceSessionId: ZodString;
+  sourceSessionId: ZodOptional<ZodString>;
+  scheduledOrigin: ZodOptional<ZodObject<{
+    scheduleId: ZodString;
+    scheduledFor: ZodString;
+    timezone: ZodString;
+    name: ZodString;
+  }, $strict>>;
+  sentAt: ZodOptional<ZodString>;
+  scheduleDetailUrl: ZodOptional<ZodString>;
   targetSessionId: ZodString;
   agentId: ZodString;
   placementGeneration: ZodNumber;
@@ -6079,6 +6174,7 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -6092,8 +6188,12 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -6105,34 +6205,6 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
     }, $strict>>;
   }, $strict>;
 }, $strict>;
-declare const SessionMessageDeliveryResultSchema: ZodObject<{
-  type: ZodLiteral<"session:message:deliver:result">;
-  requestId: ZodString;
-  messageId: ZodString;
-  targetSessionId: ZodString;
-  placementGeneration: ZodNumber;
-  status: ZodEnum<{
-    accepted: "accepted";
-    rejected: "rejected";
-  }>;
-  reason: ZodOptional<ZodEnum<{
-    agent_busy: "agent_busy";
-    agent_configuration_busy: "agent_configuration_busy";
-    client_busy: "client_busy";
-    configuration_unsupported: "configuration_unsupported";
-    input_conflict: "input_conflict";
-    invalid_input: "invalid_input";
-    provider_unavailable: "provider_unavailable";
-    session_binding_conflict: "session_binding_conflict";
-    session_busy: "session_busy";
-    session_not_ready: "session_not_ready";
-    session_recovery_required: "session_recovery_required";
-    stale_configuration: "stale_configuration";
-    stale_generation: "stale_generation";
-    target_mismatch: "target_mismatch";
-    turn_expired: "turn_expired";
-  }>>;
-}, $strict>;
 declare const TurnReportRequestSchema: ZodObject<{
   type: ZodLiteral<"turn:report">;
   requestId: ZodString;
@@ -6243,6 +6315,18 @@ declare const TurnReportResultSchema: ZodObject<{
   }>;
   resultHash: ZodString;
 }, $strict>;
+declare const AgentRuntimeOptionsRequestFrameSchema: ZodObject<{
+  type: ZodLiteral<"agent-runtime:options">;
+  requestId: ZodString;
+  agentId: ZodString;
+  computerId: ZodString;
+  provider: ZodEnum<{
+    "claude-code": "claude-code";
+    codex: "codex";
+    pi: "pi";
+  }>;
+  model: ZodOptional<ZodString>;
+}, $strict>;
 declare const AgentRuntimeTestRequestFrameSchema: ZodObject<{
   type: ZodLiteral<"agent-runtime:test">;
   requestId: ZodString;
@@ -6371,6 +6455,32 @@ declare const ProviderCliValidationResultFrameSchema: ZodObject<{
     validation_expired: "validation_expired";
   }>>;
 }, $strict>;
+declare const RuntimeApprovalDecisionSchema: ZodObject<{
+  requestId: ZodString;
+  turnId: ZodString;
+  sessionId: ZodString;
+  deliveryId: ZodString;
+  placementGeneration: ZodNumber;
+  type: ZodLiteral<"approval:decision">;
+  decision: ZodEnum<{
+    accept: "accept";
+    decline: "decline";
+  }>;
+}, $strict>;
+declare const RuntimeApprovalResultSchema: ZodObject<{
+  requestId: ZodString;
+  turnId: ZodString;
+  sessionId: ZodString;
+  deliveryId: ZodString;
+  placementGeneration: ZodNumber;
+  type: ZodLiteral<"approval:result">;
+  status: ZodEnum<{
+    applied: "applied";
+    stale: "stale";
+  }>;
+}, $strict>;
+type RuntimeApprovalDecision = output$1<typeof RuntimeApprovalDecisionSchema>;
+type RuntimeApprovalResult = output$1<typeof RuntimeApprovalResultSchema>;
 type RuntimeUsage = output$1<typeof RuntimeUsageSchema>;
 type RuntimeDurableWorkKind = output$1<typeof RuntimeDurableWorkKindSchema>;
 type RuntimeDurableWorkRecord = output$1<typeof RuntimeDurableWorkRecordSchema>;
@@ -6385,10 +6495,11 @@ type RuntimeImSteerResult = output$1<typeof RuntimeImSteerResultSchema>;
 type RuntimeImCredentialGrantResult = output$1<typeof RuntimeImCredentialGrantResultSchema>;
 type RuntimeImOutboxContext = output$1<typeof RuntimeImOutboxContextSchema>;
 type ImMessageDeliveryResult = output$1<typeof ImMessageDeliveryResultSchema>;
-type SessionMessageDeliveryRequest = output$1<typeof SessionMessageDeliveryRequestSchema>;
+type SessionMessageDeliveryRequestV3 = output$1<typeof SessionMessageDeliveryRequestV3Schema>;
 type SessionMessageDeliveryResult = output$1<typeof SessionMessageDeliveryResultSchema>;
 type TurnReportRequest = output$1<typeof TurnReportRequestSchema>;
 type TurnReportResult = output$1<typeof TurnReportResultSchema>;
+type AgentRuntimeOptionsRequestFrame = output$1<typeof AgentRuntimeOptionsRequestFrameSchema>;
