@opengeni/contracts 2.9.2 → 2.11.1-canary.0

package/dist/atlassian.js

@@ -17,26 +17,26 @@ import {
   AtlassianSyncCadence,
   SaveAtlassianSourcesRequest,
   atlassianScopesAllowRead
-} from "./chunk-AWNGBY5I.js";
-import "./chunk-WYBDERIY.js";
-import "./chunk-MRWYRAS5.js";
-import "./chunk-4IVHBXRI.js";
-import "./chunk-CM6BMECR.js";
-import "./chunk-JUFK3T4Q.js";
+} from "./chunk-6HOHS44G.js";
 import "./chunk-YBW5JSA3.js";
-import "./chunk-N6GRVXAJ.js";
+import "./chunk-NPBM4QSK.js";
+import "./chunk-CM6BMECR.js";
+import "./chunk-MRWYRAS5.js";
 import "./chunk-3SIZGL3O.js";
+import "./chunk-M5ZGRVIQ.js";
+import "./chunk-BCS7WHCK.js";
+import "./chunk-WYBDERIY.js";
+import "./chunk-7ABONTXE.js";
 import "./chunk-NVJMJWLL.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-7RMTKFJW.js";
+import "./chunk-7Q6HPDY2.js";
 import "./chunk-Y3KNXVTD.js";
+import "./chunk-TXTQIYCV.js";
 import "./chunk-RIY7GYQS.js";
 import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-TXTQIYCV.js";
 import "./chunk-PX3VCKAU.js";
-import "./chunk-BCS7WHCK.js";
-import "./chunk-M5ZGRVIQ.js";
+import "./chunk-JUFK3T4Q.js";
 export {
   ATLASSIAN_CREDENTIAL_LABEL,
   ATLASSIAN_CREDENTIAL_ROLE,

package/dist/{chunk-AWNGBY5I.js → chunk-6HOHS44G.js}

@@ -1,9 +1,3 @@
-import {
-  ConnectorDocumentDestination
-} from "./chunk-WYBDERIY.js";
-import {
-  normalizeAutomaticSessionTitle
-} from "./chunk-4IVHBXRI.js";
 import {
   XaiProviderAccountAuthoritySnapshotV1
 } from "./chunk-CM6BMECR.js";
@@ -14,6 +8,12 @@ import {
   retainedOutputUnavailable,
   validateRetainedOutputEvidence
 } from "./chunk-M5ZGRVIQ.js";
+import {
+  ConnectorDocumentDestination
+} from "./chunk-WYBDERIY.js";
+import {
+  normalizeAutomaticSessionTitle
+} from "./chunk-7ABONTXE.js";
 
 // src/atlassian.ts
 import { z as z31 } from "zod";
@@ -6772,7 +6772,7 @@ var WORKSPACE_LEARNING_POLICY_MAX_SOURCE_OVERRIDES = 256;
 var WORKSPACE_LEARNING_POLICY_SOURCE_KIND_MAX_CHARS = 96;
 var WORKSPACE_LEARNING_POLICY_SOURCE_ID_MAX_CHARS = 1024;
 var WORKSPACE_LEARNING_POLICY_REASON_MAX_CHARS = 4096;
-var WORKSPACE_LEARNING_POLICY_DEFAULT_OFF_REVISION_ID = "workspace-learning-policy:default-off:v1";
+var WORKSPACE_LEARNING_POLICY_DEFAULT_SUGGEST_REVISION_ID = "workspace-learning-policy:default-suggest:v1";
 var WorkspaceLearningMode = z21.enum(["off", "suggest", "automatic"]);
 var WorkspaceLearningOverrideMode = z21.enum(["inherit", "off", "suggest", "automatic"]);
 function normalizeWorkspaceLearningSourceKind(value) {
@@ -6913,7 +6913,7 @@ function resolveWorkspaceLearningPolicyEffectiveMode(snapshot, source) {
     policyRevision: parsedSnapshot.revision,
     activationVersion: parsedSnapshot.activationVersion,
     snapshotId: parsedSnapshot.id,
-    revisionId: parsedSnapshot.revision?.id ?? WORKSPACE_LEARNING_POLICY_DEFAULT_OFF_REVISION_ID,
+    revisionId: parsedSnapshot.revision?.id ?? WORKSPACE_LEARNING_POLICY_DEFAULT_SUGGEST_REVISION_ID,
     snapshotHash: parsedSnapshot.snapshotHash
   });
 }
@@ -7934,6 +7934,16 @@ var CreateOrganizationResponse = z28.object({
   organization: OrganizationSummary,
   workspaceId: z28.string().uuid()
 });
+var CreateAdditionalOrganizationRequest = z28.object({
+  name: z28.string().trim().min(1).max(120),
+  workspaceName: z28.string().trim().min(1).max(120),
+  operationId: z28.string().uuid()
