@opengeni/react 0.52.1 → 1.0.1

package/dist/client.d.ts

@@ -4,7 +4,7 @@ import type { OpenGeniClient } from "@opengeni/sdk";
  * pass the real SDK client, a proxy-backed client that routes through their
  * own API, or a scripted client in tests/demos.
  */
-export type SessionClientLike = Pick<OpenGeniClient, "getClientConfig" | "getSession" | "getSessionLineage" | "updateSession" | "updateSessionPin" | "listSessions" | "listSessionPage" | "sendMessage" | "steerMessage" | "pauseSession" | "resumeSession" | "sendApprovalDecision" | "listHumanInputRequests" | "getHumanInputRequest" | "submitHumanInputResponse" | "listEvents" | "streamEvents" | "getQueue" | "moveQueueItem" | "editQueueItem" | "steerQueueItem" | "deleteQueueItem" | "getComposerDraft" | "saveComposerDraft" | "listTurns" | "getGoal" | "updateGoal" | "deleteGoal" | "clearSessionContext" | "compactSessionContext" | "listScheduledTasks" | "uploadFile" | "getFile" | "createFileDownloadUrl" | "listVariableSets" | "getVariableSetVariable" | "createVariableSet" | "updateVariableSet" | "deleteVariableSet" | "setVariableSetVariable" | "deleteVariableSetVariable" | "listEnvironments" | "createEnvironment" | "updateEnvironment" | "deleteEnvironment" | "setEnvironmentVariable" | "deleteEnvironmentVariable" | "listRigs" | "createRig" | "getRig" | "updateRig" | "deleteRig" | "listRigVersions" | "activateRigVersion" | "listRigChanges" | "proposeRigChange" | "getRigChange" | "verifyRigChange" | "promoteRigChange" | "verifyRig" | "listPacks" | "registerPack" | "enablePack" | "previewPackInstallation" | "installPack" | "previewPackUninstall" | "uninstallPack" | "deletePack" | "listWorkspaces" | "createWorkspace" | "updateWorkspace" | "setWorkspaceInferenceState" | "getWorkspace" | "getWorkspaceModelCatalog" | "listWorkspaceControlEvents" | "streamWorkspaceControlEvents" | "getBillingUsage" | "getClientConfig" | "getStreamCapabilities" | "acknowledgeStream" | "attachViewer" | "heartbeatViewer" | "detachViewer" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession" | "listComputerSessions" | "getComputerSession" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession" | "fsList" | "fsListBatch" | "fsRead" | "fsWrite" | "fsDelete" | "fsMove" | "fsMkdir" | "gitStatus" | "gitDiff" | "gitReadBatch" | "getWorkspaceCapture" | "getWorkspaceCaptureFile" | "terminalExec" | "terminalPtyOpen" | "terminalPtyWrite" | "terminalPtyResize" | "terminalPtyClose"> & Partial<Pick<OpenGeniClient, "createVideoArtifactPlaybackSource">>;
+export type SessionClientLike = Pick<OpenGeniClient, "getClientConfig" | "getSession" | "getSessionLineage" | "updateSession" | "updateSessionPin" | "listSessions" | "listSessionPage" | "sendMessage" | "steerMessage" | "pauseSession" | "resumeSession" | "sendApprovalDecision" | "listHumanInputRequests" | "getHumanInputRequest" | "submitHumanInputResponse" | "listEvents" | "streamEvents" | "getQueue" | "moveQueueItem" | "editQueueItem" | "steerQueueItem" | "deleteQueueItem" | "getComposerDraft" | "saveComposerDraft" | "listTurns" | "getGoal" | "updateGoal" | "deleteGoal" | "clearSessionContext" | "compactSessionContext" | "listScheduledTasks" | "uploadFile" | "getFile" | "createFileDownloadUrl" | "listVariableSets" | "getVariableSetVariable" | "createVariableSet" | "updateVariableSet" | "deleteVariableSet" | "setVariableSetVariable" | "deleteVariableSetVariable" | "listEnvironments" | "createEnvironment" | "updateEnvironment" | "deleteEnvironment" | "setEnvironmentVariable" | "deleteEnvironmentVariable" | "listChannels" | "createChannel" | "updateChannel" | "deleteChannel" | "updateSessionChannel" | "listRigs" | "createRig" | "getRig" | "updateRig" | "deleteRig" | "listRigVersions" | "activateRigVersion" | "listRigChanges" | "proposeRigChange" | "getRigChange" | "verifyRigChange" | "promoteRigChange" | "verifyRig" | "listPacks" | "registerPack" | "enablePack" | "previewPackInstallation" | "installPack" | "previewPackUninstall" | "uninstallPack" | "deletePack" | "listWorkspaces" | "createWorkspace" | "updateWorkspace" | "setWorkspaceInferenceState" | "getWorkspace" | "getWorkspaceModelCatalog" | "listWorkspaceControlEvents" | "streamWorkspaceControlEvents" | "streamWorkspaceInteractionRevisions" | "getBillingUsage" | "getClientConfig" | "getStreamCapabilities" | "acknowledgeStream" | "attachViewer" | "heartbeatViewer" | "detachViewer" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "protectedBrowserAuthFill" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession" | "fsList" | "fsListBatch" | "fsRead" | "fsWrite" | "fsDelete" | "fsMove" | "fsMkdir" | "gitStatus" | "gitDiff" | "gitReadBatch" | "getWorkspaceCapture" | "getWorkspaceCaptureFile" | "terminalExec" | "terminalPtyOpen" | "terminalPtyWrite" | "terminalPtyResize" | "terminalPtyClose"> & Partial<Pick<OpenGeniClient, "createVideoArtifactPlaybackSource" | "streamWorkspaceLiveEvents">>;
 /**
  * Tenant-safe client surface required by the session-only React entry.
  *
@@ -32,10 +32,12 @@ export type EmbeddedHumanInputSessionClientLike = EmbeddedSessionEventClientLike
 /** Exact client surface required by MCP approval-policy hooks. */
 export type EmbeddedSessionMcpApprovalPolicyClientLike = EmbeddedSessionEventClientLike & Pick<OpenGeniClient, "updateSessionMcpApprovalPolicy">;
 /** Exact client surface required by the public realtime React subpath. */
-export type EmbeddedRealtimeSessionClientLike = Pick<OpenGeniClient, "getWorkspaceRealtimeModelCatalog" | "beginSessionRealtime" | "heartbeatSessionRealtime" | "negotiateCodexRealtimeWebrtc" | "negotiateGatewayRealtime" | "activateCodexRealtimeConnection" | "syncSessionRealtimeLedger" | "endSessionRealtime">;
+export type EmbeddedRealtimeSessionClientLike = Pick<OpenGeniClient, "getWorkspaceRealtimeModelCatalog" | "beginSessionRealtime" | "heartbeatSessionRealtime" | "negotiateCodexRealtimeWebrtc" | "negotiateGatewayRealtime" | "negotiateXaiSubscriptionRealtime" | "activateCodexRealtimeConnection" | "syncSessionRealtimeLedger" | "endSessionRealtime">;
+/** Exact public SDK surface required by cross-surface human interventions. */
+export type EmbeddedInterventionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention">;
 /** Exact public SDK surface required by BrowserSession hooks and components. */
-export type EmbeddedBrowserInteractionClientLike = Pick<OpenGeniClient, "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession">;
+export type EmbeddedBrowserInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listNetworkRoutes" | "getNetworkRoute" | "createNetworkRoute" | "updateNetworkRoute" | "listSiteAuthConnections" | "getSiteAuthConnection" | "createSiteAuthConnection" | "updateSiteAuthConnection" | "listAuthRuns" | "getAuthRun" | "startBrowserAuthRun" | "reportBrowserAuthRun" | "protectedBrowserAuthFill" | "verifyBrowserAuthRun" | "listInteractionInterventions" | "getInteractionIntervention" | "createInteractionIntervention" | "resolveInteractionIntervention" | "listAttachedBrowsers" | "getAttachedBrowser" | "listBrowserIdentities" | "getBrowserIdentity" | "createBrowserIdentity" | "updateBrowserIdentity" | "listBrowserRevisions" | "listBrowserSessions" | "getBrowserSession" | "readBrowserClipboard" | "listBrowserDownloads" | "getBrowserDownload" | "saveBrowserDownload" | "createBrowserSession" | "listBrowserTargets" | "openBrowserTarget" | "selectBrowserTarget" | "closeBrowserTarget" | "observeBrowserTarget" | "actInBrowser" | "getBrowserActionReceipt" | "listBrowserDiagnostics" | "attachBrowserSession" | "heartbeatBrowserSession" | "publishBrowserRevision" | "suspendBrowserSession" | "resumeBrowserSession" | "endBrowserSession"> & EmbeddedInterventionClientLike;
 /** Exact public SDK surface required by ComputerSession hooks and components. */
-export type EmbeddedComputerInteractionClientLike = Pick<OpenGeniClient, "listComputerSessions" | "getComputerSession" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession">;
+export type EmbeddedComputerInteractionClientLike = Pick<OpenGeniClient, "streamWorkspaceInteractionRevisions" | "listComputerSessions" | "getComputerSession" | "readComputerClipboard" | "createComputerSession" | "listComputerTargets" | "observeComputerTarget" | "actInComputer" | "getComputerActionReceipt" | "attachComputerSession" | "heartbeatComputerSession" | "endComputerSession"> & EmbeddedInterventionClientLike;
 /** Complete public Browser + Computer interaction surface. */
 export type EmbeddedInteractionClientLike = EmbeddedBrowserInteractionClientLike & EmbeddedComputerInteractionClientLike;

