@cadenya/widgets 1.1.1 → 1.3.0

package/api.md

@@ -64,3 +64,11 @@ Send the next message
 ```ts
 client.conversations.continue(id: string, params: ConversationContinueParams, options?: RequestOptions): APIPromise<WidgetConversation>
 ```
+
+## session
+
+Renew a widget session token
+
+```ts
+client.session.renewWidget(params: SessionRenewWidgetParams, options?: RequestOptions): APIPromise<WidgetSessionCredentials>
+```

package/dist/client.d.ts

@@ -1,6 +1,7 @@
 import type { Logger, LogLevel } from './core/http.js';
 import { Config } from './resources/config.js';
 import { Conversations } from './resources/conversations.js';
+import { Session } from './resources/session.js';
 export interface ClientOptions {
     /** API key. Defaults to the CADENYAWIDGETS_API_KEY environment variable. */
     apiKey?: string;
@@ -27,6 +28,7 @@ export interface ClientOptions {
 export declare class CadenyaWidgets {
     readonly config: Config;
     readonly conversations: Conversations;
+    readonly session: Session;
     private readonly _client;
     constructor(options?: ClientOptions);
 }

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IAEtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;gBAEzB,OAAO,GAAE,aAAkB;CAuBxC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,qBAAa,cAAc;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;gBAEzB,OAAO,GAAE,aAAkB;CAwBxC"}

package/dist/client.js

@@ -2,9 +2,11 @@
 import { HttpClient } from './core/http.js';
 import { Config } from './resources/config.js';
 import { Conversations } from './resources/conversations.js';
+import { Session } from './resources/session.js';
 export class CadenyaWidgets {
     config;
     conversations;
+    session;
     _client;
     constructor(options = {}) {
         // Presence is not validity: empty strings from options or environment
@@ -18,7 +20,7 @@ export class CadenyaWidgets {
             authHeader: () => ({ Authorization: `Bearer ${apiKey}` }),
             maxRetries: options.maxRetries ?? 0,
             timeout: options.timeout,
-            defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.1.1 (api 1.0)'), ...options.defaultHeaders },
+            defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.3.0 (api 1.0)'), ...options.defaultHeaders },
             fetch: options.fetch,
             logger: options.logger,
             logLevel: options.logLevel,
@@ -26,6 +28,7 @@ export class CadenyaWidgets {
         });
         this.config = new Config(this._client);
         this.conversations = new Conversations(this._client);
+        this.session = new Session(this._client);
     }
 }
 // Browser-authored User-Agent headers require CORS permission. Only Node-compatible

package/dist/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AA0B7D,MAAM,OAAO,cAAc;IAChB,MAAM,CAAS;IACf,aAAa,CAAgB;IAErB,OAAO,CAAa;IAErC,YAAY,UAAyB,EAAE;QACrC,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,wHAAwH,CACzH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC;YAC5B,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,EAAE;YAC5F,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC;YACzD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,EAAE,GAAG,aAAa,CAAC,2CAA2C,CAAC,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE;YAC5G,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,EAAI;SACf,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvD,CAAC;CACF;AAED,oFAAoF;AACpF,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,WAAW,GAAI,UAA6D;SAC/E,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;IAC3B,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAI,UAAyE;SACnF,OAAO,EAAE,GAAG,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,SAAS,aAAa,CACpB,KAAa,EACb,QAA4B,EAC5B,GAAuB;IAEvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sFAAsF,CAC/F,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAClC,CAAC","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\nimport { HttpClient } from './core/http.js';\nimport type { Logger, LogLevel } from './core/http.js';\nimport { Config } from './resources/config.js';\nimport { Conversations } from './resources/conversations.js';\n\nexport interface ClientOptions {\n  /** API key. Defaults to the CADENYAWIDGETS_API_KEY environment variable. */\n  apiKey?: string;\n  /** Override the API base URL. Defaults to . */\n  baseURL?: string;\n  /** Max automatic retries for retryable failures. Defaults to 0. */\n  maxRetries?: number;\n  /**\n   * Deadline for ordinary (non-streaming) requests in milliseconds; override\n   * per request with `options.timeout`. Streams bound only response-header\n   * acquisition — body lifetime stays under the caller's AbortSignal.\n   * Defaults to 60000; a non-finite or <= 0 value disables the deadline.\n   */\n  timeout?: number;\n  /** Additional request headers. Browsers supply their own User-Agent by default. */\n  defaultHeaders?: Record<string, string>;\n  /** Custom fetch implementation. */\n  fetch?: typeof fetch;\n  /** Destination for SDK logs. Defaults to `console`. */\n  logger?: Logger;\n  /** 'debug' | 'warn' (default) | 'off'. Never logs headers or bodies. */\n  logLevel?: LogLevel;\n}\n\nexport class CadenyaWidgets {\n  readonly config: Config;\n  readonly conversations: Conversations;\n\n  private readonly _client: HttpClient;\n\n  constructor(options: ClientOptions = {}) {\n    // Presence is not validity: empty strings from options or environment\n    // are configuration mistakes, not credentials.\n    const apiKey = resolveOption('apiKey', options.apiKey, readEnv('CADENYAWIDGETS_API_KEY'));\n    if (!apiKey) {\n      throw new Error(\n        \"Missing API key. Pass it with `new CadenyaWidgets({ apiKey })` or set the CADENYAWIDGETS_API_KEY environment variable.\",\n      );\n    }\n    this._client = new HttpClient({\n      baseURL: resolveOption('baseURL', options.baseURL, readEnv('CADENYAWIDGETS_BASE_URL')) ?? '',\n      authHeader: () => ({ Authorization: `Bearer ${apiKey}` }),\n      maxRetries: options.maxRetries ?? 0,\n      timeout: options.timeout,\n      defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.1.1 (api 1.0)'), ...options.defaultHeaders },\n      fetch: options.fetch,\n      logger: options.logger,\n      logLevel: options.logLevel,\n      defaults: {  },\n    });\n    this.config = new Config(this._client);\n    this.conversations = new Conversations(this._client);\n  }\n}\n\n// Browser-authored User-Agent headers require CORS permission. Only Node-compatible\n// runtimes receive the SDK default; browsers and workers use their native header.\nfunction nodeUserAgent(value: string): Record<string, string> {\n  const nodeVersion = (globalThis as { process?: { versions?: { node?: string } } })\n    .process?.versions?.node;\n  return nodeVersion ? { 'User-Agent': value } : {};\n}\n\nfunction readEnv(name: string): string | undefined {\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } })\n    .process?.env;\n  return env?.[name];\n}\n\n// Presence is not validity: an explicitly provided option must be usable —\n// a blank value is a configuration mistake and never silently falls back to\n// the environment or a default. Only an OMITTED option reads the env.\nfunction resolveOption(\n  label: string,\n  explicit: string | undefined,\n  env: string | undefined,\n): string | undefined {\n  if (explicit !== undefined) {\n    const value = explicit.trim();\n    if (!value) {\n      throw new Error(\n        `${label} must not be blank when provided explicitly; omit it to use the environment instead.`,\n      );\n    }\n    return value;\n  }\n  return env?.trim() || undefined;\n}\n"]}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AA0BjD,MAAM,OAAO,cAAc;IAChB,MAAM,CAAS;IACf,aAAa,CAAgB;IAC7B,OAAO,CAAU;IAET,OAAO,CAAa;IAErC,YAAY,UAAyB,EAAE;QACrC,sEAAsE;QACtE,+CAA+C;QAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,wHAAwH,CACzH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,UAAU,CAAC;YAC5B,OAAO,EAAE,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,IAAI,EAAE;YAC5F,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC;YACzD,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,CAAC;YACnC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,EAAE,GAAG,aAAa,CAAC,2CAA2C,CAAC,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE;YAC5G,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,EAAI;SACf,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,oFAAoF;AACpF,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,WAAW,GAAI,UAA6D;SAC/E,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;IAC3B,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,GAAG,GAAI,UAAyE;SACnF,OAAO,EAAE,GAAG,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,2EAA2E;AAC3E,4EAA4E;AAC5E,sEAAsE;AACtE,SAAS,aAAa,CACpB,KAAa,EACb,QAA4B,EAC5B,GAAuB;IAEvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,sFAAsF,CAC/F,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAClC,CAAC","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\nimport { HttpClient } from './core/http.js';\nimport type { Logger, LogLevel } from './core/http.js';\nimport { Config } from './resources/config.js';\nimport { Conversations } from './resources/conversations.js';\nimport { Session } from './resources/session.js';\n\nexport interface ClientOptions {\n  /** API key. Defaults to the CADENYAWIDGETS_API_KEY environment variable. */\n  apiKey?: string;\n  /** Override the API base URL. Defaults to . */\n  baseURL?: string;\n  /** Max automatic retries for retryable failures. Defaults to 0. */\n  maxRetries?: number;\n  /**\n   * Deadline for ordinary (non-streaming) requests in milliseconds; override\n   * per request with `options.timeout`. Streams bound only response-header\n   * acquisition — body lifetime stays under the caller's AbortSignal.\n   * Defaults to 60000; a non-finite or <= 0 value disables the deadline.\n   */\n  timeout?: number;\n  /** Additional request headers. Browsers supply their own User-Agent by default. */\n  defaultHeaders?: Record<string, string>;\n  /** Custom fetch implementation. */\n  fetch?: typeof fetch;\n  /** Destination for SDK logs. Defaults to `console`. */\n  logger?: Logger;\n  /** 'debug' | 'warn' (default) | 'off'. Never logs headers or bodies. */\n  logLevel?: LogLevel;\n}\n\nexport class CadenyaWidgets {\n  readonly config: Config;\n  readonly conversations: Conversations;\n  readonly session: Session;\n\n  private readonly _client: HttpClient;\n\n  constructor(options: ClientOptions = {}) {\n    // Presence is not validity: empty strings from options or environment\n    // are configuration mistakes, not credentials.\n    const apiKey = resolveOption('apiKey', options.apiKey, readEnv('CADENYAWIDGETS_API_KEY'));\n    if (!apiKey) {\n      throw new Error(\n        \"Missing API key. Pass it with `new CadenyaWidgets({ apiKey })` or set the CADENYAWIDGETS_API_KEY environment variable.\",\n      );\n    }\n    this._client = new HttpClient({\n      baseURL: resolveOption('baseURL', options.baseURL, readEnv('CADENYAWIDGETS_BASE_URL')) ?? '',\n      authHeader: () => ({ Authorization: `Bearer ${apiKey}` }),\n      maxRetries: options.maxRetries ?? 0,\n      timeout: options.timeout,\n      defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.3.0 (api 1.0)'), ...options.defaultHeaders },\n      fetch: options.fetch,\n      logger: options.logger,\n      logLevel: options.logLevel,\n      defaults: {  },\n    });\n    this.config = new Config(this._client);\n    this.conversations = new Conversations(this._client);\n    this.session = new Session(this._client);\n  }\n}\n\n// Browser-authored User-Agent headers require CORS permission. Only Node-compatible\n// runtimes receive the SDK default; browsers and workers use their native header.\nfunction nodeUserAgent(value: string): Record<string, string> {\n  const nodeVersion = (globalThis as { process?: { versions?: { node?: string } } })\n    .process?.versions?.node;\n  return nodeVersion ? { 'User-Agent': value } : {};\n}\n\nfunction readEnv(name: string): string | undefined {\n  const env = (globalThis as { process?: { env?: Record<string, string | undefined> } })\n    .process?.env;\n  return env?.[name];\n}\n\n// Presence is not validity: an explicitly provided option must be usable —\n// a blank value is a configuration mistake and never silently falls back to\n// the environment or a default. Only an OMITTED option reads the env.\nfunction resolveOption(\n  label: string,\n  explicit: string | undefined,\n  env: string | undefined,\n): string | undefined {\n  if (explicit !== undefined) {\n    const value = explicit.trim();\n    if (!value) {\n      throw new Error(\n        `${label} must not be blank when provided explicitly; omit it to use the environment instead.`,\n      );\n    }\n    return value;\n  }\n  return env?.trim() || undefined;\n}\n"]}

