@opengeni/contracts 2.5.0-canary.2 → 2.6.0-canary.0

package/dist/atlassian.js

@@ -17,24 +17,25 @@ import {
   AtlassianSyncCadence,
   SaveAtlassianSourcesRequest,
   atlassianScopesAllowRead
-} from "./chunk-4I7DWNRR.js";
+} from "./chunk-MJ3K6ICH.js";
+import "./chunk-WYBDERIY.js";
 import "./chunk-MRWYRAS5.js";
+import "./chunk-CM6BMECR.js";
 import "./chunk-JUFK3T4Q.js";
-import "./chunk-WYBDERIY.js";
+import "./chunk-YBW5JSA3.js";
 import "./chunk-N6GRVXAJ.js";
 import "./chunk-3SIZGL3O.js";
 import "./chunk-NVJMJWLL.js";
+import "./chunk-YRKRZ6OF.js";
 import "./chunk-7RMTKFJW.js";
 import "./chunk-Y3KNXVTD.js";
 import "./chunk-RIY7GYQS.js";
-import "./chunk-YRKRZ6OF.js";
-import "./chunk-CM6BMECR.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
 import "./chunk-TXTQIYCV.js";
 import "./chunk-PX3VCKAU.js";
+import "./chunk-BCS7WHCK.js";
 import "./chunk-M5ZGRVIQ.js";
-import "./chunk-YBW5JSA3.js";
 export {
   ATLASSIAN_CREDENTIAL_LABEL,
   ATLASSIAN_CREDENTIAL_ROLE,

package/dist/chunk-BCS7WHCK.js

@@ -0,0 +1,139 @@
+// src/organization-recovery.ts
+import { z } from "zod";
+var Uuid = z.string().uuid();
+var Timestamp = z.string().datetime({ offset: true });
+var OrganizationRecoveryPolicyState = z.enum([
+  "pending_acceptance",
+  "active",
+  "degraded",
+  "superseded",
+  "disabled"
+]);
+var OrganizationRecoveryOperationState = z.enum([
+  "collecting",
+  "cooling",
+  "executed",
+  "cancelled",
+  "expired",
+  "superseded"
+]);
+var OrganizationRecoveryUnavailableReason = z.enum([
+  "no_policy",
+  "pending_acceptance",
+  "degraded",
+  "disabled",
+  "identity_unavailable"
+]);
+var OrganizationRecoveryMemberSummary = z.object({
+  membershipId: Uuid,
+  name: z.string().trim().min(1).max(1024).nullable(),
+  email: z.string().email().max(320).nullable()
+}).strict();
+var OrganizationRecoveryCustodian = OrganizationRecoveryMemberSummary.extend({
+  ordinal: z.number().int().min(1).max(3),
+  enrollmentState: z.enum(["pending_acceptance", "accepted", "ineligible"]),
+  acceptedAt: Timestamp.nullable()
+}).strict();
+var OrganizationRecoveryPolicy = z.object({
+  id: Uuid,
+  organizationId: Uuid,
+  revision: z.number().int().positive(),
+  state: OrganizationRecoveryPolicyState,
+  custodians: z.array(OrganizationRecoveryCustodian).length(3),
+  createdAt: Timestamp,
+  updatedAt: Timestamp
+}).strict();
+var OrganizationRecoveryApproval = OrganizationRecoveryMemberSummary.extend({
+  approvedAt: Timestamp
+}).strict();
+var OrganizationRecoveryOperation = z.object({
+  id: Uuid,
+  organizationId: Uuid,
+  policyId: Uuid,
+  policyRevision: z.number().int().positive(),
+  revision: z.number().int().positive(),
+  state: OrganizationRecoveryOperationState,
+  target: OrganizationRecoveryMemberSummary,
+  approvals: z.array(OrganizationRecoveryApproval).max(3),
+  approvalCount: z.number().int().min(0).max(3),
+  quorumAt: Timestamp.nullable(),
+  executableAt: Timestamp.nullable(),
+  expiresAt: Timestamp,
+  executedAt: Timestamp.nullable(),
+  cancelledAt: Timestamp.nullable(),
