@opengeni/contracts 2.7.0 → 2.9.2

package/dist/{chunk-ILB4IYNN.js → chunk-AWNGBY5I.js}

@@ -1,6 +1,9 @@
 import {
   ConnectorDocumentDestination
 } from "./chunk-WYBDERIY.js";
+import {
+  normalizeAutomaticSessionTitle
+} from "./chunk-4IVHBXRI.js";
 import {
   XaiProviderAccountAuthoritySnapshotV1
 } from "./chunk-CM6BMECR.js";
@@ -48,6 +51,7 @@ var Permission = z.enum([
   "api_keys:manage",
   "connections:read",
   "connections:write",
+  "capabilities:manage",
   /** @deprecated alias of variable-sets:manage */
   "environments:manage",
   /** @deprecated alias of variable-sets:use */
@@ -4389,218 +4393,6 @@ var SandboxFileArtifactReceipt = z13.object({
   }
 });
 
-// src/session-titles.ts
-var SESSION_TITLE_MAX_CHARACTERS = 200;
-var AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES = 80;
-var AUTOMATIC_SESSION_TITLE_FALLBACK = "New conversation";
-var titleSegmenter;
-var KNOWN_SENSITIVE_VALUE_PATTERNS = [
-  /-----BEGIN [A-Z ]*PRIVATE KEY-----/iu,
-  /\bBearer\s+[A-Za-z0-9._~+/=-]{8,}/iu,
-  /\b(?:sk-(?:proj-)?|gh[oprsu]_|github_pat_|glpat-|xox[baprs]-)[A-Za-z0-9_-]{8,}/iu,
-  /\bAKIA[0-9A-Z]{16}\b/u,
-  /\bAIza[0-9A-Za-z_-]{20,}\b/u,
-  /\beyJ[A-Za-z0-9_-]+\.eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/u,
-  /[?&](?:access_token|api_key|apikey|password|secret|token)=[^\s&#]+/iu
-];
-var URI_SCHEME_CANDIDATE_PATTERN = /\b[a-z][a-z0-9+.-]*:\S+/giu;
-var WINDOWS_DRIVE_PATH_PATTERN = /^[a-z]:[\\/](?![\\/])[^:]*$/iu;
-var SCHEMELESS_HOST_CANDIDATE_PATTERN = /\b(?:www\.)?(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?(?::\d{1,5})?(?:[/?#][^\s]*)?/giu;
-var SCHEMELESS_LOCAL_NETWORK_PATTERNS = [
-  /\blocalhost(?:(?::\d{1,5})(?:[/?#][^\s]*)?|[/?#][^\s]*)/iu,
-  /\b(?:(?:25[0-5]|2[0-4]\d|1?\d?\d)\.){3}(?:25[0-5]|2[0-4]\d|1?\d?\d)(?:(?::\d{1,5})(?:[/?#][^\s]*)?|[/?#][^\s]*)/u,
-  /\[(?=[0-9a-f:.]*:[0-9a-f:.]*\])[0-9a-f:.]+\](?:(?::\d{1,5})(?:[/?#][^\s]*)?|[/?#][^\s]*)/iu
-];
-var FILE_LIKE_HOST_SUFFIXES = /* @__PURE__ */ new Set([
-  "css",
-  "html",
-  "js",
-  "json",
-  "jsx",
-  "lock",
-  "md",
-  "sql",
-  "toml",
-  "ts",
-  "tsx",
-  "xml",
-  "yaml",
-  "yml"
-]);
-var DOTTED_TECHNOLOGY_PATH_AUTHORITIES = /* @__PURE__ */ new Set([
-  "ASP.NET",
-  "AWS.SDK",
-  "Microsoft.Extensions",
-  "System.IO"
-]);
-var SECRET_ASSIGNMENT_CANDIDATE_PATTERN = /(?:^|[^A-Za-z0-9])(?:(['"])([A-Za-z][A-Za-z0-9_. -]*)\1|([A-Za-z][A-Za-z0-9_.-]*))\s*[=:]\s*[^\s,;]+/gu;
-var SECRET_LABEL_ASSIGNMENT_PATTERN = /\b(?:api[ _-]?key|access[ _-]?token|auth[ _-]?token|credential|credentials|password|passwd|private[ _-]?key|secret|token)\b\s*[=:]\s*[^\s,;]+/iu;
-var SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = /* @__PURE__ */ new Set([
-  "credential",
-  "credentials",
-  "password",
-  "passwd",
-  "secret",
-  "token"
-]);
-var COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES = [
-  "apikey",
-  "accesskey",
-  "accesskeyid",
-  "accesstoken",
-  "authtoken",
-  "credential",
-  "credentials",
-  "password",
-  "passwd",
-  "privatekey",
-  "secret",
-  "secretkey",
-  "token"
-];
-var SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES = [
-  ["api", "key"],
-  ["access", "key"],
-  ["access", "key", "id"],
-  ["auth", "key"],
-  ["private", "key"],
-  ["secret", "key"]
-];
-function hasWordSuffix(words, suffix) {
-  if (words.length < suffix.length) return false;
-  const offset = words.length - suffix.length;
-  return suffix.every((word, index) => words[offset + index] === word);
-}
-function containsSensitiveAssignment(value) {
-  for (const match of value.matchAll(SECRET_ASSIGNMENT_CANDIDATE_PATTERN)) {
-    const key = match[2] ?? match[3];
-    if (!key) continue;
-    const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean);
-    const last = words.at(-1);
-    if (last && SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.has(last)) return true;
-    if (last && COMPACT_SENSITIVE_ASSIGNMENT_KEY_SUFFIXES.some((suffix) => last.endsWith(suffix))) {
-      return true;
-    }
-    if (SENSITIVE_ASSIGNMENT_KEY_WORD_SUFFIXES.some((suffix) => hasWordSuffix(words, suffix))) {
-      return true;
-    }
