@gravity-rail/sdk 0.46.0 → 0.49.0

package/dist/index.cjs

@@ -243,6 +243,7 @@ __export(src_exports, {
   getFeaturesByCategory: () => getFeaturesByCategory,
   getFeaturesByVisibility: () => getFeaturesByVisibility,
   getMissingDependencies: () => getMissingDependencies,
+  getPathDefinition: () => getPathDefinition,
   getResourceMetadata: () => getResourceMetadata,
   getRevisionState: () => getRevisionState,
   getTTSProvider: () => getTTSProvider,
@@ -258,6 +259,8 @@ __export(src_exports, {
   isRegistryInitialized: () => isRegistryInitialized,
   isSMSDeliveryFailureStatus: () => isSMSDeliveryFailureStatus,
   parseOrgAuthChallenge: () => parseOrgAuthChallenge,
+  pathDraftFromStorage: () => pathDraftFromStorage,
+  pathDraftToStorage: () => pathDraftToStorage,
   requiresAssistantParticipant: () => requiresAssistantParticipant,
   runWorkspaceScript: () => runWorkspaceScript,
   toSafeMemberImportPreview: () => toSafeMemberImportPreview,
@@ -323,27 +326,16 @@ function parseOrgAuthChallenge(wwwAuthenticate) {
   if (!wwwAuthenticate) return null;
   if (!wwwAuthenticate.includes('realm="org"')) return null;
   const orgUuidMatch = wwwAuthenticate.match(/org_uuid="([^"]+)"/);
-  const cookieNameMatch = wwwAuthenticate.match(/cookie_name="([^"]+)"/);
   const authUrlMatch = wwwAuthenticate.match(/auth_url="([^"]+)"/);
-  if (!orgUuidMatch?.[1] || !cookieNameMatch?.[1] || !authUrlMatch?.[1]) {
+  if (!orgUuidMatch?.[1] || !authUrlMatch?.[1]) {
     console.warn("Invalid org auth challenge header: missing required fields");
     return null;
   }
   return {
     orgUuid: orgUuidMatch[1],
-    cookieName: cookieNameMatch[1],
     authUrl: authUrlMatch[1]
   };
 }
-function getRequestOrgCookieName(cookieName) {
-  if (cookieName.startsWith("orgToken")) {
-    return cookieName.replace(/^orgToken/, "requestOrgToken");
-  }
-  if (cookieName.startsWith("orgSession")) {
-    return cookieName.replace(/^orgSession/, "requestOrgSession");
-  }
-  return null;
-}
 function orgAuthHeaderName(token) {
   return token.startsWith("gr_sess_") ? "X-Org-Session" : "X-Org-Token";
 }
@@ -400,7 +392,7 @@ var BaseApiClient = class {
     this.apiKey = newApiKey;
   }
   /**
-   * Set the opaque org session credential for cross-domain requests.
+   * Set the opaque org session credential a bearer client sends as `X-Org-Session`.
    * Opaque gr_sess_ values use X-Org-Session. Legacy orgToken JWE values still
    * use X-Org-Token through setOrgToken() during the migration window.
    *
@@ -420,7 +412,42 @@ var BaseApiClient = class {
   setOrgToken(token, orgUuid) {
     this.setOrgSession(token, orgUuid);
   }
-  async fetch(endpoint, options) {
+  /**
+   * The `credentials` a request carries: none for a bearer client (the fetch
+   * default), the page's own-origin cookies for a same-origin session.
+   */
+  credentialsInit() {
+    return this.apiKey ? {} : { credentials: "same-origin" };
+  }
+  /**
+   * Run the org-auth handler once for concurrent challenges. A bearer client's
+   * handler sets the org session with `setOrgSession`; a same-origin session's
+   * handler leaves an httpOnly org-session cookie on the page's origin instead,
+   * which the retry presents. A bearer client whose handler issued nothing has
+   * nothing to retry with.
