@opengeni/sdk 0.46.0 → 0.52.1

package/dist/client.d.ts

@@ -1,9 +1,11 @@
-import { type SessionEventStreamTransport, type StreamSessionEventsOptions } from "./stream";
-import { type WorkspaceControlStreamTransport } from "./workspace-control-stream";
-import type { AccessContext, ActivateCodexRealtimeConnectionRequest, AddWorkspaceMemberRequest, ApiKey, BillingEntitlementsResponse, CodexAccount, CodexAccountsResponse, CodexAppsUpdate, CodexRotationSettings, CodexOverviewResponse, CodexAllocatorUpdate, CodexConnectionStatus, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, CodexConnectPoll, CodexConnectStart, CodexUsage, CodexUsageMap, BillingSummary, BillingUsageResponse, InsightsRange, WorkspaceInsightsResponse, BeginSessionRealtimeRequest, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityInstallation, AddDocumentRequest, CreateKnowledgeDropRequest, MoveDocumentRequest, ClientConfig, WorkspaceModelCatalogResponse, WorkspaceRealtimeModelCatalogResponse, ClientSessionEventInput, CompactSessionContextResult, ConnectionMetadata, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, CreateCheckoutRequest, CreateCheckoutResponse, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackReactionChannelListResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateKnowledgeMemoryRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateVariableSetRequest, CreateRigRequest, CreateWorkspaceRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupResponse, MintEnrollTokenResponse, EndSessionRealtimeRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchRequest, DocumentSearchResponse, EnableCapabilityRequest, EnablePackRequest, FileAsset, FileDownloadUrlResponse, GetPackResponse, GitHubAppInfo, GitHubRepositoriesResponse, GoogleDriveDisconnectRequest, GoogleDriveLifecycleActionRequest, KnowledgeMemory, KnowledgeMemorySearchRequest, ListPacksResponse, MachinesResponse, MetricSample, SwapActiveSandboxRequest, SwapActiveSandboxResponse, PackInstallation, LatencyMode, ReasoningEffort, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, RegisterCapabilityPackRequest, ResourceRef, ScheduledTask, ScheduledTaskRun, Session, SessionListResponse, UpdateSessionPinRequest, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventPage, SessionGoal, SessionHumanInputRequest, SessionLineageResponse, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse, RenewSessionRealtimeRequest, SessionMcpCredentialUpdateInput, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, SessionQueueSnapshot, SessionQueueMutationResponse, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, NewSessionDraft, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SteerSessionQueueItemRequest, SessionControlResponse, WorkspaceInferenceControlResponse, WorkspaceControlEvent, SessionTurn, SubmitHumanInputResponseRequest, SessionCapabilities, AttachViewerRequest, AttachViewerResponse, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, FsListRequest, FsListResponse, FsReadRequest, FsReadResponse, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitStatusRequest, GitStatusResponse, GitDiffRequest, GitDiffResponse, GitLogRequest, GitLogResponse, GitShowRequest, GitShowResponse, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, ToolRef, TranscribeAudioResponse, TranscriptionRecordingListResponse, TranscriptionRecordingResponse, UploadTranscriptionRecordingChunkResponse, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateRigRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, SetWorkspaceDefaultRigRequest, UploadFileInput, VariableSet, VariableSetVariableMetadata, Rig, RigVersion, RigChange, ProposeRigChangeRequest, WorkspaceMember, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceRegisteredPack, Workspace, OAuthStartRequest, OAuthStartResponse, SocialConnection, SocialOAuthStartRequest } from "./types";
-import type { ActivateWorkspaceInstructionPolicyRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceInstructionPolicyOnboardingProposalRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, RollbackWorkspaceInstructionPolicyRequest, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListOptions, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalListOptions, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyRevision } from "./workspace-instruction-policies";
-import type { WorkspaceStateExportResponse, WorkspaceStateGetOptions, WorkspaceStateResponse } from "./workspace-state";
-import type { ActivatePreferenceRegistryRevisionRequest, ChangePreferenceRegistryScopeRequest, CorrectPreferenceRegistryRequest, CreatePreferenceRegistryProposalRequest, DeactivatePreferenceRegistryRequest, PreferenceRegistryDetailResponse, PreferenceRegistryFullContent, PreferenceRegistryListOptions, PreferenceRegistryListResponse, PreferenceRegistryMutationResponse, PreferenceRegistryRecord, PreferenceRegistrySnapshot, RejectPreferenceRegistryProposalRequest, SupersedePreferenceRegistryRequest } from "./preference-registry";
+import { type SessionEventStreamTransport, type StreamSessionEventsOptions } from "./stream.js";
+import { type WorkspaceControlStreamTransport } from "./workspace-control-stream.js";
+import { OpenGeniInteractionClient, type AttachedBrowserDevice, type AttachedBrowserDeviceListOptions, type AttachedBrowserDeviceListResponse, type BrowserActionReceipt, type BrowserActionRequest, type BrowserDiagnosticBatch, type BrowserDiagnosticsOptions, type BrowserIdentity, type BrowserIdentityListOptions, type BrowserIdentityListResponse, type BrowserIdentityMutationResponse, type BrowserObservation, type BrowserOpenTargetRequest, type BrowserSession, type BrowserSessionAttachment, type BrowserSessionAttachmentRequest, type BrowserSessionHeartbeatResponse, type BrowserSessionLifecycleRequest, type BrowserSessionListResponse, type BrowserSessionMutationResponse, type BrowserTarget, type BrowserTargetListResponse, type BrowserRevisionListResponse, type ComputerActionReceipt, type ComputerActionRequest, type ComputerObservation, type ComputerSession, type ComputerSessionAttachment, type ComputerSessionAttachmentRequest, type ComputerSessionHeartbeatResponse, type ComputerSessionLifecycleRequest, type ComputerSessionListResponse, type ComputerSessionMutationResponse, type ComputerTargetListResponse, type CreateBrowserIdentityRequest, type CreateBrowserSessionRequest, type CreateComputerSessionRequest, type PublishBrowserRevisionRequest, type PublishBrowserRevisionResponse } from "./interaction.js";
