@opengeni/contracts 3.1.0-canary.1 → 3.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (434) hide show
  1. package/dist/agent-authored-durable-text.d.ts +9 -9
  2. package/dist/agent-config.d.ts +971 -0
  3. package/dist/agent-instruction-changes.d.ts +110 -0
  4. package/dist/agent-learning.d.ts +243 -0
  5. package/dist/allowance-refusal.d.ts +9 -0
  6. package/dist/allowance-refusal.js +50 -0
  7. package/dist/allowance-refusal.js.map +1 -0
  8. package/dist/analytics-consent-report.d.ts +19 -0
  9. package/dist/analytics-consent-report.js +10 -0
  10. package/dist/analytics-consent-report.js.map +1 -0
  11. package/dist/api-key-presets.d.ts +19 -0
  12. package/dist/artifact-catalog.d.ts +188 -0
  13. package/dist/artifacts.d.ts +86 -0
  14. package/dist/atlassian-native-retirement.d.ts +16 -0
  15. package/dist/atlassian-native-retirement.js +30 -0
  16. package/dist/atlassian-native-retirement.js.map +1 -0
  17. package/dist/atlassian.d.ts +1 -0
  18. package/dist/atlassian.js +34 -19
  19. package/dist/browser-storage.d.ts +5 -0
  20. package/dist/browser-storage.js +9 -0
  21. package/dist/browser-storage.js.map +1 -0
  22. package/dist/bundled-skills.d.ts +24 -1
  23. package/dist/canonical-human-identities.js +2 -1
  24. package/dist/chunk-2ZIHHL72.js +153 -0
  25. package/dist/chunk-2ZIHHL72.js.map +1 -0
  26. package/dist/{chunk-5LYFSZ7O.js → chunk-352X6ENP.js} +31 -31
  27. package/dist/chunk-4JGHSSB7.js +11 -0
  28. package/dist/chunk-4JGHSSB7.js.map +1 -0
  29. package/dist/chunk-4QO6GJUX.js +85 -0
  30. package/dist/chunk-4QO6GJUX.js.map +1 -0
  31. package/dist/chunk-4VDMHLLL.js +49 -0
  32. package/dist/chunk-4VDMHLLL.js.map +1 -0
  33. package/dist/chunk-56SNIMDO.js +9 -0
  34. package/dist/chunk-56SNIMDO.js.map +1 -0
  35. package/dist/chunk-6C2HKFTU.js +207 -0
  36. package/dist/chunk-6C2HKFTU.js.map +1 -0
  37. package/dist/chunk-6IXO76Z6.js +72 -0
  38. package/dist/chunk-6IXO76Z6.js.map +1 -0
  39. package/dist/chunk-7272KVWZ.js +60 -0
  40. package/dist/chunk-7272KVWZ.js.map +1 -0
  41. package/dist/{chunk-7ABONTXE.js → chunk-E3GGUBHS.js} +49 -5
  42. package/dist/chunk-E3GGUBHS.js.map +1 -0
  43. package/dist/chunk-EFZYKUE2.js +767 -0
  44. package/dist/chunk-EFZYKUE2.js.map +1 -0
  45. package/dist/chunk-EKWNTOG3.js +154 -0
  46. package/dist/chunk-EKWNTOG3.js.map +1 -0
  47. package/dist/chunk-HABQ7ADB.js +234 -0
  48. package/dist/chunk-HABQ7ADB.js.map +1 -0
  49. package/dist/chunk-HRRU4QPI.js +91 -0
  50. package/dist/chunk-HRRU4QPI.js.map +1 -0
  51. package/dist/{chunk-3SIZGL3O.js → chunk-IK36LXKC.js} +18 -2
  52. package/dist/chunk-IK36LXKC.js.map +1 -0
  53. package/dist/{chunk-TXTQIYCV.js → chunk-ILJ72KPO.js} +56 -3
  54. package/dist/chunk-ILJ72KPO.js.map +1 -0
  55. package/dist/chunk-J4HQ3UKY.js +93 -0
  56. package/dist/chunk-J4HQ3UKY.js.map +1 -0
  57. package/dist/chunk-KHHZTBP7.js +11 -0
  58. package/dist/chunk-KHHZTBP7.js.map +1 -0
  59. package/dist/{chunk-WYBDERIY.js → chunk-LZ2LAHIX.js} +47 -41
  60. package/dist/chunk-LZ2LAHIX.js.map +1 -0
  61. package/dist/chunk-NDZHPTCL.js +400 -0
  62. package/dist/chunk-NDZHPTCL.js.map +1 -0
  63. package/dist/chunk-OF6OKOBF.js +54793 -0
  64. package/dist/chunk-OF6OKOBF.js.map +1 -0
  65. package/dist/chunk-OL23ARTF.js +94 -0
  66. package/dist/chunk-OL23ARTF.js.map +1 -0
  67. package/dist/chunk-PUIUXIOL.js +189 -0
  68. package/dist/chunk-PUIUXIOL.js.map +1 -0
  69. package/dist/{chunk-WBYTNVIW.js → chunk-RKX3NQYS.js} +1 -1
  70. package/dist/{chunk-Y3KNXVTD.js → chunk-RMWXDZEO.js} +128 -21
  71. package/dist/chunk-RMWXDZEO.js.map +1 -0
  72. package/dist/{chunk-MRWYRAS5.js → chunk-SHO4YO4B.js} +27 -35
  73. package/dist/chunk-SHO4YO4B.js.map +1 -0
  74. package/dist/chunk-SWRN2DJ3.js +153 -0
  75. package/dist/chunk-SWRN2DJ3.js.map +1 -0
  76. package/dist/chunk-TCXCRBPF.js +267 -0
  77. package/dist/chunk-TCXCRBPF.js.map +1 -0
  78. package/dist/chunk-TLU3UEMD.js +324 -0
  79. package/dist/chunk-TLU3UEMD.js.map +1 -0
  80. package/dist/chunk-TSWWZMUS.js +186 -0
  81. package/dist/chunk-TSWWZMUS.js.map +1 -0
  82. package/dist/{chunk-PX3VCKAU.js → chunk-WVCFSOUZ.js} +1 -1
  83. package/dist/{chunk-PX3VCKAU.js.map → chunk-WVCFSOUZ.js.map} +1 -1
  84. package/dist/chunk-XDLAGX66.js +127 -0
  85. package/dist/chunk-XDLAGX66.js.map +1 -0
  86. package/dist/chunk-YKZ4WU4P.js +33 -0
  87. package/dist/chunk-YKZ4WU4P.js.map +1 -0
  88. package/dist/{chunk-O5LEQHDM.js → chunk-Z7WEVGCL.js} +3 -3
  89. package/dist/{chunk-YBW5JSA3.js → chunk-ZDCRWCGZ.js} +119 -101
  90. package/dist/chunk-ZDCRWCGZ.js.map +1 -0
  91. package/dist/claude-provider-account-authority.d.ts +18 -0
  92. package/dist/claude-subscription-oauth.d.ts +42 -0
  93. package/dist/claude-subscription-usage.d.ts +159 -0
  94. package/dist/client-error-report.d.ts +158 -0
  95. package/dist/client-error-report.js +164 -0
  96. package/dist/client-error-report.js.map +1 -0
  97. package/dist/code-search.d.ts +52 -0
  98. package/dist/code-search.js +40 -0
  99. package/dist/code-search.js.map +1 -0
  100. package/dist/codex-provider-account-authority.js +20 -12
  101. package/dist/codex-provider-account-authority.js.map +1 -1
  102. package/dist/company-brain.d.ts +19 -81
  103. package/dist/company-profile.d.ts +144 -6
  104. package/dist/connect.d.ts +37 -0
  105. package/dist/connect.js +216 -159
  106. package/dist/connect.js.map +1 -1
  107. package/dist/connection-account-label.d.ts +2 -0
  108. package/dist/connection-account-label.js +35 -0
  109. package/dist/connection-account-label.js.map +1 -0
  110. package/dist/connection-authority.d.ts +9 -317
  111. package/dist/connection-authority.js +37 -42
  112. package/dist/connector-attachments.js +2 -1
  113. package/dist/connector-destinations.js +2 -1
  114. package/dist/connector-tool-permissions.d.ts +137 -0
