@opengeni/sdk 0.11.0 → 0.15.0

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-type SessionStatus = "queued" | "running" | "idle" | "requires_action" | "failed" | "cancelled";
+type SessionStatus = "queued" | "running" | "idle" | "requires_action" | "recovering" | "waiting_capacity" | "failed" | "cancelled";
 type SandboxBackend = "docker" | "modal" | "local" | "none" | "daytona" | "runloop" | "e2b" | "blaxel" | "cloudflare" | "vercel" | "selfhosted";
 type SandboxOs = "linux" | "macos" | "windows";
 type SandboxCapabilityName = "FileSystem" | "Terminal" | "Git" | "DesktopStream" | "Recording";
@@ -124,12 +124,18 @@ type ViewerHeartbeatResponse = {
     alive: boolean;
 };
 type ReasoningEffort = "none" | "minimal" | "low" | "medium" | "high" | "xhigh";
+type GitCredentialProvider = "github" | "gitlab" | "azure_devops";
 type RepositoryResourceRef = {
     kind: "repository";
     uri: string;
     ref: string;
     mountPath?: string | undefined;
     subpath?: string | undefined;
+    provider?: GitCredentialProvider | undefined;
+    repositoryId?: number | string | undefined;
+    installationId?: number | string | undefined;
+    projectId?: number | string | undefined;
+    connectionId?: string | undefined;
     githubInstallationId?: number | undefined;
     githubRepositoryId?: number | undefined;
 };
@@ -230,6 +236,11 @@ type OAuthStartRequest = {
     requestedScopes?: string[] | undefined;
     returnPath?: string | undefined;
     connectionId?: string | undefined;
+    oauthClient?: {
+        clientId: string;
+        clientSecret?: string | undefined;
+        tokenEndpointAuthMethod?: "none" | "client_secret_post" | "client_secret_basic" | undefined;
+    } | undefined;
 };
 type OAuthStartResponse = {
     state: string;
@@ -258,22 +269,71 @@ type Session = {
     metadata: Record<string, unknown>;
     model: string;
     sandboxBackend: SandboxBackend;
+    sandboxOs: SandboxOs;
+    sandboxGroupId: string;
+    activeSandboxId: string | null;
+    activeEpoch: number;
+    variableSetId: string | null;
+    /** @deprecated use variableSetId */
     environmentId: string | null;
+    rigId: string | null;
+    rigVersionId: string | null;
     firstPartyMcpPermissions: string[] | null;
     mcpServers: SessionMcpServerMetadata[];
+    parentSessionId: string | null;
     createIdempotencyKey: string | null;
     temporalWorkflowId: string | null;
     activeTurnId: string | null;
+    queueVersion: number;
+    queueHeadPosition: number;
+    queueTailPosition: number;
+    effectiveControl: EffectiveSessionControl;
     lastSequence: number;
     /** Multi-account Codex (P1): the account this session is pinned to (null ⇒ follow workspace active). */
     codexPinnedCredentialId?: string | null;
     /** Multi-account Codex (P1): the account the most recent turn ran on (the "Running on:" indicator). */
     codexLastCredentialId?: string | null;
+    /** Personal (authenticated subject) workspace pin state, never workspace-global. */
+    pinned?: boolean;
+    /** Stable pin ordering key; null when this subject has not pinned the session. */
+    pinnedAt?: string | null;
+    /** Optimistic pin-state revision; zero represents an absent pin relation. */
+    pinVersion?: number;
+    /** Server-authoritative descendant counts populated by session-list reads. */
+    treeStats?: {
+        directChildren: number;
+        totalDescendants: number;
+        runningDescendants: number;
+        queuedDescendants: number;
+        attentionDescendants: number;
+        pausedDescendants: number;
+        failedDescendants: number;
+    } | undefined;
     createdAt: string;
     updatedAt: string;
 };
-type SessionTurnStatus = "queued" | "running" | "requires_action" | "completed" | "failed" | "cancelled";
-type SessionTurnSource = "user" | "scheduled_task" | "api" | "goal";
+type SessionSummary = Session;
+/** Canonical session-list page; pinned rows are excluded from ordinary pages. */
+type SessionListResponse = {
+    pinned: Session[];
+    sessions: Session[];
+    nextCursor: string | null;
+};
+type UpdateSessionPinRequest = {
+    pinned: boolean;
+    expectedVersion?: number;
+};
+type LineageNode = {
+    session: SessionSummary;
+    children: LineageNode[];
+};
+type SessionLineageResponse = {
+    ancestors: SessionSummary[];
+    children: LineageNode[];
+    truncated: boolean;
+};
+type SessionTurnStatus = "queued" | "running" | "requires_action" | "recovering" | "waiting_capacity" | "completed" | "failed" | "cancelled" | "superseded" | "withdrawn_for_edit";
+type SessionTurnSource = "user" | "scheduled_task" | "api" | "goal" | "system" | "compaction";
 type SessionTurn = {
     id: string;
     workspaceId: string;
@@ -289,13 +349,20 @@ type SessionTurn = {
     model: string;
     reasoningEffort: ReasoningEffort;
     sandboxBackend: SandboxBackend;
+    sandboxOs: SandboxOs | null;
     metadata: Record<string, unknown>;
+    version: number;
+    executionGeneration: number;
+    activeAttemptId: string | null;
+    lineage: Record<string, unknown>;
+    cancelledBy?: string | null;
+    cancelReason?: string | null;
     startedAt: string | null;
     finishedAt: string | null;
     createdAt: string;
     updatedAt: string;
 };
-declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.status.changed", "session.requiresAction", "session.context.compacted", "session.context.cleared", "user.message", "user.interrupt", "user.approvalDecision", "turn.queued", "turn.updated", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.preempted", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "tool.auth_needed", "agent.updated", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.continuation", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "codex.account.switched"];
+declare const SESSION_EVENT_TYPES: readonly ["session.created", "session.status.changed", "session.requiresAction", "session.context.compaction.requested", "session.context.compacted", "session.context.compaction.skipped", "session.context.cleared", "user.message", "user.pause", "user.approvalDecision", "turn.queued", "turn.started", "turn.completed", "turn.failed", "turn.cancelled", "turn.superseded", "turn.recovery.requested", "turn.capacity_waiting", "agent.message.delta", "agent.message.completed", "agent.reasoning.delta", "agent.toolCall.created", "agent.toolCall.output", "agent.model.usage", "tool.auth_needed", "agent.updated", "rig.setup.started", "rig.setup.completed", "rig.setup.skipped", "rig.setup.failed", "sandbox.operation.started", "sandbox.operation.completed", "sandbox.operation.failed", "sandbox.command.output.delta", "artifact.created", "goal.set", "goal.updated", "goal.completed", "goal.paused", "goal.resumed", "goal.cleared", "goal.continuation", "system.update.pending", "system.update.delivered", "session.control.paused", "session.control.resumed", "session.control.steer_requested", "workspace.inference.paused", "workspace.inference.resumed", "session.queue.changed", "session.queue.prompt.cancelled", "session.queue.history", "turn.event.rejected_late", "memory.saved", "memory.corrected", "stream.url.rotated", "stream.opened", "stream.closed", "stream.revoked", "recording.started", "recording.available", "recording.failed", "fs.changed", "git.changed", "terminal.pty.started", "terminal.pty.output.delta", "terminal.pty.exited", "session.title_set", "codex.account.switched", "codex.credential.selected", "codex.capacity.waiting", "codex.capacity.resumed", "codex.capacity.superseded", "sandbox.box.created", "sandbox.box.lost", "sandbox.box.terminated", "sandbox.box.snapshot", "sandbox.env.drift", "session.route.reconciled", "workspace.revision.captured", "workspace.revision.degraded", "machine.op.failed", "machine.op.recovered", "machine.link.lost", "machine.link.restored", "machine.runner.restarted"];
