@opengeni/sdk 0.48.0 → 0.57.0

package/README.md

@@ -87,6 +87,112 @@ through a tenant-scoped, same-origin proxy. The SDK does not move persistence,
 prompt construction, context processing, delegation, or provider credentials
 out of `apps/api`, `apps/worker`, or `packages/db`.
 
+## Editable artifact sync (`@opengeni/sdk/editable-artifacts`)
+
+Editable-artifact storage, sync, and Worker clients live behind an isolated
+subpath; importing the ordinary SDK never loads them. Browser hosts should
+bundle the dedicated module-Worker entry and pass its URL plus the exact,
+version-matched kernel assets to the client:
+
+```ts
+import { OpenGeniClient } from "@opengeni/sdk/artifacts";
+import workerUrl from "@opengeni/sdk/editable-artifacts/worker?worker&url";
+import {
+  createBrowserEditableArtifactSession,
+} from "@opengeni/sdk/editable-artifacts";
+
+const client = new OpenGeniClient({ baseUrl: "https://api.example.com" });
+const artifact = await client.getEditableArtifact(workspaceId, artifactId, {
+  replicaId,
+});
+const kernels = {
+  spreadsheet: () => import("@opengeni/artifact-kernel-wasm-spreadsheet"),
+  document: () => import("@opengeni/artifact-kernel-wasm-document"),
+  presentation: () => import("@opengeni/artifact-kernel-wasm-presentation"),
+} as const;
+const { editableArtifactKernelRuntime } = await kernels[artifact.modality]();
+const session = createBrowserEditableArtifactSession({
+  baseUrl: "https://api.example.com",
+  workspaceId,
+  artifact,
+  storageAuthority,
+  runtime: {
+    workerUrl,
+    ...editableArtifactKernelRuntime,
+    applicationOrigin: window.location.origin,
+  },
+});
+```
+
+Each kernel package contains only one editor modality, carries a static typed
+build/protocol/model/command identity, and is reproduced from smoke-tested Rust
+outputs under separate raw and gzip budgets. The Worker verifies that identity
+against executable WASM capabilities before accepting state. A self-hosted host
+may instead serve the exact version-matched glue and WASM binary together.
+Canonical OGASC commands, OGATX intents, OGACO commits, and OGAKQ/OGAKV
+queries/projections pass directly through the kernel; there is no JavaScript
+operation mapper.
+
+The live transport mints a short-lived, one-use ticket over authenticated HTTP,
+then sends that ticket inside the first binary OGALV WebSocket frame. API keys
+and long-lived credentials are never placed in the WebSocket URL. Hosts may
+inject both `fetch` and the WebSocket factory for authenticated proxies and
+tests; negotiated frame and mutation limits are enforced before work is queued.
+
+## Browser and computer interaction (`@opengeni/sdk/interaction`)
+
+An interaction **resource** is a workspace-scoped, durable object with a stable
+id and lifecycle, such as a `BrowserSession`, `ComputerSession`, browser
+identity, network route, auth run, or pending human intervention. This use of
+"resource" is unrelated to the file/repository `resources` attached to a chat
+message. A **facade** is only the typed, resource-oriented SDK organization
+shown below; it owns no state or authority of its own.
+
+`OpenGeniClient.interaction` is the framework-free resource facade over the same
+public BrowserSession, ComputerSession, identity, auth, network-route, and human
+intervention APIs used by OpenGeni itself. It adds no second state or execution
+path: facade methods call the ordinary typed transport, and every mutation still
+uses the canonical generation fences, operation receipt, permission check, and
+placement controller.
+
+```ts
+const browser = await client.interaction.browsers.currentOrOpen({
+  workspaceId,
+  associationSessionId: session.id,
+  initialUrl: "http://127.0.0.1:3000",
+});
+
+const { targets } = await browser.tabs.list();
+const target = targets.find((candidate) => candidate.selected) ?? targets[0]!;
+const page = await browser.observe(target.id);
+
+const receipt = await browser.act({
+  operationId: crypto.randomUUID(),
+  targetId: target.id,
+  expectedTargetGeneration: target.targetGeneration,
+  expectedDocumentGeneration: target.documentGeneration,
+  expectedFrameId: page.frameId,
+  action: { type: "click", locator: { kind: "role", role: "button", name: "Continue" } },
+});
+
+if (receipt.state === "outcome_unknown") {
+  // Do not replay a mutation blindly. Re-observe, then inspect this exact receipt.
+  console.log(await browser.receipt(receipt.operationId));
+}
+```
+
+Browser identities are immutable version graphs: live browser state stays
+private until `browser.publishRevision(...)` explicitly creates a new revision.