  115. package/dist/cua-desktop-tools.d.ts +17 -0
  116. package/dist/define-schema.d.ts +8 -0
  117. package/dist/direct-model-provider.d.ts +36 -0
  118. package/dist/editable-artifact-codec-registry.js +5 -5
  119. package/dist/editable-artifact-committed-transaction.js +3 -2
  120. package/dist/editable-artifact-live.js +5 -5
  121. package/dist/editable-artifact-serialized-commit.js +6 -6
  122. package/dist/editable-artifact-versions.d.ts +7 -1
  123. package/dist/editable-artifact-versions.js +1 -1
  124. package/dist/editable-artifacts.js +62 -56
  125. package/dist/event-preview.d.ts +22 -0
  126. package/dist/external-identities.d.ts +174 -0
  127. package/dist/external-identities.js +15 -4
  128. package/dist/first-party-tool-authorization.d.ts +815 -0
  129. package/dist/github-repository-contracts.js +60 -43
  130. package/dist/github-repository-contracts.js.map +1 -1
  131. package/dist/google-drive.d.ts +2 -1
  132. package/dist/google-drive.js +305 -238
  133. package/dist/google-drive.js.map +1 -1
  134. package/dist/host-mcp-bindings.d.ts +39 -10
  135. package/dist/host-mcp-bindings.js +256 -171
  136. package/dist/host-mcp-bindings.js.map +1 -1
  137. package/dist/image-generation.d.ts +1 -0
  138. package/dist/index.d.ts +15715 -3850
  139. package/dist/index.js +2088 -289
  140. package/dist/insights-usage.d.ts +877 -0
  141. package/dist/insights-usage.js +559 -0
  142. package/dist/insights-usage.js.map +1 -0
  143. package/dist/interaction.d.ts +1176 -829
  144. package/dist/knowledge-entries.d.ts +984 -0
  145. package/dist/knowledge-preparation.d.ts +239 -0
  146. package/dist/managed-auth-session-sets.d.ts +7 -0
  147. package/dist/managed-auth-session-sets.js +198 -132
  148. package/dist/managed-auth-session-sets.js.map +1 -1
  149. package/dist/managed-sign-in-methods.d.ts +56 -0
  150. package/dist/managed-sign-in-methods.js +64 -0
  151. package/dist/managed-sign-in-methods.js.map +1 -0
  152. package/dist/mcp-catalog-limits.d.ts +2 -0
  153. package/dist/mcp-endpoint.js +9 -0
  154. package/dist/mcp-endpoint.js.map +1 -0
  155. package/dist/mcp-oauth.d.ts +2 -2
  156. package/dist/mcp-structured-content.d.ts +25 -0
  157. package/dist/modal-native-proof-v2.d.ts +587 -0
  158. package/dist/modal-native-proof-v2.js +38 -0
  159. package/dist/modal-native-proof-v2.js.map +1 -0
  160. package/dist/model-account-choice.d.ts +235 -0
  161. package/dist/model-account-settings.d.ts +422 -0
  162. package/dist/model-availability.d.ts +15 -0
  163. package/dist/model-connection-access.d.ts +13 -0
  164. package/dist/model-context-inspector.d.ts +98 -0
  165. package/dist/model-display.d.ts +43 -0
  166. package/dist/model-display.js +17 -0
  167. package/dist/model-display.js.map +1 -0
  168. package/dist/model-picker-order.d.ts +3 -1
  169. package/dist/model-picker-order.js +3 -0
  170. package/dist/model-picker-order.js.map +1 -1
  171. package/dist/organization-access.d.ts +412 -0
  172. package/dist/organization-access.js +39 -0
  173. package/dist/organization-access.js.map +1 -0
  174. package/dist/organization-integration-policy.d.ts +27 -0
  175. package/dist/organization-membership-lifecycle.d.ts +38 -0
  176. package/dist/organization-model-usage.d.ts +146 -0
  177. package/dist/organization-model-usage.js +78 -0
  178. package/dist/organization-model-usage.js.map +1 -0
  179. package/dist/organization-recovery.js +2 -1
  180. package/dist/organization-usage.d.ts +138 -0
  181. package/dist/permissions.d.ts +18 -0
  182. package/dist/personal-github.d.ts +1 -0
  183. package/dist/personal-github.js +199 -144
  184. package/dist/personal-github.js.map +1 -1
  185. package/dist/plugin-discovery.js +1 -1
  186. package/dist/prepared-mcp-setup.d.ts +54 -0
  187. package/dist/prepared-mcp-setup.js +12 -0
  188. package/dist/prepared-mcp-setup.js.map +1 -0
  189. package/dist/product-analytics.d.ts +116 -0
  190. package/dist/product-lifecycle-facts.d.ts +73 -0
  191. package/dist/remember.d.ts +98 -6
  192. package/dist/retained-output.d.ts +8 -0
  193. package/dist/sandbox-file-artifacts.d.ts +1 -0
  194. package/dist/sandbox-provider-command.d.ts +91 -1
  195. package/dist/sandbox-recovery.d.ts +146 -0
  196. package/dist/secret-generator.d.ts +44 -0
  197. package/dist/secret-references.d.ts +90 -0
  198. package/dist/secret-resolution.d.ts +111 -0
  199. package/dist/secret-totp.d.ts +41 -0
  200. package/dist/session-final-reply.d.ts +6 -0
  201. package/dist/session-final-reply.js +9 -0
  202. package/dist/session-final-reply.js.map +1 -0
  203. package/dist/session-goal-reports.d.ts +21 -0
  204. package/dist/session-history-import.d.ts +1272 -0
  205. package/dist/session-list-entries.d.ts +4 -0
  206. package/dist/session-list-entries.js +56 -0
  207. package/dist/session-list-entries.js.map +1 -0
  208. package/dist/session-mcp-projections.d.ts +6 -0
  209. package/dist/session-mcp-tool-permissions.d.ts +62 -0
  210. package/dist/session-message-search.d.ts +68 -0
  211. package/dist/session-target.d.ts +18 -0
  212. package/dist/session-titles.d.ts +8 -0
  213. package/dist/session-titles.js +5 -1
  214. package/dist/session-usage-limit-refusal.d.ts +34 -0
  215. package/dist/session-usage-limit-refusal.js +15 -0
  216. package/dist/session-usage-limit-refusal.js.map +1 -0
  217. package/dist/session-usage-limits.d.ts +127 -0
  218. package/dist/session-usage-limits.js +41 -0
  219. package/dist/session-usage-limits.js.map +1 -0
  220. package/dist/signup-attribution.d.ts +39 -0
  221. package/dist/site-data.d.ts +286 -0
  222. package/dist/site-operations.d.ts +39 -0
  223. package/dist/site-publishing.d.ts +778 -0
  224. package/dist/site-session-http.d.ts +89 -4
  225. package/dist/site-session-http.js +25 -1
  226. package/dist/site-sql.d.ts +421 -0