 type KnownSessionEventType = (typeof SESSION_EVENT_TYPES)[number];
 /**
  * Event types the SDK knows about today, kept open so a newer OpenGeni server
@@ -313,6 +380,11 @@ type SessionEvent = {
     occurredAt: string;
     clientEventId?: string | null | undefined;
     turnId?: string | null | undefined;
+    turnGeneration?: number | null | undefined;
+    turnAttemptId?: string | null | undefined;
+    turnAssociation?: "current" | "late_rejected" | "duplicate" | null | undefined;
+    duplicateOfEventId?: string | null | undefined;
+    duplicateReason?: string | null | undefined;
 };
 type ToolAuthNeededPayload = {
     serverId: string;
@@ -603,6 +675,102 @@ type GitShowResponse = {
     } | null;
     revision: number;
 };
+type WorkspaceCaptureFile = {
+    path: string;
+    status: GitFileStatusCode;
+    hash: string | null;
+    baseHash: string | null;
+    contentRef: string | null;
+    sizeBytes: number;
+    isBinary: boolean;
+    tooLarge: boolean;
+    deleted: boolean;
+};
+type WorkspaceCaptureRepo = {
+    root: string;
+    head: string | null;
+    detached: boolean;
+    upstream: string | null;
+    ahead: number;
+    behind: number;
+    status: GitFileStatus[];
+    diff: GitFileDiff[];
+};
+type WorkspaceCaptureDegradedReason = "repository_discovery_command_failed" | "repository_discovery_timed_out" | "repository_discovery_result_limit_exceeded";
+type WorkspaceCaptureStats = {
+    repoCount: number;
+    fileCount: number;
+    additions: number;
+    deletions: number;
+    totalBytes: number;
+    tooLargeCount: number;
+    binaryCount: number;
+    treeEntryCount: number;
+    treeTruncated: boolean;
+    durationMs: number;
+    fingerprint?: string;
+};
+type WorkspaceCaptureManifest = {
+    version: 1;
+    revision: number;
+    capturedAt: string;
+    turnId: string | null;
+    leaseEpoch: number;
+    treeIndex: FsTreeNode;
+    treeTruncated: boolean;
+    repos: WorkspaceCaptureRepo[];
+    files: WorkspaceCaptureFile[];
+    stats: WorkspaceCaptureStats;
+};
+type WorkspaceRevisionCapturedPayload = {
+    revision: number;
+    turnId: string | null;
+    capturedAt: string;
+    leaseEpoch: number;
+    stats: WorkspaceCaptureStats;
+};
+type WorkspaceRevisionDegradedPayload = {
+    revision: number;
+    turnId: string | null;
+    capturedAt: string;
+    leaseEpoch: number;
+    reason: WorkspaceCaptureDegradedReason;
+};
+type WorkspaceCaptureSignedUrl = {
+    url: string;
+    expiresAt: string;
+};
+type GetWorkspaceCaptureResponse = {
+    available: false;
+    degradedReason?: WorkspaceCaptureDegradedReason | null;
+    revision?: number | null;
+    capturedAt?: string | null;
+    turnId?: string | null;
+    leaseEpoch?: number | null;
+} | {
+    available: true;
+    revision: number;
+    capturedAt: string;
+    turnId: string | null;
+    leaseEpoch: number;
+    sizeBytes: number;
+    stats: WorkspaceCaptureStats;
+    manifest: WorkspaceCaptureManifest | null;
+    manifestUrl: WorkspaceCaptureSignedUrl | null;
+};
+type GetWorkspaceCaptureFileResponse = {
+    path: string;
+    revision: number;
+    status: GitFileStatusCode;
+    hash: string | null;
+    baseHash: string | null;
+    sizeBytes: number;
+    isBinary: boolean;
+    tooLarge: boolean;
+    encoding: FsEncoding | null;
+    content: string | null;
+    contentUrl: WorkspaceCaptureSignedUrl | null;
+};
 type TerminalExecRequest = {
     command: string;
     cwd?: string;
@@ -699,7 +867,10 @@ type ScheduledTask = {
     overlapPolicy: ScheduledTaskOverlapPolicy;
     agentConfig: ScheduledTaskAgentConfig;
     reusableSessionId: string | null;
+    variableSetId: string | null;
+    /** @deprecated use variableSetId */
     environmentId: string | null;
+    rigId: string | null;
     metadata: Record<string, unknown>;
     createdAt: string;
     updatedAt: string;
@@ -715,7 +886,10 @@ type CreateSessionRequest = {
     sandboxBackend?: SandboxBackend | undefined;
     targetSandboxId?: string | undefined;
     workingDir?: string | undefined;
+    variableSetId?: string | undefined;
+    /** @deprecated use variableSetId */
     environmentId?: string | undefined;
+    rigId?: string | undefined;
     goal?: GoalSpec | undefined;
     clientEventId?: string | undefined;
     idempotencyKey?: string | undefined;
@@ -725,7 +899,7 @@ type CreateSessionRequest = {
         groupId: string;
     } | undefined;
 };
-declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "environments:manage", "environments:use", "mcp_servers:attach", "toolspace:call", "goals:manage", "enrollments:read", "enrollments:manage"];
+declare const KNOWN_PERMISSIONS: readonly ["account:read", "account:admin", "members:manage", "workspace:create", "billing:read", "billing:manage", "workspace:read", "workspace:admin", "sessions:create", "sessions:read", "sessions:control", "stream:view", "stream:control", "stream:acknowledge", "files:upload", "files:read", "files:write", "terminal:attach", "documents:manage", "documents:search", "scheduled_tasks:manage", "scheduled_tasks:run", "github:manage", "github:use", "api_keys:manage", "connections:read", "connections:write", "environments:manage", "environments:use", "variable-sets:manage", "variable-sets:use", "mcp_servers:attach", "toolspace:call", "goals:manage", "enrollments:read", "enrollments:manage", "rigs:use", "rigs:manage"];
 type KnownPermission = (typeof KNOWN_PERMISSIONS)[number];
 /**
  * Permissions the SDK knows about today, kept open so a newer OpenGeni server
@@ -889,6 +1063,8 @@ type ClientAuthConfig = {
     mode: "managedSession";
     session: "cookie";
 };
+declare const OPENGENI_API_CONTRACT_REVISION: "2026-07-session-control-v1";
+declare const OPENGENI_API_CONTRACT_HEADER: "x-opengeni-api-contract";
 /**
  * Public, unauthenticated-by-default client bootstrap config returned by
  * `GET /v1/config/client`: which models + reasoning efforts are exposed, the
@@ -898,6 +1074,8 @@ type ClientAuthConfig = {
  */
 type ClientConfig = {
     deploymentRevision: string;
+    apiContractRevision: typeof OPENGENI_API_CONTRACT_REVISION;
+    serverVersion?: string | undefined;
     defaultModel: string;
     allowedModels: string[];
     models: ClientModel[];
@@ -953,9 +1131,29 @@ type Workspace = {
     externalSource: string | null;
     externalId: string | null;
     agentInstructions: string | null;
+    settings: Record<string, unknown>;
+    inferenceControl: {
+        state: "active" | "paused";
+        revision: number;
+        reason: string | null;
+        changedBy: string | null;
+        changedAt: string | null;
+    };
+    defaultRigId?: string | null;
     createdAt: string;
     updatedAt: string;
 };
+type WorkspaceSettings = {
+    memoryEnabled?: boolean | undefined;
+    [key: string]: unknown;
+};
+type UpdateWorkspaceSettingsRequest = {
+    memoryEnabled?: boolean | undefined;
+    [key: string]: unknown;
+};
+type SetWorkspaceDefaultRigRequest = {
+    rigId: string | null;
+};
 type CreateWorkspaceRequest = {
     accountId?: string | undefined;
     name: string;
@@ -1045,21 +1243,146 @@ type UpdateSessionRequest = {
 };
 /** Outcome of a manual /compact trigger. */
 type CompactSessionContextResult = {
-    /**
-     * queued: a client-side (Azure) compaction will run before the next turn.
-     * noop:   nothing to do (server-managed provider, mode off, or no history).
