@opengeni/contracts 3.1.0-canary.2 → 3.1.2

package/dist/agent-instruction-changes.d.ts

@@ -2,7 +2,6 @@ import { z } from "zod";
 export declare const AgentInstructionEditMode: z.ZodEnum<{
     append: "append";
     edit: "edit";
-    replace: "replace";
 }>;
 export type AgentInstructionEditMode = z.infer<typeof AgentInstructionEditMode>;
 export declare const AgentInstructionSaveRequest: z.ZodObject<{
@@ -21,7 +20,6 @@ export declare const AgentInstructionSaveRequest: z.ZodObject<{
     editMode: z.ZodEnum<{
         append: "append";
         edit: "edit";
-        replace: "replace";
     }>;
     content: z.ZodOptional<z.ZodString>;
     oldText: z.ZodOptional<z.ZodString>;

package/dist/allowance-refusal.d.ts

@@ -0,0 +1,9 @@
+import type { AllowanceExhaustedRefusal } from "./usage-allowances.js";
+/** Select only public refusal fields, including from an API error's details.
+ * LimitDecision's allowed:false and transport/SQL diagnostics never cross out.
+ */
+export declare function parseAllowanceExhaustedRefusal(value: unknown): AllowanceExhaustedRefusal | null;
+/** Bounded, fixed remedies: a ceiling is not an exhausted billing source.
+ * Never interpolate arbitrary exception prose or a member identifier.
+ */
+export declare function allowanceExhaustedMessage(refusal: AllowanceExhaustedRefusal): string;

package/dist/allowance-refusal.js

@@ -0,0 +1,50 @@
+// src/allowance-refusal.ts
+var MESSAGE_MAX_UTF8_BYTES = 1024;
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function resetTimestamp(value) {
+  if (value === null) return true;
+  if (typeof value !== "string" || value.length > 64) return false;
+  const parts = /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.exec(
+    value
+  );
+  if (!parts || !Number.isFinite(Date.parse(value))) return false;
+  const year = Number(parts[1]);
+  const month = Number(parts[2]);
+  const day = Number(parts[3]);
+  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
+  return day <= days[month - 1];
+}
+function parseAllowanceExhaustedRefusal(value) {
+  const source = record(value);
+  if (source?.code !== "allowance_exhausted") return null;
+  const fields = record(source.details) ?? source;
+  const scope = fields.scope;
+  const subjectId = scope === "member" ? fields.subjectId : void 0;
+  if (typeof source.message !== "string" || scope !== "workspace" && scope !== "member" || !resetTimestamp(fields.resetsAt) || subjectId !== void 0 && (typeof subjectId !== "string" || subjectId.length === 0 || subjectId.length > 1024 || subjectId.includes("\0"))) {
+    return null;
+  }
+  const normalized = source.message.slice(0, MESSAGE_MAX_UTF8_BYTES * 2).replace(/[\u0000-\u001f\u007f]+/g, " ").trim();
+  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));
+  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);
+  while (end > 0 && end < bytes.length && (bytes[end] & 192) === 128) end -= 1;
+  return {
+    code: "allowance_exhausted",
+    scope,
+    resetsAt: fields.resetsAt,
+    ...typeof subjectId === "string" ? { subjectId } : {},
+    message: new TextDecoder().decode(bytes.slice(0, end)).trim()
+  };
+}
+function allowanceExhaustedMessage(refusal) {
+  const remedy = refusal.scope === "workspace" ? "The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant." : "The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.";
+  const reset = refusal.resetsAt === null ? "This allowance has no automatic reset." : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace("T", " ")} UTC.`;
+  return `${remedy} ${reset}`;
+}
+export {
+  allowanceExhaustedMessage,
+  parseAllowanceExhaustedRefusal
+};
+//# sourceMappingURL=allowance-refusal.js.map