  227. package/dist/skill-catalog-context.d.ts +7 -0
  228. package/dist/skill-files.d.ts +1 -1
  229. package/dist/skill-use.d.ts +61 -0
  230. package/dist/skills.d.ts +15 -0
  231. package/dist/slack-bot-scopes.d.ts +17 -12
  232. package/dist/slack-bot-scopes.js +10 -3
  233. package/dist/slack-rest-mcp.d.ts +36 -0
  234. package/dist/slack-rest-mcp.js +25 -0
  235. package/dist/slack-rest-mcp.js.map +1 -0
  236. package/dist/spreadsheet-artifact-commands.d.ts +14 -1
  237. package/dist/spreadsheet-artifact-commands.js +8 -2
  238. package/dist/spreadsheet-artifact-query.d.ts +13 -6
  239. package/dist/spreadsheet-artifact-query.js +3 -3
  240. package/dist/subscription-account-actions.d.ts +64 -0
  241. package/dist/subscription-account-pools.d.ts +292 -0
  242. package/dist/subscription-personal-authority-v2.d.ts +28 -0
  243. package/dist/subscription-personal-authority-v2.js +12 -0
  244. package/dist/subscription-personal-authority-v2.js.map +1 -0
  245. package/dist/tool-action-review.d.ts +132 -0
  246. package/dist/tool-catalog.d.ts +408 -0
  247. package/dist/tool-policy.d.ts +5 -0
  248. package/dist/tool-review-presentation.d.ts +12 -0
  249. package/dist/tool-review-presentation.js +17 -0
  250. package/dist/tool-review-presentation.js.map +1 -0
  251. package/dist/transcription-recordings.d.ts +21 -0
  252. package/dist/turn-serving-policy.d.ts +221 -0
  253. package/dist/usage-allowances.d.ts +314 -0
  254. package/dist/usage-allowances.js +52 -0
  255. package/dist/usage-allowances.js.map +1 -0
  256. package/dist/vaults.d.ts +1286 -0
  257. package/dist/video-generation.d.ts +3 -0
  258. package/dist/video-generation.js +2 -1
  259. package/dist/workspace-instruction-policies.d.ts +13 -0
  260. package/dist/workspace-integration-wire.d.ts +36 -0
  261. package/dist/workspace-integration-wire.js +23 -0
  262. package/dist/workspace-integration-wire.js.map +1 -0
  263. package/dist/workspace-integrations.d.ts +1028 -0
  264. package/dist/workspace-state.d.ts +85 -416
  265. package/dist/xai-provider-account-authority.js +2 -1
  266. package/package.json +98 -2
  267. package/src/agent-authored-durable-text.ts +14 -11
  268. package/src/agent-config.ts +1698 -0
  269. package/src/agent-instruction-changes.ts +115 -0
  270. package/src/agent-learning.ts +188 -0
  271. package/src/agent-topology.ts +57 -52
  272. package/src/allowance-refusal.ts +81 -0
  273. package/src/analytics-consent-report.ts +20 -0
  274. package/src/api-key-presets.ts +28 -0
  275. package/src/artifact-catalog.ts +82 -0
  276. package/src/artifacts.ts +299 -227
  277. package/src/atlassian-native-retirement.ts +33 -0
  278. package/src/atlassian.ts +135 -108
  279. package/src/browser-storage.ts +10 -0
  280. package/src/bundled-skills.ts +60 -17
  281. package/src/canonical-human-identities.ts +60 -58
  282. package/src/claude-provider-account-authority.ts +12 -0
  283. package/src/claude-subscription-oauth.ts +73 -0
  284. package/src/claude-subscription-usage.ts +68 -0
  285. package/src/client-error-report.ts +343 -0
  286. package/src/code-search.ts +105 -0
  287. package/src/codex-provider-account-authority.ts +21 -16
  288. package/src/company-brain-governed-writes.ts +255 -233
  289. package/src/company-brain.ts +164 -153
  290. package/src/company-profile.ts +365 -292
  291. package/src/connect.ts +212 -173
  292. package/src/connection-account-label.ts +46 -0
  293. package/src/connection-authority.ts +183 -364
  294. package/src/connector-attachments.ts +137 -122
  295. package/src/connector-destinations.ts +46 -42
  296. package/src/connector-tool-permissions.ts +117 -0
  297. package/src/cua-desktop-tools.gen.json +6512 -0
  298. package/src/cua-desktop-tools.linux.gen.json +6600 -0
  299. package/src/cua-desktop-tools.ts +36 -0
  300. package/src/cua-desktop-tools.windows.gen.json +6353 -0
  301. package/src/define-schema.ts +10 -0
  302. package/src/direct-model-provider.ts +108 -0
  303. package/src/editable-artifact-committed-transaction.ts +17 -0
  304. package/src/editable-artifact-versions.ts +7 -1
  305. package/src/event-preview.ts +53 -3
  306. package/src/external-identities.ts +262 -145
  307. package/src/feedback.ts +43 -30
  308. package/src/first-party-tool-authorization.ts +356 -0
  309. package/src/github-repository-contracts.ts +78 -64
  310. package/src/google-drive.ts +285 -234
  311. package/src/governed-learning-activation.ts +152 -131
  312. package/src/governed-learning-evaluator.ts +140 -133
  313. package/src/host-mcp-bindings.ts +292 -198
  314. package/src/image-generation.ts +104 -95
  315. package/src/index.ts +13354 -8654
  316. package/src/insights-usage.ts +727 -0
  317. package/src/interaction.ts +3070 -2326
  318. package/src/knowledge-entries.ts +428 -0
  319. package/src/knowledge-preparation.ts +57 -0
  320. package/src/knowledge.ts +246 -213
  321. package/src/managed-auth-session-sets.ts +220 -144
  322. package/src/managed-sign-in-methods.ts +52 -0
  323. package/src/mcp-catalog-limits.ts +2 -0
  324. package/src/mcp-oauth.ts +43 -34
  325. package/src/mcp-receipts.ts +192 -192
  326. package/src/mcp-structured-content.ts +81 -0
  327. package/src/memory-slack-delivery.ts +171 -142
  328. package/src/modal-native-proof-v2.ts +429 -0
  329. package/src/model-account-choice.ts +177 -0
  330. package/src/model-account-settings.ts +210 -0
  331. package/src/model-availability.ts +22 -0
  332. package/src/model-connection-access.ts +61 -14
  333. package/src/model-context-inspector.ts +133 -99
  334. package/src/model-display.ts +221 -0
  335. package/src/model-picker-order.ts +12 -1
  336. package/src/organization-access.ts +217 -0
  337. package/src/organization-integration-policy.ts +63 -0
  338. package/src/organization-membership-lifecycle.ts +528 -382