+  notificationJournaled: z.boolean(),
+  createdAt: Timestamp,
+  updatedAt: Timestamp
+}).strict();
+var OrganizationRecoveryCapabilities = z.object({
+  configure: z.boolean(),
+  accept: z.boolean(),
+  disable: z.boolean(),
+  start: z.boolean(),
+  approve: z.boolean(),
+  cancel: z.boolean(),
+  execute: z.boolean()
+}).strict();
+var OrganizationRecoveryOverview = z.object({
+  organizationId: Uuid,
+  availability: z.enum(["available", "recovery_unavailable"]),
+  unavailableReason: OrganizationRecoveryUnavailableReason.nullable(),
+  recentReauthenticationAt: Timestamp.nullable(),
+  eligibleMembers: z.array(OrganizationRecoveryMemberSummary).max(1e3),
+  policy: OrganizationRecoveryPolicy.nullable(),
+  operation: OrganizationRecoveryOperation.nullable(),
+  capabilities: OrganizationRecoveryCapabilities
+}).strict();
+var ExpectedPolicyRevision = z.number().int().nonnegative();
+var ExpectedOperationRevision = z.number().int().positive();
+var CommandOperationId = Uuid;
+var ConfigureOrganizationRecoveryPolicyRequest = z.object({
+  custodianMembershipIds: z.tuple([Uuid, Uuid, Uuid]).superRefine((ids, context) => {
+    if (new Set(ids).size !== 3) {
+      context.addIssue({
+        code: "custom",
+        message: "recovery custodians must be three distinct memberships"
+      });
+    }
+  }),
+  expectedPolicyRevision: ExpectedPolicyRevision,
+  operationId: CommandOperationId
+}).strict();
+var AcceptOrganizationRecoveryCustodyRequest = z.object({
+  expectedPolicyRevision: ExpectedPolicyRevision,
+  operationId: CommandOperationId
+}).strict();
+var DisableOrganizationRecoveryPolicyRequest = AcceptOrganizationRecoveryCustodyRequest;
+var StartOrganizationRecoveryOperationRequest = z.object({
+  targetMembershipId: Uuid,
+  expectedPolicyRevision: z.number().int().positive(),
+  operationId: CommandOperationId
+}).strict();
+var OrganizationRecoveryOperationCommandRequest = z.object({
+  expectedOperationRevision: ExpectedOperationRevision,
+  operationId: CommandOperationId
+}).strict();
+var OrganizationRecoveryMutationResponse = z.object({
+  replay: z.boolean(),
+  overview: OrganizationRecoveryOverview
+}).strict();
+
+export {
+  OrganizationRecoveryPolicyState,
+  OrganizationRecoveryOperationState,
+  OrganizationRecoveryUnavailableReason,
+  OrganizationRecoveryMemberSummary,
+  OrganizationRecoveryCustodian,
+  OrganizationRecoveryPolicy,
+  OrganizationRecoveryApproval,
+  OrganizationRecoveryOperation,
+  OrganizationRecoveryCapabilities,
+  OrganizationRecoveryOverview,
+  ConfigureOrganizationRecoveryPolicyRequest,
+  AcceptOrganizationRecoveryCustodyRequest,
+  DisableOrganizationRecoveryPolicyRequest,
+  StartOrganizationRecoveryOperationRequest,
+  OrganizationRecoveryOperationCommandRequest,
+  OrganizationRecoveryMutationResponse
+};
+//# sourceMappingURL=chunk-BCS7WHCK.js.map

