@opengeni/contracts 0.32.0 → 0.36.0

package/dist/google-drive.d.ts

@@ -43,6 +43,46 @@ export declare const GoogleDriveReadPolicy: z.ZodEnum<{
     block: "block";
 }>;
 export type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;
+export declare const GoogleDriveConnectionLifecycleState: z.ZodEnum<{
+    active: "active";
+    app_removed: "app_removed";
+    disconnected: "disconnected";
+    paused: "paused";
+    reconnect_required: "reconnect_required";
+    reconsent_required: "reconsent_required";
+    token_revoked: "token_revoked";
+}>;
+export type GoogleDriveConnectionLifecycleState = z.infer<typeof GoogleDriveConnectionLifecycleState>;
+export declare const GoogleDriveConnectionLifecycle: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    state: z.ZodLiteral<"active">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"paused">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"token_revoked">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"app_removed">;
+    recoverable: z.ZodLiteral<false>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"disconnected">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"reconnect_required">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>, z.ZodObject<{
+    state: z.ZodLiteral<"reconsent_required">;
+    recoverable: z.ZodLiteral<true>;
+    observedAt: z.ZodString;
+}, z.core.$strip>], "state">;
+export type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;
 export declare const GoogleDriveSelectedSource: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;
@@ -77,6 +117,35 @@ export declare const GoogleDriveConnectionMetadata: z.ZodObject<{
         metadata_readonly: "metadata_readonly";
         readonly: "readonly";
     }>;
+    lifecycle: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        state: z.ZodLiteral<"active">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"paused">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"token_revoked">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"app_removed">;
+        recoverable: z.ZodLiteral<false>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"disconnected">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"reconnect_required">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        state: z.ZodLiteral<"reconsent_required">;
+        recoverable: z.ZodLiteral<true>;
+        observedAt: z.ZodString;
+    }, z.core.$strip>], "state">>;
     selectedSources: z.ZodOptional<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         name: z.ZodString;
@@ -132,6 +201,19 @@ export declare const GoogleDriveOAuthStartResponse: z.ZodObject<{
     expiresAt: z.ZodString;
 }, z.core.$strip>;
 export type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;
+export declare const GoogleDriveLifecycleActionRequest: z.ZodObject<{
+    action: z.ZodEnum<{
+        pause: "pause";
+        resume: "resume";
+    }>;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strip>;
+export type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;
+export declare const GoogleDriveDisconnectRequest: z.ZodObject<{
+    expectedVersion: z.ZodNumber;
+    idempotencyKey: z.ZodString;
+}, z.core.$strip>;
+export type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;
 export declare const GoogleDriveBrowseItem: z.ZodObject<{
     id: z.ZodString;
     name: z.ZodString;

package/dist/google-drive.js

@@ -1,6 +1,6 @@
 import {
   ConnectionMetadata
-} from "./chunk-GMOYIHF3.js";
+} from "./chunk-F4KMLKSL.js";
 import "./chunk-7JZMI22I.js";
 
 // src/google-drive.ts
@@ -41,6 +41,53 @@ function googleDriveScopesAllowCapability(grantedScopes, capability) {
 var GoogleDriveTargetScope = z.enum(["user", "workspace", "organization"]);
 var GoogleDriveSyncCadence = z.enum(["manual", "hourly", "daily"]);
 var GoogleDriveReadPolicy = z.enum(["allow", "ask", "block"]);
+var GoogleDriveConnectionLifecycleState = z.enum([
+  "active",
+  "paused",
+  "token_revoked",
+  "app_removed",
+  "disconnected",
+  "reconnect_required",
+  "reconsent_required"
+]);
+var GoogleDriveLifecycleObservedAt = z.string().datetime({ offset: true });
+var GoogleDriveConnectionLifecycle = z.discriminatedUnion("state", [
+  z.object({
+    state: z.literal("active"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("paused"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("token_revoked"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("app_removed"),
+    recoverable: z.literal(false),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("disconnected"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("reconnect_required"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  }),