+import type { AccessContext, ActivateCodexRealtimeConnectionRequest, AddWorkspaceMemberRequest, ApiKey, BillingEntitlementsResponse, CodexAccount, CodexAccountsResponse, CodexAppsUpdate, CodexRotationSettings, CodexOverviewResponse, CodexAllocatorUpdate, CodexConnectionStatus, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, CodexConnectPoll, CodexConnectStart, CodexUsage, CodexUsageMap, BillingSummary, BillingUsageResponse, InsightsRange, WorkspaceInsightsResponse, BeginSessionRealtimeRequest, CapabilityCatalogItem, CapabilityCatalogResponse, CapabilityInstallation, ApiIntegrationPreview, ApiIntegrationOAuthStartRequest, ApiIntegrationUninstallPreview, InstallApiIntegrationRequest, InstalledApiIntegration, IntegrationFeatureMutationResult, IntegrationFeatureRemovalResult, IntegrationInstanceFeaturesResponse, ListApiIntegrationPresetsResponse, ListApiIntegrationsResponse, MutateIntegrationFeatureRequest, PreviewApiIntegrationRequest, UninstallApiIntegrationRequest, UninstallApiIntegrationResult, UpsertIntegrationFeatureRequest, PreviewPluginRequest, PluginPreview, InstallPluginRequest, InstalledPlugin, ListInstalledPluginsResponse, PluginUninstallPreview, UninstallPluginRequest, UninstallPluginResult, AddDocumentRequest, CreateKnowledgeDropRequest, MoveDocumentRequest, ClientConfig, WorkspaceModelCatalogResponse, WorkspaceRealtimeModelCatalogResponse, ClientSessionEventInput, CompactSessionContextResult, ConnectionMetadata, CreateApiKeyRequest, CreateApiKeyResponse, CreateCapabilityCatalogItemRequest, InstallSkillRequest, InstalledSkill, CreateCheckoutRequest, CreateCheckoutResponse, OpenGeniSlackBotInstallRequest, OpenGeniSlackBotInstallStart, SlackReactionChannelListResponse, CreateConnectionRequest, CreateDocumentBaseRequest, CreateFileUploadRequest, CreateFileUploadResponse, CreateGitHubAppManifestRequest, CreateGitHubAppManifestResponse, CreateKnowledgeMemoryRequest, CreateScheduledTaskRequest, CreateSessionRequest, CreateSessionResponse, CreateVariableSetRequest, CreateRigRequest, CreateWorkspaceRequest, DeviceEnrollmentApproveResponse, DeviceEnrollmentDenyResponse, DeviceEnrollmentLookupResponse, MintEnrollTokenResponse, EndSessionRealtimeRequest, DiscoverMcpCapabilitiesResponse, Document, DocumentBase, DocumentSearchRequest, DocumentSearchResponse, EnableCapabilityRequest, EnablePackRequest, FileAsset, FileDownloadUrlResponse, GetPackResponse, GitHubAppInfo, GitHubRepositoriesResponse, GoogleDriveBrowseResponse, GoogleDriveDisconnectRequest, SaveGoogleDriveIntegrationSourceRequest, GoogleDriveLifecycleActionRequest, KnowledgeMemory, KnowledgeMemorySearchRequest, ListPacksResponse, MachinesResponse, MetricSample, RemoveEnrollmentRequest, RemoveEnrollmentResponse, SwapActiveSandboxRequest, SwapActiveSandboxResponse, InstallPackRequest, PackInstallationPreview, PrepareSlackUserLinkAccessRequest, SlackUserLinkAccessMutationRequest, SlackUserLinkAccessRequest, ApproveSlackUserLinkAccessRequest, PackInstallation, PackUninstallPreview, LatencyMode, ReasoningEffort, RetainedScreenshotDownload, RetainedScreenshotDownloadOptions, RetainedArtifactDownload, RetainedArtifactDownloadOptions, RetainedArtifactReference, RetainedArtifactContent, RetainedArtifactContentOptions, RetainedArtifactMetadata, UpdateVideoGenerationPolicyRequest, VideoArtifactPlaybackSource, VideoGenerationOperationSummary, VideoGenerationPolicy, WorkspaceVideoGenerationSettings, RegisterCapabilityPackRequest, ResourceRef, PreviewPackInstallationRequest, PreviewSkillImportRequest, ScheduledTask, ScheduledTaskRun, Session, SessionListResponse, AgentTopologyPageResponse, UpdateSessionPinRequest, UninstallPackRequest, UninstallPackResult, SessionEvent, SessionEventCompactResult, SessionEventCompactResultOptions, SessionEventListOptions, SessionEventPage, SessionGoal, SessionHumanInputRequest, SessionLineageResponse, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse, RenewSessionRealtimeRequest, SessionMcpCredentialUpdateInput, SubmittedTimelineAnnotation, UpdateSessionMcpApprovalPolicyRequest, UpdateSessionMcpApprovalPolicyResponse, SessionQueueSnapshot, SessionQueueMutationResponse, ComposerDraft, DeleteSessionQueueItemRequest, EditSessionQueueItemRequest, MoveSessionQueueItemRequest, NewSessionDraft, SaveComposerDraftRequest, SaveNewSessionDraftRequest, SteerSessionQueueItemRequest, SessionControlResponse, WorkspaceInferenceControlResponse, WorkspaceControlEvent, SessionTurn, SubmitHumanInputResponseRequest, SessionCapabilities, AttachViewerRequest, AttachViewerResponse, AcknowledgeStreamRequest, AcknowledgeStreamResponse, ViewerHeartbeatRequest, ViewerHeartbeatResponse, FsListRequest, FsListResponse, FsListBatchRequest, FsListBatchResponse, FsReadRequest, FsReadResponse, FsWriteRequest, FsWriteResponse, FsDeleteRequest, FsDeleteResponse, FsMoveRequest, FsMoveResponse, FsMkdirRequest, FsMkdirResponse, GitStatusRequest, GitStatusResponse, GitDiffRequest, GitDiffResponse, GitReadBatchRequest, GitReadBatchResponse, GitLogRequest, GitLogResponse, GitShowRequest, GitShowResponse, GetWorkspaceCaptureResponse, GetWorkspaceCaptureFileResponse, TerminalExecRequest, TerminalExecResponse, PtyOpenRequest, PtyOpenResponse, PtyWriteRequest, PtyResizeRequest, PtyCloseRequest, ToolRef, TranscribeAudioResponse, TranscriptionRecordingListResponse, TranscriptionRecordingResponse, UploadTranscriptionRecordingChunkResponse, UpdateConnectionRequest, UpdateKnowledgeMemoryRequest, UpdateScheduledTaskRequest, UpdateSessionGoalRequest, UpdateSessionRequest, UpdateSessionToolPolicyRequest, UpdateVariableSetRequest, UpdateRigRequest, UpdateWorkspaceMemberRequest, UpdateWorkspaceRequest, UpdateWorkspaceSettingsRequest, SetWorkspaceDefaultRigRequest, UploadFileInput, VariableSet, VariableSetSecret, VariableSetVariableMetadata, Rig, RigVersion, RigChange, ProposeRigChangeRequest, WorkspaceMember, WorkspaceMemorySearchRequest, WorkspaceMemorySearchResponse, WorkspaceRegisteredPack, Workspace, SlackInstallationBinding, OAuthStartRequest, OAuthStartResponse, SocialConnection, SocialOAuthStartRequest, SkillImportPreview, SkillUninstallPreview, UninstallSkillRequest, UninstallSkillResult } from "./types.js";
+import type { ActivateWorkspaceInstructionPolicyRequest, CreateWorkspaceInstructionPolicyDraftRequest, CreateWorkspaceInstructionPolicyOnboardingProposalRequest, ImportLegacyWorkspaceInstructionPolicyDraftRequest, RollbackWorkspaceInstructionPolicyRequest, WorkspaceInstructionPolicyActivationResponse, WorkspaceInstructionPolicyDiffRequest, WorkspaceInstructionPolicyDiffResponse, WorkspaceInstructionPolicyListOptions, WorkspaceInstructionPolicyListResponse, WorkspaceInstructionPolicyOnboardingProposal, WorkspaceInstructionPolicyOnboardingProposalListOptions, WorkspaceInstructionPolicyOnboardingProposalListResponse, WorkspaceInstructionPolicyRevision } from "./workspace-instruction-policies.js";
+import type { ActivateCompanyProfileRevisionRequest, CompanyProfileDiffRequest, CompanyProfileDiffResponse, CompanyProfileListOptions, CompanyProfileListResponse, CompanyProfileMutationResponse, CompanyProfileRevision, RollbackCompanyProfileRequest, UpdateCompanyProfileRequest } from "./company-profile.js";
+import type { WorkspaceStateExportResponse, WorkspaceStateGetOptions, WorkspaceStateResponse } from "./workspace-state.js";
+import type { ActivatePreferenceRegistryRevisionRequest, ChangePreferenceRegistryScopeRequest, CorrectPreferenceRegistryRequest, CreatePreferenceRegistryProposalRequest, DeactivatePreferenceRegistryRequest, PreferenceRegistryDetailResponse, PreferenceRegistryFullContent, PreferenceRegistryListOptions, PreferenceRegistryListResponse, PreferenceRegistryMutationResponse, PreferenceRegistryRecord, PreferenceRegistrySnapshot, RejectPreferenceRegistryProposalRequest, SupersedePreferenceRegistryRequest } from "./preference-registry.js";
 export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
 export type WorkspaceControlEventPage = {
     events: WorkspaceControlEvent[];
