@cadenya/cadenya 0.135.0 → 1.0.0

package/src/client.ts

@@ -1,1547 +1,139 @@
-import type { RequestInit, RequestInfo, BodyInit } from './internal/builtin-types';
-import type { HTTPMethod, PromiseOrValue, MergedRequestInit, FinalizedRequestInit } from './internal/types';
-import { uuid4 } from './internal/utils/uuid';
-import { validatePositiveInteger, isAbsoluteURL, safeJSON } from './internal/utils/values';
-import { sleep } from './internal/utils/sleep';
-export type { Logger, LogLevel } from './internal/utils/log';
-import { castToError, isAbortError } from './internal/errors';
-import type { APIResponseProps } from './internal/parse';
-import { getPlatformHeaders } from './internal/detect-platform';
-import * as Shims from './internal/shims';
-import * as Opts from './internal/request-options';
-import { stringifyQuery } from './internal/utils/query';
-import { VERSION } from './version';
-import * as Errors from './core/error';
-import * as Pagination from './core/pagination';
-import { AbstractPage, type CursorPaginationParams, CursorPaginationResponse } from './core/pagination';
-import * as Uploads from './core/uploads';
-import * as API from './resources/index';
-import { APIPromise } from './core/api-promise';
-import {
-  Account,
-  AccountInfo,
-  AccountResource,
-  AccountSpec,
-  Profile,
-  ProfileSpec,
-  RotateChallengeTokenResponse,
-  RotateWebhookSigningKeyResponse,
-} from './resources/account';
-import {
-  AIProviderConfigOpenAI,
-  AIProviderConfigOpenAICompatible,
-  AIProviderConfigOpenrouter,
-  AIProviderCredentialAPIKey,
-  AIProviderCredentialHeaders,
-  AIProviderKey,
-  AIProviderKeyCreateParams,
-  AIProviderKeyDeleteParams,
-  AIProviderKeyListParams,
-  AIProviderKeyRetrieveParams,
-  AIProviderKeySpec,
-  AIProviderKeyUpdateParams,
-  AIProviderKeys,
-  AIProviderKeysCursorPagination,
-} from './resources/ai-provider-keys';
-import {
-  APIKey,
-  APIKeyCreateParams,
-  APIKeyDeleteParams,
-  APIKeyDisableParams,
-  APIKeyEnableParams,
-  APIKeyInfo,
-  APIKeyListParams,
-  APIKeyRetrieveParams,
-  APIKeyRotateParams,
-  APIKeySpec,
-  APIKeyUpdateParams,
-  APIKeys,
-  APIKeysCursorPagination,
-} from './resources/api-keys';
-import { GlobalAPIKey } from './resources/global-api-key';
-import {
-  CapabilityCaching,
-  CapabilityMaxOutputTokens,
-  CapabilityReasoning,
-  CapabilityStopSequences,
-  CapabilityTemperature,
-  CapabilityTopK,
-  CapabilityTopP,
-  Model,
-  ModelDisableParams,
-  ModelEnableParams,
-  ModelListParams,
-  ModelRetrieveParams,
-  ModelSpec,
-  ModelSpecCapability,
-  ModelSpecCapabilityCaching,
-  ModelSpecCapabilityMaxOutputTokens,
-  ModelSpecCapabilityReasoning,
-  ModelSpecCapabilityStopSequences,
-  ModelSpecCapabilityTemperature,
-  ModelSpecCapabilityTopK,
-  ModelSpecCapabilityTopP,
-  ModelSwapParams,
-  ModelSwapResponse,
-  Models,
-  ModelsCursorPagination,
-} from './resources/models';
-import { Profiles } from './resources/profiles';
-import {
-  Search,
-  SearchSearchToolsOrToolSetsParams,
-  SearchSearchToolsOrToolSetsResponse,
-} from './resources/search';
-import {
-  Upload,
-  UploadCreateParams,
-  UploadInfo,
-  UploadRetrieveParams,
-  UploadSpec,
-  Uploads as UploadsAPIUploads,
-} from './resources/uploads';
-import { UnsafeUnwrapWebhookEvent, UnwrapWebhookEvent, Webhooks } from './resources/webhooks';
-import {
-  SubjectAssertion,
-  SubjectReference,
-  TenantAssertion,
-  TenantReference,
-  WidgetSession,
-  WidgetSessionCreateParams,
-  WidgetSessionDeleteParams,
-  WidgetSessionDeleteTenantParams,
-  WidgetSessionDeleteTenantResponse,
-  WidgetSessionInfo,
-  WidgetSessionListParams,
-  WidgetSessionRetrieveParams,
-  WidgetSessionRevokeParams,
-  WidgetSessionSpec,
-  WidgetSessions,
-  WidgetSessionsCursorPagination,
-} from './resources/widget-sessions';
-import {
-  Widget,
-  WidgetArchiveParams,
-  WidgetCreateParams,
-  WidgetDeleteParams,
-  WidgetInfo,
-  WidgetListParams,
-  WidgetRetrieveParams,
-  WidgetSpec,
-  WidgetUnarchiveParams,
-  WidgetUpdateParams,
-  Widgets,
-  WidgetsCursorPagination,
-} from './resources/widgets';
-import {
-  WorkspaceSecret,
-  WorkspaceSecretCreateParams,
-  WorkspaceSecretDeleteParams,
-  WorkspaceSecretInfo,
-  WorkspaceSecretListParams,
-  WorkspaceSecretRetrieveParams,
-  WorkspaceSecretSpec,
-  WorkspaceSecretUpdateParams,
-  WorkspaceSecrets,
-  WorkspaceSecretsCursorPagination,
-} from './resources/workspace-secrets';
-import {
-  Workspace,
-  WorkspaceListParams,
-  WorkspaceSpec,
-  Workspaces,
-  WorkspacesCursorPagination,
-} from './resources/workspaces';
-import {
-  Agent,
-  AgentArchiveParams,
-  AgentCreateParams,
-  AgentDeleteParams,
-  AgentInfo,
-  AgentListParams,
-  AgentPublishParams,
-  AgentRetrieveParams,
-  AgentSpec,
-  AgentUnarchiveParams,
-  AgentUnpublishParams,
-  AgentUpdateParams,
-  Agents,
-  AgentsCursorPagination,
-  Page,
-} from './resources/agents/agents';
-import {
-  MemoryLayer,
-  MemoryLayerCreateParams,
-  MemoryLayerDeleteParams,
-  MemoryLayerInfo,
-  MemoryLayerListParams,
-  MemoryLayerRetrieveParams,
-  MemoryLayerSpec,
-  MemoryLayerUpdateParams,
-  MemoryLayers,
-  MemoryLayersCursorPagination,
-} from './resources/memory-layers/memory-layers';
-import {
-  AssistantMessage,
-  AssistantToolCall,
-  CallableTool,
-  CallableToolAgent,
-  CallableToolCadenyaProvidedTool,
-  CallableToolTool,
-  ContextLengths,
-  ContextWindowCompacted,
-  MemoryRead,
-  MemoryReference,
-  Objective,
-  ObjectiveCancelParams,
-  ObjectiveCompactParams,
-  ObjectiveCompactResponse,
-  ObjectiveConfigSnapshot,
-  ObjectiveContextWindow,
-  ObjectiveContextWindowData,
-  ObjectiveContextWindowsCursorPagination,
-  ObjectiveContinueParams,
-  ObjectiveCreateParams,
-  ObjectiveDiagnostics,
-  ObjectiveError,
-  ObjectiveEvent,
-  ObjectiveEventData,
-  ObjectiveEventDataAssistantMessage,
-  ObjectiveEventDataCancelled,
-  ObjectiveEventDataContextWindowCompacted,
-  ObjectiveEventDataError,
-  ObjectiveEventDataFinalized,
-  ObjectiveEventDataMemoryRead,
-  ObjectiveEventDataNotice,
-  ObjectiveEventDataReasoning,
-  ObjectiveEventDataSubAgentSpawned,
-  ObjectiveEventDataSubAgentUpdated,
-  ObjectiveEventDataTimedOut,
-  ObjectiveEventDataToolApprovalRequested,
-  ObjectiveEventDataToolApproved,
-  ObjectiveEventDataToolCalled,
-  ObjectiveEventDataToolDenied,
-  ObjectiveEventDataToolError,
-  ObjectiveEventDataToolResult,
-  ObjectiveEventDataUserMessage,
-  ObjectiveEventInfo,
-  ObjectiveEventWebhookData,
-  ObjectiveEventsCursorPagination,
-  ObjectiveInfo,
-  ObjectiveListContextWindowsParams,
-  ObjectiveListEventsParams,
-  ObjectiveListParams,
-  ObjectiveRetrieveDiagnosticsParams,
-  ObjectiveRetrieveDiagnosticsResponse,
-  ObjectiveRetrieveParams,
-  ObjectiveSecret,
-  ObjectiveStreamEventsParams,
-  Objectives,
-  ObjectivesCursorPagination,
-  Reasoning,
-  SubAgentSpawned,
-  SubAgentUpdated,
-  ToolApprovalRequested,
-  ToolApproved,
-  ToolCalled,
-  ToolDenied,
-  ToolError,
-  ToolResult,
-  UserMessage,
-} from './resources/objectives/objectives';
-import {
-  Subject,
-  SubjectInfo,
-  Tenant,
-  TenantDeleteParams,
-  TenantInfo,
-  TenantListParams,
-  TenantRetrieveParams,
-  Tenants,
-  TenantsCursorPagination,
-} from './resources/tenants/tenants';
-import {
-  ApprovalRequirementFilter,
