@opengeni/sdk 0.37.0 → 0.41.0

package/dist/index.d.ts

@@ -24,12 +24,12 @@ export type { SessionEventStreamTransport, StreamConnectionState, StreamSessionE
 export { streamWorkspaceControlEvents } from "./workspace-control-stream";
 export type { WorkspaceControlStreamTransport } from "./workspace-control-stream";
 export type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifact, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactEvent, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse, WorkspaceArtifactVersion, } from "./workspace-artifacts";
-export { normalizeWorkspaceInstructionPolicyRoleKey } from "./workspace-instruction-policies";
-export type { ActivateWorkspaceInstructionPolicyRequest, CreateWorkspaceInstructionPolicyDraftRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, RollbackWorkspaceInstructionPolicyRequest, WorkspaceInstructionPolicyActivationEvent, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyActivationType, WorkspaceInstructionPolicyConflictResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyKind, WorkspaceInstructionPolicyListOptions, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyRevisionIdentity, WorkspaceInstructionPolicyScope, WorkspaceInstructionPolicyTarget, } from "./workspace-instruction-policies";
-export type { WorkspaceStateDocumentStatusCounts, WorkspaceStateGapCode, WorkspaceStateMemoryKindCounts, WorkspaceStateMemoryStatusCounts, WorkspaceStateResponse, WorkspaceStateSourceKindCounts, } from "./workspace-state";
+export { normalizeWorkspaceInstructionPolicyRoleKey, WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS, } from "./workspace-instruction-policies";
+export type { ActivateWorkspaceInstructionPolicyRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceInstructionPolicyOnboardingProposalRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, RollbackWorkspaceInstructionPolicyRequest, WorkspaceInstructionPolicyActivationEvent, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyActivationType, WorkspaceInstructionPolicyConflictResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyDraftProvenanceSource, WorkspaceInstructionPolicyHead, WorkspaceInstructionPolicyKind, WorkspaceInstructionPolicyListOptions, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalConflictResponse, WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse, WorkspaceInstructionPolicyOnboardingProposalListOptions, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyOnboardingProposalSource, WorkspaceInstructionPolicyOnboardingProposalStaleResponse, WorkspaceInstructionPolicyOperationReuseResponse, WorkspaceInstructionPolicyProvenanceSource, WorkspaceInstructionPolicyRevision, WorkspaceInstructionPolicyRevisionIdentity, WorkspaceInstructionPolicyScope, WorkspaceInstructionPolicyTarget, } from "./workspace-instruction-policies";
+export type { WorkspaceStateDocumentStatusCounts, WorkspaceStateAttemptGovernance, WorkspaceStateGapCode, WorkspaceStateGetOptions, WorkspaceStateGovernanceDriftStatus, WorkspaceStateMemoryKindCounts, WorkspaceStateMemoryStatusCounts, WorkspaceStateResponse, WorkspaceStateSourceKindCounts, } from "./workspace-state";
 export { normalizePreferenceRegistryStableKey } from "./preference-registry";
 export type { ActivatePreferenceRegistryRevisionRequest, ChangePreferenceRegistryScopeRequest, CorrectPreferenceRegistryRequest, CreatePreferenceRegistryProposalRequest, DeactivatePreferenceRegistryRequest, PreferenceRegistryConflictStrategy, PreferenceRegistryDescriptor, PreferenceRegistryDescriptorProvenance, PreferenceRegistryDetailResponse, PreferenceRegistryEvent, PreferenceRegistryFullContent, PreferenceRegistryListOptions, PreferenceRegistryListResponse, PreferenceRegistryMutationResponse, PreferenceRegistryPrecedence, PreferenceRegistryProvenanceSource, PreferenceRegistryRecord, PreferenceRegistryRevisionSummary, PreferenceRegistryScope, PreferenceRegistryScopeTarget, PreferenceRegistrySnapshot, PreferenceRegistryStatus, PreferenceRegistryTrust, RejectPreferenceRegistryProposalRequest, SupersedePreferenceRegistryRequest, } from "./preference-registry";
 export { DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY, authorizeTranscriptionAdapter, createTranscriptionSessionRequest, resolveWorkspaceVoiceInputEnabled, resolveWorkspaceTranscriptionPolicy, } from "./transcription";
 export type { TranscriptionAdapter, TranscriptionAdapterDescriptor, TranscriptionAdapterStartContext, TranscriptionAuthorization, TranscriptionCredentialMode, TranscriptionDiagnostic, TranscriptionErrorCode, TranscriptionEvent, TranscriptionEventListener, TranscriptionLifecycleStatus, TranscriptionPolicyBlockReason, TranscriptionResultMetadata, TranscriptionSession, TranscriptionSessionRequest, TranscriptionSpeaker, TranscriptionTargetSelection, TranscriptionTimeSpan, TranscriptionWord, WorkspaceTranscriptionPolicy, WorkspaceTranscriptionTarget, } from "./transcription";
-export { KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_CORRELATION_HEADER, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, SESSION_EVENT_TYPES, } from "./types";
-export type { AccessContext, ActivateCodexRealtimeConnectionRequest, AccessGrant, AccountGrant, AccountRole, AddWorkspaceMemberRequest, BeginSessionRealtimeRequest, AgentMessageCompletedPayload, AgentTextDeltaPayload, AgentToolCallCreatedPayload, AgentToolCallOutputPayload, ApiKey, BillingBalance, BillingEntitlementsResponse, BillingMode, BillingSummary, BillingUsageResponse, InsightsRange, InsightsBillingPath, InsightsModelUsageRow, InsightsSeriesPoint, InsightsDepthBucket, InsightsModelFacet, InsightsSpendDriver, InsightsWarmGroupRow, InsightsLiveWarmLease, InsightsFloorSession, InsightsScheduleRow, WorkspaceInsightsSnapshot, WorkspaceInsightsResponse, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackVariableSetSpec, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClientConfig, ClientVoiceInputConfig, ClientModel, CodexRealtimeVoice, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, CodexRealtimeWebrtcVersion, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, GatewayRealtimeInitialItem, EndSessionRealtimeRequest, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, RenewSessionRealtimeRequest, SessionRealtimeEndReason, SessionRealtimeMode, SessionRealtimeModel, SessionRealtimeMutationResponse, SessionRealtimeState, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, WorkspaceRealtimeModelCatalogItem, WorkspaceRealtimeModelCatalogResponse, CodexAccount, CodexAccountOverview, CodexAccountsResponse, CodexAllocatorUpdate, CodexAccountSwitchedPayload, CodexConnectionStatus, CodexConnectStart, CodexConnectPoll, CodexFleetConfidence, CodexFleetCacheState, CodexFleetDecisionEventPayload, CodexFleetDecisionScore, CodexFleetShadowComparison, CodexOverviewResponse, CodexResetCredit, CodexResetRedemptionRecovery, CodexRotationSettings, CodexUsage, CodexUsageMap, CodexUsagePayload, CodexUsageWindow, CompactSessionContextResult, ClientSessionEventInput, CompleteFileUploadResponse, ConnectionKind, ConnectionMetadata, ConnectionOwnership, ConnectionResponse, ConnectionStatus, AddDocumentRequest, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackReactionChannel, SlackReactionChannelListResponse, CreateConnectionRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateKnowledgeDropRequest, CreateKnowledgeMemoryRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentCuration, DocumentCurationStatus, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResponse, DocumentSearchResult, DocumentStatus, DocumentVisibility, MoveDocumentRequest, EnableCapabilityRequest, EnablePackRequest, Entitlements, EntitlementValue, EntitlementsMode, FileAsset, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputResponse, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadData, FirstPartyMcpToolName, GetPackResponse, GitHubAppInfo, GitHubAppSetupMode, GitHubBindingStatus, GitHubInstallationBinding, GitHubInstallationLifecycle, GitHubRepositoriesResponse, GoogleDriveBrowseItem, GoogleDriveBrowseResponse, GoogleDriveConnectionMetadata, GoogleDriveOAuthStartRequest, GoogleDriveOAuthStartResponse, GoogleDriveReadPolicy, GoogleDriveSelectedSource, GoogleDriveSyncCadence, GoogleDriveTargetScope, GitHubRepository, GitHubRepositoryScope, GoalSpec, IntegrationClientMetadata, KnownPermission, KnownSessionEventType, KnownUsageEventType, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, GitCredentialProvider, GitCredentialBindingId, GitRepositoryAccess, ListApiKeysResponse, ListConnectionsResponse, ListPacksResponse, ListWorkspaceMembersResponse, McpServerConnectionRef, McpPersonalConnectionDelegation, McpPersonalConnectionSummary, OAuthStartRequest, OAuthStartResponse, PackInstallation, PackInstallationStatus, Permission, ProductAccessMode, LatencyMode, ReasoningEffort, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, RetainedArtifactReference, RetainedArtifactUnavailable, RetainedOutputKind, RetainedOutputUnavailableReason, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RepositoryResourceRef, ResourceRef, SaveGoogleDriveSourceRequest, SandboxBackend, SandboxCapabilityName, SandboxOs, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskAgentConfigInput, ScheduledTaskDayOfWeek, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, Session, SessionCapabilities, SessionListResponse, SessionLineageResponse, SessionEffectiveToolPolicy, SessionQueueMutationResponse, SessionQueueSnapshot, SessionControlResponse, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, MoveSessionQueueItemRequest, NewSessionDraft, NewSessionDraftOptions, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SessionCommandReceipt, SteerSessionQueueItemRequest, WorkspaceInferenceControlResponse, SessionPendingInputPreview, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdateState, SessionSummary, LineageNode, SessionMcpCredentialUpdateInput, SessionMcpApprovalPolicy, SessionMcpServerInput, SessionMcpServerMetadata, SessionToolPolicy, FileSystemCapability, TerminalCapability, GitCapability, DesktopStreamCapability, RecordingCapability, ComputerUseCapability, ClientAuthConfig, StreamUrlRotatedPayload, StreamOpenedPayload, StreamClosedPayload, StreamRevokedPayload, AttachViewerRequest, AttachViewerResponse, ViewerHolder, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventLatestClass, SessionEventPage, SessionEventPayloadMode, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalStatus, SessionHumanInputRequest, SessionStatus, SessionStatusChangedPayload, SessionStructuredCapabilities, SessionTurn, ServiceTurnInitiator, ServiceTurnInitiatorContext, TurnInitiatorContext, SessionTurnSource, SessionTurnStatus, SubmitHumanInputResponseRequest, TurnInitiator, ToolAuthNeededPayload, UpdateConnectionRequest, SandboxCommandOutputDeltaPayload, FsChangeKind, FsChangedPayload, GitChangedPayload, TerminalPtyStartedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyExitedPayload, FsNodeType, FsTreeNode, FsEncoding, FsListRequest, FsListResponse, FsReadRequest, FsReadResponse, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitFileStatusCode, GitFileStatus, GitStatusRequest, GitStatusResponse, GitDiffLineType, GitDiffLine, GitDiffHunk, GitFileDiff, GitDiffRequest, GitDiffResponse, GitLogRequest, GitCommit, GitLogResponse, GitShowRequest, GitShowResponse, SetWorkspaceEnvironmentVariableRequest, WorkspaceCaptureFile, WorkspaceCaptureRepo, WorkspaceCaptureDegradedReason, WorkspaceCaptureStats, WorkspaceCaptureManifest, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, WorkspaceCaptureSignedUrl, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, ToolRef, UpdateKnowledgeMemoryRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, WorkspaceSlackReactionSummonSettings, TranscribeAudioResponse, UploadFileInput, UsageEvent, UsageEventType, UserApprovalDecisionEventInput, UserHumanInputResponseEventInput, UserMessageEventInput, Workspace, WorkspaceControlEvent, VariableSet, VariableSetVariableMetadata, Rig, RigVersion, RigCheck, RigChange, RigChangeKind, RigChangeStatus, RigCheckResult, RigChangeVerification, CreateRigRequest, UpdateRigRequest, RigSetupAppendPayload, RigDefinitionEditPayload, ProposeRigChangeRequest, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResult, WorkspaceMemorySearchResponse, WorkspaceSettings, WorkspaceVoiceInputSettings, WorkspaceRegisteredPack, MetricSample, MachineState, MachineKind, MachineView, MachinesResponse, MachineMetricsSeriesResponse, SwapActiveSandboxRequest, SwapActiveSandboxResponse, EnrollmentOs, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, MintEnrollTokenRequest, MintEnrollTokenResponse, EnrollmentCredentials, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, } from "./types";
+export { DEFAULT_FILE_RESOURCE_MOUNT_ROOT, KNOWN_PERMISSIONS, KNOWN_USAGE_EVENT_TYPES, OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION, OPENGENI_CORRELATION_HEADER, RETAINED_OUTPUT_DEFAULT_PAGE_BYTES, RETAINED_OUTPUT_MAX_PAGE_BYTES, SESSION_EVENT_TYPES, } from "./types";