+Protected auth fills resolve connection secrets only inside the broker/controller
+path; normal SDK reads, observations, diagnostics, receipts, and logs never
+return credential values. `client.openWorkspaceInteractionRevisionStream(...)`
+is the low-volume latest-wins invalidation stream for keeping resource catalogs
+fresh without attaching them to an inference/session event stream.
+
+Use the flat `OpenGeniClient` interaction methods when implementing a proxy or
+custom transport. Use `client.interaction` for application logic. Both are the
+same API and authority boundary.
+
 ## Workspace artifacts
 
 Workspace artifacts are generic, immutable HTML publications. The SDK does not
@@ -362,6 +468,18 @@ const file = await client.uploadFile(workspaceId, {
 const { url } = await client.createFileDownloadUrl(workspaceId, file.id);
 ```
 
+Generated-image tool results use the same workspace file authority but expose a
+closed `generated_image` receipt. Prefer a short-lived zero-copy browser URL;
+use the bounded range method when the caller needs verified bytes:
+
+```ts
+const { url } = await client.createRetainedArtifactDownloadUrl(workspaceId, receipt.artifact);
+const { bytes } = await client.downloadRetainedArtifact(workspaceId, receipt.artifact);
+```
+
+Both methods validate the receipt first. The byte path additionally verifies
+the assembled SHA-256. See `docs/image-generation.md` in the repository.
+
 ## Connected Machines (bring-your-own-compute)
 
 A session can run on an enrolled **Connected Machine** — a user's own computer —
@@ -396,6 +514,12 @@ the enrollment methods (`mintEnrollToken`, `lookupDeviceEnrollment`,
 `approveDeviceEnrollment`, `denyDeviceEnrollment`) are covered in the
 [Connected Machines guide](../../docs/connected-machines.md).
 
+For large agent hierarchies, use `listAgentTopology` instead of collecting full
+session pages. It returns compact root, direct-child, or server-side search
+pages with opaque cursors and server-authored descendant counts. Load a child
+page only when its parent is expanded; `children.truncated` makes a lower-bound
+aggregate explicit.
+
 ## Full API coverage
 
 Every public endpoint group has typed methods:
@@ -403,7 +527,7 @@ Every public endpoint group has typed methods:
 | Group | Methods |
 | --- | --- |
 | Access + workspaces | `getAccessContext`, `listWorkspaces`, `createWorkspace`, `getWorkspace`, `updateWorkspace` |
-| Sessions + events | `createSession`, `listSessions`, `getSession`, `updateSession`, `listEvents`, `sendEvent`, `sendMessage`, `steerMessage`, `pauseSession`, `resumeSession`, `cancelSession`, `sendApprovalDecision`, `streamEvents`, `openEventStream` |
+| Sessions + events | `createSession`, `listSessions`, `listSessionPage`, `listAgentTopology`, `getSession`, `getSessionLineage`, `updateSession`, `listEvents`, `sendEvent`, `sendMessage`, `steerMessage`, `pauseSession`, `resumeSession`, `cancelSession`, `sendApprovalDecision`, `streamEvents`, `openEventStream` |
 | Machines (bring-your-own-compute) | `listMachines`, `machineMetricsSeries`, `swapActiveSandbox`, `mintEnrollToken`, `lookupDeviceEnrollment`, `approveDeviceEnrollment`, `denyDeviceEnrollment` |
 | Turn queue | `getQueue`, `moveQueueItem`, `editQueueItem`, `steerQueueItem`, `deleteQueueItem` |
 | Goal | `getGoal`, `updateGoal`, `pauseGoal`, `resumeGoal` |
@@ -413,10 +537,32 @@ Every public endpoint group has typed methods:
 | Documents | `createDocumentBase`, `listDocumentBases`, `getDocumentBase`, `addDocument`, `listDocuments`, `reindexDocument`, `searchDocuments`, `searchKnowledge` (effective organization + workspace + immutable initiating-user personal scope) |
 | Packs | `listPacks`, `registerPack`, `getPack`, `enablePack`, `deletePack`, `listPackInstallations` |
 | Capabilities | `listCapabilities`, `createCapability`, `enableCapability`, `disableCapability`, `discoverMcpCapabilities` |
+| Plugin packages | `previewPlugin`, `installPlugin`, `previewPluginUninstall`, `uninstallPlugin` |
+| API Integrations | `listIntegrationDefinitions`, `listApiIntegrations`, `previewApiIntegration`, `startApiIntegrationOAuth`, `installApiIntegration`, `previewApiIntegrationUninstall`, `uninstallApiIntegration`, `listIntegrationFacets`, `configureIntegrationFacet`, `pauseIntegrationFacet`, `resumeIntegrationFacet`, `removeIntegrationFacet`, `browseGoogleDriveFacetSource`, `saveGoogleDriveFacetSource` |
+| Remote Skills | `previewSkillImport`, `installSkill`, `previewSkillUninstall`, `uninstallSkill` |
 | GitHub | `getGitHubApp`, `githubConnectUrl`, `listGitHubRepositories`, `syncGitHubRepositories`, `createGitHubAppManifest` |
 | API keys | `listApiKeys`, `createApiKey`, `deleteApiKey` |
 | Billing | `getBilling`, `getBillingUsage`, `getBillingEntitlements`, `createBillingCheckout` |
 
+`listIntegrationDefinitions` returns safe Integration Definition metadata without any
+deployment OAuth client credentials. API Integrations are multi-instance:
+`installApiIntegration` may supply a
+stable `instanceKey`, display name, and exact Connection. The returned
+`serverId` is instance-specific, so two Gmail or Linear accounts can be
+selected in one session without tool-name collision. Uninstall preview and
+uninstall both require the exact `instanceKey` and instance version; neither
+operation disconnects the underlying Connection.
