@opengeni/contracts 0.31.1 → 0.32.0

package/dist/index.js

@@ -6,12 +6,14 @@ import {
   AccountRole,
   AcknowledgeStreamRequest,
   AcknowledgeStreamResponse,
+  ActivateCodexRealtimeConnectionRequest,
   ActivatePreferenceRegistryRevisionRequest,
   ActivateWorkspaceInstructionPolicyRequest,
   AddDocumentRequest,
   AddWorkspaceMemberRequest,
   ApiKey,
   AttachViewerRequest,
+  BeginSessionRealtimeRequest,
   BillingBalance,
   BillingMode,
   CAPABILITY_DESCRIPTORS,
@@ -46,6 +48,10 @@ import {
   ClientSessionEvent,
   ClientVoiceInputConfig,
   CodexCompactionMode,
+  CodexRealtimeVoice,
+  CodexRealtimeWebrtcRequest,
+  CodexRealtimeWebrtcResponse,
+  CodexRealtimeWebrtcVersion,
   CompactSessionContextRequest,
   CompactSessionContextResult,
   CompleteFileUploadResponse,
@@ -84,6 +90,7 @@ import {
   DEFAULT_CODEX_FLEET_POLICY_V1,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS,
   DESKTOP_STREAM_PORT,
   DeactivatePreferenceRegistryRequest,
   DelegatedAccessPrincipalKind,
@@ -117,6 +124,7 @@ import {
   EffectiveSessionControl,
   EnableCapabilityRequest,
   EnablePackRequest,
+  EndSessionRealtimeRequest,
   EnrollTokenExchangeRequest,
   EnrollTokenExchangeResponse,
   EnrollTokenPayload,
@@ -155,6 +163,9 @@ import {
   FsTreeNode,
   FsWriteRequest,
   FsWriteResponse,
+  GatewayRealtimeConnectRequest,
+  GatewayRealtimeConnectResponse,
+  GatewayRealtimeInitialItem,
   GetWorkspaceCaptureFileResponse,
   GetWorkspaceCaptureResponse,
   GitChangedPayload,
@@ -340,8 +351,11 @@ import {
   RegisterCapabilityPackRequest,
   RejectPreferenceRegistryProposalRequest,
   RelayTokenPayload,
+  RenewSessionRealtimeRequest,
   RepositoryResourceRef,
   RequestHumanInputToolInput,
+  ResolvedWorkspaceInstructionPolicySnapshot,
+  ResolvedWorkspaceInstructionPolicySnapshotEntry,
   ResourceMountPathError,
   ResourceRef,
   ResourceRefConflictError,
@@ -440,6 +454,15 @@ import {
   SessionPendingInputPreview,
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
+  SessionRealtimeEndReason,
+  SessionRealtimeInboundEntry,
+  SessionRealtimeLedgerDirection,
+  SessionRealtimeLedgerEntry,
+  SessionRealtimeLedgerKind,
+  SessionRealtimeMode,
+  SessionRealtimeModel,
+  SessionRealtimeMutationResponse,
+  SessionRealtimeState,
   SessionSkill,
   SessionSkills,
   SessionSpawnDenial,
@@ -456,6 +479,9 @@ import {
   SetVariableSetVariableRequest,
   SetWorkspaceDefaultRigRequest,
   SetWorkspaceEnvironmentVariableRequest,
+  SlackReactionChannel,
+  SlackReactionChannelListResponse,
+  SlackReactionEmojiName,
   SocialConnection,
   SocialConnectionStatus,
   SocialOAuthProviderId,
@@ -475,6 +501,8 @@ import {
   SupersedePreferenceRegistryRequest,
   SwapActiveSandboxRequest,
   SwapActiveSandboxResponse,
+  SyncSessionRealtimeLedgerRequest,
+  SyncSessionRealtimeLedgerResponse,
   SystemUpdateClassification,
   TERMINAL_STREAM_PORT,