@@ -27,6 +29,7 @@ export type OpenGeniRequestOptions = {
 };
 export type SendMessageInput = {
     text: string;
+    annotations?: SubmittedTimelineAnnotation[];
     /** System instructions scoped to this exact turn; never visible timeline text. */
     turnInstructions?: string;
     resources?: ResourceRef[];
@@ -44,6 +47,10 @@ export type SteerMessageResult = {
     accepted: SessionEvent;
     /** The exact turn created for this message in the same server transaction. */
     turn: SessionTurn;
+    /** Number of live attempts durably asked to stop by this atomic Steer. */
+    interruptionCount?: number;
+    /** True when this response came from the command's immutable idempotency receipt. */
+    replay?: boolean;
 };
 export type TranscribeAudioInput = {
     audio: Blob | File | Uint8Array;
@@ -79,6 +86,10 @@ export declare class OpenGeniClient {
     private readonly baseUrl;
     private readonly options;
     private readonly fetchImpl;
+    private readonly readInFlight;
+    private readonly readTrailing;
+    /** Resource-oriented Browser/Computer facade over this exact authenticated client. */
+    readonly interaction: OpenGeniInteractionClient;
     constructor(options: OpenGeniClientOptions);
     /** Make one finalization attempt for a recording; callers may retry retained audio. */
     transcribeAudio(workspaceId: string, input: TranscribeAudioInput): Promise<TranscribeAudioResponse>;
@@ -100,7 +111,9 @@ export declare class OpenGeniClient {
     createSession(workspaceId: string, request: CreateSessionRequest): Promise<CreateSessionResponse>;
     getNewSessionDraft(workspaceId: string): Promise<NewSessionDraft>;
     saveNewSessionDraft(workspaceId: string, request: SaveNewSessionDraftRequest): Promise<NewSessionDraft>;
-    getSession(workspaceId: string, sessionId: string): Promise<Session>;
+    getSession(workspaceId: string, sessionId: string, options?: {
+        fresh?: boolean;
+    }): Promise<Session>;
     updateSession(workspaceId: string, sessionId: string, request: UpdateSessionRequest): Promise<Session>;
     /** Replace the durable tool policy or explicitly adopt workspace defaults. */
     updateSessionToolPolicy(workspaceId: string, sessionId: string, request: UpdateSessionToolPolicyRequest): Promise<Session>;
@@ -124,9 +137,17 @@ export declare class OpenGeniClient {
         /** Return only the complete personal pinned projection. */
         pinsOnly?: boolean;
     }): Promise<SessionListResponse>;
+    /** Compact, bounded workspace agent hierarchy page. */
+    listAgentTopology(workspaceId: string, options?: {
+        limit?: number;
+        parentSessionId?: string | null;
+        cursor?: string;
+        search?: string;
+    }): Promise<AgentTopologyPageResponse>;
     /** Set this authenticated member's personal workspace pin for a session. */
     updateSessionPin(workspaceId: string, sessionId: string, request: UpdateSessionPinRequest): Promise<Session>;
     getSessionLineage(workspaceId: string, sessionId: string): Promise<SessionLineageResponse>;
+    private singleFlightRead;
     /** Negotiate one server-mediated connected-Codex GPT-Live V3 WebRTC call. */
     negotiateCodexRealtimeWebrtc(workspaceId: string, sessionId: string, request: CodexRealtimeWebrtcRequest, options?: {
         signal?: AbortSignal | undefined;
@@ -170,6 +191,13 @@ export declare class OpenGeniClient {
     machineMetricsSeries(workspaceId: string, enrollmentId: string, options?: {
         window?: "15m" | "1h" | "6h" | "24h";
     }): Promise<MetricSample[]>;
+    /**
+     * Remove one connected self-hosted machine enrollment. The control-plane
+     * operation works while the agent is offline, revokes future reconnects,
+     * retains history, and returns a typed blocker when active route/lease or
+     * recovery dependencies make removal unsafe. `idempotencyKey` is replay-safe.
+     */
+    removeEnrollment(workspaceId: string, enrollmentId: string, request?: RemoveEnrollmentRequest): Promise<RemoveEnrollmentResponse>;
     /**
      * Resolve a pending device-enrollment flow by its user_code for the click-Grant
      * approve page (EnrollmentConsent). NO workspace in the path — the server
@@ -342,6 +370,8 @@ export declare class OpenGeniClient {
     compactSessionContext(workspaceId: string, sessionId: string): Promise<CompactSessionContextResult>;
     /** FileSystem: list a directory tree (feeds the Pierre file tree). */
     fsList(workspaceId: string, sessionId: string, request?: FsListRequest, options?: OpenGeniRequestOptions): Promise<FsListResponse>;
+    /** FileSystem: hydrate several independent directories behind one sandbox lease. */
+    fsListBatch(workspaceId: string, sessionId: string, request: FsListBatchRequest, options?: OpenGeniRequestOptions): Promise<FsListBatchResponse>;
     /** FileSystem: read a file (text or base64; binary-safe, size-capped). */
     fsRead(workspaceId: string, sessionId: string, request: FsReadRequest, options?: OpenGeniRequestOptions): Promise<FsReadResponse>;
     /** FileSystem: write a file (last-writer-wins; emits fs.changed). */
@@ -356,6 +386,8 @@ export declare class OpenGeniClient {
     gitStatus(workspaceId: string, sessionId: string, request?: GitStatusRequest, options?: OpenGeniRequestOptions): Promise<GitStatusResponse>;
     /** Git: structured diff hunks (the Pierre diff feed). */
     gitDiff(workspaceId: string, sessionId: string, request?: GitDiffRequest, options?: OpenGeniRequestOptions): Promise<GitDiffResponse>;
+    /** Git: read status and optional diffs for several repositories behind one sandbox lease. */
+    gitReadBatch(workspaceId: string, sessionId: string, request: GitReadBatchRequest, options?: OpenGeniRequestOptions): Promise<GitReadBatchResponse>;
     /** Git: commit log. */
     gitLog(workspaceId: string, sessionId: string, request?: GitLogRequest): Promise<GitLogResponse>;
     /** Git: show a commit (diff vs first parent) or fetch a raw blob at a ref. */
@@ -392,13 +424,11 @@ export declare class OpenGeniClient {
      *  The desktop viewer-attach path returns 409 until this is recorded. */
     acknowledgeStream(workspaceId: string, sessionId: string, request?: AcknowledgeStreamRequest): Promise<AcknowledgeStreamResponse>;
     /** Attach a viewer holder (refcounted liveness — keeps the box warm while
-     *  watched/used), spinning the box up in-process when cold, and mint the scoped
-     *  direct-to-provider URLs for the requested plane(s). `request.desktop:true`
-     *  opts into the un-redacted pixel plane and mints the noVNC URL — that plane
-     *  alone throws `OpenGeniApiError(409)` when the un-redacted/shared
-     *  acknowledgment is missing (the consent gate). A terminal-only attach
-     *  (`desktop` omitted/false) warms the box + mints the pty-ws terminal cell with
-     *  NO consent gate. An omitted `viewerId` mints a fresh one. */
+     *  watched/used), spinning the box up in-process when cold. Exact plane flags
+     *  mint only the requested short-lived credentials and enforce that plane's
+     *  permission. `desktop:true` alone carries the un-redacted/shared consent
+     *  gate. An entirely omitted plane set retains the legacy terminal-only