+
+Adapter-owned Integration facets are listed and mutated under the exact
+`capabilityId` + `instanceKey` + `facetKey`. Generic primitive schemas use
+`configureIntegrationFacet`; lifecycle changes and removal require the
+binding's exact optimistic version plus a caller UUID idempotency key. Google
+Drive's nested folder/Shared Drive source schema has dedicated
+`browseGoogleDriveFacetSource` and `saveGoogleDriveFacetSource`
+methods. They verify provider metadata through that instance's exact Connection
+and persist only a versioned facet binding—never provider credentials, page
+tokens, or selected-source configuration on the Connection.
+
 ### Protocol routes (deliberately not in the SDK)
 
 Some endpoints are wire protocols for specific counterparts, not client

package/dist/artifact-client.d.ts

@@ -1,7 +1,25 @@
-import { OpenGeniClient as OpenGeniCoreClient } from "./client";
-import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts";
+import { OpenGeniClient as OpenGeniCoreClient } from "./client.js";
+import type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationJobResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ImportEditableArtifactResourceRequest, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions } from "./editable-artifact-resources.js";
+import type { CreateWorkspaceArtifactRequest, PublishWorkspaceArtifactVersionRequest, RollbackWorkspaceArtifactRequest, WorkspaceArtifactContentResponse, WorkspaceArtifactDetailResponse, WorkspaceArtifactListOptions, WorkspaceArtifactListResponse, WorkspaceArtifactMutationResponse } from "./workspace-artifacts.js";
 /** Public SDK client. Artifact operations stay out of the console's eager core graph. */
 export declare class OpenGeniClient extends OpenGeniCoreClient {
+    createEditableArtifact(workspaceId: string, request: CreateEditableArtifactResourceRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactResource>;
+    importEditableArtifact(workspaceId: string, request: ImportEditableArtifactResourceRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactResource>;
+    getEditableArtifact(workspaceId: string, artifactId: string, options: ReadEditableArtifactResourceOptions): Promise<EditableArtifactResource>;
+    listSessionEditableArtifacts(workspaceId: string, sourceSessionId: string, options: ListSessionEditableArtifactResourcesOptions): Promise<EditableArtifactListResource>;
+    pinEditableArtifactVersion(workspaceId: string, artifactId: string, request: PinEditableArtifactVersionRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactPinnedVersionResource>;
+    createEditableArtifactMaterialization(workspaceId: string, artifactId: string, request: CreateEditableArtifactMaterializationRequest, options?: Readonly<{
+        signal?: AbortSignal | undefined;
+    }>): Promise<EditableArtifactMaterializationJobResource>;
+    getEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<EditableArtifactMaterializationJobResource>;
+    /** The caller owns the returned bounded response stream. */
+    downloadEditableArtifactMaterialization(workspaceId: string, artifactId: string, jobId: string, options: ReadEditableArtifactMaterializationOptions): Promise<Response>;
     listWorkspaceArtifacts(workspaceId: string, options?: WorkspaceArtifactListOptions): Promise<WorkspaceArtifactListResponse>;
     getWorkspaceArtifact(workspaceId: string, artifactId: string): Promise<WorkspaceArtifactDetailResponse>;
     getWorkspaceArtifactContent(workspaceId: string, artifactId: string, versionId?: string): Promise<WorkspaceArtifactContentResponse>;

package/dist/artifacts.d.ts

@@ -0,0 +1,4 @@
+/** Artifact-only API client entry; keeps unrelated SDK surfaces out of editor bundles. */
+export { OpenGeniClient } from "./artifact-client.js";