   TURN_EXECUTION_POLICY_METADATA_KEY,
@@ -540,6 +568,7 @@ import {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS,
@@ -594,7 +623,12 @@ import {
   WorkspaceInstructionPolicyRevision,
   WorkspaceInstructionPolicyRevisionIdentity,
   WorkspaceInstructionPolicyRoleKey,
+  WorkspaceInstructionPolicyRoleKeyInput,
+  WorkspaceInstructionPolicyRoleSource,
   WorkspaceInstructionPolicyScope,
+  WorkspaceInstructionPolicySnapshot,
+  WorkspaceInstructionPolicySnapshotEntry,
+  WorkspaceInstructionPolicySnapshotProvenance,
   WorkspaceInstructionPolicyTarget,
   WorkspaceMember,
   WorkspaceMemorySearchMode,
@@ -603,10 +637,14 @@ import {
   WorkspaceMemorySearchResult,
   WorkspaceModelCatalogModel,
   WorkspaceModelCatalogResponse,
+  WorkspaceRealtimeModelCatalogItem,
+  WorkspaceRealtimeModelCatalogResponse,
   WorkspaceRegisteredPack,
   WorkspaceRevisionCapturedPayload,
   WorkspaceRevisionDegradedPayload,
   WorkspaceSettingsSchema,
+  WorkspaceSlackReactionChannelPolicy,
+  WorkspaceSlackReactionSummonSettings,
   WorkspaceStateDocumentStatusCounts,
   WorkspaceStateGap,
   WorkspaceStateGapCode,
@@ -676,6 +714,7 @@ import {
   resolveSessionEventTypeFilters,
   resolveWorkspaceCodexCompactionDefault,
   resolveWorkspaceMemoryEnabled,
+  resolveWorkspaceSlackReactionSummonSettings,
   resolveWorkspaceVoiceInputEnabled,
   resourceIdentityKey,
   resourceMountPath,
@@ -702,15 +741,22 @@ import {
   verifyEnrollmentBearer,
   verifyRelayToken,
   verifyStreamToken,
-  workspaceControlUtf8Bytes
-} from "./chunk-TQC34EGL.js";
+  workspaceControlUtf8Bytes,
+  workspaceSlackReactionChannelAllowed
+} from "./chunk-GMOYIHF3.js";
 import {
+  OPENGENI_MANAGED_PUBLIC_BASE_URL,
+  OPENGENI_SLACK_BOT_EVENTS,
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
+  OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
+  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
   areOpenGeniSlackBotScopesAccepted,
-  evaluateOpenGeniSlackBotScopes
-} from "./chunk-KGL5BVGF.js";
+  buildOpenGeniSlackBotManifest,
+  evaluateOpenGeniSlackBotScopes,
+  hasOpenGeniSlackReactionScope
+} from "./chunk-7JZMI22I.js";
 export {
   AccessContext,
   AccessGrant,
@@ -719,12 +765,14 @@ export {
   AccountRole,
   AcknowledgeStreamRequest,
   AcknowledgeStreamResponse,
+  ActivateCodexRealtimeConnectionRequest,
   ActivatePreferenceRegistryRevisionRequest,
   ActivateWorkspaceInstructionPolicyRequest,
   AddDocumentRequest,
   AddWorkspaceMemberRequest,
   ApiKey,
   AttachViewerRequest,
+  BeginSessionRealtimeRequest,
   BillingBalance,
   BillingMode,
   CAPABILITY_DESCRIPTORS,
@@ -759,6 +807,10 @@ export {
   ClientSessionEvent,
   ClientVoiceInputConfig,
   CodexCompactionMode,
+  CodexRealtimeVoice,
+  CodexRealtimeWebrtcRequest,
+  CodexRealtimeWebrtcResponse,
+  CodexRealtimeWebrtcVersion,
   CompactSessionContextRequest,
   CompactSessionContextResult,
   CompleteFileUploadResponse,