+}).strict();
+var CreateAdditionalOrganizationResponse = z28.object({
+  organization: OrganizationSummary,
+  workspaceId: z28.string().uuid(),
+  personalWorkspaceId: z28.string().uuid()
+});
 var UpdateOrganizationNameRequest = z28.object({
   name: z28.string().trim().min(1).max(120),
   expectedUpdatedAt: z28.string().datetime({ offset: true }),
@@ -9731,8 +9741,8 @@ var WorkspaceSettingsSchema = z30.object({
   slackOrchestrationNotices: WorkspaceSlackOrchestrationNoticeSettings.optional()
 }).passthrough();
 function resolveWorkspaceMemoryEnabled(settings) {
-  const parsed = WorkspaceSettingsSchema.safeParse(settings ?? {});
-  return parsed.success ? parsed.data.memoryEnabled === true : false;
+  const parsed = WorkspaceSettingsSchema.safeParse(settings === void 0 ? {} : settings);
+  return parsed.success ? parsed.data.memoryEnabled !== false : false;
 }
 function resolveWorkspaceSessionDefaults(settings) {
   const parsed = WorkspaceSettingsSchema.safeParse(settings ?? {});
@@ -9813,6 +9823,57 @@ var UpdateWorkspaceModelPolicyRequest = z30.object({
   allowedProviders: z30.array(z30.string().min(1).max(128)).max(64).nullable().optional(),
   allowedModels: z30.array(z30.string().min(1).max(256)).max(256).nullable().optional()
 });
+var WORKSPACE_GATEWAY_CUSTOM_MODEL_UPSTREAM_ID_MAX_LENGTH = 238;
+var CreateWorkspaceGatewayCustomModelRequest = z30.object({
+  operationId: z30.string().uuid(),
+  upstreamModelId: z30.string().max(WORKSPACE_GATEWAY_CUSTOM_MODEL_UPSTREAM_ID_MAX_LENGTH).regex(/^[!-{}-~]+$/),
+  label: z30.string().min(1).max(128).refine((value) => new TextEncoder().encode(value).byteLength <= 128, {
+    message: "label must be at most 128 UTF-8 bytes"
+  }).refine((value) => !/[\r\n|]/u.test(value), {
+    message: "label must not contain newlines or the | field separator"
+  }).optional()
+}).strict();
+var DeleteWorkspaceGatewayCustomModelRequest = z30.object({
+  expectedVersion: z30.number().int().positive(),
+  operationId: z30.string().uuid()
+}).strict();
+var WorkspaceGatewayCustomModel = z30.object({
+  id: z30.string().uuid(),
+  upstreamModelId: z30.string(),
+  label: z30.string().nullable(),
+  version: z30.number().int().positive(),
+  createdAt: z30.string().datetime(),
+  updatedAt: z30.string().datetime()
+});
+var WorkspaceGatewayCustomModelsResponse = z30.object({
+  models: z30.array(WorkspaceGatewayCustomModel)
+});
+var CreateWorkspaceOpenRouterCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+var DeleteWorkspaceOpenRouterCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+var WorkspaceOpenRouterCustomModel = WorkspaceGatewayCustomModel;
+var WorkspaceOpenRouterCustomModelsResponse = z30.object({
+  models: z30.array(WorkspaceOpenRouterCustomModel)
+});
+var CreateOrganizationProviderCustomModelRequest = CreateWorkspaceGatewayCustomModelRequest;
+var DeleteOrganizationProviderCustomModelRequest = DeleteWorkspaceGatewayCustomModelRequest;
+var OrganizationProviderCustomModel = WorkspaceGatewayCustomModel;
+var OrganizationProviderCustomModelsResponse = z30.object({
+  models: z30.array(OrganizationProviderCustomModel)
+});
+var OrganizationModelProviderKind = z30.enum(["vercel_gateway", "openrouter"]);
+var OrganizationModelProviderConnectionResponse = z30.object({
+  providerKind: OrganizationModelProviderKind,
+  status: z30.enum(["active", "revoked"]),
