@membranehq/sdk 0.28.1 → 0.28.3

package/dist/index.browser.js

@@ -3523,6 +3523,7 @@ exports.WorkspaceElementState = void 0;
     WorkspaceElementState["CONFIGURATION_ERROR"] = "CONFIGURATION_ERROR";
     WorkspaceElementState["SETUP_FAILED"] = "SETUP_FAILED";
     WorkspaceElementState["READY"] = "READY";
+    WorkspaceElementState["DISCONNECTING"] = "DISCONNECTING";
 })(exports.WorkspaceElementState || (exports.WorkspaceElementState = {}));
 exports.WorkspaceElementDependencyType = void 0;
 (function (WorkspaceElementDependencyType) {
@@ -3664,6 +3665,12 @@ const IntegrationLevelMembraneInterfaceSelectorQuery = z.z.object({
         filterTitle: 'Connection',
         referenceElementType: exports.WorkspaceElementType.Connection,
     }),
+    connectionKey: z.z
+        .string()
+        .optional()
+        .meta({
+        hidden: true,
+    }),
     instanceKey: z.z
         .string()
         .optional()
@@ -3997,6 +4004,7 @@ const CreateConnectionRequestPayload = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().min(1).max(100).optional(),
     name: z.z.string().optional(),
     allowMultipleConnections: z.z.boolean().optional(),
     connectorParameters: z.z.record(z.z.string(), z.z.unknown()).optional(),
@@ -4013,6 +4021,7 @@ const ConnectionRequest = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().optional(),
     name: z.z.string().optional(),
     allowMultipleConnections: z.z.boolean().optional(),
     connectorParameters: z.z.record(z.z.string(), z.z.unknown()).optional(),
@@ -4029,6 +4038,7 @@ const ConnectionEditableProperties = z.z.object({
     name: z.z.string().optional(),
     meta: z.z.record(z.z.string(), z.z.any()).optional(),
     authOptionKey: z.z.string().optional(),
+    key: z.z.string().min(1).max(100).optional().nullable(),
     integrationId: z.z.string().optional(),
     integrationUuid: z.z.string().optional(),
     integrationKey: z.z.string().optional(),
@@ -4051,6 +4061,7 @@ const ConnectionClientAction = z.z.object({
 const BaseConnection = BaseWorkspaceElement.extend({
     ...TenantLayerElement.shape,
     name: z.z.string(),
+    key: z.z.string().optional(),
     isTest: z.z.boolean().optional(),
     connected: z.z.boolean().optional(),
     disconnected: z.z.boolean().optional().describe('[DEPRECATED] Use `connected` instead.'),
@@ -10321,6 +10332,51 @@ const BaseConnectionAttemptLog = ActivityLogRecord.extend({
     createdAt: z.z.string(),
 });
 
+const ActApiDispatch = z.z.object({
+    method: z.z.enum(exports.HttpRequestMethod).describe('HTTP method to use.'),
+    path: z.z.string().optional().describe("Path appended to the connection's base URL, e.g. `/v2/users/me`. Required."),
+    body: z.z.any().optional().describe('Request body. For JSON APIs, pass a plain object.'),
+    headers: z.z.record(z.z.string(), z.z.string()).optional().describe('Additional HTTP headers.'),
+    query: z.z
+        .record(z.z.string(), z.z.union([z.z.string(), z.z.number(), z.z.boolean()]))
+        .optional()
+        .describe('Query-string parameters.'),
+    url: z.z.string().optional().describe('[INTERNAL] Alias for `path`. Normalized to `path` on the server.'),
+    data: z.z.any().optional().describe('[INTERNAL] Alias for `body`. Normalized to `body` on the server.'),
+});
+const ActRequest = z.z
+    .object({
+    id: z.z.string().optional().describe('ID of the action to run.'),
+    key: z.z
+        .string()
+        .optional()
+        .describe('Key of the action to run. If the same key exists across multiple integrations, also pass `integrationId`, `integrationKey`, or `connectionId` so we know which one you mean.'),