+     *  meaning; current clients should send all three flags. */
     attachViewer(workspaceId: string, sessionId: string, request?: AttachViewerRequest): Promise<AttachViewerResponse>;
     /** Heartbeat a viewer holder (Channel-A app-level liveness). A closed laptop
      *  stops sending these → the reaper drops the holder within ~90s. Echoes
@@ -406,6 +436,43 @@ export declare class OpenGeniClient {
     heartbeatViewer(workspaceId: string, sessionId: string, viewerId: string, request: ViewerHeartbeatRequest): Promise<ViewerHeartbeatResponse>;
     /** Detach a viewer (delete this holder; idempotent delete-my-row). */
     detachViewer(workspaceId: string, sessionId: string, viewerId: string): Promise<void>;
+    listAttachedBrowsers(workspaceId: string, options?: AttachedBrowserDeviceListOptions): Promise<AttachedBrowserDeviceListResponse>;
+    getAttachedBrowser(workspaceId: string, deviceId: string, options?: OpenGeniRequestOptions): Promise<AttachedBrowserDevice>;
+    listBrowserIdentities(workspaceId: string, options?: BrowserIdentityListOptions): Promise<BrowserIdentityListResponse>;
+    getBrowserIdentity(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserIdentity>;
+    createBrowserIdentity(workspaceId: string, request: CreateBrowserIdentityRequest, options?: OpenGeniRequestOptions): Promise<BrowserIdentityMutationResponse>;
+    listBrowserRevisions(workspaceId: string, identityId: string, options?: OpenGeniRequestOptions): Promise<BrowserRevisionListResponse>;
+    /** Workspace-wide BrowserSession inventory. Associations express relevance,
+     *  not access: peers and child agents intentionally remain discoverable. */
+    listBrowserSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<BrowserSessionListResponse>;
+    getBrowserSession(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserSession>;
+    createBrowserSession(workspaceId: string, request: CreateBrowserSessionRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
+    listBrowserTargets(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
+    openBrowserTarget(workspaceId: string, browserSessionId: string, request?: BrowserOpenTargetRequest, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
+    selectBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTarget>;
+    closeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserTargetListResponse>;
+    observeBrowserTarget(workspaceId: string, browserSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<BrowserObservation>;
+    actInBrowser(workspaceId: string, browserSessionId: string, request: BrowserActionRequest, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
+    getBrowserActionReceipt(workspaceId: string, browserSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<BrowserActionReceipt>;
+    listBrowserDiagnostics(workspaceId: string, browserSessionId: string, targetId: string, options?: BrowserDiagnosticsOptions): Promise<BrowserDiagnosticBatch>;
+    attachBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionAttachment>;
+    heartbeatBrowserSession(workspaceId: string, browserSessionId: string, options?: OpenGeniRequestOptions): Promise<BrowserSessionHeartbeatResponse>;
+    publishBrowserRevision(workspaceId: string, browserSessionId: string, request: PublishBrowserRevisionRequest, options?: OpenGeniRequestOptions): Promise<PublishBrowserRevisionResponse>;
+    suspendBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
+    resumeBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
+    endBrowserSession(workspaceId: string, browserSessionId: string, request: BrowserSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<BrowserSessionMutationResponse>;
+    /** Workspace-wide ComputerSession inventory. Associations express
+     * relevance, not access; peer sessions intentionally remain discoverable. */
+    listComputerSessions(workspaceId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionListResponse>;
+    getComputerSession(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSession>;
+    createComputerSession(workspaceId: string, request: CreateComputerSessionRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
+    listComputerTargets(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerTargetListResponse>;
+    observeComputerTarget(workspaceId: string, computerSessionId: string, targetId: string, options?: OpenGeniRequestOptions): Promise<ComputerObservation>;
+    actInComputer(workspaceId: string, computerSessionId: string, request: ComputerActionRequest, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
+    getComputerActionReceipt(workspaceId: string, computerSessionId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<ComputerActionReceipt>;
+    attachComputerSession(workspaceId: string, computerSessionId: string, request: ComputerSessionAttachmentRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionAttachment>;
+    heartbeatComputerSession(workspaceId: string, computerSessionId: string, options?: OpenGeniRequestOptions): Promise<ComputerSessionHeartbeatResponse>;
+    endComputerSession(workspaceId: string, computerSessionId: string, request: ComputerSessionLifecycleRequest, options?: OpenGeniRequestOptions): Promise<ComputerSessionMutationResponse>;
     /**
      * The deployment's public client bootstrap config: the host-exposed models
      * (provider-grouped in `models`, flat in `allowedModels` for back-compat),
@@ -441,6 +508,13 @@ export declare class OpenGeniClient {
     diffWorkspaceInstructionPolicyRevisions(workspaceId: string, request: WorkspaceInstructionPolicyDiffRequest): Promise<WorkspaceInstructionPolicyDiffResponse>;
     activateWorkspaceInstructionPolicyRevision(workspaceId: string, revisionId: string, request: ActivateWorkspaceInstructionPolicyRequest): Promise<WorkspaceInstructionPolicyActivationResponse>;
     rollbackWorkspaceInstructionPolicyRevision(workspaceId: string, request: RollbackWorkspaceInstructionPolicyRequest): Promise<WorkspaceInstructionPolicyActivationResponse>;
+    /** Read the current organization profile plus immutable revision and activation history. */
+    listCompanyProfile(workspaceId: string, options?: CompanyProfileListOptions): Promise<CompanyProfileListResponse>;
+    getCompanyProfileRevision(workspaceId: string, revisionId: string): Promise<CompanyProfileRevision>;
+    updateCompanyProfile(workspaceId: string, request: UpdateCompanyProfileRequest): Promise<CompanyProfileMutationResponse>;
+    diffCompanyProfileRevisions(workspaceId: string, request: CompanyProfileDiffRequest): Promise<CompanyProfileDiffResponse>;
+    activateCompanyProfileRevision(workspaceId: string, revisionId: string, request: ActivateCompanyProfileRevisionRequest): Promise<CompanyProfileMutationResponse>;
+    rollbackCompanyProfile(workspaceId: string, request: RollbackCompanyProfileRequest): Promise<CompanyProfileMutationResponse>;
     listPreferenceRegistry(workspaceId: string, options?: PreferenceRegistryListOptions): Promise<PreferenceRegistryListResponse>;
     getPreferenceRegistry(workspaceId: string, preferenceId: string): Promise<PreferenceRegistryDetailResponse>;
     createPreferenceRegistryProposal(workspaceId: string, request: CreatePreferenceRegistryProposalRequest): Promise<PreferenceRegistryRecord>;