+   */
+  async answerOrgAuthChallenge(orgAuthInfo) {
+    const handler = this.orgAuthHandler;
+    if (!handler) return;
+    if (!this.orgAuthInProgress) {
+      this.orgAuthInProgress = (async () => {
+        try {
+          await handler(orgAuthInfo);
+        } finally {
+          this.orgAuthInProgress = null;
+        }
+      })();
+    }
+    await this.orgAuthInProgress;
+    if (this.orgSession) {
+      this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
+      return;
+    }
+    if (this.apiKey) {
+      throw new ApiError("Organization authentication did not issue a session", 401);
+    }
+  }
+  async fetch(endpoint, options, orgAuthRetry = false) {
     try {
       const headers = new Headers({
         // Don't set Content-Type for FormData — the browser must set it
@@ -430,17 +457,12 @@ var BaseApiClient = class {
       });
       if (this.apiKey) {
         headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
       }
       setOrgAuthHeader(headers, this.orgSession);
       const fullUrl = `${this.baseUrl}/api/v2/${endpoint}`;
       const response = await this.fetchFunction(fullUrl, {
         ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
+        ...this.credentialsInit(),
         ...this.isCrossDomain ? { mode: "cors" } : {},
         headers
       });
@@ -471,48 +493,14 @@ var BaseApiClient = class {
             this.orgSession = void 0;
             this.orgSessionOrgUuid = void 0;
           }
-          if (orgAuthInfo && !this.orgSession) {
-            const requestCookieName = getRequestOrgCookieName(orgAuthInfo.cookieName);
-            const cachedOrgSession = requestCookieName ? getCookieValue(requestCookieName) : void 0;
-            if (cachedOrgSession) {
-              this.orgSession = cachedOrgSession;
-              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetch(endpoint, options);
-              } catch (retryError) {
-                this.orgSession = void 0;
-                this.orgSessionOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-            if (this.orgAuthHandler) {
-              if (!this.orgAuthInProgress) {
-                const handler = this.orgAuthHandler;
-                this.orgAuthInProgress = (async () => {
-                  try {
-                    await handler(orgAuthInfo);
-                  } finally {
-                    this.orgAuthInProgress = null;
-                  }
-                })();
-              }
-              await this.orgAuthInProgress;
-              const postHandlerSession = (requestCookieName ? getCookieValue(requestCookieName) : void 0) ?? this.orgSession;
-              if (!postHandlerSession) {
-                throw new ApiError(
-                  "Organization authentication did not issue a session",
-                  401
-                );
-              }
-              this.orgSession = postHandlerSession;
-              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetch(endpoint, options);
-              } catch (retryError) {
-                this.orgSession = void 0;
-                this.orgSessionOrgUuid = void 0;
-                throw retryError;
-              }
+          if (orgAuthInfo && !this.orgSession && !orgAuthRetry && this.orgAuthHandler) {
+            await this.answerOrgAuthChallenge(orgAuthInfo);
+            try {
+              return await this.fetch(endpoint, options, true);
+            } catch (retryError) {
+              this.orgSession = void 0;
+              this.orgSessionOrgUuid = void 0;
+              throw retryError;
             }
           }
         }
@@ -574,23 +562,18 @@ ${formattedErrors}`, response.status);
       throw error;
     }
   }
-  async fetchRaw(endpoint, options, allowedErrorStatuses = []) {
+  async fetchRaw(endpoint, options, allowedErrorStatuses = [], orgAuthRetry = false) {
     try {
       const headers = new Headers({
         ...options?.headers || {}
       });
       if (this.apiKey) {
         headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
       }
       setOrgAuthHeader(headers, this.orgSession);
       const response = await this.fetchFunction(`${this.baseUrl}/api/v2/${endpoint}`, {
         ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