  339. package/src/organization-model-usage.ts +81 -0
  340. package/src/organization-recovery.ts +147 -135
  341. package/src/organization-usage.ts +94 -0
  342. package/src/permissions.ts +88 -52
  343. package/src/personal-github.ts +210 -171
  344. package/src/preference-registry.ts +314 -258
  345. package/src/prepared-mcp-setup.ts +189 -0
  346. package/src/product-analytics.ts +261 -0
  347. package/src/product-lifecycle-facts.ts +122 -0
  348. package/src/remember.ts +181 -167
  349. package/src/retained-output.ts +194 -165
  350. package/src/sandbox-file-artifacts.ts +60 -47
  351. package/src/sandbox-provider-command.ts +88 -20
  352. package/src/sandbox-recovery.ts +129 -0
  353. package/src/scoped-knowledge.ts +61 -43
  354. package/src/secret-generator.ts +155 -0
  355. package/src/secret-references.ts +414 -0
  356. package/src/secret-resolution.ts +274 -0
  357. package/src/secret-totp.ts +188 -0
  358. package/src/session-final-reply.ts +16 -0
  359. package/src/session-goal-reports.ts +64 -0
  360. package/src/session-history-import.ts +177 -0
  361. package/src/session-list-entries.ts +96 -0
  362. package/src/session-mcp-projections.ts +11 -0
  363. package/src/session-mcp-tool-permissions.ts +108 -0
  364. package/src/session-message-search.ts +61 -0
  365. package/src/session-target.ts +57 -0
  366. package/src/session-titles.ts +80 -10
  367. package/src/session-topology-primitives.ts +19 -12
  368. package/src/session-usage-limit-refusal.ts +101 -0
  369. package/src/session-usage-limits.ts +171 -0
  370. package/src/signup-attribution.ts +86 -0
  371. package/src/site-data.ts +339 -0
  372. package/src/site-operations.ts +154 -0
  373. package/src/site-publishing.ts +876 -0
  374. package/src/site-session-http.ts +294 -16
  375. package/src/site-sql.ts +1123 -0
  376. package/src/skill-catalog-context.ts +50 -0
  377. package/src/skill-files.ts +3 -3
  378. package/src/skill-use.ts +80 -0
  379. package/src/skills.ts +82 -54
  380. package/src/slack-bot-scopes.ts +31 -39
  381. package/src/slack-rest-mcp.ts +222 -0
  382. package/src/slack-task-policy.ts +96 -73
  383. package/src/spreadsheet-artifact-commands.ts +73 -2
  384. package/src/spreadsheet-artifact-query.ts +187 -39
  385. package/src/subscription-account-actions.ts +84 -0
  386. package/src/subscription-account-pools.ts +53 -0
  387. package/src/subscription-personal-authority-v2.ts +66 -0
  388. package/src/task-notes.ts +55 -51
  389. package/src/tool-action-review.ts +258 -0
  390. package/src/tool-catalog.ts +609 -372
  391. package/src/tool-policy.ts +82 -0
  392. package/src/tool-result-spill.ts +12 -9
  393. package/src/tool-review-presentation.ts +385 -0
  394. package/src/transcription-recordings.ts +145 -131
  395. package/src/turn-serving-policy.ts +166 -0
  396. package/src/usage-allowances.ts +248 -0
  397. package/src/vaults.ts +850 -0
  398. package/src/video-generation.ts +385 -360
  399. package/src/work-claims.ts +173 -149
  400. package/src/workspace-instruction-policies.ts +349 -275
  401. package/src/workspace-integration-wire.ts +101 -0
  402. package/src/workspace-integrations.ts +724 -0
  403. package/src/workspace-learning-administration.ts +57 -44
  404. package/src/workspace-learning-policy.ts +127 -96
  405. package/src/workspace-state.ts +253 -333
  406. package/src/xai-provider-account-authority.ts +22 -17
  407. package/dist/chunk-3SIZGL3O.js.map +0 -1
  408. package/dist/chunk-7ABONTXE.js.map +0 -1
  409. package/dist/chunk-BCS7WHCK.js +0 -139
  410. package/dist/chunk-BCS7WHCK.js.map +0 -1
  411. package/dist/chunk-GRG7PHWQ.js +0 -25
  412. package/dist/chunk-GRG7PHWQ.js.map +0 -1
  413. package/dist/chunk-JUFK3T4Q.js +0 -80
  414. package/dist/chunk-JUFK3T4Q.js.map +0 -1
  415. package/dist/chunk-M5ZGRVIQ.js +0 -719
  416. package/dist/chunk-M5ZGRVIQ.js.map +0 -1
  417. package/dist/chunk-MRWYRAS5.js.map +0 -1
  418. package/dist/chunk-OSBYTE3O.js +0 -348
  419. package/dist/chunk-OSBYTE3O.js.map +0 -1
  420. package/dist/chunk-P3HLDT77.js +0 -59
  421. package/dist/chunk-P3HLDT77.js.map +0 -1
  422. package/dist/chunk-TEMFILR7.js +0 -143
  423. package/dist/chunk-TEMFILR7.js.map +0 -1
  424. package/dist/chunk-TXTQIYCV.js.map +0 -1
  425. package/dist/chunk-UR2GFYIE.js +0 -22598
  426. package/dist/chunk-UR2GFYIE.js.map +0 -1
  427. package/dist/chunk-WYBDERIY.js.map +0 -1
  428. package/dist/chunk-Y3KNXVTD.js.map +0 -1
  429. package/dist/chunk-YBW5JSA3.js.map +0 -1
  430. package/dist/chunk-YRXAWWCU.js +0 -45
  431. package/dist/chunk-YRXAWWCU.js.map +0 -1
  432. /package/dist/{chunk-5LYFSZ7O.js.map → chunk-352X6ENP.js.map} +0 -0
  433. /package/dist/{chunk-WBYTNVIW.js.map → chunk-RKX3NQYS.js.map} +0 -0
  434. /package/dist/{chunk-O5LEQHDM.js.map → chunk-Z7WEVGCL.js.map} +0 -0
@@ -46,6 +46,30 @@ export type AttemptToolAnnotations = z.infer<typeof AttemptToolAnnotations>;
46
46
  /** JSON Schema is preserved as received. Runtime byte/node guards remain authoritative. */
47
47
  export declare const AttemptToolJsonSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
48
48
  export type AttemptToolJsonSchema = z.infer<typeof AttemptToolJsonSchema>;
49
+ /** Presentation only; never parsed as execution or account authority. */
50
+ export declare const ToolDisplayMetadata: z.ZodObject<{
51
+ toolName: z.ZodString;
52
+ title: z.ZodOptional<z.ZodString>;
53
+ accountLabel: z.ZodOptional<z.ZodString>;
54
+ connector: z.ZodOptional<z.ZodString>;
55
+ providerDomain: z.ZodOptional<z.ZodString>;
56
+ }, z.core.$strict>;
57
+ export type ToolDisplayMetadata = z.infer<typeof ToolDisplayMetadata>;
58
+ /**
59
+ * How one connector account route is named. The model always gets the full
60
+ * account in tool descriptions; people see the connector, and the account only
61
+ * when there is more than one to tell apart.