@@ -470,6 +544,14 @@ export declare class OpenGeniClient {
      * member who can still manage the workspace.
      */
     removeWorkspaceMember(workspaceId: string, subjectId: string): Promise<void>;
+    /** Exchange one signed Slack bearer for durable, token-free continuation state. */
+    prepareSlackUserLinkAccess(workspaceId: string, request: PrepareSlackUserLinkAccessRequest): Promise<SlackUserLinkAccessRequest>;
+    getSlackUserLinkAccess(workspaceId: string, requestId: string): Promise<SlackUserLinkAccessRequest>;
+    requestSlackUserLinkWorkspaceAccess(workspaceId: string, requestId: string, request: SlackUserLinkAccessMutationRequest): Promise<SlackUserLinkAccessRequest>;
+    cancelSlackUserLinkAccess(workspaceId: string, requestId: string, request: SlackUserLinkAccessMutationRequest): Promise<SlackUserLinkAccessRequest>;
+    listSlackUserLinkAccessRequests(workspaceId: string): Promise<SlackUserLinkAccessRequest[]>;
+    approveSlackUserLinkAccessRequest(workspaceId: string, requestId: string, request: ApproveSlackUserLinkAccessRequest): Promise<SlackUserLinkAccessRequest>;
+    denySlackUserLinkAccessRequest(workspaceId: string, requestId: string, request: SlackUserLinkAccessMutationRequest): Promise<SlackUserLinkAccessRequest>;
     createScheduledTask(workspaceId: string, request: CreateScheduledTaskRequest): Promise<ScheduledTask>;
     updateScheduledTask(workspaceId: string, taskId: string, request: UpdateScheduledTaskRequest): Promise<ScheduledTask>;
     pauseScheduledTask(workspaceId: string, taskId: string): Promise<ScheduledTask>;
@@ -489,9 +571,10 @@ export declare class OpenGeniClient {
     listVariableSets(workspaceId: string): Promise<VariableSet[]>;
     createVariableSet(workspaceId: string, request: CreateVariableSetRequest): Promise<VariableSet>;
     getVariableSet(workspaceId: string, variableSetId: string): Promise<VariableSet>;
+    getVariableSetVariable(workspaceId: string, variableSetId: string, name: string): Promise<VariableSetSecret>;
     updateVariableSet(workspaceId: string, variableSetId: string, request: UpdateVariableSetRequest): Promise<VariableSet>;
     deleteVariableSet(workspaceId: string, variableSetId: string): Promise<void>;
-    /** Create or rotate a variable. The value never comes back on any read. */
+    /** Create or rotate a variable. Generic reads never return its value. */
     setVariableSetVariable(workspaceId: string, variableSetId: string, name: string, value: string): Promise<VariableSetVariableMetadata>;
     deleteVariableSetVariable(workspaceId: string, variableSetId: string, name: string): Promise<void>;
     listRigs(workspaceId: string): Promise<Rig[]>;
@@ -542,9 +625,9 @@ export declare class OpenGeniClient {
     /** @deprecated use deleteVariableSetVariable */
     deleteEnvironmentVariable(workspaceId: string, environmentId: string, name: string): Promise<void>;
     /** Step 1 of the upload flow: returns the pre-signed PUT target. */
-    beginFileUpload(workspaceId: string, request: CreateFileUploadRequest): Promise<CreateFileUploadResponse>;
+    beginFileUpload(workspaceId: string, request: CreateFileUploadRequest, options?: OpenGeniRequestOptions): Promise<CreateFileUploadResponse>;
     /** Step 3 of the upload flow: server verifies the object and marks it ready. */
-    completeFileUpload(workspaceId: string, uploadId: string): Promise<FileAsset>;
+    completeFileUpload(workspaceId: string, uploadId: string, options?: OpenGeniRequestOptions): Promise<FileAsset>;
     /**
      * The whole upload flow as one call: begin -> PUT the bytes to the signed
      * URL (with its required headers; no API auth is sent to object storage)
@@ -559,8 +642,26 @@ export declare class OpenGeniClient {
      * deliberately does not use the ordinary signed file-download URL.
      */
     getRetainedArtifactContent(workspaceId: string, artifactId: string, options?: RetainedArtifactContentOptions): Promise<RetainedArtifactContent>;
+    getSessionRetainedArtifact(workspaceId: string, sessionId: string, artifactId: string): Promise<RetainedArtifactMetadata>;
+    getSessionRetainedArtifactContent(workspaceId: string, sessionId: string, artifactId: string, options?: RetainedArtifactContentOptions): Promise<RetainedArtifactContent>;
+    /** Assemble one permanent generated-image receipt from bounded authenticated ranges. */
+    downloadRetainedArtifact(workspaceId: string, artifact: RetainedArtifactReference, options?: RetainedArtifactDownloadOptions): Promise<RetainedArtifactDownload>;
+    /** Mint a short-lived, zero-copy browser source for a validated generated image. */
+    createRetainedArtifactDownloadUrl(workspaceId: string, artifact: RetainedArtifactReference, options?: OpenGeniRequestOptions): Promise<FileDownloadUrlResponse>;
+    /** Assemble one retained screenshot from bounded authenticated API ranges. */
+    downloadRetainedScreenshot(workspaceId: string, sessionId: string, artifactId: string, options?: RetainedScreenshotDownloadOptions): Promise<RetainedScreenshotDownload>;
+    private downloadRetainedArtifactBytes;
+    private getRetainedArtifactContentAtPath;
     /** Mint a short-lived signed download URL for a ready file. */
-    createFileDownloadUrl(workspaceId: string, fileId: string): Promise<FileDownloadUrlResponse>;
+    createFileDownloadUrl(workspaceId: string, fileId: string, options?: OpenGeniRequestOptions): Promise<FileDownloadUrlResponse>;
+    /** Read the effective workspace policy and executable Seedance capabilities. */
+    getVideoGenerationSettings(workspaceId: string, options?: OpenGeniRequestOptions): Promise<WorkspaceVideoGenerationSettings>;
+    /** Replace the enabled video models/default under optimistic policy revision control. */
+    updateVideoGenerationPolicy(workspaceId: string, request: UpdateVideoGenerationPolicyRequest, options?: OpenGeniRequestOptions): Promise<VideoGenerationPolicy>;
+    /** Read durable progress for one accepted video generation operation. */
+    getVideoGenerationOperation(workspaceId: string, operationId: string, options?: OpenGeniRequestOptions): Promise<VideoGenerationOperationSummary>;
+    /** Mint a short-lived zero-copy URL for native Range-based video playback. */
+    createVideoArtifactPlaybackSource(workspaceId: string, artifactId: string, options?: OpenGeniRequestOptions): Promise<VideoArtifactPlaybackSource>;
     createDocumentBase(workspaceId: string, request: CreateDocumentBaseRequest): Promise<DocumentBase>;
     listDocumentBases(workspaceId: string): Promise<DocumentBase[]>;
     getDocumentBase(workspaceId: string, baseId: string): Promise<DocumentBase>;
@@ -603,6 +704,14 @@ export declare class OpenGeniClient {
     registerPack(workspaceId: string, manifest: RegisterCapabilityPackRequest): Promise<WorkspaceRegisteredPack>;
     getPack(workspaceId: string, packId: string): Promise<GetPackResponse>;
     enablePack(workspaceId: string, packId: string, request?: EnablePackRequest): Promise<PackInstallation>;
+    /** Resolve pinned components, Variable Set, and Rig requirements before installation. */
+    previewPackInstallation(workspaceId: string, packId: string, request?: PreviewPackInstallationRequest): Promise<PackInstallationPreview>;