 type AgentRuntimeTestRequestFrame = output$1<typeof AgentRuntimeTestRequestFrameSchema>;
 type AgentRuntimeTestResultFrame = output$1<typeof AgentRuntimeTestResultFrameSchema>;
 type ProviderCliExpectedIdentity = output$1<typeof ProviderCliExpectedIdentitySchema>;
@@ -6447,6 +6558,181 @@ type RuntimeClientCapabilities = output$1<typeof RuntimeClientCapabilitiesSchema
 type RuntimeProviderReadinessObservation = output$1<typeof RuntimeProviderReadinessObservationSchema>;
 type RuntimeImCliReadinessObservation = output$1<typeof RuntimeImCliReadinessObservationSchema>;
 type RuntimeChannelTarget = output$1<typeof RuntimeChannelTargetSchema>;
+/** Full Schedule DTO: every management field, the full prompt, and the Web detail link. */
+declare const AgentScheduleSchema: ZodObject<{
+  id: ZodString;
+  agentId: ZodString;
+  target: ZodObject<{
+    sessionId: ZodString;
+    provider: ZodEnum<{
+      feishu: "feishu";
+      slack: "slack";
+    }>;
+    sessionKind: ZodEnum<{
+      channel: "channel";
+      thread: "thread";
+    }>;
+    channelId: ZodString;
+    threadKey: ZodNullable<ZodString>;
+  }, $strict>;
+  name: ZodString;
+  prompt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+    anchorAt: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+  enabled: ZodBoolean;
+  nextTriggerAt: ZodNullable<ZodString>;
+  revision: ZodNumber;
+  lastDispatch: ZodNullable<ZodObject<{
+    scheduledFor: ZodString;
+    attemptedAt: ZodNullable<ZodString>;
+    messageId: ZodNullable<ZodString>;
+    outcome: ZodEnum<{
+      accepted: "accepted";
+      rejected: "rejected";
+      skipped: "skipped";
+      unknown: "unknown";
+      unreachable: "unreachable";
+    }>;
+    code: ZodNullable<ZodString>;
+  }, $strict>>;
+  detailUrl: ZodString;
+  createdAt: ZodString;
+  updatedAt: ZodString;
+}, $strict>;
+type AgentSchedule = output$1<typeof AgentScheduleSchema>;
+declare const AgentScheduleListResponseSchema: ZodObject<{
+  items: ZodArray<ZodObject<{
+    id: ZodString;
+    agentId: ZodString;
+    target: ZodObject<{
+      sessionId: ZodString;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      sessionKind: ZodEnum<{
+        channel: "channel";
+        thread: "thread";
+      }>;
+      channelId: ZodString;
+      threadKey: ZodNullable<ZodString>;
+    }, $strict>;
+    name: ZodString;
+    schedule: ZodDiscriminatedUnion<[ZodObject<{
+      kind: ZodLiteral<"at">;
+      at: ZodString;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"every">;
+      intervalSeconds: ZodNumber;
+      anchorAt: ZodString;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"cron">;
+      expression: ZodString;
+    }, $strict>], "kind">;
+    timezone: ZodString;
+    enabled: ZodBoolean;
+    nextTriggerAt: ZodNullable<ZodString>;
+    revision: ZodNumber;
+    lastDispatch: ZodNullable<ZodObject<{
+      scheduledFor: ZodString;
+      attemptedAt: ZodNullable<ZodString>;
+      messageId: ZodNullable<ZodString>;
+      outcome: ZodEnum<{
+        accepted: "accepted";
+        rejected: "rejected";
+        skipped: "skipped";
+        unknown: "unknown";
+        unreachable: "unreachable";
+      }>;
+      code: ZodNullable<ZodString>;
+    }, $strict>>;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+  }, $strict>>;
+  nextCursor: ZodNullable<ZodString>;
+}, $strict>;
+type AgentScheduleListResponse = output$1<typeof AgentScheduleListResponseSchema>;
+declare const CreateAgentScheduleRequestSchema: ZodObject<{
+  name: ZodString;
+  prompt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+}, $strict>;
+type CreateAgentScheduleRequest = output$1<typeof CreateAgentScheduleRequestSchema>;
+declare const UpdateAgentScheduleRequestSchema: ZodObject<{
+  expectedRevision: ZodNumber;
+  name: ZodOptional<ZodString>;
+  prompt: ZodOptional<ZodString>;
+  schedule: ZodOptional<ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">>;
+  timezone: ZodOptional<ZodString>;
+}, $strict>;
+type UpdateAgentScheduleRequest = output$1<typeof UpdateAgentScheduleRequestSchema>;
+/** Preview either a persisted Schedule (keeps its `every` anchor) or an ad-hoc rule + timezone. */
+declare const PreviewAgentScheduleRequestSchema: ZodUnion<readonly [ZodObject<{
+  scheduleId: ZodString;
+}, $strict>, ZodObject<{
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+}, $strict>]>;
+type PreviewAgentScheduleRequest = output$1<typeof PreviewAgentScheduleRequestSchema>;
+declare const AgentSchedulePreviewSchema: ZodObject<{