+export type { AccessContext, ActivateCodexRealtimeConnectionRequest, AccessGrant, AccountGrant, AccountRole, AddWorkspaceMemberRequest, BeginSessionRealtimeRequest, AgentMessageCompletedPayload, AgentTextDeltaPayload, AgentToolCallCreatedPayload, AgentToolCallOutputPayload, ApiKey, BillingBalance, BillingEntitlementsResponse, BillingMode, BillingSummary, BillingUsageResponse, InsightsRange, InsightsBillingPath, InsightsModelUsageRow, InsightsSeriesPoint, InsightsDepthBucket, InsightsModelFacet, InsightsSpendDriver, InsightsWarmGroupRow, InsightsLiveWarmLease, InsightsFloorSession, InsightsScheduleRow, WorkspaceInsightsSnapshot, WorkspaceInsightsResponse, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityInstallation, CapabilityInstallationStatus, CapabilityKind, CapabilityPack, CapabilityPackConnector, CapabilityPackConnectorAuthModel, CapabilityPackVariableSetSpec, CapabilityPackKnowledge, CapabilityPackScheduledTaskTemplate, CapabilityPackSkill, CapabilityPackSkillFile, CapabilityRuntime, CapabilitySource, CapabilityUnavailableReason, ClientConfig, ClientVoiceInputConfig, ClientModel, CodexRealtimeVoice, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, CodexRealtimeWebrtcVersion, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, GatewayRealtimeInitialItem, EndSessionRealtimeRequest, ModelAvailabilityV1, ModelBillingAttributionV1, ModelCapabilitiesV1, ModelCapabilityStateV1, ModelCapabilitySupportV1, ModelCredentialReadinessV1, ModelCredentialSourceV1, ModelPricingScheduleV1, ModelPricingV1, RenewSessionRealtimeRequest, SessionRealtimeEndReason, SessionRealtimeMode, SessionRealtimeModel, SessionRealtimeMutationResponse, SessionRealtimeState, WorkspaceModelCatalogModel, WorkspaceModelCatalogResponse, WorkspaceRealtimeModelCatalogItem, WorkspaceRealtimeModelCatalogResponse, CodexAccount, CodexAccountOverview, CodexAccountsResponse, CodexAllocatorUpdate, CodexAccountSwitchedPayload, CodexConnectionStatus, CodexConnectStart, CodexConnectPoll, CodexFleetConfidence, CodexFleetCacheState, CodexFleetDecisionEventPayload, CodexFleetDecisionScore, CodexFleetShadowComparison, CodexOverviewResponse, CodexResetCredit, CodexResetRedemptionRecovery, CodexRotationSettings, CodexUsage, CodexUsageMap, CodexUsagePayload, CodexUsageWindow, CompactSessionContextResult, ClientSessionEventInput, CompleteFileUploadResponse, ConnectionKind, ConnectionMetadata, ConnectionOwnership, ConnectionResponse, ConnectionStatus, AddDocumentRequest, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackReactionChannel, SlackReactionChannelListResponse, CreateConnectionRequest, CreateCheckoutRequest, CreateCheckoutResponse, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateKnowledgeDropRequest, CreateKnowledgeMemoryRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateVariableSetRequest, CreateWorkspaceEnvironmentRequest, CreateWorkspaceRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentAuthorityKind, DocumentBase, DocumentCuration, DocumentCurationStatus, DocumentSearchMode, DocumentSearchRequest, DocumentSearchResponse, DocumentSearchResult, DocumentStatus, DocumentVisibility, MoveDocumentRequest, EnableCapabilityRequest, EnablePackRequest, Entitlements, EntitlementValue, EntitlementsMode, FileAsset, HumanInputAnswer, HumanInputOption, HumanInputQuestion, HumanInputQuestionKind, HumanInputResponse, FileDownloadUrlResponse, FileResourceRef, FileStatus, FileUploadData, FirstPartyMcpToolName, GetPackResponse, GitHubAppInfo, GitHubAppSetupMode, GitHubBindingStatus, GitHubInstallationBinding, GitHubInstallationLifecycle, GitHubRepositoriesResponse, GoogleDriveBrowseItem, GoogleDriveBrowseResponse, GoogleDriveConnectionLifecycle, GoogleDriveConnectionLifecycleState, GoogleDriveConnectionMetadata, GoogleDriveDisconnectRequest, GoogleDriveLifecycleActionRequest, GoogleDriveOAuthStartRequest, GoogleDriveOAuthStartResponse, GoogleDriveReadPolicy, GoogleDriveSelectedSource, GoogleDriveSyncCadence, GoogleDriveTargetScope, GitHubRepository, GitHubRepositoryScope, GoalSpec, IntegrationClientMetadata, KnownPermission, KnownSessionEventType, KnownUsageEventType, KnowledgeMemory, KnowledgeMemoryKind, KnowledgeMemorySearchRequest, KnowledgeMemoryStatus, KnowledgeSourceKind, KnowledgeSourceRef, GitCredentialProvider, GitCredentialBindingId, GitRepositoryAccess, ListApiKeysResponse, ListConnectionsResponse, ListPacksResponse, ListWorkspaceMembersResponse, McpServerConnectionRef, McpPersonalConnectionDelegation, McpPersonalConnectionSummary, OAuthStartRequest, OAuthStartResponse, PackInstallation, PackInstallationStatus, Permission, ProductAccessMode, LatencyMode, ReasoningEffort, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, RetainedArtifactReference, RetainedArtifactUnavailable, RetainedOutputKind, RetainedOutputUnavailableReason, RecordingAvailablePayload, RecordingCodec, RecordingContentType, RecordingFailedPayload, RecordingFailedReason, RecordingMode, RecordingStartedPayload, RegisterCapabilityPackRequest, RepositoryResourceRef, ResourceRef, SaveGoogleDriveSourceRequest, SandboxBackend, SandboxCapabilityName, SandboxOs, ScheduledTask, ScheduledTaskAgentConfig, ScheduledTaskAgentConfigInput, ScheduledTaskDayOfWeek, ScheduledTaskOverlapPolicy, ScheduledTaskRun, ScheduledTaskRunMode, ScheduledTaskRunStatus, ScheduledTaskScheduleSpec, ScheduledTaskStatus, ScheduledTaskTriggerType, Session, SessionCapabilities, SessionListResponse, SessionLineageResponse, SessionEffectiveToolPolicy, SessionQueueMutationResponse, SessionQueueSnapshot, SessionControlResponse, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, EffectiveControlBlocker, EffectiveControlResumeOption, EffectiveSessionControl, MoveSessionQueueItemRequest, NewSessionDraft, NewSessionDraftOptions, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SessionCommandReceipt, SteerSessionQueueItemRequest, WorkspaceInferenceControlResponse, SessionPendingInputPreview, SessionSystemUpdate, SessionSystemUpdateKind, SessionSystemUpdateState, SessionSummary, LineageNode, SessionMcpCredentialUpdateInput, SessionMcpApprovalPolicy, SessionMcpServerInput, SessionMcpServerMetadata, SessionToolPolicy, FileSystemCapability, TerminalCapability, GitCapability, DesktopStreamCapability, RecordingCapability, ComputerUseCapability, ClientAuthConfig, StreamUrlRotatedPayload, StreamOpenedPayload, StreamClosedPayload, StreamRevokedPayload, AttachViewerRequest, AttachViewerResponse, ViewerHolder, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventLatestClass, SessionEventPage, SessionEventPayloadMode, SessionEventReadDirection, SessionEventReadMode, SessionEventResultMode, SessionEventSemanticClass, SessionEventType, SessionGoal, SessionGoalCreatedBy, SessionGoalStatus, SessionHumanInputRequest, SessionStatus, SessionStatusChangedPayload, SessionStructuredCapabilities, SessionTurn, ServiceTurnInitiator, ServiceTurnInitiatorContext, TurnInitiatorContext, SessionTurnSource, SessionTurnStatus, SubmitHumanInputResponseRequest, TurnInitiator, ToolAuthNeededPayload, UpdateConnectionRequest, SandboxCommandOutputDeltaPayload, FsChangeKind, FsChangedPayload, GitChangedPayload, TerminalPtyStartedPayload, TerminalPtyOutputDeltaPayload, TerminalPtyExitedPayload, FsNodeType, FsTreeNode, FsEncoding, FsListRequest, FsListResponse, FsReadRequest, FsReadResponse, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitFileStatusCode, GitFileStatus, GitStatusRequest, GitStatusResponse, GitDiffLineType, GitDiffLine, GitDiffHunk, GitFileDiff, GitDiffRequest, GitDiffResponse, GitLogRequest, GitCommit, GitLogResponse, GitShowRequest, GitShowResponse, SetWorkspaceEnvironmentVariableRequest, WorkspaceCaptureFile, WorkspaceCaptureRepo, WorkspaceCaptureDegradedReason, WorkspaceCaptureStats, WorkspaceCaptureManifest, WorkspaceRevisionCapturedPayload, WorkspaceRevisionDegradedPayload, WorkspaceCaptureSignedUrl, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, ToolRef, UpdateKnowledgeMemoryRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, UpdateSessionPinRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateWorkspaceEnvironmentRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, WorkspaceSlackReactionSummonSettings, TranscribeAudioResponse, UploadFileInput, UsageEvent, UsageEventType, UserApprovalDecisionEventInput, UserHumanInputResponseEventInput, UserMessageEventInput, Workspace, WorkspaceControlEvent, VariableSet, VariableSetVariableMetadata, Rig, RigVersion, RigCheck, RigChange, RigChangeKind, RigChangeStatus, RigCheckResult, RigChangeVerification, CreateRigRequest, UpdateRigRequest, RigSetupAppendPayload, RigDefinitionEditPayload, ProposeRigChangeRequest, WorkspaceEnvironment, WorkspaceEnvironmentVariableMetadata, WorkspaceMember, WorkspaceMemorySearchMode, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResult, WorkspaceMemorySearchResponse, WorkspaceSettings, WorkspaceVoiceInputSettings, WorkspaceRegisteredPack, MetricSample, MachineState, MachineKind, MachineView, MachinesResponse, MachineMetricsSeriesResponse, SwapActiveSandboxRequest, SwapActiveSandboxResponse, EnrollmentOs, DeviceEnrollmentLookupRequest, DeviceEnrollmentLookupResponse, DeviceEnrollmentLookupMachine, DeviceEnrollmentApproveRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyRequest, DeviceEnrollmentDenyResponse, MintEnrollTokenRequest, MintEnrollTokenResponse, EnrollmentCredentials, EnrollTokenExchangeRequest, EnrollTokenExchangeResponse, } from "./types";

package/dist/index.js

@@ -1,18 +1,5 @@
 import {
-  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
-  CodexRealtimeMicrophoneError,
-  acquireCodexRealtimeMicrophone,
-  codexRealtimeMicrophoneHealthy,
-  contextAppendChunks,
-  createCodexRealtimeController,
-  createCodexRealtimeV3Bridge,
-  encodeCodexRealtimeV3DelegationContextAppend,
-  encodeCodexRealtimeV3SessionContextAppend,
-  parseCodexRealtimeV3Event,
-  projectSessionRealtimeLifecycle,
-  startCodexRealtimeWebrtc
-} from "./chunk-OB5PGV6N.js";
-import {
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY,
   KNOWN_PERMISSIONS,
   KNOWN_USAGE_EVENT_TYPES,
@@ -30,7 +17,21 @@ import {
   resolveWorkspaceVoiceInputEnabled,
   streamSessionEvents,
   streamWorkspaceControlEvents
-} from "./chunk-VOQ235WN.js";
+} from "./chunk-DKNW4WMJ.js";
+import {
+  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
+  CodexRealtimeMicrophoneError,
+  acquireCodexRealtimeMicrophone,
+  codexRealtimeMicrophoneHealthy,
+  contextAppendChunks,
+  createCodexRealtimeController,
+  createCodexRealtimeV3Bridge,
+  encodeCodexRealtimeV3DelegationContextAppend,
+  encodeCodexRealtimeV3SessionContextAppend,
+  parseCodexRealtimeV3Event,
+  projectSessionRealtimeLifecycle,
+  startCodexRealtimeWebrtc
+} from "./chunk-XBBPYTI5.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -395,6 +396,7 @@ function ttydResizeFrame(columns, rows) {
 }
 
 // src/workspace-instruction-policies.ts
+var WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262144;
 function normalizeWorkspaceInstructionPolicyRoleKey(value) {
   return value.normalize("NFKC").trim().toLowerCase().replace(/\s+/gu, "-").replace(/-+/g, "-");
 }
@@ -406,6 +408,7 @@ function normalizePreferenceRegistryStableKey(value) {
 export {
   CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
   CodexRealtimeMicrophoneError,
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
   DEFAULT_WORKSPACE_TRANSCRIPTION_POLICY,
   KNOWN_PERMISSIONS,
   KNOWN_USAGE_EVENT_TYPES,
@@ -423,6 +426,7 @@ export {
   TTYD_SUBPROTOCOL,
   TtydClientCommand,
   TtydServerCommand,
+  WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS,
   acquireCodexRealtimeMicrophone,
   applyUrlRotation,
   authorizeTranscriptionAdapter,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/artifact-client.ts","../src/proxy.ts","../src/mcp-output.ts","../src/desktop.ts","../src/terminal.ts","../src/workspace-instruction-policies.ts","../src/preference-registry.ts"],"sourcesContent":["import { OpenGeniClient as OpenGeniCoreClient } from \"./client\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  RollbackWorkspaceArtifactRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactDetailResponse,\n  WorkspaceArtifactListOptions,\n  WorkspaceArtifactListResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\n\n/** Public SDK client. Artifact operations stay out of the console's eager core graph. */\nexport class OpenGeniClient extends OpenGeniCoreClient {\n  async listWorkspaceArtifacts(\n    workspaceId: string,\n    options: WorkspaceArtifactListOptions = {},\n  ): Promise<WorkspaceArtifactListResponse> {\n    const query = new URLSearchParams();\n    if (options.limit !== undefined) query.set(\"limit\", String(options.limit));\n    if (options.cursor) query.set(\"cursor\", options.cursor);\n    const suffix = query.size > 0 ? `?${query.toString()}` : \"\";\n    return await this.requestJson<WorkspaceArtifactListResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`,\n    );\n  }\n\n  async getWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n  ): Promise<WorkspaceArtifactDetailResponse> {\n    return await this.requestJson<WorkspaceArtifactDetailResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionId?: string,\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts`,\n      request,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n    );\n  }\n\n  async rollbackWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n    request: RollbackWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,\n      request,\n    );\n  }\n}\n","import type { OpenGeniClient } from \"./client\";\nimport type { StreamSessionEventsOptions } from \"./stream\";\nimport type { SessionEvent } from \"./types\";\n\n/**\n * Proxy-through-your-own-API helpers.\n *\n * The intended pattern: a customer's server consumes the OpenGeni event\n * stream with its own API key (`client.streamEvents(...)`) and re-emits it to\n * its browser clients over its own authenticated endpoint — the OpenGeni key\n * never reaches the browser. The re-emitted wire format is identical to\n * OpenGeni's own SSE stream (`id: <sequence>`, `event: <type>`,\n * `data: <event JSON>`), so the browser side can consume it with this same\n * SDK's streaming core (or a plain `EventSource`), including resume via\n * `?after=` / `Last-Event-ID`.\n */\n\n/** Format one event exactly as OpenGeni's API emits it over SSE. */\nexport function formatSseEvent(event: SessionEvent): string {\n  return `id: ${event.sequence}\\nevent: ${event.type}\\ndata: ${JSON.stringify(event)}\\n\\n`;\n}\n\nexport type SseReStreamOptions = {\n  /**\n   * Emit `: ping` comment lines at this interval, keeping intermediaries from\n   * idling the connection out. Disabled when omitted.\n   */\n  heartbeatMs?: number;\n  /**\n   * Called when the downstream consumer cancels (e.g. the browser\n   * disconnected). Use it to abort the upstream OpenGeni stream — an async\n   * iterator that is mid-`await` cannot be interrupted by `return()` alone.\n   */\n  onCancel?: () => void;\n};\n\n/**\n * Re-emit a stream of session events as an SSE byte stream. Pull-based, so\n * upstream consumption follows downstream demand; cancelling the returned\n * stream fires `onCancel` and ends the upstream iterator.\n */\nexport function sessionEventsToSseStream(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): ReadableStream<Uint8Array> {\n  const encoder = new TextEncoder();\n  const iterator = events[Symbol.asyncIterator]();\n  let heartbeat: ReturnType<typeof setInterval> | undefined;\n  let cancelled = false;\n\n  const stopHeartbeat = (): void => {\n    if (heartbeat !== undefined) {\n      clearInterval(heartbeat);\n      heartbeat = undefined;\n    }\n  };\n\n  return new ReadableStream<Uint8Array>({\n    start: (controller) => {\n      if (options.heartbeatMs !== undefined) {\n        heartbeat = setInterval(() => {\n          try {\n            controller.enqueue(encoder.encode(\": ping\\n\\n\"));\n          } catch {\n            stopHeartbeat();\n          }\n        }, options.heartbeatMs);\n      }\n    },\n    pull: async (controller) => {\n      let result: IteratorResult<SessionEvent, unknown>;\n      try {\n        result = await iterator.next();\n      } catch (error) {\n        stopHeartbeat();\n        throw error;\n      }\n      if (cancelled) {\n        return;\n      }\n      if (result.done) {\n        stopHeartbeat();\n        controller.close();\n        return;\n      }\n      controller.enqueue(encoder.encode(formatSseEvent(result.value)));\n    },\n    cancel: () => {\n      cancelled = true;\n      stopHeartbeat();\n      options.onCancel?.();\n      // Fire-and-forget: if the iterator is suspended mid-await, return()\n      // settles only after onCancel unblocks it; cancel must not hang on it.\n      void Promise.resolve(iterator.return?.(undefined)).then(\n        () => undefined,\n        () => undefined,\n      );\n    },\n  });\n}\n\n/** Wrap an event stream in a ready-to-return SSE `Response`. */\nexport function sessionEventsToSseResponse(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): Response {\n  return new Response(sessionEventsToSseStream(events, options), {\n    headers: {\n      \"Content-Type\": \"text/event-stream; charset=utf-8\",\n      \"Cache-Control\": \"no-cache, no-transform\",\n      Connection: \"keep-alive\",\n    },\n  });\n}\n\n/**\n * Read the resume cursor a reconnecting SSE client sent: the `after` query\n * parameter, or the standard `Last-Event-ID` header (the re-emitted stream\n * sets `id:` to the sequence). Returns 0 (full replay) when absent.