-  ApprovalRequirementFilterAlways,
-  ApprovalRequirementFilterOnly,
-  AttributeFilter,
-  StringMatcher,
-  StringMatcherContains,
-  StringMatcherEndsWith,
-  StringMatcherExact,
-  StringMatcherRegex,
-  StringMatcherStartsWith,
-  SyncCompleted,
-  SyncFailed,
-  SyncStarted,
-  ToolFilter,
-  ToolSet,
-  ToolSetAdapter,
-  ToolSetAdapterBare,
-  ToolSetAdapterBareVariant,
-  ToolSetAdapterHTTP,
-  ToolSetAdapterHTTPVariant,
-  ToolSetAdapterMCP,
-  ToolSetAdapterMCPVariant,
-  ToolSetAdapterOpenAPI,
-  ToolSetAdapterOpenAPIURL,
-  ToolSetAdapterOpenAPIUploadID,
-  ToolSetAdapterOpenAPIVariant,
-  ToolSetArchiveParams,
-  ToolSetCreateParams,
-  ToolSetDeleteParams,
-  ToolSetEvent,
-  ToolSetEventData,
-  ToolSetEventDataSyncCompleted,
-  ToolSetEventDataSyncFailed,
-  ToolSetEventDataSyncStarted,
-  ToolSetEventsCursorPagination,
-  ToolSetGetOpenAPISpecParams,
-  ToolSetGetOpenAPISpecResponse,
-  ToolSetInfo,
-  ToolSetListEventsParams,
-  ToolSetListParams,
-  ToolSetListUsageParams,
-  ToolSetRetrieveParams,
-  ToolSetSpec,
-  ToolSetUnarchiveParams,
-  ToolSetUpdateParams,
-  ToolSetUsage,
-  ToolSetUsagesCursorPagination,
-  ToolSets,
-  ToolSetsCursorPagination,
-} from './resources/tool-sets/tool-sets';
-import {
-  WorkspaceAdmin,
-  WorkspaceAdminArchiveParams,
-  WorkspaceAdminCreateParams,
-  WorkspaceAdminListParams,
-  WorkspaceAdminRetrieveParams,
-  WorkspaceAdminUpdateParams,
-  WorkspaceMember,
-} from './resources/workspace-admin/workspace-admin';
-import { type Fetch } from './internal/builtin-types';
-import { HeadersLike, NullableHeaders, buildHeaders } from './internal/headers';
-import { FinalRequestOptions, RequestOptions } from './internal/request-options';
-import { readEnv } from './internal/utils/env';
-import {
-  type LogLevel,
-  type Logger,
-  formatRequestDetails,
-  loggerFor,
-  parseLogLevel,
-} from './internal/utils/log';
-import { isEmptyObj } from './internal/utils/values';
+// Generated by redwood. Do not edit by hand.
+
+import { HttpClient } from './core/http.js';
+import type { Logger, LogLevel } from './core/http.js';
+import { Webhooks } from './webhooks.js';
+import { Accounts } from './resources/accounts.js';
+import { ApiKeys } from './resources/api-keys.js';
+import { WorkspaceAdmin } from './resources/workspace-admin.js';
+import { Profiles } from './resources/profiles.js';
+import { Workspaces } from './resources/workspaces.js';
+import { Agents } from './resources/agents.js';
+import { AiProviderKeys } from './resources/ai-provider-keys.js';
+import { MemoryLayers } from './resources/memory-layers.js';
+import { Models } from './resources/models.js';
+import { Objectives } from './resources/objectives.js';
+import { ToolSearch } from './resources/tool-search.js';
+import { Tenants } from './resources/tenants.js';
+import { ToolSets } from './resources/tool-sets.js';
+import { Uploads } from './resources/uploads.js';
+import { WidgetSessions } from './resources/widget-sessions.js';
+import { Widgets } from './resources/widgets.js';
+import { WorkspaceSecrets } from './resources/workspace-secrets.js';
 
 export interface ClientOptions {
-  /**
-   * Defaults to process.env['CADENYA_API_KEY'].
-   */
-  apiKey?: string | undefined;
-
-  /**
-   * Defaults to process.env['CADENYA_WEBHOOK_KEY'].
-   */
-  webhookKey?: string | null | undefined;
-
-  /**
-   * Workspace to operate on. Fills the {workspaceId} path parameter on workspace-scoped endpoints unless overridden per request.
-   */
-  workspaceID?: string | null | undefined;
-
-  /**
-   * Override the default base URL for the API, e.g., "https://api.example.com/v2/"
-   *
-   * Defaults to process.env['CADENYA_BASE_URL'].
-   */
-  baseURL?: string | null | undefined;
-
-  /**
-   * The maximum amount of time (in milliseconds) that the client should wait for a response
-   * from the server before timing out a single request.
-   *
-   * Note that request timeouts are retried by default, so in a worst-case scenario you may wait
-   * much longer than this timeout before the promise succeeds or fails.
-   *
-   * @unit milliseconds
-   */
-  timeout?: number | undefined;
-  /**
-   * Additional `RequestInit` options to be passed to `fetch` calls.
-   * Properties will be overridden by per-request `fetchOptions`.
-   */
-  fetchOptions?: MergedRequestInit | undefined;
-
-  /**
-   * Specify a custom `fetch` function implementation.
-   *
-   * If not provided, we expect that `fetch` is defined globally.
-   */
-  fetch?: Fetch | undefined;
-
-  /**
-   * The maximum number of times that the client will retry a request in case of a
-   * temporary failure, like a network error or a 5XX error from the server.
-   *
-   * @default 0
-   */
-  maxRetries?: number | undefined;
-
-  /**
-   * Default headers to include with every request to the API.
-   *
-   * These can be removed in individual requests by explicitly setting the
-   * header to `null` in request options.
-   */
-  defaultHeaders?: HeadersLike | undefined;
-
-  /**
-   * Default query parameters to include with every request to the API.
-   *
-   * These can be removed in individual requests by explicitly setting the
-   * param to `undefined` in request options.
-   */
-  defaultQuery?: Record<string, string | undefined> | undefined;
-
-  /**
-   * Set the log level.
-   *
-   * Defaults to process.env['CADENYA_LOG'] or 'warn' if it isn't set.
-   */
-  logLevel?: LogLevel | undefined;
-
-  /**
-   * Set the logger.
-   *
-   * Defaults to globalThis.console.
-   */
-  logger?: Logger | undefined;
+  /** API key. Defaults to the CADENYA_API_KEY environment variable. */
+  apiKey?: string;
+  /** Override the API base URL. Defaults to https://api.cadenya.com. */
+  baseURL?: string;
+  /** Max automatic retries for retryable failures. Defaults to 0. */
+  maxRetries?: number;
+  /**
+   * Deadline for ordinary (non-streaming) requests in milliseconds; override
+   * per request with `options.timeout`. Streams bound only response-header
+   * acquisition — body lifetime stays under the caller's AbortSignal.
+   * Defaults to 60000; a non-finite or <= 0 value disables the deadline.
+   */
+  timeout?: number;
+  /** Headers sent with every request. */
+  defaultHeaders?: Record<string, string>;
+  /** Custom fetch implementation. */
+  fetch?: typeof fetch;
+  /** Destination for SDK logs. Defaults to `console`. */
+  logger?: Logger;
+  /** 'debug' | 'warn' (default) | 'off'. Never logs headers or bodies. */
+  logLevel?: LogLevel;
+  /** Default `workspaceId` for every call that takes one. Defaults to the CADENYA_WORKSPACE_ID environment variable. */
+  workspaceId?: string;
+  /** Secret for webhook signature verification. Defaults to the CADENYA_WEBHOOK_SECRET environment variable. */
+  webhookSecret?: string;
 }
 
-/**
- * API Client for interfacing with the Cadenya API.
- */
 export class Cadenya {
-  apiKey: string;
-  webhookKey: string | null;
-  workspaceID: string | null;
-
-  baseURL: string;
-  maxRetries: number;
-  timeout: number;
-  logger: Logger;
-  logLevel: LogLevel | undefined;
-  fetchOptions: MergedRequestInit | undefined;
-
-  private fetch: Fetch;
-  #encoder: Opts.RequestEncoder;
-  protected idempotencyHeader?: string;
-  private _options: ClientOptions;
-
-  /**
-   * API Client for interfacing with the Cadenya API.