package/dist/components/artifacts/index.d.ts

@@ -1,4 +1,5 @@
 export { ArtifactSurface, type ArtifactModality, type ArtifactSurfaceProps, } from "./artifact-surface.js";
+export { PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX, PublishedHtmlArtifactFrame, type PublishedHtmlArtifactFrameProps, } from "./published-html-artifact-frame.js";
 export { SpreadsheetArtifactSurface, SpreadsheetGrid, SpreadsheetProjectionGrid, type SpreadsheetArtifactSurfaceProps, type SpreadsheetCommit, type SpreadsheetRangeCommit, type SpreadsheetGridProps, type SpreadsheetGridProjection, type SpreadsheetProjectionCell, type SpreadsheetProjectionGridProps, type SpreadsheetSelection, type SpreadsheetViewport, } from "./spreadsheet-grid.js";
 export { EditableSpreadsheetArtifactSurface, EditableSpreadsheetGrid, type EditableSpreadsheetArtifactSurfaceProps, type EditableSpreadsheetGridProps, } from "./editable-spreadsheet.js";
 export { BrowserEditableArtifactWorkbench, EditableArtifactWorkbench, EditableArtifactWorkbenchHost, type BrowserEditableArtifactWorkbenchOptions, type BrowserEditableArtifactWorkbenchProps, type EditableArtifactWorkbenchHostProps, type EditableArtifactWorkbenchProps, } from "./editable-artifact-workbench.js";