-  }
-  return false;
-}
-function containsUriScheme(value) {
-  for (const match of value.matchAll(URI_SCHEME_CANDIDATE_PATTERN)) {
-    if (!WINDOWS_DRIVE_PATH_PATTERN.test(match[0])) return true;
-  }
-  return false;
-}
-function isDottedTechnologyPath(candidate) {
-  if (/[?:#]/u.test(candidate)) return false;
-  const [authority, ...pathSegments] = candidate.split("/");
-  if (!authority || pathSegments.length === 0 || pathSegments.some((segment) => !segment)) {
-    return false;
-  }
-  if (!DOTTED_TECHNOLOGY_PATH_AUTHORITIES.has(authority) || pathSegments.some((segment) => !/^[A-Z][A-Za-z0-9_-]*$/u.test(segment))) {
-    return false;
-  }
-  return true;
-}
-function containsSchemelessUrl(value) {
-  if (SCHEMELESS_LOCAL_NETWORK_PATTERNS.some((pattern) => pattern.test(value))) return true;
-  for (const match of value.matchAll(SCHEMELESS_HOST_CANDIDATE_PATTERN)) {
-    const candidate = match[0];
-    if (candidate.toLowerCase().startsWith("www.")) return true;
-    if (!/[/?#]/u.test(candidate)) continue;
-    const authority = candidate.split(/[/?#]/u, 1)[0] ?? "";
-    const hostname = authority.replace(/:\d{1,5}$/u, "");
-    const suffix = hostname.split(".").at(-1)?.toLowerCase();
-    if (suffix && FILE_LIKE_HOST_SUFFIXES.has(suffix)) continue;
-    if (isDottedTechnologyPath(candidate)) continue;
-    return true;
-  }
-  return false;
-}
-var OPAQUE_IDENTIFIER_PATTERN = /\b(?=[A-Za-z0-9_-]{32,}\b)(?=[A-Za-z0-9_-]*[A-Za-z])(?=[A-Za-z0-9_-]*\d)[A-Za-z0-9_-]+\b/u;
-var DEFAULT_IGNORABLE_CODE_POINTS = /\p{Default_Ignorable_Code_Point}+/gu;
-var ESCAPED_QUOTE_DELIMITERS = /\\+(?=["'])/gu;
-var TITLE_LABEL_PATTERN = /^(?:(?:suggested|generated|concise)\s+)?(?:(?:session|chat|conversation|task)\s+)?title\s*[:\-–—]\s*/iu;
-var LEADING_BOILERPLATE_PATTERNS = [
-  /^(?:hi|hello|hey)(?:\s+there)?\s*[,!:.\-–—]*\s*/iu,
-  /^(?:i\s+(?:would\s+like|want|need)\s+you\s+to|i['’]d\s+like\s+you\s+to)\s+/iu,
-  /^(?:please\s+)?(?:can|could|would|will)\s+you\s+/iu,
-  /^(?:your|the)\s+(?:task|job)\s+is\s+to\s+/iu,
-  /^(?:please\s+)?help\s+me\s+(?:to\s+)?/iu,
-  /^please(?:\s*[,!:.\-–—]+\s*|\s+|$)/iu
-];
-function automaticTitleDetectionValue(value) {
-  return value.normalize("NFKC").replace(DEFAULT_IGNORABLE_CODE_POINTS, "").replace(ESCAPED_QUOTE_DELIMITERS, "");
-}
-function hasVisibleAutomaticTitleContent(value) {
-  return automaticTitleDetectionValue(value).trim().length > 0;
-}
-function containsSensitiveAutomaticTitleValue(value) {
-  const detectionValue = automaticTitleDetectionValue(value);
-  if (KNOWN_SENSITIVE_VALUE_PATTERNS.some((pattern) => pattern.test(detectionValue))) return true;
-  if (containsUriScheme(detectionValue)) return true;
-  if (containsSchemelessUrl(detectionValue)) return true;
-  if (SECRET_LABEL_ASSIGNMENT_PATTERN.test(detectionValue)) return true;
-  if (containsSensitiveAssignment(detectionValue)) return true;
-  if (OPAQUE_IDENTIFIER_PATTERN.test(detectionValue)) return true;
-  return false;
-}
-function stripAutomaticTitleBoilerplate(value) {
-  let title = value;
-  for (let pass = 0; pass < 4; pass += 1) {
-    const before = title;
-    title = title.replace(/^(?:```[^\n]*|[\s#>*_`"'“”‘’\-–—]+)+/u, "").replace(TITLE_LABEL_PATTERN, "");
-    for (const pattern of LEADING_BOILERPLATE_PATTERNS) {
-      title = title.replace(pattern, "");
-    }
-    title = title.trim();
-    if (title === before) break;
-  }
-  return title;
-}
-function automaticTitleGraphemes(value) {
-  if (titleSegmenter === void 0) {
-    titleSegmenter = typeof Intl.Segmenter === "function" ? new Intl.Segmenter(void 0, { granularity: "grapheme" }) : null;
-  }
-  if (titleSegmenter) {
-    return Array.from(titleSegmenter.segment(value), (part) => part.segment);
-  }
-  const graphemes = [];
-  for (const point of value) {
-    const prior = graphemes.at(-1);
-    if (prior && (/^[\p{Mark}\u{FE0E}\u{FE0F}\p{Emoji_Modifier}]$/u.test(point) || point === "\u200D" || prior.endsWith("\u200D"))) {
-      graphemes[graphemes.length - 1] = `${prior}${point}`;
-    } else {
-      graphemes.push(point);
-    }
-  }
-  return graphemes;
-}
