@opengeni/sdk 0.46.0 → 0.52.1

package/README.md

@@ -87,6 +87,58 @@ through a tenant-scoped, same-origin proxy. The SDK does not move persistence,
 prompt construction, context processing, delegation, or provider credentials
 out of `apps/api`, `apps/worker`, or `packages/db`.
 
+## Editable artifact sync (`@opengeni/sdk/editable-artifacts`)
+
+Editable-artifact storage, sync, and Worker clients live behind an isolated
+subpath; importing the ordinary SDK never loads them. Browser hosts should
+bundle the dedicated module-Worker entry and pass its URL plus the exact,
+version-matched kernel assets to the client:
+
+```ts
+import { OpenGeniClient } from "@opengeni/sdk/artifacts";
+import workerUrl from "@opengeni/sdk/editable-artifacts/worker?worker&url";
+import {
+  createBrowserEditableArtifactSession,
+} from "@opengeni/sdk/editable-artifacts";
+
+const client = new OpenGeniClient({ baseUrl: "https://api.example.com" });
+const artifact = await client.getEditableArtifact(workspaceId, artifactId, {
+  replicaId,
+});
+const kernels = {
+  spreadsheet: () => import("@opengeni/artifact-kernel-wasm-spreadsheet"),
+  document: () => import("@opengeni/artifact-kernel-wasm-document"),
+  presentation: () => import("@opengeni/artifact-kernel-wasm-presentation"),
+} as const;
+const { editableArtifactKernelRuntime } = await kernels[artifact.modality]();
+const session = createBrowserEditableArtifactSession({
+  baseUrl: "https://api.example.com",
+  workspaceId,
+  artifact,
+  storageAuthority,
+  runtime: {
+    workerUrl,
+    ...editableArtifactKernelRuntime,
+    applicationOrigin: window.location.origin,
+  },
+});
+```
+
+Each kernel package contains only one editor modality, carries a static typed
+build/protocol/model/command identity, and is reproduced from smoke-tested Rust
+outputs under separate raw and gzip budgets. The Worker verifies that identity
+against executable WASM capabilities before accepting state. A self-hosted host
+may instead serve the exact version-matched glue and WASM binary together.
+Canonical OGASC commands, OGATX intents, OGACO commits, and OGAKQ/OGAKV
+queries/projections pass directly through the kernel; there is no JavaScript
+operation mapper.
+
+The live transport mints a short-lived, one-use ticket over authenticated HTTP,
+then sends that ticket inside the first binary OGALV WebSocket frame. API keys
+and long-lived credentials are never placed in the WebSocket URL. Hosts may
+inject both `fetch` and the WebSocket factory for authenticated proxies and
+tests; negotiated frame and mutation limits are enforced before work is queued.
+
 ## Workspace artifacts
 
 Workspace artifacts are generic, immutable HTML publications. The SDK does not
@@ -362,6 +414,18 @@ const file = await client.uploadFile(workspaceId, {
 const { url } = await client.createFileDownloadUrl(workspaceId, file.id);
 ```
 
+Generated-image tool results use the same workspace file authority but expose a
+closed `generated_image` receipt. Prefer a short-lived zero-copy browser URL;
+use the bounded range method when the caller needs verified bytes:
+
+```ts
+const { url } = await client.createRetainedArtifactDownloadUrl(workspaceId, receipt.artifact);
+const { bytes } = await client.downloadRetainedArtifact(workspaceId, receipt.artifact);
+```
+
+Both methods validate the receipt first. The byte path additionally verifies
+the assembled SHA-256. See `docs/image-generation.md` in the repository.
+
 ## Connected Machines (bring-your-own-compute)
 
 A session can run on an enrolled **Connected Machine** — a user's own computer —
@@ -396,6 +460,12 @@ the enrollment methods (`mintEnrollToken`, `lookupDeviceEnrollment`,
 `approveDeviceEnrollment`, `denyDeviceEnrollment`) are covered in the
 [Connected Machines guide](../../docs/connected-machines.md).