package/dist/components/artifacts/published-html-artifact-frame.d.ts

@@ -0,0 +1,14 @@
+import type { CSSProperties } from "react";
+export declare const PUBLISHED_HTML_ARTIFACT_IFRAME_SANDBOX: string;
+export type PublishedHtmlArtifactFrameProps = {
+    html: string;
+    title: string;
+    className?: string;
+    style?: CSSProperties;
+};
+/**
+ * Render exact published HTML in an opaque-origin iframe. Artifact scripts,
+ * external resources, forms, popups, and downloads work without granting
+ * parent-origin authority, shared cookies/storage, or top-level navigation.
+ */
+export declare function PublishedHtmlArtifactFrame(props: PublishedHtmlArtifactFrameProps): import("react").JSX.Element;

package/dist/components/browser-input.d.ts

@@ -0,0 +1,7 @@
+import type { KeyboardEvent } from "react";
+import { type InteractionHostPlatform } from "../lib/host-platform.js";
+export declare const HUMAN_BROWSER_HOME_URL = "https://www.google.com/";
+/** Apply browser-style omnibox behavior: navigate hosts, search ordinary text. */
+export declare function normalizeBrowserAddress(value: string): string | null;
+/** Translate executable keyboard chords for the BrowserSession action API. */
+export declare function browserKey(event: Pick<KeyboardEvent<HTMLTextAreaElement>, "altKey" | "ctrlKey" | "key" | "metaKey" | "shiftKey">, hostPlatform?: InteractionHostPlatform): string | null;

package/dist/components/browser-viewer.d.ts

@@ -1,4 +1,4 @@
-import type { ComputerSession } from "@opengeni/sdk/interaction";
+import type { ComputerSession, InteractionPlacement } from "@opengeni/sdk/interaction";
 import { type ReactNode } from "react";
 import { type BrowserFrameWebSocketFactory } from "../hooks/use-browser-frame-stream.js";
 import type { EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
@@ -15,9 +15,10 @@ export type BrowserViewerProps = EmbeddedBrowserInteractionClientOverride & {
     /** Tests/demos only. Production uses the browser's native WebSocket. */
     webSocketFactory?: BrowserFrameWebSocketFactory | undefined;
     renderEmpty?: ((create: () => void, creating: boolean) => ReactNode) | undefined;
-    /** Optional host capability for a headed managed browser. Browser-only
-     * embedders remain valid and create headless sessions instead. */
-    createLinkedComputer?: ((name: string) => Promise<Pick<ComputerSession, "id" | "placement">>) | undefined;
+    /** Optional host capability for placing a human-created headed browser inside
+     * an exact ComputerSession. Browser-only embedders still create a headed
+     * browser; they simply omit the linked desktop resource. */
+    createLinkedComputer?: ((name: string, placement?: InteractionPlacement) => Promise<Pick<ComputerSession, "id" | "placement">>) | undefined;
     /** Navigate to the exact linked ComputerSession; never a lookalike desktop. */
     onOpenComputer?: ((computerSessionId: string) => void) | undefined;
 };

package/dist/components/computer-viewer.d.ts

@@ -1,4 +1,4 @@
-import { type ReactNode } from "react";
+import { type KeyboardEvent, type ReactNode } from "react";
 import { type ComputerFrameWebSocketFactory } from "../hooks/use-computer-frame-stream.js";
 import type { EmbeddedComputerInteractionClientOverride } from "../session-context.js";
 export type ComputerViewerNotification = {
@@ -21,3 +21,4 @@ export type ComputerViewerProps = EmbeddedComputerInteractionClientOverride & {
 /** Full ComputerSession surface: workspace discovery, peer switching, app/window/
  * screen navigation, semantic controls, exact-frame input, and live media. */
 export declare function ComputerViewer({ sessionId, enabled, className, onNotify, webSocketFactory, renderEmpty, requestedComputerSessionId, requestedComputerRequestId, ...override }: ComputerViewerProps): string | number | bigint | boolean | import("react").JSX.Element | Iterable<ReactNode> | Promise<string | number | bigint | boolean | Iterable<ReactNode> | import("react").ReactElement<unknown, string | import("react").JSXElementConstructor<any>> | import("react").ReactPortal | null | undefined> | null | undefined;
+export declare function computerKey(event: Pick<KeyboardEvent<HTMLTextAreaElement>, "altKey" | "ctrlKey" | "key" | "metaKey" | "shiftKey">): string | null;

