open-tag 0.1.0 → 0.1.2

package/dist/index.d.mts

@@ -4188,7 +4188,7 @@ declare namespace external_d_exports {
   export { $brand, $input, $output, BRAND, CompileOptions, GlobalMeta, Infer, IssueData, JSONType, NEVER, $RefinementCtx as RefinementCtx, SafeExtendShape, Schema, TimePrecision, TypeOf, ZodAny, ZodArray, ZodBase64, ZodBase64URL, ZodBigInt, ZodBigIntFormat, ZodBoolean, ZodCIDRv4, ZodCIDRv6, ZodCUID, ZodCUID2, ZodCatch, ZodCodec, ZodCoercedBigInt, ZodCoercedBoolean, ZodCoercedDate, ZodCoercedNumber, ZodCoercedString, ZodCompileAsyncError, ZodCompileUnsupportedError, ZodCreditCard, ZodCustom, ZodCustomStringFormat, ZodDate, ZodDefault, ZodDiscriminatedUnion, ZodE164, ZodEmail, ZodEmoji, ZodEnum, ZodError, ZodErrorMap, ZodExactOptional, ZodFile, ZodFirstPartySchemaTypes, ZodFirstPartyTypeKind, ZodFlattenedError, ZodFloat32, ZodFloat64, ZodFormattedError, ZodFunction, ZodGUID, ZodIPv4, ZodIPv6, ZodISODate, ZodISODateTime, ZodISODuration, ZodISOTime, ZodInt, ZodInt32, ZodInt64, ZodIntersection, ZodIssue, ZodIssueCode, ZodJSONSchema, ZodJSONSchemaInternals, ZodJWT, ZodKSUID, ZodLazy, ZodLiteral, ZodMAC, ZodMap, ZodNaN, ZodNanoID, ZodNever, ZodNonOptional, ZodNull, ZodNullable, ZodNumber, ZodNumberFormat, ZodObject, ZodOptional, ZodPipe, ZodPrefault, ZodPreprocess, ZodPromise, ZodRawShape, ZodReadonly, ZodRealError, ZodRecord, ZodSafeParseError, ZodSafeParseResult, ZodSafeParseSuccess, ZodSchema, ZodSet, ZodStandardSchemaWithJSON, ZodString, ZodStringFormat, ZodSuccess, ZodSymbol, ZodTemplateLiteral, ZodTransform, ZodTuple, ZodType, ZodTypeAny, ZodUInt32, ZodUInt64, ZodULID, ZodURL, ZodUUID, ZodUndefined, ZodUnion, ZodUnknown, ZodVoid, ZodXID, ZodXor, _ZodBigInt, _ZodBoolean, _ZodDate, _ZodNumber, _ZodString, _ZodType, _default, _function, any, array, base64, base64url, bigint$1 as bigint, boolean$1 as boolean, _catch as catch, check, cidrv4, cidrv6, clone, codec, coerce_d_exports as coerce, compile, config, index_d_exports$1 as core, creditCard, cuid, cuid2, custom, date$2 as date, decode, decodeAsync, deepPartial, describe, discriminatedUnion, e164, email, emoji, encode, encodeAsync, _endsWith as endsWith, _enum as enum, exactOptional, file, flattenError, float32, float64, formatError, fromJSONSchema, _function as function, getDiscriminatedOption, getErrorMap, globalRegistry, _gt as gt, _gte as gte, guid, hash, hex, hostname, httpUrl, _includes as includes, output$1 as infer, inferFlattenedErrors, inferFormattedError, input, _instanceof as instanceof, int, int32, int64, intersection, invertCodec, ipv4, ipv6, iso_d_exports as iso, json, jwt, keyof, ksuid, lazy, _length as length, literal, index_d_exports$2 as locales, looseObject, looseRecord, _lowercase as lowercase, _lt as lt, _lte as lte, mac, map, _maxLength as maxLength, _maxSize as maxSize, memoizer, meta, _mime as mime, _minLength as minLength, _minSize as minSize, _multipleOf as multipleOf, nan, nanoid, nativeEnum, _negative as negative, never, _nonnegative as nonnegative, nonoptional, _nonpositive as nonpositive, _normalize as normalize, _null as null, nullable, nullish, number$1 as number, object, optional, output, _overwrite as overwrite, parse, parseAsync, partialRecord, pipe, _positive as positive, prefault, preprocess, prettifyError, promise, _properties as properties, _property as property, readonly, record, refine, _regex as regex, regexes_d_exports as regexes, registry, safeDecode, safeDecodeAsync, safeEncode, safeEncodeAsync, safeParse, safeParseAsync, set, setErrorMap, _size as size, _slugify as slugify, _startsWith as startsWith, strictObject, string$1 as string, stringFormat, stringbool, success, superRefine, symbol, templateLiteral, toJSONSchema, _toLowerCase as toLowerCase, _toUpperCase as toUpperCase, toZod, transform, treeifyError, _trim as trim, tuple, uint32, uint64, ulid, _undefined as undefined, union, unknown, _uppercase as uppercase, url, util_d_exports as util, uuid, uuidv4, uuidv6, uuidv7, validate, validateAsync, _void as void, xid, xor };
 }
 //#endregion
-//#region ../../packages/shared/dist/task-DVv-Mr8g.d.mts
+//#region ../../packages/shared/dist/task-CJjpDFO8.d.mts
 declare const AccountComputerSummarySchema: ZodObject<{
   computerId: ZodString;
   kind: ZodOptional<ZodEnum<{
@@ -4332,7 +4332,7 @@ declare const AgentDetailSchema: ZodObject<{
   }>;
   createdAt: ZodString;
   updatedAt: ZodString;
-  avatarUrl: ZodOptional<ZodNullable<ZodString>>;
+  avatarPath: ZodOptional<ZodNullable<ZodString>>;
   createdBy: ZodObject<{
     userId: ZodString;
     displayName: ZodString;
@@ -4347,6 +4347,7 @@ declare const AgentDetailSchema: ZodObject<{
     }>;
   }, $strict>>;
   requiresComputerRebind: ZodOptional<ZodBoolean>;
+  slackOAuthAvailable: ZodOptional<ZodBoolean>;
   activity: ZodDiscriminatedUnion<[ZodObject<{
     state: ZodLiteral<"idle">;
   }, $strict>, ZodObject<{
@@ -4398,6 +4399,7 @@ declare const AgentAdminConfigSchema: ZodObject<{
   updatedAt: ZodString;
   createdByUserId: ZodString;
   computerId: ZodNullable<ZodString>;
+  selfConfigurationEnabled: ZodBoolean;
   revision: ZodNumber;
   runtimeConfig: ZodObject<{
     revision: ZodNumber;
@@ -4409,6 +4411,13 @@ declare const AgentAdminConfigSchema: ZodObject<{
       alias: ZodString;
       repository: ZodString;
     }, $strict>>;
+    permissions: ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>;
   }, $strict>;
 }, $strict>;
 declare const CreateAgentRequestSchema: ZodObject<{
@@ -4422,6 +4431,13 @@ declare const CreateAgentRequestSchema: ZodObject<{
   }>;
   computerId: ZodOptional<ZodString>;
   runtimeConfig: ZodOptional<ZodObject<{
+    permissions: ZodOptional<ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>>;
     model: ZodOptional<ZodNullable<ZodString>>;
     reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
     instructions: ZodOptional<ZodString>;
@@ -4435,7 +4451,15 @@ declare const UpdateAgentRequestSchema: ZodObject<{
     all_message: "all_message";
     mention_only: "mention_only";
   }>>;
+  selfConfigurationEnabled: ZodOptional<ZodBoolean>;
   runtimeConfig: ZodOptional<ZodObject<{
+    permissions: ZodOptional<ZodObject<{
+      approvalPolicy: ZodDefault<ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>>;
+      allowCommands: ZodDefault<ZodArray<ZodString>>;
+    }, $strict>>;
     model: ZodOptional<ZodNullable<ZodString>>;
     reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
     instructions: ZodOptional<ZodString>;
@@ -4462,7 +4486,7 @@ declare const ListAgentsResponseSchema: ZodObject<{
     }>;
     createdAt: ZodString;
     updatedAt: ZodString;
-    avatarUrl: ZodOptional<ZodNullable<ZodString>>;
+    avatarPath: ZodOptional<ZodNullable<ZodString>>;
     createdBy: ZodObject<{
       userId: ZodString;
       displayName: ZodString;
@@ -4477,6 +4501,7 @@ declare const ListAgentsResponseSchema: ZodObject<{
       }>;
     }, $strict>>;
     requiresComputerRebind: ZodOptional<ZodBoolean>;
+    slackOAuthAvailable: ZodOptional<ZodBoolean>;
     activity: ZodDiscriminatedUnion<[ZodObject<{
       state: ZodLiteral<"idle">;
     }, $strict>, ZodObject<{
@@ -4739,8 +4764,10 @@ declare const ErrorCodeSchema: ZodEnum<{
   AGENT_NAME_CONFLICT: "AGENT_NAME_CONFLICT";
   AGENT_REBIND_BLOCKED: "AGENT_REBIND_BLOCKED";
   AGENT_REVISION_CONFLICT: "AGENT_REVISION_CONFLICT";
+  AGENT_SELF_CONFIGURATION_DISABLED: "AGENT_SELF_CONFIGURATION_DISABLED";
   AUTH_CODE_CONSUMED: "AUTH_CODE_CONSUMED";
   AUTH_CODE_EXPIRED: "AUTH_CODE_EXPIRED";
+  AUTH_CODE_PURPOSE_MISMATCH: "AUTH_CODE_PURPOSE_MISMATCH";
   AUTH_DEV_USER_UNAVAILABLE: "AUTH_DEV_USER_UNAVAILABLE";
   AUTH_EMAIL_CONFLICT: "AUTH_EMAIL_CONFLICT";
   AUTH_IDENTITY_CONFLICT: "AUTH_IDENTITY_CONFLICT";
@@ -4750,7 +4777,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   AUTH_PROVIDER_DISABLED: "AUTH_PROVIDER_DISABLED";
   AUTH_USER_MISMATCH: "AUTH_USER_MISMATCH";
   AUTH_USER_SUSPENDED: "AUTH_USER_SUSPENDED";
-  CLIENT_VERSION_UNSUPPORTED: "CLIENT_VERSION_UNSUPPORTED";
+  CLOUD_BILLING_UNAVAILABLE: "CLOUD_BILLING_UNAVAILABLE";
   CLOUD_CAPACITY_EXCEEDED: "CLOUD_CAPACITY_EXCEEDED";
   CLOUD_MODEL_NOT_ALLOWED: "CLOUD_MODEL_NOT_ALLOWED";
   CLOUD_MODEL_UNAVAILABLE: "CLOUD_MODEL_UNAVAILABLE";
@@ -4813,6 +4840,7 @@ declare const ErrorCodeSchema: ZodEnum<{
   MCP_REFRESH_OUTCOME_UNKNOWN: "MCP_REFRESH_OUTCOME_UNKNOWN";
   MCP_REGISTRATION_FAILED: "MCP_REGISTRATION_FAILED";
   MCP_REGISTRATION_UNSUPPORTED: "MCP_REGISTRATION_UNSUPPORTED";
+  MCP_SELF_ATTACH_NONE_AUTH_FORBIDDEN: "MCP_SELF_ATTACH_NONE_AUTH_FORBIDDEN";
   MCP_SERVER_FORBIDDEN: "MCP_SERVER_FORBIDDEN";
   MCP_SERVER_IN_USE: "MCP_SERVER_IN_USE";
   MCP_SERVER_NAME_CONFLICT: "MCP_SERVER_NAME_CONFLICT";
@@ -4833,6 +4861,13 @@ declare const ErrorCodeSchema: ZodEnum<{
   RUNTIME_AUTH_TIMEOUT: "RUNTIME_AUTH_TIMEOUT";
   RUNTIME_REGISTER_TIMEOUT: "RUNTIME_REGISTER_TIMEOUT";
   SANDBOX_RUNNER_CONFLICT: "SANDBOX_RUNNER_CONFLICT";
+  SCHEDULE_INVALID_REQUEST: "SCHEDULE_INVALID_REQUEST";
+  SCHEDULE_INVALID_RULE: "SCHEDULE_INVALID_RULE";
+  SCHEDULE_INVALID_TIMEZONE: "SCHEDULE_INVALID_TIMEZONE";
+  SCHEDULE_NO_FUTURE_OCCURRENCE: "SCHEDULE_NO_FUTURE_OCCURRENCE";
+  SCHEDULE_REVISION_CONFLICT: "SCHEDULE_REVISION_CONFLICT";
+  SCHEDULE_TARGET_INVALID: "SCHEDULE_TARGET_INVALID";
+  SCHEDULE_TARGET_REQUIRED: "SCHEDULE_TARGET_REQUIRED";
   SERVICE_UNAVAILABLE: "SERVICE_UNAVAILABLE";
   SESSION_CURSOR_INVALID: "SESSION_CURSOR_INVALID";
   SESSION_PROOF_INVALID: "SESSION_PROOF_INVALID";
@@ -4844,7 +4879,13 @@ declare const ErrorCodeSchema: ZodEnum<{
   SKILL_NAME_CONFLICT: "SKILL_NAME_CONFLICT";
   SKILL_NAME_RESERVED: "SKILL_NAME_RESERVED";
   SKILL_NOT_FOUND: "SKILL_NOT_FOUND";
+  SKILL_PRESET_NOT_FOUND: "SKILL_PRESET_NOT_FOUND";
   SKILL_REVISION_CONFLICT: "SKILL_REVISION_CONFLICT";
+  SKILL_SOURCE_BLOCKED: "SKILL_SOURCE_BLOCKED";
+  SKILL_SOURCE_INVALID: "SKILL_SOURCE_INVALID";
+  SKILL_SOURCE_NO_SKILLS: "SKILL_SOURCE_NO_SKILLS";
+  SKILL_SOURCE_TOO_LARGE: "SKILL_SOURCE_TOO_LARGE";
+  SKILL_SOURCE_UNREACHABLE: "SKILL_SOURCE_UNREACHABLE";
   SKILL_STORAGE_UNAVAILABLE: "SKILL_STORAGE_UNAVAILABLE";
   SLACK_APP_TEAM_ALREADY_BOUND: "SLACK_APP_TEAM_ALREADY_BOUND";
   SLACK_AUTH_IDENTITY_INCOMPLETE: "SLACK_AUTH_IDENTITY_INCOMPLETE";
@@ -5461,6 +5502,11 @@ declare const MCPProbeResponseSchema: ZodObject<{
   protocolVersion: ZodNullable<ZodString>;
 }, $strict>;
 type MCPProbeResponse = output$1<typeof MCPProbeResponseSchema>;
+declare const AgentRuntimeOptionsSchema: ZodObject<{
+  modelSuggestions: ZodArray<ZodString>;
+  reasoningEffortAllowedValues: ZodNullable<ZodArray<ZodString>>;
+}, $strict>;
+type AgentRuntimeOptions = output$1<typeof AgentRuntimeOptionsSchema>;
 declare const RuntimeDurableWorkKindSchema: ZodEnum<{
   "session-message": "session-message";
   "turn-report": "turn-report";
@@ -5517,6 +5563,7 @@ declare const EffectiveRuntimeSnapshotSchema: ZodObject<{
     }, $strict>;
   }, $strict>;
   agentId: ZodString;
+  selfConfigurationEnabled: ZodOptional<ZodBoolean>;
   provider: ZodEnum<{
     "claude-code": "claude-code";
     codex: "codex";