+  version: z30.number().int().positive(),
+  createdAt: z30.string().datetime(),
+  updatedAt: z30.string().datetime()
+});
+var UpsertOrganizationModelProviderConnectionRequest = z30.object({
+  operationId: z30.string().uuid(),
+  expectedVersion: z30.number().int().nonnegative().optional(),
+  apiKey: z30.string().trim().min(1).max(8192)
+}).strict();
+var RevokeOrganizationModelProviderConnectionRequest = z30.object({ operationId: z30.string().uuid(), expectedVersion: z30.number().int().positive() }).strict();
 var turnInitiatorIdentityFields = {
   subjectId: z30.string().min(1),
   /** Immutable display snapshot; never an authorization input. */
@@ -10466,7 +10527,10 @@ var InsightsModelUsageRow = z30.object({
   creditUsd: z30.number().nonnegative(),
   /** Hypothetical provider-rate USD; never an OpenGeni charge. */
   estimatedProviderUsd: z30.number().nonnegative(),
-  estimatedProviderCostKnownCalls: z30.number().int().nonnegative()
+  estimatedProviderCostKnownCalls: z30.number().int().nonnegative(),
+  /** OpenGeni credit price at the captured rate, whether or not credits paid for the call. */
+  equivalentCreditUsd: z30.number().nonnegative(),
+  equivalentCreditCostKnownCalls: z30.number().int().nonnegative()
 });
 var InsightsSeriesPoint = z30.object({
   label: z30.string().min(1),
@@ -10475,6 +10539,9 @@ var InsightsSeriesPoint = z30.object({
   /** UTC hour/day-bucketed hypothetical provider-rate USD for calls with captured pricing. */
   estimatedProviderUsd: z30.number().nonnegative(),
   estimatedProviderCostKnownCalls: z30.number().int().nonnegative(),
+  /** UTC hour/day-bucketed equivalent OpenGeni credit price for calls with captured pricing. */
+  equivalentCreditUsd: z30.number().nonnegative(),
+  equivalentCreditCostKnownCalls: z30.number().int().nonnegative(),
   warmSeconds: z30.number().nonnegative(),
   inputTokens: z30.number().nonnegative(),
   outputTokens: z30.number().nonnegative(),
@@ -10503,6 +10570,8 @@ var InsightsSpendDriver = z30.object({
   creditUsd: z30.number().nonnegative(),
   estimatedProviderUsd: z30.number().nonnegative(),
   estimatedProviderCostKnownCalls: z30.number().int().nonnegative(),
+  equivalentCreditUsd: z30.number().nonnegative(),
+  equivalentCreditCostKnownCalls: z30.number().int().nonnegative(),
   tokens: z30.number().nonnegative(),
   cacheHitPct: z30.number().int().min(0).max(100),
   pctOfCreditUsd: z30.number().int().min(0).max(100),
@@ -10547,6 +10616,8 @@ var InsightsScheduleRow = z30.object({
   creditUsd: z30.number().nonnegative().nullable(),
   estimatedProviderUsd: z30.number().nonnegative().nullable(),
   estimatedProviderCostKnownCalls: z30.number().int().nonnegative().nullable(),
+  equivalentCreditUsd: z30.number().nonnegative().nullable(),
+  equivalentCreditCostKnownCalls: z30.number().int().nonnegative().nullable(),
   tokens: z30.number().nonnegative().nullable(),
   cacheHitPct: z30.number().int().min(0).max(100).nullable(),
   billing: InsightsBillingPath.nullable()
@@ -10572,6 +10643,8 @@ var InsightsModelCallRow = z30.object({
   creditUsd: z30.number().nonnegative(),
   /** Hypothetical provider-rate USD; null when historical pricing is unavailable. */
   estimatedProviderUsd: z30.number().nonnegative().nullable(),
+  /** Equivalent OpenGeni credit price; null when historical pricing is unavailable. */