@@ -797,6 +849,7 @@ export {
   DEFAULT_CODEX_FLEET_POLICY_V1,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
+  DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS,
   DESKTOP_STREAM_PORT,
   DeactivatePreferenceRegistryRequest,
   DelegatedAccessPrincipalKind,
@@ -830,6 +883,7 @@ export {
   EffectiveSessionControl,
   EnableCapabilityRequest,
   EnablePackRequest,
+  EndSessionRealtimeRequest,
   EnrollTokenExchangeRequest,
   EnrollTokenExchangeResponse,
   EnrollTokenPayload,
@@ -868,6 +922,9 @@ export {
   FsTreeNode,
   FsWriteRequest,
   FsWriteResponse,
+  GatewayRealtimeConnectRequest,
+  GatewayRealtimeConnectResponse,
+  GatewayRealtimeInitialItem,
   GetWorkspaceCaptureFileResponse,
   GetWorkspaceCaptureResponse,
   GitChangedPayload,
@@ -990,13 +1047,17 @@ export {
   OPENGENI_API_CONTRACT_REVISION,
   OPENGENI_CORRELATION_HEADER,
   OPENGENI_HOST_EXPORT_SCHEMA_REVISION,
+  OPENGENI_MANAGED_PUBLIC_BASE_URL,
   OPENGENI_PERSONAL_SLACK_MCP_URL,
   OPENGENI_SLACK_BOT_CREDENTIAL_LABEL,
   OPENGENI_SLACK_BOT_CREDENTIAL_ROLE,
+  OPENGENI_SLACK_BOT_EVENTS,
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
+  OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
   OPENGENI_SLACK_BOT_SESSION_METADATA_KEY,
+  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
   OpenGeniSlackBotConnectionMetadata,
   OpenGeniSlackBotInstallRequest,
   OpenGeniSlackBotInstallStart,
@@ -1056,8 +1117,11 @@ export {
   RegisterCapabilityPackRequest,
   RejectPreferenceRegistryProposalRequest,
   RelayTokenPayload,
+  RenewSessionRealtimeRequest,
   RepositoryResourceRef,
   RequestHumanInputToolInput,
+  ResolvedWorkspaceInstructionPolicySnapshot,
+  ResolvedWorkspaceInstructionPolicySnapshotEntry,
   ResourceMountPathError,
   ResourceRef,
   ResourceRefConflictError,
@@ -1156,6 +1220,15 @@ export {
   SessionPendingInputPreview,
   SessionQueueMutationResponse,
   SessionQueueSnapshot,
+  SessionRealtimeEndReason,
+  SessionRealtimeInboundEntry,
+  SessionRealtimeLedgerDirection,
+  SessionRealtimeLedgerEntry,
+  SessionRealtimeLedgerKind,
+  SessionRealtimeMode,
+  SessionRealtimeModel,
+  SessionRealtimeMutationResponse,
+  SessionRealtimeState,
   SessionSkill,
   SessionSkills,
   SessionSpawnDenial,
@@ -1172,6 +1245,9 @@ export {
   SetVariableSetVariableRequest,
   SetWorkspaceDefaultRigRequest,
   SetWorkspaceEnvironmentVariableRequest,
+  SlackReactionChannel,
+  SlackReactionChannelListResponse,
+  SlackReactionEmojiName,
   SocialConnection,
   SocialConnectionStatus,
   SocialOAuthProviderId,
@@ -1191,6 +1267,8 @@ export {
   SupersedePreferenceRegistryRequest,
   SwapActiveSandboxRequest,
   SwapActiveSandboxResponse,
+  SyncSessionRealtimeLedgerRequest,
+  SyncSessionRealtimeLedgerResponse,
   SystemUpdateClassification,
   TERMINAL_STREAM_PORT,
   TURN_EXECUTION_POLICY_METADATA_KEY,
@@ -1256,6 +1334,7 @@ export {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS,