@@ -5530,8 +5577,12 @@ declare const EffectiveRuntimeSnapshotSchema: ZodObject<{
     session: ZodOptional<ZodString>;
   }, $strict>;
   execution: ZodObject<{
-    approvalPolicy: ZodLiteral<"never">;
+    approvalPolicy: ZodEnum<{
+      never: "never";
+      "on-request": "on-request";
+    }>;
     networkAccess: ZodBoolean;
+    allowCommands: ZodOptional<ZodArray<ZodString>>;
   }, $strict>;
   workspace: ZodObject<{
     workspaceId: ZodString;
@@ -5608,6 +5659,7 @@ declare const SessionReconcileRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -5621,8 +5673,12 @@ declare const SessionReconcileRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -5772,6 +5828,7 @@ declare const DirectImMessageDeliveryRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -5785,8 +5842,12 @@ declare const DirectImMessageDeliveryRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -6051,11 +6112,47 @@ declare const RuntimeImSteerResultSchema: ZodDiscriminatedUnion<[ZodObject<{
     target_mismatch: "target_mismatch";
   }>;
 }, $strict>], "status">;
-declare const SessionMessageDeliveryRequestSchema: ZodObject<{
+declare const SessionMessageDeliveryResultSchema: ZodObject<{
+  type: ZodLiteral<"session:message:deliver:result">;
+  requestId: ZodString;
+  messageId: ZodString;
+  targetSessionId: ZodString;
+  placementGeneration: ZodNumber;
+  status: ZodEnum<{
+    accepted: "accepted";
+    rejected: "rejected";
+  }>;
+  reason: ZodOptional<ZodEnum<{
+    agent_busy: "agent_busy";
+    agent_configuration_busy: "agent_configuration_busy";
+    client_busy: "client_busy";
+    configuration_unsupported: "configuration_unsupported";
+    input_conflict: "input_conflict";
+    invalid_input: "invalid_input";
+    provider_unavailable: "provider_unavailable";
+    session_binding_conflict: "session_binding_conflict";
+    session_busy: "session_busy";
+    session_not_ready: "session_not_ready";
+    session_recovery_required: "session_recovery_required";
+    stale_configuration: "stale_configuration";
+    stale_generation: "stale_generation";
+    target_mismatch: "target_mismatch";
+    turn_expired: "turn_expired";
+  }>>;
+}, $strict>;
+declare const SessionMessageDeliveryRequestV3Schema: ZodObject<{
   type: ZodLiteral<"session:message:deliver">;
   requestId: ZodString;
   messageId: ZodString;
-  sourceSessionId: ZodString;
+  sourceSessionId: ZodOptional<ZodString>;
+  scheduledOrigin: ZodOptional<ZodObject<{
+    scheduleId: ZodString;
+    scheduledFor: ZodString;
+    timezone: ZodString;
+    name: ZodString;
+  }, $strict>>;
+  sentAt: ZodOptional<ZodString>;
+  scheduleDetailUrl: ZodOptional<ZodString>;
   targetSessionId: ZodString;
   agentId: ZodString;
   placementGeneration: ZodNumber;
@@ -6079,6 +6176,7 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
       }, $strict>;
     }, $strict>;
     agentId: ZodString;
+    selfConfigurationEnabled: ZodOptional<ZodBoolean>;
     provider: ZodEnum<{
       "claude-code": "claude-code";
       codex: "codex";
@@ -6092,8 +6190,12 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
       session: ZodOptional<ZodString>;
     }, $strict>;
     execution: ZodObject<{
-      approvalPolicy: ZodLiteral<"never">;
+      approvalPolicy: ZodEnum<{
+        never: "never";
+        "on-request": "on-request";
+      }>;
       networkAccess: ZodBoolean;
+      allowCommands: ZodOptional<ZodArray<ZodString>>;
     }, $strict>;
     workspace: ZodObject<{
       workspaceId: ZodString;
@@ -6105,34 +6207,6 @@ declare const SessionMessageDeliveryRequestSchema: ZodObject<{
     }, $strict>>;
   }, $strict>;
 }, $strict>;
-declare const SessionMessageDeliveryResultSchema: ZodObject<{
-  type: ZodLiteral<"session:message:deliver:result">;
-  requestId: ZodString;
-  messageId: ZodString;
-  targetSessionId: ZodString;
-  placementGeneration: ZodNumber;
-  status: ZodEnum<{
-    accepted: "accepted";
-    rejected: "rejected";
-  }>;
-  reason: ZodOptional<ZodEnum<{
-    agent_busy: "agent_busy";
-    agent_configuration_busy: "agent_configuration_busy";
-    client_busy: "client_busy";
-    configuration_unsupported: "configuration_unsupported";
-    input_conflict: "input_conflict";
-    invalid_input: "invalid_input";
-    provider_unavailable: "provider_unavailable";
-    session_binding_conflict: "session_binding_conflict";
-    session_busy: "session_busy";
-    session_not_ready: "session_not_ready";
-    session_recovery_required: "session_recovery_required";
-    stale_configuration: "stale_configuration";
-    stale_generation: "stale_generation";
-    target_mismatch: "target_mismatch";
-    turn_expired: "turn_expired";
-  }>>;
-}, $strict>;
 declare const TurnReportRequestSchema: ZodObject<{
   type: ZodLiteral<"turn:report">;
   requestId: ZodString;
@@ -6243,6 +6317,18 @@ declare const TurnReportResultSchema: ZodObject<{
   }>;
   resultHash: ZodString;
 }, $strict>;
+declare const AgentRuntimeOptionsRequestFrameSchema: ZodObject<{
+  type: ZodLiteral<"agent-runtime:options">;
+  requestId: ZodString;
+  agentId: ZodString;
+  computerId: ZodString;
+  provider: ZodEnum<{
+    "claude-code": "claude-code";
+    codex: "codex";
+    pi: "pi";
+  }>;
+  model: ZodOptional<ZodString>;
+}, $strict>;
 declare const AgentRuntimeTestRequestFrameSchema: ZodObject<{
   type: ZodLiteral<"agent-runtime:test">;
   requestId: ZodString;
@@ -6371,6 +6457,32 @@ declare const ProviderCliValidationResultFrameSchema: ZodObject<{
     validation_expired: "validation_expired";
   }>>;
 }, $strict>;
+declare const RuntimeApprovalDecisionSchema: ZodObject<{
+  requestId: ZodString;
+  turnId: ZodString;
+  sessionId: ZodString;
+  deliveryId: ZodString;
+  placementGeneration: ZodNumber;
+  type: ZodLiteral<"approval:decision">;
+  decision: ZodEnum<{
+    accept: "accept";
+    decline: "decline";
+  }>;
+}, $strict>;
+declare const RuntimeApprovalResultSchema: ZodObject<{
+  requestId: ZodString;
+  turnId: ZodString;
+  sessionId: ZodString;
+  deliveryId: ZodString;
+  placementGeneration: ZodNumber;
+  type: ZodLiteral<"approval:result">;
+  status: ZodEnum<{
+    applied: "applied";
+    stale: "stale";
+  }>;
+}, $strict>;
+type RuntimeApprovalDecision = output$1<typeof RuntimeApprovalDecisionSchema>;
+type RuntimeApprovalResult = output$1<typeof RuntimeApprovalResultSchema>;
 type RuntimeUsage = output$1<typeof RuntimeUsageSchema>;
 type RuntimeDurableWorkKind = output$1<typeof RuntimeDurableWorkKindSchema>;
 type RuntimeDurableWorkRecord = output$1<typeof RuntimeDurableWorkRecordSchema>;
@@ -6385,10 +6497,11 @@ type RuntimeImSteerResult = output$1<typeof RuntimeImSteerResultSchema>;
 type RuntimeImCredentialGrantResult = output$1<typeof RuntimeImCredentialGrantResultSchema>;
 type RuntimeImOutboxContext = output$1<typeof RuntimeImOutboxContextSchema>;
 type ImMessageDeliveryResult = output$1<typeof ImMessageDeliveryResultSchema>;
-type SessionMessageDeliveryRequest = output$1<typeof SessionMessageDeliveryRequestSchema>;
+type SessionMessageDeliveryRequestV3 = output$1<typeof SessionMessageDeliveryRequestV3Schema>;
 type SessionMessageDeliveryResult = output$1<typeof SessionMessageDeliveryResultSchema>;
 type TurnReportRequest = output$1<typeof TurnReportRequestSchema>;
 type TurnReportResult = output$1<typeof TurnReportResultSchema>;
+type AgentRuntimeOptionsRequestFrame = output$1<typeof AgentRuntimeOptionsRequestFrameSchema>;
 type AgentRuntimeTestRequestFrame = output$1<typeof AgentRuntimeTestRequestFrameSchema>;
 type AgentRuntimeTestResultFrame = output$1<typeof AgentRuntimeTestResultFrameSchema>;
 type ProviderCliExpectedIdentity = output$1<typeof ProviderCliExpectedIdentitySchema>;
@@ -6447,6 +6560,181 @@ type RuntimeClientCapabilities = output$1<typeof RuntimeClientCapabilitiesSchema
 type RuntimeProviderReadinessObservation = output$1<typeof RuntimeProviderReadinessObservationSchema>;
 type RuntimeImCliReadinessObservation = output$1<typeof RuntimeImCliReadinessObservationSchema>;
 type RuntimeChannelTarget = output$1<typeof RuntimeChannelTargetSchema>;
+/** Full Schedule DTO: every management field, the full prompt, and the Web detail link. */
+declare const AgentScheduleSchema: ZodObject<{
+  id: ZodString;
+  agentId: ZodString;
+  target: ZodObject<{
+    sessionId: ZodString;
+    provider: ZodEnum<{
+      feishu: "feishu";
+      slack: "slack";
+    }>;
+    sessionKind: ZodEnum<{
+      channel: "channel";
+      thread: "thread";
+    }>;
+    channelId: ZodString;
+    threadKey: ZodNullable<ZodString>;
+  }, $strict>;
+  name: ZodString;
+  prompt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+    anchorAt: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+  enabled: ZodBoolean;
+  nextTriggerAt: ZodNullable<ZodString>;
+  revision: ZodNumber;
+  lastDispatch: ZodNullable<ZodObject<{
+    scheduledFor: ZodString;
+    attemptedAt: ZodNullable<ZodString>;
+    messageId: ZodNullable<ZodString>;
+    outcome: ZodEnum<{
+      accepted: "accepted";
+      rejected: "rejected";
+      skipped: "skipped";
+      unknown: "unknown";
+      unreachable: "unreachable";
+    }>;
+    code: ZodNullable<ZodString>;
+  }, $strict>>;
+  detailUrl: ZodString;
+  createdAt: ZodString;
+  updatedAt: ZodString;
+}, $strict>;
+type AgentSchedule = output$1<typeof AgentScheduleSchema>;
+declare const AgentScheduleListResponseSchema: ZodObject<{
+  items: ZodArray<ZodObject<{
+    id: ZodString;
+    agentId: ZodString;
+    target: ZodObject<{
+      sessionId: ZodString;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      sessionKind: ZodEnum<{
+        channel: "channel";
+        thread: "thread";
+      }>;
+      channelId: ZodString;
+      threadKey: ZodNullable<ZodString>;
+    }, $strict>;
+    name: ZodString;
+    schedule: ZodDiscriminatedUnion<[ZodObject<{
+      kind: ZodLiteral<"at">;
+      at: ZodString;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"every">;
+      intervalSeconds: ZodNumber;
+      anchorAt: ZodString;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"cron">;
+      expression: ZodString;
+    }, $strict>], "kind">;
+    timezone: ZodString;
+    enabled: ZodBoolean;
+    nextTriggerAt: ZodNullable<ZodString>;
+    revision: ZodNumber;
+    lastDispatch: ZodNullable<ZodObject<{
+      scheduledFor: ZodString;
+      attemptedAt: ZodNullable<ZodString>;
+      messageId: ZodNullable<ZodString>;
+      outcome: ZodEnum<{
+        accepted: "accepted";
+        rejected: "rejected";
+        skipped: "skipped";
+        unknown: "unknown";
+        unreachable: "unreachable";
+      }>;
+      code: ZodNullable<ZodString>;
+    }, $strict>>;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+  }, $strict>>;
+  nextCursor: ZodNullable<ZodString>;
+}, $strict>;
+type AgentScheduleListResponse = output$1<typeof AgentScheduleListResponseSchema>;
+declare const CreateAgentScheduleRequestSchema: ZodObject<{
+  name: ZodString;
+  prompt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+}, $strict>;
+type CreateAgentScheduleRequest = output$1<typeof CreateAgentScheduleRequestSchema>;