-   *
-   * @param {string | undefined} [opts.apiKey=process.env['CADENYA_API_KEY'] ?? undefined]
-   * @param {string | null | undefined} [opts.webhookKey=process.env['CADENYA_WEBHOOK_KEY'] ?? null]
-   * @param {string | null | undefined} [opts.workspaceID=process.env['CADENYA_WORKSPACE_ID'] ?? null]
-   * @param {string} [opts.baseURL=process.env['CADENYA_BASE_URL'] ?? https://api.cadenya.com] - Override the default base URL for the API.
-   * @param {number} [opts.timeout=1 minute] - The maximum amount of time (in milliseconds) the client will wait for a response before timing out.
-   * @param {MergedRequestInit} [opts.fetchOptions] - Additional `RequestInit` options to be passed to `fetch` calls.
-   * @param {Fetch} [opts.fetch] - Specify a custom `fetch` function implementation.
-   * @param {number} [opts.maxRetries=0] - The maximum number of times the client will retry a request.
-   * @param {HeadersLike} opts.defaultHeaders - Default headers to include with every request to the API.
-   * @param {Record<string, string | undefined>} opts.defaultQuery - Default query parameters to include with every request to the API.
-   */
-  constructor({
-    baseURL = readEnv('CADENYA_BASE_URL'),
-    apiKey = readEnv('CADENYA_API_KEY'),
-    webhookKey = readEnv('CADENYA_WEBHOOK_KEY') ?? null,
-    workspaceID = readEnv('CADENYA_WORKSPACE_ID') ?? null,
-    ...opts
-  }: ClientOptions = {}) {
-    if (apiKey === undefined) {
-      throw new Errors.CadenyaError(
-        "The CADENYA_API_KEY environment variable is missing or empty; either provide it, or instantiate the Cadenya client with an apiKey option, like new Cadenya({ apiKey: 'My API Key' }).",
+  readonly accounts: Accounts;
+  readonly apiKeys: ApiKeys;
+  readonly workspaceAdmin: WorkspaceAdmin;
+  readonly profiles: Profiles;
+  readonly workspaces: Workspaces;
+  readonly agents: Agents;
+  readonly aiProviderKeys: AiProviderKeys;
+  readonly memoryLayers: MemoryLayers;
+  readonly models: Models;
+  readonly objectives: Objectives;
+  readonly toolSearch: ToolSearch;
+  readonly tenants: Tenants;
+  readonly toolSets: ToolSets;
+  readonly uploads: Uploads;
+  readonly widgetSessions: WidgetSessions;
+  readonly widgets: Widgets;
+  readonly workspaceSecrets: WorkspaceSecrets;
+  readonly webhooks: Webhooks;
+
+  private readonly _client: HttpClient;
+
+  constructor(options: ClientOptions = {}) {
+    // Presence is not validity: empty strings from options or environment
+    // are configuration mistakes, not credentials.
+    const apiKey = resolveOption('apiKey', options.apiKey, readEnv('CADENYA_API_KEY'));
+    if (!apiKey) {
+      throw new Error(
+        "Missing API key. Pass it with `new Cadenya({ apiKey })` or set the CADENYA_API_KEY environment variable.",
       );
     }
-
-    const options: ClientOptions = {
-      apiKey,
-      webhookKey,
-      workspaceID,
-      ...opts,
-      baseURL: baseURL || `https://api.cadenya.com`,
-    };
-
-    this.baseURL = options.baseURL!;
-    this.timeout = options.timeout ?? Cadenya.DEFAULT_TIMEOUT /* 1 minute */;
-    this.logger = options.logger ?? console;
-    const defaultLogLevel = 'warn';
-    // Set default logLevel early so that we can log a warning in parseLogLevel.
-    this.logLevel = defaultLogLevel;
-    this.logLevel =
-      parseLogLevel(options.logLevel, 'ClientOptions.logLevel', this) ??
-      parseLogLevel(readEnv('CADENYA_LOG'), "process.env['CADENYA_LOG']", this) ??
-      defaultLogLevel;
-    this.fetchOptions = options.fetchOptions;
-    this.maxRetries = options.maxRetries ?? 0;
-    this.fetch = options.fetch ?? Shims.getDefaultFetch();
-    this.#encoder = Opts.FallbackEncoder;
-
-    const customHeadersEnv = readEnv('CADENYA_CUSTOM_HEADERS');
-    if (customHeadersEnv) {
-      const parsed: Record<string, string> = {};
-      for (const line of customHeadersEnv.split('\n')) {
-        const colon = line.indexOf(':');
-        if (colon >= 0) {
-          parsed[line.substring(0, colon).trim()] = line.substring(colon + 1).trim();
-        }
-      }
-      options.defaultHeaders = { ...parsed, ...options.defaultHeaders };
-    }
-
-    this._options = options;
-
-    this.apiKey = apiKey;
-    this.webhookKey = webhookKey;
-    this.workspaceID = workspaceID;
-  }
-
-  /**
-   * Create a new client instance re-using the same options given to the current client with optional overriding.
-   */
-  withOptions(options: Partial<ClientOptions>): this {
-    const client = new (this.constructor as any as new (props: ClientOptions) => typeof this)({
-      ...this._options,
-      baseURL: this.baseURL,
-      maxRetries: this.maxRetries,
-      timeout: this.timeout,
-      logger: this.logger,
-      logLevel: this.logLevel,
-      fetch: this.fetch,
-      fetchOptions: this.fetchOptions,
-      apiKey: this.apiKey,
-      webhookKey: this.webhookKey,
-      workspaceID: this.workspaceID,
-      ...options,
+    this._client = new HttpClient({
+      baseURL: resolveOption('baseURL', options.baseURL, readEnv('CADENYA_BASE_URL')) ?? 'https://api.cadenya.com',
+      authHeader: () => ({ Authorization: `Bearer ${apiKey}` }),
+      maxRetries: options.maxRetries ?? 0,
+      timeout: options.timeout,
+      defaultHeaders: { 'User-Agent': 'cadenya-typescript/1.0.0 (api 1.0)', ...options.defaultHeaders },
+      fetch: options.fetch,
+      logger: options.logger,
+      logLevel: options.logLevel,
+      defaults: { workspaceId: resolveOption('workspaceId', options.workspaceId, readEnv('CADENYA_WORKSPACE_ID')) },
     });
-    return client;
-  }
-
-  /**
-   * Check whether the base URL is set to its default.
-   */
-  #baseURLOverridden(): boolean {
-    return this.baseURL !== 'https://api.cadenya.com';
-  }
-
-  protected defaultQuery(): Record<string, string | undefined> | undefined {
-    return this._options.defaultQuery;
-  }
-
-  protected validateHeaders({ values, nulls }: NullableHeaders) {
-    return;
+    this.webhooks = new Webhooks(resolveOption('webhookSecret', options.webhookSecret, readEnv('CADENYA_WEBHOOK_SECRET')));
+    this.accounts = new Accounts(this._client);
+    this.apiKeys = new ApiKeys(this._client);
+    this.workspaceAdmin = new WorkspaceAdmin(this._client);
+    this.profiles = new Profiles(this._client);
+    this.workspaces = new Workspaces(this._client);
+    this.agents = new Agents(this._client);
+    this.aiProviderKeys = new AiProviderKeys(this._client);
+    this.memoryLayers = new MemoryLayers(this._client);
+    this.models = new Models(this._client);
+    this.objectives = new Objectives(this._client);
+    this.toolSearch = new ToolSearch(this._client);
+    this.tenants = new Tenants(this._client);
+    this.toolSets = new ToolSets(this._client);
+    this.uploads = new Uploads(this._client);
+    this.widgetSessions = new WidgetSessions(this._client);
+    this.widgets = new Widgets(this._client);
+    this.workspaceSecrets = new WorkspaceSecrets(this._client);
   }
+}
 
-  protected async authHeaders(opts: FinalRequestOptions): Promise<NullableHeaders | undefined> {
-    return buildHeaders([{ Authorization: `Bearer ${this.apiKey}` }]);
-  }
-
-  protected stringifyQuery(query: object | Record<string, unknown>): string {
-    return stringifyQuery(query);
-  }
-
-  private getUserAgent(): string {
-    return `${this.constructor.name}/JS ${VERSION}`;
-  }
-
-  protected defaultIdempotencyKey(): string {
-    return `cadenya-node-retry-${uuid4()}`;
-  }
-
-  protected makeStatusError(
-    status: number,
-    error: Object,
-    message: string | undefined,
-    headers: Headers,
-  ): Errors.APIError {
-    return Errors.APIError.generate(status, error, message, headers);
-  }
-
-  buildURL(
-    path: string,
-    query: Record<string, unknown> | null | undefined,
-    defaultBaseURL?: string | undefined,
-  ): string {
-    const baseURL = (!this.#baseURLOverridden() && defaultBaseURL) || this.baseURL;
-    const url =
-      isAbsoluteURL(path) ?
