@opengeni/react 0.46.1 → 0.52.1

package/dist/hooks/use-computer-session.d.ts

@@ -0,0 +1,28 @@
+import type { ComputerAction, ComputerActionReceipt, ComputerFrame, ComputerObservation, ComputerSession, ComputerTarget } from "@opengeni/sdk/interaction";
+import { type EmbeddedComputerInteractionClientOverride } from "../session-context.js";
+export type UseComputerSessionOptions = EmbeddedComputerInteractionClientOverride & {
+    computerSessionId: string | null;
+    enabled?: boolean | undefined;
+    pollIntervalMs?: number | undefined;
+};
+export type UseComputerSessionResult = {
+    session: ComputerSession | null;
+    targets: ComputerTarget[];
+    selectedTarget: ComputerTarget | null;
+    observation: ComputerObservation | null;
+    loading: boolean;
+    mutating: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    /** Changes only this viewer's target cursor; it never takes ownership or
+     * foregrounds an application. */
+    selectTarget: (targetId: string) => Promise<ComputerTarget>;
+    act: (action: ComputerAction, operationId?: string) => Promise<ComputerActionReceipt>;
+    /** Dispatch pointer input against the exact displayed frame. */
+    actFromFrame: (action: Extract<ComputerAction, {
+        type: "pointer";
+    }>, frame: ComputerFrame, operationId?: string) => Promise<ComputerActionReceipt>;
+};
+/** Selected ComputerSession state. Semantic and pixel input share the same
+ * generation-fenced controller operation stream used by agents. */
+export declare function useComputerSession(options: UseComputerSessionOptions): UseComputerSessionResult;

package/dist/hooks/use-computer-sessions.d.ts

@@ -0,0 +1,28 @@
+import type { ComputerSession, ComputerSessionMutationResponse, CreateComputerSessionRequest } from "@opengeni/sdk/interaction";
+import type { EmbeddedComputerInteractionClientLike } from "../client.js";
+import { type EmbeddedComputerInteractionClientOverride } from "../session-context.js";
+export type UseComputerSessionsOptions = EmbeddedComputerInteractionClientOverride & {
+    /** Current agent/session relevance. Workspace peers remain in `sessions`. */
+    sessionId?: string | undefined;
+    enabled?: boolean | undefined;
+    /** Temporary invalidation path until the interaction event stream lands. */
+    pollIntervalMs?: number | undefined;
+};
+export type UseComputerSessionsResult = {
+    revision: number;
+    sessions: ComputerSession[];
+    relevantSessions: ComputerSession[];
+    loading: boolean;
+    refreshing: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    create: (request: Omit<CreateComputerSessionRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<ComputerSessionMutationResponse>;
+    end: (computerSessionId: string, operationId?: string) => Promise<ComputerSessionMutationResponse>;
+};
+/** Workspace-wide ComputerSession registry. Associations rank relevance but
+ * never hide peer resources or create an ownership boundary. */
+export declare function useComputerSessions(options?: UseComputerSessionsOptions): UseComputerSessionsResult;
+/** Exported for narrow proxy implementations and tests. */
+export type ComputerSessionsClient = EmbeddedComputerInteractionClientLike;

package/dist/hooks/use-desktop-stream.d.ts

@@ -1,6 +1,6 @@
 import { type DesktopConnectionState, type DesktopRfbFactory, type DesktopStreamCapability } from "@opengeni/sdk";
 import { type RefObject } from "react";
-import { type DesktopWebSocketFactory } from "./use-relay-frame-stream";
+import { type DesktopWebSocketFactory } from "./use-relay-frame-stream.js";
 export type UseDesktopStreamOptions = {
     /** The desktop cell of the negotiated capabilities (`capabilities.DesktopStream`). */
     capability: DesktopStreamCapability | null;