+declare const UpdateAgentScheduleRequestSchema: ZodObject<{
+  expectedRevision: ZodNumber;
+  name: ZodOptional<ZodString>;
+  prompt: ZodOptional<ZodString>;
+  schedule: ZodOptional<ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">>;
+  timezone: ZodOptional<ZodString>;
+}, $strict>;
+type UpdateAgentScheduleRequest = output$1<typeof UpdateAgentScheduleRequestSchema>;
+/** Preview either a persisted Schedule (keeps its `every` anchor) or an ad-hoc rule + timezone. */
+declare const PreviewAgentScheduleRequestSchema: ZodUnion<readonly [ZodObject<{
+  scheduleId: ZodString;
+}, $strict>, ZodObject<{
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+}, $strict>]>;
+type PreviewAgentScheduleRequest = output$1<typeof PreviewAgentScheduleRequestSchema>;
+declare const AgentSchedulePreviewSchema: ZodObject<{
+  calculatedAt: ZodString;
+  schedule: ZodDiscriminatedUnion<[ZodObject<{
+    kind: ZodLiteral<"at">;
+    at: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"every">;
+    intervalSeconds: ZodNumber;
+    anchorAt: ZodString;
+  }, $strict>, ZodObject<{
+    kind: ZodLiteral<"cron">;
+    expression: ZodString;
+  }, $strict>], "kind">;
+  timezone: ZodString;
+  items: ZodArray<ZodObject<{
+    at: ZodString;
+    local: ZodString;
+    timezone: ZodString;
+  }, $strict>>;
+}, $strict>;
+type AgentSchedulePreview = output$1<typeof AgentSchedulePreviewSchema>;
 declare const SkillArchiveFormatSchema: ZodEnum<{
   "tar.gz": "tar.gz";
   zip: "zip";
@@ -6461,6 +6749,8 @@ declare const SkillSchema: ZodObject<{
   source: ZodEnum<{
     agent_upload: "agent_upload";
     cli_upload: "cli_upload";
+    preset: "preset";
+    url_install: "url_install";
     web_upload: "web_upload";
   }>;
   archiveSha256: ZodString;
@@ -6480,6 +6770,8 @@ declare const SkillDetailSchema: ZodObject<{
   source: ZodEnum<{
     agent_upload: "agent_upload";
     cli_upload: "cli_upload";
+    preset: "preset";
+    url_install: "url_install";
     web_upload: "web_upload";
   }>;
   archiveSha256: ZodString;
@@ -6505,6 +6797,8 @@ declare const ListAgentSkillsResponseSchema: ZodObject<{
     source: ZodEnum<{
       agent_upload: "agent_upload";
       cli_upload: "cli_upload";
+      preset: "preset";
+      url_install: "url_install";
       web_upload: "web_upload";
     }>;
     archiveSha256: ZodString;
@@ -6529,6 +6823,312 @@ declare const RuntimeSkillManifestSchema: ZodObject<{
   }, $strict>>;
 }, $strict>;
 type RuntimeSkillManifest = output$1<typeof RuntimeSkillManifestSchema>;
+declare const ListSkillPresetsResponseSchema: ZodObject<{
+  categories: ZodArray<ZodObject<{
+    id: ZodEnum<{
+      engineering: "engineering";
+      "getting-started": "getting-started";
+    }>;
+    order: ZodNumber;
+  }, $strict>>;
+  presets: ZodArray<ZodObject<{
+    name: ZodString;
+    description: ZodString;
+    category: ZodEnum<{
+      engineering: "engineering";
+      "getting-started": "getting-started";
+    }>;
+    order: ZodNumber;
+    archiveSha256: ZodString;
+    archiveBytes: ZodNumber;
+    fileCount: ZodNumber;
+    state: ZodEnum<{
+      installed: "installed";
+      name_conflict: "name_conflict";
+      not_installed: "not_installed";
+      update_available: "update_available";
+    }>;
+  }, $strict>>;
+}, $strict>;
+type ListSkillPresetsResponse = output$1<typeof ListSkillPresetsResponseSchema>;
+declare const InstallSkillPresetResponseSchema: ZodObject<{
+  action: ZodEnum<{
+    installed: "installed";
+    unchanged: "unchanged";
+    updated: "updated";
+  }>;
+  skill: ZodObject<{
+    id: ZodString;
+    agentId: ZodString;
+    name: ZodString;
+    description: ZodString;
+    enabled: ZodBoolean;
+    source: ZodEnum<{
+      agent_upload: "agent_upload";
+      cli_upload: "cli_upload";
+      preset: "preset";
+      url_install: "url_install";
+      web_upload: "web_upload";
+    }>;
+    archiveSha256: ZodString;
+    archiveBytes: ZodNumber;
+    fileCount: ZodNumber;
+    revision: ZodNumber;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+  }, $strict>;
+}, $strict>;
+type InstallSkillPresetResponse = output$1<typeof InstallSkillPresetResponseSchema>;
+declare const ProvisionSlackAgentRequestSchema: ZodObject<{
+  code: ZodString;
+  agent: ZodObject<{
+    creationIntentId: ZodNonOptional<ZodOptional<ZodString>>;
+    name: ZodString;
+    displayName: ZodString;
+    runtimeProvider: ZodEnum<{
+      "claude-code": "claude-code";
+      codex: "codex";
+      pi: "pi";
+    }>;
+    runtimeConfig: ZodOptional<ZodObject<{
+      model: ZodOptional<ZodNullable<ZodString>>;
+      reasoningEffort: ZodOptional<ZodNullable<ZodString>>;
+      instructions: ZodOptional<ZodString>;
+    }, $strict>>;
+  }, $strict>;
+  slack: ZodObject<{
+    appId: ZodString;
+    teamId: ZodString;
+    botUserId: ZodString;
+    botAccessToken: ZodString;
+    signingSecret: ZodString;
+  }, $strict>;
+}, $strict>;
+declare const ProvisionSlackAgentResponseSchema: ZodObject<{
+  agent: ZodObject<{
+    id: ZodString;
+    name: ZodString;
+    displayName: ZodString;
+    runtimeProvider: ZodEnum<{
+      "claude-code": "claude-code";
+      codex: "codex";
+      pi: "pi";
+    }>;
+    receiveMode: ZodEnum<{
+      all_message: "all_message";
+      mention_only: "mention_only";
+    }>;
+    status: ZodEnum<{
+      active: "active";
+      suspended: "suspended";
+    }>;
+    createdAt: ZodString;
+    updatedAt: ZodString;
+    createdByUserId: ZodString;
+    computerId: ZodNullable<ZodString>;
+    selfConfigurationEnabled: ZodBoolean;
+    revision: ZodNumber;
+    runtimeConfig: ZodObject<{
+      revision: ZodNumber;
+      model: ZodNullable<ZodString>;
+      reasoningEffort: ZodNullable<ZodString>;
+      instructions: ZodString;
+      maxDurationMs: ZodNullable<ZodNumber>;
+      contextTrees: ZodArray<ZodObject<{
+        alias: ZodString;
+        repository: ZodString;
+      }, $strict>>;
+      permissions: ZodObject<{
+        approvalPolicy: ZodDefault<ZodEnum<{
+          never: "never";
+          "on-request": "on-request";
+        }>>;
+        allowCommands: ZodDefault<ZodArray<ZodString>>;
+      }, $strict>;
+    }, $strict>;
+  }, $strict>;
+  slack: ZodObject<{
+    agentDisplayName: ZodString;
+    eventsUrl: ZodString;
+    allowedIntent: ZodNullable<ZodEnum<{
+      create: "create";
+      reauthorize: "reauthorize";
+    }>>;
+    blockedReason: ZodNullable<ZodString>;
+    expectedMessaging: ZodNullable<ZodDiscriminatedUnion<[ZodObject<{
+      kind: ZodLiteral<"unbound">;
+    }, $strict>, ZodObject<{
+      kind: ZodLiteral<"bound">;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      bindingId: ZodString;
+      credentialGeneration: ZodNumber;
+    }, $strict>], "kind">>;
+    preferredRecovery: ZodEnum<{
+      credentials: "credentials";
+      oauth: "oauth";
+    }>;
+    binding: ZodNullable<ZodObject<{
+      id: ZodString;
+      agentId: ZodString;
+      provider: ZodEnum<{
+        feishu: "feishu";
+        slack: "slack";
+      }>;
+      bindingState: ZodEnum<{
+        active: "active";
+        disabled: "disabled";
+        error: "error";
+        provisioning: "provisioning";
+        reauthorization_required: "reauthorization_required";
+      }>;
+      bot: ZodObject<{
+        displayName: ZodNullable<ZodString>;
+        avatarUrl: ZodNullable<ZodString>;
+      }, $strict>;
+      receiveMode: ZodEnum<{
+        all_message: "all_message";
+        mention_only: "mention_only";
+      }>;
+      lastInboundAt: ZodNullable<ZodString>;
+      lastValidatedAt: ZodNullable<ZodString>;
+      lastRuntimeObservationAt: ZodNullable<ZodString>;
+      identity: ZodDiscriminatedUnion<[ZodObject<{
+        provider: ZodLiteral<"feishu">;
+        appId: ZodString;
+        teamId: ZodNullable<ZodString>;
+        botOpenId: ZodString;
+        teamBrand: ZodNullable<ZodString>;
+      }, $strict>, ZodObject<{
+        provider: ZodLiteral<"slack">;
+        appId: ZodString;
+        teamId: ZodString;
+        enterpriseId: ZodNullable<ZodString>;
+        botUserId: ZodString;
+        appIdEvidence: ZodLiteral<"configured">;
+      }, $strict>], "provider">;
+      credentialGeneration: ZodNumber;
+      grantedCapabilities: ZodArray<ZodString>;
+      reauthorizationRequired: ZodBoolean;
+      lastErrorCode: ZodNullable<ZodString>;
+    }, $strict>>;
+    identityClosure: ZodNullable<ZodObject<{
+      status: ZodEnum<{
+        pending: "pending";
+        verified: "verified";
+      }>;
+      verifiedAt: ZodNullable<ZodString>;
+    }, $strict>>;
+    handoff: ZodNullable<ZodUnion<readonly [ZodObject<{
+      bindingState: ZodLiteral<"active">;
+      handoffReady: ZodLiteral<true>;
+    }, $strict>, ZodObject<{
+      bindingState: ZodLiteral<"active">;
+      handoffReady: ZodLiteral<false>;
+      providerCli: ZodOptional<ZodObject<{
+        phase: ZodEnum<{
+          checking_credentials: "checking_credentials";
+          needs_attention: "needs_attention";
+          preparing_cli: "preparing_cli";
+        }>;
+        reason: ZodOptional<ZodEnum<{
+          credential_rejected: "credential_rejected";
+          global_bin_unavailable: "global_bin_unavailable";
+          identity_mismatch: "identity_mismatch";
+          integrity_failed: "integrity_failed";
+          provider_unreachable: "provider_unreachable";
+          rate_limited: "rate_limited";
+          scope_missing: "scope_missing";
+          unsupported_platform: "unsupported_platform";
+          upgrade_required: "upgrade_required";
+          version_incompatible: "version_incompatible";
+        }>>;
+      }, $strict>>;
+    }, $strict>, ZodObject<{
+      bindingState: ZodEnum<{
+        disabled: "disabled";
+        error: "error";
+        provisioning: "provisioning";
+        reauthorization_required: "reauthorization_required";
+      }>;
+      handoffReady: ZodLiteral<false>;
+    }, $strict>]>>;
+  }, $strict>;
+  interactionsUrl: ZodString;
+}, $strict>;
+type ProvisionSlackAgentRequest = output$1<typeof ProvisionSlackAgentRequestSchema>;
+type ProvisionSlackAgentResponse = output$1<typeof ProvisionSlackAgentResponseSchema>;
+declare const SlackAutoSetupRuntimeRequestSchema: ZodObject<{
+  type: ZodLiteral<"slack:auto-setup">;
+  requestId: ZodString;
+  computerId: ZodString;
+  agentId: ZodString;
+  input: ZodDiscriminatedUnion<[ZodObject<{
+    action: ZodLiteral<"authorize">;
+    force: ZodOptional<ZodBoolean>;
+  }, $strict>, ZodObject<{
+    action: ZodLiteral<"install">;
+    displayName: ZodString;
+    challenge: ZodOptional<ZodString>;
+  }, $strict>, ZodObject<{
+    action: ZodLiteral<"callbacks">;
+    challenge: ZodOptional<ZodString>;
+    teamId: ZodString;
+    botUserId: ZodString;
+    enterpriseId: ZodNullable<ZodString>;
+    appId: ZodString;
+    eventsUrl: ZodString;
+    interactionsUrl: ZodString;
+  }, $strict>], "action">;
+}, $strict>;
+declare const SlackAutoSetupRuntimeResultSchema: ZodObject<{
+  type: ZodLiteral<"slack:auto-setup:result">;