+  equivalentCreditUsd: z30.number().nonnegative().nullable(),
   pricingSource: InsightsPricingSource.nullable()
 });
 var WorkspaceInsightsSnapshot = z30.object({
@@ -10618,6 +10691,11 @@ var WorkspaceInsightsSnapshot = z30.object({
   priorEstimatedProviderUsd: z30.number().nonnegative(),
   estimatedProviderCostKnownCalls: z30.number().int().nonnegative(),
   priorEstimatedProviderCostKnownCalls: z30.number().int().nonnegative(),
+  /** Equivalent OpenGeni credit price across calls whose historical price was captured. */
+  equivalentCreditUsd: z30.number().nonnegative(),
+  priorEquivalentCreditUsd: z30.number().nonnegative(),
+  equivalentCreditCostKnownCalls: z30.number().int().nonnegative(),
+  priorEquivalentCreditCostKnownCalls: z30.number().int().nonnegative(),
   modelCalls: z30.number().int().nonnegative(),
   priorInputTokens: z30.number().nonnegative(),
   priorTotalTokens: z30.number().nonnegative(),
@@ -10721,6 +10799,8 @@ var McpConnectionResourceScopes = z30.array(McpConnectionResourceScope).min(1).m
 var McpServerConnectionRef = z30.object({
   /** Opaque host or standalone connection identifier. */
   connectionId: z30.string().min(1).optional(),
+  /** Host-owned credential authority; omission keeps OpenGeni's native connection authority. */
+  authoritySource: z30.literal("host").optional(),
   /** Stable provider family (for example github, gitlab, or azure_devops). */
   provider: z30.string().min(1).max(128).optional(),
   /** Provider host or tenant domain. */
@@ -10733,6 +10813,13 @@ var McpServerConnectionRef = z30.object({
   selectedResources: McpConnectionResourceScopes.optional(),
   subjectScope: z30.enum(["workspace", "subject"]).optional()
 }).strict().superRefine((reference, context) => {
+  if (reference.authoritySource === "host" && !reference.connectionId) {
+    context.addIssue({
+      code: "custom",
+      message: "host authority requires connectionId",
+      path: ["connectionId"]
+    });
+  }
   if (!reference.selectedResources) return;
   if (!reference.connectionId) {
     context.addIssue({
@@ -13984,6 +14071,10 @@ var ScheduledTaskRunAcceptedExecution = /* @__PURE__ */ z30.object({
   resolvedModel: z30.string().min(1),
   resolvedReasoningEffort: ReasoningEffort,
   resolvedLatencyMode: LatencyMode,
+  /** Secret-safe TurnExecutionPolicyV1 accepted with this occurrence. Kept
+   * structurally open here because the canonical policy schema is declared
+   * later in this package; consumers must parse it with TurnExecutionPolicyV1. */
+  turnExecutionPolicy: z30.unknown().optional(),
   resolvedSandboxBackend: SandboxBackend,
   resolvedSandboxOs: SandboxOs,
   resolvedTools: z30.array(ToolRef).max(SCHEDULED_TASK_TOOL_MAX_COUNT),
@@ -14540,6 +14631,12 @@ var CapabilityPackSkill = z30.object({
     message: "skill name must be a single path segment of letters, digits, '.', '_' or '-'"
   }),
   description: z30.string().min(1).max(2048).optional(),
+  // Workspace-managed Skills are available to every session in the
+  // workspace. Session-selected Skills remain installed and inspectable, but
+  // enter model context only when their immutable definition is attached to
+  // a session explicitly. This is the hard contamination boundary for Packs
+  // that guide implementation agents rather than customer-facing agents.