+  z.object({
+    state: z.literal("reconsent_required"),
+    recoverable: z.literal(true),
+    observedAt: GoogleDriveLifecycleObservedAt
+  })
+]);
 var GoogleDriveSelectedSource = z.object({
   id: z.string().min(1).max(256),
   name: z.string().min(1).max(1024),
@@ -59,6 +106,7 @@ var GoogleDriveConnectionMetadata = z.object({
   googleDisplayName: z.string().min(1).max(512).nullable(),
   verifiedAt: z.string().datetime({ offset: true }),
   accessMode: z.enum(["metadata_readonly", "readonly"]),
+  lifecycle: GoogleDriveConnectionLifecycle.optional(),
   selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),
   /** @deprecated Read `selectedSources`; retained while existing connections migrate. */
   selectedSource: GoogleDriveSelectedSource.nullable().optional()
@@ -70,6 +118,14 @@ var GoogleDriveOAuthStartResponse = z.object({
   authorizationUrl: z.string().url(),
   expiresAt: z.string().datetime({ offset: true })
 });
+var GoogleDriveLifecycleActionRequest = z.object({
+  action: z.enum(["pause", "resume"]),
+  expectedVersion: z.number().int().positive()
+});
+var GoogleDriveDisconnectRequest = z.object({
+  expectedVersion: z.number().int().positive(),
+  idempotencyKey: z.string().trim().min(1).max(200)
+});
 var GoogleDriveBrowseItem = z.object({
   id: z.string().min(1).max(256),
   name: z.string().min(1).max(1024),
@@ -113,7 +169,11 @@ export {
   GOOGLE_DRIVE_READONLY_SCOPE,
   GoogleDriveBrowseItem,
   GoogleDriveBrowseResponse,
+  GoogleDriveConnectionLifecycle,
+  GoogleDriveConnectionLifecycleState,
   GoogleDriveConnectionMetadata,
+  GoogleDriveDisconnectRequest,
+  GoogleDriveLifecycleActionRequest,
   GoogleDriveOAuthCapability,
   GoogleDriveOAuthStartRequest,
   GoogleDriveOAuthStartResponse,

package/dist/google-drive.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\n\nexport const GoogleDriveOAuthCapability = z.enum([\n  \"picker_file_read\",\n  \"source_metadata_discovery\",\n  \"source_content_read\",\n  \"recursive_source_sync\",\n]);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities OpenGeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\nexport const GoogleDriveTargetScope = z.enum([\"user\", \"workspace\", \"organization\"]);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = z.enum([\"manual\", \"hourly\", \"daily\"]);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = z.enum([\"allow\", \"ask\", \"block\"]);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveSelectedSource = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(256).nullable().default(null),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  selectedAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n    credentialLabel: z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n    googlePermissionId: z.string().min(1).max(256),\n    googleEmail: z.string().email().max(320),\n    googleDisplayName: z.string().min(1).max(512).nullable(),\n    verifiedAt: z.string().datetime({ offset: true }),\n    accessMode: z.enum([\"metadata_readonly\", \"readonly\"]),\n    selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n    /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n    selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n  })\n  .passthrough();\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = z.object({\n  connectionId: z.string().uuid().optional(),\n});\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = z.object({\n  authorizationUrl: z.string().url(),\n  expiresAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveBrowseItem = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  kind: z.enum([\"folder\", \"file\"]),\n  driveId: z.string().min(1).max(256).nullable(),\n  modifiedTime: z.string().datetime({ offset: true }).nullable(),\n  size: z.string().regex(/^\\d+$/).nullable(),\n  webViewLink: z.string().url().nullable(),\n});\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = z.object({\n  connection: z.lazy(() => ConnectionMetadata),\n  parentId: z.string().min(1).max(256),\n  current: GoogleDriveBrowseItem.nullable(),\n  items: z.array(GoogleDriveBrowseItem),\n  nextPageToken: z.string().min(1).max(4096).nullable(),\n  incompleteSearch: z.boolean(),\n});\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nexport const SaveGoogleDriveSourceRequest = z.object({\n  sources: z\n    .array(\n      GoogleDriveBrowseItem.pick({\n        id: true,\n        name: true,\n        mimeType: true,\n        driveId: true,\n      }),\n    )\n    .max(100)\n    .