@membranehq/sdk 0.28.0 → 0.28.2

package/dist/index.node.js

@@ -3523,6 +3523,7 @@ exports.WorkspaceElementState = void 0;
     WorkspaceElementState["CONFIGURATION_ERROR"] = "CONFIGURATION_ERROR";
     WorkspaceElementState["SETUP_FAILED"] = "SETUP_FAILED";
     WorkspaceElementState["READY"] = "READY";
+    WorkspaceElementState["DISCONNECTING"] = "DISCONNECTING";
 })(exports.WorkspaceElementState || (exports.WorkspaceElementState = {}));
 exports.WorkspaceElementDependencyType = void 0;
 (function (WorkspaceElementDependencyType) {
@@ -3664,6 +3665,12 @@ const IntegrationLevelMembraneInterfaceSelectorQuery = z.z.object({
         filterTitle: 'Connection',
         referenceElementType: exports.WorkspaceElementType.Connection,
     }),
+    connectionKey: z.z
+        .string()
+        .optional()
+        .meta({
+        hidden: true,
+    }),
     instanceKey: z.z
         .string()
         .optional()
@@ -3997,6 +4004,7 @@ const CreateConnectionRequestPayload = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().min(1).max(100).optional(),
     name: z.z.string().optional(),
     allowMultipleConnections: z.z.boolean().optional(),
     connectorParameters: z.z.record(z.z.string(), z.z.unknown()).optional(),
@@ -4013,6 +4021,7 @@ const ConnectionRequest = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().optional(),
     name: z.z.string().optional(),
     allowMultipleConnections: z.z.boolean().optional(),
     connectorParameters: z.z.record(z.z.string(), z.z.unknown()).optional(),
@@ -4029,6 +4038,7 @@ const ConnectionEditableProperties = z.z.object({
     name: z.z.string().optional(),
     meta: z.z.record(z.z.string(), z.z.any()).optional(),
     authOptionKey: z.z.string().optional(),
+    key: z.z.string().min(1).max(100).optional().nullable(),
     integrationId: z.z.string().optional(),
     integrationUuid: z.z.string().optional(),
     integrationKey: z.z.string().optional(),
@@ -4051,8 +4061,10 @@ const ConnectionClientAction = z.z.object({
 const BaseConnection = BaseWorkspaceElement.extend({
     ...TenantLayerElement.shape,
     name: z.z.string(),
+    key: z.z.string().optional(),
     isTest: z.z.boolean().optional(),
-    disconnected: z.z.boolean().optional(),
+    connected: z.z.boolean().optional(),
+    disconnected: z.z.boolean().optional().describe('[DEPRECATED] Use `connected` instead.'),
     isDefunct: z.z.boolean().optional(),
     state: z.z.enum(exports.WorkspaceElementState).optional(),
     errors: z.z.array(ErrorDataSchema).optional(),
@@ -4623,7 +4635,7 @@ function getEffectiveConnectorOption(connector, optionKey) {
         if (optionKey === '') {
             return connector;
         }
-        throw new BadRequestError(`Connector doesn't have auth option ${optionKey}`);
+        return undefined;
     }
     const connectorInputSchema = (_b = connector.inputSchema) !== null && _b !== void 0 ? _b : (_c = connector.ui) === null || _c === void 0 ? void 0 : _c.schema;
     const optionInputSchema = (_d = option === null || option === void 0 ? void 0 : option.inputSchema) !== null && _d !== void 0 ? _d : (_e = option === null || option === void 0 ? void 0 : option.ui) === null || _e === void 0 ? void 0 : _e.schema;
@@ -9304,6 +9316,7 @@ const BaseConnector = z.z.object({
     isPublic: z.z.boolean().optional(),
     popularity: z.z.number().optional(),
     tenantId: z.z.string().optional(),
+    archivedAt: z.z.string().optional().describe('When set, the connector is archived (soft-deleted).'),
 });
 const Connector = z.z.object({}).extend(BaseConnector.shape).extend(ConnectorVersionData.shape);
 const MinimalConnector = z.z.object({
@@ -10280,10 +10293,22 @@ const BaseActionRunLogRecord = ActivityLogRecord.extend({
 const ConnectedProductType = z.z.enum(['ai-agent', 'app']);
 const ConnectedProductAudience = z.z.enum(['personal', 'customers']);
 const AiAgentAudience = ConnectedProductAudience;
-const AiAgentType = z.z.enum(['openclaw', 'claude', 'chatgpt', 'custom']);
-const AiAgentParameters = z.z.object({
-    agentType: AiAgentType.optional(),
-});
+const AiAgentType = z.z.enum([
+    'claude-code',
+    'codex',
+    'openclaw',
+    'cursor',
+    'copilot',
+    'windsurf',
+    'claude',
+    'chatgpt',
+    'custom',
+]);
+const AiAgentParameters = z.z
+    .object({
+    agentType: z.z.string().optional(),
+})
+    .passthrough();
 const BaseConnectedProduct = z.z.object({
     id: z.z.string(),
     name: z.z.string(),
@@ -10297,6 +10322,61 @@ const BaseConnectedProduct = z.z.object({
     archivedAt: z.z.string().optional(),
 });
 
+const BaseConnectionAttemptLog = ActivityLogRecord.extend({
+    connectorId: z.z.string().optional(),
+    connectorVersion: z.z.string().optional(),
+    authOptionKey: z.z.string().optional(),
+    connectionRequestId: z.z.string().optional(),
+    status: z.z.enum(['success', 'error']),
+    error: ErrorDataSchema.optional(),
+    createdAt: z.z.string(),
+});
+
+const ActApiDispatch = z.z.object({