+  calculatedAt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+    anchorAt: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+  items: ZodArray<ZodObject<{
+    at: ZodString;
+    local: ZodString;
+    timezone: ZodString;
+  }, $strict>>;
+}, $strict>;
+type AgentSchedulePreview = output$1<typeof AgentSchedulePreviewSchema>;
 declare const SkillArchiveFormatSchema: ZodEnum<{
   "tar.gz": "tar.gz";
   zip: "zip";
@@ -6461,6 +6747,8 @@ declare const SkillSchema: ZodObject<{
   source: ZodEnum<{
     agent_upload: "agent_upload";
     cli_upload: "cli_upload";
+    preset: "preset";
+    url_install: "url_install";
     web_upload: "web_upload";
   }>;
   archiveSha256: ZodString;
@@ -6480,6 +6768,8 @@ declare const SkillDetailSchema: ZodObject<{
   source: ZodEnum<{
     agent_upload: "agent_upload";
     cli_upload: "cli_upload";
+    preset: "preset";
+    url_install: "url_install";
     web_upload: "web_upload";
   }>;
   archiveSha256: ZodString;
@@ -6505,6 +6795,8 @@ declare const ListAgentSkillsResponseSchema: ZodObject<{
     source: ZodEnum<{
       agent_upload: "agent_upload";
       cli_upload: "cli_upload";
+      preset: "preset";
+      url_install: "url_install";
       web_upload: "web_upload";
     }>;
     archiveSha256: ZodString;
@@ -6529,6 +6821,62 @@ declare const RuntimeSkillManifestSchema: ZodObject<{
   }, $strict>>;
 }, $strict>;
 type RuntimeSkillManifest = output$1<typeof RuntimeSkillManifestSchema>;
+declare const ListSkillPresetsResponseSchema: ZodObject<{
+  categories: ZodArray<ZodObject<{
+    id: ZodEnum<{
+      engineering: "engineering";
+      "getting-started": "getting-started";
+    }>;
+    order: ZodNumber;
+  }, $strict>>;
+  presets: ZodArray<ZodObject<{
+    name: ZodString;
+    description: ZodString;
+    category: ZodEnum<{
+      engineering: "engineering";
+      "getting-started": "getting-started";
+    }>;
+    order: ZodNumber;
+    archiveSha256: ZodString;
+    archiveBytes: ZodNumber;
+    fileCount: ZodNumber;
+    state: ZodEnum<{
+      installed: "installed";
+      name_conflict: "name_conflict";
+      not_installed: "not_installed";
+      update_available: "update_available";
+    }>;
+  }, $strict>>;
+}, $strict>;
+type ListSkillPresetsResponse = output$1<typeof ListSkillPresetsResponseSchema>;
+declare const InstallSkillPresetResponseSchema: ZodObject<{
+  action: ZodEnum<{
+    installed: "installed";
+    unchanged: "unchanged";
+    updated: "updated";
+  }>;
+  skill: ZodObject<{
+    id: ZodString;
+    agentId: ZodString;
+    name: ZodString;
+    description: ZodString;
+    enabled: ZodBoolean;
+    source: ZodEnum<{
+      agent_upload: "agent_upload";
+      cli_upload: "cli_upload";
+      preset: "preset";
+      url_install: "url_install";
+      web_upload: "web_upload";
+    }>;
+    archiveSha256: ZodString;
+    archiveBytes: ZodNumber;
+    fileCount: ZodNumber;
+    revision: ZodNumber;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+  }, $strict>;
+}, $strict>;
+type InstallSkillPresetResponse = output$1<typeof InstallSkillPresetResponseSchema>;
 /** The stable high-level class used for operational routing and dashboards. */
 declare const StructuredErrorCategorySchema: ZodEnum<{
   auth: "auth";
@@ -7522,6 +7870,19 @@ type SessionCliSendRequest = output$1<typeof SessionCliSendRequestSchema>;
 type SessionCliCommandResponse = output$1<typeof SessionCliCommandResponseSchema>;
 type SessionCliListQuery = output$1<typeof SessionCliListQuerySchema>;
 type SessionCliListResponse = output$1<typeof SessionCliListResponseSchema>;
+declare const TurnActivityResultSchema: ZodObject<{
+  type: ZodLiteral<"turn:activity:result">;
+  requestId: ZodString;
+  turnId: ZodString;
+  sequence: ZodNumber;
+  status: ZodEnum<{
+    already_recorded: "already_recorded";
+    recorded: "recorded";
+    stale_generation: "stale_generation";
+    unsupported_capability: "unsupported_capability";
+  }>;
+}, $strict>;
+type TurnActivityResult = output$1<typeof TurnActivityResultSchema>;
 /** Business parameters shared by every hop; unknown fields are rejected. */
 declare const WebSearchParamsSchema: ZodObject<{
   query: ZodString;
@@ -7654,7 +8015,7 @@ declare const WebToolErrorCodeSchema: ZodEnum<{
 }>;
 type WebToolErrorCode = output$1<typeof WebToolErrorCodeSchema>;
 declare namespace index_d_exports {
-  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, serializeEnvironment, sessionBindingPath, skillRootForProvider, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