package/dist/chunk-BCS7WHCK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/organization-recovery.ts"],"sourcesContent":["import { z } from \"zod\";\n\nconst Uuid = z.string().uuid();\nconst Timestamp = z.string().datetime({ offset: true });\n\nexport const OrganizationRecoveryPolicyState = z.enum([\n  \"pending_acceptance\",\n  \"active\",\n  \"degraded\",\n  \"superseded\",\n  \"disabled\",\n]);\nexport type OrganizationRecoveryPolicyState = z.infer<typeof OrganizationRecoveryPolicyState>;\n\nexport const OrganizationRecoveryOperationState = z.enum([\n  \"collecting\",\n  \"cooling\",\n  \"executed\",\n  \"cancelled\",\n  \"expired\",\n  \"superseded\",\n]);\nexport type OrganizationRecoveryOperationState = z.infer<typeof OrganizationRecoveryOperationState>;\n\nexport const OrganizationRecoveryUnavailableReason = z.enum([\n  \"no_policy\",\n  \"pending_acceptance\",\n  \"degraded\",\n  \"disabled\",\n  \"identity_unavailable\",\n]);\nexport type OrganizationRecoveryUnavailableReason = z.infer<\n  typeof OrganizationRecoveryUnavailableReason\n>;\n\nexport const OrganizationRecoveryMemberSummary = z\n  .object({\n    membershipId: Uuid,\n    name: z.string().trim().min(1).max(1024).nullable(),\n    email: z.string().email().max(320).nullable(),\n  })\n  .strict();\nexport type OrganizationRecoveryMemberSummary = z.infer<typeof OrganizationRecoveryMemberSummary>;\n\nexport const OrganizationRecoveryCustodian = OrganizationRecoveryMemberSummary.extend({\n  ordinal: z.number().int().min(1).max(3),\n  enrollmentState: z.enum([\"pending_acceptance\", \"accepted\", \"ineligible\"]),\n  acceptedAt: Timestamp.nullable(),\n}).strict();\nexport type OrganizationRecoveryCustodian = z.infer<typeof OrganizationRecoveryCustodian>;\n\nexport const OrganizationRecoveryPolicy = z\n  .object({\n    id: Uuid,\n    organizationId: Uuid,\n    revision: z.number().int().positive(),\n    state: OrganizationRecoveryPolicyState,\n    custodians: z.array(OrganizationRecoveryCustodian).length(3),\n    createdAt: Timestamp,\n    updatedAt: Timestamp,\n  })\n  .strict();\nexport type OrganizationRecoveryPolicy = z.infer<typeof OrganizationRecoveryPolicy>;\n\nexport const OrganizationRecoveryApproval = OrganizationRecoveryMemberSummary.extend({\n  approvedAt: Timestamp,\n}).strict();\nexport type OrganizationRecoveryApproval = z.infer<typeof OrganizationRecoveryApproval>;\n\nexport const OrganizationRecoveryOperation = z\n  .object({\n    id: Uuid,\n    organizationId: Uuid,\n    policyId: Uuid,\n    policyRevision: z.number().int().positive(),\n    revision: z.number().int().positive(),\n    state: OrganizationRecoveryOperationState,\n    target: OrganizationRecoveryMemberSummary,\n    approvals: z.array(OrganizationRecoveryApproval).max(3),\n    approvalCount: z.number().int().min(0).max(3),\n    quorumAt: Timestamp.nullable(),\n    executableAt: Timestamp.nullable(),\n    expiresAt: Timestamp,\n    executedAt: Timestamp.nullable(),\n    cancelledAt: Timestamp.nullable(),\n    notificationJournaled: z.boolean(),\n    createdAt: Timestamp,\n    updatedAt: Timestamp,\n  })\n  .strict();\nexport type OrganizationRecoveryOperation = z.infer<typeof OrganizationRecoveryOperation>;\n\nexport const OrganizationRecoveryCapabilities = z\n  .object({\n    configure: z.boolean(),\n    accept: z.boolean(),\n    disable: z.boolean(),\n    start: z.boolean(),\n    approve: z.boolean(),\n    cancel: z.boolean(),\n    execute: z.boolean(),\n  })\n  .strict();\nexport type OrganizationRecoveryCapabilities = z.infer<typeof OrganizationRecoveryCapabilities>;\n\nexport const OrganizationRecoveryOverview = z\n  .object({\n    organizationId: Uuid,\n    availability: z.enum([\"available\", \"recovery_unavailable\"]),\n    unavailableReason: OrganizationRecoveryUnavailableReason.nullable(),\n    recentReauthenticationAt: Timestamp.nullable(),\n    eligibleMembers: z.array(OrganizationRecoveryMemberSummary).max(1000),\n    policy: OrganizationRecoveryPolicy.nullable(),\n    operation: OrganizationRecoveryOperation.nullable(),\n    capabilities: OrganizationRecoveryCapabilities,\n  })\n  .strict();\nexport type OrganizationRecoveryOverview = z.infer<typeof OrganizationRecoveryOverview>;\n\nconst ExpectedPolicyRevision = z.number().int().nonnegative();\nconst ExpectedOperationRevision = z.number().int().positive();\nconst CommandOperationId = Uuid;\n\nexport const ConfigureOrganizationRecoveryPolicyRequest = z\n  .object({\n    custodianMembershipIds: z.tuple([Uuid, Uuid, Uuid]).superRefine((ids, context) => {\n      if (new Set(ids).size !== 3) {\n        context.addIssue({\n          code: \"custom\",\n          message: \"recovery custodians must be three distinct memberships\",\n        });\n      }\n    }),\n    expectedPolicyRevision: ExpectedPolicyRevision,\n    operationId: CommandOperationId,\n  })\n  .strict();\nexport type ConfigureOrganizationRecoveryPolicyRequest = z.infer<\n  typeof ConfigureOrganizationRecoveryPolicyRequest\n>;\n\nexport const AcceptOrganizationRecoveryCustodyRequest = z\n  .object({\n    expectedPolicyRevision: ExpectedPolicyRevision,\n    operationId: CommandOperationId,\n  })\n  .strict();\nexport type AcceptOrganizationRecoveryCustodyRequest = z.infer<\n  typeof AcceptOrganizationRecoveryCustodyRequest\n>;\n\nexport const DisableOrganizationRecoveryPolicyRequest = AcceptOrganizationRecoveryCustodyRequest;\nexport type DisableOrganizationRecoveryPolicyRequest = z.infer<\n  typeof DisableOrganizationRecoveryPolicyRequest\n>;\n\nexport const StartOrganizationRecoveryOperationRequest = z\n  .object({\n    targetMembershipId: Uuid,\n    expectedPolicyRevision: z.number().int().positive(),\n    operationId: CommandOperationId,\n  })\n  .strict();\nexport type StartOrganizationRecoveryOperationRequest = z.infer<\n  typeof StartOrganizationRecoveryOperationRequest\n>;\n\nexport const OrganizationRecoveryOperationCommandRequest = z\n  .object({\n    expectedOperationRevision: ExpectedOperationRevision,\n    operationId: CommandOperationId,\n  })\n  .strict();\nexport type OrganizationRecoveryOperationCommandRequest = z.infer<\n  typeof OrganizationRecoveryOperationCommandRequest\n>;\n\nexport const OrganizationRecoveryMutationResponse = z\n  .object({\n    replay: z.boolean(),\n    overview: OrganizationRecoveryOverview,\n  })\n  .strict();\nexport type