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n      message: \"Google Drive sources must be unique\",\n    }),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n});\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n"],"mappings":";;;;;;AAAA,SAAS,SAAS;AAIX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AACK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AAEtC,IAAM,6BAA6B,EAAE,KAAK;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcM,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB,QAAQ,IAAI,uBAAuB;AACrF,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAEO,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAG3E,IAAM,yBAAyB,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AAGnE,IAAM,wBAAwB,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAG9D,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3D,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC;AAGM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,EACtD,iBAAiB,EAAE,QAAQ,6BAA6B;AAAA,EACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,YAAY,EAAE,KAAK,CAAC,qBAAqB,UAAU,CAAC;AAAA,EACpD,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAChE,CAAC,EACA,YAAY;AAGR,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC;AAGM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,sBAAsB,SAAS;AAAA,EACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,QAAQ;AAC9B,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,SAAS,EACN;AAAA,IACC,sBAAsB,KAAK;AAAA,MACzB,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACxF,SAAS;AAAA,EACX,CAAC;AAAA,EACH,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AACnD,CAAC;","names":[]}
+{"version":3,"sources":["../src/google-drive.ts"],"sourcesContent":["import { z } from \"zod\";\n\nimport { ConnectionMetadata } from \"./index\";\n\nexport const GOOGLE_DRIVE_PROVIDER_DOMAIN = \"googleapis.com\" as const;\nexport const GOOGLE_DRIVE_FULL_SCOPE = \"https://www.googleapis.com/auth/drive\" as const;\nexport const GOOGLE_DRIVE_FILE_SCOPE = \"https://www.googleapis.com/auth/drive.file\" as const;\nexport const GOOGLE_DRIVE_METADATA_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.metadata.readonly\" as const;\nexport const GOOGLE_DRIVE_READONLY_SCOPE =\n  \"https://www.googleapis.com/auth/drive.readonly\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_ROLE = \"google_drive_metadata\" as const;\nexport const GOOGLE_DRIVE_CREDENTIAL_LABEL = \"Google Drive metadata browser\" as const;\n\nexport const GoogleDriveOAuthCapability = z.enum([\n  \"picker_file_read\",\n  \"source_metadata_discovery\",\n  \"source_content_read\",\n  \"recursive_source_sync\",\n]);\nexport type GoogleDriveOAuthCapability = z.infer<typeof GoogleDriveOAuthCapability>;\n\nexport type GoogleDriveOAuthScopeDecision = {\n  accessMode: \"metadata_readonly\" | \"readonly\" | null;\n  capabilities: GoogleDriveOAuthCapability[];\n};\n\n/**\n * Converts exact Google OAuth grants into the Drive capabilities OpenGeni may\n * rely on. Unknown or malformed grants add no authority. In particular,\n * drive.file covers only files explicitly opened or shared with the app and\n * never authorizes arbitrary recursive descendant discovery.\n */\nexport function googleDriveOAuthScopeDecision(\n  grantedScopes: readonly string[],\n): GoogleDriveOAuthScopeDecision {\n  const granted = new Set(grantedScopes);\n  const hasFullDrive = granted.has(GOOGLE_DRIVE_FULL_SCOPE);\n  const hasSourceContentRead = hasFullDrive || granted.has(GOOGLE_DRIVE_READONLY_SCOPE);\n  const hasSourceMetadataDiscovery =\n    hasSourceContentRead || granted.has(GOOGLE_DRIVE_METADATA_READONLY_SCOPE);\n  const hasPickerFileRead = hasSourceContentRead || granted.has(GOOGLE_DRIVE_FILE_SCOPE);\n  const capabilities: GoogleDriveOAuthCapability[] = [];\n  if (hasPickerFileRead) capabilities.push(\"picker_file_read\");\n  if (hasSourceMetadataDiscovery) capabilities.push(\"source_metadata_discovery\");\n  if (hasSourceContentRead) {\n    capabilities.push(\"source_content_read\", \"recursive_source_sync\");\n  }\n  return {\n    accessMode: hasSourceContentRead\n      ? \"readonly\"\n      : hasSourceMetadataDiscovery\n        ? \"metadata_readonly\"\n        : null,\n    capabilities,\n  };\n}\n\nexport function googleDriveScopesAllowCapability(\n  grantedScopes: readonly string[],\n  capability: GoogleDriveOAuthCapability,\n): boolean {\n  return googleDriveOAuthScopeDecision(grantedScopes).capabilities.includes(capability);\n}\n\nexport const GoogleDriveTargetScope = z.enum([\"user\", \"workspace\", \"organization\"]);\nexport type GoogleDriveTargetScope = z.infer<typeof GoogleDriveTargetScope>;\n\nexport const GoogleDriveSyncCadence = z.enum([\"manual\", \"hourly\", \"daily\"]);\nexport type GoogleDriveSyncCadence = z.infer<typeof GoogleDriveSyncCadence>;\n\nexport const GoogleDriveReadPolicy = z.enum([\"allow\", \"ask\", \"block\"]);\nexport type GoogleDriveReadPolicy = z.infer<typeof GoogleDriveReadPolicy>;\n\nexport const GoogleDriveConnectionLifecycleState = z.enum([\n  \"active\",\n  \"paused\",\n  \"token_revoked\",\n  \"app_removed\",\n  \"disconnected\",\n  \"reconnect_required\",\n  \"reconsent_required\",\n]);\nexport type GoogleDriveConnectionLifecycleState = z.infer<\n  typeof GoogleDriveConnectionLifecycleState\n>;\n\nconst GoogleDriveLifecycleObservedAt = z.string().datetime({ offset: true });\nexport const GoogleDriveConnectionLifecycle = z.discriminatedUnion(\"state\", [\n  z.object({\n    state: z.literal(\"active\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"paused\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"token_revoked\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"app_removed\"),\n    recoverable: z.literal(false),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"disconnected\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconnect_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n  z.object({\n    state: z.literal(\"reconsent_required\"),\n    recoverable: z.literal(true),\n    observedAt: GoogleDriveLifecycleObservedAt,\n  }),\n]);\nexport type GoogleDriveConnectionLifecycle = z.infer<typeof GoogleDriveConnectionLifecycle>;\n\nexport const GoogleDriveSelectedSource = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  driveId: z.string().min(1).max(256).nullable().default(null),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n  selectedAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveSelectedSource = z.infer<typeof GoogleDriveSelectedSource>;\n\nexport const GoogleDriveConnectionMetadata = z\n  .object({\n    credentialRole: z.literal(GOOGLE_DRIVE_CREDENTIAL_ROLE),\n    credentialLabel: z.literal(GOOGLE_DRIVE_CREDENTIAL_LABEL),\n    googlePermissionId: z.string().min(1).max(256),\n    googleEmail: z.string().email().max(320),\n    googleDisplayName: z.string().min(1).max(512).nullable(),\n    verifiedAt: z.string().datetime({ offset: true }),\n    accessMode: z.enum([\"metadata_readonly\", \"readonly\"]),\n    lifecycle: GoogleDriveConnectionLifecycle.optional(),\n    selectedSources: z.array(GoogleDriveSelectedSource).max(100).optional(),\n    /** @deprecated Read `selectedSources`; retained while existing connections migrate. */\n    selectedSource: GoogleDriveSelectedSource.nullable().optional(),\n  })\n  .passthrough();\nexport type GoogleDriveConnectionMetadata = z.infer<typeof GoogleDriveConnectionMetadata>;\n\nexport const GoogleDriveOAuthStartRequest = z.object({\n  connectionId: z.string().uuid().optional(),\n});\nexport type GoogleDriveOAuthStartRequest = z.infer<typeof GoogleDriveOAuthStartRequest>;\n\nexport const GoogleDriveOAuthStartResponse = z.object({\n  authorizationUrl: z.string().url(),\n  expiresAt: z.string().datetime({ offset: true }),\n});\nexport type GoogleDriveOAuthStartResponse = z.infer<typeof GoogleDriveOAuthStartResponse>;\n\nexport const GoogleDriveLifecycleActionRequest = z.object({\n  action: z.enum([\"pause\", \"resume\"]),\n  expectedVersion: z.number().int().positive(),\n});\nexport type GoogleDriveLifecycleActionRequest = z.infer<typeof GoogleDriveLifecycleActionRequest>;\n\nexport const GoogleDriveDisconnectRequest = z.object({\n  expectedVersion: z.number().int().positive(),\n  idempotencyKey: z.string().trim().min(1).max(200),\n});\nexport type GoogleDriveDisconnectRequest = z.infer<typeof GoogleDriveDisconnectRequest>;\n\nexport const GoogleDriveBrowseItem = z.object({\n  id: z.string().min(1).max(256),\n  name: z.string().min(1).max(1024),\n  mimeType: z.string().min(1).max(256),\n  kind: z.enum([\"folder\", \"file\"]),\n  driveId: z.string().min(1).max(256).nullable(),\n  modifiedTime: z.string().datetime({ offset: true }).nullable(),\n  size: z.string().regex(/^\\d+$/).nullable(),\n  webViewLink: z.string().url().nullable(),\n});\nexport type GoogleDriveBrowseItem = z.infer<typeof GoogleDriveBrowseItem>;\n\nexport const GoogleDriveBrowseResponse = z.object({\n  connection: z.lazy(() => ConnectionMetadata),\n  parentId: z.string().min(1).max(256),\n  current: GoogleDriveBrowseItem.nullable(),\n  items: z.array(GoogleDriveBrowseItem),\n  nextPageToken: z.string().min(1).max(4096).nullable(),\n  incompleteSearch: z.boolean(),\n});\nexport type GoogleDriveBrowseResponse = z.infer<typeof GoogleDriveBrowseResponse>;\n\nexport const SaveGoogleDriveSourceRequest = z.object({\n  sources: z\n    .array(\n      GoogleDriveBrowseItem.pick({\n        id: true,\n        name: true,\n        mimeType: true,\n        driveId: true,\n      }),\n    )\n    .max(100)\n    .refine((sources) => new