+export type { CreateEditableArtifactMaterializationRequest, CreateEditableArtifactResourceRequest, EditableArtifactListResource, EditableArtifactMaterializationFormat, EditableArtifactMaterializationJobResource, EditableArtifactMaterializationResultResource, EditableArtifactPinnedVersionResource, EditableArtifactResource, ListSessionEditableArtifactResourcesOptions, PinEditableArtifactVersionRequest, ReadEditableArtifactMaterializationOptions, ReadEditableArtifactResourceOptions, } from "./editable-artifact-resources.js";
+export type { FetchLike, OpenGeniClientOptions, OpenGeniRequestOptions } from "./client.js";

package/dist/artifacts.js

@@ -0,0 +1,11 @@
+import {
+  OpenGeniClient
+} from "./chunk-JRPFWI6T.js";
+import "./chunk-PKQ377ED.js";
+import "./chunk-HJ3HHUT5.js";
+import "./chunk-GU6JF75T.js";
+import "./chunk-ST5DDKJP.js";
+export {
+  OpenGeniClient
+};
+//# sourceMappingURL=artifacts.js.map

package/dist/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{chunk-V5F253OG.js → chunk-GU6JF75T.js}

@@ -21,7 +21,7 @@ var OpenGeniApiError = class extends Error {
     this.code = options.code ?? decoded?.code ?? (gatewayFailure && fromResponse ? "upstream_unavailable" : void 0);
     this.retryable = options.retryable ?? decoded?.retryable ?? retryableApiStatus(status);
     this.correlationId = correlationId;
-    this.outcomeUnknown = options.outcomeUnknown ?? (gatewayFailure && !!options.mutation && !decoded);
+    this.outcomeUnknown = options.outcomeUnknown ?? decoded?.outcomeUnknown ?? (gatewayFailure && !!options.mutation && !decoded);
     this.body = !fromResponse || decoded ? body : "";
     this.details = decoded?.details;
   }
@@ -37,13 +37,16 @@ function decodeApiErrorBody(body) {
     const message = boundedApiField(nested.message);
     const requestId = boundedCorrelationId(nested.requestId);
     const retryable = typeof nested.retryable === "boolean" ? nested.retryable : void 0;
+    const outcomeUnknown = typeof nested.outcomeUnknown === "boolean" ? nested.outcomeUnknown : void 0;
     const details = boundedApiDetails(nested.details);
-    if (!code && !message && !requestId && retryable === void 0 && !details) return null;
+    if (!code && !message && !requestId && retryable === void 0 && outcomeUnknown === void 0 && !details)
+      return null;
     return {
       code,
       message,
       requestId,
       retryable,
+      outcomeUnknown,
       details
     };
   } catch {
@@ -113,4 +116,4 @@ export {
   isAbortError,
   isRetryableStreamError
 };
-//# sourceMappingURL=chunk-V5F253OG.js.map
+//# sourceMappingURL=chunk-GU6JF75T.js.map

package/dist/chunk-GU6JF75T.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts"],"sourcesContent":["/** Error for a non-2xx OpenGeni API response. */\nexport class OpenGeniApiError extends Error {\n  readonly status: number;\n  readonly code: string | undefined;\n  readonly retryable: boolean;\n  readonly correlationId: string | undefined;\n  /** True only when an uncontrolled transport failed after a mutation may have been accepted. */\n  readonly outcomeUnknown: boolean;\n  readonly body: string;\n  readonly details: Record<string, unknown> | undefined;\n\n  constructor(\n    status: number,\n    body: string,\n    options: {\n      code?: string | undefined;\n      retryable?: boolean | undefined;\n      correlationId?: string | undefined;\n      outcomeUnknown?: boolean | undefined;\n      displayMessage?: string | undefined;\n      mutation?: boolean | undefined;\n    } = {},\n  ) {\n    const decoded = decodeApiErrorBody(body);\n    const correlationId = decoded?.requestId ?? boundedCorrelationId(options.correlationId);\n    const gatewayFailure = status >= 502 && status <= 504;\n    const fromResponse = options.mutation !== undefined;\n    const message = decoded?.message ?? (fromResponse ? \"Request failed.\" : body || \"(empty body)\");\n    const displayMessage =\n      options.displayMessage ??\n      (gatewayFailure && fromResponse\n        ? (decoded?.message ?? \"OpenGeni is temporarily unavailable — retry.\")\n        : `OpenGeni API ${status}: ${message}`);\n    super(correlationId ? `${displayMessage} Reference: ${correlationId}.