-function boundAutomaticTitle(value) {
-  const words = value.split(/\s+/u);
-  const wordBounded = words.length > 10 ? words.slice(0, 10).join(" ") : value;
-  const graphemes = automaticTitleGraphemes(wordBounded);
-  if (graphemes.length <= AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES) return wordBounded;
-  const prefix = graphemes.slice(0, AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES).join("");
-  const lastWhitespace = prefix.search(/\s+\S*$/u);
-  return (lastWhitespace >= 16 ? prefix.slice(0, lastWhitespace) : prefix).trimEnd();
-}
-function normalizeAutomaticSessionTitle(value) {
-  const firstLine = value.replace(/[\u0000-\u001f\u007f-\u009f]+/gu, "\n").split(/\n+/u).map((line) => line.trim()).find(Boolean);
-  if (!firstLine || !hasVisibleAutomaticTitleContent(firstLine) || containsSensitiveAutomaticTitleValue(firstLine)) {
-    return null;
-  }
-  let title = stripAutomaticTitleBoilerplate(firstLine).replace(/\s+/gu, " ").replace(/[\s.!?,;:\-–—]+$/u, "").trim();
-  if (!title || !hasVisibleAutomaticTitleContent(title) || containsSensitiveAutomaticTitleValue(title)) {
-    return null;
-  }
-  title = boundAutomaticTitle(title).replace(/[\s.!?,;:\-–—]+$/u, "").trim();
-  if (!title || !hasVisibleAutomaticTitleContent(title)) return null;
-  return title;
-}
-
 // src/agent-topology.ts
 import { z as z15 } from "zod";
 
@@ -6238,10 +6030,12 @@ var AGENT_AUTHORED_COMPANY_PROFILE_SCALAR_MAX_CHARS = 400;
 var AGENT_AUTHORED_COMPANY_PROFILE_ENTRY_MAX_CHARS = 200;
 var AGENT_AUTHORED_COMPANY_PROFILE_CONTENT_MAX_UTF8_BYTES = 4096;
 var AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_TOO_LONG_MESSAGE = `A workspace rule is composed verbatim into the prompt of every session it applies to (every session for a global charter or policy, every session bound to the role for a role policy), for as long as it stays active. Keep it under ${AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_MAX_CHARS} characters: one rule, imperative, no numbered procedure. Split unrelated rules into separate entries.`;
-var AGENT_AUTHORED_PREFERENCE_CONTENT_TOO_LONG_MESSAGE = `A Skill is durable Agent Knowledge that agents retrieve on demand, so its length is retrieval cost rather than standing prompt cost: only its short title and description are composed into every session prompt. Keep it under ${AGENT_AUTHORED_PREFERENCE_CONTENT_MAX_CHARS} characters: state the preference plainly, no numbered procedure and no examples. Put procedure in a Document or Skill and reference it instead.`;
+var AGENT_AUTHORED_PREFERENCE_CONTENT_TOO_LONG_MESSAGE = `A Skill is durable Agent Knowledge that agents retrieve on demand, so its length is retrieval cost rather than standing prompt cost: only its short title and description are composed into every session prompt. Keep it under ${AGENT_AUTHORED_PREFERENCE_CONTENT_MAX_CHARS} characters: state the trigger and outcome plainly, include only the necessary procedure, checks, and exceptions, and remove background, repeated guidance, and decorative examples.`;
 var AGENT_AUTHORED_COMPANY_PROFILE_TOO_LONG_MESSAGE = `Organization identity and mission are mandatory prompt context in every root session across the organization. Keep each under ${AGENT_AUTHORED_COMPANY_PROFILE_SCALAR_MAX_CHARS} characters: one concise descriptive statement, no products, customers, goals, constraints, procedure, or marketing copy. Those details belong in organization Documents and are retrieved as evidence when relevant.`;
 var AGENT_AUTHORED_REMEMBER_CONTENT_TOO_LONG_MESSAGE = `Remembered content is bounded by where it lands: a mandatory workspace rule at most ${AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_MAX_CHARS} characters because it is composed into every session prompt it applies to, a preference at most ${AGENT_AUTHORED_PREFERENCE_CONTENT_MAX_CHARS}, a Knowledge fact at most 4000. Write one imperative statement in 1-3 sentences, split unrelated entries, and keep procedure in a Document or Skill that the entry references.`;