+  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeConfigurationOptionsRequest, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientLoggerServiceOptions, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedContextTreeStatus, ManagedEnvironment, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionErrorCategory, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterRecoveryStatus, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, serializeEnvironment, sessionBindingPath, skillRootForProvider, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
 }
 //#region src/agent-runtime/types.d.ts
 declare const AGENT_RUNTIME_CONTRACT_VERSION = 2;
@@ -7763,6 +8124,7 @@ interface AgentRuntimeWorkspace {
   readonly writableRoots?: readonly string[];
 }
 interface AgentRuntimePolicy {
+  readonly allowedCommands?: readonly string[];
   readonly fileSystem: "read-only" | "workspace-write" | "unrestricted";
   readonly network: "disabled" | "enabled";
   readonly approvals: "never" | "on-request" | "unless-trusted";
@@ -7961,8 +8323,14 @@ interface AgentRuntime {
   waitForIdle(): Promise<void>;
   close(): Promise<void>;
 }
+interface AgentRuntimeConfigurationOptionsRequest {
+  readonly model?: string;
+  readonly cwd: string;
+  readonly signal?: AbortSignal;
+}
 interface AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
+  getConfigurationOptions?(request: AgentRuntimeConfigurationOptionsRequest): Promise<AgentRuntimeOptions>;
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
   create(request: CreateAgentRuntimeRequest): Promise<AgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<AgentRuntime>;
@@ -8108,8 +8476,23 @@ declare class OpenTagApi {
   listRuntimeSkills(proof: string, options?: RequestOptions): Promise<ListAgentSkillsResponse>;
   pushRuntimeSkill(proof: string, input: SkillUploadInput, options?: RequestOptions): Promise<Skill>;
   openRuntimeSkillBundle(proof: string, name: string, options?: RequestOptions): Promise<Response>;
+  listSkillPresets(accessToken: string, agentId: string, options?: RequestOptions): Promise<ListSkillPresetsResponse>;
+  installSkillPreset(accessToken: string, agentId: string, presetName: string, options?: RequestOptions): Promise<InstallSkillPresetResponse>;
+  listRuntimeSkillPresets(proof: string, options?: RequestOptions): Promise<ListSkillPresetsResponse>;
+  installRuntimeSkillPreset(proof: string, presetName: string, options?: RequestOptions): Promise<InstallSkillPresetResponse>;
   getRuntimeAgentConfig(proof: string, options?: RequestOptions): Promise<AgentAdminConfig>;
   updateRuntimeAgentConfig(proof: string, input: UpdateSelfAgentRequest, options?: RequestOptions): Promise<AgentAdminConfig>;
+  createRuntimeAgentSchedule(proof: string, input: CreateAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedule>;
+  listRuntimeAgentSchedules(proof: string, query?: {
+    limit?: number;
+    cursor?: string;
+  }, options?: RequestOptions): Promise<AgentScheduleListResponse>;
+  getRuntimeAgentSchedule(proof: string, scheduleId: string, options?: RequestOptions): Promise<AgentSchedule>;
+  updateRuntimeAgentSchedule(proof: string, scheduleId: string, input: UpdateAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedule>;
+  pauseRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<AgentSchedule>;
+  resumeRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<AgentSchedule>;
+  deleteRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<void>;
+  previewRuntimeAgentSchedule(proof: string, input: PreviewAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedulePreview>;
   listRuntimeAgentMcpServers(proof: string, options?: RequestOptions): Promise<ListAgentMCPServersResponse>;
   listRuntimeAgentAvailableMcpServers(proof: string, options?: RequestOptions): Promise<ListAvailableMCPServersResponse>;
   attachRuntimeAgentMcpServer(proof: string, input: AttachMCPServerRequest, options?: RequestOptions): Promise<MCPAgentServer>;
@@ -8256,7 +8639,15 @@ interface ClientLogger {
 interface CreateLoggerOptions {
   destination?: "configured" | "stderr" | "file" | "dual";
 }
-declare function configureClientLoggerForService(logDirectory: string): void;
+/**
+ * The resolved environment of the service that owns the log directory. The daemon service supplies
+ * its `config/daemon.env` result here, so the logger reads the same environment the rest of the
+ * daemon runs with instead of the raw process environment.