OrganizationRecoveryMutationResponse = z.infer<\n  typeof OrganizationRecoveryMutationResponse\n>;\n"],"mappings":";AAAA,SAAS,SAAS;AAElB,IAAM,OAAO,EAAE,OAAO,EAAE,KAAK;AAC7B,IAAM,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,KAAK,CAAC;AAE/C,IAAM,kCAAkC,EAAE,KAAK;AAAA,EACpD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,qCAAqC,EAAE,KAAK;AAAA,EACvD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,wCAAwC,EAAE,KAAK;AAAA,EAC1D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,oCAAoC,EAC9C,OAAO;AAAA,EACN,cAAc;AAAA,EACd,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,SAAS;AAAA,EAClD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,SAAS;AAC9C,CAAC,EACA,OAAO;AAGH,IAAM,gCAAgC,kCAAkC,OAAO;AAAA,EACpF,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,EACtC,iBAAiB,EAAE,KAAK,CAAC,sBAAsB,YAAY,YAAY,CAAC;AAAA,EACxE,YAAY,UAAU,SAAS;AACjC,CAAC,EAAE,OAAO;AAGH,IAAM,6BAA6B,EACvC,OAAO;AAAA,EACN,IAAI;AAAA,EACJ,gBAAgB;AAAA,EAChB,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,OAAO;AAAA,EACP,YAAY,EAAE,MAAM,6BAA6B,EAAE,OAAO,CAAC;AAAA,EAC3D,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,OAAO;AAGH,IAAM,+BAA+B,kCAAkC,OAAO;AAAA,EACnF,YAAY;AACd,CAAC,EAAE,OAAO;AAGH,IAAM,gCAAgC,EAC1C,OAAO;AAAA,EACN,IAAI;AAAA,EACJ,gBAAgB;AAAA,EAChB,UAAU;AAAA,EACV,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAC1C,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACpC,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,WAAW,EAAE,MAAM,4BAA4B,EAAE,IAAI,CAAC;AAAA,EACtD,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC;AAAA,EAC5C,UAAU,UAAU,SAAS;AAAA,EAC7B,cAAc,UAAU,SAAS;AAAA,EACjC,WAAW;AAAA,EACX,YAAY,UAAU,SAAS;AAAA,EAC/B,aAAa,UAAU,SAAS;AAAA,EAChC,uBAAuB,EAAE,QAAQ;AAAA,EACjC,WAAW;AAAA,EACX,WAAW;AACb,CAAC,EACA,OAAO;AAGH,IAAM,mCAAmC,EAC7C,OAAO;AAAA,EACN,WAAW,EAAE,QAAQ;AAAA,EACrB,QAAQ,EAAE,QAAQ;AAAA,EAClB,SAAS,EAAE,QAAQ;AAAA,EACnB,OAAO,EAAE,QAAQ;AAAA,EACjB,SAAS,EAAE,QAAQ;AAAA,EACnB,QAAQ,EAAE,QAAQ;AAAA,EAClB,SAAS,EAAE,QAAQ;AACrB,CAAC,EACA,OAAO;AAGH,IAAM,+BAA+B,EACzC,OAAO;AAAA,EACN,gBAAgB;AAAA,EAChB,cAAc,EAAE,KAAK,CAAC,aAAa,sBAAsB,CAAC;AAAA,EAC1D,mBAAmB,sCAAsC,SAAS;AAAA,EAClE,0BAA0B,UAAU,SAAS;AAAA,EAC7C,iBAAiB,EAAE,MAAM,iCAAiC,EAAE,IAAI,GAAI;AAAA,EACpE,QAAQ,2BAA2B,SAAS;AAAA,EAC5C,WAAW,8BAA8B,SAAS;AAAA,EAClD,cAAc;AAChB,CAAC,EACA,OAAO;AAGV,IAAM,yBAAyB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAC5D,IAAM,4BAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAC5D,IAAM,qBAAqB;AAEpB,IAAM,6CAA6C,EACvD,OAAO;AAAA,EACN,wBAAwB,EAAE,MAAM,CAAC,MAAM,MAAM,IAAI,CAAC,EAAE,YAAY,CAAC,KAAK,YAAY;AAChF,QAAI,IAAI,IAAI,GAAG,EAAE,SAAS,GAAG;AAC3B,cAAQ,SAAS;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAAA,EACD,wBAAwB;AAAA,EACxB,aAAa;AACf,CAAC,EACA,OAAO;AAKH,IAAM,2CAA2C,EACrD,OAAO;AAAA,EACN,wBAAwB;AAAA,EACxB,aAAa;AACf,CAAC,EACA,OAAO;AAKH,IAAM,2CAA2C;AAKjD,IAAM,4CAA4C,EACtD,OAAO;AAAA,EACN,oBAAoB;AAAA,EACpB,wBAAwB,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EAClD,aAAa;AACf,CAAC,EACA,OAAO;AAKH,IAAM,8CAA8C,EACxD,OAAO;AAAA,EACN,2BAA2B;AAAA,EAC3B,aAAa;AACf,CAAC,EACA,OAAO;AAKH,IAAM,uCAAuC,EACjD,OAAO;AAAA,EACN,QAAQ,EAAE,QAAQ;AAAA,EAClB,UAAU;AACZ,CAAC,EACA,OAAO;","names":[]}