+  requestId: ZodString;
+  result: ZodUnion<readonly [ZodDiscriminatedUnion<[ZodObject<{
+    status: ZodLiteral<"authorization_required">;
+    ticket: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"authorized">;
+    teamName: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"connected">;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"approval_pending">;
+    appId: ZodString;
+    teamId: ZodString;
+  }, $strict>, ZodObject<{
+    status: ZodLiteral<"failed">;
+    code: ZodEnum<{
+      approval_denied: "approval_denied";
+      authorization_failed: "authorization_failed";
+      busy: "busy";
+      callbacks_failed: "callbacks_failed";
+      capability_missing: "capability_missing";
+      computer_unavailable: "computer_unavailable";
+      create_failed: "create_failed";
+      create_uncertain: "create_uncertain";
+      failed: "failed";
+      install_failed: "install_failed";
+      manual_required: "manual_required";
+    }>;
+    appId: ZodOptional<ZodString>;
+    teamId: ZodOptional<ZodString>;
+    errorCode: ZodOptional<ZodString>;
+  }, $strict>], "status">, ZodObject<{
+    status: ZodLiteral<"installed">;
+    credentials: ZodObject<{
+      appId: ZodString;
+      teamId: ZodString;
+      botUserId: ZodString;
+      botAccessToken: ZodString;
+      signingSecret: ZodString;
+    }, $strict>;
+  }, $strict>]>;
+}, $strict>;
+type SlackAutoSetupRuntimeRequest = output$1<typeof SlackAutoSetupRuntimeRequestSchema>;
+type SlackAutoSetupRuntimeResult = output$1<typeof SlackAutoSetupRuntimeResultSchema>;
 /** The stable high-level class used for operational routing and dashboards. */
 declare const StructuredErrorCategorySchema: ZodEnum<{
   auth: "auth";
@@ -6837,24 +7437,7 @@ declare const RuntimeProviderCliMetadataSchema: ZodDiscriminatedUnion<[ZodObject
 }, $strict>, ZodObject<{
   provider: ZodLiteral<"github">;
   connectionId: ZodString;
-  repositories: ZodArray<ZodObject<{
-    repositoryId: ZodString;
-    fullName: ZodString;
-    role: ZodEnum<{
-      code: "code";
-      context_tree: "context_tree";
-    }>;
-    access: ZodEnum<{
-      read: "read";
-      write: "write";
-    }>;
-    branch: ZodOptional<ZodString>;
-    publish: ZodOptional<ZodEnum<{
-      direct: "direct";
-      pull_request: "pull_request";
-    }>>;
-    workBranchPrefix: ZodOptional<ZodString>;
-  }, $strict>>;
+  authority: ZodLiteral<"user-task">;
 }, $strict>], "provider">;
 type RuntimeProviderCliMetadata = output$1<typeof RuntimeProviderCliMetadataSchema>;
 declare const RuntimeExecutionProviderSchema: ZodDiscriminatedUnion<[ZodObject<{
@@ -6916,24 +7499,7 @@ declare const RuntimeExecutionProviderSchema: ZodDiscriminatedUnion<[ZodObject<{
   cli: ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>;
 }, $strict>], "provider">;
 type RuntimeExecutionProvider = output$1<typeof RuntimeExecutionProviderSchema>;
@@ -7002,24 +7568,7 @@ declare const RuntimeExecutionOpenResultSchema: ZodDiscriminatedUnion<[ZodObject
     cli: ZodObject<{
       provider: ZodLiteral<"github">;
       connectionId: ZodString;
-      repositories: ZodArray<ZodObject<{
-        repositoryId: ZodString;
-        fullName: ZodString;
-        role: ZodEnum<{
-          code: "code";
-          context_tree: "context_tree";
-        }>;
-        access: ZodEnum<{
-          read: "read";
-          write: "write";
-        }>;
-        branch: ZodOptional<ZodString>;
-        publish: ZodOptional<ZodEnum<{
-          direct: "direct";
-          pull_request: "pull_request";
-        }>>;
-        workBranchPrefix: ZodOptional<ZodString>;
-      }, $strict>>;
+      authority: ZodLiteral<"user-task">;
     }, $strict>;
   }, $strict>], "provider">>;
   sessionCliProof: ZodOptional<ZodObject<{
@@ -7120,24 +7669,7 @@ declare const RuntimeCredentialResultSchema: ZodDiscriminatedUnion<[ZodObject<{
   }, $strict>, ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>], "provider">;
 }, $strict>, ZodObject<{
   type: ZodLiteral<"runtime:credential:result">;
@@ -7233,24 +7765,7 @@ declare const RuntimeCredentialServerFrameSchema: ZodDiscriminatedUnion<[ZodDisc
     cli: ZodObject<{
       provider: ZodLiteral<"github">;
       connectionId: ZodString;
-      repositories: ZodArray<ZodObject<{
-        repositoryId: ZodString;
-        fullName: ZodString;
-        role: ZodEnum<{
-          code: "code";
-          context_tree: "context_tree";
-        }>;
-        access: ZodEnum<{
-          read: "read";
-          write: "write";
-        }>;
-        branch: ZodOptional<ZodString>;
-        publish: ZodOptional<ZodEnum<{
-          direct: "direct";
-          pull_request: "pull_request";
-        }>>;
-        workBranchPrefix: ZodOptional<ZodString>;
-      }, $strict>>;
+      authority: ZodLiteral<"user-task">;
     }, $strict>;
   }, $strict>], "provider">>;
   sessionCliProof: ZodOptional<ZodObject<{
@@ -7349,24 +7864,7 @@ declare const RuntimeCredentialServerFrameSchema: ZodDiscriminatedUnion<[ZodDisc
   }, $strict>, ZodObject<{
     provider: ZodLiteral<"github">;
     connectionId: ZodString;
-    repositories: ZodArray<ZodObject<{
-      repositoryId: ZodString;
-      fullName: ZodString;
-      role: ZodEnum<{
-        code: "code";
-        context_tree: "context_tree";
-      }>;
-      access: ZodEnum<{
-        read: "read";
-        write: "write";
-      }>;
-      branch: ZodOptional<ZodString>;
-      publish: ZodOptional<ZodEnum<{
-        direct: "direct";
-        pull_request: "pull_request";
-      }>>;
-      workBranchPrefix: ZodOptional<ZodString>;
-    }, $strict>>;
+    authority: ZodLiteral<"user-task">;
   }, $strict>], "provider">;
 }, $strict>, ZodObject<{
   type: ZodLiteral<"runtime:credential:result">;
@@ -7522,6 +8020,19 @@ type SessionCliSendRequest = output$1<typeof SessionCliSendRequestSchema>;
 type SessionCliCommandResponse = output$1<typeof SessionCliCommandResponseSchema>;
 type SessionCliListQuery = output$1<typeof SessionCliListQuerySchema>;
 type SessionCliListResponse = output$1<typeof SessionCliListResponseSchema>;
+declare const TurnActivityResultSchema: ZodObject<{
+  type: ZodLiteral<"turn:activity:result">;
+  requestId: ZodString;
+  turnId: ZodString;
+  sequence: ZodNumber;
+  status: ZodEnum<{
+    already_recorded: "already_recorded";
+    recorded: "recorded";
+    stale_generation: "stale_generation";
+    unsupported_capability: "unsupported_capability";
+  }>;
+}, $strict>;
+type TurnActivityResult = output$1<typeof TurnActivityResultSchema>;
 /** Business parameters shared by every hop; unknown fields are rejected. */
 declare const WebSearchParamsSchema: ZodObject<{
   query: ZodString;
@@ -7654,7 +8165,7 @@ declare const WebToolErrorCodeSchema: ZodEnum<{
 }>;
 type WebToolErrorCode = output$1<typeof WebToolErrorCodeSchema>;
 declare namespace index_d_exports {
-  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, serializeEnvironment, sessionBindingPath, skillRootForProvider, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
+  export { ACCOUNT_IDENTITY_FILE_NAME, AGENT_RUNTIME_BINDING_MAX_BYTES, AGENT_RUNTIME_CONTRACT_VERSION, AGENT_RUNTIME_DESCRIPTION_MAX_BYTES, AGENT_RUNTIME_ID_MAX_BYTES, AGENT_RUNTIME_TEXT_MAX_BYTES, AccessTokenLease, AccessTokenProvider, AccountIdentityRotation, AdmissionController, AdmissionDecision, AdmissionLimits, AdmissionPhase, AdmissionReservation, AdmissionSnapshot, AgentAbortRequest, AgentApprovalResponse, AgentHostedToolCall, AgentHostedToolContent, AgentHostedToolDefinition, AgentHostedToolError, AgentHostedToolHandler, AgentHostedToolResult, AgentHostedTools, AgentInput, AgentInputItem, AgentInteractionRequest, AgentInteractionResponse, AgentOutputItem, AgentPromptRequest, AgentProviderError, AgentProviderRunContext, AgentProviderRunEvent, AgentProviderRunResult, AgentQuestionResponse, AgentRunConfiguration, AgentRunError, AgentRunErrorCode, AgentRunId, AgentRunResult, AgentRunStatus, AgentRuntime, AgentRuntimeBinding, AgentRuntimeCapabilities, AgentRuntimeCliInstallation, AgentRuntimeConfigurationOptionsRequest, AgentRuntimeError, AgentRuntimeErrorCode, AgentRuntimeEvent, AgentRuntimeEventSink, AgentRuntimeExecutableDiscoveryError, AgentRuntimeExecutableNotFoundError, AgentRuntimeExecutableSource, AgentRuntimeFactory, AgentRuntimeLifecycleState, AgentRuntimeManifest, AgentRuntimePaths, AgentRuntimePolicy, AgentRuntimeProbeIssue, AgentRuntimeProbeRequest, AgentRuntimeProbeResult, AgentRuntimeProviderRegistration, AgentRuntimeProviderRegistry, AgentRuntimeProviderUnavailableError, AgentRuntimeState, AgentRuntimeWorkspace, AgentSteerRequest, AgentTextInputItem, AgentTextOutputItem, AgentTurnErrorReporter, AgentTurnFailure, AgentTurnRunner, AgentTurnRunnerOptions, AgentUsage, AgentWorkspaceManager, AgentWorkspaceManagerOptions, BaseAgentRuntime, BaseAgentRuntimeOptions, BoundAccountComputerResolution, CLAUDE_CODE_AGENT_RUNTIME_MANIFEST, CLAUDE_CODE_MAX_LINE_BYTES, CLAUDE_CODE_MAX_STDERR_BYTES, CLIENT_ERROR_REPORT_TIMEOUT_MS, CODEX_AGENT_RUNTIME_APP_SERVER_ARGS, CODEX_AGENT_RUNTIME_MANIFEST, CODEX_APP_SERVER_MAX_LINE_BYTES, CODEX_APP_SERVER_MAX_STDERR_BYTES, CODEX_APP_SERVER_REQUEST_TIMEOUT_MS, COMPUTER_IDENTITY_FILE_NAME, CONTEXT_TREE_PACKAGED_SKILL_DIRECTORIES, CREDENTIALS_FILE_NAME, ClaudeCodeAgentRuntime, ClaudeCodeAgentRuntimeFactory, ClaudeCodeAgentRuntimeFactoryOptions, ClaudeCodeProcess, ClaudeCodeProcessClient, ClaudeCodeProcessError, ClaudeCodeProcessResult, ClaudeCodeProcessSpawnOptions, ClaudeCodeSpawnOptions, ClientErrorReportMetadata, ClientLogBindings, ClientLogger, ClientLoggerServiceOptions, ClientRuntime, ClientRuntimeOptions, ClientRuntimeProviderStartError, CloudSandboxCommandOptions, CloudSandboxCredentialBridge, CloudSandboxCredentialBridgeOpenOptions, CodexAgentRuntime, CodexAgentRuntimeFactory, CodexAgentRuntimeFactoryOptions, CodexAppServerClient, CodexAppServerError, CodexAppServerMessage, CodexAppServerProcess, CodexAppServerRequest, CodexProcessSpawnOptions, CodexSpawnOptions, ComposedClientRuntime, ComputerIdentity, ContextTreeExecFile, ContextTreeManager, ContextTreeManagerOptions, ContextTreePackage, ContextTreeStatus, CreateAgentRuntimeRequest, CreateClientRuntimeOptions, CreateLoggerOptions, CustodyResult, DEFAULT_RUNTIME_RETRY_POLICY, DeliveryDecision, DurableFailure, DurableRetryability, DurableWorkKind, DurableWorkRecord, DurableWorkStatus, ExecuteProviderCliTurnPlanOptions, ExpectedSkillBundle, FeishuTokenExchangeError, FileRuntimeDurabilityStore, IgnoredProviderCliCandidate, ImCredentialEnvironmentError, ImCredentialEnvironmentManager, ImCredentialEnvironmentManagerOptions, ImCredentialGrantSubject, ImResourceFetcher, IntegrationCliId, IntegrationCliInstallation, InteractiveCodexAppServerClient, JsonPrimitive, JsonValue, LiveTurnOwner, LocalComputerConfigurationInspection, LocalConfigurationStatus, LocalSessionBinding, MACHINE_CREDENTIALS_FILE_NAME, MAX_PROVIDER_CLI_EXECUTABLE_BYTES, MAX_PROVIDER_CLI_TURN_IDENTITY_BYTES, MAX_PROVIDER_CLI_TURN_PLAN_BYTES, MachineComputerCredential, ManagedContextTreeStatus, ManagedEnvironment, ManagedSessionContext, MemoryRuntimeDurabilityStore, OpenTagApi, OpenTagApiError, OpenTagHomeLayout, PI_AGENT_RUNTIME_MANIFEST, PI_RPC_MAX_LINE_BYTES, PI_RPC_MAX_STDERR_BYTES, PI_RPC_REQUEST_TIMEOUT_MS, PROCESS_ERROR_FLUSH_WAIT_MS, PROCESS_ERROR_REPORT_WAIT_MS, PROVIDER_CLI_CATALOG, PROVIDER_CLI_LOCK_BUSY_MAX_ATTEMPTS, PROVIDER_CLI_LOCK_BUSY_RETRY_DELAY_MS, PROVIDER_CLI_SELECTION_SCHEMA_VERSION, PROVIDER_CLI_TURN_PLAN_SCHEMA_VERSION, PackedSkillDirectory, PiAgentRuntime, PiAgentRuntimeFactory, PiAgentRuntimeFactoryOptions, PiRpcClient, PiRpcError, PiRpcProcess, PiRpcProcessSpawnOptions, PiRpcSpawnOptions, PlatformSource, PreparedImCredentialEnvironment, PreparedRuntimeCredentialEnvironment, PreparedWebToolsLaunch, ProbeAgentRuntimeCliInstallationsOptions, ProbeIntegrationCliInstallationsOptions, ProcessErrorOrigin, ProcessErrorReportingOptions, ProcessErrorTarget, ProtectedWorkCount, ProtectedWorkSnapshot, ProviderCliAccountError, ProviderCliAccountLayout, ProviderCliArchiveError, ProviderCliCandidate, ProviderCliCandidateReport, ProviderCliCatalogArtifact, ProviderCliCatalogEntry, ProviderCliDetectOptions, ProviderCliDetection, ProviderCliDiagnostic, ProviderCliDiagnosticCode, ProviderCliEnsureAction, ProviderCliEnsureOptions, ProviderCliEnsureResult, ProviderCliExecFile, ProviderCliExecutableFormat, ProviderCliFetcher, ProviderCliFileIdentity, ProviderCliGlobalCommandStatus, ProviderCliInspection, ProviderCliInstallError, ProviderCliInstaller, ProviderCliInstallerOptions, ProviderCliLocalState, ProviderCliLockBusyError, ProviderCliManagedInstall, ProviderCliManager, ProviderCliManagerDeps, ProviderCliPhase, ProviderCliPhaseEvent, ProviderCliPhaseRecord, ProviderCliPreparedTurnPlan, ProviderCliProbeContract, ProviderCliProbeOutcome, ProviderCliProvider, ProviderCliReconciler, ProviderCliReconcilerOptions, ProviderCliSelection, ProviderCliSelectionRecord, ProviderCliTrust, ProviderCliTurnLauncherSpec, ProviderCliTurnPlan, ProviderCliTurnPlanCommand, ProviderCliTurnPlanError, ProviderCliTurnPlanErrorCode, ProviderCliTurnPlanManager, ProviderCliTurnPlanManagerDeps, ProviderCliTurnPlanPrepareInput, ProviderCliValidationRequest, ProviderCliValidationRunner, ProviderCliValidationRunnerOptions, ProviderCliWarning, ProviderCliWarningCode, RUNNER_CLI_NAME, RUNNER_IDENTITY_SCHEMA_VERSION, RUNTIME_CREDENTIAL_CAPABILITY, RUNTIME_EXECUTION_MAX_LIFETIME_MS, RUNTIME_PROVIDER_ORIGIN_HEADER, RUNTIME_PROVIDER_PROXY_CAPABILITY, RUNTIME_PROVIDER_PROXY_PATH, RUNTIME_PROXY_ALLOWED_CONNECT_HOSTS, RUNTIME_PROXY_DATA_BINARY_FRAME_MAX_BYTES, RUNTIME_PROXY_DATA_CHUNK_BYTES, RUNTIME_PROXY_DATA_HEADER_MAX_BYTES, RUNTIME_PROXY_DATA_INITIAL_CREDIT_BYTES, RUNTIME_PROXY_DATA_MAX_STREAMS, RUNTIME_PROXY_GIT_HELPER_MARKER, RUNTIME_PROXY_HANDLE_PATH_PREFIX, RUNTIME_PROXY_PROVIDERS, RUNTIME_PROXY_SHIM_MARKER, RUNTIME_PROXY_TICKET_TTL_MS, RUNTIME_WEB_TOOLS_CAPABILITY, ReadBundleBodyOptions, RecordedInput, ReportClientErrorOptions, ResolveAgentRuntimeExecutableOptions, ResolvedAgentRuntimeExecutable, ResolvedClaudeCodeFactoryOptions, ResolvedCodexFactoryOptions, ResolvedPiFactoryOptions, ResumeAgentRuntimeRequest, RuntimeBusinessFrame, RuntimeConnection, RuntimeConnectionError, RuntimeConnectionErrorCategory, RuntimeConnectionOptions, RuntimeConnectionState, RuntimeCredentialEnvironmentManager, RuntimeCredentialEnvironmentManagerOptions, RuntimeCredentialGrant, RuntimeCredentialMode, RuntimeCredentialPrepareSubject, RuntimeCredentialRelay, RuntimeCredentialRelayError, RuntimeCredentialRelayErrorCode, RuntimeCredentialRelayOptions, RuntimeCredentialResult, RuntimeCredentialRevoked, RuntimeCredentialRunSubject, RuntimeCredentialServerFrame, RuntimeDurabilityFailure, RuntimeDurabilityMetrics, RuntimeDurabilityMetricsSnapshot, RuntimeDurabilityStore, RuntimeExecutionOpenRequest, RuntimeExecutionOpenResult, RuntimeExecutionProvider, RuntimeExecutionSandbox, RuntimeExecutionService, RuntimeExecutionSource, RuntimeLocalPolicy, RuntimePreparation, RuntimeProxyAdapterStreamRequest, RuntimeProxyCliMetadata, RuntimeProxyDataConnectInput, RuntimeProxyDataConnection, RuntimeProxyDataConnectionFactory, RuntimeProxyDataConnectionLike, RuntimeProxyDataConnectionOptions, RuntimeProxyDataError, RuntimeProxyDataErrorCode, RuntimeProxyEnvironment, RuntimeProxyEnvironmentInput, RuntimeProxyExecutionLayout, RuntimeProxyLoopbackAdapter, RuntimeProxyLoopbackAdapterOptions, RuntimeProxyLoopbackCaMaterial, RuntimeProxyLoopbackError, RuntimeProxyMaterialStore, RuntimeProxyOpenStreamRequest, RuntimeProxyProvider, RuntimeProxyStreamResponse, RuntimeQueueLimits, RuntimeRelayScheduler, RuntimeRetryPolicy, RuntimeRetryScheduler, RuntimeSendError, RuntimeSendErrorCode, RuntimeSendOptions, RuntimeSendPriority, RuntimeStorageError, SERVER_HEALTH_TIMEOUT_MS, SESSION_BINDING_SCHEMA_VERSION, SESSION_RECORDED_INPUT_LIMIT, SKILL_CONTENT_SIDECAR_FILE, SKILL_PULL_BUNDLE_TIMEOUT_MS, SKILL_SYNC_DEFAULT_BUDGET_MS, ServerHealthConfigurationError, ServerHealthHttpError, ServerHealthNetworkError, ServerHealthResponseError, ServerHealthTimeoutError, ServerRuntimeDurabilityStore, ServerRuntimeDurabilityStoreOptions, SessionActivity, SessionActivityPhase, SessionBindingConflictError, SessionBindingStore, SessionBindingStoreOptions, SessionCliProofManager, SessionMessageInbox, SessionMessageInboxOptions, SessionMessageTurnContext, SessionPreparationResult, SessionProtectedWorkSnapshot, SessionReconciler, SessionReconcilerOptions, SessionRuntimeManager, SessionRuntimeManagerOptions, SessionRuntimeState, SessionTurnIdentity, SkillArchiveError, SkillArchiveErrorCode, SkillDirectoryMarkerInput, SkillSyncAgentInput, SkillSyncApi, SkillSyncManager, SkillSyncManagerOptions, SkillSyncResult, SkillSyncStatus, StoredAccountIdentity, StoredAccountIdentitySchema, StoredCredentials, StoredMachineCredentials, StoredSessionCliProof, TURN_TRACE_BATCH_SOFT_LIMIT_BYTES, TURN_TRACE_MAX_BUFFER_BYTES, TURN_TRACE_MAX_BUFFER_EVENTS, TURN_TRACE_SEND_DEADLINE_MS, TokenProviderOptions, TurnCustodyOwner, TurnCustodyOwnerOptions, TurnReportOwner, TurnReportOwnerOptions, TurnReportOwnerStoppedError, TurnReportRearmClaim, TurnReportSubmitOptions, TurnReportTerminalStatus, TurnTraceBuffer, TurnTraceBufferOptions, TurnTraceSummary, UnresolvedTurn, UnresolvedTurnPhase, UpdateManager, UpdateManagerOptions, UpdaterAttempt, UpdaterRecoveryStatus, UpdaterStateName, UpdaterStateSnapshot, WebGatewayDispatch, WebGatewayDispatchError, WebToolsClientError, WebToolsGatewayServer, WebToolsGatewayServerOptions, WebToolsServerClient, WebToolsServerClientOptions, accountIdentityMatchesCredentials, accountIdentityPath, agentRuntimePaths, allocateComputerIdentity, assembleContextTreeSkills, assertRealDirectory, assertWithin, buildAgentInput, buildClientErrorReport, buildRuntimeProxyEnvironment, buildSessionMessageInput, captureSlackDeploy, catalogExecutableDigests, checkServerHealth, classifyLarkAuthStatus, classifySlackAuthTest, classifySpawnFailure, claudeCodeAgentRuntimeEnvironment, claudeCodeProcessEnvironment, codexAgentRuntimeEnvironment, codexDesktopAppBinDirs, computeFileIdentity, computeTargetFingerprint, computerIdentityPath, configureClientLoggerContext, configureClientLoggerForService, copyIsolatedPiConfig, createClientRuntime, createLogger, createProviderCliFetcher, createRunnerIdentity, credentialsFingerprint, credentialsPath, defaultProviderCliExecFile, defaultProviderCliFetcher, defaultRuntimeProxyDataConnectionFactory, defaultRuntimeRetryScheduler, deriveProviderCliHomeNamespace, deriveProviderCliRunKey, deriveProviderCliSessionKey, deriveProviderCliValidationRequestKey, deriveRuntimeKey, describePlatform, detectProviderCliCandidates, ensurePrivateDirectory, exchangeFeishuTenantToken, executableFormatSupportsHost, executeProviderCliTurnPlan, extractBoundedJson, extractProviderCliExecutable, extractSkillArchive, findCatalogArtifact, findProviderCliCatalogEntry, generateExecutionCa, hashSkillDirectory, inspectExecutableFormat, inspectGlobalCommand, inspectLocalComputerConfiguration, inspectProviderCliLauncher, installProcessErrorReporting, isSkillMaterializationTarget, isSyncedWorkspace, iterateAgentRuntimeExecutables, linuxAmd64ProviderCliPlans, machineCredentialsPath, mapProviderCliLocalStateToReadiness, markSkillDirectoryManaged, normalizeServerUrl, packSkillDirectory, parseProviderCliTurnPlan, parseProviderCliTurnRunnerArgv, parseRunnerCliArgv, parseRunnerIdentity, parseRuntimeCredentialServerFrame, piAgentRuntimeEnvironment, prepareContextTreeHome, prepareSlackCallbackUpdate, probeAgentRuntimeCliInstallations, probeIntegrationCliInstallations, probeProviderCliExecutable, probeRunnerTools, providerCliArtifactId, providerCliCommandForProvider, providerCliLauncherPath, providerCliLockFilePath, providerCliProbeEnvironment, providerCliSelectionTargetPath, providerCliStateFilePath, providerCliVersionDirPath, providerReadiness, rankProviderCliCandidates, readAccountIdentity, readBundleBody, readComputerIdentity, readCredentials, readDurableJson, readMachineCredentials, readMachineCredentialsStrict, readPrivateJson, readProviderCliSelection, readProviderCliTurnPlan, readSecureFile, readSessionCliProofFile, reconcileProviderCliLauncher, reconcileProviderCliShim, redactAcceptanceRecord, removeAccountIdentity, renderManagedSystemPrompt, renderProviderCliLauncher, renderProviderCliShim, renderProviderCliTurnLauncher, renderRuntimeProxyGitCredentialHelper, renderRuntimeProxyShim, reportClientError, requireProviderCliCatalogEntry, resolveAccountHome, resolveAgentRuntimeExecutable, resolveBoundAccountComputer, resolveCodexHome, resolveComputerIdentity, resolveContextTreeHome, resolveContextTreePackage, resolveMaterializationWorkspace, resolveOpenTagHome, resolveOpenTagHomeLayout, resolvePiHome, resolveProviderCliAccountLayout, resolveProviderCliArtifactUrl, resolveProviderCliTurnRunnerInvocation, resolveWebToolsExtensionPath, resolvedClaudeCodeFactory, resolvedCodexFactory, resolvedPiFactory, retryDelay, retryExhausted, rotateAccountIdentityFingerprint, runContextTreeCli, runProviderCliTurnRunner, runRunnerAcceptance, runRunnerCli, runSlackManagement, serializeEnvironment, sessionBindingPath, skillRootForProvider, slackManagementEnvironment, slackManagementHome, snapshotPath, storeBoundAccountComputer, validatePrivateDirectory, verifyProviderCliCandidateFingerprint, verifySkillBundle, wellKnownAgentRuntimeBinDirs, withProviderCliLock, writeAccountIdentityAtomically, writeComputerIdentityAtomically, writeCredentialsAtomically, writeDurableFile, writeDurableJson, writeMachineCredentialsAtomically, writePrivateJson, writeProviderCliSelection };
 }
 //#region src/agent-runtime/types.d.ts
 declare const AGENT_RUNTIME_CONTRACT_VERSION = 2;
@@ -7701,6 +8212,8 @@ interface AgentRunConfiguration {
   readonly provider?: JsonValue;
 }
 interface AgentPromptRequest {
+  /** Exact sockets from trusted execution preparation; never model-supplied or persisted. */
+  readonly allowedUnixSockets?: readonly string[];
   readonly runId: AgentRunId;
   readonly input: AgentInput;
   readonly configuration?: AgentRunConfiguration;