+        ...this.credentialsInit(),
         ...this.isCrossDomain ? { mode: "cors" } : {},
         headers
       });
@@ -621,48 +604,14 @@ ${formattedErrors}`, response.status);
             this.orgSession = void 0;
             this.orgSessionOrgUuid = void 0;
           }
-          if (orgAuthInfo && !this.orgSession) {
-            const requestCookieName = getRequestOrgCookieName(orgAuthInfo.cookieName);
-            const cachedOrgSession = requestCookieName ? getCookieValue(requestCookieName) : void 0;
-            if (cachedOrgSession) {
-              this.orgSession = cachedOrgSession;
-              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
-              } catch (retryError) {
-                this.orgSession = void 0;
-                this.orgSessionOrgUuid = void 0;
-                throw retryError;
-              }
-            }
-            if (this.orgAuthHandler) {
-              if (!this.orgAuthInProgress) {
-                const handler = this.orgAuthHandler;
-                this.orgAuthInProgress = (async () => {
-                  try {
-                    await handler(orgAuthInfo);
-                  } finally {
-                    this.orgAuthInProgress = null;
-                  }
-                })();
-              }
-              await this.orgAuthInProgress;
-              const postHandlerSession = (requestCookieName ? getCookieValue(requestCookieName) : void 0) ?? this.orgSession;
-              if (!postHandlerSession) {
-                throw new ApiError(
-                  "Organization authentication did not issue a session",
-                  401
-                );
-              }
-              this.orgSession = postHandlerSession;
-              this.orgSessionOrgUuid = orgAuthInfo.orgUuid;
-              try {
-                return await this.fetchRaw(endpoint, options, allowedErrorStatuses);
-              } catch (retryError) {
-                this.orgSession = void 0;
-                this.orgSessionOrgUuid = void 0;
-                throw retryError;
-              }
+          if (orgAuthInfo && !this.orgSession && !orgAuthRetry && this.orgAuthHandler) {
+            await this.answerOrgAuthChallenge(orgAuthInfo);
+            try {
+              return await this.fetchRaw(endpoint, options, allowedErrorStatuses, true);
+            } catch (retryError) {
+              this.orgSession = void 0;
+              this.orgSessionOrgUuid = void 0;
+              throw retryError;
             }
           }
         }
@@ -690,17 +639,12 @@ ${formattedErrors}`, response.status);
       });
       if (this.apiKey) {
         headers.set("Authorization", `Bearer ${this.apiKey}`);
-      } else if (this.isCrossDomain) {
-        const requestToken = getCookieValue("requestToken");
-        if (requestToken) {
-          headers.set("Authorization", `Bearer ${requestToken}`);
-        }
       }
       setOrgAuthHeader(headers, this.orgSession);
       const fullUrl = `${this.baseUrl}/${path}`;
       const response = await this.fetchFunction(fullUrl, {
         ...options,
-        ...this.apiKey ? {} : { credentials: "include" },
+        ...this.credentialsInit(),
         ...this.isCrossDomain ? { mode: "cors" } : {},
         headers
       });
@@ -1748,18 +1692,13 @@ var AuthApi = class extends BaseApiClient {
     }
     return await response.json();
   }
-  /** Request a cross-domain authentication token for single sign-on across domains. */
+  /** @deprecated Browser continuity uses top-level /auth/continue navigation. */
   async requestCrossDomainToken() {
-    return this.fetch("auth/cross-domain-token", {
-      method: "POST"
-    });
+    throw new Error("Use top-level /auth/continue navigation. CLI login uses OAuth with PKCE.");
   }
-  /** Exchange a cross-domain token for an authenticated session token. */
-  async exchangeToken(token) {
-    return this.fetch("auth/exchange-token", {
-      method: "POST",
-      body: JSON.stringify({ token })
-    });
+  /** @deprecated Browser handoffs redeem only at the destination Next server. */
+  async exchangeToken(_token) {
+    throw new Error("Use top-level /auth/continue navigation. CLI login uses OAuth with PKCE.");