-        new URL(path)
-      : new URL(baseURL + (baseURL.endsWith('/') && path.startsWith('/') ? path.slice(1) : path));
-
-    const defaultQuery = this.defaultQuery();
-    const pathQuery = Object.fromEntries(url.searchParams);
-    if (!isEmptyObj(defaultQuery) || !isEmptyObj(pathQuery)) {
-      query = { ...pathQuery, ...defaultQuery, ...query };
-    }
-
-    if (typeof query === 'object' && query && !Array.isArray(query)) {
-      url.search = this.stringifyQuery(query);
-    }
-
-    return url.toString();
-  }
-
-  /**
-   * Used as a callback for mutating the given `FinalRequestOptions` object.
-   */
-  protected async prepareOptions(options: FinalRequestOptions): Promise<void> {}
-
-  /**
-   * Used as a callback for mutating the given `RequestInit` object.
-   *
-   * This is useful for cases where you want to add certain headers based off of
-   * the request properties, e.g. `method` or `url`.
-   */
-  protected async prepareRequest(
-    request: RequestInit,
-    { url, options }: { url: string; options: FinalRequestOptions },
-  ): Promise<void> {}
-
-  get<Rsp>(path: string, opts?: PromiseOrValue<RequestOptions>): APIPromise<Rsp> {
-    return this.methodRequest('get', path, opts);
-  }
-
-  post<Rsp>(path: string, opts?: PromiseOrValue<RequestOptions>): APIPromise<Rsp> {
-    return this.methodRequest('post', path, opts);
-  }
-
-  patch<Rsp>(path: string, opts?: PromiseOrValue<RequestOptions>): APIPromise<Rsp> {
-    return this.methodRequest('patch', path, opts);
-  }
-
-  put<Rsp>(path: string, opts?: PromiseOrValue<RequestOptions>): APIPromise<Rsp> {
-    return this.methodRequest('put', path, opts);
-  }
-
-  delete<Rsp>(path: string, opts?: PromiseOrValue<RequestOptions>): APIPromise<Rsp> {
-    return this.methodRequest('delete', path, opts);
-  }
-
-  private methodRequest<Rsp>(
-    method: HTTPMethod,
-    path: string,
-    opts?: PromiseOrValue<RequestOptions>,
-  ): APIPromise<Rsp> {
-    return this.request(
-      Promise.resolve(opts).then((opts) => {
-        return { method, path, ...opts };
-      }),
-    );
-  }
-
-  request<Rsp>(
-    options: PromiseOrValue<FinalRequestOptions>,
-    remainingRetries: number | null = null,
-  ): APIPromise<Rsp> {
-    return new APIPromise(this, this.makeRequest(options, remainingRetries, undefined));
-  }
-
-  private async makeRequest(
-    optionsInput: PromiseOrValue<FinalRequestOptions>,
-    retriesRemaining: number | null,
-    retryOfRequestLogID: string | undefined,
-  ): Promise<APIResponseProps> {
-    const options = await optionsInput;
-    const maxRetries = options.maxRetries ?? this.maxRetries;
-    if (retriesRemaining == null) {
-      retriesRemaining = maxRetries;
-    }
-
-    await this.prepareOptions(options);
-
-    const { req, url, timeout } = await this.buildRequest(options, {
-      retryCount: maxRetries - retriesRemaining,
-    });
-
-    await this.prepareRequest(req, { url, options });
-
-    /** Not an API request ID, just for correlating local log entries. */
-    const requestLogID = 'log_' + ((Math.random() * (1 << 24)) | 0).toString(16).padStart(6, '0');
-    const retryLogStr = retryOfRequestLogID === undefined ? '' : `, retryOf: ${retryOfRequestLogID}`;
-    const startTime = Date.now();
-
-    loggerFor(this).debug(
-      `[${requestLogID}] sending request`,
-      formatRequestDetails({
-        retryOfRequestLogID,
-        method: options.method,
-        url,
-        options,
-        headers: req.headers,
-      }),
-    );
-
-    if (options.signal?.aborted) {
-      throw new Errors.APIUserAbortError();
-    }
-
-    const controller = new AbortController();
-    const response = await this.fetchWithTimeout(url, req, timeout, controller).catch(castToError);
-    const headersTime = Date.now();
-
-    if (response instanceof globalThis.Error) {
-      const retryMessage = `retrying, ${retriesRemaining} attempts remaining`;
-      if (options.signal?.aborted) {
-        throw new Errors.APIUserAbortError();
-      }
-      // detect native connection timeout errors
-      // deno throws "TypeError: error sending request for url (https://example/): client error (Connect): tcp connect error: Operation timed out (os error 60): Operation timed out (os error 60)"
-      // undici throws "TypeError: fetch failed" with cause "ConnectTimeoutError: Connect Timeout Error (attempted address: example:443, timeout: 1ms)"
-      // others do not provide enough information to distinguish timeouts from other connection errors
-      const isTimeout =
-        isAbortError(response) ||
-        /timed? ?out/i.test(String(response) + ('cause' in response ? String(response.cause) : ''));
-      if (retriesRemaining) {
-        loggerFor(this).info(
-          `[${requestLogID}] connection ${isTimeout ? 'timed out' : 'failed'} - ${retryMessage}`,
-        );
-        loggerFor(this).debug(
-          `[${requestLogID}] connection ${isTimeout ? 'timed out' : 'failed'} (${retryMessage})`,
-          formatRequestDetails({
-            retryOfRequestLogID,
-            url,
-            durationMs: headersTime - startTime,
-            message: response.message,
-          }),
-        );
-        return this.retryRequest(options, retriesRemaining, retryOfRequestLogID ?? requestLogID);
-      }
-      loggerFor(this).info(
-        `[${requestLogID}] connection ${isTimeout ? 'timed out' : 'failed'} - error; no more retries left`,
-      );
-      loggerFor(this).debug(
-        `[${requestLogID}] connection ${isTimeout ? 'timed out' : 'failed'} (error; no more retries left)`,
-        formatRequestDetails({
-          retryOfRequestLogID,
-          url,
-          durationMs: headersTime - startTime,
-          message: response.message,
-        }),
-      );
-      if (isTimeout) {
-        throw new Errors.APIConnectionTimeoutError();
-      }
-      throw new Errors.APIConnectionError({ cause: response });
-    }
-
-    const responseInfo = `[${requestLogID}${retryLogStr}] ${req.method} ${url} ${
-      response.ok ? 'succeeded' : 'failed'
-    } with status ${response.status} in ${headersTime - startTime}ms`;
-
-    if (!response.ok) {
-      const shouldRetry = await this.shouldRetry(response);
-      if (retriesRemaining && shouldRetry) {
-        const retryMessage = `retrying, ${retriesRemaining} attempts remaining`;
-
-        // We don't need the body of this response.
-        await Shims.CancelReadableStream(response.body);
-        loggerFor(this).info(`${responseInfo} - ${retryMessage}`);
-        loggerFor(this).debug(
-          `[${requestLogID}] response error (${retryMessage})`,
-          formatRequestDetails({
-            retryOfRequestLogID,
-            url: response.url,
-            status: response.status,
-            headers: response.headers,
-            durationMs: headersTime - startTime,
-          }),
-        );
-        return this.retryRequest(
-          options,
-          retriesRemaining,
-          retryOfRequestLogID ?? requestLogID,
-          response.headers,
-        );
-      }
-
-      const retryMessage = shouldRetry ? `error; no more retries left` : `error; not retryable`;
-
-      loggerFor(this).info(`${responseInfo} - ${retryMessage}`);
-
-      const errText = await response.text().catch((err: any) => castToError(err).message);
-      const errJSON = safeJSON(errText) as any;
-      const errMessage = errJSON ? undefined : errText;
+function readEnv(name: string): string | undefined {
+  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } })
+    .process?.env;
+  return env?.[name];
+}
 
-      loggerFor(this).debug(
-        `[${requestLogID}] response error (${retryMessage})`,
-        formatRequestDetails({
-          retryOfRequestLogID,
-          url: response.url,
-          status: response.status,
-          headers: response.headers,
-          message: errMessage,
-          durationMs: Date.now() - startTime,
-        }),
+// Presence is not validity: an explicitly provided option must be usable —
+// a blank value is a configuration mistake and never silently falls back to
+// the environment or a default. Only an OMITTED option reads the env.
+function resolveOption(
+  label: string,
+  explicit: string | undefined,
+  env: string | undefined,
+): string | undefined {
+  if (explicit !== undefined) {
+    const value = explicit.trim();
+    if (!value) {
+      throw new Error(
+        `${label} must not be blank when provided explicitly; omit it to use the environment instead.`,
       );
-
-      const err = this.makeStatusError(response.status, errJSON, errMessage, response.headers);
-      throw err;
-    }
-
-    loggerFor(this).info(responseInfo);
-    loggerFor(this).debug(
-      `[${requestLogID}] response start`,
-      formatRequestDetails({
-        retryOfRequestLogID,
-        url: response.url,
-        status: response.status,
-        headers: response.headers,
-        durationMs: headersTime - startTime,
-      }),
-    );
-
-    return { response, options, controller, requestLogID, retryOfRequestLogID, startTime };
-  }
-
-  getAPIList<Item, PageClass extends Pagination.AbstractPage<Item> = Pagination.AbstractPage<Item>>(
-    path: string,
-    Page: new (...args: any[]) => PageClass,
-    opts?: PromiseOrValue<RequestOptions>,
-  ): Pagination.PagePromise<PageClass, Item> {
-    return this.requestAPIList(
-      Page,
-      opts && 'then' in opts ?