-var AGENT_AUTHORED_DURABLE_TEXT_STYLE = "Durable text is prompt cost, not a place to be thorough: write one imperative statement in 1-3 sentences, with no numbered steps, no examples, no rationale and no restating of defaults. Prefer several small entries over one long one, and keep procedure in a Document or Skill that the rule references instead of inlining it.";
+var AGENT_AUTHORED_INSTRUCTION_POLICY_STYLE = "Write the shortest complete imperative rule in 1-3 sentences, with no numbered procedure, examples, rationale, or restated defaults. Split unrelated rules, and move conditional procedure into a Skill.";
+var AGENT_AUTHORED_SKILL_STYLE = "Write one focused Skill with a clear trigger and outcome. Include only the prerequisites, necessary steps, verification, and important failure handling an agent needs to execute it; omit background, repetition, generic advice, and decorative examples. Split unrelated workflows into separate Skills.";
+var AGENT_AUTHORED_DURABLE_TEXT_STYLE = AGENT_AUTHORED_INSTRUCTION_POLICY_STYLE;
 function agentAuthoredDurableTextTooLongMessage(input) {
   const subject = input.kind === "instruction_policy" ? "This rule is" : "This preference is";
   const limit = input.kind === "instruction_policy" ? AGENT_AUTHORED_INSTRUCTION_POLICY_CONTENT_TOO_LONG_MESSAGE : AGENT_AUTHORED_PREFERENCE_CONTENT_TOO_LONG_MESSAGE;
@@ -6448,6 +6242,19 @@ var CompanyProfileMutationResponse = z18.object({
 });
 var COMPANY_PROFILE_AGENT_APPROVE_OPTION = "activate";
 var COMPANY_PROFILE_AGENT_REJECT_OPTION = "skip";
+var CompanyProfileAgentPolicyMode = z18.enum(["off", "suggest", "automatic"]);
+var CompanyProfileAgentPolicy = z18.object({
+  organizationId: z18.string().uuid(),
+  mode: CompanyProfileAgentPolicyMode,
+  version: z18.number().int().nonnegative(),
+  updatedAt: z18.string().datetime({ offset: true }),
+  changed: z18.boolean().optional()
+});
+var UpdateCompanyProfileAgentPolicyRequest = z18.object({
+  mode: CompanyProfileAgentPolicyMode,
+  expectedVersion: z18.number().int().nonnegative(),
+  operationId: z18.string().uuid()
+}).strict();
 var CompanyProfileAgentAttempt = z18.object({
   accountId: z18.string().uuid(),
   workspaceId: z18.string().uuid(),
@@ -6466,15 +6273,29 @@ var CompanyProfileAgentHumanInputPrompt = z18.object({
   questions: z18.array(z18.lazy(() => HumanInputQuestion)).length(1),
   allowSkip: z18.literal(false)
 });
-var CompanyProfileAgentProposalReceipt = z18.object({
+var CompanyProfileAgentReviewRequiredReceipt = z18.object({
   status: z18.literal("confirmation_required"),
   operationId: z18.string().uuid(),
   proposalReceiptId: z18.string().uuid(),
   revision: CompanyProfileRevision,
+  policyMode: z18.literal("suggest"),
   humanInput: CompanyProfileAgentHumanInputPrompt,
   confirmWith: z18.literal("company_profile_confirm"),
   replayed: z18.boolean()
 });
+var CompanyProfileAgentAutomaticActivationReceipt = z18.object({
+  status: z18.literal("activated"),
+  operationId: z18.string().uuid(),
+  proposalReceiptId: z18.string().uuid(),
+  automaticActivationReceiptId: z18.string().uuid(),
+  policyMode: z18.literal("automatic"),
+  mutation: CompanyProfileMutationResponse,
+  replayed: z18.boolean()
+});
+var CompanyProfileAgentProposalReceipt = z18.discriminatedUnion("status", [
+  CompanyProfileAgentReviewRequiredReceipt,
+  CompanyProfileAgentAutomaticActivationReceipt
+]);
 var CompanyProfileAgentConfirmRequest = z18.object({
   operationId: z18.string().uuid(),
   proposalReceiptId: z18.string().uuid(),
@@ -9118,9 +8939,7 @@ var FIRST_PARTY_IN_PROCESS_TOOL_NAME_SET = new Set(
   FIRST_PARTY_IN_PROCESS_TOOL_NAMES
 );
 var FIRST_PARTY_COMPATIBILITY_ONLY_TOOL_NAMES = [
-  "slack_bot_post_message",
-  "memory_save",
-  "memory_correct"
+  "slack_bot_post_message"
 ];
 var FIRST_PARTY_COMPATIBILITY_ONLY_TOOL_NAME_SET = new Set(
   FIRST_PARTY_COMPATIBILITY_ONLY_TOOL_NAMES
@@ -9139,11 +8958,7 @@ var EDITABLE_ARTIFACT_MCP_CODEMODE_PATHS = {
   editable_artifact_export_status: ["artifacts", "exportStatus"]
 };
 var DEFAULT_FIRST_PARTY_MCP_TOOLS = FIRST_PARTY_MCP_TOOL_NAMES.filter(
-  (name) => (
-    // Memory V1 writes are retired entirely; `remember` and task-note
-    // promotion own durable agent writes.