package/dist/hooks/use-environments.d.ts

@@ -1,5 +1,5 @@
-import type { CreateVariableSetRequest, UpdateVariableSetRequest, VariableSet, VariableSetVariableMetadata } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import type { CreateVariableSetRequest, UpdateVariableSetRequest, VariableSet, VariableSetSecret, VariableSetVariableMetadata } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
 export type UseVariableSetsOptions = ClientOverride & {
     pollIntervalMs?: number | undefined;
     enabled?: boolean | undefined;
@@ -12,7 +12,12 @@ export type UseVariableSetsResult = {
     create: (request: CreateVariableSetRequest) => Promise<VariableSet | null>;
     update: (variableSetId: string, request: UpdateVariableSetRequest) => Promise<VariableSet | null>;
     remove: (variableSetId: string) => Promise<boolean>;
-    /** Set/rotate a variable. Values are write-only — reads expose metadata only. */
+    /**
+     * Read one exact value through the dedicated permissioned API. The hook never
+     * puts plaintext in its polled variable-set cache.
+     */
+    readVariable: (variableSetId: string, name: string) => Promise<VariableSetSecret | null>;
+    /** Set/rotate a variable. Generic reads expose metadata only. */
     setVariable: (variableSetId: string, name: string, value: string) => Promise<VariableSetVariableMetadata | null>;
     deleteVariable: (variableSetId: string, name: string) => Promise<boolean>;
     mutating: boolean;
@@ -21,8 +26,9 @@ export type UseVariableSetsResult = {
 };
 /**
  * Variable sets (named, encrypted variable sets attached to sessions
- * and scheduled tasks). Variable values are write-only end to end: this hook
- * never sees a value after it is sent.
+ * and scheduled tasks). Generic reads stay metadata-only. A dedicated,
+ * permissioned method can retrieve one value and returns it directly without
+ * adding plaintext to hook state or polling caches.
  */
 export declare function useVariableSets(options?: UseVariableSetsOptions): UseVariableSetsResult;
 /** @deprecated use UseVariableSetsOptions */

package/dist/hooks/use-file-attachments.d.ts

@@ -1,5 +1,5 @@
 import type { FileAsset, FileResourceRef } from "@opengeni/sdk";
-import { type EmbeddedFileAttachmentClientOverride } from "../session-context";
+import { type EmbeddedFileAttachmentClientOverride } from "../session-context.js";
 export type UseFileAttachmentsOptions = EmbeddedFileAttachmentClientOverride & {
     /**
      * Only files matching this predicate are accepted by {@link

package/dist/hooks/use-goal.d.ts

@@ -1,6 +1,6 @@
 import { type SessionEvent, type SessionGoal } from "@opengeni/sdk";
-import { type EmbeddedGoalClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type EmbeddedGoalClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 /** Event types that change the session goal (set/updated/completed/paused/...). */
 export declare function isGoalEvent(event: Pick<SessionEvent, "type">): boolean;
 /**

package/dist/hooks/use-human-input.d.ts

@@ -1,6 +1,6 @@
 import type { SessionEvent, SessionHumanInputRequest, SubmitHumanInputResponseRequest } from "@opengeni/sdk";
-import { type EmbeddedHumanInputClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type EmbeddedHumanInputClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 /** Events that can create, settle, or invalidate an actionable request. */
 export declare function isHumanInputEvent(event: Pick<SessionEvent, "type">): boolean;
 export type UseHumanInputRequestsOptions = EmbeddedHumanInputClientOverride & SessionEventFeedOptions & {

package/dist/hooks/use-last-started-turn-policy.d.ts

@@ -1,6 +1,6 @@
 import type { LatencyMode, ReasoningEffort, SessionEvent } from "@opengeni/sdk";
-import { type ClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type ClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 /** Refresh when a turn actually admits — not on composer picker / queue-only changes. */
 export declare function isLastStartedTurnPolicyEvent(event: Pick<SessionEvent, "type">): boolean;
 export type LastStartedTurnPolicy = {

package/dist/hooks/use-machine-chip.d.ts

@@ -1,5 +1,5 @@
 import type { MachineState } from "@opengeni/sdk";
-import type { SessionCapabilitiesState } from "./use-session-capabilities";
+import type { SessionCapabilitiesState } from "./use-session-capabilities.js";
 /** The one truthful machine indicator. Honest staleness beats
  *  fake liveness: a cold/asleep box reads "offline — as of <time>", never "live". */
 export type MachineChipState = "live" | "waking" | "offline";
@@ -36,7 +36,7 @@ export declare function formatAsOf(capturedAt: string, now: number): string;
  * it; the whole point is a deterministic, testable projection).
  *
  * Precedence:
- *   1. warm/draining lease → **live** (a warm box always wins).
+ *   1. warm lease → **live** (a holder-confirmed box always wins).
  *   2. actively warming (negotiating, wake-on-edit, or a reconnecting/enrolling
  *      machine) → **waking**.
  *   3. everything else (a cold/asleep box, a self-hosted machine that's offline,