+    method: z.z.enum(exports.HttpRequestMethod).describe('HTTP method to use.'),
+    path: z.z.string().optional().describe("Path appended to the connection's base URL, e.g. `/v2/users/me`. Required."),
+    body: z.z.any().optional().describe('Request body. For JSON APIs, pass a plain object.'),
+    headers: z.z.record(z.z.string(), z.z.string()).optional().describe('Additional HTTP headers.'),
+    query: z.z
+        .record(z.z.string(), z.z.union([z.z.string(), z.z.number(), z.z.boolean()]))
+        .optional()
+        .describe('Query-string parameters.'),
+    url: z.z.string().optional().describe('[INTERNAL] Alias for `path`. Normalized to `path` on the server.'),
+    data: z.z.any().optional().describe('[INTERNAL] Alias for `body`. Normalized to `body` on the server.'),
+});
+const ActRequest = z.z
+    .object({
+    id: z.z.string().optional().describe('ID of the action to run.'),
+    key: z.z
+        .string()
+        .optional()
+        .describe('Key of the action to run. If the same key exists across multiple integrations, also pass `integrationId`, `integrationKey`, or `connectionId` so we know which one you mean.'),
+    api: ActApiDispatch.optional().describe("Inline HTTP request spec, sent through the resolved connection's auth layer and base URL. Pair with `connectionId`, `connectionKey`, `integrationId`, or `integrationKey` to pick the connection."),
+    code: z.z
+        .string()
+        .optional()
+        .describe('Inline JavaScript executed in a sandbox. The module must export a function that receives `{ input, membrane, ... }`. Its return value becomes the action output.'),
+    integrationId: z.z
+        .string()
+        .optional()
+        .describe("ID of the integration to run the action on. When `key` is provided, looks up the action within this integration. When no connection is specified, runs against this integration's default connection."),
+    integrationKey: z.z
+        .string()
+        .optional()
+        .describe("Key of the integration to run the action on. When `key` is provided, looks up the action within this integration. When no connection is specified, runs against this integration's default connection."),
+    connectionId: z.z
+        .string()
+        .optional()
+        .describe('ID of the connection to run the action against. If a connection-level version of the action exists on this connection, that version is used; otherwise the integration-level or universal action is used.'),
+    connectionKey: z.z
+        .string()
+        .optional()
+        .describe('Key of the connection to run the action against. Use when you have a stable key for the connection instead of an ID.'),
+    input: z.z.any().optional().describe('Input passed to the action, matching its input schema.'),
+    meta: z.z.record(z.z.string(), z.z.any()).optional().describe('Arbitrary metadata stored on the action run log.'),
+})
+    .strict();
+
 const ActionApiResponse = BaseAction.extend({
     integration: BaseIntegration.optional(),
     user: BaseCustomer.optional(),
@@ -10453,11 +10533,19 @@ const FindConnectionsQuery = PaginationQuery.merge(SearchQuery)
         filterTitle: 'External App',
         referenceElementType: exports.WorkspaceElementType.App,
     }),
+    connected: zodBooleanCoercion()
+        .optional()
+        .meta({
+        filterTitle: 'Connected',
+        isFlag: true,
+    }),
     disconnected: zodBooleanCoercion()
         .optional()
+        .describe('[DEPRECATED] Use `connected` instead.')
         .meta({
         filterTitle: 'Disconnected',
         isFlag: true,
+        hidden: true,
     }),
     isTest: zodBooleanCoercion()
         .optional()
@@ -10545,6 +10633,7 @@ const ConnectionSelector = z.z.object({
     integrationKey: z.z.string().optional(),
     integrationId: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().optional(),
 });
 const ConnectionApiResponse = BaseConnection.extend({
     user: BaseCustomer.optional(),
@@ -10588,6 +10677,7 @@ const ConnectPayload = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().min(1).max(100).optional(),
     name: z.z.string().optional(),
     input: z.z.record(z.z.string(), z.z.unknown()).optional(),
     connectionParameters: z.z.any().optional().describe('[INTERNAL] Deprecated: Use input instead'),
@@ -10597,6 +10687,7 @@ const ConnectPayload = z.z.object({
     redirectUri: z.z.string().optional(),
     customState: z.z.string().optional(),
     connectionRequestId: z.z.string().optional(),
+    intent: z.z.string().optional(),
 });
 const ConnectUIOptions = ConnectPayload.omit({ input: true, redirectUri: true }).extend({
     theme: z.z.enum(['light', 'dark', 'auto']).optional(),
@@ -10831,6 +10922,18 @@ const UpdateIntegrationRequest = IntegrationEditableProperties.partial();
 const FindIntegrationsQuery = z.z
     .object({
     appUuid: z.z.string().optional(),
+    connectors: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from connectors: 1 to enable, 0 to disable'),