+    /** Install, update, or repair a Pack from an exact previewed manifest. */
+    installPack(workspaceId: string, packId: string, request: InstallPackRequest): Promise<PackInstallation>;
+    /** Preview which Pack-owned components will be retained by other owners. */
+    previewPackUninstall(workspaceId: string, packId: string): Promise<PackUninstallPreview>;
+    /** Safely release Pack ownership and disable only now-ownerless components. */
+    uninstallPack(workspaceId: string, packId: string, request: UninstallPackRequest): Promise<UninstallPackResult>;
     /** Unregister a workspace-scoped pack (built-in packs cannot be deleted). */
     deletePack(workspaceId: string, packId: string): Promise<void>;
     listPackInstallations(workspaceId: string): Promise<PackInstallation[]>;
@@ -616,7 +725,49 @@ export declare class OpenGeniClient {
         query?: string;
         limit?: number;
     }): Promise<DiscoverMcpCapabilitiesResponse>;
+    /** List installed protocol-neutral OpenAPI and GraphQL Integrations. */
+    listApiIntegrations(workspaceId: string): Promise<ListApiIntegrationsResponse>;
+    /** List curated provider presets without exposing deployment OAuth credentials. */
+    listApiIntegrationPresets(workspaceId: string): Promise<ListApiIntegrationPresetsResponse>;
+    /** Detect and compile an Integration without mutating workspace state. */
+    previewApiIntegration(workspaceId: string, request: PreviewApiIntegrationRequest): Promise<ApiIntegrationPreview>;
+    /** Start a signed PKCE OAuth flow for a built-in Google or Microsoft preset. */
+    startApiIntegrationOAuth(workspaceId: string, request: ApiIntegrationOAuthStartRequest): Promise<OAuthStartResponse>;
+    /** Install only the exact immutable revision and digest accepted in preview. */
+    installApiIntegration(workspaceId: string, request: InstallApiIntegrationRequest): Promise<InstalledApiIntegration>;
+    previewApiIntegrationUninstall(workspaceId: string, capabilityId: string, instanceKey: string): Promise<ApiIntegrationUninstallPreview>;
+    /** Remove one Integration instance without deleting its Connection or sibling instances. */
+    uninstallApiIntegration(workspaceId: string, capabilityId: string, instanceKey: string, request: UninstallApiIntegrationRequest): Promise<UninstallApiIntegrationResult>;
+    /** List immutable provider facets and their exact per-account bindings. */
+    listIntegrationFeatures(workspaceId: string, capabilityId: string, instanceKey: string): Promise<IntegrationInstanceFeaturesResponse>;
+    /** Configure or OCC-update one adapter-owned feature on an Integration instance. */
+    configureIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: UpsertIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
+    /** Browse source metadata through one exact Google Drive Integration instance. */
+    browseGoogleDriveIntegrationSource(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, options?: {
+        parentId?: string | undefined;
+        pageToken?: string | undefined;
+    }): Promise<GoogleDriveBrowseResponse>;
+    /** Verify and bind document sources to one exact Google Drive Integration instance. */
+    saveGoogleDriveIntegrationSource(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: SaveGoogleDriveIntegrationSourceRequest): Promise<IntegrationFeatureMutationResult>;
+    pauseIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
+    resumeIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureMutationResult>;
+    removeIntegrationFeature(workspaceId: string, capabilityId: string, instanceKey: string, featureKey: string, request: MutateIntegrationFeatureRequest): Promise<IntegrationFeatureRemovalResult>;
+    private mutateIntegrationFeatureLifecycle;
+    previewPlugin(workspaceId: string, request: PreviewPluginRequest): Promise<PluginPreview>;
+    listInstalledPlugins(workspaceId: string): Promise<ListInstalledPluginsResponse>;
+    installPlugin(workspaceId: string, request: InstallPluginRequest): Promise<InstalledPlugin>;
+    previewPluginUninstall(workspaceId: string, pluginKey: string): Promise<PluginUninstallPreview>;
+    uninstallPlugin(workspaceId: string, pluginKey: string, request: UninstallPluginRequest): Promise<UninstallPluginResult>;
+    /** Resolve one public skills.sh or GitHub Skill folder to an immutable review preview. */
+    previewSkillImport(workspaceId: string, request: PreviewSkillImportRequest): Promise<SkillImportPreview>;
+    /** Install only the exact commit and full-content digest accepted during preview. */
+    installSkill(workspaceId: string, request: InstallSkillRequest): Promise<InstalledSkill>;
+    previewSkillUninstall(workspaceId: string, capabilityId: string): Promise<SkillUninstallPreview>;
+    /** Remove the direct owner under an optimistic installation-version fence. */
+    uninstallSkill(workspaceId: string, capabilityId: string, request: UninstallSkillRequest): Promise<UninstallSkillResult>;
     listConnections(workspaceId: string): Promise<ConnectionMetadata[]>;
+    /** List the secret-free Slack team -> OpenGeni tenant routing authority. */
+    listSlackInstallationBindings(workspaceId: string): Promise<SlackInstallationBinding[]>;
     createConnection(workspaceId: string, request: CreateConnectionRequest): Promise<ConnectionMetadata>;
     /** Start the public Slack installation flow for the workspace-shared OpenGeni bot. */
     startOpenGeniSlackBotInstall(workspaceId: string, request?: OpenGeniSlackBotInstallRequest): Promise<OpenGeniSlackBotInstallStart>;
@@ -640,7 +791,9 @@ export declare class OpenGeniClient {
     /** Public, immutably-cached URL for a catalog item's logo, or null when the item has none. */
     catalogAssetUrl(logoAssetPath: string | null): string | null;
     /** GitHub App server configuration plus truthful workspace binding status. */
-    getGitHubApp(workspaceId: string): Promise<GitHubAppInfo>;
+    getGitHubApp(workspaceId: string, options?: {
+        returnPath?: string;
+    }): Promise<GitHubAppInfo>;
     /** Build the GitHub owner-consent entry URL for fresh workspace-bound state. */
     githubConnectUrl(workspaceId: string, state: string): string;
     listGitHubRepositories(workspaceId: string): Promise<GitHubRepositoriesResponse>;
@@ -727,7 +880,10 @@ export declare class OpenGeniClient {
     pinSessionCodexAccount(workspaceId: string, sessionId: string, target: string): Promise<{
         pinned: string;
     }>;
-    protected requestJson<T>(method: string, path: string, body?: unknown, query?: Record<string, string>, options?: OpenGeniRequestOptions): Promise<T>;
+    /** Contract-checked JSON transport shared by opt-in typed SDK clients. */
+    requestJson<T>(method: string, path: string, body?: unknown, query?: Record<string, string>, options?: OpenGeniRequestOptions): Promise<T>;
+    /** Authenticated, contract-checked response for bounded streaming downloads. */
+    protected requestResponse(method: string, path: string, query?: Record<string, string>, options?: OpenGeniRequestOptions): Promise<Response>;
     /** Like `requestJson` for endpoints that respond with no body (204). */
     private requestVoid;
 }