@@ -7763,6 +8276,7 @@ interface AgentRuntimeWorkspace {
   readonly writableRoots?: readonly string[];
 }
 interface AgentRuntimePolicy {
+  readonly allowedCommands?: readonly string[];
   readonly fileSystem: "read-only" | "workspace-write" | "unrestricted";
   readonly network: "disabled" | "enabled";
   readonly approvals: "never" | "on-request" | "unless-trusted";
@@ -7961,8 +8475,14 @@ interface AgentRuntime {
   waitForIdle(): Promise<void>;
   close(): Promise<void>;
 }
+interface AgentRuntimeConfigurationOptionsRequest {
+  readonly model?: string;
+  readonly cwd: string;
+  readonly signal?: AbortSignal;
+}
 interface AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
+  getConfigurationOptions?(request: AgentRuntimeConfigurationOptionsRequest): Promise<AgentRuntimeOptions>;
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
   create(request: CreateAgentRuntimeRequest): Promise<AgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<AgentRuntime>;
@@ -8092,8 +8612,12 @@ declare class OpenTagApi {
   }, options?: RequestOptions): Promise<Response>;
   listRuntimeDurableWork(machineToken: string, kind: RuntimeDurableWorkKind, options?: RequestOptions): Promise<RuntimeDurableWorkRecord[]>;
   writeRuntimeDurableWork(machineToken: string, record: RuntimeDurableWorkRecord, options?: RequestOptions): Promise<void>;
-  createInternalSession(proof: string, input: SessionCliCreateRequest, options?: RequestOptions): Promise<SessionCliCommandResponse>;
-  sendSessionMessage(proof: string, input: SessionCliSendRequest, options?: RequestOptions): Promise<SessionCliCommandResponse>;
+  createInternalSession(proof: string, input: SessionCliCreateRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<SessionCliCommandResponse>;
+  sendSessionMessage(proof: string, input: SessionCliSendRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<SessionCliCommandResponse>;
   listInternalSessions(proof: string, input: SessionCliListQuery, options?: RequestOptions): Promise<SessionCliListResponse>;
   listAgentSkills(accessToken: string, agentId: string, options?: RequestOptions): Promise<ListAgentSkillsResponse>;
   getAgentSkill(accessToken: string, agentId: string, skillId: string, options?: RequestOptions): Promise<SkillDetail>;
@@ -8108,8 +8632,30 @@ declare class OpenTagApi {
   listRuntimeSkills(proof: string, options?: RequestOptions): Promise<ListAgentSkillsResponse>;
   pushRuntimeSkill(proof: string, input: SkillUploadInput, options?: RequestOptions): Promise<Skill>;
   openRuntimeSkillBundle(proof: string, name: string, options?: RequestOptions): Promise<Response>;
+  listSkillPresets(accessToken: string, agentId: string, options?: RequestOptions): Promise<ListSkillPresetsResponse>;
+  installSkillPreset(accessToken: string, agentId: string, presetName: string, options?: RequestOptions): Promise<InstallSkillPresetResponse>;
+  listRuntimeSkillPresets(proof: string, options?: RequestOptions): Promise<ListSkillPresetsResponse>;
+  installRuntimeSkillPreset(proof: string, presetName: string, options?: RequestOptions): Promise<InstallSkillPresetResponse>;
   getRuntimeAgentConfig(proof: string, options?: RequestOptions): Promise<AgentAdminConfig>;
   updateRuntimeAgentConfig(proof: string, input: UpdateSelfAgentRequest, options?: RequestOptions): Promise<AgentAdminConfig>;
+  createRuntimeAgentSchedule(proof: string, input: CreateAgentScheduleRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
+  listRuntimeAgentSchedules(proof: string, query?: {
+    limit?: number;
+    cursor?: string;
+  }, options?: RequestOptions): Promise<AgentScheduleListResponse>;
+  getRuntimeAgentSchedule(proof: string, scheduleId: string, options?: RequestOptions): Promise<AgentSchedule>;
+  updateRuntimeAgentSchedule(proof: string, scheduleId: string, input: UpdateAgentScheduleRequest, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
+  pauseRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<AgentSchedule>;
+  resumeRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions & {
+    executionId?: string;
+  }): Promise<AgentSchedule>;
+  deleteRuntimeAgentSchedule(proof: string, scheduleId: string, expectedRevision: number, options?: RequestOptions): Promise<void>;
+  previewRuntimeAgentSchedule(proof: string, input: PreviewAgentScheduleRequest, options?: RequestOptions): Promise<AgentSchedulePreview>;
+  provisionSlackAgent(proof: string, input: ProvisionSlackAgentRequest, options?: RequestOptions): Promise<ProvisionSlackAgentResponse>;
   listRuntimeAgentMcpServers(proof: string, options?: RequestOptions): Promise<ListAgentMCPServersResponse>;
   listRuntimeAgentAvailableMcpServers(proof: string, options?: RequestOptions): Promise<ListAvailableMCPServersResponse>;
   attachRuntimeAgentMcpServer(proof: string, input: AttachMCPServerRequest, options?: RequestOptions): Promise<MCPAgentServer>;
@@ -8256,7 +8802,15 @@ interface ClientLogger {
 interface CreateLoggerOptions {
   destination?: "configured" | "stderr" | "file" | "dual";
 }
-declare function configureClientLoggerForService(logDirectory: string): void;
+/**
+ * The resolved environment of the service that owns the log directory. The daemon service supplies
+ * its `config/daemon.env` result here, so the logger reads the same environment the rest of the
+ * daemon runs with instead of the raw process environment.
+ */
+interface ClientLoggerServiceOptions {
+  environment?: Readonly<Record<string, string | undefined>>;
+}
+declare function configureClientLoggerForService(logDirectory: string, options?: ClientLoggerServiceOptions): void;
 declare function configureClientLoggerContext(bindings: ClientLogBindings): void;
 declare function createLogger(module: string, options?: CreateLoggerOptions): ClientLogger;
 //#endregion
@@ -8303,9 +8857,11 @@ type RuntimeBusinessFrame = Readonly<Record<string, unknown>> & {
 //#endregion
 //#region src/runtime/runtime-connection-errors.d.ts
 type RuntimeSendErrorCode = "aborted" | "deadline" | "frame_too_large" | "overflow" | "unavailable" | "capability_unavailable";
+type RuntimeConnectionErrorCategory = "authentication_rejection" | "capability_incompatibility" | "protocol" | "transient_connection";
 declare class RuntimeConnectionError extends Error {
   readonly fatal: boolean;
-  constructor(message: string, fatal: boolean);
+  readonly category: RuntimeConnectionErrorCategory;
+  constructor(message: string, fatal: boolean, category?: RuntimeConnectionErrorCategory);
 }
 declare class RuntimeSendError extends Error {
   readonly code: RuntimeSendErrorCode;
@@ -8398,10 +8954,11 @@ declare function parseRuntimeCredentialServerFrame(value: unknown): RuntimeCrede
 //#endregion
 //#region src/runtime/runtime-proxy-data-client.d.ts
 type RuntimeProxyDataErrorCode = "aborted" | "auth_failed" | "connection_lost" | "connection_closed" | "open_timeout" | "protocol_error" | "queue_full" | "stream_error" | "too_many_streams";
-/** Controlled data-channel failure. `code` identifies the local cause; upstream codes stay in `message`. */
+/** Controlled data-channel failure. `code` identifies the local cause; upstream codes are carried separately and must be allowlisted before presentation. */
 declare class RuntimeProxyDataError extends Error {
   readonly code: RuntimeProxyDataErrorCode;
-  constructor(code: RuntimeProxyDataErrorCode, message: string, options?: ErrorOptions);
+  readonly upstreamCode?: string | undefined;
+  constructor(code: RuntimeProxyDataErrorCode, message: string, options?: ErrorOptions, upstreamCode?: string | undefined);
 }
 interface RuntimeProxyOpenStreamRequest {
   readonly bindingId: string;
@@ -8634,6 +9191,8 @@ interface RuntimeProxyAdapterStreamRequest {
 interface RuntimeProxyLoopbackAdapterOptions {
   /** The single execution this dedicated entry serves. */
   readonly executionId: string;
+  /** Local native gh can use private IPC; Cloud keeps its existing sandbox CONNECT bridge. */
+  readonly githubApiSocket?: boolean;
   readonly generateCa?: (materialDir: string) => Promise<RuntimeProxyLoopbackCaMaterial>;
   /**
    * Execution-local handles held by the Sandbox. Used only to substitute the harmless
@@ -8664,6 +9223,10 @@ declare class RuntimeProxyLoopbackAdapter {
   get connectProxyUrl(): string;
   /** Loopback HTTPS endpoint the Slack launcher pins through `--apihost`. */
   get slackApiHost(): string;
+  /** Private authenticated IPC transport for Local native gh; Cloud uses its sandbox bridge. */
+  get githubApiSocketPath(): string | undefined;
+  /** Native Git's private HTTP IPC entry; the same handle/Relay/Server checks still apply. */
+  get githubGitSocketPath(): string | undefined;
   /** Execution-scoped CA public certificate path for CLI trust configuration. */
   get caCertPath(): string;
   get executionId(): string;
@@ -8832,6 +9395,17 @@ interface ProcessErrorReportingOptions {
  */
 declare function installProcessErrorReporting(options: ProcessErrorReportingOptions): () => void;
 //#endregion
+//#region src/providers/claude-code/credential-probe.d.ts
+interface EnvironmentCredential {
+  token: string;
+  header: string;
+  oauth: boolean;
+  apiKey?: string;
+}
+/** Verify explicit first-party credentials without a model request or touching native login storage. */
+declare function probeClaudeEnvironmentCredential(environment: NodeJS.ProcessEnv, signal?: AbortSignal, readStatus?: typeof requestCredentialStatus): Promise<AgentRuntimeProbeIssue | undefined>;
+declare function requestCredentialStatus(environment: NodeJS.ProcessEnv, credential: EnvironmentCredential, signal?: AbortSignal): Promise<number>;
+//#endregion
 //#region src/providers/claude-code/hosted-tool-bridge.d.ts
 /** The remote MCP gateway for this execution; both fields are opaque to this module. */
 interface ClaudeCodeMcpGatewayEndpoint {
@@ -8841,9 +9415,10 @@ interface ClaudeCodeMcpGatewayEndpoint {
 interface ClaudeCodeHostedToolBridge {
   readonly allowedTools: readonly string[];
   readonly configPath: string;
+  readonly pluginPath: string;
   close(): Promise<void>;
 }
-declare function startClaudeCodeHostedToolBridge(hostedTools: AgentHostedTools | undefined, runId: string, signal: AbortSignal, mcpGateway?: ClaudeCodeMcpGatewayEndpoint): Promise<ClaudeCodeHostedToolBridge>;
+declare function startClaudeCodeHostedToolBridge(hostedTools: AgentHostedTools | undefined, runId: string, signal: AbortSignal, skillPaths: readonly string[], mcpGateway?: ClaudeCodeMcpGatewayEndpoint): Promise<ClaudeCodeHostedToolBridge>;
 //#endregion
 //#region src/providers/claude-code/process-wire.d.ts
 declare const CLAUDE_CODE_MAX_LINE_BYTES: number;
@@ -8871,6 +9446,7 @@ interface ClaudeCodeProcessResult {
   readonly stderr: string;
 }
 interface ClaudeCodeProcessClient {
+  send?(message: Readonly<Record<string, unknown>>): Promise<void>;
   execute(input: Readonly<Record<string, unknown>>, onMessage: (message: Readonly<Record<string, unknown>>) => void, signal: AbortSignal): Promise<ClaudeCodeProcessResult>;
   interrupt(): Promise<void>;