package/dist/index.d.ts

@@ -9,4 +9,5 @@ export type { ServerSentEvent } from './core/sse.js';
 export * from './types.js';
 export * from './resources/config.js';
 export * from './resources/conversations.js';
+export * from './resources/session.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACtI,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACtI,YAAY,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC"}

package/dist/index.js

@@ -7,4 +7,5 @@ export { Stream } from './core/sse.js';
 export * from './types.js';
 export * from './resources/config.js';
 export * from './resources/conversations.js';
+export * from './resources/session.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEtI,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\nexport { CadenyaWidgets, CadenyaWidgets as default } from './client.js';\nexport type { ClientOptions } from './client.js';\nexport { APIError, APIConnectionError, APIUserAbortError, APIRequestError, APIResponseError, APITimeoutError } from './core/error.js';\nexport type { RequestOptions } from './core/http.js';\nexport { APIPromise } from './core/http.js';\nexport { Page } from './core/pagination.js';\nexport { Stream } from './core/sse.js';\nexport type { ServerSentEvent } from './core/sse.js';\nexport * from './types.js';\nexport * from './resources/config.js';\nexport * from './resources/conversations.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAAE,cAAc,EAAE,cAAc,IAAI,OAAO,EAAE,MAAM,aAAa,CAAC;AAExE,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEtI,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAEvC,cAAc,YAAY,CAAC;AAC3B,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wBAAwB,CAAC","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\nexport { CadenyaWidgets, CadenyaWidgets as default } from './client.js';\nexport type { ClientOptions } from './client.js';\nexport { APIError, APIConnectionError, APIUserAbortError, APIRequestError, APIResponseError, APITimeoutError } from './core/error.js';\nexport type { RequestOptions } from './core/http.js';\nexport { APIPromise } from './core/http.js';\nexport { Page } from './core/pagination.js';\nexport { Stream } from './core/sse.js';\nexport type { ServerSentEvent } from './core/sse.js';\nexport * from './types.js';\nexport * from './resources/config.js';\nexport * from './resources/conversations.js';\nexport * from './resources/session.js';\n"]}

package/dist/resources/session.d.ts

@@ -0,0 +1,23 @@
+import { HttpClient, RequestOptions, APIPromise } from '../core/http.js';
+import type { WidgetSessionCredentials } from '../types.js';
+export interface SessionRenewWidgetParams {
+    /**
+     * Required workspace containing the authenticated session. Must match the
+     *  session resolved from the bearer token; never authorizes access by itself.
+     */
+    workspaceId: string;
+}
+export declare class Session {
+    private readonly _client;
+    constructor(_client: HttpClient);
+    /**
+     * Renew a widget session token
+     *
+     * @example
+     * ```ts
+     * const widgetSessionCredentials = await client.session.renewWidget({ workspaceId: 'workspace_123' });
+     * ```
+     */
+    renewWidget(params: SessionRenewWidgetParams, options?: RequestOptions): APIPromise<WidgetSessionCredentials>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/resources/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/resources/session.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAe,MAAM,iBAAiB,CAAC;AACtF,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,wBAAwB;IACvC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,UAAU;IAEhD;;;;;;;OAOG;IACH,WAAW,CAAC,MAAM,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC,wBAAwB,CAAC;CAK9G"}

package/dist/resources/session.js

@@ -0,0 +1,22 @@
+// Generated by redwood. Do not edit by hand.
+import { pathSegment } from '../core/http.js';
+export class Session {
+    _client;
+    constructor(_client) {
+        this._client = _client;
+    }
+    /**
+     * Renew a widget session token
+     *
+     * @example
+     * ```ts
+     * const widgetSessionCredentials = await client.session.renewWidget({ workspaceId: 'workspace_123' });
+     * ```
+     */
+    renewWidget(params, options) {
+        return this._client.requestAPI(() => {
+            return { method: 'POST', path: `/v1/workspaces/${pathSegment('workspaceId', params.workspaceId)}/session:renew` };
+        }, options);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/resources/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/resources/session.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAE7C,OAAO,EAA0C,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAWtF,MAAM,OAAO,OAAO;IACW;IAA7B,YAA6B,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;IAAG,CAAC;IAEpD;;;;;;;OAOG;IACH,WAAW,CAAC,MAAgC,EAAE,OAAwB;QACpE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAA2B,GAAG,EAAE;YAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACpH,CAAC,EAAE,OAAO,CAAC,CAAC;IACd,CAAC;CACF","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\nimport { HttpClient, RequestOptions, APIPromise, pathSegment } from '../core/http.js';\nimport type { WidgetSessionCredentials } from '../types.js';\n\nexport interface SessionRenewWidgetParams {\n  /**\n   * Required workspace containing the authenticated session. Must match the\n   *  session resolved from the bearer token; never authorizes access by itself.\n   */\n  workspaceId: string;\n}\n\nexport class Session {\n  constructor(private readonly _client: HttpClient) {}\n\n  /**\n   * Renew a widget session token\n   * \n   * @example\n   * ```ts\n   * const widgetSessionCredentials = await client.session.renewWidget({ workspaceId: 'workspace_123' });\n   * ```\n   */\n  renewWidget(params: SessionRenewWidgetParams, options?: RequestOptions): APIPromise<WidgetSessionCredentials> {\n    return this._client.requestAPI<WidgetSessionCredentials>(() => {\n      return { method: 'POST', path: `/v1/workspaces/${pathSegment('workspaceId', params.workspaceId)}/session:renew` };\n    }, options);\n  }\n}\n"]}