package/dist/allowance-refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/allowance-refusal.ts"],"sourcesContent":["import type { AllowanceExhaustedRefusal } from \"./usage-allowances\";\n\nconst MESSAGE_MAX_UTF8_BYTES = 1_024;\n\nfunction record(value: unknown): Record<string, unknown> | null {\n  return value !== null && typeof value === \"object\" && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\n/** Mirror the canonical offset datetime's calendar/time bounds without loading\n * the schema runtime into synchronous browser/React Native session projection.\n * Contract-parity tests guard this deliberately small, bounded wire leaf.\n */\nfunction resetTimestamp(value: unknown): value is string | null {\n  if (value === null) return true;\n  if (typeof value !== \"string\" || value.length > 64) return false;\n  const parts =\n    /^(\\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\\d|3[01])T(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z|[+-](?:[01]\\d|2[0-3]):[0-5]\\d)$/.exec(\n      value,\n    );\n  if (!parts || !Number.isFinite(Date.parse(value))) return false;\n  const year = Number(parts[1]);\n  const month = Number(parts[2]);\n  const day = Number(parts[3]);\n  const leapYear = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);\n  const days = [31, leapYear ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];\n  return day <= days[month - 1]!;\n}\n\n/** Select only public refusal fields, including from an API error's details.\n * LimitDecision's allowed:false and transport/SQL diagnostics never cross out.\n */\nexport function parseAllowanceExhaustedRefusal(value: unknown): AllowanceExhaustedRefusal | null {\n  const source = record(value);\n  if (source?.code !== \"allowance_exhausted\") return null;\n  const fields = record(source.details) ?? source;\n  const scope = fields.scope;\n  const subjectId = scope === \"member\" ? fields.subjectId : undefined;\n  if (\n    typeof source.message !== \"string\" ||\n    (scope !== \"workspace\" && scope !== \"member\") ||\n    !resetTimestamp(fields.resetsAt) ||\n    (subjectId !== undefined &&\n      (typeof subjectId !== \"string\" ||\n        subjectId.length === 0 ||\n        subjectId.length > 1_024 ||\n        subjectId.includes(\"\\0\")))\n  ) {\n    return null;\n  }\n  const normalized = source.message\n    .slice(0, MESSAGE_MAX_UTF8_BYTES * 2)\n    .replace(/[\\u0000-\\u001f\\u007f]+/g, \" \")\n    .trim();\n  const bytes = new TextEncoder().encode(normalized.slice(0, MESSAGE_MAX_UTF8_BYTES * 2));\n  let end = Math.min(bytes.length, MESSAGE_MAX_UTF8_BYTES);\n  while (end > 0 && end < bytes.length && (bytes[end]! & 0xc0) === 0x80) end -= 1;\n  return {\n    code: \"allowance_exhausted\",\n    scope,\n    resetsAt: fields.resetsAt,\n    ...(typeof subjectId === \"string\" ? { subjectId } : {}),\n    message: new TextDecoder().decode(bytes.slice(0, end)).trim(),\n  };\n}\n\n/** Bounded, fixed remedies: a ceiling is not an exhausted billing source.\n * Never interpolate arbitrary exception prose or a member identifier.\n */\nexport function allowanceExhaustedMessage(refusal: AllowanceExhaustedRefusal): string {\n  const remedy =\n    refusal.scope === \"workspace\"\n      ? \"The workspace usage allowance is exhausted. An organization administrator or a full-access organization API key can raise the workspace ceiling or add an allowance grant.\"\n      : \"The member usage allowance is exhausted. A workspace administrator or a full-access organization API key can adjust the member ceiling.\";\n  const reset =\n    refusal.resetsAt === null\n      ? \"This allowance has no automatic reset.\"\n      : `It resets at ${new Date(refusal.resetsAt).toISOString().slice(0, 16).replace(\"T\", \" \")} UTC.`;\n  return `${remedy} ${reset}`;\n}\n"],"mappings":";AAEA,IAAM,yBAAyB;AAE/B,SAAS,OAAO,OAAgD;AAC9D,SAAO,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,IACrE,QACD;AACN;AAMA,SAAS,eAAe,OAAwC;AAC9D,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,GAAI,QAAO;AAC3D,QAAM,QACJ,sIAAsI;AAAA,IACpI;AAAA,EACF;AACF,MAAI,CAAC,SAAS,CAAC,OAAO,SAAS,KAAK,MAAM,KAAK,CAAC,EAAG,QAAO;AAC1D,QAAM,OAAO,OAAO,MAAM,CAAC,CAAC;AAC5B,QAAM,QAAQ,OAAO,MAAM,CAAC,CAAC;AAC7B,QAAM,MAAM,OAAO,MAAM,CAAC,CAAC;AAC3B,QAAM,WAAW,OAAO,MAAM,MAAM,OAAO,QAAQ,KAAK,OAAO,QAAQ;AACvE,QAAM,OAAO,CAAC,IAAI,WAAW,KAAK,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE;AAC5E,SAAO,OAAO,KAAK,QAAQ,CAAC;AAC9B;AAKO,SAAS,+BAA+B,OAAkD;AAC/F,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,QAAQ,SAAS,sBAAuB,QAAO;AACnD,QAAM,SAAS,OAAO,OAAO,OAAO,KAAK;AACzC,QAAM,QAAQ,OAAO;AACrB,QAAM,YAAY,UAAU,WAAW,OAAO,YAAY;AAC1D,MACE,OAAO,OAAO,YAAY,YACzB,UAAU,eAAe,UAAU,YACpC,CAAC,eAAe,OAAO,QAAQ,KAC9B,cAAc,WACZ,OAAO,cAAc,YACpB,UAAU,WAAW,KACrB,UAAU,SAAS,QACnB,UAAU,SAAS,IAAI,IAC3B;AACA,WAAO;AAAA,EACT;AACA,QAAM,aAAa,OAAO,QACvB,MAAM,GAAG,yBAAyB,CAAC,EACnC,QAAQ,2BAA2B,GAAG,EACtC,KAAK;AACR,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,WAAW,MAAM,GAAG,yBAAyB,CAAC,CAAC;AACtF,MAAI,MAAM,KAAK,IAAI,MAAM,QAAQ,sBAAsB;AACvD,SAAO,MAAM,KAAK,MAAM,MAAM,WAAW,MAAM,GAAG,IAAK,SAAU,IAAM,QAAO;AAC9E,SAAO;AAAA,IACL,MAAM;AAAA,IACN;AAAA,IACA,UAAU,OAAO;AAAA,IACjB,GAAI,OAAO,cAAc,WAAW,EAAE,UAAU,IAAI,CAAC;AAAA,IACrD,SAAS,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,KAAK;AAAA,EAC9D;AACF;AAKO,SAAS,0BAA0B,SAA4C;AACpF,QAAM,SACJ,QAAQ,UAAU,cACd,+KACA;AACN,QAAM,QACJ,QAAQ,aAAa,OACjB,2CACA,gBAAgB,IAAI,KAAK,QAAQ,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE,EAAE,QAAQ,KAAK,GAAG,CAAC;AAC7F,SAAO,GAAG,MAAM,IAAI,KAAK;AAC3B;","names":[]}