@@ -1310,7 +1389,12 @@ export {
   WorkspaceInstructionPolicyRevision,
   WorkspaceInstructionPolicyRevisionIdentity,
   WorkspaceInstructionPolicyRoleKey,
+  WorkspaceInstructionPolicyRoleKeyInput,
+  WorkspaceInstructionPolicyRoleSource,
   WorkspaceInstructionPolicyScope,
+  WorkspaceInstructionPolicySnapshot,
+  WorkspaceInstructionPolicySnapshotEntry,
+  WorkspaceInstructionPolicySnapshotProvenance,
   WorkspaceInstructionPolicyTarget,
   WorkspaceMember,
   WorkspaceMemorySearchMode,
@@ -1319,10 +1403,14 @@ export {
   WorkspaceMemorySearchResult,
   WorkspaceModelCatalogModel,
   WorkspaceModelCatalogResponse,
+  WorkspaceRealtimeModelCatalogItem,
+  WorkspaceRealtimeModelCatalogResponse,
   WorkspaceRegisteredPack,
   WorkspaceRevisionCapturedPayload,
   WorkspaceRevisionDegradedPayload,
   WorkspaceSettingsSchema,
+  WorkspaceSlackReactionChannelPolicy,
+  WorkspaceSlackReactionSummonSettings,
   WorkspaceStateDocumentStatusCounts,
   WorkspaceStateGap,
   WorkspaceStateGapCode,
@@ -1349,6 +1437,7 @@ export {
   boundSessionEvent,
   boundSessionEventPayload,
   boundWorkspaceControlEvent,
+  buildOpenGeniSlackBotManifest,
   canonicalCodexFleetReplayJsonV1,
   canonicalModalCheckpointProviderBinding,
   capabilityCatalogItemIsTrustedForExposure,
@@ -1365,6 +1454,7 @@ export {
   evaluateWorkspaceModelPolicy,
   gitCredentialBindingIdForRepository,
   gitCredentialProviderForRepository,
+  hasOpenGeniSlackReactionScope,
   identityRedactor,
   isClearedRunStateBlob,
   isCredentialHeaderName,
@@ -1394,6 +1484,7 @@ export {
   resolveSessionEventTypeFilters,
   resolveWorkspaceCodexCompactionDefault,
   resolveWorkspaceMemoryEnabled,
+  resolveWorkspaceSlackReactionSummonSettings,
   resolveWorkspaceVoiceInputEnabled,
   resourceIdentityKey,
   resourceMountPath,
@@ -1420,6 +1511,7 @@ export {
   verifyEnrollmentBearer,
   verifyRelayToken,
   verifyStreamToken,
-  workspaceControlUtf8Bytes
+  workspaceControlUtf8Bytes,
+  workspaceSlackReactionChannelAllowed
 };
 //# sourceMappingURL=index.js.map

package/dist/slack-bot-scopes.d.ts

@@ -1,10 +1,66 @@
 export declare const OPENGENI_SLACK_BOT_REQUIRED_SCOPES: readonly ["app_mentions:read", "canvases:read", "channels:history", "channels:read", "chat:write", "commands", "files:read", "groups:history", "groups:read", "im:history", "im:read", "im:write", "mpim:history", "mpim:read", "users:read"];
+/** Read-only scope needed only for the optional emoji-reaction summon surface. */
+export declare const OPENGENI_SLACK_REACTION_REQUIRED_SCOPE: "reactions:read";
+/**
+ * Scopes requested by the managed and generated self-hosted manifests.
+ *
+ * `reactions:read` is deliberately not part of the base eligibility contract:
+ * legacy installations may continue using existing Slack interactions and
+ * tools while the reaction setting stays disabled and the UI asks an admin to
+ * reinstall.