package/dist/types.d.ts

@@ -90,6 +90,21 @@ export interface Page {
      */
     total?: number;
 }
+/**
+ * RenewWidgetSessionRequest has no session ID or credential in its body.
+ *  The verified bearer token identifies the existing session. The server
+ *  rechecks current session and authorization policy before issuing a token.
+ *  Token validation allows 60 seconds of clock skew: now must be strictly
+ *  before exp + 60 seconds. Hard session expiry has no tolerance. A token
+ *  beyond this window cannot renew even while the session remains active.
+ */
+export interface RenewWidgetSessionRequest {
+    /**
+     * Required workspace containing the authenticated session. Must match the
+     *  session resolved from the bearer token; never authorizes access by itself.
+     */
+    workspaceId?: string;
+}
 /**
  * Set tool call content request. Lets the embedding page supply the result
  *  of a bare tool call (one whose tool set has no execution adapter) — the
@@ -111,6 +126,7 @@ export interface SetToolCallContentRequest {
      */
     content: string;
 }
+export type StatusDetails = WidgetSessionErrorInfo | GoogleProtobufAny;
 /**
  * The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).
  */
@@ -126,7 +142,7 @@ export interface Status {
     /**
      * A list of messages that carry the error details.  There is a common set of message types for APIs to use.
      */
-    details?: Array<GoogleProtobufAny>;
+    details?: Array<StatusDetails>;
 }
 /**
  * Submit conversation feedback request — the visitor's rating of a
@@ -175,13 +191,10 @@ export interface WidgetConfig {
 }
 export type WidgetConversationState = 'STATE_UNSPECIFIED' | 'STATE_RESPONDING' | 'STATE_OPEN' | 'STATE_CLOSED';
 /**
- * WidgetConversation is one conversation between the session's visitor and
- *  the widget's agent. Conversations are scoped by the presenting token to the
- *  VISITOR: a session with a subject sees that subject's conversations on this
- *  widget; a session without one sees only the conversations it created
- *  itself. A conversation id from outside that scope is indistinguishable from
- *  one that does not exist. Tenant is a management-side grouping only — it is
- *  never a read scope on this surface.
+ * WidgetConversation is one conversation between a visitor and a widget's
+ *  agent. The presenting session must have a tenant and subject. Sessions for
+ *  that same identity share history on the same widget and agent, subject to
+ *  the current session's permissions. Other conversation IDs return not found.
  */
 export interface WidgetConversation {
     id: string;
@@ -214,7 +227,7 @@ export interface WidgetErrorEvent {
  *  strings. Tool arguments cross this boundary only when an enabled tool set
  *  overlay explicitly opts the matching tool in.
  */
-export type WidgetEvent = WidgetEvent_UserMessage | WidgetEvent_AssistantMessage | WidgetEvent_ToolApprovalRequested | WidgetEvent_ToolApproved | WidgetEvent_ToolDenied | WidgetEvent_ToolCalled | WidgetEvent_ToolResult | WidgetEvent_ToolError | WidgetEvent_Error | WidgetEvent_Cancelled | WidgetEvent_TimedOut | WidgetEvent_Finalized;
+export type WidgetEvent = WidgetEvent_UserMessage | WidgetEvent_AssistantMessage | WidgetEvent_ToolApprovalRequested | WidgetEvent_ToolApproved | WidgetEvent_ToolDenied | WidgetEvent_ToolCalled | WidgetEvent_ToolResult | WidgetEvent_ToolError | WidgetEvent_Error | WidgetEvent_Cancelled | WidgetEvent_TimedOut | WidgetEvent_Finalized | WidgetEvent_Heartbeat | WidgetEvent_StateChanged;
 /**
  * WidgetFinalizedEvent: the conversation's agent produced its structured
  *  output and the objective reached its terminal state. Only agents with an
@@ -229,6 +242,54 @@ export interface WidgetFinalizedEvent {
      */
     output?: Record<string, unknown>;
 }
+/**
+ * WidgetHeartbeatEvent mirrors objective heartbeat liveness. It is live-only,
+ *  absent from history, and never a reconnect checkpoint or state transition.
+ */
+export interface WidgetHeartbeatEvent {
+}
+export type WidgetObjectiveStateChangedEventFromState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';
+export type WidgetObjectiveStateChangedEventToState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';
+/**
+ * WidgetObjectiveStateChangedEvent mirrors a durable objective transition.
+ *  Internal status messages are intentionally omitted. Pending/running maps
+ *  to a responding conversation, waiting to open, and terminal states to closed.
+ */
+export interface WidgetObjectiveStateChangedEvent {
+    fromState: WidgetObjectiveStateChangedEventFromState;
+    toState: WidgetObjectiveStateChangedEventToState;
+}
+/**
+ * WidgetSessionCredentials is the browser-safe projection of creation
+ *  credentials. Renewal returns the same fields, including exact token expiry
+ *  and immutable session expiry, without importing the management API module.
+ *  Responses containing credentials use Cache-Control: no-store.
+ */
+export interface WidgetSessionCredentials {
+    /**
+     * Canonical wsess_ identifier. Ordinary renewal cannot change the session.
+     */
+    sessionId: string;
+    /**
+     * Authoritative hostname, without a scheme or path. Use HTTPS with this
+     *  host; never construct it or accept a host change during renewal.
+     */
+    host: string;
+    /**
+     * Short-lived bearer credential for the widget host only.
+     */
+    token: string;
+    /**
+     * Exact token expiry, at most 15 minutes after issuance and never later
+     *  than session_expires_at. Equals JWT exp without the 60-second validation
+     *  tolerance added. Renew proactively before this timestamp.
+     */
+    tokenExpiresAt: string;
+    /**
+     * Immutable hard session expiry. Issuance never extends this deadline.
+     */
+    sessionExpiresAt: string;
+}
 /**
  * WidgetTimedOutEvent: the conversation timed out after inactivity. Terminal.
  */
@@ -327,8 +388,9 @@ export interface WidgetEvent_UserMessage {
     type: 'userMessage';
     userMessage: WidgetUserMessageEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -341,8 +403,9 @@ export interface WidgetEvent_AssistantMessage {
     type: 'assistantMessage';
     assistantMessage: WidgetAssistantMessageEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -355,8 +418,9 @@ export interface WidgetEvent_ToolApprovalRequested {
     type: 'toolApprovalRequested';
     toolApprovalRequested: WidgetToolApprovalRequestedEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -369,8 +433,9 @@ export interface WidgetEvent_ToolApproved {
     type: 'toolApproved';
     toolApproved: WidgetToolApprovedEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -383,8 +448,9 @@ export interface WidgetEvent_ToolDenied {
     type: 'toolDenied';
     toolDenied: WidgetToolDeniedEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -397,8 +463,9 @@ export interface WidgetEvent_ToolCalled {
     type: 'toolCalled';
     toolCalled: WidgetToolCalledEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -411,8 +478,9 @@ export interface WidgetEvent_ToolResult {
     type: 'toolResult';
     toolResult: WidgetToolResultEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -425,8 +493,9 @@ export interface WidgetEvent_ToolError {
     type: 'toolError';
     toolError: WidgetToolErrorEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -439,8 +508,9 @@ export interface WidgetEvent_Error {
     type: 'error';
     error: WidgetErrorEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -453,8 +523,9 @@ export interface WidgetEvent_Cancelled {
     type: 'cancelled';
     cancelled: WidgetCancelledEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -467,8 +538,9 @@ export interface WidgetEvent_TimedOut {
     type: 'timedOut';
     timedOut: WidgetTimedOutEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -481,8 +553,9 @@ export interface WidgetEvent_Finalized {
     type: 'finalized';
     finalized: WidgetFinalizedEvent;
     /**
-     * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-     *  `Last-Event-ID` on reconnect to resume without duplication.
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
      */
     id: string;
     /**
@@ -491,4 +564,50 @@ export interface WidgetEvent_Finalized {
     conversationId: string;
     createdAt: string;
 }
+export interface WidgetEvent_Heartbeat {
+    type: 'heartbeat';
+    heartbeat: WidgetHeartbeatEvent;
+    /**
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
+     */
+    id: string;
+    /**
+     * The conversation this event belongs to.
+     */
+    conversationId: string;
+    createdAt: string;
+}
+export interface WidgetEvent_StateChanged {
+    type: 'stateChanged';
+    stateChanged: WidgetObjectiveStateChangedEvent;
+    /**
+     * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+     *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+     *  Transient heartbeats carry hb_ IDs in this payload only.
+     */
+    id: string;
+    /**
+     * The conversation this event belongs to.
+     */
+    conversationId: string;
+    createdAt: string;
+}
+/**
+ * TOKEN_EXPIRED identifies access-token expiry beyond the 60-second clock-skew tolerance. That token cannot renew; use already-installed newer credentials or require explicit app reauthentication. SESSION_* reasons are terminal. Never infer renewability from HTTP status alone.
+ */
+export type WidgetSessionErrorReason = 'TOKEN_EXPIRED' | 'SESSION_REVOKED' | 'SESSION_EXPIRED' | 'SESSION_EXHAUSTED';
+/**
+ * google.rpc.ErrorInfo detail for widget lifecycle failures. Match both domain and reason; ignore unknown reasons rather than renewing automatically.
+ */
+export interface WidgetSessionErrorInfo {
+    '@type': 'type.googleapis.com/google.rpc.ErrorInfo';
+    domain: 'api.cadenya.com';
+    reason: WidgetSessionErrorReason;
+    /**
+     * Optional non-sensitive context. Never contains tokens or secrets.
+     */
+    metadata?: Record<string, string>;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,IAAI;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;CACpC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,YAAY,GAAG,cAAc,CAAC;AAE/G;;;;;;;;GAQG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,uBAAuB,CAAC;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GACnB,uBAAuB,GACvB,4BAA4B,GAC5B,iCAAiC,GACjC,wBAAwB,GACxB,sBAAsB,GACtB,sBAAsB,GACtB,sBAAsB,GACtB,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,sBAAsB,CAAC;IACpC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,kBAAkB,CAAC;IACzB,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,qBAAqB,EAAE,gCAAgC,CAAC;IACxD;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,uBAAuB,CAAC;IACtC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;OAGG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAE1C;;GAEG;AACH,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,IAAI;IACnB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,yBAAyB;IACxC;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;OAEG;IACH,OAAO,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD;;OAEG;IACH,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;CACpC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,YAAY,GAAG,cAAc,CAAC;AAE/G;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,uBAAuB,CAAC;IAC/B;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,WAAW,GACnB,uBAAuB,GACvB,4BAA4B,GAC5B,iCAAiC,GACjC,wBAAwB,GACxB,sBAAsB,GACtB,sBAAsB,GACtB,sBAAsB,GACtB,qBAAqB,GACrB,iBAAiB,GACjB,qBAAqB,GACrB,oBAAoB,GACpB,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;CACpC;AAED,MAAM,MAAM,yCAAyC,GAAG,oCAAoC,GAAG,gCAAgC,GAAG,gCAAgC,GAAG,gCAAgC,GAAG,+BAA+B,GAAG,kCAAkC,GAAG,kCAAkC,GAAG,kCAAkC,CAAC;AAEvV,MAAM,MAAM,uCAAuC,GAAG,oCAAoC,GAAG,gCAAgC,GAAG,gCAAgC,GAAG,gCAAgC,GAAG,+BAA+B,GAAG,kCAAkC,GAAG,kCAAkC,GAAG,kCAAkC,CAAC;AAErV;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,SAAS,EAAE,yCAAyC,CAAC;IACrD,OAAO,EAAE,uCAAuC,CAAC;CAClD;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;CACnC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,sBAAsB,CAAC;IACpC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,kBAAkB,CAAC;IACzB,gBAAgB,EAAE,2BAA2B,CAAC;IAC9C;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,EAAE,uBAAuB,CAAC;IAC9B,qBAAqB,EAAE,gCAAgC,CAAC;IACxD;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,uBAAuB,CAAC;IACtC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,EAAE,qBAAqB,CAAC;IAClC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,gBAAgB,CAAC;IACxB;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,oBAAoB,CAAC;IAChC;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,gCAAgC,CAAC;IAC/C;;;;OAIG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,mBAAmB,CAAC;AAErH;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,0CAA0C,CAAC;IACpD,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,EAAE,wBAAwB,CAAC;IACjC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC"}