-     */
-    status: "queued" | "noop";
+    /** pending waits for the current safe boundary; completed ran while idle. */
+    status: "pending" | "completed" | "noop";
     message: string;
 };
-type UpdateSessionTurnRequest = {
-    prompt?: string | undefined;
-    resources?: ResourceRef[] | undefined;
-    tools?: ToolRef[] | undefined;
-    model?: string | undefined;
-    reasoningEffort?: ReasoningEffort | undefined;
-    sandboxBackend?: SandboxBackend | undefined;
-    metadata?: Record<string, unknown> | undefined;
+type EffectiveControlBlocker = {
+    kind: "session" | "workspace";
+    sessionId?: string | undefined;
+    displayName: string;
+    actor: string | null;
+    reason: string | null;
+    changedAt: string | null;
+    revision: number;
+};
+type EffectiveControlResumeOption = {
+    scope: "selected" | "session" | "workspace";
+    targetId?: string | undefined;
+    selectedStateAfter: "active" | "paused";
+    remainingPrimaryBlocker?: EffectiveControlBlocker | undefined;
+    impactCopy: string;
+};
+type EffectiveSessionControl = {
+    state: "active" | "paused";
+    controlVersion: number;
+    controlEtag: string;
+    directState: "active" | "paused";
+    primaryBlocker: EffectiveControlBlocker | null;
+    additionalBlockerCount: number;
+    blockers: EffectiveControlBlocker[];
+    resumeOptions: EffectiveControlResumeOption[];
+    override: {
+        rootSessionId: string;
+        revision: number;
+    } | null;
+    settlement: {
+        state: "stopping";
+        attemptCount: number;
+    } | null;
+};
+type SessionCommandReceipt = {
+    id: string;
+    action: string;
+    operationKey: string;
+    targetSessionId: string | null;
+    targetTurnId: string | null;
+    appliedControlRevision: number | null;
+    appliedQueueVersion: number | null;
+    appliedTurnVersion: number | null;
+    appliedDraftRevision: number | null;
+    createdAt: string;
+};
+type ComposerDraft = {
+    revision: number;
+    text: string;
+    resources: ResourceRef[];
+    tools: ToolRef[];
+    model: string;
+    reasoningEffort: ReasoningEffort;
+    sourceTurnId: string | null;
+    sourceTurnVersion: number | null;
+    updatedAt: string | null;
+};
+type SessionQueueSnapshot = {
+    version: number;
+    effectiveControl: EffectiveSessionControl;
+    items: SessionTurn[];
+};
+type SystemUpdateClassification = "success" | "failure" | "action_required" | "info";
+type SessionSystemUpdateKind = "scheduled_occurrence" | "goal_continuation" | "agent_message" | "agent_steer_instruction" | "child_terminal_result";
+type SessionSystemUpdateState = "pending" | "deferred" | "delivered" | "cancelled" | "superseded" | "failed";
+type SessionSystemUpdate = {
+    id: string;
+    sessionId: string;
+    kind: SessionSystemUpdateKind;
+    classification: SystemUpdateClassification;
+    sourceId: string;
+    dedupeKey: string;
+    summary: string;
+    payload: Record<string, unknown>;
+    lineage: Record<string, unknown>;
+    state: SessionSystemUpdateState;
+    deliveredTurnId: string | null;
+    deliveredAt: string | null;
+    createdAt: string;
+};
+type SessionControlResponse = {
+    receipt: SessionCommandReceipt;
+    effectiveControl: EffectiveSessionControl;
+    interruptionCount: number;
+    wakeCount: number;
+};
+type WorkspaceInferenceControlResponse = {
+    receipt: SessionCommandReceipt;
+    state: "active" | "paused";
+    revision: number;
+    interruptionCount: number;
+    wakeCount: number;
+};
+type WorkspaceControlEvent = {
+    id: string;
+    workspaceId: string;
+    /** Same monotonic value as revision; named sequence for SSE resume cursors. */
+    sequence: number;
+    revision: number;
+    type: "workspace.control.changed";
+    scope: "workspace" | "session";
+    rootSessionId: string | null;
+    action: "pause" | "resume";
+    automatic: boolean;
+    reason: string | null;
+    actor: string;
+    occurredAt: string;
+};
+type SessionQueueMutationResponse = {
+    receipt: SessionCommandReceipt;
+    snapshot: SessionQueueSnapshot;
+    draft?: ComposerDraft;
+};
+type MoveSessionQueueItemRequest = {
+    clientEventId: string;
+    expectedQueueVersion: number;
+    beforeTurnId: string | null;
+};
+type EditSessionQueueItemRequest = {
+    clientEventId: string;
+    expectedTurnVersion: number;
+    expectedDraftRevision: number;
+    replaceDraft: boolean;
+};
+type SteerSessionQueueItemRequest = {
+    clientEventId: string;
+    expectedTurnVersion: number;
+    controlEtag?: string;
+};
+type DeleteSessionQueueItemRequest = {
+    clientEventId: string;
+    expectedTurnVersion: number;
+    reason?: string;
+};
+type SaveComposerDraftRequest = Omit<ComposerDraft, "revision" | "sourceTurnId" | "sourceTurnVersion" | "updatedAt"> & {
+    expectedRevision: number;
 };
 /** Input shape for agent config on create/update (server applies defaults). */
 type ScheduledTaskAgentConfigInput = {
@@ -1079,7 +1402,10 @@ type CreateScheduledTaskRequest = {
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     agentConfig: ScheduledTaskAgentConfigInput;
     status?: ScheduledTaskStatus | undefined;
+    variableSetId?: string | null | undefined;
+    /** @deprecated use variableSetId */
     environmentId?: string | null | undefined;
+    rigId?: string | null | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
 type UpdateScheduledTaskRequest = {
@@ -1089,7 +1415,10 @@ type UpdateScheduledTaskRequest = {
     overlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
     agentConfig?: ScheduledTaskAgentConfigInput | undefined;
     status?: ScheduledTaskStatus | undefined;
+    variableSetId?: string | null | undefined;
+    /** @deprecated use variableSetId */
     environmentId?: string | null | undefined;
+    rigId?: string | null | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
 type ScheduledTaskRunStatus = "queued" | "dispatched" | "failed";
@@ -1114,23 +1443,27 @@ type ScheduledTaskRun = {
  * reads expose name + version metadata only. Values are decrypted exclusively
  * inside the worker at sandbox materialization time.
  */
-type WorkspaceEnvironmentVariableMetadata = {
+type VariableSetVariableMetadata = {
     name: string;
     version: number;
     createdAt: string;
     updatedAt: string;
 };
-type WorkspaceEnvironment = {
+type VariableSet = {
     id: string;
     accountId: string;
     workspaceId: string;
     name: string;
     description: string | null;
-    variables: WorkspaceEnvironmentVariableMetadata[];
+    variables: VariableSetVariableMetadata[];
     createdAt: string;
     updatedAt: string;
 };
-type CreateWorkspaceEnvironmentRequest = {
+/** @deprecated use VariableSetVariableMetadata */
+type WorkspaceEnvironmentVariableMetadata = VariableSetVariableMetadata;
+/** @deprecated use VariableSet */
+type WorkspaceEnvironment = VariableSet;
+type CreateVariableSetRequest = {
     name: string;
     description?: string | undefined;
     /** Initial variables. Values are write-only: they never come back on reads. */
@@ -1139,10 +1472,114 @@ type CreateWorkspaceEnvironmentRequest = {
         value: string;
     }[] | undefined;
 };
-type UpdateWorkspaceEnvironmentRequest = {
+/** @deprecated use CreateVariableSetRequest */
+type CreateWorkspaceEnvironmentRequest = CreateVariableSetRequest;
+type UpdateVariableSetRequest = {
     name?: string | undefined;
     description?: string | null | undefined;
 };
+/** @deprecated use UpdateVariableSetRequest */
+type UpdateWorkspaceEnvironmentRequest = UpdateVariableSetRequest;
+type SetVariableSetVariableRequest = {
+    value: string;
+};
+/** @deprecated use SetVariableSetVariableRequest */
+type SetWorkspaceEnvironmentVariableRequest = SetVariableSetVariableRequest;
+type RigCheck = {
+    name: string;
+    command: string;
+};
+type RigVersion = {
+    id: string;
+    rigId: string;
+    version: number;
+    image: string | null;
+    setupScript: string | null;
+    checks: RigCheck[];
+    credentialHooks: string[];
+    defaultVariableSetIds: string[];
+    changelog: string | null;
+    createdBy: string | null;
+    active: boolean;
+    createdAt: string;
+};
+type RigVerificationHealth = {
+    checkHealth: "passing" | "failing" | "unknown";
+    lastVerifiedAt: string | null;
+};
+type Rig = {
+    id: string;
+    accountId: string;
+    workspaceId: string;
+    name: string;
+    description: string | null;
+    createdBy: string | null;
+    activeVersion: RigVersion | null;
+    activeVersionHealth?: RigVerificationHealth | null;
+    versionCount: number;
+    createdAt: string;
+    updatedAt: string;
+};
+type RigChangeKind = "setup_append" | "definition_edit";
+type RigChangeStatus = "proposed" | "verifying" | "merged" | "rejected" | "failed";
+type RigCheckResult = {
+    name: string;
+    command: string;
+    exitCode: number | null;
+    output?: string | undefined;
+};
+type RigChangeVerification = {
+    startedAt?: string | undefined;
+    finishedAt?: string | undefined;
+    log?: string | undefined;
+    checkResults?: RigCheckResult[] | undefined;
+    [key: string]: unknown;
+};
+type RigChange = {
+    id: string;
+    rigId: string;
+    baseVersionId: string | null;
+    kind: RigChangeKind;
+    payload: Record<string, unknown>;
+    status: RigChangeStatus;
+    proposedBy: string | null;
+    verification: RigChangeVerification | null;
+    resultVersionId: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+type CreateRigRequest = {