+  activationMode: z30.enum(["workspace_managed", "session_selected"]).optional(),
   files: z30.array(CapabilityPackSkillFile).min(1).max(64)
 }).superRefine((skill, ctx) => {
   const seen = /* @__PURE__ */ new Set();
@@ -14561,7 +14658,9 @@ var CapabilityPackSkill = z30.object({
     });
   }
 });
-var SessionSkill = CapabilityPackSkill;
+var SessionSkill = CapabilityPackSkill.transform(
+  ({ activationMode: _activationMode, ...skill }) => skill
+);
 var SessionSkills = z30.array(SessionSkill).max(32).transform((skills, ctx) => {
   const selected = /* @__PURE__ */ new Map();
   for (const skill of skills) {
@@ -15218,6 +15317,10 @@ function compareDescending(left, right) {
   return left > right ? -1 : 1;
 }
 var ConnectionCredentialBundle = z30.record(z30.string(), z30.unknown());
+var VERCEL_AI_GATEWAY_CREDENTIAL_OPERATION_ID_METADATA_KEY = "vercelAiGatewayCredentialOperationId";
+var VERCEL_AI_GATEWAY_CREDENTIAL_OPERATION_DIGEST_METADATA_KEY = "vercelAiGatewayCredentialOperationDigest";
+var OPENROUTER_CREDENTIAL_OPERATION_ID_METADATA_KEY = "openRouterCredentialOperationId";
+var OPENROUTER_CREDENTIAL_OPERATION_DIGEST_METADATA_KEY = "openRouterCredentialOperationDigest";
 var CreateConnectionRequest = z30.object({
   providerDomain: z30.string().min(1),
   kind: ConnectionKind,
@@ -15227,7 +15330,8 @@ var CreateConnectionRequest = z30.object({
   credential: ConnectionCredentialBundle,
   grantedScopes: z30.array(z30.string().min(1)).default([]),
   expiresAt: z30.string().datetime({ offset: true }).nullable().optional(),
-  metadata: z30.record(z30.string(), z30.unknown()).default({})
+  metadata: z30.record(z30.string(), z30.unknown()).default({}),
+  operationId: z30.string().uuid().optional()
 });
 var OpenGeniSlackBotInstallRequest = z30.object({
   connectionId: z30.string().uuid().optional()
@@ -15268,7 +15372,9 @@ var UpdateConnectionRequest = z30.object({
   credential: ConnectionCredentialBundle.optional(),
   grantedScopes: z30.array(z30.string().min(1)).optional(),
   expiresAt: z30.string().datetime({ offset: true }).nullable().optional(),
-  metadata: z30.record(z30.string(), z30.unknown()).optional()
+  metadata: z30.record(z30.string(), z30.unknown()).optional(),
+  expectedVersion: z30.number().int().positive().optional(),
+  operationId: z30.string().uuid().optional()
 });
 var ConnectionResponse = z30.object({
   connection: ConnectionMetadata
@@ -15417,10 +15523,13 @@ var CapabilityCatalogItem = z30.object({
   /** @deprecated Compatibility explanation paired with enabled. */
   enabledReason: z30.string().nullable().default(null),
   // The non-secret connection binding stored with an enabled installation.
-  // Workspace refs retain an exact row id. Subject refs deliberately omit it:
-  // each caller resolves their own visible row by provider/kind at runtime.
+  // Native workspace refs retain an exact row id. Native subject refs omit it
+  // so each caller resolves their own row. The first-party catalog projects a
+  // host-owned installation as null for old-browser safety; the schema remains
+  // tolerant of additive host projections from embedding-specific catalogs.
   connectionRef: z30.object({
     connectionId: z30.string().min(1).optional(),
+    authoritySource: z30.literal("host").optional(),
     providerDomain: z30.string().min(1),
     kind: z30.string().min(1),
     subjectScope: z30.enum(["workspace", "subject"]).optional()
@@ -16605,6 +16714,15 @@ function resolveSessionEventTypeFilters(input) {
   for (const type of excluded) included.delete(type);
   return { includeTypes: [...included], excludeTypes: [...excluded] };
 }
+var ToolAuthNeededReason = z30.enum([
+  "missing_connection",
+  "expired",
+  "insufficient_scope",
+  "refresh_failed",
+  "personal_authority_unavailable",
+  "unsupported_auth",
+  "resource_scope_unavailable"
+]);
 var ToolAuthNeededPayload = z30.object({
   serverId: z30.string().min(1),
   toolName: z30.string().min(1).nullable().optional(),
@@ -16613,15 +16731,16 @@ var ToolAuthNeededPayload = z30.object({
   // Embedded hosts may use an opaque connection identity; never assume an
   // OpenGeni UUID on the public event wire.
   connectionId: z30.string().min(1).nullable().optional(),
-  reason: z30.enum([
-    "missing_connection",
-    "expired",
-    "insufficient_scope",
-    "refresh_failed",
-    "personal_authority_unavailable",
-    "unsupported_auth",
-    "resource_scope_unavailable"
-  ]),
+  /** The failed binding is owned by the embedding host, not OpenGeni's connection broker. */
+  authoritySource: z30.literal("host").optional(),
+  /**
+   * Legacy-compatible reason. Host-owned event writers pin this to
+   * unsupported_auth so a pre-host-authority browser cannot launch native
+   * OAuth for the opaque id.