\n */\nexport function resumeSequenceFromRequest(request: Request): number {\n  const url = new URL(request.url);\n  const raw = url.searchParams.get(\"after\") ?? request.headers.get(\"Last-Event-ID\");\n  const parsed = raw === null ? 0 : Number(raw);\n  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : 0;\n}\n\nexport type ProxySessionEventStreamOptions = Omit<StreamSessionEventsOptions, \"after\"> & {\n  /**\n   * Resume cursor. Pass a number, or the incoming browser `Request` to\n   * honor its `?after=` / `Last-Event-ID` automatically.\n   */\n  after?: number | Request;\n  /** See {@link SseReStreamOptions.heartbeatMs}. */\n  heartbeatMs?: number;\n};\n\n/**\n * One-call proxy: consume the OpenGeni stream server-side and return an SSE\n * `Response` for your own browser clients. Works anywhere WHATWG `Response`\n * is the handler return type (Hono, Next.js route handlers, Bun.serve,\n * Cloudflare Workers, ...).\n *\n * The upstream OpenGeni connection is torn down when the downstream client\n * disconnects, and also when `options.signal` (e.g. the incoming request's\n * signal) aborts.\n */\nexport function proxySessionEventStream(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  options: ProxySessionEventStreamOptions = {},\n): Response {\n  const { after, heartbeatMs, signal, ...streamOptions } = options;\n  const upstream = new AbortController();\n  if (signal?.aborted) {\n    upstream.abort();\n  } else {\n    signal?.addEventListener(\"abort\", () => upstream.abort(), { once: true });\n  }\n  const resolvedAfter = after instanceof Request ? resumeSequenceFromRequest(after) : (after ?? 0);\n  const events = client.streamEvents(workspaceId, sessionId, {\n    ...streamOptions,\n    after: resolvedAfter,\n    signal: upstream.signal,\n  });\n  return sessionEventsToSseResponse(events, {\n    ...(heartbeatMs !== undefined ? { heartbeatMs } : {}),\n    onCancel: () => upstream.abort(),\n  });\n}\n","/**\n * A transport-tolerant MCP tool result.\n *\n * `value` is the canonical machine-readable payload after recognized MCP/JSON\n * envelopes are removed. `text` is the best presentation string without\n * discarding structured data. `raw` always retains the original evidence.\n */\nexport type NormalizedMcpOutput = Readonly<{\n  raw: unknown;\n  value: unknown;\n  text: string;\n  isError: boolean;\n}>;\n\nconst MAX_MCP_OUTPUT_DEPTH = 8;\nconst RESULT_ENVELOPE_KEYS = new Set([\"result\", \"isError\", \"jsonrpc\", \"id\", \"_meta\"]);\n\n/** Normalize common direct, JSON, and standard MCP result envelopes without throwing. */\nexport function normalizeMcpOutput(output: unknown): NormalizedMcpOutput {\n  const normalized = normalizeValue(output, 0, new Set<object>());\n  return {\n    raw: output,\n    value: normalized.value,\n    text: normalized.text,\n    isError: normalized.isError,\n  };\n}\n\ntype NormalizedValue = Omit<NormalizedMcpOutput, \"raw\">;\n\nfunction normalizeValue(value: unknown, depth: number, ancestors: Set<object>): NormalizedValue {\n  if (value === null || value === undefined) {\n    return { value, text: \"\", isError: false };\n  }\n  if (typeof value === \"string\") {\n    return normalizeText(value, depth, ancestors);\n  }\n  if (typeof value !== \"object\") {\n    return { value, text: String(value), isError: false };\n  }\n  if (depth >= MAX_MCP_OUTPUT_DEPTH || ancestors.has(value)) {\n    return { value, text: safeStringify(value), isError: false };\n  }\n\n  ancestors.add(value);\n  try {\n    if (Array.isArray(value)) {\n      return { value, text: safeStringify(value), isError: false };\n    }\n\n    const record = value as Record<string, unknown>;\n    const envelopeError = record.isError === true;\n\n    if (record.type === \"text\" && typeof record.text === \"string\") {\n      const normalized = normalizeText(record.text, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: record.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (\"structuredContent\" in record) {\n      const normalized = normalizeValue(record.structuredContent, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: firstMcpText(record.content) ?? normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (isMcpContent(record.content)) {\n      const text = firstMcpText(record.content);\n      if (text !== null) {\n        const normalized = normalizeText(text, depth + 1, ancestors);\n        return {\n          value: normalized.value,\n          text,\n          isError: envelopeError || normalized.isError,\n        };\n      }\n      return {\n        value,\n        text: safeStringify(value),\n        isError: envelopeError,\n      };\n    }\n\n    if (isResultEnvelope(record)) {\n      const normalized = normalizeValue(record.result, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    return {\n      value,\n      text: safeStringify(value),\n      isError: envelopeError,\n    };\n  } finally {\n    ancestors.delete(value);\n  }\n}\n\nfunction normalizeText(text: string, depth: number, ancestors: Set<object>): NormalizedValue {\n  try {\n    const parsed: unknown = JSON.parse(text);\n    const normalized = normalizeValue(parsed, depth + 1, ancestors);\n    return {\n      value: normalized.value,\n      text,\n      isError: normalized.isError,\n    };\n  } catch {\n    return { value: text, text, isError: false };\n  }\n}\n\nfunction isMcpContent(value: unknown): value is readonly Record<string, unknown>[] {\n  return (\n    Array.isArray(value) &&\n    value.some(\n      (part) =>\n        part !== null &&\n        typeof part === \"object\" &&\n        typeof (part as { type?: unknown }).type === \"string\",\n    )\n  );\n}\n\nfunction firstMcpText(value: unknown): string | null {\n  if (!Array.isArray(value)) {\n    return null;\n  }\n  for (const part of value) {\n    if (\n      part !== null &&\n      typeof part === \"object\" &&\n      (part as { type?: unknown }).type === \"text\" &&\n      typeof (part as { text?: unknown }).text === \"string\"\n    ) {\n      return (part as { text: string }).text;\n    }\n  }\n  return null;\n}\n\nfunction isResultEnvelope(record: Record<string, unknown>): boolean {\n  return \"result\" in record && Object.keys(record).every((key) => RESULT_ENVELOPE_KEYS.has(key));\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return String(value);\n  }\n}\n","// Zero-dependency desktop (noVNC) transport contract.\n//\n// The actual `@novnc/novnc` RFB import is a browser-only DOM dependency and\n// lives in `@opengeni/react` (lazily imported, SSR-safe). The framework-agnostic\n// SDK ships only the transport CONTRACT: a URL assembler, the minimal RFB\n// surface the component drives, the connection state machine, and the\n// rotation/fence reducers — all pure and unit-testable, with no DOM and no deps.\n//\n// Channel A (terminal-as-events, files, git) needs NO new transport here: those\n// are event projections + the synchronous fs/git/terminal point queries on\n// `OpenGeniClient`. Only the desktop pixel plane (Channel B, direct-to-provider)\n// needs this.\n\nimport type { DesktopStreamCapability, StreamUrlRotatedPayload } from \"./types\";\n\n/**\n * Translate the negotiated desktop capability into the WebSocket URL the noVNC\n * RFB client connects to. The scoped provider token is ALREADY embedded in the\n * minted `url` (Modal tunnel host, Blaxel `bl_preview_token`, Daytona signed\n * preview) by `session.resolveExposedPort(6080)` — we do NOT append `cap.token`\n * as a query param (that double-auth was an adversarial-review bug: the box runs\n * `-nopw` in v1, so the RFB password is meaningless and the real auth is the\n * tunnel token in the host). We only normalize the scheme to `ws`/`wss` and, when\n * the minted URL points at a `vnc.html` viewer page, rewrite it to the\n * websockify socket path noVNC actually dials.\n */\nexport function desktopSocketUrl(cap: Pick<DesktopStreamCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"desktop capability has no url (transport is null)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (noVNC dials a WebSocket, not the HTTP viewer page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  // A minted `…/vnc.html` (or `…/vnc_lite.html`) viewer page → the websockify\n  // socket the page itself would open (`…/websockify`). A bare host/path with no\n  // viewer page is already the socket path; leave it untouched.\n  if (/\\/vnc(_lite)?\\.html$/.test(u.pathname)) {\n    u.pathname = u.pathname.replace(/\\/vnc(_lite)?\\.html$/, \"/websockify\");\n    u.search = \"\";\n    u.hash = \"\";\n  }\n  return u.toString();\n}\n\n/**\n * The minimal RFB surface the React component drives. Lets tests (and 3rd\n * parties swapping noVNC for a WebRTC client in v3) provide a fake without the\n * DOM. Matches `@novnc/novnc`'s RFB constructor + lifecycle.\n */\nexport interface DesktopRfbLike {\n  viewOnly: boolean;\n  scaleViewport: boolean;\n  /**\n   * 1:1 viewport clipping. We always drive this FALSE: with clipping on, noVNC\n   * paints the framebuffer pixel-for-pixel and scrolls/crops to the container\n   * (the \"zoomed in\" look). FALSE lets `scaleViewport` shrink the 1280x800 frame\n   * to fit the panel (aspect-preserved). Declared so the hook can pin it instead\n   * of relying on noVNC's default — `scaleViewport=true` forces clip off\n   * internally, but a stale/partial state on reconnect could leave it on.\n   */\n  clipViewport: boolean;\n  addEventListener(\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ): void;\n  removeEventListener?: (\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ) => void;\n  disconnect(): void;\n}\n\nexport type DesktopRfbFactory = (\n  target: HTMLElement,\n  url: string,\n  opts: { credentials?: { password?: string | undefined } | undefined },\n) => DesktopRfbLike;\n\nexport type DesktopConnectionState =\n  | \"idle\"\n  | \"negotiating\"\n  | \"connecting\"\n  | \"connected\"\n  | \"rotating\"\n  | \"reconnecting\"\n  | \"error\"\n  | \"ended\";\n\nexport type DesktopStreamEvent =\n  | { type: \"negotiated\" }\n  | { type: \"connected\" }\n  | { type: \"disconnected\" }\n  | { type: \"rotate\" }\n  | { type: \"fail\" }\n  | { type: \"abort\" };\n\n/**\n * Pure reducer for the desktop connection lifecycle. The component owns the RFB\n * object + DOM; this owns the transitions so they are unit-testable. Mirrors the\n * Channel-A stream reducer discipline.\n */\nexport function nextDesktopState(\n  current: DesktopConnectionState,\n  ev: DesktopStreamEvent,\n): DesktopConnectionState {\n  switch (ev.type) {\n    case \"negotiated\":\n      return \"connecting\";\n    case \"connected\":\n      return \"connected\";\n    case \"rotate\":\n      return current === \"connected\" ? \"rotating\" : current;\n    case \"disconnected\":\n      // A deliberate teardown (ended) stays ended; everything else reconnects.\n      return current === \"ended\" ? \"ended\" : \"reconnecting\";\n    case \"fail\":\n      return \"error\";\n    case \"abort\":\n      return \"ended\";\n    default:\n      return current;\n  }\n}\n\n// `DesktopStreamCapability` is the desktop cell of `SessionCapabilities`; alias\n// it for the rotation reducer below without depending on the whole doc.\nexport type DesktopStreamCapabilityLike = {\n  url: string | null;\n  token: string | null;\n  expiresAt: string | null;\n};\n\n/**\n * Apply a `stream.url.rotated` event onto a desktop capability, fencing on\n * leaseEpoch (split-brain). A rotation minted under an epoch the client has\n * already advanced PAST is from a superseded owner and is dropped (returns\n * null); otherwise the fresh url/token/expiresAt are folded in.\n */\nexport function applyUrlRotation<T extends DesktopStreamCapabilityLike>(\n  cap: T,\n  payload: StreamUrlRotatedPayload,\n  knownEpoch: number,\n): T | null {\n  if (payload.leaseEpoch < knownEpoch) {\n    return null;\n  }\n  return { ...cap, url: payload.url, token: payload.token, expiresAt: payload.expiresAt };\n}\n","// Zero-dependency interactive-terminal (ttyd PTY-over-websocket) transport\n// contract. Symmetric with `desktop.ts`: the SDK ships only the pure transport\n// CONTRACT (a URL assembler + the ttyd wire-protocol frame codec), with no DOM\n// and no deps. The actual WebSocket open + xterm attach lives in `@opengeni/react`\n// (`use-terminal-stream.ts`).\n//\n// The interactive terminal is a REAL PTY streamed over the SAME Modal raw-TLS\n// tunnel as the desktop noVNC, with the SAME scoped stream-token mechanism. The\n// box bakes `ttyd` on `TERMINAL_STREAM_PORT` (7681); `session.resolveExposedPort`\n// mints the tunnel URL. The Terminal capability cell carries transport \"pty-ws\" +\n// that url + the scoped token when the box is warm and a viewer is attached.\n\nimport type { TerminalCapability } from \"./types\";\n\n/**\n * Translate the negotiated `pty-ws` Terminal capability into the WebSocket URL\n * the ttyd client dials. The scoped provider token is ALREADY embedded in the\n * minted `url` (the Modal tunnel host) by `session.resolveExposedPort(7681)` —\n * we do NOT append `cap.token` (identical posture to the desktop: the gate is the\n * unguessable short-TTL tunnel URL + the server-recorded scoped stream token; ttyd\n * runs `--writable` with no `-c` credential in v1). We only normalize the scheme\n * to `ws`/`wss`; a bare host is already the ttyd websocket endpoint.\n */\nexport function terminalSocketUrl(cap: Pick<TerminalCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"terminal capability has no url (transport is not pty-ws)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (ttyd is dialed as a WebSocket, not an HTTP page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  return u.toString();\n}\n\n// ── ttyd wire protocol ───────────────────────────────────────────────────────\n// ttyd frames are a single ASCII command char + payload. These mirror ttyd's\n// `protocol.h` Command enum. Client→server and server→client share the byte 0/1/2\n// values but mean different things per direction (see below).\n\n/** ttyd subprotocol — REQUIRED on the WebSocket handshake or ttyd refuses it. */\nexport const TTYD_SUBPROTOCOL = \"tty\";\n\n/** Client→server command bytes (the first char of each outbound text frame). */\nexport const TtydClientCommand = {\n  /** stdin: \"0\" + raw input bytes. */\n  INPUT: \"0\",\n  /** window resize: \"1\" + JSON.stringify({ columns, rows }). */\n  RESIZE: \"1\",\n  /** flow-control pause (back-pressure): \"2\". */\n  PAUSE: \"2\",\n  /** flow-control resume: \"3\". */\n  RESUME: \"3\",\n} as const;\n\n/** Server→client command bytes (the first char of each inbound frame). */\nexport const TtydServerCommand = {\n  /** stdout/stderr: \"0\" + raw output bytes (write the rest into xterm). */\n  OUTPUT: \"0\",\n  /** set the window title: \"1\" + title string. */\n  SET_WINDOW_TITLE: \"1\",\n  /** ttyd client preferences JSON: \"2\" + json (ignored by us). */\n  SET_PREFERENCES: \"2\",\n} as const;\n\n/**\n * The ttyd handshake's first frame: an auth message. ttyd expects\n * `JSON.stringify({ AuthToken })` as the FIRST text frame on the socket. We send\n * an empty token — our gate is the tunnel URL + scoped stream token, NOT a ttyd\n * `-c` basic-auth credential (which the box does not set in v1). Optional ttyd\n * `columns`/`rows` can ride this frame to seed the PTY size before the first\n * resize. Pure (string-building only) so it stays unit-testable in the SDK.