 
+For large agent hierarchies, use `listAgentTopology` instead of collecting full
+session pages. It returns compact root, direct-child, or server-side search
+pages with opaque cursors and server-authored descendant counts. Load a child
+page only when its parent is expanded; `children.truncated` makes a lower-bound
+aggregate explicit.
+
 ## Full API coverage
 
 Every public endpoint group has typed methods:
@@ -403,20 +473,42 @@ Every public endpoint group has typed methods:
 | Group | Methods |
 | --- | --- |
 | Access + workspaces | `getAccessContext`, `listWorkspaces`, `createWorkspace`, `getWorkspace`, `updateWorkspace` |
-| Sessions + events | `createSession`, `listSessions`, `getSession`, `updateSession`, `listEvents`, `sendEvent`, `sendMessage`, `steerMessage`, `pauseSession`, `resumeSession`, `cancelSession`, `sendApprovalDecision`, `streamEvents`, `openEventStream` |
+| Sessions + events | `createSession`, `listSessions`, `listSessionPage`, `listAgentTopology`, `getSession`, `getSessionLineage`, `updateSession`, `listEvents`, `sendEvent`, `sendMessage`, `steerMessage`, `pauseSession`, `resumeSession`, `cancelSession`, `sendApprovalDecision`, `streamEvents`, `openEventStream` |
 | Machines (bring-your-own-compute) | `listMachines`, `machineMetricsSeries`, `swapActiveSandbox`, `mintEnrollToken`, `lookupDeviceEnrollment`, `approveDeviceEnrollment`, `denyDeviceEnrollment` |
 | Turn queue | `getQueue`, `moveQueueItem`, `editQueueItem`, `steerQueueItem`, `deleteQueueItem` |
 | Goal | `getGoal`, `updateGoal`, `pauseGoal`, `resumeGoal` |
 | Scheduled tasks | `createScheduledTask`, `listScheduledTasks`, `getScheduledTask`, `updateScheduledTask`, `pauseScheduledTask`, `resumeScheduledTask`, `triggerScheduledTask`, `deleteScheduledTask`, `listScheduledTaskRuns` |
-| Variable sets | `listVariable sets`, `createVariable set`, `getVariable set`, `updateVariable set`, `deleteVariable set`, `setVariable setVariable`, `deleteVariable setVariable` (values are write-only) |
+| Variable sets | `listVariableSets`, `createVariableSet`, `getVariableSet`, `updateVariableSet`, `deleteVariableSet`, `setVariableSetVariable`, `deleteVariableSetVariable`; generic reads are metadata-only, while dedicated permissioned exact-value reads are part of the held client train |
 | Files | `uploadFile`, `beginFileUpload`, `completeFileUpload`, `getFile`, `createFileDownloadUrl` |
 | Documents | `createDocumentBase`, `listDocumentBases`, `getDocumentBase`, `addDocument`, `listDocuments`, `reindexDocument`, `searchDocuments`, `searchKnowledge` (effective organization + workspace + immutable initiating-user personal scope) |
 | Packs | `listPacks`, `registerPack`, `getPack`, `enablePack`, `deletePack`, `listPackInstallations` |
 | Capabilities | `listCapabilities`, `createCapability`, `enableCapability`, `disableCapability`, `discoverMcpCapabilities` |
+| Plugin packages | `previewPlugin`, `installPlugin`, `previewPluginUninstall`, `uninstallPlugin` |
+| API Integrations | `listApiIntegrationPresets`, `listApiIntegrations`, `previewApiIntegration`, `startApiIntegrationOAuth`, `installApiIntegration`, `previewApiIntegrationUninstall`, `uninstallApiIntegration`, `listIntegrationFeatures`, `configureIntegrationFeature`, `pauseIntegrationFeature`, `resumeIntegrationFeature`, `removeIntegrationFeature`, `browseGoogleDriveIntegrationSource`, `saveGoogleDriveIntegrationSource` |
+| Remote Skills | `previewSkillImport`, `installSkill`, `previewSkillUninstall`, `uninstallSkill` |
 | GitHub | `getGitHubApp`, `githubConnectUrl`, `listGitHubRepositories`, `syncGitHubRepositories`, `createGitHubAppManifest` |
 | API keys | `listApiKeys`, `createApiKey`, `deleteApiKey` |
 | Billing | `getBilling`, `getBillingUsage`, `getBillingEntitlements`, `createBillingCheckout` |
 
+`listApiIntegrationPresets` returns safe curated-provider metadata without any
+deployment OAuth client credentials. API Integrations are multi-instance:
+`installApiIntegration` may supply a
+stable `instanceKey`, display name, and exact Connection. The returned
+`serverId` is instance-specific, so two Gmail or Linear accounts can be
+selected in one session without tool-name collision. Uninstall preview and
+uninstall both require the exact `instanceKey` and instance version; neither
+operation disconnects the underlying Connection.