+ */
+interface ClientLoggerServiceOptions {
+  environment?: Readonly<Record<string, string | undefined>>;
+}
+declare function configureClientLoggerForService(logDirectory: string, options?: ClientLoggerServiceOptions): void;
 declare function configureClientLoggerContext(bindings: ClientLogBindings): void;
 declare function createLogger(module: string, options?: CreateLoggerOptions): ClientLogger;
 //#endregion
@@ -8303,9 +8694,11 @@ type RuntimeBusinessFrame = Readonly<Record<string, unknown>> & {
 //#endregion
 //#region src/runtime/runtime-connection-errors.d.ts
 type RuntimeSendErrorCode = "aborted" | "deadline" | "frame_too_large" | "overflow" | "unavailable" | "capability_unavailable";
+type RuntimeConnectionErrorCategory = "authentication_rejection" | "capability_incompatibility" | "protocol" | "transient_connection";
 declare class RuntimeConnectionError extends Error {
   readonly fatal: boolean;
-  constructor(message: string, fatal: boolean);
+  readonly category: RuntimeConnectionErrorCategory;
+  constructor(message: string, fatal: boolean, category?: RuntimeConnectionErrorCategory);
 }
 declare class RuntimeSendError extends Error {
   readonly code: RuntimeSendErrorCode;
@@ -8841,9 +9234,10 @@ interface ClaudeCodeMcpGatewayEndpoint {
 interface ClaudeCodeHostedToolBridge {
   readonly allowedTools: readonly string[];
   readonly configPath: string;
+  readonly pluginPath: string;
   close(): Promise<void>;
 }
-declare function startClaudeCodeHostedToolBridge(hostedTools: AgentHostedTools | undefined, runId: string, signal: AbortSignal, mcpGateway?: ClaudeCodeMcpGatewayEndpoint): Promise<ClaudeCodeHostedToolBridge>;
+declare function startClaudeCodeHostedToolBridge(hostedTools: AgentHostedTools | undefined, runId: string, signal: AbortSignal, skillPaths: readonly string[], mcpGateway?: ClaudeCodeMcpGatewayEndpoint): Promise<ClaudeCodeHostedToolBridge>;
 //#endregion
 //#region src/providers/claude-code/process-wire.d.ts
 declare const CLAUDE_CODE_MAX_LINE_BYTES: number;
@@ -8871,6 +9265,7 @@ interface ClaudeCodeProcessResult {
   readonly stderr: string;
 }
 interface ClaudeCodeProcessClient {
+  send?(message: Readonly<Record<string, unknown>>): Promise<void>;
   execute(input: Readonly<Record<string, unknown>>, onMessage: (message: Readonly<Record<string, unknown>>) => void, signal: AbortSignal): Promise<ClaudeCodeProcessResult>;
   interrupt(): Promise<void>;
   close(graceMs?: number): Promise<void>;
@@ -8880,18 +9275,21 @@ declare class ClaudeCodeProcess implements ClaudeCodeProcessClient {
   constructor(options: ClaudeCodeSpawnOptions);
   execute(input: Readonly<Record<string, unknown>>, onMessage: (message: Readonly<Record<string, unknown>>) => void, signal: AbortSignal): Promise<ClaudeCodeProcessResult>;
   interrupt(): Promise<void>;
+  send(message: Readonly<Record<string, unknown>>): Promise<void>;
   close(graceMs?: number): Promise<void>;
 }
 //#endregion
 //#region src/providers/claude-code/agent-runtime.d.ts
 declare const CLAUDE_CODE_AGENT_RUNTIME_MANIFEST: AgentRuntimeManifest;
 interface ClaudeCodeRuntimeOptions {
+  readonly policy: AgentRuntimePolicy;
   readonly binding: AgentRuntimeBinding;
   readonly configuration?: AgentRunConfiguration;
   readonly createProcess: (args: readonly string[]) => ClaudeCodeProcessClient;
   readonly emptyNativeToolAllowList?: boolean;
   readonly eventSink: AgentRuntimeEventSink;
   readonly hostedTools?: AgentHostedTools;
+  readonly skillPaths: readonly string[];
   readonly resume: boolean;
   readonly startHostedToolBridge: typeof startClaudeCodeHostedToolBridge;
   readonly systemPrompt: string;
@@ -8920,12 +9318,17 @@ declare class ClaudeCodeAgentRuntime extends BaseAgentRuntime {
   protected executeRun(request: AgentPromptRequest, context: AgentProviderRunContext): Promise<AgentProviderRunResult>;
   protected abortProvider(_request: AgentAbortRequest): Promise<void>;
   protected closeProvider(): Promise<void>;
+  protected respondProvider(response: AgentInteractionResponse): Promise<void>;
 }
 declare class ClaudeCodeAgentRuntimeFactory implements AgentRuntimeFactory {
   #private;
   readonly manifest: AgentRuntimeManifest;
   constructor(options?: ClaudeCodeAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<ClaudeCodeAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<ClaudeCodeAgentRuntime>;
 }
@@ -9017,7 +9420,7 @@ declare class CodexAppServerProcess implements InteractiveCodexAppServerClient {
 }
 //#endregion
 //#region src/providers/codex/agent-runtime.d.ts
-declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "--disable", "tool_call_mcp_elicitation", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=false", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include" }'];
+declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=true", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include" }'];
 declare const CODEX_AGENT_RUNTIME_MANIFEST: AgentRuntimeManifest;
 interface CodexRuntimeOptions {
   readonly client: InteractiveCodexAppServerClient;
@@ -9064,6 +9467,10 @@ declare class CodexAgentRuntimeFactory implements AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
   constructor(options: CodexAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<CodexAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<CodexAgentRuntime>;
 }
@@ -9156,6 +9563,10 @@ declare class PiAgentRuntimeFactory implements AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
   constructor(options?: PiAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<PiAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<PiAgentRuntime>;
 }
@@ -9343,6 +9754,8 @@ declare class ContextTreeManager {
   constructor(options: ContextTreeManagerOptions);
   /** Directory to prepend to a Session PATH so the packaged skills can invoke `context-tree`. */
   binDirectory(): string;
+  /** Explicit packaged assets for providers that disable automatic workspace skill discovery. */
+  skillPaths(): Promise<string[]>;
   /**
    * Resolve Context Tree for one Agent workspace, connecting it on first use.