+    externalApps: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from external apps: 1 to enable, 0 to disable'),
+    websearch: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from web search: 1 to enable, 0 to disable'),
 })
     .merge(PaginationQuery)
     .merge(SearchQuery)
@@ -10855,6 +10958,11 @@ const IntegrationApiResponse = BaseIntegration.extend({
         .optional()
         .describe('[INTERNAL] Deprecated: Use POST /connectors/:id/generate-options instead'),
 });
+const IntegrationListItem = IntegrationApiResponse.extend({
+    id: z.z.string().optional(),
+    logoUri: z.z.string().optional(),
+    appUri: z.z.string().optional(),
+});
 
 const PackageElementApi = z.z.object({
     id: z.z.string(),
@@ -11385,6 +11493,12 @@ const ListExternalEventSubscriptionsQuery = PaginationQuery.merge(IncludeArchive
     externalAppId: z.z.string().optional().meta({
         hidden: true,
     }),
+    status: z.z
+        .enum(exports.ExternalEventSubscriptionStatus)
+        .optional()
+        .meta({
+        filterTitle: 'Status',
+    }),
 });
 const ExternalEventSubscriptionApiResponse = BaseExternalEventSubscription.extend({
     user: BaseCustomer.optional(),
@@ -11594,6 +11708,14 @@ const FindConnectedProductsQuery = z.z
     .merge(IncludeArchivedQuery);
 const ConnectedProductApiResponse = BaseConnectedProduct;
 
+const ConnectionAttemptLogApiResponse = BaseConnectionAttemptLog;
+const FindConnectionAttemptLogsQuery = PaginationQuery.extend({
+    connectionId: z.z.string().optional(),
+    integrationId: z.z.string().optional(),
+    status: z.z.enum(['success', 'error']).optional(),
+});
+const FindConnectionAttemptLogsResponse = createPaginationResponseSchema(ConnectionAttemptLogApiResponse);
+
 class DependencyError extends MembraneError {
     constructor(arg, workspaceElementReference) {
         super(arg);
@@ -11844,6 +11966,28 @@ function getFilterFieldMeta(meta) {
     return undefined;
 }
 
+const AI_GATEWAY_SUPPORTED_MODELS = [
+    { id: 'anthropic/claude-sonnet-4.6', name: 'Claude Sonnet 4.6' },
+    { id: 'anthropic/claude-opus-4.6', name: 'Claude Opus 4.6' },
+    { id: 'anthropic/claude-sonnet-4.5', name: 'Claude Sonnet 4.5' },
+    { id: 'anthropic/claude-opus-4.5', name: 'Claude Opus 4.5' },
+    { id: 'openai/gpt-5.2', name: 'GPT-5.2' },
+    { id: 'openai/gpt-5-nano', name: 'GPT-5 Nano' },
+    { id: 'google/gemini-3-pro-preview', name: 'Gemini 3 Pro' },
+    { id: 'moonshotai/kimi-k2.5', name: 'Kimi K2.5' },
+];
+const AI_GATEWAY_SUPPORTED_MODEL_IDS = AI_GATEWAY_SUPPORTED_MODELS.map((model) => model.id);
+if (AI_GATEWAY_SUPPORTED_MODEL_IDS.length === 0) {
+    throw new Error('AI_GATEWAY_SUPPORTED_MODEL_IDS must not be empty');
+}
+const AIGatewaySupportedModelIdSchema = z.z.enum(AI_GATEWAY_SUPPORTED_MODEL_IDS);
+const DEFAULT_AI_GATEWAY_MODEL_ID = 'anthropic/claude-sonnet-4.6';
+const AI_GATEWAY_PROVIDER_MODELS = Object.fromEntries(AI_GATEWAY_SUPPORTED_MODELS.map((model) => [model.id, { name: model.name }]));
+const aiGatewaySupportedModelIdSet = new Set(AI_GATEWAY_SUPPORTED_MODEL_IDS);
+function isAIGatewaySupportedModelId(modelId) {
+    return aiGatewaySupportedModelIdSet.has(modelId);
+}
+
 exports.AgentSessionStatus = void 0;
 (function (AgentSessionStatus) {
     AgentSessionStatus["QUEUED"] = "queued";
@@ -11886,7 +12030,6 @@ const AgentSession = z.z.object({
     summary: z.z.string().optional(),
     cost: z.z.number().optional(),
     state: z.z.enum(exports.AgentSessionState).default(exports.AgentSessionState.BUSY),
-    usage: z.z.number().optional(),
     hasWorker: z.z.boolean(),
     isExternal: z.z.boolean().optional(),
     agentName: z.z.enum(exports.AgentName).optional(),
@@ -11904,7 +12047,7 @@ const CreateAgentSession = z.z.object({
     prompt: z.z.string().min(1),
     testCustomerId: z.z.string().optional(),
     isExternal: z.z.boolean().optional(),
-    modelId: z.z.string().optional(),
+    modelId: AIGatewaySupportedModelIdSchema.optional(),
     agentName: z.z.enum(exports.AgentName).optional(),
     promptAttachments: z.z.array(AgentSessionAttachment).optional(),
 });
@@ -12460,14 +12603,14 @@ function parseMembraneElementPath(relativePath) {
     }
     return undefined;
 }
-function getConnectorSpecPath(connectorKey) {
+function getConnectorSpecPath(connectorUuid) {
     const connectorsPath = WorkspaceElementSpecs[exports.WorkspaceElementType.Connector].apiPath;
-    return `${connectorsPath}/${connectorKey}/${connectorKey}.yml`;
+    return `${connectorsPath}/${connectorUuid}/${connectorUuid}.yml`;
 }
-function getConnectorVersionPath(connectorKey, version) {
+function getConnectorVersionPath(connectorUuid, version) {
     const connectorsPath = WorkspaceElementSpecs[exports.WorkspaceElementType.Connector].apiPath;
     const versionDir = version === CONNECTOR_VERSION_DEVELOPMENT ? 'development' : version;
-    return `${connectorsPath}/${connectorKey}/${versionDir}/src.zip`;