package/dist/components/desktop-viewer.d.ts

@@ -1,5 +1,6 @@
 import type { CapabilityUnavailableReason, DesktopRfbFactory, DesktopStreamCapability } from "@opengeni/sdk";
-import { type ReactNode } from "react";
+import { type KeyboardEvent as ReactKeyboardEvent, type ReactNode } from "react";
+import { type InteractionHostPlatform } from "../lib/host-platform.js";
 import type { DesktopWebSocketFactory } from "../hooks/use-relay-frame-stream.js";
 export type DesktopViewerProps = {
     /** The desktop cell of the negotiated capabilities (`capabilities.DesktopStream`). */
@@ -16,9 +17,22 @@ export type DesktopViewerProps = {
     scaleViewport?: boolean | undefined;
     /** Custom RFB factory (tests / a WebRTC swap). Defaults to lazy @novnc/novnc. */
     rfbFactory?: DesktopRfbFactory | undefined;
+    /** Authenticated controller protocols for proxied RFB transports. */
+    webSocketProtocols?: string[] | undefined;
     /** Custom socket factory for the self-hosted `relay-frames` transport (tests).
      *  Defaults to `new WebSocket(url)`. Mirrors `rfbFactory`. */
     webSocketFactory?: DesktopWebSocketFactory | undefined;
+    /**
+     * Optional host-owned paste path. ComputerSession hosts use their native,
+     * target-scoped clipboard action instead of relying on an RFB server to sync
+     * ClientCutText into the graphical seat. Return true once the host accepted
+     * the text. Without a host authority the viewer leaves paste untouched rather
+     * than claiming success for an unreliable display-server clipboard heuristic.
+     */
+    onPasteText?: ((text: string) => boolean) | undefined;
+    /** OS behind the RFB seat. Used only to translate the host's primary shortcut
+     * (Cmd on macOS, Ctrl elsewhere) to the target's primary modifier. */
+    targetPlatform?: "linux" | "macos" | "windows" | null | undefined;
     /**
      * @deprecated Desktop acknowledgment is automatic. Retained as an ignored
      * compatibility prop so existing embedders keep compiling.
@@ -86,4 +100,14 @@ export type DesktopViewerProps = {
  * Genuinely-unavailable surfaces (headless/policy/os/backend) keep a clear,
  * static unavailable notice.
  */
-export declare function DesktopViewer({ capability, interactive, showControlToggle, scaleViewport, rfbFactory, webSocketFactory, onActivate, onAcknowledge, watching, onWarm, renderUnavailable, renderWarming, renderViewerCap, viewerCapReached, connectTimeoutMs, className, }: DesktopViewerProps): import("react").JSX.Element;
+export declare function DesktopViewer({ capability, interactive, showControlToggle, scaleViewport, rfbFactory, webSocketProtocols, webSocketFactory, onPasteText, targetPlatform, onActivate, onAcknowledge, watching, onWarm, renderUnavailable, renderWarming, renderViewerCap, viewerCapReached, connectTimeoutMs, className, }: DesktopViewerProps): import("react").JSX.Element;
+type RfbKeyEvent = {
+    keysym: number;
+    code: string;
+    down: boolean;
+};
+/** Translate one host-primary chord into deterministic RFB events for the
+ * target OS. noVNC otherwise treats a Mac Command key as remote Alt, which
+ * makes ordinary Cmd+A/Z shortcuts silently wrong on Linux sandboxes. */
+export declare function desktopPrimaryShortcut(event: Pick<ReactKeyboardEvent<HTMLDivElement>, "altKey" | "ctrlKey" | "key" | "metaKey" | "shiftKey" | "code">, hostPlatform: InteractionHostPlatform, targetPlatform: "linux" | "macos" | "windows"): RfbKeyEvent[] | "clipboard" | null;
+export {};

package/dist/components/interaction-intervention-banner.d.ts

@@ -0,0 +1,11 @@
+import type { InteractionIntervention } from "@opengeni/sdk/interaction";
+export type InteractionInterventionBannerProps = {
+    interventions: InteractionIntervention[];
+    activeTargetId?: string | null | undefined;
+    mutating?: boolean | undefined;
+    className?: string | undefined;
+    onOpen?: ((intervention: InteractionIntervention) => void) | undefined;
+    onResolve: (intervention: InteractionIntervention, outcome: "completed" | "dismissed") => void;
+};
+/** Compact durable human-action prompt shared by Browser and Computer viewers. */
+export declare function InteractionInterventionBanner({ interventions, activeTargetId, mutating, className, onOpen, onResolve, }: InteractionInterventionBannerProps): import("react").JSX.Element | null;

package/dist/components/sandbox-terminal.d.ts

@@ -81,10 +81,13 @@ export type SandboxTerminalProps = {
      * the firehose-only default).
      */
     onActivate?: (() => void) | undefined;
+    /** Re-negotiate the terminal capability after an unexpected socket failure. */
+    onReconnectNeeded?: (() => void) | undefined;
     className?: string | undefined;
 };
 type XtermLike = {
     open: (el: HTMLElement) => void;
+    focus: () => void;
     write: (data: string) => void;
     clear: () => void;
     onData: (cb: (data: string) => void) => {
@@ -165,5 +168,5 @@ declare global {
  * Resizes are tracked with a `ResizeObserver` on the container (not just
  * `window.resize`) so dragging the dock handle refits the grid.
  */
-export declare function SandboxTerminal({ result, terminalCapability, theme, fontFamily, fontSize, liveness, readOnly, placeholder, showHeader, shell, onActivate, className, }: SandboxTerminalProps): import("react").JSX.Element;
+export declare function SandboxTerminal({ result, terminalCapability, theme, fontFamily, fontSize, liveness, readOnly, placeholder, showHeader, shell, onActivate, onReconnectNeeded, className, }: SandboxTerminalProps): import("react").JSX.Element;
 export {};

package/dist/components/sandbox-workspace.d.ts

@@ -62,6 +62,9 @@ export type UseSandboxWorkspaceTabsOptions = ClientOverride & {
     initialTab?: string | null | undefined;
     /** Actually selected dock tab. Inactive data surfaces retain cache but issue no live reads. */
     activeTab?: string | null | undefined;
+    /** Whether the dock is visible. Hidden docks retain UI state but must not keep
+     * expensive browser/computer media streams alive. */
+    workspaceVisible?: boolean | undefined;
     /** Host-routed notifications (mutation errors, desktop-consent failures). The
      *  package never imports a toast library — the host decides how to surface. */
     onNotify?: ((notification: WorkspaceNotification) => void) | undefined;