   close(graceMs?: number): Promise<void>;
@@ -8880,18 +9456,21 @@ declare class ClaudeCodeProcess implements ClaudeCodeProcessClient {
   constructor(options: ClaudeCodeSpawnOptions);
   execute(input: Readonly<Record<string, unknown>>, onMessage: (message: Readonly<Record<string, unknown>>) => void, signal: AbortSignal): Promise<ClaudeCodeProcessResult>;
   interrupt(): Promise<void>;
+  send(message: Readonly<Record<string, unknown>>): Promise<void>;
   close(graceMs?: number): Promise<void>;
 }
 //#endregion
 //#region src/providers/claude-code/agent-runtime.d.ts
 declare const CLAUDE_CODE_AGENT_RUNTIME_MANIFEST: AgentRuntimeManifest;
 interface ClaudeCodeRuntimeOptions {
+  readonly policy: AgentRuntimePolicy;
   readonly binding: AgentRuntimeBinding;
   readonly configuration?: AgentRunConfiguration;
   readonly createProcess: (args: readonly string[]) => ClaudeCodeProcessClient;
   readonly emptyNativeToolAllowList?: boolean;
   readonly eventSink: AgentRuntimeEventSink;
   readonly hostedTools?: AgentHostedTools;
+  readonly skillPaths: readonly string[];
   readonly resume: boolean;
   readonly startHostedToolBridge: typeof startClaudeCodeHostedToolBridge;
   readonly systemPrompt: string;
@@ -8908,8 +9487,10 @@ interface ClaudeCodeAgentRuntimeFactoryOptions {
   readonly createProcess?: (cwd: string, args: readonly string[], environment?: Readonly<Record<string, string>>) => ClaudeCodeProcessClient;
   readonly createSessionId?: () => string;
   readonly startHostedToolBridge?: typeof startClaudeCodeHostedToolBridge;
+  readonly verifyCredential?: typeof probeClaudeEnvironmentCredential;
   readonly probeRunner?: (signal?: AbortSignal) => Promise<{
     readonly credential: boolean;
+    readonly credentialIssue?: AgentRuntimeProbeIssue;
     readonly streamJson: boolean;
     readonly version: string;
   }>;
@@ -8920,12 +9501,17 @@ declare class ClaudeCodeAgentRuntime extends BaseAgentRuntime {
   protected executeRun(request: AgentPromptRequest, context: AgentProviderRunContext): Promise<AgentProviderRunResult>;
   protected abortProvider(_request: AgentAbortRequest): Promise<void>;
   protected closeProvider(): Promise<void>;
+  protected respondProvider(response: AgentInteractionResponse): Promise<void>;
 }
 declare class ClaudeCodeAgentRuntimeFactory implements AgentRuntimeFactory {
   #private;
   readonly manifest: AgentRuntimeManifest;
   constructor(options?: ClaudeCodeAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<ClaudeCodeAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<ClaudeCodeAgentRuntime>;
 }
@@ -9017,7 +9603,7 @@ declare class CodexAppServerProcess implements InteractiveCodexAppServerClient {
 }
 //#endregion
 //#region src/providers/codex/agent-runtime.d.ts
-declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "--disable", "tool_call_mcp_elicitation", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=false", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include" }'];
+declare const CODEX_AGENT_RUNTIME_APP_SERVER_ARGS: readonly ["app-server", "--stdio", "--disable", "apps", "--disable", "auth_elicitation", "--disable", "browser_use", "--disable", "browser_use_external", "--disable", "browser_use_full_cdp_access", "--disable", "computer_use", "--disable", "goals", "--disable", "hooks", "--disable", "image_generation", "--disable", "in_app_browser", "--disable", "multi_agent", "--disable", "plugins", "--disable", "remote_plugin", "--disable", "shell_snapshot", "--disable", "skill_mcp_dependency_install", "-c", "mcp_servers={}", "-c", 'web_search="disabled"', "-c", "tools.view_image=true", "-c", "memories.use_memories=false", "-c", "memories.generate_memories=false", "-c", "allow_login_shell=false", "-c", 'shell_environment_policy.inherit="all"', "-c", 'shell_environment_policy.filters={ PATH = "include", ZDOTDIR = "include", LANG = "include", LC_ALL = "include", OPENTAG_HOME = "include", OPENTAG_PROVIDER_ENV_FILE = "include", OPENTAG_SESSION_PROOF_FILE = "include", OPENTAG_EXECUTION_ID = "include" }'];
 declare const CODEX_AGENT_RUNTIME_MANIFEST: AgentRuntimeManifest;
 interface CodexRuntimeOptions {
   readonly client: InteractiveCodexAppServerClient;
@@ -9064,6 +9650,10 @@ declare class CodexAgentRuntimeFactory implements AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
   constructor(options: CodexAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<CodexAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<CodexAgentRuntime>;
 }
@@ -9156,6 +9746,10 @@ declare class PiAgentRuntimeFactory implements AgentRuntimeFactory {
   readonly manifest: AgentRuntimeManifest;
   constructor(options?: PiAgentRuntimeFactoryOptions);
   probe(request: AgentRuntimeProbeRequest): Promise<AgentRuntimeProbeResult>;
+  getConfigurationOptions(request: AgentRuntimeConfigurationOptionsRequest): Promise<{
+    modelSuggestions: string[];
+    reasoningEffortAllowedValues: string[] | null;
+  }>;
   create(request: CreateAgentRuntimeRequest): Promise<PiAgentRuntime>;
   resume(request: ResumeAgentRuntimeRequest): Promise<PiAgentRuntime>;
 }
@@ -9343,6 +9937,8 @@ declare class ContextTreeManager {
   constructor(options: ContextTreeManagerOptions);
   /** Directory to prepend to a Session PATH so the packaged skills can invoke `context-tree`. */
   binDirectory(): string;
+  /** Explicit packaged assets for providers that disable automatic workspace skill discovery. */
+  skillPaths(): Promise<string[]>;
   /**
    * Resolve Context Tree for one Agent workspace, connecting it on first use.
    *
@@ -9887,7 +10483,7 @@ interface ProviderCliTurnPlanPrepareInput {
   /** Absolute Slack config leaf supplied by the trusted caller; Feishu must omit this. */
   readonly configDir?: string;
   readonly captureOutgoingReplies?: boolean;
-  /** Runtime proxy mode: absolute path of the current execution environment manifest. */
+  /** Absolute path of the current execution credential environment manifest. */
   readonly environmentManifest?: string;
   /** Runtime proxy mode: loopback HTTPS endpoint pinned through `--apihost` (Slack only). */
   readonly slackApiHost?: string;
@@ -9959,6 +10555,7 @@ interface ImCredentialGrantSubject {
   readonly sessionId: string;
 }
 interface PreparedImCredentialEnvironment {
+  readonly environmentManifest: string;
   readonly outboxContext?: RuntimeImOutboxContext;
   readonly path: string;
   readonly provider: "feishu" | "slack";
@@ -9991,6 +10588,7 @@ interface RuntimeProxyExecutionLayout {
 }
 interface RuntimeProxyEnvironmentInput {
   readonly adapterCaCertPath: string;
+  readonly executionId?: string;
   readonly cliMetadata: (provider: RuntimeProxyProvider) => RuntimeProxyCliMetadata | undefined;
   readonly connectProxyUrl: string;
   readonly handles: ReadonlyMap<RuntimeProxyProvider, string>;
@@ -10004,7 +10602,7 @@ interface RuntimeProxyEnvironmentInput {
  * GitHub target resolution stays with cwd, `-R`, and the canonical remote path.
  */
 declare function buildRuntimeProxyEnvironment(input: RuntimeProxyEnvironmentInput): RuntimeProxyEnvironment;
-declare function renderRuntimeProxyGitCredentialHelper(handle: string): string;
+declare function renderRuntimeProxyGitCredentialHelper(handle: string, privateHttp?: boolean): string;
 declare function renderRuntimeProxyShim(binary: string, environmentFilePath: string): string;
 /**
  * Per-Session proxy material store. The stable env file/manifest/shims point at the
@@ -10032,6 +10630,8 @@ declare class RuntimeProxyMaterialStore {
     readonly environment: RuntimeProxyEnvironment;
     readonly executionId: string;
     readonly handles: ReadonlyMap<RuntimeProxyProvider, string>;
+    readonly githubApiSocketPath?: string;
+    readonly githubGitSocketPath?: string;
     readonly platform: NodeJS.Platform;
     readonly sessionId: string;
   }): Promise<RuntimeProxyExecutionLayout>;
@@ -10093,9 +10693,11 @@ interface PreparedMcpGatewayLaunch {
   readonly token: string;
 }
 interface PreparedRuntimeCredentialEnvironment {
+  /** Local-only exact proxy socket for this execution. Cloud uses its mounted bridge. */
+  readonly allowedUnixSockets?: readonly string[];
   /** Present in proxy mode; exact-execution cleanup token. */
   readonly executionId?: string;
-  /** Proxy mode: execution environment manifest merged by the Turn launcher. */
+  /** Execution environment manifest merged by the Turn launcher. */
   readonly environmentManifest?: string;
   readonly outboxContext?: RuntimeImOutboxContext;
   readonly path: string;
@@ -10275,6 +10877,7 @@ declare class SessionBindingStore {
   #private;
   constructor(options: SessionBindingStoreOptions);
   read(agentId: string, sessionId: string): Promise<LocalSessionBinding | undefined>;
+  validatePreparation(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepare(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<SessionPreparationResult>;
   recordAccepted(request: DirectImMessageDeliveryRequest, inputHash: string, turnId: string): Promise<CustodyResult>;
   getSteerReceipt(request: RuntimeImSteerRequest, inputHash: string): Promise<RecordedSteerInput | undefined>;
@@ -10465,6 +11068,7 @@ interface SessionProtectedWorkSnapshot {
   }>;
 }
 interface RuntimePreparation {
+  validateSession?(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   verifyAgent?(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   requiresSessionPreparation?(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): boolean;
@@ -10520,7 +11124,7 @@ declare class SessionReconciler {
   claimRecovery(sessionId: string, turn: SessionTurnIdentity): boolean;
   reconcile(input: SessionReconcileRequest): Promise<SessionReconcileResult>;
   checkDelivery(input: DirectImMessageDeliveryRequest): InputRejectReason | undefined;
-  checkSessionMessageDelivery(input: SessionMessageDeliveryRequest): InputRejectReason | undefined;
+  checkSessionMessageDelivery(input: SessionMessageDeliveryRequestV3): InputRejectReason | undefined;
   withAgentLock<T>(agentId: string, task: () => Promise<T>): Promise<T>;
 }
 //#endregion
@@ -10533,6 +11137,7 @@ declare class AgentWorkspaceManager implements RuntimePreparation {
   #private;
   constructor(options: AgentWorkspaceManagerOptions);
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, _hashes: RuntimeSnapshotHashes): Promise<void>;
+  validateSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<SessionPreparationResult>;
   verifyAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   stopSession(_sessionId: string, _placementGeneration: number): Promise<void>;
@@ -10563,7 +11168,7 @@ interface SessionRuntimeManagerOptions {
   readonly bindingStore: SessionBindingStore;
   readonly cliCommand?: string;
   readonly cleanupProviderEnvironment?: (sessionId: string) => Promise<void>;
-  readonly contextTree?: Pick<ContextTreeManager, "ensureAgent">;
+  readonly contextTree?: Pick<ContextTreeManager, "ensureAgent" | "skillPaths">;
   /**
    * Optional. Materializes the Agent's enabled Skills before the provider starts; a failure only
    * changes what is on disk and never stops the runtime.