-        opts.then((opts) => ({ method: 'get', path, ...opts }))
-      : { method: 'get', path, ...opts },
-    );
-  }
-
-  requestAPIList<
-    Item = unknown,
-    PageClass extends Pagination.AbstractPage<Item> = Pagination.AbstractPage<Item>,
-  >(
-    Page: new (...args: ConstructorParameters<typeof Pagination.AbstractPage>) => PageClass,
-    options: PromiseOrValue<FinalRequestOptions>,
-  ): Pagination.PagePromise<PageClass, Item> {
-    const request = this.makeRequest(options, null, undefined);
-    return new Pagination.PagePromise<PageClass, Item>(this as any as Cadenya, request, Page);
-  }
-
-  async fetchWithTimeout(
-    url: RequestInfo,
-    init: RequestInit | undefined,
-    ms: number,
-    controller: AbortController,
-  ): Promise<Response> {
-    const { signal, method, ...options } = init || {};
-    const abort = this._makeAbort(controller);
-    if (signal) signal.addEventListener('abort', abort, { once: true });
-
-    const timeout = setTimeout(abort, ms);
-
-    const isReadableBody =
-      ((globalThis as any).ReadableStream && options.body instanceof (globalThis as any).ReadableStream) ||
-      (typeof options.body === 'object' && options.body !== null && Symbol.asyncIterator in options.body);
-
-    const fetchOptions: RequestInit = {
-      signal: controller.signal as any,
-      ...(isReadableBody ? { duplex: 'half' } : {}),
-      method: 'GET',
-      ...options,
-    };
-    if (method) {
-      // Custom methods like 'patch' need to be uppercased
-      // See https://github.com/nodejs/undici/issues/2294
-      fetchOptions.method = method.toUpperCase();
-    }
-
-    try {
-      // use undefined this binding; fetch errors if bound to something else in browser/cloudflare
-      return await this.fetch.call(undefined, url, fetchOptions);
-    } finally {
-      clearTimeout(timeout);
-    }
-  }
-
-  private async shouldRetry(response: Response): Promise<boolean> {
-    // Note this is not a standard header.
-    const shouldRetryHeader = response.headers.get('x-should-retry');
-
-    // If the server explicitly says whether or not to retry, obey.
-    if (shouldRetryHeader === 'true') return true;
-    if (shouldRetryHeader === 'false') return false;
-
-    // Retry on request timeouts.
-    if (response.status === 408) return true;
-
-    // Retry on lock timeouts.
-    if (response.status === 409) return true;
-
-    // Retry on rate limits.
-    if (response.status === 429) return true;
-
-    // Retry internal errors.
-    if (response.status >= 500) return true;
-
-    return false;
-  }
-
-  private async retryRequest(
-    options: FinalRequestOptions,
-    retriesRemaining: number,
-    requestLogID: string,
-    responseHeaders?: Headers | undefined,
-  ): Promise<APIResponseProps> {
-    let timeoutMillis: number | undefined;
-
-    // Note the `retry-after-ms` header may not be standard, but is a good idea and we'd like proactive support for it.
-    const retryAfterMillisHeader = responseHeaders?.get('retry-after-ms');
-    if (retryAfterMillisHeader) {
-      const timeoutMs = parseFloat(retryAfterMillisHeader);
-      if (!Number.isNaN(timeoutMs)) {
-        timeoutMillis = timeoutMs;
-      }
-    }
-
-    // About the Retry-After header: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Retry-After
-    const retryAfterHeader = responseHeaders?.get('retry-after');
-    if (retryAfterHeader && !timeoutMillis) {
-      const timeoutSeconds = parseFloat(retryAfterHeader);
-      if (!Number.isNaN(timeoutSeconds)) {
-        timeoutMillis = timeoutSeconds * 1000;
-      } else {
-        timeoutMillis = Date.parse(retryAfterHeader) - Date.now();
-      }
-    }
-
-    // If the API asks us to wait a certain amount of time, just do what it
-    // says, but otherwise calculate a default
-    if (timeoutMillis === undefined) {
-      const maxRetries = options.maxRetries ?? this.maxRetries;
-      timeoutMillis = this.calculateDefaultRetryTimeoutMillis(retriesRemaining, maxRetries);
-    }
-    await sleep(timeoutMillis);
-
-    return this.makeRequest(options, retriesRemaining - 1, requestLogID);
-  }
-
-  private calculateDefaultRetryTimeoutMillis(retriesRemaining: number, maxRetries: number): number {
-    const initialRetryDelay = 0.5;
-    const maxRetryDelay = 8.0;
-
-    const numRetries = maxRetries - retriesRemaining;
-
-    // Apply exponential backoff, but not more than the max.
-    const sleepSeconds = Math.min(initialRetryDelay * Math.pow(2, numRetries), maxRetryDelay);
-
-    // Apply some jitter, take up to at most 25 percent of the retry time.
-    const jitter = 1 - Math.random() * 0.25;
-
-    return sleepSeconds * jitter * 1000;
-  }
-
-  async buildRequest(
-    inputOptions: FinalRequestOptions,
-    { retryCount = 0 }: { retryCount?: number } = {},
-  ): Promise<{ req: FinalizedRequestInit; url: string; timeout: number }> {
-    const options = { ...inputOptions };
-    const { method, path, query, defaultBaseURL } = options;
-
-    const url = this.buildURL(path!, query as Record<string, unknown>, defaultBaseURL);
-    if ('timeout' in options) validatePositiveInteger('timeout', options.timeout);
-    options.timeout = options.timeout ?? this.timeout;
-    const { bodyHeaders, body } = this.buildBody({ options });
-    const reqHeaders = await this.buildHeaders({ options: inputOptions, method, bodyHeaders, retryCount });
-
-    const req: FinalizedRequestInit = {
-      method,
-      headers: reqHeaders,
-      ...(options.signal && { signal: options.signal }),
-      ...((globalThis as any).ReadableStream &&
-        body instanceof (globalThis as any).ReadableStream && { duplex: 'half' }),
-      ...(body && { body }),
-      ...((this.fetchOptions as any) ?? {}),
-      ...((options.fetchOptions as any) ?? {}),
-    };
-
-    return { req, url, timeout: options.timeout };
-  }
-
-  private async buildHeaders({
-    options,
-    method,
-    bodyHeaders,
-    retryCount,
-  }: {
-    options: FinalRequestOptions;
-    method: HTTPMethod;
-    bodyHeaders: HeadersLike;
-    retryCount: number;
-  }): Promise<Headers> {
-    let idempotencyHeaders: HeadersLike = {};
-    if (this.idempotencyHeader && method !== 'get') {
-      if (!options.idempotencyKey) options.idempotencyKey = this.defaultIdempotencyKey();
-      idempotencyHeaders[this.idempotencyHeader] = options.idempotencyKey;
-    }
-
-    const headers = buildHeaders([
-      idempotencyHeaders,
-      {
-        Accept: 'application/json',
-        'User-Agent': this.getUserAgent(),
-        'X-Cadenya-Retry-Count': String(retryCount),
-        ...(options.timeout ? { 'X-Cadenya-Timeout': String(Math.trunc(options.timeout / 1000)) } : {}),
-        ...getPlatformHeaders(),
-      },
-      await this.authHeaders(options),
-      this._options.defaultHeaders,
-      bodyHeaders,
-      options.headers,
-    ]);
-
-    this.validateHeaders(headers);
-
-    return headers.values;
-  }
-
-  private _makeAbort(controller: AbortController) {
-    // note: we can't just inline this method inside `fetchWithTimeout()` because then the closure
-    //       would capture all request options, and cause a memory leak.
-    return () => controller.abort();
-  }
-
-  private buildBody({ options }: { options: FinalRequestOptions }): {
-    bodyHeaders: HeadersLike;
-    body: BodyInit | undefined;
-  } {
-    const { body, headers: rawHeaders } = options;
-    if (!body) {
-      // A resource method always passes a `body` key when its operation defines a
-      // request body, even if the caller omitted an optional body param. Keep the
-      // content-type for those, and only elide it for operations with no body at
-      // all (e.g. GET/DELETE).