   }
   /** Exchange a global Account login for an opaque org-scoped session handle. */
   async exchangeSession(request) {
@@ -1940,9 +1879,17 @@ var AuthApi = class extends BaseApiClient {
     );
   }
   // ===== ORGANIZATION MEMBERSHIP METHODS =====
-  /** List all organizations the current account belongs to. */
-  async getMyOrganizations() {
-    return this.fetch("o/mine");
+  /** A searchable page of the current account's organizations. */
+  async getMyOrganizations(options) {
+    const params = new URLSearchParams();
+    if (options?.page) params.set("page", String(options.page));
+    if (options?.pageSize) params.set("pageSize", String(options.pageSize));
+    if (options?.canCreateWorkspace) params.set("canCreateWorkspace", "true");
+    if (options?.search) params.set("search", options.search);
+    if (options?.organizationSlug !== void 0)
+      params.set("organizationSlug", options.organizationSlug);
+    for (const uuid of options?.organizationUuids ?? []) params.append("organizationUuids", uuid);
+    return this.fetch(`o/mine?${params}`);
   }
   // ===== CREDENTIAL CHANGE METHODS =====
   /**
@@ -3139,6 +3086,45 @@ var DashboardsApi = class extends BaseApiClient {
 
 // src/api/data-types.ts
 var DataTypesApi = class extends BaseApiClient {
+  /** Read an anonymous Form's visitor-writable schema without a Member session. */
+  async getAnonymousFormSchema(wid, formUuid) {
+    return this.fetchPublicAnonymousForm(
+      `w/${encodeURIComponent(wid)}/anonymous-forms/${encodeURIComponent(formUuid)}`
+    );
+  }
+  /** Submit visitor-provided values. No cookie or API credential is sent. */
+  async submitAnonymousForm(wid, formUuid, input) {
+    return this.fetchPublicAnonymousForm(
+      `w/${encodeURIComponent(wid)}/anonymous-forms/${encodeURIComponent(formUuid)}/submissions`,
+      { method: "POST", body: JSON.stringify(input) }
+    );
+  }
+  async fetchPublicAnonymousForm(endpoint, options = {}) {
+    const headers = new Headers(options.headers);
+    if (options.body !== void 0) headers.set("Content-Type", "application/json");
+    let response;
+    try {
+      response = await this.fetchFunction(`${this.baseUrl}/api/v2/${endpoint}`, {
+        ...options,
+        credentials: "omit",
+        headers
+      });
+    } catch {
+      throw new ApiError("Anonymous Form request failed", 0);
+    }
+    if (!response.ok) {
+      let message = `Request failed with status ${response.status}`;
+      try {
+        const body = await response.json();
+        if (typeof body.detail === "string" && body.detail.length > 0) {
+          message = body.detail;
+        }
+      } catch {
+      }
+      throw new ApiError(message, response.status);
+    }
+    return await response.json();
+  }
   /** Read the local Form's draft and optimistic publication counters. */
   async getDataTypeDraft(wid, id) {
     return this.fetch(`w/${wid}/data-types/${id}/schema-draft`);
@@ -5105,14 +5091,7 @@ var InquiriesApi = class extends BaseApiClient {
     }
     const queryString = params.toString();
     const url = queryString ? `inquiries/export/csv?${queryString}` : "inquiries/export/csv";
-    const response = await fetch(`${this.baseUrl}/api/v2/${url}`, {
-      method: "GET",
-      credentials: "include"
-    });
-    if (!response.ok) {
-      const error = await response.json();
-      throw new Error(error.detail || "Export failed");
-    }
+    const response = await this.fetchRaw(url, { method: "GET" });
     return response.blob();
   }
 };
@@ -6680,8 +6659,12 @@ var OrgApi = class extends BaseApiClient {
    * figure — the caps belong to the organization, so `cap - oneWorkspace`
    * describes nothing.
    */
-  async getOrgWorkspaceUsage(orgIdOrUuid) {
-    return this.fetch(`o/${orgIdOrUuid}/usage/workspaces`);
+  async getOrgWorkspaceUsage(orgIdOrUuid, options) {
+    const params = new URLSearchParams();
+    if (options?.page) params.set("page", String(options.page));
+    if (options?.pageSize) params.set("pageSize", String(options.pageSize));
+    if (options?.search) params.set("search", options.search);
+    return this.fetch(`o/${orgIdOrUuid}/usage/workspaces?${params}`);
   }
   /**
    * List members of an organization.