+    return `${connectorsPath}/${connectorUuid}/${versionDir}/src.zip`;
 }
 
 class SelfAccessor {
@@ -13025,6 +13168,7 @@ exports.AlertType = void 0;
     AlertType["parallelApiRequestsPerCustomer"] = "parallelApiRequestsPerCustomer";
     AlertType["engineCreditsExhaustionProjected"] = "engineCreditsExhaustionProjected";
     AlertType["engineCreditsExhaustionActual"] = "engineCreditsExhaustionActual";
+    AlertType["aiCreditsDebtAccumulated"] = "aiCreditsDebtAccumulated";
     AlertType["totalNumberOfDatabaseEntitiesPerCustomer"] = "totalNumberOfDatabaseEntitiesPerCustomer";
     AlertType["totalNumberOfCustomers"] = "totalNumberOfCustomers";
     AlertType["totalNumberOfConnections"] = "totalNumberOfConnections";
@@ -13062,6 +13206,7 @@ const ALERT_TYPE_CATEGORIES = {
     [exports.AlertType.parallelApiRequestsPerCustomer]: exports.AlertCategory.CUSTOMER_RATE_LIMIT,
     [exports.AlertType.engineCreditsExhaustionProjected]: exports.AlertCategory.USAGE,
     [exports.AlertType.engineCreditsExhaustionActual]: exports.AlertCategory.USAGE,
+    [exports.AlertType.aiCreditsDebtAccumulated]: exports.AlertCategory.USAGE,
     [exports.AlertType.totalNumberOfDatabaseEntitiesPerCustomer]: exports.AlertCategory.WORKSPACE_SIZE,
     [exports.AlertType.testAlert]: exports.AlertCategory.TEST,
     [exports.AlertType.totalNumberOfCustomers]: exports.AlertCategory.WORKSPACE_SIZE,
@@ -13162,6 +13307,7 @@ function getAlertTypeDisplayName(alertType) {
         [exports.AlertType.parallelApiRequestsPerCustomer]: 'Parallel API Requests Per Customer',
         [exports.AlertType.engineCreditsExhaustionProjected]: 'Engine Credits Exhaustion Projected',
         [exports.AlertType.engineCreditsExhaustionActual]: 'Engine Credits Exhaustion Actual',
+        [exports.AlertType.aiCreditsDebtAccumulated]: 'AI Credits Debt Accumulated',
         [exports.AlertType.totalNumberOfDatabaseEntitiesPerCustomer]: 'Database Entities Per Customer',
         [exports.AlertType.testAlert]: 'Test Alert',
         [exports.AlertType.totalNumberOfCustomers]: 'Total Number of Customers',
@@ -13318,6 +13464,7 @@ const WorkspaceLimitsSchema = z.object({
     totalNumberOfConnections: WorkspaceLimit.optional(),
     totalNumberOfWorkspaceElements: WorkspaceLimit.optional(),
     totalNumberOfWorkspaceDatabaseRecords: WorkspaceLimit.optional(),
+    flowRunsQueueSizePerConnection: WorkspaceLimit.optional(),
     instantTasksQueueSize: WorkspaceLimit.optional(),
     QueuedTasksQueueSize: WorkspaceLimit.optional(),
     parallelApiRequestsPerCustomer: WorkspaceLimit.optional(),
@@ -13338,6 +13485,9 @@ const WorkspaceSettingsSchema = z.object({
     disableSecretKeyAuth: z.boolean().optional(),
     useMembraneUniverse: z.boolean().optional(),
     useRemoteRepository: z.boolean().optional(),
+    autoGenerateIntegrationsFromConnectors: z.boolean().optional(),
+    autoGenerateIntegrationsFromExternalApps: z.boolean().optional(),
+    autoGenerateIntegrationsFromWebSearch: z.boolean().optional(),
 });
 const EngineWorkspaceSettingsSchema = WorkspaceSettingsSchema;
 const WorkspacePublicKey = z.object({
@@ -13424,6 +13574,13 @@ const ListWorkspacesQuery = z.z
 })
     .merge(IncludeArchivedQuery);
 const GetWorkspaceQuery = IncludeArchivedQuery;
+const MembraneCredentials = z.z.object({
+    apiUri: z.z.string().describe('Uri for Membrane API'),
+    workspaceKey: z.z.string().describe('Workspace key'),
+    workspaceSecret: z.z.string().optional().describe('Workspace secret for signing tokens (never expose in browser code)'),
+    tenantKey: z.z.string().optional().describe('Tenant key for the current test tenant'),
+    notes: z.z.string().optional().describe('Usage notes'),
+});
 
 const PARALLEL_EXECUTION_LIMITS = [
     'parallelEventPulls',
@@ -13452,6 +13609,7 @@ const WORKSPACE_SIZE_LIMITS = [
     'totalNumberOfConnections',
     'totalNumberOfWorkspaceElements',
     'totalNumberOfWorkspaceDatabaseRecords',
+    'flowRunsQueueSizePerConnection',
 ];
 const EDITABLE_LIMITS = [
     'parallelApiRequestsPerCustomer',
@@ -13479,7 +13637,7 @@ function compareWorkspaceExports(baseExport, targetExport, options = { includeDe
         [exports.WorkspaceElementChangeType.UPDATE]: new Set(),
         [exports.WorkspaceElementChangeType.DELETE]: new Set(),
     };
-    const sourceUuidByTargetUuid = new Map();
+    const baseUuidByTargetUuid = new Map();
     const diffs = [];
     const integrationMap = buildIntegrationsMap([
         ...(baseExport[exports.WorkspaceElementType.Integration] || []),
@@ -13510,7 +13668,7 @@ function compareWorkspaceExports(baseExport, targetExport, options = { includeDe
         const base = baseMap.get(selector);
         const target = targetMap.get(selector);
         if (base && target && base.element.uuid !== target.element.uuid) {
-            sourceUuidByTargetUuid.set(target.element.uuid, base.element.uuid);
+            baseUuidByTargetUuid.set(target.element.uuid, base.element.uuid);