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,6CAA6C","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\n/**\n * Approve tool call request. Responds to a toolApprovalRequested event.\n */\nexport interface ApproveToolCallRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The tool call awaiting a decision, from the toolApprovalRequested event.\n   */\n  toolCallId?: string;\n}\n\n/**\n * Continue conversation request.\n */\nexport interface ContinueConversationRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The visitor's next message.\n   */\n  message: string;\n}\n\n/**\n * Create conversation request. The session, tenant, subject, secrets, labels,\n *  and pinned parameters all come from the presenting token's session — the\n *  browser asserts nothing.\n */\nexport interface CreateConversationRequest {\n  /**\n   * The visitor's opening message.\n   */\n  message: string;\n}\n\n/**\n * Deny tool call request. Responds to a toolApprovalRequested event.\n */\nexport interface DenyToolCallRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The tool call awaiting a decision, from the toolApprovalRequested event.\n   */\n  toolCallId?: string;\n}\n\n/**\n * Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.\n */\nexport interface GoogleProtobufAny {\n  /**\n   * The type of the serialized message.\n   */\n  '@type'?: string;\n}\n\n/**\n * Represents a dynamically typed value which can be either null, a number, a string, a boolean, a recursive struct value, or a list of values.\n */\nexport type GoogleProtobufValue = unknown;\n\n/**\n * List conversation events response. Ordered oldest first.\n */\nexport interface ListConversationEventsResponse {\n  items?: Array<WidgetEvent>;\n  pagination?: Page;\n}\n\n/**\n * List conversations response. Ordered by last activity, newest first.\n */\nexport interface ListConversationsResponse {\n  items?: Array<WidgetConversation>;\n  pagination?: Page;\n}\n\n/**\n * Page carries pagination data for list responses. A deliberate local\n *  duplicate of the api module's Page — this package imports nothing from\n *  cadenya.api.v1 (see the workspace README).\n */\nexport interface Page {\n  /**\n   * Cursor for the next page. Empty when there are no further results.\n   */\n  nextCursor?: string;\n  /**\n   * Total number of items matching the request.\n   */\n  total?: number;\n}\n\n/**\n * Set tool call content request. Lets the embedding page supply the result\n *  of a bare tool call (one whose tool set has no execution adapter) — the\n *  widget-session flavor of the reverse-harness pattern, where client-side\n *  logic executes the tool and reports the result back. The result then\n *  reaches the conversation as a toolResult event.\n */\nexport interface SetToolCallContentRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The bare tool call to supply content for.\n   */\n  toolCallId?: string;\n  /**\n   * The tool call's result content.\n   */\n  content: string;\n}\n\n/**\n * The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).\n */\nexport interface Status {\n  /**\n   * The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].\n   */\n  code?: number;\n  /**\n   * A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client.\n   */\n  message?: string;\n  /**\n   * A list of messages that carry the error details.  There is a common set of message types for APIs to use.\n   */\n  details?: Array<GoogleProtobufAny>;\n}\n\n/**\n * Submit conversation feedback request — the visitor's rating of a\n *  conversation, mirroring internal objective feedback in slimmed form. Flows\n *  into the same feedback machinery that scores agent variations.\n */\nexport interface SubmitConversationFeedbackRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * A score between -1.0 and 1.0. -1.0 is the worst, 0.0 neutral, 1.0 the\n   *  best — a thumbs-down/up UI maps to -1.0/1.0.\n   */\n  score: number;\n  /**\n   * Optional comment explaining the feedback.\n   */\n  comment?: string;\n}\n\n/**\n * WidgetAssistantMessageEvent is a message from the agent. Content may\n *  arrive incrementally: later events for the same turn replace earlier\n *  partial content.\n */\nexport interface WidgetAssistantMessageEvent {\n  content: string;\n}\n\n/**\n * WidgetCancelledEvent: the conversation was cancelled. Terminal.\n */\nexport interface WidgetCancelledEvent {\n}\n\n/**\n * WidgetConfig is the widget's presentation configuration, served to the\n *  browser before any session exists. Contains nothing sensitive: the widget\n *  is identified by the hostname, and the edge has already enforced the\n *  origin allowlist by the time this is served.\n */\nexport interface WidgetConfig {\n  /**\n   * Display name shown in the widget header.\n   */\n  displayName: string;\n}\n\nexport type WidgetConversationState = 'STATE_UNSPECIFIED' | 'STATE_RESPONDING' | 'STATE_OPEN' | 'STATE_CLOSED';\n\n/**\n * WidgetConversation is one conversation between the session's visitor and\n *  the widget's agent. Conversations are scoped by the presenting token to the\n *  VISITOR: a session with a subject sees that subject's conversations on this\n *  widget; a session without one sees only the conversations it created\n *  itself. A conversation id from outside that scope is indistinguishable from\n *  one that does not exist. Tenant is a management-side grouping only — it is\n *  never a read scope on this surface.\n */\nexport interface WidgetConversation {\n  id: string;\n  state: WidgetConversationState;\n  /**\n   * Server-derived display title (e.g. from the opening message).\n   */\n  title?: string;\n  createdAt: string;\n  /**\n   * When the conversation last saw a message or event.\n   */\n  lastActiveAt?: string;\n}\n\n/**\n * WidgetErrorEvent reports a visitor-safe conversation error. The message is\n *  sanitized; internal error detail never reaches the widget.\n */\nexport interface WidgetErrorEvent {\n  message: string;\n}\n\n/**\n * WidgetEvent is the visitor-facing event vocabulary. It MIRRORS the internal\n *  conversation event variants — same granularity, same discriminator names —\n *  with slimmed messages holding exactly what a widget UI needs. Internal\n *  events map to these through an explicit, exhaustive server-side projection;\n *  internal-only types (context compaction, memory reads, sub-agent\n *  bookkeeping) have no widget variant and are dropped. Nothing here carries\n *  tool configuration, server identities, operator details, or internal error\n *  strings. Tool arguments cross this boundary only when an enabled tool set\n *  overlay explicitly opts the matching tool in.\n */\nexport type WidgetEvent =\n  | WidgetEvent_UserMessage\n  | WidgetEvent_AssistantMessage\n  | WidgetEvent_ToolApprovalRequested\n  | WidgetEvent_ToolApproved\n  | WidgetEvent_ToolDenied\n  | WidgetEvent_ToolCalled\n  | WidgetEvent_ToolResult\n  | WidgetEvent_ToolError\n  | WidgetEvent_Error\n  | WidgetEvent_Cancelled\n  | WidgetEvent_TimedOut\n  | WidgetEvent_Finalized;\n\n/**\n * WidgetFinalizedEvent: the conversation's agent produced its structured\n *  output and the objective reached its terminal state. Only agents with an\n *  output definition finalize — such an agent ends the conversation after one\n *  turn, so a widget bound to one should treat this as the answer, not a\n *  message to keep chatting past.\n */\nexport interface WidgetFinalizedEvent {\n  /**\n   * The structured output the agent produced, matching the shape of the\n   *  agent's output definition schema.\n   */\n  output?: Record<string, unknown>;\n}\n\n/**\n * WidgetTimedOutEvent: the conversation timed out after inactivity. Terminal.\n */\nexport interface WidgetTimedOutEvent {\n}\n\n/**\n * WidgetToolApprovalRequestedEvent asks the visitor to approve or deny a\n *  tool call before it runs. The tool reference lets the embedding UI render\n *  a custom approval experience per tool; the visitor responds via the\n *  approve/deny endpoints.\n */\nexport interface WidgetToolApprovalRequestedEvent {\n  /**\n   * The tool call awaiting a decision; pass it to the approve/deny endpoint.\n   */\n  toolCallId: string;\n  tool: WidgetToolReference;\n}\n\n/**\n * WidgetToolApprovedEvent records that the pending tool call was approved.\n */\nexport interface WidgetToolApprovedEvent {\n  toolCallId: string;\n}\n\n/**\n * WidgetToolCalledEvent reports that the agent invoked a tool.\n */\nexport interface WidgetToolCalledEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n  /**\n   * The final arguments sent to the tool, after parameter actions were\n   *  applied. Present only when an enabled matching tool set overlay opts the\n   *  tool into exposing arguments in widget sessions. Arguments are omitted\n   *  by default because they may contain sensitive customer data.\n   */\n  arguments?: Record<string, unknown>;\n}\n\n/**\n * WidgetToolDeniedEvent records that the pending tool call was denied.\n */\nexport interface WidgetToolDeniedEvent {\n  toolCallId: string;\n}\n\n/**\n * WidgetToolErrorEvent reports that a tool call failed. Internal error\n *  detail never reaches the widget.\n */\nexport interface WidgetToolErrorEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n}\n\n/**\n * WidgetToolReference identifies the tool involved in a tool event — enough\n *  for the embedding UI to label the activity and to register custom\n *  renderers keyed by the tool's id or the customer's own external id.\n *  Deliberately omitted: tool configuration, adapter details, and any server\n *  identity.\n */\nexport interface WidgetToolReference {\n  /**\n   * Cadenya's canonical tool id.\n   */\n  id: string;\n  /**\n   * The tool's external id in the customer's namespace, when set.