@@ -6805,8 +6788,14 @@ var OrgApi = class extends BaseApiClient {
    * counts. Any org member may call it — members get the workspaces they
    * belong to, org:read holders get all of them.
    */
-  async getOrganizationWorkspaceSummaries(orgIdOrUuid) {
-    return this.fetch(`o/${orgIdOrUuid}/workspaces/summary`);
+  async getOrganizationWorkspaceSummaries(orgIdOrUuid, options) {
+    const params = new URLSearchParams();
+    if (options?.page) params.set("page", String(options.page));
+    if (options?.pageSize) params.set("pageSize", String(options.pageSize));
+    if (options?.search) params.set("search", options.search);
+    return this.fetch(
+      `o/${orgIdOrUuid}/workspaces/summary?${params}`
+    );
   }
   /**
    * Workspace-schema aggregates for one card, plus the caller's own member
@@ -7543,18 +7532,18 @@ function businessProfilePath(orgUuid, legalEntityUuid) {
 // src/api/oauth.ts
 function getOAuthPath(providerSlug, action) {
   if (providerSlug === "google_calendar") {
-    return `oauth/google/calendar/${action}`;
+    return `api/v2/oauth/google/calendar/${action}`;
   }
   if (providerSlug === "gmail") {
-    return `oauth/google/gmail/${action}`;
+    return `api/v2/oauth/google/gmail/${action}`;
   }
   if (providerSlug === "gdrive") {
-    return `oauth/google/drive/${action}`;
+    return `api/v2/oauth/google/drive/${action}`;
   }
   if (providerSlug === "gsheets") {
-    return `oauth/google/sheets/${action}`;
+    return `api/v2/oauth/google/sheets/${action}`;
   }
-  return `oauth/${providerSlug}/${action}`;
+  return `api/v2/oauth/${providerSlug}/${action}`;
 }
 function buildAuthorizeQuery(options) {
   if (!options) return "";
@@ -10374,7 +10363,8 @@ var WorkflowsApi = class extends BaseApiClient {
   /**
    * Classify the prompts of a Workflow's draft revision.
    *
-   * A decision model reads each Task that has a prompt and reports which
+   * A decision model reads each live Task with Workflow or Task instructions
+   * and reports which
    * prompt classifications probably apply. Each call asks the model again.
    */
   async getWorkflowPromptClassifications(wid, workflowId) {
@@ -11822,22 +11812,32 @@ function planFields(options) {
   }
   return fields;
 }
+function workspaceDirectoryParams(options = {}) {
+  const params = new URLSearchParams();
+  if (options.page !== void 0) params.set("page", String(options.page));
+  if (options.pageSize !== void 0) params.set("pageSize", String(options.pageSize));
+  if (options.search) params.set("search", options.search);
+  if (options.organizationUuid) params.set("organizationUuid", options.organizationUuid);
+  for (const uuid of options.workspaceUuids ?? []) params.append("workspaceUuids", uuid);
+  for (const id of options.workspaceIds ?? []) params.append("workspaceIds", String(id));
+  return params;
+}
 var WorkspacesApi = class extends BaseApiClient {
-  /** List all workspaces accessible to the current user. */
-  async getWorkspaces() {
-    return this.fetch("w/");
+  /** A bounded page of workspaces accessible to the current account. */
+  async getWorkspaces(options) {
+    return this.fetch(`w/?${workspaceDirectoryParams(options)}`);
   }
-  /**
-   * Compact rows for the workspaces a companion device could enter — the
-   * Lantern picker. Filtered by the same admission policy a device
-   * credential is gated by, without needing the device credential.