-    name !== "memory_save" && name !== "memory_correct" && !name.startsWith("social_") && !name.startsWith("x_") && !name.startsWith("reddit_") && !name.startsWith("slack_bot_") && !name.startsWith("fiken_") && !name.startsWith("atlassian_")
-  )
+  (name) => !name.startsWith("social_") && !name.startsWith("x_") && !name.startsWith("reddit_") && !name.startsWith("slack_bot_") && !name.startsWith("fiken_") && !name.startsWith("atlassian_")
 );
 function prefixedMcpToolName(registryId2, toolName) {
   return `${registryId2}__${toolName}`;
@@ -10433,6 +10248,20 @@ var CreateWorkspaceRequest = z30.object({
   // the deployment default template.
   agentInstructions: z30.string().min(1).nullable().optional()
 });
+var EnsureWorkspaceRequest = z30.object({
+  accountId: z30.string().uuid(),
+  externalSource: z30.string().trim().min(1).max(200),
+  externalId: z30.string().trim().min(1).max(1024),
+  name: z30.string().trim().min(1).max(200),
+  slug: z30.string().trim().min(1).max(200).optional(),
+  // White-label persona override for this workspace's agent. null/omitted uses
+  // the deployment default template.
+  agentInstructions: z30.string().min(1).nullable().optional()
+}).strict();
+var EnsureWorkspaceResponse = z30.object({
+  workspace: Workspace,
+  created: z30.boolean()
+}).strict();
 var UpdateWorkspaceRequest = z30.object({
   name: z30.string().min(1).optional(),
   slug: z30.string().min(1).nullable().optional(),
@@ -10465,6 +10294,11 @@ var CreateApiKeyResponse = z30.object({
   apiKey: ApiKey,
   token: z30.string().min(1)
 });
+var CreateOrganizationApiKeyRequest = z30.object({
+  name: z30.string().trim().min(1).max(200),
+  description: z30.string().trim().min(1).max(500).optional(),
+  expiresAt: z30.string().datetime({ offset: true }).optional()
+}).strict();
 var WorkspaceMember = z30.object({
   subjectId: z30.string().min(1),
   subjectLabel: z30.string().nullable(),
@@ -10475,10 +10309,20 @@ var WorkspaceMember = z30.object({
 var ListWorkspaceMembersResponse = z30.object({
   members: z30.array(WorkspaceMember)
 });
+var WorkspaceMemberCandidate = z30.object({
+  organizationMembershipId: z30.string().uuid(),
+  subjectId: z30.string().min(1),
+  name: z30.string().min(1).max(1024).nullable(),
+  email: z30.string().email().max(320).nullable(),
+  organizationRole: z30.enum(["owner", "admin", "member"])
+});
+var ListWorkspaceMemberCandidatesResponse = z30.object({
+  members: z30.array(WorkspaceMemberCandidate).max(1e3)
+});
 var AddWorkspaceMemberRequest = z30.object({
-  // Resolved against the managed (Better Auth) users; email invites for
-  // not-yet-registered users are deferred, so an unknown email returns 404.
-  email: z30.string().email(),
+  // The candidate inventory exposes this opaque organization-local identifier.
+  // Organization invitations stay in the organization-admin lifecycle.