+    api: ActApiDispatch.optional().describe("Inline HTTP request spec, sent through the resolved connection's auth layer and base URL. Pair with `connectionId`, `connectionKey`, `integrationId`, or `integrationKey` to pick the connection."),
+    code: z.z
+        .string()
+        .optional()
+        .describe('Inline JavaScript executed in a sandbox. The module must export a function that receives `{ input, membrane, ... }`. Its return value becomes the action output.'),
+    integrationId: z.z
+        .string()
+        .optional()
+        .describe("ID of the integration to run the action on. When `key` is provided, looks up the action within this integration. When no connection is specified, runs against this integration's default connection."),
+    integrationKey: z.z
+        .string()
+        .optional()
+        .describe("Key of the integration to run the action on. When `key` is provided, looks up the action within this integration. When no connection is specified, runs against this integration's default connection."),
+    connectionId: z.z
+        .string()
+        .optional()
+        .describe('ID of the connection to run the action against. If a connection-level version of the action exists on this connection, that version is used; otherwise the integration-level or universal action is used.'),
+    connectionKey: z.z
+        .string()
+        .optional()
+        .describe('Key of the connection to run the action against. Use when you have a stable key for the connection instead of an ID.'),
+    input: z.z.any().optional().describe('Input passed to the action, matching its input schema.'),
+    meta: z.z.record(z.z.string(), z.z.any()).optional().describe('Arbitrary metadata stored on the action run log.'),
+})
+    .strict();
+
 const ActionApiResponse = BaseAction.extend({
     integration: BaseIntegration.optional(),
     user: BaseCustomer.optional(),
@@ -10577,15 +10633,16 @@ const ConnectionSelector = z.z.object({
     integrationKey: z.z.string().optional(),
     integrationId: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().optional(),
 });
 const ConnectionApiResponse = BaseConnection.extend({
     user: BaseCustomer.optional(),
     integration: BaseIntegration.optional(),
+    connectorParameters: z.z.unknown().optional(),
+    input: z.z.unknown().optional(),
 });
 const ConnectionApiResponseWithSecrets = ConnectionApiResponse.extend({
     credentials: z.z.unknown().optional(),
-    input: z.z.unknown().optional(),
-    connectorParameters: z.z.unknown().optional(),
 });
 const ConnectionMessagePayload = z.z.discriminatedUnion('type', [
     z.z.object({
@@ -10620,6 +10677,7 @@ const ConnectPayload = z.z.object({
     connectorKey: z.z.string().optional(),
     connectorVersion: z.z.string().optional(),
     connectionId: z.z.string().optional(),
+    connectionKey: z.z.string().min(1).max(100).optional(),
     name: z.z.string().optional(),
     input: z.z.record(z.z.string(), z.z.unknown()).optional(),
     connectionParameters: z.z.any().optional().describe('[INTERNAL] Deprecated: Use input instead'),
@@ -10864,6 +10922,18 @@ const UpdateIntegrationRequest = IntegrationEditableProperties.partial();
 const FindIntegrationsQuery = z.z
     .object({
     appUuid: z.z.string().optional(),
+    connectors: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from connectors: 1 to enable, 0 to disable'),
+    externalApps: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from external apps: 1 to enable, 0 to disable'),
+    websearch: z.z.coerce
+        .number()
+        .optional()
+        .describe('Override auto-generate integrations from web search: 1 to enable, 0 to disable'),
 })
     .merge(PaginationQuery)
     .merge(SearchQuery)
@@ -10888,6 +10958,11 @@ const IntegrationApiResponse = BaseIntegration.extend({