package/dist/analytics-consent-report.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Wire grammar of the content-free analytics consent beacon
+ * (`POST /v1/analytics-consent`).
+ *
+ * When a person answers the web console's optional-analytics banner, the
+ * browser reports only the closed decision so the API can count choices in
+ * `opengeni_analytics_consent_total{decision}`. The count shows how much of
+ * the audience the consent-gated analytics providers never see. A report
+ * carries no identifier, URL, cookie, or user content, and the web client and
+ * the API route both validate against these exact values.
+ */
+export declare const ANALYTICS_CONSENT_PATH = "/v1/analytics-consent";
+export declare const ANALYTICS_CONSENT_DECISIONS: readonly ["granted", "denied"];
+export type AnalyticsConsentDecision = (typeof ANALYTICS_CONSENT_DECISIONS)[number];
+/** Largest accepted report body. A valid report is under 32 bytes. */
+export declare const ANALYTICS_CONSENT_REPORT_MAX_BYTES = 128;
+export type AnalyticsConsentReport = {
+    decision: AnalyticsConsentDecision;
+};

package/dist/analytics-consent-report.js

@@ -0,0 +1,10 @@
+// src/analytics-consent-report.ts
+var ANALYTICS_CONSENT_PATH = "/v1/analytics-consent";
+var ANALYTICS_CONSENT_DECISIONS = ["granted", "denied"];
+var ANALYTICS_CONSENT_REPORT_MAX_BYTES = 128;
+export {
+  ANALYTICS_CONSENT_DECISIONS,
+  ANALYTICS_CONSENT_PATH,
+  ANALYTICS_CONSENT_REPORT_MAX_BYTES
+};
+//# sourceMappingURL=analytics-consent-report.js.map

package/dist/analytics-consent-report.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/analytics-consent-report.ts"],"sourcesContent":["/**\n * Wire grammar of the content-free analytics consent beacon\n * (`POST /v1/analytics-consent`).\n *\n * When a person answers the web console's optional-analytics banner, the\n * browser reports only the closed decision so the API can count choices in\n * `opengeni_analytics_consent_total{decision}`. The count shows how much of\n * the audience the consent-gated analytics providers never see. A report\n * carries no identifier, URL, cookie, or user content, and the web client and\n * the API route both validate against these exact values.\n */\nexport const ANALYTICS_CONSENT_PATH = \"/v1/analytics-consent\";\n\nexport const ANALYTICS_CONSENT_DECISIONS = [\"granted\", \"denied\"] as const;\nexport type AnalyticsConsentDecision = (typeof ANALYTICS_CONSENT_DECISIONS)[number];\n\n/** Largest accepted report body. A valid report is under 32 bytes. */\nexport const ANALYTICS_CONSENT_REPORT_MAX_BYTES = 128;\n\nexport type AnalyticsConsentReport = { decision: AnalyticsConsentDecision };\n"],"mappings":";AAWO,IAAM,yBAAyB;AAE/B,IAAM,8BAA8B,CAAC,WAAW,QAAQ;AAIxD,IAAM,qCAAqC;","names":[]}