package/dist/hooks/use-machines.d.ts

@@ -1,5 +1,6 @@
-import { type ClientOverride } from "../provider";
-import type { MachinesResponse, MachineView, MetricSample } from "../types/machines";
+import type { RemoveEnrollmentRequest, RemoveEnrollmentResponse, SwapActiveSandboxResponse } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
+import type { MachinesResponse, MachineView, MetricSample } from "../types/machines.js";
 /**
  * The slice of the SDK client the Machines surface needs. The method NAMES +
  * SIGNATURES match M10's `OpenGeniClient` (`listMachines`, `machineMetricsSeries`)
@@ -26,13 +27,15 @@ export type MachinesClientLike = {
     machineMetricsSeries?: (workspaceId: string, enrollmentId: string, options?: {
         window?: "15m" | "1h" | "6h" | "24h";
     }) => Promise<MetricSample[]>;
+    /** POST .../enrollments/:enrollmentId/revoke — workspace-admin removal. */
+    removeEnrollment?: (workspaceId: string, enrollmentId: string, request?: RemoveEnrollmentRequest) => Promise<RemoveEnrollmentResponse>;
     /**
      * POST .../sessions/:sessionId/active-sandbox — swap the session's active
      * sandbox to a machine. The default swap path; the real SDK client provides it.
      */
     swapActiveSandbox?: (workspaceId: string, sessionId: string, request: {
         target: string;
-    }) => Promise<unknown>;
+    }) => Promise<SwapActiveSandboxResponse>;
     /**
      * Host-supplied swap adapter (an escape hatch). When present it wins over the
      * default `swapActiveSandbox` path. Session-scoped, like the swap it backs.
@@ -60,6 +63,10 @@ export type UseMachinesResult = {
     refresh: () => Promise<void>;
     /** Attach/swap the session's active sandbox to a machine (returns the new pointer). */
     attach: (sandboxId: string) => Promise<boolean>;
+    /** Remove a self-hosted enrollment while retaining history. */
+    remove: (enrollmentId: string, request?: RemoveEnrollmentRequest) => Promise<RemoveEnrollmentResponse | null>;
+    canRemove: boolean;
+    removingEnrollmentId: string | null;
     /** Whether the host wired an attach/swap path (drives the card affordance). */
     canAttach: boolean;
     /** Fetch a downsampled metric series for one enrolled machine. */

package/dist/hooks/use-packs.d.ts

@@ -1,5 +1,5 @@
-import type { CapabilityPack, EnablePackRequest, PackInstallation, RegisterCapabilityPackRequest, WorkspaceRegisteredPack } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import type { CapabilityPack, EnablePackRequest, InstallPackRequest, PackInstallationPreview, PackInstallation, PackUninstallPreview, PreviewPackInstallationRequest, RegisterCapabilityPackRequest, UninstallPackRequest, UninstallPackResult, WorkspaceRegisteredPack } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
 export type UsePacksOptions = ClientOverride & {
     pollIntervalMs?: number | undefined;
     enabled?: boolean | undefined;
@@ -16,7 +16,12 @@ export type UsePacksResult = {
     refresh: () => Promise<void>;
     /** Register (or replace) a workspace-scoped pack manifest. */
     register: (manifest: RegisterCapabilityPackRequest) => Promise<WorkspaceRegisteredPack | null>;
+    /** @deprecated Use previewInstallation + install for component/Rig-aware Packs. */
     enable: (packId: string, request?: EnablePackRequest) => Promise<PackInstallation | null>;
+    previewInstallation: (packId: string, request?: PreviewPackInstallationRequest) => Promise<PackInstallationPreview | null>;
+    install: (packId: string, request: InstallPackRequest) => Promise<PackInstallation | null>;
+    previewUninstall: (packId: string) => Promise<PackUninstallPreview | null>;
+    uninstall: (packId: string, request: UninstallPackRequest) => Promise<UninstallPackResult | null>;
     /** Unregister a workspace-scoped pack (built-ins cannot be removed). */
     remove: (packId: string) => Promise<boolean>;
     mutating: boolean;

