sessionpipe-core 0.9.0 → 0.11.0

package/dist/schema/v1.d.ts

@@ -2,7 +2,7 @@ import { z } from "zod";
 export declare const PROTOCOL = 1;
 /** Dotted, lowercase. Unknown types MUST be accepted and stored. */
 export declare const EventType: z.ZodString;
-export declare const KNOWN_TYPES: readonly ["session.started", "session.heartbeat", "session.ended", "session.backfill", "session.forgotten", "turn.started", "turn.ended", "turn.transcript", "turn.progress", "tool.started", "tool.ended", "files.changed", "attention.needed", "attention.cleared", "subagent.started", "subagent.ended", "context.compacted", "native"];
+export declare const KNOWN_TYPES: readonly ["session.started", "session.heartbeat", "session.ended", "session.backfill", "session.forgotten", "turn.started", "turn.ended", "turn.transcript", "turn.progress", "tool.started", "tool.ended", "files.changed", "attention.needed", "attention.cleared", "subagent.started", "subagent.ended", "context.compacted", "limits.observed", "native"];
 /** The lowest tier that carries each known type. */
 export declare const TYPE_TIER: Record<(typeof KNOWN_TYPES)[number], 0 | 1 | 2 | 3>;
 export declare const HARNESS_NAMES: readonly ["claude-code", "codex", "gemini-cli", "antigravity", "devin", "cursor", "copilot-cli", "droid", "kiro", "opencode"];
@@ -32,7 +32,9 @@ export declare const Session: z.ZodObject<{
     }>>;
     url: z.ZodOptional<z.ZodURL>;
     account_id: z.ZodOptional<z.ZodString>;
+    attended: z.ZodOptional<z.ZodBoolean>;
     parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    launched_by: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export declare const Privacy: z.ZodObject<{
     rulesets: z.ZodArray<z.ZodString>;
@@ -65,7 +67,9 @@ export declare const Event: z.ZodObject<{
         }>>;
         url: z.ZodOptional<z.ZodURL>;
         account_id: z.ZodOptional<z.ZodString>;
+        attended: z.ZodOptional<z.ZodBoolean>;
         parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        launched_by: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>;
     privacy: z.ZodObject<{
         rulesets: z.ZodArray<z.ZodString>;
@@ -80,6 +84,14 @@ export declare const AttentionKind: z.ZodEnum<{
     permission: "permission";
     question: "question";
 }>;
+/** One usage window of an account: `id` is the harness's own name for it (`five_hour`,
+ *  `seven_day`, `primary` …); `used_percent` passes 100 once a spend limit is exceeded. */
+export declare const LimitWindow: z.ZodObject<{
+    id: z.ZodString;
+    used_percent: z.ZodNumber;
+    resets_at: z.ZodOptional<z.ZodISODateTime>;
+    window_minutes: z.ZodOptional<z.ZodInt>;
+}, z.core.$loose>;
 export declare const EventData: z.ZodObject<{
     "session.started": z.ZodObject<{
         source: z.ZodEnum<{
@@ -109,6 +121,8 @@ export declare const EventData: z.ZodObject<{
     "turn.started": z.ZodObject<{
         turn_id: z.ZodOptional<z.ZodString>;
         prompt_chars: z.ZodOptional<z.ZodInt>;
+        submitted_by: z.ZodOptional<z.ZodString>;
+        injected: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$loose>;
     "turn.ended": z.ZodObject<{
         turn_id: z.ZodOptional<z.ZodString>;
@@ -119,6 +133,7 @@ export declare const EventData: z.ZodObject<{
         }>;
         error: z.ZodOptional<z.ZodString>;
         ms: z.ZodOptional<z.ZodInt>;