+    name: string;
+    description?: string | undefined;
+    image?: string | undefined;
+    setupScript?: string | undefined;
+    checks?: RigCheck[] | undefined;
+    credentialHooks?: string[] | undefined;
+    defaultVariableSetIds?: string[] | undefined;
+};
+type UpdateRigRequest = {
+    name?: string | undefined;
+    description?: string | null | undefined;
+};
+type RigSetupAppendPayload = {
+    command: string;
+    note?: string | undefined;
+};
+type RigDefinitionEditPayload = {
+    image?: string | null | undefined;
+    setupScript?: string | null | undefined;
+    checks?: RigCheck[] | undefined;
+    credentialHooks?: string[] | undefined;
+    defaultVariableSetIds?: string[] | undefined;
+    changelog?: string | null | undefined;
+};
+type ProposeRigChangeRequest = {
+    kind: "setup_append";
+    payload: RigSetupAppendPayload;
+} | {
+    kind: "definition_edit";
+    payload: RigDefinitionEditPayload;
+};
 type FileStatus = "pending_upload" | "ready" | "failed" | "expired" | "deleted";
 type FileAsset = {
     id: string;
@@ -1274,7 +1711,7 @@ type DocumentSearchRequest = {
 type DocumentSearchResponse = {
     results: DocumentSearchResult[];
 };
-type KnowledgeMemoryStatus = "proposed" | "approved" | "rejected";
+type KnowledgeMemoryStatus = "proposed" | "approved" | "rejected" | "active" | "superseded" | "archived";
 type KnowledgeMemoryKind = "semantic" | "episodic" | "procedural" | "decision" | "preference";
 type KnowledgeSourceRef = {
     kind: "document_chunk" | "document" | "session_event" | "memory" | "external";
@@ -1296,6 +1733,13 @@ type KnowledgeMemory = {
     createdBySessionId: string | null;
     reviewedBy: string | null;
     reviewedAt: string | null;
+    pinned: boolean;
+    usageCount: number;
+    lastUsedAt: string | null;
+    supersedesId: string | null;
+    supersededById: string | null;
+    validFrom: string;
+    validUntil: string | null;
     createdAt: string;
     updatedAt: string;
 };
@@ -1308,6 +1752,8 @@ type CreateKnowledgeMemoryRequest = {
     confidence?: number | undefined;
     metadata?: Record<string, unknown> | undefined;
     createdBySessionId?: string | undefined;
+    pinned?: boolean | undefined;
+    replacesId?: string | undefined;
 };
 type UpdateKnowledgeMemoryRequest = {
     status?: KnowledgeMemoryStatus | undefined;
@@ -1318,6 +1764,7 @@ type UpdateKnowledgeMemoryRequest = {
     confidence?: number | undefined;
     metadata?: Record<string, unknown> | undefined;
     reviewedBy?: string | undefined;
+    pinned?: boolean | undefined;
 };
 type KnowledgeMemorySearchRequest = {
     query?: string | undefined;
@@ -1326,6 +1773,23 @@ type KnowledgeMemorySearchRequest = {
     scope?: string | undefined;
     limit?: number | undefined;
 };
+type WorkspaceMemorySearchMode = "hybrid" | "vector" | "keyword";
+type WorkspaceMemorySearchRequest = {
+    query: string;
+    kind?: KnowledgeMemoryKind | undefined;
+    limit?: number | undefined;
+    mode?: WorkspaceMemorySearchMode | undefined;
+};
+type WorkspaceMemorySearchResult = {
+    memory: KnowledgeMemory;
+    score: number;
+    matchType: WorkspaceMemorySearchMode;
+    vectorScore: number | null;
+    keywordScore: number | null;
+};
+type WorkspaceMemorySearchResponse = {
+    results: WorkspaceMemorySearchResult[];
+};
 type CapabilityPackConnectorAuthModel = "oauth2_authorization_code_pkce" | "oauth2_authorization_code" | "api_key" | "credential_ref";
 type CapabilityPackConnector = {
     id: string;
@@ -1362,7 +1826,7 @@ type CapabilityPackSkill = {
     description?: string | undefined;
     files: CapabilityPackSkillFile[];
 };
-type CapabilityPackEnvironmentSpec = {
+type CapabilityPackVariableSetSpec = {
     description: string;
     requiredVariables: string[];
     required: boolean;
@@ -1380,7 +1844,7 @@ type CapabilityPack = {
     connectors: CapabilityPackConnector[];
     knowledge: CapabilityPackKnowledge[];
     scheduledTaskTemplates: CapabilityPackScheduledTaskTemplate[];
-    environment?: CapabilityPackEnvironmentSpec | undefined;
+    variableSet?: CapabilityPackVariableSetSpec | undefined;
     metadata: Record<string, unknown>;
 };
 /** Input shape for registering a pack manifest (server applies defaults). */
@@ -1424,7 +1888,7 @@ type RegisterCapabilityPackRequest = {
         defaultOverlapPolicy?: ScheduledTaskOverlapPolicy | undefined;
         prompt?: string | undefined;
     }[] | undefined;
-    environment?: {
+    variableSet?: {
         description: string;
         requiredVariables?: string[] | undefined;
         required?: boolean | undefined;
@@ -1450,6 +1914,8 @@ type PackInstallation = {
     updatedAt: string;
 };
 type EnablePackRequest = {
+    variableSetId?: string | undefined;
+    /** @deprecated use variableSetId */
     environmentId?: string | undefined;
     metadata?: Record<string, unknown> | undefined;
 };
@@ -1502,6 +1968,12 @@ type CapabilityCatalogItem = {
     runtime: CapabilityRuntime;
     enabled: boolean;
     enabledReason: string | null;
+    /** The connection backing this enabled installation, or null when none is involved. */
+    connectionRef: {
+        connectionId: string;
+        providerDomain: string;
+        kind: string;
+    } | null;
     metadata: Record<string, unknown>;
     createdAt?: string | undefined;
     updatedAt?: string | undefined;
@@ -1547,10 +2019,12 @@ type EnableCapabilityRequest = {
      */
     headers?: Record<string, string> | undefined;
     /**
-     * Initial environment attachment for kind=pack capabilities — mirrors the
+     * Initial variableSet attachment for kind=pack capabilities — mirrors the
      * dedicated POST /packs/:id/enable body. Required to enable an
-     * environment.required pack through this unified path; ignored otherwise.
+     * variableSet.required pack through this unified path; ignored otherwise.
      */
+    variableSetId?: string | undefined;
+    /** @deprecated use variableSetId */
     environmentId?: string | undefined;
 };
 type DiscoverMcpCapabilitiesResponse = {
@@ -1660,13 +2134,6 @@ type UserMessageEventInput = {
         mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[] | undefined;
     };
 };
-type UserInterruptEventInput = {
-    type: "user.interrupt";
-    clientEventId?: string | undefined;
-    payload?: {
-        reason?: string | undefined;
-    } | undefined;
-};
 type UserApprovalDecisionEventInput = {
     type: "user.approvalDecision";
     clientEventId?: string | undefined;
@@ -1677,7 +2144,7 @@ type UserApprovalDecisionEventInput = {
     };
 };
 /** Control/user events a client may POST to a session's event log. */
-type ClientSessionEventInput = UserMessageEventInput | UserInterruptEventInput | UserApprovalDecisionEventInput;
+type ClientSessionEventInput = UserMessageEventInput | UserApprovalDecisionEventInput;
 /** A point-in-time machine metrics sample. `gpuUtilPct`/`gpuMemBytes` are null
  *  when no GPU was present (not-reported, never a real zero); the bytes/load are
  *  numbers; `sampledAt` is an ISO-8601 instant. */
@@ -1747,6 +2214,7 @@ type SwapActiveSandboxResponse = {
     activeSandboxId: string | null;
     activeEpoch: number;
     reason?: string;
+    code?: "stale_pointer" | "offline_enrollment" | "unsupported_backend_context" | "transient_establishment" | "concurrent_swap";
 };
 /** Mirror of `@opengeni/contracts` EnrollmentOs. */
 type EnrollmentOs = "linux" | "macos" | "windows";
@@ -1857,6 +2325,8 @@ type StreamSessionEventsOptions = {
      * reconnects = N+1 total open-stream calls). Defaults to unlimited.
      */
     maxReconnectAttempts?: number;
+    /** Await authoritative client reconciliation before exposing `live`. */
+    beforeLive?: (() => void | Promise<void>) | undefined;
     onStateChange?: (state: StreamConnectionState) => void;
 };
 /**
@@ -1876,6 +2346,17 @@ type StreamSessionEventsOptions = {
  */
 declare function streamSessionEvents(transport: SessionEventStreamTransport, options?: StreamSessionEventsOptions): AsyncGenerator<SessionEvent, void, void>;
 
+type WorkspaceControlStreamTransport = {
+    /** The server replays every durable event after the cursor before going live. */
+    openStream: (after: number, signal: AbortSignal | undefined) => Promise<ReadableStream<Uint8Array>>;
+};
+/**
+ * Reconnecting workspace invalidation stream. Control revisions are monotonic
+ * but can begin above one after the one-way migration, so unlike conversation
+ * events this stream intentionally permits sparse sequence values.
+ */
+declare function streamWorkspaceControlEvents(transport: WorkspaceControlStreamTransport, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceControlEvent, void, void>;
+
 type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 type OpenGeniClientOptions = {
     /** Base URL of the OpenGeni API, e.g. `https://api.example.com`. */
@@ -1894,18 +2375,15 @@ type SendMessageInput = {
     model?: string;
     reasoningEffort?: ReasoningEffort;
     clientEventId?: string;
+    controlEtag?: string;
+    expectedDraftRevision?: number;
+    mcpCredentialUpdates?: SessionMcpCredentialUpdateInput[];
 };
 type SteerMessageResult = {
     /** The accepted `user.message` event. */
     accepted: SessionEvent;
-    /**
-     * The turn created for the message, when it could be located — usually
-     * still queued, but already claimed (running/requires_action or even
-     * finished) when the worker picked it up mid-call.