package/dist/api-key-presets.d.ts

@@ -0,0 +1,19 @@
+import { z } from "zod";
+/** Optional creation alias for the developer_setup organization access tier. */
+export declare const OrganizationApiKeyPreset: z.ZodEnum<{
+    developer_setup: "developer_setup";
+}>;
+export type OrganizationApiKeyPreset = z.infer<typeof OrganizationApiKeyPreset>;
+/**
+ * The current setup-route floor: workspace provisioning, configuration/cleanup,
+ * and explicit literal budget authority. workspace:admin also covers discovery and session/tool/
+ * schedule guards. It is broad authority, not setup-only, and never confers
+ * literal secrets:read. No account:admin, billing, or redundant read scopes.
+ */
+export declare const DEVELOPER_SETUP_API_KEY_PRESET: {
+    readonly id: "developer_setup";
+    readonly label: "Developer setup";
+    readonly description: "Set up shared workspaces, tools and budgets. Includes broad workspace administration and expires after 24 hours. Can't manage API keys.";
+    readonly permissions: ("usage_allowances:manage" | "workspace:admin" | "workspace:create")[];
+    readonly defaultExpiryHours: 24;
+};

package/dist/artifact-catalog.d.ts

@@ -0,0 +1,188 @@
+import { z } from "zod";
+export declare const ArtifactCatalogKind: z.ZodEnum<{
+    document: "document";
+    file: "file";
+    image: "image";
+    presentation: "presentation";
+    site: "site";
+    spreadsheet: "spreadsheet";
+}>;
+export type ArtifactCatalogKind = z.infer<typeof ArtifactCatalogKind>;
+/** Metadata only: native domain IDs, never content, storage keys or credentials. */
+export declare const ArtifactCatalogItem: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodEnum<{
+        document: "document";
+        file: "file";
+        image: "image";
+        presentation: "presentation";
+        site: "site";
+        spreadsheet: "spreadsheet";
+    }>;
+    title: z.ZodString;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+    status: z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+    }>;
+    pinned: z.ZodOptional<z.ZodBoolean>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        private: "private";
+        workspace: "workspace";
+    }>>;
+    sourceSessionId: z.ZodOptional<z.ZodString>;
+    versionId: z.ZodOptional<z.ZodString>;
+    file: z.ZodOptional<z.ZodObject<{
+        available: z.ZodLiteral<true>;
+        artifactId: z.ZodString;
+        kind: z.ZodEnum<{
+            assistant_completion: "assistant_completion";
+            browser_screenshot: "browser_screenshot";
+            computer_screenshot: "computer_screenshot";
+            event_media: "event_media";
+            file: "file";
+            generated_image: "generated_image";
+            generated_video: "generated_video";
+            internal_update: "internal_update";
+            tool_result: "tool_result";
+        }>;
+        contentType: z.ZodString;
+        originalBytes: z.ZodNumber;
+        sha256: z.ZodString;
+        retainedAt: z.ZodString;
+        dimensions: z.ZodOptional<z.ZodObject<{
+            width: z.ZodNumber;
+            height: z.ZodNumber;
+        }, z.core.$strict>>;
+        retention: z.ZodUnion<readonly [z.ZodObject<{
+            policy: z.ZodLiteral<"workspace_file">;
+            expiresAt: z.ZodNull;
+        }, z.core.$strict>, z.ZodObject<{
+            policy: z.ZodLiteral<"session_screenshot">;
+            expiresAt: z.ZodString;
+        }, z.core.$strict>]>;
+        retrieval: z.ZodObject<{
+            method: z.ZodLiteral<"GET">;
+            path: z.ZodString;
+            acceptRanges: z.ZodLiteral<"bytes">;
+            maxRangeBytes: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    filename: z.ZodOptional<z.ZodString>;
+    contentType: z.ZodOptional<z.ZodString>;
+    sizeBytes: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type ArtifactCatalogItem = z.infer<typeof ArtifactCatalogItem>;
+export declare const ArtifactCatalogListQuery: z.ZodObject<{
+    sourceSessionId: z.ZodOptional<z.ZodString>;