         .optional()
         .describe('[INTERNAL] Deprecated: Use POST /connectors/:id/generate-options instead'),
 });
+const IntegrationListItem = IntegrationApiResponse.extend({
+    id: z.z.string().optional(),
+    logoUri: z.z.string().optional(),
+    appUri: z.z.string().optional(),
+});
 
 const PackageElementApi = z.z.object({
     id: z.z.string(),
@@ -11418,6 +11493,12 @@ const ListExternalEventSubscriptionsQuery = PaginationQuery.merge(IncludeArchive
     externalAppId: z.z.string().optional().meta({
         hidden: true,
     }),
+    status: z.z
+        .enum(exports.ExternalEventSubscriptionStatus)
+        .optional()
+        .meta({
+        filterTitle: 'Status',
+    }),
 });
 const ExternalEventSubscriptionApiResponse = BaseExternalEventSubscription.extend({
     user: BaseCustomer.optional(),
@@ -11885,6 +11966,28 @@ function getFilterFieldMeta(meta) {
     return undefined;
 }
 
+const AI_GATEWAY_SUPPORTED_MODELS = [
+    { id: 'anthropic/claude-sonnet-4.6', name: 'Claude Sonnet 4.6' },
+    { id: 'anthropic/claude-opus-4.6', name: 'Claude Opus 4.6' },
+    { id: 'anthropic/claude-sonnet-4.5', name: 'Claude Sonnet 4.5' },
+    { id: 'anthropic/claude-opus-4.5', name: 'Claude Opus 4.5' },
+    { id: 'openai/gpt-5.2', name: 'GPT-5.2' },
+    { id: 'openai/gpt-5-nano', name: 'GPT-5 Nano' },
+    { id: 'google/gemini-3-pro-preview', name: 'Gemini 3 Pro' },
+    { id: 'moonshotai/kimi-k2.5', name: 'Kimi K2.5' },
+];
+const AI_GATEWAY_SUPPORTED_MODEL_IDS = AI_GATEWAY_SUPPORTED_MODELS.map((model) => model.id);
+if (AI_GATEWAY_SUPPORTED_MODEL_IDS.length === 0) {
+    throw new Error('AI_GATEWAY_SUPPORTED_MODEL_IDS must not be empty');
+}
+const AIGatewaySupportedModelIdSchema = z.z.enum(AI_GATEWAY_SUPPORTED_MODEL_IDS);
+const DEFAULT_AI_GATEWAY_MODEL_ID = 'anthropic/claude-sonnet-4.6';
+const AI_GATEWAY_PROVIDER_MODELS = Object.fromEntries(AI_GATEWAY_SUPPORTED_MODELS.map((model) => [model.id, { name: model.name }]));
+const aiGatewaySupportedModelIdSet = new Set(AI_GATEWAY_SUPPORTED_MODEL_IDS);
+function isAIGatewaySupportedModelId(modelId) {
+    return aiGatewaySupportedModelIdSet.has(modelId);
+}
+
 exports.AgentSessionStatus = void 0;
 (function (AgentSessionStatus) {
     AgentSessionStatus["QUEUED"] = "queued";
@@ -11944,7 +12047,7 @@ const CreateAgentSession = z.z.object({
     prompt: z.z.string().min(1),
     testCustomerId: z.z.string().optional(),
     isExternal: z.z.boolean().optional(),
-    modelId: z.z.string().optional(),
+    modelId: AIGatewaySupportedModelIdSchema.optional(),
     agentName: z.z.enum(exports.AgentName).optional(),
     promptAttachments: z.z.array(AgentSessionAttachment).optional(),
 });
@@ -13065,6 +13168,7 @@ exports.AlertType = void 0;
     AlertType["parallelApiRequestsPerCustomer"] = "parallelApiRequestsPerCustomer";
     AlertType["engineCreditsExhaustionProjected"] = "engineCreditsExhaustionProjected";
     AlertType["engineCreditsExhaustionActual"] = "engineCreditsExhaustionActual";
+    AlertType["aiCreditsDebtAccumulated"] = "aiCreditsDebtAccumulated";
     AlertType["totalNumberOfDatabaseEntitiesPerCustomer"] = "totalNumberOfDatabaseEntitiesPerCustomer";
     AlertType["totalNumberOfCustomers"] = "totalNumberOfCustomers";
     AlertType["totalNumberOfConnections"] = "totalNumberOfConnections";
@@ -13102,6 +13206,7 @@ const ALERT_TYPE_CATEGORIES = {
     [exports.AlertType.parallelApiRequestsPerCustomer]: exports.AlertCategory.CUSTOMER_RATE_LIMIT,
     [exports.AlertType.engineCreditsExhaustionProjected]: exports.AlertCategory.USAGE,
     [exports.AlertType.engineCreditsExhaustionActual]: exports.AlertCategory.USAGE,
+    [exports.AlertType.aiCreditsDebtAccumulated]: exports.AlertCategory.USAGE,