` : displayMessage);\n    this.name = \"OpenGeniApiError\";\n    this.status = status;\n    this.code =\n      options.code ??\n      decoded?.code ??\n      (gatewayFailure && fromResponse ? \"upstream_unavailable\" : undefined);\n    this.retryable = options.retryable ?? decoded?.retryable ?? retryableApiStatus(status);\n    this.correlationId = correlationId;\n    this.outcomeUnknown =\n      options.outcomeUnknown ??\n      decoded?.outcomeUnknown ??\n      (gatewayFailure && !!options.mutation && !decoded);\n    this.body = !fromResponse || decoded ? body : \"\";\n    this.details = decoded?.details;\n  }\n}\n\nfunction decodeApiErrorBody(body: string): {\n  code: string | undefined;\n  message: string | undefined;\n  requestId: string | undefined;\n  retryable: boolean | undefined;\n  outcomeUnknown: boolean | undefined;\n  details: Record<string, unknown> | undefined;\n} | null {\n  if (!body) return null;\n  try {\n    const decoded: unknown = JSON.parse(body);\n    if (!decoded || typeof decoded !== \"object\" || Array.isArray(decoded)) return null;\n    const record = decoded as Record<string, unknown>;\n    const nested =\n      record.error && typeof record.error === \"object\" && !Array.isArray(record.error)\n        ? (record.error as Record<string, unknown>)\n        : record;\n    const code = boundedApiField(nested.code);\n    const message = boundedApiField(nested.message);\n    const requestId = boundedCorrelationId(nested.requestId);\n    const retryable = typeof nested.retryable === \"boolean\" ? nested.retryable : undefined;\n    const outcomeUnknown =\n      typeof nested.outcomeUnknown === \"boolean\" ? nested.outcomeUnknown : undefined;\n    const details = boundedApiDetails(nested.details);\n    if (\n      !code &&\n      !message &&\n      !requestId &&\n      retryable === undefined &&\n      outcomeUnknown === undefined &&\n      !details\n    )\n      return null;\n    return {\n      code,\n      message,\n      requestId,\n      retryable,\n      outcomeUnknown,\n      details,\n    };\n  } catch {\n    return null;\n  }\n}\n\nfunction boundedApiDetails(value: unknown): Record<string, unknown> | undefined {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) return;\n  const entries = Object.entries(value as Record<string, unknown>).slice(0, 16);\n  const details: Record<string, unknown> = {};\n  for (const [key, entry] of entries) {\n    if (!/^[a-zA-Z][\\w.-]{0,63}$/.test(key)) continue;\n    if (typeof entry === \"string\") {\n      const bounded = boundedApiField(entry);\n      if (bounded !== undefined) details[key] = bounded;\n    } else if (typeof entry === \"number\" || typeof entry === \"boolean\" || entry === null) {\n      details[key] = entry;\n    }\n  }\n  return Object.keys(details).length > 0 ? details : undefined;\n}\n\nfunction boundedApiField(value: unknown): string | undefined {\n  if (typeof value !== \"string\") return;\n  const bytes = new TextEncoder().encode(value);\n  return bytes.byteLength <= 512 ? value : new TextDecoder().decode(bytes.slice(0, 512));\n}\n\nfunction retryableApiStatus(status: number): boolean {\n  return status === 408 || status === 409 || status === 425 || status === 429 || status >= 500;\n}\n\nfunction boundedCorrelationId(value: unknown): string | undefined {\n  if (typeof value !== \"string\" || value.length > 128 || !/^[\\w.:-]+$/.test(value)) {\n    return;\n  }\n  return value;\n}\n\n/** A short-lived session-list snapshot cursor can no longer be continued. */\nexport class OpenGeniSessionListCursorError extends OpenGeniApiError {}\n\n/** The browser bundle and API disagree about their state-changing wire contract. */\nexport class OpenGeniApiContractMismatchError extends Error {\n  readonly expected: string;\n  readonly actual: string;\n\n  constructor(expected: string, actual: string) {\n    super(`OpenGeni API contract mismatch: client expects ${expected}, API serves ${actual}`);\n    this.name = \"OpenGeniApiContractMismatchError\";\n    this.expected = expected;\n    this.actual = actual;\n  }\n}\n\n/** Error for an unrecoverable event-stream condition (not a transient drop). */\nexport class OpenGeniStreamError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"OpenGeniStreamError\";\n  }\n}\n\nexport function isAbortError(error: unknown): boolean {\n  return (\n    (error instanceof DOMException && error.name === \"AbortError\") ||\n    (error instanceof Error && error.name === \"AbortError\")\n  );\n}\n\n/**\n * Transient conditions worth a reconnect: network-level failures (`fetch`\n * rejects with `TypeError`) and HTTP statuses that signal a temporary server\n * or contention condition. Auth/validation failures (401/403/404/...) are\n * permanent and surface to the caller instead.\n */\nexport function isRetryableStreamError(error: unknown): boolean {\n  if (error instanceof OpenGeniApiError) return error.retryable;\n  return error instanceof TypeError;\n}\n"],"mappings":";AACO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EACjC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YACE,QACA,MACA,UAOI,CAAC,GACL;AACA,UAAM,UAAU,mBAAmB,IAAI;AACvC,UAAM,gBAAgB,SAAS,aAAa,qBAAqB,QAAQ,aAAa;AACtF,UAAM,iBAAiB,UAAU,OAAO,UAAU;AAClD,UAAM,eAAe,QAAQ,aAAa;AAC1C,UAAM,UAAU,SAAS,YAAY,eAAe,oBAAoB,QAAQ;AAChF,UAAM,iBACJ,QAAQ,mBACP,kBAAkB,eACd,SAAS,WAAW,sDACrB,gBAAgB,MAAM,KAAK,OAAO;AACxC,UAAM,gBAAgB,GAAG,cAAc,eAAe,aAAa,MAAM,cAAc;AACvF,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OACH,QAAQ,QACR,SAAS,SACR,kBAAkB,eAAe,yBAAyB;AAC7D,SAAK,YAAY,QAAQ,aAAa,SAAS,aAAa,mBAAmB,MAAM;AACrF,SAAK,gBAAgB;AACrB,SAAK,iBACH,QAAQ,kBACR,SAAS,mBACR,kBAAkB,CAAC,CAAC,QAAQ,YAAY,CAAC;AAC5C,SAAK,OAAO,CAAC,gBAAgB,UAAU,OAAO;AAC9C,SAAK,UAAU,SAAS;AAAA,EAC1B;AACF;AAEA,SAAS,mBAAmB,MAOnB;AACP,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI;AACF,UAAM,UAAmB,KAAK,MAAM,IAAI;AACxC,QAAI,CAAC,WAAW,OAAO,YAAY,YAAY,MAAM,QAAQ,OAAO,EAAG,QAAO;AAC9E,UAAM,SAAS;AACf,UAAM,SACJ,OAAO,SAAS,OAAO,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,OAAO,KAAK,IAC1E,OAAO,QACR;AACN,UAAM,OAAO,gBAAgB,OAAO,IAAI;AACxC,UAAM,UAAU,gBAAgB,OAAO,OAAO;AAC9C,UAAM,YAAY,qBAAqB,OAAO,SAAS;AACvD,UAAM,YAAY,OAAO,OAAO,cAAc,YAAY,OAAO,YAAY;AAC7E,UAAM,iBACJ,OAAO,OAAO,mBAAmB,YAAY,OAAO,iBAAiB;AACvE,UAAM,UAAU,kBAAkB,OAAO,OAAO;AAChD,QACE,CAAC,QACD,CAAC,WACD,CAAC,aACD,cAAc,UACd,mBAAmB,UACnB,CAAC;AAED,aAAO;AACT,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,kBAAkB,OAAqD;AAC9E,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG;AACjE,QAAM,UAAU,OAAO,QAAQ,KAAgC,EAAE,MAAM,GAAG,EAAE;AAC5E,QAAM,UAAmC,CAAC;AAC1C,aAAW,CAAC,KAAK,KAAK,KAAK,SAAS;AAClC,QAAI,CAAC,yBAAyB,KAAK,GAAG,EAAG;AACzC,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,UAAU,gBAAgB,KAAK;AACrC,UAAI,YAAY,OAAW,SAAQ,GAAG,IAAI;AAAA,IAC5C,WAAW,OAAO,UAAU,YAAY,OAAO,UAAU,aAAa,UAAU,MAAM;AACpF,cAAQ,GAAG,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,UAAU;AACrD;AAEA,SAAS,gBAAgB,OAAoC;AAC3D,MAAI,OAAO,UAAU,SAAU;AAC/B,QAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,SAAO,MAAM,cAAc,MAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,MAAM,MAAM,GAAG,GAAG,CAAC;AACvF;AAEA,SAAS,mBAAmB,QAAyB;AACnD,SAAO,WAAW,OAAO,WAAW,OAAO,WAAW,OAAO,WAAW,OAAO,UAAU;AAC3F;AAEA,SAAS,qBAAqB,OAAoC;AAChE,MAAI,OAAO,UAAU,YAAY,MAAM,SAAS,OAAO,CAAC,aAAa,KAAK,KAAK,GAAG;AAChF;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,iCAAN,cAA6C,iBAAiB;AAAC;AAG/D,IAAM,mCAAN,cAA+C,MAAM;AAAA,EACjD;AAAA,EACA;AAAA,EAET,YAAY,UAAkB,QAAgB;AAC5C,UAAM,kDAAkD,QAAQ,gBAAgB,MAAM,EAAE;AACxF,SAAK,OAAO;AACZ,SAAK,WAAW;AAChB,SAAK,SAAS;AAAA,EAChB;AACF;AAGO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,SAAS,aAAa,OAAyB;AACpD,SACG,iBAAiB,gBAAgB,MAAM,SAAS,gBAChD,iBAAiB,SAAS,MAAM,SAAS;AAE9C;AAQO,SAAS,uBAAuB,OAAyB;AAC9D,MAAI,iBAAiB,iBAAkB,QAAO,MAAM;AACpD,SAAO,iBAAiB;AAC1B;","names":[]}

package/dist/chunk-HJ3HHUT5.js

@@ -0,0 +1,222 @@
+// src/types.ts
+var DEFAULT_FILE_RESOURCE_MOUNT_ROOT = ".opengeni/files";
+var SESSION_EVENT_TYPES = [
+  "session.created",
+  // Defensive bounded projection for malformed/legacy oversized envelopes.