+    q: z.ZodOptional<z.ZodString>;
+    kind: z.ZodOptional<z.ZodEnum<{
+        document: "document";
+        file: "file";
+        image: "image";
+        presentation: "presentation";
+        site: "site";
+        spreadsheet: "spreadsheet";
+    }>>;
+    sort: z.ZodDefault<z.ZodEnum<{
+        newest: "newest";
+        title: "title";
+        updated: "updated";
+    }>>;
+    status: z.ZodDefault<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+    }>>;
+    limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+    cursor: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ArtifactCatalogListQuery = z.infer<typeof ArtifactCatalogListQuery>;
+export type ArtifactCatalogListOptions = Omit<z.input<typeof ArtifactCatalogListQuery>, "limit"> & {
+    limit?: number;
+};
+export declare const ArtifactCatalogListResponse: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            document: "document";
+            file: "file";
+            image: "image";
+            presentation: "presentation";
+            site: "site";
+            spreadsheet: "spreadsheet";
+        }>;
+        title: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+        status: z.ZodEnum<{
+            active: "active";
+            archived: "archived";
+        }>;
+        pinned: z.ZodOptional<z.ZodBoolean>;
+        visibility: z.ZodOptional<z.ZodEnum<{
+            private: "private";
+            workspace: "workspace";
+        }>>;
+        sourceSessionId: z.ZodOptional<z.ZodString>;
+        versionId: z.ZodOptional<z.ZodString>;
+        file: z.ZodOptional<z.ZodObject<{
+            available: z.ZodLiteral<true>;
+            artifactId: z.ZodString;
+            kind: z.ZodEnum<{
+                assistant_completion: "assistant_completion";
+                browser_screenshot: "browser_screenshot";
+                computer_screenshot: "computer_screenshot";
+                event_media: "event_media";
+                file: "file";
+                generated_image: "generated_image";
+                generated_video: "generated_video";
+                internal_update: "internal_update";
+                tool_result: "tool_result";
+            }>;
+            contentType: z.ZodString;
+            originalBytes: z.ZodNumber;
+            sha256: z.ZodString;
+            retainedAt: z.ZodString;
+            dimensions: z.ZodOptional<z.ZodObject<{
+                width: z.ZodNumber;
+                height: z.ZodNumber;
+            }, z.core.$strict>>;
+            retention: z.ZodUnion<readonly [z.ZodObject<{
+                policy: z.ZodLiteral<"workspace_file">;
+                expiresAt: z.ZodNull;
+            }, z.core.$strict>, z.ZodObject<{
+                policy: z.ZodLiteral<"session_screenshot">;
+                expiresAt: z.ZodString;
+            }, z.core.$strict>]>;
+            retrieval: z.ZodObject<{
+                method: z.ZodLiteral<"GET">;
+                path: z.ZodString;
+                acceptRanges: z.ZodLiteral<"bytes">;
+                maxRangeBytes: z.ZodNumber;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        filename: z.ZodOptional<z.ZodString>;
+        contentType: z.ZodOptional<z.ZodString>;
+        sizeBytes: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    nextCursor: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type ArtifactCatalogListResponse = z.infer<typeof ArtifactCatalogListResponse>;
+export declare const UpdateArtifactPinRequest: z.ZodObject<{
+    pinned: z.ZodBoolean;
+}, z.core.$strict>;
+export type UpdateArtifactPinRequest = z.infer<typeof UpdateArtifactPinRequest>;
+export declare const ArtifactPinResponse: z.ZodObject<{
+    kind: z.ZodEnum<{
+        document: "document";
+        file: "file";
+        image: "image";
+        presentation: "presentation";
+        site: "site";
+        spreadsheet: "spreadsheet";
+    }>;
+    artifactId: z.ZodString;
+    pinned: z.ZodBoolean;
+}, z.core.$strict>;
+export type ArtifactPinResponse = z.infer<typeof ArtifactPinResponse>;