     [exports.AlertType.totalNumberOfDatabaseEntitiesPerCustomer]: exports.AlertCategory.WORKSPACE_SIZE,
     [exports.AlertType.testAlert]: exports.AlertCategory.TEST,
     [exports.AlertType.totalNumberOfCustomers]: exports.AlertCategory.WORKSPACE_SIZE,
@@ -13202,6 +13307,7 @@ function getAlertTypeDisplayName(alertType) {
         [exports.AlertType.parallelApiRequestsPerCustomer]: 'Parallel API Requests Per Customer',
         [exports.AlertType.engineCreditsExhaustionProjected]: 'Engine Credits Exhaustion Projected',
         [exports.AlertType.engineCreditsExhaustionActual]: 'Engine Credits Exhaustion Actual',
+        [exports.AlertType.aiCreditsDebtAccumulated]: 'AI Credits Debt Accumulated',
         [exports.AlertType.totalNumberOfDatabaseEntitiesPerCustomer]: 'Database Entities Per Customer',
         [exports.AlertType.testAlert]: 'Test Alert',
         [exports.AlertType.totalNumberOfCustomers]: 'Total Number of Customers',
@@ -13358,6 +13464,7 @@ const WorkspaceLimitsSchema = z.object({
     totalNumberOfConnections: WorkspaceLimit.optional(),
     totalNumberOfWorkspaceElements: WorkspaceLimit.optional(),
     totalNumberOfWorkspaceDatabaseRecords: WorkspaceLimit.optional(),
+    flowRunsQueueSizePerConnection: WorkspaceLimit.optional(),
     instantTasksQueueSize: WorkspaceLimit.optional(),
     QueuedTasksQueueSize: WorkspaceLimit.optional(),
     parallelApiRequestsPerCustomer: WorkspaceLimit.optional(),
@@ -13378,6 +13485,9 @@ const WorkspaceSettingsSchema = z.object({
     disableSecretKeyAuth: z.boolean().optional(),
     useMembraneUniverse: z.boolean().optional(),
     useRemoteRepository: z.boolean().optional(),
+    autoGenerateIntegrationsFromConnectors: z.boolean().optional(),
+    autoGenerateIntegrationsFromExternalApps: z.boolean().optional(),
+    autoGenerateIntegrationsFromWebSearch: z.boolean().optional(),
 });
 const EngineWorkspaceSettingsSchema = WorkspaceSettingsSchema;
 const WorkspacePublicKey = z.object({
@@ -13464,6 +13574,13 @@ const ListWorkspacesQuery = z.z
 })
     .merge(IncludeArchivedQuery);
 const GetWorkspaceQuery = IncludeArchivedQuery;
+const MembraneCredentials = z.z.object({
+    apiUri: z.z.string().describe('Uri for Membrane API'),
+    workspaceKey: z.z.string().describe('Workspace key'),
+    workspaceSecret: z.z.string().optional().describe('Workspace secret for signing tokens (never expose in browser code)'),
+    tenantKey: z.z.string().optional().describe('Tenant key for the current test tenant'),
+    notes: z.z.string().optional().describe('Usage notes'),
+});
 
 const PARALLEL_EXECUTION_LIMITS = [
     'parallelEventPulls',
@@ -13492,6 +13609,7 @@ const WORKSPACE_SIZE_LIMITS = [
     'totalNumberOfConnections',
     'totalNumberOfWorkspaceElements',
     'totalNumberOfWorkspaceDatabaseRecords',
+    'flowRunsQueueSizePerConnection',
 ];
 const EDITABLE_LIMITS = [
     'parallelApiRequestsPerCustomer',
@@ -13519,27 +13637,39 @@ function compareWorkspaceExports(baseExport, targetExport, options = { includeDe
         [exports.WorkspaceElementChangeType.UPDATE]: new Set(),
         [exports.WorkspaceElementChangeType.DELETE]: new Set(),
     };
+    const baseUuidByTargetUuid = new Map();
     const diffs = [];
     const integrationMap = buildIntegrationsMap([
         ...(baseExport[exports.WorkspaceElementType.Integration] || []),
         ...(targetExport[exports.WorkspaceElementType.Integration] || []),
     ]);
-    const baseByUuid = new Map();
-    const targetByUuid = new Map();
+    const baseMap = new Map();
+    const targetMap = new Map();
+    const allSelectors = new Set();
     const allElementTypes = new Set([...Object.keys(baseExport), ...Object.keys(targetExport)]);