package/dist/codex-realtime-controller.d.ts

@@ -1,9 +1,9 @@
-import type { CodexRealtimeV3BridgeSnapshot } from "./codex-realtime-v3";
-import type { SessionRealtimeLifecycleProjection } from "./codex-realtime-lifecycle";
-import type { CodexRealtimeAudibleOutputState, CodexRealtimeConnectionHealth, CodexRealtimeMicrophoneErrorCode, CodexRealtimeWebrtcSession } from "./codex-realtime";
-import type { ActivateCodexRealtimeConnectionRequest, BeginSessionRealtimeRequest, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, EndSessionRealtimeRequest, RenewSessionRealtimeRequest, SessionRealtimeMode, SessionRealtimeModel, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse } from "./types";
-export { projectSessionRealtimeLifecycle } from "./codex-realtime-lifecycle";
-export type { SessionRealtimeLifecycleProjection } from "./codex-realtime-lifecycle";
+import type { CodexRealtimeV3BridgeSnapshot } from "./codex-realtime-v3.js";
+import type { SessionRealtimeLifecycleProjection } from "./codex-realtime-lifecycle.js";
+import type { CodexRealtimeAudibleOutputState, CodexRealtimeConnectionHealth, CodexRealtimeMicrophoneErrorCode, CodexRealtimeWebrtcSession } from "./codex-realtime.js";
+import type { ActivateCodexRealtimeConnectionRequest, BeginSessionRealtimeRequest, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse, GatewayRealtimeConnectRequest, GatewayRealtimeConnectResponse, EndSessionRealtimeRequest, RenewSessionRealtimeRequest, SessionRealtimeMode, SessionRealtimeModel, SessionRealtimeMutationResponse, SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse } from "./types.js";
+export { projectSessionRealtimeLifecycle } from "./codex-realtime-lifecycle.js";
+export type { SessionRealtimeLifecycleProjection } from "./codex-realtime-lifecycle.js";
 export declare const CODEX_REALTIME_NEGOTIATION_TIMEOUT_MS = 20000;
 export type CodexRealtimeControllerStatus = "idle" | "starting" | "active" | "stopping" | "recovering" | "lost_owner" | "error";
 export type CodexRealtimeMicrophoneState = "inactive" | "acquiring" | "active" | CodexRealtimeMicrophoneErrorCode;

package/dist/codex-realtime-lifecycle.d.ts

@@ -1,4 +1,4 @@
-import type { SessionEvent, SessionRealtimeModel } from "./types";
+import type { SessionEvent, SessionRealtimeModel } from "./types.js";
 export type SessionRealtimeLifecycleProjection = {
     state: "active";
     realtimeId: string;

package/dist/codex-realtime-v3.d.ts

@@ -1,6 +1,6 @@
-import type { SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse } from "./types";
-export { CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES, CODEX_REALTIME_V3_MAX_EVENT_BYTES, CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES, CODEX_REALTIME_V3_MAX_TEXT_BYTES, contextAppendChunks, encodeCodexRealtimeV3DelegationContextAppend, encodeCodexRealtimeV3SessionContextAppend, parseCodexRealtimeV3Event, } from "./codex-realtime-v3-wire";
-export type { CodexRealtimeV3ContextAppendChannel, CodexRealtimeV3DelegationContextAppend, CodexRealtimeV3Event, CodexRealtimeV3ParseFailure, CodexRealtimeV3ParseResult, CodexRealtimeV3SessionContextAppend, } from "./codex-realtime-v3-wire";
+import type { SyncSessionRealtimeLedgerRequest, SyncSessionRealtimeLedgerResponse } from "./types.js";
+export { CODEX_REALTIME_CONTEXT_APPEND_MAX_BYTES, CODEX_REALTIME_V3_MAX_EVENT_BYTES, CODEX_REALTIME_V3_MAX_IDENTIFIER_BYTES, CODEX_REALTIME_V3_MAX_TEXT_BYTES, contextAppendChunks, encodeCodexRealtimeV3DelegationContextAppend, encodeCodexRealtimeV3SessionContextAppend, parseCodexRealtimeV3Event, } from "./codex-realtime-v3-wire.js";
+export type { CodexRealtimeV3ContextAppendChannel, CodexRealtimeV3DelegationContextAppend, CodexRealtimeV3Event, CodexRealtimeV3ParseFailure, CodexRealtimeV3ParseResult, CodexRealtimeV3SessionContextAppend, } from "./codex-realtime-v3-wire.js";
 export declare const CODEX_REALTIME_V3_SYNC_MAX_ENTRIES = 64;
 export declare const CODEX_REALTIME_V3_PENDING_MAX_ENTRIES = 256;
 export declare const CODEX_REALTIME_V3_PENDING_MAX_BYTES: number;