@@ -10601,6 +11206,7 @@ declare class SessionRuntimeManager implements RuntimePreparation, RuntimeLocalP
   constructor(options: SessionRuntimeManagerOptions);
   validate(snapshot: EffectiveRuntimeSnapshot): InputRejectReason | undefined;
   validateDelivery(snapshot: EffectiveRuntimeSnapshot): InputRejectReason | undefined;
+  validateSession(request: SessionReconcileRequest, hashes: RuntimeSnapshotHashes): Promise<void>;
   prepareAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   verifyAgent(snapshot: EffectiveRuntimeSnapshot, hashes: RuntimeSnapshotHashes): Promise<void>;
   requiresSessionPreparation(request: SessionReconcileRequest): boolean;
@@ -10669,6 +11275,10 @@ interface DeliveryDecision {
   onAcceptedSent?(): Promise<void> | void;
 }
 interface ClientRuntimeOptions {
+  handleApproval?(request: RuntimeApprovalDecision): Promise<RuntimeApprovalResult>;
+  slackAutoSetup?: {
+    run(request: SlackAutoSetupRuntimeRequest, signal?: AbortSignal): Promise<SlackAutoSetupRuntimeResult["result"]>;
+  };
   contextTreeSettings?: {
     run(frame: ContextTreeOperationFrame): Promise<ContextTreeOperationResponse>;
     close?(): void;
@@ -10676,8 +11286,10 @@ interface ClientRuntimeOptions {
   logger?: ClientLogger;
   handleDelivery?(request: DirectImMessageDeliveryRequest): Promise<DeliveryDecision> | DeliveryDecision;
   handleSteer?(request: RuntimeImSteerRequest): Promise<RuntimeImSteerResult> | RuntimeImSteerResult;
+  handleTurnActivityResult?(result: TurnActivityResult): void;
   handleTurnReportResult?(result: TurnReportResult): Promise<void> | void;
-  handleSessionMessageDelivery?(request: SessionMessageDeliveryRequest): Promise<SessionMessageDeliveryResult> | SessionMessageDeliveryResult;
+  handleSessionMessageDelivery?(request: SessionMessageDeliveryRequestV3): Promise<SessionMessageDeliveryResult> | SessionMessageDeliveryResult;
+  getRuntimeOptions?(frame: AgentRuntimeOptionsRequestFrame, signal: AbortSignal): Promise<AgentRuntimeOptions>;
   availabilityTester?: {
     run(request: AgentRuntimeTestRequestFrame, signal: AbortSignal): Promise<AgentRuntimeTestResultFrame> | AgentRuntimeTestResultFrame;
   };
@@ -10855,6 +11467,7 @@ interface AgentTurnRunnerOptions {
   readonly now?: () => number;
   readonly onRuntimeEvent?: (event: AgentRuntimeEvent) => Promise<void> | void;
   readonly reportOwner: TurnReportOwner;
+  /** @deprecated Attachments are read on demand through the provider CLI. Never called. */
   readonly resourceFetcher?: ImResourceFetcher;
   readonly runtimeManager: SessionRuntimeManager;
   readonly credentialEnvironment: Pick<RuntimeCredentialEnvironmentManager, "cleanup" | "prepare">;
@@ -10897,13 +11510,15 @@ interface TurnCompletion {
 declare class AgentTurnRunner {
   #private;
   constructor(options: AgentTurnRunnerOptions);
+  handleActivityResult(result: TurnActivityResult): void;
   get activeCount(): number;
   start(owner: LiveTurnOwner): void;
   steer(request: RuntimeImSteerRequest): Promise<RuntimeImSteerResult>;
+  respondToApproval(request: RuntimeApprovalDecision): Promise<RuntimeApprovalResult>;
   stop(): void;
   settled(): Promise<void>;
 }
-declare function buildAgentInput(request: DirectImMessageDeliveryRequest | RuntimeImSteerRequest, supplementalContext?: string, rootRuntime?: EffectiveRuntimeSnapshot): AgentInput;
+declare function buildAgentInput(request: DirectImMessageDeliveryRequest | RuntimeImSteerRequest, supplementalContext?: string, rootRuntime?: EffectiveRuntimeSnapshot, processedAt?: Date): AgentInput;
 //#endregion
 //#region src/runtime/protected-paths.d.ts
 type ReadLink = (path: string) => string;
@@ -11108,6 +11723,13 @@ interface SessionMessageInboxOptions {
   retryPolicy?: Partial<RuntimeRetryPolicy>;
   scheduler?: RuntimeRetryScheduler;
   timeoutScheduler?: RuntimeRetryScheduler;
+  /**
+   * The negotiated `runtime.sessionCollaboration` version. A scheduled-origin delivery is only
+   * legal on a v3 channel; anything else is refused at the wire boundary instead of being
+   * silently executed or silently dropped. Already-accepted durable records are unaffected —
+   * recovery never re-checks the negotiation.
+   */
+  sessionCollaborationVersion(): number | undefined;
   reconciler: Pick<SessionReconciler, "checkSessionMessageDelivery" | "clearActivity" | "setActivity" | "withAgentLock">;
   runtimeManager: Pick<SessionRuntimeManager, "ensureRuntime" | "sessionKind">;
 }
@@ -11115,9 +11737,9 @@ declare class SessionMessageInbox {
   #private;
   constructor(options: SessionMessageInboxOptions);
   ready(): Promise<void>;
-  getState(messageId: string): DurableWorkRecord<SessionMessageDeliveryRequest> | undefined;
+  getState(messageId: string): DurableWorkRecord<SessionMessageDeliveryRequestV3> | undefined;
   metricsSnapshot(): ReturnType<RuntimeDurabilityMetrics["snapshot"]> | undefined;
-  accept(input: SessionMessageDeliveryRequest): Promise<SessionMessageDeliveryResult>;
+  accept(input: SessionMessageDeliveryRequestV3): Promise<SessionMessageDeliveryResult>;
   stop(): void;
   /** Accepted Session messages still waiting in an in-memory delivery queue. */
   get queuedCount(): number;
@@ -11134,7 +11756,18 @@ type SessionMessageTurnContext = {
   readonly outboxContext: RuntimeImOutboxContext;
   readonly sessionKind: "visible";
 };
-declare function buildSessionMessageInput(request: SessionMessageDeliveryRequest, cliCommand?: string, turnContext?: SessionMessageTurnContext): AgentInput;
+/**
+ * Assemble the Agent input for one Session message at the moment processing actually begins.
+ *
+ * `processedAt` is the processing clock sample taken by the caller after `waitForIdle()`; every
+ * branch exposes it as trustworthy UTC without guessing a local timezone. A scheduled message
+ * additionally gains a distinct managed metadata item (schedule name, scheduled/sent/processing
+ * times in UTC and the schedule's IANA timezone, message id, detail link, and the normalized
+ * <=120 code-point preview) plus the single best-effort start-notification instruction. The full
+ * prompt always stays its own trailing user-task item, and untrusted name/preview text enters the
+ * managed block only JSON-escaped, so it can never close a managed tag or forge instructions.
+ */
+declare function buildSessionMessageInput(request: SessionMessageDeliveryRequestV3, cliCommand?: string, turnContext?: SessionMessageTurnContext, processedAt?: Date): AgentInput;
 //#endregion
 //#region src/runtime/client-runtime-composition.d.ts
 /**
@@ -11208,6 +11841,8 @@ interface CreateClientRuntimeOptions {
   readonly piCommand?: string;
   readonly piHome?: string;
   readonly cliCommand?: string;
+  /** Authoritative packaged CLI entry for the Slack deployment hook; absent embeddings use manual setup. */
+  readonly slackAutoSetupCliEntry?: string;
   readonly environment?: NodeJS.ProcessEnv;
   readonly factory?: AgentRuntimeFactory;
   readonly factories?: readonly AgentRuntimeFactory[];
@@ -11381,15 +12016,49 @@ interface LocalComputerConfigurationInspection {
 declare function inspectLocalComputerConfiguration(home: string): Promise<LocalComputerConfigurationInspection>;
 //#endregion
 //#region src/runtime/managed-instructions.d.ts
+type ManagedEnvironment = "local" | "cloud";
+/**
+ * Both runtime tree statuses are structurally assignable to this prompt context.
+ */
+type ManagedContextTreeStatus = {
+  status: "configured";
+  connections: readonly ManagedContextTreeResult[];
+} | {
+  status: "ready";
+  treePath: string;
+  branch?: string;
+  sha?: string;
+} | {
+  status: "stale";
+  treePath: string;
+  reason: string;
+} | {
+  status: "unconfigured";
+} | {
+  status: "unavailable";
+  reason: string;
+};
+type ManagedContextTreeResult = ContextTreeConnection & Exclude<ManagedContextTreeStatus, {
+  status: "configured";
+} | {
+  status: "unconfigured";
+}>;
+/** Runtime facts supplied by either the Local manager or the Cloud worker. */
 interface ManagedSessionContext {
+  environment: ManagedEnvironment;
   sessionId: string;
   sessionKind: "visible" | "internal";
+  /** The Session that created this one; omitted entirely when the caller does not carry one. */
   creatorSessionId?: string;
   cliCommand: string;
+  /** True only with real Session-CLI proof material behind the commands. */
   sessionCliAvailable: boolean;
-  contextTree?: ContextTreeStatus;
+  selfConfigurationEnabled: boolean;
+  contextTree?: ManagedContextTreeStatus;
+  /** Local only: the Agent's persistent Home on this Computer. */
   agentHome?: string;
 }
+/** One template for both runtimes; only environment facts use Local/Cloud branches. */
 declare function renderManagedSystemPrompt(snapshot: EffectiveRuntimeSnapshot, context?: ManagedSessionContext): string;
 //#endregion
 //#region src/runtime/provider-cli/probe.d.ts
@@ -11945,11 +12614,13 @@ interface UpdaterAttempt {
   failureReason?: string;
 }
 type UpdaterStateName = "idle" | "awaiting_protected_work" | "installing" | "blocked" | "installed";
+type UpdaterRecoveryStatus = "upgrade_required" | "authentication_repair" | "retryable_connectivity";
 /** Persisted updater status, also the source for `daemon status` update reporting. */
 interface UpdaterStateSnapshot {
   schemaVersion: 1;
   currentVersion: string;
   state: UpdaterStateName;
+  recoveryStatus?: UpdaterRecoveryStatus;
   target?: string;
   lastAttempt?: UpdaterAttempt;
   attempts: Record<string, UpdaterAttempt>;
@@ -11985,6 +12656,11 @@ interface UpdateManagerOptions {
   saveState(state: UpdaterStateSnapshot): Promise<void>;
   /** Protected-work re-check cadence. This is a poll interval, never a force timeout. */
   checkIntervalMs?: number;
+  /** Read the configured release channel without relying on a runtime heartbeat. */
+  discoverTarget?: () => Promise<RuntimeChannelTarget | undefined>;
+  /** Successful release discovery cadence. Failed reads use bounded exponential backoff. */
+  discoveryIntervalMs?: number;
+  discoveryMaxBackoffMs?: number;
   now?: () => number;
   sleep?: (milliseconds: number) => Promise<void>;
 }
@@ -12009,6 +12685,14 @@ declare class UpdateManager {
   syncRunningVersion(): Promise<void>;
   /** Record a Server-advertised channel target. Cheap and safe to call on every heartbeat. */
   observe(advertisement: RuntimeChannelTarget): void;
+  /** Start the single heartbeat-independent release discovery loop. */
+  startDiscovery(): void;
+  /** Trigger one coalesced metadata read, for example after a capability rejection. */
+  discoverNow(): Promise<void>;
+  /** Keep the discovery loop referenced while the daemon waits for recovery. */
+  holdRecoveryAlive(): () => void;
+  /** Persist a local recovery diagnosis without changing the install-attempt state machine. */
+  recordRecoveryStatus(status: UpdaterRecoveryStatus | undefined): Promise<void>;
   stop(): void;
 }
 //#endregion
@@ -12108,6 +12792,36 @@ interface ReadBundleBodyOptions {
 }
 declare function readBundleBody(response: Response, options: ReadBundleBodyOptions): Promise<Uint8Array>;
 //#endregion
+//#region src/slack-management.d.ts
+declare function slackManagementHome(environment?: NodeJS.ProcessEnv): string;
+declare function slackManagementEnvironment(environment: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+declare function runSlackManagement(args: string[], options?: {
+  outputFile?: string;
+  projectDir?: string;
+  team?: string;
+  environment?: NodeJS.ProcessEnv;
+  binary?: string;
+  accountHome?: string;
+  signal?: AbortSignal;
+  errorFile?: string;
+  nonInteractive?: boolean;
+  requestAppApproval?: boolean;
+}): Promise<number>;
+/** Prepare only the callback update from a successful CLI result and the current remote manifest. */
+declare function prepareSlackCallbackUpdate(options: {
+  manifestFile: string;
+  provisionResultFile: string;
+  outputFile: string;
+  environment?: NodeJS.ProcessEnv;
+}): Promise<void>;
+/** Called only by the official deploy hook; writes the complete material without logging it. */
+declare function captureSlackDeploy(options: {
+  createResponseFile: string;
+  outputFile: string;
+  environment?: NodeJS.ProcessEnv;
+  fetchImpl?: typeof fetch;
+}): Promise<void>;
+//#endregion
 //#region src/storage/context-tree-home.d.ts
 /** Account storage shared with the standalone Context Tree CLI, independent of OPENTAG_HOME. */
 declare function resolveContextTreeHome(environment?: NodeJS.ProcessEnv): {