Set(sources.map((source) => source.id)).size === sources.length, {\n      message: \"Google Drive sources must be unique\",\n    }),\n  targetScope: GoogleDriveTargetScope,\n  syncCadence: GoogleDriveSyncCadence.default(\"hourly\"),\n  readPolicy: GoogleDriveReadPolicy.default(\"allow\"),\n});\nexport type SaveGoogleDriveSourceRequest = z.infer<typeof SaveGoogleDriveSourceRequest>;\n"],"mappings":";;;;;;AAAA,SAAS,SAAS;AAIX,IAAM,+BAA+B;AACrC,IAAM,0BAA0B;AAChC,IAAM,0BAA0B;AAChC,IAAM,uCACX;AACK,IAAM,8BACX;AACK,IAAM,+BAA+B;AACrC,IAAM,gCAAgC;AAEtC,IAAM,6BAA6B,EAAE,KAAK;AAAA,EAC/C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAcM,SAAS,8BACd,eAC+B;AAC/B,QAAM,UAAU,IAAI,IAAI,aAAa;AACrC,QAAM,eAAe,QAAQ,IAAI,uBAAuB;AACxD,QAAM,uBAAuB,gBAAgB,QAAQ,IAAI,2BAA2B;AACpF,QAAM,6BACJ,wBAAwB,QAAQ,IAAI,oCAAoC;AAC1E,QAAM,oBAAoB,wBAAwB,QAAQ,IAAI,uBAAuB;AACrF,QAAM,eAA6C,CAAC;AACpD,MAAI,kBAAmB,cAAa,KAAK,kBAAkB;AAC3D,MAAI,2BAA4B,cAAa,KAAK,2BAA2B;AAC7E,MAAI,sBAAsB;AACxB,iBAAa,KAAK,uBAAuB,uBAAuB;AAAA,EAClE;AACA,SAAO;AAAA,IACL,YAAY,uBACR,aACA,6BACE,sBACA;AAAA,IACN;AAAA,EACF;AACF;AAEO,SAAS,iCACd,eACA,YACS;AACT,SAAO,8BAA8B,aAAa,EAAE,aAAa,SAAS,UAAU;AACtF;AAEO,IAAM,yBAAyB,EAAE,KAAK,CAAC,QAAQ,aAAa,cAAc,CAAC;AAG3E,IAAM,yBAAyB,EAAE,KAAK,CAAC,UAAU,UAAU,OAAO,CAAC;AAGnE,IAAM,wBAAwB,EAAE,KAAK,CAAC,SAAS,OAAO,OAAO,CAAC;AAG9D,IAAM,sCAAsC,EAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKD,IAAM,iCAAiC,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACpE,IAAM,iCAAiC,EAAE,mBAAmB,SAAS;AAAA,EAC1E,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,QAAQ;AAAA,IACzB,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,eAAe;AAAA,IAChC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,aAAa;AAAA,IAC9B,aAAa,EAAE,QAAQ,KAAK;AAAA,IAC5B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,cAAc;AAAA,IAC/B,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AAAA,EACD,EAAE,OAAO;AAAA,IACP,OAAO,EAAE,QAAQ,oBAAoB;AAAA,IACrC,aAAa,EAAE,QAAQ,IAAI;AAAA,IAC3B,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS,EAAE,QAAQ,IAAI;AAAA,EAC3D,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAClD,CAAC;AAGM,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,gBAAgB,EAAE,QAAQ,4BAA4B;AAAA,EACtD,iBAAiB,EAAE,QAAQ,6BAA6B;AAAA,EACxD,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7C,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG;AAAA,EACvC,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EACvD,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAAA,EAChD,YAAY,EAAE,KAAK,CAAC,qBAAqB,UAAU,CAAC;AAAA,EACpD,WAAW,+BAA+B,SAAS;AAAA,EACnD,iBAAiB,EAAE,MAAM,yBAAyB,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA;AAAA,EAEtE,gBAAgB,0BAA0B,SAAS,EAAE,SAAS;AAChE,CAAC,EACA,YAAY;AAGR,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAC3C,CAAC;AAGM,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,kBAAkB,EAAE,OAAO,EAAE,IAAI;AAAA,EACjC,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AACjD,CAAC;AAGM,IAAM,oCAAoC,EAAE,OAAO;AAAA,EACxD,QAAQ,EAAE,KAAK,CAAC,SAAS,QAAQ,CAAC;AAAA,EAClC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC3C,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAClD,CAAC;AAGM,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI;AAAA,EAChC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,MAAM,EAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAC/B,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,SAAS;AAAA,EAC7C,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAC7D,MAAM,EAAE,OAAO,EAAE,MAAM,OAAO,EAAE,SAAS;AAAA,EACzC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,YAAY,EAAE,KAAK,MAAM,kBAAkB;AAAA,EAC3C,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EACnC,SAAS,sBAAsB,SAAS;AAAA,EACxC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EACpD,kBAAkB,EAAE,QAAQ;AAC9B,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,SAAS,EACN;AAAA,IACC,sBAAsB,KAAK;AAAA,MACzB,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAAA,EACH,EACC,IAAI,GAAG,EACP,OAAO,CAAC,YAAY,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,EAAE,CAAC,EAAE,SAAS,QAAQ,QAAQ;AAAA,IACxF,SAAS;AAAA,EACX,CAAC;AAAA,EACH,aAAa;AAAA,EACb,aAAa,uBAAuB,QAAQ,QAAQ;AAAA,EACpD,YAAY,sBAAsB,QAAQ,OAAO;AACnD,CAAC;","names":[]}

package/dist/index.d.ts

@@ -2696,6 +2696,13 @@ export declare const FileResourceRef: z.ZodObject<{
     mountPath: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>;
 export type FileResourceRef = z.infer<typeof FileResourceRef>;
+/**
+ * Private durable metadata carried on user history items. It contains only
+ * stable file references, never file bytes, and is removed before model wire
+ * serialization. Keeping the references beside the message lets a later turn
+ * reconstruct the same typed attachment input after a model switch or retry.