-      if (body == null && 'body' in options) {
-        return this.#encoder({ body, headers: buildHeaders([rawHeaders]) });
-      }
-      return { bodyHeaders: undefined, body: undefined };
-    }
-    const headers = buildHeaders([rawHeaders]);
-    if (
-      // Pass raw type verbatim
-      ArrayBuffer.isView(body) ||
-      body instanceof ArrayBuffer ||
-      body instanceof DataView ||
-      (typeof body === 'string' &&
-        // Preserve legacy string encoding behavior for now
-        headers.values.has('content-type')) ||
-      // `Blob` is superset of `File`
-      ((globalThis as any).Blob && body instanceof (globalThis as any).Blob) ||
-      // `FormData` -> `multipart/form-data`
-      body instanceof FormData ||
-      // `URLSearchParams` -> `application/x-www-form-urlencoded`
-      body instanceof URLSearchParams ||
-      // Send chunked stream (each chunk has own `length`)
-      ((globalThis as any).ReadableStream && body instanceof (globalThis as any).ReadableStream)
-    ) {
-      return { bodyHeaders: undefined, body: body as BodyInit };
-    } else if (
-      typeof body === 'object' &&
-      (Symbol.asyncIterator in body ||
-        (Symbol.iterator in body && 'next' in body && typeof body.next === 'function'))
-    ) {
-      return { bodyHeaders: undefined, body: Shims.ReadableStreamFrom(body as AsyncIterable<Uint8Array>) };
-    } else if (
-      typeof body === 'object' &&
-      headers.values.get('content-type') === 'application/x-www-form-urlencoded'
-    ) {
-      return {
-        bodyHeaders: { 'content-type': 'application/x-www-form-urlencoded' },
-        body: this.stringifyQuery(body),
-      };
-    } else {
-      return this.#encoder({ body, headers });
     }
+    return value;
   }
-
-  static Cadenya = this;
-  static DEFAULT_TIMEOUT = 60000; // 1 minute
-
-  static CadenyaError = Errors.CadenyaError;
-  static APIError = Errors.APIError;
-  static APIConnectionError = Errors.APIConnectionError;
-  static APIConnectionTimeoutError = Errors.APIConnectionTimeoutError;
-  static APIUserAbortError = Errors.APIUserAbortError;
-  static NotFoundError = Errors.NotFoundError;
-  static ConflictError = Errors.ConflictError;
-  static RateLimitError = Errors.RateLimitError;
-  static BadRequestError = Errors.BadRequestError;
-  static AuthenticationError = Errors.AuthenticationError;
-  static InternalServerError = Errors.InternalServerError;
-  static PermissionDeniedError = Errors.PermissionDeniedError;
-  static UnprocessableEntityError = Errors.UnprocessableEntityError;
-
-  static toFile = Uploads.toFile;
-
-  aiProviderKeys: API.AIProviderKeys = new API.AIProviderKeys(this);
-  /**
-   * Manage the authenticated account. Accounts are the top-level organizational
-   *  unit and contain one or more workspaces.
-   */
-  account: API.AccountResource = new API.AccountResource(this);
-  /**
-   * Operations on profiles, the account-level principals (users, API keys,
-   *  system) that authenticate against the API.
-   */
-  profiles: API.Profiles = new API.Profiles(this);
-  /**
-   * Manage AI agents within a workspace. Agents define AI behavior and tool access.
-   */
-  agents: API.Agents = new API.Agents(this);
-  objectives: API.Objectives = new API.Objectives(this);
-  /**
-   * Manage memory layers and their entries. Layers are named containers that can
-   *  be composed into an objective's memory cascade; entries are the keyed values
-   *  within a layer. System-managed layers (e.g., episodic layers created by the
-   *  runtime) cannot be mutated through this API.
-   */
-  memoryLayers: API.MemoryLayers = new API.MemoryLayers(this);
-  /**
-   * Issue short-lived presigned URLs for direct client-to-object-storage
-   *  uploads. Created uploads can be referenced by id when creating or updating
-   *  resources that accept binary content (e.g., MemoryEntry).
-   */
-  uploads: API.Uploads = new API.Uploads(this);
-  /**
-   * Manage LLM models available to a workspace. Models represent provider and
-   *  family pairs (e.g., "anthropic/claude-sonnet-4.6"). Workspaces are seeded
-   *  with the supported models and you can enable or disable each one.
-   */
-  models: API.Models = new API.Models(this);
-  search: API.Search = new API.Search(this);
-  /**
-   * Manage tool sets and the tools they contain. Tool sets group related tools,
-   *  and tools define specific capabilities available to agents.
-   *
-   *  When a tool set is managed, only API key actors can modify its tools; human
-   *  (profile) actors cannot.
-   */
-  toolSets: API.ToolSets = new API.ToolSets(this);
-  /**
-   * Issue, rotate, disable, and revoke a workspace's API keys. Every key
-   *  belongs to exactly one workspace; the system-managed global account key is
-   *  managed via GlobalAPIKeyService instead.
-   */
-  apiKeys: API.APIKeys = new API.APIKeys(this);
-  /**
-   * Manage the account's system-provisioned global API key. The global key is
-   *  the only key that spans every workspace; it is created by the system and
-   *  cannot be deleted, so the surface is retrieve, rotate, and the
-   *  disable/enable kill switch.
-   */
-  globalAPIKey: API.GlobalAPIKey = new API.GlobalAPIKey(this);
-  workspaceSecrets: API.WorkspaceSecrets = new API.WorkspaceSecrets(this);
-  /**
-   * Manage workspaces within an account. Workspaces provide organizational
-   *  grouping and isolation for resources such as agents, tools, and API keys.
-   *
-   *  This is the workspace-scoped, end-user surface. Administrative operations
-   *  (create / archive workspaces, manage members) live in WorkspaceAdminService
-   *  under /v1/account/workspaces and require the admin role.
-   */
-  workspaces: API.Workspaces = new API.Workspaces(this);
-  /**
-   * Administer workspaces across the account: create and archive workspaces and
-   *  manage their membership. These operations are account-scoped and require the
-   *  admin role (a token whose profile holds the WorkOS admin role); they live
-   *  under /v1/account/workspaces rather than the workspace-scoped /v1/workspaces
-   *  tree so an admin can manage any workspace in the account, including ones they
-   *  are not themselves a member of.
-   */
-  workspaceAdmin: API.WorkspaceAdmin = new API.WorkspaceAdmin(this);
-  webhooks: API.Webhooks = new API.Webhooks(this);
-  /**
-   * Manage embeddable chat widgets. A widget binds an agent to a globally
-   *  unique hostname with a per-widget origin allowlist; browsers reach it with
-   *  session tokens minted via WidgetSessionService.
-   */
-  widgets: API.Widgets = new API.Widgets(this);
-  /**
-   * Read and erase tenants and the subjects under them. Tenants and subjects are
-   *  created by assertion — on objective creation or widget session mint — never
-   *  directly, so this service has no create or update: it exists to enumerate what
-   *  assertions have produced, and to destroy it on request.
-   */
-  tenants: API.Tenants = new API.Tenants(this);
-  /**
-   * Mint and manage widget sessions. Session creation is server-to-server only:
-   *  the customer's backend authenticates its visitor, asserts tenant/subject
-   *  context, attaches any per-visitor secrets, and receives a short-lived
-   *  bearer token the browser uses against the widget host.