\n */\nexport function ttydAuthFrame(opts?: { columns?: number; rows?: number }): string {\n  const frame: { AuthToken: string; columns?: number; rows?: number } = { AuthToken: \"\" };\n  if (opts?.columns && opts.columns > 0) frame.columns = opts.columns;\n  if (opts?.rows && opts.rows > 0) frame.rows = opts.rows;\n  return JSON.stringify(frame);\n}\n\n/** Build a client→server INPUT (stdin) frame: \"0\" + data. */\nexport function ttydInputFrame(data: string): string {\n  return TtydClientCommand.INPUT + data;\n}\n\n/** Build a client→server RESIZE frame: \"1\" + JSON.stringify({ columns, rows }). */\nexport function ttydResizeFrame(columns: number, rows: number): string {\n  return TtydClientCommand.RESIZE + JSON.stringify({ columns, rows });\n}\n","export type WorkspaceInstructionPolicyKind = \"charter\" | \"policy\";\nexport type WorkspaceInstructionPolicyScope = \"global\" | \"role\";\nexport type WorkspaceInstructionPolicyProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"legacy_import\";\nexport type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<\n  WorkspaceInstructionPolicyProvenanceSource,\n  \"legacy_import\"\n>;\nexport type WorkspaceInstructionPolicyActivationType = \"activate\" | \"rollback\";\n\nexport function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type WorkspaceInstructionPolicyTarget = {\n  kind: WorkspaceInstructionPolicyKind;\n  scope: WorkspaceInstructionPolicyScope;\n  roleKey: string | null;\n};\n\nexport type WorkspaceInstructionPolicyRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\n\nexport type WorkspaceInstructionPolicyRevision = WorkspaceInstructionPolicyRevisionIdentity &\n  WorkspaceInstructionPolicyTarget & {\n    accountId: string;\n    workspaceId: string;\n    content: string;\n    provenance: {\n      source: WorkspaceInstructionPolicyProvenanceSource;\n      sourceId: string | null;\n    };\n    supersedesRevisionId: string | null;\n    createdBySubjectId: string;\n    createdAt: string;\n  };\n\nexport type WorkspaceInstructionPolicyHead = WorkspaceInstructionPolicyTarget & {\n  workspaceId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  accountId: string;\n  workspaceId: string;\n  type: WorkspaceInstructionPolicyActivationType;\n  activationVersion: number;\n  oldRevision: WorkspaceInstructionPolicyRevisionIdentity | null;\n  newRevision: WorkspaceInstructionPolicyRevisionIdentity;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type CreateWorkspaceInstructionPolicyDraftRequest = WorkspaceInstructionPolicyTarget & {\n  content: string;\n  provenanceSource?: WorkspaceInstructionPolicyDraftProvenanceSource;\n  provenanceSourceId?: string | null;\n  supersedesRevisionId?: string | null;\n};\n\nexport type ImportLegacyWorkspaceInstructionPolicyDraftRequest = {\n  supersedesRevisionId?: string | null;\n};\n\nexport type WorkspaceInstructionPolicyListOptions = {\n  kind?: WorkspaceInstructionPolicyKind;\n  scope?: WorkspaceInstructionPolicyScope;\n  roleKey?: string;\n  afterRevision?: number;\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyListResponse = {\n  revisions: WorkspaceInstructionPolicyRevision[];\n  activeHeads: WorkspaceInstructionPolicyHead[];\n  activationEvents: WorkspaceInstructionPolicyActivationEvent[];\n  nextAfterRevision: number | null;\n};\n\nexport type WorkspaceInstructionPolicyDiffRequest = {\n  fromRevisionId: string;\n  toRevisionId: string;\n};\n\nexport type WorkspaceInstructionPolicyDiffResponse = {\n  from: WorkspaceInstructionPolicyRevision;\n  to: WorkspaceInstructionPolicyRevision;\n  format: \"unified\";\n  diff: string;\n};\n\nexport type ActivateWorkspaceInstructionPolicyRequest = {\n  expectedCurrentRevisionId: string | null;\n  reason: string;\n};\n\nexport type RollbackWorkspaceInstructionPolicyRequest = {\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  reason: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationResponse = {\n  head: WorkspaceInstructionPolicyHead;\n  event: WorkspaceInstructionPolicyActivationEvent;\n};\n\nexport type WorkspaceInstructionPolicyConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_CONFLICT\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n","export type PreferenceRegistryScope = \"organization\" | \"workspace\" | \"user\";\nexport type PreferenceRegistryStatus =\n  | \"proposed\"\n  | \"active\"\n  | \"inactive\"\n  | \"rejected\"\n  | \"superseded\"\n  | \"expired\";\nexport type PreferenceRegistryProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"imported_document\"\n  | \"slack\"\n  | \"meeting_transcript\"\n  | \"call_transcript\";\nexport type PreferenceRegistryTrust =\n  | \"untrusted_proposal\"\n  | \"personal\"\n  | \"workspace_managed\"\n  | \"organization_managed\";\nexport type PreferenceRegistryConflictStrategy = \"override\" | \"merge\" | \"reject\" | \"inform\";\n\nexport function normalizePreferenceRegistryStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type PreferenceRegistryScopeTarget = {\n  scope: PreferenceRegistryScope;\n  workspaceId: string | null;\n  subjectId: string | null;\n};\n\nexport type PreferenceRegistryPrecedence = {\n  tier: PreferenceRegistryScope;\n  rank: number;\n  conflictStrategy: PreferenceRegistryConflictStrategy;\n  conflictsWith: string[];\n};\n\nexport type PreferenceRegistryRevisionSummary = {\n  id: string;\n  preferenceId: string;\n  revision: number;\n  contentHash: string;\n  title: string;\n  description: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: {\n    source: PreferenceRegistryProvenanceSource;\n    sourceId: string | null;\n    trust: PreferenceRegistryTrust;\n  };\n  expiresAt: string | null;\n  correctsRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptorProvenance = {\n  source: PreferenceRegistryProvenanceSource;\n  sourceIdHash: string | null;\n  trust: PreferenceRegistryTrust;\n};\n\nexport type PreferenceRegistryRecord = {\n  id: string;\n  accountId: string;\n  stableKey: string;\n  target: PreferenceRegistryScopeTarget;\n  status: PreferenceRegistryStatus;\n  scopeVersion: number;\n  activationVersion: number;\n  activeRevision: PreferenceRegistryRevisionSummary | null;\n  supersededByPreferenceId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type PreferenceRegistryEvent = {\n  id: string;\n  accountId: string;\n  preferenceId: string;\n  type:\n    | \"proposal_created\"\n    | \"activated\"\n    | \"corrected\"\n    | \"rejected\"\n    | \"deactivated\"\n    | \"superseded\"\n    | \"scope_changed\";\n  version: number;\n  oldRevisionId: string | null;\n  newRevisionId: string | null;\n  oldTarget: PreferenceRegistryScopeTarget | null;\n  newTarget: PreferenceRegistryScopeTarget | null;\n  relatedPreferenceId: string | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptor = {\n  id: string;\n  stableKey: string;\n  title: string;\n  description: string;\n  scope: PreferenceRegistryScope;\n  activeVersion: number;\n  revisionId: string;\n  contentHash: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: PreferenceRegistryDescriptorProvenance;\n  expiresAt: string | null;\n  retrievalHandle: string;\n};\n\nexport type PreferenceRegistrySnapshot = {\n  id: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n  initiatingHumanSubjectId: string;\n  descriptorHash: string;\n  descriptors: PreferenceRegistryDescriptor[];\n  truncated: boolean;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryFullContent = {\n  descriptor: PreferenceRegistryDescriptor;\n  content: string;\n};\n\nexport type CreatePreferenceRegistryProposalRequest = {\n  stableKey: string;\n  scope: PreferenceRegistryScope;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  provenanceSource?: PreferenceRegistryProvenanceSource;\n  provenanceSourceId?: string | null;\n};\n\nexport type ActivatePreferenceRegistryRevisionRequest = {\n  revisionId: string;\n  expectedCurrentRevisionId: string | null;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type CorrectPreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  reason: string;\n};\n\nexport type DeactivatePreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type ChangePreferenceRegistryScopeRequest = {\n  scope: PreferenceRegistryScope;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type SupersedePreferenceRegistryRequest = {\n  replacementPreferenceId: string;\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type RejectPreferenceRegistryProposalRequest = {\n  revisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\nexport type PreferenceRegistryListOptions = {\n  scope?: PreferenceRegistryScope;\n  status?: PreferenceRegistryStatus;\n  limit?: number;\n};\nexport type PreferenceRegistryListResponse = { preferences: PreferenceRegistryRecord[] };\nexport type PreferenceRegistryDetailResponse = {\n  preference: PreferenceRegistryRecord;\n  revisions: PreferenceRegistryRevisionSummary[];\n  events: PreferenceRegistryEvent[];\n};\nexport type PreferenceRegistryMutationResponse = {\n  preference: PreferenceRegistryRecord;\n  event: PreferenceRegistryEvent;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaO,IAAMA,kBAAN,cAA6B,eAAmB;AAAA,EACrD,MAAM,uBACJ,aACA,UAAwC,CAAC,GACD;AACxC,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,QAAQ,UAAU,OAAW,OAAM,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AACzE,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,UAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACzD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,uBAAuB,MAAM;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,aACA,YAC0C;AAC1C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,WAC2C;AAC3C,UAAM,QAAQ,YAAY,cAAc,mBAAmB,SAAS,CAAC,KAAK;AAC1E,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,IACrG;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,0BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;;;AClEO,SAAS,eAAe,OAA6B;AAC1D,SAAO,OAAO,MAAM,QAAQ;AAAA,SAAY,MAAM,IAAI;AAAA,QAAW,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AACpF;AAqBO,SAAS,yBACd,QACA,UAA8B,CAAC,GACH;AAC5B,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,WAAW,OAAO,OAAO,aAAa,EAAE;AAC9C,MAAI;AACJ,MAAI,YAAY;AAEhB,QAAM,gBAAgB,MAAY;AAChC,QAAI,cAAc,QAAW;AAC3B,oBAAc,SAAS;AACvB,kBAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO,IAAI,eAA2B;AAAA,IACpC,OAAO,CAAC,eAAe;AACrB,UAAI,QAAQ,gBAAgB,QAAW;AACrC,oBAAY,YAAY,MAAM;AAC5B,cAAI;AACF,uBAAW,QAAQ,QAAQ,OAAO,YAAY,CAAC;AAAA,UACjD,QAAQ;AACN,0BAAc;AAAA,UAChB;AAAA,QACF,GAAG,QAAQ,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA,MAAM,OAAO,eAAe;AAC1B,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACd,sBAAc;AACd,cAAM;AAAA,MACR;AACA,UAAI,WAAW;AACb;AAAA,MACF;AACA,UAAI,OAAO,MAAM;AACf,sBAAc;AACd,mBAAW,MAAM;AACjB;AAAA,MACF;AACA,iBAAW,QAAQ,QAAQ,OAAO,eAAe,OAAO,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,IACA,QAAQ,MAAM;AACZ,kBAAY;AACZ,oBAAc;AACd,cAAQ,WAAW;AAGnB,WAAK,QAAQ,QAAQ,SAAS,SAAS,MAAS,CAAC,EAAE;AAAA,QACjD,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,2BACd,QACA,UAA8B,CAAC,GACrB;AACV,SAAO,IAAI,SAAS,yBAAyB,QAAQ,OAAO,GAAG;AAAA,IAC7D,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAOO,SAAS,0BAA0B,SAA0B;AAClE,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,MAAM,IAAI,aAAa,IAAI,OAAO,KAAK,QAAQ,QAAQ,IAAI,eAAe;AAChF,QAAM,SAAS,QAAQ,OAAO,IAAI,OAAO,GAAG;AAC5C,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,KAAK,MAAM,MAAM,IAAI;AACtE;AAsBO,SAAS,wBACd,QACA,aACA,WACA,UAA0C,CAAC,GACjC;AACV,QAAM,EAAE,OAAO,aAAa,QAAQ,GAAG,cAAc,IAAI;AACzD,QAAM,WAAW,IAAI,gBAAgB;AACrC,MAAI,QAAQ,SAAS;AACnB,aAAS,MAAM;AAAA,EACjB,OAAO;AACL,YAAQ,iBAAiB,SAAS,MAAM,SAAS,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1E;AACA,QAAM,gBAAgB,iBAAiB,UAAU,0BAA0B,KAAK,IAAK,SAAS;AAC9F,QAAM,SAAS,OAAO,aAAa,aAAa,WAAW;AAAA,IACzD,GAAG;AAAA,IACH,OAAO;AAAA,IACP,QAAQ,SAAS;AAAA,EACnB,CAAC;AACD,SAAO,2BAA2B,QAAQ;AAAA,IACxC,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,UAAU,MAAM,SAAS,MAAM;AAAA,EACjC,CAAC;AACH;;;AC5JA,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB,oBAAI,IAAI,CAAC,UAAU,WAAW,WAAW,MAAM,OAAO,CAAC;AAG7E,SAAS,mBAAmB,QAAsC;AACvE,QAAM,aAAa,eAAe,QAAQ,GAAG,oBAAI,IAAY,CAAC;AAC9D,SAAO;AAAA,IACL,KAAK;AAAA,IACL,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,EACtB;AACF;AAIA,SAAS,eAAe,OAAgB,OAAe,WAAyC;AAC9F,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO,EAAE,OAAO,MAAM,IAAI,SAAS,MAAM;AAAA,EAC3C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,cAAc,OAAO,OAAO,SAAS;AAAA,EAC9C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,OAAO,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,EACtD;AACA,MAAI,SAAS,wBAAwB,UAAU,IAAI,KAAK,GAAG;AACzD,WAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,EAC7D;AAEA,YAAU,IAAI,KAAK;AACnB,MAAI;AACF,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,IAC7D;AAEA,UAAM,SAAS;AACf,UAAM,gBAAgB,OAAO,YAAY;AAEzC,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,YAAM,aAAa,cAAc,OAAO,MAAM,QAAQ,GAAG,SAAS;AAClE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,OAAO;AAAA,QACb,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,uBAAuB,QAAQ;AACjC,YAAM,aAAa,eAAe,OAAO,mBAAmB,QAAQ,GAAG,SAAS;AAChF,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,aAAa,OAAO,OAAO,KAAK,WAAW;AAAA,QACjD,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,aAAa,OAAO,OAAO,GAAG;AAChC,YAAM,OAAO,aAAa,OAAO,OAAO;AACxC,UAAI,SAAS,MAAM;AACjB,cAAM,aAAa,cAAc,MAAM,QAAQ,GAAG,SAAS;AAC3D,eAAO;AAAA,UACL,OAAO,WAAW;AAAA,UAClB;AAAA,UACA,SAAS,iBAAiB,WAAW;AAAA,QACvC;AAAA,MACF;AACA,aAAO;AAAA,QACL;AAAA,QACA,MAAM,cAAc,KAAK;AAAA,QACzB,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,iBAAiB,MAAM,GAAG;AAC5B,YAAM,aAAa,eAAe,OAAO,QAAQ,QAAQ,GAAG,SAAS;AACrE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,WAAW;AAAA,QACjB,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,cAAc,KAAK;AAAA,MACzB,SAAS;AAAA,IACX;AAAA,EACF,UAAE;AACA,cAAU,OAAO,KAAK;AAAA,EACxB;AACF;AAEA,SAAS,cAAc,MAAc,OAAe,WAAyC;AAC3F,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UAAM,aAAa,eAAe,QAAQ,QAAQ,GAAG,SAAS;AAC9D,WAAO;AAAA,MACL,OAAO,WAAW;AAAA,MAClB;AAAA,MACA,SAAS,WAAW;AAAA,IACtB;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM;AAAA,EAC7C;AACF;AAEA,SAAS,aAAa,OAA6D;AACjF,SACE,MAAM,QAAQ,KAAK,KACnB,MAAM;AAAA,IACJ,CAAC,SACC,SAAS,QACT,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS;AAAA,EACjD;AAEJ;AAEA,SAAS,aAAa,OAA+B;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,SAAS,QACT,OAAO,SAAS,YACf,KAA4B,SAAS,UACtC,OAAQ,KAA4B,SAAS,UAC7C;AACA,aAAQ,KAA0B;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA0C;AAClE,SAAO,YAAY,UAAU,OAAO,KAAK,MAAM,EAAE,MAAM,CAAC,QAAQ,qBAAqB,IAAI,GAAG,CAAC;AAC/F;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;ACtIO,SAAS,iBAAiB,KAAmD;AAClF,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AAIA,MAAI,uBAAuB,KAAK,EAAE,QAAQ,GAAG;AAC3C,MAAE,WAAW,EAAE,SAAS,QAAQ,wBAAwB,aAAa;AACrE,MAAE,SAAS;AACX,MAAE,OAAO;AAAA,EACX;AACA,SAAO,EAAE,SAAS;AACpB;AA2DO,SAAS,iBACd,SACA,IACwB;AACxB,UAAQ,GAAG,MAAM;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,YAAY,cAAc,aAAa;AAAA,IAChD,KAAK;AAEH,aAAO,YAAY,UAAU,UAAU;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAgBO,SAAS,iBACd,KACA,SACA,YACU;AACV,MAAI,QAAQ,aAAa,YAAY;AACnC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,GAAG,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,OAAO,WAAW,QAAQ,UAAU;AACxF;;;AChIO,SAAS,kBAAkB,KAA8C;AAC9E,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AACA,SAAO,EAAE,SAAS;AACpB;AAQO,IAAM,mBAAmB;AAGzB,IAAM,oBAAoB;AAAA;AAAA,EAE/B,OAAO;AAAA;AAAA,EAEP,QAAQ;AAAA;AAAA,EAER,OAAO;AAAA;AAAA,EAEP,QAAQ;AACV;AAGO,IAAM,oBAAoB;AAAA;AAAA,EAE/B,QAAQ;AAAA;AAAA,EAER,kBAAkB;AAAA;AAAA,EAElB,iBAAiB;AACnB;AAUO,SAAS,cAAc,MAAoD;AAChF,QAAM,QAAgE,EAAE,WAAW,GAAG;AACtF,MAAI,MAAM,WAAW,KAAK,UAAU,EAAG,OAAM,UAAU,KAAK;AAC5D,MAAI,MAAM,QAAQ,KAAK,OAAO,EAAG,OAAM,OAAO,KAAK;AACnD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAGO,SAAS,eAAe,MAAsB;AACnD,SAAO,kBAAkB,QAAQ;AACnC;AAGO,SAAS,gBAAgB,SAAiB,MAAsB;AACrE,SAAO,kBAAkB,SAAS,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC;AACpE;;;AC7EO,SAAS,2CAA2C,OAAuB;AAChF,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;ACQO,SAAS,qCAAqC,OAAuB;AAC1E,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;","names":["OpenGeniClient"]}