     for (const elementType of allElementTypes) {
         const type = elementType;
-        for (const element of baseExport[type] || []) {
-            baseByUuid.set(element.uuid, { type, element });
-        }
-        for (const element of targetExport[type] || []) {
-            targetByUuid.set(element.uuid, { type, element });
+        const baseElements = baseExport[type] || [];
+        for (const element of baseElements) {
+            const intIdentifier = getIntegrationIdentifier(element, integrationMap);
+            const selector = getElementSelector(type, element.key, intIdentifier);
+            baseMap.set(selector, { type, element });
+            allSelectors.add(selector);
+        }
+        const targetElements = targetExport[type] || [];
+        for (const element of targetElements) {
+            const intIdentifier = getIntegrationIdentifier(element, integrationMap);
+            const selector = getElementSelector(type, element.key, intIdentifier);
+            targetMap.set(selector, { type, element });
+            allSelectors.add(selector);
+        }
+    }
+    for (const selector of allSelectors) {
+        const base = baseMap.get(selector);
+        const target = targetMap.get(selector);
+        if (base && target && base.element.uuid !== target.element.uuid) {
+            baseUuidByTargetUuid.set(target.element.uuid, base.element.uuid);
         }
-    }
-    const allUuids = new Set([...baseByUuid.keys(), ...targetByUuid.keys()]);
-    for (const uuid of allUuids) {
-        const base = baseByUuid.get(uuid);
-        const target = targetByUuid.get(uuid);
         const change = compareElementExports(base === null || base === void 0 ? void 0 : base.element, target === null || target === void 0 ? void 0 : target.element);
         if (options.includeDeletions === false && (change === null || change === void 0 ? void 0 : change.type) === exports.WorkspaceElementChangeType.DELETE) {
             continue;
@@ -13558,7 +13688,7 @@ function compareWorkspaceExports(baseExport, targetExport, options = { includeDe
             diffs.push(diff.createTwoFilesPatch(`a/${path}`, `b/${path}`, baseYaml, targetYaml));
         }
     }
-    const result = { comparison, changes };
+    const result = { comparison, changes, baseUuidByTargetUuid };
     if (options.includeDiff) {
         result.diff = diffs.join('\n').trim();
     }
@@ -13595,6 +13725,12 @@ function getIntegrationIdentifier(element, integrationMap) {
     }
     return integrationIdentifier || element.integrationUuid || element.integrationId;
 }
+function getElementSelector(type, key, integrationIdentifier) {
+    if (integrationIdentifier) {
+        return `${type}:${key}:${integrationIdentifier}`;
+    }
+    return `${type}:${key}`;
+}
 function buildIntegrationsMap(integrations) {
     const map = new Map();
     for (const integration of integrations) {
@@ -13804,9 +13940,7 @@ const CreateOrgRequest = z.z.object({
     referralSource: z.z.string().optional(),
     builder: z.z.array(z.z.enum(['me', 'team'])).optional(),
     stripeCustomerId: z.z.string().optional(),
-    signupSource: z.z
-        .enum(['web', 'membrane-cli', 'claude', 'cursor', 'chatgpt', 'warp', 'lovable', 'openclaw', 'other'])
-        .optional(),
+    signupSource: z.z.string().optional(),
 });
 const UpdateOrgRequest = z.z.object({
     name: z.z.string().min(1).optional(),
@@ -13906,6 +14040,7 @@ exports.WebhookTypeEnum = void 0;
     WebhookTypeEnum["SEND_ALERT_EMAIL"] = "send-alert-email";
     WebhookTypeEnum["PUBLIC_PACKAGE_ACTION_RUN_FAILED"] = "public-package-action-run-failed";
     WebhookTypeEnum["BETTER_AUTH_SIGNUP_VERIFY"] = "better-auth-signup-verify";