-     */
-    turn: SessionTurn | null;
-    /** True when the running turn was interrupted to make way for the message. */
-    interrupted: boolean;
+    /** The exact turn created for this message in the same server transaction. */
+    turn: SessionTurn;
 };
 /**
  * Typed client for the OpenGeni public API. Framework-agnostic: only needs
@@ -1922,7 +2400,19 @@ declare class OpenGeniClient {
     updateSession(workspaceId: string, sessionId: string, request: UpdateSessionRequest): Promise<Session>;
     listSessions(workspaceId: string, options?: {
         limit?: number;
+        parentSessionId?: string | null;
+        search?: string;
     }): Promise<Session[]>;
+    /** Pin-aware ordinary-session page with a stable keyset cursor. */
+    listSessionPage(workspaceId: string, options?: {
+        limit?: number;
+        parentSessionId?: string | null;
+        cursor?: string;
+        search?: string;
+    }): Promise<SessionListResponse>;
+    /** Set this authenticated member's personal workspace pin for a session. */
+    updateSessionPin(workspaceId: string, sessionId: string, request: UpdateSessionPinRequest): Promise<Session>;
+    getSessionLineage(workspaceId: string, sessionId: string): Promise<SessionLineageResponse>;
     listTurns(workspaceId: string, sessionId: string, options?: {
         limit?: number;
     }): Promise<SessionTurn[]>;
@@ -2002,10 +2492,11 @@ declare class OpenGeniClient {
     /** POST a user/control event to the session. Returns the accepted event. */
     sendEvent(workspaceId: string, sessionId: string, event: ClientSessionEventInput): Promise<SessionEvent>;
     sendMessage(workspaceId: string, sessionId: string, message: string | SendMessageInput): Promise<SessionEvent>;
-    interrupt(workspaceId: string, sessionId: string, options?: {
+    pauseSession(workspaceId: string, sessionId: string, options?: {
         reason?: string;
         clientEventId?: string;
-    }): Promise<SessionEvent>;
+        expectedControlEtag?: string;
+    }): Promise<SessionControlResponse>;
     sendApprovalDecision(workspaceId: string, sessionId: string, decision: {
         approvalId: string;
         decision: "approve" | "reject";
@@ -2025,35 +2516,49 @@ declare class OpenGeniClient {
         after?: number;
         signal?: AbortSignal;
     }): Promise<ReadableStream<Uint8Array>>;
-    /** Edit a still-queued turn (prompt, model, resources, tools, ...). */
-    updateQueuedTurn(workspaceId: string, sessionId: string, turnId: string, update: UpdateSessionTurnRequest): Promise<SessionTurn>;
-    /**
-     * Reorder the queued turns. `turnIds` must all reference queued turns; the
-     * server assigns positions in the given order and returns the queue.
-     */
-    reorderQueuedTurns(workspaceId: string, sessionId: string, turnIds: string[]): Promise<SessionTurn[]>;
-    /** Cancel a queued turn before it is claimed. Returns the cancelled turn. */
-    deleteQueuedTurn(workspaceId: string, sessionId: string, turnId: string): Promise<SessionTurn>;
+    getQueue(workspaceId: string, sessionId: string): Promise<SessionQueueSnapshot>;
+    moveQueueItem(workspaceId: string, sessionId: string, turnId: string, request: MoveSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+    editQueueItem(workspaceId: string, sessionId: string, turnId: string, request: EditSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+    steerQueueItem(workspaceId: string, sessionId: string, turnId: string, request: SteerSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+    deleteQueueItem(workspaceId: string, sessionId: string, turnId: string, request: DeleteSessionQueueItemRequest): Promise<SessionQueueMutationResponse>;
+    getComposerDraft(workspaceId: string, sessionId: string): Promise<ComposerDraft>;
+    saveComposerDraft(workspaceId: string, sessionId: string, request: SaveComposerDraftRequest): Promise<ComposerDraft>;
+    controlSession(workspaceId: string, sessionId: string, request: {
+        action: "pause" | "resume";
+        reason?: string;
+        clientEventId: string;
+        expectedControlEtag?: string;
+    }): Promise<SessionControlResponse>;
+    resumeSession(workspaceId: string, sessionId: string, options?: {
+        reason?: string;
+        clientEventId?: string;
+        expectedControlEtag?: string;
+    }): Promise<SessionControlResponse>;
+    setWorkspaceInferenceState(workspaceId: string, request: {
+        action: "pause" | "resume";
+        reason?: string;
+        clientEventId: string;
+        expectedRevision?: number;
+    }): Promise<WorkspaceInferenceControlResponse>;
+    listWorkspaceControlEvents(workspaceId: string, options?: {
+        after?: number;
+        limit?: number;
+    }): Promise<WorkspaceControlEvent[]>;
+    streamWorkspaceControlEvents(workspaceId: string, options?: StreamSessionEventsOptions): AsyncGenerator<WorkspaceControlEvent, void, void>;
+    workspaceControlStreamTransport(workspaceId: string): WorkspaceControlStreamTransport;
+    openWorkspaceControlEventStream(workspaceId: string, options?: {
+        after?: number;
+        signal?: AbortSignal;
+    }): Promise<ReadableStream<Uint8Array>>;
     /**
-     * Steer: deliver a message *now* instead of behind the queue. Sends the
-     * message, promotes its queued turn to the front, and interrupts the
-     * running turn so the session picks the steer turn up next. On a session
-     * that is not running this degrades gracefully to a plain queued message.
-     *
-     * The steer turn is located by `triggerEventId` across ALL turns (retried
-     * briefly in case the server is still materializing it) — not just the
-     * queued ones, because the worker can claim the steer turn before it is
-     * ever observed queued, and a claimed steer turn means the message is
-     * already being delivered: interrupting then would cancel the very message
-     * being steered. If the turn cannot be found while other turns are queued,
-     * the interrupt is also skipped — stopping the running turn would otherwise
-     * promote someone else's queued work over this message — and the call
-     * degrades to a plain queued send (`interrupted: false`).
+     * Steer: atomically put this prompt at the head and supersede the current
+     * inference. The client performs one request and renders server order.
      */
     steerMessage(workspaceId: string, sessionId: string, message: string | SendMessageInput): Promise<SteerMessageResult>;
     /** The session's goal. 404s when the session never had one. */
     getGoal(workspaceId: string, sessionId: string): Promise<SessionGoal>;
     updateGoal(workspaceId: string, sessionId: string, request: UpdateSessionGoalRequest): Promise<SessionGoal>;
+    deleteGoal(workspaceId: string, sessionId: string): Promise<void>;
     /** Pause the goal loop: the session stops self-continuing until resumed. */
     pauseGoal(workspaceId: string, sessionId: string, options?: {
         rationale?: string;
@@ -2068,12 +2573,7 @@ declare class OpenGeniClient {
      * context — the destructive intent is explicit on the wire.
      */
     clearSessionContext(workspaceId: string, sessionId: string): Promise<void>;
-    /**
-     * Trigger conversation compaction now. On the client-managed (Azure) path this
-     * queues a forced compaction the worker honors before the next turn
-     * (`status:"queued"`); on a server-managed provider or when compaction is off
-     * it is a no-op (`status:"noop"`) with an explanatory message.