+{"version":3,"sources":["../src/artifact-client.ts","../src/proxy.ts","../src/mcp-output.ts","../src/desktop.ts","../src/terminal.ts","../src/workspace-instruction-policies.ts","../src/preference-registry.ts"],"sourcesContent":["import { OpenGeniClient as OpenGeniCoreClient } from \"./client\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  RollbackWorkspaceArtifactRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactDetailResponse,\n  WorkspaceArtifactListOptions,\n  WorkspaceArtifactListResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\n\n/** Public SDK client. Artifact operations stay out of the console's eager core graph. */\nexport class OpenGeniClient extends OpenGeniCoreClient {\n  async listWorkspaceArtifacts(\n    workspaceId: string,\n    options: WorkspaceArtifactListOptions = {},\n  ): Promise<WorkspaceArtifactListResponse> {\n    const query = new URLSearchParams();\n    if (options.limit !== undefined) query.set(\"limit\", String(options.limit));\n    if (options.cursor) query.set(\"cursor\", options.cursor);\n    const suffix = query.size > 0 ? `?${query.toString()}` : \"\";\n    return await this.requestJson<WorkspaceArtifactListResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`,\n    );\n  }\n\n  async getWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n  ): Promise<WorkspaceArtifactDetailResponse> {\n    return await this.requestJson<WorkspaceArtifactDetailResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionId?: string,\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts`,\n      request,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n    );\n  }\n\n  async rollbackWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n    request: RollbackWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,\n      request,\n    );\n  }\n}\n","import type { OpenGeniClient } from \"./client\";\nimport type { StreamSessionEventsOptions } from \"./stream\";\nimport type { SessionEvent } from \"./types\";\n\n/**\n * Proxy-through-your-own-API helpers.\n *\n * The intended pattern: a customer's server consumes the OpenGeni event\n * stream with its own API key (`client.streamEvents(...)`) and re-emits it to\n * its browser clients over its own authenticated endpoint — the OpenGeni key\n * never reaches the browser. The re-emitted wire format is identical to\n * OpenGeni's own SSE stream (`id: <sequence>`, `event: <type>`,\n * `data: <event JSON>`), so the browser side can consume it with this same\n * SDK's streaming core (or a plain `EventSource`), including resume via\n * `?after=` / `Last-Event-ID`.\n */\n\n/** Format one event exactly as OpenGeni's API emits it over SSE. */\nexport function formatSseEvent(event: SessionEvent): string {\n  return `id: ${event.sequence}\\nevent: ${event.type}\\ndata: ${JSON.stringify(event)}\\n\\n`;\n}\n\nexport type SseReStreamOptions = {\n  /**\n   * Emit `: ping` comment lines at this interval, keeping intermediaries from\n   * idling the connection out. Disabled when omitted.\n   */\n  heartbeatMs?: number;\n  /**\n   * Called when the downstream consumer cancels (e.g. the browser\n   * disconnected). Use it to abort the upstream OpenGeni stream — an async\n   * iterator that is mid-`await` cannot be interrupted by `return()` alone.\n   */\n  onCancel?: () => void;\n};\n\n/**\n * Re-emit a stream of session events as an SSE byte stream. Pull-based, so\n * upstream consumption follows downstream demand; cancelling the returned\n * stream fires `onCancel` and ends the upstream iterator.\n */\nexport function sessionEventsToSseStream(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): ReadableStream<Uint8Array> {\n  const encoder = new TextEncoder();\n  const iterator = events[Symbol.asyncIterator]();\n  let heartbeat: ReturnType<typeof setInterval> | undefined;\n  let cancelled = false;\n\n  const stopHeartbeat = (): void => {\n    if (heartbeat !== undefined) {\n      clearInterval(heartbeat);\n      heartbeat = undefined;\n    }\n  };\n\n  return new ReadableStream<Uint8Array>({\n    start: (controller) => {\n      if (options.heartbeatMs !== undefined) {\n        heartbeat = setInterval(() => {\n          try {\n            controller.enqueue(encoder.encode(\": ping\\n\\n\"));\n          } catch {\n            stopHeartbeat();\n          }\n        }, options.heartbeatMs);\n      }\n    },\n    pull: async (controller) => {\n      let result: IteratorResult<SessionEvent, unknown>;\n      try {\n        result = await iterator.next();\n      } catch (error) {\n        stopHeartbeat();\n        throw error;\n      }\n      if (cancelled) {\n        return;\n      }\n      if (result.done) {\n        stopHeartbeat();\n        controller.close();\n        return;\n      }\n      controller.enqueue(encoder.encode(formatSseEvent(result.value)));\n    },\n    cancel: () => {\n      cancelled = true;\n      stopHeartbeat();\n      options.onCancel?.();\n      // Fire-and-forget: if the iterator is suspended mid-await, return()\n      // settles only after onCancel unblocks it; cancel must not hang on it.\n      void Promise.resolve(iterator.return?.(undefined)).then(\n        () => undefined,\n        () => undefined,\n      );\n    },\n  });\n}\n\n/** Wrap an event stream in a ready-to-return SSE `Response`. */\nexport function sessionEventsToSseResponse(\n  events: AsyncIterable<SessionEvent>,\n  options: SseReStreamOptions = {},\n): Response {\n  return new Response(sessionEventsToSseStream(events, options), {\n    headers: {\n      \"Content-Type\": \"text/event-stream; charset=utf-8\",\n      \"Cache-Control\": \"no-cache, no-transform\",\n      Connection: \"keep-alive\",\n    },\n  });\n}\n\n/**\n * Read the resume cursor a reconnecting SSE client sent: the `after` query\n * parameter, or the standard `Last-Event-ID` header (the re-emitted stream\n * sets `id:` to the sequence). Returns 0 (full replay) when absent.\n */\nexport function resumeSequenceFromRequest(request: Request): number {\n  const url = new URL(request.url);\n  const raw = url.searchParams.get(\"after\") ?? request.headers.get(\"Last-Event-ID\");\n  const parsed = raw === null ? 0 : Number(raw);\n  return Number.isFinite(parsed) && parsed > 0 ? Math.floor(parsed) : 0;\n}\n\nexport type ProxySessionEventStreamOptions = Omit<StreamSessionEventsOptions, \"after\"> & {\n  /**\n   * Resume cursor. Pass a number, or the incoming browser `Request` to\n   * honor its `?after=` / `Last-Event-ID` automatically.\n   */\n  after?: number | Request;\n  /** See {@link SseReStreamOptions.heartbeatMs}. */\n  heartbeatMs?: number;\n};\n\n/**\n * One-call proxy: consume the OpenGeni stream server-side and return an SSE\n * `Response` for your own browser clients. Works anywhere WHATWG `Response`\n * is the handler return type (Hono, Next.js route handlers, Bun.serve,\n * Cloudflare Workers, ...).\n *\n * The upstream OpenGeni connection is torn down when the downstream client\n * disconnects, and also when `options.signal` (e.g. the incoming request's\n * signal) aborts.\n */\nexport function proxySessionEventStream(\n  client: OpenGeniClient,\n  workspaceId: string,\n  sessionId: string,\n  options: ProxySessionEventStreamOptions = {},\n): Response {\n  const { after, heartbeatMs, signal, ...streamOptions } = options;\n  const upstream = new AbortController();\n  if (signal?.aborted) {\n    upstream.abort();\n  } else {\n    signal?.addEventListener(\"abort\", () => upstream.abort(), { once: true });\n  }\n  const resolvedAfter = after instanceof Request ? resumeSequenceFromRequest(after) : (after ?? 0);\n  const events = client.streamEvents(workspaceId, sessionId, {\n    ...streamOptions,\n    after: resolvedAfter,\n    signal: upstream.signal,\n  });\n  return sessionEventsToSseResponse(events, {\n    ...(heartbeatMs !== undefined ? { heartbeatMs } : {}),\n    onCancel: () => upstream.abort(),\n  });\n}\n","/**\n * A transport-tolerant MCP tool result.\n *\n * `value` is the canonical machine-readable payload after recognized MCP/JSON\n * envelopes are removed. `text` is the best presentation string without\n * discarding structured data. `raw` always retains the original evidence.\n */\nexport type NormalizedMcpOutput = Readonly<{\n  raw: unknown;\n  value: unknown;\n  text: string;\n  isError: boolean;\n}>;\n\nconst MAX_MCP_OUTPUT_DEPTH = 8;\nconst RESULT_ENVELOPE_KEYS = new Set([\"result\", \"isError\", \"jsonrpc\", \"id\", \"_meta\"]);\n\n/** Normalize common direct, JSON, and standard MCP result envelopes without throwing. */\nexport function normalizeMcpOutput(output: unknown): NormalizedMcpOutput {\n  const normalized = normalizeValue(output, 0, new Set<object>());\n  return {\n    raw: output,\n    value: normalized.value,\n    text: normalized.text,\n    isError: normalized.isError,\n  };\n}\n\ntype NormalizedValue = Omit<NormalizedMcpOutput, \"raw\">;\n\nfunction normalizeValue(value: unknown, depth: number, ancestors: Set<object>): NormalizedValue {\n  if (value === null || value === undefined) {\n    return { value, text: \"\", isError: false };\n  }\n  if (typeof value === \"string\") {\n    return normalizeText(value, depth, ancestors);\n  }\n  if (typeof value !== \"object\") {\n    return { value, text: String(value), isError: false };\n  }\n  if (depth >= MAX_MCP_OUTPUT_DEPTH || ancestors.has(value)) {\n    return { value, text: safeStringify(value), isError: false };\n  }\n\n  ancestors.add(value);\n  try {\n    if (Array.isArray(value)) {\n      return { value, text: safeStringify(value), isError: false };\n    }\n\n    const record = value as Record<string, unknown>;\n    const envelopeError = record.isError === true;\n\n    if (record.type === \"text\" && typeof record.text === \"string\") {\n      const normalized = normalizeText(record.text, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: record.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (\"structuredContent\" in record) {\n      const normalized = normalizeValue(record.structuredContent, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: firstMcpText(record.content) ?? normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    if (isMcpContent(record.content)) {\n      const text = firstMcpText(record.content);\n      if (text !== null) {\n        const normalized = normalizeText(text, depth + 1, ancestors);\n        return {\n          value: normalized.value,\n          text,\n          isError: envelopeError || normalized.isError,\n        };\n      }\n      return {\n        value,\n        text: safeStringify(value),\n        isError: envelopeError,\n      };\n    }\n\n    if (isResultEnvelope(record)) {\n      const normalized = normalizeValue(record.result, depth + 1, ancestors);\n      return {\n        value: normalized.value,\n        text: normalized.text,\n        isError: envelopeError || normalized.isError,\n      };\n    }\n\n    return {\n      value,\n      text: safeStringify(value),\n      isError: envelopeError,\n    };\n  } finally {\n    ancestors.delete(value);\n  }\n}\n\nfunction normalizeText(text: string, depth: number, ancestors: Set<object>): NormalizedValue {\n  try {\n    const parsed: unknown = JSON.parse(text);\n    const normalized = normalizeValue(parsed, depth + 1, ancestors);\n    return {\n      value: normalized.value,\n      text,\n      isError: normalized.isError,\n    };\n  } catch {\n    return { value: text, text, isError: false };\n  }\n}\n\nfunction isMcpContent(value: unknown): value is readonly Record<string, unknown>[] {\n  return (\n    Array.isArray(value) &&\n    value.some(\n      (part) =>\n        part !== null &&\n        typeof part === \"object\" &&\n        typeof (part as { type?: unknown }).type === \"string\",\n    )\n  );\n}\n\nfunction firstMcpText(value: unknown): string | null {\n  if (!Array.isArray(value)) {\n    return null;\n  }\n  for (const part of value) {\n    if (\n      part !== null &&\n      typeof part === \"object\" &&\n      (part as { type?: unknown }).type === \"text\" &&\n      typeof (part as { text?: unknown }).text === \"string\"\n    ) {\n      return (part as { text: string }).text;\n    }\n  }\n  return null;\n}\n\nfunction isResultEnvelope(record: Record<string, unknown>): boolean {\n  return \"result\" in record && Object.keys(record).every((key) => RESULT_ENVELOPE_KEYS.has(key));\n}\n\nfunction safeStringify(value: unknown): string {\n  try {\n    return JSON.stringify(value) ?? \"\";\n  } catch {\n    return String(value);\n  }\n}\n","// Zero-dependency desktop (noVNC) transport contract.\n//\n// The actual `@novnc/novnc` RFB import is a browser-only DOM dependency and\n// lives in `@opengeni/react` (lazily imported, SSR-safe). The framework-agnostic\n// SDK ships only the transport CONTRACT: a URL assembler, the minimal RFB\n// surface the component drives, the connection state machine, and the\n// rotation/fence reducers — all pure and unit-testable, with no DOM and no deps.\n//\n// Channel A (terminal-as-events, files, git) needs NO new transport here: those\n// are event projections + the synchronous fs/git/terminal point queries on\n// `OpenGeniClient`. Only the desktop pixel plane (Channel B, direct-to-provider)\n// needs this.