62
+ */
63
+ export type McpAccountRouteLabel = {
64
+ /** Model-facing account description. */
65
+ model: string;
66
+ connector: string;
67
+ providerDomain: string;
68
+ /** Present only when the connector has several accounts in the turn. */
69
+ account?: string | undefined;
70
+ };
71
+ /** The short account line for approvals: "Linear", or "Linear · alice@example.com". */
72
+ export declare function mcpAccountRouteReviewLabel(label: McpAccountRouteLabel): string;
49
73
  export declare const AttemptToolCatalogEntry: z.ZodObject<{
50
74
  identity: z.ZodObject<{
51
75
  serverId: z.ZodString;
@@ -192,6 +216,14 @@ export declare const ToolGatewayCaller: z.ZodObject<{
192
216
  subjectId: z.ZodString;
193
217
  }, z.core.$strict>;
194
218
  export type ToolGatewayCaller = z.infer<typeof ToolGatewayCaller>;
219
+ /**
220
+ * MCP request `_meta` key naming the attempt surface that issued a call to the
221
+ * first-party server: `model` for a direct model tool call, `codemode` for a
222
+ * Codemode script. Only the worker's own tool gateway sets it, and only for the
223
+ * first-party server. A read reached the model's context only when it says
224
+ * `model`; a Codemode script may keep the output to itself.
225
+ */
226
+ export declare const FIRST_PARTY_MCP_CALLER_META_KEY = "opengeniCaller";
195
227
  export declare const AttemptToolCatalog: z.ZodObject<{
196
228
  version: z.ZodLiteral<1>;
197
229
  accountId: z.ZodString;
@@ -203,6 +235,58 @@ export declare const AttemptToolCatalog: z.ZodObject<{
203
235
  generation: z.ZodNumber;
204
236
  digest: z.ZodString;
205
237
  createdAt: z.ZodString;
238
+ firstPartyMcpPermissions: z.ZodOptional<z.ZodArray<z.ZodEnum<{
239
+ "account:admin": "account:admin";
240
+ "account:read": "account:read";
241
+ "api_keys:manage": "api_keys:manage";
242
+ "artifacts:publish": "artifacts:publish";
243
+ "artifacts:read": "artifacts:read";
244
+ "billing:manage": "billing:manage";
245
+ "billing:read": "billing:read";
246
+ "capabilities:manage": "capabilities:manage";
247
+ "codemode:call": "codemode:call";
248
+ "connections:read": "connections:read";
249
+ "connections:write": "connections:write";
250
+ "documents:manage": "documents:manage";
251
+ "documents:search": "documents:search";
252
+ "enrollments:manage": "enrollments:manage";
253
+ "enrollments:read": "enrollments:read";
254
+ "environments:manage": "environments:manage";
255
+ "environments:use": "environments:use";
256
+ "files:read": "files:read";
257
+ "files:upload": "files:upload";
258
+ "files:write": "files:write";
259
+ "github:manage": "github:manage";
260
+ "github:use": "github:use";
261
+ "goals:manage": "goals:manage";
262
+ "mcp_servers:attach": "mcp_servers:attach";
263
+ "members:manage": "members:manage";
264
+ "rigs:manage": "rigs:manage";
265
+ "rigs:use": "rigs:use";
266
+ "scheduled_tasks:manage": "scheduled_tasks:manage";
267
+ "scheduled_tasks:run": "scheduled_tasks:run";
268
+ "secrets:list": "secrets:list";
269
+ "secrets:read": "secrets:read";
270
+ "secrets:use": "secrets:use";
271
+ "secrets:write": "secrets:write";
272
+ "sessions:control": "sessions:control";
273
+ "sessions:create": "sessions:create";
274
+ "sessions:read": "sessions:read";
275
+ "stream:acknowledge": "stream:acknowledge";
276
+ "stream:control": "stream:control";
277
+ "stream:view": "stream:view";
278
+ "terminal:attach": "terminal:attach";
279
+ "usage_allowances:manage": "usage_allowances:manage";
280
+ "variable-sets:attach": "variable-sets:attach";
281
+ "variable-sets:list": "variable-sets:list";
282
+ "variable-sets:manage": "variable-sets:manage";
283
+ "variable-sets:read": "variable-sets:read";
284
+ "variable-sets:use": "variable-sets:use";
285
+ "variable-sets:write": "variable-sets:write";
286
+ "workspace:admin": "workspace:admin";
287
+ "workspace:create": "workspace:create";
288
+ "workspace:read": "workspace:read";
289
+ }>>>;
206
290
  entries: z.ZodArray<z.ZodObject<{
207
291
  identity: z.ZodObject<{
208
292
  serverId: z.ZodString;
@@ -593,6 +677,322 @@ export declare const ToolGatewayCallResponse: z.ZodObject<{
593
677
  }, z.core.$loose>;
594
678
  }, z.core.$strict>;
595
679
  export type ToolGatewayCallResponse = z.infer<typeof ToolGatewayCallResponse>;
680
+ /** A selector, never an authority claim. Symbolic paths use the canonical projection. */
681
+ export declare const ToolGatewayTarget: z.ZodUnion<readonly [z.ZodObject<{
682
+ identity: z.ZodObject<{
683
+ serverId: z.ZodString;
684
+ toolName: z.ZodString;
685
+ }, z.core.$strict>;
686
+ }, z.core.$strict>, z.ZodObject<{
687
+ path: z.ZodArray<z.ZodString>;
688
+ }, z.core.$strict>]>;
689
+ export type ToolGatewayTarget = z.infer<typeof ToolGatewayTarget>;
690
+ export declare const ToolGatewayResolveRequest: z.ZodObject<{
691
+ siteArtifactId: z.ZodOptional<z.ZodString>;
692
+ siteVersionId: z.ZodOptional<z.ZodString>;
693
+ target: z.ZodUnion<readonly [z.ZodObject<{
694
+ identity: z.ZodObject<{
695
+ serverId: z.ZodString;
696
+ toolName: z.ZodString;
697
+ }, z.core.$strict>;
698
+ }, z.core.$strict>, z.ZodObject<{
699
+ path: z.ZodArray<z.ZodString>;
700
+ }, z.core.$strict>]>;
701
+ }, z.core.$strict>;
702
+ export type ToolGatewayResolveRequest = z.infer<typeof ToolGatewayResolveRequest>;
703
+ export declare const ToolGatewayResolvedTool: z.ZodObject<{
704
+ version: z.ZodLiteral<1>;
705
+ definitionDigest: z.ZodString;
706
+ entry: z.ZodObject<{
707
+ identity: z.ZodObject<{
708
+ serverId: z.ZodString;
709
+ toolName: z.ZodString;
710
+ }, z.core.$strict>;
711
+ modelName: z.ZodString;
712
+ codemodePath: z.ZodArray<z.ZodString>;
713
+ title: z.ZodOptional<z.ZodString>;
714
+ description: z.ZodOptional<z.ZodString>;
715
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
716
+ outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
717
+ annotations: z.ZodOptional<z.ZodObject<{
718
+ title: z.ZodOptional<z.ZodString>;
719
+ readOnlyHint: z.ZodOptional<z.ZodBoolean>;
720
+ destructiveHint: z.ZodOptional<z.ZodBoolean>;
721
+ idempotentHint: z.ZodOptional<z.ZodBoolean>;
722
+ openWorldHint: z.ZodOptional<z.ZodBoolean>;
723
+ }, z.core.$loose>>;