+ */
+export declare const OPENGENI_SLACK_BOT_REQUESTED_SCOPES: readonly ["app_mentions:read", "canvases:read", "channels:history", "channels:read", "chat:write", "commands", "files:read", "groups:history", "groups:read", "im:history", "im:read", "im:write", "mpim:history", "mpim:read", "users:read", "reactions:read"];
+export declare const OPENGENI_SLACK_BOT_EVENTS: readonly ["app_mention", "message.channels", "message.groups", "message.im", "message.mpim", "reaction_added"];
+export declare const OPENGENI_MANAGED_PUBLIC_BASE_URL: "https://app.opengeni.ai";
+/** Canonical managed/self-hosted Slack app manifest. Slack accepts JSON manifests. */
+export declare function buildOpenGeniSlackBotManifest(publicBaseUrl: string): {
+    readonly display_information: {
+        readonly name: "OpenGeni";
+    };
+    readonly features: {
+        readonly bot_user: {
+            readonly display_name: "OpenGeni";
+            readonly always_online: false;
+        };
+        readonly slash_commands: readonly [{
+            readonly command: "/opengeni";
+            readonly description: "Start an OpenGeni task in this channel";
+            readonly should_escape: false;
+            readonly url: `${string}/v1/integrations/slack/commands`;
+        }];
+        readonly shortcuts: readonly [{
+            readonly callback_id: "opengeni_message";
+            readonly description: "Start an OpenGeni task from this Slack message";
+            readonly name: "Open in OpenGeni";
+            readonly type: "message";
+        }];
+    };
+    readonly oauth_config: {
+        readonly redirect_urls: readonly [`${string}/v1/integrations/oauth/callback`, `${string}/v1/integrations/slack/callback`];
+        readonly scopes: {
+            readonly bot: readonly ["app_mentions:read", "canvases:read", "channels:history", "channels:read", "chat:write", "commands", "files:read", "groups:history", "groups:read", "im:history", "im:read", "im:write", "mpim:history", "mpim:read", "users:read", "reactions:read"];
+        };
+    };
+    readonly settings: {
+        readonly event_subscriptions: {
+            readonly bot_events: readonly ["app_mention", "message.channels", "message.groups", "message.im", "message.mpim", "reaction_added"];
+            readonly request_url: `${string}/v1/integrations/slack/events`;
+        };
+        readonly interactivity: {
+            readonly is_enabled: true;
+            readonly request_url: `${string}/v1/integrations/slack/interactions`;
+        };
+        readonly org_deploy_enabled: false;
+        readonly socket_mode_enabled: false;
+        readonly token_rotation_enabled: false;
+    };
+};
 /**
  * Optional bot grants that remain inside the shipped bot's read/identity
  * boundary. Every other unrequired scope fails closed, including unknown future
  * Slack scopes, so verification, core routing, and UI eligibility cannot drift.
  */
-export declare const OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES: readonly ["team:read"];
+export declare const OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES: readonly ["team:read", "reactions:read"];
 /** @deprecated Use evaluateOpenGeniSlackBotScopes; an allowlist is the policy. */
 export declare const OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES: readonly ["channels:join", "chat:write.public"];
 export type OpenGeniSlackBotScopePolicy = {
@@ -13,4 +69,5 @@ export type OpenGeniSlackBotScopePolicy = {
     unsupported: string[];
 };
 export declare function areOpenGeniSlackBotScopesAccepted(grantedScopes: readonly string[]): boolean;
+export declare function hasOpenGeniSlackReactionScope(grantedScopes: readonly string[]): boolean;
 export declare function evaluateOpenGeniSlackBotScopes(grantedScopes: readonly string[]): OpenGeniSlackBotScopePolicy;

package/dist/slack-bot-scopes.js

@@ -1,15 +1,27 @@
 import {
+  OPENGENI_MANAGED_PUBLIC_BASE_URL,
+  OPENGENI_SLACK_BOT_EVENTS,
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
+  OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
+  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
   areOpenGeniSlackBotScopesAccepted,
-  evaluateOpenGeniSlackBotScopes
-} from "./chunk-KGL5BVGF.js";
+  buildOpenGeniSlackBotManifest,
+  evaluateOpenGeniSlackBotScopes,
+  hasOpenGeniSlackReactionScope
+} from "./chunk-7JZMI22I.js";
 export {
+  OPENGENI_MANAGED_PUBLIC_BASE_URL,
+  OPENGENI_SLACK_BOT_EVENTS,
   OPENGENI_SLACK_BOT_FORBIDDEN_SCOPES,
+  OPENGENI_SLACK_BOT_REQUESTED_SCOPES,
   OPENGENI_SLACK_BOT_REQUIRED_SCOPES,
   OPENGENI_SLACK_BOT_SAFE_OPTIONAL_SCOPES,
+  OPENGENI_SLACK_REACTION_REQUIRED_SCOPE,
   areOpenGeniSlackBotScopesAccepted,
-  evaluateOpenGeniSlackBotScopes
+  buildOpenGeniSlackBotManifest,
+  evaluateOpenGeniSlackBotScopes,
+  hasOpenGeniSlackReactionScope
 };
 //# sourceMappingURL=slack-bot-scopes.js.map

package/dist/workspace-instruction-policies.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 export declare const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
+export declare const WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES = 131072;
 export declare const WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS = 4096;
 export declare const WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS = 64;
 export declare const WORKSPACE_INSTRUCTION_POLICY_SOURCE_ID_MAX_CHARS = 512;
@@ -38,6 +39,15 @@ export type WorkspaceInstructionPolicyRoleKey = z.infer<typeof WorkspaceInstruct
  * at ingress so activation uniqueness and every client use the same key.