package/dist/composer.js

@@ -37,7 +37,8 @@ import {
   useChatComposer,
   useChatComposerController,
   useVoiceInput
-} from "./chunk-ROIRTM37.js";
+} from "./chunk-5UQPNLIO.js";
+import "./chunk-IGC6A2ZI.js";
 import {
   BillingClassMark,
   ModelPolicyPicker,
@@ -46,14 +47,13 @@ import {
   PickerBackHeader,
   PickerNavRow,
   defaultModelPolicyPickerMessages
-} from "./chunk-WYA65Y3F.js";
-import "./chunk-23EJ676W.js";
+} from "./chunk-MKPIAGVL.js";
+import "./chunk-XBZWOM2K.js";
 import "./chunk-FK6VG4LL.js";
 import "./chunk-VZTQ73XT.js";
-import "./chunk-724BW4TW.js";
-import "./chunk-LAKLF4PA.js";
 import "./chunk-KZ73RL76.js";
-import "./chunk-HDBG7XGO.js";
+import "./chunk-C5ZPSSS5.js";
+import "./chunk-LAKLF4PA.js";
 import "./chunk-22KP6LR5.js";
 export {
   Actions,

package/dist/hooks/use-auth-runs.d.ts

@@ -0,0 +1,32 @@
+import type { AuthRun, AuthRunMutationResponse, ProtectedAuthFillRequest, ProtectedAuthFillResponse, ReportAuthRunRequest, StartAuthRunRequest, VerifyAuthRunRequest } from "@opengeni/sdk/interaction";
+import type { EmbeddedBrowserInteractionClientLike } from "../client.js";
+import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
+export type UseAuthRunsOptions = EmbeddedBrowserInteractionClientOverride & {
+    enabled?: boolean | undefined;
+    browserSessionId?: string | null | undefined;
+    siteAuthConnectionId?: string | null | undefined;
+    includeSettled?: boolean | undefined;
+};
+export type UseAuthRunsResult = {
+    runs: AuthRun[];
+    loading: boolean;
+    refreshing: boolean;
+    mutating: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    start: (browserSessionId: string, request: Omit<StartAuthRunRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<AuthRunMutationResponse>;
+    report: (browserSessionId: string, authRunId: string, request: Omit<ReportAuthRunRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<AuthRunMutationResponse>;
+    protectedFill: (browserSessionId: string, authRunId: string, request: Omit<ProtectedAuthFillRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<ProtectedAuthFillResponse>;
+    verify: (browserSessionId: string, authRunId: string, request: Omit<VerifyAuthRunRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<AuthRunMutationResponse>;
+};
+/** Live authentication state machines tied to exact browser document generations. */
+export declare function useAuthRuns(options?: UseAuthRunsOptions): UseAuthRunsResult;
+export type AuthRunsClient = EmbeddedBrowserInteractionClientLike;

package/dist/hooks/use-browser-downloads.d.ts

@@ -0,0 +1,25 @@
+import type { BrowserDownload, BrowserDownloadSaveResponse } from "@opengeni/sdk/interaction";
+import type { EmbeddedBrowserInteractionClientLike } from "../client.js";
+import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
+export type UseBrowserDownloadsOptions = EmbeddedBrowserInteractionClientOverride & {
+    browserSessionId: string | null;
+    enabled?: boolean | undefined;
+    pollIntervalMs?: number | undefined;
+};
+export type BrowserDownloadSaveOptions = {
+    operationId?: string | undefined;
+    overwrite?: boolean | undefined;
+};
+export type UseBrowserDownloadsResult = {
+    downloads: BrowserDownload[];
+    loading: boolean;
+    refreshing: boolean;
+    savingDownloadIds: string[];
+    error: Error | null;
+    refresh: () => Promise<void>;
+    saveToWorkspace: (downloadId: string, destinationPath: string, options?: BrowserDownloadSaveOptions) => Promise<BrowserDownloadSaveResponse>;
+};
+/** Exact browser-produced files for one BrowserSession. Bytes remain private
+ * until `saveToWorkspace` performs the canonical workspace mutation. */
+export declare function useBrowserDownloads(options: UseBrowserDownloadsOptions): UseBrowserDownloadsResult;
+export type BrowserDownloadsClient = EmbeddedBrowserInteractionClientLike;

package/dist/hooks/use-browser-identities.d.ts

@@ -1,8 +1,9 @@
-import type { BrowserIdentity, BrowserIdentityMutationResponse, BrowserRevisionListResponse, CreateBrowserIdentityRequest, PublishBrowserRevisionRequest, PublishBrowserRevisionResponse } from "@opengeni/sdk/interaction";
+import type { BrowserIdentity, BrowserIdentityMutationResponse, BrowserRevisionListResponse, CreateBrowserIdentityRequest, PublishBrowserRevisionRequest, PublishBrowserRevisionResponse, UpdateBrowserIdentityRequest } from "@opengeni/sdk/interaction";
 import type { EmbeddedBrowserInteractionClientLike } from "../client.js";
 import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
 export type UseBrowserIdentitiesOptions = EmbeddedBrowserInteractionClientOverride & {
     enabled?: boolean | undefined;
+    includeArchived?: boolean | undefined;
 };
 export type UseBrowserIdentitiesResult = {
     revision: number;
@@ -15,6 +16,9 @@ export type UseBrowserIdentitiesResult = {
     create: (request: Omit<CreateBrowserIdentityRequest, "operationId"> & {
         operationId?: string;
     }) => Promise<BrowserIdentityMutationResponse>;
+    update: (identityId: string, request: Omit<UpdateBrowserIdentityRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<BrowserIdentityMutationResponse>;
     revisions: (identityId: string) => Promise<BrowserRevisionListResponse>;
     publish: (browserSessionId: string, request: Omit<PublishBrowserRevisionRequest, "operationId"> & {
         operationId?: string;