+ */
+export declare const MODEL_ATTACHMENT_REFS_FIELD: "opengeni_attachment_refs";
 export declare const ResourceRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"repository">;
     uri: z.ZodString;
@@ -2748,6 +2755,7 @@ export declare function resourceMountPathCollisionKey(path: string): string;
  */
 export declare function defaultRepositoryMountPath(uri: string): string;
 /** Resolve the exact mount used by API normalization, manifests, and clone hooks. */
+export declare const DEFAULT_FILE_RESOURCE_MOUNT_ROOT: ".opengeni/files";
 export declare function resourceMountPath(resource: ResourceRef): string;
 /** Fail before sandbox execution when two resources share a portable path. */
 export declare function assertUniqueResourceMountPaths(resources: readonly ResourceRef[]): void;
@@ -2856,6 +2864,12 @@ export declare const DocumentSearchMode: z.ZodEnum<{
     vector: "vector";
 }>;
 export type DocumentSearchMode = z.infer<typeof DocumentSearchMode>;
+export declare const DocumentAuthorityKind: z.ZodEnum<{
+    organization: "organization";
+    personal: "personal";
+    workspace: "workspace";
+}>;
+export type DocumentAuthorityKind = z.infer<typeof DocumentAuthorityKind>;
 export declare const DocumentVisibility: z.ZodEnum<{
     private: "private";
     workspace: "workspace";
@@ -2920,6 +2934,13 @@ export declare const Document: z.ZodObject<{
     sourceUpdatedAt: z.ZodNullable<z.ZodString>;
     sourceVersion: z.ZodNullable<z.ZodString>;
     aclTags: z.ZodArray<z.ZodString>;
+    authorityKind: z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>;
+    authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+    authoritySubjectId: z.ZodNullable<z.ZodString>;
     visibility: z.ZodEnum<{
         private: "private";
         workspace: "workspace";
@@ -2983,8 +3004,62 @@ export declare const DocumentSearchResult: z.ZodObject<{
     sourceUpdatedAt: z.ZodNullable<z.ZodString>;
     sourceVersion: z.ZodNullable<z.ZodString>;
     aclTags: z.ZodArray<z.ZodString>;
+    authorityKind: z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>;
+    authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+    authoritySubjectId: z.ZodNullable<z.ZodString>;
 }, z.core.$strip>;
 export type DocumentSearchResult = z.infer<typeof DocumentSearchResult>;
+export declare const DocumentSearchResponse: z.ZodObject<{
+    results: z.ZodArray<z.ZodObject<{
+        chunkId: z.ZodString;
+        workspaceId: z.ZodString;
+        documentId: z.ZodString;
+        baseId: z.ZodString;
+        fileId: z.ZodString;
+        title: z.ZodString;
+        text: z.ZodString;
+        score: z.ZodNumber;
+        matchType: z.ZodEnum<{
+            hybrid: "hybrid";
+            keyword: "keyword";
+            vector: "vector";
+        }>;
+        vectorScore: z.ZodNullable<z.ZodNumber>;
+        keywordScore: z.ZodNullable<z.ZodNumber>;
+        chunkIndex: z.ZodNumber;
+        metadata: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        sourceKind: z.ZodEnum<{
+            chat: "chat";
+            document: "document";
+            email: "email";
+            manual_upload: "manual_upload";
+            meeting_transcript: "meeting_transcript";
+            other: "other";
+            repository: "repository";
+            web: "web";
+        }>;
+        sourceUri: z.ZodNullable<z.ZodString>;
+        sourceExternalId: z.ZodNullable<z.ZodString>;
+        sourceTitle: z.ZodNullable<z.ZodString>;
+        sourceAuthor: z.ZodNullable<z.ZodString>;
+        sourceCreatedAt: z.ZodNullable<z.ZodString>;
+        sourceUpdatedAt: z.ZodNullable<z.ZodString>;
+        sourceVersion: z.ZodNullable<z.ZodString>;
+        aclTags: z.ZodArray<z.ZodString>;
+        authorityKind: z.ZodEnum<{
+            organization: "organization";
+            personal: "personal";
+            workspace: "workspace";
+        }>;
+        authorityWorkspaceId: z.ZodNullable<z.ZodString>;
+        authoritySubjectId: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DocumentSearchResponse = z.infer<typeof DocumentSearchResponse>;
 export declare const CreateDocumentBaseRequest: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
@@ -3011,6 +3086,11 @@ export declare const AddDocumentRequest: z.ZodObject<{
     sourceUpdatedAt: z.ZodOptional<z.ZodString>;
     sourceVersion: z.ZodOptional<z.ZodString>;
     aclTags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    authorityKind: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>>;
     visibility: z.ZodOptional<z.ZodEnum<{
         private: "private";
         workspace: "workspace";