+
+Adapter-owned Integration features are listed and mutated under the exact
+`capabilityId` + `instanceKey` + `featureKey`. Generic primitive schemas use
+`configureIntegrationFeature`; lifecycle changes and removal require the
+binding's exact optimistic version plus a caller UUID idempotency key. Google
+Drive's nested folder/Shared Drive source schema has dedicated
+`browseGoogleDriveIntegrationSource` and `saveGoogleDriveIntegrationSource`
+methods. They verify provider metadata through that instance's exact Connection
+and persist only a versioned feature binding—never provider credentials, page
+tokens, or selected-source configuration on the Connection.
+
 ### Protocol routes (deliberately not in the SDK)
 
 Some endpoints are wire protocols for specific counterparts, not client

package/dist/artifact-client.d.ts

@@ -1,7 +1,25 @@
-import { OpenGeniClient as OpenGeniCoreClient } from "./client";
-import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts";
+import { OpenGeniClient as OpenGeniCoreClient } from "./client.js";
+import type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationJobResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ImportEditableArtifactResourceRequest, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions } from "./editable-artifact-resources.js";
+import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 /** Public SDK client. Artifact operations stay out of the console's eager core graph. */
 export declare class OpenGeniClient extends OpenGeniCoreClient {
+    createEditableArtifact(workspaceId: string, request: CreateEditableArtifactResourceRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactResource>;
+    importEditableArtifact(workspaceId: string, request: ImportEditableArtifactResourceRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactResource>;
+    getEditableArtifact(workspaceId: string, artifactId: string, options: ReadEditableArtifactResourceOptions): Promise<EditableArtifactResource>;
+    listSessionEditableArtifacts(workspaceId: string, sourceSessionId: string, options: ListSessionEditableArtifactResourcesOptions): Promise<EditableArtifactListResource>;
+    pinEditableArtifactVersion(workspaceId: string, artifactId: string, request: PinEditableArtifactVersionRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactPinnedVersionResource>;
+    createEditableArtifactMaterialization(workspaceId: string, artifactId: string, request: CreateEditableArtifactMaterializationRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactMaterializationJobResource>;
+    getEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<EditableArtifactMaterializationJobResource>;
+    /** The caller owns the returned bounded response stream. */
+    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<Response>;
     listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions): Promise<WorkspaceArtifactListResponse>;
     getWorkspaceArtifact(workspaceId: string, artifactId: string): Promise<WorkspaceArtifactDetailResponse>;
     getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionId?: string): Promise<WorkspaceArtifactContentResponse>;

package/dist/artifacts.d.ts

@@ -0,0 +1,4 @@
+/** Artifact-only API client entry; keeps unrelated SDK surfaces out of editor bundles. */
+export { OpenGeniClient } from "./artifact-client.js";
+export type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationFormat, EditableArtifactMaterializationJobResource, EditableArtifactMaterializationResultResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions, } from "./editable-artifact-resources.js";
+export type { FetchLike, OpenGeniClientOptions, OpenGeniRequestOptions } from "./client.js";

package/dist/artifacts.js

@@ -0,0 +1,11 @@
+import {
+  OpenGeniClient
+} from "./chunk-FHI4DFIG.js";
+import "./chunk-ILQZR5N6.js";
+import "./chunk-V5F253OG.js";
+import "./chunk-MZWTWOX6.js";
+import "./chunk-FRJFNDIR.js";
+export {
+  OpenGeniClient
+};
+//# sourceMappingURL=artifacts.js.map

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-FHI4DFIG.js

@@ -0,0 +1,128 @@
+import {
+  OpenGeniClient
+} from "./chunk-ILQZR5N6.js";
+
+// src/artifact-client.ts
+var OpenGeniClient2 = class extends OpenGeniClient {
+  async createEditableArtifact(workspaceId, request, options = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,
+      request,
+      {},
+      options
+    );
+  }
+  async importEditableArtifact(workspaceId, request, options = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/imports`,
+      request,
+      {},
+      options
+    );
+  }
+  async getEditableArtifact(workspaceId, artifactId, options) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}`,
+      void 0,
+      { replicaId: options.replicaId },
+      options
+    );
+  }
+  async listSessionEditableArtifacts(workspaceId, sourceSessionId, options) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,
+      void 0,
+      { sourceSessionId, replicaId: options.replicaId },
+      options
+    );
+  }
+  async pinEditableArtifactVersion(workspaceId, artifactId, request, options = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/versions`,
+      request,
+      {},
+      options
+    );
+  }
+  async createEditableArtifactMaterialization(workspaceId, artifactId, request, options = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations`,
+      request,
+      {},
+      options
+    );
+  }
+  async getEditableArtifactMaterialization(workspaceId, artifactId, jobId, options) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}`,
+      void 0,
+      { replicaId: options.replicaId },
+      options
+    );
+  }
+  /** The caller owns the returned bounded response stream. */
+  async downloadEditableArtifactMaterialization(workspaceId, artifactId, jobId, options) {
+    return await this.requestResponse(
+      "GET",
+      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}/download`,
+      { replicaId: options.replicaId },
+      options
+    );
+  }
+  async listWorkspaceArtifacts(workspaceId, options = {}) {
+    const query = new URLSearchParams();
+    if (options.limit !== void 0) query.set("limit", String(options.limit));
+    if (options.cursor) query.set("cursor", options.cursor);
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`
+    );
+  }
+  async getWorkspaceArtifact(workspaceId, artifactId) {
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`
+    );
+  }
+  async getWorkspaceArtifactContent(workspaceId, artifactId, versionId) {
+    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : "";
+    return await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`
+    );
+  }
+  async createWorkspaceArtifact(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/published-artifacts`,
+      request
+    );
+  }
+  async publishWorkspaceArtifactVersion(workspaceId, artifactId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,
+      request
+    );
+  }
+  async rollbackWorkspaceArtifact(workspaceId, artifactId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,
+      request
+    );
+  }
+};
+
+export {
+  OpenGeniClient2 as OpenGeniClient
+};
+//# sourceMappingURL=chunk-FHI4DFIG.js.map