\n   */\n  externalId?: string;\n  /**\n   * The tool's name as the workspace configured it (e.g. \"FetchOrderDetails\").\n   */\n  name: string;\n}\n\n/**\n * WidgetToolResultEvent reports that a tool call finished. Result content is\n *  omitted by default and included only for tools the workspace has opted in\n *  to sharing content with widget sessions.\n */\nexport interface WidgetToolResultEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n  /**\n   * The tool's result, present only for tools opted in to sharing content\n   *  with widget sessions (a per-tool setting; default off). Arbitrary JSON\n   *  the embedding UI may render — chart data, cards, structured results.\n   */\n  content?: GoogleProtobufValue;\n}\n\n/**\n * WidgetUserMessageEvent is a message from the visitor.\n */\nexport interface WidgetUserMessageEvent {\n  content: string;\n}\n\nexport interface WidgetEvent_UserMessage {\n  type: 'userMessage';\n  userMessage: WidgetUserMessageEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_AssistantMessage {\n  type: 'assistantMessage';\n  assistantMessage: WidgetAssistantMessageEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolApprovalRequested {\n  type: 'toolApprovalRequested';\n  toolApprovalRequested: WidgetToolApprovalRequestedEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolApproved {\n  type: 'toolApproved';\n  toolApproved: WidgetToolApprovedEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolDenied {\n  type: 'toolDenied';\n  toolDenied: WidgetToolDeniedEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolCalled {\n  type: 'toolCalled';\n  toolCalled: WidgetToolCalledEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolResult {\n  type: 'toolResult';\n  toolResult: WidgetToolResultEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolError {\n  type: 'toolError';\n  toolError: WidgetToolErrorEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Error {\n  type: 'error';\n  error: WidgetErrorEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Cancelled {\n  type: 'cancelled';\n  cancelled: WidgetCancelledEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_TimedOut {\n  type: 'timedOut';\n  timedOut: WidgetTimedOutEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Finalized {\n  type: 'finalized';\n  finalized: WidgetFinalizedEvent;\n  /**\n   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as\n   *  `Last-Event-ID` on reconnect to resume without duplication.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,6CAA6C","sourcesContent":["// Generated by redwood. Do not edit by hand.\n\n/**\n * Approve tool call request. Responds to a toolApprovalRequested event.\n */\nexport interface ApproveToolCallRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The tool call awaiting a decision, from the toolApprovalRequested event.\n   */\n  toolCallId?: string;\n}\n\n/**\n * Continue conversation request.\n */\nexport interface ContinueConversationRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The visitor's next message.\n   */\n  message: string;\n}\n\n/**\n * Create conversation request. The session, tenant, subject, secrets, labels,\n *  and pinned parameters all come from the presenting token's session — the\n *  browser asserts nothing.\n */\nexport interface CreateConversationRequest {\n  /**\n   * The visitor's opening message.\n   */\n  message: string;\n}\n\n/**\n * Deny tool call request. Responds to a toolApprovalRequested event.\n */\nexport interface DenyToolCallRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The tool call awaiting a decision, from the toolApprovalRequested event.\n   */\n  toolCallId?: string;\n}\n\n/**\n * Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.\n */\nexport interface GoogleProtobufAny {\n  /**\n   * The type of the serialized message.\n   */\n  '@type'?: string;\n}\n\n/**\n * Represents a dynamically typed value which can be either null, a number, a string, a boolean, a recursive struct value, or a list of values.\n */\nexport type GoogleProtobufValue = unknown;\n\n/**\n * List conversation events response. Ordered oldest first.\n */\nexport interface ListConversationEventsResponse {\n  items?: Array<WidgetEvent>;\n  pagination?: Page;\n}\n\n/**\n * List conversations response. Ordered by last activity, newest first.\n */\nexport interface ListConversationsResponse {\n  items?: Array<WidgetConversation>;\n  pagination?: Page;\n}\n\n/**\n * Page carries pagination data for list responses. A deliberate local\n *  duplicate of the api module's Page — this package imports nothing from\n *  cadenya.api.v1 (see the workspace README).\n */\nexport interface Page {\n  /**\n   * Cursor for the next page. Empty when there are no further results.\n   */\n  nextCursor?: string;\n  /**\n   * Total number of items matching the request.\n   */\n  total?: number;\n}\n\n/**\n * RenewWidgetSessionRequest has no session ID or credential in its body.\n *  The verified bearer token identifies the existing session. The server\n *  rechecks current session and authorization policy before issuing a token.\n *  Token validation allows 60 seconds of clock skew: now must be strictly\n *  before exp + 60 seconds. Hard session expiry has no tolerance. A token\n *  beyond this window cannot renew even while the session remains active.\n */\nexport interface RenewWidgetSessionRequest {\n  /**\n   * Required workspace containing the authenticated session. Must match the\n   *  session resolved from the bearer token; never authorizes access by itself.\n   */\n  workspaceId?: string;\n}\n\n/**\n * Set tool call content request. Lets the embedding page supply the result\n *  of a bare tool call (one whose tool set has no execution adapter) — the\n *  widget-session flavor of the reverse-harness pattern, where client-side\n *  logic executes the tool and reports the result back. The result then\n *  reaches the conversation as a toolResult event.\n */\nexport interface SetToolCallContentRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * The bare tool call to supply content for.\n   */\n  toolCallId?: string;\n  /**\n   * The tool call's result content.\n   */\n  content: string;\n}\n\nexport type StatusDetails =\n  | WidgetSessionErrorInfo\n  | GoogleProtobufAny;\n\n/**\n * The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).\n */\nexport interface Status {\n  /**\n   * The status code, which should be an enum value of [google.rpc.Code][google.rpc.Code].\n   */\n  code?: number;\n  /**\n   * A developer-facing error message, which should be in English. Any user-facing error message should be localized and sent in the [google.rpc.Status.details][google.rpc.Status.details] field, or localized by the client.\n   */\n  message?: string;\n  /**\n   * A list of messages that carry the error details.  There is a common set of message types for APIs to use.\n   */\n  details?: Array<StatusDetails>;\n}\n\n/**\n * Submit conversation feedback request — the visitor's rating of a\n *  conversation, mirroring internal objective feedback in slimmed form. Flows\n *  into the same feedback machinery that scores agent variations.\n */\nexport interface SubmitConversationFeedbackRequest {\n  /**\n   * Conversation ID.\n   */\n  id?: string;\n  /**\n   * A score between -1.0 and 1.0. -1.0 is the worst, 0.0 neutral, 1.0 the\n   *  best — a thumbs-down/up UI maps to -1.0/1.0.\n   */\n  score: number;\n  /**\n   * Optional comment explaining the feedback.\n   */\n  comment?: string;\n}\n\n/**\n * WidgetAssistantMessageEvent is a message from the agent. Content may\n *  arrive incrementally: later events for the same turn replace earlier\n *  partial content.\n */\nexport interface WidgetAssistantMessageEvent {\n  content: string;\n}\n\n/**\n * WidgetCancelledEvent: the conversation was cancelled. Terminal.\n */\nexport interface WidgetCancelledEvent {\n}\n\n/**\n * WidgetConfig is the widget's presentation configuration, served to the\n *  browser before any session exists. Contains nothing sensitive: the widget\n *  is identified by the hostname, and the edge has already enforced the\n *  origin allowlist by the time this is served.\n */\nexport interface WidgetConfig {\n  /**\n   * Display name shown in the widget header.\n   */\n  displayName: string;\n}\n\nexport type WidgetConversationState = 'STATE_UNSPECIFIED' | 'STATE_RESPONDING' | 'STATE_OPEN' | 'STATE_CLOSED';\n\n/**\n * WidgetConversation is one conversation between a visitor and a widget's\n *  agent. The presenting session must have a tenant and subject. Sessions for\n *  that same identity share history on the same widget and agent, subject to\n *  the current session's permissions. Other conversation IDs return not found.\n */\nexport interface WidgetConversation {\n  id: string;\n  state: WidgetConversationState;\n  /**\n   * Server-derived display title (e.g. from the opening message).\n   */\n  title?: string;\n  createdAt: string;\n  /**\n   * When the conversation last saw a message or event.\n   */\n  lastActiveAt?: string;\n}\n\n/**\n * WidgetErrorEvent reports a visitor-safe conversation error. The message is\n *  sanitized; internal error detail never reaches the widget.\n */\nexport interface WidgetErrorEvent {\n  message: string;\n}\n\n/**\n * WidgetEvent is the visitor-facing event vocabulary. It MIRRORS the internal\n *  conversation event variants — same granularity, same discriminator names —\n *  with slimmed messages holding exactly what a widget UI needs. Internal\n *  events map to these through an explicit, exhaustive server-side projection;\n *  internal-only types (context compaction, memory reads, sub-agent\n *  bookkeeping) have no widget variant and are dropped. Nothing here carries\n *  tool configuration, server identities, operator details, or internal error\n *  strings. Tool arguments cross this boundary only when an enabled tool set\n *  overlay explicitly opts the matching tool in.