724
+ icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
725
+ src: z.ZodString;
726
+ mimeType: z.ZodOptional<z.ZodString>;
727
+ sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
728
+ theme: z.ZodOptional<z.ZodEnum<{
729
+ dark: "dark";
730
+ light: "light";
731
+ }>>;
732
+ }, z.core.$strict>>>;
733
+ source: z.ZodEnum<{
734
+ codex_apps: "codex_apps";
735
+ docs: "docs";
736
+ files: "files";
737
+ interaction: "interaction";
738
+ mcp: "mcp";
739
+ opengeni: "opengeni";
740
+ }>;
741
+ approval: z.ZodEnum<{
742
+ human: "human";
743
+ none: "none";
744
+ policy: "policy";
745
+ }>;
746
+ }, z.core.$strict>;
747
+ }, z.core.$strict>;
748
+ export type ToolGatewayResolvedTool = z.infer<typeof ToolGatewayResolvedTool>;
749
+ export declare const ToolGatewayInvokeRequest: z.ZodObject<{
750
+ siteArtifactId: z.ZodOptional<z.ZodString>;
751
+ siteVersionId: z.ZodOptional<z.ZodString>;
752
+ target: z.ZodUnion<readonly [z.ZodObject<{
753
+ identity: z.ZodObject<{
754
+ serverId: z.ZodString;
755
+ toolName: z.ZodString;
756
+ }, z.core.$strict>;
757
+ }, z.core.$strict>, z.ZodObject<{
758
+ path: z.ZodArray<z.ZodString>;
759
+ }, z.core.$strict>]>;
760
+ operationId: z.ZodString;
761
+ arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
762
+ expectedDefinitionDigest: z.ZodOptional<z.ZodString>;
763
+ approvalToken: z.ZodOptional<z.ZodString>;
764
+ }, z.core.$strict>;
765
+ export type ToolGatewayInvokeRequest = z.infer<typeof ToolGatewayInvokeRequest>;
766
+ export declare const ToolGatewayInvokeResponse: z.ZodObject<{
767
+ operationId: z.ZodString;
768
+ tool: z.ZodObject<{
769
+ version: z.ZodLiteral<1>;
770
+ definitionDigest: z.ZodString;
771
+ entry: z.ZodObject<{
772
+ identity: z.ZodObject<{
773
+ serverId: z.ZodString;
774
+ toolName: z.ZodString;
775
+ }, z.core.$strict>;
776
+ modelName: z.ZodString;
777
+ codemodePath: z.ZodArray<z.ZodString>;
778
+ title: z.ZodOptional<z.ZodString>;
779
+ description: z.ZodOptional<z.ZodString>;
780
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
781
+ outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
782
+ annotations: z.ZodOptional<z.ZodObject<{
783
+ title: z.ZodOptional<z.ZodString>;
784
+ readOnlyHint: z.ZodOptional<z.ZodBoolean>;
785
+ destructiveHint: z.ZodOptional<z.ZodBoolean>;
786
+ idempotentHint: z.ZodOptional<z.ZodBoolean>;
787
+ openWorldHint: z.ZodOptional<z.ZodBoolean>;
788
+ }, z.core.$loose>>;
789
+ icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
790
+ src: z.ZodString;
791
+ mimeType: z.ZodOptional<z.ZodString>;
792
+ sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
793
+ theme: z.ZodOptional<z.ZodEnum<{
794
+ dark: "dark";
795
+ light: "light";
796
+ }>>;
797
+ }, z.core.$strict>>>;
798
+ source: z.ZodEnum<{
799
+ codex_apps: "codex_apps";
800
+ docs: "docs";
801
+ files: "files";
802
+ interaction: "interaction";
803
+ mcp: "mcp";
804
+ opengeni: "opengeni";
805
+ }>;
806
+ approval: z.ZodEnum<{
807
+ human: "human";
808
+ none: "none";
809
+ policy: "policy";
810
+ }>;
811
+ }, z.core.$strict>;
812
+ }, z.core.$strict>;
813
+ result: z.ZodObject<{
814
+ content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
815
+ type: z.ZodLiteral<"text">;
816
+ text: z.ZodString;
817
+ annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
818
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
819
+ }, z.core.$loose>, z.ZodObject<{
820
+ type: z.ZodLiteral<"image">;
821
+ data: z.ZodString;
822
+ mimeType: z.ZodString;
823
+ annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
824
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
825
+ }, z.core.$loose>, z.ZodObject<{
826
+ type: z.ZodLiteral<"audio">;
827
+ data: z.ZodString;
828
+ mimeType: z.ZodString;
829
+ annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
830
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
831
+ }, z.core.$loose>, z.ZodObject<{
832
+ type: z.ZodLiteral<"resource_link">;
833
+ name: z.ZodString;
834
+ title: z.ZodOptional<z.ZodString>;
835
+ uri: z.ZodString;
836
+ description: z.ZodOptional<z.ZodString>;
837
+ mimeType: z.ZodOptional<z.ZodString>;
838
+ size: z.ZodOptional<z.ZodNumber>;
839
+ icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
840
+ src: z.ZodString;
841
+ mimeType: z.ZodOptional<z.ZodString>;
842
+ sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
843
+ theme: z.ZodOptional<z.ZodEnum<{
844
+ dark: "dark";
845
+ light: "light";
846
+ }>>;
847
+ }, z.core.$strict>>>;
848
+ annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
849
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
850
+ }, z.core.$loose>, z.ZodObject<{
851
+ type: z.ZodLiteral<"resource">;
852
+ resource: z.ZodUnion<readonly [z.ZodObject<{
853
+ uri: z.ZodString;
854
+ mimeType: z.ZodOptional<z.ZodString>;
855
+ text: z.ZodString;
856
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
857
+ }, z.core.$loose>, z.ZodObject<{
858
+ uri: z.ZodString;
859
+ mimeType: z.ZodOptional<z.ZodString>;
860
+ blob: z.ZodString;
861
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
862
+ }, z.core.$loose>]>;
863
+ annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
864
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
865
+ }, z.core.$loose>], "type">>;
866
+ structuredContent: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
867
+ isError: z.ZodOptional<z.ZodBoolean>;
868
+ _meta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
869
+ }, z.core.$loose>;
870
+ }, z.core.$strict>;
871
+ export type ToolGatewayInvokeResponse = z.infer<typeof ToolGatewayInvokeResponse>;
872
+ export declare const ToolGatewayTargetApprovalRequest: z.ZodObject<{
873
+ siteArtifactId: z.ZodOptional<z.ZodString>;
874
+ siteVersionId: z.ZodOptional<z.ZodString>;
875
+ identity: z.ZodObject<{
876
+ serverId: z.ZodString;
877
+ toolName: z.ZodString;
878
+ }, z.core.$strict>;
879
+ operationId: z.ZodString;
880
+ arguments: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
881
+ expectedDefinitionDigest: z.ZodString;
882
+ }, z.core.$strict>;
883
+ export type ToolGatewayTargetApprovalRequest = z.infer<typeof ToolGatewayTargetApprovalRequest>;
884