    *
@@ -9887,7 +10300,7 @@ interface ProviderCliTurnPlanPrepareInput {
   /** Absolute Slack config leaf supplied by the trusted caller; Feishu must omit this. */
   readonly configDir?: string;
   readonly captureOutgoingReplies?: boolean;
-  /** Runtime proxy mode: absolute path of the current execution environment manifest. */
+  /** Absolute path of the current execution credential environment manifest. */
   readonly environmentManifest?: string;
   /** Runtime proxy mode: loopback HTTPS endpoint pinned through `--apihost` (Slack only). */
   readonly slackApiHost?: string;
@@ -9959,6 +10372,7 @@ interface ImCredentialGrantSubject {
   readonly sessionId: string;
 }
 interface PreparedImCredentialEnvironment {
+  readonly environmentManifest: string;
   readonly outboxContext?: RuntimeImOutboxContext;
   readonly path: string;
   readonly provider: "feishu" | "slack";
@@ -10095,7 +10509,7 @@ interface PreparedMcpGatewayLaunch {
 interface PreparedRuntimeCredentialEnvironment {
   /** Present in proxy mode; exact-execution cleanup token. */
   readonly executionId?: string;
-  /** Proxy mode: execution environment manifest merged by the Turn launcher. */
+  /** Execution environment manifest merged by the Turn launcher. */
   readonly environmentManifest?: string;
   readonly outboxContext?: RuntimeImOutboxContext;
   readonly path: string;
@@ -10275,6 +10689,7 @@ declare class SessionBindingStore {
   #private;
   constructor(options: SessionBindingStoreOptions);
   read(agentId: string, sessionId: string): Promise<LocalSessionBinding | undefined>;
+  validatePreparation(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepare(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<SessionPreparationResult>;
   recordAccepted(request: DirectImMessageDeliveryRequest, inputHash: string, turnId: string): Promise<CustodyResult>;
   getSteerReceipt(request: RuntimeImSteerRequest, inputHash: string): Promise<RecordedSteerInput | undefined>;
@@ -10465,6 +10880,7 @@ interface SessionProtectedWorkSnapshot {
   }>;
 }
 interface RuntimePreparation {
+  validateSession?(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   verifyAgent?(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   requiresSessionPreparation?(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): boolean;
@@ -10520,7 +10936,7 @@ declare class SessionReconciler {
   claimRecovery(sessionId: string, turn: SessionTurnIdentity): boolean;
   reconcile(input: SessionReconcileRequest): Promise<SessionReconcileResult>;
   checkDelivery(input: DirectImMessageDeliveryRequest): InputRejectReason | undefined;
-  checkSessionMessageDelivery(input: SessionMessageDeliveryRequest): InputRejectReason | undefined;
+  checkSessionMessageDelivery(input: SessionMessageDeliveryRequestV3): InputRejectReason | undefined;
   withAgentLock<T>(agentId: string, task: () => Promise<T>): Promise<T>;
 }
 //#endregion
@@ -10533,6 +10949,7 @@ declare class AgentWorkspaceManager implements RuntimePreparation {
   #private;
   constructor(options: AgentWorkspaceManagerOptions);
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, _hashes: RuntimeSnapshotHashes): Promise<void>;
+  validateSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<SessionPreparationResult>;
   verifyAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   stopSession(_sessionId: string, _placementGeneration: number): Promise<void>;
@@ -10563,7 +10980,7 @@ interface SessionRuntimeManagerOptions {
   readonly bindingStore: SessionBindingStore;
   readonly cliCommand?: string;
   readonly cleanupProviderEnvironment?: (sessionId: string) => Promise<void>;
-  readonly contextTree?: Pick<ContextTreeManager, "ensureAgent">;
+  readonly contextTree?: Pick<ContextTreeManager, "ensureAgent" | "skillPaths">;
   /**
    * Optional. Materializes the Agent's enabled Skills before the provider starts; a failure only
    * changes what is on disk and never stops the runtime.