package/dist/hooks/use-rigs.d.ts

@@ -1,5 +1,5 @@
 import type { CreateRigRequest, ProposeRigChangeRequest, Rig, RigChange, RigVersion, UpdateRigRequest } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type UseRigsOptions = ClientOverride & {
     pollIntervalMs?: number | undefined;
     enabled?: boolean | undefined;

package/dist/hooks/use-sandbox-files.d.ts

@@ -1,5 +1,5 @@
-import type { FsReadResponse, FsWriteResponse, OpenGeniRequestOptions, SessionEvent, WorkspaceCaptureManifest } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import type { FsReadResponse, FsWriteResponse, OpenGeniRequestOptions, SessionCapabilities, SessionEvent, WorkspaceCaptureManifest } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
 /** The git-status overlay a file row may carry (tints modified files in the tree). */
 export type FileTreeStatus = "added" | "modified" | "deleted" | "renamed" | "untracked";
 export type CapturedFileUnavailableReason = "not-captured" | "too-large" | "content-missing";
@@ -48,12 +48,18 @@ export type UseSandboxFilesOptions = ClientOverride & {
     rootPath?: string | undefined;
     /** Hold off the initial list (e.g. panel collapsed). Default true. */
     enabled?: boolean | undefined;
-    /** The lease liveness ("cold" | "warm" | "draining"). The structured FileSystem
+    /** Pause live reads/invalidation while preserving the last rendered result. */
+    active?: boolean | undefined;
+    /** Repository roots advertised by capabilities, relative to the workspace. */
+    repoPaths?: readonly string[] | undefined;
+    /** The lease liveness. `null` means capability negotiation has not produced
+     *  an authoritative lifecycle value yet and therefore blocks live I/O. Omitting
+     *  the option preserves the legacy direct-hook behavior. The structured FileSystem
      *  capability is advertised even on a COLD box, so the mount-time list can race
      *  the box: it lists before the box is warm, gets an empty/errored result, and
      *  (with no `fs.changed` event) never re-lists. Passing liveness re-lists when
      *  the box first becomes warm, so the tree populates as soon as the box is up. */
-    liveness?: string | undefined;
+    liveness?: SessionCapabilities["liveness"] | null | undefined;
     /** The latest turn-end workspace capture (from `useWorkspaceCapture`). The tree
      *  paints immediately from this durable index, then a warm box reconciles live
      *  in place. If that live read fails, the capture remains a truthful read-only
@@ -90,14 +96,29 @@ export type UseSandboxFilesResult = {
     }) => Promise<void>;
     /** Re-list the whole tree from the root. */
     refresh: () => Promise<void>;
+    /** Monotonic invalidation token for open file previews. Advances when an
+     *  external filesystem change or completed agent tool may have changed bytes. */
+    contentRevision?: number | undefined;
     /** Which source the tree is currently served from: the live box, the turn-end
      *  capture (cold/offline), or neither yet. M5's source badge reads this. */
     source: "live" | "capture" | null;
     /** When the served capture was taken (ISO), when `source === "capture"`. */
     capturedAt: string | null;
+    /** Lightweight repository context loaded by the same status request that tints files. */
+    gitSummary?: SandboxFilesGitSummary | null | undefined;
+    /** True only while the initial repository-status overlay is still loading. */
+    gitLoading?: boolean | undefined;
     loading: boolean;
     error: Error | null;
 };
+export type SandboxFilesGitSummary = {
+    branch: string | null;
+    isRepo: boolean;
+    repoCount: number;
+    ahead: number;
+    behind: number;
+    dirtyCount: number;
+};
 /**
  * Project the FileSystem service into a lazy-loaded Pierre tree. The initial
  * list pulls one level (depth 1); `expand(path)` lists a directory's immediate