+    WebhookTypeEnum["BETTER_AUTH_RESET_PASSWORD"] = "better-auth-reset-password";
 })(exports.WebhookTypeEnum || (exports.WebhookTypeEnum = {}));
 
 const IntegrationSpecificElementSelector = z.object({
@@ -14157,6 +14292,7 @@ class ActionAccessor extends ElementAccessor {
             ? {
                 integrationKey: options.integrationKey,
                 connectionId: options.connectionId,
+                connectionKey: options.connectionKey,
             }
             : {};
         return this.options.client.post(this.getPath('run'), { input }, { params: queryParams });
@@ -15226,7 +15362,7 @@ class ConnectionProxy {
     }
 }
 async function createOrUpdateConnection(options) {
-    const { client, connectionId, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
+    const { client, connectionId, connectionKey, integrationKey, integrationId, connectorId, connectorVersion, name, input, connectorParameters, allowMultipleConnections, authOptionKey, connectionRequestId, apiUri, redirectUri, onPopupClosed, } = options !== null && options !== void 0 ? options : {};
     let connectionType = await detectConnectionType(options);
     if (redirectUri) {
         connectionType = ConnectionType.REDIRECT;
@@ -15244,6 +15380,7 @@ async function createOrUpdateConnection(options) {
             connectorId,
             connectorVersion,
             connectionId,
+            connectionKey,
             name,
             authOptionKey,
             allowMultipleConnections,
@@ -16038,6 +16175,8 @@ const MembraneInstance = z.z.object({
     lastReportedAt: z.z.coerce.date().optional(),
     activeTenants: z.z.number().optional(),
     billableTenants: z.z.number().optional(),
+});
+const membraneInstanceInfraFields = {
     clusterName: z.z.string().optional(),
     argoCdUrl: z.z.url().optional(),
     grafanaUrl: z.z.url().optional(),
@@ -16046,6 +16185,13 @@ const MembraneInstance = z.z.object({
     helmValuesPath: z.z.url().optional(),
     awsAccountName: z.z.string().optional(),
     awsSsoUrl: z.z.url().optional(),
+    sentryConsoleProjectId: z.z.string().optional(),
+    sentryApiProjectId: z.z.string().optional(),
+};
+const MembraneInstanceAdmin = MembraneInstance.extend({
+    ...membraneInstanceInfraFields,
+    orgName: z.z.string().optional(),
+    workspaceCount: z.z.number().optional(),
 });
 const CreateMembraneInstanceRequest = z.z.object({
     name: z.z.string().min(1),
@@ -16067,16 +16213,14 @@ const UpdateMembraneInstanceRequest = z.z
     helmValuesPath: z.z.url().nullable().optional(),
     awsAccountName: z.z.string().nullable().optional(),
     awsSsoUrl: z.z.url().nullable().optional(),
+    sentryConsoleProjectId: z.z.string().nullable().optional(),
+    sentryApiProjectId: z.z.string().nullable().optional(),
 })
     .strict();
 const ListMembraneInstancesQuery = PaginationQuery.extend({
     orgId: z.z.string().optional(),
 });
 const ListMembraneInstancesResponse = createPaginationResponseSchema(MembraneInstance);
-const MembraneInstanceAdmin = MembraneInstance.extend({
-    orgName: z.z.string().optional(),
-    workspaceCount: z.z.number().optional(),
-});
 
 const OrgInstanceType = z.z.enum(['membrane-hosted', 'self-hosted']);
 const OrgInstanceWorkspace = z.z.object({
@@ -16152,6 +16296,9 @@ const membraneClientOptionsSchema = z.z
     apiUri: z.z.string().nullish(),
     uiUri: z.z.string().nullish(),
     accessToken: z.z.string().nullish(),
+    workspaceKey: z.z.string().nullish(),
+    workspaceSecret: z.z.string().nullish(),
+    tenantKey: z.z.string().nullish(),
 })
     .strict();
 function validateClientOptions(options) {
@@ -16166,6 +16313,8 @@ function validateClientOptions(options) {
     }
 }