package/dist/hooks/use-browser-session.d.ts

@@ -1,4 +1,4 @@
-import type { BrowserAction, BrowserActionBatch, BrowserActionReceipt, BrowserDiagnosticBatch, BrowserDiagnosticsOptions, BrowserFrame, BrowserObservation, BrowserSession, BrowserTarget } from "@opengeni/sdk/interaction";
+import type { BrowserAction, BrowserActionBatch, BrowserActionReceipt, BrowserClipboard, BrowserDiagnosticBatch, BrowserDiagnosticsOptions, BrowserFrame, BrowserObservation, BrowserSession, BrowserTarget } from "@opengeni/sdk/interaction";
 import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
 export type UseBrowserSessionOptions = EmbeddedBrowserInteractionClientOverride & {
     browserSessionId: string | null;
@@ -21,6 +21,7 @@ export type UseBrowserSessionResult = {
     /** Dispatch input against the exact image a human saw. Stale images fail at
      *  the controller fence instead of targeting a newer page. */
     actFromFrame: (action: BrowserAction | BrowserActionBatch, frame: BrowserFrame, operationId?: string) => Promise<BrowserActionReceipt>;
+    readClipboard: () => Promise<BrowserClipboard>;
     diagnostics: (options?: BrowserDiagnosticsOptions) => Promise<BrowserDiagnosticBatch>;
 };
 /** Selected BrowserSession control state. All human actions use the same

package/dist/hooks/use-browser-sessions.d.ts

@@ -5,7 +5,7 @@ export type UseBrowserSessionsOptions = EmbeddedBrowserInteractionClientOverride
     /** Current agent/session relevance. Workspace peers remain in `sessions`. */
     sessionId?: string | undefined;
     enabled?: boolean | undefined;
-    /** Temporary invalidation path until the interaction event stream lands. */
+    /** Polling fallback used only while the workspace invalidation stream is unavailable. */
     pollIntervalMs?: number | undefined;
 };
 export type UseBrowserSessionsResult = {

package/dist/hooks/use-channels.d.ts

@@ -0,0 +1,26 @@
+import type { Channel, CreateChannelRequest, Session, UpdateChannelRequest } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
+export type UseChannelsOptions = ClientOverride & {
+    pollIntervalMs?: number | undefined;
+    enabled?: boolean | undefined;
+};
+export type UseChannelsResult = {
+    channels: Channel[];
+    loading: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    create: (request: CreateChannelRequest) => Promise<Channel | null>;
+    update: (channelId: string, request: UpdateChannelRequest) => Promise<Channel | null>;
+    remove: (channelId: string) => Promise<boolean>;
+    /** Re-file a session into a channel; null moves it back to the inbox. */
+    moveSession: (sessionId: string, channelId: string | null) => Promise<Session | null>;
+    mutating: boolean;
+    mutationError: Error | null;
+    clearMutationError: () => void;
+};
+/**
+ * Workspace-shared channels: rail organization for root sessions
+ * ("workstreams") by work type. Pure metadata — filing a session into a
+ * channel never affects execution.
+ */
+export declare function useChannels(options?: UseChannelsOptions): UseChannelsResult;

package/dist/hooks/use-computer-frame-stream.d.ts

@@ -15,7 +15,7 @@ export type UseComputerFrameStreamOptions = EmbeddedComputerInteractionClientOve
 export type UseComputerFrameStreamResult = {
     state: ComputerFrameConnectionState;
     frame: ComputerFrame | null;
-    attachment: Pick<ComputerSessionAttachment, "computerSessionId" | "controllerGeneration" | "targetId" | "expiresAt"> | null;
+    attachment: Pick<ComputerSessionAttachment, "computerSessionId" | "controllerGeneration" | "targetId" | "stream" | "expiresAt"> | null;
     error: Error | null;
     reconnect: () => void;
 };

package/dist/hooks/use-computer-session.d.ts

@@ -1,4 +1,4 @@
-import type { ComputerAction, ComputerActionReceipt, ComputerFrame, ComputerObservation, ComputerSession, ComputerTarget } from "@opengeni/sdk/interaction";
+import type { ComputerAction, ComputerActionReceipt, ComputerClipboard, ComputerFrame, ComputerObservation, ComputerSession, ComputerTarget } from "@opengeni/sdk/interaction";
 import { type EmbeddedComputerInteractionClientOverride } from "../session-context.js";
 export type UseComputerSessionOptions = EmbeddedComputerInteractionClientOverride & {
     computerSessionId: string | null;
@@ -14,6 +14,7 @@ export type UseComputerSessionResult = {
     mutating: boolean;
     error: Error | null;
     refresh: () => Promise<void>;
+    readClipboard: () => Promise<ComputerClipboard>;
     /** Changes only this viewer's target cursor; it never takes ownership or
      * foregrounds an application. */
     selectTarget: (targetId: string) => Promise<ComputerTarget>;