         }
         const change = compareElementExports(base === null || base === void 0 ? void 0 : base.element, target === null || target === void 0 ? void 0 : target.element);
         if (options.includeDeletions === false && (change === null || change === void 0 ? void 0 : change.type) === exports.WorkspaceElementChangeType.DELETE) {
@@ -13530,7 +13688,7 @@ function compareWorkspaceExports(baseExport, targetExport, options = { includeDe
             diffs.push(diff.createTwoFilesPatch(`a/${path}`, `b/${path}`, baseYaml, targetYaml));
         }
     }
-    const result = { comparison, changes, sourceUuidByTargetUuid };
+    const result = { comparison, changes, baseUuidByTargetUuid };
     if (options.includeDiff) {
         result.diff = diffs.join('\n').trim();
     }
@@ -13715,6 +13873,7 @@ const WorkspaceEditableFields = z.z.object({
     alertDeliverySettings: AlertDeliverySettingsSchema.optional(),
     jwksUri: z.z.string().nullable().optional(),
     type: z.z.enum(exports.WorkspaceType).optional().describe('Workspace type (production or development)'),
+    isReadOnly: z.z.boolean().optional().describe('Whether the workspace is in read-only mode'),
 });
 const OrgWorkspace = z.z
     .object({
@@ -13739,12 +13898,38 @@ const OrgWorkspaceUpdateRequest = z.z
     logoUri: z.z.string().optional(),
 })
     .merge(WorkspaceEditableFields);
+const WorkspaceOnboardingData = z.z
+    .object({
+    productSetup: z.z
+        .object({
+        type: ConnectedProductType.optional(),
+        agentType: z.z.string().optional(),
+        name: z.z.string().optional(),
+        connectedProductId: z.z.string().optional(),
+    })
+        .optional(),
+    connections: z.z
+        .object({
+        apps: z.z.array(z.z.object({
+            externalAppId: z.z.string().optional(),
+            name: z.z.string().optional(),
+            url: z.z.string().optional(),
+            status: z.z.enum(['pending', 'connected', 'skipped']).optional(),
+        })),
+    })
+        .optional(),
+})
+    .passthrough();
 const OrgWorkspaceUser = z.z.object({
     id: z.z.string(),
     workspaceId: z.z.string(),
     testCustomerId: z.z.string(),
     userId: z.z.string(),
     role: z.z.string(),
+    onboardingData: WorkspaceOnboardingData.optional().describe('[INTERNAL]'),
+});
+const PatchUserWorkspaceSettings = z.z.object({
+    onboardingData: WorkspaceOnboardingData.optional().describe('[INTERNAL]'),
 });
 const CreateOrgRequest = z.z.object({
     name: z.z.string(),
@@ -13755,9 +13940,7 @@ const CreateOrgRequest = z.z.object({
     referralSource: z.z.string().optional(),
     builder: z.z.array(z.z.enum(['me', 'team'])).optional(),
     stripeCustomerId: z.z.string().optional(),
-    signupSource: z.z
-        .enum(['web', 'membrane-cli', 'claude', 'cursor', 'chatgpt', 'warp', 'lovable', 'openclaw', 'other'])
-        .optional(),
+    signupSource: z.z.string().optional(),
 });
 const UpdateOrgRequest = z.z.object({
     name: z.z.string().min(1).optional(),
@@ -13828,7 +14011,7 @@ const RotateOrgWorkspaceSecretResponse = z.z.object({
 const AccountResponse = z.z.object({
     user: FullPlatformUser.optional(),
     workspace: OrgWorkspace.optional(),
-    workspaces: z.z.array(OrgWorkspace).optional(),
+    hasWorkspaces: z.z.boolean().optional(),
     workspaceUser: OrgWorkspaceUser.extend({
         testCustomerId: z.z.string(),
     }).optional(),
@@ -13856,6 +14039,8 @@ exports.WebhookTypeEnum = void 0;
     WebhookTypeEnum["AGENT_SESSION_FINISHED"] = "agent-session-finished";
     WebhookTypeEnum["SEND_ALERT_EMAIL"] = "send-alert-email";
     WebhookTypeEnum["PUBLIC_PACKAGE_ACTION_RUN_FAILED"] = "public-package-action-run-failed";
+    WebhookTypeEnum["BETTER_AUTH_SIGNUP_VERIFY"] = "better-auth-signup-verify";
+    WebhookTypeEnum["BETTER_AUTH_RESET_PASSWORD"] = "better-auth-reset-password";
 })(exports.WebhookTypeEnum || (exports.WebhookTypeEnum = {}));
 
 const IntegrationSpecificElementSelector = z.object({
@@ -14107,6 +14292,7 @@ class ActionAccessor extends ElementAccessor {
             ? {
                 integrationKey: options.integrationKey,
                 connectionId: options.connectionId,
+                connectionKey: options.connectionKey,
             }
             : {};
         return this.options.client.post(this.getPath('run'), { input }, { params: queryParams });
@@ -15176,7 +15362,7 @@ class ConnectionProxy {
     }
 }
 async function createOrUpdateConnection(options) {
-    const { client, connectionId, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
+    const { client, connectionId, connectionKey, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
     let connectionType = await detectConnectionType(options);
     if (redirectUri) {
         connectionType = ConnectionType.REDIRECT;
@@ -15194,6 +15380,7 @@ async function createOrUpdateConnection(options) {
             connectorId,
             connectorVersion,
             connectionId,