@@ -3023,6 +3103,11 @@ export declare const CreateKnowledgeDropRequest: z.ZodObject<{
     fileId: z.ZodOptional<z.ZodString>;
     filename: z.ZodOptional<z.ZodString>;
     title: z.ZodOptional<z.ZodString>;
+    authorityKind: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        personal: "personal";
+        workspace: "workspace";
+    }>>;
     visibility: z.ZodOptional<z.ZodEnum<{
         private: "private";
         workspace: "workspace";
@@ -12500,8 +12585,6 @@ export declare const HumanInputQuestion: z.ZodObject<{
     required: z.ZodDefault<z.ZodBoolean>;
     allowOther: z.ZodDefault<z.ZodBoolean>;
     validation: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-        minLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-        maxLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         minSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         maxSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     }, z.core.$strip>>>;
@@ -12534,8 +12617,6 @@ export declare const RequestHumanInputToolInput: z.ZodObject<{
         required: z.ZodDefault<z.ZodBoolean>;
         allowOther: z.ZodDefault<z.ZodBoolean>;
         validation: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            minLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-            maxLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             minSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             maxSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>>;
@@ -12609,8 +12690,6 @@ export declare const SessionHumanInputRequest: z.ZodObject<{
         required: z.ZodDefault<z.ZodBoolean>;
         allowOther: z.ZodDefault<z.ZodBoolean>;
         validation: z.ZodOptional<z.ZodNullable<z.ZodObject<{
-            minLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-            maxLength: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             minSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
             maxSelections: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         }, z.core.$strip>>>;
@@ -14034,6 +14113,7 @@ export declare const ModelCapabilitiesV1: z.ZodObject<{
         image: "image";
         text: "text";
     }>>;
+    inputFileMediaTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
     outputModalities: z.ZodArray<z.ZodEnum<{
         audio: "audio";
         image: "image";
@@ -14404,6 +14484,7 @@ export declare const ClientModel: z.ZodObject<{
             image: "image";
             text: "text";
         }>>;
+        inputFileMediaTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         outputModalities: z.ZodArray<z.ZodEnum<{
             audio: "audio";
             image: "image";
@@ -14653,6 +14734,7 @@ export declare const WorkspaceModelCatalogModel: z.ZodObject<{
             image: "image";
             text: "text";
         }>>;
+        inputFileMediaTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
         outputModalities: z.ZodArray<z.ZodEnum<{
             audio: "audio";
             image: "image";
@@ -14901,6 +14983,7 @@ export declare const WorkspaceModelCatalogResponse: z.ZodObject<{
                 image: "image";
                 text: "text";
             }>>;
+            inputFileMediaTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             outputModalities: z.ZodArray<z.ZodEnum<{
                 audio: "audio";
                 image: "image";
@@ -15167,6 +15250,7 @@ export declare const ClientConfig: z.ZodObject<{
                 image: "image";
                 text: "text";
             }>>;
+            inputFileMediaTypes: z.ZodOptional<z.ZodArray<z.ZodString>>;
             outputModalities: z.ZodArray<z.ZodEnum<{
                 audio: "audio";
                 image: "image";

package/dist/index.js

@@ -85,9 +85,11 @@ import {
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
   CreateWorkspaceRequest,
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
   DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS,
@@ -110,11 +112,13 @@ import {
   DeviceEnrollmentState,
   DiscoverMcpCapabilitiesResponse,
   Document,
+  DocumentAuthorityKind,
   DocumentBase,
   DocumentCuration,
   DocumentCurationStatus,
   DocumentSearchMode,
   DocumentSearchRequest,
+  DocumentSearchResponse,
   DocumentSearchResult,
   DocumentStatus,
   DocumentVisibility,
@@ -250,6 +254,7 @@ import {
   ListEnrollmentsResponse,
   ListWorkspaceMembersResponse,
   MAX_NESTED_AGENT_DEPTH,
+  MODEL_ATTACHMENT_REFS_FIELD,
   MachineKind,
   MachineMetricsSeriesResponse,