  */
 export declare function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string;
+export declare const WorkspaceInstructionPolicyRoleKeyInput: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
+export type WorkspaceInstructionPolicyRoleKeyInput = z.infer<typeof WorkspaceInstructionPolicyRoleKeyInput>;
+export declare const WorkspaceInstructionPolicyRoleSource: z.ZodEnum<{
+    invalid_metadata_fallback: "invalid_metadata_fallback";
+    metadata_fallback: "metadata_fallback";
+    none: "none";
+    session_binding: "session_binding";
+}>;
+export type WorkspaceInstructionPolicyRoleSource = z.infer<typeof WorkspaceInstructionPolicyRoleSource>;
 export declare const WorkspaceInstructionPolicyTarget: z.ZodObject<{
     kind: z.ZodEnum<{
         charter: "charter";
@@ -114,6 +124,156 @@ export declare const WorkspaceInstructionPolicyHead: z.ZodObject<{
     activatedAt: z.ZodString;
 }, z.core.$strip>;
 export type WorkspaceInstructionPolicyHead = z.infer<typeof WorkspaceInstructionPolicyHead>;
+export declare const WorkspaceInstructionPolicySnapshotProvenance: z.ZodObject<{
+    source: z.ZodEnum<{
+        human: "human";
+        knowledge_proposal: "knowledge_proposal";
+        legacy_import: "legacy_import";
+        onboarding: "onboarding";
+    }>;
+    sourceIdHash: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type WorkspaceInstructionPolicySnapshotProvenance = z.infer<typeof WorkspaceInstructionPolicySnapshotProvenance>;
+export declare const WorkspaceInstructionPolicySnapshotEntry: z.ZodObject<{
+    kind: z.ZodEnum<{
+        charter: "charter";
+        policy: "policy";
+    }>;
+    scope: z.ZodEnum<{
+        global: "global";
+        role: "role";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+    revisionId: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+    activationVersion: z.ZodNumber;
+    activatedAt: z.ZodString;
+    provenance: z.ZodObject<{
+        source: z.ZodEnum<{
+            human: "human";
+            knowledge_proposal: "knowledge_proposal";
+            legacy_import: "legacy_import";
+            onboarding: "onboarding";
+        }>;
+        sourceIdHash: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type WorkspaceInstructionPolicySnapshotEntry = z.infer<typeof WorkspaceInstructionPolicySnapshotEntry>;
+export declare const WorkspaceInstructionPolicySnapshot: z.ZodObject<{
+    id: z.ZodString;
+    workspaceId: z.ZodString;
+    sessionId: z.ZodString;
+    turnId: z.ZodString;
+    attemptId: z.ZodString;
+    executionGeneration: z.ZodNumber;
+    policyRole: z.ZodNullable<z.ZodString>;
+    roleSource: z.ZodEnum<{
+        invalid_metadata_fallback: "invalid_metadata_fallback";
+        metadata_fallback: "metadata_fallback";
+        none: "none";
+        session_binding: "session_binding";
+    }>;
+    entryHash: z.ZodString;
+    entries: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            charter: "charter";
+            policy: "policy";
+        }>;
+        scope: z.ZodEnum<{
+            global: "global";
+            role: "role";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        revisionId: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        activationVersion: z.ZodNumber;
+        activatedAt: z.ZodString;
+        provenance: z.ZodObject<{
+            source: z.ZodEnum<{