-     */
+    /** Request one durable portable compaction at the next safe model boundary. */
     compactSessionContext(workspaceId: string, sessionId: string): Promise<CompactSessionContextResult>;
     /** FileSystem: list a directory tree (feeds the Pierre file tree). */
     fsList(workspaceId: string, sessionId: string, request?: FsListRequest): Promise<FsListResponse>;
@@ -2095,6 +2595,15 @@ declare class OpenGeniClient {
     gitLog(workspaceId: string, sessionId: string, request?: GitLogRequest): Promise<GitLogResponse>;
     /** Git: show a commit (diff vs first parent) or fetch a raw blob at a ref. */
     gitShow(workspaceId: string, sessionId: string, request: GitShowRequest): Promise<GitShowResponse>;
+    /** Workspace capture: the latest turn-end snapshot of the session's workspace
+     *  (tree + per-repo diff + file after-image refs), served from durable storage
+     *  WITHOUT warming a machine — the workbench cold-paint source. Returns
+     *  `{available:false}` when no capture exists yet (fall back to the live path). */
+    getWorkspaceCapture(workspaceId: string, sessionId: string): Promise<GetWorkspaceCaptureResponse>;
+    /** Workspace capture: a single file's after-image from the capture (revision
+     *  pins a specific one; omitted → latest). Content is inline for small files,
+     *  else a short-TTL signed URL; a tooLarge file returns metadata only. */
+    getWorkspaceCaptureFile(workspaceId: string, sessionId: string, path: string, revision?: number): Promise<GetWorkspaceCaptureFileResponse>;
     /** Terminal: run a bounded command, returning buffered stdout/stderr inline. */
     terminalExec(workspaceId: string, sessionId: string, request: TerminalExecRequest): Promise<TerminalExecResponse>;
     /** Terminal: open an interactive PTY. Output streams on the event SSE as
@@ -2180,13 +2689,60 @@ declare class OpenGeniClient {
     listScheduledTaskRuns(workspaceId: string, taskId: string, options?: {
         limit?: number;
     }): Promise<ScheduledTaskRun[]>;
-    listEnvironments(workspaceId: string): Promise<WorkspaceEnvironment[]>;
-    createEnvironment(workspaceId: string, request: CreateWorkspaceEnvironmentRequest): Promise<WorkspaceEnvironment>;
-    getEnvironment(workspaceId: string, environmentId: string): Promise<WorkspaceEnvironment>;
-    updateEnvironment(workspaceId: string, environmentId: string, request: UpdateWorkspaceEnvironmentRequest): Promise<WorkspaceEnvironment>;
-    deleteEnvironment(workspaceId: string, environmentId: string): Promise<void>;
+    listVariableSets(workspaceId: string): Promise<VariableSet[]>;
+    createVariableSet(workspaceId: string, request: CreateVariableSetRequest): Promise<VariableSet>;
+    getVariableSet(workspaceId: string, variableSetId: string): Promise<VariableSet>;
+    updateVariableSet(workspaceId: string, variableSetId: string, request: UpdateVariableSetRequest): Promise<VariableSet>;
+    deleteVariableSet(workspaceId: string, variableSetId: string): Promise<void>;
     /** Create or rotate a variable. The value never comes back on any read. */
-    setEnvironmentVariable(workspaceId: string, environmentId: string, name: string, value: string): Promise<WorkspaceEnvironmentVariableMetadata>;
+    setVariableSetVariable(workspaceId: string, variableSetId: string, name: string, value: string): Promise<VariableSetVariableMetadata>;
+    deleteVariableSetVariable(workspaceId: string, variableSetId: string, name: string): Promise<void>;
+    listRigs(workspaceId: string): Promise<Rig[]>;
+    createRig(workspaceId: string, request: CreateRigRequest): Promise<Rig>;
+    getRig(workspaceId: string, rigId: string): Promise<Rig>;
+    updateRig(workspaceId: string, rigId: string, request: UpdateRigRequest): Promise<Rig>;
+    deleteRig(workspaceId: string, rigId: string): Promise<void>;
+    listRigVersions(workspaceId: string, rigId: string): Promise<RigVersion[]>;
+    /** Roll the active version to an existing one (rollback / promote-activate). */
+    activateRigVersion(workspaceId: string, rigId: string, versionId: string): Promise<RigVersion>;
+    listRigChanges(workspaceId: string, rigId: string): Promise<RigChange[]>;
+    /** Propose a change against the rig's active version (rigs:use). */
+    proposeRigChange(workspaceId: string, rigId: string, request: ProposeRigChangeRequest): Promise<RigChange>;
+    getRigChange(workspaceId: string, rigId: string, changeId: string): Promise<RigChange>;
+    /**
+     * Re-run verification for a change (rigs:use). Verification is asynchronous:
+     * this returns the change immediately with status `verifying`; poll
+     * `getRigChange`/`listRigChanges` for the terminal outcome + logs.
+     */
+    verifyRigChange(workspaceId: string, rigId: string, changeId: string): Promise<RigChange>;
+    /**
+     * Promote a verified `definition_edit` change into a new active rig version
+     * (rigs:manage). Only valid once the change's verification passed; returns the
+     * newly minted version.
+     */
+    promoteRigChange(workspaceId: string, rigId: string, changeId: string): Promise<RigVersion>;
+    /**
+     * Re-run the active version's checks in a clean throwaway sandbox (rigs:use).
+     * Asynchronous — returns the version id being verified; the outcome lands on
+     * the version's audit trail.
+     */
+    verifyRig(workspaceId: string, rigId: string): Promise<{
+        ok: boolean;
+        versionId: string;
+    }>;
+    /** @deprecated use listVariableSets */
+    listEnvironments(workspaceId: string): Promise<VariableSet[]>;
+    /** @deprecated use createVariableSet */
+    createEnvironment(workspaceId: string, request: CreateVariableSetRequest): Promise<VariableSet>;
+    /** @deprecated use getVariableSet */
+    getEnvironment(workspaceId: string, environmentId: string): Promise<VariableSet>;
+    /** @deprecated use updateVariableSet */
+    updateEnvironment(workspaceId: string, environmentId: string, request: UpdateVariableSetRequest): Promise<VariableSet>;
+    /** @deprecated use deleteVariableSet */
+    deleteEnvironment(workspaceId: string, environmentId: string): Promise<void>;
+    /** @deprecated use setVariableSetVariable */
+    setEnvironmentVariable(workspaceId: string, environmentId: string, name: string, value: string): Promise<VariableSetVariableMetadata>;
+    /** @deprecated use deleteVariableSetVariable */
     deleteEnvironmentVariable(workspaceId: string, environmentId: string, name: string): Promise<void>;
     /** Step 1 of the upload flow: returns the pre-signed PUT target. */
     beginFileUpload(workspaceId: string, request: CreateFileUploadRequest): Promise<CreateFileUploadResponse>;
@@ -2220,6 +2776,11 @@ declare class OpenGeniClient {
     getKnowledgeMemory(workspaceId: string, memoryId: string): Promise<KnowledgeMemory>;
     createKnowledgeMemory(workspaceId: string, request: CreateKnowledgeMemoryRequest): Promise<KnowledgeMemory>;
     updateKnowledgeMemory(workspaceId: string, memoryId: string, request: UpdateKnowledgeMemoryRequest): Promise<KnowledgeMemory>;
+    /** Hybrid (semantic + keyword) search over the workspace's agent-visible memory. */
+    searchWorkspaceMemories(workspaceId: string, request: WorkspaceMemorySearchRequest): Promise<WorkspaceMemorySearchResponse>;
+    /** Deep-merge a settings patch into the workspace (preserves unknown keys). */
+    updateWorkspaceSettings(workspaceId: string, request: UpdateWorkspaceSettingsRequest): Promise<Workspace>;
+    setWorkspaceDefaultRig(workspaceId: string, request: SetWorkspaceDefaultRigRequest): Promise<Workspace>;
     /** Built-in + registered packs, with the workspace's installations. */
     listPacks(workspaceId: string): Promise<ListPacksResponse>;
     /** Register (or replace) a workspace-scoped pack from a manifest. */
@@ -2239,6 +2800,14 @@ declare class OpenGeniClient {
         query?: string;
         limit?: number;
     }): Promise<DiscoverMcpCapabilitiesResponse>;
+    listConnections(workspaceId: string): Promise<ConnectionMetadata[]>;
+    createConnection(workspaceId: string, request: CreateConnectionRequest): Promise<ConnectionMetadata>;
+    updateConnection(workspaceId: string, connectionId: string, request: UpdateConnectionRequest): Promise<ConnectionMetadata>;
+    deleteConnection(workspaceId: string, connectionId: string): Promise<ConnectionMetadata>;
+    /** Start an OAuth connection flow; redirect the user to the returned `authorizationUrl`. */
+    startConnectionOAuth(workspaceId: string, request: OAuthStartRequest): Promise<OAuthStartResponse>;
+    /** Public, immutably-cached URL for a catalog item's logo, or null when the item has none. */
+    catalogAssetUrl(logoAssetPath: string | null): string | null;
     /** GitHub App configuration status + a signed install URL when configured. */
     getGitHubApp(workspaceId: string): Promise<GitHubAppInfo>;