package/dist/artifacts.d.ts

@@ -59,6 +59,15 @@ export declare const WorkspaceArtifactVersion: z.ZodObject<{
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type WorkspaceArtifactVersion = z.infer<typeof WorkspaceArtifactVersion>;
+/**
+ * Who can see a Site, in the same words as a chat or a schedule: everyone in
+ * the workspace, or only its owner ("Only me").
+ */
+export declare const WorkspaceArtifactVisibility: z.ZodEnum<{
+    private: "private";
+    workspace: "workspace";
+}>;
+export type WorkspaceArtifactVisibility = z.infer<typeof WorkspaceArtifactVisibility>;
 export declare const WorkspaceArtifact: z.ZodObject<{
     id: z.ZodString;
     accountId: z.ZodString;
@@ -70,6 +79,11 @@ export declare const WorkspaceArtifact: z.ZodObject<{
         active: "active";
         archived: "archived";
     }>;
+    visibility: z.ZodDefault<z.ZodEnum<{
+        private: "private";
+        workspace: "workspace";
+    }>>;
+    ownerSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     currentVersion: z.ZodNullable<z.ZodObject<{
         id: z.ZodString;
         accountId: z.ZodString;
@@ -148,6 +162,11 @@ export declare const WorkspaceArtifactListResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        visibility: z.ZodDefault<z.ZodEnum<{
+            private: "private";
+            workspace: "workspace";
+        }>>;
+        ownerSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         currentVersion: z.ZodNullable<z.ZodObject<{
             id: z.ZodString;
             accountId: z.ZodString;
@@ -190,6 +209,11 @@ export declare const WorkspaceArtifactDetailResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        visibility: z.ZodDefault<z.ZodEnum<{
+            private: "private";
+            workspace: "workspace";
+        }>>;
+        ownerSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         currentVersion: z.ZodNullable<z.ZodObject<{
             id: z.ZodString;
             accountId: z.ZodString;
@@ -281,6 +305,10 @@ export declare const CreateWorkspaceArtifactRequest: z.ZodObject<{
         serverId: z.ZodString;
         toolName: z.ZodString;
     }, z.core.$strict>>>;
+    visibility: z.ZodOptional<z.ZodEnum<{
+        private: "private";
+        workspace: "workspace";
+    }>>;
     idempotencyKey: z.ZodString;
 }, z.core.$strip>;
 export type CreateWorkspaceArtifactRequest = z.infer<typeof CreateWorkspaceArtifactRequest>;
@@ -321,6 +349,59 @@ export declare const SetWorkspaceArtifactStatusRequest: z.ZodObject<{
     idempotencyKey: z.ZodString;
 }, z.core.$strip>;
 export type SetWorkspaceArtifactStatusRequest = z.infer<typeof SetWorkspaceArtifactStatusRequest>;
+/** Change who can see a Site. Only its owner can. */
+export declare const UpdateWorkspaceArtifactVisibilityRequest: z.ZodObject<{
+    visibility: z.ZodEnum<{
+        private: "private";
+        workspace: "workspace";
+    }>;
+}, z.core.$strict>;
+export type UpdateWorkspaceArtifactVisibilityRequest = z.infer<typeof UpdateWorkspaceArtifactVisibilityRequest>;
+export declare const UpdateWorkspaceArtifactVisibilityResponse: z.ZodObject<{
+    artifact: z.ZodObject<{
+        id: z.ZodString;
+        accountId: z.ZodString;
+        workspaceId: z.ZodString;
+        slug: z.ZodString;
+        title: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            active: "active";
+            archived: "archived";
+        }>;
+        visibility: z.ZodDefault<z.ZodEnum<{
+            private: "private";
+            workspace: "workspace";
+        }>>;
+        ownerSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        currentVersion: z.ZodNullable<z.ZodObject<{
+            id: z.ZodString;
+            accountId: z.ZodString;
+            workspaceId: z.ZodString;
+            artifactId: z.ZodString;
+            revision: z.ZodNumber;
+            contentType: z.ZodLiteral<"text/html">;
+            contentSha256: z.ZodNullable<z.ZodString>;
+            sizeBytes: z.ZodNumber;
+            sourceSha256: z.ZodNullable<z.ZodString>;
+            sourceSizeBytes: z.ZodNullable<z.ZodNumber>;
+            requestedTools: z.ZodArray<z.ZodObject<{
+                serverId: z.ZodString;
+                toolName: z.ZodString;
+            }, z.core.$strict>>;
+            sourceSessionId: z.ZodNullable<z.ZodString>;
+            sourceTurnId: z.ZodNullable<z.ZodString>;
+            sourceAttemptId: z.ZodNullable<z.ZodString>;
+            sourceExecutionGeneration: z.ZodNullable<z.ZodNumber>;
+            createdBySubjectId: z.ZodString;
+            createdAt: z.ZodString;
+        }, z.core.$strip>>;
+        createdBySubjectId: z.ZodString;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type UpdateWorkspaceArtifactVisibilityResponse = z.infer<typeof UpdateWorkspaceArtifactVisibilityResponse>;
 export declare const WorkspaceArtifactMutationResponse: z.ZodObject<{
     artifact: z.ZodObject<{
         id: z.ZodString;
@@ -333,6 +414,11 @@ export declare const WorkspaceArtifactMutationResponse: z.ZodObject<{
             active: "active";
             archived: "archived";
         }>;
+        visibility: z.ZodDefault<z.ZodEnum<{
+            private: "private";
+            workspace: "workspace";
+        }>>;
+        ownerSubjectId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         currentVersion: z.ZodNullable<z.ZodObject<{
             id: z.ZodString;
             accountId: z.ZodString;

package/dist/atlassian-native-retirement.d.ts

@@ -0,0 +1,16 @@
+/** The former API/Knowledge-sync adapter is historical; hosted Atlassian MCP remains supported. */
+export declare const ATLASSIAN_NATIVE_RETIRED_REASON: "atlassian_native_retired";
+export declare const ATLASSIAN_NATIVE_RETIRED_MESSAGE = "Jira and Confluence knowledge sync has been retired. Connect Atlassian agent tools to use its hosted MCP server.";
+export declare const RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES: readonly ["atlassian_sources_list", "atlassian_search", "atlassian_get"];
+export declare function isRetiredNativeAtlassianTool(name: string): boolean;
+/** Match the native source identity, never the hosted MCP provider or a display name. */
+export declare function isRetiredNativeAtlassianSource(source: unknown): boolean;
+/** Includes frozen historical source actions without changing their stored bytes. */
+export declare function isRetiredNativeAtlassianTask(task: {
+    agentConfig?: {
+        knowledgeSource?: unknown;
+    } | null;
+    action?: {
+        kind?: unknown;
+    } | null;
+}): boolean;