package/dist/codex-realtime.d.ts

@@ -1,4 +1,4 @@
-import type { CodexRealtimeVoice, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse } from "./types";
+import type { CodexRealtimeVoice, CodexRealtimeWebrtcRequest, CodexRealtimeWebrtcResponse } from "./types.js";
 export type CodexRealtimeNegotiator = (request: CodexRealtimeWebrtcRequest, options: {
     signal?: AbortSignal | undefined;
 }) => Promise<CodexRealtimeWebrtcResponse>;

package/dist/company-profile.d.ts

@@ -0,0 +1,100 @@
+export declare const COMPANY_PROFILE_SCALAR_MAX_CHARS = 2048;
+export declare const COMPANY_PROFILE_ENTRY_MAX_CHARS = 1024;
+export declare const COMPANY_PROFILE_ENTRY_MAX_COUNT = 16;
+export type CompanyProfileEntry = {
+    key: string;
+    content: string;
+};
+export type CompanyProfileContent = {
+    identity: string | null;
+    mission: string | null;
+    products: CompanyProfileEntry[];
+    customers: CompanyProfileEntry[];
+    goals: CompanyProfileEntry[];
+    constraints: CompanyProfileEntry[];
+};
+export type CompanyProfileRevisionIdentity = {
+    id: string;
+    revision: number;
+    contentHash: string;
+};
+export type CompanyProfileRevision = CompanyProfileRevisionIdentity & {
+    operationId: string;
+    accountId: string;
+    intent: "active" | "proposal";
+    profile: CompanyProfileContent;
+    provenance: {
+        source: "human" | "durable_learning" | "migration";
+        sourceId: string | null;
+    };
+    supersedesRevisionId: string | null;
+    createdBySubjectId: string;
+    createdAt: string;
+};
+export type CompanyProfileHead = {
+    accountId: string;
+    revisionId: string;
+    revision: number;
+    contentHash: string;
+    activationVersion: number;
+    activatedAt: string;
+};
+export type CompanyProfileActivationEvent = {
+    id: string;
+    operationId: string;
+    accountId: string;
+    type: "activate" | "rollback";
+    activationVersion: number;
+    oldRevision: CompanyProfileRevisionIdentity | null;
+    newRevision: CompanyProfileRevisionIdentity | null;
+    actorSubjectId: string;
+    reason: string;
+    createdAt: string;
+};
+export type CompanyProfileListOptions = {
+    afterRevision?: number;
+    limit?: number;
+};
+export type CompanyProfileListResponse = {
+    current: CompanyProfileHead | null;
+    activeRevision: CompanyProfileRevision | null;
+    revisions: CompanyProfileRevision[];
+    activationEvents: CompanyProfileActivationEvent[];
+    nextAfterRevision: number | null;
+};
+export type UpdateCompanyProfileRequest = {
+    operationId?: string;
+    profile: CompanyProfileContent;
+    expectedCurrentRevisionId: string | null;
+    expectedActivationVersion: number;
+    reason: string;
+};
+export type ActivateCompanyProfileRevisionRequest = {
+    operationId?: string;
+    expectedCurrentRevisionId: string | null;
+    expectedActivationVersion: number;
+    reason: string;
+};
+export type RollbackCompanyProfileRequest = {
+    operationId?: string;
+    targetRevisionId: string;
+    expectedCurrentRevisionId: string;
+    expectedActivationVersion: number;
+    reason: string;
+};
+export type CompanyProfileMutationResponse = {
+    revision: CompanyProfileRevision | null;
+    head: CompanyProfileHead | null;
+    event: CompanyProfileActivationEvent | null;
+};
+export type CompanyProfileDiffRequest = {
+    fromRevisionId: string;
+    toRevisionId: string;
+};
+export type CompanyProfileDiffResponse = {
+    from: CompanyProfileRevision;
+    to: CompanyProfileRevision;
+    format: "unified_json";
+    diff: string;
+};
+export declare function normalizeCompanyProfileStableKey(value: string): string;

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-export { OpenGeniClient as OpenGeniCoreClient } from "./client";
-export type { FetchLike, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client";
-export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors";
-export { resolveWorkspaceVoiceInputEnabled } from "./transcription";
-export { OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION } from "./types";
+export { OpenGeniClient as OpenGeniCoreClient } from "./client.js";
+export type { FetchLike, OpenGeniClientOptions, OpenGeniRequestOptions, SendMessageInput, SteerMessageResult, TranscribeAudioInput, WorkspaceControlEventPage, } from "./client.js";
+export { OpenGeniApiContractMismatchError, OpenGeniApiError, OpenGeniSessionListCursorError, OpenGeniStreamError, isRetryableStreamError, } from "./errors.js";
+export { resolveWorkspaceVoiceInputEnabled } from "./transcription.js";
+export { OPENGENI_API_CONTRACT_HEADER, OPENGENI_API_CONTRACT_REVISION } from "./types.js";

package/dist/core.js

@@ -1,9 +1,9 @@
 import {
-  OPENGENI_API_CONTRACT_HEADER,
-  OPENGENI_API_CONTRACT_REVISION,
-  OpenGeniClient,
   resolveWorkspaceVoiceInputEnabled
-} from "./chunk-QKV5OCLJ.js";
+} from "./chunk-VYCTL62C.js";
+import {
+  OpenGeniClient
+} from "./chunk-ILQZR5N6.js";
 import {
   OpenGeniApiContractMismatchError,
   OpenGeniApiError,
@@ -11,6 +11,11 @@ import {
   OpenGeniStreamError,
   isRetryableStreamError
 } from "./chunk-V5F253OG.js";
+import "./chunk-MZWTWOX6.js";
+import {
+  OPENGENI_API_CONTRACT_HEADER,
+  OPENGENI_API_CONTRACT_REVISION
+} from "./chunk-FRJFNDIR.js";
 export {
   OPENGENI_API_CONTRACT_HEADER,
   OPENGENI_API_CONTRACT_REVISION,

package/dist/desktop.d.ts

@@ -1,4 +1,4 @@
-import type { DesktopStreamCapability, StreamUrlRotatedPayload } from "./types";
+import type { DesktopStreamCapability, StreamUrlRotatedPayload } from "./types.js";
 /**
  * Translate the negotiated desktop capability into the WebSocket URL the noVNC
  * RFB client connects to. The scoped provider token is ALREADY embedded in the