 const REFETCH_EXPIRATION_THRESHOLD = 10 * 1000;
+const TOKEN_TTL_SECONDS = 3600;
+const TOKEN_MINT_THRESHOLD_SECONDS = 60;
 function decodeToken(token) {
     if (token.startsWith('pat-')) {
         return null;
@@ -16180,11 +16329,25 @@ class MembraneApiClient {
     constructor(options = {}) {
         this.logs = [];
         validateClientOptions(options);
-        const { uiUri, apiUri, accessToken, token, fetchToken, fetchCredentials, credentials } = options;
+        const { uiUri, apiUri, fetchCredentials, credentials } = options;
         this.apiUri = apiUri !== null && apiUri !== void 0 ? apiUri : DEFAULT_API_URI;
         this.uiUri = uiUri !== null && uiUri !== void 0 ? uiUri : DEFAULT_UI_URI;
-        this.token = token !== null && token !== void 0 ? token : accessToken;
-        this.fetchToken = fetchToken;
+        if ('workspaceSecret' in options && options.workspaceSecret) {
+            if (typeof window !== 'undefined') {
+                throw new Error('MembraneClient: workspaceSecret must not be used in browser code. ' +
+                    'The workspace secret is a server-side credential that would be exposed to end users if included in a browser bundle.');
+            }
+            this._workspaceKey = options.workspaceKey;
+            this._workspaceSecret = options.workspaceSecret;
+            this._tenantKey = options.tenantKey;
+        }
+        else {
+            const token = 'token' in options ? options.token : undefined;
+            const accessToken = 'accessToken' in options ? options.accessToken : undefined;
+            const fetchToken = 'fetchToken' in options ? options.fetchToken : undefined;
+            this.token = token !== null && token !== void 0 ? token : accessToken;
+            this.fetchToken = fetchToken;
+        }
         if (fetchCredentials) {
             void fetchCredentials().then((c) => this.setCredentials(c));
         }
@@ -16196,6 +16359,9 @@ class MembraneApiClient {
         return this.patch('/self', { credentials });
     }
     async getToken() {
+        if (this._workspaceSecret) {
+            return this.mintToken();
+        }
         if (this.fetchToken) {
             if (!this.token) {
                 this.token = await this.fetchToken();
@@ -16216,6 +16382,38 @@ class MembraneApiClient {
         decodeToken(this.token);
         return this.token;
     }
+    async mintToken() {
+        if (this.token) {
+            const payload = decodeToken(this.token);
+            if (payload === null || payload === void 0 ? void 0 : payload.exp) {
+                const remainingSeconds = payload.exp - Math.floor(Date.now() / 1000);
+                if (remainingSeconds > TOKEN_MINT_THRESHOLD_SECONDS) {
+                    return this.token;
+                }
+            }
+        }
+        const payload = {
+            id: this._tenantKey,
+            iss: this._workspaceKey,
+            exp: Math.floor(Date.now() / 1000) + TOKEN_TTL_SECONDS,
+        };
+        const header = { alg: 'HS256', typ: 'JWT' };
+        const encoder = new TextEncoder();
+        const toB64Url = (bytes) => {
+            let s = '';
+            for (let i = 0; i < bytes.length; i++)
+                s += String.fromCharCode(bytes[i]);
+            return btoa(s).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+        };
+        const headerB64 = toB64Url(encoder.encode(JSON.stringify(header)));
+        const payloadB64 = toB64Url(encoder.encode(JSON.stringify(payload)));
+        const input = `${headerB64}.${payloadB64}`;
+        const key = await crypto.subtle.importKey('raw', encoder.encode(this._workspaceSecret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        const signatureBuffer = await crypto.subtle.sign('HMAC', key, encoder.encode(input));