-   */
-  async getDeviceAdmissibleWorkspaces() {
-    return this.fetch("w/?can_use_device=1");
+  /** A bounded page of companion-device candidates, with admission checked per row. */
+  async getDeviceAdmissibleWorkspaces(options) {
+    const params = workspaceDirectoryParams(options);
+    params.set("can_use_device", "1");
+    return this.fetch(`w/?${params}`);
   }
-  /** List all publicly visible workspaces. */
-  async getPublicWorkspaces() {
-    return this.fetch("w/public");
+  /** A bounded page of publicly visible workspaces. */
+  async getPublicWorkspaces(options) {
+    return this.fetch(
+      `w/public?${workspaceDirectoryParams(options)}`
+    );
   }
   /** Get a single workspace by ID. */
   async getWorkspace(wid) {
@@ -12120,13 +12120,22 @@ var WorkspacesApi = class extends BaseApiClient {
    * @param scope - Export scope ("workflows" for all workflows only). Cannot be combined with workflowId.
    * @param exclude - Comma-separated entity categories to exclude (e.g. "channels")
    */
-  async exportWorkspace(wid, workflowId, scope, exclude) {
+  async exportWorkspace(wid, workflowId, scope, exclude, options) {
     const searchParams = new URLSearchParams();
     if (workflowId !== void 0) searchParams.set("workflow_id", String(workflowId));
     if (scope !== void 0) searchParams.set("scope", scope);
     if (exclude !== void 0) searchParams.set("exclude", exclude);
+    if (options?.revisionId !== void 0)
+      searchParams.set("revision_id", String(options.revisionId));
+    if (options?.revisionMode !== void 0) {
+      searchParams.set("revision_mode", options.revisionMode);
+    } else if (options?.revisionId === void 0) {
+      searchParams.set("revision_mode", "active");
+    }
     const qs = searchParams.toString();
-    return this.fetch(`w/${wid}/export${qs ? `?${qs}` : ""}`);
+    const data = await this.fetch(`w/${wid}/export${qs ? `?${qs}` : ""}`);
+    this.verifyExportSelection(data, workflowId, options);
+    return data;
   }
   /** Preview the result of importing workspace configuration without applying changes.
    *
@@ -12185,15 +12194,60 @@ var WorkspacesApi = class extends BaseApiClient {
    * target workspace.
    */
   /** Download a workspace export ZIP (``export.json`` + file blobs). */
-  async exportWorkspaceZip(wid, workflowId, scope, exclude) {
+  async exportWorkspaceZip(wid, workflowId, scope, exclude, options) {
     const searchParams = new URLSearchParams();
     if (workflowId !== void 0) searchParams.set("workflow_id", String(workflowId));
     if (scope !== void 0) searchParams.set("scope", scope);
     if (exclude !== void 0) searchParams.set("exclude", exclude);
+    if (options?.revisionId !== void 0)
+      searchParams.set("revision_id", String(options.revisionId));
+    if (options?.revisionMode !== void 0) {
+      searchParams.set("revision_mode", options.revisionMode);
+    } else if (options?.revisionId === void 0) {
+      searchParams.set("revision_mode", "active");
+    }
     const qs = searchParams.toString();
     const response = await this.fetchRaw(`w/${wid}/export.zip${qs ? `?${qs}` : ""}`);
+    if (options?.revisionId !== void 0 || options?.revisionMode === "all") {
+      const version = response.headers.get("X-Gravityrail-Export-Version");
+      const selection = response.headers.get("X-Gravityrail-Export-Selection");
+      const selected = options?.revisionId !== void 0;
+      if (version !== (selected ? "1.0" : "2.0") || selection !== (selected ? "selected" : "all") || selected && (workflowId === void 0 || !response.headers.get("X-Gravityrail-Export-Revision-Uuid")?.trim() || !response.headers.get("X-Gravityrail-Export-Workflow-Uuid")?.trim())) {
+        try {
+          await response.body?.cancel();
+        } catch {
+        }
+        throw new Error(
+          "Server did not return verified Workflow revision export headers. Request an explicit active snapshot or use a server that supports export provenance."