\n\nimport type { DesktopStreamCapability, StreamUrlRotatedPayload } from \"./types\";\n\n/**\n * Translate the negotiated desktop capability into the WebSocket URL the noVNC\n * RFB client connects to. The scoped provider token is ALREADY embedded in the\n * minted `url` (Modal tunnel host, Blaxel `bl_preview_token`, Daytona signed\n * preview) by `session.resolveExposedPort(6080)` — we do NOT append `cap.token`\n * as a query param (that double-auth was an adversarial-review bug: the box runs\n * `-nopw` in v1, so the RFB password is meaningless and the real auth is the\n * tunnel token in the host). We only normalize the scheme to `ws`/`wss` and, when\n * the minted URL points at a `vnc.html` viewer page, rewrite it to the\n * websockify socket path noVNC actually dials.\n */\nexport function desktopSocketUrl(cap: Pick<DesktopStreamCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"desktop capability has no url (transport is null)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (noVNC dials a WebSocket, not the HTTP viewer page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  // A minted `…/vnc.html` (or `…/vnc_lite.html`) viewer page → the websockify\n  // socket the page itself would open (`…/websockify`). A bare host/path with no\n  // viewer page is already the socket path; leave it untouched.\n  if (/\\/vnc(_lite)?\\.html$/.test(u.pathname)) {\n    u.pathname = u.pathname.replace(/\\/vnc(_lite)?\\.html$/, \"/websockify\");\n    u.search = \"\";\n    u.hash = \"\";\n  }\n  return u.toString();\n}\n\n/**\n * The minimal RFB surface the React component drives. Lets tests (and 3rd\n * parties swapping noVNC for a WebRTC client in v3) provide a fake without the\n * DOM. Matches `@novnc/novnc`'s RFB constructor + lifecycle.\n */\nexport interface DesktopRfbLike {\n  viewOnly: boolean;\n  scaleViewport: boolean;\n  /**\n   * 1:1 viewport clipping. We always drive this FALSE: with clipping on, noVNC\n   * paints the framebuffer pixel-for-pixel and scrolls/crops to the container\n   * (the \"zoomed in\" look). FALSE lets `scaleViewport` shrink the 1280x800 frame\n   * to fit the panel (aspect-preserved). Declared so the hook can pin it instead\n   * of relying on noVNC's default — `scaleViewport=true` forces clip off\n   * internally, but a stale/partial state on reconnect could leave it on.\n   */\n  clipViewport: boolean;\n  addEventListener(\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ): void;\n  removeEventListener?: (\n    type: \"connect\" | \"disconnect\" | \"securityfailure\",\n    cb: (e?: unknown) => void,\n  ) => void;\n  disconnect(): void;\n}\n\nexport type DesktopRfbFactory = (\n  target: HTMLElement,\n  url: string,\n  opts: { credentials?: { password?: string | undefined } | undefined },\n) => DesktopRfbLike;\n\nexport type DesktopConnectionState =\n  | \"idle\"\n  | \"negotiating\"\n  | \"connecting\"\n  | \"connected\"\n  | \"rotating\"\n  | \"reconnecting\"\n  | \"error\"\n  | \"ended\";\n\nexport type DesktopStreamEvent =\n  | { type: \"negotiated\" }\n  | { type: \"connected\" }\n  | { type: \"disconnected\" }\n  | { type: \"rotate\" }\n  | { type: \"fail\" }\n  | { type: \"abort\" };\n\n/**\n * Pure reducer for the desktop connection lifecycle. The component owns the RFB\n * object + DOM; this owns the transitions so they are unit-testable. Mirrors the\n * Channel-A stream reducer discipline.\n */\nexport function nextDesktopState(\n  current: DesktopConnectionState,\n  ev: DesktopStreamEvent,\n): DesktopConnectionState {\n  switch (ev.type) {\n    case \"negotiated\":\n      return \"connecting\";\n    case \"connected\":\n      return \"connected\";\n    case \"rotate\":\n      return current === \"connected\" ? \"rotating\" : current;\n    case \"disconnected\":\n      // A deliberate teardown (ended) stays ended; everything else reconnects.\n      return current === \"ended\" ? \"ended\" : \"reconnecting\";\n    case \"fail\":\n      return \"error\";\n    case \"abort\":\n      return \"ended\";\n    default:\n      return current;\n  }\n}\n\n// `DesktopStreamCapability` is the desktop cell of `SessionCapabilities`; alias\n// it for the rotation reducer below without depending on the whole doc.\nexport type DesktopStreamCapabilityLike = {\n  url: string | null;\n  token: string | null;\n  expiresAt: string | null;\n};\n\n/**\n * Apply a `stream.url.rotated` event onto a desktop capability, fencing on\n * leaseEpoch (split-brain). A rotation minted under an epoch the client has\n * already advanced PAST is from a superseded owner and is dropped (returns\n * null); otherwise the fresh url/token/expiresAt are folded in.\n */\nexport function applyUrlRotation<T extends DesktopStreamCapabilityLike>(\n  cap: T,\n  payload: StreamUrlRotatedPayload,\n  knownEpoch: number,\n): T | null {\n  if (payload.leaseEpoch < knownEpoch) {\n    return null;\n  }\n  return { ...cap, url: payload.url, token: payload.token, expiresAt: payload.expiresAt };\n}\n","// Zero-dependency interactive-terminal (ttyd PTY-over-websocket) transport\n// contract. Symmetric with `desktop.ts`: the SDK ships only the pure transport\n// CONTRACT (a URL assembler + the ttyd wire-protocol frame codec), with no DOM\n// and no deps. The actual WebSocket open + xterm attach lives in `@opengeni/react`\n// (`use-terminal-stream.ts`).\n//\n// The interactive terminal is a REAL PTY streamed over the SAME Modal raw-TLS\n// tunnel as the desktop noVNC, with the SAME scoped stream-token mechanism. The\n// box bakes `ttyd` on `TERMINAL_STREAM_PORT` (7681); `session.resolveExposedPort`\n// mints the tunnel URL. The Terminal capability cell carries transport \"pty-ws\" +\n// that url + the scoped token when the box is warm and a viewer is attached.\n\nimport type { TerminalCapability } from \"./types\";\n\n/**\n * Translate the negotiated `pty-ws` Terminal capability into the WebSocket URL\n * the ttyd client dials. The scoped provider token is ALREADY embedded in the\n * minted `url` (the Modal tunnel host) by `session.resolveExposedPort(7681)` —\n * we do NOT append `cap.token` (identical posture to the desktop: the gate is the\n * unguessable short-TTL tunnel URL + the server-recorded scoped stream token; ttyd\n * runs `--writable` with no `-c` credential in v1). We only normalize the scheme\n * to `ws`/`wss`; a bare host is already the ttyd websocket endpoint.\n */\nexport function terminalSocketUrl(cap: Pick<TerminalCapability, \"url\">): string {\n  if (!cap.url) {\n    throw new Error(\"terminal capability has no url (transport is not pty-ws)\");\n  }\n  const u = new URL(cap.url);\n  // https → wss, http → ws (ttyd is dialed as a WebSocket, not an HTTP page).\n  if (u.protocol === \"https:\") {\n    u.protocol = \"wss:\";\n  } else if (u.protocol === \"http:\") {\n    u.protocol = \"ws:\";\n  }\n  return u.toString();\n}\n\n// ── ttyd wire protocol ───────────────────────────────────────────────────────\n// ttyd frames are a single ASCII command char + payload. These mirror ttyd's\n// `protocol.h` Command enum. Client→server and server→client share the byte 0/1/2\n// values but mean different things per direction (see below).\n\n/** ttyd subprotocol — REQUIRED on the WebSocket handshake or ttyd refuses it. */\nexport const TTYD_SUBPROTOCOL = \"tty\";\n\n/** Client→server command bytes (the first char of each outbound text frame). */\nexport const TtydClientCommand = {\n  /** stdin: \"0\" + raw input bytes. */\n  INPUT: \"0\",\n  /** window resize: \"1\" + JSON.stringify({ columns, rows }). */\n  RESIZE: \"1\",\n  /** flow-control pause (back-pressure): \"2\". */\n  PAUSE: \"2\",\n  /** flow-control resume: \"3\". */\n  RESUME: \"3\",\n} as const;\n\n/** Server→client command bytes (the first char of each inbound frame). */\nexport const TtydServerCommand = {\n  /** stdout/stderr: \"0\" + raw output bytes (write the rest into xterm). */\n  OUTPUT: \"0\",\n  /** set the window title: \"1\" + title string. */\n  SET_WINDOW_TITLE: \"1\",\n  /** ttyd client preferences JSON: \"2\" + json (ignored by us). */\n  SET_PREFERENCES: \"2\",\n} as const;\n\n/**\n * The ttyd handshake's first frame: an auth message. ttyd expects\n * `JSON.stringify({ AuthToken })` as the FIRST text frame on the socket. We send\n * an empty token — our gate is the tunnel URL + scoped stream token, NOT a ttyd\n * `-c` basic-auth credential (which the box does not set in v1). Optional ttyd\n * `columns`/`rows` can ride this frame to seed the PTY size before the first\n * resize. Pure (string-building only) so it stays unit-testable in the SDK.\n */\nexport function ttydAuthFrame(opts?: { columns?: number; rows?: number }): string {\n  const frame: { AuthToken: string; columns?: number; rows?: number } = { AuthToken: \"\" };\n  if (opts?.columns && opts.columns > 0) frame.columns = opts.columns;\n  if (opts?.rows && opts.rows > 0) frame.rows = opts.rows;\n  return JSON.stringify(frame);\n}\n\n/** Build a client→server INPUT (stdin) frame: \"0\" + data. */\nexport function ttydInputFrame(data: string): string {\n  return TtydClientCommand.INPUT + data;\n}\n\n/** Build a client→server RESIZE frame: \"1\" + JSON.stringify({ columns, rows }). */\nexport function ttydResizeFrame(columns: number, rows: number): string {\n  return TtydClientCommand.RESIZE + JSON.stringify({ columns, rows });\n}\n","export const WORKSPACE_INSTRUCTION_POLICY_CONTENT_MAX_CHARS = 262_144;\n\nexport type WorkspaceInstructionPolicyKind = \"charter\" | \"policy\";\nexport type WorkspaceInstructionPolicyScope = \"global\" | \"role\";\nexport type WorkspaceInstructionPolicyProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"legacy_import\";\nexport type WorkspaceInstructionPolicyDraftProvenanceSource = Exclude<\n  WorkspaceInstructionPolicyProvenanceSource,\n  \"legacy_import\"\n>;\nexport type WorkspaceInstructionPolicyActivationType = \"activate\" | \"rollback\";\n\nexport function normalizeWorkspaceInstructionPolicyRoleKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type WorkspaceInstructionPolicyTarget = {\n  kind: WorkspaceInstructionPolicyKind;\n  scope: WorkspaceInstructionPolicyScope;\n  roleKey: string | null;\n};\n\nexport type WorkspaceInstructionPolicyRevisionIdentity = {\n  id: string;\n  revision: number;\n  contentHash: string;\n};\n\nexport type WorkspaceInstructionPolicyRevision = WorkspaceInstructionPolicyRevisionIdentity &\n  WorkspaceInstructionPolicyTarget & {\n    operationId: string;\n    accountId: string;\n    workspaceId: string;\n    content: string;\n    provenance: {\n      source: WorkspaceInstructionPolicyProvenanceSource;\n      sourceId: string | null;\n    };\n    supersedesRevisionId: string | null;\n    createdBySubjectId: string;\n    createdAt: string;\n  };\n\nexport type WorkspaceInstructionPolicyHead = WorkspaceInstructionPolicyTarget & {\n  workspaceId: string;\n  revisionId: string;\n  revision: number;\n  contentHash: string;\n  activationVersion: number;\n  activatedAt: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationEvent = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  type: WorkspaceInstructionPolicyActivationType;\n  activationVersion: number;\n  oldRevision: WorkspaceInstructionPolicyRevisionIdentity | null;\n  newRevision: WorkspaceInstructionPolicyRevisionIdentity;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type CreateWorkspaceInstructionPolicyDraftRequest = WorkspaceInstructionPolicyTarget & {\n  operationId?: string;\n  content: string;\n  provenanceSource?: WorkspaceInstructionPolicyDraftProvenanceSource;\n  provenanceSourceId?: string | null;\n  supersedesRevisionId?: string | null;\n};\n\nexport type ImportLegacyWorkspaceInstructionPolicyDraftRequest = {\n  operationId?: string;\n  supersedesRevisionId?: string | null;\n};\n\nexport type WorkspaceInstructionPolicyListOptions = {\n  kind?: WorkspaceInstructionPolicyKind;\n  scope?: WorkspaceInstructionPolicyScope;\n  roleKey?: string;\n  afterRevision?: number;\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyListResponse = {\n  revisions: WorkspaceInstructionPolicyRevision[];\n  activeHeads: WorkspaceInstructionPolicyHead[];\n  activationEvents: WorkspaceInstructionPolicyActivationEvent[];\n  nextAfterRevision: number | null;\n};\n\nexport type WorkspaceInstructionPolicyDiffRequest = {\n  fromRevisionId: string;\n  toRevisionId: string;\n};\n\nexport type WorkspaceInstructionPolicyDiffResponse = {\n  from: WorkspaceInstructionPolicyRevision;\n  to: WorkspaceInstructionPolicyRevision;\n  format: \"unified\";\n  diff: string;\n};\n\nexport type ActivateWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  expectedCurrentRevisionId: string | null;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type RollbackWorkspaceInstructionPolicyRequest = {\n  operationId?: string;\n  targetRevisionId: string;\n  expectedCurrentRevisionId: string;\n  expectedActivationVersion?: number;\n  reason: string;\n};\n\nexport type WorkspaceInstructionPolicyActivationResponse = {\n  head: WorkspaceInstructionPolicyHead;\n  event: WorkspaceInstructionPolicyActivationEvent;\n};\n\nexport type WorkspaceInstructionPolicyConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_CONFLICT\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOperationReuseResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_OPERATION_REUSED\";\n  message: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalSource = {\n  id: string;\n  version: string;\n  confidenceBps: number;\n};\n\nexport type CreateWorkspaceInstructionPolicyOnboardingProposalRequest =\n  WorkspaceInstructionPolicyTarget & {\n    operationId?: string;\n    content: string;\n    sourceId: string;\n    sourceVersion: string;\n    confidenceBps: number;\n    expectedCurrentRevisionId: string | null;\n    expectedActivationVersion: number;\n  };\n\nexport type WorkspaceInstructionPolicyOnboardingProposal = WorkspaceInstructionPolicyTarget & {\n  id: string;\n  operationId: string;\n  accountId: string;\n  workspaceId: string;\n  source: WorkspaceInstructionPolicyOnboardingProposalSource;\n  baseline: WorkspaceInstructionPolicyHead | null;\n  draft: WorkspaceInstructionPolicyRevision;\n  status: \"proposed\";\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListOptions = {\n  limit?: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalListResponse = {\n  proposals: WorkspaceInstructionPolicyOnboardingProposal[];\n  truncated: boolean;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalContentErrorResponse = {\n  code:\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_EMPTY\"\n    | \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_OVERSIZED\";\n  message: string;\n  maxChars: number;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalStaleResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_STALE\";\n  message: string;\n  currentHead: WorkspaceInstructionPolicyHead | null;\n};\n\nexport type WorkspaceInstructionPolicyOnboardingProposalConflictResponse = {\n  code: \"WORKSPACE_INSTRUCTION_POLICY_ONBOARDING_PROPOSAL_CONFLICT\";\n  message: string;\n  existingProposalId: string;\n  existingDraftRevisionId: string;\n};\n","export type PreferenceRegistryScope = \"organization\" | \"workspace\" | \"user\";\nexport type PreferenceRegistryStatus =\n  | \"proposed\"\n  | \"active\"\n  | \"inactive\"\n  | \"rejected\"\n  | \"superseded\"\n  | \"expired\";\nexport type PreferenceRegistryProvenanceSource =\n  | \"human\"\n  | \"onboarding\"\n  | \"knowledge_proposal\"\n  | \"imported_document\"\n  | \"slack\"\n  | \"meeting_transcript\"\n  | \"call_transcript\";\nexport type PreferenceRegistryTrust =\n  | \"untrusted_proposal\"\n  | \"personal\"\n  | \"workspace_managed\"\n  | \"organization_managed\";\nexport type PreferenceRegistryConflictStrategy = \"override\" | \"merge\" | \"reject\" | \"inform\";\n\nexport function normalizePreferenceRegistryStableKey(value: string): string {\n  return value.normalize(\"NFKC\").trim().toLowerCase().replace(/\\s+/gu, \"-\").replace(/-+/g, \"-\");\n}\n\nexport type PreferenceRegistryScopeTarget = {\n  scope: PreferenceRegistryScope;\n  workspaceId: string | null;\n  subjectId: string | null;\n};\n\nexport type PreferenceRegistryPrecedence = {\n  tier: PreferenceRegistryScope;\n  rank: number;\n  conflictStrategy: PreferenceRegistryConflictStrategy;\n  conflictsWith: string[];\n};\n\nexport type PreferenceRegistryRevisionSummary = {\n  id: string;\n  preferenceId: string;\n  revision: number;\n  contentHash: string;\n  title: string;\n  description: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: {\n    source: PreferenceRegistryProvenanceSource;\n    sourceId: string | null;\n    trust: PreferenceRegistryTrust;\n  };\n  expiresAt: string | null;\n  correctsRevisionId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptorProvenance = {\n  source: PreferenceRegistryProvenanceSource;\n  sourceIdHash: string | null;\n  trust: PreferenceRegistryTrust;\n};\n\nexport type PreferenceRegistryRecord = {\n  id: string;\n  accountId: string;\n  stableKey: string;\n  target: PreferenceRegistryScopeTarget;\n  status: PreferenceRegistryStatus;\n  scopeVersion: number;\n  activationVersion: number;\n  activeRevision: PreferenceRegistryRevisionSummary | null;\n  supersededByPreferenceId: string | null;\n  createdBySubjectId: string;\n  createdAt: string;\n  updatedAt: string;\n};\n\nexport type PreferenceRegistryEvent = {\n  id: string;\n  accountId: string;\n  preferenceId: string;\n  type:\n    | \"proposal_created\"\n    | \"activated\"\n    | \"corrected\"\n    | \"rejected\"\n    | \"deactivated\"\n    | \"superseded\"\n    | \"scope_changed\";\n  version: number;\n  oldRevisionId: string | null;\n  newRevisionId: string | null;\n  oldTarget: PreferenceRegistryScopeTarget | null;\n  newTarget: PreferenceRegistryScopeTarget | null;\n  relatedPreferenceId: string | null;\n  actorSubjectId: string;\n  reason: string;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryDescriptor = {\n  id: string;\n  stableKey: string;\n  title: string;\n  description: string;\n  scope: PreferenceRegistryScope;\n  activeVersion: number;\n  revisionId: string;\n  contentHash: string;\n  precedence: PreferenceRegistryPrecedence;\n  provenance: PreferenceRegistryDescriptorProvenance;\n  expiresAt: string | null;\n  retrievalHandle: string;\n};\n\nexport type PreferenceRegistrySnapshot = {\n  id: string;\n  workspaceId: string;\n  sessionId: string;\n  turnId: string;\n  attemptId: string;\n  executionGeneration: number;\n  initiatingHumanSubjectId: string;\n  descriptorHash: string;\n  descriptors: PreferenceRegistryDescriptor[];\n  truncated: boolean;\n  createdAt: string;\n};\n\nexport type PreferenceRegistryFullContent = {\n  descriptor: PreferenceRegistryDescriptor;\n  content: string;\n};\n\nexport type CreatePreferenceRegistryProposalRequest = {\n  stableKey: string;\n  scope: PreferenceRegistryScope;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  provenanceSource?: PreferenceRegistryProvenanceSource;\n  provenanceSourceId?: string | null;\n};\n\nexport type ActivatePreferenceRegistryRevisionRequest = {\n  revisionId: string;\n  expectedCurrentRevisionId: string | null;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type CorrectPreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  title: string;\n  description: string;\n  content: string;\n  precedenceRank?: number;\n  conflictStrategy?: PreferenceRegistryConflictStrategy;\n  conflictsWith?: string[];\n  expiresAt?: string | null;\n  reason: string;\n};\n\nexport type DeactivatePreferenceRegistryRequest = {\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type ChangePreferenceRegistryScopeRequest = {\n  scope: PreferenceRegistryScope;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type SupersedePreferenceRegistryRequest = {\n  replacementPreferenceId: string;\n  expectedCurrentRevisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\n\nexport type RejectPreferenceRegistryProposalRequest = {\n  revisionId: string;\n  expectedScopeVersion: number;\n  reason: string;\n};\nexport type PreferenceRegistryListOptions = {\n  scope?: PreferenceRegistryScope;\n  status?: PreferenceRegistryStatus;\n  limit?: number;\n};\nexport type PreferenceRegistryListResponse = { preferences: PreferenceRegistryRecord[] };\nexport type PreferenceRegistryDetailResponse = {\n  preference: PreferenceRegistryRecord;\n  revisions: PreferenceRegistryRevisionSummary[];\n  events: PreferenceRegistryEvent[];\n};\nexport type PreferenceRegistryMutationResponse = {\n  preference: PreferenceRegistryRecord;\n  event: PreferenceRegistryEvent;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAaO,IAAMA,kBAAN,cAA6B,eAAmB;AAAA,EACrD,MAAM,uBACJ,aACA,UAAwC,CAAC,GACD;AACxC,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,QAAQ,UAAU,OAAW,OAAM,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AACzE,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,UAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACzD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,uBAAuB,MAAM;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,aACA,YAC0C;AAC1C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,WAC2C;AAC3C,UAAM,QAAQ,YAAY,cAAc,mBAAmB,SAAS,CAAC,KAAK;AAC1E,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,IACrG;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,0BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;;;AClEO,SAAS,eAAe,OAA6B;AAC1D,SAAO,OAAO,MAAM,QAAQ;AAAA,SAAY,MAAM,IAAI;AAAA,QAAW,KAAK,UAAU,KAAK,CAAC;AAAA;AAAA;AACpF;AAqBO,SAAS,yBACd,QACA,UAA8B,CAAC,GACH;AAC5B,QAAM,UAAU,IAAI,YAAY;AAChC,QAAM,WAAW,OAAO,OAAO,aAAa,EAAE;AAC9C,MAAI;AACJ,MAAI,YAAY;AAEhB,QAAM,gBAAgB,MAAY;AAChC,QAAI,cAAc,QAAW;AAC3B,oBAAc,SAAS;AACvB,kBAAY;AAAA,IACd;AAAA,EACF;AAEA,SAAO,IAAI,eAA2B;AAAA,IACpC,OAAO,CAAC,eAAe;AACrB,UAAI,QAAQ,gBAAgB,QAAW;AACrC,oBAAY,YAAY,MAAM;AAC5B,cAAI;AACF,uBAAW,QAAQ,QAAQ,OAAO,YAAY,CAAC;AAAA,UACjD,QAAQ;AACN,0BAAc;AAAA,UAChB;AAAA,QACF,GAAG,QAAQ,WAAW;AAAA,MACxB;AAAA,IACF;AAAA,IACA,MAAM,OAAO,eAAe;AAC1B,UAAI;AACJ,UAAI;AACF,iBAAS,MAAM,SAAS,KAAK;AAAA,MAC/B,SAAS,OAAO;AACd,sBAAc;AACd,cAAM;AAAA,MACR;AACA,UAAI,WAAW;AACb;AAAA,MACF;AACA,UAAI,OAAO,MAAM;AACf,sBAAc;AACd,mBAAW,MAAM;AACjB;AAAA,MACF;AACA,iBAAW,QAAQ,QAAQ,OAAO,eAAe,OAAO,KAAK,CAAC,CAAC;AAAA,IACjE;AAAA,IACA,QAAQ,MAAM;AACZ,kBAAY;AACZ,oBAAc;AACd,cAAQ,WAAW;AAGnB,WAAK,QAAQ,QAAQ,SAAS,SAAS,MAAS,CAAC,EAAE;AAAA,QACjD,MAAM;AAAA,QACN,MAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF,CAAC;AACH;AAGO,SAAS,2BACd,QACA,UAA8B,CAAC,GACrB;AACV,SAAO,IAAI,SAAS,yBAAyB,QAAQ,OAAO,GAAG;AAAA,IAC7D,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,iBAAiB;AAAA,MACjB,YAAY;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAOO,SAAS,0BAA0B,SAA0B;AAClE,QAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,QAAM,MAAM,IAAI,aAAa,IAAI,OAAO,KAAK,QAAQ,QAAQ,IAAI,eAAe;AAChF,QAAM,SAAS,QAAQ,OAAO,IAAI,OAAO,GAAG;AAC5C,SAAO,OAAO,SAAS,MAAM,KAAK,SAAS,IAAI,KAAK,MAAM,MAAM,IAAI;AACtE;AAsBO,SAAS,wBACd,QACA,aACA,WACA,UAA0C,CAAC,GACjC;AACV,QAAM,EAAE,OAAO,aAAa,QAAQ,GAAG,cAAc,IAAI;AACzD,QAAM,WAAW,IAAI,gBAAgB;AACrC,MAAI,QAAQ,SAAS;AACnB,aAAS,MAAM;AAAA,EACjB,OAAO;AACL,YAAQ,iBAAiB,SAAS,MAAM,SAAS,MAAM,GAAG,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1E;AACA,QAAM,gBAAgB,iBAAiB,UAAU,0BAA0B,KAAK,IAAK,SAAS;AAC9F,QAAM,SAAS,OAAO,aAAa,aAAa,WAAW;AAAA,IACzD,GAAG;AAAA,IACH,OAAO;AAAA,IACP,QAAQ,SAAS;AAAA,EACnB,CAAC;AACD,SAAO,2BAA2B,QAAQ;AAAA,IACxC,GAAI,gBAAgB,SAAY,EAAE,YAAY,IAAI,CAAC;AAAA,IACnD,UAAU,MAAM,SAAS,MAAM;AAAA,EACjC,CAAC;AACH;;;AC5JA,IAAM,uBAAuB;AAC7B,IAAM,uBAAuB,oBAAI,IAAI,CAAC,UAAU,WAAW,WAAW,MAAM,OAAO,CAAC;AAG7E,SAAS,mBAAmB,QAAsC;AACvE,QAAM,aAAa,eAAe,QAAQ,GAAG,oBAAI,IAAY,CAAC;AAC9D,SAAO;AAAA,IACL,KAAK;AAAA,IACL,OAAO,WAAW;AAAA,IAClB,MAAM,WAAW;AAAA,IACjB,SAAS,WAAW;AAAA,EACtB;AACF;AAIA,SAAS,eAAe,OAAgB,OAAe,WAAyC;AAC9F,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO,EAAE,OAAO,MAAM,IAAI,SAAS,MAAM;AAAA,EAC3C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,cAAc,OAAO,OAAO,SAAS;AAAA,EAC9C;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,EAAE,OAAO,MAAM,OAAO,KAAK,GAAG,SAAS,MAAM;AAAA,EACtD;AACA,MAAI,SAAS,wBAAwB,UAAU,IAAI,KAAK,GAAG;AACzD,WAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,EAC7D;AAEA,YAAU,IAAI,KAAK;AACnB,MAAI;AACF,QAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,aAAO,EAAE,OAAO,MAAM,cAAc,KAAK,GAAG,SAAS,MAAM;AAAA,IAC7D;AAEA,UAAM,SAAS;AACf,UAAM,gBAAgB,OAAO,YAAY;AAEzC,QAAI,OAAO,SAAS,UAAU,OAAO,OAAO,SAAS,UAAU;AAC7D,YAAM,aAAa,cAAc,OAAO,MAAM,QAAQ,GAAG,SAAS;AAClE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,OAAO;AAAA,QACb,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,uBAAuB,QAAQ;AACjC,YAAM,aAAa,eAAe,OAAO,mBAAmB,QAAQ,GAAG,SAAS;AAChF,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,aAAa,OAAO,OAAO,KAAK,WAAW;AAAA,QACjD,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,QAAI,aAAa,OAAO,OAAO,GAAG;AAChC,YAAM,OAAO,aAAa,OAAO,OAAO;AACxC,UAAI,SAAS,MAAM;AACjB,cAAM,aAAa,cAAc,MAAM,QAAQ,GAAG,SAAS;AAC3D,eAAO;AAAA,UACL,OAAO,WAAW;AAAA,UAClB;AAAA,UACA,SAAS,iBAAiB,WAAW;AAAA,QACvC;AAAA,MACF;AACA,aAAO;AAAA,QACL;AAAA,QACA,MAAM,cAAc,KAAK;AAAA,QACzB,SAAS;AAAA,MACX;AAAA,IACF;AAEA,QAAI,iBAAiB,MAAM,GAAG;AAC5B,YAAM,aAAa,eAAe,OAAO,QAAQ,QAAQ,GAAG,SAAS;AACrE,aAAO;AAAA,QACL,OAAO,WAAW;AAAA,QAClB,MAAM,WAAW;AAAA,QACjB,SAAS,iBAAiB,WAAW;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,cAAc,KAAK;AAAA,MACzB,SAAS;AAAA,IACX;AAAA,EACF,UAAE;AACA,cAAU,OAAO,KAAK;AAAA,EACxB;AACF;AAEA,SAAS,cAAc,MAAc,OAAe,WAAyC;AAC3F,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,UAAM,aAAa,eAAe,QAAQ,QAAQ,GAAG,SAAS;AAC9D,WAAO;AAAA,MACL,OAAO,WAAW;AAAA,MAClB;AAAA,MACA,SAAS,WAAW;AAAA,IACtB;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,OAAO,MAAM,MAAM,SAAS,MAAM;AAAA,EAC7C;AACF;AAEA,SAAS,aAAa,OAA6D;AACjF,SACE,MAAM,QAAQ,KAAK,KACnB,MAAM;AAAA,IACJ,CAAC,SACC,SAAS,QACT,OAAO,SAAS,YAChB,OAAQ,KAA4B,SAAS;AAAA,EACjD;AAEJ;AAEA,SAAS,aAAa,OAA+B;AACnD,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AACA,aAAW,QAAQ,OAAO;AACxB,QACE,SAAS,QACT,OAAO,SAAS,YACf,KAA4B,SAAS,UACtC,OAAQ,KAA4B,SAAS,UAC7C;AACA,aAAQ,KAA0B;AAAA,IACpC;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,iBAAiB,QAA0C;AAClE,SAAO,YAAY,UAAU,OAAO,KAAK,MAAM,EAAE,MAAM,CAAC,QAAQ,qBAAqB,IAAI,GAAG,CAAC;AAC/F;AAEA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,UAAU,KAAK,KAAK;AAAA,EAClC,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;;;ACtIO,SAAS,iBAAiB,KAAmD;AAClF,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AAIA,MAAI,uBAAuB,KAAK,EAAE,QAAQ,GAAG;AAC3C,MAAE,WAAW,EAAE,SAAS,QAAQ,wBAAwB,aAAa;AACrE,MAAE,SAAS;AACX,MAAE,OAAO;AAAA,EACX;AACA,SAAO,EAAE,SAAS;AACpB;AA2DO,SAAS,iBACd,SACA,IACwB;AACxB,UAAQ,GAAG,MAAM;AAAA,IACf,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,YAAY,cAAc,aAAa;AAAA,IAChD,KAAK;AAEH,aAAO,YAAY,UAAU,UAAU;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAgBO,SAAS,iBACd,KACA,SACA,YACU;AACV,MAAI,QAAQ,aAAa,YAAY;AACnC,WAAO;AAAA,EACT;AACA,SAAO,EAAE,GAAG,KAAK,KAAK,QAAQ,KAAK,OAAO,QAAQ,OAAO,WAAW,QAAQ,UAAU;AACxF;;;AChIO,SAAS,kBAAkB,KAA8C;AAC9E,MAAI,CAAC,IAAI,KAAK;AACZ,UAAM,IAAI,MAAM,0DAA0D;AAAA,EAC5E;AACA,QAAM,IAAI,IAAI,IAAI,IAAI,GAAG;AAEzB,MAAI,EAAE,aAAa,UAAU;AAC3B,MAAE,WAAW;AAAA,EACf,WAAW,EAAE,aAAa,SAAS;AACjC,MAAE,WAAW;AAAA,EACf;AACA,SAAO,EAAE,SAAS;AACpB;AAQO,IAAM,mBAAmB;AAGzB,IAAM,oBAAoB;AAAA;AAAA,EAE/B,OAAO;AAAA;AAAA,EAEP,QAAQ;AAAA;AAAA,EAER,OAAO;AAAA;AAAA,EAEP,QAAQ;AACV;AAGO,IAAM,oBAAoB;AAAA;AAAA,EAE/B,QAAQ;AAAA;AAAA,EAER,kBAAkB;AAAA;AAAA,EAElB,iBAAiB;AACnB;AAUO,SAAS,cAAc,MAAoD;AAChF,QAAM,QAAgE,EAAE,WAAW,GAAG;AACtF,MAAI,MAAM,WAAW,KAAK,UAAU,EAAG,OAAM,UAAU,KAAK;AAC5D,MAAI,MAAM,QAAQ,KAAK,OAAO,EAAG,OAAM,OAAO,KAAK;AACnD,SAAO,KAAK,UAAU,KAAK;AAC7B;AAGO,SAAS,eAAe,MAAsB;AACnD,SAAO,kBAAkB,QAAQ;AACnC;AAGO,SAAS,gBAAgB,SAAiB,MAAsB;AACrE,SAAO,kBAAkB,SAAS,KAAK,UAAU,EAAE,SAAS,KAAK,CAAC;AACpE;;;AC1FO,IAAM,iDAAiD;AAevD,SAAS,2CAA2C,OAAuB;AAChF,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;;;ACMO,SAAS,qCAAqC,OAAuB;AAC1E,SAAO,MAAM,UAAU,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,SAAS,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC9F;","names":["OpenGeniClient"]}

package/dist/realtime.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Public, provider-neutral realtime browser SDK.
+ *
+ * Import this subpath lazily in browser applications. The base `@opengeni/sdk`
+ * entry remains free of eager realtime transport initialization.
+ */
+import { createCodexRealtimeController, hasStoredSessionRealtimeOwnerProof, sessionRealtimeOwnerStorageKey, sessionRealtimeOwnerStorageNamespace, type CodexRealtimeController, type CodexRealtimeControllerClient, type CodexRealtimeControllerSnapshot, type CodexRealtimeControllerStatus, type CodexRealtimeDiagnostic, type CodexRealtimeDiagnosticKind, type CodexRealtimeMicrophoneState, type CodexRealtimeOwnerStorage, type CreateCodexRealtimeControllerOptions, type RealtimeControllerTransportStarter } from "./codex-realtime-controller";
+import { createGatewayRealtimeTransportStarter } from "./gateway-realtime-transport";
+import type { SessionRealtimeModel, WorkspaceRealtimeModelCatalogResponse } from "./types";
+/** Exact backend-facing methods required by the batteries-included realtime SDK. */
+export type SessionRealtimeClientLike = CodexRealtimeControllerClient & {
+    getWorkspaceRealtimeModelCatalog(workspaceId: string): Promise<WorkspaceRealtimeModelCatalogResponse>;
+};
+export type SessionRealtimeTransportKind = "codex" | "gateway";
+/** Provider-neutral names for the existing, battle-tested controller projection. */
+export type SessionRealtimeController = CodexRealtimeController;
+export type SessionRealtimeControllerSnapshot = CodexRealtimeControllerSnapshot;
+export type SessionRealtimeControllerStatus = CodexRealtimeControllerStatus;
+export type SessionRealtimeDiagnostic = CodexRealtimeDiagnostic;
+export type SessionRealtimeDiagnosticKind = CodexRealtimeDiagnosticKind;
+export type SessionRealtimeMicrophoneState = CodexRealtimeMicrophoneState;
+export type SessionRealtimeOwnerStorage = CodexRealtimeOwnerStorage;
+export type CreateSessionRealtimeControllerOptions = Omit<CreateCodexRealtimeControllerOptions, "client" | "model" | "ownerStorageNamespace" | "startTransport"> & {
+    client: CodexRealtimeControllerClient;
+    model: SessionRealtimeModel;
+};
+/** Select the existing transport without exposing provider mechanics to hosts. */
+export declare function sessionRealtimeTransportKind(model: SessionRealtimeModel): SessionRealtimeTransportKind;
+/**
+ * Compose the exact current controller with its existing Codex Live or AI
+ * Gateway transport. Wire, ledger, delegation, recovery, and lifecycle
+ * semantics remain owned by the existing implementations below this facade.
