@opengeni/sdk 0.5.0 → 0.6.3

package/dist/index.js

@@ -237,6 +237,92 @@ var OpenGeniClient = class {
       ...options.limit !== void 0 ? { limit: String(options.limit) } : {}
     });
   }
+  // --- Bring-your-own-compute: Machines dashboard + metrics (M10) ------------
+  /**
+   * List the workspace's machines (the Machines dashboard). Each enrolled
+   * selfhosted machine carries its derived state + latest metrics +
+   * sharedSessionCount. Pass `sessionId` for an in-session view, which adds the
+   * session's synthetic Modal group box + the active-sandbox pointer.
+   */
+  async listMachines(workspaceId, options = {}) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/machines`, void 0, {
+      ...options.sessionId !== void 0 ? { sessionId: options.sessionId } : {}
+    });
+  }
+  /**
+   * Read the downsampled (~1/min) metrics series for ONE machine over a time
+   * window (default 1h). The samples are oldest-first (a left-to-right chart).
+   */
+  async machineMetricsSeries(workspaceId, enrollmentId, options = {}) {
+    const response = await this.requestJson(
+      "GET",
+      `/v1/workspaces/${workspaceId}/machines/${enrollmentId}/metrics/series`,
+      void 0,
+      { ...options.window !== void 0 ? { window: options.window } : {} }
+    );
+    return response.samples;
+  }
+  // --- Self-hosted enrollment UX (design 11) --------------------------------
+  /**
+   * Resolve a pending device-enrollment flow by its user_code for the click-Grant
+   * approve page (EnrollmentConsent). NO workspace in the path — the server
+   * resolves the workspace from the (globally-unique-among-pending) code, then
+   * authorizes the caller against it (enrollments:read). Rejects (404) when the
+   * code is unknown/expired OR the caller lacks the grant — the two are
+   * indistinguishable by design (no cross-workspace disclosure). Does not consume
+   * the request.
+   */
+  async lookupDeviceEnrollment(userCode) {
+    return await this.requestJson("POST", "/v1/enrollments/device/lookup", { userCode });
+  }
+  /**
+   * Approve a pending device-enrollment flow (the LOUD consent step). `allowScreenControl`
+   * is the authoritative screen-control consent (whole-machine is mandatory/implicit).
+   * Lands an enrollment + a selfhosted sandbox and unblocks the agent's poll.
+   */
+  async approveDeviceEnrollment(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/enrollments/device/approve`,
+      { userCode: request.userCode, allowScreenControl: request.allowScreenControl ?? false }
+    );
+  }
+  /** Deny a pending device-enrollment flow (the explicit "no" at the approve page). */
+  async denyDeviceEnrollment(workspaceId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/enrollments/device/deny`,
+      { userCode: request.userCode }
+    );
+  }
+  /**
+   * Mint a short-TTL headless enroll token (the `oget_` token) for the fleet /
+   * non-interactive enroll path. The returned `token` is SECRET — surface it once
+   * with a copy-now warning; it cannot be re-read. `allowScreenControl` bakes the
+   * screen-control consent into the token.
+   */
+  async mintEnrollToken(workspaceId, request = {}) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/enrollments/token`,
+      { allowScreenControl: request.allowScreenControl ?? false }
+    );
+  }
+  /**
+   * Swap a session's active sandbox (the user-authenticated equivalent of the
+   * M7 `sandbox_swap` MCP tool). `target` is a `MachineView.sandboxId` from
+   * `listMachines`, or "session"/"default" to swap back to the session's own
+   * group box. Validation (ownership/liveness/epoch fence) is server-side; the
+   * result echoes the resulting pointer (`swapped: false` + `reason` on a
+   * rejected target or a lost epoch fence).