package/dist/atlassian-native-retirement.js

@@ -0,0 +1,30 @@
+// src/atlassian-native-retirement.ts
+var ATLASSIAN_NATIVE_RETIRED_REASON = "atlassian_native_retired";
+var ATLASSIAN_NATIVE_RETIRED_MESSAGE = "Jira and Confluence knowledge sync has been retired. Connect Atlassian agent tools to use its hosted MCP server.";
+var RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES = [
+  "atlassian_sources_list",
+  "atlassian_search",
+  "atlassian_get"
+];
+function isRetiredNativeAtlassianTool(name) {
+  return RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES.includes(name);
+}
+function isRetiredNativeAtlassianSource(source) {
+  if (!source || typeof source !== "object") return false;
+  const connection = source.connection;
+  if (!connection || typeof connection !== "object") return false;
+  const provider = connection.providerDomain;
+  return typeof provider === "string" && provider.toLowerCase() === "api.atlassian.com";
+}
+function isRetiredNativeAtlassianTask(task) {
+  return isRetiredNativeAtlassianSource(task.agentConfig?.knowledgeSource) || task.action?.kind === "knowledge_source_sync" && isRetiredNativeAtlassianSource(task.action);
+}
+export {
+  ATLASSIAN_NATIVE_RETIRED_MESSAGE,
+  ATLASSIAN_NATIVE_RETIRED_REASON,
+  RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES,
+  isRetiredNativeAtlassianSource,
+  isRetiredNativeAtlassianTask,
+  isRetiredNativeAtlassianTool
+};
+//# sourceMappingURL=atlassian-native-retirement.js.map

package/dist/atlassian-native-retirement.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/atlassian-native-retirement.ts"],"sourcesContent":["/** The former API/Knowledge-sync adapter is historical; hosted Atlassian MCP remains supported. */\nexport const ATLASSIAN_NATIVE_RETIRED_REASON = \"atlassian_native_retired\" as const;\nexport const ATLASSIAN_NATIVE_RETIRED_MESSAGE =\n  \"Jira and Confluence knowledge sync has been retired. Connect Atlassian agent tools to use its hosted MCP server.\";\nexport const RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES = [\n  \"atlassian_sources_list\",\n  \"atlassian_search\",\n  \"atlassian_get\",\n] as const;\n\nexport function isRetiredNativeAtlassianTool(name: string): boolean {\n  return (RETIRED_NATIVE_ATLASSIAN_TOOL_NAMES as readonly string[]).includes(name);\n}\n\n/** Match the native source identity, never the hosted MCP provider or a display name. */\nexport function isRetiredNativeAtlassianSource(source: unknown): boolean {\n  if (!source || typeof source !== \"object\") return false;\n  const connection = (source as { connection?: unknown }).connection;\n  if (!connection || typeof connection !== \"object\") return false;\n  const provider = (connection as { providerDomain?: unknown }).providerDomain;\n  return typeof provider === \"string\" && provider.toLowerCase() === \"api.atlassian.com\";\n}\n\n/** Includes frozen historical source actions without changing their stored bytes. */\nexport function isRetiredNativeAtlassianTask(task: {\n  agentConfig?: { knowledgeSource?: unknown } | null;\n  action?: { kind?: unknown } | null;\n}): boolean {\n  return (\n    isRetiredNativeAtlassianSource(task.agentConfig?.knowledgeSource) ||\n    (task.action?.kind === \"knowledge_source_sync\" && isRetiredNativeAtlassianSource(task.action))\n  );\n}\n"],"mappings":";AACO,IAAM,kCAAkC;AACxC,IAAM,mCACX;AACK,IAAM,sCAAsC;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,6BAA6B,MAAuB;AAClE,SAAQ,oCAA0D,SAAS,IAAI;AACjF;AAGO,SAAS,+BAA+B,QAA0B;AACvE,MAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;AAClD,QAAM,aAAc,OAAoC;AACxD,MAAI,CAAC,cAAc,OAAO,eAAe,SAAU,QAAO;AAC1D,QAAM,WAAY,WAA4C;AAC9D,SAAO,OAAO,aAAa,YAAY,SAAS,YAAY,MAAM;AACpE;AAGO,SAAS,6BAA6B,MAGjC;AACV,SACE,+BAA+B,KAAK,aAAa,eAAe,KAC/D,KAAK,QAAQ,SAAS,2BAA2B,+BAA+B,KAAK,MAAM;AAEhG;","names":[]}