+        background: z.ZodOptional<z.ZodInt>;
     }, z.core.$loose>;
     "turn.transcript": z.ZodObject<{
         turn: z.ZodInt;
@@ -188,6 +203,16 @@ export declare const EventData: z.ZodObject<{
             manual: "manual";
         }>;
     }, z.core.$loose>;
+    "limits.observed": z.ZodObject<{
+        windows: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            used_percent: z.ZodNumber;
+            resets_at: z.ZodOptional<z.ZodISODateTime>;
+            window_minutes: z.ZodOptional<z.ZodInt>;
+        }, z.core.$loose>>;
+        plan: z.ZodOptional<z.ZodString>;
+        account_id: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
     native: z.ZodObject<{}, z.core.$loose>;
 }, z.core.$strip>;
 export declare const Batch: z.ZodObject<{
@@ -218,7 +243,9 @@ export declare const Batch: z.ZodObject<{
             }>>;
             url: z.ZodOptional<z.ZodURL>;
             account_id: z.ZodOptional<z.ZodString>;
+            attended: z.ZodOptional<z.ZodBoolean>;
             parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            launched_by: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         privacy: z.ZodObject<{
             rulesets: z.ZodArray<z.ZodString>;
@@ -255,9 +282,30 @@ export declare const ControlKind: z.ZodEnum<{
     cancel: "cancel";
     "key.add": "key.add";
     "permission.answer": "permission.answer";
+    pool: "pool";
     prompt: "prompt";
     start: "start";
 }>;
+/** What a `pool` command asks of the machine's account pool (CONTROL.md §6 `pool`). */
+export declare const PoolAction: z.ZodEnum<{
+    disable: "disable";
+    enable: "enable";
+    "login.begin": "login.begin";
+    "login.complete": "login.complete";
+    off: "off";
+    on: "on";
+    order: "order";
+    refresh: "refresh";
+    remove: "remove";
+}>;
+/** A pooled account's id: what `session.account_id` and `limits.observed.account_id`
+ *  carry for it (Claude Code: the account UUID), or a pending sign-in's id. */
+export declare const PoolAccountId: z.ZodString;
+/** The kinds of key a machine or a receiver handles (CONTROL.md §2). Absent: passkeys only. */
+export declare const KeyTypes: z.ZodArray<z.ZodEnum<{
+    device: "device";
+    passkey: "passkey";
+}>>;
 export declare const DeliveryMode: z.ZodEnum<{
     api: "api";
     fork: "fork";
@@ -266,6 +314,26 @@ export declare const DeliveryMode: z.ZodEnum<{
     turn: "turn";
     waiter: "waiter";
 }>;
+/** How much a started session may do without anyone approving it (CONTROL.md §3.1),
+ *  narrowest first. Closed: nothing is wider than `auto`. */
+export declare const StartPermission: z.ZodEnum<{
+    auto: "auto";
+    edits: "edits";
+    read: "read";
+    safe: "safe";
+}>;
+/** What a start ran with, or gets by default: a level, or `inherit` (no permission flag,
+ *  the harness's own default) on a machine the person put in inherit mode. Never a
+ *  command's `permission`. */
+export declare const RunLevel: z.ZodEnum<{
+    auto: "auto";
+    edits: "edits";
+    inherit: "inherit";
+    read: "read";
+    safe: "safe";
+}>;
+/** A model id as the harness names it, passed as one argument: never a leading dash. */
+export declare const ModelId: z.ZodString;
 /** A file attached to a `start` (CONTROL.md §3.1). The bytes wait on the receiver
  *  (`GET {control}/files/{sha256}`); the signed hash is what the machine checks.