package/dist/hooks/use-computer-sessions.d.ts

@@ -5,7 +5,7 @@ export type UseComputerSessionsOptions = EmbeddedComputerInteractionClientOverri
     /** Current agent/session relevance. Workspace peers remain in `sessions`. */
     sessionId?: string | undefined;
     enabled?: boolean | undefined;
-    /** Temporary invalidation path until the interaction event stream lands. */
+    /** Polling fallback used only while the workspace invalidation stream is unavailable. */
     pollIntervalMs?: number | undefined;
 };
 export type UseComputerSessionsResult = {

package/dist/hooks/use-desktop-stream.d.ts

@@ -11,6 +11,8 @@ export type UseDesktopStreamOptions = {
     scaleViewport?: boolean | undefined;
     /** Custom RFB factory (tests / a WebRTC swap). Defaults to a lazy @novnc/novnc. */
     rfbFactory?: DesktopRfbFactory | undefined;
+    /** Additional WebSocket protocols for an authenticated placement proxy. */
+    webSocketProtocols?: string[] | undefined;
     /** Custom socket factory for the `relay-frames` transport (tests). Defaults to
      *  `new WebSocket(url)`. Mirrors `rfbFactory` for the frame renderer. */
     webSocketFactory?: DesktopWebSocketFactory | undefined;
@@ -20,6 +22,8 @@ export type UseDesktopStreamResult = {
     error: Error | null;
     /** Manual reconnect (e.g. after a securityfailure once a fresh URL arrives). */
     reconnect: () => void;
+    /** Synchronous input on the already-open RFB authority. */
+    sendKey?: ((keysym: number, code: string, down?: boolean) => boolean) | undefined;
 };
 /**
  * Drive the noVNC RFB lifecycle from a `DesktopStreamCapability`, using the

package/dist/hooks/use-interaction-interventions.d.ts

@@ -0,0 +1,27 @@
+import type { CreateInteractionInterventionRequest, InteractionIntervention, InteractionInterventionMutationResponse, ResolveInteractionInterventionRequest } from "@opengeni/sdk/interaction";
+import type { EmbeddedInterventionClientLike } from "../client.js";
+import { type EmbeddedInterventionClientOverride } from "../session-context.js";
+export type UseInteractionInterventionsOptions = EmbeddedInterventionClientOverride & {
+    enabled?: boolean | undefined;
+    resourceKind?: "browser_session" | "computer_session" | undefined;
+    resourceId?: string | null | undefined;
+    includeSettled?: boolean | undefined;
+    pollIntervalMs?: number | undefined;
+};
+export type UseInteractionInterventionsResult = {
+    interventions: InteractionIntervention[];
+    loading: boolean;
+    refreshing: boolean;
+    mutating: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    create: (request: Omit<CreateInteractionInterventionRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<InteractionInterventionMutationResponse>;
+    resolve: (interventionId: string, request: Omit<ResolveInteractionInterventionRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<InteractionInterventionMutationResponse>;
+};
+/** Human-action bridge shared by Browser and Computer surfaces. */
+export declare function useInteractionInterventions(options?: UseInteractionInterventionsOptions): UseInteractionInterventionsResult;
+export type InteractionInterventionsClient = EmbeddedInterventionClientLike;

package/dist/hooks/use-interaction-invalidation.d.ts

@@ -0,0 +1,19 @@
+import type { StreamConnectionState, WorkspaceInteractionRevisionEvent } from "@opengeni/sdk";
+export type InteractionInvalidationOptions = {
+    workspaceId: string;
+    /** Distinguishes filtered projections of the same workspace catalog. */
+    key: string;
+    enabled: boolean;
+    event: WorkspaceInteractionRevisionEvent | null;
+    connectionState: StreamConnectionState | "idle" | "error";
+    /** Catalog responses carry the workspace revision; live-state lists do not. */
+    knownRevision?: number | undefined;
+    refresh: () => Promise<void>;
+    fallbackPollIntervalMs?: number | undefined;
+};
+/**
+ * Refetch authoritative lists on the shared latest-revision stream. Poll only
+ * while that stream is unavailable, preserving standalone-hook degradation
+ * without multiplying healthy-provider traffic.
+ */
+export declare function useInteractionInvalidation(options: InteractionInvalidationOptions): void;

package/dist/hooks/use-network-routes.d.ts

@@ -0,0 +1,25 @@
+import type { CreateNetworkRouteRequest, NetworkRoute, NetworkRouteMutationResponse, UpdateNetworkRouteRequest } from "@opengeni/sdk/interaction";
+import type { EmbeddedBrowserInteractionClientLike } from "../client.js";
+import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
+export type UseNetworkRoutesOptions = EmbeddedBrowserInteractionClientOverride & {
+    enabled?: boolean | undefined;
+    includeArchived?: boolean | undefined;
+};
+export type UseNetworkRoutesResult = {
+    revision: number;
+    routes: NetworkRoute[];
+    loading: boolean;
+    refreshing: boolean;
+    mutating: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    create: (request: Omit<CreateNetworkRouteRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<NetworkRouteMutationResponse>;
+    update: (networkRouteId: string, request: Omit<UpdateNetworkRouteRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<NetworkRouteMutationResponse>;
+};
+/** Workspace network-route registry. Route mutations never expose brokered credentials. */
+export declare function useNetworkRoutes(options?: UseNetworkRoutesOptions): UseNetworkRoutesResult;
+export type NetworkRoutesClient = EmbeddedBrowserInteractionClientLike;