package/dist/chunk-FHI4DFIG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/artifact-client.ts"],"sourcesContent":["import { OpenGeniClient as OpenGeniCoreClient } from \"./client\";\nimport type {\n  CreateEditableArtifactMaterializationRequest,\n  CreateEditableArtifactResourceRequest,\n  EditableArtifactListResource,\n  EditableArtifactMaterializationJobResource,\n  EditableArtifactPinnedVersionResource,\n  EditableArtifactResource,\n  ImportEditableArtifactResourceRequest,\n  ListSessionEditableArtifactResourcesOptions,\n  PinEditableArtifactVersionRequest,\n  ReadEditableArtifactMaterializationOptions,\n  ReadEditableArtifactResourceOptions,\n} from \"./editable-artifact-resources\";\nimport type {\n  CreateWorkspaceArtifactRequest,\n  PublishWorkspaceArtifactVersionRequest,\n  RollbackWorkspaceArtifactRequest,\n  WorkspaceArtifactContentResponse,\n  WorkspaceArtifactDetailResponse,\n  WorkspaceArtifactListOptions,\n  WorkspaceArtifactListResponse,\n  WorkspaceArtifactMutationResponse,\n} from \"./workspace-artifacts\";\n\n/** Public SDK client. Artifact operations stay out of the console's eager core graph. */\nexport class OpenGeniClient extends OpenGeniCoreClient {\n  async createEditableArtifact(\n    workspaceId: string,\n    request: CreateEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async importEditableArtifact(\n    workspaceId: string,\n    request: ImportEditableArtifactResourceRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/imports`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifact(\n    workspaceId: string,\n    artifactId: string,\n    options: ReadEditableArtifactResourceOptions,\n  ): Promise<EditableArtifactResource> {\n    return await this.requestJson<EditableArtifactResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listSessionEditableArtifacts(\n    workspaceId: string,\n    sourceSessionId: string,\n    options: ListSessionEditableArtifactResourcesOptions,\n  ): Promise<EditableArtifactListResource> {\n    return await this.requestJson<EditableArtifactListResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts`,\n      undefined,\n      { sourceSessionId, replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async pinEditableArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PinEditableArtifactVersionRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactPinnedVersionResource> {\n    return await this.requestJson<EditableArtifactPinnedVersionResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async createEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    request: CreateEditableArtifactMaterializationRequest,\n    options: Readonly<{ signal?: AbortSignal | undefined }> = {},\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"POST\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations`,\n      request,\n      {},\n      options,\n    );\n  }\n\n  async getEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<EditableArtifactMaterializationJobResource> {\n    return await this.requestJson<EditableArtifactMaterializationJobResource>(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}`,\n      undefined,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  /** The caller owns the returned bounded response stream. */\n  async downloadEditableArtifactMaterialization(\n    workspaceId: string,\n    artifactId: string,\n    jobId: string,\n    options: ReadEditableArtifactMaterializationOptions,\n  ): Promise<Response> {\n    return await this.requestResponse(\n      \"GET\",\n      `/v1/workspaces/${encodeURIComponent(workspaceId)}/editable-artifacts/${encodeURIComponent(artifactId)}/materializations/${encodeURIComponent(jobId)}/download`,\n      { replicaId: options.replicaId },\n      options,\n    );\n  }\n\n  async listWorkspaceArtifacts(\n    workspaceId: string,\n    options: WorkspaceArtifactListOptions = {},\n  ): Promise<WorkspaceArtifactListResponse> {\n    const query = new URLSearchParams();\n    if (options.limit !== undefined) query.set(\"limit\", String(options.limit));\n    if (options.cursor) query.set(\"cursor\", options.cursor);\n    const suffix = query.size > 0 ? `?