+ */
+export declare function createSessionRealtimeController(options: CreateSessionRealtimeControllerOptions): SessionRealtimeController;
+export { createCodexRealtimeController, createGatewayRealtimeTransportStarter, hasStoredSessionRealtimeOwnerProof, sessionRealtimeOwnerStorageKey, sessionRealtimeOwnerStorageNamespace, };
+export type { CodexRealtimeController, CodexRealtimeControllerClient, CodexRealtimeControllerSnapshot, CodexRealtimeControllerStatus, CodexRealtimeDiagnostic, CodexRealtimeDiagnosticKind, CodexRealtimeMicrophoneState, CodexRealtimeOwnerStorage, CreateCodexRealtimeControllerOptions, RealtimeControllerTransportStarter, };
+export { CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS, projectSessionRealtimeLifecycle, } from "./codex-realtime-controller";
+export type { SessionRealtimeLifecycleProjection } from "./codex-realtime-lifecycle";
+export { CodexRealtimeMicrophoneError, acquireCodexRealtimeMicrophone, codexRealtimeMicrophoneHealthy, startCodexRealtimeWebrtc, } from "./codex-realtime";
+export type { AcquireCodexRealtimeMicrophoneOptions, CodexRealtimeAudibleOutputState, CodexRealtimeConnectionHealth, CodexRealtimeMicrophoneErrorCode, CodexRealtimeNegotiator, CodexRealtimeWebrtcSession, StartCodexRealtimeWebrtcOptions, } from "./codex-realtime";
+export { CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES, CODEX_REALTIME_V3_MAX_EVENT_BYTES, CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES, CODEX_REALTIME_V3_MAX_TEXT_BYTES, CODEX_REALTIME_V3_PENDING_MAX_BYTES, CODEX_REALTIME_V3_PENDING_MAX_ENTRIES, CODEX_REALTIME_V3_SYNC_MAX_ENTRIES, contextAppendChunks, createCodexRealtimeV3Bridge, encodeCodexRealtimeV3DelegationContextAppend, encodeCodexRealtimeV3SessionContextAppend, parseCodexRealtimeV3Event, } from "./codex-realtime-v3";
+export type { CodexRealtimeV3Bridge, CodexRealtimeV3BridgeFatal, CodexRealtimeV3BridgeOptions, CodexRealtimeV3BridgeSnapshot, CodexRealtimeV3ContextAppendChannel, CodexRealtimeV3DelegationContextAppend, CodexRealtimeV3Event, CodexRealtimeV3ParseFailure, CodexRealtimeV3ParseResult, CodexRealtimeV3SessionContextAppend, } from "./codex-realtime-v3";
+export { CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT, CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS, } from "./codex-realtime-v3-wire";
+export type { CodexRealtimeInitialItem } from "./codex-realtime-v3-wire";
+export type { ActivateCodexRealtimeConnectionRequest, BeginSessionRealtimeRequest, CodexRealtimeVoice, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, CodexRealtimeWebrtcVersion, EndSessionRealtimeRequest, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, GatewayRealtimeInitialItem, RenewSessionRealtimeRequest, SessionRealtimeEndReason, SessionRealtimeLedgerEntry, SessionRealtimeMode, SessionRealtimeModel, SessionRealtimeMutationResponse, SessionRealtimeState, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse, WorkspaceRealtimeModelCatalogItem, WorkspaceRealtimeModelCatalogResponse, } from "./types";

package/dist/realtime.js

@@ -0,0 +1,73 @@
+import {
+  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,
+  CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,
+  CODEX_REALTIME_V3_MAX_EVENT_BYTES,
+  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,
+  CODEX_REALTIME_V3_MAX_TEXT_BYTES,
+  CODEX_REALTIME_V3_PENDING_MAX_BYTES,
+  CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,
+  CODEX_REALTIME_V3_SYNC_MAX_ENTRIES,
+  CodexRealtimeMicrophoneError,
+  acquireCodexRealtimeMicrophone,
+  codexRealtimeMicrophoneHealthy,
+  contextAppendChunks,
+  createCodexRealtimeController,
+  createCodexRealtimeV3Bridge,
+  encodeCodexRealtimeV3DelegationContextAppend,
+  encodeCodexRealtimeV3SessionContextAppend,
+  hasStoredSessionRealtimeOwnerProof,
+  parseCodexRealtimeV3Event,
+  projectSessionRealtimeLifecycle,
+  sessionRealtimeOwnerStorageKey,
+  sessionRealtimeOwnerStorageNamespace,
+  startCodexRealtimeWebrtc
+} from "./chunk-XBBPYTI5.js";
+import "./chunk-OINSI33U.js";
+import {
+  createGatewayRealtimeTransportStarter
+} from "./chunk-DXDL7EEW.js";
+
+// src/realtime.ts
+function sessionRealtimeTransportKind(model) {
+  return model === "gpt-live-1-boulder-alpha" ? "codex" : "gateway";
+}
+function createSessionRealtimeController(options) {
+  const transport = sessionRealtimeTransportKind(options.model);
+  return createCodexRealtimeController({
+    ...options,
+    ownerStorageNamespace: sessionRealtimeOwnerStorageNamespace(options.model),
+    ...transport === "gateway" ? { startTransport: createGatewayRealtimeTransportStarter() } : {}
+  });
+}
+export {
+  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,
+  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,
+  CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,
+  CODEX_REALTIME_V3_MAX_EVENT_BYTES,
+  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,
+  CODEX_REALTIME_V3_MAX_TEXT_BYTES,
+  CODEX_REALTIME_V3_PENDING_MAX_BYTES,
+  CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,
+  CODEX_REALTIME_V3_SYNC_MAX_ENTRIES,
+  CodexRealtimeMicrophoneError,
+  acquireCodexRealtimeMicrophone,
+  codexRealtimeMicrophoneHealthy,
+  contextAppendChunks,
+  createCodexRealtimeController,
+  createCodexRealtimeV3Bridge,
+  createGatewayRealtimeTransportStarter,
+  createSessionRealtimeController,
+  encodeCodexRealtimeV3DelegationContextAppend,
+  encodeCodexRealtimeV3SessionContextAppend,
+  hasStoredSessionRealtimeOwnerProof,
+  parseCodexRealtimeV3Event,
+  projectSessionRealtimeLifecycle,
+  sessionRealtimeOwnerStorageKey,
+  sessionRealtimeOwnerStorageNamespace,
+  sessionRealtimeTransportKind,
+  startCodexRealtimeWebrtc
+};
+//# sourceMappingURL=realtime.js.map

package/dist/realtime.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/realtime.ts"],"sourcesContent":["/**\n * Public, provider-neutral realtime browser SDK.\n *\n * Import this subpath lazily in browser applications. The base `@opengeni/sdk`\n * entry remains free of eager realtime transport initialization.\n */\nimport {\n  createCodexRealtimeController,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n  type CodexRealtimeController,\n  type CodexRealtimeControllerClient,\n  type CodexRealtimeControllerSnapshot,\n  type CodexRealtimeControllerStatus,\n  type CodexRealtimeDiagnostic,\n  type CodexRealtimeDiagnosticKind,\n  type CodexRealtimeMicrophoneState,\n  type CodexRealtimeOwnerStorage,\n  type CreateCodexRealtimeControllerOptions,\n  type RealtimeControllerTransportStarter,\n} from \"./codex-realtime-controller\";\nimport { createGatewayRealtimeTransportStarter } from \"./gateway-realtime-transport\";\nimport type { SessionRealtimeModel, WorkspaceRealtimeModelCatalogResponse } from \"./types\";\n\n/** Exact backend-facing methods required by the batteries-included realtime SDK. */\nexport type SessionRealtimeClientLike = CodexRealtimeControllerClient & {\n  getWorkspaceRealtimeModelCatalog(\n    workspaceId: string,\n  ): Promise<WorkspaceRealtimeModelCatalogResponse>;\n};\n\nexport type SessionRealtimeTransportKind = \"codex\" | \"gateway\";\n\n/** Provider-neutral names for the existing, battle-tested controller projection. */\nexport type SessionRealtimeController = CodexRealtimeController;\nexport type SessionRealtimeControllerSnapshot = CodexRealtimeControllerSnapshot;\nexport type SessionRealtimeControllerStatus = CodexRealtimeControllerStatus;\nexport type SessionRealtimeDiagnostic = CodexRealtimeDiagnostic;\nexport type SessionRealtimeDiagnosticKind = CodexRealtimeDiagnosticKind;\nexport type SessionRealtimeMicrophoneState = CodexRealtimeMicrophoneState;\nexport type SessionRealtimeOwnerStorage = CodexRealtimeOwnerStorage;\n\nexport type CreateSessionRealtimeControllerOptions = Omit<\n  CreateCodexRealtimeControllerOptions,\n  \"client\" | \"model\" | \"ownerStorageNamespace\" | \"startTransport\"\n> & {\n  client: CodexRealtimeControllerClient;\n  model: SessionRealtimeModel;\n};\n\n/** Select the existing transport without exposing provider mechanics to hosts. */\nexport function sessionRealtimeTransportKind(\n  model: SessionRealtimeModel,\n): SessionRealtimeTransportKind {\n  return model === \"gpt-live-1-boulder-alpha\" ? \"codex\" : \"gateway\";\n}\n\n/**\n * Compose the exact current controller with its existing Codex Live or AI\n * Gateway transport. Wire, ledger, delegation, recovery, and lifecycle\n * semantics remain owned by the existing implementations below this facade.\n */\nexport function createSessionRealtimeController(\n  options: CreateSessionRealtimeControllerOptions,\n): SessionRealtimeController {\n  const transport = sessionRealtimeTransportKind(options.model);\n  return createCodexRealtimeController({\n    ...options,\n    ownerStorageNamespace: sessionRealtimeOwnerStorageNamespace(options.model),\n    ...(transport === \"gateway\" ? { startTransport: createGatewayRealtimeTransportStarter() } : {}),\n  });\n}\n\nexport {\n  createCodexRealtimeController,\n  createGatewayRealtimeTransportStarter,\n  hasStoredSessionRealtimeOwnerProof,\n  sessionRealtimeOwnerStorageKey,\n  sessionRealtimeOwnerStorageNamespace,\n};\nexport type {\n  CodexRealtimeController,\n  CodexRealtimeControllerClient,\n  CodexRealtimeControllerSnapshot,\n  CodexRealtimeControllerStatus,\n  CodexRealtimeDiagnostic,\n  CodexRealtimeDiagnosticKind,\n  CodexRealtimeMicrophoneState,\n  CodexRealtimeOwnerStorage,\n  CreateCodexRealtimeControllerOptions,\n  RealtimeControllerTransportStarter,\n};\n\nexport {\n  CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS,\n  projectSessionRealtimeLifecycle,\n} from \"./codex-realtime-controller\";\nexport type { SessionRealtimeLifecycleProjection } from \"./codex-realtime-lifecycle\";\n\nexport {\n  CodexRealtimeMicrophoneError,\n  acquireCodexRealtimeMicrophone,\n  codexRealtimeMicrophoneHealthy,\n  startCodexRealtimeWebrtc,\n} from \"./codex-realtime\";\nexport type {\n  AcquireCodexRealtimeMicrophoneOptions,\n  CodexRealtimeAudibleOutputState,\n  CodexRealtimeConnectionHealth,\n  CodexRealtimeMicrophoneErrorCode,\n  CodexRealtimeNegotiator,\n  CodexRealtimeWebrtcSession,\n  StartCodexRealtimeWebrtcOptions,\n} from \"./codex-realtime\";\n\nexport {\n  CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES,\n  CODEX_REALTIME_V3_MAX_EVENT_BYTES,\n  CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES,\n  CODEX_REALTIME_V3_MAX_TEXT_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_BYTES,\n  CODEX_REALTIME_V3_PENDING_MAX_ENTRIES,\n  CODEX_REALTIME_V3_SYNC_MAX_ENTRIES,\n  contextAppendChunks,\n  createCodexRealtimeV3Bridge,\n  encodeCodexRealtimeV3DelegationContextAppend,\n  encodeCodexRealtimeV3SessionContextAppend,\n  parseCodexRealtimeV3Event,\n} from \"./codex-realtime-v3\";\nexport type {\n  CodexRealtimeV3Bridge,\n  CodexRealtimeV3BridgeFatal,\n  CodexRealtimeV3BridgeOptions,\n  CodexRealtimeV3BridgeSnapshot,\n  CodexRealtimeV3ContextAppendChannel,\n  CodexRealtimeV3DelegationContextAppend,\n  CodexRealtimeV3Event,\n  CodexRealtimeV3ParseFailure,\n  CodexRealtimeV3ParseResult,\n  CodexRealtimeV3SessionContextAppend,\n} from \"./codex-realtime-v3\";\n\nexport {\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_COUNT,\n  CODEX_REALTIME_INITIAL_ITEMS_MAX_TOKENS,\n} from \"./codex-realtime-v3-wire\";\nexport type { CodexRealtimeInitialItem } from \"./codex-realtime-v3-wire\";\n\nexport type {\n  ActivateCodexRealtimeConnectionRequest,\n  BeginSessionRealtimeRequest,\n  CodexRealtimeVoice,\n  CodexRealtimeWebrtcRequest,\n  CodexRealtimeWebrtcResponse,\n  CodexRealtimeWebrtcVersion,\n  EndSessionRealtimeRequest,\n  GatewayRealtimeConnectRequest,\n  GatewayRealtimeConnectResponse,\n  GatewayRealtimeInitialItem,\n  RenewSessionRealtimeRequest,\n  SessionRealtimeEndReason,\n  SessionRealtimeLedgerEntry,\n  SessionRealtimeMode,\n  SessionRealtimeModel,\n  SessionRealtimeMutationResponse,\n  SessionRealtimeState,\n  SyncSessionRealtimeLedgerRequest,\n  SyncSessionRealtimeLedgerResponse,\n  WorkspaceRealtimeModelCatalogItem,\n  WorkspaceRealtimeModelCatalogResponse,\n} from \"./types\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoDO,SAAS,6BACd,OAC8B;AAC9B,SAAO,UAAU,6BAA6B,UAAU;AAC1D;AAOO,SAAS,gCACd,SAC2B;AAC3B,QAAM,YAAY,6BAA6B,QAAQ,KAAK;AAC5D,SAAO,8BAA8B;AAAA,IACnC,GAAG;AAAA,IACH,uBAAuB,qCAAqC,QAAQ,KAAK;AAAA,IACzE,GAAI,cAAc,YAAY,EAAE,gBAAgB,sCAAsC,EAAE,IAAI,CAAC;AAAA,EAC/F,CAAC;AACH;","names":[]}

package/dist/types.d.ts

@@ -318,10 +318,12 @@ export type RepositoryResourceRef = {
     githubInstallationId?: number | undefined;
     githubRepositoryId?: number | undefined;
 };
+/** Value mirror of `@opengeni/contracts`; parity-tested without adding an SDK runtime dependency. */
+export declare const DEFAULT_FILE_RESOURCE_MOUNT_ROOT: ".opengeni/files";
 export type FileResourceRef = {
     kind: "file";
     fileId: string;
-    /** Optional workspace-relative override; defaults to `files/<file-id>`. */
+    /** Optional workspace-relative override; defaults to `.opengeni/files/<file-id>`. */
     mountPath?: string | undefined;
 };
 export type ResourceRef = RepositoryResourceRef | FileResourceRef;
@@ -470,6 +472,16 @@ export type OpenGeniSlackBotInstallStart = {
 export type GoogleDriveTargetScope = "user" | "workspace" | "organization";
 export type GoogleDriveSyncCadence = "manual" | "hourly" | "daily";
 export type GoogleDriveReadPolicy = "allow" | "ask" | "block";
+export type GoogleDriveConnectionLifecycleState = "active" | "paused" | "token_revoked" | "app_removed" | "disconnected" | "reconnect_required" | "reconsent_required";
+export type GoogleDriveConnectionLifecycle = {
+    state: Exclude<GoogleDriveConnectionLifecycleState, "app_removed">;
+    recoverable: true;
+    observedAt: string;
+} | {
+    state: "app_removed";
+    recoverable: false;
+    observedAt: string;
+};
 export type GoogleDriveSelectedSource = {
     id: string;
     name: string;
@@ -488,6 +500,7 @@ export type GoogleDriveConnectionMetadata = {
     googleDisplayName: string | null;
     verifiedAt: string;
     accessMode: "metadata_readonly" | "readonly";
+    lifecycle?: GoogleDriveConnectionLifecycle | undefined;
     selectedSources?: GoogleDriveSelectedSource[] | undefined;
     /** @deprecated Read selectedSources; retained while existing connections migrate. */
     selectedSource?: GoogleDriveSelectedSource | null | undefined;
@@ -500,6 +513,14 @@ export type GoogleDriveOAuthStartResponse = {
     authorizationUrl: string;
     expiresAt: string;
 };
+export type GoogleDriveLifecycleActionRequest = {
+    action: "pause" | "resume";
+    expectedVersion: number;
+};
+export type GoogleDriveDisconnectRequest = {
+    expectedVersion: number;
+    idempotencyKey: string;
+};
 export type GoogleDriveBrowseItem = {
     id: string;
     name: string;
@@ -763,8 +784,6 @@ export type HumanInputQuestion = {
     required: boolean;
     allowOther: boolean;
     validation?: {
-        minLength?: number | null | undefined;
-        maxLength?: number | null | undefined;
         minSelections?: number | null | undefined;
         maxSelections?: number | null | undefined;
     } | null | undefined;
@@ -1547,6 +1566,7 @@ export type ModelCapabilitiesV1 = {
         codeExecution: ModelCapabilityStateV1;
     };
     inputModalities: Array<"text" | "image" | "audio">;
+    inputFileMediaTypes?: string[] | undefined;
     outputModalities: Array<"text" | "image" | "audio">;
     transports: {
         sse: ModelCapabilityStateV1;
@@ -2604,6 +2624,7 @@ export type UploadFileInput = {
 export type DocumentStatus = "queued" | "indexing" | "ready" | "failed";
 export type KnowledgeSourceKind = "manual_upload" | "meeting_transcript" | "repository" | "email" | "chat" | "document" | "web" | "other";
 export type DocumentSearchMode = "hybrid" | "vector" | "keyword";
+export type DocumentAuthorityKind = "organization" | "workspace" | "personal";
 export type DocumentVisibility = "workspace" | "private";
 export type DocumentCurationStatus = "none" | "pending" | "suggested" | "auto_filed" | "failed";
 export type DocumentCuration = {
@@ -2641,6 +2662,9 @@ export type Document = {
     sourceUpdatedAt: string | null;
     sourceVersion: string | null;
     aclTags: string[];
+    authorityKind: DocumentAuthorityKind;
+    authorityWorkspaceId: string | null;
+    authoritySubjectId: string | null;
     visibility: DocumentVisibility;
     createdBy: string | null;
     agentAccess: boolean;
@@ -2674,6 +2698,9 @@ export type DocumentSearchResult = {
     sourceUpdatedAt: string | null;
     sourceVersion: string | null;
     aclTags: string[];
+    authorityKind: DocumentAuthorityKind;
+    authorityWorkspaceId: string | null;
+    authoritySubjectId: string | null;
 };
 export type CreateDocumentBaseRequest = {
     name: string;
@@ -2691,6 +2718,7 @@ export type AddDocumentRequest = {
     sourceUpdatedAt?: string | undefined;
     sourceVersion?: string | undefined;
     aclTags?: string[] | undefined;
+    authorityKind?: DocumentAuthorityKind | undefined;
     visibility?: DocumentVisibility | undefined;
     agentAccess?: boolean | undefined;
 };
@@ -2699,6 +2727,7 @@ export type CreateKnowledgeDropRequest = {
     fileId?: string | undefined;
     filename?: string | undefined;
     title?: string | undefined;
+    authorityKind?: DocumentAuthorityKind | undefined;
     visibility?: DocumentVisibility | undefined;
     agentAccess?: boolean | undefined;
 };