package/dist/hooks/use-site-auth-connections.d.ts

@@ -0,0 +1,25 @@
+import type { CreateSiteAuthConnectionRequest, SiteAuthConnection, SiteAuthConnectionMutationResponse, UpdateSiteAuthConnectionRequest } from "@opengeni/sdk/interaction";
+import type { EmbeddedBrowserInteractionClientLike } from "../client.js";
+import { type EmbeddedBrowserInteractionClientOverride } from "../session-context.js";
+export type UseSiteAuthConnectionsOptions = EmbeddedBrowserInteractionClientOverride & {
+    enabled?: boolean | undefined;
+    includeArchived?: boolean | undefined;
+};
+export type UseSiteAuthConnectionsResult = {
+    revision: number;
+    connections: SiteAuthConnection[];
+    loading: boolean;
+    refreshing: boolean;
+    mutating: boolean;
+    error: Error | null;
+    refresh: () => Promise<void>;
+    create: (request: Omit<CreateSiteAuthConnectionRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<SiteAuthConnectionMutationResponse>;
+    update: (connectionId: string, request: Omit<UpdateSiteAuthConnectionRequest, "operationId"> & {
+        operationId?: string;
+    }) => Promise<SiteAuthConnectionMutationResponse>;
+};
+/** Secret-free workspace login recipes and their verified health. */
+export declare function useSiteAuthConnections(options?: UseSiteAuthConnectionsOptions): UseSiteAuthConnectionsResult;
+export type SiteAuthConnectionsClient = EmbeddedBrowserInteractionClientLike;

package/dist/hooks/use-supergrok-accounts.d.ts

@@ -0,0 +1,26 @@
+import type { SuperGrokAccount, SuperGrokAccountsResponse } from "@opengeni/sdk";
+import { type ClientOverride } from "../provider.js";
+export type SuperGrokAccountsClientLike = {
+    listSuperGrokAccounts: (workspaceId: string) => Promise<SuperGrokAccountsResponse>;
+    activateSuperGrokAccount?: (workspaceId: string, accountId: string) => Promise<{
+        activated: boolean;
+        accountId: string;
+    }>;
+};
+export type UseSuperGrokAccountsOptions = ClientOverride & {
+    enabled?: boolean | undefined;
+    pollIntervalMs?: number | undefined;
+    supergrokClient?: SuperGrokAccountsClientLike | undefined;
+};
+export type UseSuperGrokAccountsResult = {
+    accounts: SuperGrokAccount[];
+    activeAccountId: string | null;
+    settings: SuperGrokAccountsResponse["settings"];
+    loading: boolean;
+    refresh: () => Promise<void>;
+    activate: (accountId: string) => Promise<boolean>;
+    activating: boolean;
+    mutationError: Error | null;
+};
+/** Workspace-visible xAI accounts. Workspace scope is the connection default. */
+export declare function useSuperGrokAccounts(options?: UseSuperGrokAccountsOptions): UseSuperGrokAccountsResult;

package/dist/hooks/use-terminal-stream.d.ts

@@ -11,6 +11,9 @@ export type UseTerminalStreamOptions = {
     onOutput?: ((data: string) => void) | undefined;
     /** Called when ttyd sends a SET_WINDOW_TITLE frame. */
     onTitle?: ((title: string) => void) | undefined;
+    /** Requests a fresh negotiated terminal grant after an unexpected transport
+     * failure. Intentional disconnects and effect cleanup never call it. */
+    onReconnectNeeded?: (() => void) | undefined;
     /** Initial PTY size to seed the ttyd auth frame + first resize. */
     initialCols?: number | undefined;
     initialRows?: number | undefined;

package/dist/index.d.ts

@@ -44,6 +44,8 @@ export { useSessionLineage, isLineageRefreshEvent } from "./hooks/use-session-li
 export type { UseSessionLineageOptions, UseSessionLineageResult, } from "./hooks/use-session-lineage.js";
 export { useVariableSets, useEnvironments } from "./hooks/use-environments.js";
 export type { UseVariableSetsOptions, UseVariableSetsResult, UseEnvironmentsOptions, UseEnvironmentsResult, } from "./hooks/use-environments.js";
+export { useChannels } from "./hooks/use-channels.js";
+export type { UseChannelsOptions, UseChannelsResult } from "./hooks/use-channels.js";
 export { useRigs, useRig, useRigVersions, useRigChanges } from "./hooks/use-rigs.js";
 export type { UseRigsOptions, UseRigsResult, UseRigOptions, UseRigResult, UseRigVersionsOptions, UseRigVersionsResult, UseRigChangesOptions, UseRigChangesResult, } from "./hooks/use-rigs.js";
 export { usePacks } from "./hooks/use-packs.js";
@@ -152,6 +154,8 @@ export type { SandboxWorkspaceSurface, SandboxWorkspaceProps, UseSandboxWorkspac
 export * from "./machines.js";
 export { useCodexAccounts, isCodexAccountEvent } from "./hooks/use-codex-accounts.js";
 export type { CodexAccountsClientLike, UseCodexAccountsOptions, UseCodexAccountsResult, } from "./hooks/use-codex-accounts.js";
+export { useSuperGrokAccounts } from "./hooks/use-supergrok-accounts.js";
+export type { SuperGrokAccountsClientLike, UseSuperGrokAccountsOptions, UseSuperGrokAccountsResult, } from "./hooks/use-supergrok-accounts.js";
 export { gitFileDiffToPatch } from "./lib/git-patch.js";
 export { xtermThemeFromTokens } from "./lib/xterm-theme.js";
 export { cn } from "./lib/cn.js";