+        );
+      }
+    }
     return response.arrayBuffer();
   }
+  // Compatibility shape check only. The backend WorkspaceExportData
+  // _validate_revision_archive owns full graph/publication invariants.
+  verifyExportSelection(data, workflowId, options) {
+    const hasUuid = (value) => typeof value === "string" && value.trim().length > 0;
+    if (options?.revisionId !== void 0) {
+      const revisions = data?.workflowRevisions;
+      if (workflowId === void 0 || data?.version !== "1.0" || data.workflowRevisionSelection !== "selected" || !Array.isArray(revisions) || revisions.length !== 1) {
+        throw new Error(
+          "Server did not return the requested Workflow revision. Use a server that supports revision selection."
+        );
+      }
+      if (!hasUuid(revisions[0]?.uuid) || !hasUuid(revisions[0]?.workflow?.uuid) || !hasUuid(data.workflows?.[0]?.uuid) || data.workflows?.length !== 1 || revisions[0]?.workflow?.uuid !== data.workflows[0]?.uuid) {
+        throw new Error("Server export does not match the requested Workflow revision.");
+      }
+    } else if (options?.revisionMode === "all" && (data?.version !== "2.0" || data.workflowRevisionSelection !== "all" || !Array.isArray(data.workflowRevisions) || !Array.isArray(data.workflows) || data.workflows.some(
+      (workflow) => !hasUuid(workflow?.uuid) || !data.workflowRevisions?.some(
+        (revision) => hasUuid(revision?.uuid) && revision?.workflow?.uuid === workflow.uuid
+      )
+    ))) {
+      throw new Error(
+        "Server did not return all Workflow revisions. Request an explicit active snapshot or use a server that supports revision archives."
+      );
+    }
+  }
   /** Import workspace configuration from exported JSON, or from a ZIP archive.
    * Pass ``archive`` (the ZIP from ``exportWorkspaceZip``) to restore file
    * contents. ``exportData`` may be omitted when the ZIP contains it.
@@ -12834,6 +12888,7 @@ var WORKSPACE_METHOD_NAMES = [
   "getAgents",
   "getAnonymousResolution",
   "getAnonymousFormSubmission",
+  "getAnonymousFormSchema",
   "getAnonymousResolutions",
   "getApiKeys",
   "getArchiveBlockers",
@@ -13219,6 +13274,7 @@ var WORKSPACE_METHOD_NAMES = [
   "linkUnlinkedSalesforceMembersByIdentity",
   "listAbilities",
   "listAnonymousFormSubmissions",
+  "submitAnonymousForm",
   "listAppConnections",
   "listAvailableAppConnections",
   "listInstallations",
@@ -13672,6 +13728,8 @@ function bindTrackedLinksMethods(target, trackedLinks) {
 
 // src/client/bindings/data-types.ts
 function bindDataTypesMethods(target, dataTypes) {
+  target.getAnonymousFormSchema = dataTypes.getAnonymousFormSchema.bind(dataTypes);
+  target.submitAnonymousForm = dataTypes.submitAnonymousForm.bind(dataTypes);
   target.getDataTypeDraft = dataTypes.getDataTypeDraft.bind(dataTypes);
   target.saveDataTypeDraft = dataTypes.saveDataTypeDraft.bind(dataTypes);
   target.publishDataTypeDraft = dataTypes.publishDataTypeDraft.bind(dataTypes);
@@ -14866,6 +14924,8 @@ var GravityRailClient = class {
   getCelContext;
   validateCelExpression;
   // Data Types API
+  getAnonymousFormSchema;
+  submitAnonymousForm;
   getDataTypes;
   getDataTypeDraft;
   saveDataTypeDraft;
@@ -20140,6 +20200,86 @@ function toSafeMemberImportSummary(event) {
     }))
   };
 }
+
+// src/workflows/path.ts
+function getPathDefinition(path) {
+  if (path.routing != null) {
+    const routing = path.routing;
+    if (typeof routing !== "object" || Array.isArray(routing)) return null;
+    const fields = routing;
+    if (fields.kind !== void 0 && fields.kind !== "outcome" || typeof fields.outcome !== "string" || !/^[a-z][a-z0-9_]{0,31}$/.test(fields.outcome) || Object.keys(fields).some((key) => key !== "kind" && key !== "outcome"))