+   */
+  reason: ToolAuthNeededReason,
+  /** Exact host recovery reason consumed by host-aware clients. */
+  hostReason: ToolAuthNeededReason.optional(),
   scopes: z30.array(z30.string().min(1)).optional(),
   resource: z30.string().min(1).optional(),
   selectedResources: McpConnectionResourceScopes.optional(),
@@ -16640,6 +16759,29 @@ var ToolAuthNeededPayload = z30.object({
     rationale: z30.string().min(1).max(2e3),
     requiredVariables: z30.array(VariableSetVariableName).max(64).default([])
   }).optional()
+}).superRefine((payload, context) => {
+  if (payload.authoritySource === "host") {
+    if (payload.reason !== "unsupported_auth") {
+      context.addIssue({
+        code: "custom",
+        message: "host auth-needed events require the legacy-safe unsupported_auth reason",
+        path: ["reason"]
+      });
+    }
+    if (!payload.hostReason) {
+      context.addIssue({
+        code: "custom",
+        message: "host auth-needed events require hostReason",
+        path: ["hostReason"]
+      });
+    }
+  } else if (payload.hostReason) {
+    context.addIssue({
+      code: "custom",
+      message: "hostReason is reserved for host-owned auth-needed events",
+      path: ["hostReason"]
+    });
+  }
 });
 var CredentialAuthNeededPayload = z30.object({
   credentialClass: z30.literal("run"),
@@ -17226,6 +17368,8 @@ var SessionEvent = z30.object({
   workspaceId: z30.string().uuid(),
   sessionId: z30.string().uuid(),
   sequence: z30.number().int().positive(),
+  /** Server-owned durable high-water mark for a synthetic compact event. */
+  coveredThrough: z30.number().int().positive().optional(),
   type: SessionEventType,
   payload: z30.unknown().default({}),
   occurredAt: z30.string(),
@@ -17574,6 +17718,8 @@ function boundSessionEvent(event, options = {}) {
   const turnGeneration = canonicalSessionEventGeneration(source.turnGeneration);
   const turnAttemptId = canonicalOptionalSessionEventUuid(source.turnAttemptId);
   const duplicateOfEventId = canonicalOptionalSessionEventUuid(source.duplicateOfEventId);
+  const rawCoveredThrough = source.coveredThrough.readable ? source.coveredThrough.value : void 0;
+  const coveredThrough = typeof rawCoveredThrough === "number" && Number.isSafeInteger(rawCoveredThrough) && rawCoveredThrough >= sequence ? rawCoveredThrough : void 0;
   const envelopeFields = [
     sessionEventCustomSerializerProjection(event),
     sessionEventAdditionalTopLevelFieldProjection(event),
@@ -17601,6 +17747,12 @@ function boundSessionEvent(event, options = {}) {
       duplicateReason,
       source.duplicateReason.readable
     ) : null,
+    !source.coveredThrough.readable || rawCoveredThrough !== coveredThrough ? sessionEventEnvelopeFieldProjection(
+      "coveredThrough",
+      rawCoveredThrough,
+      coveredThrough,
+      source.coveredThrough.readable
+    ) : null,
     ...sessionEventCanonicalFieldProjections(source, {
       id,
       workspaceId,
@@ -17636,6 +17788,7 @@ function boundSessionEvent(event, options = {}) {
     workspaceId,
     sessionId,
     sequence,
+    ...coveredThrough === void 0 ? {} : { coveredThrough },
     type: typeIsSafe ? rawType : "session.event.envelope_omitted",
     payload,
     occurredAt,
@@ -17653,6 +17806,7 @@ function boundSessionEvent(event, options = {}) {
     workspaceId,
     sessionId,
     sequence,
+    ...coveredThrough === void 0 ? {} : { coveredThrough },
     type: "session.event.envelope_omitted",
     payload: boundSessionEventPayload(
       {
@@ -17716,6 +17870,7 @@ var SESSION_EVENT_OWN_DATA_FIELDS = [
   "workspaceId",
   "sessionId",
   "sequence",
+  "coveredThrough",
   "type",
   "payload",
   "occurredAt",
@@ -17891,6 +18046,13 @@ var CreateSessionRequest = withVariableSetIdAlias(
     // Inline skills are fixed onto the session. Child omission inherits the
     // trusted parent's selection; an explicit array, including [], wins.