package/dist/hooks/use-sandbox-git.d.ts

@@ -1,5 +1,5 @@
-import type { GitFileDiff, SessionEvent, WorkspaceCaptureManifest } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import type { GitFileDiff, SessionCapabilities, SessionEvent, WorkspaceCaptureManifest } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
 export type UseSandboxGitOptions = ClientOverride & {
     /** Live event log (usually `useSessionEvents().events`) — drives auto-refresh
      *  on `git.changed`. */
@@ -11,16 +11,24 @@ export type UseSandboxGitOptions = ClientOverride & {
     repoPaths?: readonly string[] | undefined;
     /** Diff the staged index vs HEAD (`--cached`) instead of the working tree. */
     staged?: boolean | undefined;
+    /** Review scope. `branch` compares the current branch with the remote default
+     *  branch, `working` shows uncommitted edits, and `staged` shows the index.
+     *  `staged` above remains as a compatibility alias. */
+    comparison?: SandboxGitComparison | undefined;
     /** Hold off the initial fetch. Default true. */
     enabled?: boolean | undefined;
-    /** Lease liveness ("warm" | "draining" | "cold"). When NOT warm, the diff is
-     *  served from the capture (cold/offline) instead of a live `gitDiff` RPC. */
-    liveness?: string | undefined;
+    /** Pause live reads/invalidation while preserving the last rendered result. */
+    active?: boolean | undefined;
+    /** Lease liveness. `null` means capability negotiation is still pending and
+     *  blocks live I/O. When not warm, the diff is served from the capture instead
+     *  of a live `gitDiff` RPC. Omission preserves legacy direct-hook behavior. */
+    liveness?: SessionCapabilities["liveness"] | null | undefined;
     /** The latest turn-end capture (from `useWorkspaceCapture`). Seeds the diff
      *  immediately; a warm box reconciles live and leaves this durable review
      *  surface in place if the live request is temporarily unavailable. */
     capture?: WorkspaceCaptureManifest | null | undefined;
 };
+export type SandboxGitComparison = "branch" | "working" | "staged";
 /** A Git diff qualified into workspace scope. `repoRoot` is present for the
  *  workspace-wide path and lets review UI group real repositories without
  *  guessing from the first path segment. */

package/dist/hooks/use-sandbox-terminal.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEvent } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type TerminalChunk = {
     /** Stable key (the source event id) so the xterm writer tracks a written-cursor. */
     id: string;

package/dist/hooks/use-scheduled-tasks.d.ts

@@ -1,5 +1,5 @@
 import type { ScheduledTask } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type UseScheduledTasksOptions = ClientOverride & {
     limit?: number | undefined;
     pollIntervalMs?: number | undefined;

package/dist/hooks/use-session-capabilities.d.ts

@@ -1,5 +1,5 @@
 import { type SessionCapabilities, type SessionEvent } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type SessionCapabilitiesState = "idle" | "negotiating" | "ready" | "cold" | "on-demand" | "error";
 export type UseSessionCapabilitiesOptions = ClientOverride & {
     /**
@@ -59,7 +59,8 @@ export type UseSessionCapabilitiesResult = {
     error: Error | null;
     /**
      * 409 from the desktop attach: the un-redacted (or shared) plane needs explicit
-     * acknowledgment before a viewer holder is granted. Drives the consent prompt.
+     * acknowledgment before a viewer holder is granted. The workbench uses this
+     * to complete acknowledgment automatically while Desktop is opening.
      */
     acknowledgmentRequired: "unredacted" | "shared" | null;
     /** 429 from the desktop attach: the per-session viewer cap is reached. */
@@ -77,7 +78,7 @@ export type UseSessionCapabilitiesResult = {
  *
  * Degradation is a value, never a crash: an unsupported surface comes back
  * `available:false`/`transport:null` + a `reason`; the components render the
- * reason-aware empty state. 409 (consent) and 429 (viewer cap) are surfaced as
- * typed signals, not thrown.
+ * reason-aware empty state. 409 (acknowledgment) and 429 (viewer cap) are
+ * surfaced as typed signals, not thrown.
  */
 export declare function useSessionCapabilities(sessionId: string | null | undefined, options?: UseSessionCapabilitiesOptions): UseSessionCapabilitiesResult;