+      return null;
+    return {
+      availability: { kind: "always", expression: null, decisionPrompt: null },
+      selection: {
+        mode: "automatic",
+        rule: "task_outcome",
+        choicePrompt: null,
+        condition: null,
+        outcome: fields.outcome,
+        policy: "matching_outcome",
+        priority: null
+      }
+    };
+  }
+  const expression = path.celCondition?.trim() ? path.celCondition : null;
+  const automatic = expression !== null && Boolean(path.required || path.autoNext);
+  return {
+    availability: {
+      kind: expression === null ? "always" : "cel",
+      expression,
+      decisionPrompt: null
+    },
+    selection: {
+      mode: automatic ? "automatic" : "choice",
+      rule: automatic ? "when_available" : "choice",
+      choicePrompt: automatic ? null : path.choicePrompt?.trim() || null,
+      condition: null,
+      outcome: null,
+      policy: automatic ? "first_match" : "choose_one",
+      priority: automatic ? path.order ?? 0 : null
+    }
+  };
+}
+function pathDraftFromStorage(path) {
+  const definition = getPathDefinition(path);
+  if (!definition || definition.selection.rule === "task_outcome") {
+    throw new Error("This Path requires its dedicated routing editor.");
+  }
+  return {
+    availabilityCondition: path.celCondition ?? "",
+    selectionMode: definition.selection.mode,
+    choicePrompt: path.choicePrompt ?? "",
+    selectionPriority: path.order ?? 0
+  };
+}
+function pathDraftToStorage(draft, original) {
+  const initial = pathDraftFromStorage(original);
+  const hasCondition = draft.availabilityCondition.trim() !== "";
+  if (draft.selectionMode === "automatic" && !hasCondition) {
+    throw new Error("Automatic Path selection requires a CEL condition.");
+  }
+  if (draft.availabilityCondition === initial.availabilityCondition && draft.selectionMode === initial.selectionMode && draft.choicePrompt === initial.choicePrompt && draft.selectionPriority === initial.selectionPriority)
+    return original;
+  const celCondition = draft.availabilityCondition === initial.availabilityCondition ? original.celCondition : draft.availabilityCondition.trim() ? draft.availabilityCondition : null;
+  const choicePrompt = draft.choicePrompt === initial.choicePrompt ? original.choicePrompt : draft.choicePrompt.trim() ? draft.choicePrompt : null;
+  let autoNext = original.autoNext;
+  let required = original.required;
+  if (draft.selectionMode === "automatic" && initial.selectionMode !== "automatic") {
+    autoNext = true;
+  } else if (draft.selectionMode === "choice" && (hasCondition || initial.availabilityCondition.trim() !== "") && Boolean(autoNext || required)) {
+    autoNext = false;
+    required = false;
+  }
+  return {
+    ...original,
+    celCondition,
+    choicePrompt,
+    autoNext,
+    required,
+    ...draft.selectionPriority === initial.selectionPriority ? {} : { order: draft.selectionPriority }
+  };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AGENT_NOTE_ORIGINS,
@@ -20365,6 +20505,7 @@ function toSafeMemberImportSummary(event) {
   getFeaturesByCategory,
   getFeaturesByVisibility,
   getMissingDependencies,
+  getPathDefinition,
   getResourceMetadata,
   getRevisionState,
   getTTSProvider,
@@ -20380,6 +20521,8 @@ function toSafeMemberImportSummary(event) {
   isRegistryInitialized,
   isSMSDeliveryFailureStatus,
   parseOrgAuthChallenge,
+  pathDraftFromStorage,
+  pathDraftToStorage,
   requiresAssistantParticipant,
   runWorkspaceScript,
   toSafeMemberImportPreview,