@@ -10601,6 +11018,7 @@ declare class SessionRuntimeManager implements RuntimePreparation, RuntimeLocalP
   constructor(options: SessionRuntimeManagerOptions);
   validate(snapshot: EffectiveRuntimeSnapshot): InputRejectReason | undefined;
   validateDelivery(snapshot: EffectiveRuntimeSnapshot): InputRejectReason | undefined;
+  validateSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   verifyAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   requiresSessionPreparation(request: SessionReconcileRequest): boolean;
@@ -10669,6 +11087,7 @@ interface DeliveryDecision {
   onAcceptedSent?(): Promise<void> | void;
 }
 interface ClientRuntimeOptions {
+  handleApproval?(request: RuntimeApprovalDecision): Promise<RuntimeApprovalResult>;
   contextTreeSettings?: {
     run(frame: ContextTreeOperationFrame): Promise<ContextTreeOperationResponse>;
     close?(): void;
@@ -10676,8 +11095,10 @@ interface ClientRuntimeOptions {
   logger?: ClientLogger;
   handleDelivery?(request: DirectImMessageDeliveryRequest): Promise<DeliveryDecision> | DeliveryDecision;
   handleSteer?(request: RuntimeImSteerRequest): Promise<RuntimeImSteerResult> | RuntimeImSteerResult;
+  handleTurnActivityResult?(result: TurnActivityResult): void;
   handleTurnReportResult?(result: TurnReportResult): Promise<void> | void;
-  handleSessionMessageDelivery?(request: SessionMessageDeliveryRequest): Promise<SessionMessageDeliveryResult> | SessionMessageDeliveryResult;
+  handleSessionMessageDelivery?(request: SessionMessageDeliveryRequestV3): Promise<SessionMessageDeliveryResult> | SessionMessageDeliveryResult;
+  getRuntimeOptions?(frame: AgentRuntimeOptionsRequestFrame, signal: AbortSignal): Promise<AgentRuntimeOptions>;
   availabilityTester?: {
     run(request: AgentRuntimeTestRequestFrame, signal: AbortSignal): Promise<AgentRuntimeTestResultFrame> | AgentRuntimeTestResultFrame;
   };
@@ -10855,6 +11276,7 @@ interface AgentTurnRunnerOptions {
   readonly now?: () => number;
   readonly onRuntimeEvent?: (event: AgentRuntimeEvent) => Promise<void> | void;
   readonly reportOwner: TurnReportOwner;
+  /** @deprecated Attachments are read on demand through the provider CLI. Never called. */
   readonly resourceFetcher?: ImResourceFetcher;
   readonly runtimeManager: SessionRuntimeManager;
   readonly credentialEnvironment: Pick<RuntimeCredentialEnvironmentManager, "cleanup" | "prepare">;
@@ -10897,13 +11319,15 @@ interface TurnCompletion {
 declare class AgentTurnRunner {
   #private;
   constructor(options: AgentTurnRunnerOptions);
+  handleActivityResult(result: TurnActivityResult): void;
   get activeCount(): number;
   start(owner: LiveTurnOwner): void;
   steer(request: RuntimeImSteerRequest): Promise<RuntimeImSteerResult>;
+  respondToApproval(request: RuntimeApprovalDecision): Promise<RuntimeApprovalResult>;
   stop(): void;
   settled(): Promise<void>;
 }
-declare function buildAgentInput(request: DirectImMessageDeliveryRequest | RuntimeImSteerRequest, supplementalContext?: string, rootRuntime?: EffectiveRuntimeSnapshot): AgentInput;
+declare function buildAgentInput(request: DirectImMessageDeliveryRequest | RuntimeImSteerRequest, supplementalContext?: string, rootRuntime?: EffectiveRuntimeSnapshot, processedAt?: Date): AgentInput;
 //#endregion
 //#region src/runtime/protected-paths.d.ts
 type ReadLink = (path: string) => string;
@@ -11108,6 +11532,13 @@ interface SessionMessageInboxOptions {
   retryPolicy?: Partial<RuntimeRetryPolicy>;
   scheduler?: RuntimeRetryScheduler;
   timeoutScheduler?: RuntimeRetryScheduler;
+  /**
+   * The negotiated `runtime.sessionCollaboration` version. A scheduled-origin delivery is only
+   * legal on a v3 channel; anything else is refused at the wire boundary instead of being
+   * silently executed or silently dropped. Already-accepted durable records are unaffected —
+   * recovery never re-checks the negotiation.
+   */
+  sessionCollaborationVersion(): number | undefined;
   reconciler: Pick<SessionReconciler, "checkSessionMessageDelivery" | "clearActivity" | "setActivity" | "withAgentLock">;
   runtimeManager: Pick<SessionRuntimeManager, "ensureRuntime" | "sessionKind">;
 }
@@ -11115,9 +11546,9 @@ declare class SessionMessageInbox {
   #private;
   constructor(options: SessionMessageInboxOptions);
   ready(): Promise<void>;
-  getState(messageId: string): DurableWorkRecord<SessionMessageDeliveryRequest> | undefined;
+  getState(messageId: string): DurableWorkRecord<SessionMessageDeliveryRequestV3> | undefined;
   metricsSnapshot(): ReturnType<RuntimeDurabilityMetrics["snapshot"]> | undefined;
-  accept(input: SessionMessageDeliveryRequest): Promise<SessionMessageDeliveryResult>;
+  accept(input: SessionMessageDeliveryRequestV3): Promise<SessionMessageDeliveryResult>;
   stop(): void;
   /** Accepted Session messages still waiting in an in-memory delivery queue. */
   get queuedCount(): number;
@@ -11134,7 +11565,18 @@ type SessionMessageTurnContext = {
   readonly outboxContext: RuntimeImOutboxContext;
   readonly sessionKind: "visible";
 };
-declare function buildSessionMessageInput(request: SessionMessageDeliveryRequest, cliCommand?: string, turnContext?: SessionMessageTurnContext): AgentInput;
+/**
+ * Assemble the Agent input for one Session message at the moment processing actually begins.