+  "session.event.envelope_omitted",
+  "session.status.changed",
+  "session.realtime.started",
+  "session.realtime.ended",
+  "session.requiresAction",
+  "session.humanInput.requested",
+  "session.context.compaction.requested",
+  "session.context.compaction.started",
+  "session.context.compacted",
+  "session.context.compaction.skipped",
+  "session.context.cleared",
+  "user.message",
+  "user.pause",
+  "user.approvalDecision",
+  "user.humanInputResponse",
+  "turn.queued",
+  "turn.started",
+  "turn.completed",
+  "turn.failed",
+  "turn.cancelled",
+  "turn.superseded",
+  "turn.recovery.requested",
+  "turn.capacity_waiting",
+  "agent.message.delta",
+  "agent.message.completed",
+  "agent.reasoning.delta",
+  "agent.toolCall.created",
+  "agent.toolCall.output",
+  "agent.model.request",
+  "agent.model.usage",
+  "tool.auth_needed",
+  "credential.auth_needed",
+  "agent.updated",
+  "rig.setup.started",
+  "rig.setup.completed",
+  "rig.setup.skipped",
+  "rig.setup.failed",
+  "sandbox.operation.started",
+  "sandbox.operation.completed",
+  "sandbox.operation.failed",
+  "sandbox.command.output.delta",
+  "artifact.created",
+  "goal.set",
+  "goal.updated",
+  "goal.progress",
+  "goal.rewrite.proposed",
+  "goal.rewrite.rejected",
+  "goal.completed",
+  "goal.paused",
+  "goal.resumed",
+  "goal.cleared",
+  "goal.continuation",
+  "system.update.pending",
+  "system.update.delivered",
+  "system.update.superseded",
+  "system.update.cancelled",
+  "system.update.settled",
+  "session.control.paused",
+  "session.control.resumed",
+  "session.control.steer_requested",
+  "workspace.inference.paused",
+  "workspace.inference.resumed",
+  "session.queue.changed",
+  "session.queue.prompt.cancelled",
+  "session.queue.history",
+  "turn.event.rejected_late",
+  "memory.saved",
+  "memory.corrected",
+  // Channel-B desktop pixel-plane signals (mirror of contracts SessionEventType;
+  // the contract-parity test asserts sorted equality).
+  "stream.url.rotated",
+  "stream.opened",
+  "stream.closed",
+  "stream.revoked",
+  // Channel-B recording signals (P4.3 — "agent films itself proving the fix").
+  "recording.started",
+  "recording.available",
+  "recording.failed",
+  // Channel-A structured-service notifications (P4.4; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "fs.changed",
+  "git.changed",
+  "terminal.pty.started",
+  "terminal.pty.output.delta",
+  "terminal.pty.exited",
+  "session.title_set",
+  "session.visibility.changed",
+  "session.mcp.approval_policy.updated",
+  "session.tool_policy.updated",
+  // Multi-account Codex (P1): the session's inference account changed.
+  "codex.account.switched",
+  // credential allocator metadata-only per-turn credential selection audit.
+  "codex.credential.selected",
+  // Bounded, identity-free deterministic shadow/replay decision.
+  "codex.fleet.decision",
+  // credential allocator durable zero-capacity wait lifecycle. These are system/runtime
+  // events, never synthetic user messages.
+  "codex.capacity.waiting",
+  "codex.capacity.resumed",
+  "codex.capacity.superseded",
+  // Sandbox durability observability (mirror of contracts SessionEventType):
+  // box lifecycle + manifest-env drift, attributable from the DB alone.