package/dist/atlassian.d.ts

@@ -181,6 +181,7 @@ export declare const AtlassianBrowseResponse: z.ZodObject<{
     connection: z.ZodLazy<z.ZodObject<{
         id: z.ZodString;
         authorityId: z.ZodOptional<z.ZodString>;
+        connectionAuthorityGeneration: z.ZodOptional<z.ZodNumber>;
         accountId: z.ZodString;
         workspaceId: z.ZodString;
         subjectId: z.ZodNullable<z.ZodString>;

package/dist/atlassian.js

@@ -17,29 +17,44 @@ import {
   AtlassianSyncCadence,
   SaveAtlassianSourcesRequest,
   atlassianScopesAllowRead
-} from "./chunk-QQUJ6NPW.js";
-import "./chunk-YBW5JSA3.js";
-import "./chunk-O5LEQHDM.js";
-import "./chunk-GRG7PHWQ.js";
-import "./chunk-RKX3NQYS.js";
-import "./chunk-MRWYRAS5.js";
-import "./chunk-3SIZGL3O.js";
+} from "./chunk-OF6OKOBF.js";
+import "./chunk-EFZYKUE2.js";
+import "./chunk-Z7WEVGCL.js";
+import "./chunk-4JGHSSB7.js";
+import "./chunk-2ZIHHL72.js";
+import "./chunk-LZ2LAHIX.js";
+import "./chunk-NDZHPTCL.js";
+import "./chunk-SHO4YO4B.js";
+import "./chunk-TSWWZMUS.js";
+import "./chunk-XDLAGX66.js";
+import "./chunk-4VDMHLLL.js";
+import "./chunk-E3GGUBHS.js";
+import "./chunk-KHHZTBP7.js";
+import "./chunk-6IXO76Z6.js";
 import "./chunk-NVJMJWLL.js";
+import "./chunk-352X6ENP.js";
 import "./chunk-YRKRZ6OF.js";
-import "./chunk-JUFK3T4Q.js";
-import "./chunk-M5ZGRVIQ.js";
-import "./chunk-BCS7WHCK.js";
-import "./chunk-5LYFSZ7O.js";
-import "./chunk-Y3KNXVTD.js";
-import "./chunk-D2HKF2EF.js";
-import "./chunk-TXTQIYCV.js";
+import "./chunk-J4HQ3UKY.js";
+import "./chunk-YKZ4WU4P.js";
+import "./chunk-TLU3UEMD.js";
+import "./chunk-OL23ARTF.js";
+import "./chunk-TCXCRBPF.js";
+import "./chunk-ZDCRWCGZ.js";
+import "./chunk-SWRN2DJ3.js";
+import "./chunk-HRRU4QPI.js";
+import "./chunk-IK36LXKC.js";
 import "./chunk-RIY7GYQS.js";
+import "./chunk-4QO6GJUX.js";
+import "./chunk-EKWNTOG3.js";
+import "./chunk-56SNIMDO.js";
+import "./chunk-D2HKF2EF.js";
 import "./chunk-MYBZRDTY.js";
-import "./chunk-PX3VCKAU.js";
-import "./chunk-YRXAWWCU.js";
-import "./chunk-WYBDERIY.js";
-import "./chunk-P3HLDT77.js";
-import "./chunk-7ABONTXE.js";
+import "./chunk-PUIUXIOL.js";
+import "./chunk-RKX3NQYS.js";
+import "./chunk-7272KVWZ.js";
+import "./chunk-RMWXDZEO.js";
+import "./chunk-ILJ72KPO.js";
+import "./chunk-WVCFSOUZ.js";
 export {
   ATLASSIAN_CREDENTIAL_LABEL,
   ATLASSIAN_CREDENTIAL_ROLE,

package/dist/browser-storage.d.ts

@@ -0,0 +1,5 @@
+/** Persisted discriminator; null identity alone never implies ephemeral storage. */
+export declare const EPHEMERAL_CHROMIUM_DRIVER_ID: "opengeni.cdp.ephemeral-context.v1";
+export declare function browserSessionStorageMode(session: {
+    driverId: string;
+}): "private_profile" | "ephemeral_context";

package/dist/browser-storage.js

@@ -0,0 +1,9 @@
+import {
+  EPHEMERAL_CHROMIUM_DRIVER_ID,
+  browserSessionStorageMode
+} from "./chunk-4JGHSSB7.js";
+export {
+  EPHEMERAL_CHROMIUM_DRIVER_ID,
+  browserSessionStorageMode
+};
+//# sourceMappingURL=browser-storage.js.map

package/dist/browser-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}