+        const signature = toB64Url(new Uint8Array(signatureBuffer));
+        this.token = `${input}.${signature}`;
+        return this.token;
+    }
     async get(uri, queryParams, options) {
         if (queryParams) {
             uri += `${uri.includes('?') ? '&' : '?'}${new URLSearchParams(omitBy(queryParams, isEmptyValue)).toString()}`;
@@ -16559,10 +16757,16 @@ injectFormulaCatalog(getFormula, isFormula, hasFormulas);
 
 exports.ACTIONS = ACTIONS;
 exports.AGENTIC_CONNECTION_REQUEST_SCREEN_PATH = AGENTIC_CONNECTION_REQUEST_SCREEN_PATH;
+exports.AIGatewaySupportedModelIdSchema = AIGatewaySupportedModelIdSchema;
+exports.AI_GATEWAY_PROVIDER_MODELS = AI_GATEWAY_PROVIDER_MODELS;
+exports.AI_GATEWAY_SUPPORTED_MODELS = AI_GATEWAY_SUPPORTED_MODELS;
+exports.AI_GATEWAY_SUPPORTED_MODEL_IDS = AI_GATEWAY_SUPPORTED_MODEL_IDS;
 exports.ALERT_DELIVERY_METHODS = ALERT_DELIVERY_METHODS;
 exports.ALERT_TYPE_CATEGORIES = ALERT_TYPE_CATEGORIES;
 exports.AccessDeniedError = AccessDeniedError;
 exports.AccountResponse = AccountResponse;
+exports.ActApiDispatch = ActApiDispatch;
+exports.ActRequest = ActRequest;
 exports.ActionAccessor = ActionAccessor;
 exports.ActionApiResponse = ActionApiResponse;
 exports.ActionDependency = ActionDependency;
@@ -16786,6 +16990,7 @@ exports.CustomerApiResponse = CustomerApiResponse;
 exports.CustomerSelector = CustomerSelector;
 exports.CustomersAccessor = CustomersAccessor;
 exports.DATA_RECORD_SCHEMA = DATA_RECORD_SCHEMA;
+exports.DEFAULT_AI_GATEWAY_MODEL_ID = DEFAULT_AI_GATEWAY_MODEL_ID;
 exports.DEFAULT_ALERT_DELIVERY_SETTINGS = DEFAULT_ALERT_DELIVERY_SETTINGS;
 exports.DEFAULT_ALERT_TYPE_DELIVERY_SETTINGS = DEFAULT_ALERT_TYPE_DELIVERY_SETTINGS;
 exports.DEFAULT_FULL_SYNC_INTERVAL_SECONDS = DEFAULT_FULL_SYNC_INTERVAL_SECONDS;
@@ -17012,6 +17217,7 @@ exports.IntegrationLevelFieldMappingsListAccessor = IntegrationLevelFieldMapping
 exports.IntegrationLevelFlowAccessor = IntegrationLevelFlowAccessor;
 exports.IntegrationLevelFlowsListAccessor = IntegrationLevelFlowsListAccessor;
 exports.IntegrationLevelMembraneInterfaceSelectorQuery = IntegrationLevelMembraneInterfaceSelectorQuery;
+exports.IntegrationListItem = IntegrationListItem;
 exports.IntegrationOptionConfig = IntegrationOptionConfig;
 exports.IntegrationOptions = IntegrationOptions;
 exports.IntegrationSpecificElementSelector = IntegrationSpecificElementSelector;
@@ -17048,6 +17254,7 @@ exports.MappingSchema = MappingSchema;
 exports.MembraneAgentKey = MembraneAgentKey;
 exports.MembraneAxiosInstance = axios;
 exports.MembraneClient = MembraneClient;
+exports.MembraneCredentials = MembraneCredentials;
 exports.MembraneElementLayer = MembraneElementLayer;
 exports.MembraneError = MembraneError;
 exports.MembraneInstance = MembraneInstance;
@@ -17227,6 +17434,7 @@ exports.getDownstreamNodeKeys = getDownstreamNodeKeys;
 exports.getEditablePathsForElementType = getEditablePathsForElementType;
 exports.getEditablePathsFromSchema = getEditablePathsFromSchema;
 exports.getEffectiveConnectorOption = getEffectiveConnectorOption;
+exports.getElementSelector = getElementSelector;
 exports.getErrorFromData = getErrorFromData;
 exports.getEventMethodFileKey = getEventMethodFileKey;
 exports.getFilterFieldMeta = getFilterFieldMeta;
@@ -17267,6 +17475,7 @@ exports.getWritableFieldsSchema = getWritableFieldsSchema;
 exports.hasCycles = hasCycles;
 exports.hasFormulas_internalDoNotUse = hasFormulas;
 exports.injectFormulaCatalog = injectFormulaCatalog;
+exports.isAIGatewaySupportedModelId = isAIGatewaySupportedModelId;
 exports.isBlob = isBlob;
 exports.isBusinessDay = isBusinessDay;
 exports.isDataActionType = isDataActionType;