package/dist/hooks/use-session-control.d.ts

@@ -1,5 +1,5 @@
 import type { SessionControlResponse, SessionEvent } from "@opengeni/sdk";
-import { type EmbeddedSessionClientOverride } from "../session-context";
+import { type EmbeddedSessionClientOverride } from "../session-context.js";
 export type UseSessionControlOptions = EmbeddedSessionClientOverride;
 export type UseSessionControlResult = {
     pause: (reason?: string) => Promise<SessionControlResponse | null>;

package/dist/hooks/use-session-events.d.ts

@@ -1,6 +1,6 @@
 import type { SessionEvent, SessionStatus, StreamConnectionState } from "@opengeni/sdk";
-import { type EmbeddedSessionClientOverride } from "../session-context";
-import type { TimelineItem } from "../timeline/types";
+import { type EmbeddedSessionClientOverride } from "../session-context.js";
+import type { TimelineItem } from "../timeline/types.js";
 export type SessionEventsConnectionState = StreamConnectionState | "idle" | "ended" | "error";
 export type UseSessionEventsOptions = EmbeddedSessionClientOverride & {
     /** Resume after this sequence (exclusive). Nonzero keeps full replay/resume semantics. */

package/dist/hooks/use-session-lineage.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEvent, SessionLineageResponse } from "@opengeni/sdk";
-import { type EmbeddedSessionLineageClientOverride } from "../session-context";
+import { type EmbeddedSessionLineageClientOverride } from "../session-context.js";
 export type UseSessionLineageOptions = EmbeddedSessionLineageClientOverride & {
     events?: SessionEvent[] | undefined;
     /** Refresh interval (ms). Off by default. */

package/dist/hooks/use-session-mcp-approval-policy.d.ts

@@ -1,6 +1,6 @@
 import type { SessionEvent, SessionMcpApprovalPolicy, SessionMcpServerMetadata, UpdateSessionMcpApprovalPolicyResponse } from "@opengeni/sdk";
-import { type EmbeddedSessionMcpApprovalPolicyClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type EmbeddedSessionMcpApprovalPolicyClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 export declare function isSessionMcpApprovalPolicyEvent(event: Pick<SessionEvent, "type" | "payload">, serverId?: string): boolean;
 export type UseSessionMcpApprovalPolicyOptions = EmbeddedSessionMcpApprovalPolicyClientOverride & SessionEventFeedOptions & {
     /** Optional safety-net polling (ms). Off by default; policy events drive refreshes. */

package/dist/hooks/use-session.d.ts

@@ -1,6 +1,6 @@
 import type { Session, SessionEvent } from "@opengeni/sdk";
-import { type EmbeddedSessionReadClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type EmbeddedSessionReadClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 export type UseSessionOptions = EmbeddedSessionReadClientOverride & SessionEventFeedOptions & {
     /** Re-fetch on an interval (ms). Off by default — pair with `useSessionEvents` for live status. */
     pollIntervalMs?: number | undefined;

package/dist/hooks/use-slash-commands.d.ts

@@ -1,5 +1,5 @@
 import type { KeyboardEvent } from "react";
-import type { CommandContext, SlashCommand } from "../commands/types";
+import type { CommandContext, SlashCommand } from "../commands/types.js";
 /**
  * Context the composer supplies for command execution and visibility. The
  * composer owns the UI affordances (notice/openHelp/clearView/confirm), so they