+            connectionKey,
             name,
             authOptionKey,
             allowMultipleConnections,
@@ -15832,6 +16019,12 @@ const ScenarioTemplate = z.z.object({
     handyElements: z.z.array(HandyScenarioTemplateElement).optional(),
 });
 
+function formatSessionCost(cost) {
+    if (cost === undefined || cost === null)
+        return '-';
+    return cost.toFixed(2);
+}
+
 const SessionCredentials = z.z.object({
     accessKeyId: z.z.string().min(1),
     secretAccessKey: z.z.string().min(1),
@@ -15921,22 +16114,14 @@ const ClientTokenListResponse = z.z.object({
 });
 
 const MEMBRANE_CLI_CLIENT_ID = 'membrane-cli';
-const OAUTH_SCOPE_PLATFORM_USER = 'platform-user';
-const OAUTH_SCOPE_TENANT = 'tenant';
-const OAUTH_SCOPES = [OAUTH_SCOPE_PLATFORM_USER, OAUTH_SCOPE_TENANT];
-const SCOPE_PRIORITY = [OAUTH_SCOPE_PLATFORM_USER, OAUTH_SCOPE_TENANT];
-function selectHighestPriorityScope(scopes) {
-    if (scopes.length === 0)
-        return undefined;
-    if (scopes.length === 1)
-        return scopes[0];
-    for (const priorityScope of SCOPE_PRIORITY) {
-        if (scopes.includes(priorityScope)) {
-            return priorityScope;
-        }
-    }
-    return scopes[0];
-}
+const OAUTH_TOKEN_TYPE_PLATFORM_USER = 'platform-user';
+const OAUTH_TOKEN_TYPE_TENANT = 'tenant';
+const OAUTH_TOKEN_TYPE_CONNECTION = 'connection';
+const OAUTH_TOKEN_TYPES = [
+    OAUTH_TOKEN_TYPE_PLATFORM_USER,
+    OAUTH_TOKEN_TYPE_TENANT,
+    OAUTH_TOKEN_TYPE_CONNECTION,
+];
 const OAuthTokenResponse = z.z.object({
     access_token: z.z.string(),
     token_type: z.z.string(),
@@ -15945,6 +16130,7 @@ const OAuthTokenResponse = z.z.object({
     default_workspace_key: z.z.string().optional(),
     default_tenant_key: z.z.string().optional(),
     email: z.z.string().optional(),
+    org_id: z.z.string().optional(),
 });
 
 const CONSOLE_ACCOUNT_API_TOKEN_PATH = 'settings/account/api-token';
@@ -15989,6 +16175,8 @@ const MembraneInstance = z.z.object({
     lastReportedAt: z.z.coerce.date().optional(),
     activeTenants: z.z.number().optional(),
     billableTenants: z.z.number().optional(),
+});
+const membraneInstanceInfraFields = {
     clusterName: z.z.string().optional(),
     argoCdUrl: z.z.url().optional(),
     grafanaUrl: z.z.url().optional(),
@@ -15997,6 +16185,11 @@ const MembraneInstance = z.z.object({
     helmValuesPath: z.z.url().optional(),
     awsAccountName: z.z.string().optional(),
     awsSsoUrl: z.z.url().optional(),
+};
+const MembraneInstanceAdmin = MembraneInstance.extend({
+    ...membraneInstanceInfraFields,
+    orgName: z.z.string().optional(),
+    workspaceCount: z.z.number().optional(),
 });
 const CreateMembraneInstanceRequest = z.z.object({
     name: z.z.string().min(1),
@@ -16024,10 +16217,6 @@ const ListMembraneInstancesQuery = PaginationQuery.extend({
     orgId: z.z.string().optional(),
 });
 const ListMembraneInstancesResponse = createPaginationResponseSchema(MembraneInstance);
-const MembraneInstanceAdmin = MembraneInstance.extend({
-    orgName: z.z.string().optional(),
-    workspaceCount: z.z.number().optional(),
-});
 
 const OrgInstanceType = z.z.enum(['membrane-hosted', 'self-hosted']);
 const OrgInstanceWorkspace = z.z.object({
@@ -16103,6 +16292,9 @@ const membraneClientOptionsSchema = z.z
     apiUri: z.z.string().nullish(),
     uiUri: z.z.string().nullish(),
     accessToken: z.z.string().nullish(),
+    workspaceKey: z.z.string().nullish(),
+    workspaceSecret: z.z.string().nullish(),
+    tenantKey: z.z.string().nullish(),
 })
     .strict();
 function validateClientOptions(options) {
@@ -16117,6 +16309,8 @@ function validateClientOptions(options) {
     }
 }
 const REFETCH_EXPIRATION_THRESHOLD = 10 * 1000;
+const TOKEN_TTL_SECONDS = 3600;
+const TOKEN_MINT_THRESHOLD_SECONDS = 60;
 function decodeToken(token) {
     if (token.startsWith('pat-')) {
         return null;
@@ -16131,11 +16325,25 @@ class MembraneApiClient {
     constructor(options = {}) {
         this.logs = [];
         validateClientOptions(options);
-        const { uiUri, apiUri, accessToken, token, fetchToken, fetchCredentials, credentials } = options;
+        const { uiUri, apiUri, fetchCredentials, credentials } = options;
         this.apiUri = apiUri !== null && apiUri !== void 0 ? apiUri : DEFAULT_API_URI;
         this.uiUri = uiUri !== null && uiUri !== void 0 ? uiUri : DEFAULT_UI_URI;
-        this.token = token !== null && token !== void 0 ? token : accessToken;
-        this.fetchToken = fetchToken;
+        if ('workspaceSecret' in options && options.workspaceSecret) {
+            if (typeof window !== 'undefined') {
+                throw new Error('MembraneClient: workspaceSecret must not be used in browser code. ' +
+                    'The workspace secret is a server-side credential that would be exposed to end users if included in a browser bundle.');
+            }
+            this._workspaceKey = options.workspaceKey;
+            this._workspaceSecret = options.workspaceSecret;