     /**
@@ -2323,6 +2892,12 @@ declare class OpenGeniApiError extends Error {
     readonly body: string;
     constructor(status: number, body: string);
 }
+/** The browser bundle and API disagree about their state-changing wire contract. */
+declare class OpenGeniApiContractMismatchError extends Error {
+    readonly expected: string;
+    readonly actual: string;
+    constructor(expected: string, actual: string);
+}
 /** Error for an unrecoverable event-stream condition (not a transient drop). */
 declare class OpenGeniStreamError extends Error {
     constructor(message: string);
@@ -2532,4 +3107,4 @@ declare function ttydInputFrame(data: string): string;
 /** Build a client→server RESIZE frame: "1" + JSON.stringify({ columns, rows }). */
 declare function ttydResizeFrame(columns: number, rows: number): string;
 
-export { type AccessContext, type AccessGrant, type AccountGrant, type AccountRole, type AcknowledgeStreamRequest, type AcknowledgeStreamResponse, type AddDocumentRequest, type AddWorkspaceMemberRequest, type AgentMessageCompletedPayload, type AgentTextDeltaPayload, type AgentToolCallCreatedPayload, type AgentToolCallOutputPayload, type ApiKey, type AttachViewerRequest, type AttachViewerResponse, type BillingBalance, type BillingEntitlementsResponse, type BillingMode, type BillingSummary, type BillingUsageResponse, type CapabilityCatalogItem, type CapabilityCatalogResponse, type CapabilityInstallation, type CapabilityInstallationStatus, type CapabilityKind, type CapabilityPack, type CapabilityPackConnector, type CapabilityPackConnectorAuthModel, type CapabilityPackEnvironmentSpec, type CapabilityPackKnowledge, type CapabilityPackScheduledTaskTemplate, type CapabilityPackSkill, type CapabilityPackSkillFile, type CapabilityRuntime, type CapabilitySource, type CapabilityUnavailableReason, type ClientAuthConfig, type ClientConfig, type ClientModel, type ClientSessionEventInput, type CodexAccount, type CodexAccountSwitchedPayload, type CodexAccountsResponse, type CodexConnectPoll, type CodexConnectStart, type CodexConnectionStatus, type CodexRotationSettings, type CodexUsage, type CodexUsageMap, type CodexUsagePayload, type CodexUsageWindow, type CompactSessionContextResult, type CompleteFileUploadResponse, type ComputerUseCapability, type ConnectionKind, type ConnectionMetadata, type ConnectionResponse, type ConnectionStatus, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateCapabilityCatalogItemRequest, type CreateCheckoutRequest, type CreateCheckoutResponse, type CreateConnectionRequest, type CreateDocumentBaseRequest, type CreateFileUploadRequest, type CreateFileUploadResponse, type CreateGitHubAppManifestRequest, type CreateGitHubAppManifestResponse, type CreateKnowledgeMemoryRequest, type CreateScheduledTaskRequest, type CreateSessionRequest, type CreateWorkspaceEnvironmentRequest, type CreateWorkspaceRequest, type DesktopConnectionState, type DesktopRfbFactory, type DesktopRfbLike, type DesktopStreamCapability, type DesktopStreamEvent, type DeviceEnrollmentApproveRequest, type DeviceEnrollmentApproveResponse, type DeviceEnrollmentDenyRequest, type DeviceEnrollmentDenyResponse, type DeviceEnrollmentLookupMachine, type DeviceEnrollmentLookupRequest, type DeviceEnrollmentLookupResponse, type DiscoverMcpCapabilitiesResponse, type Document, type DocumentBase, type DocumentSearchMode, type DocumentSearchRequest, type DocumentSearchResponse, type DocumentSearchResult, type DocumentStatus, type EnableCapabilityRequest, type EnablePackRequest, type EnrollTokenExchangeRequest, type EnrollTokenExchangeResponse, type EnrollmentCredentials, type EnrollmentOs, type EntitlementValue, type Entitlements, type EntitlementsMode, type FetchLike, type FileAsset, type FileDownloadUrlResponse, type FileResourceRef, type FileStatus, type FileSystemCapability, type FileUploadData, type FsChangeKind, type FsChangedPayload, type FsDeleteRequest, type FsDeleteResponse, type FsEncoding, type FsListRequest, type FsListResponse, type FsMkdirRequest, type FsMkdirResponse, type FsMoveRequest, type FsMoveResponse, type FsNodeType, type FsReadRequest, type FsReadResponse, type FsTreeNode, type FsWriteRequest, type FsWriteResponse, type GetPackResponse, type GitCapability, type GitChangedPayload, type GitCommit, type GitDiffHunk, type GitDiffLine, type GitDiffLineType, type GitDiffRequest, type GitDiffResponse, type GitFileDiff, type GitFileStatus, type GitFileStatusCode, type GitHubAppInfo, type GitHubRepositoriesResponse, type GitHubRepository, type GitLogRequest, type GitLogResponse, type GitShowRequest, type GitShowResponse, type GitStatusRequest, type GitStatusResponse, type GoalSpec, type IntegrationClientMetadata, KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, type KnowledgeMemory, type KnowledgeMemoryKind, type KnowledgeMemorySearchRequest, type KnowledgeMemoryStatus, type KnowledgeSourceKind, type KnowledgeSourceRef, type KnownPermission, type KnownSessionEventType, type KnownUsageEventType, type ListApiKeysResponse, type ListConnectionsResponse, type ListPacksResponse, type ListWorkspaceMembersResponse, type MachineKind, type MachineMetricsSeriesResponse, type MachineState, type MachineView, type MachinesResponse, type McpServerConnectionRef, type MetricSample, type MintEnrollTokenRequest, type MintEnrollTokenResponse, type OAuthStartRequest, type OAuthStartResponse, OpenGeniApiError, OpenGeniClient, type OpenGeniClientOptions, OpenGeniStreamError, type PackInstallation, type PackInstallationStatus, type Permission, type ProductAccessMode, type ProxySessionEventStreamOptions, type PtyCloseRequest, type PtyOpenRequest, type PtyOpenResponse, type PtyResizeRequest, type PtyWriteRequest, type ReasoningEffort, type RecordingAvailablePayload, type RecordingCapability, type RecordingCodec, type RecordingContentType, type RecordingFailedPayload, type RecordingFailedReason, type RecordingMode, type RecordingStartedPayload, type RegisterCapabilityPackRequest, type RepositoryResourceRef, type ResourceRef, SESSION_EVENT_TYPES, type SandboxBackend, type SandboxCapabilityName, type SandboxCommandOutputDeltaPayload, type SandboxOs, type ScheduledTask, type ScheduledTaskAgentConfig, type ScheduledTaskAgentConfigInput, type ScheduledTaskDayOfWeek, type ScheduledTaskOverlapPolicy, type ScheduledTaskRun, type ScheduledTaskRunMode, type ScheduledTaskRunStatus, type ScheduledTaskScheduleSpec, type ScheduledTaskStatus, type ScheduledTaskTriggerType, type SendMessageInput, type Session, type SessionCapabilities, type SessionEvent, type SessionEventStreamTransport, type SessionEventType, type SessionGoal, type SessionGoalCreatedBy, type SessionGoalStatus, type SessionMcpCredentialUpdateInput, type SessionMcpServerInput, type SessionMcpServerMetadata, type SessionStatus, type SessionStatusChangedPayload, type SessionStructuredCapabilities, type SessionTurn, type SessionTurnSource, type SessionTurnStatus, type SseMessage, type SseReStreamOptions, type SteerMessageResult, type StreamClosedPayload, type StreamConnectionState, type StreamOpenedPayload, type StreamRevokedPayload, type StreamSessionEventsOptions, type StreamUrlRotatedPayload, type SwapActiveSandboxRequest, type SwapActiveSandboxResponse, TTYD_SUBPROTOCOL, type TerminalCapability, type TerminalExecRequest, type TerminalExecResponse, type TerminalPtyExitedPayload, type TerminalPtyOutputDeltaPayload, type TerminalPtyStartedPayload, type ToolAuthNeededPayload, type ToolRef, TtydClientCommand, TtydServerCommand, type UpdateConnectionRequest, type UpdateKnowledgeMemoryRequest, type UpdateScheduledTaskRequest, type UpdateSessionGoalRequest, type UpdateSessionRequest, type UpdateSessionTurnRequest, type UpdateWorkspaceEnvironmentRequest, type UpdateWorkspaceMemberRequest, type UpdateWorkspaceRequest, type UploadFileInput, type UsageEvent, type UsageEventType, type UserApprovalDecisionEventInput, type UserInterruptEventInput, type UserMessageEventInput, type ViewerHeartbeatRequest, type ViewerHeartbeatResponse, type ViewerHolder, type Workspace, type WorkspaceEnvironment, type WorkspaceEnvironmentVariableMetadata, type WorkspaceMember, type WorkspaceRegisteredPack, applyUrlRotation, desktopSocketUrl, formatSseEvent, isRetryableStreamError, nextDesktopState, parseSseStream, proxySessionEventStream, resumeSequenceFromRequest, sessionEventsToSseResponse, sessionEventsToSseStream, streamSessionEvents, terminalSocketUrl, ttydAuthFrame, ttydInputFrame, ttydResizeFrame };