package/dist/hooks/use-terminal-stream.d.ts

@@ -6,7 +6,7 @@ export type UseTerminalStreamOptions = {
      *  The stream connects ONLY when `transport === "pty-ws"` and `url` is set; on a
      *  cold box (`transport === "sse-events"` / no url) it stays idle and the caller
      *  falls back to the Channel-A read-only firehose. */
-    capability: Pick<TerminalCapability, "transport" | "url" | "token"> | null;
+    capability: Pick<TerminalCapability, "transport" | "url" | "token" | "expiresAt"> | null;
     /** Called for each OUTPUT payload from ttyd (write verbatim into xterm). */
     onOutput?: ((data: string) => void) | undefined;
     /** Called when ttyd sends a SET_WINDOW_TITLE frame. */
@@ -19,13 +19,19 @@ export type UseTerminalStreamResult = {
     /** True once the ttyd socket is open (and the auth frame has been sent). */
     connected: boolean;
     status: TerminalStreamStatus;
-    /** Pipe a keystroke/paste to the PTY stdin. No-op until the socket is open. */
+    /** Pipe a keystroke/paste to PTY stdin. Input during CONNECTING is bounded and
+     *  replayed only after ttyd authentication succeeds. */
     write: (data: string) => void;
     /** Tell ttyd the PTY window changed size (on xterm fit/resize). */
     resize: (cols: number, rows: number) => void;
     /** Tear the socket down (the effect also tears down on unmount / url change). */
     disconnect: () => void;
 };
+export declare const MAX_PENDING_TERMINAL_INPUT_CODE_UNITS: number;
+/** A bearer must remain valid long enough to finish a new websocket handshake.
+ * Existing open sockets are unaffected: this is evaluated only when the
+ * credential identity changes and the connection effect attempts a new socket. */
+export declare function terminalStreamCredentialUsable(capability: Pick<TerminalCapability, "transport" | "url" | "expiresAt"> | null | undefined, nowMs?: number): boolean;
 /**
  * Drive a ttyd PTY-over-websocket connection from a `pty-ws` Terminal capability,
  * symmetric with `use-desktop-stream` (the noVNC-over-tunnel hook). The scoped

package/dist/hooks/use-transcription.d.ts

@@ -53,7 +53,7 @@ export type UseTranscriptionOptions = {
     disabled?: boolean | undefined;
     createLocalSessionId?: (() => string) | undefined;
     lifecycleTimeouts?: Partial<TranscriptionLifecycleTimeouts> | undefined;
-    /** Receives bounded, redacted diagnostics; this detail is never rendered by the hook. */
+    /** Receives the exact diagnostic emitted by the transcription transport. */
     onDiagnostic?: ((diagnostic: TranscriptionDiagnostic) => void) | undefined;
 };
 export type TranscriptionLifecycleTimeouts = {
@@ -70,4 +70,4 @@ export type UseTranscriptionResult = {
 };
 export declare function useTranscription({ adapter, policy, selection, value, setValue, focusInput, disabled, createLocalSessionId, lifecycleTimeouts, onDiagnostic, }: UseTranscriptionOptions): UseTranscriptionResult;
 export declare function normalizeTranscriptionErrorCode(code: unknown): TranscriptionErrorCode;
-export declare function sanitizeTranscriptionDiagnostic(diagnostic: unknown): TranscriptionDiagnostic;
+export declare function normalizeTranscriptionDiagnostic(diagnostic: unknown): TranscriptionDiagnostic;

package/dist/hooks/use-turn-queue.d.ts

@@ -1,6 +1,6 @@
 import type { ComposerDraft, EffectiveSessionControl, McpPersonalConnectionSummary, SessionEvent, SessionQueueSnapshot, SessionPendingInputPreview, SessionTurn } from "@opengeni/sdk";
-import { type EmbeddedSessionClientOverride } from "../session-context";
-import { type SessionEventFeedOptions } from "./internal";
+import { type EmbeddedSessionClientOverride } from "../session-context.js";
+import { type SessionEventFeedOptions } from "./internal.js";
 /** Events that can change the authoritative prompt queue or effective control. */
 export declare function isTurnQueueEvent(event: Pick<SessionEvent, "type">): boolean;
 export type QueueMutationKind = "move" | "edit" | "steer" | "delete";

package/dist/hooks/use-video-artifact-playback.d.ts

@@ -0,0 +1,9 @@
+import type { VideoArtifactPlaybackLoader } from "../timeline/index.js";
+import { type ClientOverride } from "../session-context.js";
+/**
+ * Bind the current public SDK client/workspace to MessageTimeline's renewable
+ * video-source boundary. Proxy hosts may omit the method until they support
+ * retained video; the failure remains local to the player instead of loading
+ * any video bytes through React.
+ */
+export declare function useVideoArtifactPlaybackLoader(options?: ClientOverride): VideoArtifactPlaybackLoader;