\n */\nexport type WidgetEvent =\n  | WidgetEvent_UserMessage\n  | WidgetEvent_AssistantMessage\n  | WidgetEvent_ToolApprovalRequested\n  | WidgetEvent_ToolApproved\n  | WidgetEvent_ToolDenied\n  | WidgetEvent_ToolCalled\n  | WidgetEvent_ToolResult\n  | WidgetEvent_ToolError\n  | WidgetEvent_Error\n  | WidgetEvent_Cancelled\n  | WidgetEvent_TimedOut\n  | WidgetEvent_Finalized\n  | WidgetEvent_Heartbeat\n  | WidgetEvent_StateChanged;\n\n/**\n * WidgetFinalizedEvent: the conversation's agent produced its structured\n *  output and the objective reached its terminal state. Only agents with an\n *  output definition finalize — such an agent ends the conversation after one\n *  turn, so a widget bound to one should treat this as the answer, not a\n *  message to keep chatting past.\n */\nexport interface WidgetFinalizedEvent {\n  /**\n   * The structured output the agent produced, matching the shape of the\n   *  agent's output definition schema.\n   */\n  output?: Record<string, unknown>;\n}\n\n/**\n * WidgetHeartbeatEvent mirrors objective heartbeat liveness. It is live-only,\n *  absent from history, and never a reconnect checkpoint or state transition.\n */\nexport interface WidgetHeartbeatEvent {\n}\n\nexport type WidgetObjectiveStateChangedEventFromState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';\n\nexport type WidgetObjectiveStateChangedEventToState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';\n\n/**\n * WidgetObjectiveStateChangedEvent mirrors a durable objective transition.\n *  Internal status messages are intentionally omitted. Pending/running maps\n *  to a responding conversation, waiting to open, and terminal states to closed.\n */\nexport interface WidgetObjectiveStateChangedEvent {\n  fromState: WidgetObjectiveStateChangedEventFromState;\n  toState: WidgetObjectiveStateChangedEventToState;\n}\n\n/**\n * WidgetSessionCredentials is the browser-safe projection of creation\n *  credentials. Renewal returns the same fields, including exact token expiry\n *  and immutable session expiry, without importing the management API module.\n *  Responses containing credentials use Cache-Control: no-store.\n */\nexport interface WidgetSessionCredentials {\n  /**\n   * Canonical wsess_ identifier. Ordinary renewal cannot change the session.\n   */\n  sessionId: string;\n  /**\n   * Authoritative hostname, without a scheme or path. Use HTTPS with this\n   *  host; never construct it or accept a host change during renewal.\n   */\n  host: string;\n  /**\n   * Short-lived bearer credential for the widget host only.\n   */\n  token: string;\n  /**\n   * Exact token expiry, at most 15 minutes after issuance and never later\n   *  than session_expires_at. Equals JWT exp without the 60-second validation\n   *  tolerance added. Renew proactively before this timestamp.\n   */\n  tokenExpiresAt: string;\n  /**\n   * Immutable hard session expiry. Issuance never extends this deadline.\n   */\n  sessionExpiresAt: string;\n}\n\n/**\n * WidgetTimedOutEvent: the conversation timed out after inactivity. Terminal.\n */\nexport interface WidgetTimedOutEvent {\n}\n\n/**\n * WidgetToolApprovalRequestedEvent asks the visitor to approve or deny a\n *  tool call before it runs. The tool reference lets the embedding UI render\n *  a custom approval experience per tool; the visitor responds via the\n *  approve/deny endpoints.\n */\nexport interface WidgetToolApprovalRequestedEvent {\n  /**\n   * The tool call awaiting a decision; pass it to the approve/deny endpoint.\n   */\n  toolCallId: string;\n  tool: WidgetToolReference;\n}\n\n/**\n * WidgetToolApprovedEvent records that the pending tool call was approved.\n */\nexport interface WidgetToolApprovedEvent {\n  toolCallId: string;\n}\n\n/**\n * WidgetToolCalledEvent reports that the agent invoked a tool.\n */\nexport interface WidgetToolCalledEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n  /**\n   * The final arguments sent to the tool, after parameter actions were\n   *  applied. Present only when an enabled matching tool set overlay opts the\n   *  tool into exposing arguments in widget sessions. Arguments are omitted\n   *  by default because they may contain sensitive customer data.\n   */\n  arguments?: Record<string, unknown>;\n}\n\n/**\n * WidgetToolDeniedEvent records that the pending tool call was denied.\n */\nexport interface WidgetToolDeniedEvent {\n  toolCallId: string;\n}\n\n/**\n * WidgetToolErrorEvent reports that a tool call failed. Internal error\n *  detail never reaches the widget.\n */\nexport interface WidgetToolErrorEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n}\n\n/**\n * WidgetToolReference identifies the tool involved in a tool event — enough\n *  for the embedding UI to label the activity and to register custom\n *  renderers keyed by the tool's id or the customer's own external id.\n *  Deliberately omitted: tool configuration, adapter details, and any server\n *  identity.\n */\nexport interface WidgetToolReference {\n  /**\n   * Cadenya's canonical tool id.\n   */\n  id: string;\n  /**\n   * The tool's external id in the customer's namespace, when set.\n   */\n  externalId?: string;\n  /**\n   * The tool's name as the workspace configured it (e.g. \"FetchOrderDetails\").\n   */\n  name: string;\n}\n\n/**\n * WidgetToolResultEvent reports that a tool call finished. Result content is\n *  omitted by default and included only for tools the workspace has opted in\n *  to sharing content with widget sessions.\n */\nexport interface WidgetToolResultEvent {\n  toolCallId: string;\n  tool: WidgetToolReference;\n  /**\n   * The tool's result, present only for tools opted in to sharing content\n   *  with widget sessions (a per-tool setting; default off). Arbitrary JSON\n   *  the embedding UI may render — chart data, cards, structured results.\n   */\n  content?: GoogleProtobufValue;\n}\n\n/**\n * WidgetUserMessageEvent is a message from the visitor.\n */\nexport interface WidgetUserMessageEvent {\n  content: string;\n}\n\nexport interface WidgetEvent_UserMessage {\n  type: 'userMessage';\n  userMessage: WidgetUserMessageEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_AssistantMessage {\n  type: 'assistantMessage';\n  assistantMessage: WidgetAssistantMessageEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolApprovalRequested {\n  type: 'toolApprovalRequested';\n  toolApprovalRequested: WidgetToolApprovalRequestedEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolApproved {\n  type: 'toolApproved';\n  toolApproved: WidgetToolApprovedEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolDenied {\n  type: 'toolDenied';\n  toolDenied: WidgetToolDeniedEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolCalled {\n  type: 'toolCalled';\n  toolCalled: WidgetToolCalledEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolResult {\n  type: 'toolResult';\n  toolResult: WidgetToolResultEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_ToolError {\n  type: 'toolError';\n  toolError: WidgetToolErrorEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Error {\n  type: 'error';\n  error: WidgetErrorEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Cancelled {\n  type: 'cancelled';\n  cancelled: WidgetCancelledEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_TimedOut {\n  type: 'timedOut';\n  timedOut: WidgetTimedOutEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Finalized {\n  type: 'finalized';\n  finalized: WidgetFinalizedEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_Heartbeat {\n  type: 'heartbeat';\n  heartbeat: WidgetHeartbeatEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\nexport interface WidgetEvent_StateChanged {\n  type: 'stateChanged';\n  stateChanged: WidgetObjectiveStateChangedEvent;\n  /**\n   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted\n   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.\n   *  Transient heartbeats carry hb_ IDs in this payload only.\n   */\n  id: string;\n  /**\n   * The conversation this event belongs to.\n   */\n  conversationId: string;\n  createdAt: string;\n}\n\n/**\n * TOKEN_EXPIRED identifies access-token expiry beyond the 60-second clock-skew tolerance. That token cannot renew; use already-installed newer credentials or require explicit app reauthentication. SESSION_* reasons are terminal. Never infer renewability from HTTP status alone.\n */\nexport type WidgetSessionErrorReason = 'TOKEN_EXPIRED' | 'SESSION_REVOKED' | 'SESSION_EXPIRED' | 'SESSION_EXHAUSTED';\n\n/**\n * google.rpc.ErrorInfo detail for widget lifecycle failures. Match both domain and reason; ignore unknown reasons rather than renewing automatically.\n */\nexport interface WidgetSessionErrorInfo {\n  '@type': 'type.googleapis.com/google.rpc.ErrorInfo';\n  domain: 'api.cadenya.com';\n  reason: WidgetSessionErrorReason;\n  /**\n   * Optional non-sensitive context. Never contains tokens or secrets.\n   */\n  metadata?: Record<string, string>;\n}\n\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cadenya/widgets",
-  "version": "1.1.1",
+  "version": "1.3.0",
   "description": "The official TypeScript SDK for the CadenyaWidgets API",
   "license": "Apache-2.0",
   "type": "module",
@@ -13,12 +13,21 @@
     }
   },
   "sideEffects": false,
-  "publishConfig": { "access": "public" },
-  "repository": { "type": "git", "url": "https://github.com/cadenya/widgets-sdk" },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cadenya/widgets-sdk"
+  },
   "engines": {
     "node": ">=18"
   },
-  "files": ["dist", "src", "api.md"],
+  "files": [
+    "dist",
+    "src",
+    "api.md"
+  ],
   "scripts": {
     "build": "tsc",
     "typecheck": "tsc --noEmit"