+ export declare const ToolGatewayTargetApprovalResponse: z.ZodObject<{
885
+ bindingVersion: z.ZodLiteral<2>;
886
+ operationId: z.ZodString;
887
+ tool: z.ZodObject<{
888
+ version: z.ZodLiteral<1>;
889
+ definitionDigest: z.ZodString;
890
+ entry: z.ZodObject<{
891
+ identity: z.ZodObject<{
892
+ serverId: z.ZodString;
893
+ toolName: z.ZodString;
894
+ }, z.core.$strict>;
895
+ modelName: z.ZodString;
896
+ codemodePath: z.ZodArray<z.ZodString>;
897
+ title: z.ZodOptional<z.ZodString>;
898
+ description: z.ZodOptional<z.ZodString>;
899
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
900
+ outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
901
+ annotations: z.ZodOptional<z.ZodObject<{
902
+ title: z.ZodOptional<z.ZodString>;
903
+ readOnlyHint: z.ZodOptional<z.ZodBoolean>;
904
+ destructiveHint: z.ZodOptional<z.ZodBoolean>;
905
+ idempotentHint: z.ZodOptional<z.ZodBoolean>;
906
+ openWorldHint: z.ZodOptional<z.ZodBoolean>;
907
+ }, z.core.$loose>>;
908
+ icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
909
+ src: z.ZodString;
910
+ mimeType: z.ZodOptional<z.ZodString>;
911
+ sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
912
+ theme: z.ZodOptional<z.ZodEnum<{
913
+ dark: "dark";
914
+ light: "light";
915
+ }>>;
916
+ }, z.core.$strict>>>;
917
+ source: z.ZodEnum<{
918
+ codex_apps: "codex_apps";
919
+ docs: "docs";
920
+ files: "files";
921
+ interaction: "interaction";
922
+ mcp: "mcp";
923
+ opengeni: "opengeni";
924
+ }>;
925
+ approval: z.ZodEnum<{
926
+ human: "human";
927
+ none: "none";
928
+ policy: "policy";
929
+ }>;
930
+ }, z.core.$strict>;
931
+ }, z.core.$strict>;
932
+ approvalToken: z.ZodString;
933
+ expiresAt: z.ZodString;
934
+ }, z.core.$strict>;
935
+ export type ToolGatewayTargetApprovalResponse = z.infer<typeof ToolGatewayTargetApprovalResponse>;
936
+ /** Bounded compatibility manifest, not workspace discovery. */
937
+ export declare const ToolGatewayManifestRequest: z.ZodObject<{
938
+ siteArtifactId: z.ZodOptional<z.ZodString>;
939
+ siteVersionId: z.ZodOptional<z.ZodString>;
940
+ identities: z.ZodArray<z.ZodObject<{
941
+ serverId: z.ZodString;
942
+ toolName: z.ZodString;
943
+ }, z.core.$strict>>;
944
+ }, z.core.$strict>;
945
+ export type ToolGatewayManifestRequest = z.infer<typeof ToolGatewayManifestRequest>;
946
+ export declare const ToolGatewayManifestResponse: z.ZodObject<{
947
+ version: z.ZodLiteral<1>;
948
+ digest: z.ZodString;
949
+ tools: z.ZodArray<z.ZodObject<{
950
+ version: z.ZodLiteral<1>;
951
+ definitionDigest: z.ZodString;
952
+ entry: z.ZodObject<{
953
+ identity: z.ZodObject<{
954
+ serverId: z.ZodString;
955
+ toolName: z.ZodString;
956
+ }, z.core.$strict>;
957
+ modelName: z.ZodString;
958
+ codemodePath: z.ZodArray<z.ZodString>;
959
+ title: z.ZodOptional<z.ZodString>;
960
+ description: z.ZodOptional<z.ZodString>;
961
+ inputSchema: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
962
+ outputSchema: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
963
+ annotations: z.ZodOptional<z.ZodObject<{
964
+ title: z.ZodOptional<z.ZodString>;
965
+ readOnlyHint: z.ZodOptional<z.ZodBoolean>;
966
+ destructiveHint: z.ZodOptional<z.ZodBoolean>;
967
+ idempotentHint: z.ZodOptional<z.ZodBoolean>;
968
+ openWorldHint: z.ZodOptional<z.ZodBoolean>;
969
+ }, z.core.$loose>>;
970
+ icons: z.ZodOptional<z.ZodArray<z.ZodObject<{
971
+ src: z.ZodString;
972
+ mimeType: z.ZodOptional<z.ZodString>;
973
+ sizes: z.ZodOptional<z.ZodArray<z.ZodString>>;
974
+ theme: z.ZodOptional<z.ZodEnum<{
975
+ dark: "dark";
976
+ light: "light";
977
+ }>>;
978
+ }, z.core.$strict>>>;
979
+ source: z.ZodEnum<{
980
+ codex_apps: "codex_apps";
981
+ docs: "docs";
982
+ files: "files";
983
+ interaction: "interaction";
984
+ mcp: "mcp";
985
+ opengeni: "opengeni";
986
+ }>;
987
+ approval: z.ZodEnum<{
988
+ human: "human";
989
+ none: "none";
990
+ policy: "policy";
991
+ }>;
992
+ }, z.core.$strict>;
993
+ }, z.core.$strict>>;
994
+ }, z.core.$strict>;
995
+ export type ToolGatewayManifestResponse = z.infer<typeof ToolGatewayManifestResponse>;
596
996
  export declare const ToolGatewayDeclarationsResponse: z.ZodObject<{
597
997
  catalogDigest: z.ZodString;
598
998
  moduleSpecifier: z.ZodString;
@@ -606,6 +1006,7 @@ export declare const CodemodeOperationState: z.ZodEnum<{
606
1006
  outcome_unknown: "outcome_unknown";
607
1007
  queued: "queued";
608
1008
  running: "running";
1009
+ waiting_for_approval: "waiting_for_approval";
609
1010
  }>;
610
1011
  export type CodemodeOperationState = z.infer<typeof CodemodeOperationState>;
611
1012
  /**
@@ -643,7 +1044,10 @@ export declare const CodemodeOperation: z.ZodObject<{
643
1044
  outcome_unknown: "outcome_unknown";
644
1045
  queued: "queued";
645
1046
  running: "running";
1047
+ waiting_for_approval: "waiting_for_approval";
646
1048
  }>;
1049
+ durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
1050
+ approvalRequestId: z.ZodOptional<z.ZodString>;
647
1051
  result: z.ZodNullable<z.ZodObject<{
648
1052
  content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
649
1053
  type: z.ZodLiteral<"text">;
@@ -711,6 +1115,7 @@ export declare const CodemodeOperation: z.ZodObject<{
711
1115
  }, z.core.$strict>;
712
1116
  export type CodemodeOperation = z.infer<typeof CodemodeOperation>;
713
1117
  export declare const CodemodeCallRequest: z.ZodObject<{
1118
+ durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
714
1119
  operationId: z.ZodString;
715
1120
  catalogDigest: z.ZodString;
716
1121
  identity: z.ZodObject<{
@@ -751,7 +1156,10 @@ export declare const CodemodeCallSubmission: z.ZodObject<{
751
1156
  outcome_unknown: "outcome_unknown";
752
1157
  queued: "queued";
753
1158
  running: "running";
1159
+ waiting_for_approval: "waiting_for_approval";
754
1160
  }>;
1161
+ durableApproval: z.ZodOptional<z.ZodLiteral<true>>;
1162
+ approvalRequestId: z.ZodOptional<z.ZodString>;
755
1163
  result: z.ZodNullable<z.ZodObject<{
756
1164
  content: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
757
1165
  type: z.ZodLiteral<"text">;
@@ -0,0 +1,5 @@
1
+ /** Only a declared action discriminator can select an action-specific preference.