  *  Beyond this shape the verifier also checks: the name's length after NFC, names
@@ -286,6 +354,7 @@ export declare const ControlCommand: z.ZodObject<{
         cancel: "cancel";
         "key.add": "key.add";
         "permission.answer": "permission.answer";
+        pool: "pool";
         prompt: "prompt";
         start: "start";
     }>;
@@ -298,11 +367,18 @@ export declare const ControlCommand: z.ZodObject<{
     }>>;
     note: z.ZodOptional<z.ZodString>;
     cwd: z.ZodOptional<z.ZodString>;
-    key: z.ZodOptional<z.ZodObject<{
+    key: z.ZodOptional<z.ZodLazy<z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>>>;
     name: z.ZodOptional<z.ZodString>;
     files: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -310,6 +386,27 @@ export declare const ControlCommand: z.ZodObject<{
         size: z.ZodInt;
         sha256: z.ZodString;
     }, z.core.$strip>>>;
+    permission: z.ZodOptional<z.ZodEnum<{
+        auto: "auto";
+        edits: "edits";
+        read: "read";
+        safe: "safe";
+    }>>;
+    model: z.ZodOptional<z.ZodString>;
+    pool_action: z.ZodOptional<z.ZodEnum<{
+        disable: "disable";
+        enable: "enable";
+        "login.begin": "login.begin";
+        "login.complete": "login.complete";
+        off: "off";
+        on: "on";
+        order: "order";
+        refresh: "refresh";
+        remove: "remove";
+    }>>;
+    pool_account: z.ZodOptional<z.ZodString>;
+    pool_order: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    pool_code: z.ZodOptional<z.ZodString>;
     nonce: z.ZodString;
     iat: z.ZodInt;
 }, z.core.$strip>;
@@ -329,30 +426,55 @@ export declare const ControlAssertion: z.ZodObject<{
     cd: z.ZodString;
     sig: z.ZodString;
 }, z.core.$strip>;
-/** A key enrolled on a machine: a passkey's credential id, COSE alg, SPKI. */
-export declare const ControlKey: z.ZodObject<{
+/** A device key's signature (CONTROL.md §3.2): its id and 64 bytes r‖s over
+ *  `sessionpipe.device.v1⏎<purpose>⏎<rp id>⏎<challenge>`. Nothing else. The shape
+ *  only, like an assertion's: the machine reads the key from its own record and checks
+ *  the rest (a 43-character id, exactly 64 bytes), so a carrier never decides a kind. */
+export declare const ControlDeviceSignature: z.ZodObject<{
+    cred: z.ZodString;
+    sig: z.ZodString;
+}, z.core.$strict>;
+/** A key enrolled on a machine, closed: a passkey (credential id, COSE alg, SPKI), or a
+ *  device key an app holds in hardware (CONTROL.md §2 "Device keys"), which names
+ *  itself by its SPKI's SHA-256 and says how it is held. A machine refuses any other
+ *  field or value, so a kind added later is refused by every machine that predates it. */
+export declare const ControlKey: z.ZodXor<readonly [z.ZodObject<{
     id: z.ZodString;
     alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
     spki: z.ZodString;
-}, z.core.$strip>;
+}, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    alg: z.ZodLiteral<-7>;
+    spki: z.ZodString;
+    type: z.ZodLiteral<"device">;
+    store: z.ZodLiteral<"hardware">;
+    uv: z.ZodLiteral<"each-use">;
+}, z.core.$strict>]>;
 /** One message as a receiver carries it: its own envelope around the signed bytes. */
 export declare const ControlMessage: z.ZodObject<{
     id: z.ZodString;
     cmd: z.ZodString;
     csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
         str: z.ZodString;
-    }, z.core.$strip>>>;
-    confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+        str: z.ZodString;
+    }, z.core.$strict>]>>>;
+    confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
-    }, z.core.$strip>>>;
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>]>>>;
     at: z.ZodISODateTime;
     expires_at: z.ZodISODateTime;
 }, z.core.$strip>;
@@ -361,19 +483,26 @@ export declare const ControlPoll: z.ZodObject<{
         id: z.ZodString;
         cmd: z.ZodString;
         csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
             str: z.ZodString;
-        }, z.core.$strip>>>;
-        confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+            str: z.ZodString;
+        }, z.core.$strict>]>>>;
+        confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>>;
         at: z.ZodISODateTime;
         expires_at: z.ZodISODateTime;
     }, z.core.$strip>>;
@@ -417,6 +546,16 @@ export declare const ControlAck: z.ZodObject<{
         detail: z.ZodOptional<z.ZodString>;
         reply: z.ZodOptional<z.ZodString>;
         seq: z.ZodOptional<z.ZodInt>;
+        applied: z.ZodOptional<z.ZodObject<{
+            permission: z.ZodOptional<z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                inherit: "inherit";
+                read: "read";
+                safe: "safe";
+            }>>;
+            model: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** A harness account signed in on the machine: the id `session.account_id` carries,
@@ -426,6 +565,7 @@ export declare const HarnessAccount: z.ZodObject<{
     harness: z.ZodString;
     id: z.ZodString;
     email: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 /** `POST {control}/pair`, sent with the person's sink token from their own terminal —
  *  or, where the receiver declares `control.open_pairing`, with no token and a
@@ -447,14 +587,20 @@ export declare const ControlPairStart: z.ZodObject<{
     folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
     mode: z.ZodOptional<z.ZodEnum<{
         auto: "auto";
+        inherit: "inherit";
         safe: "safe";
     }>>;
     accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         harness: z.ZodString;
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     files: z.ZodOptional<z.ZodBoolean>;
+    key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        device: "device";
+        passkey: "passkey";
+    }>>>;
 }, z.core.$strip>;
 /** The receiver's answer: where the person confirms, and the digits both screens show. */
 export declare const ControlPairStarted: z.ZodObject<{
@@ -472,21 +618,83 @@ export declare const ControlPaired: z.ZodObject<{
         paired: "paired";
         pending: "pending";
     }>;
-    key: z.ZodOptional<z.ZodObject<{
+    key: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>>;
-    proof: z.ZodOptional<z.ZodObject<{
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>>;
+    proof: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
         cred: z.ZodString;
         ad: z.ZodString;
         cd: z.ZodString;
         sig: z.ZodString;
-    }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        cred: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>]>>;
     token: z.ZodOptional<z.ZodString>;
     sink_token: z.ZodOptional<z.ZodString>;
     account: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
+/** One account in the machine's pool, as its hello lists it (CONTROL.md §2 `pool`).