package/src/client.ts

@@ -4,6 +4,7 @@ import { HttpClient } from './core/http.js';
 import type { Logger, LogLevel } from './core/http.js';
 import { Config } from './resources/config.js';
 import { Conversations } from './resources/conversations.js';
+import { Session } from './resources/session.js';
 
 export interface ClientOptions {
   /** API key. Defaults to the CADENYAWIDGETS_API_KEY environment variable. */
@@ -32,6 +33,7 @@ export interface ClientOptions {
 export class CadenyaWidgets {
   readonly config: Config;
   readonly conversations: Conversations;
+  readonly session: Session;
 
   private readonly _client: HttpClient;
 
@@ -49,7 +51,7 @@ export class CadenyaWidgets {
       authHeader: () => ({ Authorization: `Bearer ${apiKey}` }),
       maxRetries: options.maxRetries ?? 0,
       timeout: options.timeout,
-      defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.1.1 (api 1.0)'), ...options.defaultHeaders },
+      defaultHeaders: { ...nodeUserAgent('cadenyawidgets-typescript/1.3.0 (api 1.0)'), ...options.defaultHeaders },
       fetch: options.fetch,
       logger: options.logger,
       logLevel: options.logLevel,
@@ -57,6 +59,7 @@ export class CadenyaWidgets {
     });
     this.config = new Config(this._client);
     this.conversations = new Conversations(this._client);
+    this.session = new Session(this._client);
   }
 }
 

package/src/index.ts

@@ -11,3 +11,4 @@ export type { ServerSentEvent } from './core/sse.js';
 export * from './types.js';
 export * from './resources/config.js';
 export * from './resources/conversations.js';
+export * from './resources/session.js';

package/src/resources/session.ts

@@ -0,0 +1,30 @@
+// Generated by redwood. Do not edit by hand.
+
+import { HttpClient, RequestOptions, APIPromise, pathSegment } from '../core/http.js';
+import type { WidgetSessionCredentials } from '../types.js';
+
+export interface SessionRenewWidgetParams {
+  /**
+   * Required workspace containing the authenticated session. Must match the
+   *  session resolved from the bearer token; never authorizes access by itself.
+   */
+  workspaceId: string;
+}
+
+export class Session {
+  constructor(private readonly _client: HttpClient) {}
+
+  /**
+   * Renew a widget session token
+   * 
+   * @example
+   * ```ts
+   * const widgetSessionCredentials = await client.session.renewWidget({ workspaceId: 'workspace_123' });
+   * ```
+   */
+  renewWidget(params: SessionRenewWidgetParams, options?: RequestOptions): APIPromise<WidgetSessionCredentials> {
+    return this._client.requestAPI<WidgetSessionCredentials>(() => {
+      return { method: 'POST', path: `/v1/workspaces/${pathSegment('workspaceId', params.workspaceId)}/session:renew` };
+    }, options);
+  }
+}

package/src/types.ts

@@ -101,6 +101,22 @@ export interface Page {
   total?: number;
 }
 
+/**
+ * RenewWidgetSessionRequest has no session ID or credential in its body.
+ *  The verified bearer token identifies the existing session. The server
+ *  rechecks current session and authorization policy before issuing a token.
+ *  Token validation allows 60 seconds of clock skew: now must be strictly
+ *  before exp + 60 seconds. Hard session expiry has no tolerance. A token
+ *  beyond this window cannot renew even while the session remains active.
+ */
+export interface RenewWidgetSessionRequest {
+  /**
+   * Required workspace containing the authenticated session. Must match the
+   *  session resolved from the bearer token; never authorizes access by itself.
+   */
+  workspaceId?: string;
+}
+
 /**
  * Set tool call content request. Lets the embedding page supply the result
  *  of a bare tool call (one whose tool set has no execution adapter) — the
@@ -123,6 +139,10 @@ export interface SetToolCallContentRequest {
   content: string;
 }
 