+            this._tenantKey = options.tenantKey;
+        }
+        else {
+            const token = 'token' in options ? options.token : undefined;
+            const accessToken = 'accessToken' in options ? options.accessToken : undefined;
+            const fetchToken = 'fetchToken' in options ? options.fetchToken : undefined;
+            this.token = token !== null && token !== void 0 ? token : accessToken;
+            this.fetchToken = fetchToken;
+        }
         if (fetchCredentials) {
             void fetchCredentials().then((c) => this.setCredentials(c));
         }
@@ -16147,6 +16355,9 @@ class MembraneApiClient {
         return this.patch('/self', { credentials });
     }
     async getToken() {
+        if (this._workspaceSecret) {
+            return this.mintToken();
+        }
         if (this.fetchToken) {
             if (!this.token) {
                 this.token = await this.fetchToken();
@@ -16167,6 +16378,38 @@ class MembraneApiClient {
         decodeToken(this.token);
         return this.token;
     }
+    async mintToken() {
+        if (this.token) {
+            const payload = decodeToken(this.token);
+            if (payload === null || payload === void 0 ? void 0 : payload.exp) {
+                const remainingSeconds = payload.exp - Math.floor(Date.now() / 1000);
+                if (remainingSeconds > TOKEN_MINT_THRESHOLD_SECONDS) {
+                    return this.token;
+                }
+            }
+        }
+        const payload = {
+            id: this._tenantKey,
+            iss: this._workspaceKey,
+            exp: Math.floor(Date.now() / 1000) + TOKEN_TTL_SECONDS,
+        };
+        const header = { alg: 'HS256', typ: 'JWT' };
+        const encoder = new TextEncoder();
+        const toB64Url = (bytes) => {
+            let s = '';
+            for (let i = 0; i < bytes.length; i++)
+                s += String.fromCharCode(bytes[i]);
+            return btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+        };
+        const headerB64 = toB64Url(encoder.encode(JSON.stringify(header)));
+        const payloadB64 = toB64Url(encoder.encode(JSON.stringify(payload)));
+        const input = `${headerB64}.${payloadB64}`;
+        const key = await crypto.subtle.importKey('raw', encoder.encode(this._workspaceSecret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        const signatureBuffer = await crypto.subtle.sign('HMAC', key, encoder.encode(input));
+        const signature = toB64Url(new Uint8Array(signatureBuffer));
+        this.token = `${input}.${signature}`;
+        return this.token;
+    }
     async get(uri, queryParams, options) {
         if (queryParams) {
             uri += `${uri.includes('?') ? '&' : '?'}${new URLSearchParams(omitBy(queryParams, isEmptyValue)).toString()}`;
@@ -16510,10 +16753,16 @@ injectFormulaCatalog(getFormula, isFormula, hasFormulas);
 
 exports.ACTIONS = ACTIONS;
 exports.AGENTIC_CONNECTION_REQUEST_SCREEN_PATH = AGENTIC_CONNECTION_REQUEST_SCREEN_PATH;
+exports.AIGatewaySupportedModelIdSchema = AIGatewaySupportedModelIdSchema;
+exports.AI_GATEWAY_PROVIDER_MODELS = AI_GATEWAY_PROVIDER_MODELS;
+exports.AI_GATEWAY_SUPPORTED_MODELS = AI_GATEWAY_SUPPORTED_MODELS;
+exports.AI_GATEWAY_SUPPORTED_MODEL_IDS = AI_GATEWAY_SUPPORTED_MODEL_IDS;
 exports.ALERT_DELIVERY_METHODS = ALERT_DELIVERY_METHODS;
 exports.ALERT_TYPE_CATEGORIES = ALERT_TYPE_CATEGORIES;
 exports.AccessDeniedError = AccessDeniedError;
 exports.AccountResponse = AccountResponse;
+exports.ActApiDispatch = ActApiDispatch;
+exports.ActRequest = ActRequest;
 exports.ActionAccessor = ActionAccessor;
 exports.ActionApiResponse = ActionApiResponse;
 exports.ActionDependency = ActionDependency;
@@ -16574,6 +16823,7 @@ exports.BaseAppEventSubscription = BaseAppEventSubscription;
 exports.BaseAppEventType = BaseAppEventType;
 exports.BaseConnectedProduct = BaseConnectedProduct;
 exports.BaseConnection = BaseConnection;
+exports.BaseConnectionAttemptLog = BaseConnectionAttemptLog;
 exports.BaseConnector = BaseConnector;
 exports.BaseCustomer = BaseCustomer;
 exports.BaseDataLinkTable = BaseDataLinkTable;
@@ -16637,6 +16887,7 @@ exports.ConnectedProductType = ConnectedProductType;
 exports.ConnectionAccessor = ConnectionAccessor;
 exports.ConnectionApiResponse = ConnectionApiResponse;
 exports.ConnectionApiResponseWithSecrets = ConnectionApiResponseWithSecrets;
+exports.ConnectionAttemptLogApiResponse = ConnectionAttemptLogApiResponse;
 exports.ConnectionClientAction = ConnectionClientAction;
 exports.ConnectionDataCollectionAccessor = ConnectionDataCollectionAccessor;
 exports.ConnectionEditableProperties = ConnectionEditableProperties;
@@ -16735,6 +16986,7 @@ exports.CustomerApiResponse = CustomerApiResponse;
 exports.CustomerSelector = CustomerSelector;
 exports.CustomersAccessor = CustomersAccessor;
 exports.DATA_RECORD_SCHEMA = DATA_RECORD_SCHEMA;
+exports.DEFAULT_AI_GATEWAY_MODEL_ID = DEFAULT_AI_GATEWAY_MODEL_ID;