+ *  `id` is the string `session.account_id` and `limits.observed.account_id` carry, so
+ *  a receiver joins the three without a map. The email travels only here. */
+export declare const PoolAccount: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodOptional<z.ZodString>;
+    label: z.ZodOptional<z.ZodString>;
+    enabled: z.ZodBoolean;
+    status: z.ZodEnum<{
+        disabled: "disabled";
+        error: "error";
+        limited: "limited";
+        ready: "ready";
+    }>;
+    current: z.ZodOptional<z.ZodBoolean>;
+    until: z.ZodOptional<z.ZodISODateTime>;
+    windows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        used_percent: z.ZodNumber;
+        resets_at: z.ZodOptional<z.ZodISODateTime>;
+        window_minutes: z.ZodOptional<z.ZodInt>;
+    }, z.core.$loose>>>;
+    limited_by: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/** The machine's account pool (CONTROL.md §2 `pool`): present in EVERY hello of a daemon
+ *  that knows the pool (`on: false`, `accounts: []` when nothing is set up), so a
+ *  receiver tells "no pool" from "an old daemon"; `accounts` in the machine's order. */
+export declare const ControlHelloPool: z.ZodObject<{
+    on: z.ZodBoolean;
+    harness: z.ZodString;
+    accounts: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        label: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodBoolean;
+        status: z.ZodEnum<{
+            disabled: "disabled";
+            error: "error";
+            limited: "limited";
+            ready: "ready";
+        }>;
+        current: z.ZodOptional<z.ZodBoolean>;
+        until: z.ZodOptional<z.ZodISODateTime>;
+        windows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            used_percent: z.ZodNumber;
+            resets_at: z.ZodOptional<z.ZodISODateTime>;
+            window_minutes: z.ZodOptional<z.ZodInt>;
+        }, z.core.$loose>>>;
+        limited_by: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 /** `POST {control}/hello`: what the machine can do right now. */
 export declare const ControlHello: z.ZodObject<{
     name: z.ZodString;
@@ -505,14 +713,63 @@ export declare const ControlHello: z.ZodObject<{
     folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
     mode: z.ZodOptional<z.ZodEnum<{
         auto: "auto";
+        inherit: "inherit";
         safe: "safe";
     }>>;
     accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
         harness: z.ZodString;
         id: z.ZodString;
         email: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     files: z.ZodOptional<z.ZodBoolean>;
+    prompt_files: z.ZodOptional<z.ZodBoolean>;
+    start: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        permissions: z.ZodArray<z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            read: "read";
+            safe: "safe";
+        }>>;
+        permission: z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            inherit: "inherit";
+            read: "read";
+            safe: "safe";
+        }>;
+        models: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        any_model: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        device: "device";
+        passkey: "passkey";
+    }>>>;
+    pool: z.ZodOptional<z.ZodObject<{
+        on: z.ZodBoolean;
+        harness: z.ZodString;
+        accounts: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            email: z.ZodOptional<z.ZodString>;
+            label: z.ZodOptional<z.ZodString>;
+            enabled: z.ZodBoolean;
+            status: z.ZodEnum<{
+                disabled: "disabled";
+                error: "error";
+                limited: "limited";
+                ready: "ready";
+            }>;
+            current: z.ZodOptional<z.ZodBoolean>;
+            until: z.ZodOptional<z.ZodISODateTime>;
+            windows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                used_percent: z.ZodNumber;
+                resets_at: z.ZodOptional<z.ZodISODateTime>;
+                window_minutes: z.ZodOptional<z.ZodInt>;
+            }, z.core.$loose>>>;
+            limited_by: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export declare const WellKnown: z.ZodObject<{
     protocol: z.ZodArray<z.ZodInt>;
@@ -537,8 +794,13 @@ export declare const WellKnown: z.ZodObject<{
         signing: z.ZodObject<{