package/dist/hooks/use-voice-input.d.ts

@@ -1,6 +1,6 @@
-import type { ClientVoiceInputConfig, OpenGeniClient } from "@opengeni/sdk";
-import { type VoiceRecordingStore } from "../voice-recording-store";
-export type VoiceInputStatus = "idle" | "requesting-permission" | "recording" | "saving" | "transcribing" | "recovered" | "transcript-ready" | "error";
+import { type ClientVoiceInputConfig, type OpenGeniClient } from "@opengeni/sdk";
+import { type VoiceRecordingStore } from "../voice-recording-store.js";
+export type VoiceInputStatus = "idle" | "requesting-permission" | "recording" | "saving" | "transcribing" | "retrying" | "recovered" | "transcript-ready" | "error";
 export type UseVoiceInputOptions = {
     client: VoiceInputClient | null;
     workspaceId: string;
@@ -15,6 +15,8 @@ export type UseVoiceInputOptions = {
     createRecordingId?: (() => string) | undefined;
     createOwnerId?: (() => string) | undefined;
     now?: (() => Date) | undefined;
+    /** Test/embed seam. Production uses bounded exponential recovery backoff. */
+    automaticRetryDelayMilliseconds?: number | undefined;
 };
 type ResumableVoiceInputClient = Pick<OpenGeniClient, "createTranscriptionRecording" | "getTranscriptionRecording" | "uploadTranscriptionRecordingChunk" | "finalizeTranscriptionRecording" | "processNextTranscriptionRecordingSegment" | "discardTranscriptionRecording">;
 type VoiceInputClient = Pick<OpenGeniClient, "transcribeAudio"> & Partial<ResumableVoiceInputClient>;
@@ -49,5 +51,5 @@ export declare const VOICE_RECORDING_RESUMABLE_CLIENT_MAX_DURATION_SECONDS: numb
 export declare const VOICE_RECORDING_RECOVERY_STATUS_POLL_MILLISECONDS = 2000;
 export declare const VOICE_RECORDING_RECOVERY_MAX_MUTATION_DELAY_MILLISECONDS = 30000;
 export declare function transcriptionRecoveryMutationDelayMilliseconds(retryAfterMilliseconds: number | undefined, attempt: number, random?: () => number): number;
-export declare function useVoiceInput({ client, workspaceId, capability, enabled, value, setValue, focusInput, disabled, createRecordingStore, createRecordingId, createOwnerId, now, }: UseVoiceInputOptions): UseVoiceInputResult;
+export declare function useVoiceInput({ client, workspaceId, capability, enabled, value, setValue, focusInput, disabled, createRecordingStore, createRecordingId, createOwnerId, now, automaticRetryDelayMilliseconds, }: UseVoiceInputOptions): UseVoiceInputResult;
 export {};

package/dist/hooks/use-workspace-capture.d.ts

@@ -1,5 +1,5 @@
 import type { SessionEvent, WorkspaceCaptureDegradedReason, WorkspaceCaptureManifest } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type UseWorkspaceCaptureOptions = ClientOverride & {
     /** Live event log (usually `useSessionEvents().events`) — a
      *  `workspace.revision.captured` for a NEWER revision refreshes the manifest. */

package/dist/hooks/use-workspace-edit.d.ts

@@ -1,4 +1,4 @@
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 /**
  * The wake-on-edit state machine. This hook owns the logic and the UI renders
  * its result. States are explicit and exhaustive:

package/dist/hooks/use-workspace-sessions.d.ts

@@ -1,5 +1,5 @@
 import type { Session } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type UseWorkspaceSessionsOptions = ClientOverride & {
     limit?: number | undefined;
     parentSessionId?: string | null | undefined;

package/dist/hooks/use-workspaces.d.ts

@@ -1,5 +1,5 @@
 import type { CreateWorkspaceRequest, UpdateWorkspaceRequest, Workspace } from "@opengeni/sdk";
-import { type ClientOverride } from "../provider";
+import { type ClientOverride } from "../provider.js";
 export type UseWorkspacesOptions = Pick<ClientOverride, "client"> & {
     pollIntervalMs?: number | undefined;
     enabled?: boolean | undefined;