 exports.DEFAULT_ALERT_DELIVERY_SETTINGS = DEFAULT_ALERT_DELIVERY_SETTINGS;
 exports.DEFAULT_ALERT_TYPE_DELIVERY_SETTINGS = DEFAULT_ALERT_TYPE_DELIVERY_SETTINGS;
 exports.DEFAULT_FULL_SYNC_INTERVAL_SECONDS = DEFAULT_FULL_SYNC_INTERVAL_SECONDS;
@@ -16865,6 +17117,8 @@ exports.FindAppEventSubscriptionsQuery = FindAppEventSubscriptionsQuery;
 exports.FindAppEventTypesQuery = FindAppEventTypesQuery;
 exports.FindAppEventsQuery = FindAppEventsQuery;
 exports.FindConnectedProductsQuery = FindConnectedProductsQuery;
+exports.FindConnectionAttemptLogsQuery = FindConnectionAttemptLogsQuery;
+exports.FindConnectionAttemptLogsResponse = FindConnectionAttemptLogsResponse;
 exports.FindConnectionsQuery = FindConnectionsQuery;
 exports.FindConnectionsResponse = FindConnectionsResponse;
 exports.FindCustomersQuery = FindCustomersQuery;
@@ -16959,6 +17213,7 @@ exports.IntegrationLevelFieldMappingsListAccessor = IntegrationLevelFieldMapping
 exports.IntegrationLevelFlowAccessor = IntegrationLevelFlowAccessor;
 exports.IntegrationLevelFlowsListAccessor = IntegrationLevelFlowsListAccessor;
 exports.IntegrationLevelMembraneInterfaceSelectorQuery = IntegrationLevelMembraneInterfaceSelectorQuery;
+exports.IntegrationListItem = IntegrationListItem;
 exports.IntegrationOptionConfig = IntegrationOptionConfig;
 exports.IntegrationOptions = IntegrationOptions;
 exports.IntegrationSpecificElementSelector = IntegrationSpecificElementSelector;
@@ -16995,6 +17250,7 @@ exports.MappingSchema = MappingSchema;
 exports.MembraneAgentKey = MembraneAgentKey;
 exports.MembraneAxiosInstance = axios;
 exports.MembraneClient = MembraneClient;
+exports.MembraneCredentials = MembraneCredentials;
 exports.MembraneElementLayer = MembraneElementLayer;
 exports.MembraneError = MembraneError;
 exports.MembraneInstance = MembraneInstance;
@@ -17005,9 +17261,10 @@ exports.NotAuthenticatedError = NotAuthenticatedError;
 exports.NotFoundError = NotFoundError;
 exports.OAUTH1_CONFIG_SCHEMA = OAUTH1_CONFIG_SCHEMA;
 exports.OAUTH_CONFIG_SCHEMA = OAUTH_CONFIG_SCHEMA;
-exports.OAUTH_SCOPES = OAUTH_SCOPES;
-exports.OAUTH_SCOPE_PLATFORM_USER = OAUTH_SCOPE_PLATFORM_USER;
-exports.OAUTH_SCOPE_TENANT = OAUTH_SCOPE_TENANT;
+exports.OAUTH_TOKEN_TYPES = OAUTH_TOKEN_TYPES;
+exports.OAUTH_TOKEN_TYPE_CONNECTION = OAUTH_TOKEN_TYPE_CONNECTION;
+exports.OAUTH_TOKEN_TYPE_PLATFORM_USER = OAUTH_TOKEN_TYPE_PLATFORM_USER;
+exports.OAUTH_TOKEN_TYPE_TENANT = OAUTH_TOKEN_TYPE_TENANT;
 exports.OAuthTokenResponse = OAuthTokenResponse;
 exports.OpenRouterNotConfiguredError = OpenRouterNotConfiguredError;
 exports.OpenapiMappingSchema = OpenapiMappingSchema;
@@ -17041,6 +17298,7 @@ exports.PaginationQuery = PaginationQuery;
 exports.PaginationResponse = PaginationResponse;
 exports.PatchAgentSessionSchema = PatchAgentSessionSchema;
 exports.PatchConnectionRequestPayload = PatchConnectionRequestPayload;
+exports.PatchUserWorkspaceSettings = PatchUserWorkspaceSettings;
 exports.PendingQueueCountSchema = PendingQueueCountSchema;
 exports.PendingTasksSummarySchema = PendingTasksSummarySchema;
 exports.PlatformUser = PlatformUser;
@@ -17114,6 +17372,7 @@ exports.WorkspaceElementSearchResult = WorkspaceElementSearchResult;
 exports.WorkspaceElementSpecs = WorkspaceElementSpecs;
 exports.WorkspaceElementsStatsSchema = WorkspaceElementsStatsSchema;
 exports.WorkspaceLimitsSchema = WorkspaceLimitsSchema;
+exports.WorkspaceOnboardingData = WorkspaceOnboardingData;
 exports.WorkspacePublicKey = WorkspacePublicKey;
 exports.WorkspaceSettingsSchema = WorkspaceSettingsSchema;
 exports.WritableConnectorVersionData = WritableConnectorVersionData;
@@ -17150,6 +17409,7 @@ exports.findUdmCollectionMapping = findUdmCollectionMapping;
 exports.findUdmDefaultCollection = findUdmDefaultCollection;
 exports.findUdmRootLocation = findUdmRootLocation;
 exports.findValueLocators = findValueLocators;
+exports.formatSessionCost = formatSessionCost;
 exports.generateExampleFromSchema = generateExampleFromSchema;
 exports.getActionInstanceVariableSchema = getActionInstanceVariableSchema;
 exports.getActionRunTimeVariablesSchema = getActionRunTimeVariablesSchema;
@@ -17211,6 +17471,7 @@ exports.getWritableFieldsSchema = getWritableFieldsSchema;
 exports.hasCycles = hasCycles;
 exports.hasFormulas_internalDoNotUse = hasFormulas;
 exports.injectFormulaCatalog = injectFormulaCatalog;
+exports.isAIGatewaySupportedModelId = isAIGatewaySupportedModelId;
 exports.isBlob = isBlob;
 exports.isBusinessDay = isBusinessDay;
 exports.isDataActionType = isDataActionType;
@@ -17259,7 +17520,6 @@ exports.schemaIsNumber = schemaIsNumber;
 exports.schemaIsScalar = schemaIsScalar;
 exports.schemaTypeFromValue = schemaTypeFromValue;
 exports.schemaWithTitle = schemaWithTitle;
-exports.selectHighestPriorityScope = selectHighestPriorityScope;
 exports.setEditablePropertiesForWorkspaceElement = setEditablePropertiesForWorkspaceElement;
 exports.setSchemaAtLocator = setSchemaAtLocator;
 exports.setValueAtLocator = setValueAtLocator;