     skills: SessionSkills.default([]),
+    // Immutable workspace Skill identities to copy onto this session at
+    // creation. This is the explicit opt-in path for session-selected Pack
+    // Skills: installation alone never exposes them to model context. Child
+    // omission still inherits the parent's already-materialized session Skills.
+    installedSkillIds: z30.array(z30.string().min(1).max(512)).max(32).refine((ids) => new Set(ids).size === ids.length, {
+      message: "installed Skill identities must be unique"
+    }).optional(),
     // The same child omission rule applies to selected MCP tool refs. Top-level
     // omission still applies workspace-default capability MCP tools; explicit []
     // suppresses those defaults (the first-party OpenGeni server remains added).
@@ -18885,6 +19047,10 @@ var ModelCredentialSourceV1 = /* @__PURE__ */ defineModelContractSchema(
     z30.object({
       kind: z30.literal("workspace_connection"),
       mechanism: z30.literal("api_key")
+    }).strict(),
+    z30.object({
+      kind: z30.literal("organization_connection"),
+      mechanism: z30.literal("api_key")
     }).strict()
   ])
 );
@@ -18897,10 +19063,18 @@ var TurnExecutionCredentialSourceV1 = z30.union([
 ]);
 var ModelBillingAttributionV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z30.object({
-    upstreamPayer: z30.enum(["deployment", "workspace", "connected_subscription"]),
+    upstreamPayer: z30.enum([
+      "deployment",
+      "workspace",
+      "organization",
+      "connected_subscription"
+    ]),
     metering: z30.enum(["opengeni_credits", "external"])
   }).strict()
 );
+var ModelCostClassV1 = /* @__PURE__ */ defineModelContractSchema(
+  () => z30.enum(["free", "credits", "subscription", "workspace", "organization"])
+);
 var TURN_EXECUTION_POLICY_METADATA_KEY = "turnExecutionPolicyV1";
 var TurnExecutionModelSourceV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z30.enum(["explicit", "session", "deployment", "continuation"])
@@ -18997,6 +19171,7 @@ var ModelPricingV1 = /* @__PURE__ */ defineModelContractSchema(
   () => z30.object({
     inputMicrosPerMillionTokens: z30.number().int().nonnegative(),
     cachedInputMicrosPerMillionTokens: z30.number().int().nonnegative().optional(),
+    cacheWriteMicrosPerMillionTokens: z30.number().int().nonnegative().optional(),
     outputMicrosPerMillionTokens: z30.number().int().nonnegative(),
     marginBps: z30.number().int().min(0).max(1e5).optional()
   })
@@ -19022,7 +19197,7 @@ var ClientModel = /* @__PURE__ */ defineModelContractSchema(
     // provider id
     providerLabel: z30.string(),
     api: z30.enum(["responses", "chat"]),
-    source: z30.enum(["opengeni", "codex", "supergrok", "workspace_gateway"]).optional(),
+    source: z30.enum(["opengeni", "codex", "supergrok", "workspace_gateway", "openrouter"]).optional(),
     contextWindowTokens: z30.number().int().positive().optional(),
     // Additive normalized definition metadata. Optional so older server payloads
     // remain parseable; current servers project the complete V1 set.