+ *
+ * `processedAt` is the processing clock sample taken by the caller after `waitForIdle()`; every
+ * branch exposes it as trustworthy UTC without guessing a local timezone. A scheduled message
+ * additionally gains a distinct managed metadata item (schedule name, scheduled/sent/processing
+ * times in UTC and the schedule's IANA timezone, message id, detail link, and the normalized
+ * <=120 code-point preview) plus the single best-effort start-notification instruction. The full
+ * prompt always stays its own trailing user-task item, and untrusted name/preview text enters the
+ * managed block only JSON-escaped, so it can never close a managed tag or forge instructions.
+ */
+declare function buildSessionMessageInput(request: SessionMessageDeliveryRequestV3, cliCommand?: string, turnContext?: SessionMessageTurnContext, processedAt?: Date): AgentInput;
 //#endregion
 //#region src/runtime/client-runtime-composition.d.ts
 /**
@@ -11381,15 +11823,49 @@ interface LocalComputerConfigurationInspection {
 declare function inspectLocalComputerConfiguration(home: string): Promise<LocalComputerConfigurationInspection>;
 //#endregion
 //#region src/runtime/managed-instructions.d.ts
+type ManagedEnvironment = "local" | "cloud";
+/**
+ * Both runtime tree statuses are structurally assignable to this prompt context.
+ */
+type ManagedContextTreeStatus = {
+  status: "configured";
+  connections: readonly ManagedContextTreeResult[];
+} | {
+  status: "ready";
+  treePath: string;
+  branch?: string;
+  sha?: string;
+} | {
+  status: "stale";
+  treePath: string;
+  reason: string;
+} | {
+  status: "unconfigured";
+} | {
+  status: "unavailable";
+  reason: string;
+};
+type ManagedContextTreeResult = ContextTreeConnection & Exclude<ManagedContextTreeStatus, {
+  status: "configured";
+} | {
+  status: "unconfigured";
+}>;
+/** Runtime facts supplied by either the Local manager or the Cloud worker. */
 interface ManagedSessionContext {
+  environment: ManagedEnvironment;
   sessionId: string;
   sessionKind: "visible" | "internal";
+  /** The Session that created this one; omitted entirely when the caller does not carry one. */
   creatorSessionId?: string;
   cliCommand: string;
+  /** True only with real Session-CLI proof material behind the commands. */
   sessionCliAvailable: boolean;
-  contextTree?: ContextTreeStatus;
+  selfConfigurationEnabled: boolean;
+  contextTree?: ManagedContextTreeStatus;
+  /** Local only: the Agent's persistent Home on this Computer. */
   agentHome?: string;
 }
+/** One template for both runtimes; only environment facts use Local/Cloud branches. */
 declare function renderManagedSystemPrompt(snapshot: EffectiveRuntimeSnapshot, context?: ManagedSessionContext): string;
 //#endregion
 //#region src/runtime/provider-cli/probe.d.ts
@@ -11945,11 +12421,13 @@ interface UpdaterAttempt {
   failureReason?: string;
 }
 type UpdaterStateName = "idle" | "awaiting_protected_work" | "installing" | "blocked" | "installed";
+type UpdaterRecoveryStatus = "upgrade_required" | "authentication_repair" | "retryable_connectivity";
 /** Persisted updater status, also the source for `daemon status` update reporting. */
 interface UpdaterStateSnapshot {
   schemaVersion: 1;
   currentVersion: string;
   state: UpdaterStateName;
+  recoveryStatus?: UpdaterRecoveryStatus;
   target?: string;
   lastAttempt?: UpdaterAttempt;
   attempts: Record<string, UpdaterAttempt>;
@@ -11985,6 +12463,11 @@ interface UpdateManagerOptions {
   saveState(state: UpdaterStateSnapshot): Promise<void>;
   /** Protected-work re-check cadence. This is a poll interval, never a force timeout. */
   checkIntervalMs?: number;
+  /** Read the configured release channel without relying on a runtime heartbeat. */
+  discoverTarget?: () => Promise<RuntimeChannelTarget | undefined>;
+  /** Successful release discovery cadence. Failed reads use bounded exponential backoff. */
+  discoveryIntervalMs?: number;
+  discoveryMaxBackoffMs?: number;
   now?: () => number;
   sleep?: (milliseconds: number) => Promise<void>;
 }
@@ -12009,6 +12492,14 @@ declare class UpdateManager {
   syncRunningVersion(): Promise<void>;
   /** Record a Server-advertised channel target. Cheap and safe to call on every heartbeat. */
   observe(advertisement: RuntimeChannelTarget): void;
+  /** Start the single heartbeat-independent release discovery loop. */
+  startDiscovery(): void;
+  /** Trigger one coalesced metadata read, for example after a capability rejection. */
+  discoverNow(): Promise<void>;
+  /** Keep the discovery loop referenced while the daemon waits for recovery. */
+  holdRecoveryAlive(): () => void;
+  /** Persist a local recovery diagnosis without changing the install-attempt state machine. */
+  recordRecoveryStatus(status: UpdaterRecoveryStatus | undefined): Promise<void>;
   stop(): void;
 }
 //#endregion