-   */
-  widgetSessions: API.WidgetSessions = new API.WidgetSessions(this);
-}
-
-Cadenya.AIProviderKeys = AIProviderKeys;
-Cadenya.AccountResource = AccountResource;
-Cadenya.Profiles = Profiles;
-Cadenya.Agents = Agents;
-Cadenya.Objectives = Objectives;
-Cadenya.MemoryLayers = MemoryLayers;
-Cadenya.Uploads = UploadsAPIUploads;
-Cadenya.Models = Models;
-Cadenya.Search = Search;
-Cadenya.ToolSets = ToolSets;
-Cadenya.APIKeys = APIKeys;
-Cadenya.GlobalAPIKey = GlobalAPIKey;
-Cadenya.WorkspaceSecrets = WorkspaceSecrets;
-Cadenya.Workspaces = Workspaces;
-Cadenya.WorkspaceAdmin = WorkspaceAdmin;
-Cadenya.Webhooks = Webhooks;
-Cadenya.Widgets = Widgets;
-Cadenya.Tenants = Tenants;
-Cadenya.WidgetSessions = WidgetSessions;
-
-export declare namespace Cadenya {
-  export type RequestOptions = Opts.RequestOptions;
-
-  export import CursorPagination = Pagination.CursorPagination;
-  export {
-    type CursorPaginationParams as CursorPaginationParams,
-    type CursorPaginationResponse as CursorPaginationResponse,
-  };
-
-  export {
-    AIProviderKeys as AIProviderKeys,
-    type AIProviderConfigOpenAI as AIProviderConfigOpenAI,
-    type AIProviderConfigOpenAICompatible as AIProviderConfigOpenAICompatible,
-    type AIProviderConfigOpenrouter as AIProviderConfigOpenrouter,
-    type AIProviderCredentialAPIKey as AIProviderCredentialAPIKey,
-    type AIProviderCredentialHeaders as AIProviderCredentialHeaders,
-    type AIProviderKey as AIProviderKey,
-    type AIProviderKeySpec as AIProviderKeySpec,
-    type AIProviderKeysCursorPagination as AIProviderKeysCursorPagination,
-    type AIProviderKeyCreateParams as AIProviderKeyCreateParams,
-    type AIProviderKeyRetrieveParams as AIProviderKeyRetrieveParams,
-    type AIProviderKeyUpdateParams as AIProviderKeyUpdateParams,
-    type AIProviderKeyListParams as AIProviderKeyListParams,
-    type AIProviderKeyDeleteParams as AIProviderKeyDeleteParams,
-  };
-
-  export {
-    AccountResource as AccountResource,
-    type Account as Account,
-    type AccountInfo as AccountInfo,
-    type AccountSpec as AccountSpec,
-    type Profile as Profile,
-    type ProfileSpec as ProfileSpec,
-    type RotateChallengeTokenResponse as RotateChallengeTokenResponse,
-    type RotateWebhookSigningKeyResponse as RotateWebhookSigningKeyResponse,
-  };
-
-  export { Profiles as Profiles };
-
-  export {
-    Agents as Agents,
-    type Agent as Agent,
-    type AgentInfo as AgentInfo,
-    type AgentSpec as AgentSpec,
-    type Page as Page,
-    type AgentsCursorPagination as AgentsCursorPagination,
-    type AgentCreateParams as AgentCreateParams,
-    type AgentRetrieveParams as AgentRetrieveParams,
-    type AgentUpdateParams as AgentUpdateParams,
-    type AgentListParams as AgentListParams,
-    type AgentDeleteParams as AgentDeleteParams,
-    type AgentArchiveParams as AgentArchiveParams,
-    type AgentPublishParams as AgentPublishParams,
-    type AgentUnarchiveParams as AgentUnarchiveParams,
-    type AgentUnpublishParams as AgentUnpublishParams,
-  };
-
-  export {
-    Objectives as Objectives,
-    type AssistantMessage as AssistantMessage,
-    type AssistantToolCall as AssistantToolCall,
-    type CallableTool as CallableTool,
-    type CallableToolAgent as CallableToolAgent,
-    type CallableToolCadenyaProvidedTool as CallableToolCadenyaProvidedTool,
-    type CallableToolTool as CallableToolTool,
-    type ContextLengths as ContextLengths,
-    type ContextWindowCompacted as ContextWindowCompacted,
-    type MemoryRead as MemoryRead,
-    type MemoryReference as MemoryReference,
-    type Objective as Objective,
-    type ObjectiveConfigSnapshot as ObjectiveConfigSnapshot,
-    type ObjectiveContextWindow as ObjectiveContextWindow,
-    type ObjectiveContextWindowData as ObjectiveContextWindowData,
-    type ObjectiveDiagnostics as ObjectiveDiagnostics,
-    type ObjectiveError as ObjectiveError,
-    type ObjectiveEvent as ObjectiveEvent,
-    type ObjectiveEventData as ObjectiveEventData,
-    type ObjectiveEventDataAssistantMessage as ObjectiveEventDataAssistantMessage,
-    type ObjectiveEventDataCancelled as ObjectiveEventDataCancelled,
-    type ObjectiveEventDataContextWindowCompacted as ObjectiveEventDataContextWindowCompacted,
-    type ObjectiveEventDataError as ObjectiveEventDataError,
-    type ObjectiveEventDataFinalized as ObjectiveEventDataFinalized,
-    type ObjectiveEventDataMemoryRead as ObjectiveEventDataMemoryRead,
-    type ObjectiveEventDataNotice as ObjectiveEventDataNotice,
-    type ObjectiveEventDataReasoning as ObjectiveEventDataReasoning,
-    type ObjectiveEventDataSubAgentSpawned as ObjectiveEventDataSubAgentSpawned,
-    type ObjectiveEventDataSubAgentUpdated as ObjectiveEventDataSubAgentUpdated,
-    type ObjectiveEventDataTimedOut as ObjectiveEventDataTimedOut,
-    type ObjectiveEventDataToolApprovalRequested as ObjectiveEventDataToolApprovalRequested,
-    type ObjectiveEventDataToolApproved as ObjectiveEventDataToolApproved,
-    type ObjectiveEventDataToolCalled as ObjectiveEventDataToolCalled,
-    type ObjectiveEventDataToolDenied as ObjectiveEventDataToolDenied,
-    type ObjectiveEventDataToolError as ObjectiveEventDataToolError,
-    type ObjectiveEventDataToolResult as ObjectiveEventDataToolResult,
-    type ObjectiveEventDataUserMessage as ObjectiveEventDataUserMessage,
-    type ObjectiveEventInfo as ObjectiveEventInfo,
-    type ObjectiveEventWebhookData as ObjectiveEventWebhookData,
-    type ObjectiveInfo as ObjectiveInfo,
-    type ObjectiveSecret as ObjectiveSecret,
-    type Reasoning as Reasoning,
-    type SubAgentSpawned as SubAgentSpawned,
-    type SubAgentUpdated as SubAgentUpdated,
-    type ToolApprovalRequested as ToolApprovalRequested,
-    type ToolApproved as ToolApproved,
-    type ToolCalled as ToolCalled,
-    type ToolDenied as ToolDenied,
-    type ToolError as ToolError,
-    type ToolResult as ToolResult,
-    type UserMessage as UserMessage,
-    type ObjectiveCompactResponse as ObjectiveCompactResponse,
-    type ObjectiveRetrieveDiagnosticsResponse as ObjectiveRetrieveDiagnosticsResponse,
-    type ObjectivesCursorPagination as ObjectivesCursorPagination,
-    type ObjectiveContextWindowsCursorPagination as ObjectiveContextWindowsCursorPagination,
-    type ObjectiveEventsCursorPagination as ObjectiveEventsCursorPagination,
-    type ObjectiveCreateParams as ObjectiveCreateParams,
-    type ObjectiveRetrieveParams as ObjectiveRetrieveParams,
-    type ObjectiveListParams as ObjectiveListParams,
-    type ObjectiveCancelParams as ObjectiveCancelParams,
-    type ObjectiveCompactParams as ObjectiveCompactParams,
-    type ObjectiveContinueParams as ObjectiveContinueParams,
-    type ObjectiveListContextWindowsParams as ObjectiveListContextWindowsParams,
-    type ObjectiveListEventsParams as ObjectiveListEventsParams,
-    type ObjectiveRetrieveDiagnosticsParams as ObjectiveRetrieveDiagnosticsParams,
-    type ObjectiveStreamEventsParams as ObjectiveStreamEventsParams,
-  };
-
-  export {
-    MemoryLayers as MemoryLayers,
-    type MemoryLayer as MemoryLayer,
-    type MemoryLayerInfo as MemoryLayerInfo,
-    type MemoryLayerSpec as MemoryLayerSpec,
-    type MemoryLayersCursorPagination as MemoryLayersCursorPagination,
-    type MemoryLayerCreateParams as MemoryLayerCreateParams,
-    type MemoryLayerRetrieveParams as MemoryLayerRetrieveParams,
-    type MemoryLayerUpdateParams as MemoryLayerUpdateParams,
-    type MemoryLayerListParams as MemoryLayerListParams,
-    type MemoryLayerDeleteParams as MemoryLayerDeleteParams,
-  };
-
-  export {
-    UploadsAPIUploads as Uploads,
-    type Upload as Upload,
-    type UploadInfo as UploadInfo,
-    type UploadSpec as UploadSpec,
-    type UploadCreateParams as UploadCreateParams,
-    type UploadRetrieveParams as UploadRetrieveParams,
-  };
-
-  export {
-    Models as Models,
-    type CapabilityCaching as CapabilityCaching,
-    type CapabilityMaxOutputTokens as CapabilityMaxOutputTokens,
-    type CapabilityReasoning as CapabilityReasoning,
-    type CapabilityStopSequences as CapabilityStopSequences,
-    type CapabilityTemperature as CapabilityTemperature,
-    type CapabilityTopK as CapabilityTopK,
-    type CapabilityTopP as CapabilityTopP,
-    type Model as Model,
-    type ModelSpec as ModelSpec,
-    type ModelSpecCapability as ModelSpecCapability,