+export { type AccessContext, type AccessGrant, type AccountGrant, type AccountRole, type AcknowledgeStreamRequest, type AcknowledgeStreamResponse, type AddDocumentRequest, type AddWorkspaceMemberRequest, type AgentMessageCompletedPayload, type AgentTextDeltaPayload, type AgentToolCallCreatedPayload, type AgentToolCallOutputPayload, type ApiKey, type AttachViewerRequest, type AttachViewerResponse, type BillingBalance, type BillingEntitlementsResponse, type BillingMode, type BillingSummary, type BillingUsageResponse, type CapabilityCatalogItem, type CapabilityCatalogResponse, type CapabilityInstallation, type CapabilityInstallationStatus, type CapabilityKind, type CapabilityPack, type CapabilityPackConnector, type CapabilityPackConnectorAuthModel, type CapabilityPackKnowledge, type CapabilityPackScheduledTaskTemplate, type CapabilityPackSkill, type CapabilityPackSkillFile, type CapabilityPackVariableSetSpec, type CapabilityRuntime, type CapabilitySource, type CapabilityUnavailableReason, type ClientAuthConfig, type ClientConfig, type ClientModel, type ClientSessionEventInput, type CodexAccount, type CodexAccountSwitchedPayload, type CodexAccountsResponse, type CodexConnectPoll, type CodexConnectStart, type CodexConnectionStatus, type CodexRotationSettings, type CodexUsage, type CodexUsageMap, type CodexUsagePayload, type CodexUsageWindow, type CompactSessionContextResult, type CompleteFileUploadResponse, type ComposerDraft, type ComputerUseCapability, type ConnectionKind, type ConnectionMetadata, type ConnectionResponse, type ConnectionStatus, type CreateApiKeyRequest, type CreateApiKeyResponse, type CreateCapabilityCatalogItemRequest, type CreateCheckoutRequest, type CreateCheckoutResponse, type CreateConnectionRequest, type CreateDocumentBaseRequest, type CreateFileUploadRequest, type CreateFileUploadResponse, type CreateGitHubAppManifestRequest, type CreateGitHubAppManifestResponse, type CreateKnowledgeMemoryRequest, type CreateRigRequest, type CreateScheduledTaskRequest, type CreateSessionRequest, type CreateVariableSetRequest, type CreateWorkspaceEnvironmentRequest, type CreateWorkspaceRequest, type DeleteSessionQueueItemRequest, type DesktopConnectionState, type DesktopRfbFactory, type DesktopRfbLike, type DesktopStreamCapability, type DesktopStreamEvent, type DeviceEnrollmentApproveRequest, type DeviceEnrollmentApproveResponse, type DeviceEnrollmentDenyRequest, type DeviceEnrollmentDenyResponse, type DeviceEnrollmentLookupMachine, type DeviceEnrollmentLookupRequest, type DeviceEnrollmentLookupResponse, type DiscoverMcpCapabilitiesResponse, type Document, type DocumentBase, type DocumentSearchMode, type DocumentSearchRequest, type DocumentSearchResponse, type DocumentSearchResult, type DocumentStatus, type EditSessionQueueItemRequest, type EffectiveControlBlocker, type EffectiveControlResumeOption, type EffectiveSessionControl, type EnableCapabilityRequest, type EnablePackRequest, type EnrollTokenExchangeRequest, type EnrollTokenExchangeResponse, type EnrollmentCredentials, type EnrollmentOs, type EntitlementValue, type Entitlements, type EntitlementsMode, type FetchLike, type FileAsset, type FileDownloadUrlResponse, type FileResourceRef, type FileStatus, type FileSystemCapability, type FileUploadData, type FsChangeKind, type FsChangedPayload, type FsDeleteRequest, type FsDeleteResponse, type FsEncoding, type FsListRequest, type FsListResponse, type FsMkdirRequest, type FsMkdirResponse, type FsMoveRequest, type FsMoveResponse, type FsNodeType, type FsReadRequest, type FsReadResponse, type FsTreeNode, type FsWriteRequest, type FsWriteResponse, type GetPackResponse, type GetWorkspaceCaptureFileResponse, type GetWorkspaceCaptureResponse, type GitCapability, type GitChangedPayload, type GitCommit, type GitCredentialProvider, type GitDiffHunk, type GitDiffLine, type GitDiffLineType, type GitDiffRequest, type GitDiffResponse, type GitFileDiff, type GitFileStatus, type GitFileStatusCode, type GitHubAppInfo, type GitHubRepositoriesResponse, type GitHubRepository, type GitLogRequest, type GitLogResponse, type GitShowRequest, type GitShowResponse, type GitStatusRequest, type GitStatusResponse, type GoalSpec, type IntegrationClientMetadata, KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, type KnowledgeMemory, type KnowledgeMemoryKind, type KnowledgeMemorySearchRequest, type KnowledgeMemoryStatus, type KnowledgeSourceKind, type KnowledgeSourceRef, type KnownPermission, type KnownSessionEventType, type KnownUsageEventType, type LineageNode, type ListApiKeysResponse, type ListConnectionsResponse, type ListPacksResponse, type ListWorkspaceMembersResponse, type MachineKind, type MachineMetricsSeriesResponse, type MachineState, type MachineView, type MachinesResponse, type McpServerConnectionRef, type MetricSample, type MintEnrollTokenRequest, type MintEnrollTokenResponse, type MoveSessionQueueItemRequest, type OAuthStartRequest, type OAuthStartResponse, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniClient, type OpenGeniClientOptions, OpenGeniStreamError, type PackInstallation, type PackInstallationStatus, type Permission, type ProductAccessMode, type ProposeRigChangeRequest, type ProxySessionEventStreamOptions, type PtyCloseRequest, type PtyOpenRequest, type PtyOpenResponse, type PtyResizeRequest, type PtyWriteRequest, type ReasoningEffort, type RecordingAvailablePayload, type RecordingCapability, type RecordingCodec, type RecordingContentType, type RecordingFailedPayload, type RecordingFailedReason, type RecordingMode, type RecordingStartedPayload, type RegisterCapabilityPackRequest, type RepositoryResourceRef, type ResourceRef, type Rig, type RigChange, type RigChangeKind, type RigChangeStatus, type RigChangeVerification, type RigCheck, type RigCheckResult, type RigDefinitionEditPayload, type RigSetupAppendPayload, type RigVersion, SESSION_EVENT_TYPES, type SandboxBackend, type SandboxCapabilityName, type SandboxCommandOutputDeltaPayload, type SandboxOs, type SaveComposerDraftRequest, type ScheduledTask, type ScheduledTaskAgentConfig, type ScheduledTaskAgentConfigInput, type ScheduledTaskDayOfWeek, type ScheduledTaskOverlapPolicy, type ScheduledTaskRun, type ScheduledTaskRunMode, type ScheduledTaskRunStatus, type ScheduledTaskScheduleSpec, type ScheduledTaskStatus, type ScheduledTaskTriggerType, type SendMessageInput, type Session, type SessionCapabilities, type SessionCommandReceipt, type SessionControlResponse, type SessionEvent, type SessionEventStreamTransport, type SessionEventType, type SessionGoal, type SessionGoalCreatedBy, type SessionGoalStatus, type SessionLineageResponse, type SessionListResponse, type SessionMcpCredentialUpdateInput, type SessionMcpServerInput, type SessionMcpServerMetadata, type SessionQueueMutationResponse, type SessionQueueSnapshot, type SessionStatus, type SessionStatusChangedPayload, type SessionStructuredCapabilities, type SessionSummary, type SessionSystemUpdate, type SessionSystemUpdateKind, type SessionSystemUpdateState, type SessionTurn, type SessionTurnSource, type SessionTurnStatus, type SetWorkspaceEnvironmentVariableRequest, type SseMessage, type SseReStreamOptions, type SteerMessageResult, type SteerSessionQueueItemRequest, type StreamClosedPayload, type StreamConnectionState, type StreamOpenedPayload, type StreamRevokedPayload, type StreamSessionEventsOptions, type StreamUrlRotatedPayload, type SwapActiveSandboxRequest, type SwapActiveSandboxResponse, TTYD_SUBPROTOCOL, type TerminalCapability, type TerminalExecRequest, type TerminalExecResponse, type TerminalPtyExitedPayload, type TerminalPtyOutputDeltaPayload, type TerminalPtyStartedPayload, type ToolAuthNeededPayload, type ToolRef, TtydClientCommand, TtydServerCommand, type UpdateConnectionRequest, type UpdateKnowledgeMemoryRequest, type UpdateRigRequest, type UpdateScheduledTaskRequest, type UpdateSessionGoalRequest, type UpdateSessionPinRequest, type UpdateSessionRequest, type UpdateVariableSetRequest, type UpdateWorkspaceEnvironmentRequest, type UpdateWorkspaceMemberRequest, type UpdateWorkspaceRequest, type UpdateWorkspaceSettingsRequest, type UploadFileInput, type UsageEvent, type UsageEventType, type UserApprovalDecisionEventInput, type UserMessageEventInput, type VariableSet, type VariableSetVariableMetadata, type ViewerHeartbeatRequest, type ViewerHeartbeatResponse, type ViewerHolder, type Workspace, type WorkspaceCaptureDegradedReason, type WorkspaceCaptureFile, type WorkspaceCaptureManifest, type WorkspaceCaptureRepo, type WorkspaceCaptureSignedUrl, type WorkspaceCaptureStats, type WorkspaceControlEvent, type WorkspaceControlStreamTransport, type WorkspaceEnvironment, type WorkspaceEnvironmentVariableMetadata, type WorkspaceInferenceControlResponse, type WorkspaceMember, type WorkspaceMemorySearchMode, type WorkspaceMemorySearchRequest, type WorkspaceMemorySearchResponse, type WorkspaceMemorySearchResult, type WorkspaceRegisteredPack, type WorkspaceRevisionCapturedPayload, type WorkspaceRevisionDegradedPayload, type WorkspaceSettings, applyUrlRotation, desktopSocketUrl, formatSseEvent, isRetryableStreamError, nextDesktopState, parseSseStream, proxySessionEventStream, resumeSequenceFromRequest, sessionEventsToSseResponse, sessionEventsToSseStream, streamSessionEvents, streamWorkspaceControlEvents, terminalSocketUrl, ttydAuthFrame, ttydInputFrame, ttydResizeFrame };