             rp_id: z.ZodString;
             algs: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>>;
+            key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                device: "device";
+                passkey: "passkey";
+            }>>>;
         }, z.core.$strip>;
         files: z.ZodOptional<z.ZodBoolean>;
+        inherit: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
 }, z.core.$strip>;
 /** What `npm run schemas` writes to schemas/v1/<name>.json. */
@@ -570,7 +832,9 @@ export declare const SCHEMAS: {
             }>>;
             url: z.ZodOptional<z.ZodURL>;
             account_id: z.ZodOptional<z.ZodString>;
+            attended: z.ZodOptional<z.ZodBoolean>;
             parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            launched_by: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>;
         privacy: z.ZodObject<{
             rulesets: z.ZodArray<z.ZodString>;
@@ -607,6 +871,8 @@ export declare const SCHEMAS: {
         "turn.started": z.ZodObject<{
             turn_id: z.ZodOptional<z.ZodString>;
             prompt_chars: z.ZodOptional<z.ZodInt>;
+            submitted_by: z.ZodOptional<z.ZodString>;
+            injected: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$loose>;
         "turn.ended": z.ZodObject<{
             turn_id: z.ZodOptional<z.ZodString>;
@@ -617,6 +883,7 @@ export declare const SCHEMAS: {
             }>;
             error: z.ZodOptional<z.ZodString>;
             ms: z.ZodOptional<z.ZodInt>;
+            background: z.ZodOptional<z.ZodInt>;
         }, z.core.$loose>;
         "turn.transcript": z.ZodObject<{
             turn: z.ZodInt;
@@ -686,6 +953,16 @@ export declare const SCHEMAS: {
                 manual: "manual";
             }>;
         }, z.core.$loose>;
+        "limits.observed": z.ZodObject<{
+            windows: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                used_percent: z.ZodNumber;
+                resets_at: z.ZodOptional<z.ZodISODateTime>;
+                window_minutes: z.ZodOptional<z.ZodInt>;
+            }, z.core.$loose>>;
+            plan: z.ZodOptional<z.ZodString>;
+            account_id: z.ZodOptional<z.ZodString>;
+        }, z.core.$loose>;
         native: z.ZodObject<{}, z.core.$loose>;
     }, z.core.$strip>;
     readonly batch: z.ZodObject<{
@@ -716,7 +993,9 @@ export declare const SCHEMAS: {
                 }>>;
                 url: z.ZodOptional<z.ZodURL>;
                 account_id: z.ZodOptional<z.ZodString>;
+                attended: z.ZodOptional<z.ZodBoolean>;
                 parent_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                launched_by: z.ZodOptional<z.ZodString>;
             }, z.core.$strip>;
             privacy: z.ZodObject<{
                 rulesets: z.ZodArray<z.ZodString>;
@@ -762,27 +1041,39 @@ export declare const SCHEMAS: {
             signing: z.ZodObject<{
                 rp_id: z.ZodString;
                 algs: z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>>;
+                key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    device: "device";
+                    passkey: "passkey";
+                }>>>;
             }, z.core.$strip>;
             files: z.ZodOptional<z.ZodBoolean>;
+            inherit: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     readonly control: z.ZodObject<{
         id: z.ZodString;
         cmd: z.ZodString;
         csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-        grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
             str: z.ZodString;
-        }, z.core.$strip>>>;
-        confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+            str: z.ZodString;
+        }, z.core.$strict>]>>>;
+        confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>>;
         at: z.ZodISODateTime;
         expires_at: z.ZodISODateTime;
     }, z.core.$strip>;
@@ -794,6 +1085,7 @@ export declare const SCHEMAS: {
             cancel: "cancel";
             "key.add": "key.add";
             "permission.answer": "permission.answer";
+            pool: "pool";
             prompt: "prompt";
             start: "start";
         }>;
@@ -806,11 +1098,18 @@ export declare const SCHEMAS: {
         }>>;
         note: z.ZodOptional<z.ZodString>;
         cwd: z.ZodOptional<z.ZodString>;