+export type StatusDetails =
+  | WidgetSessionErrorInfo
+  | GoogleProtobufAny;
+
 /**
  * The `Status` type defines a logical error model that is suitable for different programming environments, including REST APIs and RPC APIs. It is used by [gRPC](https://github.com/grpc). Each `Status` message contains three pieces of data: error code, error message, and error details. You can find out more about this error model and how to work with it in the [API Design Guide](https://cloud.google.com/apis/design/errors).
  */
@@ -138,7 +158,7 @@ export interface Status {
   /**
    * A list of messages that carry the error details.  There is a common set of message types for APIs to use.
    */
-  details?: Array<GoogleProtobufAny>;
+  details?: Array<StatusDetails>;
 }
 
 /**
@@ -193,13 +213,10 @@ export interface WidgetConfig {
 export type WidgetConversationState = 'STATE_UNSPECIFIED' | 'STATE_RESPONDING' | 'STATE_OPEN' | 'STATE_CLOSED';
 
 /**
- * WidgetConversation is one conversation between the session's visitor and
- *  the widget's agent. Conversations are scoped by the presenting token to the
- *  VISITOR: a session with a subject sees that subject's conversations on this
- *  widget; a session without one sees only the conversations it created
- *  itself. A conversation id from outside that scope is indistinguishable from
- *  one that does not exist. Tenant is a management-side grouping only — it is
- *  never a read scope on this surface.
+ * WidgetConversation is one conversation between a visitor and a widget's
+ *  agent. The presenting session must have a tenant and subject. Sessions for
+ *  that same identity share history on the same widget and agent, subject to
+ *  the current session's permissions. Other conversation IDs return not found.
  */
 export interface WidgetConversation {
   id: string;
@@ -246,7 +263,9 @@ export type WidgetEvent =
   | WidgetEvent_Error
   | WidgetEvent_Cancelled
   | WidgetEvent_TimedOut
-  | WidgetEvent_Finalized;
+  | WidgetEvent_Finalized
+  | WidgetEvent_Heartbeat
+  | WidgetEvent_StateChanged;
 
 /**
  * WidgetFinalizedEvent: the conversation's agent produced its structured
@@ -263,6 +282,59 @@ export interface WidgetFinalizedEvent {
   output?: Record<string, unknown>;
 }
 
+/**
+ * WidgetHeartbeatEvent mirrors objective heartbeat liveness. It is live-only,
+ *  absent from history, and never a reconnect checkpoint or state transition.
+ */
+export interface WidgetHeartbeatEvent {
+}
+
+export type WidgetObjectiveStateChangedEventFromState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';
+
+export type WidgetObjectiveStateChangedEventToState = 'WIDGET_OBJECTIVE_STATE_UNSPECIFIED' | 'WIDGET_OBJECTIVE_STATE_PENDING' | 'WIDGET_OBJECTIVE_STATE_RUNNING' | 'WIDGET_OBJECTIVE_STATE_WAITING' | 'WIDGET_OBJECTIVE_STATE_FAILED' | 'WIDGET_OBJECTIVE_STATE_CANCELLED' | 'WIDGET_OBJECTIVE_STATE_FINALIZED' | 'WIDGET_OBJECTIVE_STATE_TIMED_OUT';
+
+/**
+ * WidgetObjectiveStateChangedEvent mirrors a durable objective transition.
+ *  Internal status messages are intentionally omitted. Pending/running maps
+ *  to a responding conversation, waiting to open, and terminal states to closed.
+ */
+export interface WidgetObjectiveStateChangedEvent {
+  fromState: WidgetObjectiveStateChangedEventFromState;
+  toState: WidgetObjectiveStateChangedEventToState;
+}
+
+/**
+ * WidgetSessionCredentials is the browser-safe projection of creation
+ *  credentials. Renewal returns the same fields, including exact token expiry
+ *  and immutable session expiry, without importing the management API module.
+ *  Responses containing credentials use Cache-Control: no-store.
+ */
+export interface WidgetSessionCredentials {
+  /**
+   * Canonical wsess_ identifier. Ordinary renewal cannot change the session.
+   */
+  sessionId: string;
+  /**
+   * Authoritative hostname, without a scheme or path. Use HTTPS with this
+   *  host; never construct it or accept a host change during renewal.
+   */
+  host: string;
+  /**
+   * Short-lived bearer credential for the widget host only.
+   */
+  token: string;
+  /**
+   * Exact token expiry, at most 15 minutes after issuance and never later
+   *  than session_expires_at. Equals JWT exp without the 60-second validation
+   *  tolerance added. Renew proactively before this timestamp.
+   */
+  tokenExpiresAt: string;
+  /**
+   * Immutable hard session expiry. Issuance never extends this deadline.
+   */
+  sessionExpiresAt: string;
+}
+
 /**
  * WidgetTimedOutEvent: the conversation timed out after inactivity. Terminal.
  */
@@ -370,8 +442,9 @@ export interface WidgetEvent_UserMessage {
   type: 'userMessage';
   userMessage: WidgetUserMessageEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -385,8 +458,9 @@ export interface WidgetEvent_AssistantMessage {
   type: 'assistantMessage';
   assistantMessage: WidgetAssistantMessageEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -400,8 +474,9 @@ export interface WidgetEvent_ToolApprovalRequested {
   type: 'toolApprovalRequested';
   toolApprovalRequested: WidgetToolApprovalRequestedEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -415,8 +490,9 @@ export interface WidgetEvent_ToolApproved {
   type: 'toolApproved';
   toolApproved: WidgetToolApprovedEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -430,8 +506,9 @@ export interface WidgetEvent_ToolDenied {
   type: 'toolDenied';
   toolDenied: WidgetToolDeniedEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -445,8 +522,9 @@ export interface WidgetEvent_ToolCalled {
   type: 'toolCalled';
   toolCalled: WidgetToolCalledEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -460,8 +538,9 @@ export interface WidgetEvent_ToolResult {
   type: 'toolResult';
   toolResult: WidgetToolResultEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -475,8 +554,9 @@ export interface WidgetEvent_ToolError {
   type: 'toolError';
   toolError: WidgetToolErrorEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -490,8 +570,9 @@ export interface WidgetEvent_Error {
   type: 'error';
   error: WidgetErrorEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -505,8 +586,9 @@ export interface WidgetEvent_Cancelled {
   type: 'cancelled';
   cancelled: WidgetCancelledEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -520,8 +602,9 @@ export interface WidgetEvent_TimedOut {
   type: 'timedOut';
   timedOut: WidgetTimedOutEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -535,8 +618,41 @@ export interface WidgetEvent_Finalized {
   type: 'finalized';
   finalized: WidgetFinalizedEvent;
   /**
-   * Unique event id (ULID). Doubles as the SSE `id:` — replay it as
-   *  `Last-Event-ID` on reconnect to resume without duplication.
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
+   */
+  id: string;
+  /**
+   * The conversation this event belongs to.
+   */
+  conversationId: string;
+  createdAt: string;
+}
+
+export interface WidgetEvent_Heartbeat {
+  type: 'heartbeat';
+  heartbeat: WidgetHeartbeatEvent;
+  /**
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
+   */
+  id: string;
+  /**
+   * The conversation this event belongs to.
+   */
+  conversationId: string;
+  createdAt: string;
+}
+
+export interface WidgetEvent_StateChanged {
+  type: 'stateChanged';
+  stateChanged: WidgetObjectiveStateChangedEvent;
+  /**
+   * Unique event id (prefixed ULID). Only durable objevt_ IDs are emitted
+   *  as SSE `id:` fields and accepted as Last-Event-ID reconnect cursors.
+   *  Transient heartbeats carry hb_ IDs in this payload only.
    */
   id: string;
   /**
@@ -546,3 +662,21 @@ export interface WidgetEvent_Finalized {
   createdAt: string;
 }
 
+/**
+ * TOKEN_EXPIRED identifies access-token expiry beyond the 60-second clock-skew tolerance. That token cannot renew; use already-installed newer credentials or require explicit app reauthentication. SESSION_* reasons are terminal. Never infer renewability from HTTP status alone.
+ */
+export type WidgetSessionErrorReason = 'TOKEN_EXPIRED' | 'SESSION_REVOKED' | 'SESSION_EXPIRED' | 'SESSION_EXHAUSTED';
+
+/**
+ * google.rpc.ErrorInfo detail for widget lifecycle failures. Match both domain and reason; ignore unknown reasons rather than renewing automatically.
+ */
+export interface WidgetSessionErrorInfo {
+  '@type': 'type.googleapis.com/google.rpc.ErrorInfo';
+  domain: 'api.cadenya.com';
+  reason: WidgetSessionErrorReason;
+  /**
+   * Optional non-sensitive context. Never contains tokens or secrets.
+   */
+  metadata?: Record<string, string>;
+}
+