+  organizationMembershipId: z30.string().uuid(),
   role: z30.string().min(1).optional(),
   permissions: z30.array(Permission)
 });
@@ -13352,19 +13196,89 @@ function renderSessionSystemUpdateBatch(updates) {
     })
   ].join("\n");
 }
-function sessionSystemUpdateBatchHistoryItem(updates, goalSnapshot) {
+var SCHEDULED_OCCURRENCE_TASK_LABEL = "[OpenGeni scheduled task occurrence]";
+function renderScheduledOccurrenceTaskBatch(updates) {
+  if (updates.length === 0 || updates.some((update) => update.kind !== "scheduled_occurrence")) {
+    return null;
+  }
+  const occurrences = updates.map((update) => {
+    const parsed = SessionSystemUpdatePayload.safeParse(update.payload);
+    if (!parsed.success || parsed.data.type !== "scheduled_occurrence" || parsed.data.scheduledTaskRunId !== update.sourceId) {
+      return null;
+    }
+    return { update, payload: parsed.data };
+  });
+  if (occurrences.some((occurrence) => occurrence === null)) return null;
+  const introduction = occurrences.length === 1 ? "A new scheduled occurrence has started. Execute the instructions below for this occurrence now." : `${occurrences.length} new scheduled occurrences have started. Execute every instruction set below for this turn now.`;
+  return [
+    SCHEDULED_OCCURRENCE_TASK_LABEL,
+    introduction,
+    "The scheduled instructions below are the task for this turn. Earlier completed goals, occurrences, conversation, and tool outputs are historical context and do not complete this occurrence. When the task depends on mutable external state, query that state during this occurrence instead of reusing an earlier result.",
+    ...occurrences.flatMap((occurrence, index) => {
+      if (!occurrence) return [];
+      return [
+        "",
+        ...occurrences.length > 1 ? [`Occurrence ${index + 1}:`] : [],
+        `Scheduled task ID: ${occurrence.payload.scheduledTaskId}`,
+        `Scheduled task run ID: ${occurrence.payload.scheduledTaskRunId}`,
+        `Update ID: ${occurrence.update.id}`,
+        "Instructions:",
+        occurrence.payload.text
+      ];
+    })
+  ].join("\n");
+}
+function sessionSystemUpdateBatchHistoryItem(updates, goalSnapshot, options = {}) {
   const goalContext = renderSessionGoalContext(goalSnapshot);
+  const scheduledTask = options.promoteScheduledOccurrenceToUser ? renderScheduledOccurrenceTaskBatch(updates) : null;
   return {
     type: "message",
-    role: "system",
+    role: scheduledTask ? "user" : "system",
     content: [
       ...goalContext ? [`${SESSION_GOAL_CONTEXT_LABEL}
 ${goalContext}`] : [],
-      renderSessionSystemUpdateBatch(updates)
+      scheduledTask ?? renderSessionSystemUpdateBatch(updates)
     ].join("\n\n")
   };
 }
 var VariableSetVariableName = z30.string().regex(/^[A-Z][A-Z0-9_]*$/).max(128);
+var VARIABLE_SET_RESERVED_EXACT_NAMES = [
+  "HOME",
+  "PATH",
+  "SHELL",
+  "USER",
+  "LOGNAME",
+  "TMPDIR",
+  "IFS",
+  "ENV",
+  "BASH_ENV",
+  "NODE_OPTIONS",
+  "PYTHONPATH",
+  "PYTHONSTARTUP",
+  "PERL5OPT",
+  "PERL5LIB",
+  "GH_TOKEN",
+  "GITHUB_TOKEN",
+  "GITLAB_TOKEN",
+  "AZURE_DEVOPS_EXT_PAT",
+  "GIT_ASKPASS",
+  "GIT_TERMINAL_PROMPT"
+];
+var VARIABLE_SET_RESERVED_PREFIXES = [
+  "OPENGENI_",
+  "GIT_CONFIG_",
+  "GIT_AUTHOR_",
+  "GIT_COMMITTER_",
+  "LD_",
+  "DYLD_"
+];
+function variableSetVariableNameReservation(name) {
+  if (VARIABLE_SET_RESERVED_EXACT_NAMES.includes(name)) {
+    return { kind: "exact", value: name };
+  }
+  const prefix = VARIABLE_SET_RESERVED_PREFIXES.find((candidate) => name.startsWith(candidate));
+  return prefix ? { kind: "prefix", value: prefix } : null;
+}
 function withVariableSetIdAlias(shape, options = {}) {
   return z30.preprocess(
     (input) => {
@@ -13949,15 +13863,16 @@ function scheduledTaskBoundedString(maxBytes, label) {
     }
   });
 }
-var ScheduledTaskNameInput = /* @__PURE__ */ scheduledTaskBoundedString(
-  SCHEDULED_TASK_NAME_MAX_BYTES,
-  "scheduled task name"
-);
+var ScheduledTaskNameInput = /* @__PURE__ */ scheduledTaskBoundedString(SCHEDULED_TASK_NAME_MAX_BYTES, "scheduled task name");
 var ScheduledTaskMetadataInput = /* @__PURE__ */ scheduledTaskBoundedJsonObject(
   SCHEDULED_TASK_METADATA_MAX_BYTES,
   "scheduled task metadata"
 );
 function scheduledTaskAgentConfigShape(bounded) {
+  const machineTarget = z30.object({
+    targetSandboxId: z30.string().uuid(),
+    workingDir: bounded ? z30.string().trim().min(1).max(4096).optional() : z30.string().min(1).optional()
+  }).strict();
   return {
     prompt: bounded ? scheduledTaskBoundedString(SCHEDULED_TASK_PROMPT_MAX_BYTES, "scheduled task prompt") : z30.string().min(1),
     resources: bounded ? z30.array(ResourceRef).max(SCHEDULED_TASK_RESOURCE_MAX_COUNT).default([]) : z30.array(ResourceRef).default([]),
@@ -13970,6 +13885,10 @@ function scheduledTaskAgentConfigShape(bounded) {
     model: bounded ? scheduledTaskBoundedString(512, "scheduled task model").optional() : z30.string().min(1).optional(),
     reasoningEffort: ReasoningEffort.optional(),
     sandboxBackend: SandboxBackend.optional(),
+    // Connected Machines are a concrete execution target, not a generic
+    // sandbox backend. Persist the exact machine + optional cwd so every
+    // generated session can seed its active route before its first turn.