${query.toString()}` : \"\";\n    return await this.requestJson<WorkspaceArtifactListResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts${suffix}`,\n    );\n  }\n\n  async getWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n  ): Promise<WorkspaceArtifactDetailResponse> {\n    return await this.requestJson<WorkspaceArtifactDetailResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}`,\n    );\n  }\n\n  async getWorkspaceArtifactContent(\n    workspaceId: string,\n    artifactId: string,\n    versionId?: string,\n  ): Promise<WorkspaceArtifactContentResponse> {\n    const query = versionId ? `?versionId=${encodeURIComponent(versionId)}` : \"\";\n    return await this.requestJson<WorkspaceArtifactContentResponse>(\n      \"GET\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/content${query}`,\n    );\n  }\n\n  async createWorkspaceArtifact(\n    workspaceId: string,\n    request: CreateWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts`,\n      request,\n    );\n  }\n\n  async publishWorkspaceArtifactVersion(\n    workspaceId: string,\n    artifactId: string,\n    request: PublishWorkspaceArtifactVersionRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/versions`,\n      request,\n    );\n  }\n\n  async rollbackWorkspaceArtifact(\n    workspaceId: string,\n    artifactId: string,\n    request: RollbackWorkspaceArtifactRequest,\n  ): Promise<WorkspaceArtifactMutationResponse> {\n    return await this.requestJson<WorkspaceArtifactMutationResponse>(\n      \"POST\",\n      `/v1/workspaces/${workspaceId}/published-artifacts/${encodeURIComponent(artifactId)}/rollback`,\n      request,\n    );\n  }\n}\n"],"mappings":";;;;;AA0BO,IAAMA,kBAAN,cAA6B,eAAmB;AAAA,EACrD,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,SACA,UAA0D,CAAC,GACxB;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,aACA,YACA,SACmC;AACnC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,6BACJ,aACA,iBACA,SACuC;AACvC,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC;AAAA,MACjD;AAAA,MACA,EAAE,iBAAiB,WAAW,QAAQ,UAAU;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,2BACJ,aACA,YACA,SACA,UAA0D,CAAC,GACX;AAChD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,sCACJ,aACA,YACA,SACA,UAA0D,CAAC,GACN;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC;AAAA,MACtG;AAAA,MACA,CAAC;AAAA,MACD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mCACJ,aACA,YACA,OACA,SACqD;AACrD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ;AAAA,MACA,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,wCACJ,aACA,YACA,OACA,SACmB;AACnB,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,mBAAmB,WAAW,CAAC,uBAAuB,mBAAmB,UAAU,CAAC,qBAAqB,mBAAmB,KAAK,CAAC;AAAA,MACpJ,EAAE,WAAW,QAAQ,UAAU;AAAA,MAC/B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,uBACJ,aACA,UAAwC,CAAC,GACD;AACxC,UAAM,QAAQ,IAAI,gBAAgB;AAClC,QAAI,QAAQ,UAAU,OAAW,OAAM,IAAI,SAAS,OAAO,QAAQ,KAAK,CAAC;AACzE,QAAI,QAAQ,OAAQ,OAAM,IAAI,UAAU,QAAQ,MAAM;AACtD,UAAM,SAAS,MAAM,OAAO,IAAI,IAAI,MAAM,SAAS,CAAC,KAAK;AACzD,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,uBAAuB,MAAM;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,qBACJ,aACA,YAC0C;AAC1C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,IACrF;AAAA,EACF;AAAA,EAEA,MAAM,4BACJ,aACA,YACA,WAC2C;AAC3C,UAAM,QAAQ,YAAY,cAAc,mBAAmB,SAAS,CAAC,KAAK;AAC1E,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC,WAAW,KAAK;AAAA,IACrG;AAAA,EACF;AAAA,EAEA,MAAM,wBACJ,aACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW;AAAA,MAC7B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gCACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,0BACJ,aACA,YACA,SAC4C;AAC5C,WAAO,MAAM,KAAK;AAAA,MAChB;AAAA,MACA,kBAAkB,WAAW,wBAAwB,mBAAmB,UAAU,CAAC;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;","names":["OpenGeniClient"]}

package/dist/chunk-FRJFNDIR.js

@@ -0,0 +1,218 @@
+// src/types.ts
+var DEFAULT_FILE_RESOURCE_MOUNT_ROOT = ".opengeni/files";
+var SESSION_EVENT_TYPES = [
+  "session.created",
+  // Defensive bounded projection for malformed/legacy oversized envelopes.