-        key: z.ZodOptional<z.ZodObject<{
+        key: z.ZodOptional<z.ZodLazy<z.ZodXor<readonly [z.ZodObject<{
             id: z.ZodString;
             alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
             spki: z.ZodString;
-        }, z.core.$strip>>;
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            alg: z.ZodLiteral<-7>;
+            spki: z.ZodString;
+            type: z.ZodLiteral<"device">;
+            store: z.ZodLiteral<"hardware">;
+            uv: z.ZodLiteral<"each-use">;
+        }, z.core.$strict>]>>>;
         name: z.ZodOptional<z.ZodString>;
         files: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
@@ -818,6 +1117,27 @@ export declare const SCHEMAS: {
             size: z.ZodInt;
             sha256: z.ZodString;
         }, z.core.$strip>>>;
+        permission: z.ZodOptional<z.ZodEnum<{
+            auto: "auto";
+            edits: "edits";
+            read: "read";
+            safe: "safe";
+        }>>;
+        model: z.ZodOptional<z.ZodString>;
+        pool_action: z.ZodOptional<z.ZodEnum<{
+            disable: "disable";
+            enable: "enable";
+            "login.begin": "login.begin";
+            "login.complete": "login.complete";
+            off: "off";
+            on: "on";
+            order: "order";
+            refresh: "refresh";
+            remove: "remove";
+        }>>;
+        pool_account: z.ZodOptional<z.ZodString>;
+        pool_order: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        pool_code: z.ZodOptional<z.ZodString>;
         nonce: z.ZodString;
         iat: z.ZodInt;
     }, z.core.$strip>;
@@ -829,29 +1149,43 @@ export declare const SCHEMAS: {
         exp: z.ZodInt;
         rp: z.ZodString;
     }, z.core.$strip>;
-    readonly "control-key": z.ZodObject<{
+    readonly "control-key": z.ZodXor<readonly [z.ZodObject<{
         id: z.ZodString;
         alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
         spki: z.ZodString;
-    }, z.core.$strip>;
+    }, z.core.$strict>, z.ZodObject<{
+        id: z.ZodString;
+        alg: z.ZodLiteral<-7>;
+        spki: z.ZodString;
+        type: z.ZodLiteral<"device">;
+        store: z.ZodLiteral<"hardware">;
+        uv: z.ZodLiteral<"each-use">;
+    }, z.core.$strict>]>;
     readonly "control-poll": z.ZodObject<{
         messages: z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             cmd: z.ZodString;
             csig: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-            grant: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            grant: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
                 cred: z.ZodString;
                 ad: z.ZodString;
                 cd: z.ZodString;
                 sig: z.ZodString;
                 str: z.ZodString;
-            }, z.core.$strip>>>;
-            confirm: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+            }, z.core.$strip>, z.ZodObject<{
+                cred: z.ZodString;
+                sig: z.ZodString;
+                str: z.ZodString;
+            }, z.core.$strict>]>>>;
+            confirm: z.ZodOptional<z.ZodNullable<z.ZodXor<readonly [z.ZodObject<{
                 cred: z.ZodString;
                 ad: z.ZodString;
                 cd: z.ZodString;
                 sig: z.ZodString;
-            }, z.core.$strip>>>;
+            }, z.core.$strip>, z.ZodObject<{
+                cred: z.ZodString;
+                sig: z.ZodString;
+            }, z.core.$strict>]>>>;
             at: z.ZodISODateTime;
             expires_at: z.ZodISODateTime;
         }, z.core.$strip>>;
@@ -882,6 +1216,16 @@ export declare const SCHEMAS: {
             detail: z.ZodOptional<z.ZodString>;
             reply: z.ZodOptional<z.ZodString>;
             seq: z.ZodOptional<z.ZodInt>;
+            applied: z.ZodOptional<z.ZodObject<{
+                permission: z.ZodOptional<z.ZodEnum<{
+                    auto: "auto";
+                    edits: "edits";
+                    inherit: "inherit";
+                    read: "read";
+                    safe: "safe";
+                }>>;
+                model: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
         }, z.core.$strip>>;
     }, z.core.$strip>;
     readonly "control-pair": z.ZodObject<{
@@ -901,14 +1245,20 @@ export declare const SCHEMAS: {
         folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
         mode: z.ZodOptional<z.ZodEnum<{
             auto: "auto";
+            inherit: "inherit";
             safe: "safe";
         }>>;
         accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
             harness: z.ZodString;
             id: z.ZodString;
             email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
         files: z.ZodOptional<z.ZodBoolean>;
+        key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            device: "device";
+            passkey: "passkey";
+        }>>>;
     }, z.core.$strip>;
     readonly "control-pair-started": z.ZodObject<{
         machine: z.ZodString;
@@ -923,17 +1273,27 @@ export declare const SCHEMAS: {
             paired: "paired";
             pending: "pending";
         }>;
-        key: z.ZodOptional<z.ZodObject<{
+        key: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
             id: z.ZodString;
             alg: z.ZodUnion<readonly [z.ZodLiteral<-7>, z.ZodLiteral<-257>]>;
             spki: z.ZodString;
-        }, z.core.$strip>>;
-        proof: z.ZodOptional<z.ZodObject<{
+        }, z.core.$strict>, z.ZodObject<{
+            id: z.ZodString;
+            alg: z.ZodLiteral<-7>;
+            spki: z.ZodString;
+            type: z.ZodLiteral<"device">;
+            store: z.ZodLiteral<"hardware">;
+            uv: z.ZodLiteral<"each-use">;
+        }, z.core.$strict>]>>;
+        proof: z.ZodOptional<z.ZodXor<readonly [z.ZodObject<{
             cred: z.ZodString;
             ad: z.ZodString;
             cd: z.ZodString;
             sig: z.ZodString;
-        }, z.core.$strip>>;
+        }, z.core.$strip>, z.ZodObject<{
+            cred: z.ZodString;
+            sig: z.ZodString;
+        }, z.core.$strict>]>>;
         token: z.ZodOptional<z.ZodString>;
         sink_token: z.ZodOptional<z.ZodString>;
         account: z.ZodOptional<z.ZodString>;
@@ -955,14 +1315,63 @@ export declare const SCHEMAS: {
         folders: z.ZodOptional<z.ZodArray<z.ZodString>>;
         mode: z.ZodOptional<z.ZodEnum<{
             auto: "auto";
+            inherit: "inherit";
             safe: "safe";
         }>>;
         accounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
             harness: z.ZodString;
             id: z.ZodString;
             email: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
         }, z.core.$strip>>>;
         files: z.ZodOptional<z.ZodBoolean>;
+        prompt_files: z.ZodOptional<z.ZodBoolean>;
+        start: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            permissions: z.ZodArray<z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                read: "read";
+                safe: "safe";
+            }>>;
+            permission: z.ZodEnum<{
+                auto: "auto";
+                edits: "edits";
+                inherit: "inherit";
+                read: "read";
+                safe: "safe";
+            }>;
+            models: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            any_model: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+        key_types: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            device: "device";
+            passkey: "passkey";
+        }>>>;
+        pool: z.ZodOptional<z.ZodObject<{
+            on: z.ZodBoolean;
+            harness: z.ZodString;
+            accounts: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                email: z.ZodOptional<z.ZodString>;
+                label: z.ZodOptional<z.ZodString>;
+                enabled: z.ZodBoolean;
+                status: z.ZodEnum<{
+                    disabled: "disabled";
+                    error: "error";
+                    limited: "limited";
+                    ready: "ready";
+                }>;
+                current: z.ZodOptional<z.ZodBoolean>;
+                until: z.ZodOptional<z.ZodISODateTime>;
+                windows: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                    id: z.ZodString;
+                    used_percent: z.ZodNumber;
+                    resets_at: z.ZodOptional<z.ZodISODateTime>;
+                    window_minutes: z.ZodOptional<z.ZodInt>;
+                }, z.core.$loose>>>;
+                limited_by: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
 };
 //# sourceMappingURL=v1.d.ts.map