2
+ * Callers still validate the complete arguments against the tool schema. */
3
+ export declare function toolPolicyActionName(toolName: string, inputSchema: unknown, args: unknown): string;
4
+ /** Strip only JSON Schema annotations, never object property names or literal values. */
5
+ export declare function executableToolSchema(value: unknown): unknown;
@@ -0,0 +1,12 @@
1
+ import type { ToolActionReview, ToolReviewContext, ToolReviewDetailsPage } from "./tool-action-review.js";
2
+ export declare function toolReviewFieldLabel(key: string): string;
3
+ export declare function decodeReviewArguments(value: unknown): Record<string, unknown> | null;
4
+ export declare function safeReviewValue(value: unknown, key?: string, protectedFields?: readonly string[], depth?: number): unknown;
5
+ export declare function toolReviewFields(argumentsValue: unknown, context?: ToolReviewContext): {
6
+ fields: ToolActionReview["fields"];
7
+ moreFields: number;
8
+ };
9
+ /** Deterministic consequences from the reviewed bytes. Unknown fields remain visible. */
10
+ export declare function toolReviewAction(toolName: string, argumentsValue: unknown, context?: ToolReviewContext): Pick<ToolActionReview, "title" | "approveLabel" | "effects" | "consequence" | "selectionCount" | "selectionKind">;
11
+ /** A bounded slice of the immutable saved arguments; never evaluates a fresh provider query. */
12
+ export declare function toolReviewDetails(argumentsValue: unknown, context: ToolReviewContext | undefined, path: string, offset: number, limit?: number): Omit<ToolReviewDetailsPage, "id" | "actionDigest" | "version">;
@@ -0,0 +1,17 @@
1
+ import {
2
+ decodeReviewArguments,
3
+ safeReviewValue,
4
+ toolReviewAction,
5
+ toolReviewDetails,
6
+ toolReviewFieldLabel,
7
+ toolReviewFields
8
+ } from "./chunk-TCXCRBPF.js";
9
+ export {
10
+ decodeReviewArguments,
11
+ safeReviewValue,
12
+ toolReviewAction,
13
+ toolReviewDetails,
14
+ toolReviewFieldLabel,
15
+ toolReviewFields
16
+ };
17
+ //# sourceMappingURL=tool-review-presentation.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}
@@ -1,7 +1,10 @@
1
1
  import { z } from "zod";
2
2
  export declare const TranscriptionRecordingErrorCode: z.ZodEnum<{
3
+ allowance_exhausted: "allowance_exhausted";
3
4
  cancelled: "cancelled";
5
+ insufficient_credits: "insufficient_credits";
4
6
  invalid_audio: "invalid_audio";
7
+ monthly_model_cost_limit: "monthly_model_cost_limit";
5
8
  network: "network";
6
9
  not_supported: "not_supported";
7
10
  permission_denied: "permission_denied";
@@ -71,8 +74,11 @@ export declare const TranscriptionRecordingSegment: z.ZodObject<{
71
74
  durationMilliseconds: z.ZodNumber;
72
75
  byteLength: z.ZodNumber;
73
76
  errorCode: z.ZodNullable<z.ZodEnum<{
77
+ allowance_exhausted: "allowance_exhausted";
74
78
  cancelled: "cancelled";
79
+ insufficient_credits: "insufficient_credits";
75
80
  invalid_audio: "invalid_audio";
81
+ monthly_model_cost_limit: "monthly_model_cost_limit";
76
82
  network: "network";
77
83
  not_supported: "not_supported";
78
84
  permission_denied: "permission_denied";
@@ -108,8 +114,11 @@ export declare const TranscriptionRecording: z.ZodObject<{
108
114
  transcriptText: z.ZodNullable<z.ZodString>;
109
115
  languages: z.ZodArray<z.ZodString>;
110
116
  errorCode: z.ZodNullable<z.ZodEnum<{
117
+ allowance_exhausted: "allowance_exhausted";
111
118
  cancelled: "cancelled";
119
+ insufficient_credits: "insufficient_credits";
112
120
  invalid_audio: "invalid_audio";
121
+ monthly_model_cost_limit: "monthly_model_cost_limit";
113
122
  network: "network";
114
123
  not_supported: "not_supported";
115
124
  permission_denied: "permission_denied";
@@ -150,8 +159,11 @@ export declare const TranscriptionRecordingResponse: z.ZodObject<{
150
159
  transcriptText: z.ZodNullable<z.ZodString>;
151
160
  languages: z.ZodArray<z.ZodString>;
152
161
  errorCode: z.ZodNullable<z.ZodEnum<{
162
+ allowance_exhausted: "allowance_exhausted";
153
163
  cancelled: "cancelled";
164
+ insufficient_credits: "insufficient_credits";
154
165
  invalid_audio: "invalid_audio";
166
+ monthly_model_cost_limit: "monthly_model_cost_limit";
155
167
  network: "network";
156
168
  not_supported: "not_supported";
157
169
  permission_denied: "permission_denied";
@@ -181,8 +193,11 @@ export declare const TranscriptionRecordingResponse: z.ZodObject<{
181
193
  durationMilliseconds: z.ZodNumber;
182
194
  byteLength: z.ZodNumber;
183
195
  errorCode: z.ZodNullable<z.ZodEnum<{
196
+ allowance_exhausted: "allowance_exhausted";
184
197
  cancelled: "cancelled";
198
+ insufficient_credits: "insufficient_credits";
185
199
  invalid_audio: "invalid_audio";
200
+ monthly_model_cost_limit: "monthly_model_cost_limit";
186
201
  network: "network";
187
202
  not_supported: "not_supported";
188
203
  permission_denied: "permission_denied";
@@ -221,8 +236,11 @@ export declare const TranscriptionRecordingListResponse: z.ZodObject<{
221
236
  transcriptText: z.ZodNullable<z.ZodString>;
222
237
  languages: z.ZodArray<z.ZodString>;
223
238
  errorCode: z.ZodNullable<z.ZodEnum<{
239
+ allowance_exhausted: "allowance_exhausted";
224
240
  cancelled: "cancelled";
241
+ insufficient_credits: "insufficient_credits";
225
242
  invalid_audio: "invalid_audio";
243
+ monthly_model_cost_limit: "monthly_model_cost_limit";
226
244
  network: "network";
227
245
  not_supported: "not_supported";
228
246
  permission_denied: "permission_denied";
@@ -264,8 +282,11 @@ export declare const UploadTranscriptionRecordingChunkResponse: z.ZodObject<{
264
282
  transcriptText: z.ZodNullable<z.ZodString>;
265
283
  languages: z.ZodArray<z.ZodString>;
266
284
  errorCode: z.ZodNullable<z.ZodEnum<{
285
+ allowance_exhausted: "allowance_exhausted";
267
286
  cancelled: "cancelled";
287
+ insufficient_credits: "insufficient_credits";
268
288
  invalid_audio: "invalid_audio";
289
+ monthly_model_cost_limit: "monthly_model_cost_limit";
269
290
  network: "network";
270
291
  not_supported: "not_supported";
271
292
  permission_denied: "permission_denied";