+  "session.event.envelope_omitted",
+  "session.status.changed",
+  "session.realtime.started",
+  "session.realtime.ended",
+  "session.requiresAction",
+  "session.humanInput.requested",
+  "session.context.compaction.requested",
+  "session.context.compaction.started",
+  "session.context.compacted",
+  "session.context.compaction.skipped",
+  "session.context.cleared",
+  "user.message",
+  "user.pause",
+  "user.approvalDecision",
+  "user.humanInputResponse",
+  "turn.queued",
+  "turn.started",
+  "turn.completed",
+  "turn.failed",
+  "turn.cancelled",
+  "turn.superseded",
+  "turn.recovery.requested",
+  "turn.capacity_waiting",
+  "agent.message.delta",
+  "agent.message.completed",
+  "agent.reasoning.delta",
+  "agent.toolCall.created",
+  "agent.toolCall.output",
+  "agent.model.request",
+  "agent.model.usage",
+  "tool.auth_needed",
+  "credential.auth_needed",
+  "agent.updated",
+  "rig.setup.started",
+  "rig.setup.completed",
+  "rig.setup.skipped",
+  "rig.setup.failed",
+  "sandbox.operation.started",
+  "sandbox.operation.completed",
+  "sandbox.operation.failed",
+  "sandbox.command.output.delta",
+  "artifact.created",
+  "goal.set",
+  "goal.updated",
+  "goal.completed",
+  "goal.paused",
+  "goal.resumed",
+  "goal.cleared",
+  "goal.continuation",
+  "system.update.pending",
+  "system.update.delivered",
+  "system.update.superseded",
+  "system.update.cancelled",
+  "system.update.settled",
+  "session.control.paused",
+  "session.control.resumed",
+  "session.control.steer_requested",
+  "workspace.inference.paused",
+  "workspace.inference.resumed",
+  "session.queue.changed",
+  "session.queue.prompt.cancelled",
+  "session.queue.history",
+  "turn.event.rejected_late",
+  "memory.saved",
+  "memory.corrected",
+  // Channel-B desktop pixel-plane signals (mirror of contracts SessionEventType;
+  // the contract-parity test asserts sorted equality).
+  "stream.url.rotated",
+  "stream.opened",
+  "stream.closed",
+  "stream.revoked",
+  // Channel-B recording signals (P4.3 — "agent films itself proving the fix").
+  "recording.started",
+  "recording.available",
+  "recording.failed",
+  // Channel-A structured-service notifications (P4.4; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "fs.changed",
+  "git.changed",
+  "terminal.pty.started",
+  "terminal.pty.output.delta",
+  "terminal.pty.exited",
+  "session.title_set",
+  "session.mcp.approval_policy.updated",
+  "session.tool_policy.updated",
+  // Multi-account Codex (P1): the session's inference account changed.
+  "codex.account.switched",
+  // credential allocator metadata-only per-turn credential selection audit.
+  "codex.credential.selected",
+  // Bounded, identity-free deterministic shadow/replay decision.
+  "codex.fleet.decision",
+  // credential allocator durable zero-capacity wait lifecycle. These are system/runtime
+  // events, never synthetic user messages.
+  "codex.capacity.waiting",
+  "codex.capacity.resumed",
+  "codex.capacity.superseded",
+  // Sandbox durability observability (mirror of contracts SessionEventType):
+  // box lifecycle + manifest-env drift, attributable from the DB alone.
+  "sandbox.box.created",
+  "sandbox.box.lost",
+  "sandbox.box.terminated",
+  "sandbox.box.snapshot",
+  "sandbox.env.drift",
+  // Active-sandbox pointer reconcile (issue #341; announce-only; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "session.route.reconciled",
+  // Workbench v2 turn-end workspace capture (announce-only; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "workspace.revision.captured",
+  "workspace.revision.degraded",
+  // Connected Machine op-outcome observability (announce-only, quiet; mirror of
+  // contracts SessionEventType — the contract-parity test asserts sorted equality).