@@ -19040,6 +19215,7 @@ var ClientModel = /* @__PURE__ */ defineModelContractSchema(
     }).optional(),
     credentialSource: ModelCredentialSourceV1.optional(),
     billing: ModelBillingAttributionV1.optional(),
+    cost: ModelCostClassV1.optional(),
     capabilities: ModelCapabilitiesV1.optional(),
     pricing: ModelPricingScheduleV1.optional(),
     definitionVersion: z30.string().regex(/^sha256:[a-f0-9]{64}$/u).optional()
@@ -19959,7 +20135,7 @@ export {
   WORKSPACE_LEARNING_POLICY_SOURCE_KIND_MAX_CHARS,
   WORKSPACE_LEARNING_POLICY_SOURCE_ID_MAX_CHARS,
   WORKSPACE_LEARNING_POLICY_REASON_MAX_CHARS,
-  WORKSPACE_LEARNING_POLICY_DEFAULT_OFF_REVISION_ID,
+  WORKSPACE_LEARNING_POLICY_DEFAULT_SUGGEST_REVISION_ID,
   WorkspaceLearningMode,
   WorkspaceLearningOverrideMode,
   normalizeWorkspaceLearningSourceKind,
@@ -20105,6 +20281,8 @@ export {
   RevokeOrganizationWorkspaceMemberResponse,
   CreateOrganizationRequest,
   CreateOrganizationResponse,
+  CreateAdditionalOrganizationRequest,
+  CreateAdditionalOrganizationResponse,
   UpdateOrganizationNameRequest,
   OrganizationRetentionPolicy,
   OrganizationRetentionDeletionClaim,
@@ -20267,6 +20445,23 @@ export {
   UpdateWorkspaceSettingsRequest,
   SetWorkspaceDefaultRigRequest,
   UpdateWorkspaceModelPolicyRequest,
+  WORKSPACE_GATEWAY_CUSTOM_MODEL_UPSTREAM_ID_MAX_LENGTH,
+  CreateWorkspaceGatewayCustomModelRequest,
+  DeleteWorkspaceGatewayCustomModelRequest,
+  WorkspaceGatewayCustomModel,
+  WorkspaceGatewayCustomModelsResponse,
+  CreateWorkspaceOpenRouterCustomModelRequest,
+  DeleteWorkspaceOpenRouterCustomModelRequest,
+  WorkspaceOpenRouterCustomModel,
+  WorkspaceOpenRouterCustomModelsResponse,
+  CreateOrganizationProviderCustomModelRequest,
+  DeleteOrganizationProviderCustomModelRequest,
+  OrganizationProviderCustomModel,
+  OrganizationProviderCustomModelsResponse,
+  OrganizationModelProviderKind,
+  OrganizationModelProviderConnectionResponse,
+  UpsertOrganizationModelProviderConnectionRequest,
+  RevokeOrganizationModelProviderConnectionRequest,
   UNATTRIBUTED_LEGACY_INITIATOR_SUBJECT_ID,
   ServiceTurnInitiator,
   TurnInitiatorContext,
@@ -20788,6 +20983,10 @@ export {
   comparePersonalSlackCanonicalConnections,
   selectCanonicalPersonalSlackConnection,
   ConnectionCredentialBundle,
+  VERCEL_AI_GATEWAY_CREDENTIAL_OPERATION_ID_METADATA_KEY,
+  VERCEL_AI_GATEWAY_CREDENTIAL_OPERATION_DIGEST_METADATA_KEY,
+  OPENROUTER_CREDENTIAL_OPERATION_ID_METADATA_KEY,
+  OPENROUTER_CREDENTIAL_OPERATION_DIGEST_METADATA_KEY,
   CreateConnectionRequest,
   OpenGeniSlackBotInstallRequest,
   OpenGeniSlackBotInstallStart,
@@ -20898,6 +21097,7 @@ export {
   SESSION_EVENT_RAW_DELTA_TYPES,
   SESSION_EVENT_SEMANTIC_CLASS_TYPES,
   resolveSessionEventTypeFilters,
+  ToolAuthNeededReason,
   ToolAuthNeededPayload,
   CredentialAuthNeededPayload,
   StreamUrlRotatedPayload,
@@ -21075,6 +21275,7 @@ export {
   ModelCapabilitiesV1,
   ModelCredentialSourceV1,
   ModelBillingAttributionV1,
+  ModelCostClassV1,
   TURN_EXECUTION_POLICY_METADATA_KEY,
   TurnExecutionModelSourceV1,
   TurnExecutionReasoningSourceV1,
@@ -21096,4 +21297,4 @@ export {
   ClientConfig,
   evaluateWorkspaceModelPolicy
 };
-//# sourceMappingURL=chunk-AWNGBY5I.js.map
+//# sourceMappingURL=chunk-6HOHS44G.js.map