+  "sandbox.box.created",
+  "sandbox.box.lost",
+  "sandbox.box.terminated",
+  "sandbox.box.snapshot",
+  "sandbox.env.drift",
+  // Active-sandbox pointer reconcile (issue #341; announce-only; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "session.route.reconciled",
+  // Workbench v2 turn-end workspace capture (announce-only; mirror of contracts
+  // SessionEventType — the contract-parity test asserts sorted equality).
+  "workspace.revision.captured",
+  "workspace.revision.degraded",
+  // Connected Machine op-outcome observability (announce-only, quiet; mirror of
+  // contracts SessionEventType — the contract-parity test asserts sorted equality).
+  "machine.op.failed",
+  "machine.op.recovered",
+  // Connected Machine link-plane observability (announce-only, quiet; mirror of
+  // contracts SessionEventType — the contract-parity test asserts sorted equality).
+  "machine.link.lost",
+  "machine.link.restored",
+  "machine.runner.restarted"
+];
+var KNOWN_PERMISSIONS = [
+  "account:read",
+  "account:admin",
+  "members:manage",
+  "workspace:create",
+  "billing:read",
+  "billing:manage",
+  "workspace:read",
+  "workspace:admin",
+  "sessions:create",
+  "sessions:read",
+  "sessions:control",
+  // sandbox workspace (mirror of @opengeni/contracts Permission). stream:view is
+  // strictly broader than sessions:read (un-redacted pixels); stream:control is
+  // the never-granted-v1 raw-input plane; stream:acknowledge is the secret-leak
+  // consent gate.
+  "stream:view",
+  "stream:control",
+  "stream:acknowledge",
+  "files:upload",
+  "files:read",
+  "files:write",
+  "terminal:attach",
+  "documents:manage",
+  "documents:search",
+  "scheduled_tasks:manage",
+  "scheduled_tasks:run",
+  "github:manage",
+  "github:use",
+  "api_keys:manage",
+  "connections:read",
+  "connections:write",
+  "environments:manage",
+  "environments:use",
+  "variable-sets:list",
+  "variable-sets:read",
+  "variable-sets:write",
+  "variable-sets:manage",
+  "variable-sets:use",
+  "secrets:list",
+  "secrets:read",
+  "secrets:write",
+  "mcp_servers:attach",
+  "codemode:call",
+  "goals:manage",
+  "enrollments:read",
+  "enrollments:manage",
+  "rigs:use",
+  "rigs:manage",
+  "artifacts:read",
+  "artifacts:publish"
+];
+var OPENGENI_API_CONTRACT_REVISION = "2026-08-social-provider-tools-v1";
+var OPENGENI_API_CONTRACT_HEADER = "x-opengeni-api-contract";
+var OPENGENI_CORRELATION_HEADER = "x-opengeni-correlation-id";
+var RETAINED_OUTPUT_DEFAULT_PAGE_BYTES = 256 * 1024;
+var RETAINED_OUTPUT_MAX_PAGE_BYTES = 1024 * 1024;
+var COMPUTER_SCREENSHOT_MAX_BYTES = 32 * 1024 * 1024;
+var GENERATED_IMAGE_MAX_BYTES = 64 * 1024 * 1024;
+var GENERATED_VIDEO_MAX_BYTES = 512 * 1024 * 1024;
+var KNOWN_USAGE_EVENT_TYPES = [
+  "agent_run.created",
+  "agent_run.completed",
+  "model.tokens",
+  "model.cost",
+  "file.uploaded",
+  "file.deleted",
+  "document.indexed",
+  "scheduled_task.fired",
+  "knowledge_source_sync.fired",
+  "knowledge_source_sync.completed",
+  "knowledge_source_sync.items",
+  "knowledge_source_sync.bytes",
+  "api_key.request",
+  // sandbox warm-time metering (P2.1) — mirrors contracts UsageEventType.
+  "sandbox.warm_seconds",
+  "sandbox.warm_cost"
+];
+
+export {
+  DEFAULT_FILE_RESOURCE_MOUNT_ROOT,
+  SESSION_EVENT_TYPES,
+  KNOWN_PERMISSIONS,
+  OPENGENI_API_CONTRACT_REVISION,
+  OPENGENI_API_CONTRACT_HEADER,
+  OPENGENI_CORRELATION_HEADER,
+  RETAINED_OUTPUT_DEFAULT_PAGE_BYTES,
+  RETAINED_OUTPUT_MAX_PAGE_BYTES,
+  COMPUTER_SCREENSHOT_MAX_BYTES,
+  GENERATED_VIDEO_MAX_BYTES,
+  KNOWN_USAGE_EVENT_TYPES
+};
+//# sourceMappingURL=chunk-HJ3HHUT5.js.map