package/dist/{chunk-4I7DWNRR.js → chunk-MJ3K6ICH.js}

@@ -1722,7 +1722,9 @@ import { z as z8 } from "zod";
 var IMAGE_GENERATION_MAX_REFERENCES = 4;
 var WorkspaceImagePathSchema = z8.string().max(512).regex(/^\/workspace\/.+$/).refine((path) => path.split("/").every((segment) => segment !== "." && segment !== ".."), {
   message: "Sandbox image paths cannot contain dot segments"
-});
+}).describe(
+  "Absolute /workspace path to a PNG, JPEG, or WebP image. Convert SVG or other formats before using them as image-generation references."
+);
 var ImageGenerationReferenceSchema = z8.discriminatedUnion("kind", [
   z8.object({
     kind: z8.literal("sandbox_path"),
@@ -1739,7 +1741,9 @@ var ImageGenerationReferenceSchema = z8.discriminatedUnion("kind", [
 ]);
 var GenerateImageToolInput = z8.object({
   prompt: z8.string().trim().min(1).max(32e3),
-  references: z8.array(ImageGenerationReferenceSchema).max(IMAGE_GENERATION_MAX_REFERENCES).optional().default([])
+  references: z8.array(ImageGenerationReferenceSchema).max(IMAGE_GENERATION_MAX_REFERENCES).optional().default([]).describe(
+    "Ordered image references. Every sandbox path, File, or artifact must resolve to PNG, JPEG, or WebP bytes."
+  )
 }).strict();
 var GeneratedImageReceiptSchema = z8.object({
   type: z8.literal("generated_image"),
@@ -10179,7 +10183,7 @@ var UpdateWorkspaceRequest = z27.object({
   // White-label persona override. Pass null to clear it back to the deployment
   // default; omit to leave it unchanged.
   agentInstructions: z27.string().min(1).nullable().optional()
-});
+}).strict();
 var ApiKey = z27.object({
   id: z27.string().uuid(),
   accountId: z27.string().uuid(),
@@ -13159,6 +13163,26 @@ var VariableSetSecret = z27.object({
   value: z27.string()
 });
 var VariableSetScope = z27.enum(["organization", "workspace", "user"]);
+var VariableSetAttachmentMetadata = z27.object({
+  id: z27.string().uuid(),
+  scope: VariableSetScope
+});
+var MAX_RESOLVED_VARIABLE_SET_ATTACHMENTS = MAX_SELECTED_VARIABLE_SETS * 2;
+var ResolveVariableSetAttachmentsRequest = z27.object({
+  // One create can carry 25 explicit selections plus 25 defaults from its Rig.
+  variableSetIds: z27.array(z27.string().uuid()).max(MAX_RESOLVED_VARIABLE_SET_ATTACHMENTS)
+}).strict().superRefine((value, context) => {
+  if (new Set(value.variableSetIds).size !== value.variableSetIds.length) {
+    context.addIssue({
+      code: z27.ZodIssueCode.custom,
+      path: ["variableSetIds"],
+      message: "variableSetIds must not contain duplicates"
+    });
+  }
+});
+var ResolveVariableSetAttachmentsResponse = z27.object({
+  variableSets: z27.array(VariableSetAttachmentMetadata)
+});
 var VariableSet = z27.object({
   id: z27.string().uuid(),
   accountId: z27.string().uuid(),
@@ -13370,6 +13394,7 @@ var RigChange = z27.object({
   createdAt: z27.string(),
   updatedAt: z27.string()
 });
+var RIG_SETUP_SCRIPT_MAX_CHARS = 1024 * 1024;
 var CreateRigRequest = z27.object({
   // Omitted remains the compatibility workspace-owned creation path.