+    machineTarget: machineTarget.optional(),
     goal: GoalSpec.optional(),
     // Incident telemetry is the only special execution class. Omission keeps
     // every existing task on the byte-compatible ordinary dispatch path.
@@ -13998,6 +13917,20 @@ function refineScheduledTaskAgentConfig(value, context) {
 }
 var ScheduledTaskAgentConfig = /* @__PURE__ */ z30.object(scheduledTaskAgentConfigShape(false)).superRefine(refineScheduledTaskAgentConfig);
 var ScheduledTaskAgentConfigInput = /* @__PURE__ */ z30.object(scheduledTaskAgentConfigShape(true)).superRefine((value, context) => {
+  if (value.machineTarget && value.sandboxBackend !== void 0) {
+    context.addIssue({
+      code: "custom",
+      path: ["machineTarget"],
+      message: "machineTarget cannot be combined with sandboxBackend"
+    });
+  }
+  if (value.sandboxBackend === "selfhosted") {
+    context.addIssue({
+      code: "custom",
+      path: ["sandboxBackend"],
+      message: "selfhosted scheduled tasks require machineTarget"
+    });
+  }
   if (scheduledTaskJsonUtf8Bytes(value) > SCHEDULED_TASK_AGENT_CONFIG_MAX_BYTES) {
     context.addIssue({
       code: "custom",
@@ -14250,6 +14183,13 @@ var CreateAgentScheduledTaskRequest = /* @__PURE__ */ withVariableSetIdAlias({
       message: "agentConfig.goal cannot be used with an existing-session target"
     });
   }
+  if (value.runMode === "existing_session" && value.agentConfig.machineTarget) {
+    context.addIssue({
+      code: "custom",
+      path: ["agentConfig", "machineTarget"],
+      message: "machineTarget cannot be used with an existing-session target"
+    });
+  }
 });
 var CreateKnowledgeSourceSyncScheduledTaskRequest = /* @__PURE__ */ z30.object({
   name: z30.string().min(1),
@@ -14315,6 +14255,13 @@ var UpdateScheduledTaskRequest = /* @__PURE__ */ withVariableSetIdAlias({
       message: "agentConfig.goal cannot be used with an existing-session target"
     });
   }
+  if (value.agentConfig?.machineTarget && (value.runMode === "existing_session" || Boolean(value.targetSessionId))) {
+    context.addIssue({
+      code: "custom",
+      path: ["agentConfig", "machineTarget"],
+      message: "machineTarget cannot be used with an existing-session target"
+    });
+  }
 });
 var TriggerScheduledTaskRequest = z30.object({
   triggerId: z30.string().min(1).max(128).optional()
@@ -16245,8 +16192,11 @@ var Session = z30.object({
     queuedDescendants: z30.number().int().nonnegative(),
     attentionDescendants: z30.number().int().nonnegative(),
     pausedDescendants: z30.number().int().nonnegative(),
+    /** Historical failed lifecycle states, including already-reviewed failures. */
     failedDescendants: z30.number().int().nonnegative(),
     unreadDescendants: z30.number().int().nonnegative().optional(),
+    /** Failed descendants whose latest durable event this viewer has not acknowledged. */
+    unreadFailedDescendants: z30.number().int().nonnegative().optional(),
     activelyWorkingDescendants: z30.number().int().nonnegative().optional(),
     /**
      * Earliest moment one of the counted `attentionDescendants` entered
@@ -18368,7 +18318,8 @@ var ClientAuthConfig = z30.discriminatedUnion("mode", [
   z30.object({
     mode: z30.literal("managedSession"),
     session: z30.literal("cookie"),
-    emailVerificationRequired: z30.boolean().default(true)
+    emailVerificationRequired: z30.boolean().default(true),
+    socialProviders: z30.array(z30.enum(["google", "github"])).max(2).default([])
   })
 ]);
 var CapabilityUnavailableReason = z30.enum([
@@ -18461,10 +18412,10 @@ var SessionCapabilities = z30.object({
     codecs: z30.array(z30.enum(["h264-mp4", "vp9-webm"])),
     reason: CapabilityUnavailableReason.nullable()
   }),
-  // The AGENT drives the SAME :0 (xdotool/XTEST + scrot) the human watches; the
-  // human viewer plane is read-only by default (§6). `available` == desktop-
-  // capable backend && computerUseEnabled; `readOnly` reports whether the agent
-  // driver itself is gated to no-op input (v1 default false — the agent clicks).
+  // Deprecated compatibility cell for clients that predate managed
+  // ComputerSession interaction tools. Newly negotiated documents report this
+  // unavailable/read-only with `disabled_by_policy`; the shape remains so older
+  // clients and persisted payloads still parse.