-    type ModelSpecCapabilityCaching as ModelSpecCapabilityCaching,
-    type ModelSpecCapabilityMaxOutputTokens as ModelSpecCapabilityMaxOutputTokens,
-    type ModelSpecCapabilityReasoning as ModelSpecCapabilityReasoning,
-    type ModelSpecCapabilityStopSequences as ModelSpecCapabilityStopSequences,
-    type ModelSpecCapabilityTemperature as ModelSpecCapabilityTemperature,
-    type ModelSpecCapabilityTopK as ModelSpecCapabilityTopK,
-    type ModelSpecCapabilityTopP as ModelSpecCapabilityTopP,
-    type ModelSwapResponse as ModelSwapResponse,
-    type ModelsCursorPagination as ModelsCursorPagination,
-    type ModelRetrieveParams as ModelRetrieveParams,
-    type ModelListParams as ModelListParams,
-    type ModelDisableParams as ModelDisableParams,
-    type ModelEnableParams as ModelEnableParams,
-    type ModelSwapParams as ModelSwapParams,
-  };
-
-  export {
-    Search as Search,
-    type SearchSearchToolsOrToolSetsResponse as SearchSearchToolsOrToolSetsResponse,
-    type SearchSearchToolsOrToolSetsParams as SearchSearchToolsOrToolSetsParams,
-  };
-
-  export {
-    ToolSets as ToolSets,
-    type ApprovalRequirementFilter as ApprovalRequirementFilter,
-    type ApprovalRequirementFilterAlways as ApprovalRequirementFilterAlways,
-    type ApprovalRequirementFilterOnly as ApprovalRequirementFilterOnly,
-    type AttributeFilter as AttributeFilter,
-    type StringMatcher as StringMatcher,
-    type StringMatcherContains as StringMatcherContains,
-    type StringMatcherEndsWith as StringMatcherEndsWith,
-    type StringMatcherExact as StringMatcherExact,
-    type StringMatcherRegex as StringMatcherRegex,
-    type StringMatcherStartsWith as StringMatcherStartsWith,
-    type SyncCompleted as SyncCompleted,
-    type SyncFailed as SyncFailed,
-    type SyncStarted as SyncStarted,
-    type ToolFilter as ToolFilter,
-    type ToolSet as ToolSet,
-    type ToolSetAdapter as ToolSetAdapter,
-    type ToolSetAdapterBare as ToolSetAdapterBare,
-    type ToolSetAdapterBareVariant as ToolSetAdapterBareVariant,
-    type ToolSetAdapterHTTP as ToolSetAdapterHTTP,
-    type ToolSetAdapterHTTPVariant as ToolSetAdapterHTTPVariant,
-    type ToolSetAdapterMCP as ToolSetAdapterMCP,
-    type ToolSetAdapterMCPVariant as ToolSetAdapterMCPVariant,
-    type ToolSetAdapterOpenAPI as ToolSetAdapterOpenAPI,
-    type ToolSetAdapterOpenAPIUploadID as ToolSetAdapterOpenAPIUploadID,
-    type ToolSetAdapterOpenAPIURL as ToolSetAdapterOpenAPIURL,
-    type ToolSetAdapterOpenAPIVariant as ToolSetAdapterOpenAPIVariant,
-    type ToolSetEvent as ToolSetEvent,
-    type ToolSetEventData as ToolSetEventData,
-    type ToolSetEventDataSyncCompleted as ToolSetEventDataSyncCompleted,
-    type ToolSetEventDataSyncFailed as ToolSetEventDataSyncFailed,
-    type ToolSetEventDataSyncStarted as ToolSetEventDataSyncStarted,
-    type ToolSetInfo as ToolSetInfo,
-    type ToolSetSpec as ToolSetSpec,
-    type ToolSetUsage as ToolSetUsage,
-    type ToolSetGetOpenAPISpecResponse as ToolSetGetOpenAPISpecResponse,
-    type ToolSetsCursorPagination as ToolSetsCursorPagination,
-    type ToolSetEventsCursorPagination as ToolSetEventsCursorPagination,
-    type ToolSetUsagesCursorPagination as ToolSetUsagesCursorPagination,
-    type ToolSetCreateParams as ToolSetCreateParams,
-    type ToolSetRetrieveParams as ToolSetRetrieveParams,
-    type ToolSetUpdateParams as ToolSetUpdateParams,
-    type ToolSetListParams as ToolSetListParams,
-    type ToolSetDeleteParams as ToolSetDeleteParams,
-    type ToolSetArchiveParams as ToolSetArchiveParams,
-    type ToolSetGetOpenAPISpecParams as ToolSetGetOpenAPISpecParams,
-    type ToolSetListEventsParams as ToolSetListEventsParams,
-    type ToolSetListUsageParams as ToolSetListUsageParams,
-    type ToolSetUnarchiveParams as ToolSetUnarchiveParams,
-  };
-
-  export {
-    APIKeys as APIKeys,
-    type APIKey as APIKey,
-    type APIKeyInfo as APIKeyInfo,
-    type APIKeySpec as APIKeySpec,
-    type APIKeysCursorPagination as APIKeysCursorPagination,
-    type APIKeyCreateParams as APIKeyCreateParams,
-    type APIKeyRetrieveParams as APIKeyRetrieveParams,
-    type APIKeyUpdateParams as APIKeyUpdateParams,
-    type APIKeyListParams as APIKeyListParams,
-    type APIKeyDeleteParams as APIKeyDeleteParams,
-    type APIKeyDisableParams as APIKeyDisableParams,
-    type APIKeyEnableParams as APIKeyEnableParams,
-    type APIKeyRotateParams as APIKeyRotateParams,
-  };
-
-  export { GlobalAPIKey as GlobalAPIKey };
-
-  export {
-    WorkspaceSecrets as WorkspaceSecrets,
-    type WorkspaceSecret as WorkspaceSecret,
-    type WorkspaceSecretInfo as WorkspaceSecretInfo,
-    type WorkspaceSecretSpec as WorkspaceSecretSpec,
-    type WorkspaceSecretsCursorPagination as WorkspaceSecretsCursorPagination,
-    type WorkspaceSecretCreateParams as WorkspaceSecretCreateParams,
-    type WorkspaceSecretRetrieveParams as WorkspaceSecretRetrieveParams,
-    type WorkspaceSecretUpdateParams as WorkspaceSecretUpdateParams,
-    type WorkspaceSecretListParams as WorkspaceSecretListParams,
-    type WorkspaceSecretDeleteParams as WorkspaceSecretDeleteParams,
-  };
-
-  export {
-    Workspaces as Workspaces,
-    type Workspace as Workspace,
-    type WorkspaceSpec as WorkspaceSpec,
-    type WorkspacesCursorPagination as WorkspacesCursorPagination,
-    type WorkspaceListParams as WorkspaceListParams,
-  };
-
-  export {
-    WorkspaceAdmin as WorkspaceAdmin,
-    type WorkspaceMember as WorkspaceMember,
-    type WorkspaceAdminCreateParams as WorkspaceAdminCreateParams,
-    type WorkspaceAdminRetrieveParams as WorkspaceAdminRetrieveParams,
-    type WorkspaceAdminUpdateParams as WorkspaceAdminUpdateParams,
-    type WorkspaceAdminListParams as WorkspaceAdminListParams,
-    type WorkspaceAdminArchiveParams as WorkspaceAdminArchiveParams,
-  };
-
-  export {
-    Webhooks as Webhooks,
-    type UnsafeUnwrapWebhookEvent as UnsafeUnwrapWebhookEvent,
-    type UnwrapWebhookEvent as UnwrapWebhookEvent,
-  };
-
-  export {
-    Widgets as Widgets,
-    type Widget as Widget,
-    type WidgetInfo as WidgetInfo,
-    type WidgetSpec as WidgetSpec,
-    type WidgetsCursorPagination as WidgetsCursorPagination,
-    type WidgetCreateParams as WidgetCreateParams,
-    type WidgetRetrieveParams as WidgetRetrieveParams,
-    type WidgetUpdateParams as WidgetUpdateParams,
-    type WidgetListParams as WidgetListParams,
-    type WidgetDeleteParams as WidgetDeleteParams,
-    type WidgetArchiveParams as WidgetArchiveParams,
-    type WidgetUnarchiveParams as WidgetUnarchiveParams,
-  };
-
-  export {
-    Tenants as Tenants,
-    type Subject as Subject,
-    type SubjectInfo as SubjectInfo,
-    type Tenant as Tenant,
-    type TenantInfo as TenantInfo,
-    type TenantsCursorPagination as TenantsCursorPagination,
-    type TenantRetrieveParams as TenantRetrieveParams,
-    type TenantListParams as TenantListParams,
-    type TenantDeleteParams as TenantDeleteParams,
-  };
-
-  export {
-    WidgetSessions as WidgetSessions,
-    type SubjectAssertion as SubjectAssertion,
-    type SubjectReference as SubjectReference,
-    type TenantAssertion as TenantAssertion,
-    type TenantReference as TenantReference,
-    type WidgetSession as WidgetSession,
-    type WidgetSessionInfo as WidgetSessionInfo,
-    type WidgetSessionSpec as WidgetSessionSpec,
-    type WidgetSessionDeleteTenantResponse as WidgetSessionDeleteTenantResponse,
-    type WidgetSessionsCursorPagination as WidgetSessionsCursorPagination,
-    type WidgetSessionCreateParams as WidgetSessionCreateParams,
-    type WidgetSessionRetrieveParams as WidgetSessionRetrieveParams,
-    type WidgetSessionListParams as WidgetSessionListParams,
-    type WidgetSessionDeleteParams as WidgetSessionDeleteParams,
-    type WidgetSessionDeleteTenantParams as WidgetSessionDeleteTenantParams,
-    type WidgetSessionRevokeParams as WidgetSessionRevokeParams,
-  };
-
-  export type AccountResourceMetadata = API.AccountResourceMetadata;
-  export type BareMetadata = API.BareMetadata;
-  export type CreateOperationMetadata = API.CreateOperationMetadata;
-  export type CreateResourceMetadata = API.CreateResourceMetadata;
-  export type OperationMetadata = API.OperationMetadata;
-  export type ResourceMetadata = API.ResourceMetadata;
-  export type UpdateResourceMetadata = API.UpdateResourceMetadata;
+  return env?.trim() || undefined;
 }