   scope: ResourceAuthorityScope.default("workspace"),
@@ -13382,7 +13407,7 @@ var CreateRigRequest = z27.object({
   // explicit never-field instead of silently stripping `image` from older
   // clients: callers must receive a validation error and remove the override.
   image: z27.never().optional(),
-  setupScript: z27.string().max(131072).optional(),
+  setupScript: z27.string().max(RIG_SETUP_SCRIPT_MAX_CHARS).optional(),
   checks: z27.array(RigCheck).max(100).default([]),
   credentialHooks: z27.array(z27.string().min(1).max(200)).max(50).default([]),
   defaultVariableSetIds: z27.array(z27.string().uuid()).max(25).default([])
@@ -13425,7 +13450,7 @@ var RigDefinitionEditPayload = z27.object({
   // the read model for compatibility, but no new definition may set or clear
   // one through the public write contract.
   image: z27.never().optional(),
-  setupScript: z27.string().max(131072).nullish(),
+  setupScript: z27.string().max(RIG_SETUP_SCRIPT_MAX_CHARS).nullish(),
   checks: z27.array(RigCheck).max(100).optional(),
   credentialHooks: z27.array(z27.string().min(1).max(200)).max(50).optional(),
   defaultVariableSetIds: z27.array(z27.string().uuid()).max(25).optional(),
@@ -18932,7 +18957,7 @@ var WorkspaceModelCatalogResponse = /* @__PURE__ */ defineModelContractSchema(
     models: z27.array(WorkspaceModelCatalogModel)
   })
 );
-var OPENGENI_API_CONTRACT_REVISION = "2026-08-personal-only-organization-setup-v1";
+var OPENGENI_API_CONTRACT_REVISION = "2026-08-organization-recovery-custody-v1";
 var OPENGENI_API_CONTRACT_HEADER = "x-opengeni-api-contract";
 var OPENGENI_CORRELATION_HEADER = "x-opengeni-correlation-id";
 var ClientConfig = /* @__PURE__ */ defineModelContractSchema(
@@ -18976,6 +19001,9 @@ var ClientConfig = /* @__PURE__ */ defineModelContractSchema(
       acceptedMimeTypes: [...VOICE_INPUT_ACCEPTED_MIME_TYPES]
     }),
     productAccessMode: ProductAccessMode,
+    // Safe rollout discriminator: the browser only mounts the optional
+    // @opengeni/sdk/accounts controller when this is dual or broker.
+    managedAuthSessionSetMode: z27.enum(["legacy", "dual", "broker"]).default("legacy"),
     auth: ClientAuthConfig.default({ mode: "none" }),
     analytics: z27.object({
       consentRequired: z27.boolean(),
@@ -20387,6 +20415,10 @@ export {
   WorkspaceEnvironmentVariableMetadata,
   VariableSetSecret,
   VariableSetScope,
+  VariableSetAttachmentMetadata,
+  MAX_RESOLVED_VARIABLE_SET_ATTACHMENTS,
+  ResolveVariableSetAttachmentsRequest,
+  ResolveVariableSetAttachmentsResponse,
   VariableSet,
   WorkspaceEnvironment,
   CreateVariableSetRequest,
@@ -20407,6 +20439,7 @@ export {
   RigCheckResult,
   RigChangeVerification,
   RigChange,
+  RIG_SETUP_SCRIPT_MAX_CHARS,
   CreateRigRequest,
   UpdateRigRequest,
   Channel,
@@ -20856,4 +20889,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-4I7DWNRR.js.map
+//# sourceMappingURL=chunk-MJ3K6ICH.js.map