   ComputerUse: z30.object({
     available: z30.boolean(),
     readOnly: z30.boolean(),
@@ -18879,9 +18830,7 @@ var MachineMetricsSeriesResponse = z30.object({
 function defineModelContractSchema(factory) {
   return factory();
 }
-var ModelCapabilitySupportV1 = /* @__PURE__ */ defineModelContractSchema(
-  () => z30.enum(["supported", "unsupported", "unknown"])
-);
+var ModelCapabilitySupportV1 = /* @__PURE__ */ defineModelContractSchema(() => z30.enum(["supported", "unsupported", "unknown"]));
 var ModelCapabilityStateV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z30.object({
     upstream: ModelCapabilitySupportV1,
@@ -19186,6 +19135,9 @@ var ClientConfig = /* @__PURE__ */ defineModelContractSchema(
     models: z30.array(ClientModel).default([]),
     defaultReasoningEffort: ReasoningEffort,
     allowedReasoningEfforts: z30.array(ReasoningEffort).min(1),
+    // Client-safe execution default. The schedule editor uses this to avoid
+    // presenting a targetless "managed" choice on self-hosted deployments.
+    defaultSandboxBackend: SandboxBackend.default("modal"),
     mcpServers: z30.array(
       z30.object({
         id: z30.string(),
@@ -19804,10 +19756,6 @@ export {
   SANDBOX_FILE_ARTIFACT_MAX_BYTES,
   PublishSandboxFileArtifactRequest,
   SandboxFileArtifactReceipt,
-  SESSION_TITLE_MAX_CHARACTERS,
-  AUTOMATIC_SESSION_TITLE_MAX_GRAPHEMES,
-  AUTOMATIC_SESSION_TITLE_FALLBACK,
-  normalizeAutomaticSessionTitle,
   WORK_CLAIM_NAMESPACE_MAX_BYTES,
   WORK_CLAIM_CANONICAL_KEY_MAX_BYTES,
   WORK_CLAIM_DISPLAY_LABEL_MAX_BYTES,
@@ -19903,6 +19851,8 @@ export {
   AGENT_AUTHORED_PREFERENCE_CONTENT_TOO_LONG_MESSAGE,
   AGENT_AUTHORED_COMPANY_PROFILE_TOO_LONG_MESSAGE,
   AGENT_AUTHORED_REMEMBER_CONTENT_TOO_LONG_MESSAGE,
+  AGENT_AUTHORED_INSTRUCTION_POLICY_STYLE,
+  AGENT_AUTHORED_SKILL_STYLE,
   AGENT_AUTHORED_DURABLE_TEXT_STYLE,
   agentAuthoredDurableTextTooLongMessage,
   COMPANY_PROFILE_SCALAR_MAX_CHARS,
@@ -19938,9 +19888,14 @@ export {
   CompanyProfileMutationResponse,
   COMPANY_PROFILE_AGENT_APPROVE_OPTION,
   COMPANY_PROFILE_AGENT_REJECT_OPTION,
+  CompanyProfileAgentPolicyMode,
+  CompanyProfileAgentPolicy,
+  UpdateCompanyProfileAgentPolicyRequest,
   CompanyProfileAgentAttempt,
   CompanyProfileAgentProposalRequest,
   CompanyProfileAgentHumanInputPrompt,
+  CompanyProfileAgentReviewRequiredReceipt,
+  CompanyProfileAgentAutomaticActivationReceipt,
   CompanyProfileAgentProposalReceipt,
   CompanyProfileAgentConfirmRequest,
   CompanyProfileAgentConfirmationReceipt,
@@ -20337,12 +20292,17 @@ export {
   signRelayToken,
   verifyRelayToken,
   CreateWorkspaceRequest,
+  EnsureWorkspaceRequest,
+  EnsureWorkspaceResponse,
   UpdateWorkspaceRequest,
   ApiKey,
   CreateApiKeyRequest,
   CreateApiKeyResponse,
+  CreateOrganizationApiKeyRequest,
   WorkspaceMember,
   ListWorkspaceMembersResponse,
+  WorkspaceMemberCandidate,
+  ListWorkspaceMemberCandidatesResponse,
   AddWorkspaceMemberRequest,
   UpdateWorkspaceMemberRequest,
   SlackUserLinkAccessRequestStatus,
@@ -20654,8 +20614,12 @@ export {
   SessionPendingInputPreview,
   SessionQueueSnapshot,
   renderSessionSystemUpdateBatch,
+  SCHEDULED_OCCURRENCE_TASK_LABEL,
   sessionSystemUpdateBatchHistoryItem,
   VariableSetVariableName,
+  VARIABLE_SET_RESERVED_EXACT_NAMES,
+  VARIABLE_SET_RESERVED_PREFIXES,
+  variableSetVariableNameReservation,
   VariableSetVariableMetadata,
   WorkspaceEnvironmentVariableMetadata,
   VariableSetSecret,
@@ -21132,4 +21096,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-ILB4IYNN.js.map
+//# sourceMappingURL=chunk-AWNGBY5I.js.map