+   */
+  async swapActiveSandbox(workspaceId, sessionId, request) {
+    return await this.requestJson(
+      "POST",
+      `/v1/workspaces/${workspaceId}/sessions/${sessionId}/active-sandbox`,
+      request
+    );
+  }
   // --- Scheduled tasks -------------------------------------------------------
   async listScheduledTasks(workspaceId, options = {}) {
     return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/scheduled-tasks`, void 0, {
@@ -906,6 +992,59 @@ var OpenGeniClient = class {
     const params = new URLSearchParams(query).toString();
     return `${this.baseUrl}${path}${params ? `?${params}` : ""}`;
   }
+  // --- Codex (ChatGPT) subscription (workspace-scoped) --------------------------------------------
+  /** Connection state + the codex models the workspace may select (empty until connected). */
+  async codexStatus(workspaceId) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/codex/status`);
+  }
+  /** Begin device-code login: show `userCode` at `verificationUri`, then poll with `state`. */
+  async codexConnectStart(workspaceId) {
+    return await this.requestJson("POST", `/v1/workspaces/${workspaceId}/codex/connect/start`);
+  }
+  /** Poll device-code authorization with the `state` from {@link codexConnectStart}. */
+  async codexConnectPoll(workspaceId, state) {
+    return await this.requestJson("POST", `/v1/workspaces/${workspaceId}/codex/connect/poll`, { state });
+  }
+  /** Remaining usage / limits for the connected (ACTIVE) subscription. Back-compat. */
+  async codexUsage(workspaceId) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/codex/usage`);
+  }
+  /** Live per-account usage read (refreshes THIS account's bearer; writes the cache). */
+  async codexAccountUsage(workspaceId, accountId) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/codex/accounts/${accountId}/usage`);
+  }
+  /** Batched live refresh across every connected account, keyed by credential id. */
+  async refreshCodexUsage(workspaceId) {
+    return await this.requestJson("POST", `/v1/workspaces/${workspaceId}/codex/usage/refresh`);
+  }
+  /** Disconnect ALL accounts (legacy workspace-wide). Prefer `disconnectCodexAccount`. */
+  async codexDisconnect(workspaceId) {
+    return await this.requestJson("DELETE", `/v1/workspaces/${workspaceId}/codex`);
+  }
+  /** List every connected Codex account + the workspace active pointer + settings. */
+  async listCodexAccounts(workspaceId) {
+    return await this.requestJson("GET", `/v1/workspaces/${workspaceId}/codex/accounts`);
+  }
+  /** Switch the workspace ACTIVE Codex account (the one unpinned sessions use). */
+  async activateCodexAccount(workspaceId, accountId) {
+    return await this.requestJson("POST", `/v1/workspaces/${workspaceId}/codex/accounts/${accountId}/activate`);
+  }
+  /** P3: enable/disable Codex auto-rotation and/or pick the strategy. Returns the effective settings. */
+  async setCodexRotationSettings(workspaceId, patch) {
+    return await this.requestJson("PATCH", `/v1/workspaces/${workspaceId}/codex/settings`, patch);
+  }
+  /** Disconnect ONE Codex account by id (re-picks active when the removed one was active). */
+  async disconnectCodexAccount(workspaceId, accountId) {
+    return await this.requestJson("DELETE", `/v1/workspaces/${workspaceId}/codex/accounts/${accountId}`);
+  }
+  /** Rename a Codex account (label only in P1). */
+  async renameCodexAccount(workspaceId, accountId, label) {
+    return await this.requestJson("PATCH", `/v1/workspaces/${workspaceId}/codex/accounts/${accountId}`, { label });
+  }
+  /** Pin (or unpin via "auto") a session's Codex account. Applies on the next turn. */
+  async pinSessionCodexAccount(workspaceId, sessionId, target) {
+    return await this.requestJson("POST", `/v1/workspaces/${workspaceId}/sessions/${sessionId}/codex-account`, { target });
+  }
   async requestJson(method, path, body, query = {}) {
     const response = await this.fetchImpl(this.url(path, query), {
       method,
@@ -1182,7 +1321,9 @@ var SESSION_EVENT_TYPES = [
   "terminal.pty.started",
   "terminal.pty.output.delta",
   "terminal.pty.exited",
-  "session.title_set"
+  "session.title_set",
+  // Multi-account Codex (P1): the session's inference account changed.
+  "codex.account.switched"
 ];
 var KNOWN_PERMISSIONS = [
   "account:read",
@@ -1216,7 +1357,9 @@ var KNOWN_PERMISSIONS = [
   "api_keys:manage",
   "environments:manage",
   "environments:use",
-  "goals:manage"
+  "goals:manage",
+  "enrollments:read",
+  "enrollments:manage"
 ];
 var KNOWN_USAGE_EVENT_TYPES = [
   "agent_run.created",