   MachineState,
@@ -568,6 +573,7 @@ import {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_SOURCE_VERSION_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
@@ -618,6 +624,14 @@ import {
   WorkspaceInstructionPolicyKind,
   WorkspaceInstructionPolicyListQuery,
   WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyOnboardingProposal,
+  WorkspaceInstructionPolicyOnboardingProposalConflictResponse,
+  WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse,
+  WorkspaceInstructionPolicyOnboardingProposalListQuery,
+  WorkspaceInstructionPolicyOnboardingProposalListResponse,
+  WorkspaceInstructionPolicyOnboardingProposalSource,
+  WorkspaceInstructionPolicyOnboardingProposalStaleResponse,
+  WorkspaceInstructionPolicyOperationReuseResponse,
   WorkspaceInstructionPolicyProvenance,
   WorkspaceInstructionPolicyProvenanceSource,
   WorkspaceInstructionPolicyRevision,
@@ -645,9 +659,11 @@ import {
   WorkspaceSettingsSchema,
   WorkspaceSlackReactionChannelPolicy,
   WorkspaceSlackReactionSummonSettings,
+  WorkspaceStateAttemptGovernance,
   WorkspaceStateDocumentStatusCounts,
   WorkspaceStateGap,
   WorkspaceStateGapCode,
+  WorkspaceStateGovernanceDriftStatus,
   WorkspaceStateKnowledge,
   WorkspaceStateKnowledgeAvailable,
   WorkspaceStateKnowledgeBase,
@@ -657,6 +673,7 @@ import {
   WorkspaceStatePolicy,
   WorkspaceStatePolicyHead,
   WorkspaceStatePolicyRevisionSummary,
+  WorkspaceStateQuery,
   WorkspaceStateResponse,
   WorkspaceStateSourceKindCounts,
   WorkspaceStateTopic,
@@ -743,7 +760,7 @@ import {
   verifyStreamToken,
   workspaceControlUtf8Bytes,
   workspaceSlackReactionChannelAllowed
-} from "./chunk-GMOYIHF3.js";
+} from "./chunk-F4KMLKSL.js";
 import {
   OPENGENI_MANAGED_PUBLIC_BASE_URL,
   OPENGENI_SLACK_BOT_EVENTS,
@@ -844,9 +861,11 @@ export {
   CreateWorkspaceArtifactRequest,
   CreateWorkspaceEnvironmentRequest,
   CreateWorkspaceInstructionPolicyDraftRequest,
+  CreateWorkspaceInstructionPolicyOnboardingProposalRequest,
   CreateWorkspaceRequest,
   CredentialAuthNeededPayload,
   DEFAULT_CODEX_FLEET_POLICY_V1,
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   DEFAULT_FIRST_PARTY_MCP_PERMISSIONS,
   DEFAULT_FIRST_PARTY_MCP_TOOLS,
   DEFAULT_WORKSPACE_SLACK_REACTION_SUMMON_SETTINGS,
@@ -869,11 +888,13 @@ export {
   DeviceEnrollmentState,
   DiscoverMcpCapabilitiesResponse,
   Document,
+  DocumentAuthorityKind,
   DocumentBase,
   DocumentCuration,
   DocumentCurationStatus,
   DocumentSearchMode,
   DocumentSearchRequest,
+  DocumentSearchResponse,
   DocumentSearchResult,
   DocumentStatus,
   DocumentVisibility,
@@ -1009,6 +1030,7 @@ export {
   ListEnrollmentsResponse,
   ListWorkspaceMembersResponse,
   MAX_NESTED_AGENT_DEPTH,
+  MODEL_ATTACHMENT_REFS_FIELD,
   MachineKind,
   MachineMetricsSeriesResponse,
   MachineState,
@@ -1334,6 +1356,7 @@ export {
   WORKSPACE_CONTROL_EVENT_MAX_BYTES,
   WORKSPACE_CONTROL_REASON_MAX_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
+  WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_SOURCE_VERSION_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_PROMPT_MAX_UTF8_BYTES,
   WORKSPACE_INSTRUCTION_POLICY_REASON_MAX_CHARS,
   WORKSPACE_INSTRUCTION_POLICY_ROLE_KEY_MAX_CHARS,
@@ -1384,6 +1407,14 @@ export {
   WorkspaceInstructionPolicyKind,
   WorkspaceInstructionPolicyListQuery,
   WorkspaceInstructionPolicyListResponse,
+  WorkspaceInstructionPolicyOnboardingProposal,
+  WorkspaceInstructionPolicyOnboardingProposalConflictResponse,
+  WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse,
+  WorkspaceInstructionPolicyOnboardingProposalListQuery,
+  WorkspaceInstructionPolicyOnboardingProposalListResponse,
+  WorkspaceInstructionPolicyOnboardingProposalSource,
+  WorkspaceInstructionPolicyOnboardingProposalStaleResponse,
+  WorkspaceInstructionPolicyOperationReuseResponse,
   WorkspaceInstructionPolicyProvenance,
   WorkspaceInstructionPolicyProvenanceSource,
   WorkspaceInstructionPolicyRevision,
@@ -1411,9 +1442,11 @@ export {
   WorkspaceSettingsSchema,
   WorkspaceSlackReactionChannelPolicy,
   WorkspaceSlackReactionSummonSettings,
+  WorkspaceStateAttemptGovernance,
   WorkspaceStateDocumentStatusCounts,
   WorkspaceStateGap,
   WorkspaceStateGapCode,
+  WorkspaceStateGovernanceDriftStatus,
   WorkspaceStateKnowledge,
   WorkspaceStateKnowledgeAvailable,
   WorkspaceStateKnowledgeBase,
@@ -1423,6 +1456,7 @@ export {
   WorkspaceStatePolicy,
   WorkspaceStatePolicyHead,
   WorkspaceStatePolicyRevisionSummary,
+  WorkspaceStateQuery,
   WorkspaceStateResponse,
   WorkspaceStateSourceKindCounts,
   WorkspaceStateTopic,