+                human: "human";
+                knowledge_proposal: "knowledge_proposal";
+                legacy_import: "legacy_import";
+                onboarding: "onboarding";
+            }>;
+            sourceIdHash: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>>;
+    createdAt: z.ZodString;
+}, z.core.$strip>;
+export type WorkspaceInstructionPolicySnapshot = z.infer<typeof WorkspaceInstructionPolicySnapshot>;
+export declare const ResolvedWorkspaceInstructionPolicySnapshotEntry: z.ZodObject<{
+    kind: z.ZodEnum<{
+        charter: "charter";
+        policy: "policy";
+    }>;
+    scope: z.ZodEnum<{
+        global: "global";
+        role: "role";
+    }>;
+    roleKey: z.ZodNullable<z.ZodString>;
+    revisionId: z.ZodString;
+    revision: z.ZodNumber;
+    contentHash: z.ZodString;
+    activationVersion: z.ZodNumber;
+    activatedAt: z.ZodString;
+    provenance: z.ZodObject<{
+        source: z.ZodEnum<{
+            human: "human";
+            knowledge_proposal: "knowledge_proposal";
+            legacy_import: "legacy_import";
+            onboarding: "onboarding";
+        }>;
+        sourceIdHash: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>;
+    content: z.ZodString;
+}, z.core.$strip>;
+export type ResolvedWorkspaceInstructionPolicySnapshotEntry = z.infer<typeof ResolvedWorkspaceInstructionPolicySnapshotEntry>;
+export declare const ResolvedWorkspaceInstructionPolicySnapshot: z.ZodObject<{
+    id: z.ZodString;
+    workspaceId: z.ZodString;
+    sessionId: z.ZodString;
+    turnId: z.ZodString;
+    attemptId: z.ZodString;
+    executionGeneration: z.ZodNumber;
+    policyRole: z.ZodNullable<z.ZodString>;
+    roleSource: z.ZodEnum<{
+        invalid_metadata_fallback: "invalid_metadata_fallback";
+        metadata_fallback: "metadata_fallback";
+        none: "none";
+        session_binding: "session_binding";
+    }>;
+    entryHash: z.ZodString;
+    createdAt: z.ZodString;
+    entries: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            charter: "charter";
+            policy: "policy";
+        }>;
+        scope: z.ZodEnum<{
+            global: "global";
+            role: "role";
+        }>;
+        roleKey: z.ZodNullable<z.ZodString>;
+        revisionId: z.ZodString;
+        revision: z.ZodNumber;
+        contentHash: z.ZodString;
+        activationVersion: z.ZodNumber;
+        activatedAt: z.ZodString;
+        provenance: z.ZodObject<{
+            source: z.ZodEnum<{
+                human: "human";
+                knowledge_proposal: "knowledge_proposal";
+                legacy_import: "legacy_import";
+                onboarding: "onboarding";
+            }>;
+            sourceIdHash: z.ZodNullable<z.ZodString>;
+        }, z.core.$strip>;
+        content: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type ResolvedWorkspaceInstructionPolicySnapshot = z.infer<typeof ResolvedWorkspaceInstructionPolicySnapshot>;
 export declare const WorkspaceInstructionPolicyActivationEvent: z.ZodObject<{
     kind: z.ZodEnum<{
         charter: "charter";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opengeni/contracts",
-  "version": "0.31.1",
+  "version": "0.32.0",
   "description": "Shared zod schemas and wire-contract types for the OpenGeni API.",
   "license": "Apache-2.0",
   "repository": {