+  "machine.op.failed",
+  "machine.op.recovered",
+  // Connected Machine link-plane observability (announce-only, quiet; mirror of
+  // contracts SessionEventType — the contract-parity test asserts sorted equality).
+  "machine.link.lost",
+  "machine.link.restored",
+  "machine.runner.restarted"
+];
+var KNOWN_PERMISSIONS = [
+  "account:read",
+  "account:admin",
+  "members:manage",
+  "workspace:create",
+  "billing:read",
+  "billing:manage",
+  "workspace:read",
+  "workspace:admin",
+  "sessions:create",
+  "sessions:read",
+  "sessions:control",
+  // sandbox workspace (mirror of @opengeni/contracts Permission). stream:view is
+  // strictly broader than sessions:read (un-redacted pixels); stream:control is
+  // the never-granted-v1 raw-input plane; stream:acknowledge is the secret-leak
+  // consent gate.
+  "stream:view",
+  "stream:control",
+  "stream:acknowledge",
+  "files:upload",
+  "files:read",
+  "files:write",
+  "terminal:attach",
+  "documents:manage",
+  "documents:search",
+  "scheduled_tasks:manage",
+  "scheduled_tasks:run",
+  "github:manage",
+  "github:use",
+  "api_keys:manage",
+  "connections:read",
+  "connections:write",
+  "environments:manage",
+  "environments:use",
+  "variable-sets:list",
+  "variable-sets:read",
+  "variable-sets:write",
+  "variable-sets:manage",
+  "variable-sets:use",
+  "secrets:list",
+  "secrets:read",
+  "secrets:write",
+  "mcp_servers:attach",
+  "codemode:call",
+  "goals:manage",
+  "enrollments:read",
+  "enrollments:manage",
+  "rigs:use",
+  "rigs:manage",
+  "artifacts:read",
+  "artifacts:publish"
+];
+var OPENGENI_API_CONTRACT_REVISION = "2026-08-social-provider-tools-v1";
+var OPENGENI_API_CONTRACT_HEADER = "x-opengeni-api-contract";
+var OPENGENI_CORRELATION_HEADER = "x-opengeni-correlation-id";
+var RETAINED_OUTPUT_DEFAULT_PAGE_BYTES = 256 * 1024;
+var RETAINED_OUTPUT_MAX_PAGE_BYTES = 1024 * 1024;
+var COMPUTER_SCREENSHOT_MAX_BYTES = 32 * 1024 * 1024;
+var GENERATED_IMAGE_MAX_BYTES = 64 * 1024 * 1024;
+var GENERATED_VIDEO_MAX_BYTES = 512 * 1024 * 1024;
+var KNOWN_USAGE_EVENT_TYPES = [
+  "agent_run.created",
+  "agent_run.completed",
+  "model.tokens",
+  "model.cost",
+  "file.uploaded",
+  "file.deleted",
+  "document.indexed",
+  "scheduled_task.fired",
+  "knowledge_source_sync.fired",
+  "knowledge_source_sync.completed",
+  "knowledge_source_sync.items",
+  "knowledge_source_sync.bytes",
+  "api_key.request",
+  // sandbox warm-time metering (P2.1) — mirrors contracts UsageEventType.
+  "sandbox.warm_seconds",
+  "sandbox.warm_cost"
+];
+
+export {
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
+  SESSION_EVENT_TYPES,
+  KNOWN_PERMISSIONS,
+  OPENGENI_API_CONTRACT_REVISION,
+  OPENGENI_API_CONTRACT_HEADER,
+  OPENGENI_CORRELATION_HEADER,
+  RETAINED_OUTPUT_DEFAULT_PAGE_BYTES,
+  RETAINED_OUTPUT_MAX_PAGE_BYTES,
+  COMPUTER_SCREENSHOT_MAX_BYTES,
+  GENERATED_VIDEO_MAX_BYTES,
+  KNOWN_USAGE_EVENT_TYPES
+};
+//# sourceMappingURL=chunk-FRJFNDIR.js.map